@humain/humain-code-contracts 0.3.2

package/dist/trace-artifact.js

@@ -0,0 +1,168 @@
+import { Type } from "typebox";
+import { assertDhPlainData, DhContractError, dhCanonicalText } from "./trace-canonical.js";
+import { DH_HTTP_SCHEMA_IDS, dhStrictDtoParser } from "./trace-http.js";
+import { DH_PAYLOAD_SCHEMA_IDS } from "./trace-payload.js";
+export const DH_ARTIFACT_SCHEMA_IDS = Object.freeze({
+    capabilityManifest: "dh.capability-manifest/1",
+    contractArtifact: "dh.contract-artifact/1",
+});
+/** Literal implemented IDs only; lazy to preserve /trace entry-order neutrality. */
+export function getDhImplementedSchemaIds() {
+    return Object.freeze([
+        "dh.event/1",
+        "dh.artifact/1",
+        "dh.ack/1",
+        "dh.batch/1-proposal",
+        "dh.canonical-jcs/1",
+        "dh.export-download/2",
+        "dh.bundle-frame/1",
+        "dh.bundle-seal/1",
+        ...Object.values(DH_HTTP_SCHEMA_IDS),
+        ...Object.values(DH_PAYLOAD_SCHEMA_IDS),
+        ...Object.values(DH_ARTIFACT_SCHEMA_IDS),
+    ].sort());
+}
+const strict = (properties) => Type.Object(properties, { additionalProperties: false });
+const digest = Type.String({ pattern: "^[a-f0-9]{64}$" });
+const ref = Type.String({ minLength: 1, maxLength: 128, pattern: "^[A-Za-z0-9_.-]+$" });
+const schemaIds = Type.Array(Type.String({ minLength: 1, maxLength: 128 }), {
+    minItems: 1,
+    maxItems: 128,
+    uniqueItems: true,
+});
+export const DH_CAPABILITY_ACTIONS = [
+    "backgroundStatus",
+    "cancelSelected",
+    "cancelWholeRun",
+    "continueLive",
+    "retryFresh",
+];
+function actionSupportSchema() {
+    return strict({
+        status: Type.Enum(["supported", "unsupported", "unknown"]),
+        channel: Type.Enum(["unix-socket", "inherited-fd3", "in-process", "native-executor", "none"]),
+        qualificationSha256: Type.Optional(digest),
+        reasonCode: Type.Optional(ref),
+    });
+}
+function capabilitySchema() {
+    return strict({
+        schema: Type.Literal(DH_ARTIFACT_SCHEMA_IDS.capabilityManifest),
+        packageName: Type.Literal("@humain/humain-code-contracts"),
+        packageVersion: Type.String({ minLength: 1, maxLength: 64 }),
+        contractVersion: Type.Literal(1),
+        artifactSha256: digest,
+        canonicalProfile: Type.Literal("dh.canonical-jcs/1"),
+        schemaIds,
+        conformanceVectorSha256: digest,
+        runtimes: Type.Array(strict({
+            runtime: Type.Enum(["cli-node", "cli-bun", "flow", "forge-native"]),
+            buildSha256: digest,
+            mode: ref,
+            platform: Type.Enum(["darwin", "linux", "win32"]),
+            actions: strict({
+                backgroundStatus: actionSupportSchema(),
+                cancelSelected: actionSupportSchema(),
+                cancelWholeRun: actionSupportSchema(),
+                continueLive: actionSupportSchema(),
+                retryFresh: actionSupportSchema(),
+            }),
+        }), { maxItems: 128 }),
+    });
+}
+function assertRegistry(ids) {
+    if (dhCanonicalText([...ids].sort()) !== dhCanonicalText(getDhImplementedSchemaIds()))
+        throw new DhContractError("contract_incompatible");
+}
+export const parseDhCapabilityManifest = dhStrictDtoParser("capability manifest", capabilitySchema, (manifest) => {
+    assertRegistry(manifest.schemaIds);
+    const targets = new Set();
+    for (const runtime of manifest.runtimes) {
+        const key = dhCanonicalText([runtime.runtime, runtime.buildSha256, runtime.mode, runtime.platform]);
+        if (targets.has(key))
+            throw new DhContractError("schema_invalid");
+        targets.add(key);
+        for (const support of Object.values(runtime.actions)) {
+            if (support.status === "supported") {
+                if (support.channel === "none" || support.qualificationSha256 === undefined)
+                    throw new DhContractError("schema_invalid");
+            }
+            else if (support.reasonCode === undefined || support.qualificationSha256 !== undefined)
+                throw new DhContractError("schema_invalid");
+        }
+    }
+});
+export function assertDhCapabilityAction(input, target, action) {
+    const manifest = parseDhCapabilityManifest(input);
+    assertDhPlainData(target);
+    if (!DH_CAPABILITY_ACTIONS.includes(action))
+        throw new DhContractError("capability_unknown");
+    const runtime = manifest.runtimes.find((value) => value.runtime === target.runtime &&
+        value.buildSha256 === target.buildSha256 &&
+        value.mode === target.mode &&
+        value.platform === target.platform);
+    if (!runtime)
+        throw new DhContractError("capability_unknown");
+    const support = runtime.actions[action];
+    if (support.status === "unsupported" ||
+        target.platform === "win32" ||
+        ["agent-exec-workflow", "experimental-transport"].includes(target.mode))
+        throw new DhContractError("capability_unsupported");
+    if (support.status !== "supported")
+        throw new DhContractError("capability_unknown");
+    return support;
+}
+const relativeFile = Type.String({
+    minLength: 1,
+    maxLength: 512,
+    pattern: "^(?!/)(?!.*(?:^|/)\\.\\.?(?:/|$))[A-Za-z0-9._-]+(?:/[A-Za-z0-9._-]+)*$",
+});
+export const parseDhContractArtifact = dhStrictDtoParser("contract artifact", () => strict({
+    schema: Type.Literal(DH_ARTIFACT_SCHEMA_IDS.contractArtifact),
+    packageName: Type.Literal("@humain/humain-code-contracts"),
+    packageVersion: Type.Literal("0.3.2"),
+    contractVersion: Type.Literal(1),
+    tarballFile: relativeFile,
+    sha256: digest,
+    npmIntegrity: Type.String({ minLength: 1, maxLength: 128, pattern: "^sha512-[A-Za-z0-9+/]{85}[AQgw]==$" }),
+    capabilityManifestFile: relativeFile,
+    capabilityManifestSha256: digest,
+    conformanceVectorSha256: digest,
+    schemaIds,
+}), (artifact) => {
+    assertRegistry(artifact.schemaIds);
+    if (artifact.tarballFile.split("/").at(-1) !== `humain-code-contracts-${artifact.sha256}.tgz` ||
+        artifact.capabilityManifestFile.split("/").at(-1) !==
+            `humain-code-contracts-${artifact.sha256}.capabilities.json`)
+        throw new DhContractError("schema_invalid");
+});
+export function assertDhContractArtifact(input, inspection) {
+    const artifact = parseDhContractArtifact(input);
+    assertDhPlainData(inspection);
+    if (inspection.distPresent !== true)
+        throw new DhContractError("artifact_unbuilt");
+    if (inspection.tarballSymlink !== false ||
+        inspection.capabilityManifestSymlink !== false ||
+        inspection.sha256 !== artifact.sha256 ||
+        inspection.npmIntegrity !== artifact.npmIntegrity ||
+        inspection.capabilityManifestSha256 !== artifact.capabilityManifestSha256)
+        throw new DhContractError("artifact_integrity");
+    const exports = Object.fromEntries(["index", "orchestration", "rpc", "trace", "testing"].map((name) => [
+        name === "index" ? "." : `./${name}`,
+        { types: `./dist/${name}.d.ts`, import: `./dist/${name}.js` },
+    ]));
+    if (inspection.packageName !== artifact.packageName ||
+        inspection.packageVersion !== artifact.packageVersion ||
+        inspection.contractVersion !== 1 ||
+        inspection.conformanceVectorSha256 !== artifact.conformanceVectorSha256 ||
+        dhCanonicalText(inspection.exports) !== dhCanonicalText(exports))
+        throw new DhContractError("contract_incompatible");
+    assertRegistry(inspection.schemaIds);
+    const manifest = parseDhCapabilityManifest(inspection.capabilityManifest);
+    if (manifest.artifactSha256 !== artifact.sha256 ||
+        manifest.packageVersion !== artifact.packageVersion ||
+        manifest.conformanceVectorSha256 !== artifact.conformanceVectorSha256 ||
+        dhCanonicalText([...manifest.schemaIds].sort()) !== dhCanonicalText([...artifact.schemaIds].sort()))
+        throw new DhContractError("contract_incompatible");
+}
+//# sourceMappingURL=trace-artifact.js.map

package/dist/trace-artifact.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"trace-artifact.js","sourceRoot":"","sources":["../src/trace-artifact.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,SAAS,CAAC;AAC/B,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAC3F,OAAO,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACxE,OAAO,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAE3D,MAAM,CAAC,MAAM,sBAAsB,GAAG,MAAM,CAAC,MAAM,CAAC;IACnD,kBAAkB,EAAE,0BAA0B;IAC9C,gBAAgB,EAAE,wBAAwB;CACjC,CAAC,CAAC;AACZ,oFAAoF;AACpF,MAAM,UAAU,yBAAyB;IACxC,OAAO,MAAM,CAAC,MAAM,CACnB;QACC,YAAY;QACZ,eAAe;QACf,UAAU;QACV,qBAAqB;QACrB,oBAAoB;QACpB,sBAAsB;QACtB,mBAAmB;QACnB,kBAAkB;QAClB,GAAG,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC;QACpC,GAAG,MAAM,CAAC,MAAM,CAAC,qBAAqB,CAAC;QACvC,GAAG,MAAM,CAAC,MAAM,CAAC,sBAAsB,CAAC;KACxC,CAAC,IAAI,EAAE,CACR,CAAC;AACH,CAAC;AACD,MAAM,MAAM,GAAG,CAAoD,UAAa,EAAE,EAAE,CACnF,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAAC,CAAC;AAC1D,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAAC,CAAC;AAC1D,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,OAAO,EAAE,mBAAmB,EAAE,CAAC,CAAC;AACxF,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,EAAE;IAC3E,QAAQ,EAAE,CAAC;IACX,QAAQ,EAAE,GAAG;IACb,WAAW,EAAE,IAAI;CACjB,CAAC,CAAC;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACpC,kBAAkB;IAClB,gBAAgB;IAChB,gBAAgB;IAChB,cAAc;IACd,YAAY;CACH,CAAC;AAEX,SAAS,mBAAmB;IAC3B,OAAO,MAAM,CAAC;QACb,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,aAAa,EAAE,SAAS,CAAU,CAAC;QACnE,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,eAAe,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,CAAU,CAAC;QACtG,mBAAmB,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;QAC1C,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;KAC9B,CAAC,CAAC;AACJ,CAAC;AACD,SAAS,gBAAgB;IACxB,OAAO,MAAM,CAAC;QACb,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,sBAAsB,CAAC,kBAAkB,CAAC;QAC/D,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,+BAA+B,CAAC;QAC1D,cAAc,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;QAC5D,eAAe,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;QAChC,cAAc,EAAE,MAAM;QACtB,gBAAgB,EAAE,IAAI,CAAC,OAAO,CAAC,oBAAoB,CAAC;QACpD,SAAS;QACT,uBAAuB,EAAE,MAAM;QAC/B,QAAQ,EAAE,IAAI,CAAC,KAAK,CACnB,MAAM,CAAC;YACN,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,cAAc,CAAU,CAAC;YAC5E,WAAW,EAAE,MAAM;YACnB,IAAI,EAAE,GAAG;YACT,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAU,CAAC;YAC1D,OAAO,EAAE,MAAM,CAAC;gBACf,gBAAgB,EAAE,mBAAmB,EAAE;gBACvC,cAAc,EAAE,mBAAmB,EAAE;gBACrC,cAAc,EAAE,mBAAmB,EAAE;gBACrC,YAAY,EAAE,mBAAmB,EAAE;gBACnC,UAAU,EAAE,mBAAmB,EAAE;aACjC,CAAC;SACF,CAAC,EACF,EAAE,QAAQ,EAAE,GAAG,EAAE,CACjB;KACD,CAAC,CAAC;AACJ,CAAC;AACD,SAAS,cAAc,CAAC,GAAsB;IAC7C,IAAI,eAAe,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,eAAe,CAAC,yBAAyB,EAAE,CAAC;QACpF,MAAM,IAAI,eAAe,CAAC,uBAAuB,CAAC,CAAC;AACrD,CAAC;AACD,MAAM,CAAC,MAAM,yBAAyB,GAAG,iBAAiB,CAAC,qBAAqB,EAAE,gBAAgB,EAAE,CAAC,QAAQ,EAAE,EAAE;IAChH,cAAc,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IACnC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;QACzC,MAAM,GAAG,GAAG,eAAe,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;QACpG,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,eAAe,CAAC,gBAAgB,CAAC,CAAC;QAClE,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACjB,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YACtD,IAAI,OAAO,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;gBACpC,IAAI,OAAO,CAAC,OAAO,KAAK,MAAM,IAAI,OAAO,CAAC,mBAAmB,KAAK,SAAS;oBAC1E,MAAM,IAAI,eAAe,CAAC,gBAAgB,CAAC,CAAC;YAC9C,CAAC;iBAAM,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS,IAAI,OAAO,CAAC,mBAAmB,KAAK,SAAS;gBACvF,MAAM,IAAI,eAAe,CAAC,gBAAgB,CAAC,CAAC;QAC9C,CAAC;IACF,CAAC;AACF,CAAC,CAAC,CAAC;AAMH,MAAM,UAAU,wBAAwB,CACvC,KAAc,EACd,MAA0B,EAC1B,MAA0B;IAE1B,MAAM,QAAQ,GAAG,yBAAyB,CAAC,KAAK,CAAC,CAAC;IAClD,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAC1B,IAAI,CAAE,qBAA2C,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,eAAe,CAAC,oBAAoB,CAAC,CAAC;IACpH,MAAM,OAAO,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,CACrC,CAAC,KAAK,EAAE,EAAE,CACT,KAAK,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO;QAChC,KAAK,CAAC,WAAW,KAAK,MAAM,CAAC,WAAW;QACxC,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI;QAC1B,KAAK,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ,CACnC,CAAC;IACF,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,eAAe,CAAC,oBAAoB,CAAC,CAAC;IAC9D,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACxC,IACC,OAAO,CAAC,MAAM,KAAK,aAAa;QAChC,MAAM,CAAC,QAAQ,KAAK,OAAO;QAC3B,CAAC,qBAAqB,EAAE,wBAAwB,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC;QAEvE,MAAM,IAAI,eAAe,CAAC,wBAAwB,CAAC,CAAC;IACrD,IAAI,OAAO,CAAC,MAAM,KAAK,WAAW;QAAE,MAAM,IAAI,eAAe,CAAC,oBAAoB,CAAC,CAAC;IACpF,OAAO,OAAO,CAAC;AAChB,CAAC;AACD,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC;IAChC,SAAS,EAAE,CAAC;IACZ,SAAS,EAAE,GAAG;IACd,OAAO,EAAE,wEAAwE;CACjF,CAAC,CAAC;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,iBAAiB,CACvD,mBAAmB,EACnB,GAAG,EAAE,CACJ,MAAM,CAAC;IACN,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,sBAAsB,CAAC,gBAAgB,CAAC;IAC7D,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,+BAA+B,CAAC;IAC1D,cAAc,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;IACrC,eAAe,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IAChC,WAAW,EAAE,YAAY;IACzB,MAAM,EAAE,MAAM;IACd,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,OAAO,EAAE,oCAAoC,EAAE,CAAC;IAC1G,sBAAsB,EAAE,YAAY;IACpC,wBAAwB,EAAE,MAAM;IAChC,uBAAuB,EAAE,MAAM;IAC/B,SAAS;CACT,CAAC,EACH,CAAC,QAAQ,EAAE,EAAE;IACZ,cAAc,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IACnC,IACC,QAAQ,CAAC,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,yBAAyB,QAAQ,CAAC,MAAM,MAAM;QACzF,QAAQ,CAAC,sBAAsB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YAChD,yBAAyB,QAAQ,CAAC,MAAM,oBAAoB;QAE7D,MAAM,IAAI,eAAe,CAAC,gBAAgB,CAAC,CAAC;AAC9C,CAAC,CACD,CAAC;AAkBF,MAAM,UAAU,wBAAwB,CAAC,KAAc,EAAE,UAAwC;IAChG,MAAM,QAAQ,GAAG,uBAAuB,CAAC,KAAK,CAAC,CAAC;IAChD,iBAAiB,CAAC,UAAU,CAAC,CAAC;IAC9B,IAAI,UAAU,CAAC,WAAW,KAAK,IAAI;QAAE,MAAM,IAAI,eAAe,CAAC,kBAAkB,CAAC,CAAC;IACnF,IACC,UAAU,CAAC,cAAc,KAAK,KAAK;QACnC,UAAU,CAAC,yBAAyB,KAAK,KAAK;QAC9C,UAAU,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM;QACrC,UAAU,CAAC,YAAY,KAAK,QAAQ,CAAC,YAAY;QACjD,UAAU,CAAC,wBAAwB,KAAK,QAAQ,CAAC,wBAAwB;QAEzE,MAAM,IAAI,eAAe,CAAC,oBAAoB,CAAC,CAAC;IACjD,MAAM,OAAO,GAAG,MAAM,CAAC,WAAW,CACjC,CAAC,OAAO,EAAE,eAAe,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QACnE,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE;QACpC,EAAE,KAAK,EAAE,UAAU,IAAI,OAAO,EAAE,MAAM,EAAE,UAAU,IAAI,KAAK,EAAE;KAC7D,CAAC,CACF,CAAC;IACF,IACC,UAAU,CAAC,WAAW,KAAK,QAAQ,CAAC,WAAW;QAC/C,UAAU,CAAC,cAAc,KAAK,QAAQ,CAAC,cAAc;QACrD,UAAU,CAAC,eAAe,KAAK,CAAC;QAChC,UAAU,CAAC,uBAAuB,KAAK,QAAQ,CAAC,uBAAuB;QACvE,eAAe,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,eAAe,CAAC,OAAO,CAAC;QAEhE,MAAM,IAAI,eAAe,CAAC,uBAAuB,CAAC,CAAC;IACpD,cAAc,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;IACrC,MAAM,QAAQ,GAAG,yBAAyB,CAAC,UAAU,CAAC,kBAAkB,CAAC,CAAC;IAC1E,IACC,QAAQ,CAAC,cAAc,KAAK,QAAQ,CAAC,MAAM;QAC3C,QAAQ,CAAC,cAAc,KAAK,QAAQ,CAAC,cAAc;QACnD,QAAQ,CAAC,uBAAuB,KAAK,QAAQ,CAAC,uBAAuB;QACrE,eAAe,CAAC,CAAC,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,eAAe,CAAC,CAAC,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC;QAEnG,MAAM,IAAI,eAAe,CAAC,uBAAuB,CAAC,CAAC;AACrD,CAAC","sourcesContent":["import { Type } from \"typebox\";\nimport { assertDhPlainData, DhContractError, dhCanonicalText } from \"./trace-canonical.ts\";\nimport { DH_HTTP_SCHEMA_IDS, dhStrictDtoParser } from \"./trace-http.ts\";\nimport { DH_PAYLOAD_SCHEMA_IDS } from \"./trace-payload.ts\";\n\nexport const DH_ARTIFACT_SCHEMA_IDS = Object.freeze({\n\tcapabilityManifest: \"dh.capability-manifest/1\",\n\tcontractArtifact: \"dh.contract-artifact/1\",\n} as const);\n/** Literal implemented IDs only; lazy to preserve /trace entry-order neutrality. */\nexport function getDhImplementedSchemaIds(): readonly string[] {\n\treturn Object.freeze(\n\t\t[\n\t\t\t\"dh.event/1\",\n\t\t\t\"dh.artifact/1\",\n\t\t\t\"dh.ack/1\",\n\t\t\t\"dh.batch/1-proposal\",\n\t\t\t\"dh.canonical-jcs/1\",\n\t\t\t\"dh.export-download/2\",\n\t\t\t\"dh.bundle-frame/1\",\n\t\t\t\"dh.bundle-seal/1\",\n\t\t\t...Object.values(DH_HTTP_SCHEMA_IDS),\n\t\t\t...Object.values(DH_PAYLOAD_SCHEMA_IDS),\n\t\t\t...Object.values(DH_ARTIFACT_SCHEMA_IDS),\n\t\t].sort(),\n\t);\n}\nconst strict = <const T extends Parameters<typeof Type.Object>[0]>(properties: T) =>\n\tType.Object(properties, { additionalProperties: false });\nconst digest = Type.String({ pattern: \"^[a-f0-9]{64}$\" });\nconst ref = Type.String({ minLength: 1, maxLength: 128, pattern: \"^[A-Za-z0-9_.-]+$\" });\nconst schemaIds = Type.Array(Type.String({ minLength: 1, maxLength: 128 }), {\n\tminItems: 1,\n\tmaxItems: 128,\n\tuniqueItems: true,\n});\nexport const DH_CAPABILITY_ACTIONS = [\n\t\"backgroundStatus\",\n\t\"cancelSelected\",\n\t\"cancelWholeRun\",\n\t\"continueLive\",\n\t\"retryFresh\",\n] as const;\nexport type DhCapabilityAction = (typeof DH_CAPABILITY_ACTIONS)[number];\nfunction actionSupportSchema() {\n\treturn strict({\n\t\tstatus: Type.Enum([\"supported\", \"unsupported\", \"unknown\"] as const),\n\t\tchannel: Type.Enum([\"unix-socket\", \"inherited-fd3\", \"in-process\", \"native-executor\", \"none\"] as const),\n\t\tqualificationSha256: Type.Optional(digest),\n\t\treasonCode: Type.Optional(ref),\n\t});\n}\nfunction capabilitySchema() {\n\treturn strict({\n\t\tschema: Type.Literal(DH_ARTIFACT_SCHEMA_IDS.capabilityManifest),\n\t\tpackageName: Type.Literal(\"@humain/humain-code-contracts\"),\n\t\tpackageVersion: Type.String({ minLength: 1, maxLength: 64 }),\n\t\tcontractVersion: Type.Literal(1),\n\t\tartifactSha256: digest,\n\t\tcanonicalProfile: Type.Literal(\"dh.canonical-jcs/1\"),\n\t\tschemaIds,\n\t\tconformanceVectorSha256: digest,\n\t\truntimes: Type.Array(\n\t\t\tstrict({\n\t\t\t\truntime: Type.Enum([\"cli-node\", \"cli-bun\", \"flow\", \"forge-native\"] as const),\n\t\t\t\tbuildSha256: digest,\n\t\t\t\tmode: ref,\n\t\t\t\tplatform: Type.Enum([\"darwin\", \"linux\", \"win32\"] as const),\n\t\t\t\tactions: strict({\n\t\t\t\t\tbackgroundStatus: actionSupportSchema(),\n\t\t\t\t\tcancelSelected: actionSupportSchema(),\n\t\t\t\t\tcancelWholeRun: actionSupportSchema(),\n\t\t\t\t\tcontinueLive: actionSupportSchema(),\n\t\t\t\t\tretryFresh: actionSupportSchema(),\n\t\t\t\t}),\n\t\t\t}),\n\t\t\t{ maxItems: 128 },\n\t\t),\n\t});\n}\nfunction assertRegistry(ids: readonly string[]): void {\n\tif (dhCanonicalText([...ids].sort()) !== dhCanonicalText(getDhImplementedSchemaIds()))\n\t\tthrow new DhContractError(\"contract_incompatible\");\n}\nexport const parseDhCapabilityManifest = dhStrictDtoParser(\"capability manifest\", capabilitySchema, (manifest) => {\n\tassertRegistry(manifest.schemaIds);\n\tconst targets = new Set<string>();\n\tfor (const runtime of manifest.runtimes) {\n\t\tconst key = dhCanonicalText([runtime.runtime, runtime.buildSha256, runtime.mode, runtime.platform]);\n\t\tif (targets.has(key)) throw new DhContractError(\"schema_invalid\");\n\t\ttargets.add(key);\n\t\tfor (const support of Object.values(runtime.actions)) {\n\t\t\tif (support.status === \"supported\") {\n\t\t\t\tif (support.channel === \"none\" || support.qualificationSha256 === undefined)\n\t\t\t\t\tthrow new DhContractError(\"schema_invalid\");\n\t\t\t} else if (support.reasonCode === undefined || support.qualificationSha256 !== undefined)\n\t\t\t\tthrow new DhContractError(\"schema_invalid\");\n\t\t}\n\t}\n});\nexport type DhCapabilityManifest = ReturnType<typeof parseDhCapabilityManifest>;\nexport type DhCapabilityTarget = Pick<\n\tDhCapabilityManifest[\"runtimes\"][number],\n\t\"runtime\" | \"buildSha256\" | \"mode\" | \"platform\"\n>;\nexport function assertDhCapabilityAction(\n\tinput: unknown,\n\ttarget: DhCapabilityTarget,\n\taction: DhCapabilityAction,\n): DhCapabilityManifest[\"runtimes\"][number][\"actions\"][DhCapabilityAction] {\n\tconst manifest = parseDhCapabilityManifest(input);\n\tassertDhPlainData(target);\n\tif (!(DH_CAPABILITY_ACTIONS as readonly string[]).includes(action)) throw new DhContractError(\"capability_unknown\");\n\tconst runtime = manifest.runtimes.find(\n\t\t(value) =>\n\t\t\tvalue.runtime === target.runtime &&\n\t\t\tvalue.buildSha256 === target.buildSha256 &&\n\t\t\tvalue.mode === target.mode &&\n\t\t\tvalue.platform === target.platform,\n\t);\n\tif (!runtime) throw new DhContractError(\"capability_unknown\");\n\tconst support = runtime.actions[action];\n\tif (\n\t\tsupport.status === \"unsupported\" ||\n\t\ttarget.platform === \"win32\" ||\n\t\t[\"agent-exec-workflow\", \"experimental-transport\"].includes(target.mode)\n\t)\n\t\tthrow new DhContractError(\"capability_unsupported\");\n\tif (support.status !== \"supported\") throw new DhContractError(\"capability_unknown\");\n\treturn support;\n}\nconst relativeFile = Type.String({\n\tminLength: 1,\n\tmaxLength: 512,\n\tpattern: \"^(?!/)(?!.*(?:^|/)\\\\.\\\\.?(?:/|$))[A-Za-z0-9._-]+(?:/[A-Za-z0-9._-]+)*$\",\n});\nexport const parseDhContractArtifact = dhStrictDtoParser(\n\t\"contract artifact\",\n\t() =>\n\t\tstrict({\n\t\t\tschema: Type.Literal(DH_ARTIFACT_SCHEMA_IDS.contractArtifact),\n\t\t\tpackageName: Type.Literal(\"@humain/humain-code-contracts\"),\n\t\t\tpackageVersion: Type.Literal(\"0.3.2\"),\n\t\t\tcontractVersion: Type.Literal(1),\n\t\t\ttarballFile: relativeFile,\n\t\t\tsha256: digest,\n\t\t\tnpmIntegrity: Type.String({ minLength: 1, maxLength: 128, pattern: \"^sha512-[A-Za-z0-9+/]{85}[AQgw]==$\" }),\n\t\t\tcapabilityManifestFile: relativeFile,\n\t\t\tcapabilityManifestSha256: digest,\n\t\t\tconformanceVectorSha256: digest,\n\t\t\tschemaIds,\n\t\t}),\n\t(artifact) => {\n\t\tassertRegistry(artifact.schemaIds);\n\t\tif (\n\t\t\tartifact.tarballFile.split(\"/\").at(-1) !== `humain-code-contracts-${artifact.sha256}.tgz` ||\n\t\t\tartifact.capabilityManifestFile.split(\"/\").at(-1) !==\n\t\t\t\t`humain-code-contracts-${artifact.sha256}.capabilities.json`\n\t\t)\n\t\t\tthrow new DhContractError(\"schema_invalid\");\n\t},\n);\nexport type DhContractArtifact = ReturnType<typeof parseDhContractArtifact>;\n/** Actual file/digest/export inspection is owned by the installer, not inferred from a descriptor. */\nexport interface DhContractArtifactInspection {\n\treadonly packageName: string;\n\treadonly packageVersion: string;\n\treadonly contractVersion: number;\n\treadonly exports: Readonly<Record<string, { readonly types: string; readonly import: string }>>;\n\treadonly distPresent: boolean;\n\treadonly sha256: string;\n\treadonly npmIntegrity: string;\n\treadonly capabilityManifest: unknown;\n\treadonly capabilityManifestSha256: string;\n\treadonly conformanceVectorSha256: string;\n\treadonly schemaIds: readonly string[];\n\treadonly tarballSymlink: boolean;\n\treadonly capabilityManifestSymlink: boolean;\n}\nexport function assertDhContractArtifact(input: unknown, inspection: DhContractArtifactInspection): void {\n\tconst artifact = parseDhContractArtifact(input);\n\tassertDhPlainData(inspection);\n\tif (inspection.distPresent !== true) throw new DhContractError(\"artifact_unbuilt\");\n\tif (\n\t\tinspection.tarballSymlink !== false ||\n\t\tinspection.capabilityManifestSymlink !== false ||\n\t\tinspection.sha256 !== artifact.sha256 ||\n\t\tinspection.npmIntegrity !== artifact.npmIntegrity ||\n\t\tinspection.capabilityManifestSha256 !== artifact.capabilityManifestSha256\n\t)\n\t\tthrow new DhContractError(\"artifact_integrity\");\n\tconst exports = Object.fromEntries(\n\t\t[\"index\", \"orchestration\", \"rpc\", \"trace\", \"testing\"].map((name) => [\n\t\t\tname === \"index\" ? \".\" : `./${name}`,\n\t\t\t{ types: `./dist/${name}.d.ts`, import: `./dist/${name}.js` },\n\t\t]),\n\t);\n\tif (\n\t\tinspection.packageName !== artifact.packageName ||\n\t\tinspection.packageVersion !== artifact.packageVersion ||\n\t\tinspection.contractVersion !== 1 ||\n\t\tinspection.conformanceVectorSha256 !== artifact.conformanceVectorSha256 ||\n\t\tdhCanonicalText(inspection.exports) !== dhCanonicalText(exports)\n\t)\n\t\tthrow new DhContractError(\"contract_incompatible\");\n\tassertRegistry(inspection.schemaIds);\n\tconst manifest = parseDhCapabilityManifest(inspection.capabilityManifest);\n\tif (\n\t\tmanifest.artifactSha256 !== artifact.sha256 ||\n\t\tmanifest.packageVersion !== artifact.packageVersion ||\n\t\tmanifest.conformanceVectorSha256 !== artifact.conformanceVectorSha256 ||\n\t\tdhCanonicalText([...manifest.schemaIds].sort()) !== dhCanonicalText([...artifact.schemaIds].sort())\n\t)\n\t\tthrow new DhContractError(\"contract_incompatible\");\n}\n"]}

package/dist/trace-canonical.d.ts

@@ -0,0 +1,23 @@
+import type { DhJsonValue } from "./trace.ts";
+export declare const DH_CANONICAL_PROFILE: "dh.canonical-jcs/1";
+export declare const DH_WIRE_MAX_DEPTH = 24;
+export declare const DH_WIRE_MAX_NODES = 500000;
+export declare const DH_DIGEST_DOMAINS: readonly ["dh.event/1", "dh.artifact/1", "dh.control-request/2", "dh.cursor-binding/2", "dh.cursor-filter/1", "dh.tenant-mapping/1", "dh.export-record/1", "dh.export-shard/2", "dh.export-header/2", "dh.contract-vectors/1", "dh.capability-manifest/1"];
+export type DhDigestDomain = (typeof DH_DIGEST_DOMAINS)[number];
+/** Messages are constants selected by contract code, never rejected content. */
+export declare class DhContractError extends Error {
+    readonly code: string;
+    constructor(code: string, message?: string);
+}
+/** Descriptor gate shared by all wire parsers. Proxies are not wire authorities. */
+export declare function assertDhPlainData(root: unknown): asserts root is DhJsonValue;
+/** Raw parsing retains the key and integer-token information JSON.parse discards. */
+export declare function parseDhRawJson(bytes: Uint8Array, options: {
+    maxBytes: number;
+    rootArrayItemMaxBytes?: Readonly<Record<string, number>>;
+}): DhJsonValue;
+/** RFC 8785: ECMAScript primitive rendering, UTF-16 key order, no Unicode normalization. */
+export declare function dhCanonicalText(value: unknown): string;
+/** Caller hashes these exact bytes using native SHA-256; artifact content hashes remain raw-byte hashes. */
+export declare function dhDigestInput(domain: DhDigestDomain, value: unknown): Uint8Array;
+//# sourceMappingURL=trace-canonical.d.ts.map

package/dist/trace-canonical.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"trace-canonical.d.ts","sourceRoot":"","sources":["../src/trace-canonical.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE9C,eAAO,MAAM,oBAAoB,EAAG,oBAA6B,CAAC;AAClE,eAAO,MAAM,iBAAiB,KAAK,CAAC;AACpC,eAAO,MAAM,iBAAiB,SAAU,CAAC;AACzC,eAAO,MAAM,iBAAiB,YAC7B,YAAY,EACZ,eAAe,EACf,sBAAsB,EACtB,qBAAqB,EACrB,oBAAoB,EACpB,qBAAqB,EACrB,oBAAoB,EACpB,mBAAmB,EACnB,oBAAoB,EACpB,uBAAuB,EACvB,0BAA0B,CACjB,CAAC;AACX,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEhE,gFAAgF;AAChF,qBAAa,eAAgB,SAAQ,KAAK;IACzC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,YAAY,IAAI,EAAE,MAAM,EAAE,OAAO,SAA6B,EAI7D;CACD;AAOD,oFAAoF;AACpF,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,IAAI,WAAW,CAqD5E;AAED,qFAAqF;AACrF,wBAAgB,cAAc,CAC7B,KAAK,EAAE,UAAU,EACjB,OAAO,EAAE;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,qBAAqB,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;CAAE,GACrF,WAAW,CAwGb;AAED,4FAA4F;AAC5F,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAYtD;AAED,4GAA4G;AAC5G,wBAAgB,aAAa,CAAC,MAAM,EAAE,cAAc,EAAE,KAAK,EAAE,OAAO,GAAG,UAAU,CAGhF"}

package/dist/trace-canonical.js

@@ -0,0 +1,240 @@
+export const DH_CANONICAL_PROFILE = "dh.canonical-jcs/1";
+export const DH_WIRE_MAX_DEPTH = 24;
+export const DH_WIRE_MAX_NODES = 500_000;
+export const DH_DIGEST_DOMAINS = [
+    "dh.event/1",
+    "dh.artifact/1",
+    "dh.control-request/2",
+    "dh.cursor-binding/2",
+    "dh.cursor-filter/1",
+    "dh.tenant-mapping/1",
+    "dh.export-record/1",
+    "dh.export-shard/2",
+    "dh.export-header/2",
+    "dh.contract-vectors/1",
+    "dh.capability-manifest/1",
+];
+/** Messages are constants selected by contract code, never rejected content. */
+export class DhContractError extends Error {
+    code;
+    constructor(code, message = "Invalid DH contract data") {
+        super(message);
+        this.name = "DhContractError";
+        this.code = code;
+    }
+}
+const forbidden = new Set(["__proto__", "constructor", "prototype"]);
+function assertUnicode(value) {
+    if (!value.isWellFormed())
+        throw new DhContractError("invalid_unicode", "Invalid Unicode");
+}
+/** Descriptor gate shared by all wire parsers. Proxies are not wire authorities. */
+export function assertDhPlainData(root) {
+    const stack = [{ value: root, depth: 0 }];
+    let nodes = 1;
+    while (stack.length > 0) {
+        const item = stack.pop();
+        if (item === undefined)
+            break;
+        const { value, depth } = item;
+        if (depth > DH_WIRE_MAX_DEPTH)
+            throw new DhContractError("too_large", "Invalid nesting depth");
+        if (value === null || typeof value === "boolean")
+            continue;
+        if (typeof value === "string") {
+            assertUnicode(value);
+            continue;
+        }
+        if (typeof value === "number") {
+            if (!Number.isFinite(value))
+                throw new DhContractError("nonfinite_number", "Invalid non-finite number");
+            continue;
+        }
+        if (typeof value !== "object")
+            throw new DhContractError("schema_invalid", "Invalid non-JSON type");
+        if (Array.isArray(value)) {
+            if (Object.getPrototypeOf(value) !== Array.prototype)
+                throw new DhContractError("schema_invalid", "Invalid not a plain array");
+            if (value.length > DH_WIRE_MAX_NODES - nodes)
+                throw new DhContractError("too_large", "Invalid too many values");
+            nodes += value.length;
+            if (Reflect.ownKeys(value).length !== value.length + 1)
+                throw new DhContractError("schema_invalid", "Invalid sparse or extended array");
+            for (let index = 0; index < value.length; index++) {
+                const descriptor = Object.getOwnPropertyDescriptor(value, String(index));
+                if (descriptor === undefined || !("value" in descriptor))
+                    throw new DhContractError("schema_invalid", "Invalid sparse array or accessor property");
+                if (!descriptor.enumerable)
+                    throw new DhContractError("schema_invalid", "Invalid non-enumerable array index");
+                stack.push({ value: descriptor.value, depth: depth + 1 });
+            }
+            continue;
+        }
+        const proto = Object.getPrototypeOf(value);
+        if (proto !== Object.prototype && proto !== null)
+            throw new DhContractError("schema_invalid", "Invalid not a plain object");
+        const keys = Reflect.ownKeys(value);
+        if (keys.length > DH_WIRE_MAX_NODES - nodes)
+            throw new DhContractError("too_large", "Invalid too many values");
+        nodes += keys.length;
+        for (const key of keys) {
+            if (typeof key !== "string")
+                throw new DhContractError("schema_invalid", "Invalid symbol key");
+            assertUnicode(key);
+            if (forbidden.has(key))
+                throw new DhContractError("schema_invalid", "Invalid forbidden key");
+            const descriptor = Object.getOwnPropertyDescriptor(value, key);
+            if (descriptor === undefined || !("value" in descriptor))
+                throw new DhContractError("schema_invalid", "Invalid accessor property");
+            if (!descriptor.enumerable)
+                throw new DhContractError("schema_invalid", "Invalid non-enumerable property");
+            stack.push({ value: descriptor.value, depth: depth + 1 });
+        }
+    }
+}
+/** Raw parsing retains the key and integer-token information JSON.parse discards. */
+export function parseDhRawJson(bytes, options) {
+    if (!(bytes instanceof Uint8Array) || !Number.isSafeInteger(options?.maxBytes) || options.maxBytes < 0)
+        throw new DhContractError("schema_invalid");
+    if (Object.values(options.rootArrayItemMaxBytes ?? {}).some((limit) => !Number.isSafeInteger(limit) || limit < 0))
+        throw new DhContractError("schema_invalid");
+    if (bytes.byteLength > options.maxBytes)
+        throw new DhContractError("too_large", "Invalid UTF-8 bytes limit");
+    let text;
+    try {
+        text = new TextDecoder("utf-8", { fatal: true, ignoreBOM: true }).decode(bytes);
+    }
+    catch {
+        throw new DhContractError("invalid_unicode", "Invalid UTF-8");
+    }
+    let position = 0;
+    let nodes = 0;
+    const invalid = () => {
+        throw new DhContractError("raw_json_invalid", "Invalid raw JSON");
+    };
+    const whitespace = () => {
+        while (/[\x20\x09\x0a\x0d]/.test(text[position] ?? ""))
+            position++;
+    };
+    const string = () => {
+        const start = position++;
+        while (position < text.length) {
+            const char = text[position++];
+            if (char === '"') {
+                let value;
+                try {
+                    value = JSON.parse(text.slice(start, position));
+                }
+                catch {
+                    return invalid();
+                }
+                assertUnicode(value);
+                return value;
+            }
+            if (char === "\\")
+                position++;
+        }
+        return invalid();
+    };
+    const value = (depth, itemMaxBytes) => {
+        whitespace();
+        if (++nodes > DH_WIRE_MAX_NODES)
+            throw new DhContractError("too_large", "Invalid too many values");
+        if (depth > DH_WIRE_MAX_DEPTH)
+            throw new DhContractError("too_large", "Invalid nesting depth");
+        const char = text[position];
+        if (char === '"')
+            return string();
+        if (char === "{" || char === "[") {
+            position++;
+            let itemStart = position;
+            whitespace();
+            const close = char === "{" ? "}" : "]";
+            const object = Object.create(null);
+            const array = [];
+            const keys = new Set();
+            if (text[position] !== close)
+                while (true) {
+                    whitespace();
+                    if (char === "{") {
+                        if (text[position] !== '"')
+                            return invalid();
+                        const key = string();
+                        if (keys.has(key))
+                            throw new DhContractError("duplicate_json_key", "Invalid duplicate JSON key");
+                        if (forbidden.has(key))
+                            throw new DhContractError("schema_invalid", "Invalid forbidden key");
+                        keys.add(key);
+                        whitespace();
+                        if (text[position++] !== ":")
+                            return invalid();
+                        object[key] = value(depth + 1, depth === 0 ? options.rootArrayItemMaxBytes?.[key] : undefined);
+                    }
+                    else
+                        array.push(value(depth + 1));
+                    whitespace();
+                    if (char === "[" &&
+                        itemMaxBytes !== undefined &&
+                        new TextEncoder().encode(text.slice(itemStart, position)).byteLength > itemMaxBytes)
+                        throw new DhContractError("too_large", "Invalid raw array item UTF-8 bytes limit");
+                    if (text[position] !== ",")
+                        break;
+                    position++;
+                    itemStart = position;
+                }
+            if (text[position++] !== close)
+                return invalid();
+            return char === "{" ? object : array;
+        }
+        for (const [token, result] of [
+            ["null", null],
+            ["true", true],
+            ["false", false],
+        ]) {
+            if (text.startsWith(token, position)) {
+                position += token.length;
+                return result;
+            }
+        }
+        const match = /^-?(?:0|[1-9][0-9]*)(?:\.[0-9]+)?(?:[eE][+-]?[0-9]+)?/.exec(text.slice(position));
+        if (match === null)
+            return invalid();
+        const token = match[0];
+        position += token.length;
+        const number = Number(token);
+        if (!Number.isFinite(number))
+            throw new DhContractError("nonfinite_number", "Invalid non-finite number");
+        // Integer-form tokens must survive binary64 exactly. Decimal/exponent tokens use JCS binary64 semantics.
+        if (!/[.eE]/.test(token) && BigInt(token) !== BigInt(number))
+            throw new DhContractError("integer_precision_loss", "Invalid integer precision loss");
+        return number;
+    };
+    const parsed = value(0);
+    whitespace();
+    if (position !== text.length)
+        return invalid();
+    return parsed;
+}
+/** RFC 8785: ECMAScript primitive rendering, UTF-16 key order, no Unicode normalization. */
+export function dhCanonicalText(value) {
+    assertDhPlainData(value);
+    const render = (item) => {
+        if (item === null || typeof item !== "object")
+            return JSON.stringify(item);
+        if (Array.isArray(item))
+            return `[${item.map(render).join(",")}]`;
+        const object = item;
+        return `{${Object.keys(object)
+            .sort()
+            .map((key) => `${JSON.stringify(key)}:${render(object[key])}`)
+            .join(",")}}`;
+    };
+    return render(value);
+}
+/** Caller hashes these exact bytes using native SHA-256; artifact content hashes remain raw-byte hashes. */
+export function dhDigestInput(domain, value) {
+    if (!DH_DIGEST_DOMAINS.includes(domain))
+        throw new DhContractError("schema_invalid");
+    return new TextEncoder().encode(`${domain}\0${dhCanonicalText(value)}`);
+}
+//# sourceMappingURL=trace-canonical.js.map

package/dist/trace-canonical.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"trace-canonical.js","sourceRoot":"","sources":["../src/trace-canonical.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,oBAAoB,GAAG,oBAA6B,CAAC;AAClE,MAAM,CAAC,MAAM,iBAAiB,GAAG,EAAE,CAAC;AACpC,MAAM,CAAC,MAAM,iBAAiB,GAAG,OAAO,CAAC;AACzC,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAChC,YAAY;IACZ,eAAe;IACf,sBAAsB;IACtB,qBAAqB;IACrB,oBAAoB;IACpB,qBAAqB;IACrB,oBAAoB;IACpB,mBAAmB;IACnB,oBAAoB;IACpB,uBAAuB;IACvB,0BAA0B;CACjB,CAAC;AAGX,gFAAgF;AAChF,MAAM,OAAO,eAAgB,SAAQ,KAAK;IAChC,IAAI,CAAS;IACtB,YAAY,IAAY,EAAE,OAAO,GAAG,0BAA0B;QAC7D,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;QAC9B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IAClB,CAAC;CACD;AAED,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC,CAAC;AACrE,SAAS,aAAa,CAAC,KAAa;IACnC,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE;QAAE,MAAM,IAAI,eAAe,CAAC,iBAAiB,EAAE,iBAAiB,CAAC,CAAC;AAC5F,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,iBAAiB,CAAC,IAAa;IAC9C,MAAM,KAAK,GAAwC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;IAC/E,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,EAAE,CAAC;QACzB,IAAI,IAAI,KAAK,SAAS;YAAE,MAAM;QAC9B,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC;QAC9B,IAAI,KAAK,GAAG,iBAAiB;YAAE,MAAM,IAAI,eAAe,CAAC,WAAW,EAAE,uBAAuB,CAAC,CAAC;QAC/F,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,SAAS;YAAE,SAAS;QAC3D,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC/B,aAAa,CAAC,KAAK,CAAC,CAAC;YACrB,SAAS;QACV,CAAC;QACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC/B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;gBAAE,MAAM,IAAI,eAAe,CAAC,kBAAkB,EAAE,2BAA2B,CAAC,CAAC;YACxG,SAAS;QACV,CAAC;QACD,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,MAAM,IAAI,eAAe,CAAC,gBAAgB,EAAE,uBAAuB,CAAC,CAAC;QACpG,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1B,IAAI,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,SAAS;gBACnD,MAAM,IAAI,eAAe,CAAC,gBAAgB,EAAE,2BAA2B,CAAC,CAAC;YAC1E,IAAI,KAAK,CAAC,MAAM,GAAG,iBAAiB,GAAG,KAAK;gBAC3C,MAAM,IAAI,eAAe,CAAC,WAAW,EAAE,yBAAyB,CAAC,CAAC;YACnE,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC;YACtB,IAAI,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,GAAG,CAAC;gBACrD,MAAM,IAAI,eAAe,CAAC,gBAAgB,EAAE,kCAAkC,CAAC,CAAC;YACjF,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;gBACnD,MAAM,UAAU,GAAG,MAAM,CAAC,wBAAwB,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;gBACzE,IAAI,UAAU,KAAK,SAAS,IAAI,CAAC,CAAC,OAAO,IAAI,UAAU,CAAC;oBACvD,MAAM,IAAI,eAAe,CAAC,gBAAgB,EAAE,2CAA2C,CAAC,CAAC;gBAC1F,IAAI,CAAC,UAAU,CAAC,UAAU;oBACzB,MAAM,IAAI,eAAe,CAAC,gBAAgB,EAAE,oCAAoC,CAAC,CAAC;gBACnF,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,GAAG,CAAC,EAAE,CAAC,CAAC;YAC3D,CAAC;YACD,SAAS;QACV,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;QAC3C,IAAI,KAAK,KAAK,MAAM,CAAC,SAAS,IAAI,KAAK,KAAK,IAAI;YAC/C,MAAM,IAAI,eAAe,CAAC,gBAAgB,EAAE,4BAA4B,CAAC,CAAC;QAC3E,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACpC,IAAI,IAAI,CAAC,MAAM,GAAG,iBAAiB,GAAG,KAAK;YAAE,MAAM,IAAI,eAAe,CAAC,WAAW,EAAE,yBAAyB,CAAC,CAAC;QAC/G,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC;QACrB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACxB,IAAI,OAAO,GAAG,KAAK,QAAQ;gBAAE,MAAM,IAAI,eAAe,CAAC,gBAAgB,EAAE,oBAAoB,CAAC,CAAC;YAC/F,aAAa,CAAC,GAAG,CAAC,CAAC;YACnB,IAAI,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,MAAM,IAAI,eAAe,CAAC,gBAAgB,EAAE,uBAAuB,CAAC,CAAC;YAC7F,MAAM,UAAU,GAAG,MAAM,CAAC,wBAAwB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAC/D,IAAI,UAAU,KAAK,SAAS,IAAI,CAAC,CAAC,OAAO,IAAI,UAAU,CAAC;gBACvD,MAAM,IAAI,eAAe,CAAC,gBAAgB,EAAE,2BAA2B,CAAC,CAAC;YAC1E,IAAI,CAAC,UAAU,CAAC,UAAU;gBAAE,MAAM,IAAI,eAAe,CAAC,gBAAgB,EAAE,iCAAiC,CAAC,CAAC;YAC3G,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,GAAG,CAAC,EAAE,CAAC,CAAC;QAC3D,CAAC;IACF,CAAC;AACF,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,cAAc,CAC7B,KAAiB,EACjB,OAAuF;IAEvF,IAAI,CAAC,CAAC,KAAK,YAAY,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,EAAE,QAAQ,CAAC,IAAI,OAAO,CAAC,QAAQ,GAAG,CAAC;QACrG,MAAM,IAAI,eAAe,CAAC,gBAAgB,CAAC,CAAC;IAC7C,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,qBAAqB,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC;QAChH,MAAM,IAAI,eAAe,CAAC,gBAAgB,CAAC,CAAC;IAC7C,IAAI,KAAK,CAAC,UAAU,GAAG,OAAO,CAAC,QAAQ;QAAE,MAAM,IAAI,eAAe,CAAC,WAAW,EAAE,2BAA2B,CAAC,CAAC;IAC7G,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACJ,IAAI,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACjF,CAAC;IAAC,MAAM,CAAC;QACR,MAAM,IAAI,eAAe,CAAC,iBAAiB,EAAE,eAAe,CAAC,CAAC;IAC/D,CAAC;IACD,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,MAAM,OAAO,GAAG,GAAU,EAAE;QAC3B,MAAM,IAAI,eAAe,CAAC,kBAAkB,EAAE,kBAAkB,CAAC,CAAC;IACnE,CAAC,CAAC;IACF,MAAM,UAAU,GAAG,GAAG,EAAE;QACvB,OAAO,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;YAAE,QAAQ,EAAE,CAAC;IACpE,CAAC,CAAC;IACF,MAAM,MAAM,GAAG,GAAW,EAAE;QAC3B,MAAM,KAAK,GAAG,QAAQ,EAAE,CAAC;QACzB,OAAO,QAAQ,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;YAC/B,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;YAC9B,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;gBAClB,IAAI,KAAa,CAAC;gBAClB,IAAI,CAAC;oBACJ,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAW,CAAC;gBAC3D,CAAC;gBAAC,MAAM,CAAC;oBACR,OAAO,OAAO,EAAE,CAAC;gBAClB,CAAC;gBACD,aAAa,CAAC,KAAK,CAAC,CAAC;gBACrB,OAAO,KAAK,CAAC;YACd,CAAC;YACD,IAAI,IAAI,KAAK,IAAI;gBAAE,QAAQ,EAAE,CAAC;QAC/B,CAAC;QACD,OAAO,OAAO,EAAE,CAAC;IAClB,CAAC,CAAC;IACF,MAAM,KAAK,GAAG,CAAC,KAAa,EAAE,YAAqB,EAAe,EAAE;QACnE,UAAU,EAAE,CAAC;QACb,IAAI,EAAE,KAAK,GAAG,iBAAiB;YAAE,MAAM,IAAI,eAAe,CAAC,WAAW,EAAE,yBAAyB,CAAC,CAAC;QACnG,IAAI,KAAK,GAAG,iBAAiB;YAAE,MAAM,IAAI,eAAe,CAAC,WAAW,EAAE,uBAAuB,CAAC,CAAC;QAC/F,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC5B,IAAI,IAAI,KAAK,GAAG;YAAE,OAAO,MAAM,EAAE,CAAC;QAClC,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YAClC,QAAQ,EAAE,CAAC;YACX,IAAI,SAAS,GAAG,QAAQ,CAAC;YACzB,UAAU,EAAE,CAAC;YACb,MAAM,KAAK,GAAG,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;YACvC,MAAM,MAAM,GAAgC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAChE,MAAM,KAAK,GAAkB,EAAE,CAAC;YAChC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;YAC/B,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,KAAK;gBAC3B,OAAO,IAAI,EAAE,CAAC;oBACb,UAAU,EAAE,CAAC;oBACb,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;wBAClB,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,GAAG;4BAAE,OAAO,OAAO,EAAE,CAAC;wBAC7C,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC;wBACrB,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;4BAAE,MAAM,IAAI,eAAe,CAAC,oBAAoB,EAAE,4BAA4B,CAAC,CAAC;wBACjG,IAAI,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC;4BAAE,MAAM,IAAI,eAAe,CAAC,gBAAgB,EAAE,uBAAuB,CAAC,CAAC;wBAC7F,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;wBACd,UAAU,EAAE,CAAC;wBACb,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC,KAAK,GAAG;4BAAE,OAAO,OAAO,EAAE,CAAC;wBAC/C,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,KAAK,GAAG,CAAC,EAAE,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,qBAAqB,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;oBAChG,CAAC;;wBAAM,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;oBACpC,UAAU,EAAE,CAAC;oBACb,IACC,IAAI,KAAK,GAAG;wBACZ,YAAY,KAAK,SAAS;wBAC1B,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC,UAAU,GAAG,YAAY;wBAEnF,MAAM,IAAI,eAAe,CAAC,WAAW,EAAE,0CAA0C,CAAC,CAAC;oBACpF,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,GAAG;wBAAE,MAAM;oBAClC,QAAQ,EAAE,CAAC;oBACX,SAAS,GAAG,QAAQ,CAAC;gBACtB,CAAC;YACF,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC,KAAK,KAAK;gBAAE,OAAO,OAAO,EAAE,CAAC;YACjD,OAAO,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC;QACtC,CAAC;QACD,KAAK,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI;YAC7B,CAAC,MAAM,EAAE,IAAI,CAAC;YACd,CAAC,MAAM,EAAE,IAAI,CAAC;YACd,CAAC,OAAO,EAAE,KAAK,CAAC;SACP,EAAE,CAAC;YACZ,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,CAAC;gBACtC,QAAQ,IAAI,KAAK,CAAC,MAAM,CAAC;gBACzB,OAAO,MAAM,CAAC;YACf,CAAC;QACF,CAAC;QACD,MAAM,KAAK,GAAG,uDAAuD,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;QACjG,IAAI,KAAK,KAAK,IAAI;YAAE,OAAO,OAAO,EAAE,CAAC;QACrC,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACvB,QAAQ,IAAI,KAAK,CAAC,MAAM,CAAC;QACzB,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAC7B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,eAAe,CAAC,kBAAkB,EAAE,2BAA2B,CAAC,CAAC;QACzG,yGAAyG;QACzG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,MAAM,CAAC,MAAM,CAAC;YAC3D,MAAM,IAAI,eAAe,CAAC,wBAAwB,EAAE,gCAAgC,CAAC,CAAC;QACvF,OAAO,MAAM,CAAC;IACf,CAAC,CAAC;IACF,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACxB,UAAU,EAAE,CAAC;IACb,IAAI,QAAQ,KAAK,IAAI,CAAC,MAAM;QAAE,OAAO,OAAO,EAAE,CAAC;IAC/C,OAAO,MAAM,CAAC;AACf,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,eAAe,CAAC,KAAc;IAC7C,iBAAiB,CAAC,KAAK,CAAC,CAAC;IACzB,MAAM,MAAM,GAAG,CAAC,IAAiB,EAAU,EAAE;QAC5C,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAC3E,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;QAClE,MAAM,MAAM,GAAG,IAA+C,CAAC;QAC/D,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;aAC5B,IAAI,EAAE;aACN,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAE,CAAC,EAAE,CAAC;aAC9D,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IAChB,CAAC,CAAC;IACF,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;AACtB,CAAC;AAED,4GAA4G;AAC5G,MAAM,UAAU,aAAa,CAAC,MAAsB,EAAE,KAAc;IACnE,IAAI,CAAE,iBAAuC,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,eAAe,CAAC,gBAAgB,CAAC,CAAC;IAC5G,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,GAAG,MAAM,KAAK,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;AACzE,CAAC","sourcesContent":["import type { DhJsonValue } from \"./trace.ts\";\n\nexport const DH_CANONICAL_PROFILE = \"dh.canonical-jcs/1\" as const;\nexport const DH_WIRE_MAX_DEPTH = 24;\nexport const DH_WIRE_MAX_NODES = 500_000;\nexport const DH_DIGEST_DOMAINS = [\n\t\"dh.event/1\",\n\t\"dh.artifact/1\",\n\t\"dh.control-request/2\",\n\t\"dh.cursor-binding/2\",\n\t\"dh.cursor-filter/1\",\n\t\"dh.tenant-mapping/1\",\n\t\"dh.export-record/1\",\n\t\"dh.export-shard/2\",\n\t\"dh.export-header/2\",\n\t\"dh.contract-vectors/1\",\n\t\"dh.capability-manifest/1\",\n] as const;\nexport type DhDigestDomain = (typeof DH_DIGEST_DOMAINS)[number];\n\n/** Messages are constants selected by contract code, never rejected content. */\nexport class DhContractError extends Error {\n\treadonly code: string;\n\tconstructor(code: string, message = \"Invalid DH contract data\") {\n\t\tsuper(message);\n\t\tthis.name = \"DhContractError\";\n\t\tthis.code = code;\n\t}\n}\n\nconst forbidden = new Set([\"__proto__\", \"constructor\", \"prototype\"]);\nfunction assertUnicode(value: string): void {\n\tif (!value.isWellFormed()) throw new DhContractError(\"invalid_unicode\", \"Invalid Unicode\");\n}\n\n/** Descriptor gate shared by all wire parsers. Proxies are not wire authorities. */\nexport function assertDhPlainData(root: unknown): asserts root is DhJsonValue {\n\tconst stack: { value: unknown; depth: number }[] = [{ value: root, depth: 0 }];\n\tlet nodes = 1;\n\twhile (stack.length > 0) {\n\t\tconst item = stack.pop();\n\t\tif (item === undefined) break;\n\t\tconst { value, depth } = item;\n\t\tif (depth > DH_WIRE_MAX_DEPTH) throw new DhContractError(\"too_large\", \"Invalid nesting depth\");\n\t\tif (value === null || typeof value === \"boolean\") continue;\n\t\tif (typeof value === \"string\") {\n\t\t\tassertUnicode(value);\n\t\t\tcontinue;\n\t\t}\n\t\tif (typeof value === \"number\") {\n\t\t\tif (!Number.isFinite(value)) throw new DhContractError(\"nonfinite_number\", \"Invalid non-finite number\");\n\t\t\tcontinue;\n\t\t}\n\t\tif (typeof value !== \"object\") throw new DhContractError(\"schema_invalid\", \"Invalid non-JSON type\");\n\t\tif (Array.isArray(value)) {\n\t\t\tif (Object.getPrototypeOf(value) !== Array.prototype)\n\t\t\t\tthrow new DhContractError(\"schema_invalid\", \"Invalid not a plain array\");\n\t\t\tif (value.length > DH_WIRE_MAX_NODES - nodes)\n\t\t\t\tthrow new DhContractError(\"too_large\", \"Invalid too many values\");\n\t\t\tnodes += value.length;\n\t\t\tif (Reflect.ownKeys(value).length !== value.length + 1)\n\t\t\t\tthrow new DhContractError(\"schema_invalid\", \"Invalid sparse or extended array\");\n\t\t\tfor (let index = 0; index < value.length; index++) {\n\t\t\t\tconst descriptor = Object.getOwnPropertyDescriptor(value, String(index));\n\t\t\t\tif (descriptor === undefined || !(\"value\" in descriptor))\n\t\t\t\t\tthrow new DhContractError(\"schema_invalid\", \"Invalid sparse array or accessor property\");\n\t\t\t\tif (!descriptor.enumerable)\n\t\t\t\t\tthrow new DhContractError(\"schema_invalid\", \"Invalid non-enumerable array index\");\n\t\t\t\tstack.push({ value: descriptor.value, depth: depth + 1 });\n\t\t\t}\n\t\t\tcontinue;\n\t\t}\n\t\tconst proto = Object.getPrototypeOf(value);\n\t\tif (proto !== Object.prototype && proto !== null)\n\t\t\tthrow new DhContractError(\"schema_invalid\", \"Invalid not a plain object\");\n\t\tconst keys = Reflect.ownKeys(value);\n\t\tif (keys.length > DH_WIRE_MAX_NODES - nodes) throw new DhContractError(\"too_large\", \"Invalid too many values\");\n\t\tnodes += keys.length;\n\t\tfor (const key of keys) {\n\t\t\tif (typeof key !== \"string\") throw new DhContractError(\"schema_invalid\", \"Invalid symbol key\");\n\t\t\tassertUnicode(key);\n\t\t\tif (forbidden.has(key)) throw new DhContractError(\"schema_invalid\", \"Invalid forbidden key\");\n\t\t\tconst descriptor = Object.getOwnPropertyDescriptor(value, key);\n\t\t\tif (descriptor === undefined || !(\"value\" in descriptor))\n\t\t\t\tthrow new DhContractError(\"schema_invalid\", \"Invalid accessor property\");\n\t\t\tif (!descriptor.enumerable) throw new DhContractError(\"schema_invalid\", \"Invalid non-enumerable property\");\n\t\t\tstack.push({ value: descriptor.value, depth: depth + 1 });\n\t\t}\n\t}\n}\n\n/** Raw parsing retains the key and integer-token information JSON.parse discards. */\nexport function parseDhRawJson(\n\tbytes: Uint8Array,\n\toptions: { maxBytes: number; rootArrayItemMaxBytes?: Readonly<Record<string, number>> },\n): DhJsonValue {\n\tif (!(bytes instanceof Uint8Array) || !Number.isSafeInteger(options?.maxBytes) || options.maxBytes < 0)\n\t\tthrow new DhContractError(\"schema_invalid\");\n\tif (Object.values(options.rootArrayItemMaxBytes ?? {}).some((limit) => !Number.isSafeInteger(limit) || limit < 0))\n\t\tthrow new DhContractError(\"schema_invalid\");\n\tif (bytes.byteLength > options.maxBytes) throw new DhContractError(\"too_large\", \"Invalid UTF-8 bytes limit\");\n\tlet text: string;\n\ttry {\n\t\ttext = new TextDecoder(\"utf-8\", { fatal: true, ignoreBOM: true }).decode(bytes);\n\t} catch {\n\t\tthrow new DhContractError(\"invalid_unicode\", \"Invalid UTF-8\");\n\t}\n\tlet position = 0;\n\tlet nodes = 0;\n\tconst invalid = (): never => {\n\t\tthrow new DhContractError(\"raw_json_invalid\", \"Invalid raw JSON\");\n\t};\n\tconst whitespace = () => {\n\t\twhile (/[\\x20\\x09\\x0a\\x0d]/.test(text[position] ?? \"\")) position++;\n\t};\n\tconst string = (): string => {\n\t\tconst start = position++;\n\t\twhile (position < text.length) {\n\t\t\tconst char = text[position++];\n\t\t\tif (char === '\"') {\n\t\t\t\tlet value: string;\n\t\t\t\ttry {\n\t\t\t\t\tvalue = JSON.parse(text.slice(start, position)) as string;\n\t\t\t\t} catch {\n\t\t\t\t\treturn invalid();\n\t\t\t\t}\n\t\t\t\tassertUnicode(value);\n\t\t\t\treturn value;\n\t\t\t}\n\t\t\tif (char === \"\\\\\") position++;\n\t\t}\n\t\treturn invalid();\n\t};\n\tconst value = (depth: number, itemMaxBytes?: number): DhJsonValue => {\n\t\twhitespace();\n\t\tif (++nodes > DH_WIRE_MAX_NODES) throw new DhContractError(\"too_large\", \"Invalid too many values\");\n\t\tif (depth > DH_WIRE_MAX_DEPTH) throw new DhContractError(\"too_large\", \"Invalid nesting depth\");\n\t\tconst char = text[position];\n\t\tif (char === '\"') return string();\n\t\tif (char === \"{\" || char === \"[\") {\n\t\t\tposition++;\n\t\t\tlet itemStart = position;\n\t\t\twhitespace();\n\t\t\tconst close = char === \"{\" ? \"}\" : \"]\";\n\t\t\tconst object: Record<string, DhJsonValue> = Object.create(null);\n\t\t\tconst array: DhJsonValue[] = [];\n\t\t\tconst keys = new Set<string>();\n\t\t\tif (text[position] !== close)\n\t\t\t\twhile (true) {\n\t\t\t\t\twhitespace();\n\t\t\t\t\tif (char === \"{\") {\n\t\t\t\t\t\tif (text[position] !== '\"') return invalid();\n\t\t\t\t\t\tconst key = string();\n\t\t\t\t\t\tif (keys.has(key)) throw new DhContractError(\"duplicate_json_key\", \"Invalid duplicate JSON key\");\n\t\t\t\t\t\tif (forbidden.has(key)) throw new DhContractError(\"schema_invalid\", \"Invalid forbidden key\");\n\t\t\t\t\t\tkeys.add(key);\n\t\t\t\t\t\twhitespace();\n\t\t\t\t\t\tif (text[position++] !== \":\") return invalid();\n\t\t\t\t\t\tobject[key] = value(depth + 1, depth === 0 ? options.rootArrayItemMaxBytes?.[key] : undefined);\n\t\t\t\t\t} else array.push(value(depth + 1));\n\t\t\t\t\twhitespace();\n\t\t\t\t\tif (\n\t\t\t\t\t\tchar === \"[\" &&\n\t\t\t\t\t\titemMaxBytes !== undefined &&\n\t\t\t\t\t\tnew TextEncoder().encode(text.slice(itemStart, position)).byteLength > itemMaxBytes\n\t\t\t\t\t)\n\t\t\t\t\t\tthrow new DhContractError(\"too_large\", \"Invalid raw array item UTF-8 bytes limit\");\n\t\t\t\t\tif (text[position] !== \",\") break;\n\t\t\t\t\tposition++;\n\t\t\t\t\titemStart = position;\n\t\t\t\t}\n\t\t\tif (text[position++] !== close) return invalid();\n\t\t\treturn char === \"{\" ? object : array;\n\t\t}\n\t\tfor (const [token, result] of [\n\t\t\t[\"null\", null],\n\t\t\t[\"true\", true],\n\t\t\t[\"false\", false],\n\t\t] as const) {\n\t\t\tif (text.startsWith(token, position)) {\n\t\t\t\tposition += token.length;\n\t\t\t\treturn result;\n\t\t\t}\n\t\t}\n\t\tconst match = /^-?(?:0|[1-9][0-9]*)(?:\\.[0-9]+)?(?:[eE][+-]?[0-9]+)?/.exec(text.slice(position));\n\t\tif (match === null) return invalid();\n\t\tconst token = match[0];\n\t\tposition += token.length;\n\t\tconst number = Number(token);\n\t\tif (!Number.isFinite(number)) throw new DhContractError(\"nonfinite_number\", \"Invalid non-finite number\");\n\t\t// Integer-form tokens must survive binary64 exactly. Decimal/exponent tokens use JCS binary64 semantics.\n\t\tif (!/[.eE]/.test(token) && BigInt(token) !== BigInt(number))\n\t\t\tthrow new DhContractError(\"integer_precision_loss\", \"Invalid integer precision loss\");\n\t\treturn number;\n\t};\n\tconst parsed = value(0);\n\twhitespace();\n\tif (position !== text.length) return invalid();\n\treturn parsed;\n}\n\n/** RFC 8785: ECMAScript primitive rendering, UTF-16 key order, no Unicode normalization. */\nexport function dhCanonicalText(value: unknown): string {\n\tassertDhPlainData(value);\n\tconst render = (item: DhJsonValue): string => {\n\t\tif (item === null || typeof item !== \"object\") return JSON.stringify(item);\n\t\tif (Array.isArray(item)) return `[${item.map(render).join(\",\")}]`;\n\t\tconst object = item as { readonly [key: string]: DhJsonValue };\n\t\treturn `{${Object.keys(object)\n\t\t\t.sort()\n\t\t\t.map((key) => `${JSON.stringify(key)}:${render(object[key]!)}`)\n\t\t\t.join(\",\")}}`;\n\t};\n\treturn render(value);\n}\n\n/** Caller hashes these exact bytes using native SHA-256; artifact content hashes remain raw-byte hashes. */\nexport function dhDigestInput(domain: DhDigestDomain, value: unknown): Uint8Array {\n\tif (!(DH_DIGEST_DOMAINS as readonly string[]).includes(domain)) throw new DhContractError(\"schema_invalid\");\n\treturn new TextEncoder().encode(`${domain}\\0${dhCanonicalText(value)}`);\n}\n"]}

package/dist/trace-export.d.ts

@@ -0,0 +1,94 @@
+import { type Static, Type } from "typebox";
+import { type DhExportDownload } from "./trace-api.ts";
+import { type DhExportManifestHeader, type DhExportManifestPage, type DhManifestEntry } from "./trace-http.ts";
+export interface DhExportHashOptions {
+    readonly sha256Hex: (bytes: Uint8Array) => string;
+}
+export interface DhExportManifestValidation {
+    readonly header: DhExportManifestHeader;
+    readonly sha256Hex: (bytes: Uint8Array) => string;
+    nextShard: number;
+    eventCount: number;
+    artifactCount: number;
+    streamCount: number;
+    omittedArtifactCount: number;
+    lastKey: string;
+    root: string;
+    readonly cursors: Set<string>;
+}
+export declare function beginDhExportManifest(headerInput: unknown, options: DhExportHashOptions): DhExportManifestValidation;
+/** Retains one last identity and at most 1,024 navigation cursors, never all record IDs. */
+export declare function acceptDhExportManifestPage(state: DhExportManifestValidation, input: unknown): DhExportManifestPage;
+export declare function finishDhExportManifest(state: DhExportManifestValidation): DhExportManifestHeader;
+export declare const DH_BUNDLE_MAGIC: "DH-BUNDLE/1\n";
+declare function bundleFrameSchema(): Type.TObject<{
+    readonly schema: Type.TLiteral<"dh.bundle-frame/1">;
+    readonly kind: Type.TEnum<["manifest-header", "manifest-page", "event", "artifact-metadata", "artifact-bytes", "end"]>;
+    readonly id: Type.TString;
+    readonly sizeBytes: Type.TInteger;
+    readonly sha256: Type.TString;
+}>;
+export declare const parseDhBundleFrameHeader: (value: unknown) => {
+    readonly schema: "dh.bundle-frame/1";
+    readonly kind: "artifact-bytes" | "artifact-metadata" | "end" | "event" | "manifest-header" | "manifest-page";
+    readonly id: string;
+    readonly sizeBytes: number;
+    readonly sha256: string;
+};
+export type DhBundleFrameHeader = Static<ReturnType<typeof bundleFrameSchema>>;
+export declare const parseDhBundleSeal: (value: unknown) => {
+    readonly schema: "dh.bundle-seal/1";
+    readonly jobId: string;
+    readonly generationId: string;
+    readonly manifestSha256: string;
+    readonly headerSha256: string;
+    readonly eventCount: number;
+    readonly artifactCount: number;
+    readonly streamCount: number;
+};
+export type DhBundleSeal = ReturnType<typeof parseDhBundleSeal>;
+export declare function parseDhBundleHeaderLength(bytes: Uint8Array): number;
+export declare function assertDhExportDownloadBinding(descriptorInput: unknown, headerInput: unknown, options: DhExportHashOptions): Extract<DhExportDownload, {
+    state: "ready";
+}>;
+export interface DhBundleHasher {
+    update(bytes: Uint8Array): unknown;
+    digest(encoding: "hex"): string;
+}
+export interface DhBundleHashOptions extends DhExportHashOptions {
+    readonly createHasher: () => DhBundleHasher;
+}
+export interface DhBundleVerification {
+    readonly header: DhExportManifestHeader;
+    readonly descriptor: Extract<DhExportDownload, {
+        state: "ready";
+    }>;
+    readonly options: DhBundleHashOptions;
+    readonly hasher: DhBundleHasher;
+    readonly manifest: DhExportManifestValidation;
+    readonly members: Iterator<DhManifestEntry>;
+    bytes: number;
+    headerRead: boolean;
+    sealed: boolean;
+    failed: boolean;
+    member: DhManifestEntry | undefined;
+    pendingBytes: Extract<DhManifestEntry, {
+        kind: "artifact";
+    }> | undefined;
+    frame: {
+        header: DhBundleFrameHeader;
+        hasher: DhBundleHasher;
+        bytes: number;
+    } | undefined;
+}
+/** The second page scan is validated against the same sealed root before yielding members. */
+export declare function beginDhBundleVerification(magic: Uint8Array, headerInput: unknown, descriptorInput: unknown, pages: Iterable<unknown>, options: DhBundleHashOptions): DhBundleVerification;
+export declare function beginDhBundleFrame(state: DhBundleVerification, bytes: Uint8Array): DhBundleFrameHeader;
+/** No chunk is retained; artifact bytes can be streamed at any caller-selected chunk size. */
+export declare function acceptDhBundlePayloadChunk(state: DhBundleVerification, bytes: Uint8Array): void;
+/** Non-byte frames require the caller's bounded raw parse; its canonical raw hash must agree with streamed bytes. */
+export declare function finishDhBundleFrame(state: DhBundleVerification, recordInput?: unknown): void;
+/** Publication is permitted only after this succeeds; the library performs no filesystem I/O. */
+export declare function finishDhBundleVerification(state: DhBundleVerification): void;
+export {};
+//# sourceMappingURL=trace-export.d.ts.map

package/dist/trace-export.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"trace-export.d.ts","sourceRoot":"","sources":["../src/trace-export.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,MAAM,EAAE,IAAI,EAAE,MAAM,SAAS,CAAC;AAE5C,OAAO,EAAE,KAAK,gBAAgB,EAAyB,MAAM,gBAAgB,CAAC;AAE9E,OAAO,EACN,KAAK,sBAAsB,EAC3B,KAAK,oBAAoB,EACzB,KAAK,eAAe,EAMpB,MAAM,iBAAiB,CAAC;AAEzB,MAAM,WAAW,mBAAmB;IACnC,QAAQ,CAAC,SAAS,EAAE,CAAC,KAAK,EAAE,UAAU,KAAK,MAAM,CAAC;CAClD;AACD,MAAM,WAAW,0BAA0B;IAC1C,QAAQ,CAAC,MAAM,EAAE,sBAAsB,CAAC;IACxC,QAAQ,CAAC,SAAS,EAAE,CAAC,KAAK,EAAE,UAAU,KAAK,MAAM,CAAC;IAClD,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;CAC9B;AAgBD,wBAAgB,qBAAqB,CAAC,WAAW,EAAE,OAAO,EAAE,OAAO,EAAE,mBAAmB,GAAG,0BAA0B,CAcpH;AACD,4FAA4F;AAC5F,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,0BAA0B,EAAE,KAAK,EAAE,OAAO,GAAG,oBAAoB,CAsDlH;AACD,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,0BAA0B,GAAG,sBAAsB,CAYhG;AAGD,eAAO,MAAM,eAAe,EAAG,eAAwB,CAAC;AAMxD,iBAAS,iBAAiB;;;;;;GAezB;AACD,eAAO,MAAM,wBAAwB;;;;;;CAmBnC,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,MAAM,CAAC,UAAU,CAAC,OAAO,iBAAiB,CAAC,CAAC,CAAC;AAC/E,eAAO,MAAM,iBAAiB;;;;;;;;;CAW7B,CAAC;AACF,MAAM,MAAM,YAAY,GAAG,UAAU,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAChE,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAKnE;AACD,wBAAgB,6BAA6B,CAC5C,eAAe,EAAE,OAAO,EACxB,WAAW,EAAE,OAAO,EACpB,OAAO,EAAE,mBAAmB,GAC1B,OAAO,CAAC,gBAAgB,EAAE;IAAE,KAAK,EAAE,OAAO,CAAA;CAAE,CAAC,CAW/C;AACD,MAAM,WAAW,cAAc;IAC9B,MAAM,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC;IACnC,MAAM,CAAC,QAAQ,EAAE,KAAK,GAAG,MAAM,CAAC;CAChC;AACD,MAAM,WAAW,mBAAoB,SAAQ,mBAAmB;IAC/D,QAAQ,CAAC,YAAY,EAAE,MAAM,cAAc,CAAC;CAC5C;AACD,MAAM,WAAW,oBAAoB;IACpC,QAAQ,CAAC,MAAM,EAAE,sBAAsB,CAAC;IACxC,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,gBAAgB,EAAE;QAAE,KAAK,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IACnE,QAAQ,CAAC,OAAO,EAAE,mBAAmB,CAAC;IACtC,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,QAAQ,CAAC,QAAQ,EAAE,0BAA0B,CAAC;IAC9C,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,eAAe,CAAC,CAAC;IAC5C,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,OAAO,CAAC;IACpB,MAAM,EAAE,OAAO,CAAC;IAChB,MAAM,EAAE,OAAO,CAAC;IAChB,MAAM,EAAE,eAAe,GAAG,SAAS,CAAC;IACpC,YAAY,EAAE,OAAO,CAAC,eAAe,EAAE;QAAE,IAAI,EAAE,UAAU,CAAA;KAAE,CAAC,GAAG,SAAS,CAAC;IACzE,KAAK,EAAE;QAAE,MAAM,EAAE,mBAAmB,CAAC;QAAC,MAAM,EAAE,cAAc,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,SAAS,CAAC;CAC1F;AACD,8FAA8F;AAC9F,wBAAgB,yBAAyB,CACxC,KAAK,EAAE,UAAU,EACjB,WAAW,EAAE,OAAO,EACpB,eAAe,EAAE,OAAO,EACxB,KAAK,EAAE,QAAQ,CAAC,OAAO,CAAC,EACxB,OAAO,EAAE,mBAAmB,GAC1B,oBAAoB,CAoCtB;AAKD,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,oBAAoB,EAAE,KAAK,EAAE,UAAU,GAAG,mBAAmB,CAoDtG;AACD,8FAA8F;AAC9F,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,oBAAoB,EAAE,KAAK,EAAE,UAAU,GAAG,IAAI,CAQ/F;AACD,qHAAqH;AACrH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,oBAAoB,EAAE,WAAW,CAAC,EAAE,OAAO,GAAG,IAAI,CAsF5F;AACD,iGAAiG;AACjG,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,oBAAoB,GAAG,IAAI,CAG5E"}