@hypequery/protocol-conformance 0.9.1 → 0.10.0

package/README.md

@@ -1,40 +1,56 @@
 # @hypequery/protocol-conformance
 
-Cross-language conformance runner and TypeScript reference adapter for the
-Hypequery security protocol. It drives any implementation of the protocol
-against the language-neutral fixtures in `specs/security-protocol/fixtures/`
-and checks the results against the pinned expectations.
+`@hypequery/protocol-conformance` checks TypeScript, Python, or any other implementation of the Hypequery security protocol against the same language-neutral fixtures. It includes a command-line runner and the TypeScript reference adapter.
 
-See [RFC 0012](../../specs/security-protocol/rfc/0012-cross-language-conformance.md)
-for the manifest schema, the adapter wire protocol, and the pass criteria.
+The manifest, adapter wire format, and pass rules are defined in [RFC 0012](../../specs/security-protocol/rfc/0012-cross-language-conformance.md).
 
-## Usage
+## Run the reference adapter
 
-```sh
-# Run the whole suite against the bundled TypeScript reference adapter.
-hypequery-protocol-conformance run -- hypequery-protocol-reference-adapter
+```bash
+hypequery-protocol-conformance run -- \
+  hypequery-protocol-reference-adapter
+```
+
+## Test another language
+
+Everything after `--` is the adapter command. The runner starts it directly, without a shell:
 
-# Run against another implementation (any language). Everything after `--`
-# is the adapter command, spawned without a shell.
-hypequery-protocol-conformance run --fixtures ./fixtures -- python -m my_impl.adapter
+```bash
+hypequery-protocol-conformance run \
+  --fixtures ./specs/security-protocol/fixtures \
+  -- python -m my_implementation.adapter
+```
+
+Useful options include:
 
-# Restrict to families, skip or isolate the fuzz corpus, emit JSON.
-hypequery-protocol-conformance run --families sql-portability-v1 --skip-fuzz \
-  --report json -- node ./adapter.mjs
+```bash
+# Run selected fixture families and emit JSON.
+hypequery-protocol-conformance run \
+  --families sql-portability-v1 \
+  --skip-fuzz \
+  --report json \
+  -- node ./adapter.mjs
 
-# List the enumerated case counts per family.
+# Show case counts by family.
 hypequery-protocol-conformance list
 ```
 
-Exit codes: `0` all cases passed, `1` conformance failures, `2` setup or
-protocol error.
+Exit code `0` means every case passed, `1` means conformance failures, and `2` means the runner or adapter protocol could not be set up correctly.
+
+## Adapter shape
+
+An adapter reads newline-delimited JSON from stdin and writes newline-delimited JSON to stdout. It answers the initial `hello` with supported fixture families, then returns one `result` for every `case`.
+
+The exported `createStdioAdapter` helper handles the loop. Your handler maps `(family, role, case)` to one of:
+
+```ts
+{ ok: true, output? }
+{ ok: false, code }
+{ skipped: true, reason }
+```
+
+The package includes a pinned fixture snapshot, so a pinned package version is also a pinned conformance target. Pass `--fixtures` to test local or newer specifications.
 
-## Writing an adapter
+## License
 
-An adapter reads newline-delimited JSON on stdin and writes it on stdout. It
-answers a `hello` with the families it supports, then one `result` per `case`.
-The `createStdioAdapter` helper implements the loop; a handler maps
-`(family, role, case)` to `{ ok: true, output? }`, `{ ok: false, code }`, or
-`{ skipped: true, reason }`. The bundled fixture snapshot means a pinned
-package version is a pinned conformance target; pass `--fixtures` to test
-against newer or local specs.
+Apache-2.0.

package/dist/adapters/generators.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"generators.d.ts","sourceRoot":"","sources":["../../src/adapters/generators.ts"],"names":[],"mappings":"AAIA,KAAK,IAAI,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAkBpC,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAyB1D;AAID,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,IAAI,GAAG,MAAM,CAMxD;AAMD,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAiCzD;AAID,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CA2BrD;AAgBD,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAuB7D;AAkBD,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAyBpD;AAeD,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAoB1D;AA2BD,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAwDzD;AAkBD,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAmBrD;AAaD,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAgBtD"}
+{"version":3,"file":"generators.d.ts","sourceRoot":"","sources":["../../src/adapters/generators.ts"],"names":[],"mappings":"AAIA,KAAK,IAAI,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAkBpC,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAuC1D;AAID,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,IAAI,GAAG,MAAM,CAMxD;AAMD,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAiCzD;AAID,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CA2BrD;AAgBD,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAuB7D;AAkBD,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAyBpD;AAeD,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAoB1D;AA2BD,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAwDzD;AAkBD,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAmBrD;AAaD,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAgBtD"}

package/dist/adapters/generators.js

@@ -35,6 +35,20 @@ export function materializeTaggedValue(spec) {
             throw new Error(`Unknown non-finite float: ${String(spec.value)}`);
         case 'repeat-string':
             return repeat(spec.utf8, spec.count);
+        case 'unsafe-accessor': {
+            // `$hypequery` served by a computed accessor instead of a data
+            // property. A validator must snapshot without invoking it and reject.
+            const value = {};
+            Object.defineProperty(value, '$hypequery', {
+                enumerable: true,
+                get: () => ({
+                    type: 'uuid',
+                    version: 1,
+                    value: '01890f3e-7b7b-7cc2-98c4-dc0c0c07398f',
+                }),
+            });
+            return value;
+        }
         default:
             throw new Error(`Unknown tagged-value generator: ${String(spec.type)}`);
     }

package/dist/adapters/reference.d.ts

@@ -1,6 +1,15 @@
 import type { FixtureRole, HandlerResult } from '../types.js';
 type Case = Record<string, unknown>;
-export declare const REFERENCE_FAMILIES: readonly ["tagged-values-v1", "identifiers-v1", "expressions-v1", "query-schemas-v1", "query-implementations-v1", "query-events-v1", "query-diagnostics-v1", "deployments-v1", "deployment-bundles-v1", "deployment-releases-v1"];
+/**
+ * RFC 0012 hostile-object suite declaration for the TypeScript reference
+ * implementation. The cases live in @hypequery/protocol's
+ * `src/values/codec.test.ts`; each mechanism listed here is exercised there.
+ */
+export declare const REFERENCE_HOSTILE_OBJECT_SUITE: {
+    readonly count: 7;
+    readonly mechanisms: readonly ["getter", "toJSON", "proxy", "custom-prototype", "symbol-key", "sparse-array", "cycle"];
+};
+export declare const REFERENCE_FAMILIES: readonly ["cache-keys-v1", "tagged-values-v1", "identifiers-v1", "expressions-v1", "query-schemas-v1", "query-implementations-v1", "query-events-v1", "query-diagnostics-v1", "deployments-v1", "deployment-bundles-v1", "deployment-releases-v1"];
 export declare function referenceHandle(family: string, role: FixtureRole, c: Case, section?: string): HandlerResult;
 export {};
 //# sourceMappingURL=reference.d.ts.map

package/dist/adapters/reference.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"reference.d.ts","sourceRoot":"","sources":["../../src/adapters/reference.ts"],"names":[],"mappings":"AA0BA,OAAO,KAAK,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAc9D,KAAK,IAAI,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AA0BpC,eAAO,MAAM,kBAAkB,mOAWrB,CAAC;AAEX,wBAAgB,eAAe,CAC7B,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,WAAW,EACjB,CAAC,EAAE,IAAI,EACP,OAAO,CAAC,EAAE,MAAM,GACf,aAAa,CAkCf"}
+{"version":3,"file":"reference.d.ts","sourceRoot":"","sources":["../../src/adapters/reference.ts"],"names":[],"mappings":"AA4BA,OAAO,KAAK,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAc9D,KAAK,IAAI,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AA0BpC;;;;GAIG;AACH,eAAO,MAAM,8BAA8B;;;CAWjC,CAAC;AAEX,eAAO,MAAM,kBAAkB,oPAYrB,CAAC;AAEX,wBAAgB,eAAe,CAC7B,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,WAAW,EACjB,CAAC,EAAE,IAAI,EACP,OAAO,CAAC,EAAE,MAAM,GACf,aAAa,CAoCf"}

package/dist/adapters/reference.js

@@ -2,7 +2,7 @@
 // root export of @hypequery/protocol and returns a wire result. Every operation
 // goes through the package's supported surface — this is exactly what a second
 // implementation must reproduce.
-import { decodeCanonicalValue, encodeCanonicalValue, hashCanonicalValue, parseProtocolIdentifier, parseProtocolQualifiedIdentifier, prepareProtocolDeploymentBundleManifest, prepareProtocolDeploymentContract, prepareProtocolDeploymentReleaseEnvelope, splitProtocolQualifiedIdentifier, validateCanonicalValue, validateProtocolDeploymentBundleManifest, validateProtocolDeploymentContract, validateProtocolDeploymentReleaseEnvelope, validateProtocolExpression, validateProtocolQueryDiagnostics, validateProtocolQueryEvent, validateProtocolQueryImplementation, validateProtocolSchema, validateProtocolSemanticQuery, validateProtocolSqlExpression, } from '@hypequery/protocol';
+import { decodeCanonicalValue, deriveProtocolCacheKey, deriveProtocolCacheNamespaceToken, encodeCanonicalValue, hashCanonicalValue, parseProtocolIdentifier, parseProtocolQualifiedIdentifier, prepareProtocolDeploymentBundleManifest, prepareProtocolDeploymentContract, prepareProtocolDeploymentReleaseEnvelope, splitProtocolQualifiedIdentifier, validateCanonicalValue, validateProtocolDeploymentBundleManifest, validateProtocolDeploymentContract, validateProtocolDeploymentReleaseEnvelope, validateProtocolExpression, validateProtocolQueryDiagnostics, validateProtocolQueryEvent, validateProtocolQueryImplementation, validateProtocolSchema, validateProtocolSemanticQuery, validateProtocolSqlExpression, } from '@hypequery/protocol';
 import { materializeBundle, materializeDeployment, materializeDiagnostics, materializeEvent, materializeExpression, materializeIdentifier, materializeImplementation, materializeRelease, materializeSchema, materializeTaggedValue, } from './generators.js';
 const STABLE_CODE = /^HQ_[A-Z0-9_]+$/;
 /** Turns a thrown protocol error into a wire rejection; rethrows anything else. */
@@ -25,7 +25,25 @@ const ACCEPT = { ok: true };
 function validationInput(c, materialize) {
     return c.generator ? materialize(c.generator) : c.value;
 }
+/**
+ * RFC 0012 hostile-object suite declaration for the TypeScript reference
+ * implementation. The cases live in @hypequery/protocol's
+ * `src/values/codec.test.ts`; each mechanism listed here is exercised there.
+ */
+export const REFERENCE_HOSTILE_OBJECT_SUITE = {
+    count: 7,
+    mechanisms: [
+        'getter',
+        'toJSON',
+        'proxy',
+        'custom-prototype',
+        'symbol-key',
+        'sparse-array',
+        'cycle',
+    ],
+};
 export const REFERENCE_FAMILIES = [
+    'cache-keys-v1',
     'tagged-values-v1',
     'identifiers-v1',
     'expressions-v1',
@@ -68,10 +86,43 @@ export function referenceHandle(family, role, c, section) {
             return handleBundle(role, c);
         case 'deployment-releases-v1':
             return handleRelease(role, c);
+        case 'cache-keys-v1':
+            return handleCacheKey(role, c);
         default:
             throw new Error(`reference adapter does not support family ${family}`);
     }
 }
+function hexToBytes(hex) {
+    const out = new Uint8Array(hex.length / 2);
+    for (let index = 0; index < out.length; index += 1) {
+        out[index] = Number.parseInt(hex.slice(index * 2, index * 2 + 2), 16);
+    }
+    return out;
+}
+function handleCacheKey(role, c) {
+    const generator = c.generator;
+    const preimage = generator?.type === 'repeat-string'
+        ? (generator.utf8 ?? '').repeat(generator.count ?? 0)
+        : (c.preimageUtf8 ?? '');
+    const namespace = c.namespace;
+    return attempt(() => {
+        const key = deriveProtocolCacheKey({
+            secret: hexToBytes(c.secretHex),
+            namespace,
+            keyVersion: c.keyVersion,
+            preimage,
+        });
+        if (role !== 'success')
+            return { ok: true };
+        return {
+            ok: true,
+            output: {
+                key,
+                namespaceToken: deriveProtocolCacheNamespaceToken(hexToBytes(c.secretHex), namespace.project, namespace.environment),
+            },
+        };
+    });
+}
 function handleTaggedValue(role, c) {
     if (role === 'success') {
         return attempt(() => ({

package/dist/adapters/stdio.d.ts

@@ -1,9 +1,11 @@
-import type { FixtureRole, HandlerResult } from '../types.js';
+import type { FixtureRole, HandlerResult, HostileObjectSuiteDeclaration } from '../types.js';
 export interface StdioAdapterOptions {
     readonly implementation?: string;
     readonly version?: string;
     readonly language?: string;
     readonly families: readonly string[];
+    /** RFC 0012 language-specific hostile-object suite declaration. */
+    readonly hostileObjectSuite?: HostileObjectSuiteDeclaration;
     readonly handle: (family: string, role: FixtureRole, fixtureCase: Record<string, unknown>, section: string | undefined) => HandlerResult | Promise<HandlerResult>;
     /** Streams default to the process stdio; overridable for tests. */
     readonly input?: NodeJS.ReadableStream;

package/dist/adapters/stdio.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"stdio.d.ts","sourceRoot":"","sources":["../../src/adapters/stdio.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAE9D,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,QAAQ,CAAC,MAAM,EAAE,CACf,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,WAAW,EACjB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACpC,OAAO,EAAE,MAAM,GAAG,SAAS,KACxB,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IAC5C,mEAAmE;IACnE,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,cAAc,CAAC;IACvC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,cAAc,CAAC;CACzC;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,MAAM,CAAC,CA6EhF"}
+{"version":3,"file":"stdio.d.ts","sourceRoot":"","sources":["../../src/adapters/stdio.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,WAAW,EAAE,aAAa,EAAE,6BAA6B,EAAE,MAAM,aAAa,CAAC;AAE7F,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,mEAAmE;IACnE,QAAQ,CAAC,kBAAkB,CAAC,EAAE,6BAA6B,CAAC;IAC5D,QAAQ,CAAC,MAAM,EAAE,CACf,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,WAAW,EACjB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACpC,OAAO,EAAE,MAAM,GAAG,SAAS,KACxB,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IAC5C,mEAAmE;IACnE,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,cAAc,CAAC;IACvC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,cAAc,CAAC;CACzC;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,MAAM,CAAC,CAgFhF"}

package/dist/adapters/stdio.js

@@ -51,6 +51,9 @@ export function createStdioAdapter(options) {
                     version: options.version,
                     language: options.language,
                     families,
+                    ...(options.hostileObjectSuite
+                        ? { hostileObjectSuite: options.hostileObjectSuite }
+                        : {}),
                 });
                 return;
             }

package/dist/bin/reference-adapter.js

@@ -2,11 +2,12 @@
 // Reference adapter executable. Wraps @hypequery/protocol behind the RFC 0012
 // stdio protocol so the runner can drive it like any other implementation.
 import { createStdioAdapter } from '../adapters/stdio.js';
-import { REFERENCE_FAMILIES, referenceHandle } from '../adapters/reference.js';
+import { REFERENCE_FAMILIES, REFERENCE_HOSTILE_OBJECT_SUITE, referenceHandle, } from '../adapters/reference.js';
 createStdioAdapter({
     implementation: '@hypequery/protocol',
     language: 'typescript',
     families: [...REFERENCE_FAMILIES],
+    hostileObjectSuite: REFERENCE_HOSTILE_OBJECT_SUITE,
     handle: referenceHandle,
 })
     .then((code) => process.exit(code))

package/dist/compare.js

@@ -121,5 +121,15 @@ function compareSuccessOutput(ec, o) {
             return outcome(ec, 'fail', { expected: 'segments', actual: 'mismatch' });
         }
     }
+    if (ec.family === 'cache-keys-v1') {
+        // Reported as 'mismatch' rather than by value: a run against non-fixture
+        // inputs would otherwise print keys derived from a real secret.
+        if (o.key !== ec.case.key) {
+            return outcome(ec, 'fail', { expected: 'key', actual: 'mismatch' });
+        }
+        if (o.namespaceToken !== ec.case.namespaceToken) {
+            return outcome(ec, 'fail', { expected: 'namespaceToken', actual: 'mismatch' });
+        }
+    }
     return outcome(ec, 'pass');
 }

package/dist/index.d.ts

@@ -6,6 +6,6 @@ export type { JsonLoader } from './manifest.js';
 export { compareCase } from './compare.js';
 export { formatPrettyReport, formatJsonReport } from './report.js';
 export { createStdioAdapter } from './adapters/stdio.js';
-export { referenceHandle, REFERENCE_FAMILIES } from './adapters/reference.js';
+export { referenceHandle, REFERENCE_FAMILIES, REFERENCE_HOSTILE_OBJECT_SUITE, } from './adapters/reference.js';
 export * from './types.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,YAAY,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AACzD,OAAO,EAAE,YAAY,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EACL,iBAAiB,EACjB,oBAAoB,EACpB,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,eAAe,CAAC;AACvB,YAAY,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AACnE,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC9E,cAAc,YAAY,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,YAAY,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AACzD,OAAO,EAAE,YAAY,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EACL,iBAAiB,EACjB,oBAAoB,EACpB,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,eAAe,CAAC;AACvB,YAAY,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AACnE,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,EACL,eAAe,EACf,kBAAkB,EAClB,8BAA8B,GAC/B,MAAM,yBAAyB,CAAC;AACjC,cAAc,YAAY,CAAC"}

package/dist/index.js

@@ -5,5 +5,5 @@ export { enumerateAllCases, enumerateFamilyCases, enumerateFuzzCases, resolveJso
 export { compareCase } from './compare.js';
 export { formatPrettyReport, formatJsonReport } from './report.js';
 export { createStdioAdapter } from './adapters/stdio.js';
-export { referenceHandle, REFERENCE_FAMILIES } from './adapters/reference.js';
+export { referenceHandle, REFERENCE_FAMILIES, REFERENCE_HOSTILE_OBJECT_SUITE, } from './adapters/reference.js';
 export * from './types.js';

package/dist/report.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"report.d.ts","sourceRoot":"","sources":["../src/report.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAE7C,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,UAAU,GAAG,MAAM,CAE5D;AAED,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,UAAU,GAAG,MAAM,CAsB9D"}
+{"version":3,"file":"report.d.ts","sourceRoot":"","sources":["../src/report.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAE7C,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,UAAU,GAAG,MAAM,CAE5D;AAED,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,UAAU,GAAG,MAAM,CA0B9D"}

package/dist/report.js

@@ -19,5 +19,9 @@ export function formatPrettyReport(summary) {
     }
     lines.push(`${summary.passed} passed, ${summary.failed} failed, ${summary.skipped} skipped`
         + (summary.notRun > 0 ? `, ${summary.notRun} not run (family not announced)` : ''));
+    const suite = adapter?.hostileObjectSuite;
+    if (suite) {
+        lines.push(`hostile-object suite: ${suite.count} cases (${suite.mechanisms.join(', ')})`);
+    }
     return lines.join('\n');
 }

package/dist/runner.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runner.d.ts","sourceRoot":"","sources":["../src/runner.ts"],"names":[],"mappings":"AAQA,OAAO,EAML,KAAK,UAAU,EAChB,MAAM,YAAY,CAAC;AAEpB,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3C,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,gFAAgF;IAChF,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;CAC7B;AA6FD,wBAAsB,cAAc,CAAC,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,UAAU,CAAC,CA4FxF"}
+{"version":3,"file":"runner.d.ts","sourceRoot":"","sources":["../src/runner.ts"],"names":[],"mappings":"AAQA,OAAO,EAOL,KAAK,UAAU,EAChB,MAAM,YAAY,CAAC;AAEpB,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3C,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,gFAAgF;IAChF,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;CAC7B;AAyJD,wBAAsB,cAAc,CAAC,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,UAAU,CAAC,CA6GxF"}

package/dist/runner.js

@@ -12,6 +12,56 @@ class AdapterExitError extends Error {
 }
 class AdapterTimeoutError extends Error {
 }
+function parseHostileObjectSuite(value) {
+    if (value === undefined)
+        return undefined;
+    if (typeof value !== 'object' || value === null || Array.isArray(value)) {
+        throw new Error('adapter hostileObjectSuite must be an object');
+    }
+    const suite = value;
+    if (!Number.isSafeInteger(suite.count) || suite.count < 1) {
+        throw new Error('adapter hostileObjectSuite count must be a positive safe integer');
+    }
+    if (!Array.isArray(suite.mechanisms)
+        || suite.mechanisms.length === 0
+        || !suite.mechanisms.every((mechanism) => typeof mechanism === 'string' && mechanism.length > 0)
+        || new Set(suite.mechanisms).size !== suite.mechanisms.length) {
+        throw new Error('adapter hostileObjectSuite mechanisms must be unique non-empty strings');
+    }
+    return {
+        count: suite.count,
+        mechanisms: [...suite.mechanisms],
+    };
+}
+function parseAdapterHello(message, hostModelFamilies) {
+    if (message.type !== 'hello'
+        || message.protocol !== CONFORMANCE_PROTOCOL_VERSION
+        || !Array.isArray(message.families)
+        || !message.families.every((family) => typeof family === 'string' && family.length > 0)) {
+        throw new Error('adapter did not answer the handshake');
+    }
+    const families = message.families;
+    const hostileObjectSuite = parseHostileObjectSuite(message.hostileObjectSuite);
+    if (families.some((family) => hostModelFamilies.has(family)) && !hostileObjectSuite) {
+        throw new Error('adapter must declare hostileObjectSuite for host-model families');
+    }
+    for (const field of ['implementation', 'version', 'language']) {
+        if (message[field] !== undefined && typeof message[field] !== 'string') {
+            throw new Error(`adapter hello ${field} must be a string`);
+        }
+    }
+    return {
+        type: 'hello',
+        protocol: CONFORMANCE_PROTOCOL_VERSION,
+        families: [...families],
+        ...(typeof message.implementation === 'string'
+            ? { implementation: message.implementation }
+            : {}),
+        ...(typeof message.version === 'string' ? { version: message.version } : {}),
+        ...(typeof message.language === 'string' ? { language: message.language } : {}),
+        ...(hostileObjectSuite ? { hostileObjectSuite } : {}),
+    };
+}
 /** A single adapter child process with a line-oriented message queue. */
 class AdapterConnection {
     child;
@@ -72,17 +122,14 @@ class AdapterConnection {
             this.waiter = (message) => settle(() => resolve(message));
         });
     }
-    async handshake(timeoutMs) {
+    async handshake(timeoutMs, hostModelFamilies) {
         this.write({
             type: 'hello',
             protocol: CONFORMANCE_PROTOCOL_VERSION,
             manifestVersion: CONFORMANCE_MANIFEST_VERSION,
         });
         const message = await this.nextMessage(timeoutMs);
-        if (message.type !== 'hello' || !Array.isArray(message.families)) {
-            throw new Error('adapter did not answer the handshake');
-        }
-        return message;
+        return parseAdapterHello(message, hostModelFamilies);
     }
     end() {
         this.write({ type: 'end' });
@@ -98,7 +145,16 @@ export async function runConformance(options) {
     const fixturesDir = resolveFixturesDir(options.fixturesDir);
     const manifest = loadManifest(fixturesDir);
     const loadJson = createJsonLoader(fixturesDir);
-    let cases = enumerateAllCases(manifest, loadJson);
+    const allCases = enumerateAllCases(manifest, loadJson);
+    const hostModelFamilies = new Set(allCases
+        .filter((c) => {
+        const generator = c.case.generator;
+        return typeof generator === 'object'
+            && generator !== null
+            && generator.type === 'unsafe-accessor';
+    })
+        .map((c) => c.family));
+    let cases = allCases;
     if (options.onlyFuzz)
         cases = cases.filter((c) => c.role === 'fuzz');
     if (options.skipFuzz)
@@ -112,7 +168,14 @@ export async function runConformance(options) {
     // per-case timeout so a busy machine never mistakes startup for a hang.
     const handshakeTimeoutMs = Math.max(timeoutMs, DEFAULT_TIMEOUT_MS);
     let connection = new AdapterConnection(options.adapterCommand);
-    let hello = await connection.handshake(handshakeTimeoutMs);
+    let hello;
+    try {
+        hello = await connection.handshake(handshakeTimeoutMs, hostModelFamilies);
+    }
+    catch (error) {
+        connection.kill();
+        throw error;
+    }
     let announced = new Set(hello.families);
     let respawnBudget = 1;
     const outcomes = [];
@@ -164,7 +227,7 @@ export async function runConformance(options) {
         connection.kill();
         connection = new AdapterConnection(options.adapterCommand);
         try {
-            hello = await connection.handshake(handshakeTimeoutMs);
+            hello = await connection.handshake(handshakeTimeoutMs, hostModelFamilies);
         }
         catch {
             // A replacement that cannot even complete a handshake ends the run
@@ -191,6 +254,9 @@ function summarize(outcomes, notRun, hello) {
             version: hello.version,
             language: hello.language,
             families: hello.families,
+            ...(hello.hostileObjectSuite
+                ? { hostileObjectSuite: hello.hostileObjectSuite }
+                : {}),
         },
         outcomes,
     };

package/dist/types.d.ts

@@ -33,6 +33,18 @@ export interface EnumeratedCase {
     readonly section?: string;
     readonly case: Record<string, unknown>;
 }
+/**
+ * RFC 0012 requires every implementation to declare a language-specific
+ * hostile-object suite covering the conversion mechanisms the shared
+ * `unsafe-accessor` generator cannot describe. The declaration travels in the
+ * adapter's `hello` message so it lands in the published run summary.
+ */
+export interface HostileObjectSuiteDeclaration {
+    /** Number of cases in the implementation's own suite. */
+    readonly count: number;
+    /** Conversion mechanisms covered, e.g. `getter`, `toJSON`, `__str__`. */
+    readonly mechanisms: readonly string[];
+}
 export interface AdapterHello {
     readonly type: 'hello';
     readonly protocol: number;
@@ -40,6 +52,7 @@ export interface AdapterHello {
     readonly version?: string;
     readonly language?: string;
     readonly families: readonly string[];
+    readonly hostileObjectSuite?: HostileObjectSuiteDeclaration;
 }
 export type HandlerResult = {
     readonly ok: true;
@@ -78,6 +91,7 @@ export interface RunSummary {
         readonly version?: string;
         readonly language?: string;
         readonly families: readonly string[];
+        readonly hostileObjectSuite?: HostileObjectSuiteDeclaration;
     };
     readonly outcomes: readonly CaseOutcome[];
 }

package/dist/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAIA,eAAO,MAAM,4BAA4B,IAAI,CAAC;AAC9C,eAAO,MAAM,4BAA4B,IAAI,CAAC;AAE9C,MAAM,MAAM,WAAW,GACnB,SAAS,GACT,WAAW,GACX,UAAU,GACV,UAAU,GACV,cAAc,GACd,MAAM,CAAC;AAEX,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IAC5C,2EAA2E;IAC3E,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACvC;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IACzC,QAAQ,CAAC,KAAK,EAAE,SAAS,iBAAiB,EAAE,CAAC;CAC9C;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,0EAA0E;IAC1E,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,IAAI,EAAE,gCAAgC,CAAC;IAChD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,SAAS,cAAc,EAAE,CAAC;IAC7C,QAAQ,CAAC,IAAI,EAAE,SAAS,iBAAiB,EAAE,CAAC;CAC7C;AAED,oDAAoD;AACpD,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,4EAA4E;IAC5E,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACxC;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;CACtC;AAED,MAAM,MAAM,aAAa,GACrB;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,GAChE;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,GACxF;IAAE,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAEzD,MAAM,MAAM,UAAU,GAAG,aAAa,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC;AAE3F,MAAM,MAAM,UAAU,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;AAElD,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAC5B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,uDAAuD;IACvD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,CAAC,EAAE;QACjB,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;QACjC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAC3B,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;KACtC,CAAC;IACF,QAAQ,CAAC,QAAQ,EAAE,SAAS,WAAW,EAAE,CAAC;CAC3C"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAIA,eAAO,MAAM,4BAA4B,IAAI,CAAC;AAC9C,eAAO,MAAM,4BAA4B,IAAI,CAAC;AAE9C,MAAM,MAAM,WAAW,GACnB,SAAS,GACT,WAAW,GACX,UAAU,GACV,UAAU,GACV,cAAc,GACd,MAAM,CAAC;AAEX,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IAC5C,2EAA2E;IAC3E,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACvC;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IACzC,QAAQ,CAAC,KAAK,EAAE,SAAS,iBAAiB,EAAE,CAAC;CAC9C;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,0EAA0E;IAC1E,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,IAAI,EAAE,gCAAgC,CAAC;IAChD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,SAAS,cAAc,EAAE,CAAC;IAC7C,QAAQ,CAAC,IAAI,EAAE,SAAS,iBAAiB,EAAE,CAAC;CAC7C;AAED,oDAAoD;AACpD,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,4EAA4E;IAC5E,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACxC;AAED;;;;;GAKG;AACH,MAAM,WAAW,6BAA6B;IAC5C,yDAAyD;IACzD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,yEAAyE;IACzE,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;CACxC;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,6BAA6B,CAAC;CAC7D;AAED,MAAM,MAAM,aAAa,GACrB;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,GAChE;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,GACxF;IAAE,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAEzD,MAAM,MAAM,UAAU,GAAG,aAAa,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC;AAE3F,MAAM,MAAM,UAAU,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;AAElD,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAC5B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,uDAAuD;IACvD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,CAAC,EAAE;QACjB,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;QACjC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAC3B,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;QACrC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,6BAA6B,CAAC;KAC7D,CAAC;IACF,QAAQ,CAAC,QAAQ,EAAE,SAAS,WAAW,EAAE,CAAC;CAC3C"}

package/fixtures/cache-keys-v1/README.md

@@ -0,0 +1,59 @@
+# Cache key version 1 fixtures
+
+These language-neutral fixtures accompany accepted RFC 0013 and are normative
+for cache key version 1.
+
+## Success manifest
+
+Each entry in `success.json` contains:
+
+- `id`: stable fixture identifier;
+- `secretHex`: the cache-key secret as lowercase hex;
+- `namespace`: the `{project, environment}` pair;
+- `keyVersion`: the integer key version;
+- `preimageUtf8`: the exact canonical preimage as UTF-8 text;
+- `namespaceToken`: the expected opaque namespace prefix;
+- `key`: the expected complete store key.
+
+Both `namespaceToken` and `key` are exact. An implementation that produces a
+different string for the same inputs is non-conformant, not merely different.
+
+## Rejection manifest
+
+Entries in `rejections.json` carry the same input fields plus the required
+stable `error` code. An entry may replace `preimageUtf8` with a `generator`:
+
+- `repeat-string`: concatenates `count` copies of the UTF-8 string `utf8`.
+
+`secretHex` is an empty string for the missing-secret case.
+The `precedence-*` cases deliberately violate several constraints at once and
+pin the RFC's required first failure.
+
+## How these expectations were produced
+
+The expected keys were generated with an implementation independent of the
+TypeScript reference: Node's built-in `crypto.createHmac` rather than the
+`@noble/hashes` primitives `@hypequery/protocol` uses. Agreement between the
+two is therefore cross-validation rather than a restatement of one
+implementation's behaviour.
+
+## What the corpus is designed to prove
+
+Beyond exact derivation, the success cases demonstrate the separation
+properties the scheme exists for:
+
+- `namespace-separates-environment` and `namespace-separates-project` — an
+  identical preimage under a different namespace yields a different key, so a
+  shared store cannot serve one environment's entry to another;
+- `rotation-changes-key` — incrementing `keyVersion` changes the key, making
+  rotation a flush rather than a silent reuse;
+- `secret-separates-key` — a different secret yields a different key even for
+  an identical namespace and preimage;
+- `deployment-target-punctuation` and `deployment-target-leading-digit` — the
+  namespace accepts the RFC 0008 target grammar used by deployment releases;
+- `sensitive-preimage-not-recoverable` — a preimage containing an email
+  address and a tenant identifier produces a key containing neither.
+
+The last of these is the whole point of the RFC: the previous scheme used the
+readable preimage as the store key, so those values appeared in `SCAN` output,
+eviction logs, and metric labels.