@reallyme/codec 0.2.2 → 0.3.0

package/LICENSE

@@ -1,3 +1,33 @@
+ReallyMe Codec
+
+This software is dual-licensed under the MIT License or the Apache License,
+Version 2.0, at your option. The complete terms of both licenses follow.
+
+Separately identified dependencies and vendored tools retain their own
+copyright notices and license terms.
+
+MIT License
+
+Copyright © 2026 ReallyMe LLC. All rights reserved.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
                                  Apache License
                            Version 2.0, January 2004
                         http://www.apache.org/licenses/

package/NOTICE

@@ -1,12 +1,8 @@
-SPDX-FileCopyrightText: Copyright © 2026 ReallyMe LLC. All rights reserved
-
-SPDX-License-Identifier: Apache-2.0
-
 ReallyMe Codec
 Copyright © 2026 ReallyMe LLC. All rights reserved.
 
 This product includes software developed by ReallyMe LLC and distributed under
-the Apache License, Version 2.0.
+either the MIT License or the Apache License, Version 2.0, at your option.
 
 ReallyMe Codec wraps third-party codec, serialization, protobuf, WASM, JNI, and
 native binding libraries. Dependency license terms are recorded in the package

package/README.md

@@ -1,9 +1,3 @@
-<!--
-SPDX-FileCopyrightText: Copyright © 2026 ReallyMe LLC. All rights reserved
-
-SPDX-License-Identifier: Apache-2.0
--->
-
 # @reallyme/codec
 
 `@reallyme/codec` is the TypeScript package for the Rust `reallyme-codec`
@@ -39,13 +33,16 @@ const encoded = ReallyMeCodec.base64urlEncode(new Uint8Array([1, 2, 3]));
 const decoded = ReallyMeCodec.base64urlDecode(encoded);
 ```
 
+The installer accepts only this package's generated WASM module namespace.
+Initialize that module with the bundled `.wasm` file before installing it.
+
 ## Surface
 
 | Family | APIs |
 |---|---|
 | Base encodings | `base64Encode`, `base64Decode`, `base64urlEncode`, `base64urlDecode`, `base64urlDecodeBytes`, `bytesToLowerHex`, `lowerHexToBytes` |
 | Multiformats | `base58btcEncode`, `base58btcDecode`, `multibase*`, `multicodec*`, `multikey*`, binding validation |
-| Deterministic CBOR | typed `deterministicCborEncode` and `deterministicCborDecode` for the bounded RFC 8949 profile |
+| Deterministic CBOR | typed `deterministicCborEncode` and `deterministicCborDecode` for the bounded RFC 8949 §4.2.3 length-first profile |
 | DAG-CBOR and CID | `dagCborEncode`, `dagCborDecode`, `dagCborComputeCid`, `dagCborVerifyCid`, content hash and multihash helpers |
 | JCS | `canonicalizeJson`, `canonicalizeJsonText` |
 | PEM | wipeable `Uint8Array` armor through `encodePem`, `decodePem`, with strict label and size policy |
@@ -55,17 +52,17 @@ const decoded = ReallyMeCodec.base64urlDecode(encoded);
 `processOperationJson` accepts UTF-8 bytes containing the generated ProtoJSON
 view of that same message. Both return binary `CodecOperationResponse` bytes;
 expected validation failures are represented by its typed error outcome and
-are not thrown as backend exceptions. Operation-specific public methods use
+are not thrown as backend exceptions. Structured public methods use
 that same fully discriminated response internally; the package does not keep
 operation-specific `*Proto` helper APIs or hand-written structured JSON result
-paths.
+paths. Base encodings, predicates, and JCS use dedicated Rust WASM functions.
 
 The deterministic-CBOR API uses a closed recursive value model with exact
 `bigint` integers, `Uint8Array` byte strings, arrays, and entry-list maps with
 integer or text keys. It does not use JavaScript `number` for integers. Floats,
 tags, indefinite-length items, arbitrary simple values, and
 compound map keys are outside the supported profile. DAG-CBOR remains a
-separate, stricter profile and retains its existing APIs and behavior.
+separate profile restricted to text map keys and signed 64-bit integers.
 
 ```ts
 const value = ReallyMeDeterministicCbor.mapText([
@@ -85,7 +82,25 @@ non-canonical input, unsupported CBOR types, and values beyond the documented
 resource limits. DAG-CBOR builders expose text-key maps and byte/integer
 helpers; deterministic CBOR additionally supports integer-key maps and the
 complete documented `u64`/`i64` integer ranges. `Uint8Array` is the canonical
-mutable-byte boundary for browser, Node, and WASM callers.
+mutable-byte boundary for browser, Node, and WASM callers. Pass ordinary
+`Uint8Array` views; subclasses (including Node `Buffer`), proxies, and overridden
+byte metadata are rejected. The facade copies bytes through captured prototype
+methods and does not invoke a caller-owned copy method. Create a plain `Uint8Array` copy
+when adapting other byte containers.
+
+JCS is a strict RFC 8785 subset. It rejects duplicate properties, unpaired
+UTF-16 surrogates, Unicode noncharacters, and integer-valued numbers outside
+the exact JavaScript integer range; this includes the RFC example `1e19`.
+CID validation accepts
+CIDv0 and supported multibase CIDv1 strings up to 1024 UTF-8 bytes; paths and
+trailing decoded bytes are rejected. CID computation uses DAG-CBOR/SHA-256
+CIDv1 in lowercase base32 and hashes the supplied bytes without parsing CBOR.
+CID verification validates one canonical DAG-CBOR block before comparing the
+CID and requires the supplied CID text to use that canonical lowercase base32
+form. `dagCborVerifyCid` returns a boolean; `dagCborVerifyCidDetails` returns
+the canonical CID diagnostics. Invalid DAG-CBOR returns a typed canonicalization
+error. IPLD links and floating-point values outside this package's closed
+DAG-CBOR model return `unsupported-ipld-value`.
 
 Encoded CBOR and decoded byte-string values can contain the complete sensitive
 document. Returned buffers belong to the caller and should be cleared with
@@ -103,3 +118,8 @@ SDKs.
 
 Errors are typed as `ReallyMeCodecError`; they do not include raw input bytes
 or backend exception text.
+
+## License
+
+Dual-licensed under the MIT License or Apache License, Version 2.0, at your
+option. See [LICENSE](LICENSE) for both license texts.

package/dist/baseEncoding.js

@@ -1,19 +1,17 @@
-// SPDX-FileCopyrightText: Copyright © 2026 ReallyMe LLC. All rights reserved
+// SPDX-FileCopyrightText: 2026 ReallyMe LLC
 //
-// SPDX-License-Identifier: Apache-2.0
-import { asciiBytesToString, ensureBytesInput, ensureStringValue, readBytesOutput, readStringOutput, } from "./readOutput.js";
+// SPDX-License-Identifier: MIT OR Apache-2.0
+import { asciiBytesToString, ensureBytesInput, ensureStringValue, readBytesOutput, readStringOutput, withSnapshotBytesInput, } from "./readOutput.js";
 import { requireReallyMeCodecWasmProvider } from "./wasmProvider.js";
 export const base64Encode = (bytes) => {
-    ensureBytesInput(bytes);
-    return readStringOutput(requireReallyMeCodecWasmProvider().base64Encode(bytes));
+    return withSnapshotBytesInput(bytes, (snapshot) => readStringOutput(requireReallyMeCodecWasmProvider().base64Encode(snapshot)));
 };
 export const base64Decode = (encoded) => {
     ensureStringValue(encoded);
     return readBytesOutput(requireReallyMeCodecWasmProvider().base64Decode(encoded));
 };
 export const base64urlEncode = (bytes) => {
-    ensureBytesInput(bytes);
-    return readStringOutput(requireReallyMeCodecWasmProvider().base64urlEncode(bytes));
+    return withSnapshotBytesInput(bytes, (snapshot) => readStringOutput(requireReallyMeCodecWasmProvider().base64urlEncode(snapshot)));
 };
 export const base64urlDecode = (encoded) => {
     ensureStringValue(encoded);
@@ -24,8 +22,7 @@ export const base64urlDecodeBytes = (encoded) => {
     return base64urlDecode(asciiBytesToString(encoded));
 };
 export const bytesToLowerHex = (bytes) => {
-    ensureBytesInput(bytes);
-    return readStringOutput(requireReallyMeCodecWasmProvider().bytesToLowerHex(bytes));
+    return withSnapshotBytesInput(bytes, (snapshot) => readStringOutput(requireReallyMeCodecWasmProvider().bytesToLowerHex(snapshot)));
 };
 export const lowerHexToBytes = (encoded) => {
     ensureStringValue(encoded);

package/dist/boundary.js

@@ -1,6 +1,6 @@
-// SPDX-FileCopyrightText: Copyright © 2026 ReallyMe LLC. All rights reserved
+// SPDX-FileCopyrightText: 2026 ReallyMe LLC
 //
-// SPDX-License-Identifier: Apache-2.0
+// SPDX-License-Identifier: MIT OR Apache-2.0
 import { ReallyMeCodecError } from "./errors.js";
 export const MAX_CODEC_FFI_INPUT_BYTES = 1_048_576;
 export const MAX_CODEC_FFI_OUTPUT_BYTES = 67_108_864;
@@ -104,7 +104,7 @@ export const requireBoundaryUtf8String = (value, allowEmpty = true, maximum = MA
     if (value.length > maximum) {
         invalidInput();
     }
-    const length = utf8ByteLength(value);
+    const length = strictUtf8ByteLength(value);
     requireBoundaryAggregate([length], maximum);
     return length;
 };

package/dist/cbor.d.ts

@@ -97,7 +97,11 @@ export declare const dagCborDecode: (bytes: Uint8Array) => ReallyMeCborValue;
 export declare const deterministicCborEncode: (value: unknown) => Uint8Array;
 export declare const deterministicCborDecode: (bytes: Uint8Array) => ReallyMeDeterministicCborValue;
 export declare const dagCborComputeCid: (bytes: Uint8Array) => string;
-export declare const dagCborVerifyCid: (cid: string, bytes: Uint8Array) => ReallyMeDagCborCidVerification;
+export declare const dagCborVerifyCidDetails: (cid: string, bytes: Uint8Array) => ReallyMeDagCborCidVerification;
+/** Verify one CID and return a boolean that is safe to use directly in a condition. */
+export declare const dagCborVerifyCid: (cid: string, bytes: Uint8Array) => boolean;
+/** Alias for callers that prefer an explicit comparison name. */
+export declare const dagCborCidMatches: typeof dagCborVerifyCid;
 export declare const dagCborSha256ContentHash: (bytes: Uint8Array) => Uint8Array;
 export declare const dagCborMultihash: (bytes: Uint8Array) => Uint8Array;
 export declare const isValidCidString: (cid: string) => boolean;

package/dist/cbor.js

@@ -1,13 +1,13 @@
-// SPDX-FileCopyrightText: Copyright © 2026 ReallyMe LLC. All rights reserved
+// SPDX-FileCopyrightText: 2026 ReallyMe LLC
 //
-// SPDX-License-Identifier: Apache-2.0
+// SPDX-License-Identifier: MIT OR Apache-2.0
 import { create } from "@bufbuild/protobuf";
 import { MAX_CODEC_BOUNDARY_NODES, strictUtf8ByteLength, } from "./boundary.js";
 import { DETERMINISTIC_CBOR_I64_MIN, DETERMINISTIC_CBOR_NEGATIVE_MAX, DETERMINISTIC_CBOR_U64_MAX, MAX_DETERMINISTIC_CBOR_AGGREGATE_BYTE_STRING_BYTES, MAX_DETERMINISTIC_CBOR_AGGREGATE_TEXT_BYTES, MAX_DETERMINISTIC_CBOR_CONTAINER_ENTRIES, MAX_DETERMINISTIC_CBOR_INPUT_LEN, MAX_DETERMINISTIC_CBOR_NESTING_DEPTH, MAX_DETERMINISTIC_CBOR_NODES, MAX_DETERMINISTIC_CBOR_OUTPUT_LEN, } from "./deterministicCborBoundary.js";
 import { ReallyMeCodecError } from "./errors.js";
 import { CodecDagCborDecodeRequestSchema, CodecDagCborEncodeRequestSchema, CodecDagCborVerifyCidRequestSchema, CodecDeterministicCborArraySchema, CodecDeterministicCborBoolSchema, CodecDeterministicCborBytesSchema, CodecDeterministicCborDecodeRequestSchema, CodecDeterministicCborEncodeRequestSchema, CodecDeterministicCborIntegerSchema, CodecDeterministicCborMapEntrySchema, CodecDeterministicCborMapKeySchema, CodecDeterministicCborMapSchema, CodecDeterministicCborNegativeIntegerSchema, CodecDeterministicCborNullSchema, CodecDeterministicCborTextSchema, CodecDeterministicCborUnsignedIntegerSchema, CodecDeterministicCborValueSchema, CodecOperationRequestSchema, } from "./proto/generated/reallyme/codec/v1/codec_pb.js";
 import { clearGeneratedOperationResult, processGeneratedOperationRequest, } from "./operationContract.js";
-import { ensureBytesInput, ensureStringValue, readBytesOutput, readStringOutput, readNumberOutput, } from "./readOutput.js";
+import { ensureBytesInput, ensureStringValue, readBytesOutput, readStringOutput, readNumberOutput, snapshotBoundedBytesInput, snapshotProviderBytes, } from "./readOutput.js";
 import { requireReallyMeCodecWasmProvider } from "./wasmProvider.js";
 export const ReallyMeDeterministicCbor = {
     null() {
@@ -39,7 +39,7 @@ export const ReallyMeDeterministicCbor = {
     },
     bytes(value) {
         ensureBytesInput(value);
-        return { type: "bytes", value: value.slice() };
+        return { type: "bytes", value: snapshotBoundedBytesInput(value) };
     },
     array(value) {
         return { type: "array", value: [...value] };
@@ -132,7 +132,7 @@ export const ReallyMeDagCbor = {
     },
     bytes(value) {
         ensureBytesInput(value);
-        return { type: "bytes", value: value.slice() };
+        return { type: "bytes", value: snapshotBoundedBytesInput(value) };
     },
     array(value) {
         return { type: "array", value: [...value] };
@@ -305,7 +305,7 @@ const validateCborValue = (value, depth = 0, seen = new WeakSet(), state = { nod
                     throw new ReallyMeCodecError("invalid-input");
                 }
                 state.byteStringBytes += child.length;
-                return { type: "bytes", value: child.slice() };
+                return { type: "bytes", value: snapshotBoundedBytesInput(child) };
             }
             case "array": {
                 const children = snapshotArray(readDataProperty(value, "value"), MAX_DETERMINISTIC_CBOR_NODES - state.nodes);
@@ -864,7 +864,7 @@ const deterministicCborValueFromProto = (value, depth, state) => {
             requireNoProviderUnknownFields(value.value.value);
             const bytes = value.value.value.value;
             state.byteStringBytes = consumeProviderDeterministicCborBudget(state.byteStringBytes, bytes.length, MAX_DETERMINISTIC_CBOR_AGGREGATE_BYTE_STRING_BYTES);
-            const copy = bytes.slice();
+            const copy = snapshotProviderBytes(bytes, MAX_DETERMINISTIC_CBOR_AGGREGATE_BYTE_STRING_BYTES);
             state.ownedBytes.push(copy);
             return { type: "bytes", value: copy };
         }
@@ -1011,7 +1011,7 @@ const dagCborValueToProto = (value) => {
                 },
             });
         case "bytes": {
-            const bytes = value.value.slice();
+            const bytes = snapshotDeterministicCborBytes(value.value, MAX_DETERMINISTIC_CBOR_AGGREGATE_BYTE_STRING_BYTES);
             try {
                 const bytesValue = create(CodecDeterministicCborBytesSchema, { value: bytes });
                 return create(CodecDeterministicCborValueSchema, {
@@ -1101,7 +1101,10 @@ const dagCborValueFromDeterministic = (value) => {
         case "text":
             return { type: "string", value: value.value };
         case "bytes":
-            return { type: "bytes", value: value.value.slice() };
+            return {
+                type: "bytes",
+                value: snapshotProviderBytes(value.value, MAX_DETERMINISTIC_CBOR_AGGREGATE_BYTE_STRING_BYTES),
+            };
         case "array": {
             const values = [];
             try {
@@ -1179,7 +1182,7 @@ export const dagCborEncode = (value) => {
                 result.encoded.length > maxDagCborInputLength) {
                 return providerFailure();
             }
-            return result.encoded.slice();
+            return snapshotProviderBytes(result.encoded, maxDagCborInputLength);
         }
         catch (error) {
             if (error instanceof ReallyMeCodecError) {
@@ -1265,7 +1268,7 @@ export const deterministicCborEncode = (value) => {
                 result.encoded.length > MAX_DETERMINISTIC_CBOR_OUTPUT_LEN) {
                 throw new ReallyMeCodecError("provider-failure");
             }
-            return result.encoded.slice();
+            return snapshotProviderBytes(result.encoded, MAX_DETERMINISTIC_CBOR_OUTPUT_LEN);
         }
         finally {
             result.encoded.fill(0);
@@ -1315,9 +1318,15 @@ export const deterministicCborDecode = (bytes) => {
 };
 export const dagCborComputeCid = (bytes) => {
     ensureBytesInput(bytes);
-    return readStringOutput(requireReallyMeCodecWasmProvider().dagCborComputeCid(bytes));
+    const snapshot = snapshotDeterministicCborBytes(bytes, maxDagCborInputLength);
+    try {
+        return readStringOutput(requireReallyMeCodecWasmProvider().dagCborComputeCid(snapshot));
+    }
+    finally {
+        snapshot.fill(0);
+    }
 };
-export const dagCborVerifyCid = (cid, bytes) => {
+export const dagCborVerifyCidDetails = (cid, bytes) => {
     ensureStringValue(cid);
     ensureBytesInput(bytes);
     const payloadSnapshot = snapshotDeterministicCborBytes(bytes, maxDagCborInputLength);
@@ -1339,6 +1348,10 @@ export const dagCborVerifyCid = (cid, bytes) => {
         payloadSnapshot.fill(0);
     }
 };
+/** Verify one CID and return a boolean that is safe to use directly in a condition. */
+export const dagCborVerifyCid = (cid, bytes) => dagCborVerifyCidDetails(cid, bytes).valid;
+/** Alias for callers that prefer an explicit comparison name. */
+export const dagCborCidMatches = dagCborVerifyCid;
 const dagCborVerifyCidRequest = (cid, bytes) => create(CodecOperationRequestSchema, {
     operation: {
         case: "dagCborVerifyCid",
@@ -1350,11 +1363,23 @@ const dagCborVerifyCidRequest = (cid, bytes) => create(CodecOperationRequestSche
 });
 export const dagCborSha256ContentHash = (bytes) => {
     ensureBytesInput(bytes);
-    return readBytesOutput(requireReallyMeCodecWasmProvider().dagCborSha256ContentHash(bytes));
+    const snapshot = snapshotDeterministicCborBytes(bytes, maxDagCborInputLength);
+    try {
+        return readBytesOutput(requireReallyMeCodecWasmProvider().dagCborSha256ContentHash(snapshot));
+    }
+    finally {
+        snapshot.fill(0);
+    }
 };
 export const dagCborMultihash = (bytes) => {
     ensureBytesInput(bytes);
-    return readBytesOutput(requireReallyMeCodecWasmProvider().dagCborMultihash(bytes));
+    const snapshot = snapshotDeterministicCborBytes(bytes, maxDagCborInputLength);
+    try {
+        return readBytesOutput(requireReallyMeCodecWasmProvider().dagCborMultihash(snapshot));
+    }
+    finally {
+        snapshot.fill(0);
+    }
 };
 export const isValidCidString = (cid) => {
     ensureStringValue(cid);
@@ -1365,11 +1390,19 @@ export const isValidCidString = (cid) => {
     return value;
 };
 export const tryParseCid = (cid) => {
-    ensureStringValue(cid);
-    const value = requireReallyMeCodecWasmProvider().tryParseCid(cid);
-    if (value === undefined) {
-        return undefined;
+    try {
+        ensureStringValue(cid);
+        const value = requireReallyMeCodecWasmProvider().tryParseCid(cid);
+        if (value === undefined) {
+            return undefined;
+        }
+        return readStringOutput(value);
+    }
+    catch (error) {
+        if (error instanceof ReallyMeCodecError && error.code === "invalid-input") {
+            return undefined;
+        }
+        throw error;
     }
-    return readStringOutput(value);
 };
 export const dagCborCodecCode = () => readNumberOutput(requireReallyMeCodecWasmProvider().dagCborCodecCode());

package/dist/deterministicCborBoundary.d.ts

@@ -5,7 +5,7 @@ export declare const MAX_DETERMINISTIC_CBOR_NODES = 65536;
 export declare const MAX_DETERMINISTIC_CBOR_CONTAINER_ENTRIES = 16384;
 export declare const MAX_DETERMINISTIC_CBOR_AGGREGATE_TEXT_BYTES = 1048576;
 export declare const MAX_DETERMINISTIC_CBOR_AGGREGATE_BYTE_STRING_BYTES = 1048576;
-export declare const MAX_DETERMINISTIC_CBOR_PROTO_RECURSION_DEPTH: number;
+export declare const MAX_DETERMINISTIC_CBOR_PROTO_RECURSION_DEPTH = 198;
 export declare const DETERMINISTIC_CBOR_U64_MAX: bigint;
 export declare const DETERMINISTIC_CBOR_I64_MIN: bigint;
 export declare const DETERMINISTIC_CBOR_NEGATIVE_MAX = -1n;

package/dist/deterministicCborBoundary.js

@@ -1,6 +1,6 @@
-// SPDX-FileCopyrightText: Copyright © 2026 ReallyMe LLC. All rights reserved
+// SPDX-FileCopyrightText: 2026 ReallyMe LLC
 //
-// SPDX-License-Identifier: Apache-2.0
+// SPDX-License-Identifier: MIT OR Apache-2.0
 export const MAX_DETERMINISTIC_CBOR_INPUT_LEN = 1_048_576;
 export const MAX_DETERMINISTIC_CBOR_OUTPUT_LEN = 1_048_576;
 export const MAX_DETERMINISTIC_CBOR_NESTING_DEPTH = 64;
@@ -9,9 +9,9 @@ export const MAX_DETERMINISTIC_CBOR_CONTAINER_ENTRIES = 16_384;
 export const MAX_DETERMINISTIC_CBOR_AGGREGATE_TEXT_BYTES = 1_048_576;
 export const MAX_DETERMINISTIC_CBOR_AGGREGATE_BYTE_STRING_BYTES = 1_048_576;
 // A nested map expands to Value -> Map -> MapEntry on the protobuf wire. The
-// five additional layers cover the result/request and deepest scalar wrapper.
-// Buf's default recursion limit of 100 cannot represent semantic depth 64.
-export const MAX_DETERMINISTIC_CBOR_PROTO_RECURSION_DEPTH = MAX_DETERMINISTIC_CBOR_NESTING_DEPTH * 3 + 5;
+// protobuf-es counts the root message in addition to the wire's five outer
+// layers. Depth 64 maps therefore require one more level than Buffa.
+export const MAX_DETERMINISTIC_CBOR_PROTO_RECURSION_DEPTH = 198;
 export const DETERMINISTIC_CBOR_U64_MAX = (1n << 64n) - 1n;
 export const DETERMINISTIC_CBOR_I64_MIN = -(1n << 63n);
 export const DETERMINISTIC_CBOR_NEGATIVE_MAX = -1n;

package/dist/errors.d.ts

@@ -2,7 +2,7 @@
  * Typed codec error codes. Errors intentionally carry no raw input bytes so
  * callers can log them without leaking request payloads.
  */
-export type ReallyMeCodecErrorCode = "invalid-input" | "non-canonical" | "provider-failure" | "unsupported-codec";
+export type ReallyMeCodecErrorCode = "invalid-input" | "non-canonical" | "provider-failure" | "unsupported-codec" | "unsupported-ipld-value";
 export declare class ReallyMeCodecError extends Error {
     readonly code: ReallyMeCodecErrorCode;
     constructor(code: ReallyMeCodecErrorCode);

package/dist/errors.js

@@ -1,6 +1,6 @@
-// SPDX-FileCopyrightText: Copyright © 2026 ReallyMe LLC. All rights reserved
+// SPDX-FileCopyrightText: 2026 ReallyMe LLC
 //
-// SPDX-License-Identifier: Apache-2.0
+// SPDX-License-Identifier: MIT OR Apache-2.0
 export class ReallyMeCodecError extends Error {
     code;
     constructor(code) {

package/dist/index.d.ts

@@ -3,16 +3,16 @@ export type { ReallyMeCodecErrorCode } from "./errors.js";
 export { base64Decode, base64Encode, base64urlDecode, base64urlDecodeBytes, base64urlEncode, bytesToLowerHex, lowerHexToBytes, } from "./baseEncoding.js";
 export { base58btcDecode, base58btcEncode, bindingTypeMatchesCodec, multibaseBase58btcEncode, multibaseBase64urlEncode, multibaseDecode, multicodecLookupPrefix, multicodecPrefixForName, multicodecStripPrefix, multicodecTable, multikeyEncode, multikeyParse, requireSupportedMulticodec, validateKeyBinding, } from "./multiformat.js";
 export type { ReallyMeKeyMaterialKind, ReallyMeMulticodecLookupResult, ReallyMeMulticodecMetadata, ReallyMeMulticodecTable, ReallyMeMulticodecTag, ReallyMeParsedMultikey, } from "./multiformat.js";
-export { dagCborCodecCode, dagCborComputeCid, dagCborDecode, dagCborEncode, dagCborMultihash, dagCborSha256ContentHash, dagCborVerifyCid, deterministicCborDecode, deterministicCborEncode, isValidCidString, ReallyMeDagCbor, ReallyMeDeterministicCbor, tryParseCid, } from "./cbor.js";
+export { dagCborCodecCode, dagCborCidMatches, dagCborComputeCid, dagCborDecode, dagCborEncode, dagCborMultihash, dagCborSha256ContentHash, dagCborVerifyCid, dagCborVerifyCidDetails, deterministicCborDecode, deterministicCborEncode, isValidCidString, ReallyMeDagCbor, ReallyMeDeterministicCbor, tryParseCid, } from "./cbor.js";
 export type { ReallyMeDeterministicCborInteger, ReallyMeDeterministicCborMapEntry, ReallyMeDeterministicCborMapKey, ReallyMeDeterministicCborValue, ReallyMeCborMapEntry, ReallyMeCborValue, ReallyMeDagCborCidVerification, } from "./cbor.js";
 export { canonicalizeJson, canonicalizeJsonText } from "./jcs.js";
 export { decodePem, encodePem } from "./pem.js";
 export { processOperation, processOperationJson } from "./operationContract.js";
 export type { ReallyMePemDecodePolicy, ReallyMePemDocument, ReallyMePemEncodeOptions, ReallyMePemLabel, ReallyMePemLineEnding, } from "./pem.js";
-export { REALLYME_CODEC_WASM_EXPORTS, installReallyMeCodecWasmProvider, requireReallyMeCodecWasmProvider, } from "./wasmProvider.js";
+export { REALLYME_CODEC_WASM_EXPORTS, installReallyMeCodecWasmProvider, } from "./wasmProvider.js";
 export type { ReallyMeCodecWasmProvider } from "./wasmProvider.js";
 import { base64Decode, base64Encode, base64urlDecode, base64urlDecodeBytes, base64urlEncode, bytesToLowerHex, lowerHexToBytes } from "./baseEncoding.js";
-import { dagCborCodecCode, dagCborComputeCid, dagCborDecode, dagCborEncode, dagCborMultihash, dagCborSha256ContentHash, dagCborVerifyCid, deterministicCborDecode, deterministicCborEncode, isValidCidString, tryParseCid } from "./cbor.js";
+import { dagCborCodecCode, dagCborComputeCid, dagCborDecode, dagCborEncode, dagCborMultihash, dagCborSha256ContentHash, dagCborVerifyCid, dagCborVerifyCidDetails, deterministicCborDecode, deterministicCborEncode, isValidCidString, tryParseCid } from "./cbor.js";
 import { canonicalizeJson, canonicalizeJsonText } from "./jcs.js";
 import { base58btcDecode, base58btcEncode, bindingTypeMatchesCodec, multibaseBase58btcEncode, multibaseBase64urlEncode, multibaseDecode, multicodecLookupPrefix, multicodecPrefixForName, multicodecStripPrefix, multicodecTable, multikeyEncode, multikeyParse, requireSupportedMulticodec, validateKeyBinding } from "./multiformat.js";
 import { decodePem, encodePem } from "./pem.js";
@@ -40,12 +40,14 @@ export declare const ReallyMeCodec: {
     readonly requireSupportedMulticodec: typeof requireSupportedMulticodec;
     readonly validateKeyBinding: typeof validateKeyBinding;
     readonly dagCborCodecCode: typeof dagCborCodecCode;
+    readonly dagCborCidMatches: typeof dagCborVerifyCid;
     readonly dagCborComputeCid: typeof dagCborComputeCid;
     readonly dagCborDecode: typeof dagCborDecode;
     readonly dagCborEncode: typeof dagCborEncode;
     readonly dagCborMultihash: typeof dagCborMultihash;
     readonly dagCborSha256ContentHash: typeof dagCborSha256ContentHash;
     readonly dagCborVerifyCid: typeof dagCborVerifyCid;
+    readonly dagCborVerifyCidDetails: typeof dagCborVerifyCidDetails;
     readonly deterministicCborDecode: typeof deterministicCborDecode;
     readonly deterministicCborEncode: typeof deterministicCborEncode;
     readonly isValidCidString: typeof isValidCidString;

package/dist/index.js

@@ -1,16 +1,16 @@
-// SPDX-FileCopyrightText: Copyright © 2026 ReallyMe LLC. All rights reserved
+// SPDX-FileCopyrightText: 2026 ReallyMe LLC
 //
-// SPDX-License-Identifier: Apache-2.0
+// SPDX-License-Identifier: MIT OR Apache-2.0
 export { ReallyMeCodecError } from "./errors.js";
 export { base64Decode, base64Encode, base64urlDecode, base64urlDecodeBytes, base64urlEncode, bytesToLowerHex, lowerHexToBytes, } from "./baseEncoding.js";
 export { base58btcDecode, base58btcEncode, bindingTypeMatchesCodec, multibaseBase58btcEncode, multibaseBase64urlEncode, multibaseDecode, multicodecLookupPrefix, multicodecPrefixForName, multicodecStripPrefix, multicodecTable, multikeyEncode, multikeyParse, requireSupportedMulticodec, validateKeyBinding, } from "./multiformat.js";
-export { dagCborCodecCode, dagCborComputeCid, dagCborDecode, dagCborEncode, dagCborMultihash, dagCborSha256ContentHash, dagCborVerifyCid, deterministicCborDecode, deterministicCborEncode, isValidCidString, ReallyMeDagCbor, ReallyMeDeterministicCbor, tryParseCid, } from "./cbor.js";
+export { dagCborCodecCode, dagCborCidMatches, dagCborComputeCid, dagCborDecode, dagCborEncode, dagCborMultihash, dagCborSha256ContentHash, dagCborVerifyCid, dagCborVerifyCidDetails, deterministicCborDecode, deterministicCborEncode, isValidCidString, ReallyMeDagCbor, ReallyMeDeterministicCbor, tryParseCid, } from "./cbor.js";
 export { canonicalizeJson, canonicalizeJsonText } from "./jcs.js";
 export { decodePem, encodePem } from "./pem.js";
 export { processOperation, processOperationJson } from "./operationContract.js";
-export { REALLYME_CODEC_WASM_EXPORTS, installReallyMeCodecWasmProvider, requireReallyMeCodecWasmProvider, } from "./wasmProvider.js";
+export { REALLYME_CODEC_WASM_EXPORTS, installReallyMeCodecWasmProvider, } from "./wasmProvider.js";
 import { base64Decode, base64Encode, base64urlDecode, base64urlDecodeBytes, base64urlEncode, bytesToLowerHex, lowerHexToBytes, } from "./baseEncoding.js";
-import { dagCborCodecCode, dagCborComputeCid, dagCborDecode, dagCborEncode, dagCborMultihash, dagCborSha256ContentHash, dagCborVerifyCid, deterministicCborDecode, deterministicCborEncode, isValidCidString, ReallyMeDagCbor, ReallyMeDeterministicCbor, tryParseCid, } from "./cbor.js";
+import { dagCborCodecCode, dagCborCidMatches, dagCborComputeCid, dagCborDecode, dagCborEncode, dagCborMultihash, dagCborSha256ContentHash, dagCborVerifyCid, dagCborVerifyCidDetails, deterministicCborDecode, deterministicCborEncode, isValidCidString, ReallyMeDagCbor, ReallyMeDeterministicCbor, tryParseCid, } from "./cbor.js";
 import { canonicalizeJson, canonicalizeJsonText } from "./jcs.js";
 import { base58btcDecode, base58btcEncode, bindingTypeMatchesCodec, multibaseBase58btcEncode, multibaseBase64urlEncode, multibaseDecode, multicodecLookupPrefix, multicodecPrefixForName, multicodecStripPrefix, multicodecTable, multikeyEncode, multikeyParse, requireSupportedMulticodec, validateKeyBinding, } from "./multiformat.js";
 import { decodePem, encodePem } from "./pem.js";
@@ -38,12 +38,14 @@ export const ReallyMeCodec = {
     requireSupportedMulticodec,
     validateKeyBinding,
     dagCborCodecCode,
+    dagCborCidMatches,
     dagCborComputeCid,
     dagCborDecode,
     dagCborEncode,
     dagCborMultihash,
     dagCborSha256ContentHash,
     dagCborVerifyCid,
+    dagCborVerifyCidDetails,
     deterministicCborDecode,
     deterministicCborEncode,
     isValidCidString,

package/dist/jcs.js

@@ -1,6 +1,6 @@
-// SPDX-FileCopyrightText: Copyright © 2026 ReallyMe LLC. All rights reserved
+// SPDX-FileCopyrightText: 2026 ReallyMe LLC
 //
-// SPDX-License-Identifier: Apache-2.0
+// SPDX-License-Identifier: MIT OR Apache-2.0
 import { requireBoundaryUtf8String, stringifyBoundaryJson } from "./boundary.js";
 import { readStringOutput } from "./readOutput.js";
 import { requireReallyMeCodecWasmProvider } from "./wasmProvider.js";

package/dist/multiformat.js

@@ -1,11 +1,11 @@
-// SPDX-FileCopyrightText: Copyright © 2026 ReallyMe LLC. All rights reserved
+// SPDX-FileCopyrightText: 2026 ReallyMe LLC
 //
-// SPDX-License-Identifier: Apache-2.0
+// SPDX-License-Identifier: MIT OR Apache-2.0
 import { create } from "@bufbuild/protobuf";
 import { ReallyMeCodecError } from "./errors.js";
 import { CodecMulticodecLookupPrefixRequestSchema, CodecMulticodecPrefixForNameRequestSchema, CodecMulticodecTableRequestSchema, CodecMultikeyParseRequestSchema, CodecOperationRequestSchema, CodecKeyMaterialKind, CodecTag, } from "./proto/generated/reallyme/codec/v1/codec_pb.js";
 import { clearGeneratedOperationResult, processGeneratedOperationRequest, } from "./operationContract.js";
-import { ensureBytesInput, ensureStringInput, ensureStringValue, readBooleanOutput, readBytesOutput, readStringOutput, snapshotBoundedBytesInput, } from "./readOutput.js";
+import { ensureBytesInput, ensureStringInput, ensureStringValue, readBooleanOutput, readBytesOutput, readStringOutput, snapshotBoundedBytesInput, snapshotProviderBytes, withSnapshotBytesInput, } from "./readOutput.js";
 import { requireReallyMeCodecWasmProvider } from "./wasmProvider.js";
 const MAX_MULTICODEC_TABLE_ENTRIES = 1_024;
 const requireNoProviderUnknownFields = (message) => {
@@ -52,7 +52,7 @@ const readMulticodecMetadata = (value) => {
         alg: value.algorithmName,
         tag: sdkTag(value.tag),
         keyMaterial: sdkKeyMaterial(value.keyMaterialKind),
-        prefix: value.prefix.slice(),
+        prefix: snapshotProviderBytes(value.prefix),
     };
     if (value.variableLength || value.fixedLength === 0) {
         return metadata;
@@ -65,20 +65,17 @@ const validateMulticodecMetadata = (value) => {
     sdkKeyMaterial(value.keyMaterialKind);
 };
 export const base58btcEncode = (bytes) => {
-    ensureBytesInput(bytes);
-    return readStringOutput(requireReallyMeCodecWasmProvider().base58btcEncode(bytes));
+    return withSnapshotBytesInput(bytes, (snapshot) => readStringOutput(requireReallyMeCodecWasmProvider().base58btcEncode(snapshot)));
 };
 export const base58btcDecode = (encoded) => {
     ensureStringValue(encoded);
     return readBytesOutput(requireReallyMeCodecWasmProvider().base58btcDecode(encoded));
 };
 export const multibaseBase64urlEncode = (bytes) => {
-    ensureBytesInput(bytes);
-    return readStringOutput(requireReallyMeCodecWasmProvider().multibaseBase64urlEncode(bytes));
+    return withSnapshotBytesInput(bytes, (snapshot) => readStringOutput(requireReallyMeCodecWasmProvider().multibaseBase64urlEncode(snapshot)));
 };
 export const multibaseBase58btcEncode = (bytes) => {
-    ensureBytesInput(bytes);
-    return readStringOutput(requireReallyMeCodecWasmProvider().multibaseBase58btcEncode(bytes));
+    return withSnapshotBytesInput(bytes, (snapshot) => readStringOutput(requireReallyMeCodecWasmProvider().multibaseBase58btcEncode(snapshot)));
 };
 export const multibaseDecode = (encoded) => {
     ensureStringInput(encoded);
@@ -144,8 +141,7 @@ const multicodecLookupPrefixRequest = (bytes) => create(CodecOperationRequestSch
     },
 });
 export const multicodecStripPrefix = (bytes) => {
-    ensureBytesInput(bytes);
-    return readBytesOutput(requireReallyMeCodecWasmProvider().multicodecStripPrefix(bytes));
+    return withSnapshotBytesInput(bytes, (snapshot) => readBytesOutput(requireReallyMeCodecWasmProvider().multicodecStripPrefix(snapshot)));
 };
 export const multicodecTable = () => {
     const operationResult = processGeneratedOperationRequest(multicodecTableRequest());
@@ -181,8 +177,7 @@ const multicodecTableRequest = () => create(CodecOperationRequestSchema, {
 });
 export const multikeyEncode = (codecName, publicKey) => {
     ensureStringInput(codecName);
-    ensureBytesInput(publicKey);
-    return readStringOutput(requireReallyMeCodecWasmProvider().multikeyEncode(codecName, publicKey));
+    return withSnapshotBytesInput(publicKey, (snapshot) => readStringOutput(requireReallyMeCodecWasmProvider().multikeyEncode(codecName, snapshot)));
 };
 export const multikeyParse = (multikey) => {
     ensureStringInput(multikey);
@@ -197,7 +192,7 @@ export const multikeyParse = (multikey) => {
         const parsed = {
             codecName: result.codecName,
             algorithmName: result.algorithmName,
-            publicKey: result.publicKey.slice(),
+            publicKey: snapshotProviderBytes(result.publicKey),
         };
         if (result.variablePublicKeyLength || result.expectedPublicKeyLength === 0) {
             return parsed;
@@ -225,9 +220,14 @@ export const validateKeyBinding = (bindingType, algorithm, multikey) => {
         ensureStringInput(algorithm);
     }
     ensureStringInput(multikey);
-    requireReallyMeCodecWasmProvider().validateKeyBinding(bindingType, algorithm, multikey);
+    requireVoidProviderOutput(requireReallyMeCodecWasmProvider().validateKeyBinding(bindingType, algorithm, multikey));
 };
 export const requireSupportedMulticodec = (codecName) => {
     ensureStringInput(codecName);
-    requireReallyMeCodecWasmProvider().requireSupportedMulticodec(codecName);
+    requireVoidProviderOutput(requireReallyMeCodecWasmProvider().requireSupportedMulticodec(codecName));
+};
+const requireVoidProviderOutput = (value) => {
+    if (value !== undefined) {
+        throw new ReallyMeCodecError("provider-failure");
+    }
 };

package/dist/operationContract.d.ts

@@ -3,9 +3,8 @@ import type { CodecOperationRequest, CodecOperationResult } from "./proto/genera
  * Execute one binary generated-protobuf request and return the fully
  * discriminated binary `CodecOperationResponse`.
  *
- * Oversized requests are rejected before the provider call. Malformed and
- * unsupported in-limit requests are represented by the response error oneof
- * rather than a boundary-local exception.
+ * Oversized and malformed requests are represented by the response error
+ * oneof. Caller-owned oversized bytes are not copied into WASM.
  */
 export declare const processOperation: (requestBytes: Uint8Array) => Uint8Array;
 /**