@reallyme/codec 0.2.3 → 0.3.0

package/NOTICE

@@ -1,5 +1,3 @@
-SPDX-FileCopyrightText: Copyright © 2026 ReallyMe LLC. All rights reserved
-
 ReallyMe Codec
 Copyright © 2026 ReallyMe LLC. All rights reserved.
 

package/README.md

@@ -1,7 +1,3 @@
-<!--
-SPDX-FileCopyrightText: Copyright © 2026 ReallyMe LLC. All rights reserved
--->
-
 # @reallyme/codec
 
 `@reallyme/codec` is the TypeScript package for the Rust `reallyme-codec`
@@ -37,13 +33,16 @@ const encoded = ReallyMeCodec.base64urlEncode(new Uint8Array([1, 2, 3]));
 const decoded = ReallyMeCodec.base64urlDecode(encoded);
 ```
 
+The installer accepts only this package's generated WASM module namespace.
+Initialize that module with the bundled `.wasm` file before installing it.
+
 ## Surface
 
 | Family | APIs |
 |---|---|
 | Base encodings | `base64Encode`, `base64Decode`, `base64urlEncode`, `base64urlDecode`, `base64urlDecodeBytes`, `bytesToLowerHex`, `lowerHexToBytes` |
 | Multiformats | `base58btcEncode`, `base58btcDecode`, `multibase*`, `multicodec*`, `multikey*`, binding validation |
-| Deterministic CBOR | typed `deterministicCborEncode` and `deterministicCborDecode` for the bounded RFC 8949 profile |
+| Deterministic CBOR | typed `deterministicCborEncode` and `deterministicCborDecode` for the bounded RFC 8949 §4.2.3 length-first profile |
 | DAG-CBOR and CID | `dagCborEncode`, `dagCborDecode`, `dagCborComputeCid`, `dagCborVerifyCid`, content hash and multihash helpers |
 | JCS | `canonicalizeJson`, `canonicalizeJsonText` |
 | PEM | wipeable `Uint8Array` armor through `encodePem`, `decodePem`, with strict label and size policy |
@@ -85,14 +84,23 @@ helpers; deterministic CBOR additionally supports integer-key maps and the
 complete documented `u64`/`i64` integer ranges. `Uint8Array` is the canonical
 mutable-byte boundary for browser, Node, and WASM callers. Pass ordinary
 `Uint8Array` views; subclasses (including Node `Buffer`), proxies, and overridden
-byte metadata or copy methods are rejected. Create a plain `Uint8Array` copy
+byte metadata are rejected. The facade copies bytes through captured prototype
+methods and does not invoke a caller-owned copy method. Create a plain `Uint8Array` copy
 when adapting other byte containers.
 
-JCS rejects duplicate properties, unpaired UTF-16 surrogates, and integer-valued
-numbers outside the exact JavaScript integer range. CID validation accepts
+JCS is a strict RFC 8785 subset. It rejects duplicate properties, unpaired
+UTF-16 surrogates, Unicode noncharacters, and integer-valued numbers outside
+the exact JavaScript integer range; this includes the RFC example `1e19`.
+CID validation accepts
 CIDv0 and supported multibase CIDv1 strings up to 1024 UTF-8 bytes; paths and
 trailing decoded bytes are rejected. CID computation uses DAG-CBOR/SHA-256
 CIDv1 in lowercase base32 and hashes the supplied bytes without parsing CBOR.
+CID verification validates one canonical DAG-CBOR block before comparing the
+CID and requires the supplied CID text to use that canonical lowercase base32
+form. `dagCborVerifyCid` returns a boolean; `dagCborVerifyCidDetails` returns
+the canonical CID diagnostics. Invalid DAG-CBOR returns a typed canonicalization
+error. IPLD links and floating-point values outside this package's closed
+DAG-CBOR model return `unsupported-ipld-value`.
 
 Encoded CBOR and decoded byte-string values can contain the complete sensitive
 document. Returned buffers belong to the caller and should be cleared with

package/dist/baseEncoding.js

@@ -1,19 +1,17 @@
-// SPDX-FileCopyrightText: Copyright © 2026 ReallyMe LLC. All rights reserved
+// SPDX-FileCopyrightText: 2026 ReallyMe LLC
 //
 // SPDX-License-Identifier: MIT OR Apache-2.0
-import { asciiBytesToString, ensureBytesInput, ensureStringValue, readBytesOutput, readStringOutput, } from "./readOutput.js";
+import { asciiBytesToString, ensureBytesInput, ensureStringValue, readBytesOutput, readStringOutput, withSnapshotBytesInput, } from "./readOutput.js";
 import { requireReallyMeCodecWasmProvider } from "./wasmProvider.js";
 export const base64Encode = (bytes) => {
-    ensureBytesInput(bytes);
-    return readStringOutput(requireReallyMeCodecWasmProvider().base64Encode(bytes));
+    return withSnapshotBytesInput(bytes, (snapshot) => readStringOutput(requireReallyMeCodecWasmProvider().base64Encode(snapshot)));
 };
 export const base64Decode = (encoded) => {
     ensureStringValue(encoded);
     return readBytesOutput(requireReallyMeCodecWasmProvider().base64Decode(encoded));
 };
 export const base64urlEncode = (bytes) => {
-    ensureBytesInput(bytes);
-    return readStringOutput(requireReallyMeCodecWasmProvider().base64urlEncode(bytes));
+    return withSnapshotBytesInput(bytes, (snapshot) => readStringOutput(requireReallyMeCodecWasmProvider().base64urlEncode(snapshot)));
 };
 export const base64urlDecode = (encoded) => {
     ensureStringValue(encoded);
@@ -24,8 +22,7 @@ export const base64urlDecodeBytes = (encoded) => {
     return base64urlDecode(asciiBytesToString(encoded));
 };
 export const bytesToLowerHex = (bytes) => {
-    ensureBytesInput(bytes);
-    return readStringOutput(requireReallyMeCodecWasmProvider().bytesToLowerHex(bytes));
+    return withSnapshotBytesInput(bytes, (snapshot) => readStringOutput(requireReallyMeCodecWasmProvider().bytesToLowerHex(snapshot)));
 };
 export const lowerHexToBytes = (encoded) => {
     ensureStringValue(encoded);

package/dist/boundary.js

@@ -1,4 +1,4 @@
-// SPDX-FileCopyrightText: Copyright © 2026 ReallyMe LLC. All rights reserved
+// SPDX-FileCopyrightText: 2026 ReallyMe LLC
 //
 // SPDX-License-Identifier: MIT OR Apache-2.0
 import { ReallyMeCodecError } from "./errors.js";

package/dist/cbor.d.ts

@@ -97,7 +97,11 @@ export declare const dagCborDecode: (bytes: Uint8Array) => ReallyMeCborValue;
 export declare const deterministicCborEncode: (value: unknown) => Uint8Array;
 export declare const deterministicCborDecode: (bytes: Uint8Array) => ReallyMeDeterministicCborValue;
 export declare const dagCborComputeCid: (bytes: Uint8Array) => string;
-export declare const dagCborVerifyCid: (cid: string, bytes: Uint8Array) => ReallyMeDagCborCidVerification;
+export declare const dagCborVerifyCidDetails: (cid: string, bytes: Uint8Array) => ReallyMeDagCborCidVerification;
+/** Verify one CID and return a boolean that is safe to use directly in a condition. */
+export declare const dagCborVerifyCid: (cid: string, bytes: Uint8Array) => boolean;
+/** Alias for callers that prefer an explicit comparison name. */
+export declare const dagCborCidMatches: typeof dagCborVerifyCid;
 export declare const dagCborSha256ContentHash: (bytes: Uint8Array) => Uint8Array;
 export declare const dagCborMultihash: (bytes: Uint8Array) => Uint8Array;
 export declare const isValidCidString: (cid: string) => boolean;

package/dist/cbor.js

@@ -1,4 +1,4 @@
-// SPDX-FileCopyrightText: Copyright © 2026 ReallyMe LLC. All rights reserved
+// SPDX-FileCopyrightText: 2026 ReallyMe LLC
 //
 // SPDX-License-Identifier: MIT OR Apache-2.0
 import { create } from "@bufbuild/protobuf";
@@ -7,7 +7,7 @@ import { DETERMINISTIC_CBOR_I64_MIN, DETERMINISTIC_CBOR_NEGATIVE_MAX, DETERMINIS
 import { ReallyMeCodecError } from "./errors.js";
 import { CodecDagCborDecodeRequestSchema, CodecDagCborEncodeRequestSchema, CodecDagCborVerifyCidRequestSchema, CodecDeterministicCborArraySchema, CodecDeterministicCborBoolSchema, CodecDeterministicCborBytesSchema, CodecDeterministicCborDecodeRequestSchema, CodecDeterministicCborEncodeRequestSchema, CodecDeterministicCborIntegerSchema, CodecDeterministicCborMapEntrySchema, CodecDeterministicCborMapKeySchema, CodecDeterministicCborMapSchema, CodecDeterministicCborNegativeIntegerSchema, CodecDeterministicCborNullSchema, CodecDeterministicCborTextSchema, CodecDeterministicCborUnsignedIntegerSchema, CodecDeterministicCborValueSchema, CodecOperationRequestSchema, } from "./proto/generated/reallyme/codec/v1/codec_pb.js";
 import { clearGeneratedOperationResult, processGeneratedOperationRequest, } from "./operationContract.js";
-import { ensureBytesInput, ensureStringValue, readBytesOutput, readStringOutput, readNumberOutput, } from "./readOutput.js";
+import { ensureBytesInput, ensureStringValue, readBytesOutput, readStringOutput, readNumberOutput, snapshotBoundedBytesInput, snapshotProviderBytes, } from "./readOutput.js";
 import { requireReallyMeCodecWasmProvider } from "./wasmProvider.js";
 export const ReallyMeDeterministicCbor = {
     null() {
@@ -39,7 +39,7 @@ export const ReallyMeDeterministicCbor = {
     },
     bytes(value) {
         ensureBytesInput(value);
-        return { type: "bytes", value: value.slice() };
+        return { type: "bytes", value: snapshotBoundedBytesInput(value) };
     },
     array(value) {
         return { type: "array", value: [...value] };
@@ -132,7 +132,7 @@ export const ReallyMeDagCbor = {
     },
     bytes(value) {
         ensureBytesInput(value);
-        return { type: "bytes", value: value.slice() };
+        return { type: "bytes", value: snapshotBoundedBytesInput(value) };
     },
     array(value) {
         return { type: "array", value: [...value] };
@@ -305,7 +305,7 @@ const validateCborValue = (value, depth = 0, seen = new WeakSet(), state = { nod
                     throw new ReallyMeCodecError("invalid-input");
                 }
                 state.byteStringBytes += child.length;
-                return { type: "bytes", value: child.slice() };
+                return { type: "bytes", value: snapshotBoundedBytesInput(child) };
             }
             case "array": {
                 const children = snapshotArray(readDataProperty(value, "value"), MAX_DETERMINISTIC_CBOR_NODES - state.nodes);
@@ -864,7 +864,7 @@ const deterministicCborValueFromProto = (value, depth, state) => {
             requireNoProviderUnknownFields(value.value.value);
             const bytes = value.value.value.value;
             state.byteStringBytes = consumeProviderDeterministicCborBudget(state.byteStringBytes, bytes.length, MAX_DETERMINISTIC_CBOR_AGGREGATE_BYTE_STRING_BYTES);
-            const copy = bytes.slice();
+            const copy = snapshotProviderBytes(bytes, MAX_DETERMINISTIC_CBOR_AGGREGATE_BYTE_STRING_BYTES);
             state.ownedBytes.push(copy);
             return { type: "bytes", value: copy };
         }
@@ -1011,7 +1011,7 @@ const dagCborValueToProto = (value) => {
                 },
             });
         case "bytes": {
-            const bytes = value.value.slice();
+            const bytes = snapshotDeterministicCborBytes(value.value, MAX_DETERMINISTIC_CBOR_AGGREGATE_BYTE_STRING_BYTES);
             try {
                 const bytesValue = create(CodecDeterministicCborBytesSchema, { value: bytes });
                 return create(CodecDeterministicCborValueSchema, {
@@ -1101,7 +1101,10 @@ const dagCborValueFromDeterministic = (value) => {
         case "text":
             return { type: "string", value: value.value };
         case "bytes":
-            return { type: "bytes", value: value.value.slice() };
+            return {
+                type: "bytes",
+                value: snapshotProviderBytes(value.value, MAX_DETERMINISTIC_CBOR_AGGREGATE_BYTE_STRING_BYTES),
+            };
         case "array": {
             const values = [];
             try {
@@ -1179,7 +1182,7 @@ export const dagCborEncode = (value) => {
                 result.encoded.length > maxDagCborInputLength) {
                 return providerFailure();
             }
-            return result.encoded.slice();
+            return snapshotProviderBytes(result.encoded, maxDagCborInputLength);
         }
         catch (error) {
             if (error instanceof ReallyMeCodecError) {
@@ -1265,7 +1268,7 @@ export const deterministicCborEncode = (value) => {
                 result.encoded.length > MAX_DETERMINISTIC_CBOR_OUTPUT_LEN) {
                 throw new ReallyMeCodecError("provider-failure");
             }
-            return result.encoded.slice();
+            return snapshotProviderBytes(result.encoded, MAX_DETERMINISTIC_CBOR_OUTPUT_LEN);
         }
         finally {
             result.encoded.fill(0);
@@ -1315,9 +1318,15 @@ export const deterministicCborDecode = (bytes) => {
 };
 export const dagCborComputeCid = (bytes) => {
     ensureBytesInput(bytes);
-    return readStringOutput(requireReallyMeCodecWasmProvider().dagCborComputeCid(bytes));
+    const snapshot = snapshotDeterministicCborBytes(bytes, maxDagCborInputLength);
+    try {
+        return readStringOutput(requireReallyMeCodecWasmProvider().dagCborComputeCid(snapshot));
+    }
+    finally {
+        snapshot.fill(0);
+    }
 };
-export const dagCborVerifyCid = (cid, bytes) => {
+export const dagCborVerifyCidDetails = (cid, bytes) => {
     ensureStringValue(cid);
     ensureBytesInput(bytes);
     const payloadSnapshot = snapshotDeterministicCborBytes(bytes, maxDagCborInputLength);
@@ -1339,6 +1348,10 @@ export const dagCborVerifyCid = (cid, bytes) => {
         payloadSnapshot.fill(0);
     }
 };
+/** Verify one CID and return a boolean that is safe to use directly in a condition. */
+export const dagCborVerifyCid = (cid, bytes) => dagCborVerifyCidDetails(cid, bytes).valid;
+/** Alias for callers that prefer an explicit comparison name. */
+export const dagCborCidMatches = dagCborVerifyCid;
 const dagCborVerifyCidRequest = (cid, bytes) => create(CodecOperationRequestSchema, {
     operation: {
         case: "dagCborVerifyCid",
@@ -1350,11 +1363,23 @@ const dagCborVerifyCidRequest = (cid, bytes) => create(CodecOperationRequestSche
 });
 export const dagCborSha256ContentHash = (bytes) => {
     ensureBytesInput(bytes);
-    return readBytesOutput(requireReallyMeCodecWasmProvider().dagCborSha256ContentHash(bytes));
+    const snapshot = snapshotDeterministicCborBytes(bytes, maxDagCborInputLength);
+    try {
+        return readBytesOutput(requireReallyMeCodecWasmProvider().dagCborSha256ContentHash(snapshot));
+    }
+    finally {
+        snapshot.fill(0);
+    }
 };
 export const dagCborMultihash = (bytes) => {
     ensureBytesInput(bytes);
-    return readBytesOutput(requireReallyMeCodecWasmProvider().dagCborMultihash(bytes));
+    const snapshot = snapshotDeterministicCborBytes(bytes, maxDagCborInputLength);
+    try {
+        return readBytesOutput(requireReallyMeCodecWasmProvider().dagCborMultihash(snapshot));
+    }
+    finally {
+        snapshot.fill(0);
+    }
 };
 export const isValidCidString = (cid) => {
     ensureStringValue(cid);
@@ -1365,11 +1390,19 @@ export const isValidCidString = (cid) => {
     return value;
 };
 export const tryParseCid = (cid) => {
-    ensureStringValue(cid);
-    const value = requireReallyMeCodecWasmProvider().tryParseCid(cid);
-    if (value === undefined) {
-        return undefined;
+    try {
+        ensureStringValue(cid);
+        const value = requireReallyMeCodecWasmProvider().tryParseCid(cid);
+        if (value === undefined) {
+            return undefined;
+        }
+        return readStringOutput(value);
+    }
+    catch (error) {
+        if (error instanceof ReallyMeCodecError && error.code === "invalid-input") {
+            return undefined;
+        }
+        throw error;
     }
-    return readStringOutput(value);
 };
 export const dagCborCodecCode = () => readNumberOutput(requireReallyMeCodecWasmProvider().dagCborCodecCode());

package/dist/deterministicCborBoundary.d.ts

@@ -5,7 +5,7 @@ export declare const MAX_DETERMINISTIC_CBOR_NODES = 65536;
 export declare const MAX_DETERMINISTIC_CBOR_CONTAINER_ENTRIES = 16384;
 export declare const MAX_DETERMINISTIC_CBOR_AGGREGATE_TEXT_BYTES = 1048576;
 export declare const MAX_DETERMINISTIC_CBOR_AGGREGATE_BYTE_STRING_BYTES = 1048576;
-export declare const MAX_DETERMINISTIC_CBOR_PROTO_RECURSION_DEPTH: number;
+export declare const MAX_DETERMINISTIC_CBOR_PROTO_RECURSION_DEPTH = 198;
 export declare const DETERMINISTIC_CBOR_U64_MAX: bigint;
 export declare const DETERMINISTIC_CBOR_I64_MIN: bigint;
 export declare const DETERMINISTIC_CBOR_NEGATIVE_MAX = -1n;

package/dist/deterministicCborBoundary.js

@@ -1,4 +1,4 @@
-// SPDX-FileCopyrightText: Copyright © 2026 ReallyMe LLC. All rights reserved
+// SPDX-FileCopyrightText: 2026 ReallyMe LLC
 //
 // SPDX-License-Identifier: MIT OR Apache-2.0
 export const MAX_DETERMINISTIC_CBOR_INPUT_LEN = 1_048_576;
@@ -9,9 +9,9 @@ export const MAX_DETERMINISTIC_CBOR_CONTAINER_ENTRIES = 16_384;
 export const MAX_DETERMINISTIC_CBOR_AGGREGATE_TEXT_BYTES = 1_048_576;
 export const MAX_DETERMINISTIC_CBOR_AGGREGATE_BYTE_STRING_BYTES = 1_048_576;
 // A nested map expands to Value -> Map -> MapEntry on the protobuf wire. The
-// five additional layers cover the result/request and deepest scalar wrapper.
-// Buf's default recursion limit of 100 cannot represent semantic depth 64.
-export const MAX_DETERMINISTIC_CBOR_PROTO_RECURSION_DEPTH = MAX_DETERMINISTIC_CBOR_NESTING_DEPTH * 3 + 5;
+// protobuf-es counts the root message in addition to the wire's five outer
+// layers. Depth 64 maps therefore require one more level than Buffa.
+export const MAX_DETERMINISTIC_CBOR_PROTO_RECURSION_DEPTH = 198;
 export const DETERMINISTIC_CBOR_U64_MAX = (1n << 64n) - 1n;
 export const DETERMINISTIC_CBOR_I64_MIN = -(1n << 63n);
 export const DETERMINISTIC_CBOR_NEGATIVE_MAX = -1n;

package/dist/errors.d.ts

@@ -2,7 +2,7 @@
  * Typed codec error codes. Errors intentionally carry no raw input bytes so
  * callers can log them without leaking request payloads.
  */
-export type ReallyMeCodecErrorCode = "invalid-input" | "non-canonical" | "provider-failure" | "unsupported-codec";
+export type ReallyMeCodecErrorCode = "invalid-input" | "non-canonical" | "provider-failure" | "unsupported-codec" | "unsupported-ipld-value";
 export declare class ReallyMeCodecError extends Error {
     readonly code: ReallyMeCodecErrorCode;
     constructor(code: ReallyMeCodecErrorCode);

package/dist/errors.js

@@ -1,4 +1,4 @@
-// SPDX-FileCopyrightText: Copyright © 2026 ReallyMe LLC. All rights reserved
+// SPDX-FileCopyrightText: 2026 ReallyMe LLC
 //
 // SPDX-License-Identifier: MIT OR Apache-2.0
 export class ReallyMeCodecError extends Error {

package/dist/index.d.ts

@@ -3,16 +3,16 @@ export type { ReallyMeCodecErrorCode } from "./errors.js";
 export { base64Decode, base64Encode, base64urlDecode, base64urlDecodeBytes, base64urlEncode, bytesToLowerHex, lowerHexToBytes, } from "./baseEncoding.js";
 export { base58btcDecode, base58btcEncode, bindingTypeMatchesCodec, multibaseBase58btcEncode, multibaseBase64urlEncode, multibaseDecode, multicodecLookupPrefix, multicodecPrefixForName, multicodecStripPrefix, multicodecTable, multikeyEncode, multikeyParse, requireSupportedMulticodec, validateKeyBinding, } from "./multiformat.js";
 export type { ReallyMeKeyMaterialKind, ReallyMeMulticodecLookupResult, ReallyMeMulticodecMetadata, ReallyMeMulticodecTable, ReallyMeMulticodecTag, ReallyMeParsedMultikey, } from "./multiformat.js";
-export { dagCborCodecCode, dagCborComputeCid, dagCborDecode, dagCborEncode, dagCborMultihash, dagCborSha256ContentHash, dagCborVerifyCid, deterministicCborDecode, deterministicCborEncode, isValidCidString, ReallyMeDagCbor, ReallyMeDeterministicCbor, tryParseCid, } from "./cbor.js";
+export { dagCborCodecCode, dagCborCidMatches, dagCborComputeCid, dagCborDecode, dagCborEncode, dagCborMultihash, dagCborSha256ContentHash, dagCborVerifyCid, dagCborVerifyCidDetails, deterministicCborDecode, deterministicCborEncode, isValidCidString, ReallyMeDagCbor, ReallyMeDeterministicCbor, tryParseCid, } from "./cbor.js";
 export type { ReallyMeDeterministicCborInteger, ReallyMeDeterministicCborMapEntry, ReallyMeDeterministicCborMapKey, ReallyMeDeterministicCborValue, ReallyMeCborMapEntry, ReallyMeCborValue, ReallyMeDagCborCidVerification, } from "./cbor.js";
 export { canonicalizeJson, canonicalizeJsonText } from "./jcs.js";
 export { decodePem, encodePem } from "./pem.js";
 export { processOperation, processOperationJson } from "./operationContract.js";
 export type { ReallyMePemDecodePolicy, ReallyMePemDocument, ReallyMePemEncodeOptions, ReallyMePemLabel, ReallyMePemLineEnding, } from "./pem.js";
-export { REALLYME_CODEC_WASM_EXPORTS, installReallyMeCodecWasmProvider, requireReallyMeCodecWasmProvider, } from "./wasmProvider.js";
+export { REALLYME_CODEC_WASM_EXPORTS, installReallyMeCodecWasmProvider, } from "./wasmProvider.js";
 export type { ReallyMeCodecWasmProvider } from "./wasmProvider.js";
 import { base64Decode, base64Encode, base64urlDecode, base64urlDecodeBytes, base64urlEncode, bytesToLowerHex, lowerHexToBytes } from "./baseEncoding.js";
-import { dagCborCodecCode, dagCborComputeCid, dagCborDecode, dagCborEncode, dagCborMultihash, dagCborSha256ContentHash, dagCborVerifyCid, deterministicCborDecode, deterministicCborEncode, isValidCidString, tryParseCid } from "./cbor.js";
+import { dagCborCodecCode, dagCborComputeCid, dagCborDecode, dagCborEncode, dagCborMultihash, dagCborSha256ContentHash, dagCborVerifyCid, dagCborVerifyCidDetails, deterministicCborDecode, deterministicCborEncode, isValidCidString, tryParseCid } from "./cbor.js";
 import { canonicalizeJson, canonicalizeJsonText } from "./jcs.js";
 import { base58btcDecode, base58btcEncode, bindingTypeMatchesCodec, multibaseBase58btcEncode, multibaseBase64urlEncode, multibaseDecode, multicodecLookupPrefix, multicodecPrefixForName, multicodecStripPrefix, multicodecTable, multikeyEncode, multikeyParse, requireSupportedMulticodec, validateKeyBinding } from "./multiformat.js";
 import { decodePem, encodePem } from "./pem.js";
@@ -40,12 +40,14 @@ export declare const ReallyMeCodec: {
     readonly requireSupportedMulticodec: typeof requireSupportedMulticodec;
     readonly validateKeyBinding: typeof validateKeyBinding;
     readonly dagCborCodecCode: typeof dagCborCodecCode;
+    readonly dagCborCidMatches: typeof dagCborVerifyCid;
     readonly dagCborComputeCid: typeof dagCborComputeCid;
     readonly dagCborDecode: typeof dagCborDecode;
     readonly dagCborEncode: typeof dagCborEncode;
     readonly dagCborMultihash: typeof dagCborMultihash;
     readonly dagCborSha256ContentHash: typeof dagCborSha256ContentHash;
     readonly dagCborVerifyCid: typeof dagCborVerifyCid;
+    readonly dagCborVerifyCidDetails: typeof dagCborVerifyCidDetails;
     readonly deterministicCborDecode: typeof deterministicCborDecode;
     readonly deterministicCborEncode: typeof deterministicCborEncode;
     readonly isValidCidString: typeof isValidCidString;

package/dist/index.js

@@ -1,16 +1,16 @@
-// SPDX-FileCopyrightText: Copyright © 2026 ReallyMe LLC. All rights reserved
+// SPDX-FileCopyrightText: 2026 ReallyMe LLC
 //
 // SPDX-License-Identifier: MIT OR Apache-2.0
 export { ReallyMeCodecError } from "./errors.js";
 export { base64Decode, base64Encode, base64urlDecode, base64urlDecodeBytes, base64urlEncode, bytesToLowerHex, lowerHexToBytes, } from "./baseEncoding.js";
 export { base58btcDecode, base58btcEncode, bindingTypeMatchesCodec, multibaseBase58btcEncode, multibaseBase64urlEncode, multibaseDecode, multicodecLookupPrefix, multicodecPrefixForName, multicodecStripPrefix, multicodecTable, multikeyEncode, multikeyParse, requireSupportedMulticodec, validateKeyBinding, } from "./multiformat.js";
-export { dagCborCodecCode, dagCborComputeCid, dagCborDecode, dagCborEncode, dagCborMultihash, dagCborSha256ContentHash, dagCborVerifyCid, deterministicCborDecode, deterministicCborEncode, isValidCidString, ReallyMeDagCbor, ReallyMeDeterministicCbor, tryParseCid, } from "./cbor.js";
+export { dagCborCodecCode, dagCborCidMatches, dagCborComputeCid, dagCborDecode, dagCborEncode, dagCborMultihash, dagCborSha256ContentHash, dagCborVerifyCid, dagCborVerifyCidDetails, deterministicCborDecode, deterministicCborEncode, isValidCidString, ReallyMeDagCbor, ReallyMeDeterministicCbor, tryParseCid, } from "./cbor.js";
 export { canonicalizeJson, canonicalizeJsonText } from "./jcs.js";
 export { decodePem, encodePem } from "./pem.js";
 export { processOperation, processOperationJson } from "./operationContract.js";
-export { REALLYME_CODEC_WASM_EXPORTS, installReallyMeCodecWasmProvider, requireReallyMeCodecWasmProvider, } from "./wasmProvider.js";
+export { REALLYME_CODEC_WASM_EXPORTS, installReallyMeCodecWasmProvider, } from "./wasmProvider.js";
 import { base64Decode, base64Encode, base64urlDecode, base64urlDecodeBytes, base64urlEncode, bytesToLowerHex, lowerHexToBytes, } from "./baseEncoding.js";
-import { dagCborCodecCode, dagCborComputeCid, dagCborDecode, dagCborEncode, dagCborMultihash, dagCborSha256ContentHash, dagCborVerifyCid, deterministicCborDecode, deterministicCborEncode, isValidCidString, ReallyMeDagCbor, ReallyMeDeterministicCbor, tryParseCid, } from "./cbor.js";
+import { dagCborCodecCode, dagCborCidMatches, dagCborComputeCid, dagCborDecode, dagCborEncode, dagCborMultihash, dagCborSha256ContentHash, dagCborVerifyCid, dagCborVerifyCidDetails, deterministicCborDecode, deterministicCborEncode, isValidCidString, ReallyMeDagCbor, ReallyMeDeterministicCbor, tryParseCid, } from "./cbor.js";
 import { canonicalizeJson, canonicalizeJsonText } from "./jcs.js";
 import { base58btcDecode, base58btcEncode, bindingTypeMatchesCodec, multibaseBase58btcEncode, multibaseBase64urlEncode, multibaseDecode, multicodecLookupPrefix, multicodecPrefixForName, multicodecStripPrefix, multicodecTable, multikeyEncode, multikeyParse, requireSupportedMulticodec, validateKeyBinding, } from "./multiformat.js";
 import { decodePem, encodePem } from "./pem.js";
@@ -38,12 +38,14 @@ export const ReallyMeCodec = {
     requireSupportedMulticodec,
     validateKeyBinding,
     dagCborCodecCode,
+    dagCborCidMatches,
     dagCborComputeCid,
     dagCborDecode,
     dagCborEncode,
     dagCborMultihash,
     dagCborSha256ContentHash,
     dagCborVerifyCid,
+    dagCborVerifyCidDetails,
     deterministicCborDecode,
     deterministicCborEncode,
     isValidCidString,

package/dist/jcs.js

@@ -1,4 +1,4 @@
-// SPDX-FileCopyrightText: Copyright © 2026 ReallyMe LLC. All rights reserved
+// SPDX-FileCopyrightText: 2026 ReallyMe LLC
 //
 // SPDX-License-Identifier: MIT OR Apache-2.0
 import { requireBoundaryUtf8String, stringifyBoundaryJson } from "./boundary.js";

package/dist/multiformat.js

@@ -1,11 +1,11 @@
-// SPDX-FileCopyrightText: Copyright © 2026 ReallyMe LLC. All rights reserved
+// SPDX-FileCopyrightText: 2026 ReallyMe LLC
 //
 // SPDX-License-Identifier: MIT OR Apache-2.0
 import { create } from "@bufbuild/protobuf";
 import { ReallyMeCodecError } from "./errors.js";
 import { CodecMulticodecLookupPrefixRequestSchema, CodecMulticodecPrefixForNameRequestSchema, CodecMulticodecTableRequestSchema, CodecMultikeyParseRequestSchema, CodecOperationRequestSchema, CodecKeyMaterialKind, CodecTag, } from "./proto/generated/reallyme/codec/v1/codec_pb.js";
 import { clearGeneratedOperationResult, processGeneratedOperationRequest, } from "./operationContract.js";
-import { ensureBytesInput, ensureStringInput, ensureStringValue, readBooleanOutput, readBytesOutput, readStringOutput, snapshotBoundedBytesInput, } from "./readOutput.js";
+import { ensureBytesInput, ensureStringInput, ensureStringValue, readBooleanOutput, readBytesOutput, readStringOutput, snapshotBoundedBytesInput, snapshotProviderBytes, withSnapshotBytesInput, } from "./readOutput.js";
 import { requireReallyMeCodecWasmProvider } from "./wasmProvider.js";
 const MAX_MULTICODEC_TABLE_ENTRIES = 1_024;
 const requireNoProviderUnknownFields = (message) => {
@@ -52,7 +52,7 @@ const readMulticodecMetadata = (value) => {
         alg: value.algorithmName,
         tag: sdkTag(value.tag),
         keyMaterial: sdkKeyMaterial(value.keyMaterialKind),
-        prefix: value.prefix.slice(),
+        prefix: snapshotProviderBytes(value.prefix),
     };
     if (value.variableLength || value.fixedLength === 0) {
         return metadata;
@@ -65,20 +65,17 @@ const validateMulticodecMetadata = (value) => {
     sdkKeyMaterial(value.keyMaterialKind);
 };
 export const base58btcEncode = (bytes) => {
-    ensureBytesInput(bytes);
-    return readStringOutput(requireReallyMeCodecWasmProvider().base58btcEncode(bytes));
+    return withSnapshotBytesInput(bytes, (snapshot) => readStringOutput(requireReallyMeCodecWasmProvider().base58btcEncode(snapshot)));
 };
 export const base58btcDecode = (encoded) => {
     ensureStringValue(encoded);
     return readBytesOutput(requireReallyMeCodecWasmProvider().base58btcDecode(encoded));
 };
 export const multibaseBase64urlEncode = (bytes) => {
-    ensureBytesInput(bytes);
-    return readStringOutput(requireReallyMeCodecWasmProvider().multibaseBase64urlEncode(bytes));
+    return withSnapshotBytesInput(bytes, (snapshot) => readStringOutput(requireReallyMeCodecWasmProvider().multibaseBase64urlEncode(snapshot)));
 };
 export const multibaseBase58btcEncode = (bytes) => {
-    ensureBytesInput(bytes);
-    return readStringOutput(requireReallyMeCodecWasmProvider().multibaseBase58btcEncode(bytes));
+    return withSnapshotBytesInput(bytes, (snapshot) => readStringOutput(requireReallyMeCodecWasmProvider().multibaseBase58btcEncode(snapshot)));
 };
 export const multibaseDecode = (encoded) => {
     ensureStringInput(encoded);
@@ -144,8 +141,7 @@ const multicodecLookupPrefixRequest = (bytes) => create(CodecOperationRequestSch
     },
 });
 export const multicodecStripPrefix = (bytes) => {
-    ensureBytesInput(bytes);
-    return readBytesOutput(requireReallyMeCodecWasmProvider().multicodecStripPrefix(bytes));
+    return withSnapshotBytesInput(bytes, (snapshot) => readBytesOutput(requireReallyMeCodecWasmProvider().multicodecStripPrefix(snapshot)));
 };
 export const multicodecTable = () => {
     const operationResult = processGeneratedOperationRequest(multicodecTableRequest());
@@ -181,8 +177,7 @@ const multicodecTableRequest = () => create(CodecOperationRequestSchema, {
 });
 export const multikeyEncode = (codecName, publicKey) => {
     ensureStringInput(codecName);
-    ensureBytesInput(publicKey);
-    return readStringOutput(requireReallyMeCodecWasmProvider().multikeyEncode(codecName, publicKey));
+    return withSnapshotBytesInput(publicKey, (snapshot) => readStringOutput(requireReallyMeCodecWasmProvider().multikeyEncode(codecName, snapshot)));
 };
 export const multikeyParse = (multikey) => {
     ensureStringInput(multikey);
@@ -197,7 +192,7 @@ export const multikeyParse = (multikey) => {
         const parsed = {
             codecName: result.codecName,
             algorithmName: result.algorithmName,
-            publicKey: result.publicKey.slice(),
+            publicKey: snapshotProviderBytes(result.publicKey),
         };
         if (result.variablePublicKeyLength || result.expectedPublicKeyLength === 0) {
             return parsed;
@@ -225,9 +220,14 @@ export const validateKeyBinding = (bindingType, algorithm, multikey) => {
         ensureStringInput(algorithm);
     }
     ensureStringInput(multikey);
-    requireReallyMeCodecWasmProvider().validateKeyBinding(bindingType, algorithm, multikey);
+    requireVoidProviderOutput(requireReallyMeCodecWasmProvider().validateKeyBinding(bindingType, algorithm, multikey));
 };
 export const requireSupportedMulticodec = (codecName) => {
     ensureStringInput(codecName);
-    requireReallyMeCodecWasmProvider().requireSupportedMulticodec(codecName);
+    requireVoidProviderOutput(requireReallyMeCodecWasmProvider().requireSupportedMulticodec(codecName));
+};
+const requireVoidProviderOutput = (value) => {
+    if (value !== undefined) {
+        throw new ReallyMeCodecError("provider-failure");
+    }
 };

package/dist/operationContract.d.ts

@@ -3,9 +3,8 @@ import type { CodecOperationRequest, CodecOperationResult } from "./proto/genera
  * Execute one binary generated-protobuf request and return the fully
  * discriminated binary `CodecOperationResponse`.
  *
- * Oversized requests are rejected before the provider call. Malformed and
- * unsupported in-limit requests are represented by the response error oneof
- * rather than a boundary-local exception.
+ * Oversized and malformed requests are represented by the response error
+ * oneof. Caller-owned oversized bytes are not copied into WASM.
  */
 export declare const processOperation: (requestBytes: Uint8Array) => Uint8Array;
 /**