@spottoai/types-package 1.0.2-beta.360 → 1.0.2-beta.361

package/dist/common/artifactControlData.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"artifactControlData.d.ts","sourceRoot":"","sources":["../../src/common/artifactControlData.ts"],"names":[],"mappings":"AA+CA,MAAM,WAAW,6BAA6B;IAC5C,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,GAAG,EAAE,MAAM,CAAC;IACZ,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAiCD,2FAA2F;AAC3F,eAAO,MAAM,6BAA6B,GAAI,QAAQ,OAAO,EAAE,KAAK,MAAM,KAAG,6BAA6B,EAC/D,CAAC;AAE5C,iGAAiG;AACjG,eAAO,MAAM,4BAA4B,GAAI,QAAQ,OAAO,EAAE,KAAK,MAAM,KAAG,6BAA6B,EACxC,CAAC;AAElE,iGAAiG;AACjG,eAAO,MAAM,oCAAoC,GAAI,OAAO,OAAO,EAAE,yBAAwB,6BAA6B,EAAO,KAAG,OAenI,CAAC"}
+{"version":3,"file":"artifactControlData.d.ts","sourceRoot":"","sources":["../../src/common/artifactControlData.ts"],"names":[],"mappings":"AAgDA,eAAO,MAAM,uCAAuC,SAAU,CAAC;AAE/D,MAAM,WAAW,6BAA6B;IAC5C,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,GAAG,EAAE,MAAM,CAAC;IACZ,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,2BAA2B,CAAC,EAAE,OAAO,CAAC;IACtC,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,wBAAwB,CAAC,EAAE,OAAO,CAAC;CACpC;AAED,UAAU,+BAA+B;IACvC,sBAAsB,CAAC,EAAE,OAAO,CAAC;IACjC,2BAA2B,CAAC,EAAE,OAAO,CAAC;IACtC,sBAAsB,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAC7C,mCAAmC,CAAC,EAAE,OAAO,CAAC;CAC/C;AAkCD,2FAA2F;AAC3F,eAAO,MAAM,6BAA6B,GAAI,QAAQ,OAAO,EAAE,KAAK,MAAM,KAAG,6BAA6B,EAC/D,CAAC;AAE5C,iGAAiG;AACjG,eAAO,MAAM,4BAA4B,GAAI,QAAQ,OAAO,EAAE,KAAK,MAAM,KAAG,6BAA6B,EACxC,CAAC;AAElE,4FAA4F;AAC5F,eAAO,MAAM,6BAA6B,GAAI,QAAQ,OAAO,EAAE,KAAK,MAAM,KAAG,6BAA6B,EAC/B,CAAC;AAoI5E,sGAAsG;AACtG,eAAO,MAAM,oCAAoC,GAC/C,OAAO,OAAO,EACd,yBAAwB,6BAA6B,EAAO,EAC5D,UAAS,+BAAoC,KAC5C,OAA4H,CAAC"}

package/dist/common/artifactControlData.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.containsForbiddenArtifactControlData = exports.allowedArtifactIdentityField = exports.allowedArtifactReferenceField = void 0;
+exports.containsForbiddenArtifactControlData = exports.allowedArtifactTraversalField = exports.allowedArtifactIdentityField = exports.allowedArtifactReferenceField = exports.ARTIFACT_CONTROL_DATA_MAX_VISITED_NODES = void 0;
 const FORBIDDEN_SENSITIVE_FIELDS = new Set([
     'accountkey',
     'accesskey',
@@ -18,6 +18,7 @@ const FORBIDDEN_SENSITIVE_FIELDS = new Set([
     'sharedaccesssignature',
     'token',
 ]);
+const FORBIDDEN_PROTOTYPE_FIELDS = new Set(['proto', 'prototype', 'constructor']);
 const PHYSICAL_REFERENCE_FIELDS = new Set([
     'artifactpath',
     'blobpath',
@@ -46,13 +47,16 @@ const PHYSICAL_REFERENCE_FIELDS = new Set([
 ]);
 const PERCENT_ENCODED_BYTE_PATTERN = /%[0-9A-Fa-f]{2}/;
 const URI_SCHEME_PATTERN = /^[A-Za-z][A-Za-z0-9+.-]*:/;
+const SHA256_PATTERN = /^[0-9A-Fa-f]{64}$/;
+exports.ARTIFACT_CONTROL_DATA_MAX_VISITED_NODES = 100000;
 const isRecord = (value) => typeof value === 'object' && value !== null && !Array.isArray(value);
 const hasControlCharacters = (value) => Array.from(value).some(character => character.charCodeAt(0) < 32 || character.charCodeAt(0) === 127);
 const normalizeFieldName = (key) => key.replace(/[-_\s]/g, '').toLowerCase();
 const hasDotTraversal = (value) => value.split(/[\\/]/).some(segment => segment === '.' || segment === '..');
-const isForbiddenReferenceValue = (value, allowUriScheme = false) => hasControlCharacters(value) ||
+const isForbiddenReferenceValue = (value, allowUriScheme = false, allowDigestLike = false, rejectDigestLikeValues = false) => hasControlCharacters(value) ||
     PERCENT_ENCODED_BYTE_PATTERN.test(value) ||
     (!allowUriScheme && URI_SCHEME_PATTERN.test(value)) ||
+    (rejectDigestLikeValues && !allowDigestLike && SHA256_PATTERN.test(value)) ||
     value.startsWith('/') ||
     value.startsWith('\\\\') ||
     /^[A-Za-z]:[\\/]/.test(value) ||
@@ -74,29 +78,131 @@ exports.allowedArtifactReferenceField = allowedArtifactReferenceField;
 /** Marks a structurally validated identity field whose value is allowed by its owning schema. */
 const allowedArtifactIdentityField = (object, key) => isRecord(object) ? [{ object, key, allowUriScheme: true }] : [];
 exports.allowedArtifactIdentityField = allowedArtifactIdentityField;
-/** Rejects exact normalized sensitive fields and physical-reference control data recursively. */
-const containsForbiddenArtifactControlData = (value, allowedReferenceFields = []) => {
-    if (typeof value === 'string')
-        return isForbiddenReferenceValue(value);
-    if (Array.isArray(value))
-        return value.some(child => (0, exports.containsForbiddenArtifactControlData)(child, allowedReferenceFields));
-    if (!isRecord(value))
-        return false;
-    return Object.entries(value).some(([key, child]) => {
-        if (hasControlCharacters(key))
-            return true;
-        const normalizedKey = normalizeFieldName(key);
-        if (FORBIDDEN_SENSITIVE_FIELDS.has(normalizedKey))
+/** Marks an exact schema edge whose descendants may use object-indexed field allowances. */
+const allowedArtifactTraversalField = (object, key) => isRecord(object) ? [{ object, key, allowChildArtifactFields: true }] : [];
+exports.allowedArtifactTraversalField = allowedArtifactTraversalField;
+const indexAllowedArtifactFields = (allowedReferenceFields) => {
+    const index = new WeakMap();
+    for (const field of allowedReferenceFields) {
+        let objectFields = index.get(field.object);
+        if (!objectFields) {
+            objectFields = new Map();
+            index.set(field.object, objectFields);
+        }
+        const existing = objectFields.get(field.key);
+        objectFields.set(field.key, {
+            object: field.object,
+            key: field.key,
+            allowUriScheme: existing?.allowUriScheme || field.allowUriScheme,
+            allowUriSchemeInStringArray: existing?.allowUriSchemeInStringArray || field.allowUriSchemeInStringArray,
+            allowDigestLike: existing?.allowDigestLike || field.allowDigestLike,
+            allowControlField: existing?.allowControlField || field.allowControlField,
+            allowChildArtifactFields: existing?.allowChildArtifactFields || field.allowChildArtifactFields,
+        });
+    }
+    return index;
+};
+const containsForbiddenArtifactControlDataWithIndex = (value, allowedReferenceFields, options) => {
+    const pending = [{ kind: 'visit', value, allowIndexedFields: true }];
+    const activeContainers = new WeakSet();
+    const completedScanPolicies = new WeakMap();
+    let visitedNodeCount = 0;
+    const hasCompletedStricterScan = (container, scanPolicy) => completedScanPolicies.get(container)?.some(completedPolicy => (completedPolicy & scanPolicy) === completedPolicy) ?? false;
+    const completeScan = (container, scanPolicy) => {
+        const completedPolicies = completedScanPolicies.get(container) ?? [];
+        if (completedPolicies.some(completedPolicy => (completedPolicy & scanPolicy) === completedPolicy))
+            return;
+        completedScanPolicies.set(container, [...completedPolicies.filter(completedPolicy => (scanPolicy & completedPolicy) !== scanPolicy), scanPolicy]);
+    };
+    while (pending.length > 0) {
+        const candidate = pending.pop();
+        if (candidate.kind === 'leave') {
+            activeContainers.delete(candidate.container);
+            completeScan(candidate.container, candidate.scanPolicy);
+            continue;
+        }
+        if (typeof candidate.value === 'string') {
+            if (isForbiddenReferenceValue(candidate.value, false, false, options.rejectDigestLikeValues))
+                return true;
+            continue;
+        }
+        if (Array.isArray(candidate.value)) {
+            visitedNodeCount += 1;
+            if (visitedNodeCount > exports.ARTIFACT_CONTROL_DATA_MAX_VISITED_NODES)
+                return true;
+            if (activeContainers.has(candidate.value))
+                return true;
+            const scanPolicy = (candidate.allowIndexedFields ? 1 : 0) |
+                (candidate.allowedStringArrayField ? 2 : 0) |
+                (candidate.allowedStringArrayField?.allowDigestLike ? 4 : 0);
+            if (hasCompletedStricterScan(candidate.value, scanPolicy))
+                continue;
+            activeContainers.add(candidate.value);
+            pending.push({ kind: 'leave', container: candidate.value, scanPolicy });
+            for (let index = candidate.value.length - 1; index >= 0; index -= 1) {
+                const child = candidate.value[index];
+                if (candidate.allowedStringArrayField && typeof child === 'string') {
+                    if (isForbiddenReferenceValue(child, true, candidate.allowedStringArrayField.allowDigestLike, options.rejectDigestLikeValues)) {
+                        return true;
+                    }
+                }
+                else {
+                    pending.push({ kind: 'visit', value: child, allowIndexedFields: candidate.allowIndexedFields });
+                }
+            }
+            continue;
+        }
+        if (!isRecord(candidate.value))
+            continue;
+        visitedNodeCount += 1;
+        if (visitedNodeCount > exports.ARTIFACT_CONTROL_DATA_MAX_VISITED_NODES)
             return true;
-        const allowedField = allowedReferenceFields.find(field => field.object === value && field.key === key);
-        if (allowedField?.allowUriScheme && typeof child === 'string')
-            return isForbiddenReferenceValue(child, true);
-        if (PHYSICAL_REFERENCE_FIELDS.has(normalizedKey) && !allowedField)
+        if (activeContainers.has(candidate.value))
             return true;
-        if (isSafeAzureResourceId(key, child))
-            return false;
-        return (0, exports.containsForbiddenArtifactControlData)(child, allowedReferenceFields);
-    });
+        const scanPolicy = candidate.allowIndexedFields ? 1 : 0;
+        if (hasCompletedStricterScan(candidate.value, scanPolicy))
+            continue;
+        activeContainers.add(candidate.value);
+        pending.push({ kind: 'leave', container: candidate.value, scanPolicy });
+        for (const [key, child] of Object.entries(candidate.value)) {
+            if (hasControlCharacters(key))
+                return true;
+            const normalizedKey = normalizeFieldName(key);
+            if (FORBIDDEN_PROTOTYPE_FIELDS.has(normalizedKey))
+                return true;
+            if (FORBIDDEN_SENSITIVE_FIELDS.has(normalizedKey))
+                return true;
+            const allowedField = candidate.allowIndexedFields ? allowedReferenceFields.get(candidate.value)?.get(key) : undefined;
+            if (options.forbiddenControlFields?.has(normalizedKey) && !allowedField?.allowControlField)
+                return true;
+            if (options.requireSafeAzureResourceIds && normalizedKey === 'resourceid') {
+                if (!isSafeAzureResourceId(key, child))
+                    return true;
+                continue;
+            }
+            if (allowedField && typeof child === 'string' && (allowedField.allowUriScheme || allowedField.allowDigestLike)) {
+                if (isForbiddenReferenceValue(child, allowedField.allowUriScheme, allowedField.allowDigestLike, options.rejectDigestLikeValues))
+                    return true;
+                continue;
+            }
+            if (allowedField?.allowUriSchemeInStringArray && Array.isArray(child)) {
+                pending.push({ kind: 'visit', value: child, allowedStringArrayField: allowedField });
+                continue;
+            }
+            if (PHYSICAL_REFERENCE_FIELDS.has(normalizedKey) && !allowedField)
+                return true;
+            if (isSafeAzureResourceId(key, child))
+                continue;
+            pending.push({
+                kind: 'visit',
+                value: child,
+                allowIndexedFields: !options.requireAllowedFieldTraversalContext || Boolean(candidate.allowIndexedFields && allowedField?.allowChildArtifactFields),
+            });
+        }
+    }
+    return false;
 };
+/** Rejects normalized sensitive fields and physical-reference control data with bounded traversal. */
+const containsForbiddenArtifactControlData = (value, allowedReferenceFields = [], options = {}) => containsForbiddenArtifactControlDataWithIndex(value, indexAllowedArtifactFields(allowedReferenceFields), options);
 exports.containsForbiddenArtifactControlData = containsForbiddenArtifactControlData;
 //# sourceMappingURL=artifactControlData.js.map

package/dist/common/artifactControlData.js.map

@@ -1 +1 @@
-{"version":3,"file":"artifactControlData.js","sourceRoot":"","sources":["../../src/common/artifactControlData.ts"],"names":[],"mappings":";;;AAAA,MAAM,0BAA0B,GAAG,IAAI,GAAG,CAAC;IACzC,YAAY;IACZ,WAAW;IACX,aAAa;IACb,QAAQ;IACR,eAAe;IACf,cAAc;IACd,kBAAkB;IAClB,YAAY;IACZ,aAAa;IACb,UAAU;IACV,cAAc;IACd,UAAU;IACV,QAAQ;IACR,uBAAuB;IACvB,OAAO;CACR,CAAC,CAAC;AAEH,MAAM,yBAAyB,GAAG,IAAI,GAAG,CAAC;IACxC,cAAc;IACd,UAAU;IACV,SAAS;IACT,SAAS;IACT,eAAe;IACf,cAAc;IACd,cAAc;IACd,UAAU;IACV,gBAAgB;IAChB,mBAAmB;IACnB,cAAc;IACd,oBAAoB;IACpB,MAAM;IACN,cAAc;IACd,aAAa;IACb,aAAa;IACb,YAAY;IACZ,WAAW;IACX,WAAW;IACX,aAAa;IACb,YAAY;IACZ,YAAY;IACZ,KAAK;IACL,KAAK;CACN,CAAC,CAAC;AACH,MAAM,4BAA4B,GAAG,iBAAiB,CAAC;AACvD,MAAM,kBAAkB,GAAG,2BAA2B,CAAC;AAQvD,MAAM,QAAQ,GAAG,CAAC,KAAc,EAAoC,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAE5I,MAAM,oBAAoB,GAAG,CAAC,KAAa,EAAW,EAAE,CACtD,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC;AAEvG,MAAM,kBAAkB,GAAG,CAAC,GAAW,EAAU,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;AAE7F,MAAM,eAAe,GAAG,CAAC,KAAa,EAAW,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,KAAK,GAAG,IAAI,OAAO,KAAK,IAAI,CAAC,CAAC;AAE9H,MAAM,yBAAyB,GAAG,CAAC,KAAa,EAAE,cAAc,GAAG,KAAK,EAAW,EAAE,CACnF,oBAAoB,CAAC,KAAK,CAAC;IAC3B,4BAA4B,CAAC,IAAI,CAAC,KAAK,CAAC;IACxC,CAAC,CAAC,cAAc,IAAI,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACnD,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;IACrB,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC;IACxB,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC;IAC7B,eAAe,CAAC,KAAK,CAAC,CAAC;AAEzB,MAAM,qBAAqB,GAAG,CAAC,GAAW,EAAE,KAAc,EAAmB,EAAE;IAC7E,IAAI,GAAG,KAAK,YAAY,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,oBAAoB,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3H,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAClC,OAAO,CACL,QAAQ,CAAC,MAAM,IAAI,CAAC;QACpB,QAAQ,CAAC,CAAC,CAAC,KAAK,EAAE;QAClB,QAAQ,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,eAAe;QAC7C,QAAQ;aACL,KAAK,CAAC,CAAC,CAAC;aACR,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,OAAO,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,OAAO,KAAK,GAAG,IAAI,OAAO,KAAK,IAAI,CAAC,CACvI,CAAC;AACJ,CAAC,CAAC;AAEF,2FAA2F;AACpF,MAAM,6BAA6B,GAAG,CAAC,MAAe,EAAE,GAAW,EAAmC,EAAE,CAC7G,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAD/B,QAAA,6BAA6B,iCACE;AAE5C,iGAAiG;AAC1F,MAAM,4BAA4B,GAAG,CAAC,MAAe,EAAE,GAAW,EAAmC,EAAE,CAC5G,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AADrD,QAAA,4BAA4B,gCACyB;AAElE,iGAAiG;AAC1F,MAAM,oCAAoC,GAAG,CAAC,KAAc,EAAE,yBAA0D,EAAE,EAAW,EAAE;IAC5I,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,yBAAyB,CAAC,KAAK,CAAC,CAAC;IACvE,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,IAAA,4CAAoC,EAAC,KAAK,EAAE,sBAAsB,CAAC,CAAC,CAAC;IAC1H,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAEnC,OAAO,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE;QACjD,IAAI,oBAAoB,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QAC3C,MAAM,aAAa,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;QAC9C,IAAI,0BAA0B,CAAC,GAAG,CAAC,aAAa,CAAC;YAAE,OAAO,IAAI,CAAC;QAC/D,MAAM,YAAY,GAAG,sBAAsB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,KAAK,IAAI,KAAK,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC;QACvG,IAAI,YAAY,EAAE,cAAc,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,OAAO,yBAAyB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAC7G,IAAI,yBAAyB,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,YAAY;YAAE,OAAO,IAAI,CAAC;QAC/E,IAAI,qBAAqB,CAAC,GAAG,EAAE,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QACpD,OAAO,IAAA,4CAAoC,EAAC,KAAK,EAAE,sBAAsB,CAAC,CAAC;IAC7E,CAAC,CAAC,CAAC;AACL,CAAC,CAAC;AAfW,QAAA,oCAAoC,wCAe/C"}
+{"version":3,"file":"artifactControlData.js","sourceRoot":"","sources":["../../src/common/artifactControlData.ts"],"names":[],"mappings":";;;AAAA,MAAM,0BAA0B,GAAG,IAAI,GAAG,CAAC;IACzC,YAAY;IACZ,WAAW;IACX,aAAa;IACb,QAAQ;IACR,eAAe;IACf,cAAc;IACd,kBAAkB;IAClB,YAAY;IACZ,aAAa;IACb,UAAU;IACV,cAAc;IACd,UAAU;IACV,QAAQ;IACR,uBAAuB;IACvB,OAAO;CACR,CAAC,CAAC;AACH,MAAM,0BAA0B,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,WAAW,EAAE,aAAa,CAAC,CAAC,CAAC;AAElF,MAAM,yBAAyB,GAAG,IAAI,GAAG,CAAC;IACxC,cAAc;IACd,UAAU;IACV,SAAS;IACT,SAAS;IACT,eAAe;IACf,cAAc;IACd,cAAc;IACd,UAAU;IACV,gBAAgB;IAChB,mBAAmB;IACnB,cAAc;IACd,oBAAoB;IACpB,MAAM;IACN,cAAc;IACd,aAAa;IACb,aAAa;IACb,YAAY;IACZ,WAAW;IACX,WAAW;IACX,aAAa;IACb,YAAY;IACZ,YAAY;IACZ,KAAK;IACL,KAAK;CACN,CAAC,CAAC;AACH,MAAM,4BAA4B,GAAG,iBAAiB,CAAC;AACvD,MAAM,kBAAkB,GAAG,2BAA2B,CAAC;AACvD,MAAM,cAAc,GAAG,mBAAmB,CAAC;AAC9B,QAAA,uCAAuC,GAAG,MAAO,CAAC;AAmB/D,MAAM,QAAQ,GAAG,CAAC,KAAc,EAAoC,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAE5I,MAAM,oBAAoB,GAAG,CAAC,KAAa,EAAW,EAAE,CACtD,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC;AAEvG,MAAM,kBAAkB,GAAG,CAAC,GAAW,EAAU,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;AAE7F,MAAM,eAAe,GAAG,CAAC,KAAa,EAAW,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,KAAK,GAAG,IAAI,OAAO,KAAK,IAAI,CAAC,CAAC;AAE9H,MAAM,yBAAyB,GAAG,CAAC,KAAa,EAAE,cAAc,GAAG,KAAK,EAAE,eAAe,GAAG,KAAK,EAAE,sBAAsB,GAAG,KAAK,EAAW,EAAE,CAC5I,oBAAoB,CAAC,KAAK,CAAC;IAC3B,4BAA4B,CAAC,IAAI,CAAC,KAAK,CAAC;IACxC,CAAC,CAAC,cAAc,IAAI,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACnD,CAAC,sBAAsB,IAAI,CAAC,eAAe,IAAI,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1E,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;IACrB,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC;IACxB,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC;IAC7B,eAAe,CAAC,KAAK,CAAC,CAAC;AAEzB,MAAM,qBAAqB,GAAG,CAAC,GAAW,EAAE,KAAc,EAAmB,EAAE;IAC7E,IAAI,GAAG,KAAK,YAAY,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,oBAAoB,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3H,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAClC,OAAO,CACL,QAAQ,CAAC,MAAM,IAAI,CAAC;QACpB,QAAQ,CAAC,CAAC,CAAC,KAAK,EAAE;QAClB,QAAQ,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,eAAe;QAC7C,QAAQ;aACL,KAAK,CAAC,CAAC,CAAC;aACR,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,OAAO,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,OAAO,KAAK,GAAG,IAAI,OAAO,KAAK,IAAI,CAAC,CACvI,CAAC;AACJ,CAAC,CAAC;AAEF,2FAA2F;AACpF,MAAM,6BAA6B,GAAG,CAAC,MAAe,EAAE,GAAW,EAAmC,EAAE,CAC7G,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAD/B,QAAA,6BAA6B,iCACE;AAE5C,iGAAiG;AAC1F,MAAM,4BAA4B,GAAG,CAAC,MAAe,EAAE,GAAW,EAAmC,EAAE,CAC5G,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AADrD,QAAA,4BAA4B,gCACyB;AAElE,4FAA4F;AACrF,MAAM,6BAA6B,GAAG,CAAC,MAAe,EAAE,GAAW,EAAmC,EAAE,CAC7G,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,wBAAwB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAD/D,QAAA,6BAA6B,iCACkC;AAI5E,MAAM,0BAA0B,GAAG,CAAC,sBAAuD,EAA6B,EAAE;IACxH,MAAM,KAAK,GAA8B,IAAI,OAAO,EAAE,CAAC;IACvD,KAAK,MAAM,KAAK,IAAI,sBAAsB,EAAE,CAAC;QAC3C,IAAI,YAAY,GAAG,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC3C,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,YAAY,GAAG,IAAI,GAAG,EAAE,CAAC;YACzB,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;QACxC,CAAC;QACD,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC7C,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE;YAC1B,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,GAAG,EAAE,KAAK,CAAC,GAAG;YACd,cAAc,EAAE,QAAQ,EAAE,cAAc,IAAI,KAAK,CAAC,cAAc;YAChE,2BAA2B,EAAE,QAAQ,EAAE,2BAA2B,IAAI,KAAK,CAAC,2BAA2B;YACvG,eAAe,EAAE,QAAQ,EAAE,eAAe,IAAI,KAAK,CAAC,eAAe;YACnE,iBAAiB,EAAE,QAAQ,EAAE,iBAAiB,IAAI,KAAK,CAAC,iBAAiB;YACzE,wBAAwB,EAAE,QAAQ,EAAE,wBAAwB,IAAI,KAAK,CAAC,wBAAwB;SAC/F,CAAC,CAAC;IACL,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC,CAAC;AAEF,MAAM,6CAA6C,GAAG,CACpD,KAAc,EACd,sBAAiD,EACjD,OAAwC,EAC/B,EAAE;IAaX,MAAM,OAAO,GAAmB,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAC,CAAC;IACrF,MAAM,gBAAgB,GAAG,IAAI,OAAO,EAAU,CAAC;IAC/C,MAAM,qBAAqB,GAAG,IAAI,OAAO,EAAoB,CAAC;IAC9D,IAAI,gBAAgB,GAAG,CAAC,CAAC;IAEzB,MAAM,wBAAwB,GAAG,CAAC,SAAiB,EAAE,UAAkB,EAAW,EAAE,CAClF,qBAAqB,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC,eAAe,GAAG,UAAU,CAAC,KAAK,eAAe,CAAC,IAAI,KAAK,CAAC;IAE7H,MAAM,YAAY,GAAG,CAAC,SAAiB,EAAE,UAAkB,EAAQ,EAAE;QACnE,MAAM,iBAAiB,GAAG,qBAAqB,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;QACrE,IAAI,iBAAiB,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC,eAAe,GAAG,UAAU,CAAC,KAAK,eAAe,CAAC;YAAE,OAAO;QAC1G,qBAAqB,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,GAAG,iBAAiB,CAAC,MAAM,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC,UAAU,GAAG,eAAe,CAAC,KAAK,UAAU,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC;IACpJ,CAAC,CAAC;IAEF,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,EAAkB,CAAC;QAChD,IAAI,SAAS,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC/B,gBAAgB,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;YAC7C,YAAY,CAAC,SAAS,CAAC,SAAS,EAAE,SAAS,CAAC,UAAU,CAAC,CAAC;YACxD,SAAS;QACX,CAAC;QACD,IAAI,OAAO,SAAS,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;YACxC,IAAI,yBAAyB,CAAC,SAAS,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,sBAAsB,CAAC;gBAAE,OAAO,IAAI,CAAC;YAC1G,SAAS;QACX,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;YACnC,gBAAgB,IAAI,CAAC,CAAC;YACtB,IAAI,gBAAgB,GAAG,+CAAuC;gBAAE,OAAO,IAAI,CAAC;YAC5E,IAAI,gBAAgB,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC;YACvD,MAAM,UAAU,GACd,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBACtC,CAAC,SAAS,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC3C,CAAC,SAAS,CAAC,uBAAuB,EAAE,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC/D,IAAI,wBAAwB,CAAC,SAAS,CAAC,KAAK,EAAE,UAAU,CAAC;gBAAE,SAAS;YACpE,gBAAgB,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YACtC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,CAAC,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;YACxE,KAAK,IAAI,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;gBACpE,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBACrC,IAAI,SAAS,CAAC,uBAAuB,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;oBACnE,IAAI,yBAAyB,CAAC,KAAK,EAAE,IAAI,EAAE,SAAS,CAAC,uBAAuB,CAAC,eAAe,EAAE,OAAO,CAAC,sBAAsB,CAAC,EAAE,CAAC;wBAC9H,OAAO,IAAI,CAAC;oBACd,CAAC;gBACH,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,kBAAkB,EAAE,SAAS,CAAC,kBAAkB,EAAE,CAAC,CAAC;gBAClG,CAAC;YACH,CAAC;YACD,SAAS;QACX,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,KAAK,CAAC;YAAE,SAAS;QACzC,gBAAgB,IAAI,CAAC,CAAC;QACtB,IAAI,gBAAgB,GAAG,+CAAuC;YAAE,OAAO,IAAI,CAAC;QAC5E,IAAI,gBAAgB,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACvD,MAAM,UAAU,GAAG,SAAS,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACxD,IAAI,wBAAwB,CAAC,SAAS,CAAC,KAAK,EAAE,UAAU,CAAC;YAAE,SAAS;QACpE,gBAAgB,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACtC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,CAAC,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;QAExE,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3D,IAAI,oBAAoB,CAAC,GAAG,CAAC;gBAAE,OAAO,IAAI,CAAC;YAC3C,MAAM,aAAa,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;YAC9C,IAAI,0BAA0B,CAAC,GAAG,CAAC,aAAa,CAAC;gBAAE,OAAO,IAAI,CAAC;YAC/D,IAAI,0BAA0B,CAAC,GAAG,CAAC,aAAa,CAAC;gBAAE,OAAO,IAAI,CAAC;YAC/D,MAAM,YAAY,GAAG,SAAS,CAAC,kBAAkB,CAAC,CAAC,CAAC,sBAAsB,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACtH,IAAI,OAAO,CAAC,sBAAsB,EAAE,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,YAAY,EAAE,iBAAiB;gBAAE,OAAO,IAAI,CAAC;YACxG,IAAI,OAAO,CAAC,2BAA2B,IAAI,aAAa,KAAK,YAAY,EAAE,CAAC;gBAC1E,IAAI,CAAC,qBAAqB,CAAC,GAAG,EAAE,KAAK,CAAC;oBAAE,OAAO,IAAI,CAAC;gBACpD,SAAS;YACX,CAAC;YACD,IAAI,YAAY,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,YAAY,CAAC,cAAc,IAAI,YAAY,CAAC,eAAe,CAAC,EAAE,CAAC;gBAC/G,IAAI,yBAAyB,CAAC,KAAK,EAAE,YAAY,CAAC,cAAc,EAAE,YAAY,CAAC,eAAe,EAAE,OAAO,CAAC,sBAAsB,CAAC;oBAAE,OAAO,IAAI,CAAC;gBAC7I,SAAS;YACX,CAAC;YACD,IAAI,YAAY,EAAE,2BAA2B,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBACtE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,uBAAuB,EAAE,YAAY,EAAE,CAAC,CAAC;gBACrF,SAAS;YACX,CAAC;YACD,IAAI,yBAAyB,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,YAAY;gBAAE,OAAO,IAAI,CAAC;YAC/E,IAAI,qBAAqB,CAAC,GAAG,EAAE,KAAK,CAAC;gBAAE,SAAS;YAChD,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,OAAO;gBACb,KAAK,EAAE,KAAK;gBACZ,kBAAkB,EAChB,CAAC,OAAO,CAAC,mCAAmC,IAAI,OAAO,CAAC,SAAS,CAAC,kBAAkB,IAAI,YAAY,EAAE,wBAAwB,CAAC;aAClI,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC,CAAC;AAEF,sGAAsG;AAC/F,MAAM,oCAAoC,GAAG,CAClD,KAAc,EACd,yBAA0D,EAAE,EAC5D,UAA2C,EAAE,EACpC,EAAE,CAAC,6CAA6C,CAAC,KAAK,EAAE,0BAA0B,CAAC,sBAAsB,CAAC,EAAE,OAAO,CAAC,CAAC;AAJnH,QAAA,oCAAoC,wCAI+E"}

package/dist/esm/azure/billingArtifactCanonicalization.js

@@ -1,3 +1,4 @@
+import { ARTIFACT_CONTROL_DATA_MAX_VISITED_NODES, allowedArtifactReferenceField, containsForbiddenArtifactControlData, } from '../common/artifactControlData.js';
 const hasOwn = (value, key) => Object.prototype.hasOwnProperty.call(value, key);
 const isRecord = (value) => typeof value === 'object' && value !== null && !Array.isArray(value);
 const requirePlainRecord = (value, name) => {
@@ -158,6 +159,47 @@ const projectPublicationDecision = (value) => {
         issues: issues.map(projectIssue),
     };
 };
+const projectPromotionEvaluation = (value) => {
+    const source = requirePlainRecord(value, 'Billing promotion observation evaluation');
+    const projected = {
+        comparison: readDataProperty(source, 'comparison'),
+        projectedOutcome: readDataProperty(source, 'projectedOutcome'),
+    };
+    selectOptional(source, projected, 'outputDigestRelation');
+    return projected;
+};
+const projectPromotionObservation = (value) => {
+    const source = requirePlainRecord(value, 'Billing promotion observation');
+    const observationDigest = readDataProperty(source, 'observationDigest');
+    if (typeof observationDigest !== 'string')
+        throw new TypeError('Billing promotion observation requires an observationDigest string.');
+    const projected = {
+        schemaVersion: readDataProperty(source, 'schemaVersion'),
+        documentType: readDataProperty(source, 'documentType'),
+        authority: readDataProperty(source, 'authority'),
+        publicationMode: readDataProperty(source, 'publicationMode'),
+        processingState: readDataProperty(source, 'processingState'),
+        subscriptionId: readDataProperty(source, 'subscriptionId'),
+        generationId: readDataProperty(source, 'generationId'),
+        ownership: projectOwnership(readDataProperty(source, 'ownership')),
+        revision: projectRevision(readDataProperty(source, 'revision')),
+        messageId: readDataProperty(source, 'messageId'),
+        correlationId: readDataProperty(source, 'correlationId'),
+        inputManifestPath: readDataProperty(source, 'inputManifestPath'),
+        inputManifestDigest: readDataProperty(source, 'inputManifestDigest'),
+        outputManifestPath: readDataProperty(source, 'outputManifestPath'),
+        outputManifestDigest: readDataProperty(source, 'outputManifestDigest'),
+        evaluation: projectPromotionEvaluation(readDataProperty(source, 'evaluation')),
+        observedAt: readDataProperty(source, 'observedAt'),
+    };
+    if (containsForbiddenArtifactControlData(projected, [
+        ...allowedArtifactReferenceField(projected, 'inputManifestPath'),
+        ...allowedArtifactReferenceField(projected, 'outputManifestPath'),
+    ])) {
+        throw new TypeError('Billing promotion observation contains forbidden control data.');
+    }
+    return projected;
+};
 const projectBinding = (subscriptionId, generationId, ownership, revision, inputManifestDigest, publicationDecision) => ({
     kind: 'billing-analysis-output',
     schemaVersion: 1,
@@ -180,68 +222,103 @@ export const projectBillingOutputBindingV1FromMetadata = (metadata) => {
 };
 const canonicalizeJson = (value) => {
     const active = new Set();
-    const serialize = (candidate) => {
-        if (candidate === null || typeof candidate === 'boolean')
-            return JSON.stringify(candidate);
+    const fragments = [];
+    const pending = [{ kind: 'value', value }];
+    let visitedContainerCount = 0;
+    while (pending.length > 0) {
+        const frame = pending.pop();
+        if (frame === undefined)
+            break;
+        if (frame.kind === 'fragment') {
+            fragments.push(frame.value);
+            continue;
+        }
+        if (frame.kind === 'leave') {
+            active.delete(frame.value);
+            continue;
+        }
+        const candidate = frame.value;
+        if (candidate === null || typeof candidate === 'boolean') {
+            fragments.push(JSON.stringify(candidate));
+            continue;
+        }
         if (typeof candidate === 'string') {
             if (hasUnpairedSurrogate(candidate))
                 throw new TypeError('Canonical JSON rejects invalid Unicode surrogate data.');
-            return JSON.stringify(candidate);
+            fragments.push(JSON.stringify(candidate));
+            continue;
         }
         if (typeof candidate === 'number') {
             if (!Number.isFinite(candidate) || Object.is(candidate, -0) || (Number.isInteger(candidate) && !Number.isSafeInteger(candidate))) {
                 throw new TypeError('Canonical JSON requires finite, safe, non-negative-zero numbers.');
             }
-            return JSON.stringify(candidate);
+            fragments.push(JSON.stringify(candidate));
+            continue;
         }
         if (typeof candidate !== 'object' || candidate === undefined)
             throw new TypeError('Canonical JSON rejects non-JSON values.');
+        visitedContainerCount += 1;
+        if (visitedContainerCount > ARTIFACT_CONTROL_DATA_MAX_VISITED_NODES) {
+            throw new TypeError('Canonical JSON exceeds its 100000-container limit.');
+        }
         if (active.has(candidate))
             throw new TypeError('Canonical JSON rejects cyclic values.');
         active.add(candidate);
-        try {
-            if (Array.isArray(candidate)) {
-                if (Object.getPrototypeOf(candidate) !== Array.prototype)
-                    throw new TypeError('Canonical JSON requires plain arrays.');
-                const ownKeys = Reflect.ownKeys(candidate);
-                if (ownKeys.some(key => typeof key === 'symbol') ||
-                    ownKeys.some(key => typeof key === 'string' && key !== 'length' && !/^(0|[1-9]\d*)$/.test(key))) {
-                    throw new TypeError('Canonical JSON arrays cannot contain custom properties.');
-                }
-                const values = [];
-                for (let index = 0; index < candidate.length; index += 1) {
-                    if (!hasOwn(candidate, index))
-                        throw new TypeError('Canonical JSON rejects sparse arrays.');
-                    const descriptor = Object.getOwnPropertyDescriptor(candidate, String(index));
-                    if (descriptor === undefined || !('value' in descriptor) || !descriptor.enumerable || descriptor.value === undefined) {
-                        throw new TypeError('Canonical JSON array entries must be enumerable JSON values.');
-                    }
-                    values.push(serialize(descriptor.value));
-                }
-                return `[${values.join(',')}]`;
+        pending.push({ kind: 'leave', value: candidate });
+        if (Array.isArray(candidate)) {
+            if (Object.getPrototypeOf(candidate) !== Array.prototype)
+                throw new TypeError('Canonical JSON requires plain arrays.');
+            const ownKeys = Reflect.ownKeys(candidate);
+            if (ownKeys.some(key => typeof key === 'symbol') ||
+                ownKeys.some(key => typeof key === 'string' && key !== 'length' && !/^(0|[1-9]\d*)$/.test(key))) {
+                throw new TypeError('Canonical JSON arrays cannot contain custom properties.');
             }
-            const prototype = Object.getPrototypeOf(candidate);
-            if (prototype !== Object.prototype && prototype !== null)
-                throw new TypeError('Canonical JSON requires plain objects.');
-            if (Object.getOwnPropertySymbols(candidate).length > 0)
-                throw new TypeError('Canonical JSON rejects symbol properties.');
-            const entries = [];
-            for (const key of Object.getOwnPropertyNames(candidate).sort()) {
-                if (hasUnpairedSurrogate(key))
-                    throw new TypeError('Canonical JSON rejects invalid Unicode property names.');
-                const descriptor = Object.getOwnPropertyDescriptor(candidate, key);
+            const values = [];
+            for (let index = 0; index < candidate.length; index += 1) {
+                if (!hasOwn(candidate, index))
+                    throw new TypeError('Canonical JSON rejects sparse arrays.');
+                const descriptor = Object.getOwnPropertyDescriptor(candidate, String(index));
                 if (descriptor === undefined || !('value' in descriptor) || !descriptor.enumerable || descriptor.value === undefined) {
-                    throw new TypeError('Canonical JSON object fields must be enumerable JSON values.');
+                    throw new TypeError('Canonical JSON array entries must be enumerable JSON values.');
                 }
-                entries.push(`${JSON.stringify(key)}:${serialize(descriptor.value)}`);
+                values.push(descriptor.value);
             }
-            return `{${entries.join(',')}}`;
+            fragments.push('[');
+            pending.push({ kind: 'fragment', value: ']' });
+            for (let index = values.length - 1; index >= 0; index -= 1) {
+                pending.push({ kind: 'value', value: values[index] });
+                if (index > 0)
+                    pending.push({ kind: 'fragment', value: ',' });
+            }
+            continue;
+        }
+        const prototype = Object.getPrototypeOf(candidate);
+        if (prototype !== Object.prototype && prototype !== null)
+            throw new TypeError('Canonical JSON requires plain objects.');
+        if (Object.getOwnPropertySymbols(candidate).length > 0)
+            throw new TypeError('Canonical JSON rejects symbol properties.');
+        const entries = [];
+        for (const key of Object.getOwnPropertyNames(candidate).sort()) {
+            if (hasUnpairedSurrogate(key))
+                throw new TypeError('Canonical JSON rejects invalid Unicode property names.');
+            const descriptor = Object.getOwnPropertyDescriptor(candidate, key);
+            if (descriptor === undefined || !('value' in descriptor) || !descriptor.enumerable || descriptor.value === undefined) {
+                throw new TypeError('Canonical JSON object fields must be enumerable JSON values.');
+            }
+            entries.push({ key, value: descriptor.value });
         }
-        finally {
-            active.delete(candidate);
+        fragments.push('{');
+        pending.push({ kind: 'fragment', value: '}' });
+        for (let index = entries.length - 1; index >= 0; index -= 1) {
+            const entry = entries[index];
+            pending.push({ kind: 'value', value: entry.value });
+            pending.push({
+                kind: 'fragment',
+                value: `${index > 0 ? ',' : ''}${JSON.stringify(entry.key)}:`,
+            });
         }
-    };
-    return serialize(value);
+    }
+    return fragments.join('');
 };
 const withoutManifestDigest = (manifest) => {
     const prototype = Object.getPrototypeOf(manifest);
@@ -277,5 +354,7 @@ export const canonicalizeBillingOutputBindingV1 = (binding) => {
 export const canonicalizeBillingAnalyzerInputManifestV2ForDigest = (manifest) => canonicalizeJson(withoutManifestDigest(manifest));
 /** Returns the canonical output-manifest digest preimage, excluding only top-level manifestDigest. */
 export const canonicalizeBillingAnalyzerOutputManifestV2ForDigest = (manifest) => canonicalizeJson(withoutManifestDigest(manifest));
+/** Returns the exact promotion-observation digest preimage, excluding observationDigest and additive fields. */
+export const canonicalizeBillingAnalysisPromotionObservationV1ForDigest = (observation) => canonicalizeJson(projectPromotionObservation(observation));
 /** Returns the RFC 8785/JCS-compatible canonical JSON string for a validated JSON value. */
 export const canonicalizeBillingArtifactJson = (value) => canonicalizeJson(value);