@superbee/core 0.2.0-pre.4 → 0.2.0-pre.40

package/dist/source-engine/overlay.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"overlay.js","sourceRoot":"","sources":["../../src/source-engine/overlay.ts"],"names":[],"mappings":"AAAA,kGAAkG;AAClG,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,6BAA6B,CAAC;AACpE,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAC7D,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAM9D,MAAM,CAAC,MAAM,0BAA0B,GAAG,MAAM,CAAC;AAsBjD,MAAM,MAAM,GAAG,CAAC,CAAU,EAAgC,EAAE,CAAC,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AACtH,MAAM,GAAG,GAAG,CAAC,CAAoC,EAAU,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;AAC5H,oGAAoG;AACpG,MAAM,UAAU,uBAAuB,CAAC,KAAc;IACpD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,0BAA0B;QAAE,OAAO,KAAK,CAAC;IACxI,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;QAC5C,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QAC7K,MAAM,CAAC,GAAG,GAAG,CAAC,KAAsC,CAAC,CAAC;QACtD,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;QAC9B,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAAC,OAAO,IAAI,CAAC;IAC3B,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,0BAA0B,CAAC,OAA6B;IACtE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC;IACrD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC;IACnC,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS,IAAI,CAAC,uBAAuB,CAAC,OAAO,CAAC,QAAQ,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrI,IAAI,SAAS,GAAG,IAAI,GAAG,EAA8B,CAAC;IACtD,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,QAAQ,EAAE,OAAO,IAAI,EAAE,EAAE,CAAC;QACpD,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,IAAI,KAAK,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ;eAC/D,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;YACvH,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;IACD,IAAI,MAAM,GAA2C,IAAI,CAAC;IAC1D,MAAM,UAAU,GAAG,CAAC,OAAwC,EAAyB,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,eAAe,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAChM,MAAM,OAAO,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC;IAE1G,KAAK,UAAU,KAAK,CAAC,OAAgC,EAAE,UAAkB,EAAE,IAAiB;QAC1F,IAAI,MAAM,KAAK,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;QACrF,MAAM,UAAU,GAAyB,EAAE,CAAC;QAC5C,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE;YACpC,IAAI,MAAM,CAAC,KAAK,KAAK,IAAI,IAAI,MAAM,CAAC,WAAW,KAAK,aAAa;gBAAE,OAAO,MAAM,CAAC;YACjF,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;YACnG,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,MAAM,CAAC;YACxC,MAAM,KAAK,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAE,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;YAC7I,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,IAAI,EAAE,CAAC;YACxD,MAAM,IAAI,GAAG,aAAa,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,EAAE,UAAU,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,KAAM,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,EAAE,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,CAAC;YAC5R,UAAU,CAAC,IAAI,CAAC,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,KAAM,EAAE,CAAC,CAAC;YAClD,OAAO,EAAE,GAAG,MAAM,EAAE,GAAG,IAAI,EAAE,CAAC;QAChC,CAAC,CAAC,CAAC;QACH,IAAI,SAAS,CAAC,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,0BAA0B;YAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;QACrK,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ;YAClG,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,GAAG,KAAK,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO;YACjG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QACtH,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACxD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;QAAC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAChE,MAAM,OAAO,GAAG,CAAC,GAAG,OAAO,CAAC,QAAQ,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC;QACvH,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;YAC1B,IAAI,GAAG,CAAC,IAAI,IAAI,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;iBAC/D,IAAI,GAAG,CAAC,IAAI,IAAI,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAC3E,CAAC;QACD,MAAM,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC;QAC5B,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACnC,MAAM,EAAE,GAAG,SAAS,CAAC,WAAW,CAAC;YACjC,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,KAAK,EAAE,IAAI,CAAC,CAAC,OAAO,KAAK,SAAS,CAAC;mBACpF,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,KAAK,EAAE,IAAI,CAAC,CAAC,IAAI,KAAK,sBAAsB,CAAC,CAAC;YAC3F,IAAI,CAAC,MAAM;gBAAE,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,eAAe,CAAC,SAAS,CAAC,CAAC,CAAC;QACtE,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,GAAG,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC;IAC5E,CAAC;IACD,OAAO;QACL,QAAQ,EAAE,GAA0B,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC;QAC5D,cAAc,EAAE,GAAiC,EAAE,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC;QAC/F,OAAO,KAAW,IAAI,MAAM,KAAK,IAAI;YAAE,SAAS,GAAG,MAAM,CAAC,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC;QAC3E,OAAO,KAAW,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC;QAClC,MAAM,EAAE,CAAC,IAAgB,EAAgC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC;QACvG,KAAK,CAAC,SAAS,CAAC,KAAkB,EAAE,UAAkB;YACpD,MAAM,OAAO,GAAmB,EAAE,CAAC;YACnC,KAAK,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;gBACxD,IAAI,KAAK,CAAC,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,EAAE,EAAE,CAAC;oBAAE,SAAS;gBACnE,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;gBACnF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;oBAAE,SAAS;gBACnC,OAAO,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,cAAc,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;YACtK,CAAC;YACD,OAAO,KAAK,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QACpC,CAAC;QACD,KAAK,CAAC,aAAa,CAAC,QAA4B,EAAE,UAAkB;YAClE,IAAI,MAAM,KAAK,IAAI;gBAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;YACrF,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI;gBAClF,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;YACpH,OAAO,kBAAkB,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,WAAW,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC;QACrI,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/source-engine/robots.d.ts

@@ -0,0 +1,53 @@
+/**
+ * The robots.txt and address rules of the source engine, storage-neutral and transport-free: a
+ * declared fetch identity, RFC 9309 parsing, matching and decision, the bot-challenge test, and
+ * the lexical address refusal applied to every hop. The robots read loop that uses them lives in
+ * the guarded transport, so every robots.txt request passes the same host guard as a page.
+ */
+export interface FetchIdentity {
+    /** The exact User-Agent sent on every request, robots.txt included. */
+    userAgent: string;
+    /** The robots.txt product token (RFC 9309 2.2.1: letters, `_` and `-`). */
+    productToken: string;
+}
+/**
+ * The identity for a declared User-Agent, or undefined when it does not name a product, a version
+ * and an https contact page.
+ */
+export declare function fetchIdentity(userAgent: string): FetchIdentity | undefined;
+/**
+ * RFC 9309 2.2.2: percent-encoded unreserved characters decoded, other non-ASCII percent-encoded,
+ * escapes in upper case, so a rule and a path compare in one canonical form.
+ */
+export declare function canonicalRobotsPath(path: string): string;
+export interface RobotsGroup {
+    agents: string[];
+    rules: Array<{
+        allow: boolean;
+        path: string;
+    }>;
+}
+/** Robots groups: product tokens (lowercase) and their canonical Allow and Disallow rules. */
+export declare function parseRobots(text: string): RobotsGroup[];
+/**
+ * Whether a robots rule matches a canonical path from its start: `*` is any run, a trailing `$`
+ * anchors the end. Linear, with no backtracking regex: both sides are untrusted.
+ */
+export declare function robotsRuleMatches(rule: string, path: string): boolean;
+/**
+ * RFC 9309 matching: the groups naming the product token exactly, else `*`; the longest matching
+ * rule wins, Allow on a tie. The path includes the query.
+ */
+export declare function robotsDecision(robotsText: string, pathAndQuery: string, productToken: string): {
+    allow: boolean;
+    rule?: string;
+};
+/**
+ * Why `url` may not be fetched at all, or undefined: a scheme other than http(s), userinfo, a
+ * non-default port, an IP literal or a local name. Lexical only; a transport that resolves names
+ * also refuses private addresses after resolution.
+ */
+export declare function refusedAddress(url: URL): string | undefined;
+/** A bot-mitigation interstitial rather than the content: stop, never retry around it. */
+export declare function challenged(status: number, headers: Readonly<Record<string, string>>, text: string): boolean;
+//# sourceMappingURL=robots.d.ts.map

package/dist/source-engine/robots.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"robots.d.ts","sourceRoot":"","sources":["../../src/source-engine/robots.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAMH,MAAM,WAAW,aAAa;IAC5B,uEAAuE;IACvE,SAAS,EAAE,MAAM,CAAC;IAClB,2EAA2E;IAC3E,YAAY,EAAE,MAAM,CAAC;CACtB;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,aAAa,GAAG,SAAS,CAS1E;AAID;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAexD;AAED,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,KAAK,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,OAAO,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAChD;AAED,8FAA8F;AAC9F,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,EAAE,CA+BvD;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAcrE;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,UAAU,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,CAahI;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,GAAG,GAAG,MAAM,GAAG,SAAS,CAS3D;AAED,0FAA0F;AAC1F,wBAAgB,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAI3G"}

package/dist/source-engine/robots.js

@@ -0,0 +1,158 @@
+/**
+ * The robots.txt and address rules of the source engine, storage-neutral and transport-free: a
+ * declared fetch identity, RFC 9309 parsing, matching and decision, the bot-challenge test, and
+ * the lexical address refusal applied to every hop. The robots read loop that uses them lives in
+ * the guarded transport, so every robots.txt request passes the same host guard as a page.
+ */
+/** A declared fetch identity: `Product/version (+https://contact; optional@email)`. */
+const IDENTITY = /^([A-Za-z][A-Za-z_-]{0,63})\/([0-9A-Za-z][0-9A-Za-z.-]{0,31}) \(\+(https:\/\/[^\s;()]+)(; [^\s;()@]+@[^\s;()]+)?\)$/;
+/**
+ * The identity for a declared User-Agent, or undefined when it does not name a product, a version
+ * and an https contact page.
+ */
+export function fetchIdentity(userAgent) {
+    const match = IDENTITY.exec(userAgent);
+    if (!match)
+        return undefined;
+    try {
+        new URL(match[3]);
+    }
+    catch {
+        return undefined;
+    }
+    return { userAgent, productToken: match[1] };
+}
+const UNRESERVED = /[A-Za-z0-9\-._~]/;
+/**
+ * RFC 9309 2.2.2: percent-encoded unreserved characters decoded, other non-ASCII percent-encoded,
+ * escapes in upper case, so a rule and a path compare in one canonical form.
+ */
+export function canonicalRobotsPath(path) {
+    const chars = Array.from(path);
+    let out = "";
+    for (let i = 0; i < chars.length; i++) {
+        const char = chars[i];
+        const escape = chars.slice(i + 1, i + 3).join("");
+        if (char === "%" && /^[0-9A-Fa-f]{2}$/.test(escape)) {
+            const decoded = String.fromCharCode(parseInt(escape, 16));
+            out += UNRESERVED.test(decoded) ? decoded : "%" + escape.toUpperCase();
+            i += 2;
+        }
+        else if (char.codePointAt(0) > 0x7e || char.codePointAt(0) < 0x21) {
+            for (const byte of new TextEncoder().encode(char))
+                out += "%" + byte.toString(16).toUpperCase().padStart(2, "0");
+        }
+        else
+            out += char;
+    }
+    return out;
+}
+/** Robots groups: product tokens (lowercase) and their canonical Allow and Disallow rules. */
+export function parseRobots(text) {
+    const groups = [];
+    let current;
+    let lastWasAgent = false;
+    // RFC 9309 2.2: a line ends in CR LF, LF or a CR alone.
+    for (const raw of text.split(/\r\n|\r|\n/)) {
+        // Split on the first colon by index: a regular expression here backtracks on long runs of
+        // whitespace, and the body is provider text.
+        const line = raw.replace(/#.*/, "").trim();
+        const colon = line.indexOf(":");
+        if (colon <= 0)
+            continue;
+        // The key is tested before lowercasing, where U+212A would become `k`; a value holding U+2028
+        // or U+2029 is skipped, as the line pattern this replaced never matched one.
+        const rawKey = line.slice(0, colon).trim();
+        if (!/^[A-Za-z-]+$/.test(rawKey))
+            continue;
+        const key = rawKey.toLowerCase();
+        const value = line.slice(colon + 1).trim();
+        if (/[\u2028\u2029]/.test(value))
+            continue;
+        if (key === "user-agent") {
+            if (!lastWasAgent)
+                groups.push((current = { agents: [], rules: [] }));
+            // The product token ends at the first character outside letters, `_` and `-`.
+            current.agents.push(value === "*" ? "*" : (/^[A-Za-z_-]*/.exec(value)[0] ?? "").toLowerCase());
+            lastWasAgent = true;
+        }
+        else {
+            lastWasAgent = false;
+            if (current && (key === "allow" || key === "disallow") && value !== "") {
+                current.rules.push({ allow: key === "allow", path: canonicalRobotsPath(value) });
+            }
+        }
+    }
+    return groups;
+}
+/**
+ * Whether a robots rule matches a canonical path from its start: `*` is any run, a trailing `$`
+ * anchors the end. Linear, with no backtracking regex: both sides are untrusted.
+ */
+export function robotsRuleMatches(rule, path) {
+    const anchored = rule.endsWith("$");
+    const parts = (anchored ? rule.slice(0, -1) : rule).split("*");
+    if (!path.startsWith(parts[0]))
+        return false;
+    let at = parts[0].length;
+    if (parts.length === 1)
+        return !anchored || at === path.length;
+    for (let i = 1; i < parts.length - 1; i++) {
+        const found = path.indexOf(parts[i], at);
+        if (found === -1)
+            return false;
+        at = found + parts[i].length;
+    }
+    const last = parts.at(-1);
+    if (anchored)
+        return path.length - last.length >= at && path.endsWith(last);
+    return path.indexOf(last, at) !== -1;
+}
+/**
+ * RFC 9309 matching: the groups naming the product token exactly, else `*`; the longest matching
+ * rule wins, Allow on a tie. The path includes the query.
+ */
+export function robotsDecision(robotsText, pathAndQuery, productToken) {
+    const groups = parseRobots(robotsText);
+    const token = productToken.toLowerCase();
+    const path = canonicalRobotsPath(pathAndQuery);
+    const mine = groups.filter((group) => group.agents.includes(token));
+    const rules = (mine.length ? mine : groups.filter((group) => group.agents.includes("*"))).flatMap((group) => group.rules);
+    let best;
+    for (const rule of rules) {
+        if (robotsRuleMatches(rule.path, path) && (!best || rule.path.length > best.path.length || (rule.path.length === best.path.length && rule.allow))) {
+            best = rule;
+        }
+    }
+    return best ? { allow: best.allow, rule: `${best.allow ? "Allow" : "Disallow"}: ${best.path}` } : { allow: true };
+}
+/**
+ * Why `url` may not be fetched at all, or undefined: a scheme other than http(s), userinfo, a
+ * non-default port, an IP literal or a local name. Lexical only; a transport that resolves names
+ * also refuses private addresses after resolution.
+ */
+export function refusedAddress(url) {
+    if (url.protocol !== "https:" && url.protocol !== "http:")
+        return "scheme";
+    if (url.username || url.password)
+        return "credentials";
+    if (url.port !== "")
+        return "port";
+    const host = url.hostname.toLowerCase().replace(/\.$/, "");
+    if (host.startsWith("[") || /^[0-9.]+$/.test(host) || /^0x/i.test(host))
+        return "ip_literal";
+    if (!host.includes("."))
+        return "local_name";
+    if (/(^|\.)(localhost|local|internal|intranet|home|lan|arpa|test|invalid|example)$/.test(host))
+        return "local_name";
+    return undefined;
+}
+/** A bot-mitigation interstitial rather than the content: stop, never retry around it. */
+export function challenged(status, headers, text) {
+    if (headers["cf-mitigated"]?.toLowerCase() === "challenge")
+        return true;
+    if (![403, 429, 503].includes(status))
+        return false;
+    return /just a moment\.\.\.|challenge-platform|cf-chl-|captcha|are you a robot|verify you are human/i.test(text);
+}
+//# sourceMappingURL=robots.js.map

package/dist/source-engine/robots.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"robots.js","sourceRoot":"","sources":["../../src/source-engine/robots.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,uFAAuF;AACvF,MAAM,QAAQ,GACZ,qHAAqH,CAAC;AASxH;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,SAAiB;IAC7C,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACvC,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,IAAI,CAAC;QACH,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC;IACrB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,KAAK,CAAC,CAAC,CAAE,EAAE,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,GAAG,kBAAkB,CAAC;AAEtC;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAY;IAC9C,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/B,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;QACvB,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAClD,IAAI,IAAI,KAAK,GAAG,IAAI,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YACpD,MAAM,OAAO,GAAG,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC;YAC1D,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;YACvE,CAAC,IAAI,CAAC,CAAC;QACT,CAAC;aAAM,IAAI,IAAI,CAAC,WAAW,CAAC,CAAC,CAAE,GAAG,IAAI,IAAI,IAAI,CAAC,WAAW,CAAC,CAAC,CAAE,GAAG,IAAI,EAAE,CAAC;YACtE,KAAK,MAAM,IAAI,IAAI,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC;gBAAE,GAAG,IAAI,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QACnH,CAAC;;YAAM,GAAG,IAAI,IAAI,CAAC;IACrB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAOD,8FAA8F;AAC9F,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,MAAM,MAAM,GAAkB,EAAE,CAAC;IACjC,IAAI,OAAgC,CAAC;IACrC,IAAI,YAAY,GAAG,KAAK,CAAC;IACzB,wDAAwD;IACxD,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC;QAC3C,0FAA0F;QAC1F,6CAA6C;QAC7C,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC3C,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,KAAK,IAAI,CAAC;YAAE,SAAS;QACzB,8FAA8F;QAC9F,6EAA6E;QAC7E,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;QAC3C,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC;YAAE,SAAS;QAC3C,MAAM,GAAG,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC3C,IAAI,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,SAAS;QAC3C,IAAI,GAAG,KAAK,YAAY,EAAE,CAAC;YACzB,IAAI,CAAC,YAAY;gBAAE,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;YACtE,8EAA8E;YAC9E,OAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,KAAK,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;YACjG,YAAY,GAAG,IAAI,CAAC;QACtB,CAAC;aAAM,CAAC;YACN,YAAY,GAAG,KAAK,CAAC;YACrB,IAAI,OAAO,IAAI,CAAC,GAAG,KAAK,OAAO,IAAI,GAAG,KAAK,UAAU,CAAC,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;gBACvE,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,KAAK,OAAO,EAAE,IAAI,EAAE,mBAAmB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACnF,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAY,EAAE,IAAY;IAC1D,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IACpC,MAAM,KAAK,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/D,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9C,IAAI,EAAE,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC,MAAM,CAAC;IAC1B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,QAAQ,IAAI,EAAE,KAAK,IAAI,CAAC,MAAM,CAAC;IAC/D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAE,EAAE,EAAE,CAAC,CAAC;QAC1C,IAAI,KAAK,KAAK,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;QAC/B,EAAE,GAAG,KAAK,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC,MAAM,CAAC;IAChC,CAAC;IACD,MAAM,IAAI,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAE,CAAC;IAC3B,IAAI,QAAQ;QAAE,OAAO,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,EAAE,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC5E,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;AACvC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,UAAkB,EAAE,YAAoB,EAAE,YAAoB;IAC3F,MAAM,MAAM,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;IACvC,MAAM,KAAK,GAAG,YAAY,CAAC,WAAW,EAAE,CAAC;IACzC,MAAM,IAAI,GAAG,mBAAmB,CAAC,YAAY,CAAC,CAAC;IAC/C,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;IACpE,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC1H,IAAI,IAAkD,CAAC;IACvD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,iBAAiB,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;YAClJ,IAAI,GAAG,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,KAAK,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AACpH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,GAAQ;IACrC,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,QAAQ,CAAC;IAC3E,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ;QAAE,OAAO,aAAa,CAAC;IACvD,IAAI,GAAG,CAAC,IAAI,KAAK,EAAE;QAAE,OAAO,MAAM,CAAC;IACnC,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC3D,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,YAAY,CAAC;IAC7F,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,YAAY,CAAC;IAC7C,IAAI,+EAA+E,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,YAAY,CAAC;IACpH,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAU,UAAU,CAAC,MAAc,EAAE,OAAyC,EAAE,IAAY;IAChG,IAAI,OAAO,CAAC,cAAc,CAAC,EAAE,WAAW,EAAE,KAAK,WAAW;QAAE,OAAO,IAAI,CAAC;IACxE,IAAI,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,KAAK,CAAC;IACpD,OAAO,8FAA8F,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACnH,CAAC"}

package/dist/source-engine/snapshot.d.ts

@@ -0,0 +1,104 @@
+/** Finite, data-only acquisition over the existing observation and overlay owners. */
+import { type BoundFeed } from "../connectors.js";
+import type { KindRegistry } from "../kinds.js";
+import type { SourceIndex } from "../record-overlay/source-index.js";
+import type { ConceptId, Frontmatter } from "../types.js";
+import { type SnapshotEvidence } from "./evidence.js";
+import { type MachineState, type SourceState } from "./machine-state.js";
+import { type SourceOverlaySnapshot } from "./overlay.js";
+import type { CommitResult, PageCommit, ProfileDiagnostic, SourceRunReceipt } from "./types.js";
+export declare const SNAPSHOT_MAX_BYTES: number;
+export declare const SNAPSHOT_MAX_RECORDS = 10000;
+export declare const SNAPSHOT_PROFILE: Readonly<{
+    id: "local-snapshot";
+    version: 1;
+}>;
+export declare const SNAPSHOT_REFUSAL_CODES: readonly ["SNAPSHOT_DECLARATION_INVALID", "SNAPSHOT_INPUT_INVALID", "SNAPSHOT_TOO_LARGE", "SNAPSHOT_RESOURCE_MISMATCH", "SNAPSHOT_SCOPE_MISMATCH", "SNAPSHOT_IDENTITY_INVALID", "SNAPSHOT_IDENTITY_DUPLICATE", "SNAPSHOT_STATE_INVALID", "SNAPSHOT_BINDING_CHANGED", "SNAPSHOT_GENERATION_ROLLBACK", "SNAPSHOT_GENERATION_COLLISION", "SNAPSHOT_CAPACITY_EXCEEDED", "SNAPSHOT_CAPACITY_INVALID"];
+export type SnapshotRefusalCode = typeof SNAPSHOT_REFUSAL_CODES[number];
+export declare class SnapshotRefusal extends Error {
+    readonly code: SnapshotRefusalCode;
+    constructor(code: SnapshotRefusalCode);
+}
+export interface BoundSnapshotSource extends BoundFeed {
+    acquisition: "local-snapshot";
+    bindingDigest: string;
+    scope?: string;
+}
+export interface SnapshotDocument {
+    v: 1;
+    resource: string;
+    generation: number;
+    complete: boolean;
+    scope?: string;
+    records: Record<string, unknown>[];
+    diagnostics?: ProfileDiagnostic[];
+    evidence?: SnapshotEvidence;
+}
+export interface DecodedSnapshot {
+    /** Copied exact input. Admission re-decodes these bytes, never trusting mutable derived fields. */
+    bytes: Uint8Array;
+    sha256: string;
+    byteLength: number;
+    data: SnapshotDocument;
+}
+/** Ordinary document policy; no Kind, executable profile or Connector registration is installed. */
+export declare function bindSnapshotSource(doc: {
+    id: ConceptId;
+    frontmatter: Frontmatter;
+}, kinds: KindRegistry, options?: {
+    okfVersion?: "0.1" | "0.2";
+}): BoundSnapshotSource;
+/** Closed JSON v1, exact-byte identity, UTF-8/depth/finite/count bounds; never accesses a path. */
+export declare function decodeSnapshot(input: Uint8Array): DecodedSnapshot;
+export interface SnapshotCapacityInput {
+    /** Capture before reconciliation and retain unchanged through observation admission. */
+    accepted: SourceOverlaySnapshot;
+    /** One fresh index, also supplied unchanged to the overlay adapter for this run. */
+    overlays: SourceIndex;
+    /** CLI-owned ceiling for all envelope/binding/summary punctuation and version overhead. */
+    envelopeOverheadBytes: number;
+    maxEnvelopeBytes: number;
+}
+export interface SnapshotCapacityFacts {
+    retainedIds: number;
+    acceptedTuples: number;
+    upperBoundBytes: number;
+    maxEnvelopeBytes: number;
+}
+export interface SnapshotAdmissionOptions {
+    bound: BoundSnapshotSource;
+    snapshot: DecodedSnapshot;
+    state: SourceState | null;
+    /** Existing envelope binding, or null before binding. A history can never be silently rebound. */
+    previousBindingDigest: string | null;
+    capacity: SnapshotCapacityInput;
+}
+export interface SnapshotAdmission {
+    observation: "new" | "replay";
+    generation: number;
+    currentGeneration: number | null;
+    sha256: string;
+    records: number;
+    capacity: SnapshotCapacityFacts;
+}
+/** All refusal checks are pure and precede reconciliation, pending retries, Findings and writes. */
+export declare function admitSnapshot(options: SnapshotAdmissionOptions): SnapshotAdmission;
+export interface ObserveSnapshotOptions {
+    bound: BoundSnapshotSource;
+    snapshot: DecodedSnapshot;
+    previousBindingDigest: string | null;
+    state: MachineState;
+    capacity: SnapshotCapacityInput;
+    now?: () => Date;
+    signal?: AbortSignal;
+    commit(page: PageCommit): Promise<CommitResult | void>;
+}
+export interface SnapshotRunReceipt extends SourceRunReceipt {
+    observation: "new" | "replay";
+    generation: number;
+    sha256: string;
+    capacity: SnapshotCapacityFacts;
+}
+/** One finite acquisition. Admission refusals throw; runtime commit/store failures use the receipt. */
+export declare function observeSnapshot(options: ObserveSnapshotOptions): Promise<SnapshotRunReceipt>;
+//# sourceMappingURL=snapshot.d.ts.map

package/dist/source-engine/snapshot.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"snapshot.d.ts","sourceRoot":"","sources":["../../src/source-engine/snapshot.ts"],"names":[],"mappings":"AAAA,sFAAsF;AACtF,OAAO,EAAwF,KAAK,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACxI,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAEhD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mCAAmC,CAAC;AACrE,OAAO,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAI1D,OAAO,EAA0C,KAAK,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAC9F,OAAO,EAAiB,KAAK,YAAY,EAAE,KAAK,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACxF,OAAO,EAA2B,KAAK,qBAAqB,EAAE,MAAM,cAAc,CAAC;AACnF,OAAO,KAAK,EAAE,YAAY,EAAE,UAAU,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAEhG,eAAO,MAAM,kBAAkB,QAAkB,CAAC;AAClD,eAAO,MAAM,oBAAoB,QAAS,CAAC;AAC3C,eAAO,MAAM,gBAAgB;;;EAAsD,CAAC;AACpF,eAAO,MAAM,sBAAsB,kYAEmG,CAAC;AACvI,MAAM,MAAM,mBAAmB,GAAG,OAAO,sBAAsB,CAAC,MAAM,CAAC,CAAC;AACxE,qBAAa,eAAgB,SAAQ,KAAK;IACxC,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAC;gBACvB,IAAI,EAAE,mBAAmB;CACtC;AAQD,MAAM,WAAW,mBAAoB,SAAQ,SAAS;IACpD,WAAW,EAAE,gBAAgB,CAAC;IAC9B,aAAa,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AACD,MAAM,WAAW,gBAAgB;IAC/B,CAAC,EAAE,CAAC,CAAC;IACL,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,OAAO,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;IACnC,WAAW,CAAC,EAAE,iBAAiB,EAAE,CAAC;IAClC,QAAQ,CAAC,EAAE,gBAAgB,CAAC;CAC7B;AACD,MAAM,WAAW,eAAe;IAC9B,mGAAmG;IACnG,KAAK,EAAE,UAAU,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,gBAAgB,CAAC;CACxB;AAED,oGAAoG;AACpG,wBAAgB,kBAAkB,CAAC,GAAG,EAAE;IAAE,EAAE,EAAE,SAAS,CAAC;IAAC,WAAW,EAAE,WAAW,CAAA;CAAE,EAAE,KAAK,EAAE,YAAY,EACtG,OAAO,GAAE;IAAE,UAAU,CAAC,EAAE,KAAK,GAAG,KAAK,CAAA;CAAO,GAAG,mBAAmB,CA4BnE;AAED,mGAAmG;AACnG,wBAAgB,cAAc,CAAC,KAAK,EAAE,UAAU,GAAG,eAAe,CAiBjE;AAED,MAAM,WAAW,qBAAqB;IACpC,wFAAwF;IACxF,QAAQ,EAAE,qBAAqB,CAAC;IAChC,oFAAoF;IACpF,QAAQ,EAAE,WAAW,CAAC;IACtB,2FAA2F;IAC3F,qBAAqB,EAAE,MAAM,CAAC;IAC9B,gBAAgB,EAAE,MAAM,CAAC;CAC1B;AACD,MAAM,WAAW,qBAAqB;IACpC,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,eAAe,EAAE,MAAM,CAAC;IACxB,gBAAgB,EAAE,MAAM,CAAC;CAC1B;AACD,MAAM,WAAW,wBAAwB;IACvC,KAAK,EAAE,mBAAmB,CAAC;IAC3B,QAAQ,EAAE,eAAe,CAAC;IAC1B,KAAK,EAAE,WAAW,GAAG,IAAI,CAAC;IAC1B,kGAAkG;IAClG,qBAAqB,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,QAAQ,EAAE,qBAAqB,CAAC;CACjC;AACD,MAAM,WAAW,iBAAiB;IAChC,WAAW,EAAE,KAAK,GAAG,QAAQ,CAAC;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,qBAAqB,CAAC;CACjC;AAuED,oGAAoG;AACpG,wBAAgB,aAAa,CAAC,OAAO,EAAE,wBAAwB,GAAG,iBAAiB,CAgClF;AAED,MAAM,WAAW,sBAAsB;IACrC,KAAK,EAAE,mBAAmB,CAAC;IAC3B,QAAQ,EAAE,eAAe,CAAC;IAC1B,qBAAqB,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,KAAK,EAAE,YAAY,CAAC;IACpB,QAAQ,EAAE,qBAAqB,CAAC;IAChC,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IACjB,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,MAAM,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAAC;CACxD;AACD,MAAM,WAAW,kBAAmB,SAAQ,gBAAgB;IAC1D,WAAW,EAAE,KAAK,GAAG,QAAQ,CAAC;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,qBAAqB,CAAC;CACjC;AACD,uGAAuG;AACvG,wBAAsB,eAAe,CAAC,OAAO,EAAE,sBAAsB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAmBlG"}

package/dist/source-engine/snapshot.js

@@ -0,0 +1,240 @@
+/** Finite, data-only acquisition over the existing observation and overlay owners. */
+import { findingsFor, isPrototypeKey, mapRecord, parseRecordSourceDeclaration, renderIdentity } from "../connectors.js";
+import { readOverlayPolicyForResource } from "../record-overlay/policy.js";
+import { blobVersion, sha256Hex } from "../versioning.js";
+import { definitionCanonicalJson } from "../recipe-lifecycle/stamp.js";
+import { driveObservation, isJsonData } from "./driver.js";
+import { parseSnapshotEvidence, SNAPSHOT_SHA256 } from "./evidence.js";
+import { isSourceState } from "./machine-state.js";
+import { isSourceOverlaySnapshot } from "./overlay.js";
+export const SNAPSHOT_MAX_BYTES = 2 * 1024 * 1024;
+export const SNAPSHOT_MAX_RECORDS = 10_000;
+export const SNAPSHOT_PROFILE = Object.freeze({ id: "local-snapshot", version: 1 });
+export const SNAPSHOT_REFUSAL_CODES = ["SNAPSHOT_DECLARATION_INVALID", "SNAPSHOT_INPUT_INVALID", "SNAPSHOT_TOO_LARGE", "SNAPSHOT_RESOURCE_MISMATCH",
+    "SNAPSHOT_SCOPE_MISMATCH", "SNAPSHOT_IDENTITY_INVALID", "SNAPSHOT_IDENTITY_DUPLICATE", "SNAPSHOT_STATE_INVALID", "SNAPSHOT_BINDING_CHANGED",
+    "SNAPSHOT_GENERATION_ROLLBACK", "SNAPSHOT_GENERATION_COLLISION", "SNAPSHOT_CAPACITY_EXCEEDED", "SNAPSHOT_CAPACITY_INVALID"];
+export class SnapshotRefusal extends Error {
+    code;
+    constructor(code) { super(code); this.code = code; this.name = "SnapshotRefusal"; }
+}
+const refuse = (code) => { throw new SnapshotRefusal(code); };
+const object = (v) => v !== null && typeof v === "object" && !Array.isArray(v);
+const closed = (v, keys) => Object.keys(v).every(k => keys.includes(k));
+const resourceValid = (v) => typeof v === "string" && v.length <= 2048 && /^urn:[a-z0-9][a-z0-9-]{0,31}:[A-Za-z0-9][A-Za-z0-9._~:%-]*$/.test(v);
+const scopeValid = (v) => typeof v === "string" && /^[A-Za-z0-9][A-Za-z0-9._:-]{0,255}$/.test(v);
+const bytes = (v) => new TextEncoder().encode(JSON.stringify(v)).byteLength;
+/** Ordinary document policy; no Kind, executable profile or Connector registration is installed. */
+export function bindSnapshotSource(doc, kinds, options = {}) {
+    const fm = (doc.frontmatter ?? {});
+    if (!resourceValid(fm.resource) || typeof fm.target_kind !== "string" || !object(fm.identity)
+        || !closed(fm.identity, ["id"]) || ["url", "connector", "source", "profile", "request", "auth", "domains", "credential"].some(k => Object.hasOwn(fm, k))
+        || fm.scope !== undefined && !scopeValid(fm.scope) || fm.completeness === "complete" && !scopeValid(fm.scope))
+        return refuse("SNAPSHOT_DECLARATION_INVALID");
+    const kind = kinds.kinds.get(fm.target_kind);
+    if (!kind)
+        return refuse("SNAPSHOT_DECLARATION_INVALID");
+    const parsed = parseRecordSourceDeclaration({ name: "snapshot", profile: SNAPSHOT_PROFILE.id, target_kind: fm.target_kind,
+        identity: { resource: fm.resource, id: fm.identity.id }, fields: fm.fields, completeness: fm.completeness }, kind, fm.resource);
+    if (!parsed.ok)
+        return refuse("SNAPSHOT_DECLARATION_INVALID");
+    for (const key of ["owned_fields", "auto_apply", "needs_review"]) {
+        const value = fm[key];
+        if (value !== undefined && value !== null && typeof value !== "string" && !(Array.isArray(value) && value.every(item => typeof item === "string")))
+            return refuse("SNAPSHOT_DECLARATION_INVALID");
+    }
+    for (const key of ["missing_threshold", "exclude_pattern", "wall_time_zone"]) {
+        const value = fm[key];
+        if (value !== undefined && value !== null && typeof value !== "string" && typeof value !== "number")
+            return refuse("SNAPSHOT_DECLARATION_INVALID");
+    }
+    let policy;
+    try {
+        policy = readOverlayPolicyForResource(doc, fm.resource, { targetKind: kind });
+    }
+    catch {
+        return refuse("SNAPSHOT_DECLARATION_INVALID");
+    }
+    if (policy.owned_fields.some(field => !Object.hasOwn(parsed.source.fields, field))
+        || (options.okfVersion ?? "0.1") !== "0.2" && policy.owned_fields.some(field => policy.list_fields?.includes(field)))
+        return refuse("SNAPSHOT_DECLARATION_INVALID");
+    const bound = { acquisition: "local-snapshot", policy: { ...policy, target_kind: fm.target_kind, completeness: parsed.source.completeness },
+        source: parsed.source, kind, parameters: {}, resource: fm.resource, ...(fm.scope !== undefined ? { scope: fm.scope } : {}) };
+    // The accepted binding includes Kind shape and edition as well as mapping and policy.
+    const bindingDigest = `sha256:${sha256Hex(definitionCanonicalJson({ ...bound, policy: { ...bound.policy, exclude: bound.policy.exclude?.source ?? null }, okfVersion: options.okfVersion ?? "0.1" }))}`;
+    return structuredClone({ ...bound, bindingDigest });
+}
+/** Closed JSON v1, exact-byte identity, UTF-8/depth/finite/count bounds; never accesses a path. */
+export function decodeSnapshot(input) {
+    if (!(input instanceof Uint8Array))
+        return refuse("SNAPSHOT_INPUT_INVALID");
+    if (input.byteLength > SNAPSHOT_MAX_BYTES)
+        return refuse("SNAPSHOT_TOO_LARGE");
+    const copy = new Uint8Array(input);
+    let value;
+    try {
+        value = JSON.parse(new TextDecoder("utf-8", { fatal: true }).decode(copy));
+    }
+    catch {
+        return refuse("SNAPSHOT_INPUT_INVALID");
+    }
+    if (!isJsonData(value) || !object(value) || !closed(value, ["v", "resource", "generation", "complete", "scope", "records", "diagnostics", "evidence"])
+        || value.v !== 1 || !resourceValid(value.resource) || !Number.isSafeInteger(value.generation) || value.generation < 1
+        || typeof value.complete !== "boolean" || !Array.isArray(value.records) || value.records.length > SNAPSHOT_MAX_RECORDS
+        || !value.records.every(object) || value.scope !== undefined && !scopeValid(value.scope))
+        return refuse("SNAPSHOT_INPUT_INVALID");
+    if (value.diagnostics !== undefined && (!Array.isArray(value.diagnostics) || value.diagnostics.length > 100
+        || !value.diagnostics.every(d => object(d) && closed(d, ["code", "message", "count"])
+            && typeof d.code === "string" && /^[A-Z][A-Z0-9_]{0,63}$/.test(d.code) && typeof d.message === "string" && d.message.length <= 512
+            && (d.count === undefined || Number.isSafeInteger(d.count) && d.count >= 0))))
+        return refuse("SNAPSHOT_INPUT_INVALID");
+    if (value.evidence !== undefined)
+        value.evidence = parseSnapshotEvidence(value.evidence);
+    return { bytes: copy, sha256: blobVersion(copy), byteLength: copy.byteLength, data: value };
+}
+/**
+ * Conservative upper bound over every possible stage, without simulating overlay decisions.
+ * Each ID can retain an after plus a pending before/after/entry; each indexed tuple can retain
+ * another after. A per-field maximum over old, mapped and accepted values bounds carrying and
+ * clearing. Four copies of the original state cover retained extensions and metadata copied
+ * from an old entry into a record, pending entry and change during retry/missing transitions.
+ */
+function capacityFacts(bound, snapshot, state, input) {
+    if (!isSourceOverlaySnapshot(input.accepted) || !isJsonData(input.accepted)
+        || !Number.isSafeInteger(input.envelopeOverheadBytes) || input.envelopeOverheadBytes < 0
+        || !Number.isSafeInteger(input.maxEnvelopeBytes) || input.maxEnvelopeBytes < 1 || !input.overlays || typeof input.overlays.lookup !== "function")
+        return refuse("SNAPSHOT_CAPACITY_INVALID");
+    const bags = new Map();
+    const add = (id, values) => {
+        const bag = bags.get(id) ?? Object.create(null);
+        bags.set(id, bag);
+        for (const [field, value] of Object.entries(values ?? {}))
+            if (!Object.hasOwn(bag, field) || bytes(value) > bytes(bag[field]))
+                bag[field] = value;
+    };
+    for (const [id, entry] of Object.entries(state?.records ?? {}))
+        add(id, entry.after);
+    for (const [id, pending] of Object.entries(state?.pending ?? {})) {
+        add(id, pending.entry.after);
+        add(id, pending.change.before);
+        add(id, pending.change.after);
+    }
+    for (const entry of input.accepted.entries)
+        add(entry.external_id, entry.after);
+    for (const raw of snapshot.data.records) {
+        const mapped = mapRecord(bound.source, raw, bound.kind);
+        if (mapped.external_id !== null)
+            add(mapped.external_id, mapped.kind === "mapped" ? mapped.fields : undefined);
+    }
+    const tupleKeys = new Set(input.accepted.entries.map(e => JSON.stringify([e.feed, e.resource, e.external_id, e.target])));
+    const candidates = [];
+    for (const [id, after] of bags) {
+        const matches = input.overlays.lookup(bound.resource, id, { type: bound.source.target_kind });
+        if (matches.length !== 1)
+            continue;
+        const tuple = { feed: bound.policy.feed, resource: bound.resource, external_id: id, target: matches[0].id, after };
+        tupleKeys.add(JSON.stringify([tuple.feed, tuple.resource, id, tuple.target]));
+        candidates.push(tuple);
+    }
+    const time = "x".repeat(32), digest = `sha256:${"f".repeat(64)}`;
+    const records = Object.create(null), pending = Object.create(null);
+    for (const [id, after] of bags) {
+        const entry = { after, digest, missing: Number.MAX_SAFE_INTEGER, first_missing_at: time, gone: true, seen_at: time };
+        records[id] = entry;
+        pending[id] = { change: { external_id: id, change_kind: "disappeared", changed_fields: Object.keys(after), before: after, after,
+                content_digest: digest, missing_count: Number.MAX_SAFE_INTEGER, first_missing_at: time }, entry, held_at: time, replay_failures: Number.MAX_SAFE_INTEGER };
+    }
+    const upperBoundBytes = input.envelopeOverheadBytes + 4 * bytes(state) + bytes(input.accepted)
+        + bytes({ v: 1, profile: SNAPSHOT_PROFILE, cursor: { v: 1, generation: Number.MAX_SAFE_INTEGER, sha256: snapshot.sha256 }, open: false,
+            records, pending, complete_observations: Number.MAX_SAFE_INTEGER, last_complete_at: time }) + bytes({ v: 1, entries: candidates });
+    const facts = { retainedIds: bags.size, acceptedTuples: tupleKeys.size, upperBoundBytes, maxEnvelopeBytes: input.maxEnvelopeBytes };
+    if (facts.retainedIds > SNAPSHOT_MAX_RECORDS || facts.acceptedTuples > SNAPSHOT_MAX_RECORDS || facts.upperBoundBytes > facts.maxEnvelopeBytes)
+        return refuse("SNAPSHOT_CAPACITY_EXCEEDED");
+    return facts;
+}
+/** Snapshot history has one fixed state format; malformed retry data cannot reach a commit. */
+function snapshotStateValid(value) {
+    if (!isSourceState(value) || !isJsonData(value))
+        return false;
+    const count = (v) => Number.isSafeInteger(v) && v >= 0;
+    const idValid = (id) => id.length > 0 && id.length <= 2048 && !isPrototypeKey(id) && !/[\x00-\x1f\x7f]/.test(id);
+    const entryValid = (entry) => object(entry) && object(entry.after) && typeof entry.digest === "string" && SNAPSHOT_SHA256.test(entry.digest)
+        && count(entry.missing) && typeof entry.seen_at === "string" && (entry.gone === undefined || entry.gone === true)
+        && (entry.first_missing_at === undefined || typeof entry.first_missing_at === "string");
+    if (!count(value.complete_observations) || value.last_complete_at !== undefined && typeof value.last_complete_at !== "string"
+        || !Object.entries(value.records).every(([id, entry]) => idValid(id) && entryValid(entry)))
+        return false;
+    return Object.entries(value.pending ?? {}).every(([id, pending]) => {
+        const change = pending.change;
+        return idValid(id) && entryValid(pending.entry) && typeof pending.held_at === "string" && (pending.replay_failures === undefined || count(pending.replay_failures))
+            && ["new", "changed", "disappeared"].includes(change.change_kind) && Array.isArray(change.changed_fields) && change.changed_fields.every(f => typeof f === "string")
+            && (change.before === null || object(change.before)) && (change.after === null || object(change.after))
+            && typeof change.content_digest === "string" && SNAPSHOT_SHA256.test(change.content_digest)
+            && (change.missing_count === undefined || count(change.missing_count)) && (change.first_missing_at === undefined || typeof change.first_missing_at === "string");
+    });
+}
+/** All refusal checks are pure and precede reconciliation, pending retries, Findings and writes. */
+export function admitSnapshot(options) {
+    const { bound, state } = options;
+    const snapshot = decodeSnapshot(options.snapshot.bytes);
+    if (bound.acquisition !== "local-snapshot" || bound.source.profile !== SNAPSHOT_PROFILE.id || !resourceValid(bound.resource)
+        || bound.policy.provider !== bound.resource || bound.source.identity.resource !== bound.resource)
+        return refuse("SNAPSHOT_DECLARATION_INVALID");
+    if (snapshot.data.resource !== bound.resource)
+        return refuse("SNAPSHOT_RESOURCE_MISMATCH");
+    if (snapshot.data.complete && (bound.source.completeness !== "complete" || bound.scope === undefined || snapshot.data.scope !== bound.scope)
+        || snapshot.data.scope !== undefined && snapshot.data.scope !== bound.scope)
+        return refuse("SNAPSHOT_SCOPE_MISMATCH");
+    let currentGeneration = null;
+    let observation = "new";
+    if (state !== null) {
+        if (!snapshotStateValid(state) || state.profile.id !== SNAPSHOT_PROFILE.id || state.profile.version !== SNAPSHOT_PROFILE.version
+            || !closed(state.profile, ["id", "version"]) || state.open !== false || state.validators !== undefined || !object(state.cursor)
+            || !closed(state.cursor, ["v", "generation", "sha256"]) || state.cursor.v !== 1 || !Number.isSafeInteger(state.cursor.generation)
+            || state.cursor.generation < 1 || typeof state.cursor.sha256 !== "string" || !SNAPSHOT_SHA256.test(state.cursor.sha256))
+            return refuse("SNAPSHOT_STATE_INVALID");
+        if (options.previousBindingDigest !== bound.bindingDigest)
+            return refuse("SNAPSHOT_BINDING_CHANGED");
+        currentGeneration = state.cursor.generation;
+        if (snapshot.data.generation < currentGeneration)
+            return refuse("SNAPSHOT_GENERATION_ROLLBACK");
+        if (snapshot.data.generation === currentGeneration) {
+            if (snapshot.sha256 !== state.cursor.sha256)
+                return refuse("SNAPSHOT_GENERATION_COLLISION");
+            observation = "replay";
+        }
+    }
+    const ids = new Set();
+    for (const raw of snapshot.data.records) {
+        const identity = renderIdentity(bound.source, bound, raw);
+        if (!identity.ok || isPrototypeKey(identity.id) || /[\x00-\x1f\x7f]/.test(identity.id))
+            return refuse("SNAPSHOT_IDENTITY_INVALID");
+        if (ids.has(identity.id))
+            return refuse("SNAPSHOT_IDENTITY_DUPLICATE");
+        ids.add(identity.id);
+    }
+    return { observation, generation: snapshot.data.generation, currentGeneration, sha256: snapshot.sha256, records: ids.size,
+        capacity: capacityFacts(bound, snapshot, state, options.capacity) };
+}
+/** One finite acquisition. Admission refusals throw; runtime commit/store failures use the receipt. */
+export async function observeSnapshot(options) {
+    const bound = structuredClone(options.bound), snapshot = decodeSnapshot(options.snapshot.bytes);
+    const stored = await options.state.read(bound.policy.feed);
+    const admission = admitSnapshot({ bound, snapshot, state: stored?.state ?? null, previousBindingDigest: options.previousBindingDigest, capacity: options.capacity });
+    const observedAt = (options.now ?? (() => new Date()))().toISOString();
+    const receipt = { feed: bound.policy.feed, provider: bound.resource, source: bound.source.name, profile: { ...SNAPSHOT_PROFILE },
+        mode: "complete", observed_at: observedAt, outcome: "observed", retry: true, pages: 0, held: 0, pending: Object.keys(stored?.state.pending ?? {}).length,
+        requests: [], pass: { resumed: false, ended: false, complete: false }, changes: { new: 0, changed: 0, disappeared: 0 }, cursor: stored?.state.cursor ?? null,
+        diagnostics: [], profile_diagnostics: [], findings: [], observation: admission.observation, generation: admission.generation, sha256: admission.sha256, capacity: admission.capacity };
+    const extraFindings = [];
+    await driveObservation({ bound, state: options.state, initial: stored?.state ?? { v: 1, profile: { ...SNAPSHOT_PROFILE }, cursor: null, open: false, records: {}, complete_observations: 0 },
+        version: stored?.version ?? null, receipt, observedAt, mode: "complete", resumed: false, signal: options.signal ?? new AbortController().signal,
+        pages: 1, replayOnly: admission.observation === "replay", extraFindings, commit: options.commit,
+        acquire: async () => ({ records: snapshot.data.records, more: false, complete: snapshot.data.complete,
+            nextCursor: { v: 1, generation: snapshot.data.generation, sha256: snapshot.sha256 }, diagnostics: snapshot.data.diagnostics }),
+        stop: stop => { receipt.outcome = stop.outcome; receipt.retry = stop.retry; if (stop.reason !== undefined)
+            receipt.reason = stop.reason; },
+    });
+    receipt.findings = [...extraFindings, ...findingsFor(receipt.diagnostics, { source: bound.source.name })];
+    return receipt;
+}
+//# sourceMappingURL=snapshot.js.map