@tangle-network/agent-eval 0.150.2 → 0.161.0

package/dist/experiment/index.js

@@ -1,16 +1,18 @@
 import { n as CaptureIntegrityError, s as ValidationError } from "../errors-Dngq5h35.js";
-import { a as verifyManifest, i as signManifest, n as evaluateHypothesis, r as hashJson, t as canonicalize } from "../pre-registration-DakwTRXk.js";
+import { r as canonicalString } from "../canonical-IL-Bu-14.js";
+import { a as verifyManifest, i as signManifest, n as hashJson, r as manifestContentDigest, t as evaluateHypothesis } from "../pre-registration-KN9jkh58.js";
 import { c as mulberry32 } from "../internal-BDHPCnjk.js";
 import { a as requiredSampleSize, c as holm, i as requiredPairedSampleSize, n as mcnemarRequiredN, o as benjaminiHochberg, r as pairedMde, s as bonferroni, t as mcnemarPower } from "../power-and-mde-CHIrXJll.js";
 import { f as mcnemar, g as pairedRiskDifferenceScore, h as pairedRiskDifferenceExact, m as pairedRiskDifference, n as pairArms, r as pairRunRecords, t as comparePairedArms, v as wilson } from "../paired-arms-D-XRF_fy.js";
 import { r as pairedBootstrap, t as BOOTSTRAP_GATE_MIN_N } from "../paired-tests-BHIhYVdu.js";
-import { t as eProcess } from "../sequential-eprocess-CbUt2htw.js";
-import { n as contentHash } from "../verdict-cache-mZf5FEiY.js";
+import { t as eProcess } from "../sequential-eprocess-D1jKoihe.js";
+import { n as contentHash } from "../verdict-cache-CdVVTVmn.js";
 import { a as heldoutSignificance, o as pairHoldout, t as powerPreflight } from "../power-preflight-DEw-uC7q.js";
 import { a as inMemoryExperimentStore, r as fileExperimentStore, t as ExperimentTracker } from "../experiment-tracker-Ym6rEQT1.js";
 import { n as pairedEvalueSequence, r as sequentialCrossingHorizon } from "../sequential-CzK5DarL.js";
 import { n as paretoPolicy, r as paretoSignificanceGate, t as buildEvidenceVector } from "../promotion-policy-xzA40Evo.js";
-import { n as sequentialPairedGate, t as sequentialDecide } from "../sequential-C458DXNf.js";
+import { n as sequentialPairedGate, t as sequentialDecide } from "../sequential-rYW-Ophm.js";
+import { createHash } from "node:crypto";
 import { z } from "zod";
 //#region src/experiment/ast.ts
 /**
@@ -864,11 +866,11 @@ function deepFreeze(value) {
 /** Validate, canonicalize, and hash a spec into its registration. */
 async function sealExperiment(spec, options = {}) {
 	const validated = defineExperiment(spec);
-	const digest = await hashJson(validated);
+	const digest = specDigest(validated, "sha256-rfc8785");
 	return {
 		spec: validated,
 		digest,
-		algo: "sha256-content",
+		algo: "sha256-rfc8785",
 		sealedAt: options.sealedAt ?? (/* @__PURE__ */ new Date()).toISOString(),
 		initialDigest: digest,
 		amendments: []
@@ -882,11 +884,11 @@ async function sealExperiment(spec, options = {}) {
 async function amendExperiment(sealed, amendment) {
 	await assertSealIntact(sealed);
 	const validated = defineExperiment(amendment.spec);
-	const digest = await hashJson(validated);
+	const digest = specDigest(validated, "sha256-rfc8785");
 	return {
 		spec: validated,
 		digest,
-		algo: "sha256-content",
+		algo: "sha256-rfc8785",
 		sealedAt: sealed.sealedAt,
 		initialDigest: sealed.initialDigest,
 		amendments: [...sealed.amendments, {
@@ -897,9 +899,26 @@ async function amendExperiment(sealed, amendment) {
 		}]
 	};
 }
-/** True when the sealed digest still matches the spec it carries. */
+/** True when the sealed digest still matches the spec it carries, under the
+*  scheme the seal declares. */
 async function verifySealedExperiment(sealed) {
-	return await hashJson(sealed.spec) === sealed.digest;
+	return specDigest(sealed.spec, sealed.algo) === sealed.digest;
+}
+/**
+* Serialize a spec under `algo` and digest it. `'sha256-content'` is read-only
+* — it exists so a seal written by an earlier release still verifies, and no
+* path that WRITES a digest may pass it.
+*/
+function specDigest(spec, algo) {
+	const serialized = algo === "sha256-rfc8785" ? canonicalString(spec) : JSON.stringify(sortKeysDeep(spec));
+	return createHash("sha256").update(serialized, "utf8").digest("hex");
+}
+function sortKeysDeep(value) {
+	if (value === null || typeof value !== "object") return value;
+	if (Array.isArray(value)) return value.map(sortKeysDeep);
+	const out = {};
+	for (const key of Object.keys(value).sort()) out[key] = sortKeysDeep(value[key]);
+	return out;
 }
 async function assertSealIntact(sealed) {
 	if (!await verifySealedExperiment(sealed)) throw new SealIntegrityError(`sealed experiment '${sealed.spec.id}' digest ${sealed.digest} does not match its spec — the registration was tampered with`);
@@ -1510,6 +1529,6 @@ function mixSeed(seed, effect) {
 	return (seed ^ Math.round(effect * 1000003) * 2654435769) >>> 0 | 0;
 }
 //#endregion
-export { BOOTSTRAP_GATE_MIN_N, DecisionTableNotTotalError, DesignRefusalError, EVIDENCE_AUTHORITY_KINDS, EVIDENCE_RECEIPT_VERSION, EVIDENCE_STATES, EvidenceRegistryError, ExperimentTracker, FunnelIntegrityError, INDEPENDENT_EVIDENCE_AUTHORITY_KINDS, MatchedBudgetError, SealIntegrityError, amendExperiment, assertDesignAdequate, assertFunnelReconciles, assertMatchedBudgets, benjaminiHochberg, bonferroni, buildEvidenceVector, buildFunnel, canonicalize, classifyReissue, clusteredPower, comparePairedArms, composeFunnels, computeEstimand, computeInterval, createEvidenceReceipt, defineExperiment, eProcess, evaluateCondition, evaluateHaltRule, evaluateHypothesis, evaluateIdentityGate, evaluateOracleDeterminismGate, evaluatePopulationReproducibilityGate, evaluatePowerFloorGate, evaluatePredicate, evaluateProvenanceGate, evidenceDenominatorSchema, evidenceRegistryRecordSchema, executeAdmissionRule, executeDecisionRule, fileExperimentStore, hashJson, heldoutSignificance, holm, inMemoryExperimentStore, isIndependentEvidence, mcnemar, mcnemarPower, mcnemarRequiredN, mulberry32, openSealedExperiment, pairArms, pairHoldout, pairRunRecords, pairedBootstrap, pairedEvalueSequence, pairedMde, pairedRiskDifference, pairedRiskDifferenceExact, pairedRiskDifferenceScore, paretoPolicy, paretoSignificanceGate, parseEvidenceRegistryRecord, powerPreflight, projectNLadderBudget, readField, renderEvidenceIndex, renderFunnelTable, requiredPairedSampleSize, requiredSampleSize, runSelectionRule, runUniformPassBudget, sealExperiment, sequentialCrossingHorizon, sequentialDecide, sequentialPairedGate, signManifest, validateEvidenceRegistry, verifyEvidenceReceipt, verifyManifest, verifyMatchedBudgets, verifySealedExperiment, wilson };
+export { BOOTSTRAP_GATE_MIN_N, DesignRefusalError, EVIDENCE_AUTHORITY_KINDS, EVIDENCE_RECEIPT_VERSION, EVIDENCE_STATES, ExperimentTracker, FunnelIntegrityError, INDEPENDENT_EVIDENCE_AUTHORITY_KINDS, MatchedBudgetError, SealIntegrityError, amendExperiment, assertDesignAdequate, assertFunnelReconciles, assertMatchedBudgets, benjaminiHochberg, bonferroni, buildEvidenceVector, buildFunnel, classifyReissue, clusteredPower, comparePairedArms, composeFunnels, computeEstimand, computeInterval, createEvidenceReceipt, defineExperiment, eProcess, evaluateCondition, evaluateHaltRule, evaluateHypothesis, evaluateIdentityGate, evaluateOracleDeterminismGate, evaluatePopulationReproducibilityGate, evaluatePowerFloorGate, evaluatePredicate, evaluateProvenanceGate, evidenceRegistryRecordSchema, executeAdmissionRule, executeDecisionRule, fileExperimentStore, hashJson, heldoutSignificance, holm, inMemoryExperimentStore, isIndependentEvidence, manifestContentDigest, mcnemar, mcnemarPower, mcnemarRequiredN, mulberry32, openSealedExperiment, pairArms, pairHoldout, pairRunRecords, pairedBootstrap, pairedEvalueSequence, pairedMde, pairedRiskDifference, pairedRiskDifferenceExact, pairedRiskDifferenceScore, paretoPolicy, paretoSignificanceGate, parseEvidenceRegistryRecord, powerPreflight, projectNLadderBudget, readField, renderEvidenceIndex, renderFunnelTable, requiredPairedSampleSize, requiredSampleSize, runSelectionRule, runUniformPassBudget, sealExperiment, sequentialCrossingHorizon, sequentialDecide, sequentialPairedGate, signManifest, validateEvidenceRegistry, verifyEvidenceReceipt, verifyManifest, verifyMatchedBudgets, verifySealedExperiment, wilson };
 
 //# sourceMappingURL=index.js.map