@wasm-oj/core 0.2.0 → 0.2.2

package/THIRD_PARTY_NOTICES.md

@@ -65,13 +65,39 @@ package. The generated dependency report covers every package in the pinned
 normal Cargo dependency graph selected for `wasm32-unknown-unknown`; its compact
 inventory binds all 332 package identities and the exact HTML report digest.
 
+### QuickJS guest Node standard I/O libraries
+
+The generated guest prelude in `src/runtime/quickjs/stdlib.generated.ts` bundles
+the following exact npm releases. `scripts/build-quickjs-stdlib.mjs` builds this
+prelude from the locked packages and the WASM-OJ standard I/O adapters.
+
+| Component | Source release | License |
+| --- | --- | --- |
+| buffer 6.0.3 | <https://github.com/feross/buffer/tree/v6.0.3> | MIT |
+| readable-stream 4.7.0 | <https://github.com/nodejs/readable-stream/tree/v4.7.0> | MIT |
+| events 3.3.0 | <https://github.com/Gozala/events/tree/v3.3.0> | MIT |
+| abort-controller 3.0.0 | <https://github.com/mysticatea/abort-controller/tree/v3.0.0> | MIT |
+| event-target-shim 5.0.1 | <https://github.com/mysticatea/event-target-shim/tree/v5.0.1> | MIT |
+| base64-js 1.5.1 | <https://github.com/beatgammit/base64-js/tree/v1.5.1> | MIT |
+| ieee754 1.2.1 | <https://github.com/feross/ieee754/tree/v1.2.1> | BSD-3-Clause |
+| string_decoder 1.3.0 | <https://github.com/nodejs/string_decoder/tree/v1.3.0> | MIT |
+| safe-buffer 5.2.1 | <https://github.com/feross/safe-buffer/tree/v5.2.1> | MIT |
+
+The complete upstream license texts, including the Node-derived stream and
+decoder notices, are reproduced in `licenses/quickjs-node-stdlib-LICENSES.txt`
+(SHA-256 `38e42dcb48e476e4e836552c814c911eb5464d80b56b970d87aa07b88c7b28f8`).
+`licenses/components.json` binds each release to the generated bundle digest;
+`pnpm-lock.yaml` pins all package integrity values. The Buffer declarations are
+also copied from the same buffer 6.0.3 release. These guest libraries implement
+the supported byte buffers and standard streams; they do not include Node.js.
+
 ## Distributed toolchain assets
 
 ### TypeScript-Go
 
 - Distributed asset: `typescript-7.0.2.wasm.gz.bin`
-- Compressed SHA-256: `06e58ce887d95d1895055699b8dc96a1cde7d1f2baa48de40f9b790e3271dc16`
-- Expanded Wasm SHA-256: `27c931087b3b0cc48804f3749b07eb710538c4ab175969db8a8ff680e6ec4fde`
+- Compressed SHA-256: `29c6ee0e46151e2644049ae96162b1b1d46dcb13310e2a928114bb9030c3ea92`
+- Expanded Wasm SHA-256: `01cea8c18841b73e0601d31859be1dcd323e61d83e7cfb15523dd051fc78c8da`
 - Source revision: `microsoft/typescript-go@2bd066d87f5bafd315be9f40889d0a60b9e58e0b`
 - Source: <https://github.com/microsoft/typescript-go/tree/2bd066d87f5bafd315be9f40889d0a60b9e58e0b>
 - Build runtime: Go 1.26.3 standard library (`GOOS=wasip1`, `GOARCH=wasm`)
@@ -101,29 +127,29 @@ byte-identical to `go/LICENSE` in the exact Go 1.26.5 source distribution.
 
 ### Java compiler toolchain
 
-- Distributed assets: `java-teavm-0.13.1.wasi.compiler.webc.gz.bin`,
+- Distributed assets: `java-teavm-0.13.1.compiler.wasm`,
   `java-teavm-0.13.1.compile-classlib.bin`, and
   `java-teavm-0.13.1.runtime-classlib.bin`
 - TeaVM Java compiler source: <https://github.com/konsoletyper/teavm-javac/tree/7e4a44cf521694a4e326e33850dd8aec165eb5c9>
 - TeaVM core source: `konsoletyper/teavm@b3a245b7d9034ff35cdfab2def057a3d4f256efb`
-  plus the pinned WASI compiler and math-intrinsic patch
-- Compiler package compressed SHA-256:
-  `129f1f51d591e58954f88787d36396b856a9a68ba3ae9c9d14f20bd67c2c7722`
-- Compiler package expanded SHA-256:
-  `f8f86761cf31062565187e4a66f73b6903f257fe84c0ce70ea1cd28441b6c2e9`
-- Licenses: TeaVM Apache-2.0; OpenJDK class library GPL-2.0 with Classpath
-  Exception
-- License material: `licenses/Apache-2.0.txt` and
-  `licenses/openjdk-21-GPL-2.0-with-Classpath-exception.txt`
-
-The compiler emits standalone `wasip1` modules. The class-library archives are
-mounted only during compilation and are not included in submitted artifacts.
+  with source patches and build provenance in `tools/java-client/`
+- Compiler SHA-256: `8c37bce1c6fceeaffeffe93e10834309b67c8b6fb58c6f8a24547afe8be67f5d`
+- Android Scanner and Spliterators source: `platform/libcore@de876a01b29230b877c9f408348c38a90ee724a5`
+- Licenses: TeaVM Apache-2.0; OpenJDK and Android class libraries GPL-2.0
+  with Classpath exception
+- License material: `licenses/Apache-2.0.txt`,
+  `licenses/openjdk-21-GPL-2.0-with-Classpath-exception.txt`, and
+  `licenses/android-libcore-GPL-2.0-with-Classpath-exception.txt`
+
+The WasmGC compiler uses statically packaged JavaScript bindings and emits
+standalone `wasip1` student modules. TeaVM links reachable class-library code
+into those modules; the full class-library archives are compiler inputs.
 
 ### QuickJS-ng
 
 - Distributed asset: `quickjs-0.15.1.wasm.gz.bin`
-- Compressed SHA-256: `8c7f0588210490e7d77f198fc91f72c1b94787ab4c359c4786ca59a363c4f5e8`
-- Expanded Wasm SHA-256: `956bf2b3700690e1817034eb8e063cfd9781c66b4bffa244ef4f9445656ccfa1`
+- Compressed SHA-256: `dc6e02e8610269e61b341331661515616451cec929fd534fa96d1c4f47fbcc9a`
+- Expanded Wasm SHA-256: `a098db08592626781f6ad6e63f1b8a36da6d03b85b530dc94c441a348426b20b`
 - Source revision: `quickjs-ng/quickjs@fd0a0210b7be00957751871e7e01b8291268fc29`
 - Source: <https://github.com/quickjs-ng/quickjs/tree/fd0a0210b7be00957751871e7e01b8291268fc29>
 - Build SDK: [WASI SDK 24.0 release archive for arm64 macOS](https://github.com/WebAssembly/wasi-sdk/releases/download/wasi-sdk-24/wasi-sdk-24.0-arm64-macos.tar.gz),
@@ -240,25 +266,25 @@ source trees, so the inventory reuses the exact digest-bound `b9ef79d7` copies;
 the revision-specific root and musl-fts notices remain separate. The generated
 WebC and pinned command manifests do not relicense those payloads.
 
-### CPython 3.14.6 for WASI P1
+### CPython 3.14.7 for WASI P1
 
-- Distributed assets: `python-3.14.6-wasip1.webc.gz.bin` and its provenance
-  manifest `python-3.14.6-wasip1.manifest.json`
-- Official source archive: <https://www.python.org/ftp/python/3.14.6/Python-3.14.6.tar.xz>,
-  SHA-256 `143b1dddefaec3bd2e21e3b839b34a2b7fb9842272883c576420d605e9f30c63`
-- Official SPDX document: <https://www.python.org/ftp/python/3.14.6/Python-3.14.6.tar.xz.spdx.json>,
-  SHA-256 `1f5d394856783fa77e1f1db280f84eabf693bffc1fb06a747f7116de9f99f3bd`
+- Distributed assets: `python-3.14.7-wasip1.webc.gz.bin` and its provenance
+  manifest `python-3.14.7-wasip1.manifest.json`
+- Official source archive: <https://www.python.org/ftp/python/3.14.7/Python-3.14.7.tar.xz>,
+  SHA-256 `3b48dac8fb59f62eaa67ac83c1eb12bda1b7a08406dd286e252c11a66be27f81`
+- Official SPDX document: <https://www.python.org/ftp/python/3.14.7/Python-3.14.7.tar.xz.spdx.json>,
+  SHA-256 `87f55ca6c59fe159fa8c47ba2d7d8bec39cc649b1d3f47c667f34025a2ca9a68`
 - Expanded WebC SHA-256:
-  `454ffc53936aa13a0d7f4afbb5bd50ada339c8ebd04bbf27ea19e4104cf43207`
+  `a42c98f5f00582638c8e445440c506bbf94d5e55b3415d1f8d82d11c56cd4b56`
 - Distributed gzip SHA-256:
-  `218cd20ac4abb443e0700816010a615a345a43eae623a0232da2227135a6c7a6`
+  `10027f0e32c77dfa0ce1c413b6cb27307d6744fe5e18e6da8cea738bd020260c`
 - Provenance manifest SHA-256:
-  `054eccad04a7cee7ba1661062142ef0d639976850981eab8fc785f48eb26129e`
+  `53a24b258363a8494af164121111a34b49c85fa0e054627fe131feba6f359cd5`
 - Deterministically exported `WOJFS002` runtime archive SHA-256:
-  `44d894f91487f20c2bb04fe496a9343db37d8720fb706472c2b4a7f3300db039`
+  `c1acac884af1c86833db5b65f8cc0a2304fce74dea0a05d9b40bde0a4e3e7c0e`
 - CPython license: Python Software Foundation License Version 2 and the
   historical notices reproduced with it
-- License text: `licenses/cpython-3.14.6-PSF-2.0.txt`
+- License text: `licenses/cpython-3.14.7-PSF-2.0.txt`
 - Bundled third-party source: Expat 2.8.1 (MIT), HACL* revision
   `8ba599b2f6c9701b3dc961db895b0856a2210f76` (MIT), and libmpdec 2.5.1
   (BSD-2-Clause); their exact notices are
@@ -270,7 +296,8 @@ WebC and pinned command manifests do not relicense those payloads.
   `26a1d6601d727a96f4301d0d8647b5a42760ae0c`, and wasi-libc revision
   `b9ef79d7dbd47c6c5bafdae760823467c2f60b70`.
 
-WASM-OJ compiles this package from the pinned official sources, disables
+WASM-OJ compiles this package from the pinned official sources with a 4 MiB C
+stack and 16 MiB initial linear memory, retaining `--stack-first`, disables
 `_socket`, removes test/development-only standard-library roots, canonicalizes
 build-only sysconfig paths, and packages the complete source SPDX document and
 applicable CPython, third-party, compiler-rt, WASI SDK, and wasi-libc notices

package/dist/index.d.ts

@@ -28,7 +28,6 @@ declare const WASM_OJ_SCHEMAS: Readonly<{
     readonly objectCache: "wasm-oj-v2/object-cache";
     readonly pythonToolchain: "wasm-oj-v2/python-toolchain";
     readonly replayBundle: "wasm-oj-v2/replay-bundle";
-    readonly releaseManifest: "wasm-oj-v2/release-manifest";
     readonly rustToolchain: "wasm-oj-v2/rust-toolchain";
     readonly runRequest: "wasm-oj-v2/run-request";
     readonly runtimeBundle: "wasm-oj-v2/runtime-bundle";
@@ -244,6 +243,8 @@ interface RunResult {
     /** Requested output files that existed when the process terminated. */
     files: Record<string, Uint8Array>;
     durationMs: number;
+    /** Browser guest wall time, excluding runtime preparation and output collection. */
+    executionDurationMs?: number;
     determinism: DeterminismConfig;
     resources: ResourcePolicy;
     termination: ExecutionTermination;
@@ -351,8 +352,8 @@ declare function isCostProfileFor(profile: string, language: Language, target: T
 
 /** Executable runtime components covered by deterministic cost calibration. */
 declare const WASM_OJ_RUNTIME_COMPONENTS: Readonly<{
-    readonly runtimeCoreWasmSha256: "92500f3a2e65fe6979e893179d8000e12d66822c160eeb779b0d4fe0a6b55603";
-    readonly runtimeSourceRootSha256: "3ef42cb2c70e7013e4a6f9d4d7457a7071101795fbd3753efcd20c1ac338ebd5";
+    readonly runtimeCoreWasmSha256: "1e297ad276694e9fb8a23afdc6ccc0b2ae56a223ced19d5cae26fe4661daa11e";
+    readonly runtimeSourceRootSha256: "27c52cb1887aa8a7e0d8a238514fc8881cf86c68267e2a1691f110423692e2b6";
     readonly wasmerNativeVersion: "7.2.1";
     readonly wasmerSdkVersion: "0.10.0";
     readonly wasmerSdkWasmSha256: "49a6646209f5ab5e7c737eac33407d87d9a9959ac83e5ecaaab9261b2323589e";
@@ -363,94 +364,11 @@ declare const WASM_OJ_RUNTIME_COMPONENTS: Readonly<{
  * Release verification independently checks the component bytes before this
  * identity is admitted into a calibrated release.
  */
-declare const WASM_OJ_RUNTIME_IDENTITY_SHA256 = "24c0bcff9820fbfd1fd4db1c57e2a866b83041409dd22b5b725688739bd3e223";
+declare const WASM_OJ_RUNTIME_IDENTITY_SHA256 = "d3e44cafdc1c17a7e6bd4591ef04ec8161af805a519b5bbff437b15e5accd442";
 /** Exact canonical serialization hashed by `WASM_OJ_RUNTIME_IDENTITY_SHA256`. */
 declare function runtimeIdentityBytes(): Uint8Array;
 declare function verifyRuntimeIdentity(): Promise<void>;
 
-declare const WASM_OJ_RELEASE_MANIFEST_SCHEMA: "wasm-oj-v2/release-manifest";
-declare const WASM_OJ_CONTAINER_PROTOCOL_VERSION = "wasm-oj-container-v2";
-interface ReleaseManifest {
-    readonly schema: typeof WASM_OJ_RELEASE_MANIFEST_SCHEMA;
-    readonly releaseId: string;
-    readonly version: string;
-    readonly wasmOjContract: typeof WASM_OJ_CONTRACT_VERSION;
-    readonly createdAt: string;
-    readonly source: {
-        readonly repository: string;
-        readonly commit: string;
-        readonly sourceTreeSha256: string;
-        readonly tag?: string;
-    };
-    readonly build: {
-        readonly nodeVersion: string;
-        readonly pnpmVersion: string;
-        readonly rustVersion: string;
-        readonly lockSha256: string;
-        readonly sbomSha256: string;
-        readonly licensesSha256: string;
-        readonly auditSha256: string;
-    };
-    readonly artifacts: {
-        readonly npmPackage: ArtifactDigest;
-        readonly workerBundle: ArtifactDigest;
-        readonly staticAssets: ArtifactDigest;
-        readonly containerImage: {
-            readonly registry: string;
-            readonly digest: string;
-            readonly identitySha256: string;
-            readonly platform: "linux/amd64";
-            readonly dockerfileSha256: string;
-            readonly baseImages: readonly {
-                readonly stage: "node-build" | "rust-build" | "judge";
-                readonly image: string;
-                readonly digest: string;
-            }[];
-        };
-    };
-    readonly runtime: {
-        readonly protocolVersion: typeof WASM_OJ_CONTAINER_PROTOCOL_VERSION;
-        readonly executionRootSha256: string;
-        readonly rootSha256: string;
-        readonly runtimeIdentitySha256: string;
-        readonly runtimeCoreSha256: string;
-        readonly wasmerVersion: string;
-        readonly wasmerSha256: string;
-        readonly compilerSha256: string;
-        readonly runnerSha256: string;
-    };
-    readonly toolchains: {
-        readonly rootSha256: string;
-        readonly manifestSha256: string;
-    };
-    readonly cost: {
-        readonly model: typeof WEIGHTED_METER_MODEL;
-        readonly profileRootSha256: string;
-        readonly baselineSha256: string;
-    };
-    readonly evidence: {
-        readonly conformanceSha256: string;
-        readonly testsSha256: string;
-        readonly costCalibrationSha256: string;
-    };
-    readonly migrations: {
-        readonly databaseSha256: string;
-    };
-    readonly provenance: {
-        readonly issuer: string;
-        readonly subject: string;
-    };
-}
-interface ArtifactDigest {
-    readonly sha256: string;
-    readonly bytes: number;
-}
-declare function parseReleaseManifest(value: unknown): ReleaseManifest;
-declare function createReleaseManifest(value: ReleaseManifest): ReleaseManifest;
-declare function releaseManifestBytes(value: ReleaseManifest): Uint8Array;
-declare function releaseManifestSha256(value: ReleaseManifest): Promise<string>;
-declare function verifyReleaseManifestBytes(bytes: Uint8Array, expectedSha256?: string): Promise<ReleaseManifest>;
-
 /**
  * Fail-closed validation boundary for projects crossing persistence or
  * transport boundaries. The candidate is checked without mutation, defaults,
@@ -506,7 +424,7 @@ declare const CLANG_VERSION = "22.0.0-git20542-10";
 /** SHA-256 after browser-side gzip decompression. */
 declare const CLANG_PACKAGE_SHA256 = "21ded33b9c6d4e1aaad5528c940bdaf6c3e84be77ea8f522f018ca7289a2a224";
 /** SHA-256 of the pinned cc1/wasm-ld argv manifest; regenerated by scripts/pin-clang-cc1-argv.mjs. */
-declare const CLANG_CC1_PINS_SHA256 = "66c4604dccd3f89d8e1472bf4432367d7396cce4a01279b1a1db445f229dba72";
+declare const CLANG_CC1_PINS_SHA256 = "895eee17c63b1112c84adcc4ddbcb38e0c18e53bff15f50a8689b9b82d87b1ff";
 declare function toolchainCacheIdentity(language: Language): {
     wasmOjContract: 2;
     version: string;
@@ -1640,58 +1558,28 @@ declare function scoreProblemResults(problem: JudgeProblem, language: BuiltinLan
 /** Score immutable execution-only judge data without reconstructing a public problem bundle. */
 declare function scoreJudgeDataResults(data: JudgeData, language: BuiltinLanguage$1, results: readonly JudgeCaseResult[]): ProblemScore;
 
-interface JudgeAllowedProfile {
-    readonly target: "wasip1" | "wasix";
-    readonly optimization: "debug" | "release";
-}
-type JudgeAllowedProfiles = Readonly<Partial<Record<BuiltinLanguage, JudgeAllowedProfile>>>;
-declare function parseJudgeAllowedProfiles(value: unknown, label?: string): JudgeAllowedProfiles;
-
-declare const MANAGED_COLLECTION_SCHEMA = "wasm-oj-platform/managed-collection/v2";
-interface ManagedRepositoryObject {
-    /** Normalized path relative to the directory containing collection/index.json. */
-    readonly repositoryPath: string;
-    readonly bytes: number;
-    readonly sha256: string;
-}
-interface ManagedProblemPublication {
-    readonly slug: string;
-    readonly allowedProfiles: JudgeAllowedProfiles;
-    readonly contestPublic: ManagedRepositoryObject;
-    readonly judgePackage: ManagedRepositoryObject;
-}
-interface ManagedCollectionV2 {
-    readonly schema: typeof MANAGED_COLLECTION_SCHEMA;
-    readonly collectionRevision: string;
-    readonly problems: readonly ManagedProblemPublication[];
-}
-/** Parse the value form used by the authoring CLI after JSON decoding. */
-declare function parseManagedCollectionValueV2(value: unknown): ManagedCollectionV2;
-/**
- * Stable platform boundary for generated collection/managed.json bytes.
- * Published managed contracts must use WASM-OJ canonical JSON; author-only
- * managed-source documents are intentionally not accepted here.
- */
-declare function parseManagedCollectionV2(bytes: Uint8Array): ManagedCollectionV2;
-/** Same v2-only value parser retained as the environment-neutral library entry point. */
-declare const parseManagedCollectionContract: typeof parseManagedCollectionValueV2;
-
 declare const CONTEST_PUBLIC_PROJECTION_SCHEMA = "wasm-oj-platform/contest-public-problem-projection/v1";
 interface ContestPublicProjection {
     readonly schema: typeof CONTEST_PUBLIC_PROJECTION_SCHEMA;
     readonly problem: JudgeProblem;
-    readonly digest: string;
 }
 /**
- * The bundle referenced by collection/index.json is safe to fetch for every
- * practice visitor. Hidden cases and their expected answers exist only in the
- * immutable judge package built from the authoring source.
+ * The repository practice bundle is safe to fetch for every practice visitor.
+ * Hidden cases and their expected answers exist only in the immutable judge
+ * package built from the authoring source.
  */
 declare function derivePracticePublic(authored: JudgeProblem): JudgeProblem;
 /** The single deterministic hidden-data redaction used by author CI and platform validation. */
 declare function deriveContestPublic(practice: JudgeProblem): JudgeProblem;
-declare function createContestPublicProjection(practice: JudgeProblem, problemBundleSha256: string): ContestPublicProjection;
-declare function contestPublicProjectionBytes(practice: JudgeProblem, problemBundleSha256: string): Uint8Array;
+declare function createContestPublicProjection(practice: JudgeProblem): ContestPublicProjection;
+declare function contestPublicProjectionBytes(practice: JudgeProblem): Uint8Array;
+
+interface JudgeAllowedProfile {
+    readonly target: "wasip1" | "wasix";
+    readonly optimization: "debug" | "release";
+}
+type JudgeAllowedProfiles = Readonly<Partial<Record<BuiltinLanguage, JudgeAllowedProfile>>>;
+declare function parseJudgeAllowedProfiles(value: unknown, label?: string): JudgeAllowedProfiles;
 
 declare const WASM_OJ_JUDGE_PACKAGE_SCHEMA = "wasm-oj-v2/judge-package";
 declare const WASM_OJ_JUDGE_PACKAGE_MAGIC = "WOJJDG02";
@@ -1808,43 +1696,43 @@ declare function decodeJudgePackageForExecution(bytes: Uint8Array): Promise<Deco
 /** Execution identity is the digest of the exact canonical WOJJDG02 bytes. */
 declare function judgePackageSemanticDigest(bytes: Uint8Array): Promise<string>;
 
-declare const MANAGED_COLLECTION_SOURCE_SCHEMA = "wasm-oj-platform/managed-collection-source/v1";
-interface ManagedSourceObject {
+declare const REPOSITORY_AUTHORING_JUDGES_SCHEMA = "wasm-oj-platform/repository-authoring-judges/v1";
+interface RepositorySourceObject {
     readonly path: string;
     readonly bytes: number;
     readonly sha256: string;
 }
-interface ManagedSourceArtifact extends ManagedSourceObject {
+interface RepositorySourceArtifact extends RepositorySourceObject {
     readonly runtimeProfile: TrustedJudgeRuntimeProfile;
 }
-interface ManagedSourceAsset extends ManagedSourceObject {
+interface RepositorySourceAsset extends RepositorySourceObject {
     readonly guestPath: string;
 }
-type ManagedSourceJudge = {
+type RepositorySourceJudge = {
     readonly kind: "text";
 } | {
     readonly kind: "checker";
-    readonly artifact: ManagedSourceArtifact;
-    readonly assets: readonly ManagedSourceAsset[];
+    readonly artifact: RepositorySourceArtifact;
+    readonly assets: readonly RepositorySourceAsset[];
     readonly args: readonly string[];
 } | {
     readonly kind: "interactive";
-    readonly artifact: ManagedSourceArtifact;
-    readonly assets: readonly ManagedSourceAsset[];
+    readonly artifact: RepositorySourceArtifact;
+    readonly assets: readonly RepositorySourceAsset[];
     readonly args: readonly string[];
     readonly inputPath: string;
 };
-interface ManagedCollectionSourceProblem {
+interface RepositoryAuthoringJudgeProblem {
     readonly slug: string;
     readonly allowedProfiles: JudgeAllowedProfiles;
-    readonly judge: ManagedSourceJudge;
+    readonly judge: RepositorySourceJudge;
 }
-interface ManagedCollectionSource {
-    readonly schema: typeof MANAGED_COLLECTION_SOURCE_SCHEMA;
-    readonly problems: readonly ManagedCollectionSourceProblem[];
+interface RepositoryAuthoringJudges {
+    readonly schema: typeof REPOSITORY_AUTHORING_JUDGES_SCHEMA;
+    readonly problems: readonly RepositoryAuthoringJudgeProblem[];
 }
-/** Author-only parser. Platform publication parsers must never call this API. */
-declare function parseManagedCollectionSource(value: unknown): ManagedCollectionSource;
+/** Author-only input used by collection build; never accepted by the platform sync boundary. */
+declare function parseRepositoryAuthoringJudges(value: unknown): RepositoryAuthoringJudges;
 
 /** Build the runtime judge spec directly from verified WOJJDG02 execution data. */
 declare function trustedJudgeSpec(data: JudgeData, executable: TrustedJudgeExecutable): JudgeSpec;
@@ -1879,5 +1767,5 @@ declare const DEFAULT_CONFORMANCE_CASES: readonly ConformanceCase[];
 declare const CPP_STDLIB_CONFORMANCE_CASE: ConformanceCase;
 declare const FULL_CONFORMANCE_CASES: readonly ConformanceCase[];
 
-export { BROWSER_COLLECTION_SCHEMA, BROWSER_PROBLEM_SCHEMA, BrowserDependencyNetworkConsent, CONTEST_PUBLIC_PROJECTION_SCHEMA, CPP_STDLIB_CONFORMANCE_CASE, CargoLockDependencyResolver, CompilerRegistry, CostBaselineRegistry, CppLockDependencyResolver, DEFAULT_CONFORMANCE_CASES, DEFAULT_DETERMINISM, DEFAULT_RESOURCE_POLICY, DEPENDENCY_BUILD_LIMITS, DependencyManager, DependencyNetworkError, Engine, FULL_CONFORMANCE_CASES, GoLockDependencyResolver, JudgeEngine, MANAGED_COLLECTION_SCHEMA, MANAGED_COLLECTION_SOURCE_SCHEMA, MemoryDependencyCache, NpmLockDependencyResolver, PROBLEM_STARTER_LIMITS, PROJECT_SOURCE_LIMITS, PyPiLockDependencyResolver, RuntimeDriverRegistry, TRUSTED_JUDGE_RUNTIME_PROFILES, TRUSTED_JUDGE_WASIP1_IMPORTS, TRUSTED_JUDGE_WASM_MAX_BYTES, WASM_OJ_CONTAINER_PROTOCOL_VERSION, WASM_OJ_JUDGE_DATA_SCHEMA, WASM_OJ_JUDGE_PACKAGE_MAGIC, WASM_OJ_JUDGE_PACKAGE_MAX_BYTES, WASM_OJ_JUDGE_PACKAGE_SCHEMA, WASM_OJ_LIBCXX_PCH_HEADER, WASM_OJ_RELEASE_MANIFEST_SCHEMA, WASM_OJ_RUNTIME_COMPONENTS, WASM_OJ_RUNTIME_IDENTITY_SHA256, WEIGHTED_METER_MODEL, assertCompilerCacheKey, assertJudgeDataCostProfile, assertJudgeDataMatchesPracticePublic, assertJudgeGuestFilePath, assertProblemCostProfile, assertValidBuildArtifact, assertValidDependencyBuildBundle, assertValidDependencyLock, assertValidProject, assertValidReplayBundle, browserToolchainAssetBaseUrl, browserToolchainAssetUrl, canonicalJsonBytes, compareConformanceSnapshots, contestPublicProjectionBytes, costProfileId, createContestPublicProjection, createDefaultCostBaselineRegistry, createDefaultDependencyBuildAdapters, createDefaultDependencyManager, createDefaultDependencyResolvers, createDefaultRuntimeDrivers, createDependencyBuildBundle, createDependencyLock, createEngine, createExtendedCostBaselineRegistry, createJudgeExecutor, createReleaseManifest, createReplayBundle, createRuntimeBundleManifest, createSdkProject, decodeJudgePackageForExecution, decodeLibcxxPchManifest, decodeReplayBundle, dependencyFileTreeSha256, dependencyLockSha256, dependencyManifestSha256, deriveContestPublic, deriveJudgeData, derivePracticePublic, deterministicTranscript, encodeJudgePackage, encodeReplayBundle, fileMatcher, floatMatcher, goModuleZipHash, isCostProfileFor, isToolchainLibcxxPchHeader, judgePackageSemanticDigest, judgeTranscript, normalizeDependencyNetworkAccess, normalizeDependencyNetworkScope, normalizeExecutionMetrics, normalizeOutput, parseCanonicalJsonBytes, parseJudgeAllowedProfiles, parseJudgeData, parseJudgePackageManifest, parseManagedCollectionContract, parseManagedCollectionSource, parseManagedCollectionV2, parseManagedCollectionValueV2, parseProblemBundle, parseProblemCollectionIndex, parseReleaseManifest, parseStandaloneProblemBundle, prepareArtifactInteraction, prepareArtifactRun, prepareTrustedJudgeRun, problemCollectionRevision, readJudgePackageManifest, releaseManifestBytes, releaseManifestSha256, replayBundle, replayBundleSha256, resolveArtifactCostBudget, resolveCostBudget, resolveDeterminism, resolveResourcePolicy, runConformanceHost, runConformanceMatrix, runtimeIdentityBytes, scoreJudgeDataResults, scoreProblemResults, setMatcher, sha256Matcher, snapshotBrowserToolchainSources, summarizeProblemPolicies, textMatcher, tokenMatcher, toolchainAssetSource, toolchainCacheIdentity, toolchainProfileSource, trustedJudgeSpec, unavailableExecutionMetrics, validateBrowserToolchainSources, validateJudgePackage, validateJudgeSpec, validateServerToolchainSources, validateToolchainDescriptors, validateTrustedJudgeWasm, verifyDependencyBuildBundle, verifyProblemBundleBytes, verifyProblemCollectionRevision, verifyReleaseManifestBytes, verifyRuntimeIdentity, wasmCheckerMatcher };
-export type { ArtifactBuildExpectation, ArtifactDigest, ArtifactStore, BatchJudgeCaseSpec, CanonicalJsonValue, CompileInput, CompileOptions, Compiler, CompilerRegistration, ConformanceCase, ConformanceHost, ConformanceMismatch, ConformanceOptions, ConformanceReport, ConformanceRunExpectation, ConformanceSample, ConformanceSnapshot, ContestPublicProjection, CostBudget, CppDependencyLockSource, DecodedJudgePackageForExecution, DependencyBuildAdapter, DependencyBuildBundle, DependencyCache, DependencyConsentStorage, DependencyEcosystem, DependencyFetch, DependencyLock, DependencyManifest, DependencyNetworkAccess, DependencyNetworkAuthorizer, DependencyNetworkConsentPrompt, DependencyNetworkScope, DependencyOfflineBundle, DependencyRequirement, DependencyResolutionContext, DependencyResolver, DependencyResolverOptions, DependencySourceFile, DeterministicTranscript, EncodedJudgePackage, EngineOptions, ExecuteResult, InteractiveExecuteResult, InteractiveJudgeCaseSpec, InteractiveOptions, InteractiveProgramOptions, JudgeAllowedProfile, JudgeAllowedProfiles, JudgeCaseResult, JudgeCaseSpec, JudgeCaseVerdict, JudgeData, JudgeDataCase, JudgeEngineOptions, JudgeExecutionAdapter, JudgeExecutor, JudgeFileInputSpec, JudgeInputProvider, JudgeInputSpec, JudgeMatchResult, JudgeMatcher, JudgeMatcherContext, JudgeMatcherSpec, JudgePackageAllowedProfile, JudgePackageAssetInput, JudgePackageAssetReference, JudgePackageBlobReference, JudgePackageByteSource, JudgePackageInput, JudgePackageInputJudge, JudgePackageManifest, JudgePackageManifestJudge, JudgePolicy, JudgeProblem, JudgeProgramSpec, JudgeProjectResult, JudgeResolvedInput, JudgeResult, JudgeRunOptions, JudgeSpec, JudgeStarterTemplate, JudgeStarterTemplates, LibcxxPchAsset, LibcxxPchManifest, LibcxxPchProfile, LockedDependencyPackage, ManagedCollectionSource, ManagedCollectionSourceProblem, ManagedCollectionV2, ManagedProblemPublication, ManagedRepositoryObject, ManagedSourceArtifact, ManagedSourceAsset, ManagedSourceJudge, ManagedSourceObject, MaterializedDependencyPackage, Operation, OperationEvent, OperationEventPayload, OperationKind, OperationState, OutputNormalization, PackageFileSystemRequest, PolicyPerformanceAggregate, PrecompileOutcome, PrecompileStatus, PreparedRunRequest, ProblemBundleDescriptor, ProblemCollectionEntry, ProblemCollectionIndex, ProblemScore, RawExecutionMetrics, ReleaseManifest, ReplayBundle, ReplayBundleInput, ReplayDecodeOptions, ReplayHost, ReplayJudgeCaseTranscript, ReplayJudgeOperation, ReplayJudgeTranscript, ReplayOperation, ReplayOptions, ReplayResult, ReplayRunOperation, ResolveDependencyOptions, ResolvedDependencyGraph, RunOptions, Runner, RuntimeDriver, RuntimeResolver, ScoredProblemCase, SubmissionOperation, SubmissionPolicySummary, SubmissionRequest, TrustedJudgeAsset, TrustedJudgeExecutable, TrustedJudgeProgram, TrustedJudgeRuntimeProfile, TrustedJudgeWasmInfo, TrustedJudgeWasmValidationOptions, ValidateJudgePackageOptions, ValidatedJudgePackage };
+export { BROWSER_COLLECTION_SCHEMA, BROWSER_PROBLEM_SCHEMA, BrowserDependencyNetworkConsent, CONTEST_PUBLIC_PROJECTION_SCHEMA, CPP_STDLIB_CONFORMANCE_CASE, CargoLockDependencyResolver, CompilerRegistry, CostBaselineRegistry, CppLockDependencyResolver, DEFAULT_CONFORMANCE_CASES, DEFAULT_DETERMINISM, DEFAULT_RESOURCE_POLICY, DEPENDENCY_BUILD_LIMITS, DependencyManager, DependencyNetworkError, Engine, FULL_CONFORMANCE_CASES, GoLockDependencyResolver, JudgeEngine, MemoryDependencyCache, NpmLockDependencyResolver, PROBLEM_STARTER_LIMITS, PROJECT_SOURCE_LIMITS, PyPiLockDependencyResolver, REPOSITORY_AUTHORING_JUDGES_SCHEMA, RuntimeDriverRegistry, TRUSTED_JUDGE_RUNTIME_PROFILES, TRUSTED_JUDGE_WASIP1_IMPORTS, TRUSTED_JUDGE_WASM_MAX_BYTES, WASM_OJ_JUDGE_DATA_SCHEMA, WASM_OJ_JUDGE_PACKAGE_MAGIC, WASM_OJ_JUDGE_PACKAGE_MAX_BYTES, WASM_OJ_JUDGE_PACKAGE_SCHEMA, WASM_OJ_LIBCXX_PCH_HEADER, WASM_OJ_RUNTIME_COMPONENTS, WASM_OJ_RUNTIME_IDENTITY_SHA256, WEIGHTED_METER_MODEL, assertCompilerCacheKey, assertJudgeDataCostProfile, assertJudgeDataMatchesPracticePublic, assertJudgeGuestFilePath, assertProblemCostProfile, assertValidBuildArtifact, assertValidDependencyBuildBundle, assertValidDependencyLock, assertValidProject, assertValidReplayBundle, browserToolchainAssetBaseUrl, browserToolchainAssetUrl, canonicalJsonBytes, compareConformanceSnapshots, contestPublicProjectionBytes, costProfileId, createContestPublicProjection, createDefaultCostBaselineRegistry, createDefaultDependencyBuildAdapters, createDefaultDependencyManager, createDefaultDependencyResolvers, createDefaultRuntimeDrivers, createDependencyBuildBundle, createDependencyLock, createEngine, createExtendedCostBaselineRegistry, createJudgeExecutor, createReplayBundle, createRuntimeBundleManifest, createSdkProject, decodeJudgePackageForExecution, decodeLibcxxPchManifest, decodeReplayBundle, dependencyFileTreeSha256, dependencyLockSha256, dependencyManifestSha256, deriveContestPublic, deriveJudgeData, derivePracticePublic, deterministicTranscript, encodeJudgePackage, encodeReplayBundle, fileMatcher, floatMatcher, goModuleZipHash, isCostProfileFor, isToolchainLibcxxPchHeader, judgePackageSemanticDigest, judgeTranscript, normalizeDependencyNetworkAccess, normalizeDependencyNetworkScope, normalizeExecutionMetrics, normalizeOutput, parseCanonicalJsonBytes, parseJudgeAllowedProfiles, parseJudgeData, parseJudgePackageManifest, parseProblemBundle, parseProblemCollectionIndex, parseRepositoryAuthoringJudges, parseStandaloneProblemBundle, prepareArtifactInteraction, prepareArtifactRun, prepareTrustedJudgeRun, problemCollectionRevision, readJudgePackageManifest, replayBundle, replayBundleSha256, resolveArtifactCostBudget, resolveCostBudget, resolveDeterminism, resolveResourcePolicy, runConformanceHost, runConformanceMatrix, runtimeIdentityBytes, scoreJudgeDataResults, scoreProblemResults, setMatcher, sha256Matcher, snapshotBrowserToolchainSources, summarizeProblemPolicies, textMatcher, tokenMatcher, toolchainAssetSource, toolchainCacheIdentity, toolchainProfileSource, trustedJudgeSpec, unavailableExecutionMetrics, validateBrowserToolchainSources, validateJudgePackage, validateJudgeSpec, validateServerToolchainSources, validateToolchainDescriptors, validateTrustedJudgeWasm, verifyDependencyBuildBundle, verifyProblemBundleBytes, verifyProblemCollectionRevision, verifyRuntimeIdentity, wasmCheckerMatcher };
+export type { ArtifactBuildExpectation, ArtifactStore, BatchJudgeCaseSpec, CanonicalJsonValue, CompileInput, CompileOptions, Compiler, CompilerRegistration, ConformanceCase, ConformanceHost, ConformanceMismatch, ConformanceOptions, ConformanceReport, ConformanceRunExpectation, ConformanceSample, ConformanceSnapshot, ContestPublicProjection, CostBudget, CppDependencyLockSource, DecodedJudgePackageForExecution, DependencyBuildAdapter, DependencyBuildBundle, DependencyCache, DependencyConsentStorage, DependencyEcosystem, DependencyFetch, DependencyLock, DependencyManifest, DependencyNetworkAccess, DependencyNetworkAuthorizer, DependencyNetworkConsentPrompt, DependencyNetworkScope, DependencyOfflineBundle, DependencyRequirement, DependencyResolutionContext, DependencyResolver, DependencyResolverOptions, DependencySourceFile, DeterministicTranscript, EncodedJudgePackage, EngineOptions, ExecuteResult, InteractiveExecuteResult, InteractiveJudgeCaseSpec, InteractiveOptions, InteractiveProgramOptions, JudgeAllowedProfile, JudgeAllowedProfiles, JudgeCaseResult, JudgeCaseSpec, JudgeCaseVerdict, JudgeData, JudgeDataCase, JudgeEngineOptions, JudgeExecutionAdapter, JudgeExecutor, JudgeFileInputSpec, JudgeInputProvider, JudgeInputSpec, JudgeMatchResult, JudgeMatcher, JudgeMatcherContext, JudgeMatcherSpec, JudgePackageAllowedProfile, JudgePackageAssetInput, JudgePackageAssetReference, JudgePackageBlobReference, JudgePackageByteSource, JudgePackageInput, JudgePackageInputJudge, JudgePackageManifest, JudgePackageManifestJudge, JudgePolicy, JudgeProblem, JudgeProgramSpec, JudgeProjectResult, JudgeResolvedInput, JudgeResult, JudgeRunOptions, JudgeSpec, JudgeStarterTemplate, JudgeStarterTemplates, LibcxxPchAsset, LibcxxPchManifest, LibcxxPchProfile, LockedDependencyPackage, MaterializedDependencyPackage, Operation, OperationEvent, OperationEventPayload, OperationKind, OperationState, OutputNormalization, PackageFileSystemRequest, PolicyPerformanceAggregate, PrecompileOutcome, PrecompileStatus, PreparedRunRequest, ProblemBundleDescriptor, ProblemCollectionEntry, ProblemCollectionIndex, ProblemScore, RawExecutionMetrics, ReplayBundle, ReplayBundleInput, ReplayDecodeOptions, ReplayHost, ReplayJudgeCaseTranscript, ReplayJudgeOperation, ReplayJudgeTranscript, ReplayOperation, ReplayOptions, ReplayResult, ReplayRunOperation, RepositoryAuthoringJudgeProblem, RepositoryAuthoringJudges, RepositorySourceArtifact, RepositorySourceAsset, RepositorySourceJudge, RepositorySourceObject, ResolveDependencyOptions, ResolvedDependencyGraph, RunOptions, Runner, RuntimeDriver, RuntimeResolver, ScoredProblemCase, SubmissionOperation, SubmissionPolicySummary, SubmissionRequest, TrustedJudgeAsset, TrustedJudgeExecutable, TrustedJudgeProgram, TrustedJudgeRuntimeProfile, TrustedJudgeWasmInfo, TrustedJudgeWasmValidationOptions, ValidateJudgePackageOptions, ValidatedJudgePackage };