create-windy 0.5.2 → 0.6.0

package/template/packages/server-sdk/contracts/ai-runtime-readiness/v1/embedding.json

@@ -0,0 +1,68 @@
+{
+  "name": "embedding-text-ready",
+  "now": "2026-07-31T00:00:00.000Z",
+  "operation": {
+    "schemaVersion": 1,
+    "operationKey": "analysis.embedding.text",
+    "runtimeKind": "embedding",
+    "expectedDeployment": {
+      "key": "embedding.local-text",
+      "identity": "windy-deployment-v1_a294c0b7-6d31-4c52-b8ea-62fd9f4a1e03",
+      "releaseDigest": "sha256:cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc",
+      "offersDigest": "sha256:a193e4dd4a79af6915204a6b07a85b34d88a218ef04fd66fd2f85809458c7cc5"
+    },
+    "variant": "embed/text",
+    "requiredCapabilities": ["embedding.text"],
+    "inputModalities": ["text"],
+    "outputModalities": ["embedding"],
+    "limits": {
+      "maxDurationSeconds": 60,
+      "maxInputBytes": 20000000,
+      "maxOutputBytes": 20000000,
+      "maxUnits": 64
+    },
+    "resources": {
+      "minConcurrentRuns": 4,
+      "minQueueDepth": 64
+    }
+  },
+  "snapshot": {
+    "schemaVersion": 1,
+    "status": "ready",
+    "configured": true,
+    "runtimeKind": "embedding",
+    "observedAt": "2026-07-31T00:00:00.000Z",
+    "downstreamProbe": {
+      "status": "passed",
+      "checkedAt": "2026-07-31T00:00:00.000Z",
+      "validUntil": "2026-07-31T00:05:00.000Z",
+      "latencyMs": 12,
+      "deploymentIdentity": "windy-deployment-v1_a294c0b7-6d31-4c52-b8ea-62fd9f4a1e03",
+      "releaseDigest": "sha256:cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc",
+      "offersDigest": "sha256:a193e4dd4a79af6915204a6b07a85b34d88a218ef04fd66fd2f85809458c7cc5"
+    },
+    "deployment": {
+      "key": "embedding.local-text",
+      "identity": "windy-deployment-v1_a294c0b7-6d31-4c52-b8ea-62fd9f4a1e03",
+      "releaseDigest": "sha256:cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc",
+      "offersDigest": "sha256:a193e4dd4a79af6915204a6b07a85b34d88a218ef04fd66fd2f85809458c7cc5"
+    },
+    "offers": [
+      {
+        "variant": "embed/text",
+        "capabilities": ["embedding.text"],
+        "inputModalities": ["text"],
+        "outputModalities": ["embedding"],
+        "limits": {
+          "maxDurationSeconds": 120,
+          "maxInputBytes": 32000000,
+          "maxOutputBytes": 64000000,
+          "maxUnits": 256,
+          "maxConcurrentRuns": 8,
+          "maxQueueDepth": 128
+        }
+      }
+    ],
+    "unavailableReasons": []
+  }
+}

package/template/packages/server-sdk/contracts/ai-runtime-readiness/v1/speech.json

@@ -0,0 +1,80 @@
+{
+  "name": "speech-transcribe-ready",
+  "now": "2026-07-31T00:00:00.000Z",
+  "operation": {
+    "schemaVersion": 1,
+    "operationKey": "evidence.audio.transcribe",
+    "runtimeKind": "speech",
+    "expectedDeployment": {
+      "key": "speech.intranet-asr",
+      "identity": "windy-deployment-v1_8c4a2f19-13ab-4a7e-a1d4-24b9c49d3e02",
+      "releaseDigest": "sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
+      "offersDigest": "sha256:62b334e86cb1931cf603349b3c19110c9daad0abedb74271367ea2b93e281d43"
+    },
+    "variant": "transcribe",
+    "requiredCapabilities": [
+      "speech.transcribe.batch",
+      "speech.normalize",
+      "speech.vad",
+      "speech.timestamps"
+    ],
+    "inputModalities": ["audio", "video"],
+    "outputModalities": ["text"],
+    "limits": {
+      "maxDurationSeconds": 1800,
+      "maxInputBytes": 536870912,
+      "maxOutputBytes": 33554432,
+      "maxUnits": 100000,
+      "maxMediaDurationSeconds": 28800
+    },
+    "resources": {
+      "minConcurrentRuns": 1,
+      "minQueueDepth": 8
+    }
+  },
+  "snapshot": {
+    "schemaVersion": 1,
+    "status": "ready",
+    "configured": true,
+    "runtimeKind": "speech",
+    "observedAt": "2026-07-31T00:00:00.000Z",
+    "downstreamProbe": {
+      "status": "passed",
+      "checkedAt": "2026-07-31T00:00:00.000Z",
+      "validUntil": "2026-07-31T00:05:00.000Z",
+      "latencyMs": 24,
+      "deploymentIdentity": "windy-deployment-v1_8c4a2f19-13ab-4a7e-a1d4-24b9c49d3e02",
+      "releaseDigest": "sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
+      "offersDigest": "sha256:62b334e86cb1931cf603349b3c19110c9daad0abedb74271367ea2b93e281d43"
+    },
+    "deployment": {
+      "key": "speech.intranet-asr",
+      "identity": "windy-deployment-v1_8c4a2f19-13ab-4a7e-a1d4-24b9c49d3e02",
+      "releaseDigest": "sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
+      "offersDigest": "sha256:62b334e86cb1931cf603349b3c19110c9daad0abedb74271367ea2b93e281d43"
+    },
+    "offers": [
+      {
+        "variant": "transcribe",
+        "capabilities": [
+          "speech.transcribe.batch",
+          "speech.normalize",
+          "speech.vad",
+          "speech.timestamps"
+        ],
+        "inputModalities": ["audio", "video"],
+        "outputModalities": ["text"],
+        "limits": {
+          "maxDurationSeconds": 3600,
+          "maxInputBytes": 1073741824,
+          "maxOutputBytes": 67108864,
+          "maxUnits": 200000,
+          "maxMediaDurationSeconds": 86400,
+          "maxConcurrentRuns": 2,
+          "maxQueueDepth": 16
+        }
+      }
+    ],
+    "unavailableReasons": []
+  }
+}

package/template/packages/server-sdk/contracts/ai-runtime-readiness/v1/vlm.json

@@ -0,0 +1,70 @@
+{
+  "name": "vlm-vision-ready",
+  "now": "2026-07-31T00:00:00.000Z",
+  "operation": {
+    "schemaVersion": 1,
+    "operationKey": "evidence.image.inspect",
+    "runtimeKind": "agent",
+    "expectedDeployment": {
+      "key": "ai.openai-compatible",
+      "identity": "windy-deployment-v1_f31e8a65-92cb-4d03-8a77-3c1b5e9d4f04",
+      "releaseDigest": "sha256:dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd",
+      "offersDigest": "sha256:c05c0b1d32d9e1d253c7fa6cec29dee1e39908ea4bb65725adf41e51292ad495"
+    },
+    "variant": "vision",
+    "requiredCapabilities": ["text-generation", "vision"],
+    "inputModalities": ["text", "image"],
+    "outputModalities": ["text"],
+    "limits": {
+      "maxDurationSeconds": 120,
+      "maxInputBytes": 33554432,
+      "maxOutputBytes": 1048576,
+      "maxArtifacts": 8,
+      "maxPixelsPerArtifact": 24000000
+    },
+    "resources": {
+      "minConcurrentRuns": 2,
+      "minQueueDepth": 16
+    }
+  },
+  "snapshot": {
+    "schemaVersion": 1,
+    "status": "ready",
+    "configured": true,
+    "runtimeKind": "agent",
+    "observedAt": "2026-07-31T00:00:00.000Z",
+    "downstreamProbe": {
+      "status": "passed",
+      "checkedAt": "2026-07-31T00:00:00.000Z",
+      "validUntil": "2026-07-31T00:05:00.000Z",
+      "latencyMs": 31,
+      "deploymentIdentity": "windy-deployment-v1_f31e8a65-92cb-4d03-8a77-3c1b5e9d4f04",
+      "releaseDigest": "sha256:dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd",
+      "offersDigest": "sha256:c05c0b1d32d9e1d253c7fa6cec29dee1e39908ea4bb65725adf41e51292ad495"
+    },
+    "deployment": {
+      "key": "ai.openai-compatible",
+      "identity": "windy-deployment-v1_f31e8a65-92cb-4d03-8a77-3c1b5e9d4f04",
+      "releaseDigest": "sha256:dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd",
+      "offersDigest": "sha256:c05c0b1d32d9e1d253c7fa6cec29dee1e39908ea4bb65725adf41e51292ad495"
+    },
+    "offers": [
+      {
+        "variant": "vision",
+        "capabilities": ["text-generation", "vision"],
+        "inputModalities": ["text", "image"],
+        "outputModalities": ["text"],
+        "limits": {
+          "maxDurationSeconds": 180,
+          "maxInputBytes": 67108864,
+          "maxOutputBytes": 2097152,
+          "maxArtifacts": 16,
+          "maxPixelsPerArtifact": 100000000,
+          "maxConcurrentRuns": 4,
+          "maxQueueDepth": 32
+        }
+      }
+    ],
+    "unavailableReasons": []
+  }
+}

package/template/packages/server-sdk/contracts/document-runtime/v1/fingerprint-fixture.json

@@ -0,0 +1,101 @@
+{
+  "contractVersion": 1,
+  "request": {
+    "kind": "document",
+    "runId": "doc_1111111111111111111111111111111111111111111111111111111111111111",
+    "operationKey": "evidence.document.ocr",
+    "options": {
+      "语言": "中文",
+      "normalize": true,
+      "threshold": 0.75,
+      "outputs": ["pages", "searchable-pdf"]
+    },
+    "sources": [
+      {
+        "value": "opaque-input-ref-a",
+        "mediaType": "application/pdf",
+        "byteSize": 12,
+        "sha256": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
+      },
+      {
+        "value": "opaque-input-ref-b",
+        "mediaType": "image/png",
+        "byteSize": 7,
+        "sha256": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb"
+      }
+    ],
+    "requiredCapabilities": ["document.table", "document.ocr"],
+    "dataClassification": "sensitive",
+    "limits": {
+      "maxDurationSeconds": 600,
+      "maxInputBytes": 1048576,
+      "maxOutputBytes": 65536,
+      "maxUnits": 500,
+      "maxArtifacts": 2
+    },
+    "providerEgress": {
+      "mode": "configured-endpoint",
+      "deploymentKey": "intranet-ocr-primary"
+    },
+    "providerDataPolicy": {
+      "inputFields": [
+        {
+          "jsonPointer": "/outputs",
+          "classification": "internal",
+          "dlpAction": "reject"
+        },
+        {
+          "jsonPointer": "/语言",
+          "classification": "sensitive",
+          "dlpAction": "redact"
+        }
+      ],
+      "envelopeFields": [
+        {
+          "field": "artifact-content",
+          "classification": "sensitive",
+          "dlpAction": "reject"
+        },
+        {
+          "field": "provider-output",
+          "classification": "sensitive",
+          "dlpAction": "redact"
+        }
+      ]
+    },
+    "outputArtifactSink": {
+      "contractVersion": 1,
+      "scope": "outscope_22222222222222222222222222222222",
+      "outputKind": "searchable-pdf",
+      "deploymentIdentity": "windy-deployment-v1_7db61d8e-e50d-4f8a-9f3f-9b7a1d932e01",
+      "releaseDigest": "sha256:cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc",
+      "offersDigest": "sha256:dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd",
+      "policyDigest": "eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee",
+      "grantGeneration": 3,
+      "allowedMediaTypes": ["audio/wav", "application/pdf"],
+      "expiresAt": "2030-07-31T12:05:00.000Z",
+      "limits": {
+        "maxArtifactBytes": 32768,
+        "maxArtifacts": 2,
+        "maxTotalBytes": 65536
+      }
+    }
+  },
+  "excludedVariant": {
+    "sourceValues": ["rotated-ref-x", "rotated-ref-y"],
+    "scope": "outscope_33333333333333333333333333333333",
+    "grantGeneration": 9,
+    "expiresAt": "2031-08-01T00:00:00.000Z"
+  },
+  "invalidCanonicalJson": [
+    {
+      "label": "unsafe-integer",
+      "json": "{\"value\":9007199254740992}"
+    },
+    {
+      "label": "lone-surrogate",
+      "json": "{\"value\":\"\\ud800\"}"
+    }
+  ],
+  "expectedSha256": "65cc7fbc36b66fabb341a2ea6d55ae17aeb073b9e308a31276cbf9e47ca72837"
+}

package/template/packages/server-sdk/index.ts

@@ -10,6 +10,55 @@ export type {
   ModuleEmbeddingItem,
 } from "./src/ai-operation-port.js";
 export { ModuleAiOperationError } from "./src/ai-operation-port.js";
+export {
+  AI_OPERATION_MAX_REQUIRED_CAPABILITIES_V1,
+  AI_READINESS_REASON_CODES_V1,
+  AI_RUNTIME_KINDS_V1,
+  AI_RUNTIME_MAX_CAPABILITIES_PER_OFFER_V1,
+  AI_RUNTIME_MAX_OFFERS_V1,
+  AI_RUNTIME_MODALITIES_V1,
+  AI_RUNTIME_MAX_PROBE_TTL_SECONDS,
+  AI_RUNTIME_MAX_UNAVAILABLE_REASONS_V1,
+  AI_RUNTIME_PROBE_FAILURE_CODES_V1,
+  AI_RUNTIME_READINESS_SCHEMA_VERSION,
+  type AiOperationReadinessRequirementV1,
+  type AiOperationRequiredLimitsV1,
+  type AiOperationRequiredResourcesV1,
+  type AiReadinessReasonCodeV1,
+  type AiReadinessReasonV1,
+  type AiRuntimeDeploymentV1,
+  type AiRuntimeDownstreamProbeV1,
+  type AiRuntimeKindV1,
+  type AiRuntimeModalityV1,
+  type AiRuntimeOfferLimitsV1,
+  type AiRuntimeOfferV1,
+  type AiRuntimeOffersDigestV1,
+  type AiRuntimeProbeFailureCodeV1,
+  type AiRuntimeReadinessV1,
+  type AiRuntimeReadyV1,
+  type AiRuntimeReleaseDigestV1,
+  type AiRuntimeUnavailableV1,
+  type ModuleAiOperationReadinessPortV1,
+  type ModuleAiOperationReadinessV1,
+  type ModuleAiOperationReadyV1,
+  type ModuleAiOperationUnavailableV1,
+} from "./src/ai-runtime-readiness.js";
+export { computeAiRuntimeOffersDigestV1 } from "./src/ai-runtime-readiness-digest.js";
+export {
+  AI_RUNTIME_DEPLOYMENT_IDENTITY_PREFIX_V1,
+  parseAiRuntimeDeploymentIdentityV1,
+  type AiRuntimeDeploymentIdentityV1,
+} from "./src/ai-runtime-readiness-identity.js";
+export {
+  parseAiRuntimeReadinessV1,
+  type AiRuntimeReadinessParseResult,
+} from "./src/ai-runtime-readiness-validation.js";
+export {
+  projectAiOperationReadinessV1,
+  type ProjectAiOperationReadinessOptionsV1,
+} from "./src/ai-runtime-readiness-projection.js";
+export type { AiRuntimeTrustedFullAttestationV1 } from "./src/ai-runtime-readiness-trust.js";
+export { validAiOperationReadinessRequirementV1 } from "@southwind-ai/shared";
 export type {
   ModuleBackgroundAiErrorCode,
   ModuleBackgroundAiOperationInput,
@@ -46,6 +95,31 @@ export type {
   ModuleJobView,
 } from "./src/jobs-port.js";
 export { ModuleJobControlError } from "./src/jobs-port.js";
+export type {
+  ModuleOpenedReportStagingEntry,
+  ModuleReportStagingCreateInput,
+  ModuleReportStagingEntryPage,
+  ModuleReportStagingEntryView,
+  ModuleReportStagingErrorCode,
+  ModuleReportStagingGroupView,
+  ModuleReportStagingManifestV1,
+  ModuleReportStagingPolicyV1,
+  ModuleReportStagingPortV1,
+  ModuleReportStagingReadLeaseView,
+  ModuleReportStagingSourceInput,
+  ModuleReportStagingSourceMode,
+  ModuleReportStagingSourceReader,
+  ModuleReportStagingSourceView,
+  ModuleReportStagingStatus,
+} from "./src/report-staging-port.js";
+export {
+  MODULE_REPORT_STAGING_MAX_ARCHIVE_VOLUMES,
+  MODULE_REPORT_STAGING_MAX_ENTRIES,
+  MODULE_REPORT_STAGING_MAX_SOURCES,
+  MODULE_REPORT_STAGING_PATH_MAX_BYTES,
+  ModuleReportStagingError,
+  requireModuleReportStagingPortV1,
+} from "./src/report-staging-port.js";
 export type {
   ModuleDurableHandlerCapability,
   ModuleDurableHandlerContext,
@@ -79,6 +153,30 @@ export {
 } from "./src/module-adapter.js";
 export { requireModuleNamespace } from "./src/namespace.js";
 export type { ModuleRequestContext } from "./src/request-context.js";
+export type {
+  ModuleAiScreenshotIntakePortV1,
+  ModuleAiScreenshotIntakeCreateV2,
+  ModuleAiScreenshotIntakeProducerV2,
+  ModuleAiScreenshotPlanV1,
+  ModuleAiScreenshotPlanV2,
+} from "./src/ai-screenshot-intake-port.js";
+export type {
+  ModuleSecretBinding,
+  ModuleSecretBindingResolution,
+  ModuleSecretPort,
+  ModuleSecretRequest,
+  ModuleSecretSafeValue,
+} from "./src/secret-port.js";
+export {
+  ModuleSecretError,
+  requireModuleSecretPort,
+  type ModuleSecretErrorCode,
+} from "./src/secret-port.js";
+export {
+  createModuleSecretBinding,
+  type ModuleSecretBindingInput,
+  type ModuleSecretValueResolver,
+} from "./src/secret-binding.js";
 export type { ModuleRolePreset } from "./src/role-preset.js";
 export type {
   ModuleSandboxToolContext,
@@ -99,13 +197,24 @@ export type {
   ModuleSearchQuery,
 } from "./src/search-provider-port.js";
 export type {
+  ModuleFileView,
+  ModuleOpenedFile,
   ModuleOpenedResourceFile,
   ModuleResourceFileAccessContext,
   ModuleResourceFileAccessPolicy,
   ModuleResourceFileRequest,
+  ModuleStorageErrorCode,
   ModuleStoragePort,
+  ModuleStorageWritePortV1,
+  ModuleUploadPartInputV1,
+  ModuleUploadPartView,
   ModuleUploadSessionInput,
+  ModuleStorageWriterSessionInputV1,
+  ModuleUploadSessionStatus,
+  ModuleUploadSessionView,
 } from "./src/storage-port.js";
+export { ModuleStorageError } from "./src/storage-port.js";
+export { requireModuleStorageWritePortV1 } from "./src/storage-port.js";
 export type {
   ModuleUserDirectoryEntry,
   ModuleUserDirectoryPage,

package/template/packages/server-sdk/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@southwind-ai/server-sdk",
-  "version": "0.3.0",
+  "version": "0.4.0",
   "license": "UNLICENSED",
   "type": "module",
   "engines": {
@@ -10,8 +10,22 @@
     "index.ts",
     "src/actor.ts",
     "src/ai-artifact-port.ts",
+    "src/ai-screenshot-intake-port.ts",
     "src/ai-operation-port.ts",
     "src/ai-operation-registration.ts",
+    "src/ai-runtime-readiness.ts",
+    "src/ai-runtime-readiness-capture.ts",
+    "src/ai-runtime-readiness-digest.ts",
+    "src/ai-runtime-readiness-identity.ts",
+    "src/ai-runtime-readiness-keys.ts",
+    "src/ai-runtime-readiness-limits.ts",
+    "src/ai-runtime-readiness-projection.ts",
+    "src/ai-runtime-readiness-requirement.ts",
+    "src/ai-runtime-readiness-time.ts",
+    "src/ai-runtime-readiness-trust.ts",
+    "src/ai-runtime-readiness-validation.ts",
+    "src/ai-runtime-readiness-validation-values.ts",
+    "src/ai-runtime-readiness-values.ts",
     "src/audit-port.ts",
     "src/background-ai-port.ts",
     "src/data-governance-registration.ts",
@@ -22,15 +36,19 @@
     "src/module-adapter.ts",
     "src/namespace.ts",
     "src/request-context.ts",
+    "src/report-staging-port.ts",
     "src/role-preset.ts",
     "src/route-definition.ts",
     "src/sandbox-tool.ts",
     "src/search-provider-port.ts",
+    "src/secret-binding.ts",
+    "src/secret-port.ts",
     "src/storage-port.ts",
     "src/task-registration.ts",
     "src/tool-registration.ts",
     "src/tool-host-port.ts",
-    "src/user-directory-port.ts"
+    "src/user-directory-port.ts",
+    "contracts/**/*.json"
   ],
   "scripts": {
     "test": "bun test",
@@ -42,7 +60,8 @@
     "@southwind-ai/storage": "workspace:^"
   },
   "exports": {
-    ".": "./index.ts"
+    ".": "./index.ts",
+    "./contracts/ai-runtime-readiness/v1/*": "./contracts/ai-runtime-readiness/v1/*"
   },
   "publishConfig": {
     "access": "public"

package/template/packages/server-sdk/src/ai-runtime-readiness-capture.ts

@@ -0,0 +1,168 @@
+import { isProxy } from "node:util/types";
+
+const maximumDepth = 6;
+const maximumNodes = 128;
+const maximumProperties = 1_024;
+const maximumArrayLength = 32;
+const maximumKeyLength = 128;
+const maximumStringLength = 256;
+const maximumStringUnits = 131_072;
+const captureFailure = Symbol("ai-runtime-readiness-capture-failure");
+const unsafeKeys = new Set(["__proto__", "constructor", "prototype"]);
+
+interface CaptureBudget {
+  nodes: number;
+  properties: number;
+  stringUnits: number;
+  readonly maximumRootArrayLength: number;
+  readonly seen: WeakSet<object>;
+}
+
+export type AiRuntimeInputCaptureResultV1 =
+  | { readonly ok: true; readonly value: unknown }
+  | { readonly ok: false };
+
+export function captureAiRuntimeInputV1(
+  raw: unknown,
+  maximumRootArrayLength = maximumArrayLength,
+): AiRuntimeInputCaptureResultV1 {
+  if (
+    !Number.isSafeInteger(maximumRootArrayLength) ||
+    maximumRootArrayLength < 0 ||
+    maximumRootArrayLength > maximumArrayLength
+  ) {
+    return { ok: false };
+  }
+  try {
+    return {
+      ok: true,
+      value: captureValue(raw, 0, {
+        nodes: 0,
+        properties: 0,
+        stringUnits: 0,
+        maximumRootArrayLength,
+        seen: new WeakSet(),
+      }),
+    };
+  } catch {
+    return { ok: false };
+  }
+}
+
+function captureValue(
+  value: unknown,
+  depth: number,
+  budget: CaptureBudget,
+): unknown {
+  if (value === null || typeof value === "boolean") return value;
+  if (typeof value === "string") return captureString(value, budget);
+  if (typeof value === "number" && Number.isSafeInteger(value)) return value;
+  if (typeof value !== "object" || depth > maximumDepth || isProxy(value)) {
+    return failCapture();
+  }
+  if (budget.seen.has(value)) return failCapture();
+  budget.seen.add(value);
+  budget.nodes += 1;
+  if (budget.nodes > maximumNodes) return failCapture();
+
+  return Array.isArray(value)
+    ? captureArray(value, depth, budget)
+    : captureRecord(value, depth, budget);
+}
+
+function captureArray(
+  value: readonly unknown[],
+  depth: number,
+  budget: CaptureBudget,
+): readonly unknown[] {
+  const maximumLength =
+    depth === 0 ? budget.maximumRootArrayLength : maximumArrayLength;
+  if (
+    Object.getPrototypeOf(value) !== Array.prototype ||
+    value.length > maximumLength
+  ) {
+    return failCapture();
+  }
+  const descriptors = Object.getOwnPropertyDescriptors(value);
+  const keys = Reflect.ownKeys(descriptors);
+  if (keys.length !== value.length + 1) return failCapture();
+  const lengthDescriptor = descriptorValue(descriptors, "length");
+  if (
+    !lengthDescriptor ||
+    lengthDescriptor.enumerable ||
+    lengthDescriptor.value !== value.length
+  ) {
+    return failCapture();
+  }
+  addProperties(value.length, budget);
+  const captured: unknown[] = [];
+  for (let index = 0; index < value.length; index += 1) {
+    const descriptor = descriptorValue(descriptors, String(index));
+    if (!validEnumerableDataDescriptor(descriptor)) return failCapture();
+    captured.push(captureValue(descriptor.value, depth + 1, budget));
+  }
+  return Object.freeze(captured);
+}
+
+function captureRecord(
+  value: object,
+  depth: number,
+  budget: CaptureBudget,
+): Readonly<Record<string, unknown>> {
+  if (Object.getPrototypeOf(value) !== Object.prototype) return failCapture();
+  const descriptors = Object.getOwnPropertyDescriptors(value);
+  const keys = Reflect.ownKeys(descriptors);
+  addProperties(keys.length, budget);
+  const captured = Object.create(null) as Record<string, unknown>;
+  for (const key of keys) {
+    if (
+      typeof key !== "string" ||
+      key.length > maximumKeyLength ||
+      unsafeKeys.has(key)
+    ) {
+      return failCapture();
+    }
+    addStringUnits(key.length, budget);
+    const descriptor = descriptorValue(descriptors, key);
+    if (!validEnumerableDataDescriptor(descriptor)) return failCapture();
+    captured[key] = captureValue(descriptor.value, depth + 1, budget);
+  }
+  return Object.freeze(captured);
+}
+
+function captureString(value: string, budget: CaptureBudget): string {
+  if (value.length > maximumStringLength) return failCapture();
+  addStringUnits(value.length, budget);
+  return value;
+}
+
+function addProperties(count: number, budget: CaptureBudget): void {
+  budget.properties += count;
+  if (budget.properties > maximumProperties) failCapture();
+}
+
+function addStringUnits(count: number, budget: CaptureBudget): void {
+  budget.stringUnits += count;
+  if (budget.stringUnits > maximumStringUnits) failCapture();
+}
+
+function descriptorValue(
+  descriptors: object,
+  key: PropertyKey,
+): PropertyDescriptor | undefined {
+  return Object.getOwnPropertyDescriptor(descriptors, key)?.value as
+    | PropertyDescriptor
+    | undefined;
+}
+
+function validEnumerableDataDescriptor(
+  descriptor: PropertyDescriptor | undefined,
+): descriptor is PropertyDescriptor & { value: unknown } {
+  return Boolean(
+    descriptor && descriptor.enumerable && Object.hasOwn(descriptor, "value"),
+  );
+}
+
+function failCapture(): never {
+  throw captureFailure;
+}