niceeval 0.13.2 → 0.13.3

package/dist/record/codec/index.js

@@ -43,48 +43,46 @@ const __niceevalExport19 = __niceevalCanonical["RecordFormatSchema"];
 export { __niceevalExport19 as RecordFormatSchema };
 const __niceevalExport20 = __niceevalCanonical["RecordIdSchema"];
 export { __niceevalExport20 as RecordIdSchema };
-const __niceevalExport21 = __niceevalCanonical["RecordSchemaVersionSchema"];
-export { __niceevalExport21 as RecordSchemaVersionSchema };
-const __niceevalExport22 = __niceevalCanonical["RecordSlotIdentitySchema"];
-export { __niceevalExport22 as RecordSlotIdentitySchema };
-const __niceevalExport23 = __niceevalCanonical["RunContextCurrentSchema"];
-export { __niceevalExport23 as RunContextCurrentSchema };
-const __niceevalExport24 = __niceevalCanonical["RunCoreSchema"];
-export { __niceevalExport24 as RunCoreSchema };
-const __niceevalExport25 = __niceevalCanonical["RunDocumentSchema"];
-export { __niceevalExport25 as RunDocumentSchema };
-const __niceevalExport26 = __niceevalCanonical["RunIdSchema"];
-export { __niceevalExport26 as RunIdSchema };
-const __niceevalExport27 = __niceevalCanonical["Sha256DigestSchema"];
-export { __niceevalExport27 as Sha256DigestSchema };
-const __niceevalExport28 = __niceevalCanonical["SlotIdSchema"];
-export { __niceevalExport28 as SlotIdSchema };
-const __niceevalExport29 = __niceevalCanonical["SourceItemIdSchema"];
-export { __niceevalExport29 as SourceItemIdSchema };
-const __niceevalExport30 = __niceevalCanonical["UtcMillisSchema"];
-export { __niceevalExport30 as UtcMillisSchema };
-const __niceevalExport31 = __niceevalCanonical["decodeAttemptDocument"];
-export { __niceevalExport31 as decodeAttemptDocument };
-const __niceevalExport32 = __niceevalCanonical["decodeMemberDocument"];
-export { __niceevalExport32 as decodeMemberDocument };
-const __niceevalExport33 = __niceevalCanonical["decodeRecordAttachmentEnvelope"];
-export { __niceevalExport33 as decodeRecordAttachmentEnvelope };
-const __niceevalExport34 = __niceevalCanonical["decodeRecordCore"];
-export { __niceevalExport34 as decodeRecordCore };
-const __niceevalExport35 = __niceevalCanonical["decodeRecordDocument"];
-export { __niceevalExport35 as decodeRecordDocument };
-const __niceevalExport36 = __niceevalCanonical["decodeRunDocument"];
-export { __niceevalExport36 as decodeRunDocument };
-const __niceevalExport37 = __niceevalCanonical["encodeAttemptDocument"];
-export { __niceevalExport37 as encodeAttemptDocument };
-const __niceevalExport38 = __niceevalCanonical["encodeMemberDocument"];
-export { __niceevalExport38 as encodeMemberDocument };
-const __niceevalExport39 = __niceevalCanonical["encodeRecordAttachmentEnvelope"];
-export { __niceevalExport39 as encodeRecordAttachmentEnvelope };
-const __niceevalExport40 = __niceevalCanonical["encodeRecordCore"];
-export { __niceevalExport40 as encodeRecordCore };
-const __niceevalExport41 = __niceevalCanonical["encodeRecordDocument"];
-export { __niceevalExport41 as encodeRecordDocument };
-const __niceevalExport42 = __niceevalCanonical["encodeRunDocument"];
-export { __niceevalExport42 as encodeRunDocument };
+const __niceevalExport21 = __niceevalCanonical["RecordSlotIdentitySchema"];
+export { __niceevalExport21 as RecordSlotIdentitySchema };
+const __niceevalExport22 = __niceevalCanonical["RunContextCurrentSchema"];
+export { __niceevalExport22 as RunContextCurrentSchema };
+const __niceevalExport23 = __niceevalCanonical["RunCoreSchema"];
+export { __niceevalExport23 as RunCoreSchema };
+const __niceevalExport24 = __niceevalCanonical["RunDocumentSchema"];
+export { __niceevalExport24 as RunDocumentSchema };
+const __niceevalExport25 = __niceevalCanonical["RunIdSchema"];
+export { __niceevalExport25 as RunIdSchema };
+const __niceevalExport26 = __niceevalCanonical["Sha256DigestSchema"];
+export { __niceevalExport26 as Sha256DigestSchema };
+const __niceevalExport27 = __niceevalCanonical["SlotIdSchema"];
+export { __niceevalExport27 as SlotIdSchema };
+const __niceevalExport28 = __niceevalCanonical["SourceItemIdSchema"];
+export { __niceevalExport28 as SourceItemIdSchema };
+const __niceevalExport29 = __niceevalCanonical["UtcMillisSchema"];
+export { __niceevalExport29 as UtcMillisSchema };
+const __niceevalExport30 = __niceevalCanonical["decodeAttemptDocument"];
+export { __niceevalExport30 as decodeAttemptDocument };
+const __niceevalExport31 = __niceevalCanonical["decodeMemberDocument"];
+export { __niceevalExport31 as decodeMemberDocument };
+const __niceevalExport32 = __niceevalCanonical["decodeRecordAttachmentEnvelope"];
+export { __niceevalExport32 as decodeRecordAttachmentEnvelope };
+const __niceevalExport33 = __niceevalCanonical["decodeRecordCore"];
+export { __niceevalExport33 as decodeRecordCore };
+const __niceevalExport34 = __niceevalCanonical["decodeRecordDocument"];
+export { __niceevalExport34 as decodeRecordDocument };
+const __niceevalExport35 = __niceevalCanonical["decodeRunDocument"];
+export { __niceevalExport35 as decodeRunDocument };
+const __niceevalExport36 = __niceevalCanonical["encodeAttemptDocument"];
+export { __niceevalExport36 as encodeAttemptDocument };
+const __niceevalExport37 = __niceevalCanonical["encodeMemberDocument"];
+export { __niceevalExport37 as encodeMemberDocument };
+const __niceevalExport38 = __niceevalCanonical["encodeRecordAttachmentEnvelope"];
+export { __niceevalExport38 as encodeRecordAttachmentEnvelope };
+const __niceevalExport39 = __niceevalCanonical["encodeRecordCore"];
+export { __niceevalExport39 as encodeRecordCore };
+const __niceevalExport40 = __niceevalCanonical["encodeRecordDocument"];
+export { __niceevalExport40 as encodeRecordDocument };
+const __niceevalExport41 = __niceevalCanonical["encodeRunDocument"];
+export { __niceevalExport41 as encodeRunDocument };
 //# sourceMappingURL=index.js.map

package/dist/record/definition/attachment.cjs

@@ -73,6 +73,7 @@ function defineRecordAttachment(input) {
             link.fromSchemaVersion <= 0 ||
             link.toSchemaVersion !== link.fromSchemaVersion + 1 ||
             link.toSchemaVersion > input.current.schemaVersion ||
+            typeof link.rewritePayload !== "boolean" ||
             migrationStarts.has(link.fromSchemaVersion)) {
             throw new TypeError("Record Attachment migration links must be unique adjacent upgrades to current history");
         }

package/dist/record/definition/attachment.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"attachment.js","sourceRoot":"","sources":["attachment.ts"],"names":[],"mappings":";;AAyGA,8EAEC;AAKD,wDAyDC;AAxKD,2DAAsG;AAGtG,uDAA+G;AAC/G,MAAM,qCAAqC,GAAkB,MAAM,CAAC,kDAAkD,CAAC,CAAC;AACxH,MAAM,cAAc,GAAG,IAAI,OAAO,EAAU,CAAC;AAyD7C,SAAS,WAAW,CAAC,KAAa;IAC9B,OAAO,iCAAiC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;AACjF,CAAC;AACD,SAAS,eAAe,CAAC,KAAc;IACnC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAC3C,OAAO,KAAK,CAAC;IACjB,MAAM,MAAM,GAAG,KAAgC,CAAC;IAChD,OAAO,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,gBAAgB,EAAE,MAAM,CAAC,iBAAiB,CAAC;SAC1E,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAK,KAAgB,GAAG,CAAC,CAAC,CAAC;AAChF,CAAC;AACD,SAAS,YAAY,CAAuF,MAAc,EAAE,aAAqB,EAAE,KAAY,EAAE,KAA+C;IAC5M,IAAI,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,KAAK,IAAI;QACd,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ;QAC/B,KAAK,CAAC,KAAK,KAAK,IAAI;QACpB,OAAO,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,UAAU;QACtC,CAAC,eAAe,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC;QACpC,OAAO,KAAK,CAAC,KAAK,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QAC3C,MAAM,IAAI,SAAS,CAAC,6DAA6D,CAAC,CAAC;IACvF,CAAC;IACD,MAAM,KAAK,GAAG,IAAA,0CAAwB,EAAC;QACnC,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,OAAO,EAAE;YACL,MAAM,EAAE,iCAAmB;YAC3B,SAAS,EAAE,6BAAe;SAC7B;KACJ,CAAC,CAAC;IACH,MAAM,UAAU,GAA2F;QACvG,MAAM;QACN,aAAa;QACb,KAAK;QACL,KAAK;QACL,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI;QACtB,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;QAChD,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM;QAC1B,CAAC,qCAAqC,CAAC,EAAE,GAAG,EAAE,CAAC,SAAS;KAC3D,CAAC;IACF,cAAc,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAC/B,OAAO,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;AACrC,CAAC;AACD,uFAAuF;AACvF,SAAgB,iCAAiC,CAAC,KAAc;IAC5D,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AACpF,CAAC;AACD;;;GAGG;AACH,SAAgB,sBAAsB,CAAgF,KAQrH;IACG,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,SAAS,CAAC,wFAAwF,CAAC,CAAC;IAClH,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,aAAa,IAAI,CAAC,EAAE,CAAC;QACzF,MAAM,IAAI,SAAS,CAAC,iEAAiE,CAAC,CAAC;IAC3F,CAAC;IACD,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,WAAW,KAAK,UAAU,EAAE,CAAC;QAC7E,MAAM,IAAI,SAAS,CAAC,uDAAuD,CAAC,CAAC;IACjF,CAAC;IACD,MAAM,sBAAsB,GAAG,KAAK,CAAC,sBAAsB,IAAI,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACjF,MAAM,eAAe,GAAG,IAAI,GAAG,EAAU,CAAC;IAC1C,KAAK,MAAM,IAAI,IAAI,sBAAsB,EAAE,CAAC;QACxC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,iBAAiB,CAAC;YAC7C,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,eAAe,CAAC;YAC3C,IAAI,CAAC,iBAAiB,IAAI,CAAC;YAC3B,IAAI,CAAC,eAAe,KAAK,IAAI,CAAC,iBAAiB,GAAG,CAAC;YACnD,IAAI,CAAC,eAAe,GAAG,KAAK,CAAC,OAAO,CAAC,aAAa;YAClD,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAAE,CAAC;YAC9C,MAAM,IAAI,SAAS,CAAC,uFAAuF,CAAC,CAAC;QACjH,CAAC;QACD,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAChD,CAAC;IACD,IAAI,sBAAsB,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QACvE,MAAM,IAAI,SAAS,CAAC,6EAA6E,CAAC,CAAC;IACvG,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACnD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QACjB,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,KAAK,CAAC,EAAE,CAAC;QACzD,MAAM,IAAI,SAAS,CAAC,2DAA2D,CAAC,CAAC;IACrF,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,MAAqC,CAAC;IACnE,MAAM,QAAQ,GAA4G,EAAE,CAAC;IAC7H,KAAK,MAAM,GAAG,IAAI,IAAwC,EAAE,CAAC;QACzD,MAAM,UAAU,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC3B,MAAM,IAAI,SAAS,CAAC,+DAA+D,CAAC,CAAC;QACzF,CAAC;QACD,QAAQ,CAAC,GAAG,CAAC,GAAG,YAAY,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,aAAa,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC;IAC7F,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACjB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC;YACnB,aAAa,EAAE,KAAK,CAAC,OAAO,CAAC,aAAa;YAC1C,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAA6C;SAC9E,CAAC;QACF,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,sBAAsB,EAAE,MAAM,CAAC,MAAM,CAAC,sBAAsB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC,CAAC;KAC1G,CAAC,CAAC;AACP,CAAC","sourcesContent":["import type { Schema } from \"effect\";\nimport { RecordBlobRefSchema, isRecordBlobRef, type RecordBlobRef, } from \"../attachment/blob-ref.ts\";\nimport type { RecordAttachmentBlobBudget, RecordAttachmentBlobRefs, RecordAttachmentMaterializedRefine, } from \"../attachment/blob-policy.ts\";\nimport type { RecordAttachmentOwner } from \"../model/core.ts\";\nimport { compileRecordSchemaCodec, type RecordSchemaCodec, type RecordSchemaLimits, } from \"./schema-codec.ts\";\nconst recordAttachmentOwnerDefinitionTypeId: unique symbol = Symbol(\"@niceeval/record/RecordAttachmentOwnerDefinition\");\nconst compiledOwners = new WeakSet<object>();\nexport type { RecordAttachmentOwner } from \"../model/core.ts\";\nexport interface RecordAttachmentOwnerInput<SourceSchema extends Schema.Schema.AnyNoContext = Schema.Schema.AnyNoContext> {\n    readonly schema: SourceSchema;\n    readonly limits: RecordSchemaLimits;\n    readonly blobs: Readonly<{\n        readonly refs: RecordAttachmentBlobRefs<Schema.Schema.Type<SourceSchema>>;\n        readonly budget: RecordAttachmentBlobBudget;\n        readonly verify: RecordAttachmentMaterializedRefine<Schema.Schema.Type<SourceSchema>>;\n    }>;\n}\nexport type RecordAttachmentOwnerInputs = Readonly<Partial<Record<RecordAttachmentOwner, RecordAttachmentOwnerInput<Schema.Schema.AnyNoContext>>>>;\n/** One owner compiled exactly once from a fixed family declaration. */\nexport interface RecordAttachmentOwnerDefinition<Owner extends RecordAttachmentOwner, Payload, SourceSchema extends Schema.Schema.AnyNoContext = Schema.Schema.AnyNoContext> {\n    readonly family: string;\n    readonly schemaVersion: number;\n    readonly owner: Owner;\n    readonly codec: RecordSchemaCodec<Payload, RecordBlobRef, SourceSchema>;\n    readonly refs: RecordAttachmentBlobRefs<Payload>;\n    readonly budget: RecordAttachmentBlobBudget;\n    readonly verify: RecordAttachmentMaterializedRefine<Payload>;\n    readonly [recordAttachmentOwnerDefinitionTypeId]: () => void;\n}\ntype OwnerDefinitionFor<Owner extends RecordAttachmentOwner, Input> = Input extends RecordAttachmentOwnerInput<infer SourceSchema> ? RecordAttachmentOwnerDefinition<Owner, Schema.Schema.Type<SourceSchema>, SourceSchema> : never;\nexport type RecordAttachmentOwnerDefinitions<Owners extends RecordAttachmentOwnerInputs> = Readonly<{\n    readonly [Owner in keyof Owners]: Owner extends RecordAttachmentOwner ? OwnerDefinitionFor<Owner, Owners[Owner]> : never;\n}>;\n/** Historical codecs stay opaque to the current import graph until maintenance asks for them. */\nexport interface RecordAttachmentHistoricalCodec {\n    readonly schemaVersion: number;\n    readonly decode: (input: unknown) => unknown;\n}\n/** Only adjacent, package-owned migrations may be declared for a fixed family. */\nexport interface RecordAttachmentAdjacentMigration {\n    readonly fromSchemaVersion: number;\n    readonly toSchemaVersion: number;\n    readonly migrate: (input: unknown) => unknown;\n}\n/** Eager metadata only: implementation remains behind `maintenance`. */\nexport interface RecordAttachmentAdjacentMigrationLink {\n    readonly fromSchemaVersion: number;\n    readonly toSchemaVersion: number;\n}\nexport interface RecordAttachmentMaintenanceFacet {\n    /** Historical codecs and adjacent migrations remain behind this lazy boundary. */\n    readonly historicalCodecs: readonly RecordAttachmentHistoricalCodec[];\n    readonly adjacentMigrations: readonly RecordAttachmentAdjacentMigration[];\n}\nexport interface RecordAttachmentDefinition<out Family extends string = string, Owners extends RecordAttachmentOwnerInputs = RecordAttachmentOwnerInputs> {\n    readonly family: Family;\n    readonly current: Readonly<{\n        readonly schemaVersion: number;\n        readonly owners: RecordAttachmentOwnerDefinitions<Owners>;\n    }>;\n    readonly maintenance: (() => Promise<RecordAttachmentMaintenanceFacet>) | undefined;\n    readonly adjacentMigrationLinks: readonly RecordAttachmentAdjacentMigrationLink[];\n}\nfunction validFamily(value: string): boolean {\n    return /^niceeval\\.[a-z0-9][a-z0-9.-]*$/.test(value) && !value.includes(\"/\");\n}\nfunction validBlobBudget(value: unknown): value is RecordAttachmentBlobBudget {\n    if (typeof value !== \"object\" || value === null)\n        return false;\n    const budget = value as Record<string, unknown>;\n    return [budget.maximumBlobs, budget.maximumBlobBytes, budget.maximumTotalBytes]\n        .every((limit) => Number.isSafeInteger(limit) && (limit as number) > 0);\n}\nfunction compileOwner<Owner extends RecordAttachmentOwner, SourceSchema extends Schema.Schema.AnyNoContext>(family: string, schemaVersion: number, owner: Owner, input: RecordAttachmentOwnerInput<SourceSchema>): RecordAttachmentOwnerDefinition<Owner, Schema.Schema.Type<SourceSchema>, SourceSchema> {\n    if (typeof input !== \"object\" ||\n        input === null ||\n        typeof input.blobs !== \"object\" ||\n        input.blobs === null ||\n        typeof input.blobs.refs !== \"function\" ||\n        !validBlobBudget(input.blobs.budget) ||\n        typeof input.blobs.verify !== \"function\") {\n        throw new TypeError(\"Record Attachment owners must declare a bounded blob policy\");\n    }\n    const codec = compileRecordSchemaCodec({\n        schema: input.schema,\n        limits: input.limits,\n        blobRef: {\n            schema: RecordBlobRefSchema,\n            isBlobRef: isRecordBlobRef,\n        },\n    });\n    const definition: RecordAttachmentOwnerDefinition<Owner, Schema.Schema.Type<SourceSchema>, SourceSchema> = {\n        family,\n        schemaVersion,\n        owner,\n        codec,\n        refs: input.blobs.refs,\n        budget: Object.freeze({ ...input.blobs.budget }),\n        verify: input.blobs.verify,\n        [recordAttachmentOwnerDefinitionTypeId]: () => undefined,\n    };\n    compiledOwners.add(definition);\n    return Object.freeze(definition);\n}\n/** @internal Runtime factories accept only owners minted by defineRecordAttachment. */\nexport function isRecordAttachmentOwnerDefinition(value: unknown): value is RecordAttachmentOwnerDefinition<RecordAttachmentOwner, unknown> {\n    return typeof value === \"object\" && value !== null && compiledOwners.has(value);\n}\n/**\n * NiceEval-only fixed-family declaration. It stores no registry and exposes no\n * plugin hook: the static catalog is assembled by package code alone.\n */\nexport function defineRecordAttachment<const Family extends string, const Owners extends RecordAttachmentOwnerInputs>(input: {\n    readonly family: Family;\n    readonly current: {\n        readonly schemaVersion: number;\n        readonly owners: Owners;\n    };\n    readonly maintenance?: () => Promise<RecordAttachmentMaintenanceFacet>;\n    readonly adjacentMigrationLinks?: readonly RecordAttachmentAdjacentMigrationLink[];\n}): RecordAttachmentDefinition<Family, Owners> {\n    if (!validFamily(input.family)) {\n        throw new TypeError(\"Record Attachment family must be a stable niceeval.* identity without a version suffix\");\n    }\n    if (!Number.isSafeInteger(input.current.schemaVersion) || input.current.schemaVersion <= 0) {\n        throw new TypeError(\"Record Attachment schemaVersion must be a positive safe integer\");\n    }\n    if (input.maintenance !== undefined && typeof input.maintenance !== \"function\") {\n        throw new TypeError(\"Record Attachment maintenance must be a lazy function\");\n    }\n    const adjacentMigrationLinks = input.adjacentMigrationLinks ?? Object.freeze([]);\n    const migrationStarts = new Set<number>();\n    for (const link of adjacentMigrationLinks) {\n        if (!Number.isSafeInteger(link.fromSchemaVersion) ||\n            !Number.isSafeInteger(link.toSchemaVersion) ||\n            link.fromSchemaVersion <= 0 ||\n            link.toSchemaVersion !== link.fromSchemaVersion + 1 ||\n            link.toSchemaVersion > input.current.schemaVersion ||\n            migrationStarts.has(link.fromSchemaVersion)) {\n            throw new TypeError(\"Record Attachment migration links must be unique adjacent upgrades to current history\");\n        }\n        migrationStarts.add(link.fromSchemaVersion);\n    }\n    if (adjacentMigrationLinks.length > 0 && input.maintenance === undefined) {\n        throw new TypeError(\"Record Attachment migration links require a lazy maintenance implementation\");\n    }\n    const keys = Reflect.ownKeys(input.current.owners);\n    if (keys.length === 0 ||\n        keys.some((key) => key !== \"attempt\" && key !== \"run\")) {\n        throw new TypeError(\"Record Attachment owners may contain only attempt and run\");\n    }\n    const owners = input.current.owners as RecordAttachmentOwnerInputs;\n    const compiled: Partial<Record<RecordAttachmentOwner, RecordAttachmentOwnerDefinition<RecordAttachmentOwner, unknown>>> = {};\n    for (const key of keys as readonly RecordAttachmentOwner[]) {\n        const ownerInput = owners[key];\n        if (ownerInput === undefined) {\n            throw new TypeError(\"Record Attachment owners must have one schema and blob policy\");\n        }\n        compiled[key] = compileOwner(input.family, input.current.schemaVersion, key, ownerInput);\n    }\n    return Object.freeze({\n        family: input.family,\n        current: Object.freeze({\n            schemaVersion: input.current.schemaVersion,\n            owners: Object.freeze(compiled) as RecordAttachmentOwnerDefinitions<Owners>,\n        }),\n        maintenance: input.maintenance,\n        adjacentMigrationLinks: Object.freeze(adjacentMigrationLinks.map((link) => Object.freeze({ ...link }))),\n    });\n}\n"]}
+{"version":3,"file":"attachment.js","sourceRoot":"","sources":["attachment.ts"],"names":[],"mappings":";;AAuHA,8EAEC;AAKD,wDA0DC;AAvLD,2DAAsG;AAGtG,uDAA+G;AAC/G,MAAM,qCAAqC,GAAkB,MAAM,CAAC,kDAAkD,CAAC,CAAC;AACxH,MAAM,cAAc,GAAG,IAAI,OAAO,EAAU,CAAC;AAuE7C,SAAS,WAAW,CAAC,KAAa;IAC9B,OAAO,iCAAiC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;AACjF,CAAC;AACD,SAAS,eAAe,CAAC,KAAc;IACnC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAC3C,OAAO,KAAK,CAAC;IACjB,MAAM,MAAM,GAAG,KAAgC,CAAC;IAChD,OAAO,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,gBAAgB,EAAE,MAAM,CAAC,iBAAiB,CAAC;SAC1E,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAK,KAAgB,GAAG,CAAC,CAAC,CAAC;AAChF,CAAC;AACD,SAAS,YAAY,CAAuF,MAAc,EAAE,aAAqB,EAAE,KAAY,EAAE,KAA+C;IAC5M,IAAI,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,KAAK,IAAI;QACd,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ;QAC/B,KAAK,CAAC,KAAK,KAAK,IAAI;QACpB,OAAO,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,UAAU;QACtC,CAAC,eAAe,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC;QACpC,OAAO,KAAK,CAAC,KAAK,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QAC3C,MAAM,IAAI,SAAS,CAAC,6DAA6D,CAAC,CAAC;IACvF,CAAC;IACD,MAAM,KAAK,GAAG,IAAA,0CAAwB,EAAC;QACnC,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,OAAO,EAAE;YACL,MAAM,EAAE,iCAAmB;YAC3B,SAAS,EAAE,6BAAe;SAC7B;KACJ,CAAC,CAAC;IACH,MAAM,UAAU,GAA2F;QACvG,MAAM;QACN,aAAa;QACb,KAAK;QACL,KAAK;QACL,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI;QACtB,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;QAChD,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM;QAC1B,CAAC,qCAAqC,CAAC,EAAE,GAAG,EAAE,CAAC,SAAS;KAC3D,CAAC;IACF,cAAc,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAC/B,OAAO,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;AACrC,CAAC;AACD,uFAAuF;AACvF,SAAgB,iCAAiC,CAAC,KAAc;IAC5D,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AACpF,CAAC;AACD;;;GAGG;AACH,SAAgB,sBAAsB,CAAgF,KAQrH;IACG,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,SAAS,CAAC,wFAAwF,CAAC,CAAC;IAClH,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,aAAa,IAAI,CAAC,EAAE,CAAC;QACzF,MAAM,IAAI,SAAS,CAAC,iEAAiE,CAAC,CAAC;IAC3F,CAAC;IACD,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,WAAW,KAAK,UAAU,EAAE,CAAC;QAC7E,MAAM,IAAI,SAAS,CAAC,uDAAuD,CAAC,CAAC;IACjF,CAAC;IACD,MAAM,sBAAsB,GAAG,KAAK,CAAC,sBAAsB,IAAI,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACjF,MAAM,eAAe,GAAG,IAAI,GAAG,EAAU,CAAC;IAC1C,KAAK,MAAM,IAAI,IAAI,sBAAsB,EAAE,CAAC;QACxC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,iBAAiB,CAAC;YAC7C,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,eAAe,CAAC;YAC3C,IAAI,CAAC,iBAAiB,IAAI,CAAC;YAC3B,IAAI,CAAC,eAAe,KAAK,IAAI,CAAC,iBAAiB,GAAG,CAAC;YACnD,IAAI,CAAC,eAAe,GAAG,KAAK,CAAC,OAAO,CAAC,aAAa;YAClD,OAAO,IAAI,CAAC,cAAc,KAAK,SAAS;YACxC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAAE,CAAC;YAC9C,MAAM,IAAI,SAAS,CAAC,uFAAuF,CAAC,CAAC;QACjH,CAAC;QACD,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAChD,CAAC;IACD,IAAI,sBAAsB,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QACvE,MAAM,IAAI,SAAS,CAAC,6EAA6E,CAAC,CAAC;IACvG,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACnD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QACjB,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,KAAK,CAAC,EAAE,CAAC;QACzD,MAAM,IAAI,SAAS,CAAC,2DAA2D,CAAC,CAAC;IACrF,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,MAAqC,CAAC;IACnE,MAAM,QAAQ,GAA4G,EAAE,CAAC;IAC7H,KAAK,MAAM,GAAG,IAAI,IAAwC,EAAE,CAAC;QACzD,MAAM,UAAU,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC3B,MAAM,IAAI,SAAS,CAAC,+DAA+D,CAAC,CAAC;QACzF,CAAC;QACD,QAAQ,CAAC,GAAG,CAAC,GAAG,YAAY,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,aAAa,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC;IAC7F,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACjB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC;YACnB,aAAa,EAAE,KAAK,CAAC,OAAO,CAAC,aAAa;YAC1C,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAA6C;SAC9E,CAAC;QACF,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,sBAAsB,EAAE,MAAM,CAAC,MAAM,CAAC,sBAAsB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC,CAAC;KAC1G,CAAC,CAAC;AACP,CAAC","sourcesContent":["import type { Schema } from \"effect\";\nimport { RecordBlobRefSchema, isRecordBlobRef, type RecordBlobRef, } from \"../attachment/blob-ref.ts\";\nimport type { RecordAttachmentBlobBudget, RecordAttachmentBlobRefs, RecordAttachmentMaterializedRefine, } from \"../attachment/blob-policy.ts\";\nimport type { RecordAttachmentOwner } from \"../model/core.ts\";\nimport { compileRecordSchemaCodec, type RecordSchemaCodec, type RecordSchemaLimits, } from \"./schema-codec.ts\";\nconst recordAttachmentOwnerDefinitionTypeId: unique symbol = Symbol(\"@niceeval/record/RecordAttachmentOwnerDefinition\");\nconst compiledOwners = new WeakSet<object>();\nexport type { RecordAttachmentOwner } from \"../model/core.ts\";\nexport interface RecordAttachmentOwnerInput<SourceSchema extends Schema.Schema.AnyNoContext = Schema.Schema.AnyNoContext> {\n    readonly schema: SourceSchema;\n    readonly limits: RecordSchemaLimits;\n    readonly blobs: Readonly<{\n        readonly refs: RecordAttachmentBlobRefs<Schema.Schema.Type<SourceSchema>>;\n        readonly budget: RecordAttachmentBlobBudget;\n        readonly verify: RecordAttachmentMaterializedRefine<Schema.Schema.Type<SourceSchema>>;\n    }>;\n}\nexport type RecordAttachmentOwnerInputs = Readonly<Partial<Record<RecordAttachmentOwner, RecordAttachmentOwnerInput<Schema.Schema.AnyNoContext>>>>;\n/** One owner compiled exactly once from a fixed family declaration. */\nexport interface RecordAttachmentOwnerDefinition<Owner extends RecordAttachmentOwner, Payload, SourceSchema extends Schema.Schema.AnyNoContext = Schema.Schema.AnyNoContext> {\n    readonly family: string;\n    readonly schemaVersion: number;\n    readonly owner: Owner;\n    readonly codec: RecordSchemaCodec<Payload, RecordBlobRef, SourceSchema>;\n    readonly refs: RecordAttachmentBlobRefs<Payload>;\n    readonly budget: RecordAttachmentBlobBudget;\n    readonly verify: RecordAttachmentMaterializedRefine<Payload>;\n    readonly [recordAttachmentOwnerDefinitionTypeId]: () => void;\n}\ntype OwnerDefinitionFor<Owner extends RecordAttachmentOwner, Input> = Input extends RecordAttachmentOwnerInput<infer SourceSchema> ? RecordAttachmentOwnerDefinition<Owner, Schema.Schema.Type<SourceSchema>, SourceSchema> : never;\nexport type RecordAttachmentOwnerDefinitions<Owners extends RecordAttachmentOwnerInputs> = Readonly<{\n    readonly [Owner in keyof Owners]: Owner extends RecordAttachmentOwner ? OwnerDefinitionFor<Owner, Owners[Owner]> : never;\n}>;\n/** Historical codecs stay opaque to the current import graph until maintenance asks for them. */\nexport interface RecordAttachmentHistoricalCodec {\n    readonly schemaVersion: number;\n    readonly decode: (input: unknown) => unknown;\n    /** Optional historical own-blob integrity check, run before a lossy transform. */\n    readonly verify?: (payload: unknown, blobs: readonly {\n        readonly ref: RecordBlobRef;\n        readonly bytes: Uint8Array;\n    }[]) => boolean;\n}\n/** Only adjacent, package-owned migrations may be declared for a fixed family. */\nexport interface RecordAttachmentAdjacentMigration {\n    readonly fromSchemaVersion: number;\n    readonly toSchemaVersion: number;\n    /** User-visible semantic impact shared by plan and receipt surfaces. */\n    readonly retention: RecordAttachmentMigrationRetention;\n    readonly migrate: (input: unknown) => unknown;\n}\nexport interface RecordAttachmentMigrationRetention {\n    readonly retainedFacts: readonly string[];\n    readonly droppedFacts: readonly string[];\n    readonly rerunRecommendation: string | null;\n}\n/** Eager metadata only: implementation remains behind `maintenance`. */\nexport interface RecordAttachmentAdjacentMigrationLink {\n    readonly fromSchemaVersion: number;\n    readonly toSchemaVersion: number;\n    /** Physical plan metadata shared by planning, execution, and interrupted recovery. */\n    readonly rewritePayload: boolean;\n}\nexport interface RecordAttachmentMaintenanceFacet {\n    /** Historical codecs and adjacent migrations remain behind this lazy boundary. */\n    readonly historicalCodecs: readonly RecordAttachmentHistoricalCodec[];\n    readonly adjacentMigrations: readonly RecordAttachmentAdjacentMigration[];\n}\nexport interface RecordAttachmentDefinition<out Family extends string = string, Owners extends RecordAttachmentOwnerInputs = RecordAttachmentOwnerInputs> {\n    readonly family: Family;\n    readonly current: Readonly<{\n        readonly schemaVersion: number;\n        readonly owners: RecordAttachmentOwnerDefinitions<Owners>;\n    }>;\n    readonly maintenance: (() => Promise<RecordAttachmentMaintenanceFacet>) | undefined;\n    readonly adjacentMigrationLinks: readonly RecordAttachmentAdjacentMigrationLink[];\n}\nfunction validFamily(value: string): boolean {\n    return /^niceeval\\.[a-z0-9][a-z0-9.-]*$/.test(value) && !value.includes(\"/\");\n}\nfunction validBlobBudget(value: unknown): value is RecordAttachmentBlobBudget {\n    if (typeof value !== \"object\" || value === null)\n        return false;\n    const budget = value as Record<string, unknown>;\n    return [budget.maximumBlobs, budget.maximumBlobBytes, budget.maximumTotalBytes]\n        .every((limit) => Number.isSafeInteger(limit) && (limit as number) > 0);\n}\nfunction compileOwner<Owner extends RecordAttachmentOwner, SourceSchema extends Schema.Schema.AnyNoContext>(family: string, schemaVersion: number, owner: Owner, input: RecordAttachmentOwnerInput<SourceSchema>): RecordAttachmentOwnerDefinition<Owner, Schema.Schema.Type<SourceSchema>, SourceSchema> {\n    if (typeof input !== \"object\" ||\n        input === null ||\n        typeof input.blobs !== \"object\" ||\n        input.blobs === null ||\n        typeof input.blobs.refs !== \"function\" ||\n        !validBlobBudget(input.blobs.budget) ||\n        typeof input.blobs.verify !== \"function\") {\n        throw new TypeError(\"Record Attachment owners must declare a bounded blob policy\");\n    }\n    const codec = compileRecordSchemaCodec({\n        schema: input.schema,\n        limits: input.limits,\n        blobRef: {\n            schema: RecordBlobRefSchema,\n            isBlobRef: isRecordBlobRef,\n        },\n    });\n    const definition: RecordAttachmentOwnerDefinition<Owner, Schema.Schema.Type<SourceSchema>, SourceSchema> = {\n        family,\n        schemaVersion,\n        owner,\n        codec,\n        refs: input.blobs.refs,\n        budget: Object.freeze({ ...input.blobs.budget }),\n        verify: input.blobs.verify,\n        [recordAttachmentOwnerDefinitionTypeId]: () => undefined,\n    };\n    compiledOwners.add(definition);\n    return Object.freeze(definition);\n}\n/** @internal Runtime factories accept only owners minted by defineRecordAttachment. */\nexport function isRecordAttachmentOwnerDefinition(value: unknown): value is RecordAttachmentOwnerDefinition<RecordAttachmentOwner, unknown> {\n    return typeof value === \"object\" && value !== null && compiledOwners.has(value);\n}\n/**\n * NiceEval-only fixed-family declaration. It stores no registry and exposes no\n * plugin hook: the static catalog is assembled by package code alone.\n */\nexport function defineRecordAttachment<const Family extends string, const Owners extends RecordAttachmentOwnerInputs>(input: {\n    readonly family: Family;\n    readonly current: {\n        readonly schemaVersion: number;\n        readonly owners: Owners;\n    };\n    readonly maintenance?: () => Promise<RecordAttachmentMaintenanceFacet>;\n    readonly adjacentMigrationLinks?: readonly RecordAttachmentAdjacentMigrationLink[];\n}): RecordAttachmentDefinition<Family, Owners> {\n    if (!validFamily(input.family)) {\n        throw new TypeError(\"Record Attachment family must be a stable niceeval.* identity without a version suffix\");\n    }\n    if (!Number.isSafeInteger(input.current.schemaVersion) || input.current.schemaVersion <= 0) {\n        throw new TypeError(\"Record Attachment schemaVersion must be a positive safe integer\");\n    }\n    if (input.maintenance !== undefined && typeof input.maintenance !== \"function\") {\n        throw new TypeError(\"Record Attachment maintenance must be a lazy function\");\n    }\n    const adjacentMigrationLinks = input.adjacentMigrationLinks ?? Object.freeze([]);\n    const migrationStarts = new Set<number>();\n    for (const link of adjacentMigrationLinks) {\n        if (!Number.isSafeInteger(link.fromSchemaVersion) ||\n            !Number.isSafeInteger(link.toSchemaVersion) ||\n            link.fromSchemaVersion <= 0 ||\n            link.toSchemaVersion !== link.fromSchemaVersion + 1 ||\n            link.toSchemaVersion > input.current.schemaVersion ||\n            typeof link.rewritePayload !== \"boolean\" ||\n            migrationStarts.has(link.fromSchemaVersion)) {\n            throw new TypeError(\"Record Attachment migration links must be unique adjacent upgrades to current history\");\n        }\n        migrationStarts.add(link.fromSchemaVersion);\n    }\n    if (adjacentMigrationLinks.length > 0 && input.maintenance === undefined) {\n        throw new TypeError(\"Record Attachment migration links require a lazy maintenance implementation\");\n    }\n    const keys = Reflect.ownKeys(input.current.owners);\n    if (keys.length === 0 ||\n        keys.some((key) => key !== \"attempt\" && key !== \"run\")) {\n        throw new TypeError(\"Record Attachment owners may contain only attempt and run\");\n    }\n    const owners = input.current.owners as RecordAttachmentOwnerInputs;\n    const compiled: Partial<Record<RecordAttachmentOwner, RecordAttachmentOwnerDefinition<RecordAttachmentOwner, unknown>>> = {};\n    for (const key of keys as readonly RecordAttachmentOwner[]) {\n        const ownerInput = owners[key];\n        if (ownerInput === undefined) {\n            throw new TypeError(\"Record Attachment owners must have one schema and blob policy\");\n        }\n        compiled[key] = compileOwner(input.family, input.current.schemaVersion, key, ownerInput);\n    }\n    return Object.freeze({\n        family: input.family,\n        current: Object.freeze({\n            schemaVersion: input.current.schemaVersion,\n            owners: Object.freeze(compiled) as RecordAttachmentOwnerDefinitions<Owners>,\n        }),\n        maintenance: input.maintenance,\n        adjacentMigrationLinks: Object.freeze(adjacentMigrationLinks.map((link) => Object.freeze({ ...link }))),\n    });\n}\n"]}

package/dist/record/definition/attachment.d.cts

@@ -34,17 +34,31 @@ export type RecordAttachmentOwnerDefinitions<Owners extends RecordAttachmentOwne
 export interface RecordAttachmentHistoricalCodec {
     readonly schemaVersion: number;
     readonly decode: (input: unknown) => unknown;
+    /** Optional historical own-blob integrity check, run before a lossy transform. */
+    readonly verify?: (payload: unknown, blobs: readonly {
+        readonly ref: RecordBlobRef;
+        readonly bytes: Uint8Array;
+    }[]) => boolean;
 }
 /** Only adjacent, package-owned migrations may be declared for a fixed family. */
 export interface RecordAttachmentAdjacentMigration {
     readonly fromSchemaVersion: number;
     readonly toSchemaVersion: number;
+    /** User-visible semantic impact shared by plan and receipt surfaces. */
+    readonly retention: RecordAttachmentMigrationRetention;
     readonly migrate: (input: unknown) => unknown;
 }
+export interface RecordAttachmentMigrationRetention {
+    readonly retainedFacts: readonly string[];
+    readonly droppedFacts: readonly string[];
+    readonly rerunRecommendation: string | null;
+}
 /** Eager metadata only: implementation remains behind `maintenance`. */
 export interface RecordAttachmentAdjacentMigrationLink {
     readonly fromSchemaVersion: number;
     readonly toSchemaVersion: number;
+    /** Physical plan metadata shared by planning, execution, and interrupted recovery. */
+    readonly rewritePayload: boolean;
 }
 export interface RecordAttachmentMaintenanceFacet {
     /** Historical codecs and adjacent migrations remain behind this lazy boundary. */

package/dist/record/definition/attachment.d.mts

@@ -34,17 +34,31 @@ export type RecordAttachmentOwnerDefinitions<Owners extends RecordAttachmentOwne
 export interface RecordAttachmentHistoricalCodec {
     readonly schemaVersion: number;
     readonly decode: (input: unknown) => unknown;
+    /** Optional historical own-blob integrity check, run before a lossy transform. */
+    readonly verify?: (payload: unknown, blobs: readonly {
+        readonly ref: RecordBlobRef;
+        readonly bytes: Uint8Array;
+    }[]) => boolean;
 }
 /** Only adjacent, package-owned migrations may be declared for a fixed family. */
 export interface RecordAttachmentAdjacentMigration {
     readonly fromSchemaVersion: number;
     readonly toSchemaVersion: number;
+    /** User-visible semantic impact shared by plan and receipt surfaces. */
+    readonly retention: RecordAttachmentMigrationRetention;
     readonly migrate: (input: unknown) => unknown;
 }
+export interface RecordAttachmentMigrationRetention {
+    readonly retainedFacts: readonly string[];
+    readonly droppedFacts: readonly string[];
+    readonly rerunRecommendation: string | null;
+}
 /** Eager metadata only: implementation remains behind `maintenance`. */
 export interface RecordAttachmentAdjacentMigrationLink {
     readonly fromSchemaVersion: number;
     readonly toSchemaVersion: number;
+    /** Physical plan metadata shared by planning, execution, and interrupted recovery. */
+    readonly rewritePayload: boolean;
 }
 export interface RecordAttachmentMaintenanceFacet {
     /** Historical codecs and adjacent migrations remain behind this lazy boundary. */

package/dist/record/definition/attachment.d.ts

@@ -34,17 +34,31 @@ export type RecordAttachmentOwnerDefinitions<Owners extends RecordAttachmentOwne
 export interface RecordAttachmentHistoricalCodec {
     readonly schemaVersion: number;
     readonly decode: (input: unknown) => unknown;
+    /** Optional historical own-blob integrity check, run before a lossy transform. */
+    readonly verify?: (payload: unknown, blobs: readonly {
+        readonly ref: RecordBlobRef;
+        readonly bytes: Uint8Array;
+    }[]) => boolean;
 }
 /** Only adjacent, package-owned migrations may be declared for a fixed family. */
 export interface RecordAttachmentAdjacentMigration {
     readonly fromSchemaVersion: number;
     readonly toSchemaVersion: number;
+    /** User-visible semantic impact shared by plan and receipt surfaces. */
+    readonly retention: RecordAttachmentMigrationRetention;
     readonly migrate: (input: unknown) => unknown;
 }
+export interface RecordAttachmentMigrationRetention {
+    readonly retainedFacts: readonly string[];
+    readonly droppedFacts: readonly string[];
+    readonly rerunRecommendation: string | null;
+}
 /** Eager metadata only: implementation remains behind `maintenance`. */
 export interface RecordAttachmentAdjacentMigrationLink {
     readonly fromSchemaVersion: number;
     readonly toSchemaVersion: number;
+    /** Physical plan metadata shared by planning, execution, and interrupted recovery. */
+    readonly rewritePayload: boolean;
 }
 export interface RecordAttachmentMaintenanceFacet {
     /** Historical codecs and adjacent migrations remain behind this lazy boundary. */

package/dist/record/family/assertions-v1.cjs

@@ -0,0 +1,104 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.assertionsV1Maintenance = void 0;
+const node_crypto_1 = require("node:crypto");
+const effect_1 = require("effect");
+const core_ts_1 = require("../codec/core.cjs");
+const assertions_ts_1 = require("./assertions.cjs");
+function parseAssertionsV1(value) {
+    const decoded = effect_1.Schema.decodeUnknownEither(assertions_ts_1.AssertionsAttachmentV1Schema, core_ts_1.RecordExactParseOptions)(value);
+    if (effect_1.Either.isLeft(decoded))
+        throw new Error("Assertions v1 payload is invalid");
+    return decoded.right;
+}
+function decodeAssertionsV1(value) {
+    parseAssertionsV1(value);
+    return value;
+}
+/** Pure adjacent payload transform. Record maintenance exclusively owns physical I/O. */
+function migrateAssertionsV1(value) {
+    const previous = parseAssertionsV1(value);
+    const migrated = Object.freeze({
+        "entries-data": Object.freeze(previous.entries.map((entry) => Object.freeze({
+            entryId: entry.entryId,
+            display: entry.display,
+            criterion: Object.freeze({ state: "unavailable", reason: "not-recorded" }),
+            materials: Object.freeze({
+                source: Object.freeze({ kind: "unavailable", reason: "not-recorded" }),
+                evidence: Object.freeze([]),
+                coverage: Object.freeze({ state: "unavailable", reason: "not-collected" }),
+                limitations: Object.freeze([]),
+            }),
+            evaluation: Object.freeze({
+                observed: Object.freeze({ kind: "unavailable", reason: "not-recorded" }),
+            }),
+            decision: Object.freeze({
+                result: entry.result.state,
+                reason: "reason" in entry.result ? entry.result.reason : null,
+                gate: entry.result.gate,
+            }),
+            policy: Object.freeze({
+                requirement: entry.result.gate === "not-gate"
+                    ? Object.freeze({ state: "unavailable", reason: "not-recorded" })
+                    : Object.freeze({ state: "available", value: "required" }),
+                condition: Object.freeze({ state: "unavailable", reason: "not-recorded" }),
+            }),
+            contribution: entry.result.score,
+            explanationRetention: Object.freeze({ state: "unavailable", reason: "not-recorded" }),
+        }))),
+        "source-sites-data": previous.sourceSites,
+    });
+    const decoded = effect_1.Schema.decodeUnknownEither(assertions_ts_1.AssertionsAttachmentSchema, core_ts_1.RecordExactParseOptions)(migrated);
+    if (effect_1.Either.isLeft(decoded)) {
+        throw new Error(`Assertions v1 migration did not produce a current payload: ${effect_1.ParseResult.TreeFormatter.formatErrorSync(decoded.left)}`);
+    }
+    return migrated;
+}
+exports.assertionsV1Maintenance = Object.freeze({
+    historicalCodecs: Object.freeze([
+        Object.freeze({
+            schemaVersion: 1,
+            decode: decodeAssertionsV1,
+            verify: (payload, blobs) => {
+                const previous = parseAssertionsV1(payload);
+                const byRef = new Map(blobs.map((blob) => [blob.ref, blob.bytes]));
+                const materials = previous.entries.flatMap((entry) => [entry.subject, ...entry.evidence]);
+                return materials.every((material) => {
+                    if (material.kind !== "blob")
+                        return true;
+                    const bytes = byRef.get(material.ref);
+                    return bytes !== undefined &&
+                        bytes.byteLength === material.byteLength &&
+                        (0, node_crypto_1.createHash)("sha256").update(bytes).digest("hex") === material.sha256;
+                });
+            },
+        }),
+    ]),
+    adjacentMigrations: Object.freeze([
+        Object.freeze({
+            fromSchemaVersion: 1,
+            toSchemaVersion: 2,
+            retention: Object.freeze({
+                retainedFacts: Object.freeze([
+                    "display",
+                    "decision",
+                    "provable-policy",
+                    "contribution",
+                    "source-sites",
+                ]),
+                droppedFacts: Object.freeze([
+                    "criterion",
+                    "subject",
+                    "evidence",
+                    "coverage",
+                    "limitations",
+                    "result.diagnostic",
+                    "result.receipt",
+                ]),
+                rerunRecommendation: "Rerun the affected evaluation to collect current assertion facts.",
+            }),
+            migrate: migrateAssertionsV1,
+        }),
+    ]),
+});
+//# sourceMappingURL=assertions-v1.cjs.map

package/dist/record/family/assertions-v1.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"assertions-v1.js","sourceRoot":"","sources":["assertions-v1.ts"],"names":[],"mappings":";;;AAAA,6CAAyC;AACzC,mCAAqD;AAErD,8CAA2D;AAE3D,mDAA2F;AAC3F,SAAS,iBAAiB,CAAC,KAAc;IACrC,MAAM,OAAO,GAAG,eAAM,CAAC,mBAAmB,CAAC,4CAA4B,EAAE,iCAAuB,CAAC,CAAC,KAAK,CAAC,CAAC;IACzG,IAAI,eAAM,CAAC,MAAM,CAAC,OAAO,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACxD,OAAO,OAAO,CAAC,KAAK,CAAC;AACzB,CAAC;AACD,SAAS,kBAAkB,CAAC,KAAc;IACtC,iBAAiB,CAAC,KAAK,CAAC,CAAC;IACzB,OAAO,KAAK,CAAC;AACjB,CAAC;AACD,yFAAyF;AACzF,SAAS,mBAAmB,CAAC,KAAc;IACvC,MAAM,QAAQ,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;IAC1C,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC;QAC3B,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC;YACxE,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,aAAsB,EAAE,MAAM,EAAE,cAAuB,EAAE,CAAC;YAC5F,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC;gBACrB,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,aAAsB,EAAE,MAAM,EAAE,cAAuB,EAAE,CAAC;gBACxF,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC3B,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,aAAsB,EAAE,MAAM,EAAE,eAAwB,EAAE,CAAC;gBAC5F,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;aACjC,CAAC;YACF,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC;gBACtB,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,aAAsB,EAAE,MAAM,EAAE,cAAuB,EAAE,CAAC;aAC7F,CAAC;YACF,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC;gBACpB,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,KAAK;gBAC1B,MAAM,EAAE,QAAQ,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI;gBAC7D,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI;aAC1B,CAAC;YACF,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC;gBAClB,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,UAAU;oBACzC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,aAAsB,EAAE,MAAM,EAAE,cAAuB,EAAE,CAAC;oBACnF,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,WAAoB,EAAE,KAAK,EAAE,UAAmB,EAAE,CAAC;gBAChF,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,aAAsB,EAAE,MAAM,EAAE,cAAuB,EAAE,CAAC;aAC/F,CAAC;YACF,YAAY,EAAE,KAAK,CAAC,MAAM,CAAC,KAAK;YAChC,oBAAoB,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,aAAsB,EAAE,MAAM,EAAE,cAAuB,EAAE,CAAC;SAC1G,CAAC,CAAC,CAAC;QACJ,mBAAmB,EAAE,QAAQ,CAAC,WAAW;KAC5C,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,eAAM,CAAC,mBAAmB,CAAC,0CAA0B,EAAE,iCAAuB,CAAC,CAAC,QAAQ,CAAC,CAAC;IAC1G,IAAI,eAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,8DAA8D,oBAAW,CAAC,aAAa,CAAC,eAAe,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC7I,CAAC;IACD,OAAO,QAAQ,CAAC;AACpB,CAAC;AACY,QAAA,uBAAuB,GAAqC,MAAM,CAAC,MAAM,CAAC;IACnF,gBAAgB,EAAE,MAAM,CAAC,MAAM,CAAC;QAC5B,MAAM,CAAC,MAAM,CAAC;YACV,aAAa,EAAE,CAAC;YAChB,MAAM,EAAE,kBAAkB;YAC1B,MAAM,EAAE,CAAC,OAAgB,EAAE,KAGxB,EAAE,EAAE;gBACH,MAAM,QAAQ,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;gBAC5C,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAU,CAAC,CAAC,CAAC;gBAC5E,MAAM,SAAS,GAAG,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;gBAC1F,OAAO,SAAS,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE,EAAE;oBAChC,IAAI,QAAQ,CAAC,IAAI,KAAK,MAAM;wBACxB,OAAO,IAAI,CAAC;oBAChB,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;oBACtC,OAAO,KAAK,KAAK,SAAS;wBACtB,KAAK,CAAC,UAAU,KAAK,QAAQ,CAAC,UAAU;wBACxC,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,QAAQ,CAAC,MAAM,CAAC;gBAC7E,CAAC,CAAC,CAAC;YACP,CAAC;SACJ,CAAC;KACL,CAAC;IACF,kBAAkB,EAAE,MAAM,CAAC,MAAM,CAAC;QAC9B,MAAM,CAAC,MAAM,CAAC;YACV,iBAAiB,EAAE,CAAC;YACpB,eAAe,EAAE,CAAC;YAClB,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC;gBACrB,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC;oBACzB,SAAS;oBACT,UAAU;oBACV,iBAAiB;oBACjB,cAAc;oBACd,cAAc;iBACjB,CAAC;gBACF,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC;oBACxB,WAAW;oBACX,SAAS;oBACT,UAAU;oBACV,UAAU;oBACV,aAAa;oBACb,mBAAmB;oBACnB,gBAAgB;iBACnB,CAAC;gBACF,mBAAmB,EAAE,mEAAmE;aAC3F,CAAC;YACF,OAAO,EAAE,mBAAmB;SAC/B,CAAC;KACL,CAAC;CACL,CAAC,CAAC","sourcesContent":["import { createHash } from \"node:crypto\";\nimport { Either, ParseResult, Schema } from \"effect\";\nimport type { RecordBlobRef } from \"../attachment/blob-ref.ts\";\nimport { RecordExactParseOptions } from \"../codec/core.ts\";\nimport type { RecordAttachmentMaintenanceFacet } from \"../definition/attachment.ts\";\nimport { AssertionsAttachmentSchema, AssertionsAttachmentV1Schema } from \"./assertions.ts\";\nfunction parseAssertionsV1(value: unknown): Schema.Schema.Type<typeof AssertionsAttachmentV1Schema> {\n    const decoded = Schema.decodeUnknownEither(AssertionsAttachmentV1Schema, RecordExactParseOptions)(value);\n    if (Either.isLeft(decoded))\n        throw new Error(\"Assertions v1 payload is invalid\");\n    return decoded.right;\n}\nfunction decodeAssertionsV1(value: unknown): unknown {\n    parseAssertionsV1(value);\n    return value;\n}\n/** Pure adjacent payload transform. Record maintenance exclusively owns physical I/O. */\nfunction migrateAssertionsV1(value: unknown): unknown {\n    const previous = parseAssertionsV1(value);\n    const migrated = Object.freeze({\n        \"entries-data\": Object.freeze(previous.entries.map((entry) => Object.freeze({\n            entryId: entry.entryId,\n            display: entry.display,\n            criterion: Object.freeze({ state: \"unavailable\" as const, reason: \"not-recorded\" as const }),\n            materials: Object.freeze({\n                source: Object.freeze({ kind: \"unavailable\" as const, reason: \"not-recorded\" as const }),\n                evidence: Object.freeze([]),\n                coverage: Object.freeze({ state: \"unavailable\" as const, reason: \"not-collected\" as const }),\n                limitations: Object.freeze([]),\n            }),\n            evaluation: Object.freeze({\n                observed: Object.freeze({ kind: \"unavailable\" as const, reason: \"not-recorded\" as const }),\n            }),\n            decision: Object.freeze({\n                result: entry.result.state,\n                reason: \"reason\" in entry.result ? entry.result.reason : null,\n                gate: entry.result.gate,\n            }),\n            policy: Object.freeze({\n                requirement: entry.result.gate === \"not-gate\"\n                    ? Object.freeze({ state: \"unavailable\" as const, reason: \"not-recorded\" as const })\n                    : Object.freeze({ state: \"available\" as const, value: \"required\" as const }),\n                condition: Object.freeze({ state: \"unavailable\" as const, reason: \"not-recorded\" as const }),\n            }),\n            contribution: entry.result.score,\n            explanationRetention: Object.freeze({ state: \"unavailable\" as const, reason: \"not-recorded\" as const }),\n        }))),\n        \"source-sites-data\": previous.sourceSites,\n    });\n    const decoded = Schema.decodeUnknownEither(AssertionsAttachmentSchema, RecordExactParseOptions)(migrated);\n    if (Either.isLeft(decoded)) {\n        throw new Error(`Assertions v1 migration did not produce a current payload: ${ParseResult.TreeFormatter.formatErrorSync(decoded.left)}`);\n    }\n    return migrated;\n}\nexport const assertionsV1Maintenance: RecordAttachmentMaintenanceFacet = Object.freeze({\n    historicalCodecs: Object.freeze([\n        Object.freeze({\n            schemaVersion: 1,\n            decode: decodeAssertionsV1,\n            verify: (payload: unknown, blobs: readonly {\n                readonly ref: RecordBlobRef;\n                readonly bytes: Uint8Array;\n            }[]) => {\n                const previous = parseAssertionsV1(payload);\n                const byRef = new Map(blobs.map((blob) => [blob.ref, blob.bytes] as const));\n                const materials = previous.entries.flatMap((entry) => [entry.subject, ...entry.evidence]);\n                return materials.every((material) => {\n                    if (material.kind !== \"blob\")\n                        return true;\n                    const bytes = byRef.get(material.ref);\n                    return bytes !== undefined &&\n                        bytes.byteLength === material.byteLength &&\n                        createHash(\"sha256\").update(bytes).digest(\"hex\") === material.sha256;\n                });\n            },\n        }),\n    ]),\n    adjacentMigrations: Object.freeze([\n        Object.freeze({\n            fromSchemaVersion: 1,\n            toSchemaVersion: 2,\n            retention: Object.freeze({\n                retainedFacts: Object.freeze([\n                    \"display\",\n                    \"decision\",\n                    \"provable-policy\",\n                    \"contribution\",\n                    \"source-sites\",\n                ]),\n                droppedFacts: Object.freeze([\n                    \"criterion\",\n                    \"subject\",\n                    \"evidence\",\n                    \"coverage\",\n                    \"limitations\",\n                    \"result.diagnostic\",\n                    \"result.receipt\",\n                ]),\n                rerunRecommendation: \"Rerun the affected evaluation to collect current assertion facts.\",\n            }),\n            migrate: migrateAssertionsV1,\n        }),\n    ]),\n});\n"]}

package/dist/record/family/assertions-v1.d.cts

@@ -0,0 +1,2 @@
+import type { RecordAttachmentMaintenanceFacet } from "../definition/attachment.cjs";
+export declare const assertionsV1Maintenance: RecordAttachmentMaintenanceFacet;

package/dist/record/family/assertions-v1.d.mts

@@ -0,0 +1,2 @@
+import type { RecordAttachmentMaintenanceFacet } from "../definition/attachment.mjs";
+export declare const assertionsV1Maintenance: RecordAttachmentMaintenanceFacet;

package/dist/record/family/assertions-v1.d.ts

@@ -0,0 +1,2 @@
+import type { RecordAttachmentMaintenanceFacet } from "../definition/attachment.js";
+export declare const assertionsV1Maintenance: RecordAttachmentMaintenanceFacet;

package/dist/record/family/assertions-v1.js

@@ -0,0 +1,6 @@
+import { createRequire as __niceevalCreateRequire } from "node:module";
+const __niceevalRequire = __niceevalCreateRequire(import.meta.url);
+const __niceevalCanonical = __niceevalRequire("./assertions-v1.cjs");
+const __niceevalExport0 = __niceevalCanonical["assertionsV1Maintenance"];
+export { __niceevalExport0 as assertionsV1Maintenance };
+//# sourceMappingURL=assertions-v1.js.map

package/dist/record/family/assertions-v1.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"assertions-v1.js","sources":[],"names":[],"mappings":""}

package/dist/record/family/assertions.cjs

@@ -1,6 +1,7 @@
 "use strict";
+const __niceevalDynamicImport = (specifier) => import(specifier);
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.assertionsRecordAttachment = exports.AssertionsAttachmentSchema = exports.AssertionSourceSitesSchema = exports.AssertionsEntriesSchema = exports.AssertionSourceSiteSchema = void 0;
+exports.assertionsRecordAttachment = exports.AssertionsAttachmentV1Schema = exports.AssertionsAttachmentSchema = exports.AssertionSourceSitesSchema = exports.AssertionsEntriesV1Schema = exports.AssertionsEntriesSchema = exports.AssertionSourceSiteSchema = void 0;
 exports.assertionsBlobRefs = assertionsBlobRefs;
 exports.assertionsAttachmentIntegrityIssues = assertionsAttachmentIntegrityIssues;
 exports.assertionsSourceSiteIntegrityIssues = assertionsSourceSiteIntegrityIssues;
@@ -34,10 +35,11 @@ exports.AssertionSourceSiteSchema = effect_1.Schema.Struct({
 const assertionSchemas = (0, codec_ts_1.createAssertionsRecordSchemas)(blob_ref_ts_1.RecordBlobRefSchema);
 /** Reuse the existing v1 entry schema inside the one direct attachment schema. */
 exports.AssertionsEntriesSchema = assertionSchemas.entries;
+exports.AssertionsEntriesV1Schema = assertionSchemas.historicalEntries;
 exports.AssertionSourceSitesSchema = effect_1.Schema.Array(exports.AssertionSourceSiteSchema);
 function hasNoLegacyAttachmentMaterial(document) {
     const materialIsAllowed = (material) => material.kind !== "record-attachment";
-    return document.entries.every((entry) => materialIsAllowed(entry.subject) && entry.evidence.every(materialIsAllowed));
+    return document.entries.every((entry) => materialIsAllowed(entry.materials.source) && entry.materials.evidence.every(materialIsAllowed));
 }
 function hasCanonicalSourceSites(payload) {
     const entryIds = new Set(payload.entries.map((entry) => entry.entryId));
@@ -94,6 +96,11 @@ exports.AssertionsAttachmentSchema = effect_1.Schema.Struct({
     identifier: "AssertionsSourceSites",
     description: "source sites join local entries with unique canonical source order",
 }));
+/** @internal Package-private historical wire codec, loaded only by maintenance. */
+exports.AssertionsAttachmentV1Schema = effect_1.Schema.Struct({
+    entries: effect_1.Schema.propertySignature(exports.AssertionsEntriesV1Schema).pipe(effect_1.Schema.fromKey("entries-data")),
+    sourceSites: effect_1.Schema.propertySignature(exports.AssertionSourceSitesSchema).pipe(effect_1.Schema.fromKey("source-sites-data")),
+});
 /** Complete closure projection for `niceeval.assertions`. */
 function assertionsBlobRefs(payload) {
     return (0, attachment_ts_1.assertionBlobRefs)(payload);
@@ -121,8 +128,8 @@ function assertionsAttachmentIntegrityIssues(payload, blobs) {
         }
     };
     for (const [index, entry] of payload.entries.entries()) {
-        validateMaterial(entry.subject, ["entries", String(index), "subject"]);
-        for (const [evidenceIndex, material] of entry.evidence.entries()) {
+        validateMaterial(entry.materials.source, ["entries", String(index), "materials", "source"]);
+        for (const [evidenceIndex, material] of entry.materials.evidence.entries()) {
             validateMaterial(material, ["entries", String(index), "evidence", String(evidenceIndex)]);
         }
     }
@@ -155,7 +162,7 @@ const AssertionsBlobBudget = Object.freeze({
 exports.assertionsRecordAttachment = (0, index_ts_1.defineRecordAttachment)({
     family: "niceeval.assertions",
     current: {
-        schemaVersion: 1,
+        schemaVersion: 2,
         owners: {
             attempt: {
                 schema: exports.AssertionsAttachmentSchema,
@@ -168,5 +175,9 @@ exports.assertionsRecordAttachment = (0, index_ts_1.defineRecordAttachment)({
             },
         },
     },
+    maintenance: () => __niceevalDynamicImport("./assertions-v1.cjs").then(({ assertionsV1Maintenance }) => assertionsV1Maintenance),
+    adjacentMigrationLinks: Object.freeze([
+        Object.freeze({ fromSchemaVersion: 1, toSchemaVersion: 2, rewritePayload: true }),
+    ]),
 });
 //# sourceMappingURL=assertions.cjs.map

package/dist/record/family/assertions.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"assertions.js","sourceRoot":"","sources":["assertions.ts"],"names":[],"mappings":";;;AAkHA,gDAEC;AAED,kFA+BC;AAMD,kFAYC;AAvKD,6CAAyC;AACzC,mCAAgC;AAChC,yEAA0E;AAC1E,+DAAwI;AACxI,2DAAqF;AACrF,uDAA4F;AAC5F,qDAAgE;AAChE,4DAAkF;AAClF,2CAAqF;AAErF,MAAM,yBAAyB,GAAG,eAAM,CAAC,OAAO,CAAC,aAAa,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;AAClH,MAAM,6BAA6B,GAAG,eAAM,CAAC,MAAM,CAAC;IAChD,IAAI,EAAE,qCAAyB;IAC/B,MAAM,EAAE,qCAAyB;CACpC,CAAC,CAAC;AACH;;;GAGG;AACU,QAAA,yBAAyB,GAAG,eAAM,CAAC,MAAM,CAAC;IACnD,OAAO,EAAE,iCAAsB;IAC/B,WAAW,EAAE,qCAAyB;IACtC,IAAI,EAAE,yBAAyB;IAC/B,YAAY,EAAE,mCAAkB;IAChC,MAAM,EAAE,mCAAkB;IAC1B,KAAK,EAAE,6BAA6B;IACpC,GAAG,EAAE,6BAA6B;CACrC,CAAC,CAAC;AAEH,MAAM,gBAAgB,GAAG,IAAA,wCAA6B,EAAC,iCAAmB,CAAC,CAAC;AAC5E,kFAAkF;AACrE,QAAA,uBAAuB,GAAG,gBAAgB,CAAC,OAAO,CAAC;AACnD,QAAA,0BAA0B,GAAG,eAAM,CAAC,KAAK,CAAC,iCAAyB,CAAC,CAAC;AAClF,SAAS,6BAA6B,CAAC,QAStC;IACG,MAAM,iBAAiB,GAAG,CAAC,QAE1B,EAAW,EAAE,CAAC,QAAQ,CAAC,IAAI,KAAK,mBAAmB,CAAC;IACrD,OAAO,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,iBAAiB,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC;AAC1H,CAAC;AACD,SAAS,uBAAuB,CAAC,OAKhC;IACG,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;IACxE,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;IACrC,IAAI,QAA4B,CAAC;IACjC,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;QACrC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC;YAC/D,OAAO,KAAK,CAAC;QACjB,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACjC,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,OAAO,SAAS,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE,CAAC;QACpF,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,IAAI,GAAG;YACzC,OAAO,KAAK,CAAC;QACjB,QAAQ,GAAG,GAAG,CAAC;IACnB,CAAC;IACD,OAAO,IAAI,CAAC;AAChB,CAAC;AACD,SAAS,0BAA0B,CAAC,QAInC;IACG,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IACnC,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;QACnC,IAAI,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC;YAC3B,OAAO,KAAK,CAAC;QACjB,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAChC,CAAC;IACD,OAAO,IAAI,CAAC;AAChB,CAAC;AACD,SAAS,mCAAmC,CAAC,KAAc;IACvD,IAAI,CAAC;QACD,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACzC,OAAO,OAAO,UAAU,KAAK,QAAQ;YACjC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,UAAU,IAAI,uCAA4B,CAAC;IACxF,CAAC;IACD,MAAM,CAAC;QACH,OAAO,KAAK,CAAC;IACjB,CAAC;AACL,CAAC;AACD;;;GAGG;AACH,oFAAoF;AACvE,QAAA,0BAA0B,GAAG,eAAM,CAAC,MAAM,CAAC;IACpD,OAAO,EAAE,eAAM,CAAC,iBAAiB,CAAC,+BAAuB,CAAC,CAAC,IAAI,CAAC,eAAM,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;IAC/F,WAAW,EAAE,eAAM,CAAC,iBAAiB,CAAC,kCAA0B,CAAC,CAAC,IAAI,CAAC,eAAM,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;CAC9G,CAAC,CAAC,IAAI,CAAC,eAAM,CAAC,MAAM,CAAC,0BAA0B,EAAE;IAC9C,UAAU,EAAE,0BAA0B;IACtC,WAAW,EAAE,6CAA6C;CAC7D,CAAC,EAAE,eAAM,CAAC,MAAM,CAAC,mCAAmC,EAAE;IACnD,UAAU,EAAE,wBAAwB;IACpC,WAAW,EAAE,sCAAsC;CACtD,CAAC,EAAE,eAAM,CAAC,MAAM,CAAC,6BAA6B,EAAE;IAC7C,UAAU,EAAE,sCAAsC;IAClD,WAAW,EAAE,yDAAyD;CACzE,CAAC,EAAE,eAAM,CAAC,MAAM,CAAC,uBAAuB,EAAE;IACvC,UAAU,EAAE,uBAAuB;IACnC,WAAW,EAAE,oEAAoE;CACpF,CAAC,CAAC,CAAC;AAEJ,6DAA6D;AAC7D,SAAgB,kBAAkB,CAAC,OAA6B;IAC5D,OAAO,IAAA,iCAAiB,EAAC,OAAO,CAAC,CAAC;AACtC,CAAC;AACD,+EAA+E;AAC/E,SAAgB,mCAAmC,CAAC,OAA6B,EAAE,KAGhF;IACC,MAAM,UAAU,GAAG,IAAI,GAAG,CAA4B,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAU,CAAC,CAAC,CAAC;IAC5G,MAAM,MAAM,GAA4B,EAAE,CAAC;IAC3C,MAAM,gBAAgB,GAAG,CAAC,QAA4D,EAAE,IAAuB,EAAE,EAAE;QAC/G,IAAI,QAAQ,CAAC,IAAI,KAAK,MAAM;YACxB,OAAO;QACX,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC3C,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,UAAU,KAAK,QAAQ,CAAC,UAAU,EAAE,CAAC;YAClE,MAAM,CAAC,IAAI,CAAC,IAAA,iCAAqB,EAAC,wCAAwC,EAAE;gBACxE,GAAG,IAAI;gBACP,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY;aAC7C,CAAC,CAAC,CAAC;YACJ,OAAO;QACX,CAAC;QACD,IAAI,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,QAAQ,CAAC,MAAM,EAAE,CAAC;YACvE,MAAM,CAAC,IAAI,CAAC,IAAA,iCAAqB,EAAC,wCAAwC,EAAE;gBACxE,GAAG,IAAI;gBACP,QAAQ;aACX,CAAC,CAAC,CAAC;QACR,CAAC;IACL,CAAC,CAAC;IACF,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;QACrD,gBAAgB,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC;QACvE,KAAK,MAAM,CAAC,aAAa,EAAE,QAAQ,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC;YAC/D,gBAAgB,CAAC,QAAQ,EAAE,CAAC,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;QAC9F,CAAC;IACL,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AACjC,CAAC;AACD;;;;GAIG;AACH,SAAgB,mCAAmC,CAAC,OAA6B,EAAE,OAA0B;IACzG,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAU,CAAC,CAAC,CAAC;IAC5F,MAAM,MAAM,GAA4B,EAAE,CAAC;IAC3C,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,OAAO,CAAC,WAAW,CAAC,OAAO,EAAE,EAAE,CAAC;QACxD,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACjD,MAAM,cAAc,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI;YAClD,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC/E,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,IAAI,cAAc,EAAE,CAAC;YAC1E,MAAM,CAAC,IAAI,CAAC,IAAA,iCAAqB,EAAC,wCAAwC,EAAE,CAAC,aAAa,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACjH,CAAC;IACL,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AACjC,CAAC;AACD,MAAM,oBAAoB,GAAG,MAAM,CAAC,MAAM,CAAC;IACvC,YAAY,EAAE,KAAK;IACnB,gBAAgB,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;IAClC,iBAAiB,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;CACtC,CAAC,CAAC;AACH,4EAA4E;AAC/D,QAAA,0BAA0B,GAAG,IAAA,iCAAsB,EAAC;IAC7D,MAAM,EAAE,qBAAqB;IAC7B,OAAO,EAAE;QACL,aAAa,EAAE,CAAC;QAChB,MAAM,EAAE;YACJ,OAAO,EAAE;gBACL,MAAM,EAAE,kCAA0B;gBAClC,MAAM,EAAE,sCAA0B;gBAClC,KAAK,EAAE;oBACH,IAAI,EAAE,kBAAkB;oBACxB,MAAM,EAAE,oBAAoB;oBAC5B,MAAM,EAAE,mCAAmC;iBAC9C;aACJ;SACJ;KACJ;CACJ,CAAC,CAAC","sourcesContent":["import { createHash } from \"node:crypto\";\nimport { Schema } from \"effect\";\nimport { assertionBlobRefs } from \"../../assertions/record/attachment.ts\";\nimport { AssertionEntryIdSchema, MAX_ASSERTION_DOCUMENT_BYTES, createAssertionsRecordSchemas, } from \"../../assertions/record/codec.ts\";\nimport { RecordBlobRefSchema, type RecordBlobRef, } from \"../attachment/blob-ref.ts\";\nimport { recordAttachmentIssue, type RecordAttachmentIssue } from \"../attachment/errors.ts\";\nimport { defineRecordAttachment } from \"../definition/index.ts\";\nimport { Sha256DigestSchema, SourceItemIdSchema, } from \"../codec/identifiers.ts\";\nimport { FixedAttachmentValueLimits, PositiveSafeIntegerSchema, } from \"./common.ts\";\nimport type { SourcesAttachment } from \"./sources.ts\";\nconst AssertionSourceRoleSchema = Schema.Literal(\"declaration\", \"threshold\", \"score\", \"gate\", \"optional\", \"stop\");\nconst AssertionSourcePositionSchema = Schema.Struct({\n    line: PositiveSafeIntegerSchema,\n    column: PositiveSafeIntegerSchema,\n});\n/**\n * A source site is a semantic join only. It names an item in the exact origin\n * Run Sources payload and never gains that payload's blob capability.\n */\nexport const AssertionSourceSiteSchema = Schema.Struct({\n    entryId: AssertionEntryIdSchema,\n    sourceOrder: PositiveSafeIntegerSchema,\n    role: AssertionSourceRoleSchema,\n    sourceItemId: SourceItemIdSchema,\n    sha256: Sha256DigestSchema,\n    start: AssertionSourcePositionSchema,\n    end: AssertionSourcePositionSchema,\n});\nexport type AssertionSourceSite = Schema.Schema.Type<typeof AssertionSourceSiteSchema>;\nconst assertionSchemas = createAssertionsRecordSchemas(RecordBlobRefSchema);\n/** Reuse the existing v1 entry schema inside the one direct attachment schema. */\nexport const AssertionsEntriesSchema = assertionSchemas.entries;\nexport const AssertionSourceSitesSchema = Schema.Array(AssertionSourceSiteSchema);\nfunction hasNoLegacyAttachmentMaterial(document: {\n    readonly entries: readonly {\n        readonly subject: {\n            readonly kind: string;\n        };\n        readonly evidence: readonly {\n            readonly kind: string;\n        }[];\n    }[];\n}): boolean {\n    const materialIsAllowed = (material: {\n        readonly kind: string;\n    }): boolean => material.kind !== \"record-attachment\";\n    return document.entries.every((entry) => materialIsAllowed(entry.subject) && entry.evidence.every(materialIsAllowed));\n}\nfunction hasCanonicalSourceSites(payload: {\n    readonly entries: readonly {\n        readonly entryId: string;\n    }[];\n    readonly sourceSites: readonly AssertionSourceSite[];\n}): boolean {\n    const entryIds = new Set(payload.entries.map((entry) => entry.entryId));\n    const seenOrders = new Set<number>();\n    let previous: string | undefined;\n    for (const site of payload.sourceSites) {\n        if (!entryIds.has(site.entryId) || seenOrders.has(site.sourceOrder))\n            return false;\n        seenOrders.add(site.sourceOrder);\n        const key = `${site.entryId}\\u0000${site.sourceOrder.toString().padStart(16, \"0\")}`;\n        if (previous !== undefined && previous >= key)\n            return false;\n        previous = key;\n    }\n    return true;\n}\nfunction hasUniqueAssertionEntryIds(document: {\n    readonly entries: readonly {\n        readonly entryId: string;\n    }[];\n}): boolean {\n    const entryIds = new Set<string>();\n    for (const entry of document.entries) {\n        if (entryIds.has(entry.entryId))\n            return false;\n        entryIds.add(entry.entryId);\n    }\n    return true;\n}\nfunction isAssertionsDocumentWithinSizeLimit(value: unknown): boolean {\n    try {\n        const serialized = JSON.stringify(value);\n        return typeof serialized === \"string\" &&\n            new TextEncoder().encode(serialized).byteLength <= MAX_ASSERTION_DOCUMENT_BYTES;\n    }\n    catch {\n        return false;\n    }\n}\n/**\n * `sourceSites` is embedded in the fixed Assertions payload. The former\n * `niceeval.assertion-source-sites/v1` family is not part of Record v1.\n */\n/** One direct current schema: Type fields and durable keys share all v1 filters. */\nexport const AssertionsAttachmentSchema = Schema.Struct({\n    entries: Schema.propertySignature(AssertionsEntriesSchema).pipe(Schema.fromKey(\"entries-data\")),\n    sourceSites: Schema.propertySignature(AssertionSourceSitesSchema).pipe(Schema.fromKey(\"source-sites-data\")),\n}).pipe(Schema.filter(hasUniqueAssertionEntryIds, {\n    identifier: \"AssertionsUniqueEntryIds\",\n    description: \"unique attachment-local assertion entry IDs\",\n}), Schema.filter(isAssertionsDocumentWithinSizeLimit, {\n    identifier: \"AssertionsDocumentSize\",\n    description: \"a JSON document no larger than 4 MiB\",\n}), Schema.filter(hasNoLegacyAttachmentMaterial, {\n    identifier: \"AssertionsNoLegacyAttachmentMaterial\",\n    description: \"Assertions do not reference retired attachment families\",\n}), Schema.filter(hasCanonicalSourceSites, {\n    identifier: \"AssertionsSourceSites\",\n    description: \"source sites join local entries with unique canonical source order\",\n}));\nexport type AssertionsAttachment = Schema.Schema.Type<typeof AssertionsAttachmentSchema>;\n/** Complete closure projection for `niceeval.assertions`. */\nexport function assertionsBlobRefs(payload: AssertionsAttachment): readonly RecordBlobRef[] {\n    return assertionBlobRefs(payload);\n}\n/** Binds every Assertions blob declaration to its exact materialized bytes. */\nexport function assertionsAttachmentIntegrityIssues(payload: AssertionsAttachment, blobs: readonly {\n    readonly ref: RecordBlobRef;\n    readonly bytes: Uint8Array;\n}[]): readonly RecordAttachmentIssue[] {\n    const bytesByRef = new Map<RecordBlobRef, Uint8Array>(blobs.map((blob) => [blob.ref, blob.bytes] as const));\n    const issues: RecordAttachmentIssue[] = [];\n    const validateMaterial = (material: AssertionsAttachment[\"entries\"][number][\"subject\"], path: readonly string[]) => {\n        if (material.kind !== \"blob\")\n            return;\n        const bytes = bytesByRef.get(material.ref);\n        if (bytes === undefined || bytes.byteLength !== material.byteLength) {\n            issues.push(recordAttachmentIssue(\"record-attachment-materialized-invalid\", [\n                ...path,\n                bytes === undefined ? \"ref\" : \"byteLength\",\n            ]));\n            return;\n        }\n        if (createHash(\"sha256\").update(bytes).digest(\"hex\") !== material.sha256) {\n            issues.push(recordAttachmentIssue(\"record-attachment-materialized-invalid\", [\n                ...path,\n                \"sha256\",\n            ]));\n        }\n    };\n    for (const [index, entry] of payload.entries.entries()) {\n        validateMaterial(entry.subject, [\"entries\", String(index), \"subject\"]);\n        for (const [evidenceIndex, material] of entry.evidence.entries()) {\n            validateMaterial(material, [\"entries\", String(index), \"evidence\", String(evidenceIndex)]);\n        }\n    }\n    return Object.freeze(issues);\n}\n/**\n * Host-only semantic join to the exact origin Sources manifest.  The row owns\n * neither source bytes nor a blob capability, so this check deliberately\n * compares only the explicit item identity, digest, and stored coordinates.\n */\nexport function assertionsSourceSiteIntegrityIssues(payload: AssertionsAttachment, sources: SourcesAttachment): readonly RecordAttachmentIssue[] {\n    const sourceById = new Map(sources.items.map((item) => [item.sourceItemId, item] as const));\n    const issues: RecordAttachmentIssue[] = [];\n    for (const [index, site] of payload.sourceSites.entries()) {\n        const source = sourceById.get(site.sourceItemId);\n        const startsAfterEnd = site.start.line > site.end.line ||\n            (site.start.line === site.end.line && site.start.column > site.end.column);\n        if (source === undefined || source.sha256 !== site.sha256 || startsAfterEnd) {\n            issues.push(recordAttachmentIssue(\"record-attachment-materialized-invalid\", [\"sourceSites\", String(index)]));\n        }\n    }\n    return Object.freeze(issues);\n}\nconst AssertionsBlobBudget = Object.freeze({\n    maximumBlobs: 20000,\n    maximumBlobBytes: 16 * 1024 * 1024,\n    maximumTotalBytes: 64 * 1024 * 1024,\n});\n/** The sole current declaration for the Attempt-owned Assertions family. */\nexport const assertionsRecordAttachment = defineRecordAttachment({\n    family: \"niceeval.assertions\",\n    current: {\n        schemaVersion: 1,\n        owners: {\n            attempt: {\n                schema: AssertionsAttachmentSchema,\n                limits: FixedAttachmentValueLimits,\n                blobs: {\n                    refs: assertionsBlobRefs,\n                    budget: AssertionsBlobBudget,\n                    verify: assertionsAttachmentIntegrityIssues,\n                },\n            },\n        },\n    },\n});\n"]}
+{"version":3,"file":"assertions.js","sourceRoot":"","sources":["assertions.ts"],"names":[],"mappings":";;;AA0HA,gDAEC;AAED,kFA+BC;AAMD,kFAYC;AA/KD,6CAAyC;AACzC,mCAAgC;AAChC,yEAA0E;AAC1E,+DAAwI;AACxI,2DAAqF;AACrF,uDAA4F;AAC5F,qDAAgE;AAChE,4DAAkF;AAClF,2CAAqF;AAErF,MAAM,yBAAyB,GAAG,eAAM,CAAC,OAAO,CAAC,aAAa,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;AAClH,MAAM,6BAA6B,GAAG,eAAM,CAAC,MAAM,CAAC;IAChD,IAAI,EAAE,qCAAyB;IAC/B,MAAM,EAAE,qCAAyB;CACpC,CAAC,CAAC;AACH;;;GAGG;AACU,QAAA,yBAAyB,GAAG,eAAM,CAAC,MAAM,CAAC;IACnD,OAAO,EAAE,iCAAsB;IAC/B,WAAW,EAAE,qCAAyB;IACtC,IAAI,EAAE,yBAAyB;IAC/B,YAAY,EAAE,mCAAkB;IAChC,MAAM,EAAE,mCAAkB;IAC1B,KAAK,EAAE,6BAA6B;IACpC,GAAG,EAAE,6BAA6B;CACrC,CAAC,CAAC;AAEH,MAAM,gBAAgB,GAAG,IAAA,wCAA6B,EAAC,iCAAmB,CAAC,CAAC;AAC5E,kFAAkF;AACrE,QAAA,uBAAuB,GAAG,gBAAgB,CAAC,OAAO,CAAC;AACnD,QAAA,yBAAyB,GAAG,gBAAgB,CAAC,iBAAiB,CAAC;AAC/D,QAAA,0BAA0B,GAAG,eAAM,CAAC,KAAK,CAAC,iCAAyB,CAAC,CAAC;AAClF,SAAS,6BAA6B,CAAC,QAWtC;IACG,MAAM,iBAAiB,GAAG,CAAC,QAE1B,EAAW,EAAE,CAAC,QAAQ,CAAC,IAAI,KAAK,mBAAmB,CAAC;IACrD,OAAO,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,iBAAiB,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC;AAC7I,CAAC;AACD,SAAS,uBAAuB,CAAC,OAKhC;IACG,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;IACxE,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;IACrC,IAAI,QAA4B,CAAC;IACjC,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;QACrC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC;YAC/D,OAAO,KAAK,CAAC;QACjB,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACjC,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,OAAO,SAAS,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE,CAAC;QACpF,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,IAAI,GAAG;YACzC,OAAO,KAAK,CAAC;QACjB,QAAQ,GAAG,GAAG,CAAC;IACnB,CAAC;IACD,OAAO,IAAI,CAAC;AAChB,CAAC;AACD,SAAS,0BAA0B,CAAC,QAInC;IACG,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IACnC,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;QACnC,IAAI,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC;YAC3B,OAAO,KAAK,CAAC;QACjB,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAChC,CAAC;IACD,OAAO,IAAI,CAAC;AAChB,CAAC;AACD,SAAS,mCAAmC,CAAC,KAAc;IACvD,IAAI,CAAC;QACD,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACzC,OAAO,OAAO,UAAU,KAAK,QAAQ;YACjC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,UAAU,IAAI,uCAA4B,CAAC;IACxF,CAAC;IACD,MAAM,CAAC;QACH,OAAO,KAAK,CAAC;IACjB,CAAC;AACL,CAAC;AACD;;;GAGG;AACH,oFAAoF;AACvE,QAAA,0BAA0B,GAAG,eAAM,CAAC,MAAM,CAAC;IACpD,OAAO,EAAE,eAAM,CAAC,iBAAiB,CAAC,+BAAuB,CAAC,CAAC,IAAI,CAAC,eAAM,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;IAC/F,WAAW,EAAE,eAAM,CAAC,iBAAiB,CAAC,kCAA0B,CAAC,CAAC,IAAI,CAAC,eAAM,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;CAC9G,CAAC,CAAC,IAAI,CAAC,eAAM,CAAC,MAAM,CAAC,0BAA0B,EAAE;IAC9C,UAAU,EAAE,0BAA0B;IACtC,WAAW,EAAE,6CAA6C;CAC7D,CAAC,EAAE,eAAM,CAAC,MAAM,CAAC,mCAAmC,EAAE;IACnD,UAAU,EAAE,wBAAwB;IACpC,WAAW,EAAE,sCAAsC;CACtD,CAAC,EAAE,eAAM,CAAC,MAAM,CAAC,6BAA6B,EAAE;IAC7C,UAAU,EAAE,sCAAsC;IAClD,WAAW,EAAE,yDAAyD;CACzE,CAAC,EAAE,eAAM,CAAC,MAAM,CAAC,uBAAuB,EAAE;IACvC,UAAU,EAAE,uBAAuB;IACnC,WAAW,EAAE,oEAAoE;CACpF,CAAC,CAAC,CAAC;AACJ,mFAAmF;AACtE,QAAA,4BAA4B,GAAG,eAAM,CAAC,MAAM,CAAC;IACtD,OAAO,EAAE,eAAM,CAAC,iBAAiB,CAAC,iCAAyB,CAAC,CAAC,IAAI,CAAC,eAAM,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;IACjG,WAAW,EAAE,eAAM,CAAC,iBAAiB,CAAC,kCAA0B,CAAC,CAAC,IAAI,CAAC,eAAM,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;CAC9G,CAAC,CAAC;AAEH,6DAA6D;AAC7D,SAAgB,kBAAkB,CAAC,OAA6B;IAC5D,OAAO,IAAA,iCAAiB,EAAC,OAAO,CAAC,CAAC;AACtC,CAAC;AACD,+EAA+E;AAC/E,SAAgB,mCAAmC,CAAC,OAA6B,EAAE,KAGhF;IACC,MAAM,UAAU,GAAG,IAAI,GAAG,CAA4B,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAU,CAAC,CAAC,CAAC;IAC5G,MAAM,MAAM,GAA4B,EAAE,CAAC;IAC3C,MAAM,gBAAgB,GAAG,CAAC,QAAwE,EAAE,IAAuB,EAAE,EAAE;QAC3H,IAAI,QAAQ,CAAC,IAAI,KAAK,MAAM;YACxB,OAAO;QACX,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC3C,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,UAAU,KAAK,QAAQ,CAAC,UAAU,EAAE,CAAC;YAClE,MAAM,CAAC,IAAI,CAAC,IAAA,iCAAqB,EAAC,wCAAwC,EAAE;gBACxE,GAAG,IAAI;gBACP,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY;aAC7C,CAAC,CAAC,CAAC;YACJ,OAAO;QACX,CAAC;QACD,IAAI,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,QAAQ,CAAC,MAAM,EAAE,CAAC;YACvE,MAAM,CAAC,IAAI,CAAC,IAAA,iCAAqB,EAAC,wCAAwC,EAAE;gBACxE,GAAG,IAAI;gBACP,QAAQ;aACX,CAAC,CAAC,CAAC;QACR,CAAC;IACL,CAAC,CAAC;IACF,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;QACrD,gBAAgB,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC;QAC5F,KAAK,MAAM,CAAC,aAAa,EAAE,QAAQ,CAAC,IAAI,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC;YACzE,gBAAgB,CAAC,QAAQ,EAAE,CAAC,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;QAC9F,CAAC;IACL,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AACjC,CAAC;AACD;;;;GAIG;AACH,SAAgB,mCAAmC,CAAC,OAA6B,EAAE,OAA0B;IACzG,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAU,CAAC,CAAC,CAAC;IAC5F,MAAM,MAAM,GAA4B,EAAE,CAAC;IAC3C,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,OAAO,CAAC,WAAW,CAAC,OAAO,EAAE,EAAE,CAAC;QACxD,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACjD,MAAM,cAAc,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI;YAClD,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC/E,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,IAAI,cAAc,EAAE,CAAC;YAC1E,MAAM,CAAC,IAAI,CAAC,IAAA,iCAAqB,EAAC,wCAAwC,EAAE,CAAC,aAAa,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACjH,CAAC;IACL,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AACjC,CAAC;AACD,MAAM,oBAAoB,GAAG,MAAM,CAAC,MAAM,CAAC;IACvC,YAAY,EAAE,KAAK;IACnB,gBAAgB,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;IAClC,iBAAiB,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;CACtC,CAAC,CAAC;AACH,4EAA4E;AAC/D,QAAA,0BAA0B,GAAG,IAAA,iCAAsB,EAAC;IAC7D,MAAM,EAAE,qBAAqB;IAC7B,OAAO,EAAE;QACL,aAAa,EAAE,CAAC;QAChB,MAAM,EAAE;YACJ,OAAO,EAAE;gBACL,MAAM,EAAE,kCAA0B;gBAClC,MAAM,EAAE,sCAA0B;gBAClC,KAAK,EAAE;oBACH,IAAI,EAAE,kBAAkB;oBACxB,MAAM,EAAE,oBAAoB;oBAC5B,MAAM,EAAE,mCAAmC;iBAC9C;aACJ;SACJ;KACJ;IACD,WAAW,EAAE,GAAG,EAAE,CAAC,uBAAuB,CAAC,qBAAqB,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,uBAAuB,EAAE,EAAE,EAAE,CAAC,uBAAuB,CAAC;IAChI,sBAAsB,EAAE,MAAM,CAAC,MAAM,CAAC;QAClC,MAAM,CAAC,MAAM,CAAC,EAAE,iBAAiB,EAAE,CAAC,EAAE,eAAe,EAAE,CAAC,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC;KACpF,CAAC;CACL,CAAC,CAAC","sourcesContent":["import { createHash } from \"node:crypto\";\nimport { Schema } from \"effect\";\nimport { assertionBlobRefs } from \"../../assertions/record/attachment.ts\";\nimport { AssertionEntryIdSchema, MAX_ASSERTION_DOCUMENT_BYTES, createAssertionsRecordSchemas, } from \"../../assertions/record/codec.ts\";\nimport { RecordBlobRefSchema, type RecordBlobRef, } from \"../attachment/blob-ref.ts\";\nimport { recordAttachmentIssue, type RecordAttachmentIssue } from \"../attachment/errors.ts\";\nimport { defineRecordAttachment } from \"../definition/index.ts\";\nimport { Sha256DigestSchema, SourceItemIdSchema, } from \"../codec/identifiers.ts\";\nimport { FixedAttachmentValueLimits, PositiveSafeIntegerSchema, } from \"./common.ts\";\nimport type { SourcesAttachment } from \"./sources.ts\";\nconst AssertionSourceRoleSchema = Schema.Literal(\"declaration\", \"threshold\", \"score\", \"gate\", \"optional\", \"stop\");\nconst AssertionSourcePositionSchema = Schema.Struct({\n    line: PositiveSafeIntegerSchema,\n    column: PositiveSafeIntegerSchema,\n});\n/**\n * A source site is a semantic join only. It names an item in the exact origin\n * Run Sources payload and never gains that payload's blob capability.\n */\nexport const AssertionSourceSiteSchema = Schema.Struct({\n    entryId: AssertionEntryIdSchema,\n    sourceOrder: PositiveSafeIntegerSchema,\n    role: AssertionSourceRoleSchema,\n    sourceItemId: SourceItemIdSchema,\n    sha256: Sha256DigestSchema,\n    start: AssertionSourcePositionSchema,\n    end: AssertionSourcePositionSchema,\n});\nexport type AssertionSourceSite = Schema.Schema.Type<typeof AssertionSourceSiteSchema>;\nconst assertionSchemas = createAssertionsRecordSchemas(RecordBlobRefSchema);\n/** Reuse the existing v1 entry schema inside the one direct attachment schema. */\nexport const AssertionsEntriesSchema = assertionSchemas.entries;\nexport const AssertionsEntriesV1Schema = assertionSchemas.historicalEntries;\nexport const AssertionSourceSitesSchema = Schema.Array(AssertionSourceSiteSchema);\nfunction hasNoLegacyAttachmentMaterial(document: {\n    readonly entries: readonly {\n        readonly materials: {\n            readonly source: {\n                readonly kind: string;\n            };\n            readonly evidence: readonly {\n                readonly kind: string;\n            }[];\n        };\n    }[];\n}): boolean {\n    const materialIsAllowed = (material: {\n        readonly kind: string;\n    }): boolean => material.kind !== \"record-attachment\";\n    return document.entries.every((entry) => materialIsAllowed(entry.materials.source) && entry.materials.evidence.every(materialIsAllowed));\n}\nfunction hasCanonicalSourceSites(payload: {\n    readonly entries: readonly {\n        readonly entryId: string;\n    }[];\n    readonly sourceSites: readonly AssertionSourceSite[];\n}): boolean {\n    const entryIds = new Set(payload.entries.map((entry) => entry.entryId));\n    const seenOrders = new Set<number>();\n    let previous: string | undefined;\n    for (const site of payload.sourceSites) {\n        if (!entryIds.has(site.entryId) || seenOrders.has(site.sourceOrder))\n            return false;\n        seenOrders.add(site.sourceOrder);\n        const key = `${site.entryId}\\u0000${site.sourceOrder.toString().padStart(16, \"0\")}`;\n        if (previous !== undefined && previous >= key)\n            return false;\n        previous = key;\n    }\n    return true;\n}\nfunction hasUniqueAssertionEntryIds(document: {\n    readonly entries: readonly {\n        readonly entryId: string;\n    }[];\n}): boolean {\n    const entryIds = new Set<string>();\n    for (const entry of document.entries) {\n        if (entryIds.has(entry.entryId))\n            return false;\n        entryIds.add(entry.entryId);\n    }\n    return true;\n}\nfunction isAssertionsDocumentWithinSizeLimit(value: unknown): boolean {\n    try {\n        const serialized = JSON.stringify(value);\n        return typeof serialized === \"string\" &&\n            new TextEncoder().encode(serialized).byteLength <= MAX_ASSERTION_DOCUMENT_BYTES;\n    }\n    catch {\n        return false;\n    }\n}\n/**\n * `sourceSites` is embedded in the fixed Assertions payload. The former\n * `niceeval.assertion-source-sites/v1` family is not part of Record v1.\n */\n/** One direct current schema: Type fields and durable keys share all v1 filters. */\nexport const AssertionsAttachmentSchema = Schema.Struct({\n    entries: Schema.propertySignature(AssertionsEntriesSchema).pipe(Schema.fromKey(\"entries-data\")),\n    sourceSites: Schema.propertySignature(AssertionSourceSitesSchema).pipe(Schema.fromKey(\"source-sites-data\")),\n}).pipe(Schema.filter(hasUniqueAssertionEntryIds, {\n    identifier: \"AssertionsUniqueEntryIds\",\n    description: \"unique attachment-local assertion entry IDs\",\n}), Schema.filter(isAssertionsDocumentWithinSizeLimit, {\n    identifier: \"AssertionsDocumentSize\",\n    description: \"a JSON document no larger than 4 MiB\",\n}), Schema.filter(hasNoLegacyAttachmentMaterial, {\n    identifier: \"AssertionsNoLegacyAttachmentMaterial\",\n    description: \"Assertions do not reference retired attachment families\",\n}), Schema.filter(hasCanonicalSourceSites, {\n    identifier: \"AssertionsSourceSites\",\n    description: \"source sites join local entries with unique canonical source order\",\n}));\n/** @internal Package-private historical wire codec, loaded only by maintenance. */\nexport const AssertionsAttachmentV1Schema = Schema.Struct({\n    entries: Schema.propertySignature(AssertionsEntriesV1Schema).pipe(Schema.fromKey(\"entries-data\")),\n    sourceSites: Schema.propertySignature(AssertionSourceSitesSchema).pipe(Schema.fromKey(\"source-sites-data\")),\n});\nexport type AssertionsAttachment = Schema.Schema.Type<typeof AssertionsAttachmentSchema>;\n/** Complete closure projection for `niceeval.assertions`. */\nexport function assertionsBlobRefs(payload: AssertionsAttachment): readonly RecordBlobRef[] {\n    return assertionBlobRefs(payload);\n}\n/** Binds every Assertions blob declaration to its exact materialized bytes. */\nexport function assertionsAttachmentIntegrityIssues(payload: AssertionsAttachment, blobs: readonly {\n    readonly ref: RecordBlobRef;\n    readonly bytes: Uint8Array;\n}[]): readonly RecordAttachmentIssue[] {\n    const bytesByRef = new Map<RecordBlobRef, Uint8Array>(blobs.map((blob) => [blob.ref, blob.bytes] as const));\n    const issues: RecordAttachmentIssue[] = [];\n    const validateMaterial = (material: AssertionsAttachment[\"entries\"][number][\"materials\"][\"source\"], path: readonly string[]) => {\n        if (material.kind !== \"blob\")\n            return;\n        const bytes = bytesByRef.get(material.ref);\n        if (bytes === undefined || bytes.byteLength !== material.byteLength) {\n            issues.push(recordAttachmentIssue(\"record-attachment-materialized-invalid\", [\n                ...path,\n                bytes === undefined ? \"ref\" : \"byteLength\",\n            ]));\n            return;\n        }\n        if (createHash(\"sha256\").update(bytes).digest(\"hex\") !== material.sha256) {\n            issues.push(recordAttachmentIssue(\"record-attachment-materialized-invalid\", [\n                ...path,\n                \"sha256\",\n            ]));\n        }\n    };\n    for (const [index, entry] of payload.entries.entries()) {\n        validateMaterial(entry.materials.source, [\"entries\", String(index), \"materials\", \"source\"]);\n        for (const [evidenceIndex, material] of entry.materials.evidence.entries()) {\n            validateMaterial(material, [\"entries\", String(index), \"evidence\", String(evidenceIndex)]);\n        }\n    }\n    return Object.freeze(issues);\n}\n/**\n * Host-only semantic join to the exact origin Sources manifest.  The row owns\n * neither source bytes nor a blob capability, so this check deliberately\n * compares only the explicit item identity, digest, and stored coordinates.\n */\nexport function assertionsSourceSiteIntegrityIssues(payload: AssertionsAttachment, sources: SourcesAttachment): readonly RecordAttachmentIssue[] {\n    const sourceById = new Map(sources.items.map((item) => [item.sourceItemId, item] as const));\n    const issues: RecordAttachmentIssue[] = [];\n    for (const [index, site] of payload.sourceSites.entries()) {\n        const source = sourceById.get(site.sourceItemId);\n        const startsAfterEnd = site.start.line > site.end.line ||\n            (site.start.line === site.end.line && site.start.column > site.end.column);\n        if (source === undefined || source.sha256 !== site.sha256 || startsAfterEnd) {\n            issues.push(recordAttachmentIssue(\"record-attachment-materialized-invalid\", [\"sourceSites\", String(index)]));\n        }\n    }\n    return Object.freeze(issues);\n}\nconst AssertionsBlobBudget = Object.freeze({\n    maximumBlobs: 20000,\n    maximumBlobBytes: 16 * 1024 * 1024,\n    maximumTotalBytes: 64 * 1024 * 1024,\n});\n/** The sole current declaration for the Attempt-owned Assertions family. */\nexport const assertionsRecordAttachment = defineRecordAttachment({\n    family: \"niceeval.assertions\",\n    current: {\n        schemaVersion: 2,\n        owners: {\n            attempt: {\n                schema: AssertionsAttachmentSchema,\n                limits: FixedAttachmentValueLimits,\n                blobs: {\n                    refs: assertionsBlobRefs,\n                    budget: AssertionsBlobBudget,\n                    verify: assertionsAttachmentIntegrityIssues,\n                },\n            },\n        },\n    },\n    maintenance: () => __niceevalDynamicImport(\"./assertions-v1.cjs\").then(({ assertionsV1Maintenance }) => assertionsV1Maintenance),\n    adjacentMigrationLinks: Object.freeze([\n        Object.freeze({ fromSchemaVersion: 1, toSchemaVersion: 2, rewritePayload: true }),\n    ]),\n});\n"]}