niceeval 0.15.1-canary.76 → 0.16.1

package/dist/index.js

@@ -7,14 +7,14 @@ const __niceevalExport1 = __niceevalCanonical["ExperimentFatalError"];
 export { __niceevalExport1 as ExperimentFatalError };
 const __niceevalExport2 = __niceevalCanonical["MigrationRequiredError"];
 export { __niceevalExport2 as MigrationRequiredError };
-const __niceevalExport3 = __niceevalCanonical["closeQA"];
-export { __niceevalExport3 as closeQA };
-const __niceevalExport4 = __niceevalCanonical["defineAdapter"];
-export { __niceevalExport4 as defineAdapter };
-const __niceevalExport5 = __niceevalCanonical["defineAdapterContract"];
-export { __niceevalExport5 as defineAdapterContract };
-const __niceevalExport6 = __niceevalCanonical["defineConfig"];
-export { __niceevalExport6 as defineConfig };
+const __niceevalExport3 = __niceevalCanonical["defineAdapter"];
+export { __niceevalExport3 as defineAdapter };
+const __niceevalExport4 = __niceevalCanonical["defineAdapterContract"];
+export { __niceevalExport4 as defineAdapterContract };
+const __niceevalExport5 = __niceevalCanonical["defineConfig"];
+export { __niceevalExport5 as defineConfig };
+const __niceevalExport6 = __niceevalCanonical["defineContextMatch"];
+export { __niceevalExport6 as defineContextMatch };
 const __niceevalExport7 = __niceevalCanonical["defineEval"];
 export { __niceevalExport7 as defineEval };
 const __niceevalExport8 = __niceevalCanonical["defineEvalGroup"];
@@ -23,26 +23,28 @@ const __niceevalExport9 = __niceevalCanonical["defineExperiment"];
 export { __niceevalExport9 as defineExperiment };
 const __niceevalExport10 = __niceevalCanonical["defineJudge"];
 export { __niceevalExport10 as defineJudge };
-const __niceevalExport11 = __niceevalCanonical["defineScoreEval"];
-export { __niceevalExport11 as defineScoreEval };
-const __niceevalExport12 = __niceevalCanonical["defineScoreMatch"];
-export { __niceevalExport12 as defineScoreMatch };
-const __niceevalExport13 = __niceevalCanonical["factuality"];
-export { __niceevalExport13 as factuality };
-const __niceevalExport14 = __niceevalCanonical["failureClassOf"];
-export { __niceevalExport14 as failureClassOf };
-const __niceevalExport15 = __niceevalCanonical["faithfulness"];
-export { __niceevalExport15 as faithfulness };
-const __niceevalExport16 = __niceevalCanonical["getEnv"];
-export { __niceevalExport16 as getEnv };
-const __niceevalExport17 = __niceevalCanonical["instructionFollowing"];
-export { __niceevalExport17 as instructionFollowing };
-const __niceevalExport18 = __niceevalCanonical["pairwisePreference"];
-export { __niceevalExport18 as pairwisePreference };
-const __niceevalExport19 = __niceevalCanonical["readScoreMatchAudit"];
-export { __niceevalExport19 as readScoreMatchAudit };
-const __niceevalExport20 = __niceevalCanonical["requireEnv"];
-export { __niceevalExport20 as requireEnv };
-const __niceevalExport21 = __niceevalCanonical["stripComments"];
-export { __niceevalExport21 as stripComments };
+const __niceevalExport11 = __niceevalCanonical["defineMaterialMatch"];
+export { __niceevalExport11 as defineMaterialMatch };
+const __niceevalExport12 = __niceevalCanonical["defineScoreEval"];
+export { __niceevalExport12 as defineScoreEval };
+const __niceevalExport13 = __niceevalCanonical["defineScoreMatch"];
+export { __niceevalExport13 as defineScoreMatch };
+const __niceevalExport14 = __niceevalCanonical["factuality"];
+export { __niceevalExport14 as factuality };
+const __niceevalExport15 = __niceevalCanonical["failureClassOf"];
+export { __niceevalExport15 as failureClassOf };
+const __niceevalExport16 = __niceevalCanonical["faithfulness"];
+export { __niceevalExport16 as faithfulness };
+const __niceevalExport17 = __niceevalCanonical["getEnv"];
+export { __niceevalExport17 as getEnv };
+const __niceevalExport18 = __niceevalCanonical["instructionFollowing"];
+export { __niceevalExport18 as instructionFollowing };
+const __niceevalExport19 = __niceevalCanonical["pairwisePreference"];
+export { __niceevalExport19 as pairwisePreference };
+const __niceevalExport20 = __niceevalCanonical["readScoreMatchAudit"];
+export { __niceevalExport20 as readScoreMatchAudit };
+const __niceevalExport21 = __niceevalCanonical["requireEnv"];
+export { __niceevalExport21 as requireEnv };
+const __niceevalExport22 = __niceevalCanonical["stripComments"];
+export { __niceevalExport22 as stripComments };
 //# sourceMappingURL=index.js.map

package/dist/index.mjs

@@ -7,14 +7,14 @@ const __niceevalExport1 = __niceevalCanonical["ExperimentFatalError"];
 export { __niceevalExport1 as ExperimentFatalError };
 const __niceevalExport2 = __niceevalCanonical["MigrationRequiredError"];
 export { __niceevalExport2 as MigrationRequiredError };
-const __niceevalExport3 = __niceevalCanonical["closeQA"];
-export { __niceevalExport3 as closeQA };
-const __niceevalExport4 = __niceevalCanonical["defineAdapter"];
-export { __niceevalExport4 as defineAdapter };
-const __niceevalExport5 = __niceevalCanonical["defineAdapterContract"];
-export { __niceevalExport5 as defineAdapterContract };
-const __niceevalExport6 = __niceevalCanonical["defineConfig"];
-export { __niceevalExport6 as defineConfig };
+const __niceevalExport3 = __niceevalCanonical["defineAdapter"];
+export { __niceevalExport3 as defineAdapter };
+const __niceevalExport4 = __niceevalCanonical["defineAdapterContract"];
+export { __niceevalExport4 as defineAdapterContract };
+const __niceevalExport5 = __niceevalCanonical["defineConfig"];
+export { __niceevalExport5 as defineConfig };
+const __niceevalExport6 = __niceevalCanonical["defineContextMatch"];
+export { __niceevalExport6 as defineContextMatch };
 const __niceevalExport7 = __niceevalCanonical["defineEval"];
 export { __niceevalExport7 as defineEval };
 const __niceevalExport8 = __niceevalCanonical["defineEvalGroup"];
@@ -23,26 +23,28 @@ const __niceevalExport9 = __niceevalCanonical["defineExperiment"];
 export { __niceevalExport9 as defineExperiment };
 const __niceevalExport10 = __niceevalCanonical["defineJudge"];
 export { __niceevalExport10 as defineJudge };
-const __niceevalExport11 = __niceevalCanonical["defineScoreEval"];
-export { __niceevalExport11 as defineScoreEval };
-const __niceevalExport12 = __niceevalCanonical["defineScoreMatch"];
-export { __niceevalExport12 as defineScoreMatch };
-const __niceevalExport13 = __niceevalCanonical["factuality"];
-export { __niceevalExport13 as factuality };
-const __niceevalExport14 = __niceevalCanonical["failureClassOf"];
-export { __niceevalExport14 as failureClassOf };
-const __niceevalExport15 = __niceevalCanonical["faithfulness"];
-export { __niceevalExport15 as faithfulness };
-const __niceevalExport16 = __niceevalCanonical["getEnv"];
-export { __niceevalExport16 as getEnv };
-const __niceevalExport17 = __niceevalCanonical["instructionFollowing"];
-export { __niceevalExport17 as instructionFollowing };
-const __niceevalExport18 = __niceevalCanonical["pairwisePreference"];
-export { __niceevalExport18 as pairwisePreference };
-const __niceevalExport19 = __niceevalCanonical["readScoreMatchAudit"];
-export { __niceevalExport19 as readScoreMatchAudit };
-const __niceevalExport20 = __niceevalCanonical["requireEnv"];
-export { __niceevalExport20 as requireEnv };
-const __niceevalExport21 = __niceevalCanonical["stripComments"];
-export { __niceevalExport21 as stripComments };
+const __niceevalExport11 = __niceevalCanonical["defineMaterialMatch"];
+export { __niceevalExport11 as defineMaterialMatch };
+const __niceevalExport12 = __niceevalCanonical["defineScoreEval"];
+export { __niceevalExport12 as defineScoreEval };
+const __niceevalExport13 = __niceevalCanonical["defineScoreMatch"];
+export { __niceevalExport13 as defineScoreMatch };
+const __niceevalExport14 = __niceevalCanonical["factuality"];
+export { __niceevalExport14 as factuality };
+const __niceevalExport15 = __niceevalCanonical["failureClassOf"];
+export { __niceevalExport15 as failureClassOf };
+const __niceevalExport16 = __niceevalCanonical["faithfulness"];
+export { __niceevalExport16 as faithfulness };
+const __niceevalExport17 = __niceevalCanonical["getEnv"];
+export { __niceevalExport17 as getEnv };
+const __niceevalExport18 = __niceevalCanonical["instructionFollowing"];
+export { __niceevalExport18 as instructionFollowing };
+const __niceevalExport19 = __niceevalCanonical["pairwisePreference"];
+export { __niceevalExport19 as pairwisePreference };
+const __niceevalExport20 = __niceevalCanonical["readScoreMatchAudit"];
+export { __niceevalExport20 as readScoreMatchAudit };
+const __niceevalExport21 = __niceevalCanonical["requireEnv"];
+export { __niceevalExport21 as requireEnv };
+const __niceevalExport22 = __niceevalCanonical["stripComments"];
+export { __niceevalExport22 as stripComments };
 //# sourceMappingURL=index.mjs.map

package/dist/inspection/artifacts.cjs

@@ -3,6 +3,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.InspectionArtifactError = exports.InspectionArtifactResultSchema = exports.InspectionArtifactLimitSchema = exports.InspectionArtifactOffsetSchema = exports.InspectionArtifactLimits = void 0;
 exports.projectAttemptArtifact = projectAttemptArtifact;
 exports.readInspectionArtifactBytes = readInspectionArtifactBytes;
+exports.readInspectionArtifactDescriptors = readInspectionArtifactDescriptors;
 const effect_1 = require("effect");
 const attempt_locator_ts_1 = require("../attempt-locator.cjs");
 const content_ts_1 = require("../record/attachment/content.cjs");
@@ -122,76 +123,104 @@ function projectAttemptArtifact(resolved, request) {
         }));
     }
 }
+/** Hydrates and verifies every sealed artifact descriptor of the exact origin Attempt. */
+function hydrateArtifactDescriptors(resolved) {
+    if ((0, attempt_locator_ts_1.encodeAttemptLocator)(resolved.attempt.attemptId) !== resolved.locator ||
+        resolved.attempt.originRunId !== resolved.origin.run.runId) {
+        throw new Error("Artifact origin does not match the requested Attempt locator.");
+    }
+    const attachments = resolved.origin.attachments.filter(({ physical }) => physical.ownerKind === "attempt" && physical.ownerAttemptId === resolved.attempt.attemptId &&
+        physical.family === definition_ts_1.attemptArtifactsRecordAttachment.family);
+    if (attachments.length !== 1)
+        throw new Error("Artifact owner attachment is unavailable.");
+    const attachment = attachments[0];
+    if (attachment.physical.ownerRunId !== resolved.attempt.originRunId ||
+        attachment.physical.familyRevision !== persistence_ts_1.attemptArtifactsRecordAttachmentPersistence.revision ||
+        attachment.physical.references.length !== 0) {
+        throw new Error("Artifact attachment ownership or revision is invalid.");
+    }
+    const byLogicalHandle = new Map(attachment.physical.contents.map((content) => [content.logicalHandle, content]));
+    const bound = new WeakMap();
+    const used = new Set();
+    if (byLogicalHandle.size !== attachment.physical.contents.length)
+        throw new Error("Duplicate artifact content handle.");
+    const hydrated = (0, protocol_ts_1.hydrateRecordAttachmentCurrent)(definition_ts_1.attemptArtifactsRecordAttachment, attachment.value, {
+        content: (token, declaration) => {
+            const marker = decodeMarker(token);
+            if (effect_1.Result.isFailure(marker))
+                return effect_1.Result.succeed(undefined);
+            const logicalHandle = marker.success["$niceeval.record.content"];
+            const persisted = byLogicalHandle.get(logicalHandle);
+            if (persisted === undefined || used.has(logicalHandle) || declaration.kind !== "bytes" ||
+                declaration.maximumBytes !== undefined && persisted.byteLength > declaration.maximumBytes) {
+                return effect_1.Result.fail({ code: "current-content-bind-failed" });
+            }
+            const handle = (0, content_ts_1.mintRecordContentHandle)("bytes");
+            bound.set(handle, persisted);
+            used.add(logicalHandle);
+            return effect_1.Result.succeed(handle);
+        },
+        reference: () => effect_1.Result.succeed(undefined),
+    });
+    if (effect_1.Result.isFailure(hydrated) || used.size !== attachment.physical.contents.length) {
+        throw new Error("Artifact content closure is invalid.");
+    }
+    return Object.freeze(hydrated.success.artifacts.map((descriptor) => {
+        const metadata = bound.get(descriptor.content);
+        if (metadata === undefined || metadata.byteLength !== descriptor.byteLength || metadata.digest !== descriptor.sha256 ||
+            descriptor.byteLength < 0) {
+            throw new Error("Artifact descriptor does not match sealed content metadata.");
+        }
+        return Object.freeze({
+            artifactId: descriptor.artifactId,
+            name: descriptor.label,
+            mediaType: descriptor.mediaType,
+            byteLength: descriptor.byteLength,
+            sha256: descriptor.sha256,
+            content: metadata,
+        });
+    }));
+}
 /** Internal fixed-family closure reader. It verifies the whole sealed artifact. */
 function readInspectionArtifactBytes(resolved, artifactId, maximumBytes) {
     if (effect_1.Result.isFailure(decodeRequest({ artifactId })))
         return requestInvalid("Invalid artifact ID.");
     try {
-        if ((0, attempt_locator_ts_1.encodeAttemptLocator)(resolved.attempt.attemptId) !== resolved.locator ||
-            resolved.attempt.originRunId !== resolved.origin.run.runId) {
-            throw new Error("Artifact origin does not match the requested Attempt locator.");
-        }
-        const attachments = resolved.origin.attachments.filter(({ physical }) => physical.ownerKind === "attempt" && physical.ownerAttemptId === resolved.attempt.attemptId &&
-            physical.family === definition_ts_1.attemptArtifactsRecordAttachment.family);
-        if (attachments.length !== 1)
-            throw new Error("Artifact owner attachment is unavailable.");
-        const attachment = attachments[0];
-        if (attachment.physical.ownerRunId !== resolved.attempt.originRunId ||
-            attachment.physical.familyRevision !== persistence_ts_1.attemptArtifactsRecordAttachmentPersistence.revision ||
-            attachment.physical.references.length !== 0) {
-            throw new Error("Artifact attachment ownership or revision is invalid.");
-        }
-        const byLogicalHandle = new Map(attachment.physical.contents.map((content) => [content.logicalHandle, content]));
-        const bound = new WeakMap();
-        const used = new Set();
-        if (byLogicalHandle.size !== attachment.physical.contents.length)
-            throw new Error("Duplicate artifact content handle.");
-        const hydrated = (0, protocol_ts_1.hydrateRecordAttachmentCurrent)(definition_ts_1.attemptArtifactsRecordAttachment, attachment.value, {
-            content: (token, declaration) => {
-                const marker = decodeMarker(token);
-                if (effect_1.Result.isFailure(marker))
-                    return effect_1.Result.succeed(undefined);
-                const logicalHandle = marker.success["$niceeval.record.content"];
-                const persisted = byLogicalHandle.get(logicalHandle);
-                if (persisted === undefined || used.has(logicalHandle) || declaration.kind !== "bytes" ||
-                    declaration.maximumBytes !== undefined && persisted.byteLength > declaration.maximumBytes) {
-                    return effect_1.Result.fail({ code: "current-content-bind-failed" });
-                }
-                const handle = (0, content_ts_1.mintRecordContentHandle)("bytes");
-                bound.set(handle, persisted);
-                used.add(logicalHandle);
-                return effect_1.Result.succeed(handle);
-            },
-            reference: () => effect_1.Result.succeed(undefined),
-        });
-        if (effect_1.Result.isFailure(hydrated) || used.size !== attachment.physical.contents.length) {
-            throw new Error("Artifact content closure is invalid.");
-        }
-        for (const descriptor of hydrated.success.artifacts) {
-            const metadata = bound.get(descriptor.content);
-            if (metadata === undefined || metadata.byteLength !== descriptor.byteLength || metadata.digest !== descriptor.sha256) {
-                throw new Error("Artifact descriptor does not match sealed content metadata.");
-            }
-        }
-        const artifact = hydrated.success.artifacts.find((entry) => entry.artifactId === artifactId);
+        const artifact = hydrateArtifactDescriptors(resolved).find((entry) => entry.artifactId === artifactId);
         if (artifact === undefined)
             return effect_1.Result.succeed(undefined);
-        const content = bound.get(artifact.content);
-        if (content === undefined || content.byteLength !== artifact.byteLength || content.digest !== artifact.sha256 ||
-            artifact.byteLength < 0) {
-            throw new Error("Artifact descriptor does not match sealed content metadata.");
-        }
         if (artifact.byteLength > maximumBytes)
             return requestInvalid("Artifact exceeds the evidence parsing budget.");
         return effect_1.Result.succeed(Object.freeze({
             artifactId,
-            name: artifact.label,
+            name: artifact.name,
             mediaType: artifact.mediaType,
             byteLength: artifact.byteLength,
             sha256: artifact.sha256,
-            bytes: readVerifiedRange(resolved.origin.source, content, 0, artifact.byteLength),
+            bytes: readVerifiedRange(resolved.origin.source, artifact.content, 0, artifact.byteLength),
+        }));
+    }
+    catch (cause) {
+        return effect_1.Result.fail(new InspectionArtifactError({
+            code: "inspection-record-integrity-failure",
+            reason: cause instanceof Error ? cause.message : "Artifact content validation failed.",
         }));
     }
+}
+/** Descriptor-only closure reader for references that must not load bytes, such as display images. */
+function readInspectionArtifactDescriptors(resolved) {
+    try {
+        const hasArtifacts = resolved.origin.attachments.some(({ physical }) => physical.ownerKind === "attempt" && physical.ownerAttemptId === resolved.attempt.attemptId &&
+            physical.family === definition_ts_1.attemptArtifactsRecordAttachment.family);
+        if (!hasArtifacts)
+            return effect_1.Result.succeed(new Map());
+        return effect_1.Result.succeed(new Map(hydrateArtifactDescriptors(resolved).map((artifact) => [artifact.artifactId, Object.freeze({
+                artifactId: artifact.artifactId,
+                mediaType: artifact.mediaType,
+                byteLength: artifact.byteLength,
+                sha256: artifact.sha256,
+            })])));
+    }
     catch (cause) {
         return effect_1.Result.fail(new InspectionArtifactError({
             code: "inspection-record-integrity-failure",

package/dist/inspection/artifacts.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"artifacts.js","sourceRoot":"","sources":["artifacts.ts"],"names":[],"mappings":";;;AAsDA,wDA+EC;AAED,kEA2EC;AAlND,mCAA8C;AAC9C,8DAA6D;AAC7D,gEAA0E;AAC1E,kEAAkF;AAClF,qDAAkE;AAClE,mEAAsF;AACtF,4EAA4F;AAC5F,8EAAwG;AACxG,0DAA2G;AAE3G,yCAAiE;AAGpD,QAAA,wBAAwB,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,YAAY,EAAE,EAAE,GAAG,IAAI,EAAE,YAAY,EAAE,GAAG,GAAG,IAAI,EAAE,CAAC,CAAC;AAChG,QAAA,8BAA8B,GAAG,wCAA4B,CAAC;AAC9D,QAAA,6BAA6B,GAAG,wCAA4B,CAAC,IAAI,CAAC,eAAM,CAAC,KAAK,CAAC,eAAM,CAAC,UAAU,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,GAAG,CAAC,IAAI,KAAK,IAAI,gCAAwB,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;AACxL,MAAM,iBAAiB,GAAG,eAAM,CAAC,MAAM,CAAC;IACpC,UAAU,EAAE,iCAAgB;IAC5B,MAAM,EAAE,eAAM,CAAC,QAAQ,CAAC,sCAA8B,CAAC;IACvD,KAAK,EAAE,eAAM,CAAC,QAAQ,CAAC,qCAA6B,CAAC;CACxD,CAAC,CAAC;AAEU,QAAA,8BAA8B,GAAG,eAAM,CAAC,KAAK,CAAC;IACvD,eAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,eAAM,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,UAAU,EAAE,iCAAgB,EAAE,CAAC;IACnF,eAAM,CAAC,MAAM,CAAC;QACV,KAAK,EAAE,eAAM,CAAC,OAAO,CAAC,WAAW,CAAC;QAClC,UAAU,EAAE,iCAAgB;QAC5B,IAAI,EAAE,eAAM,CAAC,MAAM,CAAC,0BAAc,CAAC;QACnC,SAAS,EAAE,eAAM,CAAC,MAAM,CAAC,2BAAe,CAAC;QACzC,UAAU,EAAE,wCAA4B;QACxC,MAAM,EAAE,mCAAkB;QAC1B,MAAM,EAAE,sCAA8B;QACtC,MAAM,EAAE,eAAM,CAAC,MAAM,CAAC,IAAI,CAAC,eAAM,CAAC,KAAK,CAAC,eAAM,CAAC,UAAU,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,gCAAwB,CAAC,YAAY,GAAG,CAAC,CAAC,GAAG,CAAC;YACzI,KAAK,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,IAAI,wBAAwB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACrE,UAAU,EAAE,eAAM,CAAC,MAAM,CAAC,sCAA8B,CAAC;KAC5D,CAAC;CACL,CAAC,CAAC;AAUH,MAAa,uBAAwB,SAAQ,aAAI,CAAC,WAAW,CAAC,yBAAyB,CAGrF;CACD;AAJD,0DAIC;AACD,MAAM,aAAa,GAAG,eAAM,CAAC,mBAAmB,CAAC,iBAAiB,EAAE,iCAAuB,CAAC,CAAC;AAC7F,MAAM,YAAY,GAAG,eAAM,CAAC,mBAAmB,CAAC,eAAM,CAAC,MAAM,CAAC,EAAE,0BAA0B,EAAE,eAAM,CAAC,MAAM,EAAE,CAAC,EAAE,iCAAuB,CAAC,CAAC;AACvI,6FAA6F;AAC7F,SAAgB,sBAAsB,CAAC,QAAmC,EAAE,OAAkC;IAC1G,MAAM,OAAO,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IACvC,IAAI,eAAM,CAAC,SAAS,CAAC,OAAO,CAAC;QACzB,OAAO,cAAc,CAAC,wCAAwC,CAAC,CAAC;IACpE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,CAAC,EAAE,KAAK,GAAG,gCAAwB,CAAC,YAAY,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC;IAClG,IAAI,CAAC;QACD,IAAI,IAAA,yCAAoB,EAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,QAAQ,CAAC,OAAO;YACrE,QAAQ,CAAC,OAAO,CAAC,WAAW,KAAK,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;YAC7D,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;QACrF,CAAC;QACD,MAAM,WAAW,GAAG,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,SAAS,KAAK,SAAS,IAAI,QAAQ,CAAC,cAAc,KAAK,QAAQ,CAAC,OAAO,CAAC,SAAS;YAC/J,QAAQ,CAAC,MAAM,KAAK,gDAAgC,CAAC,MAAM,CAAC,CAAC;QACjE,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;YACxB,OAAO,eAAM,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;QAC7E,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;QACjE,MAAM,UAAU,GAAG,WAAW,CAAC,CAAC,CAAE,CAAC;QACnC,IAAI,UAAU,CAAC,QAAQ,CAAC,UAAU,KAAK,QAAQ,CAAC,OAAO,CAAC,WAAW;YAC/D,UAAU,CAAC,QAAQ,CAAC,cAAc,KAAK,4DAA2C,CAAC,QAAQ;YAC3F,UAAU,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC9C,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;QAC7E,CAAC;QACD,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;QACjH,MAAM,KAAK,GAAG,IAAI,OAAO,EAAoC,CAAC;QAC9D,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,IAAI,eAAe,CAAC,IAAI,KAAK,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM;YAC5D,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QAC1D,MAAM,QAAQ,GAAG,IAAA,4CAA8B,EAAC,gDAAgC,EAAE,UAAU,CAAC,KAAK,EAAE;YAChG,OAAO,EAAE,CAAC,KAAK,EAAE,WAAW,EAAE,EAAE;gBAC5B,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;gBACnC,IAAI,eAAM,CAAC,SAAS,CAAC,MAAM,CAAC;oBACxB,OAAO,eAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;gBACrC,MAAM,aAAa,GAAG,MAAM,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC;gBACjE,MAAM,QAAQ,GAAG,eAAe,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;gBACpD,IAAI,QAAQ,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,WAAW,CAAC,IAAI,KAAK,OAAO;oBACjF,WAAW,CAAC,YAAY,KAAK,SAAS,IAAI,QAAQ,CAAC,UAAU,GAAG,WAAW,CAAC,YAAY,EAAE,CAAC;oBAC3F,OAAO,eAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,6BAAsC,EAAE,CAAC,CAAC;gBACzE,CAAC;gBACD,MAAM,MAAM,GAAG,IAAA,oCAAuB,EAAC,OAAO,CAAC,CAAC;gBAChD,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;gBAC5B,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;gBACxB,OAAO,eAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAClC,CAAC;YACD,SAAS,EAAE,GAAG,EAAE,CAAC,eAAM,CAAC,OAAO,CAAC,SAAS,CAAC;SAC7C,CAAC,CAAC;QACH,IAAI,eAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,IAAI,KAAK,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;YAClF,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAC5D,CAAC;QACD,mEAAmE;QACnE,KAAK,MAAM,QAAQ,IAAI,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;YAChD,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAC7C,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,UAAU,KAAK,QAAQ,CAAC,UAAU,IAAI,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,EAAE,CAAC;gBAC/G,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;YACnF,CAAC;QACL,CAAC;QACD,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,KAAK,UAAU,CAAC,CAAC;QAC3F,IAAI,QAAQ,KAAK,SAAS;YACtB,OAAO,eAAM,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;QAC7E,IAAI,MAAM,GAAG,QAAQ,CAAC,UAAU;YAC5B,OAAO,cAAc,CAAC,0CAA0C,CAAC,CAAC;QACtE,MAAM,KAAK,GAAG,iBAAiB,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAE,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;QACrG,OAAO,eAAM,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC;YAChC,KAAK,EAAE,WAAW;YAClB,UAAU;YACV,IAAI,EAAE,QAAQ,CAAC,KAAK;YACpB,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,UAAU,EAAE,QAAQ,CAAC,UAAU;YAC/B,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,MAAM;YACN,MAAM,EAAE,IAAA,4BAAiB,EAAC,KAAK,CAAC;YAChC,UAAU,EAAE,MAAM,GAAG,KAAK,CAAC,UAAU,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI;SACjG,CAAC,CAAC,CAAC;IACR,CAAC;IACD,OAAO,KAAK,EAAE,CAAC;QACX,OAAO,eAAM,CAAC,IAAI,CAAC,IAAI,uBAAuB,CAAC;YAC3C,IAAI,EAAE,qCAAqC;YAC3C,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,qCAAqC;SACzF,CAAC,CAAC,CAAC;IACR,CAAC;AACL,CAAC;AACD,mFAAmF;AACnF,SAAgB,2BAA2B,CAAC,QAAmC,EAAE,UAAkB,EAAE,YAAoB;IACrH,IAAI,eAAM,CAAC,SAAS,CAAC,aAAa,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC;QAC/C,OAAO,cAAc,CAAC,sBAAsB,CAAC,CAAC;IAClD,IAAI,CAAC;QACD,IAAI,IAAA,yCAAoB,EAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,QAAQ,CAAC,OAAO;YACrE,QAAQ,CAAC,OAAO,CAAC,WAAW,KAAK,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;YAC7D,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;QACrF,CAAC;QACD,MAAM,WAAW,GAAG,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,SAAS,KAAK,SAAS,IAAI,QAAQ,CAAC,cAAc,KAAK,QAAQ,CAAC,OAAO,CAAC,SAAS;YAC/J,QAAQ,CAAC,MAAM,KAAK,gDAAgC,CAAC,MAAM,CAAC,CAAC;QACjE,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;QACjE,MAAM,UAAU,GAAG,WAAW,CAAC,CAAC,CAAE,CAAC;QACnC,IAAI,UAAU,CAAC,QAAQ,CAAC,UAAU,KAAK,QAAQ,CAAC,OAAO,CAAC,WAAW;YAC/D,UAAU,CAAC,QAAQ,CAAC,cAAc,KAAK,4DAA2C,CAAC,QAAQ;YAC3F,UAAU,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC9C,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;QAC7E,CAAC;QACD,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;QACjH,MAAM,KAAK,GAAG,IAAI,OAAO,EAAoC,CAAC;QAC9D,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,IAAI,eAAe,CAAC,IAAI,KAAK,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM;YAC5D,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QAC1D,MAAM,QAAQ,GAAG,IAAA,4CAA8B,EAAC,gDAAgC,EAAE,UAAU,CAAC,KAAK,EAAE;YAChG,OAAO,EAAE,CAAC,KAAK,EAAE,WAAW,EAAE,EAAE;gBAC5B,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;gBACnC,IAAI,eAAM,CAAC,SAAS,CAAC,MAAM,CAAC;oBACxB,OAAO,eAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;gBACrC,MAAM,aAAa,GAAG,MAAM,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC;gBACjE,MAAM,SAAS,GAAG,eAAe,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;gBACrD,IAAI,SAAS,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,WAAW,CAAC,IAAI,KAAK,OAAO;oBAClF,WAAW,CAAC,YAAY,KAAK,SAAS,IAAI,SAAS,CAAC,UAAU,GAAG,WAAW,CAAC,YAAY,EAAE,CAAC;oBAC5F,OAAO,eAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,6BAAsC,EAAE,CAAC,CAAC;gBACzE,CAAC;gBACD,MAAM,MAAM,GAAG,IAAA,oCAAuB,EAAC,OAAO,CAAC,CAAC;gBAChD,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;gBAC7B,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;gBACxB,OAAO,eAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAClC,CAAC;YACD,SAAS,EAAE,GAAG,EAAE,CAAC,eAAM,CAAC,OAAO,CAAC,SAAS,CAAC;SAC7C,CAAC,CAAC;QACH,IAAI,eAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,IAAI,KAAK,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;YAClF,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAC5D,CAAC;QACD,KAAK,MAAM,UAAU,IAAI,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;YAClD,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;YAC/C,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,UAAU,KAAK,UAAU,CAAC,UAAU,IAAI,QAAQ,CAAC,MAAM,KAAK,UAAU,CAAC,MAAM,EAAE,CAAC;gBACnH,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;YACnF,CAAC;QACL,CAAC;QACD,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,KAAK,UAAU,CAAC,CAAC;QAC7F,IAAI,QAAQ,KAAK,SAAS;YACtB,OAAO,eAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACrC,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC5C,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,CAAC,UAAU,KAAK,QAAQ,CAAC,UAAU,IAAI,OAAO,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM;YACzG,QAAQ,CAAC,UAAU,GAAG,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;QACnF,CAAC;QACD,IAAI,QAAQ,CAAC,UAAU,GAAG,YAAY;YAClC,OAAO,cAAc,CAAC,+CAA+C,CAAC,CAAC;QAC3E,OAAO,eAAM,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC;YAChC,UAAU;YACV,IAAI,EAAE,QAAQ,CAAC,KAAK;YACpB,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,UAAU,EAAE,QAAQ,CAAC,UAAU;YAC/B,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,KAAK,EAAE,iBAAiB,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,CAAC,UAAU,CAAC;SACpF,CAAC,CAAC,CAAC;IACR,CAAC;IACD,OAAO,KAAK,EAAE,CAAC;QACX,OAAO,eAAM,CAAC,IAAI,CAAC,IAAI,uBAAuB,CAAC;YAC3C,IAAI,EAAE,qCAAqC;YAC3C,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,qCAAqC;SACzF,CAAC,CAAC,CAAC;IACR,CAAC;AACL,CAAC;AACD,SAAS,cAAc,CAAC,MAAc;IAClC,OAAO,eAAM,CAAC,IAAI,CAAC,IAAI,uBAAuB,CAAC,EAAE,IAAI,EAAE,4BAA4B,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;AACpG,CAAC;AACD,SAAS,iBAAiB,CAAC,MAA4B,EAAE,QAAkC,EAAE,MAAc,EAAE,KAAa;IACtH,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,CAAC,UAAU,GAAG,MAAM,CAAC,CAAC,CAAC;IAC7E,MAAM,MAAM,GAAG,IAAI,2BAAgB,EAAE,CAAC;IACtC,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,IAAI,eAAe,GAAG,CAAC,CAAC;IACxB,IAAI,YAAY,GAAG,CAAC,CAAC,CAAC;IACtB,OAAO,IAAI,EAAE,CAAC;QACV,oFAAoF;QACpF,MAAM,IAAI,GAAG,MAAM,CAAC,eAAe,CAAC,QAAQ,CAAC,SAAS,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC;QACzE,IAAI,IAAI,CAAC,SAAS,KAAK,QAAQ,CAAC,SAAS,IAAI,IAAI,CAAC,YAAY,KAAK,YAAY,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;YACrG,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,WAAW,KAAK,IAAI;YACrD,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QACzD,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAC9B,IAAI,KAAK,CAAC,OAAO,KAAK,eAAe,IAAI,eAAe,IAAI,QAAQ,CAAC,UAAU;gBAC3E,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,UAAU,GAAG,QAAQ,CAAC,UAAU;gBACzD,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;YAC3D,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAC3B,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;YAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC,UAAU,EAAE,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YACtF,IAAI,GAAG,GAAG,KAAK;gBACX,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,GAAG,UAAU,EAAE,GAAG,GAAG,UAAU,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC,CAAC;YAC3F,UAAU,IAAI,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC;YACrC,eAAe,IAAI,CAAC,CAAC;QACzB,CAAC;QACD,IAAI,IAAI,CAAC,WAAW,KAAK,IAAI;YACzB,MAAM;QACV,IAAI,IAAI,CAAC,WAAW,KAAK,eAAe,GAAG,CAAC,IAAI,eAAe,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC;YACrF,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;QACjE,CAAC;QACD,YAAY,GAAG,IAAI,CAAC,WAAW,CAAC;IACpC,CAAC;IACD,IAAI,UAAU,KAAK,QAAQ,CAAC,UAAU,IAAI,eAAe,KAAK,QAAQ,CAAC,UAAU,IAAI,MAAM,CAAC,SAAS,EAAE,KAAK,QAAQ,CAAC,MAAM,EAAE,CAAC;QAC1H,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACxE,CAAC;IACD,OAAO,MAAM,CAAC;AAClB,CAAC","sourcesContent":["import { Data, Result, Schema } from \"effect\";\nimport { encodeAttemptLocator } from \"../attempt-locator.ts\";\nimport { mintRecordContentHandle } from \"../record/attachment/content.ts\";\nimport { hydrateRecordAttachmentCurrent } from \"../record/attachment/protocol.ts\";\nimport { RecordExactParseOptions } from \"../record/codec/core.ts\";\nimport { ArtifactIdSchema, Sha256DigestSchema } from \"../record/codec/identifiers.ts\";\nimport { attemptArtifactsRecordAttachment } from \"../record/family/artifacts/definition.ts\";\nimport { attemptArtifactsRecordAttachmentPersistence } from \"../record/family/artifacts/persistence.ts\";\nimport { MediaTypeSchema, NonNegativeSafeIntegerSchema, SafeTextSchema } from \"../record/family/common.ts\";\nimport type { PersistedContentMetadata } from \"../record/sqlite/types.ts\";\nimport { encodeBase64Bytes, InspectionSha256 } from \"./bytes.ts\";\nimport type { ResolvedInspectionAttempt } from \"./facts.ts\";\nimport type { InspectionFactSource } from \"./source.ts\";\nexport const InspectionArtifactLimits = Object.freeze({ defaultBytes: 64 * 1024, maximumBytes: 256 * 1024 });\nexport const InspectionArtifactOffsetSchema = NonNegativeSafeIntegerSchema;\nexport const InspectionArtifactLimitSchema = NonNegativeSafeIntegerSchema.pipe(Schema.check(Schema.makeFilter((value) => value > 0 && value <= InspectionArtifactLimits.maximumBytes)));\nconst ReadRequestSchema = Schema.Struct({\n    artifactId: ArtifactIdSchema,\n    offset: Schema.optional(InspectionArtifactOffsetSchema),\n    limit: Schema.optional(InspectionArtifactLimitSchema),\n});\nexport type InspectionArtifactRequest = Schema.Schema.Type<typeof ReadRequestSchema>;\nexport const InspectionArtifactResultSchema = Schema.Union([\n    Schema.Struct({ state: Schema.Literal(\"not-found\"), artifactId: ArtifactIdSchema }),\n    Schema.Struct({\n        state: Schema.Literal(\"available\"),\n        artifactId: ArtifactIdSchema,\n        name: Schema.toType(SafeTextSchema),\n        mediaType: Schema.toType(MediaTypeSchema),\n        byteLength: NonNegativeSafeIntegerSchema,\n        sha256: Sha256DigestSchema,\n        offset: InspectionArtifactOffsetSchema,\n        base64: Schema.String.pipe(Schema.check(Schema.makeFilter((value) => value.length <= Math.ceil(InspectionArtifactLimits.maximumBytes / 3) * 4 &&\n            value.length % 4 === 0 && /^[A-Za-z0-9+/]*={0,2}$/.test(value)))),\n        nextOffset: Schema.NullOr(InspectionArtifactOffsetSchema),\n    }),\n]);\nexport type InspectionArtifactResult = Schema.Schema.Type<typeof InspectionArtifactResultSchema>;\nexport interface InspectionArtifactBytes {\n    readonly artifactId: string;\n    readonly name: string;\n    readonly mediaType: string;\n    readonly byteLength: number;\n    readonly sha256: string;\n    readonly bytes: Uint8Array;\n}\nexport class InspectionArtifactError extends Data.TaggedError(\"InspectionArtifactError\")<{\n    readonly code: \"inspection-request-invalid\" | \"inspection-record-integrity-failure\";\n    readonly reason: string;\n}> {\n}\nconst decodeRequest = Schema.decodeUnknownResult(ReadRequestSchema, RecordExactParseOptions);\nconst decodeMarker = Schema.decodeUnknownResult(Schema.Struct({ \"$niceeval.record.content\": Schema.String }), RecordExactParseOptions);\n/** Reads the exact origin's sealed bytes; only the requested range is retained in memory. */\nexport function projectAttemptArtifact(resolved: ResolvedInspectionAttempt, request: InspectionArtifactRequest): Result.Result<InspectionArtifactResult, InspectionArtifactError> {\n    const decoded = decodeRequest(request);\n    if (Result.isFailure(decoded))\n        return requestInvalid(\"Invalid artifact ID, offset, or limit.\");\n    const { artifactId, offset = 0, limit = InspectionArtifactLimits.defaultBytes } = decoded.success;\n    try {\n        if (encodeAttemptLocator(resolved.attempt.attemptId) !== resolved.locator ||\n            resolved.attempt.originRunId !== resolved.origin.run.runId) {\n            throw new Error(\"Artifact origin does not match the requested Attempt locator.\");\n        }\n        const attachments = resolved.origin.attachments.filter(({ physical }) => physical.ownerKind === \"attempt\" && physical.ownerAttemptId === resolved.attempt.attemptId &&\n            physical.family === attemptArtifactsRecordAttachment.family);\n        if (attachments.length === 0)\n            return Result.succeed(Object.freeze({ state: \"not-found\", artifactId }));\n        if (attachments.length !== 1)\n            throw new Error(\"Artifact owner has duplicate attachments.\");\n        const attachment = attachments[0]!;\n        if (attachment.physical.ownerRunId !== resolved.attempt.originRunId ||\n            attachment.physical.familyRevision !== attemptArtifactsRecordAttachmentPersistence.revision ||\n            attachment.physical.references.length !== 0) {\n            throw new Error(\"Artifact attachment ownership or revision is invalid.\");\n        }\n        const byLogicalHandle = new Map(attachment.physical.contents.map((content) => [content.logicalHandle, content]));\n        const bound = new WeakMap<object, PersistedContentMetadata>();\n        const used = new Set<string>();\n        if (byLogicalHandle.size !== attachment.physical.contents.length)\n            throw new Error(\"Duplicate artifact content handle.\");\n        const hydrated = hydrateRecordAttachmentCurrent(attemptArtifactsRecordAttachment, attachment.value, {\n            content: (token, declaration) => {\n                const marker = decodeMarker(token);\n                if (Result.isFailure(marker))\n                    return Result.succeed(undefined);\n                const logicalHandle = marker.success[\"$niceeval.record.content\"];\n                const metadata = byLogicalHandle.get(logicalHandle);\n                if (metadata === undefined || used.has(logicalHandle) || declaration.kind !== \"bytes\" ||\n                    declaration.maximumBytes !== undefined && metadata.byteLength > declaration.maximumBytes) {\n                    return Result.fail({ code: \"current-content-bind-failed\" as const });\n                }\n                const handle = mintRecordContentHandle(\"bytes\");\n                bound.set(handle, metadata);\n                used.add(logicalHandle);\n                return Result.succeed(handle);\n            },\n            reference: () => Result.succeed(undefined),\n        });\n        if (Result.isFailure(hydrated) || used.size !== attachment.physical.contents.length) {\n            throw new Error(\"Artifact content closure is invalid.\");\n        }\n        // Validate every descriptor, even when the requested ID is absent.\n        for (const artifact of hydrated.success.artifacts) {\n            const metadata = bound.get(artifact.content);\n            if (metadata === undefined || metadata.byteLength !== artifact.byteLength || metadata.digest !== artifact.sha256) {\n                throw new Error(\"Artifact descriptor does not match sealed content metadata.\");\n            }\n        }\n        const artifact = hydrated.success.artifacts.find((item) => item.artifactId === artifactId);\n        if (artifact === undefined)\n            return Result.succeed(Object.freeze({ state: \"not-found\", artifactId }));\n        if (offset > artifact.byteLength)\n            return requestInvalid(\"Artifact offset exceeds its byte length.\");\n        const bytes = readVerifiedRange(resolved.origin.source, bound.get(artifact.content)!, offset, limit);\n        return Result.succeed(Object.freeze({\n            state: \"available\",\n            artifactId,\n            name: artifact.label,\n            mediaType: artifact.mediaType,\n            byteLength: artifact.byteLength,\n            sha256: artifact.sha256,\n            offset,\n            base64: encodeBase64Bytes(bytes),\n            nextOffset: offset + bytes.byteLength < artifact.byteLength ? offset + bytes.byteLength : null,\n        }));\n    }\n    catch (cause) {\n        return Result.fail(new InspectionArtifactError({\n            code: \"inspection-record-integrity-failure\",\n            reason: cause instanceof Error ? cause.message : \"Artifact content validation failed.\",\n        }));\n    }\n}\n/** Internal fixed-family closure reader. It verifies the whole sealed artifact. */\nexport function readInspectionArtifactBytes(resolved: ResolvedInspectionAttempt, artifactId: string, maximumBytes: number): Result.Result<InspectionArtifactBytes | undefined, InspectionArtifactError> {\n    if (Result.isFailure(decodeRequest({ artifactId })))\n        return requestInvalid(\"Invalid artifact ID.\");\n    try {\n        if (encodeAttemptLocator(resolved.attempt.attemptId) !== resolved.locator ||\n            resolved.attempt.originRunId !== resolved.origin.run.runId) {\n            throw new Error(\"Artifact origin does not match the requested Attempt locator.\");\n        }\n        const attachments = resolved.origin.attachments.filter(({ physical }) => physical.ownerKind === \"attempt\" && physical.ownerAttemptId === resolved.attempt.attemptId &&\n            physical.family === attemptArtifactsRecordAttachment.family);\n        if (attachments.length !== 1)\n            throw new Error(\"Artifact owner attachment is unavailable.\");\n        const attachment = attachments[0]!;\n        if (attachment.physical.ownerRunId !== resolved.attempt.originRunId ||\n            attachment.physical.familyRevision !== attemptArtifactsRecordAttachmentPersistence.revision ||\n            attachment.physical.references.length !== 0) {\n            throw new Error(\"Artifact attachment ownership or revision is invalid.\");\n        }\n        const byLogicalHandle = new Map(attachment.physical.contents.map((content) => [content.logicalHandle, content]));\n        const bound = new WeakMap<object, PersistedContentMetadata>();\n        const used = new Set<string>();\n        if (byLogicalHandle.size !== attachment.physical.contents.length)\n            throw new Error(\"Duplicate artifact content handle.\");\n        const hydrated = hydrateRecordAttachmentCurrent(attemptArtifactsRecordAttachment, attachment.value, {\n            content: (token, declaration) => {\n                const marker = decodeMarker(token);\n                if (Result.isFailure(marker))\n                    return Result.succeed(undefined);\n                const logicalHandle = marker.success[\"$niceeval.record.content\"];\n                const persisted = byLogicalHandle.get(logicalHandle);\n                if (persisted === undefined || used.has(logicalHandle) || declaration.kind !== \"bytes\" ||\n                    declaration.maximumBytes !== undefined && persisted.byteLength > declaration.maximumBytes) {\n                    return Result.fail({ code: \"current-content-bind-failed\" as const });\n                }\n                const handle = mintRecordContentHandle(\"bytes\");\n                bound.set(handle, persisted);\n                used.add(logicalHandle);\n                return Result.succeed(handle);\n            },\n            reference: () => Result.succeed(undefined),\n        });\n        if (Result.isFailure(hydrated) || used.size !== attachment.physical.contents.length) {\n            throw new Error(\"Artifact content closure is invalid.\");\n        }\n        for (const descriptor of hydrated.success.artifacts) {\n            const metadata = bound.get(descriptor.content);\n            if (metadata === undefined || metadata.byteLength !== descriptor.byteLength || metadata.digest !== descriptor.sha256) {\n                throw new Error(\"Artifact descriptor does not match sealed content metadata.\");\n            }\n        }\n        const artifact = hydrated.success.artifacts.find((entry) => entry.artifactId === artifactId);\n        if (artifact === undefined)\n            return Result.succeed(undefined);\n        const content = bound.get(artifact.content);\n        if (content === undefined || content.byteLength !== artifact.byteLength || content.digest !== artifact.sha256 ||\n            artifact.byteLength < 0) {\n            throw new Error(\"Artifact descriptor does not match sealed content metadata.\");\n        }\n        if (artifact.byteLength > maximumBytes)\n            return requestInvalid(\"Artifact exceeds the evidence parsing budget.\");\n        return Result.succeed(Object.freeze({\n            artifactId,\n            name: artifact.label,\n            mediaType: artifact.mediaType,\n            byteLength: artifact.byteLength,\n            sha256: artifact.sha256,\n            bytes: readVerifiedRange(resolved.origin.source, content, 0, artifact.byteLength),\n        }));\n    }\n    catch (cause) {\n        return Result.fail(new InspectionArtifactError({\n            code: \"inspection-record-integrity-failure\",\n            reason: cause instanceof Error ? cause.message : \"Artifact content validation failed.\",\n        }));\n    }\n}\nfunction requestInvalid(reason: string): Result.Result<never, InspectionArtifactError> {\n    return Result.fail(new InspectionArtifactError({ code: \"inspection-request-invalid\", reason }));\n}\nfunction readVerifiedRange(source: InspectionFactSource, metadata: PersistedContentMetadata, offset: number, limit: number): Uint8Array {\n    const output = new Uint8Array(Math.min(limit, metadata.byteLength - offset));\n    const digest = new InspectionSha256();\n    let byteOffset = 0;\n    let expectedOrdinal = 0;\n    let afterOrdinal = -1;\n    while (true) {\n        // One bounded storage chunk at a time, including bytes outside the requested range.\n        const page = source.readContentPage(metadata.contentId, afterOrdinal, 1);\n        if (page.contentId !== metadata.contentId || page.afterOrdinal !== afterOrdinal || page.chunks.length > 1 ||\n            page.chunks.length === 0 && page.nextOrdinal !== null)\n            throw new Error(\"Artifact content page is invalid.\");\n        for (const chunk of page.chunks) {\n            if (chunk.ordinal !== expectedOrdinal || expectedOrdinal >= metadata.chunkCount ||\n                byteOffset + chunk.bytes.byteLength > metadata.byteLength)\n                throw new Error(\"Artifact chunk sequence is invalid.\");\n            digest.update(chunk.bytes);\n            const start = Math.max(offset, byteOffset);\n            const end = Math.min(offset + output.byteLength, byteOffset + chunk.bytes.byteLength);\n            if (end > start)\n                output.set(chunk.bytes.subarray(start - byteOffset, end - byteOffset), start - offset);\n            byteOffset += chunk.bytes.byteLength;\n            expectedOrdinal += 1;\n        }\n        if (page.nextOrdinal === null)\n            break;\n        if (page.nextOrdinal !== expectedOrdinal - 1 || expectedOrdinal >= metadata.chunkCount) {\n            throw new Error(\"Artifact content continuation is invalid.\");\n        }\n        afterOrdinal = page.nextOrdinal;\n    }\n    if (byteOffset !== metadata.byteLength || expectedOrdinal !== metadata.chunkCount || digest.digestHex() !== metadata.digest) {\n        throw new Error(\"Artifact bytes do not match their sealed digest.\");\n    }\n    return output;\n}\n"]}
+{"version":3,"file":"artifacts.js","sourceRoot":"","sources":["artifacts.ts"],"names":[],"mappings":";;;AAsDA,wDA+EC;AAoED,kEAwBC;AAQD,8EAmBC;AA5PD,mCAA8C;AAC9C,8DAA6D;AAC7D,gEAA0E;AAC1E,kEAAkF;AAClF,qDAAkE;AAClE,mEAAsF;AACtF,4EAA4F;AAC5F,8EAAwG;AACxG,0DAA2G;AAE3G,yCAAiE;AAGpD,QAAA,wBAAwB,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,YAAY,EAAE,EAAE,GAAG,IAAI,EAAE,YAAY,EAAE,GAAG,GAAG,IAAI,EAAE,CAAC,CAAC;AAChG,QAAA,8BAA8B,GAAG,wCAA4B,CAAC;AAC9D,QAAA,6BAA6B,GAAG,wCAA4B,CAAC,IAAI,CAAC,eAAM,CAAC,KAAK,CAAC,eAAM,CAAC,UAAU,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,GAAG,CAAC,IAAI,KAAK,IAAI,gCAAwB,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;AACxL,MAAM,iBAAiB,GAAG,eAAM,CAAC,MAAM,CAAC;IACpC,UAAU,EAAE,iCAAgB;IAC5B,MAAM,EAAE,eAAM,CAAC,QAAQ,CAAC,sCAA8B,CAAC;IACvD,KAAK,EAAE,eAAM,CAAC,QAAQ,CAAC,qCAA6B,CAAC;CACxD,CAAC,CAAC;AAEU,QAAA,8BAA8B,GAAG,eAAM,CAAC,KAAK,CAAC;IACvD,eAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,eAAM,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,UAAU,EAAE,iCAAgB,EAAE,CAAC;IACnF,eAAM,CAAC,MAAM,CAAC;QACV,KAAK,EAAE,eAAM,CAAC,OAAO,CAAC,WAAW,CAAC;QAClC,UAAU,EAAE,iCAAgB;QAC5B,IAAI,EAAE,eAAM,CAAC,MAAM,CAAC,0BAAc,CAAC;QACnC,SAAS,EAAE,eAAM,CAAC,MAAM,CAAC,2BAAe,CAAC;QACzC,UAAU,EAAE,wCAA4B;QACxC,MAAM,EAAE,mCAAkB;QAC1B,MAAM,EAAE,sCAA8B;QACtC,MAAM,EAAE,eAAM,CAAC,MAAM,CAAC,IAAI,CAAC,eAAM,CAAC,KAAK,CAAC,eAAM,CAAC,UAAU,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,gCAAwB,CAAC,YAAY,GAAG,CAAC,CAAC,GAAG,CAAC;YACzI,KAAK,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,IAAI,wBAAwB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACrE,UAAU,EAAE,eAAM,CAAC,MAAM,CAAC,sCAA8B,CAAC;KAC5D,CAAC;CACL,CAAC,CAAC;AAUH,MAAa,uBAAwB,SAAQ,aAAI,CAAC,WAAW,CAAC,yBAAyB,CAGrF;CACD;AAJD,0DAIC;AACD,MAAM,aAAa,GAAG,eAAM,CAAC,mBAAmB,CAAC,iBAAiB,EAAE,iCAAuB,CAAC,CAAC;AAC7F,MAAM,YAAY,GAAG,eAAM,CAAC,mBAAmB,CAAC,eAAM,CAAC,MAAM,CAAC,EAAE,0BAA0B,EAAE,eAAM,CAAC,MAAM,EAAE,CAAC,EAAE,iCAAuB,CAAC,CAAC;AACvI,6FAA6F;AAC7F,SAAgB,sBAAsB,CAAC,QAAmC,EAAE,OAAkC;IAC1G,MAAM,OAAO,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IACvC,IAAI,eAAM,CAAC,SAAS,CAAC,OAAO,CAAC;QACzB,OAAO,cAAc,CAAC,wCAAwC,CAAC,CAAC;IACpE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,CAAC,EAAE,KAAK,GAAG,gCAAwB,CAAC,YAAY,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC;IAClG,IAAI,CAAC;QACD,IAAI,IAAA,yCAAoB,EAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,QAAQ,CAAC,OAAO;YACrE,QAAQ,CAAC,OAAO,CAAC,WAAW,KAAK,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;YAC7D,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;QACrF,CAAC;QACD,MAAM,WAAW,GAAG,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,SAAS,KAAK,SAAS,IAAI,QAAQ,CAAC,cAAc,KAAK,QAAQ,CAAC,OAAO,CAAC,SAAS;YAC/J,QAAQ,CAAC,MAAM,KAAK,gDAAgC,CAAC,MAAM,CAAC,CAAC;QACjE,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;YACxB,OAAO,eAAM,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;QAC7E,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;QACjE,MAAM,UAAU,GAAG,WAAW,CAAC,CAAC,CAAE,CAAC;QACnC,IAAI,UAAU,CAAC,QAAQ,CAAC,UAAU,KAAK,QAAQ,CAAC,OAAO,CAAC,WAAW;YAC/D,UAAU,CAAC,QAAQ,CAAC,cAAc,KAAK,4DAA2C,CAAC,QAAQ;YAC3F,UAAU,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC9C,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;QAC7E,CAAC;QACD,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;QACjH,MAAM,KAAK,GAAG,IAAI,OAAO,EAAoC,CAAC;QAC9D,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,IAAI,eAAe,CAAC,IAAI,KAAK,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM;YAC5D,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QAC1D,MAAM,QAAQ,GAAG,IAAA,4CAA8B,EAAC,gDAAgC,EAAE,UAAU,CAAC,KAAK,EAAE;YAChG,OAAO,EAAE,CAAC,KAAK,EAAE,WAAW,EAAE,EAAE;gBAC5B,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;gBACnC,IAAI,eAAM,CAAC,SAAS,CAAC,MAAM,CAAC;oBACxB,OAAO,eAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;gBACrC,MAAM,aAAa,GAAG,MAAM,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC;gBACjE,MAAM,QAAQ,GAAG,eAAe,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;gBACpD,IAAI,QAAQ,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,WAAW,CAAC,IAAI,KAAK,OAAO;oBACjF,WAAW,CAAC,YAAY,KAAK,SAAS,IAAI,QAAQ,CAAC,UAAU,GAAG,WAAW,CAAC,YAAY,EAAE,CAAC;oBAC3F,OAAO,eAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,6BAAsC,EAAE,CAAC,CAAC;gBACzE,CAAC;gBACD,MAAM,MAAM,GAAG,IAAA,oCAAuB,EAAC,OAAO,CAAC,CAAC;gBAChD,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;gBAC5B,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;gBACxB,OAAO,eAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAClC,CAAC;YACD,SAAS,EAAE,GAAG,EAAE,CAAC,eAAM,CAAC,OAAO,CAAC,SAAS,CAAC;SAC7C,CAAC,CAAC;QACH,IAAI,eAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,IAAI,KAAK,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;YAClF,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAC5D,CAAC;QACD,mEAAmE;QACnE,KAAK,MAAM,QAAQ,IAAI,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;YAChD,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAC7C,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,UAAU,KAAK,QAAQ,CAAC,UAAU,IAAI,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,EAAE,CAAC;gBAC/G,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;YACnF,CAAC;QACL,CAAC;QACD,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,KAAK,UAAU,CAAC,CAAC;QAC3F,IAAI,QAAQ,KAAK,SAAS;YACtB,OAAO,eAAM,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;QAC7E,IAAI,MAAM,GAAG,QAAQ,CAAC,UAAU;YAC5B,OAAO,cAAc,CAAC,0CAA0C,CAAC,CAAC;QACtE,MAAM,KAAK,GAAG,iBAAiB,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAE,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;QACrG,OAAO,eAAM,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC;YAChC,KAAK,EAAE,WAAW;YAClB,UAAU;YACV,IAAI,EAAE,QAAQ,CAAC,KAAK;YACpB,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,UAAU,EAAE,QAAQ,CAAC,UAAU;YAC/B,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,MAAM;YACN,MAAM,EAAE,IAAA,4BAAiB,EAAC,KAAK,CAAC;YAChC,UAAU,EAAE,MAAM,GAAG,KAAK,CAAC,UAAU,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI;SACjG,CAAC,CAAC,CAAC;IACR,CAAC;IACD,OAAO,KAAK,EAAE,CAAC;QACX,OAAO,eAAM,CAAC,IAAI,CAAC,IAAI,uBAAuB,CAAC;YAC3C,IAAI,EAAE,qCAAqC;YAC3C,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,qCAAqC;SACzF,CAAC,CAAC,CAAC;IACR,CAAC;AACL,CAAC;AASD,0FAA0F;AAC1F,SAAS,0BAA0B,CAAC,QAAmC;IACnE,IAAI,IAAA,yCAAoB,EAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,QAAQ,CAAC,OAAO;QACrE,QAAQ,CAAC,OAAO,CAAC,WAAW,KAAK,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;QAC7D,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;IACrF,CAAC;IACD,MAAM,WAAW,GAAG,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,SAAS,KAAK,SAAS,IAAI,QAAQ,CAAC,cAAc,KAAK,QAAQ,CAAC,OAAO,CAAC,SAAS;QAC/J,QAAQ,CAAC,MAAM,KAAK,gDAAgC,CAAC,MAAM,CAAC,CAAC;IACjE,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IACjE,MAAM,UAAU,GAAG,WAAW,CAAC,CAAC,CAAE,CAAC;IACnC,IAAI,UAAU,CAAC,QAAQ,CAAC,UAAU,KAAK,QAAQ,CAAC,OAAO,CAAC,WAAW;QAC/D,UAAU,CAAC,QAAQ,CAAC,cAAc,KAAK,4DAA2C,CAAC,QAAQ;QAC3F,UAAU,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC7E,CAAC;IACD,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;IACjH,MAAM,KAAK,GAAG,IAAI,OAAO,EAAoC,CAAC;IAC9D,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,IAAI,eAAe,CAAC,IAAI,KAAK,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM;QAC5D,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IAC1D,MAAM,QAAQ,GAAG,IAAA,4CAA8B,EAAC,gDAAgC,EAAE,UAAU,CAAC,KAAK,EAAE;QAChG,OAAO,EAAE,CAAC,KAAK,EAAE,WAAW,EAAE,EAAE;YAC5B,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;YACnC,IAAI,eAAM,CAAC,SAAS,CAAC,MAAM,CAAC;gBACxB,OAAO,eAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YACrC,MAAM,aAAa,GAAG,MAAM,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC;YACjE,MAAM,SAAS,GAAG,eAAe,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;YACrD,IAAI,SAAS,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,WAAW,CAAC,IAAI,KAAK,OAAO;gBAClF,WAAW,CAAC,YAAY,KAAK,SAAS,IAAI,SAAS,CAAC,UAAU,GAAG,WAAW,CAAC,YAAY,EAAE,CAAC;gBAC5F,OAAO,eAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,6BAAsC,EAAE,CAAC,CAAC;YACzE,CAAC;YACD,MAAM,MAAM,GAAG,IAAA,oCAAuB,EAAC,OAAO,CAAC,CAAC;YAChD,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;YAC7B,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;YACxB,OAAO,eAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAClC,CAAC;QACD,SAAS,EAAE,GAAG,EAAE,CAAC,eAAM,CAAC,OAAO,CAAC,SAAS,CAAC;KAC7C,CAAC,CAAC;IACH,IAAI,eAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,IAAI,KAAK,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;QAClF,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE;QAC/D,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QAC/C,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,UAAU,KAAK,UAAU,CAAC,UAAU,IAAI,QAAQ,CAAC,MAAM,KAAK,UAAU,CAAC,MAAM;YAChH,UAAU,CAAC,UAAU,GAAG,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;QACnF,CAAC;QACD,OAAO,MAAM,CAAC,MAAM,CAAC;YACjB,UAAU,EAAE,UAAU,CAAC,UAAU;YACjC,IAAI,EAAE,UAAU,CAAC,KAAK;YACtB,SAAS,EAAE,UAAU,CAAC,SAAS;YAC/B,UAAU,EAAE,UAAU,CAAC,UAAU;YACjC,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,OAAO,EAAE,QAAQ;SACpB,CAAC,CAAC;IACP,CAAC,CAAC,CAAC,CAAC;AACR,CAAC;AACD,mFAAmF;AACnF,SAAgB,2BAA2B,CAAC,QAAmC,EAAE,UAAkB,EAAE,YAAoB;IACrH,IAAI,eAAM,CAAC,SAAS,CAAC,aAAa,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC;QAC/C,OAAO,cAAc,CAAC,sBAAsB,CAAC,CAAC;IAClD,IAAI,CAAC;QACD,MAAM,QAAQ,GAAG,0BAA0B,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,KAAK,UAAU,CAAC,CAAC;QACvG,IAAI,QAAQ,KAAK,SAAS;YACtB,OAAO,eAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACrC,IAAI,QAAQ,CAAC,UAAU,GAAG,YAAY;YAClC,OAAO,cAAc,CAAC,+CAA+C,CAAC,CAAC;QAC3E,OAAO,eAAM,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC;YAChC,UAAU;YACV,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,UAAU,EAAE,QAAQ,CAAC,UAAU;YAC/B,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,KAAK,EAAE,iBAAiB,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC,EAAE,QAAQ,CAAC,UAAU,CAAC;SAC7F,CAAC,CAAC,CAAC;IACR,CAAC;IACD,OAAO,KAAK,EAAE,CAAC;QACX,OAAO,eAAM,CAAC,IAAI,CAAC,IAAI,uBAAuB,CAAC;YAC3C,IAAI,EAAE,qCAAqC;YAC3C,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,qCAAqC;SACzF,CAAC,CAAC,CAAC;IACR,CAAC;AACL,CAAC;AAOD,sGAAsG;AACtG,SAAgB,iCAAiC,CAAC,QAAmC;IACjF,IAAI,CAAC;QACD,MAAM,YAAY,GAAG,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,SAAS,KAAK,SAAS,IAAI,QAAQ,CAAC,cAAc,KAAK,QAAQ,CAAC,OAAO,CAAC,SAAS;YAC9J,QAAQ,CAAC,MAAM,KAAK,gDAAgC,CAAC,MAAM,CAAC,CAAC;QACjE,IAAI,CAAC,YAAY;YACb,OAAO,eAAM,CAAC,OAAO,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC;QACrC,OAAO,eAAM,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC,0BAA0B,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC;gBACjH,UAAU,EAAE,QAAQ,CAAC,UAAU;gBAC/B,SAAS,EAAE,QAAQ,CAAC,SAAS;gBAC7B,UAAU,EAAE,QAAQ,CAAC,UAAU;gBAC/B,MAAM,EAAE,QAAQ,CAAC,MAAM;aAC1B,CAAC,CAAU,CAAC,CAAC,CAAC,CAAC;IACxB,CAAC;IACD,OAAO,KAAK,EAAE,CAAC;QACX,OAAO,eAAM,CAAC,IAAI,CAAC,IAAI,uBAAuB,CAAC;YAC3C,IAAI,EAAE,qCAAqC;YAC3C,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,qCAAqC;SACzF,CAAC,CAAC,CAAC;IACR,CAAC;AACL,CAAC;AACD,SAAS,cAAc,CAAC,MAAc;IAClC,OAAO,eAAM,CAAC,IAAI,CAAC,IAAI,uBAAuB,CAAC,EAAE,IAAI,EAAE,4BAA4B,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;AACpG,CAAC;AACD,SAAS,iBAAiB,CAAC,MAA4B,EAAE,QAAkC,EAAE,MAAc,EAAE,KAAa;IACtH,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,CAAC,UAAU,GAAG,MAAM,CAAC,CAAC,CAAC;IAC7E,MAAM,MAAM,GAAG,IAAI,2BAAgB,EAAE,CAAC;IACtC,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,IAAI,eAAe,GAAG,CAAC,CAAC;IACxB,IAAI,YAAY,GAAG,CAAC,CAAC,CAAC;IACtB,OAAO,IAAI,EAAE,CAAC;QACV,oFAAoF;QACpF,MAAM,IAAI,GAAG,MAAM,CAAC,eAAe,CAAC,QAAQ,CAAC,SAAS,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC;QACzE,IAAI,IAAI,CAAC,SAAS,KAAK,QAAQ,CAAC,SAAS,IAAI,IAAI,CAAC,YAAY,KAAK,YAAY,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;YACrG,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,WAAW,KAAK,IAAI;YACrD,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QACzD,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAC9B,IAAI,KAAK,CAAC,OAAO,KAAK,eAAe,IAAI,eAAe,IAAI,QAAQ,CAAC,UAAU;gBAC3E,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,UAAU,GAAG,QAAQ,CAAC,UAAU;gBACzD,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;YAC3D,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAC3B,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;YAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC,UAAU,EAAE,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YACtF,IAAI,GAAG,GAAG,KAAK;gBACX,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,GAAG,UAAU,EAAE,GAAG,GAAG,UAAU,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC,CAAC;YAC3F,UAAU,IAAI,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC;YACrC,eAAe,IAAI,CAAC,CAAC;QACzB,CAAC;QACD,IAAI,IAAI,CAAC,WAAW,KAAK,IAAI;YACzB,MAAM;QACV,IAAI,IAAI,CAAC,WAAW,KAAK,eAAe,GAAG,CAAC,IAAI,eAAe,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC;YACrF,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;QACjE,CAAC;QACD,YAAY,GAAG,IAAI,CAAC,WAAW,CAAC;IACpC,CAAC;IACD,IAAI,UAAU,KAAK,QAAQ,CAAC,UAAU,IAAI,eAAe,KAAK,QAAQ,CAAC,UAAU,IAAI,MAAM,CAAC,SAAS,EAAE,KAAK,QAAQ,CAAC,MAAM,EAAE,CAAC;QAC1H,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACxE,CAAC;IACD,OAAO,MAAM,CAAC;AAClB,CAAC","sourcesContent":["import { Data, Result, Schema } from \"effect\";\nimport { encodeAttemptLocator } from \"../attempt-locator.ts\";\nimport { mintRecordContentHandle } from \"../record/attachment/content.ts\";\nimport { hydrateRecordAttachmentCurrent } from \"../record/attachment/protocol.ts\";\nimport { RecordExactParseOptions } from \"../record/codec/core.ts\";\nimport { ArtifactIdSchema, Sha256DigestSchema } from \"../record/codec/identifiers.ts\";\nimport { attemptArtifactsRecordAttachment } from \"../record/family/artifacts/definition.ts\";\nimport { attemptArtifactsRecordAttachmentPersistence } from \"../record/family/artifacts/persistence.ts\";\nimport { MediaTypeSchema, NonNegativeSafeIntegerSchema, SafeTextSchema } from \"../record/family/common.ts\";\nimport type { PersistedContentMetadata } from \"../record/sqlite/types.ts\";\nimport { encodeBase64Bytes, InspectionSha256 } from \"./bytes.ts\";\nimport type { ResolvedInspectionAttempt } from \"./facts.ts\";\nimport type { InspectionFactSource } from \"./source.ts\";\nexport const InspectionArtifactLimits = Object.freeze({ defaultBytes: 64 * 1024, maximumBytes: 256 * 1024 });\nexport const InspectionArtifactOffsetSchema = NonNegativeSafeIntegerSchema;\nexport const InspectionArtifactLimitSchema = NonNegativeSafeIntegerSchema.pipe(Schema.check(Schema.makeFilter((value) => value > 0 && value <= InspectionArtifactLimits.maximumBytes)));\nconst ReadRequestSchema = Schema.Struct({\n    artifactId: ArtifactIdSchema,\n    offset: Schema.optional(InspectionArtifactOffsetSchema),\n    limit: Schema.optional(InspectionArtifactLimitSchema),\n});\nexport type InspectionArtifactRequest = Schema.Schema.Type<typeof ReadRequestSchema>;\nexport const InspectionArtifactResultSchema = Schema.Union([\n    Schema.Struct({ state: Schema.Literal(\"not-found\"), artifactId: ArtifactIdSchema }),\n    Schema.Struct({\n        state: Schema.Literal(\"available\"),\n        artifactId: ArtifactIdSchema,\n        name: Schema.toType(SafeTextSchema),\n        mediaType: Schema.toType(MediaTypeSchema),\n        byteLength: NonNegativeSafeIntegerSchema,\n        sha256: Sha256DigestSchema,\n        offset: InspectionArtifactOffsetSchema,\n        base64: Schema.String.pipe(Schema.check(Schema.makeFilter((value) => value.length <= Math.ceil(InspectionArtifactLimits.maximumBytes / 3) * 4 &&\n            value.length % 4 === 0 && /^[A-Za-z0-9+/]*={0,2}$/.test(value)))),\n        nextOffset: Schema.NullOr(InspectionArtifactOffsetSchema),\n    }),\n]);\nexport type InspectionArtifactResult = Schema.Schema.Type<typeof InspectionArtifactResultSchema>;\nexport interface InspectionArtifactBytes {\n    readonly artifactId: string;\n    readonly name: string;\n    readonly mediaType: string;\n    readonly byteLength: number;\n    readonly sha256: string;\n    readonly bytes: Uint8Array;\n}\nexport class InspectionArtifactError extends Data.TaggedError(\"InspectionArtifactError\")<{\n    readonly code: \"inspection-request-invalid\" | \"inspection-record-integrity-failure\";\n    readonly reason: string;\n}> {\n}\nconst decodeRequest = Schema.decodeUnknownResult(ReadRequestSchema, RecordExactParseOptions);\nconst decodeMarker = Schema.decodeUnknownResult(Schema.Struct({ \"$niceeval.record.content\": Schema.String }), RecordExactParseOptions);\n/** Reads the exact origin's sealed bytes; only the requested range is retained in memory. */\nexport function projectAttemptArtifact(resolved: ResolvedInspectionAttempt, request: InspectionArtifactRequest): Result.Result<InspectionArtifactResult, InspectionArtifactError> {\n    const decoded = decodeRequest(request);\n    if (Result.isFailure(decoded))\n        return requestInvalid(\"Invalid artifact ID, offset, or limit.\");\n    const { artifactId, offset = 0, limit = InspectionArtifactLimits.defaultBytes } = decoded.success;\n    try {\n        if (encodeAttemptLocator(resolved.attempt.attemptId) !== resolved.locator ||\n            resolved.attempt.originRunId !== resolved.origin.run.runId) {\n            throw new Error(\"Artifact origin does not match the requested Attempt locator.\");\n        }\n        const attachments = resolved.origin.attachments.filter(({ physical }) => physical.ownerKind === \"attempt\" && physical.ownerAttemptId === resolved.attempt.attemptId &&\n            physical.family === attemptArtifactsRecordAttachment.family);\n        if (attachments.length === 0)\n            return Result.succeed(Object.freeze({ state: \"not-found\", artifactId }));\n        if (attachments.length !== 1)\n            throw new Error(\"Artifact owner has duplicate attachments.\");\n        const attachment = attachments[0]!;\n        if (attachment.physical.ownerRunId !== resolved.attempt.originRunId ||\n            attachment.physical.familyRevision !== attemptArtifactsRecordAttachmentPersistence.revision ||\n            attachment.physical.references.length !== 0) {\n            throw new Error(\"Artifact attachment ownership or revision is invalid.\");\n        }\n        const byLogicalHandle = new Map(attachment.physical.contents.map((content) => [content.logicalHandle, content]));\n        const bound = new WeakMap<object, PersistedContentMetadata>();\n        const used = new Set<string>();\n        if (byLogicalHandle.size !== attachment.physical.contents.length)\n            throw new Error(\"Duplicate artifact content handle.\");\n        const hydrated = hydrateRecordAttachmentCurrent(attemptArtifactsRecordAttachment, attachment.value, {\n            content: (token, declaration) => {\n                const marker = decodeMarker(token);\n                if (Result.isFailure(marker))\n                    return Result.succeed(undefined);\n                const logicalHandle = marker.success[\"$niceeval.record.content\"];\n                const metadata = byLogicalHandle.get(logicalHandle);\n                if (metadata === undefined || used.has(logicalHandle) || declaration.kind !== \"bytes\" ||\n                    declaration.maximumBytes !== undefined && metadata.byteLength > declaration.maximumBytes) {\n                    return Result.fail({ code: \"current-content-bind-failed\" as const });\n                }\n                const handle = mintRecordContentHandle(\"bytes\");\n                bound.set(handle, metadata);\n                used.add(logicalHandle);\n                return Result.succeed(handle);\n            },\n            reference: () => Result.succeed(undefined),\n        });\n        if (Result.isFailure(hydrated) || used.size !== attachment.physical.contents.length) {\n            throw new Error(\"Artifact content closure is invalid.\");\n        }\n        // Validate every descriptor, even when the requested ID is absent.\n        for (const artifact of hydrated.success.artifacts) {\n            const metadata = bound.get(artifact.content);\n            if (metadata === undefined || metadata.byteLength !== artifact.byteLength || metadata.digest !== artifact.sha256) {\n                throw new Error(\"Artifact descriptor does not match sealed content metadata.\");\n            }\n        }\n        const artifact = hydrated.success.artifacts.find((item) => item.artifactId === artifactId);\n        if (artifact === undefined)\n            return Result.succeed(Object.freeze({ state: \"not-found\", artifactId }));\n        if (offset > artifact.byteLength)\n            return requestInvalid(\"Artifact offset exceeds its byte length.\");\n        const bytes = readVerifiedRange(resolved.origin.source, bound.get(artifact.content)!, offset, limit);\n        return Result.succeed(Object.freeze({\n            state: \"available\",\n            artifactId,\n            name: artifact.label,\n            mediaType: artifact.mediaType,\n            byteLength: artifact.byteLength,\n            sha256: artifact.sha256,\n            offset,\n            base64: encodeBase64Bytes(bytes),\n            nextOffset: offset + bytes.byteLength < artifact.byteLength ? offset + bytes.byteLength : null,\n        }));\n    }\n    catch (cause) {\n        return Result.fail(new InspectionArtifactError({\n            code: \"inspection-record-integrity-failure\",\n            reason: cause instanceof Error ? cause.message : \"Artifact content validation failed.\",\n        }));\n    }\n}\ninterface HydratedArtifactDescriptor {\n    readonly artifactId: string;\n    readonly name: string;\n    readonly mediaType: string;\n    readonly byteLength: number;\n    readonly sha256: string;\n    readonly content: PersistedContentMetadata;\n}\n/** Hydrates and verifies every sealed artifact descriptor of the exact origin Attempt. */\nfunction hydrateArtifactDescriptors(resolved: ResolvedInspectionAttempt): readonly HydratedArtifactDescriptor[] {\n    if (encodeAttemptLocator(resolved.attempt.attemptId) !== resolved.locator ||\n        resolved.attempt.originRunId !== resolved.origin.run.runId) {\n        throw new Error(\"Artifact origin does not match the requested Attempt locator.\");\n    }\n    const attachments = resolved.origin.attachments.filter(({ physical }) => physical.ownerKind === \"attempt\" && physical.ownerAttemptId === resolved.attempt.attemptId &&\n        physical.family === attemptArtifactsRecordAttachment.family);\n    if (attachments.length !== 1)\n        throw new Error(\"Artifact owner attachment is unavailable.\");\n    const attachment = attachments[0]!;\n    if (attachment.physical.ownerRunId !== resolved.attempt.originRunId ||\n        attachment.physical.familyRevision !== attemptArtifactsRecordAttachmentPersistence.revision ||\n        attachment.physical.references.length !== 0) {\n        throw new Error(\"Artifact attachment ownership or revision is invalid.\");\n    }\n    const byLogicalHandle = new Map(attachment.physical.contents.map((content) => [content.logicalHandle, content]));\n    const bound = new WeakMap<object, PersistedContentMetadata>();\n    const used = new Set<string>();\n    if (byLogicalHandle.size !== attachment.physical.contents.length)\n        throw new Error(\"Duplicate artifact content handle.\");\n    const hydrated = hydrateRecordAttachmentCurrent(attemptArtifactsRecordAttachment, attachment.value, {\n        content: (token, declaration) => {\n            const marker = decodeMarker(token);\n            if (Result.isFailure(marker))\n                return Result.succeed(undefined);\n            const logicalHandle = marker.success[\"$niceeval.record.content\"];\n            const persisted = byLogicalHandle.get(logicalHandle);\n            if (persisted === undefined || used.has(logicalHandle) || declaration.kind !== \"bytes\" ||\n                declaration.maximumBytes !== undefined && persisted.byteLength > declaration.maximumBytes) {\n                return Result.fail({ code: \"current-content-bind-failed\" as const });\n            }\n            const handle = mintRecordContentHandle(\"bytes\");\n            bound.set(handle, persisted);\n            used.add(logicalHandle);\n            return Result.succeed(handle);\n        },\n        reference: () => Result.succeed(undefined),\n    });\n    if (Result.isFailure(hydrated) || used.size !== attachment.physical.contents.length) {\n        throw new Error(\"Artifact content closure is invalid.\");\n    }\n    return Object.freeze(hydrated.success.artifacts.map((descriptor) => {\n        const metadata = bound.get(descriptor.content);\n        if (metadata === undefined || metadata.byteLength !== descriptor.byteLength || metadata.digest !== descriptor.sha256 ||\n            descriptor.byteLength < 0) {\n            throw new Error(\"Artifact descriptor does not match sealed content metadata.\");\n        }\n        return Object.freeze({\n            artifactId: descriptor.artifactId,\n            name: descriptor.label,\n            mediaType: descriptor.mediaType,\n            byteLength: descriptor.byteLength,\n            sha256: descriptor.sha256,\n            content: metadata,\n        });\n    }));\n}\n/** Internal fixed-family closure reader. It verifies the whole sealed artifact. */\nexport function readInspectionArtifactBytes(resolved: ResolvedInspectionAttempt, artifactId: string, maximumBytes: number): Result.Result<InspectionArtifactBytes | undefined, InspectionArtifactError> {\n    if (Result.isFailure(decodeRequest({ artifactId })))\n        return requestInvalid(\"Invalid artifact ID.\");\n    try {\n        const artifact = hydrateArtifactDescriptors(resolved).find((entry) => entry.artifactId === artifactId);\n        if (artifact === undefined)\n            return Result.succeed(undefined);\n        if (artifact.byteLength > maximumBytes)\n            return requestInvalid(\"Artifact exceeds the evidence parsing budget.\");\n        return Result.succeed(Object.freeze({\n            artifactId,\n            name: artifact.name,\n            mediaType: artifact.mediaType,\n            byteLength: artifact.byteLength,\n            sha256: artifact.sha256,\n            bytes: readVerifiedRange(resolved.origin.source, artifact.content, 0, artifact.byteLength),\n        }));\n    }\n    catch (cause) {\n        return Result.fail(new InspectionArtifactError({\n            code: \"inspection-record-integrity-failure\",\n            reason: cause instanceof Error ? cause.message : \"Artifact content validation failed.\",\n        }));\n    }\n}\nexport interface InspectionArtifactDescriptor {\n    readonly artifactId: string;\n    readonly mediaType: string;\n    readonly byteLength: number;\n    readonly sha256: string;\n}\n/** Descriptor-only closure reader for references that must not load bytes, such as display images. */\nexport function readInspectionArtifactDescriptors(resolved: ResolvedInspectionAttempt): Result.Result<ReadonlyMap<string, InspectionArtifactDescriptor>, InspectionArtifactError> {\n    try {\n        const hasArtifacts = resolved.origin.attachments.some(({ physical }) => physical.ownerKind === \"attempt\" && physical.ownerAttemptId === resolved.attempt.attemptId &&\n            physical.family === attemptArtifactsRecordAttachment.family);\n        if (!hasArtifacts)\n            return Result.succeed(new Map());\n        return Result.succeed(new Map(hydrateArtifactDescriptors(resolved).map((artifact) => [artifact.artifactId, Object.freeze({\n                artifactId: artifact.artifactId,\n                mediaType: artifact.mediaType,\n                byteLength: artifact.byteLength,\n                sha256: artifact.sha256,\n            })] as const)));\n    }\n    catch (cause) {\n        return Result.fail(new InspectionArtifactError({\n            code: \"inspection-record-integrity-failure\",\n            reason: cause instanceof Error ? cause.message : \"Artifact content validation failed.\",\n        }));\n    }\n}\nfunction requestInvalid(reason: string): Result.Result<never, InspectionArtifactError> {\n    return Result.fail(new InspectionArtifactError({ code: \"inspection-request-invalid\", reason }));\n}\nfunction readVerifiedRange(source: InspectionFactSource, metadata: PersistedContentMetadata, offset: number, limit: number): Uint8Array {\n    const output = new Uint8Array(Math.min(limit, metadata.byteLength - offset));\n    const digest = new InspectionSha256();\n    let byteOffset = 0;\n    let expectedOrdinal = 0;\n    let afterOrdinal = -1;\n    while (true) {\n        // One bounded storage chunk at a time, including bytes outside the requested range.\n        const page = source.readContentPage(metadata.contentId, afterOrdinal, 1);\n        if (page.contentId !== metadata.contentId || page.afterOrdinal !== afterOrdinal || page.chunks.length > 1 ||\n            page.chunks.length === 0 && page.nextOrdinal !== null)\n            throw new Error(\"Artifact content page is invalid.\");\n        for (const chunk of page.chunks) {\n            if (chunk.ordinal !== expectedOrdinal || expectedOrdinal >= metadata.chunkCount ||\n                byteOffset + chunk.bytes.byteLength > metadata.byteLength)\n                throw new Error(\"Artifact chunk sequence is invalid.\");\n            digest.update(chunk.bytes);\n            const start = Math.max(offset, byteOffset);\n            const end = Math.min(offset + output.byteLength, byteOffset + chunk.bytes.byteLength);\n            if (end > start)\n                output.set(chunk.bytes.subarray(start - byteOffset, end - byteOffset), start - offset);\n            byteOffset += chunk.bytes.byteLength;\n            expectedOrdinal += 1;\n        }\n        if (page.nextOrdinal === null)\n            break;\n        if (page.nextOrdinal !== expectedOrdinal - 1 || expectedOrdinal >= metadata.chunkCount) {\n            throw new Error(\"Artifact content continuation is invalid.\");\n        }\n        afterOrdinal = page.nextOrdinal;\n    }\n    if (byteOffset !== metadata.byteLength || expectedOrdinal !== metadata.chunkCount || digest.digestHex() !== metadata.digest) {\n        throw new Error(\"Artifact bytes do not match their sealed digest.\");\n    }\n    return output;\n}\n"]}

package/dist/inspection/artifacts.d.cts

@@ -47,4 +47,12 @@ export declare class InspectionArtifactError extends InspectionArtifactError_bas
 export declare function projectAttemptArtifact(resolved: ResolvedInspectionAttempt, request: InspectionArtifactRequest): Result.Result<InspectionArtifactResult, InspectionArtifactError>;
 /** Internal fixed-family closure reader. It verifies the whole sealed artifact. */
 export declare function readInspectionArtifactBytes(resolved: ResolvedInspectionAttempt, artifactId: string, maximumBytes: number): Result.Result<InspectionArtifactBytes | undefined, InspectionArtifactError>;
+export interface InspectionArtifactDescriptor {
+    readonly artifactId: string;
+    readonly mediaType: string;
+    readonly byteLength: number;
+    readonly sha256: string;
+}
+/** Descriptor-only closure reader for references that must not load bytes, such as display images. */
+export declare function readInspectionArtifactDescriptors(resolved: ResolvedInspectionAttempt): Result.Result<ReadonlyMap<string, InspectionArtifactDescriptor>, InspectionArtifactError>;
 export {};

package/dist/inspection/artifacts.d.mts

@@ -47,4 +47,12 @@ export declare class InspectionArtifactError extends InspectionArtifactError_bas
 export declare function projectAttemptArtifact(resolved: ResolvedInspectionAttempt, request: InspectionArtifactRequest): Result.Result<InspectionArtifactResult, InspectionArtifactError>;
 /** Internal fixed-family closure reader. It verifies the whole sealed artifact. */
 export declare function readInspectionArtifactBytes(resolved: ResolvedInspectionAttempt, artifactId: string, maximumBytes: number): Result.Result<InspectionArtifactBytes | undefined, InspectionArtifactError>;
+export interface InspectionArtifactDescriptor {
+    readonly artifactId: string;
+    readonly mediaType: string;
+    readonly byteLength: number;
+    readonly sha256: string;
+}
+/** Descriptor-only closure reader for references that must not load bytes, such as display images. */
+export declare function readInspectionArtifactDescriptors(resolved: ResolvedInspectionAttempt): Result.Result<ReadonlyMap<string, InspectionArtifactDescriptor>, InspectionArtifactError>;
 export {};

package/dist/inspection/artifacts.d.ts

@@ -47,4 +47,12 @@ export declare class InspectionArtifactError extends InspectionArtifactError_bas
 export declare function projectAttemptArtifact(resolved: ResolvedInspectionAttempt, request: InspectionArtifactRequest): Result.Result<InspectionArtifactResult, InspectionArtifactError>;
 /** Internal fixed-family closure reader. It verifies the whole sealed artifact. */
 export declare function readInspectionArtifactBytes(resolved: ResolvedInspectionAttempt, artifactId: string, maximumBytes: number): Result.Result<InspectionArtifactBytes | undefined, InspectionArtifactError>;
+export interface InspectionArtifactDescriptor {
+    readonly artifactId: string;
+    readonly mediaType: string;
+    readonly byteLength: number;
+    readonly sha256: string;
+}
+/** Descriptor-only closure reader for references that must not load bytes, such as display images. */
+export declare function readInspectionArtifactDescriptors(resolved: ResolvedInspectionAttempt): Result.Result<ReadonlyMap<string, InspectionArtifactDescriptor>, InspectionArtifactError>;
 export {};

package/dist/inspection/artifacts.js

@@ -15,4 +15,6 @@ const __niceevalExport5 = __niceevalCanonical["projectAttemptArtifact"];
 export { __niceevalExport5 as projectAttemptArtifact };
 const __niceevalExport6 = __niceevalCanonical["readInspectionArtifactBytes"];
 export { __niceevalExport6 as readInspectionArtifactBytes };
+const __niceevalExport7 = __niceevalCanonical["readInspectionArtifactDescriptors"];
+export { __niceevalExport7 as readInspectionArtifactDescriptors };
 //# sourceMappingURL=artifacts.js.map

package/dist/inspection/assertions.cjs

@@ -3,6 +3,9 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.projectAttemptAssertionIndex = projectAttemptAssertionIndex;
 exports.projectAttemptAssertionDetail = projectAttemptAssertionDetail;
 exports.projectAttemptAssertionImage = projectAttemptAssertionImage;
+// @concord-file ne-eval-inspection-assertion-projection
+// @concord-implements docs/feature/inspection/README.md
+// @concord-implements docs/feature/assertions/README.md
 const effect_1 = require("effect");
 const content_ts_1 = require("../record/attachment/content.cjs");
 const derive_ts_1 = require("../o11y/derive.cjs");
@@ -58,7 +61,7 @@ function projectAttemptAssertionDetail(source, input, agentTurns, entryId) {
         check: projectCheck(entry),
         matcher: projectMatcher(entry, agentTurns),
     }));
-    if (jsonByteLength(result) > limits_ts_1.INSPECTION_RESULT_BYTE_LIMIT) {
+    if (jsonByteLength(result) > limits_ts_1.INSPECTION_ASSERTION_DETAIL_BYTE_LIMIT) {
         throw new Error("Assertion detail exceeds its fixed result byte limit");
     }
     return decodeAssertionDetail(result);