openpond-sdk 0.10.0 → 0.11.2

package/dist/chunk-SXTC2GT6.js

@@ -0,0 +1,160 @@
+import {
+  ExperimentImprovementCommandSchema,
+  ExperimentImprovementListSchema,
+  ExperimentImprovementOptionsSchema,
+  ExperimentImprovementStateSchema,
+  ExperimentImprovementTestRecipeSchema,
+  verifyExperimentImprovementHumanOptions,
+  verifyExperimentImprovementState
+} from "./chunk-GDJRGRHA.js";
+import {
+  fetchConnectedJson
+} from "./chunk-T4APHDES.js";
+import {
+  HarnessPolicySourcePackageSchema,
+  validateHarnessPolicySourcePackage
+} from "./chunk-4NZW4LFB.js";
+import {
+  ImmutableReleaseRefSchema,
+  contentHash,
+  sha256
+} from "./chunk-QUOW6URQ.js";
+
+// src/experiment-improvement-client.ts
+import { z as z2 } from "zod";
+
+// src/experiment-improvement-hosted-adoption.ts
+import { z } from "zod";
+var Id = z.string().min(1).max(240);
+var Hash = z.string().regex(/^[a-f0-9]{64}$/);
+var Commit = z.string().regex(/^[a-f0-9]{40}$/);
+var HostedProfileCandidateExportSchema = z.object({
+  schemaVersion: z.literal("openpond.hostedProfileCandidateExport.v1"),
+  actorId: Id,
+  teamId: Id,
+  candidateId: Id,
+  candidateRevision: z.number().int().positive(),
+  projectId: Id.nullable(),
+  profileRef: z.object({ source: z.literal("openpond_git"), repositoryId: Id, profileId: Id }).strict(),
+  expectedCommit: Commit,
+  component: ExperimentImprovementStateSchema.shape.component,
+  baseRelease: ImmutableReleaseRefSchema,
+  frozenHash: Hash,
+  executableSourceHash: Hash,
+  protectedClosureHash: Hash,
+  compiler: z.object({ workspaceId: Id, name: z.string().max(500), repositoryId: Id }).strict(),
+  sourceManifest: z.object({ base64: z.string().max(28e5), contentHash: Hash, sizeBytes: z.number().int().positive().max(2e6) }).strict(),
+  policySource: HarnessPolicySourcePackageSchema,
+  qualification: z.object({
+    kind: z.enum(["owner_attested_local", "hosted_execution"]),
+    ownerActorId: Id,
+    teamId: Id,
+    originalEvidence: ImmutableReleaseRefSchema,
+    baseline: ImmutableReleaseRefSchema,
+    candidate: ImmutableReleaseRefSchema,
+    comparisonHash: Hash,
+    recipe: ExperimentImprovementTestRecipeSchema
+  }).strict(),
+  createdAt: z.string().datetime(),
+  contentHash: Hash
+}).strict();
+function verifyHostedProfileCandidateExport(raw) {
+  const value = HostedProfileCandidateExportSchema.parse(raw), { contentHash: hash, ...body } = value;
+  if (contentHash(body) !== hash || value.qualification.ownerActorId !== value.actorId || value.qualification.teamId !== value.teamId || value.qualification.recipe.externalDatasetBinding.profileId !== value.profileRef.profileId || value.qualification.recipe.externalDatasetBinding.protectedProfileClosureHash !== value.protectedClosureHash) throw new Error("Hosted candidate owner attestation identity differs.");
+  validateHarnessPolicySourcePackage(value.policySource);
+  return value;
+}
+var HostedProfileCandidateReceiptSchema = z.object({
+  schemaVersion: z.literal("openpond.hostedProfileCandidateAdoption.v1"),
+  id: Id,
+  operationId: Id,
+  actorId: Id,
+  teamId: Id,
+  candidateId: Id,
+  exportHash: Hash,
+  executionOrigin: z.enum(["owner_attested_local", "hosted_execution"]),
+  qualification: HostedProfileCandidateExportSchema.shape.qualification,
+  testedCandidateRelease: ImmutableReleaseRefSchema,
+  activeRelease: ImmutableReleaseRefSchema,
+  expectedCommit: Commit,
+  committedProfileGit: Commit,
+  executableSourceHash: Hash,
+  protectedClosureHash: Hash,
+  createdAt: z.string().datetime(),
+  contentHash: Hash
+}).strict();
+function verifyHostedProfileCandidateReceipt(raw) {
+  const value = HostedProfileCandidateReceiptSchema.parse(raw), { contentHash: hash, ...body } = value;
+  if (contentHash(body) !== hash || value.executionOrigin !== value.qualification.kind || value.qualification.ownerActorId !== value.actorId || value.qualification.teamId !== value.teamId) throw new Error("Hosted candidate receipt integrity differs.");
+  return value;
+}
+var HostedProfileCandidateCommandSchema = z.discriminatedUnion("operation", [
+  z.object({ operation: z.literal("adopt"), operationId: Id, export: HostedProfileCandidateExportSchema }).strict(),
+  z.object({ operation: z.enum(["read", "rollback"]), operationId: Id, adoptionOperationId: Id, profileRepositoryId: Id }).strict()
+]);
+
+// src/experiment-improvement-client.ts
+var ExperimentImprovementClient = class {
+  constructor(options) {
+    this.options = options;
+    const url = new URL(options.baseUrl);
+    if (!["http:", "https:"].includes(url.protocol) || url.username || url.password || url.hash || url.search || !options.apiKey.trim() || !options.teamId.trim() || !options.actorId.trim()) throw new Error("Select the authenticated Improve owner and API origin.");
+    this.origin = url.toString().replace(/\/+$/, "");
+  }
+  options;
+  origin;
+  async hostedCandidate(raw, signal) {
+    const request = HostedProfileCandidateCommandSchema.parse(raw);
+    if (request.operation === "adopt" && (request.export.actorId !== this.options.actorId || request.export.teamId !== this.options.teamId)) throw new Error("The hosted candidate export belongs to a different owner.");
+    const { response, value } = await fetchConnectedJson(this.options.fetch ?? fetch, `${this.origin}/v1/profile-candidate-adoptions`, { method: "POST", redirect: "error", headers: { Authorization: `Bearer ${this.options.apiKey}`, "Content-Type": "application/json", "X-OpenPond-Team-Id": this.options.teamId }, body: JSON.stringify({ teamId: this.options.teamId, command: request }), signal }, (status, code, message) => Object.assign(new Error(message), { status, code }));
+    if (!response.ok) {
+      const error = z2.object({ code: z2.string(), message: z2.string().optional(), error: z2.string().optional() }).passthrough().safeParse(value);
+      throw Object.assign(new Error(error.success ? error.data.message ?? error.data.error ?? error.data.code : "Hosted candidate operation failed."), { status: response.status, code: error.success ? error.data.code : void 0 });
+    }
+    const receipt = verifyHostedProfileCandidateReceipt(value);
+    if (receipt.actorId !== this.options.actorId || receipt.teamId !== this.options.teamId || receipt.operationId !== request.operationId || request.operation === "adopt" && (receipt.exportHash !== request.export.contentHash || receipt.candidateId !== request.export.candidateId || receipt.testedCandidateRelease.contentHash !== request.export.policySource.harnessRelease.contentHash)) throw new Error("Hosted candidate readback differs from the exact owner request.");
+    return receipt;
+  }
+  async command(raw, signal) {
+    const request = ExperimentImprovementCommandSchema.parse(raw), { response, value } = await fetchConnectedJson(this.options.fetch ?? fetch, `${this.origin}/v1/experiment-improvements`, { method: "POST", redirect: "error", headers: { Authorization: `Bearer ${this.options.apiKey}`, "Content-Type": "application/json", "X-OpenPond-Team-Id": this.options.teamId }, body: JSON.stringify({ teamId: this.options.teamId, request }), signal }, (status, code, message) => Object.assign(new Error(message), { status, code }));
+    if (!response.ok) {
+      const error = z2.object({ error: z2.string(), code: z2.string().optional() }).passthrough().safeParse(value);
+      throw Object.assign(new Error(error.success ? error.data.error : "The Improve operation failed."), { status: response.status, code: error.success ? error.data.code : void 0 });
+    }
+    if (request.operation === "options") {
+      const result = ExperimentImprovementOptionsSchema.parse(value);
+      if (result.teamId !== this.options.teamId || contentHash(result.evidence) !== contentHash(request.evidence)) throw new Error("The Improve choices changed their exact originating evidence.");
+      return result;
+    }
+    if (request.operation === "humanComparisonOptions") {
+      const result = verifyExperimentImprovementHumanOptions(value);
+      if (result.candidateId !== request.id || result.actorId !== this.options.actorId || result.teamId !== this.options.teamId) throw new Error("Human discovery belongs to another owner or candidate.");
+      return result;
+    }
+    if (request.operation === "instructions") {
+      const result = z2.object({ candidateId: z2.string(), candidateRevision: z2.number().int().positive(), path: z2.string(), text: z2.string().max(25e4), textHash: z2.string().regex(/^[a-f0-9]{64}$/), contentHash: z2.string().regex(/^[a-f0-9]{64}$/) }).strict().parse(value);
+      if (result.candidateId !== request.id || sha256(result.text) !== result.textHash) throw new Error("The candidate instructions belong to a different revision.");
+      return result;
+    }
+    const page = request.operation === "list" ? ExperimentImprovementListSchema.parse(value) : null;
+    if (request.operation === "list" && page && (page.states.length > request.limit || page.states.some((state, index) => request.cursor && state.id <= request.cursor || index > 0 && state.id <= page.states[index - 1].id) || page.nextCursor && (request.cursor && page.nextCursor <= request.cursor || page.states.some((state) => state.id > page.nextCursor)))) throw new Error("The retained candidate page changed its scan boundary.");
+    const states = page ? page.states : [value];
+    const parsed = states.map((item) => {
+      const state = verifyExperimentImprovementState(item);
+      if (state.actorId !== this.options.actorId || state.teamId !== this.options.teamId || "id" in request && state.id !== request.id) throw new Error("The Improve response belongs to a different owner or candidate.");
+      if (request.operation === "start" && state.requestHash !== contentHash(request.request)) throw new Error("The Improve request identity changed.");
+      return state;
+    });
+    return page ? { states: parsed, nextCursor: page.nextCursor } : parsed[0];
+  }
+};
+
+export {
+  HostedProfileCandidateExportSchema,
+  verifyHostedProfileCandidateExport,
+  HostedProfileCandidateReceiptSchema,
+  verifyHostedProfileCandidateReceipt,
+  HostedProfileCandidateCommandSchema,
+  ExperimentImprovementClient
+};
+//# sourceMappingURL=chunk-SXTC2GT6.js.map

package/dist/chunk-SXTC2GT6.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../src/experiment-improvement-client.ts", "../src/experiment-improvement-hosted-adoption.ts"],
+  "sourcesContent": ["import {z} from \"zod\";\nimport {contentHash,sha256} from \"@openpond/harness\";\nimport {verifyExperimentImprovementHumanOptions,ExperimentImprovementListSchema,ExperimentImprovementOptionsSchema,ExperimentImprovementCommandSchema,verifyExperimentImprovementState,type ExperimentImprovementCommand} from \"./experiment-improvement-contracts.js\";\nimport {HostedProfileCandidateCommandSchema,verifyHostedProfileCandidateReceipt} from \"./experiment-improvement-hosted-adoption.js\";\nimport {fetchConnectedJson} from \"./connected-evidence-http.js\";\nexport class ExperimentImprovementClient {\n  private readonly origin:string;\n  constructor(private readonly options:{baseUrl:string;apiKey:string;teamId:string;actorId:string;fetch?:typeof fetch}){const url=new URL(options.baseUrl);if(![\"http:\",\"https:\"].includes(url.protocol)||url.username||url.password||url.hash||url.search||!options.apiKey.trim()||!options.teamId.trim()||!options.actorId.trim())throw new Error(\"Select the authenticated Improve owner and API origin.\");this.origin=url.toString().replace(/\\/+$/,\"\");}\n  async hostedCandidate(raw:import(\"zod\").input<typeof HostedProfileCandidateCommandSchema>,signal?:AbortSignal){const request=HostedProfileCandidateCommandSchema.parse(raw);if(request.operation===\"adopt\"&&(request.export.actorId!==this.options.actorId||request.export.teamId!==this.options.teamId))throw new Error(\"The hosted candidate export belongs to a different owner.\");const {response,value}=await fetchConnectedJson(this.options.fetch??fetch,`${this.origin}/v1/profile-candidate-adoptions`,{method:\"POST\",redirect:\"error\",headers:{Authorization:`Bearer ${this.options.apiKey}`,\"Content-Type\":\"application/json\",\"X-OpenPond-Team-Id\":this.options.teamId},body:JSON.stringify({teamId:this.options.teamId,command:request}),signal},(status,code,message)=>Object.assign(new Error(message),{status,code}));if(!response.ok){const error=z.object({code:z.string(),message:z.string().optional(),error:z.string().optional()}).passthrough().safeParse(value);throw Object.assign(new Error(error.success?error.data.message??error.data.error??error.data.code:\"Hosted candidate operation failed.\"),{status:response.status,code:error.success?error.data.code:undefined});}const receipt=verifyHostedProfileCandidateReceipt(value);if(receipt.actorId!==this.options.actorId||receipt.teamId!==this.options.teamId||receipt.operationId!==request.operationId||request.operation===\"adopt\"&&(receipt.exportHash!==request.export.contentHash||receipt.candidateId!==request.export.candidateId||receipt.testedCandidateRelease.contentHash!==request.export.policySource.harnessRelease.contentHash))throw new Error(\"Hosted candidate readback differs from the exact owner request.\");return receipt;}\n  async command(raw:ExperimentImprovementCommand,signal?:AbortSignal){const request=ExperimentImprovementCommandSchema.parse(raw),{response,value}=await fetchConnectedJson(this.options.fetch??fetch,`${this.origin}/v1/experiment-improvements`,{method:\"POST\",redirect:\"error\",headers:{Authorization:`Bearer ${this.options.apiKey}`,\"Content-Type\":\"application/json\",\"X-OpenPond-Team-Id\":this.options.teamId},body:JSON.stringify({teamId:this.options.teamId,request}),signal},(status,code,message)=>Object.assign(new Error(message),{status,code}));\n    if(!response.ok){const error=z.object({error:z.string(),code:z.string().optional()}).passthrough().safeParse(value);throw Object.assign(new Error(error.success?error.data.error:\"The Improve operation failed.\"),{status:response.status,code:error.success?error.data.code:undefined});}\n    if(request.operation===\"options\"){const result=ExperimentImprovementOptionsSchema.parse(value);if(result.teamId!==this.options.teamId||contentHash(result.evidence)!==contentHash(request.evidence))throw new Error(\"The Improve choices changed their exact originating evidence.\");return result;}\n    if(request.operation===\"humanComparisonOptions\"){const result=verifyExperimentImprovementHumanOptions(value);if(result.candidateId!==request.id||result.actorId!==this.options.actorId||result.teamId!==this.options.teamId)throw new Error(\"Human discovery belongs to another owner or candidate.\");return result;}\n    if(request.operation===\"instructions\"){const result=z.object({candidateId:z.string(),candidateRevision:z.number().int().positive(),path:z.string(),text:z.string().max(250000),textHash:z.string().regex(/^[a-f0-9]{64}$/),contentHash:z.string().regex(/^[a-f0-9]{64}$/)}).strict().parse(value);if(result.candidateId!==request.id||sha256(result.text)!==result.textHash)throw new Error(\"The candidate instructions belong to a different revision.\");return result;}\n    const page=request.operation===\"list\"?ExperimentImprovementListSchema.parse(value):null;if(request.operation===\"list\"&&page&&(page.states.length>request.limit||page.states.some((state,index)=>request.cursor&&state.id<=request.cursor||index>0&&state.id<=page.states[index-1]!.id)||page.nextCursor&&(request.cursor&&page.nextCursor<=request.cursor||page.states.some(state=>state.id>page.nextCursor!))))throw new Error(\"The retained candidate page changed its scan boundary.\");\n    const states=page? page.states:[value];const parsed=states.map(item=>{const state=verifyExperimentImprovementState(item);if(state.actorId!==this.options.actorId||state.teamId!==this.options.teamId||\"id\" in request&&state.id!==request.id)throw new Error(\"The Improve response belongs to a different owner or candidate.\");if(request.operation===\"start\"&&state.requestHash!==contentHash(request.request))throw new Error(\"The Improve request identity changed.\");return state;});return page?{states:parsed,nextCursor:page.nextCursor}:parsed[0]!;\n  }\n}\n", "import {z} from \"zod\";\nimport {contentHash,ImmutableReleaseRefSchema,HarnessPolicySourcePackageSchema,validateHarnessPolicySourcePackage} from \"@openpond/harness\";\nimport {ExperimentImprovementTestRecipeSchema,ExperimentImprovementStateSchema} from \"./experiment-improvement-contracts.js\";\nconst Id=z.string().min(1).max(240),Hash=z.string().regex(/^[a-f0-9]{64}$/),Commit=z.string().regex(/^[a-f0-9]{40}$/);\n/** This export attests native owner execution. It never asserts a hosted run,\n * grants training eligibility, or authorizes automatic candidate adoption. */\nexport const HostedProfileCandidateExportSchema=z.object({schemaVersion:z.literal(\"openpond.hostedProfileCandidateExport.v1\"),\n  actorId:Id,teamId:Id,candidateId:Id,candidateRevision:z.number().int().positive(),projectId:Id.nullable(),\n  profileRef:z.object({source:z.literal(\"openpond_git\"),repositoryId:Id,profileId:Id}).strict(),expectedCommit:Commit,\n  component:ExperimentImprovementStateSchema.shape.component,baseRelease:ImmutableReleaseRefSchema,\n  frozenHash:Hash,executableSourceHash:Hash,protectedClosureHash:Hash,\n  compiler:z.object({workspaceId:Id,name:z.string().max(500),repositoryId:Id}).strict(),\n  sourceManifest:z.object({base64:z.string().max(2_800_000),contentHash:Hash,sizeBytes:z.number().int().positive().max(2_000_000)}).strict(),\n  policySource:HarnessPolicySourcePackageSchema,\n  qualification:z.object({kind:z.enum([\"owner_attested_local\",\"hosted_execution\"]),ownerActorId:Id,teamId:Id,originalEvidence:ImmutableReleaseRefSchema,\n    baseline:ImmutableReleaseRefSchema,candidate:ImmutableReleaseRefSchema,comparisonHash:Hash,recipe:ExperimentImprovementTestRecipeSchema}).strict(),\n  createdAt:z.string().datetime(),contentHash:Hash}).strict();\nexport type HostedProfileCandidateExport=z.infer<typeof HostedProfileCandidateExportSchema>;\nexport function verifyHostedProfileCandidateExport(raw:unknown){const value=HostedProfileCandidateExportSchema.parse(raw),{contentHash:hash,...body}=value;\n  if(contentHash(body)!==hash||value.qualification.ownerActorId!==value.actorId||value.qualification.teamId!==value.teamId||value.qualification.recipe.externalDatasetBinding.profileId!==value.profileRef.profileId||value.qualification.recipe.externalDatasetBinding.protectedProfileClosureHash!==value.protectedClosureHash)throw new Error(\"Hosted candidate owner attestation identity differs.\");\n  validateHarnessPolicySourcePackage(value.policySource);return value;\n}\nexport const HostedProfileCandidateReceiptSchema=z.object({schemaVersion:z.literal(\"openpond.hostedProfileCandidateAdoption.v1\"),id:Id,operationId:Id,actorId:Id,teamId:Id,\n  candidateId:Id,exportHash:Hash,executionOrigin:z.enum([\"owner_attested_local\",\"hosted_execution\"]),qualification:HostedProfileCandidateExportSchema.shape.qualification,\n  testedCandidateRelease:ImmutableReleaseRefSchema,activeRelease:ImmutableReleaseRefSchema,expectedCommit:Commit,committedProfileGit:Commit,\n  executableSourceHash:Hash,protectedClosureHash:Hash,createdAt:z.string().datetime(),contentHash:Hash}).strict();\nexport type HostedProfileCandidateReceipt=z.infer<typeof HostedProfileCandidateReceiptSchema>;\nexport function verifyHostedProfileCandidateReceipt(raw:unknown){const value=HostedProfileCandidateReceiptSchema.parse(raw),{contentHash:hash,...body}=value;if(contentHash(body)!==hash||value.executionOrigin!==value.qualification.kind||value.qualification.ownerActorId!==value.actorId||value.qualification.teamId!==value.teamId)throw new Error(\"Hosted candidate receipt integrity differs.\");return value;}\nexport const HostedProfileCandidateCommandSchema=z.discriminatedUnion(\"operation\",[\n z.object({operation:z.literal(\"adopt\"),operationId:Id,export:HostedProfileCandidateExportSchema}).strict(),\n z.object({operation:z.enum([\"read\",\"rollback\"]),operationId:Id,adoptionOperationId:Id,profileRepositoryId:Id}).strict(),\n]);\n"],
+  "mappings": ";;;;;;;;;;;;;;;;;;;;;;;AAAA,SAAQ,KAAAA,UAAQ;;;ACAhB,SAAQ,SAAQ;AAGhB,IAAM,KAAG,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAlC,IAAoC,OAAK,EAAE,OAAO,EAAE,MAAM,gBAAgB;AAA1E,IAA4E,SAAO,EAAE,OAAO,EAAE,MAAM,gBAAgB;AAG7G,IAAM,qCAAmC,EAAE,OAAO;AAAA,EAAC,eAAc,EAAE,QAAQ,0CAA0C;AAAA,EAC1H,SAAQ;AAAA,EAAG,QAAO;AAAA,EAAG,aAAY;AAAA,EAAG,mBAAkB,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS;AAAA,EAAE,WAAU,GAAG,SAAS;AAAA,EACxG,YAAW,EAAE,OAAO,EAAC,QAAO,EAAE,QAAQ,cAAc,GAAE,cAAa,IAAG,WAAU,GAAE,CAAC,EAAE,OAAO;AAAA,EAAE,gBAAe;AAAA,EAC7G,WAAU,iCAAiC,MAAM;AAAA,EAAU,aAAY;AAAA,EACvE,YAAW;AAAA,EAAK,sBAAqB;AAAA,EAAK,sBAAqB;AAAA,EAC/D,UAAS,EAAE,OAAO,EAAC,aAAY,IAAG,MAAK,EAAE,OAAO,EAAE,IAAI,GAAG,GAAE,cAAa,GAAE,CAAC,EAAE,OAAO;AAAA,EACpF,gBAAe,EAAE,OAAO,EAAC,QAAO,EAAE,OAAO,EAAE,IAAI,IAAS,GAAE,aAAY,MAAK,WAAU,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,GAAS,EAAC,CAAC,EAAE,OAAO;AAAA,EACzI,cAAa;AAAA,EACb,eAAc,EAAE,OAAO;AAAA,IAAC,MAAK,EAAE,KAAK,CAAC,wBAAuB,kBAAkB,CAAC;AAAA,IAAE,cAAa;AAAA,IAAG,QAAO;AAAA,IAAG,kBAAiB;AAAA,IAC1H,UAAS;AAAA,IAA0B,WAAU;AAAA,IAA0B,gBAAe;AAAA,IAAK,QAAO;AAAA,EAAqC,CAAC,EAAE,OAAO;AAAA,EACnJ,WAAU,EAAE,OAAO,EAAE,SAAS;AAAA,EAAE,aAAY;AAAI,CAAC,EAAE,OAAO;AAErD,SAAS,mCAAmC,KAAY;AAAC,QAAM,QAAM,mCAAmC,MAAM,GAAG,GAAE,EAAC,aAAY,MAAK,GAAG,KAAI,IAAE;AACnJ,MAAG,YAAY,IAAI,MAAI,QAAM,MAAM,cAAc,iBAAe,MAAM,WAAS,MAAM,cAAc,WAAS,MAAM,UAAQ,MAAM,cAAc,OAAO,uBAAuB,cAAY,MAAM,WAAW,aAAW,MAAM,cAAc,OAAO,uBAAuB,gCAA8B,MAAM,qBAAqB,OAAM,IAAI,MAAM,sDAAsD;AACrY,qCAAmC,MAAM,YAAY;AAAE,SAAO;AAChE;AACO,IAAM,sCAAoC,EAAE,OAAO;AAAA,EAAC,eAAc,EAAE,QAAQ,4CAA4C;AAAA,EAAE,IAAG;AAAA,EAAG,aAAY;AAAA,EAAG,SAAQ;AAAA,EAAG,QAAO;AAAA,EACtK,aAAY;AAAA,EAAG,YAAW;AAAA,EAAK,iBAAgB,EAAE,KAAK,CAAC,wBAAuB,kBAAkB,CAAC;AAAA,EAAE,eAAc,mCAAmC,MAAM;AAAA,EAC1J,wBAAuB;AAAA,EAA0B,eAAc;AAAA,EAA0B,gBAAe;AAAA,EAAO,qBAAoB;AAAA,EACnI,sBAAqB;AAAA,EAAK,sBAAqB;AAAA,EAAK,WAAU,EAAE,OAAO,EAAE,SAAS;AAAA,EAAE,aAAY;AAAI,CAAC,EAAE,OAAO;AAEzG,SAAS,oCAAoC,KAAY;AAAC,QAAM,QAAM,oCAAoC,MAAM,GAAG,GAAE,EAAC,aAAY,MAAK,GAAG,KAAI,IAAE;AAAM,MAAG,YAAY,IAAI,MAAI,QAAM,MAAM,oBAAkB,MAAM,cAAc,QAAM,MAAM,cAAc,iBAAe,MAAM,WAAS,MAAM,cAAc,WAAS,MAAM,OAAO,OAAM,IAAI,MAAM,6CAA6C;AAAE,SAAO;AAAM;AAC7Y,IAAM,sCAAoC,EAAE,mBAAmB,aAAY;AAAA,EACjF,EAAE,OAAO,EAAC,WAAU,EAAE,QAAQ,OAAO,GAAE,aAAY,IAAG,QAAO,mCAAkC,CAAC,EAAE,OAAO;AAAA,EACzG,EAAE,OAAO,EAAC,WAAU,EAAE,KAAK,CAAC,QAAO,UAAU,CAAC,GAAE,aAAY,IAAG,qBAAoB,IAAG,qBAAoB,GAAE,CAAC,EAAE,OAAO;AACvH,CAAC;;;AD1BM,IAAM,8BAAN,MAAkC;AAAA,EAEvC,YAA6B,SAAwF;AAAxF;AAAyF,UAAM,MAAI,IAAI,IAAI,QAAQ,OAAO;AAAE,QAAG,CAAC,CAAC,SAAQ,QAAQ,EAAE,SAAS,IAAI,QAAQ,KAAG,IAAI,YAAU,IAAI,YAAU,IAAI,QAAM,IAAI,UAAQ,CAAC,QAAQ,OAAO,KAAK,KAAG,CAAC,QAAQ,OAAO,KAAK,KAAG,CAAC,QAAQ,QAAQ,KAAK,EAAE,OAAM,IAAI,MAAM,wDAAwD;AAAE,SAAK,SAAO,IAAI,SAAS,EAAE,QAAQ,QAAO,EAAE;AAAA,EAAE;AAAA,EAA7Z;AAAA,EADZ;AAAA,EAEjB,MAAM,gBAAgB,KAAoE,QAAoB;AAAC,UAAM,UAAQ,oCAAoC,MAAM,GAAG;AAAE,QAAG,QAAQ,cAAY,YAAU,QAAQ,OAAO,YAAU,KAAK,QAAQ,WAAS,QAAQ,OAAO,WAAS,KAAK,QAAQ,QAAQ,OAAM,IAAI,MAAM,2DAA2D;AAAE,UAAM,EAAC,UAAS,MAAK,IAAE,MAAM,mBAAmB,KAAK,QAAQ,SAAO,OAAM,GAAG,KAAK,MAAM,mCAAkC,EAAC,QAAO,QAAO,UAAS,SAAQ,SAAQ,EAAC,eAAc,UAAU,KAAK,QAAQ,MAAM,IAAG,gBAAe,oBAAmB,sBAAqB,KAAK,QAAQ,OAAM,GAAE,MAAK,KAAK,UAAU,EAAC,QAAO,KAAK,QAAQ,QAAO,SAAQ,QAAO,CAAC,GAAE,OAAM,GAAE,CAAC,QAAO,MAAK,YAAU,OAAO,OAAO,IAAI,MAAM,OAAO,GAAE,EAAC,QAAO,KAAI,CAAC,CAAC;AAAE,QAAG,CAAC,SAAS,IAAG;AAAC,YAAM,QAAMC,GAAE,OAAO,EAAC,MAAKA,GAAE,OAAO,GAAE,SAAQA,GAAE,OAAO,EAAE,SAAS,GAAE,OAAMA,GAAE,OAAO,EAAE,SAAS,EAAC,CAAC,EAAE,YAAY,EAAE,UAAU,KAAK;AAAE,YAAM,OAAO,OAAO,IAAI,MAAM,MAAM,UAAQ,MAAM,KAAK,WAAS,MAAM,KAAK,SAAO,MAAM,KAAK,OAAK,oCAAoC,GAAE,EAAC,QAAO,SAAS,QAAO,MAAK,MAAM,UAAQ,MAAM,KAAK,OAAK,OAAS,CAAC;AAAA,IAAE;AAAC,UAAM,UAAQ,oCAAoC,KAAK;AAAE,QAAG,QAAQ,YAAU,KAAK,QAAQ,WAAS,QAAQ,WAAS,KAAK,QAAQ,UAAQ,QAAQ,gBAAc,QAAQ,eAAa,QAAQ,cAAY,YAAU,QAAQ,eAAa,QAAQ,OAAO,eAAa,QAAQ,gBAAc,QAAQ,OAAO,eAAa,QAAQ,uBAAuB,gBAAc,QAAQ,OAAO,aAAa,eAAe,aAAa,OAAM,IAAI,MAAM,iEAAiE;AAAE,WAAO;AAAA,EAAQ;AAAA,EACpoD,MAAM,QAAQ,KAAiC,QAAoB;AAAC,UAAM,UAAQ,mCAAmC,MAAM,GAAG,GAAE,EAAC,UAAS,MAAK,IAAE,MAAM,mBAAmB,KAAK,QAAQ,SAAO,OAAM,GAAG,KAAK,MAAM,+BAA8B,EAAC,QAAO,QAAO,UAAS,SAAQ,SAAQ,EAAC,eAAc,UAAU,KAAK,QAAQ,MAAM,IAAG,gBAAe,oBAAmB,sBAAqB,KAAK,QAAQ,OAAM,GAAE,MAAK,KAAK,UAAU,EAAC,QAAO,KAAK,QAAQ,QAAO,QAAO,CAAC,GAAE,OAAM,GAAE,CAAC,QAAO,MAAK,YAAU,OAAO,OAAO,IAAI,MAAM,OAAO,GAAE,EAAC,QAAO,KAAI,CAAC,CAAC;AACzhB,QAAG,CAAC,SAAS,IAAG;AAAC,YAAM,QAAMA,GAAE,OAAO,EAAC,OAAMA,GAAE,OAAO,GAAE,MAAKA,GAAE,OAAO,EAAE,SAAS,EAAC,CAAC,EAAE,YAAY,EAAE,UAAU,KAAK;AAAE,YAAM,OAAO,OAAO,IAAI,MAAM,MAAM,UAAQ,MAAM,KAAK,QAAM,+BAA+B,GAAE,EAAC,QAAO,SAAS,QAAO,MAAK,MAAM,UAAQ,MAAM,KAAK,OAAK,OAAS,CAAC;AAAA,IAAE;AACzR,QAAG,QAAQ,cAAY,WAAU;AAAC,YAAM,SAAO,mCAAmC,MAAM,KAAK;AAAE,UAAG,OAAO,WAAS,KAAK,QAAQ,UAAQ,YAAY,OAAO,QAAQ,MAAI,YAAY,QAAQ,QAAQ,EAAE,OAAM,IAAI,MAAM,+DAA+D;AAAE,aAAO;AAAA,IAAO;AACnS,QAAG,QAAQ,cAAY,0BAAyB;AAAC,YAAM,SAAO,wCAAwC,KAAK;AAAE,UAAG,OAAO,gBAAc,QAAQ,MAAI,OAAO,YAAU,KAAK,QAAQ,WAAS,OAAO,WAAS,KAAK,QAAQ,OAAO,OAAM,IAAI,MAAM,wDAAwD;AAAE,aAAO;AAAA,IAAO;AACpT,QAAG,QAAQ,cAAY,gBAAe;AAAC,YAAM,SAAOA,GAAE,OAAO,EAAC,aAAYA,GAAE,OAAO,GAAE,mBAAkBA,GAAE,OAAO,EAAE,IAAI,EAAE,SAAS,GAAE,MAAKA,GAAE,OAAO,GAAE,MAAKA,GAAE,OAAO,EAAE,IAAI,IAAM,GAAE,UAASA,GAAE,OAAO,EAAE,MAAM,gBAAgB,GAAE,aAAYA,GAAE,OAAO,EAAE,MAAM,gBAAgB,EAAC,CAAC,EAAE,OAAO,EAAE,MAAM,KAAK;AAAE,UAAG,OAAO,gBAAc,QAAQ,MAAI,OAAO,OAAO,IAAI,MAAI,OAAO,SAAS,OAAM,IAAI,MAAM,4DAA4D;AAAE,aAAO;AAAA,IAAO;AACxc,UAAM,OAAK,QAAQ,cAAY,SAAO,gCAAgC,MAAM,KAAK,IAAE;AAAK,QAAG,QAAQ,cAAY,UAAQ,SAAO,KAAK,OAAO,SAAO,QAAQ,SAAO,KAAK,OAAO,KAAK,CAAC,OAAM,UAAQ,QAAQ,UAAQ,MAAM,MAAI,QAAQ,UAAQ,QAAM,KAAG,MAAM,MAAI,KAAK,OAAO,QAAM,CAAC,EAAG,EAAE,KAAG,KAAK,eAAa,QAAQ,UAAQ,KAAK,cAAY,QAAQ,UAAQ,KAAK,OAAO,KAAK,WAAO,MAAM,KAAG,KAAK,UAAW,IAAI,OAAM,IAAI,MAAM,wDAAwD;AACxd,UAAM,SAAO,OAAM,KAAK,SAAO,CAAC,KAAK;AAAE,UAAM,SAAO,OAAO,IAAI,UAAM;AAAC,YAAM,QAAM,iCAAiC,IAAI;AAAE,UAAG,MAAM,YAAU,KAAK,QAAQ,WAAS,MAAM,WAAS,KAAK,QAAQ,UAAQ,QAAQ,WAAS,MAAM,OAAK,QAAQ,GAAG,OAAM,IAAI,MAAM,iEAAiE;AAAE,UAAG,QAAQ,cAAY,WAAS,MAAM,gBAAc,YAAY,QAAQ,OAAO,EAAE,OAAM,IAAI,MAAM,uCAAuC;AAAE,aAAO;AAAA,IAAM,CAAC;AAAE,WAAO,OAAK,EAAC,QAAO,QAAO,YAAW,KAAK,WAAU,IAAE,OAAO,CAAC;AAAA,EAC3hB;AACF;",
+  "names": ["z", "z"]
+}

package/dist/chunk-T4APHDES.js

@@ -0,0 +1,74 @@
+// src/connected-evidence-http.ts
+var MAX_RESPONSE_BYTES = 8 * 1024 * 1024;
+async function fetchConnectedJson(fetcher, url, init, error) {
+  const controller = new AbortController(), external = init.signal;
+  const forward = () => controller.abort(external?.reason);
+  if (external?.aborted) forward();
+  else external?.addEventListener("abort", forward, { once: true });
+  const timer = setTimeout(() => controller.abort(new Error("Connected evidence request timed out.")), 6e4);
+  let reader;
+  const abortReader = () => {
+    if (reader) void reader.cancel(controller.signal.reason).catch(() => void 0);
+  };
+  controller.signal.addEventListener("abort", abortReader, { once: true });
+  const abortPromise = new Promise((_, reject) => {
+    const abort = () => reject(controller.signal.reason ?? new DOMException("Request aborted", "AbortError"));
+    if (controller.signal.aborted) abort();
+    else controller.signal.addEventListener("abort", abort, { once: true });
+  });
+  try {
+    const pendingResponse = fetcher(url, { ...init, signal: controller.signal }).then((response2) => {
+      if (controller.signal.aborted) {
+        void response2.body?.cancel(controller.signal.reason).catch(() => void 0);
+        throw controller.signal.reason;
+      }
+      return response2;
+    });
+    const response = await Promise.race([pendingResponse, abortPromise]);
+    const declared = response.headers.get("content-length");
+    reader = response.body?.getReader();
+    if (controller.signal.aborted) {
+      await reader?.cancel(controller.signal.reason);
+      throw controller.signal.reason;
+    }
+    if (declared && Number(declared) > MAX_RESPONSE_BYTES) {
+      await reader?.cancel();
+      throw error(502, "connected_response_too_large", "Connected evidence response exceeds 8 MiB.");
+    }
+    const chunks = [];
+    let size = 0;
+    if (reader) while (true) {
+      const part = await Promise.race([reader.read(), abortPromise]);
+      if (part.done) break;
+      size += part.value.byteLength;
+      if (size > MAX_RESPONSE_BYTES) {
+        await reader.cancel();
+        throw error(502, "connected_response_too_large", "Connected evidence response exceeds 8 MiB.");
+      }
+      chunks.push(part.value);
+    }
+    const bytes = new Uint8Array(size);
+    let offset = 0;
+    for (const chunk of chunks) {
+      bytes.set(chunk, offset);
+      offset += chunk.byteLength;
+    }
+    let value;
+    try {
+      value = JSON.parse(new TextDecoder("utf-8", { fatal: true }).decode(bytes));
+    } catch {
+      throw error(502, "connected_response_invalid", "Connected evidence response is not valid JSON.");
+    }
+    return { response, value };
+  } finally {
+    clearTimeout(timer);
+    external?.removeEventListener("abort", forward);
+    controller.signal.removeEventListener("abort", abortReader);
+    reader?.releaseLock();
+  }
+}
+
+export {
+  fetchConnectedJson
+};
+//# sourceMappingURL=chunk-T4APHDES.js.map

package/dist/chunk-T4APHDES.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../src/connected-evidence-http.ts"],
+  "sourcesContent": ["const MAX_RESPONSE_BYTES = 8 * 1024 * 1024;\n/** Bounds real streaming responses, including custom fetch adapters that do not honor abort themselves. */\nexport async function fetchConnectedJson(fetcher: typeof fetch, url: string, init: RequestInit, error: (status: number, code: string, message: string) => Error) {\n  const controller = new AbortController(), external = init.signal;\n  const forward = () => controller.abort(external?.reason);\n  if (external?.aborted) forward(); else external?.addEventListener(\"abort\", forward, { once: true });\n  const timer = setTimeout(() => controller.abort(new Error(\"Connected evidence request timed out.\")), 60_000);\n  let reader: ReadableStreamDefaultReader<Uint8Array> | undefined;\n  const abortReader = () => { if (reader) void reader.cancel(controller.signal.reason).catch(() => undefined); };\n  controller.signal.addEventListener(\"abort\", abortReader, { once: true });\n  const abortPromise = new Promise<never>((_, reject) => {\n    const abort = () => reject(controller.signal.reason ?? new DOMException(\"Request aborted\", \"AbortError\"));\n    if (controller.signal.aborted) abort(); else controller.signal.addEventListener(\"abort\", abort, { once: true });\n  });\n  try {\n    const pendingResponse = fetcher(url, { ...init, signal: controller.signal }).then(response => {\n      if (controller.signal.aborted) { void response.body?.cancel(controller.signal.reason).catch(() => undefined); throw controller.signal.reason; }\n      return response;\n    });\n    const response = await Promise.race([pendingResponse, abortPromise]);\n    const declared = response.headers.get(\"content-length\");\n    reader = response.body?.getReader();\n    if (controller.signal.aborted) { await reader?.cancel(controller.signal.reason); throw controller.signal.reason; }\n    if (declared && Number(declared) > MAX_RESPONSE_BYTES) { await reader?.cancel(); throw error(502, \"connected_response_too_large\", \"Connected evidence response exceeds 8 MiB.\"); }\n    const chunks: Uint8Array[] = []; let size = 0;\n    if (reader) while (true) {\n      const part = await Promise.race([reader.read(), abortPromise]);\n      if (part.done) break;\n      size += part.value.byteLength;\n      if (size > MAX_RESPONSE_BYTES) { await reader.cancel(); throw error(502, \"connected_response_too_large\", \"Connected evidence response exceeds 8 MiB.\"); }\n      chunks.push(part.value);\n    }\n    const bytes = new Uint8Array(size); let offset = 0;\n    for (const chunk of chunks) { bytes.set(chunk, offset); offset += chunk.byteLength; }\n    let value: unknown;\n    try { value = JSON.parse(new TextDecoder(\"utf-8\", { fatal: true }).decode(bytes)); }\n    catch { throw error(502, \"connected_response_invalid\", \"Connected evidence response is not valid JSON.\"); }\n    return { response, value };\n  } finally { clearTimeout(timer); external?.removeEventListener(\"abort\", forward); controller.signal.removeEventListener(\"abort\", abortReader); reader?.releaseLock(); }\n}\n"],
+  "mappings": ";AAAA,IAAM,qBAAqB,IAAI,OAAO;AAEtC,eAAsB,mBAAmB,SAAuB,KAAa,MAAmB,OAAiE;AAC/J,QAAM,aAAa,IAAI,gBAAgB,GAAG,WAAW,KAAK;AAC1D,QAAM,UAAU,MAAM,WAAW,MAAM,UAAU,MAAM;AACvD,MAAI,UAAU,QAAS,SAAQ;AAAA,MAAQ,WAAU,iBAAiB,SAAS,SAAS,EAAE,MAAM,KAAK,CAAC;AAClG,QAAM,QAAQ,WAAW,MAAM,WAAW,MAAM,IAAI,MAAM,uCAAuC,CAAC,GAAG,GAAM;AAC3G,MAAI;AACJ,QAAM,cAAc,MAAM;AAAE,QAAI,OAAQ,MAAK,OAAO,OAAO,WAAW,OAAO,MAAM,EAAE,MAAM,MAAM,MAAS;AAAA,EAAG;AAC7G,aAAW,OAAO,iBAAiB,SAAS,aAAa,EAAE,MAAM,KAAK,CAAC;AACvE,QAAM,eAAe,IAAI,QAAe,CAAC,GAAG,WAAW;AACrD,UAAM,QAAQ,MAAM,OAAO,WAAW,OAAO,UAAU,IAAI,aAAa,mBAAmB,YAAY,CAAC;AACxG,QAAI,WAAW,OAAO,QAAS,OAAM;AAAA,QAAQ,YAAW,OAAO,iBAAiB,SAAS,OAAO,EAAE,MAAM,KAAK,CAAC;AAAA,EAChH,CAAC;AACD,MAAI;AACF,UAAM,kBAAkB,QAAQ,KAAK,EAAE,GAAG,MAAM,QAAQ,WAAW,OAAO,CAAC,EAAE,KAAK,CAAAA,cAAY;AAC5F,UAAI,WAAW,OAAO,SAAS;AAAE,aAAKA,UAAS,MAAM,OAAO,WAAW,OAAO,MAAM,EAAE,MAAM,MAAM,MAAS;AAAG,cAAM,WAAW,OAAO;AAAA,MAAQ;AAC9I,aAAOA;AAAA,IACT,CAAC;AACD,UAAM,WAAW,MAAM,QAAQ,KAAK,CAAC,iBAAiB,YAAY,CAAC;AACnE,UAAM,WAAW,SAAS,QAAQ,IAAI,gBAAgB;AACtD,aAAS,SAAS,MAAM,UAAU;AAClC,QAAI,WAAW,OAAO,SAAS;AAAE,YAAM,QAAQ,OAAO,WAAW,OAAO,MAAM;AAAG,YAAM,WAAW,OAAO;AAAA,IAAQ;AACjH,QAAI,YAAY,OAAO,QAAQ,IAAI,oBAAoB;AAAE,YAAM,QAAQ,OAAO;AAAG,YAAM,MAAM,KAAK,gCAAgC,4CAA4C;AAAA,IAAG;AACjL,UAAM,SAAuB,CAAC;AAAG,QAAI,OAAO;AAC5C,QAAI,OAAQ,QAAO,MAAM;AACvB,YAAM,OAAO,MAAM,QAAQ,KAAK,CAAC,OAAO,KAAK,GAAG,YAAY,CAAC;AAC7D,UAAI,KAAK,KAAM;AACf,cAAQ,KAAK,MAAM;AACnB,UAAI,OAAO,oBAAoB;AAAE,cAAM,OAAO,OAAO;AAAG,cAAM,MAAM,KAAK,gCAAgC,4CAA4C;AAAA,MAAG;AACxJ,aAAO,KAAK,KAAK,KAAK;AAAA,IACxB;AACA,UAAM,QAAQ,IAAI,WAAW,IAAI;AAAG,QAAI,SAAS;AACjD,eAAW,SAAS,QAAQ;AAAE,YAAM,IAAI,OAAO,MAAM;AAAG,gBAAU,MAAM;AAAA,IAAY;AACpF,QAAI;AACJ,QAAI;AAAE,cAAQ,KAAK,MAAM,IAAI,YAAY,SAAS,EAAE,OAAO,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;AAAA,IAAG,QAC7E;AAAE,YAAM,MAAM,KAAK,8BAA8B,gDAAgD;AAAA,IAAG;AAC1G,WAAO,EAAE,UAAU,MAAM;AAAA,EAC3B,UAAE;AAAU,iBAAa,KAAK;AAAG,cAAU,oBAAoB,SAAS,OAAO;AAAG,eAAW,OAAO,oBAAoB,SAAS,WAAW;AAAG,YAAQ,YAAY;AAAA,EAAG;AACxK;",
+  "names": ["response"]
+}