@axtary/ledger 0.0.1

package/README.md

@@ -0,0 +1,35 @@
+# @axtary/ledger
+
+Append-only JSONL action ledger with hash-chain verification for Axtary.
+
+This package is private workspace code while the local runtime plane is still being shaped.
+
+## What It Does
+
+- Appends Axtary ledger records to local JSONL.
+- Maintains a `previousLedgerHash -> ledgerHash` chain.
+- Reads ledger records back in order.
+- Verifies hash-chain continuity and record integrity.
+- Exports verified records by inclusive date range and decision type.
+- Formats verified exports as JSON, raw ledger JSONL, or SIEM-friendly JSONL events.
+- Syncs a verified export to an optional hosted endpoint.
+- Fails closed on malformed JSONL records.
+- Carries trace IDs and sanitized provider evidence for GitHub, Slack, and Linear records when that evidence was present at decision time.
+
+## Design Notes
+
+The ledger is local-first. It is not a database, SIEM, or remote audit service. It gives the proxy and adapters a durable local trail that can later be uploaded, exported, or re-verified. Export and sync both verify the full hash chain before returning or sending filtered records. SIEM JSONL events include timestamps, trace IDs, outcomes, provider/resource summaries, policy metadata, reasons, and hashes without expanding protected action payloads or credential-bearing provider responses.
+
+Hosted sync should use signed ledger sync tokens rather than dashboard user sessions. Sync tokens carry a signed `kid` so hosted verification can rotate keys with `AXTARY_LEDGER_SYNC_TOKEN_KID` and a JSON `AXTARY_LEDGER_SYNC_TOKEN_SECRETS` keyring. Hosted retention can be bounded with `AXTARY_LEDGER_SYNC_MAX_BATCHES`, `AXTARY_LEDGER_SYNC_MAX_AGE_DAYS`, or stricter limits embedded in the signed sync token.
+
+The hosted sync store now sits behind a persistence adapter. The default adapter is local JSON at `.axtary/hosted-ledger-sync.json`; set `AXTARY_LEDGER_SYNC_STORE=neon` plus `AXTARY_LEDGER_SYNC_DATABASE_URL` to use the Neon/Postgres adapter. Apply `migrations/neon/001_hosted_ledger_sync_batches.sql` for deployed environments; `docs/neon-hosted-sync-runbook.md` covers the hosted setup and verification flow. Source file paths can be reduced before storage with `AXTARY_LEDGER_SYNC_REDACT_SOURCE_FILE_PATH=basename` or `redact`. Hash-bound ledger record fields are preserved so synced evidence remains verifiable.
+
+Hosted audit search is available through `/api/ledger/sync?view=records` with optional `q`, `decision`, `from`, `to`, and `limit` query parameters. The ledger dashboard exposes those filters for tenant-scoped synced evidence, including record detail inspection, normalized provider resources, GitHub diff/file summaries, Slack channel/message evidence, Linear issue field changes, trace IDs, and batch-id drilldown. SIEM exports remain available through `/api/ledger/sync?format=siem-jsonl`.
+
+Fail-closed and secret boundaries:
+
+- Ledger export fails if any source record breaks JSON parsing, previous-hash continuity, or record-hash integrity.
+- Hosted sync accepts only verified exports through the sync route and keeps provider credentials, sync tokens, dashboard sessions, cookies, and auth headers out of stored batches and browser payloads.
+- Provider evidence is extracted from normalized actions, not raw provider HTTP responses. GitHub content payloads record paths and lengths rather than file bodies unless an explicit sanitized diff is supplied.
+
+Concurrent writers should coordinate through a single process or external file lock. The first proxy should own writes for a given ledger file.

package/dist/index.d.ts

@@ -0,0 +1,324 @@
+import { type LedgerRecord, type NormalizedAction, type PolicyDecision } from "@axtary/actionpass";
+import { z } from "zod";
+export declare const LOCAL_LEDGER_SCHEMA_VERSION = "axtary.local-ledger.v0";
+export declare const LEDGER_EXPORT_SCHEMA_VERSION = "axtary.ledger_export.v0";
+export declare const LEDGER_SYNC_SCHEMA_VERSION = "axtary.ledger_sync.v0";
+export declare const LEDGER_SIEM_EVENT_SCHEMA_VERSION = "axtary.siem_event.v0";
+export declare const LedgerAppendResultSchema: z.ZodObject<{
+    record: z.ZodObject<{
+        schemaVersion: z.ZodLiteral<"axtary.ledger.v0">;
+        id: z.ZodString;
+        occurredAt: z.ZodString;
+        actionHash: z.ZodString;
+        payloadHash: z.ZodString;
+        decision: z.ZodEnum<{
+            allow: "allow";
+            deny: "deny";
+            step_up: "step_up";
+        }>;
+        reasons: z.ZodArray<z.ZodString>;
+        policy: z.ZodObject<{
+            nativeRule: z.ZodString;
+            version: z.ZodString;
+            cedarCompatible: z.ZodBoolean;
+            opaCompatible: z.ZodBoolean;
+        }, z.core.$strip>;
+        providerEvidence: z.ZodOptional<z.ZodObject<{
+            schemaVersion: z.ZodLiteral<"axtary.ledger_provider_evidence.v0">;
+            provider: z.ZodEnum<{
+                github: "github";
+                slack: "slack";
+                linear: "linear";
+            }>;
+            tool: z.ZodString;
+            operation: z.ZodString;
+            resource: z.ZodObject<{
+                provider: z.ZodEnum<{
+                    github: "github";
+                    slack: "slack";
+                    linear: "linear";
+                }>;
+                kind: z.ZodString;
+                id: z.ZodString;
+                label: z.ZodOptional<z.ZodString>;
+                url: z.ZodOptional<z.ZodString>;
+            }, z.core.$strict>;
+            normalized: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodType<import("@axtary/actionpass").JsonValue, unknown, z.core.$ZodTypeInternals<import("@axtary/actionpass").JsonValue, unknown>>>>;
+            fieldChanges: z.ZodDefault<z.ZodArray<z.ZodObject<{
+                field: z.ZodString;
+                before: z.ZodOptional<z.ZodType<import("@axtary/actionpass").JsonValue, unknown, z.core.$ZodTypeInternals<import("@axtary/actionpass").JsonValue, unknown>>>;
+                after: z.ZodOptional<z.ZodType<import("@axtary/actionpass").JsonValue, unknown, z.core.$ZodTypeInternals<import("@axtary/actionpass").JsonValue, unknown>>>;
+            }, z.core.$strip>>>;
+            diff: z.ZodOptional<z.ZodObject<{
+                provider: z.ZodEnum<{
+                    github: "github";
+                    slack: "slack";
+                    linear: "linear";
+                }>;
+                summary: z.ZodOptional<z.ZodString>;
+                files: z.ZodDefault<z.ZodArray<z.ZodObject<{
+                    path: z.ZodString;
+                    oldPath: z.ZodOptional<z.ZodString>;
+                    status: z.ZodEnum<{
+                        added: "added";
+                        modified: "modified";
+                        deleted: "deleted";
+                        renamed: "renamed";
+                    }>;
+                    additions: z.ZodDefault<z.ZodNumber>;
+                    deletions: z.ZodDefault<z.ZodNumber>;
+                    hunks: z.ZodDefault<z.ZodArray<z.ZodObject<{
+                        header: z.ZodString;
+                        lines: z.ZodArray<z.ZodObject<{
+                            type: z.ZodEnum<{
+                                context: "context";
+                                addition: "addition";
+                                deletion: "deletion";
+                            }>;
+                            content: z.ZodString;
+                            oldLine: z.ZodOptional<z.ZodNumber>;
+                            newLine: z.ZodOptional<z.ZodNumber>;
+                        }, z.core.$strip>>;
+                    }, z.core.$strip>>>;
+                }, z.core.$strip>>>;
+            }, z.core.$strip>>;
+        }, z.core.$strip>>;
+        traceId: z.ZodOptional<z.ZodString>;
+        actionPassId: z.ZodNullable<z.ZodString>;
+        previousLedgerHash: z.ZodNullable<z.ZodString>;
+        ledgerHash: z.ZodString;
+    }, z.core.$strip>;
+    lineNumber: z.ZodNumber;
+}, z.core.$strip>;
+export type LedgerAppendResult = z.infer<typeof LedgerAppendResultSchema>;
+export type AppendDecisionInput = {
+    action: NormalizedAction;
+    decision: PolicyDecision;
+    actionPassId?: string | null;
+    occurredAt?: Date;
+};
+export type VerifyLedgerResult = {
+    valid: true;
+    records: LedgerRecord[];
+    lastLedgerHash: string | null;
+} | {
+    valid: false;
+    records: LedgerRecord[];
+    lineNumber: number;
+    reason: string;
+};
+export declare const LedgerExportFilterSchema: z.ZodObject<{
+    from: z.ZodNullable<z.ZodString>;
+    to: z.ZodNullable<z.ZodString>;
+    decisions: z.ZodNullable<z.ZodArray<z.ZodEnum<{
+        allow: "allow";
+        deny: "deny";
+        step_up: "step_up";
+    }>>>;
+}, z.core.$strip>;
+export type LedgerExportFilter = z.infer<typeof LedgerExportFilterSchema>;
+export declare const LedgerExportSchema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<"axtary.ledger_export.v0">;
+    exportedAt: z.ZodString;
+    source: z.ZodObject<{
+        filePath: z.ZodString;
+        totalRecords: z.ZodNumber;
+        lastLedgerHash: z.ZodNullable<z.ZodString>;
+    }, z.core.$strip>;
+    filters: z.ZodObject<{
+        from: z.ZodNullable<z.ZodString>;
+        to: z.ZodNullable<z.ZodString>;
+        decisions: z.ZodNullable<z.ZodArray<z.ZodEnum<{
+            allow: "allow";
+            deny: "deny";
+            step_up: "step_up";
+        }>>>;
+    }, z.core.$strip>;
+    records: z.ZodArray<z.ZodObject<{
+        schemaVersion: z.ZodLiteral<"axtary.ledger.v0">;
+        id: z.ZodString;
+        occurredAt: z.ZodString;
+        actionHash: z.ZodString;
+        payloadHash: z.ZodString;
+        decision: z.ZodEnum<{
+            allow: "allow";
+            deny: "deny";
+            step_up: "step_up";
+        }>;
+        reasons: z.ZodArray<z.ZodString>;
+        policy: z.ZodObject<{
+            nativeRule: z.ZodString;
+            version: z.ZodString;
+            cedarCompatible: z.ZodBoolean;
+            opaCompatible: z.ZodBoolean;
+        }, z.core.$strip>;
+        providerEvidence: z.ZodOptional<z.ZodObject<{
+            schemaVersion: z.ZodLiteral<"axtary.ledger_provider_evidence.v0">;
+            provider: z.ZodEnum<{
+                github: "github";
+                slack: "slack";
+                linear: "linear";
+            }>;
+            tool: z.ZodString;
+            operation: z.ZodString;
+            resource: z.ZodObject<{
+                provider: z.ZodEnum<{
+                    github: "github";
+                    slack: "slack";
+                    linear: "linear";
+                }>;
+                kind: z.ZodString;
+                id: z.ZodString;
+                label: z.ZodOptional<z.ZodString>;
+                url: z.ZodOptional<z.ZodString>;
+            }, z.core.$strict>;
+            normalized: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodType<import("@axtary/actionpass").JsonValue, unknown, z.core.$ZodTypeInternals<import("@axtary/actionpass").JsonValue, unknown>>>>;
+            fieldChanges: z.ZodDefault<z.ZodArray<z.ZodObject<{
+                field: z.ZodString;
+                before: z.ZodOptional<z.ZodType<import("@axtary/actionpass").JsonValue, unknown, z.core.$ZodTypeInternals<import("@axtary/actionpass").JsonValue, unknown>>>;
+                after: z.ZodOptional<z.ZodType<import("@axtary/actionpass").JsonValue, unknown, z.core.$ZodTypeInternals<import("@axtary/actionpass").JsonValue, unknown>>>;
+            }, z.core.$strip>>>;
+            diff: z.ZodOptional<z.ZodObject<{
+                provider: z.ZodEnum<{
+                    github: "github";
+                    slack: "slack";
+                    linear: "linear";
+                }>;
+                summary: z.ZodOptional<z.ZodString>;
+                files: z.ZodDefault<z.ZodArray<z.ZodObject<{
+                    path: z.ZodString;
+                    oldPath: z.ZodOptional<z.ZodString>;
+                    status: z.ZodEnum<{
+                        added: "added";
+                        modified: "modified";
+                        deleted: "deleted";
+                        renamed: "renamed";
+                    }>;
+                    additions: z.ZodDefault<z.ZodNumber>;
+                    deletions: z.ZodDefault<z.ZodNumber>;
+                    hunks: z.ZodDefault<z.ZodArray<z.ZodObject<{
+                        header: z.ZodString;
+                        lines: z.ZodArray<z.ZodObject<{
+                            type: z.ZodEnum<{
+                                context: "context";
+                                addition: "addition";
+                                deletion: "deletion";
+                            }>;
+                            content: z.ZodString;
+                            oldLine: z.ZodOptional<z.ZodNumber>;
+                            newLine: z.ZodOptional<z.ZodNumber>;
+                        }, z.core.$strip>>;
+                    }, z.core.$strip>>>;
+                }, z.core.$strip>>>;
+            }, z.core.$strip>>;
+        }, z.core.$strip>>;
+        traceId: z.ZodOptional<z.ZodString>;
+        actionPassId: z.ZodNullable<z.ZodString>;
+        previousLedgerHash: z.ZodNullable<z.ZodString>;
+        ledgerHash: z.ZodString;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type LedgerExport = z.infer<typeof LedgerExportSchema>;
+export declare const LedgerExportFormatSchema: z.ZodEnum<{
+    json: "json";
+    jsonl: "jsonl";
+    "siem-jsonl": "siem-jsonl";
+}>;
+export type LedgerExportFormat = z.infer<typeof LedgerExportFormatSchema>;
+export declare const LedgerSiemEventSchema: z.ZodObject<{
+    "@timestamp": z.ZodString;
+    schemaVersion: z.ZodLiteral<"axtary.siem_event.v0">;
+    event: z.ZodObject<{
+        kind: z.ZodLiteral<"event">;
+        category: z.ZodArray<z.ZodString>;
+        type: z.ZodArray<z.ZodString>;
+        action: z.ZodLiteral<"axtary.policy.decision">;
+        outcome: z.ZodEnum<{
+            unknown: "unknown";
+            success: "success";
+            failure: "failure";
+        }>;
+    }, z.core.$strip>;
+    axtary: z.ZodObject<{
+        ledger: z.ZodObject<{
+            id: z.ZodString;
+            hash: z.ZodString;
+            previousHash: z.ZodNullable<z.ZodString>;
+            sourceHash: z.ZodNullable<z.ZodString>;
+        }, z.core.$strip>;
+        trace: z.ZodObject<{
+            id: z.ZodNullable<z.ZodString>;
+        }, z.core.$strip>;
+        action: z.ZodObject<{
+            hash: z.ZodString;
+            payloadHash: z.ZodString;
+            passId: z.ZodNullable<z.ZodString>;
+        }, z.core.$strip>;
+        decision: z.ZodObject<{
+            value: z.ZodEnum<{
+                allow: "allow";
+                deny: "deny";
+                step_up: "step_up";
+            }>;
+            reasons: z.ZodArray<z.ZodString>;
+            policyVersion: z.ZodString;
+            nativeRule: z.ZodString;
+        }, z.core.$strip>;
+        provider: z.ZodOptional<z.ZodObject<{
+            name: z.ZodEnum<{
+                github: "github";
+                slack: "slack";
+                linear: "linear";
+            }>;
+            tool: z.ZodString;
+            operation: z.ZodString;
+            resourceKind: z.ZodString;
+            resourceId: z.ZodString;
+        }, z.core.$strip>>;
+    }, z.core.$strip>;
+}, z.core.$strip>;
+export type LedgerSiemEvent = z.infer<typeof LedgerSiemEventSchema>;
+export type FormatLedgerExportInput = {
+    export: LedgerExport;
+    format?: LedgerExportFormat;
+};
+export declare const LedgerSyncResultSchema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<"axtary.ledger_sync.v0">;
+    endpoint: z.ZodString;
+    syncedAt: z.ZodString;
+    status: z.ZodNumber;
+    records: z.ZodNumber;
+    lastLedgerHash: z.ZodNullable<z.ZodString>;
+    response: z.ZodNullable<z.ZodUnknown>;
+}, z.core.$strip>;
+export type LedgerSyncResult = z.infer<typeof LedgerSyncResultSchema>;
+export type ExportLedgerRecordsInput = {
+    filePath: string;
+    from?: Date | string | null;
+    to?: Date | string | null;
+    decisions?: Array<LedgerRecord["decision"]> | null;
+    exportedAt?: Date;
+};
+export type SyncLedgerExportInput = {
+    endpoint: string;
+    export: LedgerExport;
+    tenant?: string;
+    token?: string;
+    fetch?: typeof fetch;
+    timeoutMs?: number;
+};
+export declare class LocalJsonlLedger {
+    readonly filePath: string;
+    constructor(filePath: string);
+    appendDecision(input: AppendDecisionInput): Promise<LedgerAppendResult>;
+    appendRecord(recordInput: LedgerRecord): Promise<LedgerAppendResult>;
+    readRecords(): Promise<LedgerRecord[]>;
+    verify(): Promise<VerifyLedgerResult>;
+}
+export declare function readLedgerRecords(filePath: string): Promise<LedgerRecord[]>;
+export declare function verifyLedgerFile(filePath: string): Promise<VerifyLedgerResult>;
+export declare function exportLedgerRecords(input: ExportLedgerRecordsInput): Promise<LedgerExport>;
+export declare function syncLedgerExport(input: SyncLedgerExportInput): Promise<LedgerSyncResult>;
+export declare function formatLedgerExport(input: FormatLedgerExportInput): string;
+export declare function computeLedgerHash(record: Omit<LedgerRecord, "ledgerHash">): string;
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAKL,KAAK,YAAY,EACjB,KAAK,gBAAgB,EACrB,KAAK,cAAc,EACpB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,2BAA2B,2BAA2B,CAAC;AACpE,eAAO,MAAM,4BAA4B,4BAA4B,CAAC;AACtE,eAAO,MAAM,0BAA0B,0BAA0B,CAAC;AAClE,eAAO,MAAM,gCAAgC,yBAAyB,CAAC;AAEvE,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAGnC,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE1E,MAAM,MAAM,mBAAmB,GAAG;IAChC,MAAM,EAAE,gBAAgB,CAAC;IACzB,QAAQ,EAAE,cAAc,CAAC;IACzB,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,UAAU,CAAC,EAAE,IAAI,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAC1B;IACE,KAAK,EAAE,IAAI,CAAC;IACZ,OAAO,EAAE,YAAY,EAAE,CAAC;IACxB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;CAC/B,GACD;IACE,KAAK,EAAE,KAAK,CAAC;IACb,OAAO,EAAE,YAAY,EAAE,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEN,eAAO,MAAM,wBAAwB;;;;;;;;iBAInC,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE1E,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAU7B,CAAC;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D,eAAO,MAAM,wBAAwB;;;;EAA0C,CAAC;AAChF,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE1E,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAyChC,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE,MAAM,MAAM,uBAAuB,GAAG;IACpC,MAAM,EAAE,YAAY,CAAC;IACrB,MAAM,CAAC,EAAE,kBAAkB,CAAC;CAC7B,CAAC;AAEF,eAAO,MAAM,sBAAsB;;;;;;;;iBAQjC,CAAC;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEtE,MAAM,MAAM,wBAAwB,GAAG;IACrC,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,IAAI,GAAG,MAAM,GAAG,IAAI,CAAC;IAC5B,EAAE,CAAC,EAAE,IAAI,GAAG,MAAM,GAAG,IAAI,CAAC;IAC1B,SAAS,CAAC,EAAE,KAAK,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC,GAAG,IAAI,CAAC;IACnD,UAAU,CAAC,EAAE,IAAI,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,YAAY,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,qBAAa,gBAAgB;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;gBAEd,QAAQ,EAAE,MAAM;IAItB,cAAc,CAAC,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAcvE,YAAY,CAAC,WAAW,EAAE,YAAY,GAAG,OAAO,CAAC,kBAAkB,CAAC;IA0BpE,WAAW,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;IAatC,MAAM,IAAI,OAAO,CAAC,kBAAkB,CAAC;CAmD5C;AAED,wBAAsB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,CAEjF;AAED,wBAAsB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAEpF;AAED,wBAAsB,mBAAmB,CACvC,KAAK,EAAE,wBAAwB,GAC9B,OAAO,CAAC,YAAY,CAAC,CAiCvB;AAED,wBAAsB,gBAAgB,CACpC,KAAK,EAAE,qBAAqB,GAC3B,OAAO,CAAC,gBAAgB,CAAC,CA0C3B;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,uBAAuB,GAAG,MAAM,CAiBzE;AAED,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,IAAI,CAAC,YAAY,EAAE,YAAY,CAAC,GAAG,MAAM,CAElF"}

package/dist/index.js

@@ -0,0 +1,382 @@
+import { mkdir, readFile, rename, writeFile } from "node:fs/promises";
+import { dirname } from "node:path";
+import { AxtaryDecisionSchema, hashJson, LedgerRecordSchema, recordDecision, } from "@axtary/actionpass";
+import { z } from "zod";
+export const LOCAL_LEDGER_SCHEMA_VERSION = "axtary.local-ledger.v0";
+export const LEDGER_EXPORT_SCHEMA_VERSION = "axtary.ledger_export.v0";
+export const LEDGER_SYNC_SCHEMA_VERSION = "axtary.ledger_sync.v0";
+export const LEDGER_SIEM_EVENT_SCHEMA_VERSION = "axtary.siem_event.v0";
+export const LedgerAppendResultSchema = z.object({
+    record: LedgerRecordSchema,
+    lineNumber: z.number().int().positive(),
+});
+export const LedgerExportFilterSchema = z.object({
+    from: z.string().datetime().nullable(),
+    to: z.string().datetime().nullable(),
+    decisions: z.array(AxtaryDecisionSchema).nullable(),
+});
+export const LedgerExportSchema = z.object({
+    schemaVersion: z.literal(LEDGER_EXPORT_SCHEMA_VERSION),
+    exportedAt: z.string().datetime(),
+    source: z.object({
+        filePath: z.string().min(1),
+        totalRecords: z.number().int().nonnegative(),
+        lastLedgerHash: z.string().regex(/^sha256:[a-f0-9]{64}$/).nullable(),
+    }),
+    filters: LedgerExportFilterSchema,
+    records: z.array(LedgerRecordSchema),
+});
+export const LedgerExportFormatSchema = z.enum(["json", "jsonl", "siem-jsonl"]);
+export const LedgerSiemEventSchema = z.object({
+    "@timestamp": z.string().datetime(),
+    schemaVersion: z.literal(LEDGER_SIEM_EVENT_SCHEMA_VERSION),
+    event: z.object({
+        kind: z.literal("event"),
+        category: z.array(z.string()),
+        type: z.array(z.string()),
+        action: z.literal("axtary.policy.decision"),
+        outcome: z.enum(["success", "failure", "unknown"]),
+    }),
+    axtary: z.object({
+        ledger: z.object({
+            id: z.string().min(1),
+            hash: z.string().regex(/^sha256:[a-f0-9]{64}$/),
+            previousHash: z.string().regex(/^sha256:[a-f0-9]{64}$/).nullable(),
+            sourceHash: z.string().regex(/^sha256:[a-f0-9]{64}$/).nullable(),
+        }),
+        trace: z.object({
+            id: z.string().min(1).nullable(),
+        }),
+        action: z.object({
+            hash: z.string().regex(/^sha256:[a-f0-9]{64}$/),
+            payloadHash: z.string().regex(/^sha256:[a-f0-9]{64}$/),
+            passId: z.string().min(1).nullable(),
+        }),
+        decision: z.object({
+            value: AxtaryDecisionSchema,
+            reasons: z.array(z.string().min(1)),
+            policyVersion: z.string().min(1),
+            nativeRule: z.string().min(1),
+        }),
+        provider: z
+            .object({
+            name: z.enum(["github", "slack", "linear"]),
+            tool: z.string().min(1),
+            operation: z.string().min(1),
+            resourceKind: z.string().min(1),
+            resourceId: z.string().min(1),
+        })
+            .optional(),
+    }),
+});
+export const LedgerSyncResultSchema = z.object({
+    schemaVersion: z.literal(LEDGER_SYNC_SCHEMA_VERSION),
+    endpoint: z.string().url(),
+    syncedAt: z.string().datetime(),
+    status: z.number().int(),
+    records: z.number().int().nonnegative(),
+    lastLedgerHash: z.string().regex(/^sha256:[a-f0-9]{64}$/).nullable(),
+    response: z.unknown().nullable(),
+});
+export class LocalJsonlLedger {
+    filePath;
+    constructor(filePath) {
+        this.filePath = filePath;
+    }
+    async appendDecision(input) {
+        const records = await this.readRecords();
+        const previousLedgerHash = records.at(-1)?.ledgerHash ?? null;
+        const record = recordDecision({
+            action: input.action,
+            decision: input.decision,
+            actionPassId: input.actionPassId ?? null,
+            previousLedgerHash,
+            occurredAt: input.occurredAt,
+        });
+        return this.appendRecord(record);
+    }
+    async appendRecord(recordInput) {
+        const records = await this.readRecords();
+        const previousRecord = records.at(-1) ?? null;
+        const record = LedgerRecordSchema.parse(recordInput);
+        if (record.previousLedgerHash !== (previousRecord?.ledgerHash ?? null)) {
+            throw new Error("ledger_previous_hash_mismatch");
+        }
+        assertRecordHash(record);
+        await mkdir(dirname(this.filePath), { recursive: true });
+        const nextContent = [...records, record]
+            .map((entry) => JSON.stringify(entry))
+            .join("\n");
+        const tmpPath = `${this.filePath}.${process.pid}.${Date.now()}.tmp`;
+        await writeFile(tmpPath, `${nextContent}\n`, { encoding: "utf8", flag: "wx" });
+        await rename(tmpPath, this.filePath);
+        return LedgerAppendResultSchema.parse({
+            record,
+            lineNumber: records.length + 1,
+        });
+    }
+    async readRecords() {
+        const text = await readLedgerFile(this.filePath);
+        if (!text.trim()) {
+            return [];
+        }
+        return text
+            .split("\n")
+            .filter((line) => line.trim().length > 0)
+            .map((line, index) => parseLedgerLine(line, index + 1));
+    }
+    async verify() {
+        const records = [];
+        const text = await readLedgerFile(this.filePath);
+        const lines = text.split("\n").filter((line) => line.trim().length > 0);
+        for (let index = 0; index < lines.length; index += 1) {
+            const lineNumber = index + 1;
+            let record;
+            try {
+                record = parseLedgerLine(lines[index], lineNumber);
+            }
+            catch (error) {
+                return {
+                    valid: false,
+                    records,
+                    lineNumber,
+                    reason: error instanceof Error ? error.message : "invalid_ledger_line",
+                };
+            }
+            const expectedPreviousHash = records.at(-1)?.ledgerHash ?? null;
+            if (record.previousLedgerHash !== expectedPreviousHash) {
+                return {
+                    valid: false,
+                    records,
+                    lineNumber,
+                    reason: "ledger_previous_hash_mismatch",
+                };
+            }
+            try {
+                assertRecordHash(record);
+            }
+            catch (error) {
+                return {
+                    valid: false,
+                    records,
+                    lineNumber,
+                    reason: error instanceof Error ? error.message : "ledger_hash_mismatch",
+                };
+            }
+            records.push(record);
+        }
+        return {
+            valid: true,
+            records,
+            lastLedgerHash: records.at(-1)?.ledgerHash ?? null,
+        };
+    }
+}
+export async function readLedgerRecords(filePath) {
+    return new LocalJsonlLedger(filePath).readRecords();
+}
+export async function verifyLedgerFile(filePath) {
+    return new LocalJsonlLedger(filePath).verify();
+}
+export async function exportLedgerRecords(input) {
+    const ledger = new LocalJsonlLedger(input.filePath);
+    const verified = await ledger.verify();
+    if (!verified.valid) {
+        throw new Error(`ledger_export_invalid:${verified.lineNumber}:${verified.reason}`);
+    }
+    const filters = normalizeExportFilters(input);
+    const fromTime = filters.from ? new Date(filters.from).getTime() : null;
+    const toTime = filters.to ? new Date(filters.to).getTime() : null;
+    const decisionSet = filters.decisions ? new Set(filters.decisions) : null;
+    const records = verified.records.filter((record) => {
+        const occurredAt = new Date(record.occurredAt).getTime();
+        if (fromTime !== null && occurredAt < fromTime)
+            return false;
+        if (toTime !== null && occurredAt > toTime)
+            return false;
+        if (decisionSet && !decisionSet.has(record.decision))
+            return false;
+        return true;
+    });
+    return LedgerExportSchema.parse({
+        schemaVersion: LEDGER_EXPORT_SCHEMA_VERSION,
+        exportedAt: (input.exportedAt ?? new Date()).toISOString(),
+        source: {
+            filePath: input.filePath,
+            totalRecords: verified.records.length,
+            lastLedgerHash: verified.lastLedgerHash,
+        },
+        filters,
+        records,
+    });
+}
+export async function syncLedgerExport(input) {
+    const fetchImpl = input.fetch ?? globalThis.fetch;
+    if (!fetchImpl) {
+        throw new Error("ledger_sync_fetch_required");
+    }
+    const exportPayload = LedgerExportSchema.parse(input.export);
+    const response = await fetchWithTimeout(fetchImpl, input.endpoint, {
+        method: "POST",
+        headers: {
+            ...(input.token ? { authorization: `Bearer ${input.token}` } : {}),
+            "content-type": "application/json",
+            accept: "application/json",
+        },
+        body: JSON.stringify({
+            schemaVersion: LEDGER_SYNC_SCHEMA_VERSION,
+            tenant: input.tenant,
+            export: exportPayload,
+        }),
+    }, input.timeoutMs);
+    const responseText = await response.text();
+    const responseBody = responseText ? JSON.parse(responseText) : null;
+    if (!response.ok) {
+        throw new Error(`ledger_sync_failed:${response.status}`);
+    }
+    return LedgerSyncResultSchema.parse({
+        schemaVersion: LEDGER_SYNC_SCHEMA_VERSION,
+        endpoint: input.endpoint,
+        syncedAt: new Date().toISOString(),
+        status: response.status,
+        records: exportPayload.records.length,
+        lastLedgerHash: exportPayload.source.lastLedgerHash,
+        response: responseBody,
+    });
+}
+export function formatLedgerExport(input) {
+    const exported = LedgerExportSchema.parse(input.export);
+    const format = LedgerExportFormatSchema.parse(input.format ?? "json");
+    if (format === "json") {
+        return `${JSON.stringify(exported, null, 2)}\n`;
+    }
+    if (format === "jsonl") {
+        return toJsonLines(exported.records);
+    }
+    return toJsonLines(exported.records.map((record) => LedgerSiemEventSchema.parse(toSiemEvent(record, exported))));
+}
+export function computeLedgerHash(record) {
+    return hashJson(record);
+}
+function toSiemEvent(record, exported) {
+    return {
+        "@timestamp": record.occurredAt,
+        schemaVersion: LEDGER_SIEM_EVENT_SCHEMA_VERSION,
+        event: {
+            kind: "event",
+            category: ["iam", "configuration"],
+            type: [record.decision === "allow" ? "allowed" : "denied"],
+            action: "axtary.policy.decision",
+            outcome: decisionOutcome(record.decision),
+        },
+        axtary: {
+            ledger: {
+                id: record.id,
+                hash: record.ledgerHash,
+                previousHash: record.previousLedgerHash,
+                sourceHash: exported.source.lastLedgerHash,
+            },
+            trace: {
+                id: record.traceId ?? null,
+            },
+            action: {
+                hash: record.actionHash,
+                payloadHash: record.payloadHash,
+                passId: record.actionPassId,
+            },
+            decision: {
+                value: record.decision,
+                reasons: record.reasons,
+                policyVersion: record.policy.version,
+                nativeRule: record.policy.nativeRule,
+            },
+            provider: record.providerEvidence
+                ? {
+                    name: record.providerEvidence.provider,
+                    tool: record.providerEvidence.tool,
+                    operation: record.providerEvidence.operation,
+                    resourceKind: record.providerEvidence.resource.kind,
+                    resourceId: record.providerEvidence.resource.id,
+                }
+                : undefined,
+        },
+    };
+}
+function decisionOutcome(decision) {
+    if (decision === "allow")
+        return "success";
+    if (decision === "deny")
+        return "failure";
+    return "unknown";
+}
+function toJsonLines(values) {
+    return values.map((value) => JSON.stringify(value)).join("\n") + "\n";
+}
+function normalizeExportFilters(input) {
+    const from = normalizeDateFilter(input.from, "from");
+    const to = normalizeDateFilter(input.to, "to");
+    if (from && to && new Date(from).getTime() > new Date(to).getTime()) {
+        throw new Error("ledger_export_invalid_range");
+    }
+    return LedgerExportFilterSchema.parse({
+        from,
+        to,
+        decisions: input.decisions && input.decisions.length > 0
+            ? [...new Set(input.decisions.map((decision) => AxtaryDecisionSchema.parse(decision)))]
+            : null,
+    });
+}
+function normalizeDateFilter(value, field) {
+    if (value === undefined || value === null) {
+        return null;
+    }
+    const date = value instanceof Date ? value : new Date(value);
+    if (Number.isNaN(date.getTime())) {
+        throw new Error(`ledger_export_invalid_${field}`);
+    }
+    return date.toISOString();
+}
+function parseLedgerLine(line, lineNumber) {
+    try {
+        return LedgerRecordSchema.parse(JSON.parse(line));
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : "invalid_json";
+        throw new Error(`invalid_ledger_line:${lineNumber}:${message}`);
+    }
+}
+function assertRecordHash(record) {
+    const { ledgerHash, ...recordWithoutHash } = record;
+    const expectedHash = computeLedgerHash(recordWithoutHash);
+    if (ledgerHash !== expectedHash) {
+        throw new Error("ledger_hash_mismatch");
+    }
+}
+async function readLedgerFile(filePath) {
+    try {
+        return await readFile(filePath, "utf8");
+    }
+    catch (error) {
+        if (isNodeError(error) && error.code === "ENOENT") {
+            return "";
+        }
+        throw error;
+    }
+}
+async function fetchWithTimeout(fetchImpl, url, init, timeoutMs = 10_000) {
+    const controller = new AbortController();
+    const timeout = setTimeout(() => controller.abort(), timeoutMs);
+    try {
+        return await fetchImpl(url, {
+            ...init,
+            signal: controller.signal,
+        });
+    }
+    finally {
+        clearTimeout(timeout);
+    }
+}
+function isNodeError(error) {
+    return error instanceof Error && "code" in error;
+}
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACtE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EACL,oBAAoB,EACpB,QAAQ,EACR,kBAAkB,EAClB,cAAc,GAIf,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,2BAA2B,GAAG,wBAAwB,CAAC;AACpE,MAAM,CAAC,MAAM,4BAA4B,GAAG,yBAAyB,CAAC;AACtE,MAAM,CAAC,MAAM,0BAA0B,GAAG,uBAAuB,CAAC;AAClE,MAAM,CAAC,MAAM,gCAAgC,GAAG,sBAAsB,CAAC;AAEvE,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,MAAM,EAAE,kBAAkB;IAC1B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;CACxC,CAAC,CAAC;AAuBH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACtC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACpC,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,QAAQ,EAAE;CACpD,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,4BAA4B,CAAC;IACtD,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC3B,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;QAC5C,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC,QAAQ,EAAE;KACrE,CAAC;IACF,OAAO,EAAE,wBAAwB;IACjC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC;CACrC,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC;AAGhF,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACnC,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,gCAAgC,CAAC;IAC1D,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC;QACd,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;QACxB,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QAC7B,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QACzB,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,wBAAwB,CAAC;QAC3C,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;KACnD,CAAC;IACF,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;YACf,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YACrB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,uBAAuB,CAAC;YAC/C,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC,QAAQ,EAAE;YAClE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC,QAAQ,EAAE;SACjE,CAAC;QACF,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC;YACd,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;SACjC,CAAC;QACF,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;YACf,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,uBAAuB,CAAC;YAC/C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,uBAAuB,CAAC;YACtD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;SACrC,CAAC;QACF,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC;YACjB,KAAK,EAAE,oBAAoB;YAC3B,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YACnC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YAChC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;SAC9B,CAAC;QACF,QAAQ,EAAE,CAAC;aACR,MAAM,CAAC;YACN,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;YAC3C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YACvB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YAC5B,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YAC/B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;SAC9B,CAAC;aACD,QAAQ,EAAE;KACd,CAAC;CACH,CAAC,CAAC;AAQH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,0BAA0B,CAAC;IACpD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IAC1B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IACxB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACvC,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC,QAAQ,EAAE;IACpE,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CACjC,CAAC,CAAC;AAoBH,MAAM,OAAO,gBAAgB;IAClB,QAAQ,CAAS;IAE1B,YAAY,QAAgB;QAC1B,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC3B,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,KAA0B;QAC7C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QACzC,MAAM,kBAAkB,GAAG,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,IAAI,IAAI,CAAC;QAC9D,MAAM,MAAM,GAAG,cAAc,CAAC;YAC5B,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,YAAY,EAAE,KAAK,CAAC,YAAY,IAAI,IAAI;YACxC,kBAAkB;YAClB,UAAU,EAAE,KAAK,CAAC,UAAU;SAC7B,CAAC,CAAC;QAEH,OAAO,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;IACnC,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,WAAyB;QAC1C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QACzC,MAAM,cAAc,GAAG,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;QAC9C,MAAM,MAAM,GAAG,kBAAkB,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAErD,IAAI,MAAM,CAAC,kBAAkB,KAAK,CAAC,cAAc,EAAE,UAAU,IAAI,IAAI,CAAC,EAAE,CAAC;YACvE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QACnD,CAAC;QAED,gBAAgB,CAAC,MAAM,CAAC,CAAC;QAEzB,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACzD,MAAM,WAAW,GAAG,CAAC,GAAG,OAAO,EAAE,MAAM,CAAC;aACrC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;aACrC,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,MAAM,OAAO,GAAG,GAAG,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC;QAEpE,MAAM,SAAS,CAAC,OAAO,EAAE,GAAG,WAAW,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/E,MAAM,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QAErC,OAAO,wBAAwB,CAAC,KAAK,CAAC;YACpC,MAAM;YACN,UAAU,EAAE,OAAO,CAAC,MAAM,GAAG,CAAC;SAC/B,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,WAAW;QACf,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAEjD,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;YACjB,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,OAAO,IAAI;aACR,KAAK,CAAC,IAAI,CAAC;aACX,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;aACxC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,eAAe,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;IAC5D,CAAC;IAED,KAAK,CAAC,MAAM;QACV,MAAM,OAAO,GAAmB,EAAE,CAAC;QACnC,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACjD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAExE,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;YACrD,MAAM,UAAU,GAAG,KAAK,GAAG,CAAC,CAAC;YAC7B,IAAI,MAAoB,CAAC;YAEzB,IAAI,CAAC;gBACH,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC,KAAK,CAAE,EAAE,UAAU,CAAC,CAAC;YACtD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO;oBACL,KAAK,EAAE,KAAK;oBACZ,OAAO;oBACP,UAAU;oBACV,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,qBAAqB;iBACvE,CAAC;YACJ,CAAC;YAED,MAAM,oBAAoB,GAAG,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,IAAI,IAAI,CAAC;YAEhE,IAAI,MAAM,CAAC,kBAAkB,KAAK,oBAAoB,EAAE,CAAC;gBACvD,OAAO;oBACL,KAAK,EAAE,KAAK;oBACZ,OAAO;oBACP,UAAU;oBACV,MAAM,EAAE,+BAA+B;iBACxC,CAAC;YACJ,CAAC;YAED,IAAI,CAAC;gBACH,gBAAgB,CAAC,MAAM,CAAC,CAAC;YAC3B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO;oBACL,KAAK,EAAE,KAAK;oBACZ,OAAO;oBACP,UAAU;oBACV,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,sBAAsB;iBACxE,CAAC;YACJ,CAAC;YAED,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACvB,CAAC;QAED,OAAO;YACL,KAAK,EAAE,IAAI;YACX,OAAO;YACP,cAAc,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,IAAI,IAAI;SACnD,CAAC;IACJ,CAAC;CACF;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,QAAgB;IACtD,OAAO,IAAI,gBAAgB,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;AACtD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,QAAgB;IACrD,OAAO,IAAI,gBAAgB,CAAC,QAAQ,CAAC,CAAC,MAAM,EAAE,CAAC;AACjD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,KAA+B;IAE/B,MAAM,MAAM,GAAG,IAAI,gBAAgB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACpD,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;IAEvC,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,yBAAyB,QAAQ,CAAC,UAAU,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IACrF,CAAC;IAED,MAAM,OAAO,GAAG,sBAAsB,CAAC,KAAK,CAAC,CAAC;IAC9C,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACxE,MAAM,MAAM,GAAG,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAClE,MAAM,WAAW,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC1E,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE;QACjD,MAAM,UAAU,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,CAAC;QAEzD,IAAI,QAAQ,KAAK,IAAI,IAAI,UAAU,GAAG,QAAQ;YAAE,OAAO,KAAK,CAAC;QAC7D,IAAI,MAAM,KAAK,IAAI,IAAI,UAAU,GAAG,MAAM;YAAE,OAAO,KAAK,CAAC;QACzD,IAAI,WAAW,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC;YAAE,OAAO,KAAK,CAAC;QAEnE,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;IAEH,OAAO,kBAAkB,CAAC,KAAK,CAAC;QAC9B,aAAa,EAAE,4BAA4B;QAC3C,UAAU,EAAE,CAAC,KAAK,CAAC,UAAU,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE;QAC1D,MAAM,EAAE;YACN,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,YAAY,EAAE,QAAQ,CAAC,OAAO,CAAC,MAAM;YACrC,cAAc,EAAE,QAAQ,CAAC,cAAc;SACxC;QACD,OAAO;QACP,OAAO;KACR,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,KAA4B;IAE5B,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC;IAElD,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAChD,CAAC;IAED,MAAM,aAAa,GAAG,kBAAkB,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC7D,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CACrC,SAAS,EACT,KAAK,CAAC,QAAQ,EACd;QACE,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,UAAU,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClE,cAAc,EAAE,kBAAkB;YAClC,MAAM,EAAE,kBAAkB;SAC3B;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACnB,aAAa,EAAE,0BAA0B;YACzC,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,MAAM,EAAE,aAAa;SACtB,CAAC;KACH,EACD,KAAK,CAAC,SAAS,CAChB,CAAC;IACF,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IAC3C,MAAM,YAAY,GAAG,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAEpE,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,sBAAsB,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IAC3D,CAAC;IAED,OAAO,sBAAsB,CAAC,KAAK,CAAC;QAClC,aAAa,EAAE,0BAA0B;QACzC,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QAClC,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,OAAO,EAAE,aAAa,CAAC,OAAO,CAAC,MAAM;QACrC,cAAc,EAAE,aAAa,CAAC,MAAM,CAAC,cAAc;QACnD,QAAQ,EAAE,YAAY;KACvB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAA8B;IAC/D,MAAM,QAAQ,GAAG,kBAAkB,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACxD,MAAM,MAAM,GAAG,wBAAwB,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,IAAI,MAAM,CAAC,CAAC;IAEtE,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;IAClD,CAAC;IAED,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;QACvB,OAAO,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IACvC,CAAC;IAED,OAAO,WAAW,CAChB,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAC9B,qBAAqB,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAC3D,CACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,MAAwC;IACxE,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,WAAW,CAClB,MAAoB,EACpB,QAAsB;IAEtB,OAAO;QACL,YAAY,EAAE,MAAM,CAAC,UAAU;QAC/B,aAAa,EAAE,gCAAgC;QAC/C,KAAK,EAAE;YACL,IAAI,EAAE,OAAO;YACb,QAAQ,EAAE,CAAC,KAAK,EAAE,eAAe,CAAC;YAClC,IAAI,EAAE,CAAC,MAAM,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC;YAC1D,MAAM,EAAE,wBAAwB;YAChC,OAAO,EAAE,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC;SAC1C;QACD,MAAM,EAAE;YACN,MAAM,EAAE;gBACN,EAAE,EAAE,MAAM,CAAC,EAAE;gBACb,IAAI,EAAE,MAAM,CAAC,UAAU;gBACvB,YAAY,EAAE,MAAM,CAAC,kBAAkB;gBACvC,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,cAAc;aAC3C;YACD,KAAK,EAAE;gBACL,EAAE,EAAE,MAAM,CAAC,OAAO,IAAI,IAAI;aAC3B;YACD,MAAM,EAAE;gBACN,IAAI,EAAE,MAAM,CAAC,UAAU;gBACvB,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,MAAM,EAAE,MAAM,CAAC,YAAY;aAC5B;YACD,QAAQ,EAAE;gBACR,KAAK,EAAE,MAAM,CAAC,QAAQ;gBACtB,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO;gBACpC,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU;aACrC;YACD,QAAQ,EAAE,MAAM,CAAC,gBAAgB;gBAC/B,CAAC,CAAC;oBACE,IAAI,EAAE,MAAM,CAAC,gBAAgB,CAAC,QAAQ;oBACtC,IAAI,EAAE,MAAM,CAAC,gBAAgB,CAAC,IAAI;oBAClC,SAAS,EAAE,MAAM,CAAC,gBAAgB,CAAC,SAAS;oBAC5C,YAAY,EAAE,MAAM,CAAC,gBAAgB,CAAC,QAAQ,CAAC,IAAI;oBACnD,UAAU,EAAE,MAAM,CAAC,gBAAgB,CAAC,QAAQ,CAAC,EAAE;iBAChD;gBACH,CAAC,CAAC,SAAS;SACd;KACF,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,QAAkC;IACzD,IAAI,QAAQ,KAAK,OAAO;QAAE,OAAO,SAAS,CAAC;IAC3C,IAAI,QAAQ,KAAK,MAAM;QAAE,OAAO,SAAS,CAAC;IAE1C,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,WAAW,CAAC,MAAiB;IACpC,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;AACxE,CAAC;AAED,SAAS,sBAAsB,CAAC,KAA+B;IAC7D,MAAM,IAAI,GAAG,mBAAmB,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACrD,MAAM,EAAE,GAAG,mBAAmB,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IAE/C,IAAI,IAAI,IAAI,EAAE,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,GAAG,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;QACpE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IACjD,CAAC;IAED,OAAO,wBAAwB,CAAC,KAAK,CAAC;QACpC,IAAI;QACJ,EAAE;QACF,SAAS,EACP,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC;YAC3C,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,oBAAoB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;YACvF,CAAC,CAAC,IAAI;KACX,CAAC,CAAC;AACL,CAAC;AAED,SAAS,mBAAmB,CAC1B,KAAuC,EACvC,KAAa;IAEb,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAC1C,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,IAAI,GAAG,KAAK,YAAY,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC;IAE7D,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,yBAAyB,KAAK,EAAE,CAAC,CAAC;IACpD,CAAC;IAED,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC;AAC5B,CAAC;AAED,SAAS,eAAe,CAAC,IAAY,EAAE,UAAkB;IACvD,IAAI,CAAC;QACH,OAAO,kBAAkB,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IACpD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC;QACxE,MAAM,IAAI,KAAK,CAAC,uBAAuB,UAAU,IAAI,OAAO,EAAE,CAAC,CAAC;IAClE,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,MAAoB;IAC5C,MAAM,EAAE,UAAU,EAAE,GAAG,iBAAiB,EAAE,GAAG,MAAM,CAAC;IACpD,MAAM,YAAY,GAAG,iBAAiB,CAAC,iBAAiB,CAAC,CAAC;IAE1D,IAAI,UAAU,KAAK,YAAY,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;IAC1C,CAAC;AACH,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,QAAgB;IAC5C,IAAI,CAAC;QACH,OAAO,MAAM,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC1C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,WAAW,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAClD,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,gBAAgB,CAC7B,SAAuB,EACvB,GAAW,EACX,IAAiB,EACjB,SAAS,GAAG,MAAM;IAElB,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC;IAEhE,IAAI,CAAC;QACH,OAAO,MAAM,SAAS,CAAC,GAAG,EAAE;YAC1B,GAAG,IAAI;YACP,MAAM,EAAE,UAAU,CAAC,MAAM;SAC1B,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,OAAO,CAAC,CAAC;IACxB,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,OAAO,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,CAAC;AACnD,CAAC"}

package/package.json

@@ -0,0 +1,48 @@
+{
+  "name": "@axtary/ledger",
+  "version": "0.0.1",
+  "private": false,
+  "description": "Append-only JSONL action ledger with hash-chain verification for Axtary.",
+  "type": "module",
+  "license": "UNLICENSED",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/axtary/axtary.git",
+    "directory": "packages/ledger"
+  },
+  "keywords": [
+    "ai-agents",
+    "audit-log",
+    "jsonl",
+    "hash-chain",
+    "authorization"
+  ],
+  "engines": {
+    "node": "^20.19.0 || ^22.13.0 || >=24"
+  },
+  "scripts": {
+    "prebuild": "npm run build -w @axtary/actionpass",
+    "build": "npm run clean && tsc -p tsconfig.json",
+    "clean": "rm -rf dist",
+    "prepack": "npm run build"
+  },
+  "files": [
+    "README.md",
+    "dist"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "main": "./dist/index.js",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "types": "./dist/index.d.ts",
+  "dependencies": {
+    "@axtary/actionpass": "0.0.1",
+    "zod": "^4.4.3"
+  }
+}