@kashscript/hudhud 0.1.0

package/dist/certificate/html.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"html.js","sourceRoot":"","sources":["../../src/certificate/html.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,8EAA8E;AAC9E,+EAA+E;AAC/E,8EAA8E;AAC9E,wEAAwE;AACxE,+EAA+E;AAC/E,2EAA2E;AAC3E,+EAA+E;AAW/E,SAAS,GAAG,CAAC,CAAS;IACpB,OAAO,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;AACtG,CAAC;AACD;;;uEAGuE;AACvE,SAAS,UAAU,CAAC,CAAqB,EAAE,QAAgB;IACzD,IAAI,CAAC,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC;IACrC,OAAO,oFAAoF,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;AACrH,CAAC;AACD;+EAC+E;AAC/E,SAAS,OAAO,CAAC,CAAS;IACxB,OAAO,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;AAC3C,CAAC;AACD,SAAS,KAAK,CAAC,IAAY,EAAE,CAAC,GAAG,EAAE;IACjC,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;AACzD,CAAC;AAED,MAAM,YAAY,GAA+C;IAC/D,oBAAoB,EAAE,wBAAwB;IAC9C,sBAAsB,EAAE,4BAA4B;IACpD,QAAQ,EAAE,sBAAsB;CACjC,CAAC;AAEF,SAAS,UAAU,CAAC,KAAa,EAAE,KAAa,EAAE,GAAW;IAC3D,OAAO,yCAAyC,GAAG,CAAC,KAAK,CAAC,6BAA6B,GAAG,CAAC,KAAK,CAAC,6BAA6B,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC;AACvJ,CAAC;AAED,SAAS,QAAQ,CAAC,CAAsB;IACtC,MAAM,KAAK,GAAG,CAAC,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,6CAA6C,CAAC,CAAC,CAAC,6CAA6C,CAAC;IACvI,MAAM,KAAK,GAAG,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACnE,OAAO,8CAA8C,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,2BAA2B,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,iCAAiC,KAAK,iBAAiB,CAAC;AACjM,CAAC;AAED,SAAS,UAAU,CAAC,CAAmB;IACrC,MAAM,GAAG,GAAG,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IACvD,MAAM,MAAM,GAAG,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC,uBAAuB,GAAG,CAAC,CAAC,CAAC,oBAAoB,IAAI,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC;IACtJ,MAAM,GAAG,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,uCAAuC,CAAC,CAAC,CAAC,2CAA2C,CAAC;IAC7G,OAAO,wBAAwB,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,YAAY,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,YAAY,GAAG,yBAAyB,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC,sBAAsB,KAAK,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,sBAAsB,EAAE,YAAY,GAAG,yBAAyB,MAAM,YAAY,CAAC;AAC/S,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,yBAAyB,CAAC,IAAyB,EAAE,QAA8B,EAAE;IACnG,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;IACxD,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC;IACtD,MAAM,MAAM,GAAG,KAAK,CAAC,UAAU,IAAI,0BAA0B,CAAC;IAC9D,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC;IACvB,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IACvH,MAAM,OAAO,GACX,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;QACvB,CAAC,CAAC,8HAA8H;QAChI,CAAC,CAAC,+HAA+H,IAAI,CAAC,OAAO;aACxI,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,wBAAwB,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,YAAY,GAAG,CAAC,CAAC,CAAC,cAAc,CAAC,YAAY,GAAG,CAAC,CAAC,CAAC,cAAc,IAAI,SAAS,CAAC,yBAAyB,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,YAAY,CAAC;aACrM,IAAI,CAAC,EAAE,CAAC,kBAAkB,CAAC;IAEpC,OAAO;;;4BAGmB,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;;sBAE7D,GAAG,CAAC,MAAM,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;wBAqCT,GAAG,CAAC,IAAI,CAAC;;uBAEV,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,kBAAkB,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAkB,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;;;;;;QAMlL,UAAU,CAAC,oBAAoB,EAAE,MAAM,CAAC,CAAC,CAAC,mBAAmB,CAAC,EAAE,GAAG,CAAC,CAAC,kBAAkB,uBAAuB,CAAC;QAC/G,UAAU,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAC,iBAAiB,GAAG,EAAE,+BAA+B,CAAC;QACzF,UAAU,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC,EAAE,GAAG,CAAC,CAAC,iBAAiB,oBAAoB,CAAC;QAC9F,UAAU,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC,eAAe,GAAG,EAAE,CAAC,CAAC,YAAY,KAAK,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,YAAY,GAAG,CAAC;;+FAEtC,QAAQ;;;;QAI/F,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;;wGAEqD,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;;8BAE1I,IAAI,CAAC,QAAQ,CAAC,MAAM;;eAEnC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;;;MAGjD,OAAO;;;;kCAIqB,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC;kCACnC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC;kCACnB,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,0BAA0B,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC;;;wBAGhF,GAAG,CAAC,MAAM,CAAC,uGAAuG,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;;qBAE9I,CAAC;AACtB,CAAC"}

package/dist/certificate/index.d.ts

@@ -0,0 +1,3 @@
+export * from "./certificate";
+export * from "./html";
+//# sourceMappingURL=index.d.ts.map

package/dist/certificate/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/certificate/index.ts"],"names":[],"mappings":"AAEA,cAAc,eAAe,CAAC;AAC9B,cAAc,QAAQ,CAAC"}

package/dist/certificate/index.js

@@ -0,0 +1,5 @@
+// @kashscript/hudhud/certificate — the AIUC-1 Work Certificate: DSSE-signed
+// billing/retention document derived from the signed ledger, + an HTML renderer.
+export * from "./certificate";
+export * from "./html";
+//# sourceMappingURL=index.js.map

package/dist/certificate/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/certificate/index.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,iFAAiF;AACjF,cAAc,eAAe,CAAC;AAC9B,cAAc,QAAQ,CAAC"}

package/dist/did-registry/index.d.ts

@@ -0,0 +1,3 @@
+export { InMemoryDidRegistry } from "@kashscript/attest";
+export type { DidRegistry, DidPublicKey } from "@kashscript/attest";
+//# sourceMappingURL=index.d.ts.map

package/dist/did-registry/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/did-registry/index.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,YAAY,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC"}

package/dist/did-registry/index.js

@@ -0,0 +1,10 @@
+// ============================================================================
+// @kashscript/hudhud/did-registry — DID → Ed25519 public-key resolution
+// ----------------------------------------------------------------------------
+// The DID registry the ledger verifies actor signatures against. The interface
+// + in-memory reference live in `@kashscript/attest` (seeded from the same
+// Oreoasis `did-registry.ts` in M1); hudhud re-exports them so ventures reach
+// the registry through the runtime, and add a durable/PDS resolver at swap.
+// ============================================================================
+export { InMemoryDidRegistry } from "@kashscript/attest";
+//# sourceMappingURL=index.js.map

package/dist/did-registry/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/did-registry/index.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,wEAAwE;AACxE,+EAA+E;AAC/E,+EAA+E;AAC/E,2EAA2E;AAC3E,8EAA8E;AAC9E,4EAA4E;AAC5E,+EAA+E;AAE/E,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC"}

package/dist/errors.d.ts

@@ -0,0 +1,35 @@
+/** Base class for every error this package throws. */
+export declare class HudhudError extends Error {
+    readonly code: string;
+    constructor(code: string, message: string);
+}
+/** Thrown when an SOP manual cannot be compiled (cycle, malformed goto, empty). */
+export declare class SopCompilationError extends HudhudError {
+    constructor(message: string);
+}
+/** Thrown when an MCP tool call exceeds the hard timeout. */
+export declare class McpTimeoutError extends HudhudError {
+    readonly timeoutMs: number;
+    constructor(timeoutMs: number, message: string);
+}
+/** The security-violation discriminants raised at MCP dispatch time. */
+export type McpSecurityViolationReason = "TOOL_NOT_ALLOWLISTED" | "ARG_NOT_ALLOWED" | "REQUIRED_ARG_MISSING" | "TOOL_NAME_MALFORMED" | "SCOPE_VIOLATION" | "CIRCUIT_OPEN";
+/** Thrown when a dispatch is refused by the allowlist / scope / breaker gates.
+ *  `track` mirrors the Oreoasis four-track wire vocabulary. */
+export declare class McpSecurityViolationError extends HudhudError {
+    readonly reason: McpSecurityViolationReason;
+    readonly track: "error" | "security";
+    constructor(reason: McpSecurityViolationReason, message: string, track?: "error" | "security");
+}
+/** Thrown when a required exception classification is missing/invalid — the
+ *  mandatory `failureClass` gate (no "unclassified" state is representable). */
+export declare class ExceptionClassificationError extends HudhudError {
+    constructor(message: string);
+}
+/** Thrown by the ForensicLedgerService append pipeline (stepIndex mismatch,
+ *  signature-verify failure, store write failure). Ledger *tamper* detected by
+ *  the forensic scan surfaces as attest's `TamperError`, not this. */
+export declare class LedgerAppendError extends HudhudError {
+    constructor(message: string);
+}
+//# sourceMappingURL=errors.d.ts.map

package/dist/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAWA,sDAAsD;AACtD,qBAAa,WAAY,SAAQ,KAAK;IACpC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;gBACV,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;CAK1C;AAED,mFAAmF;AACnF,qBAAa,mBAAoB,SAAQ,WAAW;gBACtC,OAAO,EAAE,MAAM;CAI5B;AAED,6DAA6D;AAC7D,qBAAa,eAAgB,SAAQ,WAAW;IAC9C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;gBACf,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;CAK/C;AAED,wEAAwE;AACxE,MAAM,MAAM,0BAA0B,GAClC,sBAAsB,GACtB,iBAAiB,GACjB,sBAAsB,GACtB,qBAAqB,GACrB,iBAAiB,GACjB,cAAc,CAAC;AAEnB;+DAC+D;AAC/D,qBAAa,yBAA0B,SAAQ,WAAW;IACxD,QAAQ,CAAC,MAAM,EAAE,0BAA0B,CAAC;IAC5C,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,UAAU,CAAC;gBACzB,MAAM,EAAE,0BAA0B,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,GAAE,OAAO,GAAG,UAAuB;CAM1G;AAED;gFACgF;AAChF,qBAAa,4BAA6B,SAAQ,WAAW;gBAC/C,OAAO,EAAE,MAAM;CAI5B;AAED;;sEAEsE;AACtE,qBAAa,iBAAkB,SAAQ,WAAW;gBACpC,OAAO,EAAE,MAAM;CAI5B"}

package/dist/errors.js

@@ -0,0 +1,65 @@
+// ============================================================================
+// @kashscript/hudhud — provider-neutral error vocabulary
+// ----------------------------------------------------------------------------
+// Replaces the Oreoasis `@oreoasis/ks-bridge` exception classes with neutral
+// `Hudhud*Error`s. A consuming venture maps them to its own HTTP envelope at
+// its perimeter (ADR-0016 guard b); this package never emits a venture code.
+//
+// Ledger tamper is surfaced by `@kashscript/attest`'s `TamperError` (the ledger
+// runs on attest) — hudhud does not re-declare it.
+// ============================================================================
+/** Base class for every error this package throws. */
+export class HudhudError extends Error {
+    code;
+    constructor(code, message) {
+        super(`[${code}] ${message}`);
+        this.name = "HudhudError";
+        this.code = code;
+    }
+}
+/** Thrown when an SOP manual cannot be compiled (cycle, malformed goto, empty). */
+export class SopCompilationError extends HudhudError {
+    constructor(message) {
+        super("SOP_COMPILATION", message);
+        this.name = "SopCompilationError";
+    }
+}
+/** Thrown when an MCP tool call exceeds the hard timeout. */
+export class McpTimeoutError extends HudhudError {
+    timeoutMs;
+    constructor(timeoutMs, message) {
+        super("MCP_TIMEOUT", message);
+        this.name = "McpTimeoutError";
+        this.timeoutMs = timeoutMs;
+    }
+}
+/** Thrown when a dispatch is refused by the allowlist / scope / breaker gates.
+ *  `track` mirrors the Oreoasis four-track wire vocabulary. */
+export class McpSecurityViolationError extends HudhudError {
+    reason;
+    track;
+    constructor(reason, message, track = "security") {
+        super("MCP_SECURITY_VIOLATION", message);
+        this.name = "McpSecurityViolationError";
+        this.reason = reason;
+        this.track = track;
+    }
+}
+/** Thrown when a required exception classification is missing/invalid — the
+ *  mandatory `failureClass` gate (no "unclassified" state is representable). */
+export class ExceptionClassificationError extends HudhudError {
+    constructor(message) {
+        super("EXCEPTION_CLASSIFICATION", message);
+        this.name = "ExceptionClassificationError";
+    }
+}
+/** Thrown by the ForensicLedgerService append pipeline (stepIndex mismatch,
+ *  signature-verify failure, store write failure). Ledger *tamper* detected by
+ *  the forensic scan surfaces as attest's `TamperError`, not this. */
+export class LedgerAppendError extends HudhudError {
+    constructor(message) {
+        super("LEDGER_APPEND", message);
+        this.name = "LedgerAppendError";
+    }
+}
+//# sourceMappingURL=errors.js.map

package/dist/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,yDAAyD;AACzD,+EAA+E;AAC/E,6EAA6E;AAC7E,6EAA6E;AAC7E,6EAA6E;AAC7E,EAAE;AACF,gFAAgF;AAChF,mDAAmD;AACnD,+EAA+E;AAE/E,sDAAsD;AACtD,MAAM,OAAO,WAAY,SAAQ,KAAK;IAC3B,IAAI,CAAS;IACtB,YAAY,IAAY,EAAE,OAAe;QACvC,KAAK,CAAC,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC,CAAC;QAC9B,IAAI,CAAC,IAAI,GAAG,aAAa,CAAC;QAC1B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AAED,mFAAmF;AACnF,MAAM,OAAO,mBAAoB,SAAQ,WAAW;IAClD,YAAY,OAAe;QACzB,KAAK,CAAC,iBAAiB,EAAE,OAAO,CAAC,CAAC;QAClC,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;IACpC,CAAC;CACF;AAED,6DAA6D;AAC7D,MAAM,OAAO,eAAgB,SAAQ,WAAW;IACrC,SAAS,CAAS;IAC3B,YAAY,SAAiB,EAAE,OAAe;QAC5C,KAAK,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;QAC9B,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;QAC9B,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC7B,CAAC;CACF;AAWD;+DAC+D;AAC/D,MAAM,OAAO,yBAA0B,SAAQ,WAAW;IAC/C,MAAM,CAA6B;IACnC,KAAK,CAAuB;IACrC,YAAY,MAAkC,EAAE,OAAe,EAAE,QAA8B,UAAU;QACvG,KAAK,CAAC,wBAAwB,EAAE,OAAO,CAAC,CAAC;QACzC,IAAI,CAAC,IAAI,GAAG,2BAA2B,CAAC;QACxC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACrB,CAAC;CACF;AAED;gFACgF;AAChF,MAAM,OAAO,4BAA6B,SAAQ,WAAW;IAC3D,YAAY,OAAe;QACzB,KAAK,CAAC,0BAA0B,EAAE,OAAO,CAAC,CAAC;QAC3C,IAAI,CAAC,IAAI,GAAG,8BAA8B,CAAC;IAC7C,CAAC;CACF;AAED;;sEAEsE;AACtE,MAAM,OAAO,iBAAkB,SAAQ,WAAW;IAChD,YAAY,OAAe;QACzB,KAAK,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;QAChC,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;IAClC,CAAC;CACF"}

package/dist/exception/index.d.ts

@@ -0,0 +1,97 @@
+/** The failure classes. No "unclassified": classification is mandatory. */
+export declare const FAILURE_CLASSES: readonly ["judgment", "gap-filling", "ambiguous"];
+export type FailureClass = (typeof FAILURE_CLASSES)[number];
+/** DST so a classification signature can't replay as a ledger/attestation sig.
+ *  Neutral default; a venture passes its own DST at swap for wire-compat. */
+export declare const HUDHUD_EXCEPTION_CLASSIFICATION_DST: "kash-exception-classification-v1\n";
+export declare const EXCEPTION_CLASSIFICATION_SCHEMA_VERSION: "exception-classification/1";
+/** The mandatory gate — throws `ExceptionClassificationError` if `value` is
+ *  absent/empty or not one of the classes. NOT merely the TS type. */
+export declare function assertFailureClass(value: unknown): asserts value is FailureClass;
+export interface ExceptionClassificationInput {
+    readonly failureClass: FailureClass;
+    readonly failureTag: string;
+    readonly workflowId: string;
+    readonly sopVersion: string;
+    readonly inputRef: string;
+    readonly contentHash: string;
+    readonly model: string;
+    readonly modelVersion: string;
+    readonly resolutionSummary: string;
+    readonly resolutionActionRefs: ReadonlyArray<string>;
+}
+export interface ClassificationSignedEnvelope {
+    readonly alg: "ed25519";
+    readonly sig: string;
+    readonly dst: string;
+    readonly kid: string;
+}
+export interface ExceptionClassificationRecord {
+    readonly id: string;
+    readonly schemaVersion: string;
+    readonly timestampIso: string;
+    readonly workflowId: string;
+    readonly sopVersion: string;
+    readonly inputRef: string;
+    readonly contentHash: string;
+    readonly model: string;
+    readonly modelVersion: string;
+    readonly failureClass: FailureClass;
+    readonly failureTag: string;
+    readonly operatorDid: string;
+    readonly resolutionSummary: string;
+    readonly resolutionActionRefs: ReadonlyArray<string>;
+    readonly escalationId: string | null;
+    readonly signoffLedgerStepIndex: number | null;
+    readonly signedEnvelope: ClassificationSignedEnvelope;
+}
+/** Mint + sign a classification record (id/timestamp minted into the signed
+ *  payload). Throws the mandatory gate if `failureClass` is missing/invalid. */
+export declare function buildSignedClassification(input: ExceptionClassificationInput, operator: {
+    readonly did: string;
+    readonly privateKey: Uint8Array;
+}, link?: {
+    readonly escalationId?: string | null;
+    readonly signoffLedgerStepIndex?: number | null;
+}): Promise<ExceptionClassificationRecord>;
+/** Verify a record's operator signature. Returns false on a well-formed mismatch. */
+export declare function verifyClassificationSignature(record: ExceptionClassificationRecord, operatorPublicKey: Uint8Array): Promise<boolean>;
+export interface ExceptionClassificationStore {
+    append(record: ExceptionClassificationRecord): Promise<void>;
+    history(): Promise<ReadonlyArray<ExceptionClassificationRecord>>;
+    latest(): Promise<ExceptionClassificationRecord | null>;
+    byWorkflow(workflowId: string): Promise<ReadonlyArray<ExceptionClassificationRecord>>;
+}
+export declare class InMemoryExceptionClassificationStore implements ExceptionClassificationStore {
+    private readonly rows;
+    append(record: ExceptionClassificationRecord): Promise<void>;
+    history(): Promise<ReadonlyArray<ExceptionClassificationRecord>>;
+    latest(): Promise<ExceptionClassificationRecord | null>;
+    byWorkflow(workflowId: string): Promise<ReadonlyArray<ExceptionClassificationRecord>>;
+}
+export declare const EXCEPTION_DATASET_FORMAT_VERSION: "kash-exception-dataset/1";
+export interface ExceptionClassificationDatasetExport {
+    readonly formatVersion: string;
+    readonly exportedAtIso: string;
+    readonly count: number;
+    readonly records: ReadonlyArray<ExceptionClassificationRecord>;
+}
+/** Bundle the dataset for hand-off (records carry their own signatures). */
+export declare function exportExceptionClassificationDataset(records: ReadonlyArray<ExceptionClassificationRecord>, exportedAtIso?: string): ExceptionClassificationDatasetExport;
+export interface WorkflowMonthCount {
+    readonly workflowId: string;
+    readonly month: string;
+    readonly count: number;
+}
+export interface ExceptionClassificationStats {
+    readonly total: number;
+    readonly classMix: Record<FailureClass, number>;
+    readonly perWorkflow: ReadonlyArray<{
+        readonly workflowId: string;
+        readonly count: number;
+    }>;
+    readonly perWorkflowOverTime: ReadonlyArray<WorkflowMonthCount>;
+}
+/** Class mix + per-workflow (+ over-time) exception counts (the rate numerator). */
+export declare function computeExceptionClassificationStats(records: ReadonlyArray<ExceptionClassificationRecord>): ExceptionClassificationStats;
+//# sourceMappingURL=index.d.ts.map

package/dist/exception/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/exception/index.ts"],"names":[],"mappings":"AAiBA,2EAA2E;AAC3E,eAAO,MAAM,eAAe,mDAAoD,CAAC;AACjF,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,eAAe,CAAC,CAAC,MAAM,CAAC,CAAC;AAE5D;6EAC6E;AAC7E,eAAO,MAAM,mCAAmC,EAAG,oCAA6C,CAAC;AACjG,eAAO,MAAM,uCAAuC,EAAG,4BAAqC,CAAC;AAc7F;sEACsE;AACtE,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,KAAK,IAAI,YAAY,CAWhF;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAC;IACpC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,oBAAoB,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;CACtD;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,GAAG,EAAE,SAAS,CAAC;IACxB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAC;IACpC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,oBAAoB,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IACrD,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,QAAQ,CAAC,sBAAsB,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/C,QAAQ,CAAC,cAAc,EAAE,4BAA4B,CAAC;CACvD;AAQD;gFACgF;AAChF,wBAAsB,yBAAyB,CAC7C,KAAK,EAAE,4BAA4B,EACnC,QAAQ,EAAE;IAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAA;CAAE,EACnE,IAAI,GAAE;IAAE,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,QAAQ,CAAC,sBAAsB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAO,GACpG,OAAO,CAAC,6BAA6B,CAAC,CA6BxC;AAED,qFAAqF;AACrF,wBAAsB,6BAA6B,CACjD,MAAM,EAAE,6BAA6B,EACrC,iBAAiB,EAAE,UAAU,GAC5B,OAAO,CAAC,OAAO,CAAC,CAelB;AAID,MAAM,WAAW,4BAA4B;IAC3C,MAAM,CAAC,MAAM,EAAE,6BAA6B,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7D,OAAO,IAAI,OAAO,CAAC,aAAa,CAAC,6BAA6B,CAAC,CAAC,CAAC;IACjE,MAAM,IAAI,OAAO,CAAC,6BAA6B,GAAG,IAAI,CAAC,CAAC;IACxD,UAAU,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,6BAA6B,CAAC,CAAC,CAAC;CACvF;AAED,qBAAa,oCAAqC,YAAW,4BAA4B;IACvF,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAuC;IACtD,MAAM,CAAC,MAAM,EAAE,6BAA6B,GAAG,OAAO,CAAC,IAAI,CAAC;IAG5D,OAAO,IAAI,OAAO,CAAC,aAAa,CAAC,6BAA6B,CAAC,CAAC;IAGhE,MAAM,IAAI,OAAO,CAAC,6BAA6B,GAAG,IAAI,CAAC;IAGvD,UAAU,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,6BAA6B,CAAC,CAAC;CAG5F;AAID,eAAO,MAAM,gCAAgC,EAAG,0BAAmC,CAAC;AAEpF,MAAM,WAAW,oCAAoC;IACnD,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC,6BAA6B,CAAC,CAAC;CAChE;AAED,4EAA4E;AAC5E,wBAAgB,oCAAoC,CAClD,OAAO,EAAE,aAAa,CAAC,6BAA6B,CAAC,EACrD,aAAa,GAAE,MAAiC,GAC/C,oCAAoC,CAEtC;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IAChD,QAAQ,CAAC,WAAW,EAAE,aAAa,CAAC;QAAE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC7F,QAAQ,CAAC,mBAAmB,EAAE,aAAa,CAAC,kBAAkB,CAAC,CAAC;CACjE;AAQD,oFAAoF;AACpF,wBAAgB,mCAAmC,CACjD,OAAO,EAAE,aAAa,CAAC,6BAA6B,CAAC,GACpD,4BAA4B,CAoB9B"}

package/dist/exception/index.js

@@ -0,0 +1,144 @@
+// ============================================================================
+// @kashscript/hudhud/exception — signed exception-classification dataset
+// ----------------------------------------------------------------------------
+// The appreciating record of WHERE frontier models fail on real inputs and HOW
+// a human resolved it. Two invariants make it an asset, not a log line:
+//   1. MANDATORY — `failureClass` is required with NO "unclassified" member and
+//      NO default; `assertFailureClass` is the runtime belt (an untyped caller
+//      still cannot resolve without classifying).
+//   2. SIGNED — the operator's Ed25519 key signs the record over its EXACT
+//      bytes (`id` + `timestampIso` minted INTO the signed payload).
+// Ported from the oreoasis-core-host engine (M5); the DST is neutralized, the
+// error reuses hudhud's `ExceptionClassificationError`, id generation inlined.
+// ============================================================================
+import { signEvent, verifyEvent } from "@kashscript/identity-core";
+import { ExceptionClassificationError } from "../errors";
+/** The failure classes. No "unclassified": classification is mandatory. */
+export const FAILURE_CLASSES = ["judgment", "gap-filling", "ambiguous"];
+/** DST so a classification signature can't replay as a ledger/attestation sig.
+ *  Neutral default; a venture passes its own DST at swap for wire-compat. */
+export const HUDHUD_EXCEPTION_CLASSIFICATION_DST = "kash-exception-classification-v1\n";
+export const EXCEPTION_CLASSIFICATION_SCHEMA_VERSION = "exception-classification/1";
+const SIGN_HEADER = { kind: "exception-classification/1" };
+let lastIdMicros = 0;
+function newRecordId() {
+    let micros = Date.now() * 1000;
+    if (micros <= lastIdMicros)
+        micros = lastIdMicros + 1;
+    lastIdMicros = micros;
+    const rand = crypto.getRandomValues(new Uint8Array(6));
+    let hex = "";
+    for (const b of rand)
+        hex += b.toString(16).padStart(2, "0");
+    return `exc_${micros.toString(36)}_${hex}`;
+}
+/** The mandatory gate — throws `ExceptionClassificationError` if `value` is
+ *  absent/empty or not one of the classes. NOT merely the TS type. */
+export function assertFailureClass(value) {
+    if (value === undefined || value === null || value === "") {
+        throw new ExceptionClassificationError(`FAILURE_CLASS_REQUIRED — an exception cannot be resolved without a failureClass (one of ${FAILURE_CLASSES.join(" | ")})`);
+    }
+    if (!FAILURE_CLASSES.includes(value)) {
+        throw new ExceptionClassificationError(`FAILURE_CLASS_INVALID — failureClass must be one of ${FAILURE_CLASSES.join(" | ")} (got ${String(value)})`);
+    }
+}
+function unsignedOf(record) {
+    const { signedEnvelope: _drop, ...rest } = record;
+    return rest;
+}
+/** Mint + sign a classification record (id/timestamp minted into the signed
+ *  payload). Throws the mandatory gate if `failureClass` is missing/invalid. */
+export async function buildSignedClassification(input, operator, link = {}) {
+    assertFailureClass(input.failureClass);
+    const unsigned = {
+        id: newRecordId(),
+        schemaVersion: EXCEPTION_CLASSIFICATION_SCHEMA_VERSION,
+        timestampIso: new Date().toISOString(),
+        workflowId: input.workflowId,
+        sopVersion: input.sopVersion,
+        inputRef: input.inputRef,
+        contentHash: input.contentHash,
+        model: input.model,
+        modelVersion: input.modelVersion,
+        failureClass: input.failureClass,
+        failureTag: input.failureTag,
+        operatorDid: operator.did,
+        resolutionSummary: input.resolutionSummary,
+        resolutionActionRefs: [...input.resolutionActionRefs],
+        escalationId: link.escalationId ?? null,
+        signoffLedgerStepIndex: link.signoffLedgerStepIndex ?? null,
+    };
+    const signed = await signEvent(SIGN_HEADER, unsigned, operator.privateKey, {
+        dst: HUDHUD_EXCEPTION_CLASSIFICATION_DST,
+        encoding: "hex",
+        kid: operator.did,
+    });
+    return {
+        ...unsigned,
+        signedEnvelope: { alg: "ed25519", sig: signed.sig, dst: HUDHUD_EXCEPTION_CLASSIFICATION_DST, kid: operator.did },
+    };
+}
+/** Verify a record's operator signature. Returns false on a well-formed mismatch. */
+export async function verifyClassificationSignature(record, operatorPublicKey) {
+    return verifyEvent({
+        header: SIGN_HEADER,
+        body: unsignedOf(record),
+        signature: {
+            alg: "ed25519",
+            sig: record.signedEnvelope.sig,
+            dst: record.signedEnvelope.dst,
+            encoding: "hex",
+            kid: record.signedEnvelope.kid,
+        },
+    }, operatorPublicKey);
+}
+export class InMemoryExceptionClassificationStore {
+    rows = [];
+    async append(record) {
+        this.rows.push(record);
+    }
+    async history() {
+        return [...this.rows];
+    }
+    async latest() {
+        return this.rows.length === 0 ? null : this.rows[this.rows.length - 1];
+    }
+    async byWorkflow(workflowId) {
+        return this.rows.filter((r) => r.workflowId === workflowId);
+    }
+}
+// ── Export + stats ─────────────────────────────────────────────────────────
+export const EXCEPTION_DATASET_FORMAT_VERSION = "kash-exception-dataset/1";
+/** Bundle the dataset for hand-off (records carry their own signatures). */
+export function exportExceptionClassificationDataset(records, exportedAtIso = new Date().toISOString()) {
+    return { formatVersion: EXCEPTION_DATASET_FORMAT_VERSION, exportedAtIso, count: records.length, records: [...records] };
+}
+function emptyClassMix() {
+    const mix = {};
+    for (const c of FAILURE_CLASSES)
+        mix[c] = 0;
+    return mix;
+}
+/** Class mix + per-workflow (+ over-time) exception counts (the rate numerator). */
+export function computeExceptionClassificationStats(records) {
+    const classMix = emptyClassMix();
+    const perWorkflow = new Map();
+    const perWfMonth = new Map();
+    for (const r of records) {
+        classMix[r.failureClass] += 1;
+        perWorkflow.set(r.workflowId, (perWorkflow.get(r.workflowId) ?? 0) + 1);
+        const key = `${r.workflowId} ${r.timestampIso.slice(0, 7)}`;
+        perWfMonth.set(key, (perWfMonth.get(key) ?? 0) + 1);
+    }
+    const perWorkflowArr = [...perWorkflow.entries()]
+        .map(([workflowId, count]) => ({ workflowId, count }))
+        .sort((a, b) => (a.workflowId < b.workflowId ? -1 : 1));
+    const perWorkflowOverTime = [...perWfMonth.entries()]
+        .map(([key, count]) => {
+        const [workflowId, month] = key.split(" ");
+        return { workflowId: workflowId, month: month, count };
+    })
+        .sort((a, b) => (a.workflowId === b.workflowId ? (a.month < b.month ? -1 : 1) : a.workflowId < b.workflowId ? -1 : 1));
+    return { total: records.length, classMix, perWorkflow: perWorkflowArr, perWorkflowOverTime };
+}
+//# sourceMappingURL=index.js.map

package/dist/exception/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/exception/index.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,yEAAyE;AACzE,+EAA+E;AAC/E,+EAA+E;AAC/E,wEAAwE;AACxE,gFAAgF;AAChF,+EAA+E;AAC/E,kDAAkD;AAClD,2EAA2E;AAC3E,qEAAqE;AACrE,8EAA8E;AAC9E,+EAA+E;AAC/E,+EAA+E;AAE/E,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AACnE,OAAO,EAAE,4BAA4B,EAAE,MAAM,WAAW,CAAC;AAEzD,2EAA2E;AAC3E,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,UAAU,EAAE,aAAa,EAAE,WAAW,CAAU,CAAC;AAGjF;6EAC6E;AAC7E,MAAM,CAAC,MAAM,mCAAmC,GAAG,oCAA6C,CAAC;AACjG,MAAM,CAAC,MAAM,uCAAuC,GAAG,4BAAqC,CAAC;AAC7F,MAAM,WAAW,GAAG,EAAE,IAAI,EAAE,4BAA4B,EAAW,CAAC;AAEpE,IAAI,YAAY,GAAG,CAAC,CAAC;AACrB,SAAS,WAAW;IAClB,IAAI,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;IAC/B,IAAI,MAAM,IAAI,YAAY;QAAE,MAAM,GAAG,YAAY,GAAG,CAAC,CAAC;IACtD,YAAY,GAAG,MAAM,CAAC;IACtB,MAAM,IAAI,GAAG,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;IACvD,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,MAAM,CAAC,IAAI,IAAI;QAAE,GAAG,IAAI,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC7D,OAAO,OAAO,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,GAAG,EAAE,CAAC;AAC7C,CAAC;AAED;sEACsE;AACtE,MAAM,UAAU,kBAAkB,CAAC,KAAc;IAC/C,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;QAC1D,MAAM,IAAI,4BAA4B,CACpC,2FAA2F,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAC1H,CAAC;IACJ,CAAC;IACD,IAAI,CAAE,eAAyC,CAAC,QAAQ,CAAC,KAAe,CAAC,EAAE,CAAC;QAC1E,MAAM,IAAI,4BAA4B,CACpC,uDAAuD,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,MAAM,CAAC,KAAK,CAAC,GAAG,CAC5G,CAAC;IACJ,CAAC;AACH,CAAC;AA2CD,SAAS,UAAU,CAAC,MAAqC;IACvD,MAAM,EAAE,cAAc,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,GAAG,MAAM,CAAC;IAClD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;gFACgF;AAChF,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,KAAmC,EACnC,QAAmE,EACnE,OAAmG,EAAE;IAErG,kBAAkB,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IACvC,MAAM,QAAQ,GAA2B;QACvC,EAAE,EAAE,WAAW,EAAE;QACjB,aAAa,EAAE,uCAAuC;QACtD,YAAY,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACtC,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,WAAW,EAAE,QAAQ,CAAC,GAAG;QACzB,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;QAC1C,oBAAoB,EAAE,CAAC,GAAG,KAAK,CAAC,oBAAoB,CAAC;QACrD,YAAY,EAAE,IAAI,CAAC,YAAY,IAAI,IAAI;QACvC,sBAAsB,EAAE,IAAI,CAAC,sBAAsB,IAAI,IAAI;KAC5D,CAAC;IACF,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,WAAW,EAAE,QAAQ,EAAE,QAAQ,CAAC,UAAU,EAAE;QACzE,GAAG,EAAE,mCAAmC;QACxC,QAAQ,EAAE,KAAK;QACf,GAAG,EAAE,QAAQ,CAAC,GAAG;KAClB,CAAC,CAAC;IACH,OAAO;QACL,GAAG,QAAQ;QACX,cAAc,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,mCAAmC,EAAE,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE;KACjH,CAAC;AACJ,CAAC;AAED,qFAAqF;AACrF,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,MAAqC,EACrC,iBAA6B;IAE7B,OAAO,WAAW,CAChB;QACE,MAAM,EAAE,WAAW;QACnB,IAAI,EAAE,UAAU,CAAC,MAAM,CAAC;QACxB,SAAS,EAAE;YACT,GAAG,EAAE,SAAS;YACd,GAAG,EAAE,MAAM,CAAC,cAAc,CAAC,GAAG;YAC9B,GAAG,EAAE,MAAM,CAAC,cAAc,CAAC,GAAG;YAC9B,QAAQ,EAAE,KAAK;YACf,GAAG,EAAE,MAAM,CAAC,cAAc,CAAC,GAAG;SAC/B;KACF,EACD,iBAAiB,CAClB,CAAC;AACJ,CAAC;AAWD,MAAM,OAAO,oCAAoC;IAC9B,IAAI,GAAoC,EAAE,CAAC;IAC5D,KAAK,CAAC,MAAM,CAAC,MAAqC;QAChD,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACzB,CAAC;IACD,KAAK,CAAC,OAAO;QACX,OAAO,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;IACxB,CAAC;IACD,KAAK,CAAC,MAAM;QACV,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC;IAC1E,CAAC;IACD,KAAK,CAAC,UAAU,CAAC,UAAkB;QACjC,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,UAAU,CAAC,CAAC;IAC9D,CAAC;CACF;AAED,8EAA8E;AAE9E,MAAM,CAAC,MAAM,gCAAgC,GAAG,0BAAmC,CAAC;AASpF,4EAA4E;AAC5E,MAAM,UAAU,oCAAoC,CAClD,OAAqD,EACrD,gBAAwB,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;IAEhD,OAAO,EAAE,aAAa,EAAE,gCAAgC,EAAE,aAAa,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,GAAG,OAAO,CAAC,EAAE,CAAC;AAC1H,CAAC;AAeD,SAAS,aAAa;IACpB,MAAM,GAAG,GAAG,EAAkC,CAAC;IAC/C,KAAK,MAAM,CAAC,IAAI,eAAe;QAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAC5C,OAAO,GAAG,CAAC;AACb,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,mCAAmC,CACjD,OAAqD;IAErD,MAAM,QAAQ,GAAG,aAAa,EAAE,CAAC;IACjC,MAAM,WAAW,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC9C,MAAM,UAAU,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC7C,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;QAC9B,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACxE,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;QAC5D,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACtD,CAAC;IACD,MAAM,cAAc,GAAG,CAAC,GAAG,WAAW,CAAC,OAAO,EAAE,CAAC;SAC9C,GAAG,CAAC,CAAC,CAAC,UAAU,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC;SACrD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1D,MAAM,mBAAmB,GAAG,CAAC,GAAG,UAAU,CAAC,OAAO,EAAE,CAAC;SAClD,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE;QACpB,MAAM,CAAC,UAAU,EAAE,KAAK,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC3C,OAAO,EAAE,UAAU,EAAE,UAAW,EAAE,KAAK,EAAE,KAAM,EAAE,KAAK,EAAE,CAAC;IAC3D,CAAC,CAAC;SACD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,KAAK,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACzH,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,cAAc,EAAE,mBAAmB,EAAE,CAAC;AAC/F,CAAC"}

package/dist/identity/index.d.ts

@@ -0,0 +1,33 @@
+import type { Jwks } from "@kashscript/identity-server";
+/** The delegation the accountable identity carries: the agent acting for the owner. */
+export interface AccountableActor {
+    /** The resource owner — a did:kash root (the token `sub`). */
+    readonly owner: string;
+    /** The delegated agent — a did:kash (the token `act.sub`). */
+    readonly agent: string;
+}
+export type AccountableIdentityReason = "MALFORMED_TOKEN" | "MALFORMED_CLAIMS" | "UNSUPPORTED_ALG" | "UNSUPPORTED_TOKEN_TYPE" | "KEY_NOT_FOUND" | "SIGNATURE_INVALID" | "EXPIRED" | "NOT_YET_VALID" | "ISSUER_MISMATCH" | "AUDIENCE_MISMATCH" | "MISSING_OWNER_BINDING";
+export interface AccountableIdentityResult {
+    readonly ok: boolean;
+    readonly reason: AccountableIdentityReason | null;
+    /** The `{ owner, agent }` binding — present whenever the signature verified. */
+    readonly actor: AccountableActor | null;
+    /** The token's granted scope, if any. */
+    readonly scope: string | null;
+}
+export interface VerifyAccountableIdentityOptions {
+    /** RFC 8707: this runtime's canonical resource URI. REQUIRED. */
+    readonly expectedAudience: string;
+    readonly expectedIssuer?: string;
+    /** Resolve the signer key by `kid` from this JWKS (else self-certifying did:kash). */
+    readonly jwks?: Jwks;
+    readonly nowSec?: number;
+    readonly clockSkewSeconds?: number;
+}
+/**
+ * Verify an agent access token and extract the accountable actor. The runtime
+ * uses `actor.agent` as the ledger actor DID for autonomous actions and
+ * `actor.owner` as the delegating principal.
+ */
+export declare function verifyAccountableIdentity(token: string, opts: VerifyAccountableIdentityOptions): Promise<AccountableIdentityResult>;
+//# sourceMappingURL=index.d.ts.map

package/dist/identity/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/identity/index.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,6BAA6B,CAAC;AAExD,uFAAuF;AACvF,MAAM,WAAW,gBAAgB;IAC/B,8DAA8D;IAC9D,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,8DAA8D;IAC9D,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,MAAM,yBAAyB,GACjC,iBAAiB,GACjB,kBAAkB,GAClB,iBAAiB,GACjB,wBAAwB,GACxB,eAAe,GACf,mBAAmB,GACnB,SAAS,GACT,eAAe,GACf,iBAAiB,GACjB,mBAAmB,GACnB,uBAAuB,CAAC;AAE5B,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,yBAAyB,GAAG,IAAI,CAAC;IAClD,gFAAgF;IAChF,QAAQ,CAAC,KAAK,EAAE,gBAAgB,GAAG,IAAI,CAAC;IACxC,yCAAyC;IACzC,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CAC/B;AAED,MAAM,WAAW,gCAAgC;IAC/C,iEAAiE;IACjE,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,sFAAsF;IACtF,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC;IACrB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;CACpC;AAED;;;;GAIG;AACH,wBAAsB,yBAAyB,CAC7C,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,gCAAgC,GACrC,OAAO,CAAC,yBAAyB,CAAC,CAkBpC"}

package/dist/identity/index.js

@@ -0,0 +1,36 @@
+// ============================================================================
+// @kashscript/hudhud/identity — the accountable-identity gate (MCP OAuth 2.1)
+// ----------------------------------------------------------------------------
+// Replaces Oreoasis's bespoke HS256 / sovereign-session auth with
+// `@kashscript/identity-server` agent tokens (RFC 9068 + 8707 + 8693): the
+// runtime accepts an audience-bound, agent→owner-delegated access token, and
+// extracts the accountable actor `{ owner, agent }` for the ledger. The bespoke
+// JWT + revocation paths are deleted; revocation, if a venture needs it, is a
+// venture-side store. `AUDIENCE_MISMATCH` covers the closeout-aud-revocation
+// behaviour.
+// ============================================================================
+import { verifyAgentToken } from "@kashscript/identity-server";
+/**
+ * Verify an agent access token and extract the accountable actor. The runtime
+ * uses `actor.agent` as the ledger actor DID for autonomous actions and
+ * `actor.owner` as the delegating principal.
+ */
+export async function verifyAccountableIdentity(token, opts) {
+    const res = await verifyAgentToken(token, {
+        expectedAudience: opts.expectedAudience,
+        ...(opts.expectedIssuer !== undefined ? { expectedIssuer: opts.expectedIssuer } : {}),
+        ...(opts.jwks !== undefined ? { jwks: opts.jwks } : {}),
+        ...(opts.nowSec !== undefined ? { nowSec: opts.nowSec } : {}),
+        ...(opts.clockSkewSeconds !== undefined ? { clockSkewSeconds: opts.clockSkewSeconds } : {}),
+    });
+    const scope = typeof res.claims?.scope === "string" ? res.claims.scope : null;
+    if (!res.ok) {
+        // audit r1 F6: never hand back a consumable actor from a FAILED verification.
+        // identity-server still surfaces `ownerBinding` on post-signature failures
+        // (expired / wrong-audience) for logging, but the runtime must not attribute
+        // ledger rows to a binding whose token is invalid — make misuse unrepresentable.
+        return { ok: false, reason: res.reason, actor: null, scope };
+    }
+    return { ok: true, reason: null, actor: res.ownerBinding, scope };
+}
+//# sourceMappingURL=index.js.map

package/dist/identity/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/identity/index.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,8EAA8E;AAC9E,+EAA+E;AAC/E,kEAAkE;AAClE,2EAA2E;AAC3E,6EAA6E;AAC7E,gFAAgF;AAChF,8EAA8E;AAC9E,6EAA6E;AAC7E,aAAa;AACb,+EAA+E;AAE/E,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AA2C/D;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,KAAa,EACb,IAAsC;IAEtC,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC,KAAK,EAAE;QACxC,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;QACvC,GAAG,CAAC,IAAI,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrF,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7D,GAAG,CAAC,IAAI,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC5F,CAAC,CAAC;IAEH,MAAM,KAAK,GAAG,OAAO,GAAG,CAAC,MAAM,EAAE,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IAC9E,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,8EAA8E;QAC9E,2EAA2E;QAC3E,6EAA6E;QAC7E,iFAAiF;QACjF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IAC/D,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,YAAY,EAAE,KAAK,EAAE,CAAC;AACpE,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,15 @@
+export * from "./errors";
+export * from "./sop";
+export * from "./privacy";
+export * from "./mcp";
+export * from "./scope";
+export * from "./ledger";
+export * from "./anchor";
+export * from "./exception";
+export * from "./certificate";
+export * from "./did-registry";
+export * from "./identity";
+export * from "./runtime";
+/** The hudhud protocol/package version (M5 initial cut). */
+export declare const HUDHUD_VERSION: "0.1.0";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAkBA,cAAc,UAAU,CAAC;AACzB,cAAc,OAAO,CAAC;AACtB,cAAc,WAAW,CAAC;AAC1B,cAAc,OAAO,CAAC;AACtB,cAAc,SAAS,CAAC;AACxB,cAAc,UAAU,CAAC;AACzB,cAAc,UAAU,CAAC;AACzB,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,YAAY,CAAC;AAC3B,cAAc,WAAW,CAAC;AAE1B,4DAA4D;AAC5D,eAAO,MAAM,cAAc,EAAG,OAAgB,CAAC"}

package/dist/index.js

@@ -0,0 +1,32 @@
+// ============================================================================
+// @kashscript/hudhud — the Agent Protocol (accountable agent runtime)
+// ----------------------------------------------------------------------------
+// The generic, venture-neutral engine lifted from the oreoasis-core-host (M5 of
+// the Manifestation): SOP compilation, MCP governance (allowlist + circuit
+// breaker + PII redaction), scope gating, a signed action ledger + chain anchor
+// (on @kashscript/attest), exception classification, work certificates
+// (AIUC-1/DSSE), a DID registry, an identity gate (identity-server agent
+// tokens), and the neuron-backed execution runtime. SOP CONTENT, fixtures,
+// routes, storage schemas, and text UIs stay venture-side (guard b).
+//
+// Subpath entries (`./errors`, `./sop`, `./mcp`, `./privacy`, `./scope`,
+// `./ledger`, `./anchor`, `./exception`, `./certificate`, `./did-registry`,
+// `./identity`, `./runtime`, `./adapters/prisma`) mirror these modules; this
+// root barrel re-exports the whole non-adapter surface. The durable Prisma
+// adapters are import-gated behind `@kashscript/hudhud/adapters/prisma`.
+// ============================================================================
+export * from "./errors";
+export * from "./sop";
+export * from "./privacy";
+export * from "./mcp";
+export * from "./scope";
+export * from "./ledger";
+export * from "./anchor";
+export * from "./exception";
+export * from "./certificate";
+export * from "./did-registry";
+export * from "./identity";
+export * from "./runtime";
+/** The hudhud protocol/package version (M5 initial cut). */
+export const HUDHUD_VERSION = "0.1.0";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,sEAAsE;AACtE,+EAA+E;AAC/E,gFAAgF;AAChF,2EAA2E;AAC3E,gFAAgF;AAChF,uEAAuE;AACvE,yEAAyE;AACzE,2EAA2E;AAC3E,qEAAqE;AACrE,EAAE;AACF,yEAAyE;AACzE,4EAA4E;AAC5E,6EAA6E;AAC7E,2EAA2E;AAC3E,yEAAyE;AACzE,+EAA+E;AAE/E,cAAc,UAAU,CAAC;AACzB,cAAc,OAAO,CAAC;AACtB,cAAc,WAAW,CAAC;AAC1B,cAAc,OAAO,CAAC;AACtB,cAAc,SAAS,CAAC;AACxB,cAAc,UAAU,CAAC;AACzB,cAAc,UAAU,CAAC;AACzB,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,YAAY,CAAC;AAC3B,cAAc,WAAW,CAAC;AAE1B,4DAA4D;AAC5D,MAAM,CAAC,MAAM,cAAc,GAAG,OAAgB,CAAC"}