@kashscript/hudhud 0.1.0

package/dist/ledger/event-schema.d.ts

@@ -0,0 +1,97 @@
+import { z } from "zod";
+/** Every accepted event type. Unknown `event` discriminators are rejected, as
+ *  are well-formed objects missing `event` UNLESS they're the empty `{}`. */
+export declare const LedgerEventSchema: z.ZodUnion<[z.ZodObject<{}, "strict", z.ZodTypeAny, {}, {}>, z.ZodDiscriminatedUnion<"event", [z.ZodObject<{
+    event: z.ZodLiteral<"session.bootstrap">;
+    sopId: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    event: "session.bootstrap";
+    sopId: string;
+}, {
+    event: "session.bootstrap";
+    sopId: string;
+}>, z.ZodObject<{
+    event: z.ZodLiteral<"tool.invoked">;
+    tool: z.ZodString;
+    durationMs: z.ZodNumber;
+}, "strip", z.ZodTypeAny, {
+    tool: string;
+    event: "tool.invoked";
+    durationMs: number;
+}, {
+    tool: string;
+    event: "tool.invoked";
+    durationMs: number;
+}>, z.ZodObject<{
+    event: z.ZodLiteral<"tool.failed">;
+    tool: z.ZodString;
+    errorCode: z.ZodString;
+    errorMessage: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    tool: string;
+    event: "tool.failed";
+    errorCode: string;
+    errorMessage?: string | undefined;
+}, {
+    tool: string;
+    event: "tool.failed";
+    errorCode: string;
+    errorMessage?: string | undefined;
+}>, z.ZodObject<{
+    event: z.ZodLiteral<"budget.exhausted">;
+    spentPaise: z.ZodUnion<[z.ZodBigInt, z.ZodString]>;
+}, "strip", z.ZodTypeAny, {
+    event: "budget.exhausted";
+    spentPaise: string | bigint;
+}, {
+    event: "budget.exhausted";
+    spentPaise: string | bigint;
+}>, z.ZodObject<{
+    event: z.ZodLiteral<"session.settled">;
+    totalSpentPaise: z.ZodUnion<[z.ZodBigInt, z.ZodString]>;
+}, "strip", z.ZodTypeAny, {
+    event: "session.settled";
+    totalSpentPaise: string | bigint;
+}, {
+    event: "session.settled";
+    totalSpentPaise: string | bigint;
+}>, z.ZodObject<{
+    event: z.ZodLiteral<"session.failed_audit">;
+    reason: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    reason: string;
+    event: "session.failed_audit";
+}, {
+    reason: string;
+    event: "session.failed_audit";
+}>, z.ZodObject<{
+    event: z.ZodLiteral<"session.process_crashed">;
+    signal: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    event: "session.process_crashed";
+    signal?: string | undefined;
+}, {
+    event: "session.process_crashed";
+    signal?: string | undefined;
+}>, z.ZodObject<{
+    event: z.ZodLiteral<"cache.checkpoint">;
+    flushedAtIso: z.ZodString;
+    lifecycleState: z.ZodOptional<z.ZodEnum<["NOT_STARTED", "RUNNING", "SETTLED", "FAILED_AUDIT", "BUDGET_EXHAUSTED", "PROCESS_CRASHED"]>>;
+    computeBudgetPaise: z.ZodOptional<z.ZodUnion<[z.ZodBigInt, z.ZodString]>>;
+    slotKeyPrefix: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    event: "cache.checkpoint";
+    flushedAtIso: string;
+    slotKeyPrefix: string;
+    lifecycleState?: "BUDGET_EXHAUSTED" | "FAILED_AUDIT" | "NOT_STARTED" | "RUNNING" | "SETTLED" | "PROCESS_CRASHED" | undefined;
+    computeBudgetPaise?: string | bigint | undefined;
+}, {
+    event: "cache.checkpoint";
+    flushedAtIso: string;
+    slotKeyPrefix: string;
+    lifecycleState?: "BUDGET_EXHAUSTED" | "FAILED_AUDIT" | "NOT_STARTED" | "RUNNING" | "SETTLED" | "PROCESS_CRASHED" | undefined;
+    computeBudgetPaise?: string | bigint | undefined;
+}>]>]>;
+export type LedgerEvent = z.infer<typeof LedgerEventSchema>;
+export declare const KNOWN_LEDGER_EVENTS: readonly ["session.bootstrap", "tool.invoked", "tool.failed", "budget.exhausted", "session.settled", "session.failed_audit", "session.process_crashed", "cache.checkpoint"];
+//# sourceMappingURL=event-schema.d.ts.map

package/dist/ledger/event-schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"event-schema.d.ts","sourceRoot":"","sources":["../../src/ledger/event-schema.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAsBxB;6EAC6E;AAC7E,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;MAY5B,CAAC;AAEH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE5D,eAAO,MAAM,mBAAmB,6KAStB,CAAC"}

package/dist/ledger/event-schema.js

@@ -0,0 +1,54 @@
+// ============================================================================
+// @kashscript/hudhud/ledger — closed-vocabulary payloadMutation schema
+// ----------------------------------------------------------------------------
+// The ledger's forensic value depends on a CLOSED event vocabulary: an
+// unconstrained payload would chain-hash any JSON. Every accepted
+// payloadMutation validates against this discriminated union before hashing.
+// Extending is APPEND-ONLY — never repurpose an existing `event` discriminator
+// (audit pipelines key on it). Ported from the oreoasis-core-host engine (M5);
+// the venture-specific error-code regex is relaxed to a neutral non-empty string.
+// ============================================================================
+import { z } from "zod";
+const NonNegBigInt = z.union([z.bigint(), z.string().regex(/^\d+$/)]);
+const SessionBootstrap = z.object({ event: z.literal("session.bootstrap"), sopId: z.string().min(1) });
+const ToolInvoked = z.object({ event: z.literal("tool.invoked"), tool: z.string().min(1), durationMs: z.number().int().nonnegative() });
+const ToolFailed = z.object({ event: z.literal("tool.failed"), tool: z.string().min(1), errorCode: z.string().min(1), errorMessage: z.string().min(1).optional() });
+const BudgetExhausted = z.object({ event: z.literal("budget.exhausted"), spentPaise: NonNegBigInt });
+const SessionSettled = z.object({ event: z.literal("session.settled"), totalSpentPaise: NonNegBigInt });
+const SessionFailedAudit = z.object({ event: z.literal("session.failed_audit"), reason: z.string().min(1) });
+const SessionProcessCrashed = z.object({ event: z.literal("session.process_crashed"), signal: z.string().min(1).optional() });
+const CacheCheckpoint = z.object({
+    event: z.literal("cache.checkpoint"),
+    flushedAtIso: z.string().min(1),
+    lifecycleState: z.enum(["NOT_STARTED", "RUNNING", "SETTLED", "FAILED_AUDIT", "BUDGET_EXHAUSTED", "PROCESS_CRASHED"]).optional(),
+    computeBudgetPaise: NonNegBigInt.optional(),
+    slotKeyPrefix: z.string().min(1),
+});
+/** Empty mutation — the bare `{}` object is a valid Empty-track value. */
+const EmptyMutation = z.object({}).strict();
+/** Every accepted event type. Unknown `event` discriminators are rejected, as
+ *  are well-formed objects missing `event` UNLESS they're the empty `{}`. */
+export const LedgerEventSchema = z.union([
+    EmptyMutation,
+    z.discriminatedUnion("event", [
+        SessionBootstrap,
+        ToolInvoked,
+        ToolFailed,
+        BudgetExhausted,
+        SessionSettled,
+        SessionFailedAudit,
+        SessionProcessCrashed,
+        CacheCheckpoint,
+    ]),
+]);
+export const KNOWN_LEDGER_EVENTS = [
+    "session.bootstrap",
+    "tool.invoked",
+    "tool.failed",
+    "budget.exhausted",
+    "session.settled",
+    "session.failed_audit",
+    "session.process_crashed",
+    "cache.checkpoint",
+];
+//# sourceMappingURL=event-schema.js.map

package/dist/ledger/event-schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"event-schema.js","sourceRoot":"","sources":["../../src/ledger/event-schema.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,uEAAuE;AACvE,+EAA+E;AAC/E,uEAAuE;AACvE,kEAAkE;AAClE,6EAA6E;AAC7E,+EAA+E;AAC/E,+EAA+E;AAC/E,kFAAkF;AAClF,+EAA+E;AAE/E,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAEtE,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,mBAAmB,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AACvG,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;AACxI,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;AACpK,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC,CAAC;AACrG,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,EAAE,eAAe,EAAE,YAAY,EAAE,CAAC,CAAC;AACxG,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,sBAAsB,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAC7G,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,yBAAyB,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;AAC9H,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/B,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC;IACpC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/B,cAAc,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,SAAS,EAAE,SAAS,EAAE,cAAc,EAAE,kBAAkB,EAAE,iBAAiB,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC/H,kBAAkB,EAAE,YAAY,CAAC,QAAQ,EAAE;IAC3C,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CACjC,CAAC,CAAC;AAEH,0EAA0E;AAC1E,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AAE5C;6EAC6E;AAC7E,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC;IACvC,aAAa;IACb,CAAC,CAAC,kBAAkB,CAAC,OAAO,EAAE;QAC5B,gBAAgB;QAChB,WAAW;QACX,UAAU;QACV,eAAe;QACf,cAAc;QACd,kBAAkB;QAClB,qBAAqB;QACrB,eAAe;KAChB,CAAC;CACH,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,mBAAmB;IACnB,cAAc;IACd,aAAa;IACb,kBAAkB;IAClB,iBAAiB;IACjB,sBAAsB;IACtB,yBAAyB;IACzB,kBAAkB;CACV,CAAC"}

package/dist/ledger/index.d.ts

@@ -0,0 +1,7 @@
+export * from "./store";
+export * from "./mutex";
+export * from "./writer";
+export * from "./event-schema";
+export { OREOASIS_LEDGER_DST, LedgerSignatureError, signLedgerBlock, verifyLedgerSignature, forensicConsistencyScan, } from "@kashscript/attest";
+export type { LedgerSignaturePayload, ForensicScanReport } from "@kashscript/attest";
+//# sourceMappingURL=index.d.ts.map

package/dist/ledger/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/ledger/index.ts"],"names":[],"mappings":"AAMA,cAAc,SAAS,CAAC;AACxB,cAAc,SAAS,CAAC;AACxB,cAAc,UAAU,CAAC;AACzB,cAAc,gBAAgB,CAAC;AAK/B,OAAO,EACL,mBAAmB,EACnB,oBAAoB,EACpB,eAAe,EACf,qBAAqB,EACrB,uBAAuB,GACxB,MAAM,oBAAoB,CAAC;AAC5B,YAAY,EAAE,sBAAsB,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC"}

package/dist/ledger/index.js

@@ -0,0 +1,14 @@
+// @kashscript/hudhud/ledger — the signed action ledger (write side).
+// The store + mutex + ForensicLedgerService live here; the row shapes, the
+// Ed25519 sign/verify, the forensic scan, and the DID registry are attest's
+// (M1 seed) and are re-exported so ventures reach the whole ledger surface
+// through hudhud.
+export * from "./store";
+export * from "./mutex";
+export * from "./writer";
+export * from "./event-schema";
+// Re-export attest's ledger crypto surface (seeded from the same Oreoasis files).
+// The DID registry lives at `@kashscript/hudhud/did-registry` (not re-exported
+// here, to avoid a same-name overlap in the top-level barrel).
+export { OREOASIS_LEDGER_DST, LedgerSignatureError, signLedgerBlock, verifyLedgerSignature, forensicConsistencyScan, } from "@kashscript/attest";
+//# sourceMappingURL=index.js.map

package/dist/ledger/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/ledger/index.ts"],"names":[],"mappings":"AAAA,qEAAqE;AACrE,2EAA2E;AAC3E,4EAA4E;AAC5E,2EAA2E;AAC3E,kBAAkB;AAElB,cAAc,SAAS,CAAC;AACxB,cAAc,SAAS,CAAC;AACxB,cAAc,UAAU,CAAC;AACzB,cAAc,gBAAgB,CAAC;AAE/B,kFAAkF;AAClF,+EAA+E;AAC/E,+DAA+D;AAC/D,OAAO,EACL,mBAAmB,EACnB,oBAAoB,EACpB,eAAe,EACf,qBAAqB,EACrB,uBAAuB,GACxB,MAAM,oBAAoB,CAAC"}

package/dist/ledger/mutex.d.ts

@@ -0,0 +1,9 @@
+export declare class SessionMutex {
+    private readonly tails;
+    /** Run `fn` while holding the mutex for `key`. Other acquirers for the same
+     *  key queue behind this call. */
+    run<T>(key: string, fn: () => Promise<T>): Promise<T>;
+    /** Number of distinct keys currently locked. */
+    activeKeyCount(): number;
+}
+//# sourceMappingURL=mutex.d.ts.map

package/dist/ledger/mutex.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mutex.d.ts","sourceRoot":"","sources":["../../src/ledger/mutex.ts"],"names":[],"mappings":"AASA,qBAAa,YAAY;IACvB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAuC;IAE7D;sCACkC;IACrB,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IAkBlE,gDAAgD;IACzC,cAAc,IAAI,MAAM;CAGhC"}

package/dist/ledger/mutex.js

@@ -0,0 +1,36 @@
+// ============================================================================
+// @kashscript/hudhud/ledger — per-key async mutex
+// ----------------------------------------------------------------------------
+// Serializes async sections keyed on a string (the ledger sessionId), closing
+// the resolvePreviousBlockHash → appendBlock race two concurrent appends on the
+// same session would otherwise hit. Ported verbatim from the oreoasis-core-host
+// engine (M5).
+// ============================================================================
+export class SessionMutex {
+    tails = new Map();
+    /** Run `fn` while holding the mutex for `key`. Other acquirers for the same
+     *  key queue behind this call. */
+    async run(key, fn) {
+        const prior = this.tails.get(key) ?? Promise.resolve();
+        let release = () => { };
+        const gate = new Promise((resolve) => {
+            release = resolve;
+        });
+        this.tails.set(key, gate);
+        try {
+            await prior;
+            return await fn();
+        }
+        finally {
+            if (this.tails.get(key) === gate) {
+                this.tails.delete(key);
+            }
+            release();
+        }
+    }
+    /** Number of distinct keys currently locked. */
+    activeKeyCount() {
+        return this.tails.size;
+    }
+}
+//# sourceMappingURL=mutex.js.map

package/dist/ledger/mutex.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mutex.js","sourceRoot":"","sources":["../../src/ledger/mutex.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,kDAAkD;AAClD,+EAA+E;AAC/E,8EAA8E;AAC9E,gFAAgF;AAChF,gFAAgF;AAChF,eAAe;AACf,+EAA+E;AAE/E,MAAM,OAAO,YAAY;IACN,KAAK,GAAG,IAAI,GAAG,EAA4B,CAAC;IAE7D;sCACkC;IAC3B,KAAK,CAAC,GAAG,CAAI,GAAW,EAAE,EAAoB;QACnD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACvD,IAAI,OAAO,GAA0B,GAAG,EAAE,GAAE,CAAC,CAAC;QAC9C,MAAM,IAAI,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;YACzC,OAAO,GAAG,OAAO,CAAC;QACpB,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC1B,IAAI,CAAC;YACH,MAAM,KAAK,CAAC;YACZ,OAAO,MAAM,EAAE,EAAE,CAAC;QACpB,CAAC;gBAAS,CAAC;YACT,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC;gBACjC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACzB,CAAC;YACD,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAED,gDAAgD;IACzC,cAAc;QACnB,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;IACzB,CAAC;CACF"}

package/dist/ledger/store.d.ts

@@ -0,0 +1,31 @@
+import type { LedgerBlockInput, LedgerBlockRecord } from "@kashscript/attest";
+export type { LedgerBlockInput, LedgerBlockRecord };
+export interface LedgerStore {
+    appendBlock(input: LedgerBlockInput): Promise<LedgerBlockRecord>;
+    latestBlockForSession(sessionId: string): Promise<LedgerBlockRecord | null>;
+    countBlocksForSession(sessionId: string): Promise<number>;
+    /** Every row for `sessionId` ordered by stepIndex — MUST NOT skip rows (the
+     *  forensic scan's whole job is to detect missing/forged entries). */
+    listBlocksForSession(sessionId: string): Promise<ReadonlyArray<LedgerBlockRecord>>;
+}
+/** In-memory store keyed by sessionId. Concurrent same-session appends are
+ *  serialized by the JS event loop + the (sessionId, stepIndex) uniqueness check. */
+export declare class InMemoryLedgerStore implements LedgerStore {
+    private readonly bySession;
+    private nextLocalId;
+    appendBlock(input: LedgerBlockInput): Promise<LedgerBlockRecord>;
+    latestBlockForSession(sessionId: string): Promise<LedgerBlockRecord | null>;
+    countBlocksForSession(sessionId: string): Promise<number>;
+    listBlocksForSession(sessionId: string): Promise<ReadonlyArray<LedgerBlockRecord>>;
+    /** TEST-ONLY: splice a forged row bypassing the uniqueness + ordering
+     *  invariants, so the forensic scan can be exercised against a corrupt chain.
+     *  Production callers MUST NOT use this. */
+    unsafeInsertForgedRow(record: LedgerBlockRecord): void;
+}
+/** Resolve the previous block hash for the next insert into `sessionId`.
+ *  Genesis (stepIndex 0) → GENESIS_PREV_HASH; else the prior row's currentHash. */
+export declare function resolvePreviousBlockHash(store: LedgerStore, sessionId: string): Promise<{
+    previousBlockHash: string;
+    nextStepIndex: number;
+}>;
+//# sourceMappingURL=store.d.ts.map

package/dist/ledger/store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../src/ledger/store.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAE9E,YAAY,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,CAAC;AAEpD,MAAM,WAAW,WAAW;IAC1B,WAAW,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACjE,qBAAqB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAAC;IAC5E,qBAAqB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC1D;0EACsE;IACtE,oBAAoB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,iBAAiB,CAAC,CAAC,CAAC;CACpF;AAED;qFACqF;AACrF,qBAAa,mBAAoB,YAAW,WAAW;IACrD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA0C;IACpE,OAAO,CAAC,WAAW,CAAK;IAElB,WAAW,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAiBhE,qBAAqB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC;IAM3E,qBAAqB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAIzD,oBAAoB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,iBAAiB,CAAC,CAAC;IAMxF;;gDAE4C;IAC5C,qBAAqB,CAAC,MAAM,EAAE,iBAAiB,GAAG,IAAI;CAMvD;AAED;mFACmF;AACnF,wBAAsB,wBAAwB,CAC5C,KAAK,EAAE,WAAW,EAClB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC;IAAE,iBAAiB,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAA;CAAE,CAAC,CAM/D"}

package/dist/ledger/store.js

@@ -0,0 +1,66 @@
+// ============================================================================
+// @kashscript/hudhud/ledger — append-only ledger store (write side)
+// ----------------------------------------------------------------------------
+// The write-side store the ForensicLedgerService appends to. The row shapes +
+// the sign/verify/forensic-scan primitives live in `@kashscript/attest` (M1
+// seed); this module ships the store interface + an in-memory reference +
+// `resolvePreviousBlockHash`. A Prisma adapter ships at `./adapters/prisma`.
+// Ported from the oreoasis-core-host engine (M5).
+// ============================================================================
+import { GENESIS_PREV_HASH } from "@kashscript/attest";
+/** In-memory store keyed by sessionId. Concurrent same-session appends are
+ *  serialized by the JS event loop + the (sessionId, stepIndex) uniqueness check. */
+export class InMemoryLedgerStore {
+    bySession = new Map();
+    nextLocalId = 1;
+    async appendBlock(input) {
+        const existing = this.bySession.get(input.sessionId) ?? [];
+        if (existing.some((b) => b.stepIndex === input.stepIndex)) {
+            throw new Error(`LEDGER_DUPLICATE_STEP: (sessionId=${input.sessionId}, stepIndex=${input.stepIndex})`);
+        }
+        const record = {
+            ...input,
+            payloadMutation: { ...input.payloadMutation },
+            emittedAt: new Date().toISOString(),
+            localId: this.nextLocalId++,
+        };
+        existing.push(record);
+        existing.sort((a, b) => a.stepIndex - b.stepIndex);
+        this.bySession.set(input.sessionId, existing);
+        return record;
+    }
+    async latestBlockForSession(sessionId) {
+        const list = this.bySession.get(sessionId);
+        if (!list || list.length === 0)
+            return null;
+        return list[list.length - 1];
+    }
+    async countBlocksForSession(sessionId) {
+        return (this.bySession.get(sessionId) ?? []).length;
+    }
+    async listBlocksForSession(sessionId) {
+        const list = this.bySession.get(sessionId);
+        if (list === undefined)
+            return [];
+        return list.map((row) => ({ ...row, payloadMutation: { ...row.payloadMutation } }));
+    }
+    /** TEST-ONLY: splice a forged row bypassing the uniqueness + ordering
+     *  invariants, so the forensic scan can be exercised against a corrupt chain.
+     *  Production callers MUST NOT use this. */
+    unsafeInsertForgedRow(record) {
+        const existing = this.bySession.get(record.sessionId) ?? [];
+        existing.push({ ...record, payloadMutation: { ...record.payloadMutation } });
+        existing.sort((a, b) => a.stepIndex - b.stepIndex);
+        this.bySession.set(record.sessionId, existing);
+    }
+}
+/** Resolve the previous block hash for the next insert into `sessionId`.
+ *  Genesis (stepIndex 0) → GENESIS_PREV_HASH; else the prior row's currentHash. */
+export async function resolvePreviousBlockHash(store, sessionId) {
+    const latest = await store.latestBlockForSession(sessionId);
+    if (latest === null) {
+        return { previousBlockHash: GENESIS_PREV_HASH, nextStepIndex: 0 };
+    }
+    return { previousBlockHash: latest.currentTransactionBlockHash, nextStepIndex: latest.stepIndex + 1 };
+}
+//# sourceMappingURL=store.js.map

package/dist/ledger/store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../../src/ledger/store.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,oEAAoE;AACpE,+EAA+E;AAC/E,8EAA8E;AAC9E,4EAA4E;AAC5E,0EAA0E;AAC1E,6EAA6E;AAC7E,kDAAkD;AAClD,+EAA+E;AAE/E,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAcvD;qFACqF;AACrF,MAAM,OAAO,mBAAmB;IACb,SAAS,GAAG,IAAI,GAAG,EAA+B,CAAC;IAC5D,WAAW,GAAG,CAAC,CAAC;IAExB,KAAK,CAAC,WAAW,CAAC,KAAuB;QACvC,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;QAC3D,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;YAC1D,MAAM,IAAI,KAAK,CAAC,qCAAqC,KAAK,CAAC,SAAS,eAAe,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC;QACzG,CAAC;QACD,MAAM,MAAM,GAAsB;YAChC,GAAG,KAAK;YACR,eAAe,EAAE,EAAE,GAAG,KAAK,CAAC,eAAe,EAAE;YAC7C,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,OAAO,EAAE,IAAI,CAAC,WAAW,EAAE;SAC5B,CAAC;QACF,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACtB,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC;QACnD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QAC9C,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,qBAAqB,CAAC,SAAiB;QAC3C,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC3C,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAC5C,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC;IAChC,CAAC;IAED,KAAK,CAAC,qBAAqB,CAAC,SAAiB;QAC3C,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;IACtD,CAAC;IAED,KAAK,CAAC,oBAAoB,CAAC,SAAiB;QAC1C,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC3C,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO,EAAE,CAAC;QAClC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,GAAG,EAAE,eAAe,EAAE,EAAE,GAAG,GAAG,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC,CAAC;IACtF,CAAC;IAED;;gDAE4C;IAC5C,qBAAqB,CAAC,MAAyB;QAC7C,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;QAC5D,QAAQ,CAAC,IAAI,CAAC,EAAE,GAAG,MAAM,EAAE,eAAe,EAAE,EAAE,GAAG,MAAM,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;QAC7E,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC;QACnD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IACjD,CAAC;CACF;AAED;mFACmF;AACnF,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,KAAkB,EAClB,SAAiB;IAEjB,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,qBAAqB,CAAC,SAAS,CAAC,CAAC;IAC5D,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,aAAa,EAAE,CAAC,EAAE,CAAC;IACpE,CAAC;IACD,OAAO,EAAE,iBAAiB,EAAE,MAAM,CAAC,2BAA2B,EAAE,aAAa,EAAE,MAAM,CAAC,SAAS,GAAG,CAAC,EAAE,CAAC;AACxG,CAAC"}

package/dist/ledger/writer.d.ts

@@ -0,0 +1,69 @@
+import type { DidRegistry, ForensicScanReport, LedgerSignaturePayload } from "@kashscript/attest";
+import { SessionMutex } from "./mutex";
+import type { LedgerStore } from "./store";
+export declare const ACTOR_CLASSES: readonly ["AGENT", "SYSTEM_KERNEL", "OPERATOR_ADMIN", "COMPLIANCE_AUDITOR"];
+export type ActorClass = (typeof ACTOR_CLASSES)[number];
+/** An in-process signing identity the host controls (the runtime key that signs
+ *  autonomous agent actions). The private key stays captured behind `sign()`. */
+export interface HostActorSigner {
+    readonly actorDid: string;
+    readonly actorClass: ActorClass;
+    sign(payload: LedgerSignaturePayload): Promise<string>;
+}
+/** Build a HostActorSigner from a raw Ed25519 private key. `actorDid` must be a
+ *  did:kash and be registered in the DidRegistry the service verifies against. */
+export declare function createEd25519HostSigner(opts: {
+    readonly actorDid: string;
+    readonly actorClass: ActorClass;
+    readonly privateKey: Uint8Array;
+}): HostActorSigner;
+export interface AppendTransitionLogInput {
+    readonly sessionId: string;
+    readonly stepIndex: number;
+    readonly actorDid: string;
+    readonly actorClass: ActorClass;
+    readonly payloadMutation: Readonly<Record<string, unknown>>;
+    /** `ed25519:<128-hex>` wire form — verified inside the service. */
+    readonly signature: string;
+}
+export interface AppendedLedgerBlock {
+    readonly sessionId: string;
+    readonly stepIndex: number;
+    readonly actorDid: string;
+    readonly actorClass: ActorClass;
+    readonly previousBlockHash: string;
+    readonly currentTransactionBlockHash: string;
+    readonly signature: string;
+    readonly emittedAt: string;
+    readonly localLedgerId: number;
+}
+export interface ForensicLedgerServiceDeps {
+    readonly ledger: LedgerStore;
+    readonly sessionMutex: SessionMutex;
+    readonly didRegistry: DidRegistry;
+    /** Required only for `appendActorTransition` (the self-signing path). */
+    readonly hostSigner?: HostActorSigner;
+}
+export declare class ForensicLedgerService {
+    private readonly deps;
+    constructor(deps: ForensicLedgerServiceDeps);
+    /** Append a caller-pre-signed transition. @throws LedgerAppendError on any
+     *  validation / signature / store failure. */
+    appendTransitionLog(input: AppendTransitionLogInput): Promise<AppendedLedgerBlock>;
+    /** Self-signing append for the in-host autonomous actor: resolves + signs +
+     *  verifies + inserts atomically inside the per-session mutex. Requires
+     *  `deps.hostSigner`. */
+    appendActorTransition(input: {
+        readonly sessionId: string;
+        readonly payloadMutation: Readonly<Record<string, unknown>>;
+    }): Promise<AppendedLedgerBlock>;
+    /** MUST be called inside the session mutex — computes the canonical block
+     *  hash, verifies the signature, and inserts. */
+    private commitResolvedBlock;
+    /** Walk the whole chain for `sessionId` and re-verify hashes + signatures.
+     *  Delegates to attest's `forensicConsistencyScan` (throws `TamperError` on
+     *  the first variance: STEP_INDEX_GAP / PREVIOUS_HASH_MISMATCH /
+     *  PAYLOAD_HASH_VARIANCE / SIGNATURE_VERIFY_FAILED). */
+    forensicConsistencyScan(sessionId: string): Promise<ForensicScanReport>;
+}
+//# sourceMappingURL=writer.d.ts.map

package/dist/ledger/writer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"writer.d.ts","sourceRoot":"","sources":["../../src/ledger/writer.ts"],"names":[],"mappings":"AAsBA,OAAO,KAAK,EAAE,WAAW,EAAE,kBAAkB,EAAqB,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAGrH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAEvC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAE3C,eAAO,MAAM,aAAa,6EAA8E,CAAC;AACzG,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC;AAExD;iFACiF;AACjF,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,IAAI,CAAC,OAAO,EAAE,sBAAsB,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CACxD;AAED;kFACkF;AAClF,wBAAgB,uBAAuB,CAAC,IAAI,EAAE;IAC5C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;CACjC,GAAG,eAAe,CASlB;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,eAAe,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAC5D,mEAAmE;IACnE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,2BAA2B,EAAE,MAAM,CAAC;IAC7C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAChC;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAC;IACpC,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAClC,yEAAyE;IACzE,QAAQ,CAAC,UAAU,CAAC,EAAE,eAAe,CAAC;CACvC;AAED,qBAAa,qBAAqB;IACpB,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAAJ,IAAI,EAAE,yBAAyB;IAE5D;kDAC8C;IACxC,mBAAmB,CAAC,KAAK,EAAE,wBAAwB,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAuCxF;;6BAEyB;IACnB,qBAAqB,CAAC,KAAK,EAAE;QACjC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAC3B,QAAQ,CAAC,eAAe,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;KAC7D,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAoChC;qDACiD;YACnC,mBAAmB;IAiEjC;;;4DAGwD;IAClD,uBAAuB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC;CAI9E"}

package/dist/ledger/writer.js

@@ -0,0 +1,167 @@
+// ============================================================================
+// @kashscript/hudhud/ledger — ForensicLedgerService (the write side)
+// ----------------------------------------------------------------------------
+// The single append entry point: acquire the per-session mutex, resolve the
+// chain tip, verify the caller stepIndex, compute the canonical block hash,
+// verify the Ed25519 signature, and atomically insert. The self-signing path
+// (`appendActorTransition`) resolves + signs INSIDE the mutex so two concurrent
+// appends can never sign over a stale (prev, stepIndex). The chain-hash,
+// signature sign/verify, and forensic scan are attest's (M1 seed); this module
+// is the write-side orchestration. Ported from oreoasis-core-host/services/
+// ledger-writer (M5); errors neutralized (append → LedgerAppendError, tamper →
+// attest TamperError).
+// ============================================================================
+import { KASH_DID_PATTERN, LedgerSignatureError, chainBlockHash, forensicConsistencyScan, signLedgerBlock, verifyLedgerSignature, } from "@kashscript/attest";
+import { LedgerAppendError } from "../errors";
+import { SessionMutex } from "./mutex";
+import { resolvePreviousBlockHash } from "./store";
+export const ACTOR_CLASSES = ["AGENT", "SYSTEM_KERNEL", "OPERATOR_ADMIN", "COMPLIANCE_AUDITOR"];
+/** Build a HostActorSigner from a raw Ed25519 private key. `actorDid` must be a
+ *  did:kash and be registered in the DidRegistry the service verifies against. */
+export function createEd25519HostSigner(opts) {
+    if (!KASH_DID_PATTERN.test(opts.actorDid)) {
+        throw new LedgerAppendError("host signer actorDid is not a valid did:kash:… identifier");
+    }
+    return {
+        actorDid: opts.actorDid,
+        actorClass: opts.actorClass,
+        sign: (payload) => signLedgerBlock(payload, opts.privateKey),
+    };
+}
+export class ForensicLedgerService {
+    deps;
+    constructor(deps) {
+        this.deps = deps;
+    }
+    /** Append a caller-pre-signed transition. @throws LedgerAppendError on any
+     *  validation / signature / store failure. */
+    async appendTransitionLog(input) {
+        if (typeof input.sessionId !== "string" || input.sessionId.length === 0) {
+            throw new LedgerAppendError("sessionId is required");
+        }
+        if (typeof input.actorDid !== "string" || !KASH_DID_PATTERN.test(input.actorDid)) {
+            throw new LedgerAppendError("actorDid must be a valid did:kash:… identifier");
+        }
+        if (typeof input.signature !== "string" || input.signature.length === 0) {
+            throw new LedgerAppendError("signature is required");
+        }
+        if (!ACTOR_CLASSES.includes(input.actorClass)) {
+            throw new LedgerAppendError(`actorClass must be one of [${ACTOR_CLASSES.join(", ")}]`);
+        }
+        if (!Number.isInteger(input.stepIndex) || input.stepIndex < 0) {
+            throw new LedgerAppendError("stepIndex must be a non-negative integer");
+        }
+        return this.deps.sessionMutex.run(input.sessionId, async () => {
+            const { previousBlockHash: resolvedPrev, nextStepIndex } = await resolvePreviousBlockHash(this.deps.ledger, input.sessionId);
+            if (input.stepIndex !== nextStepIndex) {
+                throw new LedgerAppendError(`stepIndex ${input.stepIndex} does not match next expected ${nextStepIndex} for session ${input.sessionId}`);
+            }
+            return this.commitResolvedBlock({
+                sessionId: input.sessionId,
+                stepIndex: input.stepIndex,
+                actorDid: input.actorDid,
+                actorClass: input.actorClass,
+                payloadMutation: input.payloadMutation,
+                signature: input.signature,
+                resolvedPrev,
+            });
+        });
+    }
+    /** Self-signing append for the in-host autonomous actor: resolves + signs +
+     *  verifies + inserts atomically inside the per-session mutex. Requires
+     *  `deps.hostSigner`. */
+    async appendActorTransition(input) {
+        const signer = this.deps.hostSigner;
+        if (signer === undefined) {
+            throw new LedgerAppendError("appendActorTransition requires a configured hostSigner");
+        }
+        if (typeof input.sessionId !== "string" || input.sessionId.length === 0) {
+            throw new LedgerAppendError("sessionId is required");
+        }
+        if (input.payloadMutation === null || typeof input.payloadMutation !== "object" || Array.isArray(input.payloadMutation)) {
+            throw new LedgerAppendError("payloadMutation must be a plain object");
+        }
+        return this.deps.sessionMutex.run(input.sessionId, async () => {
+            const { previousBlockHash: resolvedPrev, nextStepIndex } = await resolvePreviousBlockHash(this.deps.ledger, input.sessionId);
+            const signature = await signer.sign({
+                sessionId: input.sessionId,
+                stepIndex: nextStepIndex,
+                actorDid: signer.actorDid,
+                previousBlockHash: resolvedPrev,
+                payloadMutation: input.payloadMutation,
+            });
+            return this.commitResolvedBlock({
+                sessionId: input.sessionId,
+                stepIndex: nextStepIndex,
+                actorDid: signer.actorDid,
+                actorClass: signer.actorClass,
+                payloadMutation: input.payloadMutation,
+                signature,
+                resolvedPrev,
+            });
+        });
+    }
+    /** MUST be called inside the session mutex — computes the canonical block
+     *  hash, verifies the signature, and inserts. */
+    async commitResolvedBlock(args) {
+        const currentTransactionBlockHash = await chainBlockHash({
+            sessionId: args.sessionId,
+            stepIndex: args.stepIndex,
+            actorDid: args.actorDid,
+            payloadMutation: args.payloadMutation,
+            signature: args.signature,
+        }, args.resolvedPrev);
+        try {
+            await verifyLedgerSignature({
+                signatureWire: args.signature,
+                payload: {
+                    sessionId: args.sessionId,
+                    stepIndex: args.stepIndex,
+                    actorDid: args.actorDid,
+                    previousBlockHash: args.resolvedPrev,
+                    payloadMutation: args.payloadMutation,
+                },
+                didRegistry: this.deps.didRegistry,
+            });
+        }
+        catch (cause) {
+            const reason = cause instanceof LedgerSignatureError ? cause.reason : "UNKNOWN";
+            throw new LedgerAppendError(`Ed25519 signature verification failed (${reason})`);
+        }
+        let record;
+        try {
+            record = await this.deps.ledger.appendBlock({
+                sessionId: args.sessionId,
+                stepIndex: args.stepIndex,
+                previousBlockHash: args.resolvedPrev,
+                currentTransactionBlockHash,
+                actorDid: args.actorDid,
+                payloadMutation: args.payloadMutation,
+                signature: args.signature,
+            });
+        }
+        catch (cause) {
+            throw new LedgerAppendError(`Ledger store write failed — ${cause instanceof Error ? cause.message : "unknown"}`);
+        }
+        return {
+            sessionId: record.sessionId,
+            stepIndex: record.stepIndex,
+            actorDid: record.actorDid,
+            actorClass: args.actorClass,
+            previousBlockHash: record.previousBlockHash,
+            currentTransactionBlockHash: record.currentTransactionBlockHash,
+            signature: record.signature,
+            emittedAt: record.emittedAt,
+            localLedgerId: record.localId,
+        };
+    }
+    /** Walk the whole chain for `sessionId` and re-verify hashes + signatures.
+     *  Delegates to attest's `forensicConsistencyScan` (throws `TamperError` on
+     *  the first variance: STEP_INDEX_GAP / PREVIOUS_HASH_MISMATCH /
+     *  PAYLOAD_HASH_VARIANCE / SIGNATURE_VERIFY_FAILED). */
+    async forensicConsistencyScan(sessionId) {
+        const rows = await this.deps.ledger.listBlocksForSession(sessionId);
+        return forensicConsistencyScan(sessionId, rows, this.deps.didRegistry);
+    }
+}
+//# sourceMappingURL=writer.js.map

package/dist/ledger/writer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"writer.js","sourceRoot":"","sources":["../../src/ledger/writer.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,qEAAqE;AACrE,+EAA+E;AAC/E,4EAA4E;AAC5E,4EAA4E;AAC5E,6EAA6E;AAC7E,gFAAgF;AAChF,yEAAyE;AACzE,+EAA+E;AAC/E,4EAA4E;AAC5E,+EAA+E;AAC/E,uBAAuB;AACvB,+EAA+E;AAE/E,OAAO,EACL,gBAAgB,EAChB,oBAAoB,EACpB,cAAc,EACd,uBAAuB,EACvB,eAAe,EACf,qBAAqB,GACtB,MAAM,oBAAoB,CAAC;AAG5B,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,wBAAwB,EAAE,MAAM,SAAS,CAAC;AAGnD,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,oBAAoB,CAAU,CAAC;AAWzG;kFACkF;AAClF,MAAM,UAAU,uBAAuB,CAAC,IAIvC;IACC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,iBAAiB,CAAC,2DAA2D,CAAC,CAAC;IAC3F,CAAC;IACD,OAAO;QACL,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC;KAC7D,CAAC;AACJ,CAAC;AAgCD,MAAM,OAAO,qBAAqB;IACH;IAA7B,YAA6B,IAA+B;QAA/B,SAAI,GAAJ,IAAI,CAA2B;IAAG,CAAC;IAEhE;kDAC8C;IAC9C,KAAK,CAAC,mBAAmB,CAAC,KAA+B;QACvD,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,IAAI,KAAK,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxE,MAAM,IAAI,iBAAiB,CAAC,uBAAuB,CAAC,CAAC;QACvD,CAAC;QACD,IAAI,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;YACjF,MAAM,IAAI,iBAAiB,CAAC,gDAAgD,CAAC,CAAC;QAChF,CAAC;QACD,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,IAAI,KAAK,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxE,MAAM,IAAI,iBAAiB,CAAC,uBAAuB,CAAC,CAAC;QACvD,CAAC;QACD,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;YAC9C,MAAM,IAAI,iBAAiB,CAAC,8BAA8B,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACzF,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC,SAAS,GAAG,CAAC,EAAE,CAAC;YAC9D,MAAM,IAAI,iBAAiB,CAAC,0CAA0C,CAAC,CAAC;QAC1E,CAAC;QAED,OAAO,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE;YAC5D,MAAM,EAAE,iBAAiB,EAAE,YAAY,EAAE,aAAa,EAAE,GAAG,MAAM,wBAAwB,CACvF,IAAI,CAAC,IAAI,CAAC,MAAM,EAChB,KAAK,CAAC,SAAS,CAChB,CAAC;YACF,IAAI,KAAK,CAAC,SAAS,KAAK,aAAa,EAAE,CAAC;gBACtC,MAAM,IAAI,iBAAiB,CACzB,aAAa,KAAK,CAAC,SAAS,iCAAiC,aAAa,gBAAgB,KAAK,CAAC,SAAS,EAAE,CAC5G,CAAC;YACJ,CAAC;YACD,OAAO,IAAI,CAAC,mBAAmB,CAAC;gBAC9B,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,eAAe,EAAE,KAAK,CAAC,eAAe;gBACtC,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,YAAY;aACb,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;6BAEyB;IACzB,KAAK,CAAC,qBAAqB,CAAC,KAG3B;QACC,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC;QACpC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,IAAI,iBAAiB,CAAC,wDAAwD,CAAC,CAAC;QACxF,CAAC;QACD,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,IAAI,KAAK,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxE,MAAM,IAAI,iBAAiB,CAAC,uBAAuB,CAAC,CAAC;QACvD,CAAC;QACD,IAAI,KAAK,CAAC,eAAe,KAAK,IAAI,IAAI,OAAO,KAAK,CAAC,eAAe,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,CAAC;YACxH,MAAM,IAAI,iBAAiB,CAAC,wCAAwC,CAAC,CAAC;QACxE,CAAC;QAED,OAAO,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE;YAC5D,MAAM,EAAE,iBAAiB,EAAE,YAAY,EAAE,aAAa,EAAE,GAAG,MAAM,wBAAwB,CACvF,IAAI,CAAC,IAAI,CAAC,MAAM,EAChB,KAAK,CAAC,SAAS,CAChB,CAAC;YACF,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC;gBAClC,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,SAAS,EAAE,aAAa;gBACxB,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,iBAAiB,EAAE,YAAY;gBAC/B,eAAe,EAAE,KAAK,CAAC,eAAe;aACvC,CAAC,CAAC;YACH,OAAO,IAAI,CAAC,mBAAmB,CAAC;gBAC9B,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,SAAS,EAAE,aAAa;gBACxB,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,eAAe,EAAE,KAAK,CAAC,eAAe;gBACtC,SAAS;gBACT,YAAY;aACb,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED;qDACiD;IACzC,KAAK,CAAC,mBAAmB,CAAC,IAQjC;QACC,MAAM,2BAA2B,GAAG,MAAM,cAAc,CACtD;YACE,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,eAAe,EAAE,IAAI,CAAC,eAAe;YACrC,SAAS,EAAE,IAAI,CAAC,SAAS;SAC1B,EACD,IAAI,CAAC,YAAY,CAClB,CAAC;QAEF,IAAI,CAAC;YACH,MAAM,qBAAqB,CAAC;gBAC1B,aAAa,EAAE,IAAI,CAAC,SAAS;gBAC7B,OAAO,EAAE;oBACP,SAAS,EAAE,IAAI,CAAC,SAAS;oBACzB,SAAS,EAAE,IAAI,CAAC,SAAS;oBACzB,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,iBAAiB,EAAE,IAAI,CAAC,YAAY;oBACpC,eAAe,EAAE,IAAI,CAAC,eAAe;iBACtC;gBACD,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW;aACnC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,MAAM,GAAG,KAAK,YAAY,oBAAoB,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,MAAM,IAAI,iBAAiB,CAAC,0CAA0C,MAAM,GAAG,CAAC,CAAC;QACnF,CAAC;QAED,IAAI,MAAyB,CAAC;QAC9B,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC;gBAC1C,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,iBAAiB,EAAE,IAAI,CAAC,YAAY;gBACpC,2BAA2B;gBAC3B,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,eAAe,EAAE,IAAI,CAAC,eAAe;gBACrC,SAAS,EAAE,IAAI,CAAC,SAAS;aAC1B,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,iBAAiB,CAAC,+BAA+B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;QACnH,CAAC;QAED,OAAO;YACL,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;YAC3C,2BAA2B,EAAE,MAAM,CAAC,2BAA2B;YAC/D,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,aAAa,EAAE,MAAM,CAAC,OAAO;SAC9B,CAAC;IACJ,CAAC;IAED;;;4DAGwD;IACxD,KAAK,CAAC,uBAAuB,CAAC,SAAiB;QAC7C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAC;QACpE,OAAO,uBAAuB,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACzE,CAAC;CACF"}