@kashscript/hudhud 0.1.0

package/dist/runtime/runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runner.js","sourceRoot":"","sources":["../../src/runtime/runner.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,8CAA8C;AAC9C,+EAA+E;AAC/E,qEAAqE;AACrE,0EAA0E;AAC1E,gFAAgF;AAChF,6EAA6E;AAC7E,+EAA+E;AAC/E,yEAAyE;AACzE,2DAA2D;AAC3D,+EAA+E;AAE/E,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAE1E,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAM9D,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAEpD,OAAO,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAC;AA0DtD,MAAM,OAAO,cAAc;IACI;IAA7B,YAA6B,IAAwB;QAAxB,SAAI,GAAJ,IAAI,CAAoB;IAAG,CAAC;IAEzD,KAAK,CAAC,GAAG,CAAC,KAAuB;QAC/B,OAAO,IAAI,CAAC,aAAa,CAAC;YACxB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,GAAG,EAAE,KAAK,CAAC,GAAG;YACd,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAClD,CAAC,CAAC;IACL,CAAC;IAED;;;+EAG2E;IAC3E,KAAK,CAAC,MAAM,CAAC,KAA0B;QACrC,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,cAAc,CAAC,QAAQ,CAAC;QAElE,MAAM,OAAO,GAAG,MAAM,sBAAsB,CAAC;YAC3C,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;YAC1C,gBAAgB,EAAE,QAAQ;YAC1B,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC7D,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;YAChB,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,EAAE,8BAA8B,OAAO,CAAC,MAAM,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;QAC5J,CAAC;QAED,4EAA4E;QAC5E,4CAA4C;QAC5C,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;YACpC,IAAI,CAAC;gBACH,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YAC1D,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,EAAE,yCAAyC,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;YACvJ,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC,aAAa,CAAC;YACxB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,GAAG,EAAE,KAAK,CAAC,GAAG;YACd,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,mBAAmB,EAAE,IAAI,GAAG,CAA+B,CAAC,CAAC,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;YACxF,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAClD,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,aAAa,CAAC,IAQ3B;QACC,MAAM,cAAc,GAAG,IAAI,oBAAoB,CAAC;YAC9C,aAAa,EAAE,IAAI,CAAC,IAAI,CAAC,aAAa;YACtC,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,cAAc;YACxC,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,QAAQ,EAAE,IAAI,CAAC,QAAQ;SACxB,CAAC,CAAC;QAEH,8EAA8E;QAC9E,MAAM,OAAO,GAAG,CAAC,EAAiB,EAAQ,EAAE,GAAE,CAAC,CAAC;QAEhD,MAAM,QAAQ,GAAG,IAAI,WAAW,CAAC;YAC/B,cAAc;YACd,cAAc,EAAE,IAAI,cAAc,EAAE;YACpC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtC,OAAO;SACR,CAAC,CAAC;QAEH,MAAM,YAAY,GAAG,IAAI,GAAG,EAAmB,CAAC;QAChD,MAAM,GAAG,GAAqB;YAC5B,IAAI,EAAE,oBAAoB,CAAC,IAAI,CAAC,SAAS,CAAC;YAC1C,QAAQ,EAAE,IAAI,gBAAgB,CAAC,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC9D,YAAY,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE;gBAC/B,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YACnC,CAAC;YACD,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjE,GAAG,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,IAAI,CAAC,mBAAmB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACvF,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAErD,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;YACpB,KAAK,WAAW;gBACd,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC;YAC7G,KAAK,WAAW,CAAC,CAAC,CAAC;gBACjB,IAAI,MAAM,CAAC,MAAM,KAAK,oBAAoB,EAAE,CAAC;oBAC3C,OAAO;wBACL,MAAM,EAAE,WAAW;wBACnB,OAAO,EAAE,EAAE;wBACX,UAAU,EAAE;4BACV,eAAe,EAAE,MAAM,CAAC,MAAM;4BAC9B,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,eAAe,EAAE,MAAM,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;4BAChH,YAAY;yBACb;wBACD,YAAY,EAAE,MAAM,CAAC,QAAQ;qBAC9B,CAAC;gBACJ,CAAC;gBACD,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,aAAa,MAAM,CAAC,MAAM,EAAE,EAAE,EAAE,YAAY,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC;YAC1J,CAAC;YACD,KAAK,QAAQ;gBACX,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,EAAE,YAAY,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC;QACnJ,CAAC;IACH,CAAC;CACF;AAED;;oFAEoF;AACpF,MAAM,UAAU,iBAAiB,CAAC,MAAkB;IAClD,MAAM,YAAY,GAAG,MAAM,EAAE,YAAY,IAAI,GAAG,CAAC;IACjD,MAAM,cAAc,GAAG,MAAM,EAAE,cAAc,IAAI,OAAO,CAAC;IACzD,MAAM,oBAAoB,GAAG,MAAM,EAAE,oBAAoB,IAAI,aAAa,CAAC;IAC3E,MAAM,IAAI,GAAG,CAAC,CAAS,EAA0C,EAAE,CAAC,CAA2C,CAAC;IAEhH,MAAM,MAAM,GAAG;QACb,cAAc,EAAE,GAAG;QACnB,qBAAqB,EAAE,OAAO;QAC9B,sBAAsB,EAAE,OAAO;QAC/B,kBAAkB,EAAE,YAAY;QAChC,cAAc;QACd,MAAM,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,oBAAoB,EAAE,GAAG,EAAE,aAAa,EAAE,GAAG,EAAE,eAAe,EAAE,CAAC,EAAE,uBAAuB,EAAE,GAAG,EAAE;QACzH,WAAW,EAAE,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,cAAc,EAAE,eAAe,EAAE,KAAK,EAAE;QAC/F,QAAQ,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,iBAAiB,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,kBAAkB,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,iBAAiB,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,iBAAiB,EAAE,EAAE,EAAE;QACpJ,WAAW,EAAE,EAAE,WAAW,EAAE,UAAU,EAAE,wBAAwB,EAAE,GAAG,EAAE,qBAAqB,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE;KACpJ,CAAC;IACF,OAAO,MAAmC,CAAC;AAC7C,CAAC;AAED;;mEAEmE;AACnE,MAAM,UAAU,oBAAoB,CAAC,SAAiB;IACpD,MAAM,IAAI,GAAG;QACX,QAAQ,EAAE,EAAE,OAAO,EAAE,6BAA6B,EAAE,IAAI,EAAE,oBAAoB,SAAS,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,4BAA4B,EAAE;KAClJ,CAAC;IACF,OAAO,IAA8B,CAAC;AACxC,CAAC"}

package/dist/scope/index.d.ts

@@ -0,0 +1,19 @@
+/** A session's authorization scope. RESTRICTED is the conservative default —
+ *  a misconfigured spawn never inherits admin privilege. */
+export type SessionScope = "RESTRICTED" | "UNRESTRICTED";
+/** Tool-name prefixes treated as administrative (config-extensible by callers). */
+export declare const ADMINISTRATIVE_TOOL_PREFIXES: ReadonlyArray<string>;
+/** Whether `toolName` names an administrative tool. audit r1 F5: match a bare
+ *  namespace marker (`admin`, `internal`, …) as a DELIMITER-BOUNDED leading token
+ *  of ANY `.`-segment — case-insensitively — so `admin.reset`, `Admin.Reset`,
+ *  `acme.admin.wipe`, AND `billing.admin_reset` / `billing.admin-reset` are all
+ *  caught, not only a literal `admin.` prefix. `administrate.report` is NOT
+ *  administrative (the marker must end at a `_`/`-`/`:` boundary or the segment
+ *  end). Prefixes may be passed with or without a trailing dot. */
+export declare function isAdministrativeTool(toolName: string, prefixes?: ReadonlyArray<string>): boolean;
+/**
+ * Assert `scope` permits dispatching `toolName`. RESTRICTED sessions refuse
+ * administrative tools with `McpSecurityViolationError("SCOPE_VIOLATION")`.
+ */
+export declare function assertScopeAllowsTool(scope: SessionScope, toolName: string, prefixes?: ReadonlyArray<string>): void;
+//# sourceMappingURL=index.d.ts.map

package/dist/scope/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/scope/index.ts"],"names":[],"mappings":"AAYA;4DAC4D;AAC5D,MAAM,MAAM,YAAY,GAAG,YAAY,GAAG,cAAc,CAAC;AAEzD,mFAAmF;AACnF,eAAO,MAAM,4BAA4B,EAAE,aAAa,CAAC,MAAM,CAAmD,CAAC;AAEnH;;;;;;mEAMmE;AACnE,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,MAAM,EAChB,QAAQ,GAAE,aAAa,CAAC,MAAM,CAAgC,GAC7D,OAAO,CAYT;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,YAAY,EACnB,QAAQ,EAAE,MAAM,EAChB,QAAQ,GAAE,aAAa,CAAC,MAAM,CAAgC,GAC7D,IAAI,CAON"}

package/dist/scope/index.js

@@ -0,0 +1,44 @@
+// ============================================================================
+// @kashscript/hudhud/scope — session scope-gating (tool authorization)
+// ----------------------------------------------------------------------------
+// Dual-scope segregation: a RESTRICTED session (consumer-facing) may not
+// dispatch administrative tools; an UNRESTRICTED session (internal) may. The
+// gate reads the tool name only — no business branching. Ported from the
+// oreoasis-core-host engine (M5); the venture's B2C/B2B labels map onto
+// RESTRICTED/UNRESTRICTED.
+// ============================================================================
+import { McpSecurityViolationError } from "../errors";
+/** Tool-name prefixes treated as administrative (config-extensible by callers). */
+export const ADMINISTRATIVE_TOOL_PREFIXES = ["admin.", "internal.", "operator.", "kernel."];
+/** Whether `toolName` names an administrative tool. audit r1 F5: match a bare
+ *  namespace marker (`admin`, `internal`, …) as a DELIMITER-BOUNDED leading token
+ *  of ANY `.`-segment — case-insensitively — so `admin.reset`, `Admin.Reset`,
+ *  `acme.admin.wipe`, AND `billing.admin_reset` / `billing.admin-reset` are all
+ *  caught, not only a literal `admin.` prefix. `administrate.report` is NOT
+ *  administrative (the marker must end at a `_`/`-`/`:` boundary or the segment
+ *  end). Prefixes may be passed with or without a trailing dot. */
+export function isAdministrativeTool(toolName, prefixes = ADMINISTRATIVE_TOOL_PREFIXES) {
+    const markers = prefixes.map((p) => (p.endsWith(".") ? p.slice(0, -1) : p).toLowerCase());
+    for (const seg of toolName.toLowerCase().split(".")) {
+        for (const marker of markers) {
+            if (seg === marker)
+                return true;
+            if (seg.startsWith(marker)) {
+                const next = seg.charAt(marker.length);
+                if (next === "_" || next === "-" || next === ":")
+                    return true;
+            }
+        }
+    }
+    return false;
+}
+/**
+ * Assert `scope` permits dispatching `toolName`. RESTRICTED sessions refuse
+ * administrative tools with `McpSecurityViolationError("SCOPE_VIOLATION")`.
+ */
+export function assertScopeAllowsTool(scope, toolName, prefixes = ADMINISTRATIVE_TOOL_PREFIXES) {
+    if (scope === "RESTRICTED" && isAdministrativeTool(toolName, prefixes)) {
+        throw new McpSecurityViolationError("SCOPE_VIOLATION", `RESTRICTED session may not dispatch administrative tool "${toolName}"`);
+    }
+}
+//# sourceMappingURL=index.js.map

package/dist/scope/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/scope/index.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,uEAAuE;AACvE,+EAA+E;AAC/E,yEAAyE;AACzE,6EAA6E;AAC7E,yEAAyE;AACzE,wEAAwE;AACxE,2BAA2B;AAC3B,+EAA+E;AAE/E,OAAO,EAAE,yBAAyB,EAAE,MAAM,WAAW,CAAC;AAMtD,mFAAmF;AACnF,MAAM,CAAC,MAAM,4BAA4B,GAA0B,CAAC,QAAQ,EAAE,WAAW,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC;AAEnH;;;;;;mEAMmE;AACnE,MAAM,UAAU,oBAAoB,CAClC,QAAgB,EAChB,WAAkC,4BAA4B;IAE9D,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;IAC1F,KAAK,MAAM,GAAG,IAAI,QAAQ,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACpD,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,IAAI,GAAG,KAAK,MAAM;gBAAE,OAAO,IAAI,CAAC;YAChC,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC3B,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBACvC,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG;oBAAE,OAAO,IAAI,CAAC;YAChE,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CACnC,KAAmB,EACnB,QAAgB,EAChB,WAAkC,4BAA4B;IAE9D,IAAI,KAAK,KAAK,YAAY,IAAI,oBAAoB,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAC;QACvE,MAAM,IAAI,yBAAyB,CACjC,iBAAiB,EACjB,4DAA4D,QAAQ,GAAG,CACxE,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/sop/compiler.d.ts

@@ -0,0 +1,36 @@
+export interface TaskDagNode {
+    readonly id: string;
+    readonly type: "step";
+    readonly text: string;
+    readonly sourceLine: number;
+}
+export interface TaskDagEdge {
+    readonly from: string;
+    readonly to: string;
+}
+export interface TaskDag {
+    readonly nodes: ReadonlyArray<TaskDagNode>;
+    readonly edges: ReadonlyArray<TaskDagEdge>;
+    readonly meta: {
+        readonly compilerName: "kash-structural-v1";
+        readonly compilerVersion: string;
+        readonly sourceLineCount: number;
+        readonly sopSha256: string;
+    };
+}
+export interface CompileSopInput {
+    readonly sopText: string;
+    /** Optional — used by the line-indexed diagnostics. */
+    readonly sopHint?: string;
+}
+export interface CompileSopOutput {
+    readonly taskDag: TaskDag;
+    /** sha256 of the raw input text. */
+    readonly sopSha256: string;
+}
+/**
+ * Compile an SOP into a TaskDAG. Throws `SopCompilationError` if the text is
+ * empty/whitespace-only or contains no numbered/bulleted steps.
+ */
+export declare function compileSopStructural(input: CompileSopInput): Promise<CompileSopOutput>;
+//# sourceMappingURL=compiler.d.ts.map

package/dist/sop/compiler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"compiler.d.ts","sourceRoot":"","sources":["../../src/sop/compiler.ts"],"names":[],"mappings":"AAgBA,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC,WAAW,CAAC,CAAC;IAC3C,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC,WAAW,CAAC,CAAC;IAC3C,QAAQ,CAAC,IAAI,EAAE;QACb,QAAQ,CAAC,YAAY,EAAE,oBAAoB,CAAC;QAC5C,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;QACjC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;QACjC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;KAC5B,CAAC;CACH;AAOD,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,uDAAuD;IACvD,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,oCAAoC;IACpC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED;;;GAGG;AACH,wBAAsB,oBAAoB,CAAC,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAsC5F"}

package/dist/sop/compiler.js

@@ -0,0 +1,54 @@
+// ============================================================================
+// @kashscript/hudhud/sop — deterministic SOP → TaskDAG compiler
+// ----------------------------------------------------------------------------
+// Compiles operational SOPs structurally: numbered/bulleted list items become
+// DAG nodes; sequential edges chain them. PURE — same input → same output →
+// same SHA-256, so the SOP corpus is content-addressable (the dedupe
+// invariant). The output mirrors the neuron `TaskDAG {nodes, edges, meta}` so
+// an LLM-backed decomposer can swap in without touching downstream code.
+//
+// Ported from the oreoasis-core-host engine (M5, ADR-0016); the content hash
+// uses attest's `sha256Hex`, and the compiler label is neutralized.
+// ============================================================================
+import { sha256Hex } from "@kashscript/attest";
+import { SopCompilationError } from "../errors";
+const STRUCTURAL_COMPILER_VERSION = "1.0.0";
+/** Match leading numbered list / bullet markers. */
+const LIST_ITEM_PATTERN = /^\s*(?:\d+[.)]|[-*•])\s+(.+)$/;
+/**
+ * Compile an SOP into a TaskDAG. Throws `SopCompilationError` if the text is
+ * empty/whitespace-only or contains no numbered/bulleted steps.
+ */
+export async function compileSopStructural(input) {
+    const lines = input.sopText.split(/\r?\n/);
+    if (input.sopText.trim().length === 0) {
+        throw new SopCompilationError("SOP text is empty or whitespace-only — at least one step required");
+    }
+    const nodes = [];
+    for (let i = 0; i < lines.length; i++) {
+        const match = LIST_ITEM_PATTERN.exec(lines[i]);
+        if (match) {
+            nodes.push({ id: `n${nodes.length + 1}`, type: "step", text: match[1].trim(), sourceLine: i + 1 });
+        }
+    }
+    if (nodes.length === 0) {
+        throw new SopCompilationError("No numbered/bulleted steps detected — structural compiler requires `1.` / `-` / `*` / `•` prefixes");
+    }
+    const edges = [];
+    for (let i = 0; i < nodes.length - 1; i++) {
+        edges.push({ from: nodes[i].id, to: nodes[i + 1].id });
+    }
+    const sopSha256 = await sha256Hex(new TextEncoder().encode(input.sopText));
+    const taskDag = {
+        nodes,
+        edges,
+        meta: {
+            compilerName: "kash-structural-v1",
+            compilerVersion: STRUCTURAL_COMPILER_VERSION,
+            sourceLineCount: lines.length,
+            sopSha256,
+        },
+    };
+    return { taskDag, sopSha256 };
+}
+//# sourceMappingURL=compiler.js.map

package/dist/sop/compiler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"compiler.js","sourceRoot":"","sources":["../../src/sop/compiler.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,gEAAgE;AAChE,+EAA+E;AAC/E,8EAA8E;AAC9E,4EAA4E;AAC5E,qEAAqE;AACrE,8EAA8E;AAC9E,yEAAyE;AACzE,EAAE;AACF,6EAA6E;AAC7E,oEAAoE;AACpE,+EAA+E;AAE/E,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAyBhD,MAAM,2BAA2B,GAAG,OAAO,CAAC;AAE5C,oDAAoD;AACpD,MAAM,iBAAiB,GAAG,+BAA+B,CAAC;AAc1D;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,KAAsB;IAC/D,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAE3C,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtC,MAAM,IAAI,mBAAmB,CAAC,mEAAmE,CAAC,CAAC;IACrG,CAAC;IAED,MAAM,KAAK,GAAkB,EAAE,CAAC;IAChC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,KAAK,GAAG,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC;QAChD,IAAI,KAAK,EAAE,CAAC;YACV,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAE,CAAC,IAAI,EAAE,EAAE,UAAU,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACtG,CAAC;IACH,CAAC;IAED,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,mBAAmB,CAC3B,oGAAoG,CACrG,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAkB,EAAE,CAAC;IAChC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC1C,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAE,CAAC,EAAE,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC,GAAG,CAAC,CAAE,CAAC,EAAE,EAAE,CAAC,CAAC;IAC3D,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,SAAS,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3E,MAAM,OAAO,GAAY;QACvB,KAAK;QACL,KAAK;QACL,IAAI,EAAE;YACJ,YAAY,EAAE,oBAAoB;YAClC,eAAe,EAAE,2BAA2B;YAC5C,eAAe,EAAE,KAAK,CAAC,MAAM;YAC7B,SAAS;SACV;KACF,CAAC;IACF,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;AAChC,CAAC"}

package/dist/sop/index.d.ts

@@ -0,0 +1,3 @@
+export * from "./compiler";
+export * from "./service";
+//# sourceMappingURL=index.d.ts.map

package/dist/sop/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/sop/index.ts"],"names":[],"mappings":"AAEA,cAAc,YAAY,CAAC;AAC3B,cAAc,WAAW,CAAC"}

package/dist/sop/index.js

@@ -0,0 +1,5 @@
+// @kashscript/hudhud/sop — deterministic SOP → TaskDAG compiler + the
+// goto/cycle-detecting service. Content-addressable via attest's sha256Hex.
+export * from "./compiler";
+export * from "./service";
+//# sourceMappingURL=index.js.map

package/dist/sop/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/sop/index.ts"],"names":[],"mappings":"AAAA,sEAAsE;AACtE,4EAA4E;AAC5E,cAAc,YAAY,CAAC;AAC3B,cAAc,WAAW,CAAC"}

package/dist/sop/service.d.ts

@@ -0,0 +1,40 @@
+import type { LLMProvider } from "@kashscript/neuron/kernel";
+import type { TaskDag, TaskDagEdge, TaskDagNode } from "./compiler";
+export interface SopCompilerServiceOptions {
+    /** Seam for the deferred LLM decomposer wire-up (not yet invoked). */
+    readonly llmProvider?: LLMProvider;
+    readonly llmModel?: string;
+}
+export interface CompiledCorporateManual {
+    readonly taskDag: TaskDag;
+    readonly sopSha256: string;
+    readonly institutionDid: string;
+    readonly version: string;
+}
+export declare class SopCompilerService {
+    private readonly llmBackendActive;
+    constructor(opts?: SopCompilerServiceOptions);
+    /** Whether an LLM provider seam is plumbed. */
+    hasLlmBackend(): boolean;
+    /** Compile a corporate manual into a content-addressable TaskDAG.
+     *  @throws SopCompilationError on nil / empty / cyclical input. */
+    compileCorporateManual(institutionDid: string, rawText: string, version: string): Promise<CompiledCorporateManual>;
+}
+interface GotoEdge {
+    readonly from: string;
+    readonly to: string;
+    readonly sourceLine: number;
+}
+/** Scan every node's text for `goto N` markers → edges to `n${N}` (unknown
+ *  targets silently dropped; self-loops emitted so the detector catches them). */
+export declare function extractGotoEdges(nodes: ReadonlyArray<TaskDagNode>): ReadonlyArray<GotoEdge>;
+interface CycleReport {
+    readonly path: ReadonlyArray<string>;
+    readonly closingFrom: string;
+    readonly closingTo: string;
+}
+/** DFS cycle detector (iterative; CLRS white/gray/black). Returns the first
+ *  cycle or null. Deterministic node order for reproducible diagnostics. */
+export declare function detectCycle(nodes: ReadonlyArray<TaskDagNode>, edges: ReadonlyArray<TaskDagEdge>): CycleReport | null;
+export {};
+//# sourceMappingURL=service.d.ts.map

package/dist/sop/service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../../src/sop/service.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AAI7D,OAAO,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAEpE,MAAM,WAAW,yBAAyB;IACxC,sEAAsE;IACtE,QAAQ,CAAC,WAAW,CAAC,EAAE,WAAW,CAAC;IACnC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAOD,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAU;gBAE/B,IAAI,GAAE,yBAA8B;IAIhD,+CAA+C;IACxC,aAAa,IAAI,OAAO;IAI/B;uEACmE;IACtD,sBAAsB,CACjC,cAAc,EAAE,MAAM,EACtB,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,uBAAuB,CAAC;CAoCpC;AAED,UAAU,QAAQ;IAChB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAED;kFACkF;AAClF,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,aAAa,CAAC,WAAW,CAAC,GAAG,aAAa,CAAC,QAAQ,CAAC,CAmB3F;AAED,UAAU,WAAW;IACnB,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IACrC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED;4EAC4E;AAC5E,wBAAgB,WAAW,CACzB,KAAK,EAAE,aAAa,CAAC,WAAW,CAAC,EACjC,KAAK,EAAE,aAAa,CAAC,WAAW,CAAC,GAChC,WAAW,GAAG,IAAI,CAmDpB"}

package/dist/sop/service.js

@@ -0,0 +1,140 @@
+// ============================================================================
+// @kashscript/hudhud/sop — SopCompilerService (goto + cycle detection)
+// ----------------------------------------------------------------------------
+// Wraps the deterministic structural compiler with: an LLM-provider seam (the
+// deferred decomposer wire-up; not yet invoked), a `goto N` back-reference
+// parser that turns explicit jump markers into DAG edges, and a DFS cycle
+// detector that refuses to emit a DAG the executor could not schedule. Ported
+// from the oreoasis-core-host engine (M5); errors neutralized, DID validation
+// via attest's KASH_DID_PATTERN.
+// ============================================================================
+import { KASH_DID_PATTERN } from "@kashscript/attest";
+import { SopCompilationError } from "../errors";
+import { compileSopStructural } from "./compiler";
+/** Match `goto N`, `goto step N`, `go to step N`, `→ step N`. Captures `N`. */
+const GOTO_MARKER_PATTERN = /(?:goto|go\s+to|→)\s*(?:step\s*)?(\d{1,4})/gi;
+/** Semver MAJOR.MINOR.PATCH. */
+const SEMVER_PATTERN = /^\d+\.\d+\.\d+$/;
+export class SopCompilerService {
+    llmBackendActive;
+    constructor(opts = {}) {
+        this.llmBackendActive = opts.llmProvider !== undefined;
+    }
+    /** Whether an LLM provider seam is plumbed. */
+    hasLlmBackend() {
+        return this.llmBackendActive;
+    }
+    /** Compile a corporate manual into a content-addressable TaskDAG.
+     *  @throws SopCompilationError on nil / empty / cyclical input. */
+    async compileCorporateManual(institutionDid, rawText, version) {
+        if (typeof institutionDid !== "string" || institutionDid.length === 0) {
+            throw new SopCompilationError("institutionDid is required (non-empty did:kash:… identifier)");
+        }
+        if (!KASH_DID_PATTERN.test(institutionDid)) {
+            throw new SopCompilationError("institutionDid is not a valid did:kash:… identifier");
+        }
+        if (typeof version !== "string" || version.length === 0 || !SEMVER_PATTERN.test(version)) {
+            throw new SopCompilationError("version must be a semver MAJOR.MINOR.PATCH string");
+        }
+        if (typeof rawText !== "string") {
+            throw new SopCompilationError("rawText is required and must be a string");
+        }
+        // Structural compile (throws SopCompilationError on empty / no steps).
+        const { taskDag: structural, sopSha256 } = await compileSopStructural({
+            sopText: rawText,
+            sopHint: `version=${version} institutionDid=${institutionDid.slice(0, 24)}`,
+        });
+        const extraEdges = extractGotoEdges(structural.nodes);
+        const allEdges = [
+            ...structural.edges,
+            ...extraEdges.map((e) => ({ from: e.from, to: e.to })),
+        ];
+        const cycle = detectCycle(structural.nodes, allEdges);
+        if (cycle !== null) {
+            throw new SopCompilationError(`SOP TaskDAG contains a cycle: ${cycle.path.join(" → ")} (closing edge ${cycle.closingFrom} → ${cycle.closingTo})`);
+        }
+        const taskDag = { nodes: structural.nodes, edges: allEdges, meta: structural.meta };
+        return { taskDag, sopSha256, institutionDid, version };
+    }
+}
+/** Scan every node's text for `goto N` markers → edges to `n${N}` (unknown
+ *  targets silently dropped; self-loops emitted so the detector catches them). */
+export function extractGotoEdges(nodes) {
+    const idSet = new Set(nodes.map((n) => n.id));
+    const out = [];
+    for (const node of nodes) {
+        GOTO_MARKER_PATTERN.lastIndex = 0;
+        const matches = node.text.matchAll(GOTO_MARKER_PATTERN);
+        const seen = new Set();
+        for (const m of matches) {
+            const targetN = Number.parseInt(m[1], 10);
+            if (!Number.isFinite(targetN) || targetN <= 0)
+                continue;
+            const targetId = `n${targetN}`;
+            if (!idSet.has(targetId))
+                continue;
+            const key = `${node.id}→${targetId}`;
+            if (seen.has(key))
+                continue;
+            seen.add(key);
+            out.push({ from: node.id, to: targetId, sourceLine: node.sourceLine });
+        }
+    }
+    return out;
+}
+/** DFS cycle detector (iterative; CLRS white/gray/black). Returns the first
+ *  cycle or null. Deterministic node order for reproducible diagnostics. */
+export function detectCycle(nodes, edges) {
+    const adj = new Map();
+    for (const n of nodes)
+        adj.set(n.id, []);
+    for (const e of edges)
+        adj.get(e.from)?.push(e.to);
+    const colour = new Map();
+    for (const n of nodes)
+        colour.set(n.id, "white");
+    const stack = [];
+    const onStack = new Set();
+    function dfs(start) {
+        const work = [{ id: start, childIndex: 0 }];
+        colour.set(start, "gray");
+        stack.push(start);
+        onStack.add(start);
+        while (work.length > 0) {
+            const frame = work[work.length - 1];
+            const children = adj.get(frame.id) ?? [];
+            if (frame.childIndex >= children.length) {
+                colour.set(frame.id, "black");
+                onStack.delete(frame.id);
+                stack.pop();
+                work.pop();
+                continue;
+            }
+            const next = children[frame.childIndex];
+            frame.childIndex += 1;
+            const nc = colour.get(next);
+            if (nc === "gray") {
+                const idx = stack.indexOf(next);
+                const path = idx >= 0 ? stack.slice(idx) : [next];
+                path.push(next);
+                return { path, closingFrom: frame.id, closingTo: next };
+            }
+            if (nc === "white") {
+                colour.set(next, "gray");
+                stack.push(next);
+                onStack.add(next);
+                work.push({ id: next, childIndex: 0 });
+            }
+        }
+        return null;
+    }
+    for (const n of nodes) {
+        if (colour.get(n.id) !== "white")
+            continue;
+        const cycle = dfs(n.id);
+        if (cycle !== null)
+            return cycle;
+    }
+    return null;
+}
+//# sourceMappingURL=service.js.map

package/dist/sop/service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.js","sourceRoot":"","sources":["../../src/sop/service.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,uEAAuE;AACvE,+EAA+E;AAC/E,8EAA8E;AAC9E,2EAA2E;AAC3E,0EAA0E;AAC1E,8EAA8E;AAC9E,8EAA8E;AAC9E,iCAAiC;AACjC,+EAA+E;AAE/E,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAGtD,OAAO,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAChD,OAAO,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAgBlD,+EAA+E;AAC/E,MAAM,mBAAmB,GAAG,8CAA8C,CAAC;AAC3E,gCAAgC;AAChC,MAAM,cAAc,GAAG,iBAAiB,CAAC;AAEzC,MAAM,OAAO,kBAAkB;IACZ,gBAAgB,CAAU;IAE3C,YAAY,OAAkC,EAAE;QAC9C,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC,WAAW,KAAK,SAAS,CAAC;IACzD,CAAC;IAED,+CAA+C;IACxC,aAAa;QAClB,OAAO,IAAI,CAAC,gBAAgB,CAAC;IAC/B,CAAC;IAED;uEACmE;IAC5D,KAAK,CAAC,sBAAsB,CACjC,cAAsB,EACtB,OAAe,EACf,OAAe;QAEf,IAAI,OAAO,cAAc,KAAK,QAAQ,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtE,MAAM,IAAI,mBAAmB,CAAC,8DAA8D,CAAC,CAAC;QAChG,CAAC;QACD,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC;YAC3C,MAAM,IAAI,mBAAmB,CAAC,qDAAqD,CAAC,CAAC;QACvF,CAAC;QACD,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACzF,MAAM,IAAI,mBAAmB,CAAC,mDAAmD,CAAC,CAAC;QACrF,CAAC;QACD,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAChC,MAAM,IAAI,mBAAmB,CAAC,0CAA0C,CAAC,CAAC;QAC5E,CAAC;QAED,uEAAuE;QACvE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,MAAM,oBAAoB,CAAC;YACpE,OAAO,EAAE,OAAO;YAChB,OAAO,EAAE,WAAW,OAAO,mBAAmB,cAAc,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE;SAC5E,CAAC,CAAC;QAEH,MAAM,UAAU,GAAG,gBAAgB,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACtD,MAAM,QAAQ,GAAkB;YAC9B,GAAG,UAAU,CAAC,KAAK;YACnB,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;SACvD,CAAC;QAEF,MAAM,KAAK,GAAG,WAAW,CAAC,UAAU,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QACtD,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACnB,MAAM,IAAI,mBAAmB,CAC3B,iCAAiC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,kBAAkB,KAAK,CAAC,WAAW,MAAM,KAAK,CAAC,SAAS,GAAG,CACnH,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GAAY,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,CAAC;QAC7F,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,OAAO,EAAE,CAAC;IACzD,CAAC;CACF;AAQD;kFACkF;AAClF,MAAM,UAAU,gBAAgB,CAAC,KAAiC;IAChE,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC9C,MAAM,GAAG,GAAe,EAAE,CAAC;IAC3B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,mBAAmB,CAAC,SAAS,GAAG,CAAC,CAAC;QAClC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC;QACxD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAE,EAAE,EAAE,CAAC,CAAC;YAC3C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,IAAI,CAAC;gBAAE,SAAS;YACxD,MAAM,QAAQ,GAAG,IAAI,OAAO,EAAE,CAAC;YAC/B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC;gBAAE,SAAS;YACnC,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,EAAE,IAAI,QAAQ,EAAE,CAAC;YACrC,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,SAAS;YAC5B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACd,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;QACzE,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAQD;4EAC4E;AAC5E,MAAM,UAAU,WAAW,CACzB,KAAiC,EACjC,KAAiC;IAEjC,MAAM,GAAG,GAAG,IAAI,GAAG,EAAoB,CAAC;IACxC,KAAK,MAAM,CAAC,IAAI,KAAK;QAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IACzC,KAAK,MAAM,CAAC,IAAI,KAAK;QAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAGnD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,KAAK,MAAM,CAAC,IAAI,KAAK;QAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;IACjD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAElC,SAAS,GAAG,CAAC,KAAa;QACxB,MAAM,IAAI,GAAyC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,CAAC;QAClF,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAC1B,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACnB,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC;YACrC,MAAM,QAAQ,GAAG,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;YACzC,IAAI,KAAK,CAAC,UAAU,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;gBACxC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;gBAC9B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;gBACzB,KAAK,CAAC,GAAG,EAAE,CAAC;gBACZ,IAAI,CAAC,GAAG,EAAE,CAAC;gBACX,SAAS;YACX,CAAC;YACD,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAE,CAAC;YACzC,KAAK,CAAC,UAAU,IAAI,CAAC,CAAC;YACtB,MAAM,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAC5B,IAAI,EAAE,KAAK,MAAM,EAAE,CAAC;gBAClB,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;gBAChC,MAAM,IAAI,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;gBAClD,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAChB,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;YAC1D,CAAC;YACD,IAAI,EAAE,KAAK,OAAO,EAAE,CAAC;gBACnB,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;gBACzB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACjB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBAClB,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,CAAC;YACzC,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,OAAO;YAAE,SAAS;QAC3C,MAAM,KAAK,GAAG,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACxB,IAAI,KAAK,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC;IACnC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/package.json

@@ -0,0 +1,112 @@
+{
+  "name": "@kashscript/hudhud",
+  "version": "0.1.0",
+  "description": "The Agent Protocol — the accountable agent runtime. SOP compiler, MCP allowlist + circuit breaker, PII-redaction interceptor, a signed action ledger + forensic scan (on @kashscript/attest), exception classification, AIUC-1 work certificates, DID registry, and a neuron-kernel work runtime. Agent auth via @kashscript/identity-server MCP OAuth 2.1 tokens. Ventures import hudhud, never raw neuron. Commercial (SSLA Schedule B).",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js",
+      "default": "./dist/index.js"
+    },
+    "./errors": {
+      "types": "./dist/errors.d.ts",
+      "import": "./dist/errors.js",
+      "default": "./dist/errors.js"
+    },
+    "./sop": {
+      "types": "./dist/sop/index.d.ts",
+      "import": "./dist/sop/index.js",
+      "default": "./dist/sop/index.js"
+    },
+    "./mcp": {
+      "types": "./dist/mcp/index.d.ts",
+      "import": "./dist/mcp/index.js",
+      "default": "./dist/mcp/index.js"
+    },
+    "./privacy": {
+      "types": "./dist/privacy/index.d.ts",
+      "import": "./dist/privacy/index.js",
+      "default": "./dist/privacy/index.js"
+    },
+    "./scope": {
+      "types": "./dist/scope/index.d.ts",
+      "import": "./dist/scope/index.js",
+      "default": "./dist/scope/index.js"
+    },
+    "./ledger": {
+      "types": "./dist/ledger/index.d.ts",
+      "import": "./dist/ledger/index.js",
+      "default": "./dist/ledger/index.js"
+    },
+    "./anchor": {
+      "types": "./dist/anchor/index.d.ts",
+      "import": "./dist/anchor/index.js",
+      "default": "./dist/anchor/index.js"
+    },
+    "./exception": {
+      "types": "./dist/exception/index.d.ts",
+      "import": "./dist/exception/index.js",
+      "default": "./dist/exception/index.js"
+    },
+    "./certificate": {
+      "types": "./dist/certificate/index.d.ts",
+      "import": "./dist/certificate/index.js",
+      "default": "./dist/certificate/index.js"
+    },
+    "./did-registry": {
+      "types": "./dist/did-registry/index.d.ts",
+      "import": "./dist/did-registry/index.js",
+      "default": "./dist/did-registry/index.js"
+    },
+    "./identity": {
+      "types": "./dist/identity/index.d.ts",
+      "import": "./dist/identity/index.js",
+      "default": "./dist/identity/index.js"
+    },
+    "./runtime": {
+      "types": "./dist/runtime/index.d.ts",
+      "import": "./dist/runtime/index.js",
+      "default": "./dist/runtime/index.js"
+    },
+    "./adapters/prisma": {
+      "types": "./dist/adapters/prisma.d.ts",
+      "import": "./dist/adapters/prisma.js",
+      "default": "./dist/adapters/prisma.js"
+    }
+  },
+  "dependencies": {
+    "@kashscript/identity-core": "0.3.1",
+    "@kashscript/attest": "0.1.0",
+    "@kashscript/identity-server": "0.1.0",
+    "@kashscript/neuron": "0.1.1"
+  },
+  "peerDependencies": {
+    "zod": "^3.23.8"
+  },
+  "files": [
+    "dist",
+    "src",
+    "README.md",
+    "LICENSE"
+  ],
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "typecheck": "tsc --noEmit",
+    "typecheck:test": "tsc --noEmit -p tsconfig.test.json",
+    "test": "bun run typecheck:test && bun test",
+    "clean": "rm -rf dist .turbo"
+  },
+  "devDependencies": {
+    "zod": "^3.23.8",
+    "typescript": "^5.6.3",
+    "@types/bun": "^1.2.5"
+  },
+  "license": "SEE LICENSE IN LICENSE",
+  "publishConfig": {
+    "access": "public",
+    "registry": "https://registry.npmjs.org/"
+  }
+}