@kashscript/hudhud 0.1.1 → 0.2.0

package/dist/exception/index.d.ts

@@ -1,14 +1,32 @@
+import type { RelationshipSigningKey } from "@kashscript/identity-server";
 export { ExceptionClassificationError } from "../errors";
-/** The failure classes. No "unclassified": classification is mandatory. */
+/** The model-failure classes — v1's mandatory class, v2's OPTIONAL one
+ *  (meaningful only when a model was involved). No "unclassified". */
 export declare const FAILURE_CLASSES: readonly ["judgment", "gap-filling", "ambiguous"];
 export type FailureClass = (typeof FAILURE_CLASSES)[number];
-/** DST so a classification signature can't replay as a ledger/attestation sig.
- *  Neutral default; a venture passes its own DST at swap for wire-compat. */
+/** d43 §4.2 — how a doer deviated. Mandatory on v2 records; no default, no
+ *  "unclassified". error → adjust the system, not the person · at-risk → coach
+ *  · reckless → the only punitive branch · improvement → adopt. */
+export declare const DEVIATION_CLASSES: readonly ["error", "at-risk", "reckless", "improvement"];
+export type DeviationClass = (typeof DEVIATION_CLASSES)[number];
+/** v1 signed label (DST) — v1 records verify under it forever. New records are
+ *  v2 (`HUDHUD_EXCEPTION_CLASSIFICATION_V2_DST`). */
 export declare const HUDHUD_EXCEPTION_CLASSIFICATION_DST: "kash-exception-classification-v1\n";
+/** v1 schema label — frozen; see `EXCEPTION_CLASSIFICATION_SCHEMA_VERSION_V2`. */
 export declare const EXCEPTION_CLASSIFICATION_SCHEMA_VERSION: "exception-classification/1";
-/** The mandatory gate — throws `ExceptionClassificationError` if `value` is
- *  absent/empty or not one of the classes. NOT merely the TS type. */
+/** v2 labels — registered in `@kashscript/attest/dst` (0.1.7) before first use. */
+export declare const HUDHUD_EXCEPTION_CLASSIFICATION_V2_DST: "kash-exception-classification-v2\n";
+export declare const EXCEPTION_CLASSIFICATION_SCHEMA_VERSION_V2: "exception-classification/2";
+/** The doer's countersignature DST — so it can never replay as the operator's. */
+export declare const HUDHUD_EXCEPTION_DOER_ACCOUNT_DST: "kash-exception-doer-account-v1\n";
+/** The v1 mandatory gate — throws `ExceptionClassificationError` if `value` is
+ *  absent/empty or not one of the classes. NOT merely the TS type.
+ *  @deprecated New records are v2: gate with `assertDeviationClass`; the model
+ *  class is optional there. Kept so existing callers compile unchanged. */
 export declare function assertFailureClass(value: unknown): asserts value is FailureClass;
+/** The v2 mandatory gate — throws `ExceptionClassificationError` if `value` is
+ *  absent/empty or not one of the four deviation classes. */
+export declare function assertDeviationClass(value: unknown): asserts value is DeviationClass;
 export interface ExceptionClassificationInput {
     readonly failureClass: FailureClass;
     readonly failureTag: string;
@@ -46,8 +64,9 @@ export interface ExceptionClassificationRecord {
     readonly signoffLedgerStepIndex: number | null;
     readonly signedEnvelope: ClassificationSignedEnvelope;
 }
-/** Mint + sign a classification record (id/timestamp minted into the signed
- *  payload). Throws the mandatory gate if `failureClass` is missing/invalid. */
+/** Mint + sign a v1 classification record (id/timestamp minted into the signed
+ *  payload). Throws the mandatory gate if `failureClass` is missing/invalid.
+ *  @deprecated Mint v2 with `buildSignedDeviationClassification` (d43). */
 export declare function buildSignedClassification(input: ExceptionClassificationInput, operator: {
     readonly did: string;
     readonly privateKey: Uint8Array;
@@ -55,30 +74,111 @@ export declare function buildSignedClassification(input: ExceptionClassification
     readonly escalationId?: string | null;
     readonly signoffLedgerStepIndex?: number | null;
 }): Promise<ExceptionClassificationRecord>;
-/** Verify a record's operator signature. Returns false on a well-formed mismatch. */
-export declare function verifyClassificationSignature(record: ExceptionClassificationRecord, operatorPublicKey: Uint8Array): Promise<boolean>;
-export interface ExceptionClassificationStore {
-    append(record: ExceptionClassificationRecord): Promise<void>;
-    history(): Promise<ReadonlyArray<ExceptionClassificationRecord>>;
-    latest(): Promise<ExceptionClassificationRecord | null>;
-    byWorkflow(workflowId: string): Promise<ReadonlyArray<ExceptionClassificationRecord>>;
+export interface DeviationClassificationInput {
+    readonly deviationClass: DeviationClass;
+    /** Where a model failed — ONLY when a model was involved; requires `model`. */
+    readonly failureClass?: FailureClass;
+    readonly deviationTag: string;
+    readonly workflowId: string;
+    /** The rule version the work was judged against (d43: due process in the schema). */
+    readonly sopVersion: string;
+    readonly inputRef: string;
+    readonly contentHash: string;
+    /** Omit for human work. Absence means "no model was involved". */
+    readonly model?: string;
+    /** Requires `model`. */
+    readonly modelVersion?: string;
+    readonly resolutionSummary: string;
+    readonly resolutionActionRefs: ReadonlyArray<string>;
+}
+/** The doer's own account, countersigned with a per-classification key. */
+export interface DoerAccount {
+    /** A `did:kash` derived for THIS classification only — never the doer's
+     *  stable identifier. Self-certifying: the verifier needs no lookup. */
+    readonly doerDid: string;
+    readonly account: string;
+    readonly signedEnvelope: ClassificationSignedEnvelope;
+}
+export interface ExceptionClassificationRecordV2 {
+    readonly id: string;
+    readonly schemaVersion: typeof EXCEPTION_CLASSIFICATION_SCHEMA_VERSION_V2;
+    readonly timestampIso: string;
+    readonly workflowId: string;
+    readonly sopVersion: string;
+    readonly inputRef: string;
+    readonly contentHash: string;
+    readonly model?: string;
+    readonly modelVersion?: string;
+    readonly deviationClass: DeviationClass;
+    readonly failureClass?: FailureClass;
+    readonly deviationTag: string;
+    readonly operatorDid: string;
+    readonly resolutionSummary: string;
+    readonly resolutionActionRefs: ReadonlyArray<string>;
+    readonly escalationId: string | null;
+    readonly signoffLedgerStepIndex: number | null;
+    /** The operator's signature over every field above. */
+    readonly signedEnvelope: ClassificationSignedEnvelope;
+    /** Present only when the doer signed. Absence is the ONLY representation of
+     *  declining — see the module header. */
+    readonly doerAccount?: DoerAccount;
+}
+export type AnyExceptionClassificationRecord = ExceptionClassificationRecord | ExceptionClassificationRecordV2;
+export declare function isV2Classification(record: AnyExceptionClassificationRecord): record is ExceptionClassificationRecordV2;
+/** Mint + sign a v2 (d43) classification. Gates: `deviationClass` mandatory;
+ *  `failureClass` only with `model`; `model`/`modelVersion` non-empty when
+ *  present and OMITTED (never "") when there was no model. */
+export declare function buildSignedDeviationClassification(input: DeviationClassificationInput, operator: {
+    readonly did: string;
+    readonly privateKey: Uint8Array;
+}, link?: {
+    readonly escalationId?: string | null;
+    readonly signoffLedgerStepIndex?: number | null;
+}): Promise<ExceptionClassificationRecordV2>;
+/** Verify a record's operator signature — v1 or v2, dispatched on
+ *  `schemaVersion`. Returns false on a well-formed mismatch. The doer's
+ *  account, if any, is outside the operator's bytes: check it with
+ *  `verifyDoerAccount`. */
+export declare function verifyClassificationSignature(record: AnyExceptionClassificationRecord, operatorPublicKey: Uint8Array): Promise<boolean>;
+/** Derive the doer's signing key for exactly ONE classification. Deterministic,
+ *  so the doer (holding the seed) can re-derive it and prove a record is theirs;
+ *  unlinkable to every other classification without the seed. */
+export declare function deriveDoerAccountKey(masterSeed: Uint8Array, record: Pick<ExceptionClassificationRecordV2, "id" | "operatorDid">): Promise<RelationshipSigningKey>;
+/** Attach the doer's own account + countersignature over the exact bytes the
+ *  operator signed. Takes the doer's SEED, never a DID — so no caller can write
+ *  a stable identifier into the record. Declining = never calling this. */
+export declare function attachDoerAccount(record: ExceptionClassificationRecordV2, doer: {
+    readonly masterSeed: Uint8Array;
+}, account: string): Promise<ExceptionClassificationRecordV2>;
+/** Verify the doer's countersignature offline (the key comes from the
+ *  self-certifying `doerDid`). False when absent, tampered, or re-bound to a
+ *  different classification. Absence is not a failure of the doer — callers
+ *  must not treat `false`-because-absent as a mark (check `doerAccount` first). */
+export declare function verifyDoerAccount(record: ExceptionClassificationRecordV2): Promise<boolean>;
+/** Generic over the record version; defaults to v1 so existing implementers
+ *  compile unchanged. */
+export interface ExceptionClassificationStore<R extends AnyExceptionClassificationRecord = ExceptionClassificationRecord> {
+    append(record: R): Promise<void>;
+    history(): Promise<ReadonlyArray<R>>;
+    latest(): Promise<R | null>;
+    byWorkflow(workflowId: string): Promise<ReadonlyArray<R>>;
 }
-export declare class InMemoryExceptionClassificationStore implements ExceptionClassificationStore {
+export declare class InMemoryExceptionClassificationStore<R extends AnyExceptionClassificationRecord = ExceptionClassificationRecord> implements ExceptionClassificationStore<R> {
     private readonly rows;
-    append(record: ExceptionClassificationRecord): Promise<void>;
-    history(): Promise<ReadonlyArray<ExceptionClassificationRecord>>;
-    latest(): Promise<ExceptionClassificationRecord | null>;
-    byWorkflow(workflowId: string): Promise<ReadonlyArray<ExceptionClassificationRecord>>;
+    append(record: R): Promise<void>;
+    history(): Promise<ReadonlyArray<R>>;
+    latest(): Promise<R | null>;
+    byWorkflow(workflowId: string): Promise<ReadonlyArray<R>>;
 }
 export declare const EXCEPTION_DATASET_FORMAT_VERSION: "kash-exception-dataset/1";
-export interface ExceptionClassificationDatasetExport {
+export interface ExceptionClassificationDatasetExport<R extends AnyExceptionClassificationRecord = ExceptionClassificationRecord> {
     readonly formatVersion: string;
     readonly exportedAtIso: string;
     readonly count: number;
-    readonly records: ReadonlyArray<ExceptionClassificationRecord>;
+    readonly records: ReadonlyArray<R>;
 }
 /** Bundle the dataset for hand-off (records carry their own signatures). */
-export declare function exportExceptionClassificationDataset(records: ReadonlyArray<ExceptionClassificationRecord>, exportedAtIso?: string): ExceptionClassificationDatasetExport;
+export declare function exportExceptionClassificationDataset<R extends AnyExceptionClassificationRecord = ExceptionClassificationRecord>(records: ReadonlyArray<R>, exportedAtIso?: string): ExceptionClassificationDatasetExport<R>;
 export interface WorkflowMonthCount {
     readonly workflowId: string;
     readonly month: string;
@@ -93,6 +193,8 @@ export interface ExceptionClassificationStats {
     }>;
     readonly perWorkflowOverTime: ReadonlyArray<WorkflowMonthCount>;
 }
-/** Class mix + per-workflow (+ over-time) exception counts (the rate numerator). */
-export declare function computeExceptionClassificationStats(records: ReadonlyArray<ExceptionClassificationRecord>): ExceptionClassificationStats;
+/** Model-failure class mix + per-workflow (+ over-time) exception counts. A v2
+ *  record counts toward `classMix` only when it carries a `failureClass`.
+ *  Deliberately NO deviation-class mix and nothing per doer (d43 §4.7). */
+export declare function computeExceptionClassificationStats(records: ReadonlyArray<AnyExceptionClassificationRecord>): ExceptionClassificationStats;
 //# sourceMappingURL=index.d.ts.map

package/dist/exception/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/exception/index.ts"],"names":[],"mappings":"AAkBA,OAAO,EAAE,4BAA4B,EAAE,MAAM,WAAW,CAAC;AAEzD,2EAA2E;AAC3E,eAAO,MAAM,eAAe,mDAAoD,CAAC;AACjF,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,eAAe,CAAC,CAAC,MAAM,CAAC,CAAC;AAE5D;6EAC6E;AAC7E,eAAO,MAAM,mCAAmC,EAAG,oCAA6C,CAAC;AACjG,eAAO,MAAM,uCAAuC,EAAG,4BAAqC,CAAC;AAc7F;sEACsE;AACtE,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,KAAK,IAAI,YAAY,CAWhF;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAC;IACpC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,oBAAoB,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;CACtD;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,GAAG,EAAE,SAAS,CAAC;IACxB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAC;IACpC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,oBAAoB,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IACrD,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,QAAQ,CAAC,sBAAsB,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/C,QAAQ,CAAC,cAAc,EAAE,4BAA4B,CAAC;CACvD;AAQD;gFACgF;AAChF,wBAAsB,yBAAyB,CAC7C,KAAK,EAAE,4BAA4B,EACnC,QAAQ,EAAE;IAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAA;CAAE,EACnE,IAAI,GAAE;IAAE,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,QAAQ,CAAC,sBAAsB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAO,GACpG,OAAO,CAAC,6BAA6B,CAAC,CA6BxC;AAED,qFAAqF;AACrF,wBAAsB,6BAA6B,CACjD,MAAM,EAAE,6BAA6B,EACrC,iBAAiB,EAAE,UAAU,GAC5B,OAAO,CAAC,OAAO,CAAC,CAelB;AAID,MAAM,WAAW,4BAA4B;IAC3C,MAAM,CAAC,MAAM,EAAE,6BAA6B,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7D,OAAO,IAAI,OAAO,CAAC,aAAa,CAAC,6BAA6B,CAAC,CAAC,CAAC;IACjE,MAAM,IAAI,OAAO,CAAC,6BAA6B,GAAG,IAAI,CAAC,CAAC;IACxD,UAAU,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,6BAA6B,CAAC,CAAC,CAAC;CACvF;AAED,qBAAa,oCAAqC,YAAW,4BAA4B;IACvF,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAuC;IACtD,MAAM,CAAC,MAAM,EAAE,6BAA6B,GAAG,OAAO,CAAC,IAAI,CAAC;IAG5D,OAAO,IAAI,OAAO,CAAC,aAAa,CAAC,6BAA6B,CAAC,CAAC;IAGhE,MAAM,IAAI,OAAO,CAAC,6BAA6B,GAAG,IAAI,CAAC;IAGvD,UAAU,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,6BAA6B,CAAC,CAAC;CAG5F;AAID,eAAO,MAAM,gCAAgC,EAAG,0BAAmC,CAAC;AAEpF,MAAM,WAAW,oCAAoC;IACnD,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC,6BAA6B,CAAC,CAAC;CAChE;AAED,4EAA4E;AAC5E,wBAAgB,oCAAoC,CAClD,OAAO,EAAE,aAAa,CAAC,6BAA6B,CAAC,EACrD,aAAa,GAAE,MAAiC,GAC/C,oCAAoC,CAEtC;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IAChD,QAAQ,CAAC,WAAW,EAAE,aAAa,CAAC;QAAE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC7F,QAAQ,CAAC,mBAAmB,EAAE,aAAa,CAAC,kBAAkB,CAAC,CAAC;CACjE;AAQD,oFAAoF;AACpF,wBAAgB,mCAAmC,CACjD,OAAO,EAAE,aAAa,CAAC,6BAA6B,CAAC,GACpD,4BAA4B,CAoB9B"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/exception/index.ts"],"names":[],"mappings":"AA6CA,OAAO,KAAK,EAAO,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AAI/E,OAAO,EAAE,4BAA4B,EAAE,MAAM,WAAW,CAAC;AAEzD;sEACsE;AACtE,eAAO,MAAM,eAAe,mDAAoD,CAAC;AACjF,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,eAAe,CAAC,CAAC,MAAM,CAAC,CAAC;AAE5D;;mEAEmE;AACnE,eAAO,MAAM,iBAAiB,0DAA2D,CAAC;AAC1F,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEhE;qDACqD;AACrD,eAAO,MAAM,mCAAmC,EAAG,oCAA6C,CAAC;AACjG,kFAAkF;AAClF,eAAO,MAAM,uCAAuC,EAAG,4BAAqC,CAAC;AAG7F,mFAAmF;AACnF,eAAO,MAAM,sCAAsC,EAAG,oCAA6C,CAAC;AACpG,eAAO,MAAM,0CAA0C,EAAG,4BAAqC,CAAC;AAEhG,kFAAkF;AAClF,eAAO,MAAM,iCAAiC,EAAG,kCAA2C,CAAC;AA4B7F;;;2EAG2E;AAC3E,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,KAAK,IAAI,YAAY,CAEhF;AAED;6DAC6D;AAC7D,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,KAAK,IAAI,cAAc,CAWpF;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAC;IACpC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,oBAAoB,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;CACtD;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,GAAG,EAAE,SAAS,CAAC;IACxB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAC;IACpC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,oBAAoB,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IACrD,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,QAAQ,CAAC,sBAAsB,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/C,QAAQ,CAAC,cAAc,EAAE,4BAA4B,CAAC;CACvD;AAQD;;2EAE2E;AAC3E,wBAAsB,yBAAyB,CAC7C,KAAK,EAAE,4BAA4B,EACnC,QAAQ,EAAE;IAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAA;CAAE,EACnE,IAAI,GAAE;IAAE,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,QAAQ,CAAC,sBAAsB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAO,GACpG,OAAO,CAAC,6BAA6B,CAAC,CA6BxC;AAID,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,cAAc,EAAE,cAAc,CAAC;IACxC,+EAA+E;IAC/E,QAAQ,CAAC,YAAY,CAAC,EAAE,YAAY,CAAC;IACrC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,qFAAqF;IACrF,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,kEAAkE;IAClE,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,wBAAwB;IACxB,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,oBAAoB,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;CACtD;AAED,2EAA2E;AAC3E,MAAM,WAAW,WAAW;IAC1B;4EACwE;IACxE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,cAAc,EAAE,4BAA4B,CAAC;CACvD;AAED,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,aAAa,EAAE,OAAO,0CAA0C,CAAC;IAC1E,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,cAAc,EAAE,cAAc,CAAC;IACxC,QAAQ,CAAC,YAAY,CAAC,EAAE,YAAY,CAAC;IACrC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,oBAAoB,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IACrD,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,QAAQ,CAAC,sBAAsB,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/C,uDAAuD;IACvD,QAAQ,CAAC,cAAc,EAAE,4BAA4B,CAAC;IACtD;6CACyC;IACzC,QAAQ,CAAC,WAAW,CAAC,EAAE,WAAW,CAAC;CACpC;AAED,MAAM,MAAM,gCAAgC,GAAG,6BAA6B,GAAG,+BAA+B,CAAC;AAE/G,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,gCAAgC,GAAG,MAAM,IAAI,+BAA+B,CAEtH;AAQD;;8DAE8D;AAC9D,wBAAsB,kCAAkC,CACtD,KAAK,EAAE,4BAA4B,EACnC,QAAQ,EAAE;IAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAA;CAAE,EACnE,IAAI,GAAE;IAAE,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,QAAQ,CAAC,sBAAsB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAO,GACpG,OAAO,CAAC,+BAA+B,CAAC,CA0C1C;AAED;;;2BAG2B;AAC3B,wBAAsB,6BAA6B,CACjD,MAAM,EAAE,gCAAgC,EACxC,iBAAiB,EAAE,UAAU,GAC5B,OAAO,CAAC,OAAO,CAAC,CAkBlB;AAQD;;iEAEiE;AACjE,wBAAsB,oBAAoB,CACxC,UAAU,EAAE,UAAU,EACtB,MAAM,EAAE,IAAI,CAAC,+BAA+B,EAAE,IAAI,GAAG,aAAa,CAAC,GAClE,OAAO,CAAC,sBAAsB,CAAC,CASjC;AAED;;2EAE2E;AAC3E,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,+BAA+B,EACvC,IAAI,EAAE;IAAE,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAA;CAAE,EACzC,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,+BAA+B,CAAC,CAwB1C;AAED;;;mFAGmF;AACnF,wBAAsB,iBAAiB,CAAC,MAAM,EAAE,+BAA+B,GAAG,OAAO,CAAC,OAAO,CAAC,CAkBjG;AAID;yBACyB;AACzB,MAAM,WAAW,4BAA4B,CAAC,CAAC,SAAS,gCAAgC,GAAG,6BAA6B;IACtH,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACjC,OAAO,IAAI,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;IACrC,MAAM,IAAI,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAC5B,UAAU,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;CAC3D;AAED,qBAAa,oCAAoC,CAAC,CAAC,SAAS,gCAAgC,GAAG,6BAA6B,CAC1H,YAAW,4BAA4B,CAAC,CAAC,CAAC;IAE1C,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAW;IAC1B,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAGhC,OAAO,IAAI,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;IAGpC,MAAM,IAAI,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC;IAG3B,UAAU,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;CAGhE;AAID,eAAO,MAAM,gCAAgC,EAAG,0BAAmC,CAAC;AAEpF,MAAM,WAAW,oCAAoC,CAAC,CAAC,SAAS,gCAAgC,GAAG,6BAA6B;IAC9H,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC;CACpC;AAED,4EAA4E;AAC5E,wBAAgB,oCAAoC,CAAC,CAAC,SAAS,gCAAgC,GAAG,6BAA6B,EAC7H,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC,EACzB,aAAa,GAAE,MAAiC,GAC/C,oCAAoC,CAAC,CAAC,CAAC,CAEzC;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IAChD,QAAQ,CAAC,WAAW,EAAE,aAAa,CAAC;QAAE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC7F,QAAQ,CAAC,mBAAmB,EAAE,aAAa,CAAC,kBAAkB,CAAC,CAAC;CACjE;AAQD;;2EAE2E;AAC3E,wBAAgB,mCAAmC,CACjD,OAAO,EAAE,aAAa,CAAC,gCAAgC,CAAC,GACvD,4BAA4B,CAoB9B"}

package/dist/exception/index.js

@@ -10,19 +10,63 @@
 //      bytes (`id` + `timestampIso` minted INTO the signed payload).
 // Ported from the oreoasis-core-host engine (M5); the DST is neutralized, the
 // error reuses hudhud's `ExceptionClassificationError`, id generation inlined.
+//
+// ── Schema v2 (2026-09-23, ECOSYSTEM d43 §4.2) ──────────────────────────────
+// v1 classifies WHERE A MODEL FAILED. d43 classifies HOW A DOER DEVIATED —
+// error · at-risk · reckless · improvement — and an improvement is not a
+// failure, so the second taxonomy is not an extension of the first. v2 carries
+// both as ORTHOGONAL fields on one record: a mandatory `deviationClass` and an
+// optional `failureClass`, present only when a model was involved (`model` is
+// optional too; its absence means "no model", never "unknown"). One record, one
+// operator signature, one fact; the model-failure dataset survives intact.
+// v1 is frozen as a wire format: its DST, schema label and header are unchanged
+// and `verifyClassificationSignature` accepts both versions forever.
+//
+// ── The doer's account (d43: no classification of a person is one-sided) ────
+// The doer may attach their own account, countersigned over the exact body the
+// operator signed. Two guards, both structural rather than policy:
+//   • UNLINKABLE. `attachDoerAccount` never accepts a DID — only the doer's
+//     seed, from which it derives a key for exactly ONE classification
+//     (identity-server's relationship derivation, salted by operator + record
+//     id). The same doer at two establishments — or twice at one — shows two
+//     unrelated DIDs, so the records cannot be joined into a per-person
+//     deviation history (§4.7). The doer, holding the seed, can re-derive each
+//     key and prove authorship of their own records (§4.8).
+//   • DECLINING IS FREE. Not signing is represented by ABSENCE of the
+//     `doerAccount` key — no null, no status, no "invited"/"declined" flag. A
+//     record without an account names no doer at all, so there is nothing to
+//     aggregate against a person; and absence reads identically whether the doer
+//     declined, was never asked, or is an AI helper.
+// Limit, stated: an operator can still type a name into `resolutionSummary`.
+// The schema cannot stop free text; it only refuses to make the join easy.
 // ============================================================================
-import { signEvent, verifyEvent } from "@kashscript/identity-core";
+import { parseDid, signEvent, verifyEvent } from "@kashscript/identity-core";
+import { deriveRelationshipSalt, deriveRelationshipSigningKey } from "@kashscript/identity-server";
 import { ExceptionClassificationError } from "../errors";
 // Re-export the error this module throws so a consumer can catch it from the
 // same subpath it imports the mandatory gate from.
 export { ExceptionClassificationError } from "../errors";
-/** The failure classes. No "unclassified": classification is mandatory. */
+/** The model-failure classes — v1's mandatory class, v2's OPTIONAL one
+ *  (meaningful only when a model was involved). No "unclassified". */
 export const FAILURE_CLASSES = ["judgment", "gap-filling", "ambiguous"];
-/** DST so a classification signature can't replay as a ledger/attestation sig.
- *  Neutral default; a venture passes its own DST at swap for wire-compat. */
+/** d43 §4.2 — how a doer deviated. Mandatory on v2 records; no default, no
+ *  "unclassified". error → adjust the system, not the person · at-risk → coach
+ *  · reckless → the only punitive branch · improvement → adopt. */
+export const DEVIATION_CLASSES = ["error", "at-risk", "reckless", "improvement"];
+/** v1 signed label (DST) — v1 records verify under it forever. New records are
+ *  v2 (`HUDHUD_EXCEPTION_CLASSIFICATION_V2_DST`). */
 export const HUDHUD_EXCEPTION_CLASSIFICATION_DST = "kash-exception-classification-v1\n";
+/** v1 schema label — frozen; see `EXCEPTION_CLASSIFICATION_SCHEMA_VERSION_V2`. */
 export const EXCEPTION_CLASSIFICATION_SCHEMA_VERSION = "exception-classification/1";
 const SIGN_HEADER = { kind: "exception-classification/1" };
+/** v2 labels — registered in `@kashscript/attest/dst` (0.1.7) before first use. */
+export const HUDHUD_EXCEPTION_CLASSIFICATION_V2_DST = "kash-exception-classification-v2\n";
+export const EXCEPTION_CLASSIFICATION_SCHEMA_VERSION_V2 = "exception-classification/2";
+const SIGN_HEADER_V2 = { kind: "exception-classification/2" };
+/** The doer's countersignature DST — so it can never replay as the operator's. */
+export const HUDHUD_EXCEPTION_DOER_ACCOUNT_DST = "kash-exception-doer-account-v1\n";
+const DOER_SIGN_HEADER = { kind: "exception-doer-account/1" };
+const DOER_CONTEXT_PREFIX = "hudhud/exception-doer-account:";
 let lastIdMicros = 0;
 function newRecordId() {
     let micros = Date.now() * 1000;
@@ -35,9 +79,7 @@ function newRecordId() {
         hex += b.toString(16).padStart(2, "0");
     return `exc_${micros.toString(36)}_${hex}`;
 }
-/** The mandatory gate — throws `ExceptionClassificationError` if `value` is
- *  absent/empty or not one of the classes. NOT merely the TS type. */
-export function assertFailureClass(value) {
+function gateFailureClass(value) {
     if (value === undefined || value === null || value === "") {
         throw new ExceptionClassificationError(`FAILURE_CLASS_REQUIRED — an exception cannot be resolved without a failureClass (one of ${FAILURE_CLASSES.join(" | ")})`);
     }
@@ -45,14 +87,32 @@ export function assertFailureClass(value) {
         throw new ExceptionClassificationError(`FAILURE_CLASS_INVALID — failureClass must be one of ${FAILURE_CLASSES.join(" | ")} (got ${String(value)})`);
     }
 }
+/** The v1 mandatory gate — throws `ExceptionClassificationError` if `value` is
+ *  absent/empty or not one of the classes. NOT merely the TS type.
+ *  @deprecated New records are v2: gate with `assertDeviationClass`; the model
+ *  class is optional there. Kept so existing callers compile unchanged. */
+export function assertFailureClass(value) {
+    gateFailureClass(value);
+}
+/** The v2 mandatory gate — throws `ExceptionClassificationError` if `value` is
+ *  absent/empty or not one of the four deviation classes. */
+export function assertDeviationClass(value) {
+    if (value === undefined || value === null || value === "") {
+        throw new ExceptionClassificationError(`DEVIATION_CLASS_REQUIRED — a deviation cannot be resolved without a deviationClass (one of ${DEVIATION_CLASSES.join(" | ")})`);
+    }
+    if (!DEVIATION_CLASSES.includes(value)) {
+        throw new ExceptionClassificationError(`DEVIATION_CLASS_INVALID — deviationClass must be one of ${DEVIATION_CLASSES.join(" | ")} (got ${String(value)})`);
+    }
+}
 function unsignedOf(record) {
     const { signedEnvelope: _drop, ...rest } = record;
     return rest;
 }
-/** Mint + sign a classification record (id/timestamp minted into the signed
- *  payload). Throws the mandatory gate if `failureClass` is missing/invalid. */
+/** Mint + sign a v1 classification record (id/timestamp minted into the signed
+ *  payload). Throws the mandatory gate if `failureClass` is missing/invalid.
+ *  @deprecated Mint v2 with `buildSignedDeviationClassification` (d43). */
 export async function buildSignedClassification(input, operator, link = {}) {
-    assertFailureClass(input.failureClass);
+    gateFailureClass(input.failureClass);
     const unsigned = {
         id: newRecordId(),
         schemaVersion: EXCEPTION_CLASSIFICATION_SCHEMA_VERSION,
@@ -81,11 +141,71 @@ export async function buildSignedClassification(input, operator, link = {}) {
         signedEnvelope: { alg: "ed25519", sig: signed.sig, dst: HUDHUD_EXCEPTION_CLASSIFICATION_DST, kid: operator.did },
     };
 }
-/** Verify a record's operator signature. Returns false on a well-formed mismatch. */
+export function isV2Classification(record) {
+    return record.schemaVersion === EXCEPTION_CLASSIFICATION_SCHEMA_VERSION_V2;
+}
+function unsignedOfV2(record) {
+    const { signedEnvelope: _sig, doerAccount: _doer, ...rest } = record;
+    return rest;
+}
+/** Mint + sign a v2 (d43) classification. Gates: `deviationClass` mandatory;
+ *  `failureClass` only with `model`; `model`/`modelVersion` non-empty when
+ *  present and OMITTED (never "") when there was no model. */
+export async function buildSignedDeviationClassification(input, operator, link = {}) {
+    assertDeviationClass(input.deviationClass);
+    if (input.model !== undefined && (typeof input.model !== "string" || input.model === "")) {
+        throw new ExceptionClassificationError("MODEL_INVALID — `model`, when present, must be non-empty; omit it for work no model touched");
+    }
+    if (input.modelVersion !== undefined && (input.model === undefined || typeof input.modelVersion !== "string" || input.modelVersion === "")) {
+        throw new ExceptionClassificationError("MODEL_VERSION_INVALID — `modelVersion` must be non-empty and requires `model`");
+    }
+    if (input.failureClass !== undefined) {
+        gateFailureClass(input.failureClass);
+        if (input.model === undefined) {
+            throw new ExceptionClassificationError("FAILURE_CLASS_WITHOUT_MODEL — failureClass classifies where a model failed; it requires `model`");
+        }
+    }
+    const unsigned = {
+        id: newRecordId(),
+        schemaVersion: EXCEPTION_CLASSIFICATION_SCHEMA_VERSION_V2,
+        timestampIso: new Date().toISOString(),
+        workflowId: input.workflowId,
+        sopVersion: input.sopVersion,
+        inputRef: input.inputRef,
+        contentHash: input.contentHash,
+        ...(input.model !== undefined ? { model: input.model } : {}),
+        ...(input.modelVersion !== undefined ? { modelVersion: input.modelVersion } : {}),
+        deviationClass: input.deviationClass,
+        ...(input.failureClass !== undefined ? { failureClass: input.failureClass } : {}),
+        deviationTag: input.deviationTag,
+        operatorDid: operator.did,
+        resolutionSummary: input.resolutionSummary,
+        resolutionActionRefs: [...input.resolutionActionRefs],
+        escalationId: link.escalationId ?? null,
+        signoffLedgerStepIndex: link.signoffLedgerStepIndex ?? null,
+    };
+    const signed = await signEvent(SIGN_HEADER_V2, unsigned, operator.privateKey, {
+        dst: HUDHUD_EXCEPTION_CLASSIFICATION_V2_DST,
+        encoding: "hex",
+        kid: operator.did,
+    });
+    return {
+        ...unsigned,
+        signedEnvelope: { alg: "ed25519", sig: signed.sig, dst: HUDHUD_EXCEPTION_CLASSIFICATION_V2_DST, kid: operator.did },
+    };
+}
+/** Verify a record's operator signature — v1 or v2, dispatched on
+ *  `schemaVersion`. Returns false on a well-formed mismatch. The doer's
+ *  account, if any, is outside the operator's bytes: check it with
+ *  `verifyDoerAccount`. */
 export async function verifyClassificationSignature(record, operatorPublicKey) {
+    const v2 = isV2Classification(record);
+    // v2 pins its DST: a v2 body is never accepted under any other tag.
+    if (v2 && record.signedEnvelope.dst !== HUDHUD_EXCEPTION_CLASSIFICATION_V2_DST)
+        return false;
     return verifyEvent({
-        header: SIGN_HEADER,
-        body: unsignedOf(record),
+        header: v2 ? SIGN_HEADER_V2 : SIGN_HEADER,
+        body: v2 ? unsignedOfV2(record) : unsignedOf(record),
         signature: {
             alg: "ed25519",
             sig: record.signedEnvelope.sig,
@@ -95,6 +215,74 @@ export async function verifyClassificationSignature(record, operatorPublicKey) {
         },
     }, operatorPublicKey);
 }
+// ── The doer's account ─────────────────────────────────────────────────────
+function doerSignedBody(record, doerDid, account) {
+    return { subject: unsignedOfV2(record), doerDid, account };
+}
+/** Derive the doer's signing key for exactly ONE classification. Deterministic,
+ *  so the doer (holding the seed) can re-derive it and prove a record is theirs;
+ *  unlinkable to every other classification without the seed. */
+export async function deriveDoerAccountKey(masterSeed, record) {
+    if (!(masterSeed instanceof Uint8Array) || masterSeed.length < 32) {
+        throw new ExceptionClassificationError("DOER_SEED_INVALID — the doer's master seed must be at least 32 bytes");
+    }
+    const relationshipSalt = await deriveRelationshipSalt({
+        requesterDid: record.operatorDid,
+        contextLabel: DOER_CONTEXT_PREFIX + record.id,
+    });
+    return deriveRelationshipSigningKey({ masterSeed, relationshipSalt });
+}
+/** Attach the doer's own account + countersignature over the exact bytes the
+ *  operator signed. Takes the doer's SEED, never a DID — so no caller can write
+ *  a stable identifier into the record. Declining = never calling this. */
+export async function attachDoerAccount(record, doer, account) {
+    if (!isV2Classification(record)) {
+        throw new ExceptionClassificationError("DOER_ACCOUNT_REQUIRES_V2 — a doer account attaches to an exception-classification/2 record");
+    }
+    if (record.doerAccount !== undefined) {
+        throw new ExceptionClassificationError("DOER_ACCOUNT_ALREADY_ATTACHED — a record carries at most one doer account");
+    }
+    if (typeof account !== "string" || account.trim() === "") {
+        throw new ExceptionClassificationError("DOER_ACCOUNT_EMPTY — an attached account must say something; to decline, attach nothing");
+    }
+    const key = await deriveDoerAccountKey(doer.masterSeed, record);
+    const signed = await signEvent(DOER_SIGN_HEADER, doerSignedBody(record, key.did, account), key.privateKey, {
+        dst: HUDHUD_EXCEPTION_DOER_ACCOUNT_DST,
+        encoding: "hex",
+        kid: key.did,
+    });
+    return {
+        ...record,
+        doerAccount: {
+            doerDid: key.did,
+            account,
+            signedEnvelope: { alg: "ed25519", sig: signed.sig, dst: HUDHUD_EXCEPTION_DOER_ACCOUNT_DST, kid: key.did },
+        },
+    };
+}
+/** Verify the doer's countersignature offline (the key comes from the
+ *  self-certifying `doerDid`). False when absent, tampered, or re-bound to a
+ *  different classification. Absence is not a failure of the doer — callers
+ *  must not treat `false`-because-absent as a mark (check `doerAccount` first). */
+export async function verifyDoerAccount(record) {
+    const d = record.doerAccount;
+    if (d === undefined)
+        return false;
+    if (d.signedEnvelope.dst !== HUDHUD_EXCEPTION_DOER_ACCOUNT_DST || d.signedEnvelope.kid !== d.doerDid)
+        return false;
+    let publicKey;
+    try {
+        publicKey = parseDid(d.doerDid);
+    }
+    catch {
+        return false;
+    }
+    return verifyEvent({
+        header: DOER_SIGN_HEADER,
+        body: doerSignedBody(record, d.doerDid, d.account),
+        signature: { alg: "ed25519", sig: d.signedEnvelope.sig, dst: d.signedEnvelope.dst, encoding: "hex", kid: d.signedEnvelope.kid },
+    }, publicKey);
+}
 export class InMemoryExceptionClassificationStore {
     rows = [];
     async append(record) {
@@ -122,13 +310,16 @@ function emptyClassMix() {
         mix[c] = 0;
     return mix;
 }
-/** Class mix + per-workflow (+ over-time) exception counts (the rate numerator). */
+/** Model-failure class mix + per-workflow (+ over-time) exception counts. A v2
+ *  record counts toward `classMix` only when it carries a `failureClass`.
+ *  Deliberately NO deviation-class mix and nothing per doer (d43 §4.7). */
 export function computeExceptionClassificationStats(records) {
     const classMix = emptyClassMix();
     const perWorkflow = new Map();
     const perWfMonth = new Map();
     for (const r of records) {
-        classMix[r.failureClass] += 1;
+        if (r.failureClass !== undefined)
+            classMix[r.failureClass] += 1;
         perWorkflow.set(r.workflowId, (perWorkflow.get(r.workflowId) ?? 0) + 1);
         const key = `${r.workflowId} ${r.timestampIso.slice(0, 7)}`;
         perWfMonth.set(key, (perWfMonth.get(key) ?? 0) + 1);

package/dist/exception/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/exception/index.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,yEAAyE;AACzE,+EAA+E;AAC/E,+EAA+E;AAC/E,wEAAwE;AACxE,gFAAgF;AAChF,+EAA+E;AAC/E,kDAAkD;AAClD,2EAA2E;AAC3E,qEAAqE;AACrE,8EAA8E;AAC9E,+EAA+E;AAC/E,+EAA+E;AAE/E,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AACnE,OAAO,EAAE,4BAA4B,EAAE,MAAM,WAAW,CAAC;AACzD,6EAA6E;AAC7E,mDAAmD;AACnD,OAAO,EAAE,4BAA4B,EAAE,MAAM,WAAW,CAAC;AAEzD,2EAA2E;AAC3E,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,UAAU,EAAE,aAAa,EAAE,WAAW,CAAU,CAAC;AAGjF;6EAC6E;AAC7E,MAAM,CAAC,MAAM,mCAAmC,GAAG,oCAA6C,CAAC;AACjG,MAAM,CAAC,MAAM,uCAAuC,GAAG,4BAAqC,CAAC;AAC7F,MAAM,WAAW,GAAG,EAAE,IAAI,EAAE,4BAA4B,EAAW,CAAC;AAEpE,IAAI,YAAY,GAAG,CAAC,CAAC;AACrB,SAAS,WAAW;IAClB,IAAI,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;IAC/B,IAAI,MAAM,IAAI,YAAY;QAAE,MAAM,GAAG,YAAY,GAAG,CAAC,CAAC;IACtD,YAAY,GAAG,MAAM,CAAC;IACtB,MAAM,IAAI,GAAG,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;IACvD,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,MAAM,CAAC,IAAI,IAAI;QAAE,GAAG,IAAI,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC7D,OAAO,OAAO,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,GAAG,EAAE,CAAC;AAC7C,CAAC;AAED;sEACsE;AACtE,MAAM,UAAU,kBAAkB,CAAC,KAAc;IAC/C,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;QAC1D,MAAM,IAAI,4BAA4B,CACpC,2FAA2F,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAC1H,CAAC;IACJ,CAAC;IACD,IAAI,CAAE,eAAyC,CAAC,QAAQ,CAAC,KAAe,CAAC,EAAE,CAAC;QAC1E,MAAM,IAAI,4BAA4B,CACpC,uDAAuD,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,MAAM,CAAC,KAAK,CAAC,GAAG,CAC5G,CAAC;IACJ,CAAC;AACH,CAAC;AA2CD,SAAS,UAAU,CAAC,MAAqC;IACvD,MAAM,EAAE,cAAc,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,GAAG,MAAM,CAAC;IAClD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;gFACgF;AAChF,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,KAAmC,EACnC,QAAmE,EACnE,OAAmG,EAAE;IAErG,kBAAkB,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IACvC,MAAM,QAAQ,GAA2B;QACvC,EAAE,EAAE,WAAW,EAAE;QACjB,aAAa,EAAE,uCAAuC;QACtD,YAAY,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACtC,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,WAAW,EAAE,QAAQ,CAAC,GAAG;QACzB,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;QAC1C,oBAAoB,EAAE,CAAC,GAAG,KAAK,CAAC,oBAAoB,CAAC;QACrD,YAAY,EAAE,IAAI,CAAC,YAAY,IAAI,IAAI;QACvC,sBAAsB,EAAE,IAAI,CAAC,sBAAsB,IAAI,IAAI;KAC5D,CAAC;IACF,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,WAAW,EAAE,QAAQ,EAAE,QAAQ,CAAC,UAAU,EAAE;QACzE,GAAG,EAAE,mCAAmC;QACxC,QAAQ,EAAE,KAAK;QACf,GAAG,EAAE,QAAQ,CAAC,GAAG;KAClB,CAAC,CAAC;IACH,OAAO;QACL,GAAG,QAAQ;QACX,cAAc,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,mCAAmC,EAAE,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE;KACjH,CAAC;AACJ,CAAC;AAED,qFAAqF;AACrF,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,MAAqC,EACrC,iBAA6B;IAE7B,OAAO,WAAW,CAChB;QACE,MAAM,EAAE,WAAW;QACnB,IAAI,EAAE,UAAU,CAAC,MAAM,CAAC;QACxB,SAAS,EAAE;YACT,GAAG,EAAE,SAAS;YACd,GAAG,EAAE,MAAM,CAAC,cAAc,CAAC,GAAG;YAC9B,GAAG,EAAE,MAAM,CAAC,cAAc,CAAC,GAAG;YAC9B,QAAQ,EAAE,KAAK;YACf,GAAG,EAAE,MAAM,CAAC,cAAc,CAAC,GAAG;SAC/B;KACF,EACD,iBAAiB,CAClB,CAAC;AACJ,CAAC;AAWD,MAAM,OAAO,oCAAoC;IAC9B,IAAI,GAAoC,EAAE,CAAC;IAC5D,KAAK,CAAC,MAAM,CAAC,MAAqC;QAChD,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACzB,CAAC;IACD,KAAK,CAAC,OAAO;QACX,OAAO,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;IACxB,CAAC;IACD,KAAK,CAAC,MAAM;QACV,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC;IAC1E,CAAC;IACD,KAAK,CAAC,UAAU,CAAC,UAAkB;QACjC,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,UAAU,CAAC,CAAC;IAC9D,CAAC;CACF;AAED,8EAA8E;AAE9E,MAAM,CAAC,MAAM,gCAAgC,GAAG,0BAAmC,CAAC;AASpF,4EAA4E;AAC5E,MAAM,UAAU,oCAAoC,CAClD,OAAqD,EACrD,gBAAwB,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;IAEhD,OAAO,EAAE,aAAa,EAAE,gCAAgC,EAAE,aAAa,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,GAAG,OAAO,CAAC,EAAE,CAAC;AAC1H,CAAC;AAeD,SAAS,aAAa;IACpB,MAAM,GAAG,GAAG,EAAkC,CAAC;IAC/C,KAAK,MAAM,CAAC,IAAI,eAAe;QAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAC5C,OAAO,GAAG,CAAC;AACb,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,mCAAmC,CACjD,OAAqD;IAErD,MAAM,QAAQ,GAAG,aAAa,EAAE,CAAC;IACjC,MAAM,WAAW,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC9C,MAAM,UAAU,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC7C,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;QAC9B,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACxE,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;QAC5D,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACtD,CAAC;IACD,MAAM,cAAc,GAAG,CAAC,GAAG,WAAW,CAAC,OAAO,EAAE,CAAC;SAC9C,GAAG,CAAC,CAAC,CAAC,UAAU,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC;SACrD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1D,MAAM,mBAAmB,GAAG,CAAC,GAAG,UAAU,CAAC,OAAO,EAAE,CAAC;SAClD,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE;QACpB,MAAM,CAAC,UAAU,EAAE,KAAK,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC3C,OAAO,EAAE,UAAU,EAAE,UAAW,EAAE,KAAK,EAAE,KAAM,EAAE,KAAK,EAAE,CAAC;IAC3D,CAAC,CAAC;SACD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,KAAK,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACzH,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,cAAc,EAAE,mBAAmB,EAAE,CAAC;AAC/F,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/exception/index.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,yEAAyE;AACzE,+EAA+E;AAC/E,+EAA+E;AAC/E,wEAAwE;AACxE,gFAAgF;AAChF,+EAA+E;AAC/E,kDAAkD;AAClD,2EAA2E;AAC3E,qEAAqE;AACrE,8EAA8E;AAC9E,+EAA+E;AAC/E,EAAE;AACF,+EAA+E;AAC/E,2EAA2E;AAC3E,yEAAyE;AACzE,+EAA+E;AAC/E,+EAA+E;AAC/E,8EAA8E;AAC9E,gFAAgF;AAChF,2EAA2E;AAC3E,gFAAgF;AAChF,qEAAqE;AACrE,EAAE;AACF,+EAA+E;AAC/E,+EAA+E;AAC/E,mEAAmE;AACnE,4EAA4E;AAC5E,uEAAuE;AACvE,8EAA8E;AAC9E,6EAA6E;AAC7E,wEAAwE;AACxE,+EAA+E;AAC/E,4DAA4D;AAC5D,sEAAsE;AACtE,8EAA8E;AAC9E,6EAA6E;AAC7E,iFAAiF;AACjF,qDAAqD;AACrD,6EAA6E;AAC7E,2EAA2E;AAC3E,+EAA+E;AAE/E,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AAC7E,OAAO,EAAE,sBAAsB,EAAE,4BAA4B,EAAE,MAAM,6BAA6B,CAAC;AAEnG,OAAO,EAAE,4BAA4B,EAAE,MAAM,WAAW,CAAC;AACzD,6EAA6E;AAC7E,mDAAmD;AACnD,OAAO,EAAE,4BAA4B,EAAE,MAAM,WAAW,CAAC;AAEzD;sEACsE;AACtE,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,UAAU,EAAE,aAAa,EAAE,WAAW,CAAU,CAAC;AAGjF;;mEAEmE;AACnE,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,aAAa,CAAU,CAAC;AAG1F;qDACqD;AACrD,MAAM,CAAC,MAAM,mCAAmC,GAAG,oCAA6C,CAAC;AACjG,kFAAkF;AAClF,MAAM,CAAC,MAAM,uCAAuC,GAAG,4BAAqC,CAAC;AAC7F,MAAM,WAAW,GAAG,EAAE,IAAI,EAAE,4BAA4B,EAAW,CAAC;AAEpE,mFAAmF;AACnF,MAAM,CAAC,MAAM,sCAAsC,GAAG,oCAA6C,CAAC;AACpG,MAAM,CAAC,MAAM,0CAA0C,GAAG,4BAAqC,CAAC;AAChG,MAAM,cAAc,GAAG,EAAE,IAAI,EAAE,4BAA4B,EAAW,CAAC;AACvE,kFAAkF;AAClF,MAAM,CAAC,MAAM,iCAAiC,GAAG,kCAA2C,CAAC;AAC7F,MAAM,gBAAgB,GAAG,EAAE,IAAI,EAAE,0BAA0B,EAAW,CAAC;AACvE,MAAM,mBAAmB,GAAG,gCAAgC,CAAC;AAE7D,IAAI,YAAY,GAAG,CAAC,CAAC;AACrB,SAAS,WAAW;IAClB,IAAI,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;IAC/B,IAAI,MAAM,IAAI,YAAY;QAAE,MAAM,GAAG,YAAY,GAAG,CAAC,CAAC;IACtD,YAAY,GAAG,MAAM,CAAC;IACtB,MAAM,IAAI,GAAG,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;IACvD,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,MAAM,CAAC,IAAI,IAAI;QAAE,GAAG,IAAI,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC7D,OAAO,OAAO,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,GAAG,EAAE,CAAC;AAC7C,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;QAC1D,MAAM,IAAI,4BAA4B,CACpC,2FAA2F,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAC1H,CAAC;IACJ,CAAC;IACD,IAAI,CAAE,eAAyC,CAAC,QAAQ,CAAC,KAAe,CAAC,EAAE,CAAC;QAC1E,MAAM,IAAI,4BAA4B,CACpC,uDAAuD,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,MAAM,CAAC,KAAK,CAAC,GAAG,CAC5G,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;2EAG2E;AAC3E,MAAM,UAAU,kBAAkB,CAAC,KAAc;IAC/C,gBAAgB,CAAC,KAAK,CAAC,CAAC;AAC1B,CAAC;AAED;6DAC6D;AAC7D,MAAM,UAAU,oBAAoB,CAAC,KAAc;IACjD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;QAC1D,MAAM,IAAI,4BAA4B,CACpC,8FAA8F,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAC/H,CAAC;IACJ,CAAC;IACD,IAAI,CAAE,iBAA2C,CAAC,QAAQ,CAAC,KAAe,CAAC,EAAE,CAAC;QAC5E,MAAM,IAAI,4BAA4B,CACpC,2DAA2D,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,MAAM,CAAC,KAAK,CAAC,GAAG,CAClH,CAAC;IACJ,CAAC;AACH,CAAC;AA2CD,SAAS,UAAU,CAAC,MAAqC;IACvD,MAAM,EAAE,cAAc,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,GAAG,MAAM,CAAC;IAClD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;2EAE2E;AAC3E,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,KAAmC,EACnC,QAAmE,EACnE,OAAmG,EAAE;IAErG,gBAAgB,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IACrC,MAAM,QAAQ,GAA2B;QACvC,EAAE,EAAE,WAAW,EAAE;QACjB,aAAa,EAAE,uCAAuC;QACtD,YAAY,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACtC,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,WAAW,EAAE,QAAQ,CAAC,GAAG;QACzB,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;QAC1C,oBAAoB,EAAE,CAAC,GAAG,KAAK,CAAC,oBAAoB,CAAC;QACrD,YAAY,EAAE,IAAI,CAAC,YAAY,IAAI,IAAI;QACvC,sBAAsB,EAAE,IAAI,CAAC,sBAAsB,IAAI,IAAI;KAC5D,CAAC;IACF,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,WAAW,EAAE,QAAQ,EAAE,QAAQ,CAAC,UAAU,EAAE;QACzE,GAAG,EAAE,mCAAmC;QACxC,QAAQ,EAAE,KAAK;QACf,GAAG,EAAE,QAAQ,CAAC,GAAG;KAClB,CAAC,CAAC;IACH,OAAO;QACL,GAAG,QAAQ;QACX,cAAc,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,mCAAmC,EAAE,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE;KACjH,CAAC;AACJ,CAAC;AA0DD,MAAM,UAAU,kBAAkB,CAAC,MAAwC;IACzE,OAAO,MAAM,CAAC,aAAa,KAAK,0CAA0C,CAAC;AAC7E,CAAC;AAGD,SAAS,YAAY,CAAC,MAAuC;IAC3D,MAAM,EAAE,cAAc,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,GAAG,MAAM,CAAC;IACrE,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;8DAE8D;AAC9D,MAAM,CAAC,KAAK,UAAU,kCAAkC,CACtD,KAAmC,EACnC,QAAmE,EACnE,OAAmG,EAAE;IAErG,oBAAoB,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IAC3C,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,KAAK,KAAK,EAAE,CAAC,EAAE,CAAC;QACzF,MAAM,IAAI,4BAA4B,CAAC,6FAA6F,CAAC,CAAC;IACxI,CAAC;IACD,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,YAAY,KAAK,QAAQ,IAAI,KAAK,CAAC,YAAY,KAAK,EAAE,CAAC,EAAE,CAAC;QAC3I,MAAM,IAAI,4BAA4B,CAAC,+EAA+E,CAAC,CAAC;IAC1H,CAAC;IACD,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QACrC,gBAAgB,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QACrC,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAC9B,MAAM,IAAI,4BAA4B,CAAC,iGAAiG,CAAC,CAAC;QAC5I,CAAC;IACH,CAAC;IACD,MAAM,QAAQ,GAA6B;QACzC,EAAE,EAAE,WAAW,EAAE;QACjB,aAAa,EAAE,0CAA0C;QACzD,YAAY,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACtC,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5D,GAAG,CAAC,KAAK,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjF,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,GAAG,CAAC,KAAK,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjF,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,WAAW,EAAE,QAAQ,CAAC,GAAG;QACzB,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;QAC1C,oBAAoB,EAAE,CAAC,GAAG,KAAK,CAAC,oBAAoB,CAAC;QACrD,YAAY,EAAE,IAAI,CAAC,YAAY,IAAI,IAAI;QACvC,sBAAsB,EAAE,IAAI,CAAC,sBAAsB,IAAI,IAAI;KAC5D,CAAC;IACF,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,cAAc,EAAE,QAAQ,EAAE,QAAQ,CAAC,UAAU,EAAE;QAC5E,GAAG,EAAE,sCAAsC;QAC3C,QAAQ,EAAE,KAAK;QACf,GAAG,EAAE,QAAQ,CAAC,GAAG;KAClB,CAAC,CAAC;IACH,OAAO;QACL,GAAG,QAAQ;QACX,cAAc,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,sCAAsC,EAAE,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE;KACpH,CAAC;AACJ,CAAC;AAED;;;2BAG2B;AAC3B,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,MAAwC,EACxC,iBAA6B;IAE7B,MAAM,EAAE,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;IACtC,oEAAoE;IACpE,IAAI,EAAE,IAAI,MAAM,CAAC,cAAc,CAAC,GAAG,KAAK,sCAAsC;QAAE,OAAO,KAAK,CAAC;IAC7F,OAAO,WAAW,CAChB;QACE,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,WAAW;QACzC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,MAAuC,CAAC;QACrF,SAAS,EAAE;YACT,GAAG,EAAE,SAAS;YACd,GAAG,EAAE,MAAM,CAAC,cAAc,CAAC,GAAG;YAC9B,GAAG,EAAE,MAAM,CAAC,cAAc,CAAC,GAAG;YAC9B,QAAQ,EAAE,KAAK;YACf,GAAG,EAAE,MAAM,CAAC,cAAc,CAAC,GAAG;SAC/B;KACF,EACD,iBAAiB,CAClB,CAAC;AACJ,CAAC;AAED,8EAA8E;AAE9E,SAAS,cAAc,CAAC,MAAuC,EAAE,OAAe,EAAE,OAAe;IAC/F,OAAO,EAAE,OAAO,EAAE,YAAY,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAC7D,CAAC;AAED;;iEAEiE;AACjE,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,UAAsB,EACtB,MAAmE;IAEnE,IAAI,CAAC,CAAC,UAAU,YAAY,UAAU,CAAC,IAAI,UAAU,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;QAClE,MAAM,IAAI,4BAA4B,CAAC,sEAAsE,CAAC,CAAC;IACjH,CAAC;IACD,MAAM,gBAAgB,GAAG,MAAM,sBAAsB,CAAC;QACpD,YAAY,EAAE,MAAM,CAAC,WAAkB;QACvC,YAAY,EAAE,mBAAmB,GAAG,MAAM,CAAC,EAAE;KAC9C,CAAC,CAAC;IACH,OAAO,4BAA4B,CAAC,EAAE,UAAU,EAAE,gBAAgB,EAAE,CAAC,CAAC;AACxE,CAAC;AAED;;2EAE2E;AAC3E,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,MAAuC,EACvC,IAAyC,EACzC,OAAe;IAEf,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,4BAA4B,CAAC,4FAA4F,CAAC,CAAC;IACvI,CAAC;IACD,IAAI,MAAM,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QACrC,MAAM,IAAI,4BAA4B,CAAC,2EAA2E,CAAC,CAAC;IACtH,CAAC;IACD,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACzD,MAAM,IAAI,4BAA4B,CAAC,yFAAyF,CAAC,CAAC;IACpI,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,oBAAoB,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IAChE,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,gBAAgB,EAAE,cAAc,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,EAAE,GAAG,CAAC,UAAU,EAAE;QACzG,GAAG,EAAE,iCAAiC;QACtC,QAAQ,EAAE,KAAK;QACf,GAAG,EAAE,GAAG,CAAC,GAAG;KACb,CAAC,CAAC;IACH,OAAO;QACL,GAAG,MAAM;QACT,WAAW,EAAE;YACX,OAAO,EAAE,GAAG,CAAC,GAAG;YAChB,OAAO;YACP,cAAc,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,iCAAiC,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE;SAC1G;KACF,CAAC;AACJ,CAAC;AAED;;;mFAGmF;AACnF,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,MAAuC;IAC7E,MAAM,CAAC,GAAG,MAAM,CAAC,WAAW,CAAC;IAC7B,IAAI,CAAC,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAClC,IAAI,CAAC,CAAC,cAAc,CAAC,GAAG,KAAK,iCAAiC,IAAI,CAAC,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IACnH,IAAI,SAAqB,CAAC;IAC1B,IAAI,CAAC;QACH,SAAS,GAAG,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,WAAW,CAChB;QACE,MAAM,EAAE,gBAAgB;QACxB,IAAI,EAAE,cAAc,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC;QAClD,SAAS,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,cAAc,CAAC,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,cAAc,CAAC,GAAG,EAAE;KAChI,EACD,SAAS,CACV,CAAC;AACJ,CAAC;AAaD,MAAM,OAAO,oCAAoC;IAG9B,IAAI,GAAQ,EAAE,CAAC;IAChC,KAAK,CAAC,MAAM,CAAC,MAAS;QACpB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACzB,CAAC;IACD,KAAK,CAAC,OAAO;QACX,OAAO,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;IACxB,CAAC;IACD,KAAK,CAAC,MAAM;QACV,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC;IAC1E,CAAC;IACD,KAAK,CAAC,UAAU,CAAC,UAAkB;QACjC,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,UAAU,CAAC,CAAC;IAC9D,CAAC;CACF;AAED,8EAA8E;AAE9E,MAAM,CAAC,MAAM,gCAAgC,GAAG,0BAAmC,CAAC;AASpF,4EAA4E;AAC5E,MAAM,UAAU,oCAAoC,CAClD,OAAyB,EACzB,gBAAwB,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;IAEhD,OAAO,EAAE,aAAa,EAAE,gCAAgC,EAAE,aAAa,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,GAAG,OAAO,CAAC,EAAE,CAAC;AAC1H,CAAC;AAeD,SAAS,aAAa;IACpB,MAAM,GAAG,GAAG,EAAkC,CAAC;IAC/C,KAAK,MAAM,CAAC,IAAI,eAAe;QAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAC5C,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;2EAE2E;AAC3E,MAAM,UAAU,mCAAmC,CACjD,OAAwD;IAExD,MAAM,QAAQ,GAAG,aAAa,EAAE,CAAC;IACjC,MAAM,WAAW,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC9C,MAAM,UAAU,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC7C,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,IAAI,CAAC,CAAC,YAAY,KAAK,SAAS;YAAE,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;QAChE,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACxE,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;QAC5D,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACtD,CAAC;IACD,MAAM,cAAc,GAAG,CAAC,GAAG,WAAW,CAAC,OAAO,EAAE,CAAC;SAC9C,GAAG,CAAC,CAAC,CAAC,UAAU,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC;SACrD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1D,MAAM,mBAAmB,GAAG,CAAC,GAAG,UAAU,CAAC,OAAO,EAAE,CAAC;SAClD,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE;QACpB,MAAM,CAAC,UAAU,EAAE,KAAK,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC3C,OAAO,EAAE,UAAU,EAAE,UAAW,EAAE,KAAK,EAAE,KAAM,EAAE,KAAK,EAAE,CAAC;IAC3D,CAAC,CAAC;SACD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,KAAK,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACzH,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,cAAc,EAAE,mBAAmB,EAAE,CAAC;AAC/F,CAAC"}

package/dist/index.d.ts

@@ -11,5 +11,5 @@ export * from "./did-registry";
 export * from "./identity";
 export * from "./runtime";
 /** The hudhud protocol/package version (M5 initial cut). */
-export declare const HUDHUD_VERSION: "0.1.0";
+export declare const HUDHUD_VERSION: "0.1.1";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.js

@@ -28,5 +28,5 @@ export * from "./did-registry";
 export * from "./identity";
 export * from "./runtime";
 /** The hudhud protocol/package version (M5 initial cut). */
-export const HUDHUD_VERSION = "0.1.0";
+export const HUDHUD_VERSION = "0.1.1";
 //# sourceMappingURL=index.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kashscript/hudhud",
-  "version": "0.1.1",
+  "version": "0.2.0",
   "description": "The Agent Protocol — the accountable agent runtime. SOP compiler, MCP allowlist + circuit breaker, PII-redaction interceptor, a signed action ledger + forensic scan (on @kashscript/attest), exception classification, AIUC-1 work certificates, DID registry, and a neuron-kernel work runtime. Agent auth via @kashscript/identity-server MCP OAuth 2.1 tokens. Ventures import hudhud, never raw neuron. Commercial (SSLA Schedule B).",
   "type": "module",
   "main": "./dist/index.js",
@@ -79,8 +79,8 @@
   },
   "dependencies": {
     "@kashscript/identity-core": "0.3.1",
-    "@kashscript/attest": "0.1.0",
-    "@kashscript/identity-server": "0.1.0",
+    "@kashscript/attest": "0.1.7",
+    "@kashscript/identity-server": "0.2.0",
     "@kashscript/neuron": "0.1.1"
   },
   "peerDependencies": {