@op0ai/sdk 0.1.0

package/dist/evlog.d.ts

@@ -0,0 +1,71 @@
+import type { WideEvent, AuditEntry } from "./guards.ts";
+/** The minimal durable host evlog needs: the DO's `this.sql`. (DurableHost in define.ts structurally satisfies it.) */
+export interface SqlHost {
+    sql: (strings: TemplateStringsArray, ...values: unknown[]) => unknown[];
+}
+/** Structural match for the bound AnalyticsEngineDataset (env.EVLOG) — lets us test with a fake + degrade to no-op. */
+export interface AnalyticsSink {
+    writeDataPoint(point: {
+        indexes?: (string | null)[];
+        doubles?: number[];
+        blobs?: (string | null)[];
+    }): void;
+}
+/**
+ * Map a WideEvent → an Analytics Engine data point with a STABLE, positional column order (AE's SQL schema is
+ * positional: blobN / doubleN / indexN). Keep this in lockstep with the documented query columns:
+ *   index1  = cordId                                  (the sampling / GROUP BY key)
+ *   blob1=runId blob2=kind blob3=name blob4=tenantId blob5=cordId blob6=scope blob7=errCode blob8=errWhy
+ *   double1 = durationMs   double2 = ok (1|0)
+ */
+export declare function wideEventToDataPoint(e: WideEvent): {
+    indexes: (string | null)[];
+    blobs: (string | null)[];
+    doubles: number[];
+};
+/** Best-effort Analytics Engine writer — NEVER throws (telemetry must not break a run); logs failures to evlog. */
+export declare function analyticsEvlog(sink: AnalyticsSink | undefined): (e: WideEvent) => void;
+export interface AuditStore {
+    /** Append a hash-chained entry (commits to the prior entry's hash). Never throws; returns null on failure. */
+    append(e: {
+        actor: string;
+        action: string;
+        scopeId: string;
+        payload: unknown;
+    }): AuditEntry | null;
+    list(): AuditEntry[];
+}
+/**
+ * DO-backed audit chain on `this.sql`: each entry's hash commits to the previous (prevHash), so editing any
+ * earlier row breaks the chain (detect via {@link verifyAuditChain}). Durable → survives reload; spans the DO's
+ * whole lifetime (genesis → …), unlike an in-memory chain. Same AuditEntry shape as guards.ts (companion 23 §2).
+ */
+export declare function auditStore(host: SqlHost): AuditStore;
+/** Recompute the chain and confirm every entry's hash + prevHash linkage. `ok:false` + `brokenAt` on tamper. */
+export declare function verifyAuditChain(entries: readonly AuditEntry[]): {
+    ok: boolean;
+    brokenAt?: number;
+};
+/** What a call site emits — the semantic wide-event minus the identity/time the observer stamps. */
+export type WidePartial = Omit<WideEvent, "runId" | "ts" | "cordId" | "tenantId">;
+/** The governance seam a tool (or the runtime) calls to record a unit of work. */
+export type WideSink = (e: WidePartial) => void;
+export interface CordObserver {
+    readonly runId: string;
+    /** evlog lane: stamp identity+ts, write the Analytics Engine data point, AND append a tamper-evident audit entry. */
+    wide: WideSink;
+    audit: AuditStore;
+}
+/**
+ * Tie the evlog lane to one run: every `wide(...)` call writes an Analytics Engine row AND a hash-chained audit
+ * entry, both stamped with this run's identity (runId/cordId/tenantId). Pair with the AG-UI emitter (same runId)
+ * so the UI timeline, the analytics row, and the audit entry all correlate.
+ */
+export declare function cordObserver(opts: {
+    runId: string;
+    cordId: string;
+    tenantId: string;
+    host: SqlHost;
+    analytics?: AnalyticsSink;
+}): CordObserver;
+//# sourceMappingURL=evlog.d.ts.map

package/dist/evlog.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"evlog.d.ts","sourceRoot":"","sources":["../src/evlog.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzD,uHAAuH;AACvH,MAAM,WAAW,OAAO;IACtB,GAAG,EAAE,CAAC,OAAO,EAAE,oBAAoB,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,KAAK,OAAO,EAAE,CAAC;CACzE;AAID,uHAAuH;AACvH,MAAM,WAAW,aAAa;IAC5B,cAAc,CAAC,KAAK,EAAE;QAAE,OAAO,CAAC,EAAE,CAAC,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,KAAK,CAAC,EAAE,CAAC,MAAM,GAAG,IAAI,CAAC,EAAE,CAAA;KAAE,GAAG,IAAI,CAAC;CAC7G;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,CAAC,EAAE,SAAS,GAAG;IAAE,OAAO,EAAE,CAAC,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC;IAAC,KAAK,EAAE,CAAC,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAA;CAAE,CAM9H;AAED,mHAAmH;AACnH,wBAAgB,cAAc,CAAC,IAAI,EAAE,aAAa,GAAG,SAAS,GAAG,CAAC,CAAC,EAAE,SAAS,KAAK,IAAI,CAStF;AAWD,MAAM,WAAW,UAAU;IACzB,8GAA8G;IAC9G,MAAM,CAAC,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,GAAG,UAAU,GAAG,IAAI,CAAC;IACnG,IAAI,IAAI,UAAU,EAAE,CAAC;CACtB;AAED;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE,OAAO,GAAG,UAAU,CAsCpD;AAED,gHAAgH;AAChH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,SAAS,UAAU,EAAE,GAAG;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,CAUnG;AAID,oGAAoG;AACpG,MAAM,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,EAAE,OAAO,GAAG,IAAI,GAAG,QAAQ,GAAG,UAAU,CAAC,CAAC;AAClF,kFAAkF;AAClF,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,EAAE,WAAW,KAAK,IAAI,CAAC;AAEhD,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,qHAAqH;IACrH,IAAI,EAAE,QAAQ,CAAC;IACf,KAAK,EAAE,UAAU,CAAC;CACnB;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,OAAO,CAAC;IACd,SAAS,CAAC,EAAE,aAAa,CAAC;CAC3B,GAAG,YAAY,CAiBf"}

package/dist/evlog.js

@@ -0,0 +1,124 @@
+// evlog.ts — the cord's evlog lane: governance-grade observability that runs ALONGSIDE the AG-UI timeline.
+// Where agui.ts is the cord↔UI wire (one CordEvent per step, persisted + broadcast for the live "stack trace"),
+// evlog is the OPS + AUDIT wire: one WideEvent per unit of work (companion 23 §2 — "one fat event, many
+// dimensions") written to Workers Analytics Engine, PLUS a tamper-evident, DO-persisted hash-chained audit.
+// The two lanes share ONE runId, so a timeline step, an analytics row, and an audit entry all JOIN on it.
+import { hashHex } from "./hash.js";
+/**
+ * Map a WideEvent → an Analytics Engine data point with a STABLE, positional column order (AE's SQL schema is
+ * positional: blobN / doubleN / indexN). Keep this in lockstep with the documented query columns:
+ *   index1  = cordId                                  (the sampling / GROUP BY key)
+ *   blob1=runId blob2=kind blob3=name blob4=tenantId blob5=cordId blob6=scope blob7=errCode blob8=errWhy
+ *   double1 = durationMs   double2 = ok (1|0)
+ */
+export function wideEventToDataPoint(e) {
+    return {
+        indexes: [e.cordId],
+        blobs: [e.runId, e.kind, e.name, e.tenantId, e.cordId, e.scope ?? "", e.error?.code ?? "", e.error?.why ?? ""],
+        doubles: [e.durationMs, e.ok ? 1 : 0],
+    };
+}
+/** Best-effort Analytics Engine writer — NEVER throws (telemetry must not break a run); logs failures to evlog. */
+export function analyticsEvlog(sink) {
+    return (e) => {
+        if (!sink)
+            return;
+        try {
+            sink.writeDataPoint(wideEventToDataPoint(e));
+        }
+        catch (err) {
+            console.log(JSON.stringify({ evlog: "evlog.write", error: err instanceof Error ? err.message : String(err) }));
+        }
+    };
+}
+// ---------- tamper-evident, DO-persisted audit chain ----------
+const auditEntryHash = (x) => hashHex([x.seq, x.ts, x.actor, x.action, x.scopeId, x.payloadHash, x.prevHash].join("|"));
+// Hoisted from inside auditStore (captures nothing — pure formatting of its own params).
+const log = (where, e) => console.log(JSON.stringify({ evlog: `cord_audit.${where}`, error: e instanceof Error ? e.message : String(e) }));
+/**
+ * DO-backed audit chain on `this.sql`: each entry's hash commits to the previous (prevHash), so editing any
+ * earlier row breaks the chain (detect via {@link verifyAuditChain}). Durable → survives reload; spans the DO's
+ * whole lifetime (genesis → …), unlike an in-memory chain. Same AuditEntry shape as guards.ts (companion 23 §2).
+ */
+export function auditStore(host) {
+    let ready = false;
+    try {
+        void host.sql `CREATE TABLE IF NOT EXISTS cord_audit (seq INTEGER PRIMARY KEY, ts TEXT, actor TEXT, action TEXT, scopeId TEXT, payloadHash TEXT, prevHash TEXT, hash TEXT)`;
+        ready = true;
+    }
+    catch (e) {
+        log("init", e);
+    }
+    return {
+        append({ actor, action, scopeId, payload }) {
+            if (!ready)
+                return null;
+            try {
+                const last = host.sql `SELECT seq, hash FROM cord_audit ORDER BY seq DESC LIMIT 1`;
+                const prev = last[0];
+                const seq = prev ? Number(prev.seq) + 1 : 0;
+                const prevHash = prev ? prev.hash : "GENESIS";
+                const ts = new Date().toISOString();
+                const payloadHash = hashHex(JSON.stringify(payload ?? null));
+                const base = { seq, ts, actor, action, scopeId, payloadHash, prevHash };
+                const hash = auditEntryHash(base);
+                void host.sql `INSERT INTO cord_audit (seq, ts, actor, action, scopeId, payloadHash, prevHash, hash) VALUES (${seq}, ${ts}, ${actor}, ${action}, ${scopeId}, ${payloadHash}, ${prevHash}, ${hash})`;
+                return { ...base, hash };
+            }
+            catch (e) {
+                log("append", e);
+                return null;
+            }
+        },
+        list() {
+            if (!ready)
+                return [];
+            try {
+                const rows = host.sql `SELECT seq, ts, actor, action, scopeId, payloadHash, prevHash, hash FROM cord_audit ORDER BY seq`;
+                return rows.map((r) => Object.assign(r, { seq: Number(r.seq) }));
+            }
+            catch (e) {
+                log("list", e);
+                return [];
+            }
+        },
+    };
+}
+/** Recompute the chain and confirm every entry's hash + prevHash linkage. `ok:false` + `brokenAt` on tamper. */
+export function verifyAuditChain(entries) {
+    let prevHash = "GENESIS";
+    for (let i = 0; i < entries.length; i++) {
+        const entry = entries[i];
+        if (!entry)
+            return { ok: false, brokenAt: i };
+        const { hash, ...base } = entry;
+        if (base.prevHash !== prevHash || auditEntryHash(base) !== hash)
+            return { ok: false, brokenAt: i };
+        prevHash = hash;
+    }
+    return { ok: true };
+}
+/**
+ * Tie the evlog lane to one run: every `wide(...)` call writes an Analytics Engine row AND a hash-chained audit
+ * entry, both stamped with this run's identity (runId/cordId/tenantId). Pair with the AG-UI emitter (same runId)
+ * so the UI timeline, the analytics row, and the audit entry all correlate.
+ */
+export function cordObserver(opts) {
+    const write = analyticsEvlog(opts.analytics);
+    const audit = auditStore(opts.host);
+    return {
+        runId: opts.runId,
+        audit,
+        wide: (p) => {
+            const e = { ...p, runId: opts.runId, cordId: opts.cordId, tenantId: opts.tenantId, ts: new Date().toISOString() };
+            write(e);
+            audit.append({
+                actor: opts.cordId,
+                action: `${e.kind}:${e.name}`,
+                scopeId: opts.runId,
+                payload: { ok: e.ok, durationMs: e.durationMs, scope: e.scope, error: e.error, attrs: e.attrs },
+            });
+        },
+    };
+}
+//# sourceMappingURL=evlog.js.map

package/dist/evlog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"evlog.js","sourceRoot":"","sources":["../src/evlog.ts"],"names":[],"mappings":"AAAA,2GAA2G;AAC3G,gHAAgH;AAChH,wGAAwG;AACxG,4GAA4G;AAC5G,0GAA0G;AAC1G,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAgBpC;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAAC,CAAY;IAC/C,OAAO;QACL,OAAO,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;QACnB,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,GAAG,IAAI,EAAE,CAAC;QAC9G,OAAO,EAAE,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;KACtC,CAAC;AACJ,CAAC;AAED,mHAAmH;AACnH,MAAM,UAAU,cAAc,CAAC,IAA+B;IAC5D,OAAO,CAAC,CAAC,EAAE,EAAE;QACX,IAAI,CAAC,IAAI;YAAE,OAAO;QAClB,IAAI,CAAC;YACH,IAAI,CAAC,cAAc,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;QACjH,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED,iEAAiE;AAEjE,MAAM,cAAc,GAAG,CAAC,CAA2B,EAAU,EAAE,CAC7D,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAE5F,yFAAyF;AACzF,MAAM,GAAG,GAAG,CAAC,KAAa,EAAE,CAAU,EAAQ,EAAE,CAC9C,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,cAAc,KAAK,EAAE,EAAE,KAAK,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAQnH;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,IAAa;IACtC,IAAI,KAAK,GAAG,KAAK,CAAC;IAClB,IAAI,CAAC;QACH,KAAK,IAAI,CAAC,GAAG,CAAA,6JAA6J,CAAC;QAC3K,KAAK,GAAG,IAAI,CAAC;IACf,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACjB,CAAC;IACD,OAAO;QACL,MAAM,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE;YACxC,IAAI,CAAC,KAAK;gBAAE,OAAO,IAAI,CAAC;YACxB,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAA,4DAAoG,CAAC;gBAC1H,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;gBACrB,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC5C,MAAM,QAAQ,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;gBAC9C,MAAM,EAAE,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;gBACpC,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,IAAI,IAAI,CAAC,CAAC,CAAC;gBAC7D,MAAM,IAAI,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC;gBACxE,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;gBAClC,KAAK,IAAI,CAAC,GAAG,CAAA,iGAAiG,GAAG,KAAK,EAAE,KAAK,KAAK,KAAK,MAAM,KAAK,OAAO,KAAK,WAAW,KAAK,QAAQ,KAAK,IAAI,GAAG,CAAC;gBACnM,OAAO,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,CAAC;YAC3B,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;gBACjB,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QACD,IAAI;YACF,IAAI,CAAC,KAAK;gBAAE,OAAO,EAAE,CAAC;YACtB,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAA,kGAAkH,CAAC;gBACxI,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;YACnE,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;gBACf,OAAO,EAAE,CAAC;YACZ,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED,gHAAgH;AAChH,MAAM,UAAU,gBAAgB,CAAC,OAA8B;IAC7D,IAAI,QAAQ,GAAG,SAAS,CAAC;IACzB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACxC,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QACzB,IAAI,CAAC,KAAK;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;QAC9C,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,EAAE,GAAG,KAAK,CAAC;QAChC,IAAI,IAAI,CAAC,QAAQ,KAAK,QAAQ,IAAI,cAAc,CAAC,IAAI,CAAC,KAAK,IAAI;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;QACnG,QAAQ,GAAG,IAAI,CAAC;IAClB,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC;AAgBD;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,IAM5B;IACC,MAAM,KAAK,GAAG,cAAc,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC7C,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpC,OAAO;QACL,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,KAAK;QACL,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE;YACV,MAAM,CAAC,GAAc,EAAE,GAAG,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;YAC7H,KAAK,CAAC,CAAC,CAAC,CAAC;YACT,KAAK,CAAC,MAAM,CAAC;gBACX,KAAK,EAAE,IAAI,CAAC,MAAM;gBAClB,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,EAAE;gBAC7B,OAAO,EAAE,IAAI,CAAC,KAAK;gBACnB,OAAO,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE;aAChG,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/guards.d.ts

@@ -0,0 +1,61 @@
+export type GuardEvent = {
+    cord: string;
+    tool?: string;
+    scope?: string;
+    input: unknown;
+};
+export type WideEvent = {
+    ts: string;
+    runId: string;
+    tenantId: string;
+    cordId: string;
+    kind: "turn" | "step" | "model" | "tool" | "eval";
+    name: string;
+    durationMs: number;
+    ok: boolean;
+    scope?: string;
+    error?: {
+        code: string;
+        why: string;
+    };
+    attrs?: Record<string, unknown>;
+};
+export type AuditEntry = {
+    seq: number;
+    ts: string;
+    actor: string;
+    action: string;
+    scopeId: string;
+    payloadHash: string;
+    prevHash: string;
+    hash: string;
+};
+export type Guard = {
+    name: string;
+    /** Gate hook: deny by throwing (deepsec scope check), or instrument by side-effect. */
+    onCall?: (ev: GuardEvent) => void | Promise<void>;
+    /** Output transform applied before persist/export (deepsec redaction). */
+    redact?: <T>(value: T) => T;
+    /** Wide-event sink (deepeval instrumentation). */
+    onEvent?: (e: WideEvent) => void;
+};
+export type AuditChain = {
+    entries: AuditEntry[];
+    append(e: {
+        actor: string;
+        action: string;
+        scopeId: string;
+        payload: unknown;
+    }): AuditEntry;
+};
+export declare const makeAuditChain: () => AuditChain;
+/** Re-derive every hash; any insert/edit/delete breaks the chain → returns false. (The S7 red test.) */
+export declare const verifyChain: (entries: AuditEntry[]) => boolean;
+/** deepsec — scope gate + redaction (ADR-10). The runtime also drives an audit chain tagged actor="deepsec". */
+export declare const deepsec: (opts?: {
+    allow?: string[];
+    secrets?: RegExp[];
+}) => Guard;
+/** deepeval — instruments every run (ADR-24). Collects wide-events; prod forwards to evlog (OTLP + PostHog). */
+export declare const deepeval: (sink?: WideEvent[]) => Guard;
+//# sourceMappingURL=guards.d.ts.map

package/dist/guards.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"guards.d.ts","sourceRoot":"","sources":["../src/guards.ts"],"names":[],"mappings":"AAWA,MAAM,MAAM,UAAU,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,OAAO,CAAA;CAAE,CAAC;AAGzF,MAAM,MAAM,SAAS,GAAG;IACtB,EAAE,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAC5D,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAChE,UAAU,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAChD,KAAK,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACxE,CAAC;AAGF,MAAM,MAAM,UAAU,GAAG;IACvB,GAAG,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IACxE,WAAW,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;CACrD,CAAC;AAEF,MAAM,MAAM,KAAK,GAAG;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,uFAAuF;IACvF,MAAM,CAAC,EAAE,CAAC,EAAE,EAAE,UAAU,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClD,0EAA0E;IAC1E,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,KAAK,CAAC,CAAC;IAC5B,kDAAkD;IAClD,OAAO,CAAC,EAAE,CAAC,CAAC,EAAE,SAAS,KAAK,IAAI,CAAC;CAClC,CAAC;AAIF,MAAM,MAAM,UAAU,GAAG;IACvB,OAAO,EAAE,UAAU,EAAE,CAAC;IACtB,MAAM,CAAC,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,GAAG,UAAU,CAAC;CAC7F,CAAC;AAKF,eAAO,MAAM,cAAc,QAAO,UAejC,CAAC;AAEF,wGAAwG;AACxG,eAAO,MAAM,WAAW,GAAI,SAAS,UAAU,EAAE,KAAG,OAUnD,CAAC;AA6BF,gHAAgH;AAChH,eAAO,MAAM,OAAO,GAAI,OAAM;IAAE,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAA;CAAO,KAAG,KAW7E,CAAC;AAEF,gHAAgH;AAChH,eAAO,MAAM,QAAQ,GAAI,OAAM,SAAS,EAAO,KAAG,KAGhD,CAAC"}

package/dist/guards.js

@@ -0,0 +1,88 @@
+// guards.ts — the system-cord guards, made REAL for H4 (no longer H0 no-op stubs).
+//
+//  • deepsec (ADR-10, the security harness): (1) scope check at the gate — deny a run whose scope is off the
+//    allow-list; (2) redaction — scrub secrets/PII from the output BEFORE it is persisted to the vault or
+//    exported; (3) a tamper-evident, hash-chained audit (evlog AuditEntry shape, ADR-12).
+//  • deepeval (ADR-24, the quality harness): instruments every run — emits evlog wide-events (one fat event
+//    per unit of work). In prod the worker forwards these to OTLP + PostHog (companion 23 evlog §3).
+//
+// Both are plain functions returning a Guard the runtime (index.ts) drives. Pure TS; no deps beyond hash.ts.
+import { hashHex } from "./hash.js";
+const entryHash = (e) => hashHex([e.seq, e.ts, e.actor, e.action, e.scopeId, e.payloadHash, e.prevHash].join("|"));
+export const makeAuditChain = () => {
+    const entries = [];
+    return {
+        entries,
+        append({ actor, action, scopeId, payload }) {
+            const seq = entries.length;
+            const ts = new Date().toISOString();
+            const prevHash = seq === 0 ? "GENESIS" : entries[seq - 1]?.hash ?? "GENESIS";
+            const payloadHash = hashHex(JSON.stringify(payload ?? null));
+            const base = { seq, ts, actor, action, scopeId, payloadHash, prevHash };
+            const entry = { ...base, hash: entryHash(base) };
+            entries.push(entry);
+            return entry;
+        },
+    };
+};
+/** Re-derive every hash; any insert/edit/delete breaks the chain → returns false. (The S7 red test.) */
+export const verifyChain = (entries) => {
+    for (let i = 0; i < entries.length; i++) {
+        const e = entries[i];
+        if (!e)
+            return false;
+        const prevHash = i === 0 ? "GENESIS" : entries[i - 1]?.hash ?? "GENESIS";
+        if (e.prevHash !== prevHash)
+            return false;
+        const { hash, ...base } = e;
+        if (hash !== entryHash(base))
+            return false;
+    }
+    return true;
+};
+// ---- redaction ----
+// Provider token shapes + key material. Loose-but-real; prod (deepsec lane) uses the full secret-scanner set.
+const DEFAULT_SECRET_RES = [
+    /gh[poursa]_[A-Za-z0-9]{20,}/g, // GitHub PAT / oauth / app tokens
+    /github_pat_[A-Za-z0-9_]{20,}/g, // fine-grained PAT
+    /xox[baprs]-[A-Za-z0-9-]{10,}/g, // Slack
+    /AKIA[0-9A-Z]{16}/g, // AWS access key id
+    /sk-[A-Za-z0-9]{20,}/g, // OpenAI-style secret keys
+    /-----BEGIN (?:[A-Z ]+ )?PRIVATE KEY-----/g, // PEM private keys
+];
+const redactValue = (v, res) => {
+    if (typeof v === "string") {
+        let s = v;
+        for (const re of res)
+            s = s.replace(re, "[redacted]");
+        return s;
+    }
+    if (Array.isArray(v))
+        return v.map((x) => redactValue(x, res));
+    if (v && typeof v === "object") {
+        const o = {};
+        for (const k of Object.keys(v))
+            o[k] = redactValue(v[k], res);
+        return o;
+    }
+    return v;
+};
+/** deepsec — scope gate + redaction (ADR-10). The runtime also drives an audit chain tagged actor="deepsec". */
+export const deepsec = (opts = {}) => {
+    const res = opts.secrets ?? DEFAULT_SECRET_RES;
+    return {
+        name: "deepsec",
+        onCall: ({ scope }) => {
+            if (opts.allow && scope !== undefined && !opts.allow.includes(scope)) {
+                throw new Error(`deepsec: scope "${scope}" not in allow-list [${opts.allow.join(", ")}]`);
+            }
+        },
+        redact: (value) => redactValue(value, res),
+    };
+};
+/** deepeval — instruments every run (ADR-24). Collects wide-events; prod forwards to evlog (OTLP + PostHog). */
+export const deepeval = (sink = []) => ({
+    name: "deepeval",
+    onEvent: (e) => { sink.push(e); },
+});
+//# sourceMappingURL=guards.js.map

package/dist/guards.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"guards.js","sourceRoot":"","sources":["../src/guards.ts"],"names":[],"mappings":"AAAA,mFAAmF;AACnF,EAAE;AACF,6GAA6G;AAC7G,0GAA0G;AAC1G,0FAA0F;AAC1F,4GAA4G;AAC5G,qGAAqG;AACrG,EAAE;AACF,6GAA6G;AAC7G,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAmCpC,MAAM,SAAS,GAAG,CAAC,CAA2B,EAAU,EAAE,CACxD,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAE5F,MAAM,CAAC,MAAM,cAAc,GAAG,GAAe,EAAE;IAC7C,MAAM,OAAO,GAAiB,EAAE,CAAC;IACjC,OAAO;QACL,OAAO;QACP,MAAM,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE;YACxC,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC;YAC3B,MAAM,EAAE,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YACpC,MAAM,QAAQ,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC,EAAE,IAAI,IAAI,SAAS,CAAC;YAC7E,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,IAAI,IAAI,CAAC,CAAC,CAAC;YAC7D,MAAM,IAAI,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC;YACxE,MAAM,KAAK,GAAe,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7D,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACpB,OAAO,KAAK,CAAC;QACf,CAAC;KACF,CAAC;AACJ,CAAC,CAAC;AAEF,wGAAwG;AACxG,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,OAAqB,EAAW,EAAE;IAC5D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACxC,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QACrB,IAAI,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;QACrB,MAAM,QAAQ,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,IAAI,SAAS,CAAC;QACzE,IAAI,CAAC,CAAC,QAAQ,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QAC1C,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,EAAE,GAAG,CAAC,CAAC;QAC5B,IAAI,IAAI,KAAK,SAAS,CAAC,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC;IAC7C,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC,CAAC;AAEF,sBAAsB;AAEtB,8GAA8G;AAC9G,MAAM,kBAAkB,GAAa;IACnC,8BAA8B,EAAa,kCAAkC;IAC7E,+BAA+B,EAAY,mBAAmB;IAC9D,+BAA+B,EAAY,QAAQ;IACnD,mBAAmB,EAAwB,oBAAoB;IAC/D,sBAAsB,EAAqB,2BAA2B;IACtE,2CAA2C,EAAE,mBAAmB;CACjE,CAAC;AAEF,MAAM,WAAW,GAAG,CAAK,CAAI,EAAE,GAAa,EAAK,EAAE;IACjD,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;QAC1B,IAAI,CAAC,GAAW,CAAC,CAAC;QAClB,KAAK,MAAM,EAAE,IAAI,GAAG;YAAE,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,YAAY,CAAC,CAAC;QACtD,OAAO,CAAiB,CAAC;IAC3B,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAAE,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,EAAE,GAAG,CAAC,CAAiB,CAAC;IAC/E,IAAI,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;QAC/B,MAAM,CAAC,GAA4B,EAAE,CAAC;QACtC,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAA4B,CAAC;YAAE,CAAC,CAAC,CAAC,CAAC,GAAG,WAAW,CAAE,CAA6B,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QACtH,OAAO,CAAiB,CAAC;IAC3B,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC,CAAC;AAEF,gHAAgH;AAChH,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,OAAiD,EAAE,EAAS,EAAE;IACpF,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,IAAI,kBAAkB,CAAC;IAC/C,OAAO;QACL,IAAI,EAAE,SAAS;QACf,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE;YACpB,IAAI,IAAI,CAAC,KAAK,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBACrE,MAAM,IAAI,KAAK,CAAC,mBAAmB,KAAK,wBAAwB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC5F,CAAC;QACH,CAAC;QACD,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,GAAG,CAAC;KAC3C,CAAC;AACJ,CAAC,CAAC;AAEF,gHAAgH;AAChH,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,OAAoB,EAAE,EAAS,EAAE,CAAC,CAAC;IAC1D,IAAI,EAAE,UAAU;IAChB,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;CAClC,CAAC,CAAC"}

package/dist/hash.d.ts

@@ -0,0 +1,6 @@
+export declare const hashHex: (s: string) => string;
+/** A url-safe slug for vault keys (target → reports/<slug>/<runId>.json). */
+export declare const slug: (s: string) => string;
+/** A short, sortable-ish run id (timestamp + entropy). No node: deps. */
+export declare const newId: () => string;
+//# sourceMappingURL=hash.d.ts.map

package/dist/hash.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hash.d.ts","sourceRoot":"","sources":["../src/hash.ts"],"names":[],"mappings":"AAKA,eAAO,MAAM,OAAO,GAAI,GAAG,MAAM,KAAG,MAOnC,CAAC;AAEF,6EAA6E;AAC7E,eAAO,MAAM,IAAI,GAAI,GAAG,MAAM,KAAG,MACgG,CAAC;AAElI,yEAAyE;AACzE,eAAO,MAAM,KAAK,QAAO,MAC+C,CAAC"}

package/dist/hash.js

@@ -0,0 +1,18 @@
+// hash.ts — a tiny, deterministic, dependency-free hash for the H-shim (content-addressing + the audit
+// chain). It is NOT cryptographic: production swaps in SHA-256 via Web Crypto (`crypto.subtle.digest`,
+// available in both Workers and Node ≥18) — that's async, so the chain/manifest become async there. For the
+// pure-Node verify path we want a sync, zero-dep hash so the whole runtime stays portable (Node AND a
+// Worker, no imports). FNV-1a (32-bit) is enough to make tamper-evidence + content-addressing demonstrable.
+export const hashHex = (s) => {
+    let h = 0x811c9dc5;
+    for (let i = 0; i < s.length; i++) {
+        h ^= s.charCodeAt(i);
+        h = Math.imul(h, 0x01000193);
+    }
+    return (h >>> 0).toString(16).padStart(8, "0");
+};
+/** A url-safe slug for vault keys (target → reports/<slug>/<runId>.json). */
+export const slug = (s) => s.trim().toLowerCase().replace(/^https?:\/\//, "").replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "").slice(0, 80) || "target";
+/** A short, sortable-ish run id (timestamp + entropy). No node: deps. */
+export const newId = () => Date.now().toString(36) + "-" + Math.random().toString(36).slice(2, 8);
+//# sourceMappingURL=hash.js.map

package/dist/hash.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hash.js","sourceRoot":"","sources":["../src/hash.ts"],"names":[],"mappings":"AAAA,uGAAuG;AACvG,uGAAuG;AACvG,4GAA4G;AAC5G,sGAAsG;AACtG,4GAA4G;AAC5G,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,CAAS,EAAU,EAAE;IAC3C,IAAI,CAAC,GAAG,UAAU,CAAC;IACnB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAClC,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QACrB,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;IAC/B,CAAC;IACD,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AACjD,CAAC,CAAC;AAEF,6EAA6E;AAC7E,MAAM,CAAC,MAAM,IAAI,GAAG,CAAC,CAAS,EAAU,EAAE,CACxC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,QAAQ,CAAC;AAElI,yEAAyE;AACzE,MAAM,CAAC,MAAM,KAAK,GAAG,GAAW,EAAE,CAChC,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,GAAG,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,120 @@
+export * from "./hash.ts";
+export * from "./vault.ts";
+export * from "./guards.ts";
+export * from "./platform.ts";
+export * from "./agent.ts";
+export * from "./source.ts";
+export * from "./agui.ts";
+export * from "./tool.ts";
+export * from "./config.ts";
+export * from "./define.ts";
+export * from "./evlog.ts";
+export * from "./events.ts";
+export * from "./usectx.ts";
+export * from "./distill.ts";
+export * from "./data.ts";
+import type { Vault } from "./vault.ts";
+import type { Resources, ResourceNeed } from "./platform.ts";
+import { type Guard, type WideEvent, type AuditEntry } from "./guards.ts";
+/** A sub-cord: an encapsulated unit composed into a parent. `any` generics (not `unknown`) so a typed
+ *  `subcords` record — { scan: Subcord<string,Facts>, score: Subcord<Facts,EvalResult>, ... } — is assignable
+ *  to Record<string, Subcord> (Subcord<X,Y> is NOT assignable to Subcord<unknown,unknown> — invariant `run`
+ *  param — but IS assignable to Subcord<any,any>). Same heterogeneous-registry seam as data.ts's AnyFn. */
+export type Subcord<I = any, O = any> = {
+    id: string;
+    mount: "local" | "registry";
+    run: (input: I) => Promise<O>;
+};
+/** Mount an OWNED sub-cord in-process (deterministic trunk). */
+export declare function use<I, O>(sc: {
+    id: string;
+    run: (input: I) => Promise<O>;
+}): Subcord<I, O>;
+/** Mount a THIRD-PARTY/registry cord over MCP (the trust boundary; an executor toolkit). */
+export declare function useRemote<I, O>(sc: {
+    id: string;
+    call: (input: I) => Promise<O>;
+}): Subcord<I, O>;
+export type Expose = {
+    codemode?: boolean;
+    mcp?: string;
+    cli?: boolean;
+    openapi?: boolean;
+};
+export type CordDef<Input, Output> = {
+    id: string;
+    kind?: "agent-ful" | "agent-less";
+    inference?: "managed" | "byo";
+    /** The scope this cord's run requests — checked by deepsec against its allow-list (H4). */
+    scope?: string;
+    expose?: Expose;
+    guards?: Guard[];
+    subcords?: Record<string, Subcord>;
+    /** Durable resources this cord requires; the host MUST bind them or the run fails fast (validated post-gate). */
+    needs?: ResourceNeed[];
+    /** The deterministic trunk: compose sub-cords (ctx) + use the host-bound resources (res). */
+    run: (input: Input, ctx: Record<string, (input: any) => Promise<any>>, res: Resources) => Promise<Output>;
+};
+export type RunBudget = {
+    cap: number;
+    used: number;
+    depth: number;
+    maxDepth: number;
+};
+export type RunOpts = {
+    tenantId?: string;
+    scope?: string;
+    vault?: Vault;
+    resources?: Resources;
+    budget?: Partial<Pick<RunBudget, "cap" | "maxDepth">>;
+    onEvent?: (e: WideEvent) => void;
+};
+export type RunResult<O> = {
+    output: O;
+    runId: string;
+    artifact?: {
+        key: string;
+        version: string;
+        hash: string;
+    };
+    audit: AuditEntry[];
+    events: WideEvent[];
+    budget: RunBudget;
+};
+export type CordManifest = {
+    id: string;
+    version: string;
+    kind: "agent-ful" | "agent-less";
+    inference: "managed" | "byo";
+    scope?: string;
+    expose: Expose;
+    subcords: string[];
+    guards: string[];
+    needs: ResourceNeed[];
+};
+export type Cord<Input, Output> = {
+    id: string;
+    expose: Expose;
+    manifest: CordManifest;
+    run: (input: Input, opts?: RunOpts) => Promise<Output>;
+    runFull: (input: Input, opts?: RunOpts) => Promise<RunResult<Output>>;
+};
+export declare function defineCord<Input, Output>(def: CordDef<Input, Output>): Cord<Input, Output>;
+/** /.well-known/op0.json (ADR-18) generated from the cord's `expose`. Host is filled at deploy. */
+export declare const wellKnown: (m: CordManifest, host?: string) => {
+    auth?: {
+        type: string;
+        scopes: string[];
+    };
+    skills: string;
+    cli?: string;
+    openapi?: string;
+    mcp: string[];
+    docs: string;
+};
+/** Content-address the manifest for skillkit publish/fork lineage (signed → forkOf{atCommit} later, ADR-22). */
+export declare const signManifest: (m: CordManifest) => {
+    manifest: CordManifest;
+    hash: string;
+};
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAaA,cAAc,WAAW,CAAC;AAC1B,cAAc,YAAY,CAAC;AAC3B,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,YAAY,CAAC;AAG3B,cAAc,aAAa,CAAC;AAC5B,cAAc,WAAW,CAAC;AAC1B,cAAc,WAAW,CAAC;AAC1B,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAI5B,cAAc,YAAY,CAAC;AAE3B,cAAc,aAAa,CAAC;AAG5B,cAAc,aAAa,CAAC;AAG5B,cAAc,cAAc,CAAC;AAG7B,cAAc,WAAW,CAAC;AAE1B,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACxC,OAAO,KAAK,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7D,OAAO,EAAkB,KAAK,KAAK,EAAmB,KAAK,SAAS,EAAE,KAAK,UAAU,EAAE,MAAM,aAAa,CAAC;AAI3G;;;2GAG2G;AAC3G,MAAM,MAAM,OAAO,CAAC,CAAC,GAAG,GAAG,EAAE,CAAC,GAAG,GAAG,IAAI;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,OAAO,GAAG,UAAU,CAAC;IAAC,GAAG,EAAE,CAAC,KAAK,EAAE,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,CAAA;CAAE,CAAC;AAEnH,gEAAgE;AAChE,wBAAgB,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,CAAC,KAAK,EAAE,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,CAAA;CAAE,GAAG,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAE1F;AAED,4FAA4F;AAC5F,wBAAgB,SAAS,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,CAAC,KAAK,EAAE,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,CAAA;CAAE,GAAG,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAEjG;AAID,MAAM,MAAM,MAAM,GAAG;IAAE,QAAQ,CAAC,EAAE,OAAO,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,OAAO,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC;AAE5F,MAAM,MAAM,OAAO,CAAC,KAAK,EAAE,MAAM,IAAI;IACnC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,CAAC,EAAE,WAAW,GAAG,YAAY,CAAC;IAClC,SAAS,CAAC,EAAE,SAAS,GAAG,KAAK,CAAC;IAC9B,2FAA2F;IAC3F,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,iHAAiH;IACjH,KAAK,CAAC,EAAE,YAAY,EAAE,CAAC;IACvB,6FAA6F;IAC7F,GAAG,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,GAAG,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,SAAS,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;CAC3G,CAAC;AAIF,MAAM,MAAM,SAAS,GAAG;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC;AAEvF,MAAM,MAAM,OAAO,GAAG;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,KAAK,CAAC;IACd,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,MAAM,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,GAAG,UAAU,CAAC,CAAC,CAAC;IACtD,OAAO,CAAC,EAAE,CAAC,CAAC,EAAE,SAAS,KAAK,IAAI,CAAC;CAClC,CAAC;AAEF,MAAM,MAAM,SAAS,CAAC,CAAC,IAAI;IACzB,MAAM,EAAE,CAAC,CAAC;IACV,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IAC1D,KAAK,EAAE,UAAU,EAAE,CAAC;IACpB,MAAM,EAAE,SAAS,EAAE,CAAC;IACpB,MAAM,EAAE,SAAS,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG;IACzB,EAAE,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAC5B,IAAI,EAAE,WAAW,GAAG,YAAY,CAAC;IAAC,SAAS,EAAE,SAAS,GAAG,KAAK,CAAC;IAC/D,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;IAAC,MAAM,EAAE,MAAM,EAAE,CAAC;IAAC,KAAK,EAAE,YAAY,EAAE,CAAC;CAC7F,CAAC;AAEF,MAAM,MAAM,IAAI,CAAC,KAAK,EAAE,MAAM,IAAI;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,YAAY,CAAC;IACvB,GAAG,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,OAAO,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACvD,OAAO,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,OAAO,KAAK,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;CACvE,CAAC;AAKF,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CA2G1F;AAID,mGAAmG;AACnG,eAAO,MAAM,SAAS,GAAI,GAAG,YAAY,EAAE,aAAqB;;;;;;;;;;CAO9D,CAAC;AAEH,gHAAgH;AAChH,eAAO,MAAM,YAAY,GAAI,GAAG,YAAY,KAAG;IAAE,QAAQ,EAAE,YAAY,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAyD,CAAC"}