@rubric-protocol/attest-decision 1.0.0

package/dist/attestor.d.ts

@@ -0,0 +1,81 @@
+/**
+ * Attestor — the fire-and-forget façade (tasks/P1.md).
+ *
+ * `attest()` builds a DAR, appends it durably to the spool, enqueues it, and
+ * returns immediately (adds <1 ms to the caller). It NEVER throws into app code;
+ * any failure is reported to the optional `onError` sink and swallowed.
+ *
+ * The batcher flushes when the queue reaches `maxBatch` (64) or `maxWaitMs`
+ * (5000 ms) elapses, whichever comes first — one POST per flush. A delivered
+ * batch is acked in the spool; a failed batch is returned to the front of the
+ * queue and retried, so it is never lost. On construction the spool is drained:
+ * anything left by a previous run is re-queued and per-agent chain heads reseeded.
+ */
+import type { TransmitMode } from "./constants.js";
+import { type DarBuildInput } from "./dar.js";
+import type { Transport } from "./transport.js";
+export interface AttestorOptions {
+    transport: Transport;
+    spoolPath: string;
+    maxBatch?: number;
+    maxWaitMs?: number;
+    maxSpoolBytes?: number;
+    retryMs?: number;
+    /** Max re-send attempts per batch during close() before leaving it spooled. */
+    closeRetries?: number;
+    /** Cap on in-memory queued (un-acked) records; oldest are dropped past it. Default 100000. */
+    maxQueue?: number;
+    /** Reject a decision whose canonical form exceeds this many bytes. Default 256 KiB. */
+    maxDecisionBytes?: number;
+    /** `hash-only` (default) sends DAR cores only; `payload` also carries raw content in the envelope. */
+    mode?: TransmitMode;
+    now?: () => number;
+    newDecisionId?: () => string;
+    onError?: (err: unknown) => void;
+    /** Replay leftover spool records on construction. Default true. */
+    autoRecover?: boolean;
+}
+export declare class Attestor {
+    private readonly builder;
+    private readonly spool;
+    private readonly transport;
+    private readonly maxBatch;
+    private readonly maxWaitMs;
+    private readonly retryMs;
+    private readonly closeRetries;
+    private readonly maxQueue;
+    private readonly mode;
+    private readonly onError?;
+    private queue;
+    private timer;
+    private flushing;
+    private closed;
+    constructor(options: AttestorOptions);
+    /**
+     * Fire-and-forget. Returns the minted `decisionId`, or `null` if the record
+     * could not be built/spooled (never throws). Adds <1 ms to the caller.
+     */
+    attest(input: DarBuildInput): string | null;
+    /** Flush at most one batch. Safe to call directly; concurrency-guarded. */
+    flush(): Promise<void>;
+    /** Flush repeatedly until the queue is empty (used by tests and shutdown). */
+    drain(): Promise<void>;
+    /** Number of records still queued (not yet acknowledged). */
+    pendingCount(): number;
+    /**
+     * Stop accepting records, drain the queue (retrying each batch up to
+     * `closeRetries` times), and close the spool. Anything still undelivered after
+     * the retries remains durably spooled for the next run's recovery.
+     */
+    close(): Promise<void>;
+    /** Raw payloads for a batch — only in `payload` mode; ride in the envelope. */
+    private payloadsOf;
+    private recover;
+    private scheduleNext;
+    private armTimer;
+    private scheduleRetry;
+    private scheduleFlush;
+    private clearTimer;
+    private reportError;
+}
+//# sourceMappingURL=attestor.d.ts.map

package/dist/attestor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"attestor.d.ts","sourceRoot":"","sources":["../src/attestor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,KAAK,EAA0B,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC3E,OAAO,EAAyB,KAAK,aAAa,EAAE,MAAM,UAAU,CAAC;AAErE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAEhD,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,SAAS,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,+EAA+E;IAC/E,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,8FAA8F;IAC9F,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,uFAAuF;IACvF,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,sGAAsG;IACtG,IAAI,CAAC,EAAE,YAAY,CAAC;IACpB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,MAAM,MAAM,CAAC;IAC7B,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,IAAI,CAAC;IACjC,mEAAmE;IACnE,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAWD,qBAAa,QAAQ;IACnB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAa;IACrC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAQ;IAC9B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAY;IACtC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAS;IACtC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAe;IACpC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAyB;IAElD,OAAO,CAAC,KAAK,CAAmB;IAChC,OAAO,CAAC,KAAK,CAA8C;IAC3D,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,MAAM,CAAS;gBAEX,OAAO,EAAE,eAAe;IAsBpC;;;OAGG;IACH,MAAM,CAAC,KAAK,EAAE,aAAa,GAAG,MAAM,GAAG,IAAI;IAsB3C,2EAA2E;IACrE,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAsB5B,8EAA8E;IACxE,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAQ5B,6DAA6D;IAC7D,YAAY,IAAI,MAAM;IAItB;;;;OAIG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IA+B5B,+EAA+E;IAC/E,OAAO,CAAC,UAAU;IAQlB,OAAO,CAAC,OAAO;IAOf,OAAO,CAAC,YAAY;IAKpB,OAAO,CAAC,QAAQ;IAShB,OAAO,CAAC,aAAa;IASrB,OAAO,CAAC,aAAa;IAQrB,OAAO,CAAC,UAAU;IAOlB,OAAO,CAAC,WAAW;CAOpB"}

package/dist/attestor.js

@@ -0,0 +1,211 @@
+import { DarBuilder, toPayload } from "./dar.js";
+import { Spool } from "./spool.js";
+const sleep0 = () => new Promise((r) => setImmediate(r));
+const delay = (ms) => new Promise((r) => setTimeout(r, ms));
+export class Attestor {
+    builder;
+    spool;
+    transport;
+    maxBatch;
+    maxWaitMs;
+    retryMs;
+    closeRetries;
+    maxQueue;
+    mode;
+    onError;
+    queue = [];
+    timer = null;
+    flushing = false;
+    closed = false;
+    constructor(options) {
+        this.transport = options.transport;
+        this.onError = options.onError;
+        this.spool = new Spool(options.spoolPath, {
+            maxBytes: options.maxSpoolBytes,
+            onDrop: (n) => this.reportError(new Error(`spool dropped ${n} oldest record(s) at the size cap`)),
+        });
+        this.builder = new DarBuilder({
+            newDecisionId: options.newDecisionId,
+            now: options.now,
+            maxDecisionBytes: options.maxDecisionBytes,
+        });
+        this.maxBatch = options.maxBatch ?? 64;
+        this.maxWaitMs = options.maxWaitMs ?? 5000;
+        this.retryMs = options.retryMs ?? 1000;
+        this.closeRetries = options.closeRetries ?? 3;
+        this.maxQueue = options.maxQueue ?? 100_000;
+        this.mode = options.mode ?? "hash-only";
+        if (options.autoRecover !== false)
+            this.recover();
+    }
+    /**
+     * Fire-and-forget. Returns the minted `decisionId`, or `null` if the record
+     * could not be built/spooled (never throws). Adds <1 ms to the caller.
+     */
+    attest(input) {
+        if (this.closed)
+            return null;
+        try {
+            const dar = this.builder.build(input);
+            const payload = this.mode === "payload" ? toPayload(dar.decisionId, input) : undefined;
+            const seq = this.spool.append(dar, payload);
+            this.queue.push({ seq, dar, payload });
+            // Bound in-memory growth under sustained transport failure: drop oldest
+            // queued records past the cap (they are surfaced, not silently lost).
+            while (this.queue.length > this.maxQueue) {
+                this.queue.shift();
+                this.reportError(new Error("attest queue cap exceeded; dropped oldest queued record"));
+            }
+            if (this.queue.length >= this.maxBatch)
+                this.scheduleFlush();
+            else
+                this.armTimer();
+            return dar.decisionId;
+        }
+        catch (err) {
+            this.reportError(err);
+            return null;
+        }
+    }
+    /** Flush at most one batch. Safe to call directly; concurrency-guarded. */
+    async flush() {
+        if (this.flushing || this.closed)
+            return;
+        if (this.queue.length === 0)
+            return;
+        this.flushing = true;
+        this.clearTimer();
+        const batch = this.queue.splice(0, this.maxBatch);
+        try {
+            this.spool.compactIfNeeded(); // enforce the 50 MB cap off the caller path
+            this.spool.fsync();
+            await this.transport.send(batch.map((b) => b.dar), this.payloadsOf(batch));
+            this.spool.ack(batch[batch.length - 1].seq);
+            this.flushing = false;
+            this.scheduleNext();
+        }
+        catch (err) {
+            // Retain: return the batch to the front (order preserved) and retry.
+            this.queue.unshift(...batch);
+            this.flushing = false;
+            this.reportError(err);
+            this.scheduleRetry();
+        }
+    }
+    /** Flush repeatedly until the queue is empty (used by tests and shutdown). */
+    async drain() {
+        for (;;) {
+            while (this.flushing)
+                await sleep0();
+            if (this.queue.length === 0 || this.closed)
+                return;
+            await this.flush();
+        }
+    }
+    /** Number of records still queued (not yet acknowledged). */
+    pendingCount() {
+        return this.queue.length;
+    }
+    /**
+     * Stop accepting records, drain the queue (retrying each batch up to
+     * `closeRetries` times), and close the spool. Anything still undelivered after
+     * the retries remains durably spooled for the next run's recovery.
+     */
+    async close() {
+        this.closed = true;
+        this.clearTimer();
+        while (this.flushing)
+            await sleep0();
+        this.spool.compactIfNeeded();
+        while (this.queue.length > 0) {
+            const batch = this.queue.splice(0, this.maxBatch);
+            let delivered = false;
+            for (let attempt = 0; attempt <= this.closeRetries; attempt++) {
+                try {
+                    this.spool.fsync();
+                    await this.transport.send(batch.map((b) => b.dar), this.payloadsOf(batch));
+                    this.spool.ack(batch[batch.length - 1].seq);
+                    delivered = true;
+                    break;
+                }
+                catch (err) {
+                    this.reportError(err);
+                    if (attempt < this.closeRetries)
+                        await delay(this.retryMs);
+                }
+            }
+            if (!delivered) {
+                // Give up: leave this batch (and the rest) durably spooled for recovery.
+                this.queue.unshift(...batch);
+                break;
+            }
+        }
+        this.spool.close();
+    }
+    // --- internals ---
+    /** Raw payloads for a batch — only in `payload` mode; ride in the envelope. */
+    payloadsOf(batch) {
+        if (this.mode !== "payload")
+            return undefined;
+        const payloads = batch
+            .map((b) => b.payload)
+            .filter((p) => p !== undefined);
+        return payloads.length > 0 ? payloads : undefined;
+    }
+    recover() {
+        const pending = this.spool.pending();
+        for (const { dar } of pending)
+            this.builder.seedHead(dar.agentId, dar.decisionId);
+        for (const item of pending)
+            this.queue.push(item);
+        if (this.queue.length > 0)
+            this.scheduleFlush();
+    }
+    scheduleNext() {
+        if (this.queue.length >= this.maxBatch)
+            this.scheduleFlush();
+        else if (this.queue.length > 0)
+            this.armTimer();
+    }
+    armTimer() {
+        if (this.timer || this.flushing || this.closed)
+            return;
+        this.timer = setTimeout(() => {
+            this.timer = null;
+            this.scheduleFlush();
+        }, this.maxWaitMs);
+        this.timer.unref?.();
+    }
+    scheduleRetry() {
+        if (this.timer || this.flushing || this.closed)
+            return;
+        this.timer = setTimeout(() => {
+            this.timer = null;
+            this.scheduleFlush();
+        }, this.retryMs);
+        this.timer.unref?.();
+    }
+    scheduleFlush() {
+        this.clearTimer();
+        if (this.flushing || this.closed)
+            return;
+        setImmediate(() => {
+            void this.flush();
+        });
+    }
+    clearTimer() {
+        if (this.timer) {
+            clearTimeout(this.timer);
+            this.timer = null;
+        }
+    }
+    reportError(err) {
+        try {
+            this.onError?.(err);
+        }
+        catch {
+            // An onError that throws must not escape attest().
+        }
+    }
+}
+//# sourceMappingURL=attestor.js.map

package/dist/attestor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"attestor.js","sourceRoot":"","sources":["../src/attestor.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAsB,MAAM,UAAU,CAAC;AACrE,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AA+BnC,MAAM,MAAM,GAAG,GAAkB,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;AACxE,MAAM,KAAK,GAAG,CAAC,EAAU,EAAiB,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;AAEnF,MAAM,OAAO,QAAQ;IACF,OAAO,CAAa;IACpB,KAAK,CAAQ;IACb,SAAS,CAAY;IACrB,QAAQ,CAAS;IACjB,SAAS,CAAS;IAClB,OAAO,CAAS;IAChB,YAAY,CAAS;IACrB,QAAQ,CAAS;IACjB,IAAI,CAAe;IACnB,OAAO,CAA0B;IAE1C,KAAK,GAAgB,EAAE,CAAC;IACxB,KAAK,GAAyC,IAAI,CAAC;IACnD,QAAQ,GAAG,KAAK,CAAC;IACjB,MAAM,GAAG,KAAK,CAAC;IAEvB,YAAY,OAAwB;QAClC,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;QACnC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAC/B,IAAI,CAAC,KAAK,GAAG,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE;YACxC,QAAQ,EAAE,OAAO,CAAC,aAAa;YAC/B,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,KAAK,CAAC,iBAAiB,CAAC,mCAAmC,CAAC,CAAC;SAClG,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,GAAG,IAAI,UAAU,CAAC;YAC5B,aAAa,EAAE,OAAO,CAAC,aAAa;YACpC,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;SAC3C,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC;QACvC,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC;QAC3C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,IAAI,CAAC;QACvC,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,CAAC,CAAC;QAC9C,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC;QAC5C,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,WAAW,CAAC;QAExC,IAAI,OAAO,CAAC,WAAW,KAAK,KAAK;YAAE,IAAI,CAAC,OAAO,EAAE,CAAC;IACpD,CAAC;IAED;;;OAGG;IACH,MAAM,CAAC,KAAoB;QACzB,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACtC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACvF,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YAC5C,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;YACvC,wEAAwE;YACxE,sEAAsE;YACtE,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACzC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;gBACnB,IAAI,CAAC,WAAW,CAAC,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC,CAAC;YACzF,CAAC;YACD,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,QAAQ;gBAAE,IAAI,CAAC,aAAa,EAAE,CAAC;;gBACxD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACrB,OAAO,GAAG,CAAC,UAAU,CAAC;QACxB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;YACtB,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,2EAA2E;IAC3E,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO;QACzC,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QACpC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACrB,IAAI,CAAC,UAAU,EAAE,CAAC;QAClB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QAClD,IAAI,CAAC;YACH,IAAI,CAAC,KAAK,CAAC,eAAe,EAAE,CAAC,CAAC,4CAA4C;YAC1E,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;YACnB,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;YAC3E,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC,GAAG,CAAC,CAAC;YAC7C,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC;YACtB,IAAI,CAAC,YAAY,EAAE,CAAC;QACtB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,qEAAqE;YACrE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC;YAC7B,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC;YACtB,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;YACtB,IAAI,CAAC,aAAa,EAAE,CAAC;QACvB,CAAC;IACH,CAAC;IAED,8EAA8E;IAC9E,KAAK,CAAC,KAAK;QACT,SAAS,CAAC;YACR,OAAO,IAAI,CAAC,QAAQ;gBAAE,MAAM,MAAM,EAAE,CAAC;YACrC,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM;gBAAE,OAAO;YACnD,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QACrB,CAAC;IACH,CAAC;IAED,6DAA6D;IAC7D,YAAY;QACV,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;IAC3B,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,KAAK;QACT,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,IAAI,CAAC,UAAU,EAAE,CAAC;QAClB,OAAO,IAAI,CAAC,QAAQ;YAAE,MAAM,MAAM,EAAE,CAAC;QACrC,IAAI,CAAC,KAAK,CAAC,eAAe,EAAE,CAAC;QAC7B,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;YAClD,IAAI,SAAS,GAAG,KAAK,CAAC;YACtB,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,IAAI,CAAC,YAAY,EAAE,OAAO,EAAE,EAAE,CAAC;gBAC9D,IAAI,CAAC;oBACH,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;oBACnB,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;oBAC3E,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC,GAAG,CAAC,CAAC;oBAC7C,SAAS,GAAG,IAAI,CAAC;oBACjB,MAAM;gBACR,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;oBACtB,IAAI,OAAO,GAAG,IAAI,CAAC,YAAY;wBAAE,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBAC7D,CAAC;YACH,CAAC;YACD,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,yEAAyE;gBACzE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC;gBAC7B,MAAM;YACR,CAAC;QACH,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;IAED,oBAAoB;IAEpB,+EAA+E;IACvE,UAAU,CAAC,KAAkB;QACnC,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAC9C,MAAM,QAAQ,GAAG,KAAK;aACnB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;aACrB,MAAM,CAAC,CAAC,CAAC,EAAsB,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC;QACtD,OAAO,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;IACpD,CAAC;IAEO,OAAO;QACb,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;QACrC,KAAK,MAAM,EAAE,GAAG,EAAE,IAAI,OAAO;YAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC;QAClF,KAAK,MAAM,IAAI,IAAI,OAAO;YAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClD,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,IAAI,CAAC,aAAa,EAAE,CAAC;IAClD,CAAC;IAEO,YAAY;QAClB,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,QAAQ;YAAE,IAAI,CAAC,aAAa,EAAE,CAAC;aACxD,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,IAAI,CAAC,QAAQ,EAAE,CAAC;IAClD,CAAC;IAEO,QAAQ;QACd,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO;QACvD,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC3B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;YAClB,IAAI,CAAC,aAAa,EAAE,CAAC;QACvB,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QACnB,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;IACvB,CAAC;IAEO,aAAa;QACnB,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO;QACvD,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC3B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;YAClB,IAAI,CAAC,aAAa,EAAE,CAAC;QACvB,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QACjB,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;IACvB,CAAC;IAEO,aAAa;QACnB,IAAI,CAAC,UAAU,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO;QACzC,YAAY,CAAC,GAAG,EAAE;YAChB,KAAK,IAAI,CAAC,KAAK,EAAE,CAAC;QACpB,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,UAAU;QAChB,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACzB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QACpB,CAAC;IACH,CAAC;IAEO,WAAW,CAAC,GAAY;QAC9B,IAAI,CAAC;YACH,IAAI,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC;QACtB,CAAC;QAAC,MAAM,CAAC;YACP,mDAAmD;QACrD,CAAC;IACH,CAAC;CACF"}

package/dist/constants.d.ts

@@ -0,0 +1,54 @@
+/**
+ * Frozen DAR/0.1 constants and types (spec/dar-0.1.md §2, §4).
+ */
+/** Record format tag for the frozen DAR/0.1 field set. */
+export declare const DAR_VERSION: "DAR/0.1";
+/** Hash algorithm invariant (spec §4.1). SHA3-256 everywhere. */
+export declare const HASH_ALGORITHM: "sha3-256";
+/** Prefix on hash-valued fields (spec §4.2), i.e. `sha3-256:`. */
+export declare const HASH_PREFIX: "sha3-256:";
+/** Attestation endpoint. Test + standard traffic both flush here (CLAUDE.md). */
+export declare const TIERED_ATTEST_PATH: "/v1/tiered-attest";
+/** The single credential env var the SDK reads (CLAUDE.md invariant). */
+export declare const API_KEY_ENV: "RUBRIC_API_KEY";
+/** Leaf discriminant values (spec §2, `leafType`). */
+export type LeafType = "decision" | "schema-change" | "checkpoint";
+/** A `sha3-256:<hex>` encoded hash string. */
+export type HashString = `${typeof HASH_ALGORITHM}:${string}`;
+/** Identifies the adapter that produced a decision's inputs (spec §2). */
+export interface AdapterInfo {
+    readonly name: string;
+    readonly version: string;
+}
+/** Transmit mode: `hash-only` (default) sends DAR cores; `payload` also carries raw content in the envelope. */
+export type TransmitMode = "hash-only" | "payload";
+/** Raw content transmitted ONLY in `payload` mode, in the transport envelope — never in the DAR core. */
+export interface PayloadRecord {
+    decisionId: string;
+    schema?: unknown;
+    input: unknown;
+    output: unknown;
+    meta?: unknown;
+}
+/**
+ * The DAR core: the frozen, HASHES-ONLY field set (spec §2). It never carries
+ * raw content — only commitments. The Merkle leaf hash is computed over the JCS
+ * canonicalization of this object.
+ */
+export interface DarCore {
+    readonly v: typeof DAR_VERSION;
+    readonly decisionId: string;
+    readonly agentId: string;
+    /** Client-claimed decision time; trusted time is the HCS consensus timestamp. */
+    readonly ts: string;
+    readonly prev: string | null;
+    readonly leafType: LeafType;
+    readonly schemaHash: HashString;
+    readonly inputHash: HashString;
+    readonly outputHash: HashString;
+    /** SHA3-256 over JCS of { schemaHash, inputHash, outputHash }. */
+    readonly decisionHash: HashString;
+    readonly schemaRef?: string;
+    readonly adapter?: AdapterInfo;
+}
+//# sourceMappingURL=constants.d.ts.map

package/dist/constants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,0DAA0D;AAC1D,eAAO,MAAM,WAAW,EAAG,SAAkB,CAAC;AAE9C,iEAAiE;AACjE,eAAO,MAAM,cAAc,EAAG,UAAmB,CAAC;AAElD,kEAAkE;AAClE,eAAO,MAAM,WAAW,aAAgC,CAAC;AAEzD,iFAAiF;AACjF,eAAO,MAAM,kBAAkB,EAAG,mBAA4B,CAAC;AAE/D,yEAAyE;AACzE,eAAO,MAAM,WAAW,EAAG,gBAAyB,CAAC;AAErD,sDAAsD;AACtD,MAAM,MAAM,QAAQ,GAAG,UAAU,GAAG,eAAe,GAAG,YAAY,CAAC;AAEnE,8CAA8C;AAC9C,MAAM,MAAM,UAAU,GAAG,GAAG,OAAO,cAAc,IAAI,MAAM,EAAE,CAAC;AAE9D,0EAA0E;AAC1E,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,gHAAgH;AAChH,MAAM,MAAM,YAAY,GAAG,WAAW,GAAG,SAAS,CAAC;AAEnD,yGAAyG;AACzG,MAAM,WAAW,aAAa;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,EAAE,OAAO,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED;;;;GAIG;AACH,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,CAAC,EAAE,OAAO,WAAW,CAAC;IAC/B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,iFAAiF;IACjF,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;IAC/B,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,kEAAkE;IAClE,QAAQ,CAAC,YAAY,EAAE,UAAU,CAAC;IAClC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,CAAC,EAAE,WAAW,CAAC;CAChC"}

package/dist/constants.js

@@ -0,0 +1,14 @@
+/**
+ * Frozen DAR/0.1 constants and types (spec/dar-0.1.md §2, §4).
+ */
+/** Record format tag for the frozen DAR/0.1 field set. */
+export const DAR_VERSION = "DAR/0.1";
+/** Hash algorithm invariant (spec §4.1). SHA3-256 everywhere. */
+export const HASH_ALGORITHM = "sha3-256";
+/** Prefix on hash-valued fields (spec §4.2), i.e. `sha3-256:`. */
+export const HASH_PREFIX = `${HASH_ALGORITHM}:`;
+/** Attestation endpoint. Test + standard traffic both flush here (CLAUDE.md). */
+export const TIERED_ATTEST_PATH = "/v1/tiered-attest";
+/** The single credential env var the SDK reads (CLAUDE.md invariant). */
+export const API_KEY_ENV = "RUBRIC_API_KEY";
+//# sourceMappingURL=constants.js.map

package/dist/constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,0DAA0D;AAC1D,MAAM,CAAC,MAAM,WAAW,GAAG,SAAkB,CAAC;AAE9C,iEAAiE;AACjE,MAAM,CAAC,MAAM,cAAc,GAAG,UAAmB,CAAC;AAElD,kEAAkE;AAClE,MAAM,CAAC,MAAM,WAAW,GAAG,GAAG,cAAc,GAAY,CAAC;AAEzD,iFAAiF;AACjF,MAAM,CAAC,MAAM,kBAAkB,GAAG,mBAA4B,CAAC;AAE/D,yEAAyE;AACzE,MAAM,CAAC,MAAM,WAAW,GAAG,gBAAyB,CAAC"}

package/dist/dar.d.ts

@@ -0,0 +1,55 @@
+/**
+ * DAR builder (spec/dar-0.1.md §2). Assembles a HASHES-ONLY DAR core from
+ * adapter inputs: hashes the schema, input, and output (JCS+SHA3-256), derives
+ * `decisionHash` over those three commitments, mints a ULID `decisionId`, and
+ * maintains the per-agent `prev` chain. The core never carries raw content.
+ */
+import { type AdapterInfo, type DarCore, type HashString, type LeafType, type PayloadRecord } from "./constants.js";
+/** Non-content metadata an adapter may attach to a decision. */
+export interface DarMeta {
+    schemaRef?: string;
+    adapter?: AdapterInfo;
+    leafType?: LeafType;
+}
+export interface DarBuildInput {
+    agentId: string;
+    /** Adapter-supplied decision input; hashed to `inputHash`. */
+    input: unknown;
+    /** Adapter-supplied decision output; hashed to `outputHash`. */
+    output: unknown;
+    /** Schema descriptor to hash, or a precomputed `schemaHash`. One is required. */
+    schema?: unknown;
+    schemaHash?: HashString;
+    meta?: DarMeta;
+}
+export interface DarBuilderDeps {
+    /** Injectable id generator (default: monotonic ULID). */
+    newDecisionId?: () => string;
+    /** Injectable clock in epoch ms (default: Date.now). */
+    now?: () => number;
+    /** Reject a decision whose canonical input+output exceeds this many bytes. Default 256 KiB. */
+    maxDecisionBytes?: number;
+}
+/** Derive `decisionHash` from the three content commitments (spec §4.2). */
+export declare function decisionHashOf(schemaHash: HashString, inputHash: HashString, outputHash: HashString): HashString;
+export declare class DarBuilder {
+    private readonly newDecisionId;
+    private readonly now;
+    private readonly maxDecisionBytes;
+    private readonly heads;
+    private readonly schemaCache;
+    constructor(deps?: DarBuilderDeps);
+    build(input: DarBuildInput): DarCore;
+    private resolveSchemaHash;
+    /** Current chain head (last minted decisionId) for an agent, if any. */
+    getHead(agentId: string): string | undefined;
+    /** Seed a chain head — used to continue chains after spool recovery. */
+    seedHead(agentId: string, decisionId: string): void;
+}
+/** Build the raw payload record for `payload`-mode transmission (never in the core). */
+export declare function toPayload(decisionId: string, input: DarBuildInput): PayloadRecord;
+/** The Merkle leaf hash of a DAR core: SHA3-256 over its JCS bytes (spec §4.3). */
+export declare function leafHash(dar: DarCore): HashString;
+/** JCS canonicalization of a DAR core — the exact leaf-hash preimage. */
+export declare function canonicalDar(dar: DarCore): string;
+//# sourceMappingURL=dar.d.ts.map

package/dist/dar.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dar.d.ts","sourceRoot":"","sources":["../src/dar.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAEL,KAAK,WAAW,EAChB,KAAK,OAAO,EACZ,KAAK,UAAU,EACf,KAAK,QAAQ,EACb,KAAK,aAAa,EACnB,MAAM,gBAAgB,CAAC;AASxB,gEAAgE;AAChE,MAAM,WAAW,OAAO;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,WAAW,CAAC;IACtB,QAAQ,CAAC,EAAE,QAAQ,CAAC;CACrB;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,8DAA8D;IAC9D,KAAK,EAAE,OAAO,CAAC;IACf,gEAAgE;IAChE,MAAM,EAAE,OAAO,CAAC;IAChB,iFAAiF;IACjF,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,cAAc;IAC7B,yDAAyD;IACzD,aAAa,CAAC,EAAE,MAAM,MAAM,CAAC;IAC7B,wDAAwD;IACxD,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,+FAA+F;IAC/F,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,4EAA4E;AAC5E,wBAAgB,cAAc,CAAC,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,GAAG,UAAU,CAEhH;AAED,qBAAa,UAAU;IACrB,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAe;IAC7C,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAe;IACnC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAS;IAC1C,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA6B;IAKnD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAqC;gBAErD,IAAI,GAAE,cAAmB;IAMrC,KAAK,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO;IA+CpC,OAAO,CAAC,iBAAiB;IAkBzB,wEAAwE;IACxE,OAAO,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;IAI5C,wEAAwE;IACxE,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,IAAI;CAGpD;AAED,wFAAwF;AACxF,wBAAgB,SAAS,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,GAAG,aAAa,CAQjF;AAED,mFAAmF;AACnF,wBAAgB,QAAQ,CAAC,GAAG,EAAE,OAAO,GAAG,UAAU,CAEjD;AAED,yEAAyE;AACzE,wBAAgB,YAAY,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,CAEjD"}

package/dist/dar.js

@@ -0,0 +1,118 @@
+/**
+ * DAR builder (spec/dar-0.1.md §2). Assembles a HASHES-ONLY DAR core from
+ * adapter inputs: hashes the schema, input, and output (JCS+SHA3-256), derives
+ * `decisionHash` over those three commitments, mints a ULID `decisionId`, and
+ * maintains the per-agent `prev` chain. The core never carries raw content.
+ */
+import { DAR_VERSION, } from "./constants.js";
+import { hashJson, sha3_256 } from "./hash.js";
+import { canonicalize, canonicalizeToBytes } from "./jcs.js";
+import { ulid as defaultUlid } from "./ulid.js";
+const LEAF_TYPES = new Set(["decision", "schema-change", "checkpoint"]);
+const HASH_STRING = /^sha3-256:[0-9a-f]{64}$/;
+const DEFAULT_MAX_DECISION_BYTES = 256 * 1024; // bounds attest() latency + payload size
+/** Derive `decisionHash` from the three content commitments (spec §4.2). */
+export function decisionHashOf(schemaHash, inputHash, outputHash) {
+    return hashJson({ schemaHash, inputHash, outputHash });
+}
+export class DarBuilder {
+    newDecisionId;
+    now;
+    maxDecisionBytes;
+    heads = new Map();
+    // Keyed by object identity: reusing the same schema object across build()
+    // calls skips re-hashing. CONTRACT: schema objects must be treated as
+    // immutable — mutating one in place after its first build() would return the
+    // stale cached hash. Distinct objects with identical contents are re-hashed.
+    schemaCache = new WeakMap();
+    constructor(deps = {}) {
+        this.newDecisionId = deps.newDecisionId ?? defaultUlid;
+        this.now = deps.now ?? Date.now;
+        this.maxDecisionBytes = deps.maxDecisionBytes ?? DEFAULT_MAX_DECISION_BYTES;
+    }
+    build(input) {
+        const { agentId } = input;
+        if (typeof agentId !== "string" || agentId.length === 0) {
+            throw new Error("DAR: agentId must be a non-empty string");
+        }
+        const leafType = input.meta?.leafType ?? "decision";
+        if (!LEAF_TYPES.has(leafType)) {
+            throw new Error(`DAR: unknown leafType '${leafType}'`);
+        }
+        const schemaHash = this.resolveSchemaHash(input);
+        // Canonicalize input/output once, cap the combined size, then hash.
+        const inputBytes = canonicalizeToBytes(input.input);
+        const outputBytes = canonicalizeToBytes(input.output);
+        if (inputBytes.length + outputBytes.length > this.maxDecisionBytes) {
+            throw new Error(`DAR: input+output is ${inputBytes.length + outputBytes.length} bytes; exceeds maxDecisionBytes (${this.maxDecisionBytes})`);
+        }
+        const inputHash = sha3_256(inputBytes);
+        const outputHash = sha3_256(outputBytes);
+        const decisionHash = decisionHashOf(schemaHash, inputHash, outputHash);
+        const decisionId = this.newDecisionId();
+        const prev = this.heads.get(agentId) ?? null;
+        const ts = new Date(this.now()).toISOString();
+        const dar = {
+            v: DAR_VERSION,
+            decisionId,
+            agentId,
+            ts,
+            prev,
+            leafType,
+            schemaHash,
+            inputHash,
+            outputHash,
+            decisionHash,
+            ...(input.meta?.schemaRef !== undefined ? { schemaRef: input.meta.schemaRef } : {}),
+            ...(input.meta?.adapter !== undefined ? { adapter: input.meta.adapter } : {}),
+        };
+        this.heads.set(agentId, decisionId);
+        return dar;
+    }
+    resolveSchemaHash(input) {
+        if (input.schemaHash) {
+            if (!HASH_STRING.test(input.schemaHash)) {
+                throw new Error(`DAR: schemaHash must be 'sha3-256:<64 hex>', got '${input.schemaHash}'`);
+            }
+            return input.schemaHash;
+        }
+        if (input.schema === undefined)
+            throw new Error("DAR: schema or schemaHash is required");
+        if (typeof input.schema === "object" && input.schema !== null) {
+            const cached = this.schemaCache.get(input.schema);
+            if (cached)
+                return cached;
+            const h = hashJson(input.schema);
+            this.schemaCache.set(input.schema, h);
+            return h;
+        }
+        return hashJson(input.schema);
+    }
+    /** Current chain head (last minted decisionId) for an agent, if any. */
+    getHead(agentId) {
+        return this.heads.get(agentId);
+    }
+    /** Seed a chain head — used to continue chains after spool recovery. */
+    seedHead(agentId, decisionId) {
+        this.heads.set(agentId, decisionId);
+    }
+}
+/** Build the raw payload record for `payload`-mode transmission (never in the core). */
+export function toPayload(decisionId, input) {
+    return {
+        decisionId,
+        ...(input.schema !== undefined ? { schema: input.schema } : {}),
+        input: input.input,
+        output: input.output,
+        ...(input.meta !== undefined ? { meta: input.meta } : {}),
+    };
+}
+/** The Merkle leaf hash of a DAR core: SHA3-256 over its JCS bytes (spec §4.3). */
+export function leafHash(dar) {
+    return hashJson(dar);
+}
+/** JCS canonicalization of a DAR core — the exact leaf-hash preimage. */
+export function canonicalDar(dar) {
+    return canonicalize(dar);
+}
+//# sourceMappingURL=dar.js.map

package/dist/dar.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dar.js","sourceRoot":"","sources":["../src/dar.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EACL,WAAW,GAMZ,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAC/C,OAAO,EAAE,YAAY,EAAE,mBAAmB,EAAE,MAAM,UAAU,CAAC;AAC7D,OAAO,EAAE,IAAI,IAAI,WAAW,EAAE,MAAM,WAAW,CAAC;AAEhD,MAAM,UAAU,GAAwB,IAAI,GAAG,CAAC,CAAC,UAAU,EAAE,eAAe,EAAE,YAAY,CAAC,CAAC,CAAC;AAC7F,MAAM,WAAW,GAAG,yBAAyB,CAAC;AAC9C,MAAM,0BAA0B,GAAG,GAAG,GAAG,IAAI,CAAC,CAAC,yCAAyC;AA8BxF,4EAA4E;AAC5E,MAAM,UAAU,cAAc,CAAC,UAAsB,EAAE,SAAqB,EAAE,UAAsB;IAClG,OAAO,QAAQ,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC,CAAC;AACzD,CAAC;AAED,MAAM,OAAO,UAAU;IACJ,aAAa,CAAe;IAC5B,GAAG,CAAe;IAClB,gBAAgB,CAAS;IACzB,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;IACnD,0EAA0E;IAC1E,sEAAsE;IACtE,6EAA6E;IAC7E,6EAA6E;IAC5D,WAAW,GAAG,IAAI,OAAO,EAAsB,CAAC;IAEjE,YAAY,OAAuB,EAAE;QACnC,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,aAAa,IAAI,WAAW,CAAC;QACvD,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;QAChC,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC,gBAAgB,IAAI,0BAA0B,CAAC;IAC9E,CAAC;IAED,KAAK,CAAC,KAAoB;QACxB,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;QAC1B,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxD,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;QAC7D,CAAC;QACD,MAAM,QAAQ,GAAa,KAAK,CAAC,IAAI,EAAE,QAAQ,IAAI,UAAU,CAAC;QAC9D,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,0BAA0B,QAAQ,GAAG,CAAC,CAAC;QACzD,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;QAEjD,oEAAoE;QACpE,MAAM,UAAU,GAAG,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACpD,MAAM,WAAW,GAAG,mBAAmB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACtD,IAAI,UAAU,CAAC,MAAM,GAAG,WAAW,CAAC,MAAM,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACnE,MAAM,IAAI,KAAK,CACb,wBAAwB,UAAU,CAAC,MAAM,GAAG,WAAW,CAAC,MAAM,qCAAqC,IAAI,CAAC,gBAAgB,GAAG,CAC5H,CAAC;QACJ,CAAC;QACD,MAAM,SAAS,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAC;QACvC,MAAM,UAAU,GAAG,QAAQ,CAAC,WAAW,CAAC,CAAC;QACzC,MAAM,YAAY,GAAG,cAAc,CAAC,UAAU,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;QAEvE,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QACxC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC;QAC7C,MAAM,EAAE,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QAE9C,MAAM,GAAG,GAAY;YACnB,CAAC,EAAE,WAAW;YACd,UAAU;YACV,OAAO;YACP,EAAE;YACF,IAAI;YACJ,QAAQ;YACR,UAAU;YACV,SAAS;YACT,UAAU;YACV,YAAY;YACZ,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnF,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9E,CAAC;QAEF,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QACpC,OAAO,GAAG,CAAC;IACb,CAAC;IAEO,iBAAiB,CAAC,KAAoB;QAC5C,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;YACrB,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;gBACxC,MAAM,IAAI,KAAK,CAAC,qDAAqD,KAAK,CAAC,UAAU,GAAG,CAAC,CAAC;YAC5F,CAAC;YACD,OAAO,KAAK,CAAC,UAAU,CAAC;QAC1B,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;QACzF,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;YAC9D,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAClD,IAAI,MAAM;gBAAE,OAAO,MAAM,CAAC;YAC1B,MAAM,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YACjC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;YACtC,OAAO,CAAC,CAAC;QACX,CAAC;QACD,OAAO,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAChC,CAAC;IAED,wEAAwE;IACxE,OAAO,CAAC,OAAe;QACrB,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACjC,CAAC;IAED,wEAAwE;IACxE,QAAQ,CAAC,OAAe,EAAE,UAAkB;QAC1C,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IACtC,CAAC;CACF;AAED,wFAAwF;AACxF,MAAM,UAAU,SAAS,CAAC,UAAkB,EAAE,KAAoB;IAChE,OAAO;QACL,UAAU;QACV,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/D,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1D,CAAC;AACJ,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,QAAQ,CAAC,GAAY;IACnC,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC;AACvB,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,YAAY,CAAC,GAAY;IACvC,OAAO,YAAY,CAAC,GAAG,CAAC,CAAC;AAC3B,CAAC"}

package/dist/hash.d.ts

@@ -0,0 +1,11 @@
+import { type HashString } from "./constants.js";
+/** Raw SHA3-256 as lowercase hex (no prefix). */
+export declare function sha3_256Hex(input: string | Uint8Array): string;
+/** SHA3-256 as a prefixed `sha3-256:<hex>` HashString. */
+export declare function sha3_256(input: string | Uint8Array): HashString;
+/**
+ * Canonicalize (JCS) then hash — the one hashing path (spec §3.1).
+ * Returns a prefixed HashString over the RFC 8785 bytes of `value`.
+ */
+export declare function hashJson(value: unknown): HashString;
+//# sourceMappingURL=hash.d.ts.map

package/dist/hash.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hash.d.ts","sourceRoot":"","sources":["../src/hash.ts"],"names":[],"mappings":"AAKA,OAAO,EAA+B,KAAK,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAG9E,iDAAiD;AACjD,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,UAAU,GAAG,MAAM,CAI9D;AAED,0DAA0D;AAC1D,wBAAgB,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,UAAU,GAAG,UAAU,CAE/D;AAED;;;GAGG;AACH,wBAAgB,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,UAAU,CAEnD"}

package/dist/hash.js

@@ -0,0 +1,25 @@
+/**
+ * SHA3-256 hashing (spec/dar-0.1.md §4). SHA3-256 everywhere — an invariant,
+ * not a per-call choice. Hash strings are `sha3-256:<64 lowercase hex>`.
+ */
+import { createHash } from "node:crypto";
+import { HASH_ALGORITHM, HASH_PREFIX } from "./constants.js";
+import { canonicalizeToBytes } from "./jcs.js";
+/** Raw SHA3-256 as lowercase hex (no prefix). */
+export function sha3_256Hex(input) {
+    const h = createHash(HASH_ALGORITHM);
+    h.update(typeof input === "string" ? Buffer.from(input, "utf8") : input);
+    return h.digest("hex");
+}
+/** SHA3-256 as a prefixed `sha3-256:<hex>` HashString. */
+export function sha3_256(input) {
+    return `${HASH_PREFIX}${sha3_256Hex(input)}`;
+}
+/**
+ * Canonicalize (JCS) then hash — the one hashing path (spec §3.1).
+ * Returns a prefixed HashString over the RFC 8785 bytes of `value`.
+ */
+export function hashJson(value) {
+    return sha3_256(canonicalizeToBytes(value));
+}
+//# sourceMappingURL=hash.js.map

package/dist/hash.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hash.js","sourceRoot":"","sources":["../src/hash.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,cAAc,EAAE,WAAW,EAAmB,MAAM,gBAAgB,CAAC;AAC9E,OAAO,EAAE,mBAAmB,EAAE,MAAM,UAAU,CAAC;AAE/C,iDAAiD;AACjD,MAAM,UAAU,WAAW,CAAC,KAA0B;IACpD,MAAM,CAAC,GAAG,UAAU,CAAC,cAAc,CAAC,CAAC;IACrC,CAAC,CAAC,MAAM,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACzE,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACzB,CAAC;AAED,0DAA0D;AAC1D,MAAM,UAAU,QAAQ,CAAC,KAA0B;IACjD,OAAO,GAAG,WAAW,GAAG,WAAW,CAAC,KAAK,CAAC,EAAgB,CAAC;AAC7D,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,QAAQ,CAAC,KAAc;IACrC,OAAO,QAAQ,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC,CAAC;AAC9C,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,16 @@
+/**
+ * @rubric-protocol/attest-decision — core SDK (DAR/0.1).
+ *
+ * Public surface: fire-and-forget attestation (`Attestor`), the DAR builder,
+ * JCS canonicalization, SHA3-256 hashing, ULID minting, the durable spool, and
+ * transports. See spec/dar-0.1.md and tasks/P1.md.
+ */
+export { DAR_VERSION, HASH_ALGORITHM, HASH_PREFIX, TIERED_ATTEST_PATH, API_KEY_ENV, type LeafType, type HashString, type DarCore, type AdapterInfo, type TransmitMode, type PayloadRecord, } from "./constants.js";
+export { canonicalize, canonicalizeToBytes, JcsError } from "./jcs.js";
+export { sha3_256, sha3_256Hex, hashJson } from "./hash.js";
+export { ulid, monotonicUlidFactory } from "./ulid.js";
+export { DarBuilder, leafHash, canonicalDar, decisionHashOf, toPayload, type DarBuildInput, type DarBuilderDeps, type DarMeta, } from "./dar.js";
+export { Spool, DEFAULT_MAX_BYTES, type SpoolRecord, type SpoolOptions } from "./spool.js";
+export { HttpTransport, type Transport, type HttpTransportOptions, } from "./transport.js";
+export { Attestor, type AttestorOptions } from "./attestor.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EACL,WAAW,EACX,cAAc,EACd,WAAW,EACX,kBAAkB,EAClB,WAAW,EACX,KAAK,QAAQ,EACb,KAAK,UAAU,EACf,KAAK,OAAO,EACZ,KAAK,WAAW,EAChB,KAAK,YAAY,EACjB,KAAK,aAAa,GACnB,MAAM,gBAAgB,CAAC;AAExB,OAAO,EAAE,YAAY,EAAE,mBAAmB,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AACvE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAC5D,OAAO,EAAE,IAAI,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AACvD,OAAO,EACL,UAAU,EACV,QAAQ,EACR,YAAY,EACZ,cAAc,EACd,SAAS,EACT,KAAK,aAAa,EAClB,KAAK,cAAc,EACnB,KAAK,OAAO,GACb,MAAM,UAAU,CAAC;AAClB,OAAO,EAAE,KAAK,EAAE,iBAAiB,EAAE,KAAK,WAAW,EAAE,KAAK,YAAY,EAAE,MAAM,YAAY,CAAC;AAC3F,OAAO,EACL,aAAa,EACb,KAAK,SAAS,EACd,KAAK,oBAAoB,GAC1B,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,QAAQ,EAAE,KAAK,eAAe,EAAE,MAAM,eAAe,CAAC"}