@sentropic/h2a 0.1.0 → 0.1.6

package/dist/artifacts.js

@@ -0,0 +1,147 @@
+import { H2A_ARTIFACT_KINDS, H2A_AUTHORITY_KINDS, H2A_POLICY_ADOPTION_MODES, H2A_ROLES } from "./types.js";
+function isRecord(value) {
+    return typeof value === "object" && value !== null;
+}
+function isStringArray(value) {
+    return Array.isArray(value) && value.every((entry) => typeof entry === "string");
+}
+function isArrayOf(value, check) {
+    return Array.isArray(value) && value.every((entry) => check(entry));
+}
+function isRole(value) {
+    return typeof value === "string" && H2A_ROLES.includes(value);
+}
+function isArtifactKind(value) {
+    return typeof value === "string" && H2A_ARTIFACT_KINDS.includes(value);
+}
+export function isSignature(value) {
+    return (isRecord(value) &&
+        typeof value.by === "string" &&
+        typeof value.alg === "string" &&
+        typeof value.value === "string");
+}
+export function isContract(value) {
+    if (!isRecord(value))
+        return false;
+    return (value.kind === "CONTRACT" &&
+        typeof value.id === "string" &&
+        isStringArray(value.parties) &&
+        typeof value.scope === "string" &&
+        Array.isArray(value.clauses) &&
+        isStringArray(value.policies) &&
+        isStringArray(value.engagements) &&
+        isArrayOf(value.signatures, isSignature));
+}
+export function isPolicy(value) {
+    if (!isRecord(value))
+        return false;
+    return (value.kind === "POLICY" &&
+        typeof value.id === "string" &&
+        typeof value.scope === "string" &&
+        typeof value.rule === "string" &&
+        typeof value.sourceAuthority === "string" &&
+        typeof value.adoptionMode === "string" &&
+        H2A_POLICY_ADOPTION_MODES.includes(value.adoptionMode));
+}
+export function isEngagement(value) {
+    if (!isRecord(value))
+        return false;
+    if (value.kind !== "ENGAGEMENT")
+        return false;
+    if (typeof value.id !== "string")
+        return false;
+    if (typeof value.scope !== "string")
+        return false;
+    if (!isRecord(value.charter))
+        return false;
+    if (!Array.isArray(value.roleBindings))
+        return false;
+    for (const binding of value.roleBindings) {
+        if (!isRecord(binding))
+            return false;
+        if (!isRole(binding.role))
+            return false;
+        if (typeof binding.instance !== "string")
+            return false;
+    }
+    return (isStringArray(value.controls) &&
+        isStringArray(value.policies) &&
+        Array.isArray(value.successCriteria));
+}
+export function isAmendment(value) {
+    if (!isRecord(value))
+        return false;
+    if (value.kind !== "AMENDMENT")
+        return false;
+    if (typeof value.id !== "string")
+        return false;
+    if (!isArtifactKind(value.targetKind))
+        return false;
+    if (typeof value.targetId !== "string")
+        return false;
+    if (typeof value.baseArtifactHash !== "string")
+        return false;
+    if (!Array.isArray(value.changes))
+        return false;
+    for (const change of value.changes) {
+        if (!isRecord(change))
+            return false;
+        if (typeof change.op !== "string")
+            return false;
+        if (typeof change.path !== "string")
+            return false;
+    }
+    return isArrayOf(value.signatures, isSignature);
+}
+export function isMandate(value) {
+    if (!isRecord(value))
+        return false;
+    return (value.kind === "MANDATE" &&
+        typeof value.id === "string" &&
+        typeof value.instance === "string" &&
+        isRole(value.role) &&
+        typeof value.scope === "string" &&
+        isStringArray(value.rights));
+}
+export function isAuthority(value) {
+    if (!isRecord(value))
+        return false;
+    if (value.kind !== "AUTHORITY")
+        return false;
+    if (typeof value.id !== "string")
+        return false;
+    if (typeof value.authorityKind !== "string")
+        return false;
+    if (!H2A_AUTHORITY_KINDS.includes(value.authorityKind)) {
+        return false;
+    }
+    if (!isStringArray(value.members))
+        return false;
+    if (value.authorityKind === "quorum") {
+        if (typeof value.threshold !== "number")
+            return false;
+        if (!Number.isInteger(value.threshold) || value.threshold < 1)
+            return false;
+        if (value.threshold > value.members.length)
+            return false;
+    }
+    return true;
+}
+export function isEnforcementPlan(value) {
+    if (!isRecord(value))
+        return false;
+    if (value.kind !== "ENFORCEMENT_PLAN")
+        return false;
+    if (typeof value.id !== "string")
+        return false;
+    if (typeof value.scope !== "string")
+        return false;
+    if (!Array.isArray(value.controls))
+        return false;
+    if (!Array.isArray(value.escalations))
+        return false;
+    if (!Array.isArray(value.triggers))
+        return false;
+    return true;
+}
+//# sourceMappingURL=artifacts.js.map

package/dist/artifacts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifacts.js","sourceRoot":"","sources":["../src/artifacts.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,kBAAkB,EAClB,mBAAmB,EACnB,yBAAyB,EACzB,SAAS,EAWV,MAAM,YAAY,CAAC;AAEpB,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,CAAC;AACrD,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC;AACnF,CAAC;AAED,SAAS,SAAS,CAAI,KAAc,EAAE,KAAqC;IACzE,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;AACtE,CAAC;AAED,SAAS,MAAM,CAAC,KAAc;IAC5B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,SAAS,CAAC,QAAQ,CAAC,KAAgB,CAAC,CAAC;AAC3E,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,kBAAkB,CAAC,QAAQ,CAAC,KAAwB,CAAC,CAAC;AAC5F,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,KAAc;IACxC,OAAO,CACL,QAAQ,CAAC,KAAK,CAAC;QACf,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ;QAC5B,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ;QAC7B,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,CAChC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,KAAc;IACvC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACnC,OAAO,CACL,KAAK,CAAC,IAAI,KAAK,UAAU;QACzB,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ;QAC5B,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC;QAC5B,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ;QAC/B,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;QAC5B,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC;QAC7B,aAAa,CAAC,KAAK,CAAC,WAAW,CAAC;QAChC,SAAS,CAAC,KAAK,CAAC,UAAU,EAAE,WAAW,CAAC,CACzC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,KAAc;IACrC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACnC,OAAO,CACL,KAAK,CAAC,IAAI,KAAK,QAAQ;QACvB,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ;QAC5B,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ;QAC/B,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;QAC9B,OAAO,KAAK,CAAC,eAAe,KAAK,QAAQ;QACzC,OAAO,KAAK,CAAC,YAAY,KAAK,QAAQ;QACtC,yBAAyB,CAAC,QAAQ,CAChC,KAAK,CAAC,YAA0D,CACjE,CACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,KAAc;IACzC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACnC,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY;QAAE,OAAO,KAAK,CAAC;IAC9C,IAAI,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC/C,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAClD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC;QAAE,OAAO,KAAK,CAAC;IACrD,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;QACzC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;YAAE,OAAO,KAAK,CAAC;QACrC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC;QACxC,IAAI,OAAO,OAAO,CAAC,QAAQ,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;IACzD,CAAC;IACD,OAAO,CACL,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC;QAC7B,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC;QAC7B,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,eAAe,CAAC,CACrC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,KAAc;IACxC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACnC,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW;QAAE,OAAO,KAAK,CAAC;IAC7C,IAAI,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC/C,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,UAAU,CAAC;QAAE,OAAO,KAAK,CAAC;IACpD,IAAI,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACrD,IAAI,OAAO,KAAK,CAAC,gBAAgB,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC7D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;QAAE,OAAO,KAAK,CAAC;IAChD,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QACnC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,OAAO,KAAK,CAAC;QACpC,IAAI,OAAO,MAAM,CAAC,EAAE,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QAChD,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;IACpD,CAAC;IACD,OAAO,SAAS,CAAC,KAAK,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;AAClD,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,KAAc;IACtC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACnC,OAAO,CACL,KAAK,CAAC,IAAI,KAAK,SAAS;QACxB,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ;QAC5B,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ;QAClC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC;QAClB,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ;QAC/B,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,CAC5B,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,KAAc;IACxC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACnC,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW;QAAE,OAAO,KAAK,CAAC;IAC7C,IAAI,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC/C,IAAI,OAAO,KAAK,CAAC,aAAa,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC1D,IACE,CAAC,mBAAmB,CAAC,QAAQ,CAC3B,KAAK,CAAC,aAAqD,CAC5D,EACD,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC;QAAE,OAAO,KAAK,CAAC;IAChD,IAAI,KAAK,CAAC,aAAa,KAAK,QAAQ,EAAE,CAAC;QACrC,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QACtD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC,SAAS,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QAC5E,IAAI,KAAK,CAAC,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;IAC3D,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAc;IAC9C,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACnC,IAAI,KAAK,CAAC,IAAI,KAAK,kBAAkB;QAAE,OAAO,KAAK,CAAC;IACpD,IAAI,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC/C,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAClD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC;QAAE,OAAO,KAAK,CAAC;IACjD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC;QAAE,OAAO,KAAK,CAAC;IACpD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC;QAAE,OAAO,KAAK,CAAC;IACjD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/authority.d.ts

@@ -0,0 +1,21 @@
+import { type H2AArtifactKind, type H2ARole } from "./types.js";
+/**
+ * V1 signing authority matrix (DEC-035).
+ *
+ * Maps each canonical {@link H2AArtifactKind} to the set of roles allowed
+ * to produce a binding signature on that artifact kind. This is the
+ * executable counterpart of DEC-004 (governance) and DEC-018/DEC-023
+ * (CONTRACT vs ENFORCEMENT_PLAN ownership).
+ *
+ * `MANDATAIRE` deliberately appears only for `SIGNATURE` — DEC-005 and
+ * DEC-024 keep the mandataire as a *presenter* of decisions, not a binder.
+ * The `SIGNATURE` row admits every role because that kind is the audit
+ * trace of a signing act produced by whoever signed.
+ */
+export declare const H2A_AUTHORITY_MATRIX: Readonly<Record<H2AArtifactKind, {
+    roles: readonly H2ARole[];
+    notes?: string;
+}>>;
+export declare function canSignArtifactKind(role: H2ARole, kind: H2AArtifactKind): boolean;
+export declare function assertCanSignArtifactKind(role: H2ARole, kind: H2AArtifactKind): void;
+//# sourceMappingURL=authority.d.ts.map

package/dist/authority.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authority.d.ts","sourceRoot":"","sources":["../src/authority.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,eAAe,EACpB,KAAK,OAAO,EACb,MAAM,YAAY,CAAC;AAEpB;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,oBAAoB,EAAE,QAAQ,CACzC,MAAM,CAAC,eAAe,EAAE;IAAE,KAAK,EAAE,SAAS,OAAO,EAAE,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CA+CtE,CAAC;AAUH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAIjF;AAED,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,eAAe,GAAG,IAAI,CAOpF"}

package/dist/authority.js

@@ -0,0 +1,73 @@
+import { H2A_ARTIFACT_KINDS, H2A_ROLES } from "./types.js";
+/**
+ * V1 signing authority matrix (DEC-035).
+ *
+ * Maps each canonical {@link H2AArtifactKind} to the set of roles allowed
+ * to produce a binding signature on that artifact kind. This is the
+ * executable counterpart of DEC-004 (governance) and DEC-018/DEC-023
+ * (CONTRACT vs ENFORCEMENT_PLAN ownership).
+ *
+ * `MANDATAIRE` deliberately appears only for `SIGNATURE` — DEC-005 and
+ * DEC-024 keep the mandataire as a *presenter* of decisions, not a binder.
+ * The `SIGNATURE` row admits every role because that kind is the audit
+ * trace of a signing act produced by whoever signed.
+ */
+export const H2A_AUTHORITY_MATRIX = Object.freeze({
+    CONTRACT: {
+        roles: Object.freeze(["PRINCIPAL", "EXECUTIF", "CONDUCTOR"]),
+        notes: "CONTRACT is the binding normative container; PRINCIPAL/EXECUTIF/CONDUCTOR are the only signers (DEC-018)."
+    },
+    POLICY: {
+        roles: Object.freeze(["PRINCIPAL", "EXECUTIF", "CONTROL"]),
+        notes: "POLICY is adopted by PRINCIPAL/EXECUTIF or imposed by CONTROL (DEC-016, DEC-023)."
+    },
+    ENGAGEMENT: {
+        roles: Object.freeze(["PRINCIPAL", "EXECUTIF", "CONDUCTOR"]),
+        notes: "ENGAGEMENT charter signing follows the contract chain — PRINCIPAL/EXECUTIF/CONDUCTOR (DEC-003)."
+    },
+    AMENDMENT: {
+        roles: Object.freeze([
+            "PRINCIPAL",
+            "EXECUTIF",
+            "CONDUCTOR",
+            "CONTROL"
+        ]),
+        notes: "Amendments can come from the contract chain (PRINCIPAL/EXECUTIF/CONDUCTOR) or be imposed by CONTROL (DEC-004)."
+    },
+    MANDATE: {
+        roles: Object.freeze(["PRINCIPAL", "EXECUTIF"]),
+        notes: "Mandates are issued by the executive function (PRINCIPAL or EXECUTIF) — DEC-021."
+    },
+    AUTHORITY: {
+        roles: Object.freeze(["PRINCIPAL", "EXECUTIF"]),
+        notes: "Authority records (instance/quorum) are constituted by the executive function (DEC-021)."
+    },
+    SIGNATURE: {
+        roles: Object.freeze([...H2A_ROLES]),
+        notes: "SIGNATURE is the audit trace of a signing act and is admissible from any role that can sign anything."
+    },
+    ENFORCEMENT_PLAN: {
+        roles: Object.freeze(["PRINCIPAL", "EXECUTIF", "CONTROL"]),
+        notes: "Enforcement plans are produced by CONTROL under PRINCIPAL/EXECUTIF authority (DEC-023)."
+    }
+});
+// Sanity check: every canonical kind has an entry. Catches future drift if
+// H2A_ARTIFACT_KINDS grows but the matrix is not updated in lockstep.
+for (const kind of H2A_ARTIFACT_KINDS) {
+    if (!(kind in H2A_AUTHORITY_MATRIX)) {
+        throw new Error(`H2A_AUTHORITY_MATRIX is missing an entry for kind ${kind}`);
+    }
+}
+export function canSignArtifactKind(role, kind) {
+    const entry = H2A_AUTHORITY_MATRIX[kind];
+    if (!entry)
+        return false;
+    return entry.roles.includes(role);
+}
+export function assertCanSignArtifactKind(role, kind) {
+    if (!canSignArtifactKind(role, kind)) {
+        const allowed = H2A_AUTHORITY_MATRIX[kind]?.roles ?? [];
+        throw new Error(`H2A authority: role ${role} is not allowed to sign artifact kind ${kind} (allowed: [${allowed.join(",")}])`);
+    }
+}
+//# sourceMappingURL=authority.js.map

package/dist/authority.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authority.js","sourceRoot":"","sources":["../src/authority.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,kBAAkB,EAClB,SAAS,EAGV,MAAM,YAAY,CAAC;AAEpB;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAE7B,MAAM,CAAC,MAAM,CAAC;IAChB,QAAQ,EAAE;QACR,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,UAAU,EAAE,WAAW,CAAC,CAAuB;QAClF,KAAK,EACH,2GAA2G;KAC9G;IACD,MAAM,EAAE;QACN,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,UAAU,EAAE,SAAS,CAAC,CAAuB;QAChF,KAAK,EACH,mFAAmF;KACtF;IACD,UAAU,EAAE;QACV,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,UAAU,EAAE,WAAW,CAAC,CAAuB;QAClF,KAAK,EACH,iGAAiG;KACpG;IACD,SAAS,EAAE;QACT,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC;YACnB,WAAW;YACX,UAAU;YACV,WAAW;YACX,SAAS;SACV,CAAuB;QACxB,KAAK,EACH,gHAAgH;KACnH;IACD,OAAO,EAAE;QACP,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,UAAU,CAAC,CAAuB;QACrE,KAAK,EACH,kFAAkF;KACrF;IACD,SAAS,EAAE;QACT,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,UAAU,CAAC,CAAuB;QACrE,KAAK,EACH,0FAA0F;KAC7F;IACD,SAAS,EAAE;QACT,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC,CAAuB;QAC1D,KAAK,EACH,uGAAuG;KAC1G;IACD,gBAAgB,EAAE;QAChB,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,UAAU,EAAE,SAAS,CAAC,CAAuB;QAChF,KAAK,EACH,yFAAyF;KAC5F;CACF,CAAC,CAAC;AAEH,2EAA2E;AAC3E,sEAAsE;AACtE,KAAK,MAAM,IAAI,IAAI,kBAAkB,EAAE,CAAC;IACtC,IAAI,CAAC,CAAC,IAAI,IAAI,oBAAoB,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,qDAAqD,IAAI,EAAE,CAAC,CAAC;IAC/E,CAAC;AACH,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,IAAa,EAAE,IAAqB;IACtE,MAAM,KAAK,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;IACzC,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,OAAO,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,IAAa,EAAE,IAAqB;IAC5E,IAAI,CAAC,mBAAmB,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC;QACrC,MAAM,OAAO,GAAG,oBAAoB,CAAC,IAAI,CAAC,EAAE,KAAK,IAAI,EAAE,CAAC;QACxD,MAAM,IAAI,KAAK,CACb,uBAAuB,IAAI,yCAAyC,IAAI,eAAe,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAC7G,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/canonical.d.ts

@@ -0,0 +1,3 @@
+export declare function canonicalize(value: unknown): string;
+export declare function computeHash(value: unknown): string;
+//# sourceMappingURL=canonical.d.ts.map

package/dist/canonical.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"canonical.d.ts","sourceRoot":"","sources":["../src/canonical.ts"],"names":[],"mappings":"AA8CA,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAEnD;AAED,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAIlD"}

package/dist/canonical.js

@@ -0,0 +1,38 @@
+import { createHash } from "node:crypto";
+function toCanonical(value) {
+    if (value === null) {
+        return null;
+    }
+    if (Array.isArray(value)) {
+        return value.map((entry) => toCanonical(entry));
+    }
+    if (typeof value === "object") {
+        const source = value;
+        const sortedKeys = Object.keys(source)
+            .filter((key) => source[key] !== undefined)
+            .sort();
+        const out = {};
+        for (const key of sortedKeys) {
+            out[key] = toCanonical(source[key]);
+        }
+        return out;
+    }
+    if (typeof value === "number" && !Number.isFinite(value)) {
+        throw new Error(`canonicalize: non-finite numbers are not supported (${value})`);
+    }
+    if (typeof value === "string" ||
+        typeof value === "number" ||
+        typeof value === "boolean") {
+        return value;
+    }
+    throw new Error(`canonicalize: unsupported value type (${typeof value})`);
+}
+export function canonicalize(value) {
+    return JSON.stringify(toCanonical(value));
+}
+export function computeHash(value) {
+    const canonical = canonicalize(value);
+    const digest = createHash("sha256").update(canonical, "utf8").digest("hex");
+    return `sha256:${digest}`;
+}
+//# sourceMappingURL=canonical.js.map

package/dist/canonical.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"canonical.js","sourceRoot":"","sources":["../src/canonical.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAUzC,SAAS,WAAW,CAAC,KAAc;IACjC,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACnB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC;IAClD,CAAC;IAED,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,KAAgC,CAAC;QAChD,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;aACnC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,SAAS,CAAC;aAC1C,IAAI,EAAE,CAAC;QACV,MAAM,GAAG,GAAmC,EAAE,CAAC;QAC/C,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;YAC7B,GAAG,CAAC,GAAG,CAAC,GAAG,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QACtC,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACzD,MAAM,IAAI,KAAK,CAAC,uDAAuD,KAAK,GAAG,CAAC,CAAC;IACnF,CAAC;IAED,IACE,OAAO,KAAK,KAAK,QAAQ;QACzB,OAAO,KAAK,KAAK,QAAQ;QACzB,OAAO,KAAK,KAAK,SAAS,EAC1B,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,yCAAyC,OAAO,KAAK,GAAG,CAAC,CAAC;AAC5E,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,KAAc;IACzC,OAAO,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC;AAC5C,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,KAAc;IACxC,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IACtC,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5E,OAAO,UAAU,MAAM,EAAE,CAAC;AAC5B,CAAC"}

package/dist/contractual.d.ts

@@ -0,0 +1,52 @@
+import type { H2AContract, H2AEngagement, H2APolicy } from "./types.js";
+export type H2AContractualArtifactKind = "CONTRACT" | "POLICY" | "ENGAGEMENT";
+export type H2AContractualArtifact = H2AContract | H2APolicy | H2AEngagement;
+export type H2AContractualArtifactProfile = "normative-container" | "durable-rule" | "operational-executable";
+export interface H2AContractualArtifactProfileDescriptor {
+    readonly kind: H2AContractualArtifactKind;
+    readonly profile: H2AContractualArtifactProfile;
+    readonly durable: boolean;
+    readonly executable: boolean;
+    readonly canContainPolicies: boolean;
+    readonly canReferencePolicies: boolean;
+    readonly canInstantiateEngagements: boolean;
+}
+export interface H2AContractualArtifactAuditResult {
+    readonly ok: boolean;
+    readonly kind?: string;
+    readonly profile?: H2AContractualArtifactProfile;
+    readonly issues: readonly string[];
+}
+export declare const H2A_CONTRACTUAL_ARTIFACT_PROFILES: Readonly<{
+    readonly CONTRACT: Readonly<{
+        kind: "CONTRACT";
+        profile: "normative-container";
+        durable: true;
+        executable: false;
+        canContainPolicies: true;
+        canReferencePolicies: true;
+        canInstantiateEngagements: true;
+    }>;
+    readonly POLICY: Readonly<{
+        kind: "POLICY";
+        profile: "durable-rule";
+        durable: true;
+        executable: false;
+        canContainPolicies: false;
+        canReferencePolicies: false;
+        canInstantiateEngagements: false;
+    }>;
+    readonly ENGAGEMENT: Readonly<{
+        kind: "ENGAGEMENT";
+        profile: "operational-executable";
+        durable: false;
+        executable: true;
+        canContainPolicies: false;
+        canReferencePolicies: true;
+        canInstantiateEngagements: false;
+    }>;
+}>;
+export declare function getContractualArtifactProfile(kind: string): H2AContractualArtifactProfileDescriptor | undefined;
+export declare function auditContractualArtifact(value: unknown): H2AContractualArtifactAuditResult;
+export declare function assertContractualArtifactInvariants(value: unknown): asserts value is H2AContractualArtifact;
+//# sourceMappingURL=contractual.d.ts.map

package/dist/contractual.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contractual.d.ts","sourceRoot":"","sources":["../src/contractual.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EACV,WAAW,EACX,aAAa,EACb,SAAS,EACV,MAAM,YAAY,CAAC;AAEpB,MAAM,MAAM,0BAA0B,GAAG,UAAU,GAAG,QAAQ,GAAG,YAAY,CAAC;AAE9E,MAAM,MAAM,sBAAsB,GAC9B,WAAW,GACX,SAAS,GACT,aAAa,CAAC;AAElB,MAAM,MAAM,6BAA6B,GACrC,qBAAqB,GACrB,cAAc,GACd,wBAAwB,CAAC;AAE7B,MAAM,WAAW,uCAAuC;IACtD,QAAQ,CAAC,IAAI,EAAE,0BAA0B,CAAC;IAC1C,QAAQ,CAAC,OAAO,EAAE,6BAA6B,CAAC;IAChD,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,kBAAkB,EAAE,OAAO,CAAC;IACrC,QAAQ,CAAC,oBAAoB,EAAE,OAAO,CAAC;IACvC,QAAQ,CAAC,yBAAyB,EAAE,OAAO,CAAC;CAC7C;AAED,MAAM,WAAW,iCAAiC;IAChD,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,CAAC,EAAE,6BAA6B,CAAC;IACjD,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;CACpC;AAED,eAAO,MAAM,iCAAiC;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA+B5C,CAAC;AA2DH,wBAAgB,6BAA6B,CAC3C,IAAI,EAAE,MAAM,GACX,uCAAuC,GAAG,SAAS,CAOrD;AAED,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,OAAO,GACb,iCAAiC,CAiDnC;AAED,wBAAgB,mCAAmC,CACjD,KAAK,EAAE,OAAO,GACb,OAAO,CAAC,KAAK,IAAI,sBAAsB,CAOzC"}

package/dist/contractual.js

@@ -0,0 +1,126 @@
+import { isContract, isEngagement, isPolicy } from "./artifacts.js";
+export const H2A_CONTRACTUAL_ARTIFACT_PROFILES = Object.freeze({
+    CONTRACT: Object.freeze({
+        kind: "CONTRACT",
+        profile: "normative-container",
+        durable: true,
+        executable: false,
+        canContainPolicies: true,
+        canReferencePolicies: true,
+        canInstantiateEngagements: true
+    }),
+    POLICY: Object.freeze({
+        kind: "POLICY",
+        profile: "durable-rule",
+        durable: true,
+        executable: false,
+        canContainPolicies: false,
+        canReferencePolicies: false,
+        canInstantiateEngagements: false
+    }),
+    ENGAGEMENT: Object.freeze({
+        kind: "ENGAGEMENT",
+        profile: "operational-executable",
+        durable: false,
+        executable: true,
+        canContainPolicies: false,
+        canReferencePolicies: true,
+        canInstantiateEngagements: false
+    })
+});
+const CONTRACTUAL_KINDS = Object.keys(H2A_CONTRACTUAL_ARTIFACT_PROFILES);
+const POLICY_FIELDS = [
+    "rule",
+    "sourceAuthority",
+    "adoptionMode",
+    "parameters"
+];
+const CONTRACT_FIELDS = [
+    "parties",
+    "clauses",
+    "engagements",
+    "signatures",
+    "obligations",
+    "rights"
+];
+const ENGAGEMENT_FIELDS = [
+    "charter",
+    "roleBindings",
+    "controls",
+    "successCriteria",
+    "contractId",
+    "amendments",
+    "status"
+];
+function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function ownFields(value, fields) {
+    return fields.filter((field) => Object.prototype.hasOwnProperty.call(value, field));
+}
+function addCollapseIssue(issues, kind, collapsedKind, fields, value) {
+    const present = ownFields(value, fields);
+    if (present.length === 0)
+        return;
+    issues.push(`${kind} must not carry ${collapsedKind} fields: ${present.join(", ")}`);
+}
+export function getContractualArtifactProfile(kind) {
+    if (!CONTRACTUAL_KINDS.includes(kind)) {
+        return undefined;
+    }
+    return H2A_CONTRACTUAL_ARTIFACT_PROFILES[kind];
+}
+export function auditContractualArtifact(value) {
+    if (!isRecord(value)) {
+        return { ok: false, issues: ["value is not an object"] };
+    }
+    const kind = typeof value.kind === "string" ? value.kind : undefined;
+    if (!kind) {
+        return { ok: false, issues: ["value.kind is required"] };
+    }
+    const descriptor = getContractualArtifactProfile(kind);
+    if (!descriptor) {
+        return {
+            ok: false,
+            kind,
+            issues: [
+                `${kind} is not a contractual artifact kind (expected CONTRACT, POLICY, ENGAGEMENT)`
+            ]
+        };
+    }
+    const issues = [];
+    if (descriptor.kind === "CONTRACT" && !isContract(value)) {
+        issues.push("CONTRACT is not structurally valid");
+    }
+    if (descriptor.kind === "POLICY" && !isPolicy(value)) {
+        issues.push("POLICY is not structurally valid");
+    }
+    if (descriptor.kind === "ENGAGEMENT" && !isEngagement(value)) {
+        issues.push("ENGAGEMENT is not structurally valid");
+    }
+    if (descriptor.kind === "CONTRACT") {
+        addCollapseIssue(issues, "CONTRACT", "POLICY", POLICY_FIELDS, value);
+        addCollapseIssue(issues, "CONTRACT", "ENGAGEMENT", ENGAGEMENT_FIELDS, value);
+    }
+    else if (descriptor.kind === "POLICY") {
+        addCollapseIssue(issues, "POLICY", "CONTRACT", CONTRACT_FIELDS, value);
+        addCollapseIssue(issues, "POLICY", "ENGAGEMENT", ENGAGEMENT_FIELDS, value);
+    }
+    else {
+        addCollapseIssue(issues, "ENGAGEMENT", "CONTRACT", CONTRACT_FIELDS, value);
+        addCollapseIssue(issues, "ENGAGEMENT", "POLICY", POLICY_FIELDS, value);
+    }
+    return {
+        ok: issues.length === 0,
+        kind: descriptor.kind,
+        profile: descriptor.profile,
+        issues
+    };
+}
+export function assertContractualArtifactInvariants(value) {
+    const result = auditContractualArtifact(value);
+    if (!result.ok) {
+        throw new Error(`Contractual artifact invariant violation: ${result.issues.join("; ")}`);
+    }
+}
+//# sourceMappingURL=contractual.js.map

package/dist/contractual.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"contractual.js","sourceRoot":"","sources":["../src/contractual.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,UAAU,EACV,YAAY,EACZ,QAAQ,EACT,MAAM,gBAAgB,CAAC;AAoCxB,MAAM,CAAC,MAAM,iCAAiC,GAAG,MAAM,CAAC,MAAM,CAAC;IAC7D,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC;QACtB,IAAI,EAAE,UAAU;QAChB,OAAO,EAAE,qBAAqB;QAC9B,OAAO,EAAE,IAAI;QACb,UAAU,EAAE,KAAK;QACjB,kBAAkB,EAAE,IAAI;QACxB,oBAAoB,EAAE,IAAI;QAC1B,yBAAyB,EAAE,IAAI;KAChC,CAAC;IACF,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC;QACpB,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,cAAc;QACvB,OAAO,EAAE,IAAI;QACb,UAAU,EAAE,KAAK;QACjB,kBAAkB,EAAE,KAAK;QACzB,oBAAoB,EAAE,KAAK;QAC3B,yBAAyB,EAAE,KAAK;KACjC,CAAC;IACF,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC;QACxB,IAAI,EAAE,YAAY;QAClB,OAAO,EAAE,wBAAwB;QACjC,OAAO,EAAE,KAAK;QACd,UAAU,EAAE,IAAI;QAChB,kBAAkB,EAAE,KAAK;QACzB,oBAAoB,EAAE,IAAI;QAC1B,yBAAyB,EAAE,KAAK;KACjC,CAAC;CAIH,CAAC,CAAC;AAEH,MAAM,iBAAiB,GAAG,MAAM,CAAC,IAAI,CACnC,iCAAiC,CACF,CAAC;AAElC,MAAM,aAAa,GAAG;IACpB,MAAM;IACN,iBAAiB;IACjB,cAAc;IACd,YAAY;CACJ,CAAC;AAEX,MAAM,eAAe,GAAG;IACtB,SAAS;IACT,SAAS;IACT,aAAa;IACb,YAAY;IACZ,aAAa;IACb,QAAQ;CACA,CAAC;AAEX,MAAM,iBAAiB,GAAG;IACxB,SAAS;IACT,cAAc;IACd,UAAU;IACV,iBAAiB;IACjB,YAAY;IACZ,YAAY;IACZ,QAAQ;CACA,CAAC;AAEX,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,SAAS,CAChB,KAA8B,EAC9B,MAAyB;IAEzB,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAC7B,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,CACnD,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CACvB,MAAgB,EAChB,IAAgC,EAChC,aAAyC,EACzC,MAAyB,EACzB,KAA8B;IAE9B,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACzC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IACjC,MAAM,CAAC,IAAI,CACT,GAAG,IAAI,mBAAmB,aAAa,YAAY,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACxE,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,6BAA6B,CAC3C,IAAY;IAEZ,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,IAAkC,CAAC,EAAE,CAAC;QACpE,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,iCAAiC,CACtC,IAAkC,CACnC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,KAAc;IAEd,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,wBAAwB,CAAC,EAAE,CAAC;IAC3D,CAAC;IAED,MAAM,IAAI,GAAG,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IACrE,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,wBAAwB,CAAC,EAAE,CAAC;IAC3D,CAAC;IAED,MAAM,UAAU,GAAG,6BAA6B,CAAC,IAAI,CAAC,CAAC;IACvD,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI;YACJ,MAAM,EAAE;gBACN,GAAG,IAAI,6EAA6E;aACrF;SACF,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,UAAU,CAAC,IAAI,KAAK,UAAU,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QACzD,MAAM,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC;IACpD,CAAC;IACD,IAAI,UAAU,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrD,MAAM,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;IAClD,CAAC;IACD,IAAI,UAAU,CAAC,IAAI,KAAK,YAAY,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;QAC7D,MAAM,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC;IACtD,CAAC;IAED,IAAI,UAAU,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QACnC,gBAAgB,CAAC,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,aAAa,EAAE,KAAK,CAAC,CAAC;QACrE,gBAAgB,CAAC,MAAM,EAAE,UAAU,EAAE,YAAY,EAAE,iBAAiB,EAAE,KAAK,CAAC,CAAC;IAC/E,CAAC;SAAM,IAAI,UAAU,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QACxC,gBAAgB,CAAC,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,eAAe,EAAE,KAAK,CAAC,CAAC;QACvE,gBAAgB,CAAC,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,iBAAiB,EAAE,KAAK,CAAC,CAAC;IAC7E,CAAC;SAAM,CAAC;QACN,gBAAgB,CAAC,MAAM,EAAE,YAAY,EAAE,UAAU,EAAE,eAAe,EAAE,KAAK,CAAC,CAAC;QAC3E,gBAAgB,CAAC,MAAM,EAAE,YAAY,EAAE,QAAQ,EAAE,aAAa,EAAE,KAAK,CAAC,CAAC;IACzE,CAAC;IAED,OAAO;QACL,EAAE,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;QACvB,IAAI,EAAE,UAAU,CAAC,IAAI;QACrB,OAAO,EAAE,UAAU,CAAC,OAAO;QAC3B,MAAM;KACP,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mCAAmC,CACjD,KAAc;IAEd,MAAM,MAAM,GAAG,wBAAwB,CAAC,KAAK,CAAC,CAAC;IAC/C,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CACb,6CAA6C,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACxE,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/escalation.d.ts

@@ -0,0 +1,40 @@
+import type { H2AEnforcementPlan } from "./types.js";
+export declare const H2A_ESCALATION_CHANNELS: readonly ["advise", "decide", "alert"];
+export declare const H2A_ESCALATION_AUTHORITY_KINDS: readonly ["PRINCIPAL", "EXECUTIF", "QUORUM", "CONTROL", "EXTERNAL_AUTHORITY", "RECOURSE"];
+export type H2AEscalationChannel = (typeof H2A_ESCALATION_CHANNELS)[number];
+export type H2AEscalationAuthorityKind = (typeof H2A_ESCALATION_AUTHORITY_KINDS)[number];
+export interface H2AEscalationTargetRequest {
+    readonly scope: string;
+    readonly channel: string;
+    readonly trigger?: string;
+    readonly domain?: string;
+}
+export interface H2AEscalationResolveOptions {
+    /**
+     * Explicit mono-human fallback target. DEC-024 keeps PRINCIPAL as the
+     * default only when the caller provides that local principal target.
+     */
+    readonly fallbackPrincipal?: string;
+}
+export interface H2AEscalationResolvedTarget {
+    readonly ok: true;
+    readonly scope: string;
+    readonly channel: H2AEscalationChannel;
+    readonly trigger?: string;
+    readonly domain?: string;
+    readonly authorityKind: H2AEscalationAuthorityKind;
+    readonly target: string;
+    readonly source: "enforcement-plan" | "fallback-principal";
+}
+export interface H2AEscalationUnresolvedTarget {
+    readonly ok: false;
+    readonly scope?: string;
+    readonly channel?: string;
+    readonly trigger?: string;
+    readonly domain?: string;
+    readonly issues: readonly string[];
+}
+export type H2AEscalationResolution = H2AEscalationResolvedTarget | H2AEscalationUnresolvedTarget;
+export declare function resolveEscalationTarget(plan: Pick<H2AEnforcementPlan, "escalations">, request: H2AEscalationTargetRequest, options?: H2AEscalationResolveOptions): H2AEscalationResolution;
+export declare function assertEscalationTargetResolved(resolution: H2AEscalationResolution): asserts resolution is H2AEscalationResolvedTarget;
+//# sourceMappingURL=escalation.d.ts.map

package/dist/escalation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"escalation.d.ts","sourceRoot":"","sources":["../src/escalation.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAErD,eAAO,MAAM,uBAAuB,wCAI1B,CAAC;AAEX,eAAO,MAAM,8BAA8B,2FAOjC,CAAC;AAEX,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,uBAAuB,CAAC,CAAC,MAAM,CAAC,CAAC;AAC5E,MAAM,MAAM,0BAA0B,GACpC,CAAC,OAAO,8BAA8B,CAAC,CAAC,MAAM,CAAC,CAAC;AAElD,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,2BAA2B;IAC1C;;;OAGG;IACH,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;CACrC;AAED,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAClB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,oBAAoB,CAAC;IACvC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,aAAa,EAAE,0BAA0B,CAAC;IACnD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,kBAAkB,GAAG,oBAAoB,CAAC;CAC5D;AAED,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IACnB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;CACpC;AAED,MAAM,MAAM,uBAAuB,GAC/B,2BAA2B,GAC3B,6BAA6B,CAAC;AA+BlC,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,IAAI,CAAC,kBAAkB,EAAE,aAAa,CAAC,EAC7C,OAAO,EAAE,0BAA0B,EACnC,OAAO,GAAE,2BAAgC,GACxC,uBAAuB,CA0FzB;AAED,wBAAgB,8BAA8B,CAC5C,UAAU,EAAE,uBAAuB,GAClC,OAAO,CAAC,UAAU,IAAI,2BAA2B,CAMnD"}