@sentropic/h2a 0.1.0 → 0.1.6

package/dist/escalation.js

@@ -0,0 +1,114 @@
+export const H2A_ESCALATION_CHANNELS = [
+    "advise",
+    "decide",
+    "alert"
+];
+export const H2A_ESCALATION_AUTHORITY_KINDS = [
+    "PRINCIPAL",
+    "EXECUTIF",
+    "QUORUM",
+    "CONTROL",
+    "EXTERNAL_AUTHORITY",
+    "RECOURSE"
+];
+function isEscalationChannel(value) {
+    return H2A_ESCALATION_CHANNELS.includes(value);
+}
+function isEscalationAuthorityKind(value) {
+    return (typeof value === "string" &&
+        H2A_ESCALATION_AUTHORITY_KINDS.includes(value));
+}
+function withOptionalRequestFields(base, request, routeDomain) {
+    return {
+        ...base,
+        ...(request.trigger ? { trigger: request.trigger } : {}),
+        ...(request.domain && routeDomain === request.domain
+            ? { domain: request.domain }
+            : {})
+    };
+}
+export function resolveEscalationTarget(plan, request, options = {}) {
+    if (!isEscalationChannel(request.channel)) {
+        return {
+            ok: false,
+            scope: request.scope,
+            channel: request.channel,
+            trigger: request.trigger,
+            domain: request.domain,
+            issues: [
+                `unknown escalation channel "${request.channel}" (expected advise|decide|alert)`
+            ]
+        };
+    }
+    const candidates = plan.escalations
+        .map((route, index) => {
+        if (typeof route.target !== "string" || route.target.length === 0) {
+            return undefined;
+        }
+        if (route.channel !== undefined && route.channel !== request.channel) {
+            return undefined;
+        }
+        if (route.scope !== undefined && route.scope !== request.scope) {
+            return undefined;
+        }
+        if (request.trigger && route.trigger !== request.trigger) {
+            return undefined;
+        }
+        if (request.domain &&
+            route.domain !== undefined &&
+            route.domain !== request.domain) {
+            return undefined;
+        }
+        let score = 0;
+        if (request.domain && route.domain === request.domain)
+            score += 8;
+        if (request.trigger && route.trigger === request.trigger)
+            score += 4;
+        if (route.scope === request.scope)
+            score += 2;
+        if (route.channel === request.channel)
+            score += 1;
+        return { route, index, score };
+    })
+        .filter((entry) => entry !== undefined)
+        .sort((a, b) => b.score - a.score || a.index - b.index);
+    const selected = candidates[0]?.route;
+    if (selected) {
+        return withOptionalRequestFields({
+            ok: true,
+            scope: request.scope,
+            channel: request.channel,
+            authorityKind: isEscalationAuthorityKind(selected.authorityKind)
+                ? selected.authorityKind
+                : "PRINCIPAL",
+            target: selected.target,
+            source: "enforcement-plan"
+        }, request, selected.domain);
+    }
+    if (options.fallbackPrincipal) {
+        return withOptionalRequestFields({
+            ok: true,
+            scope: request.scope,
+            channel: request.channel,
+            authorityKind: "PRINCIPAL",
+            target: options.fallbackPrincipal,
+            source: "fallback-principal"
+        }, request);
+    }
+    return {
+        ok: false,
+        scope: request.scope,
+        channel: request.channel,
+        trigger: request.trigger,
+        domain: request.domain,
+        issues: [
+            `no escalation target for scope=${request.scope}, channel=${request.channel}${request.trigger ? `, trigger=${request.trigger}` : ""}${request.domain ? `, domain=${request.domain}` : ""}`
+        ]
+    };
+}
+export function assertEscalationTargetResolved(resolution) {
+    if (!resolution.ok) {
+        throw new Error(`Escalation target unresolved: ${resolution.issues.join("; ")}`);
+    }
+}
+//# sourceMappingURL=escalation.js.map

package/dist/escalation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"escalation.js","sourceRoot":"","sources":["../src/escalation.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,QAAQ;IACR,QAAQ;IACR,OAAO;CACC,CAAC;AAEX,MAAM,CAAC,MAAM,8BAA8B,GAAG;IAC5C,WAAW;IACX,UAAU;IACV,QAAQ;IACR,SAAS;IACT,oBAAoB;IACpB,UAAU;CACF,CAAC;AA6CX,SAAS,mBAAmB,CAAC,KAAa;IACxC,OAAO,uBAAuB,CAAC,QAAQ,CAAC,KAA6B,CAAC,CAAC;AACzE,CAAC;AAED,SAAS,yBAAyB,CAChC,KAAc;IAEd,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACzB,8BAA8B,CAAC,QAAQ,CACrC,KAAmC,CACpC,CACF,CAAC;AACJ,CAAC;AAED,SAAS,yBAAyB,CAChC,IAA6D,EAC7D,OAAmC,EACnC,WAAoB;IAEpB,OAAO;QACL,GAAG,IAAI;QACP,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxD,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,WAAW,KAAK,OAAO,CAAC,MAAM;YAClD,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE;YAC5B,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,IAA6C,EAC7C,OAAmC,EACnC,UAAuC,EAAE;IAEzC,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1C,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,MAAM,EAAE;gBACN,+BAA+B,OAAO,CAAC,OAAO,kCAAkC;aACjF;SACF,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW;SAChC,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QACpB,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAClE,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI,KAAK,CAAC,OAAO,KAAK,OAAO,CAAC,OAAO,EAAE,CAAC;YACrE,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,KAAK,KAAK,OAAO,CAAC,KAAK,EAAE,CAAC;YAC/D,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,IAAI,OAAO,CAAC,OAAO,IAAI,KAAK,CAAC,OAAO,KAAK,OAAO,CAAC,OAAO,EAAE,CAAC;YACzD,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,IACE,OAAO,CAAC,MAAM;YACd,KAAK,CAAC,MAAM,KAAK,SAAS;YAC1B,KAAK,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM,EAC/B,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,IAAI,OAAO,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM;YAAE,KAAK,IAAI,CAAC,CAAC;QAClE,IAAI,OAAO,CAAC,OAAO,IAAI,KAAK,CAAC,OAAO,KAAK,OAAO,CAAC,OAAO;YAAE,KAAK,IAAI,CAAC,CAAC;QACrE,IAAI,KAAK,CAAC,KAAK,KAAK,OAAO,CAAC,KAAK;YAAE,KAAK,IAAI,CAAC,CAAC;QAC9C,IAAI,KAAK,CAAC,OAAO,KAAK,OAAO,CAAC,OAAO;YAAE,KAAK,IAAI,CAAC,CAAC;QAClD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IACjC,CAAC,CAAC;SACD,MAAM,CAAC,CAAC,KAAK,EAAsC,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC;SAC1E,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;IAE1D,MAAM,QAAQ,GAAG,UAAU,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC;IACtC,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,yBAAyB,CAC9B;YACE,EAAE,EAAE,IAAI;YACR,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,aAAa,EAAE,yBAAyB,CAAC,QAAQ,CAAC,aAAa,CAAC;gBAC9D,CAAC,CAAC,QAAQ,CAAC,aAAa;gBACxB,CAAC,CAAC,WAAW;YACf,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,MAAM,EAAE,kBAAkB;SAC3B,EACD,OAAO,EACP,QAAQ,CAAC,MAAM,CAChB,CAAC;IACJ,CAAC;IAED,IAAI,OAAO,CAAC,iBAAiB,EAAE,CAAC;QAC9B,OAAO,yBAAyB,CAC9B;YACE,EAAE,EAAE,IAAI;YACR,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,aAAa,EAAE,WAAW;YAC1B,MAAM,EAAE,OAAO,CAAC,iBAAiB;YACjC,MAAM,EAAE,oBAAoB;SAC7B,EACD,OAAO,CACR,CAAC;IACJ,CAAC;IAED,OAAO;QACL,EAAE,EAAE,KAAK;QACT,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,MAAM,EAAE;YACN,kCAAkC,OAAO,CAAC,KAAK,aAAa,OAAO,CAAC,OAAO,GACzE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EACrD,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,YAAY,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;SACxD;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,8BAA8B,CAC5C,UAAmC;IAEnC,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CACb,iCAAiC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAChE,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/fixtures-index.d.ts

@@ -0,0 +1,16 @@
+import type { H2AArtifactKind } from "./types.js";
+export interface H2ACanonicalFixtureManifestEntry {
+    /** Path relative to the package root (e.g. `fixtures/contract.json`). */
+    path: string;
+    /** The canonical {@link H2AArtifactKind} this fixture is an instance of. */
+    kind: H2AArtifactKind;
+    /** The fixture artifact's own `id`. */
+    id: string;
+    /**
+     * SHA-256 hex of the file content bytes (no `sha256:` prefix). The full
+     * canonical hash is `"sha256:" + sha256` and matches `computeHash(parsed)`.
+     */
+    sha256: string;
+}
+export declare const H2A_CANONICAL_FIXTURES: readonly H2ACanonicalFixtureManifestEntry[];
+//# sourceMappingURL=fixtures-index.d.ts.map

package/dist/fixtures-index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fixtures-index.d.ts","sourceRoot":"","sources":["../src/fixtures-index.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAElD,MAAM,WAAW,gCAAgC;IAC/C,yEAAyE;IACzE,IAAI,EAAE,MAAM,CAAC;IACb,4EAA4E;IAC5E,IAAI,EAAE,eAAe,CAAC;IACtB,uCAAuC;IACvC,EAAE,EAAE,MAAM,CAAC;IACX;;;OAGG;IACH,MAAM,EAAE,MAAM,CAAC;CAChB;AAUD,eAAO,MAAM,sBAAsB,EAAE,SAAS,gCAAgC,EACX,CAAC"}

package/dist/fixtures-index.js

@@ -0,0 +1,11 @@
+import { readFileSync } from "node:fs";
+import { dirname, join } from "node:path";
+import { fileURLToPath } from "node:url";
+const HERE = dirname(fileURLToPath(import.meta.url));
+// `dist/fixtures-index.js` → package root is one level up; fixtures sit at
+// `<package>/fixtures/` (DEC-035). Loaded once at module init from disk so
+// the canonical bytes never drift between source and runtime.
+const MANIFEST_PATH = join(HERE, "..", "fixtures", "manifest.json");
+const parsed = JSON.parse(readFileSync(MANIFEST_PATH, "utf8"));
+export const H2A_CANONICAL_FIXTURES = Object.freeze(parsed.map((entry) => Object.freeze({ ...entry })));
+//# sourceMappingURL=fixtures-index.js.map

package/dist/fixtures-index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fixtures-index.js","sourceRoot":"","sources":["../src/fixtures-index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAkBzC,MAAM,IAAI,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AACrD,2EAA2E;AAC3E,2EAA2E;AAC3E,8DAA8D;AAC9D,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,eAAe,CAAC,CAAC;AAEpE,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,aAAa,EAAE,MAAM,CAAC,CAAuC,CAAC;AAErG,MAAM,CAAC,MAAM,sBAAsB,GACjC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC"}

package/dist/governance-boundary.d.ts

@@ -0,0 +1,118 @@
+export declare const H2A_GOVERNANCE_BOUNDARY_LAYERS: readonly ["PROTOCOL", "POLICY", "IMPLEMENTATION"];
+export declare const H2A_GOVERNANCE_BOUNDARY_STATUSES: readonly ["v1-shipped", "v1-open", "v2-deferred"];
+export type H2AGovernanceBoundaryLayer = (typeof H2A_GOVERNANCE_BOUNDARY_LAYERS)[number];
+export type H2AGovernanceBoundaryStatus = (typeof H2A_GOVERNANCE_BOUNDARY_STATUSES)[number];
+export interface H2AGovernanceBoundaryItemDescriptor {
+    readonly id: string;
+    readonly layer: H2AGovernanceBoundaryLayer;
+    readonly status: H2AGovernanceBoundaryStatus;
+    readonly summary: string;
+    readonly references: readonly string[];
+}
+export declare const H2A_GOVERNANCE_BOUNDARY_ITEMS: readonly [{
+    readonly id: "protocol-identity";
+    readonly layer: "PROTOCOL";
+    readonly status: "v1-shipped";
+    readonly summary: "Protocol id, version, envelope frame, and canonical public vocabulary.";
+    readonly references: readonly ["REQ-001", "DEC-010"];
+}, {
+    readonly id: "canonical-artifacts";
+    readonly layer: "PROTOCOL";
+    readonly status: "v1-shipped";
+    readonly summary: "Artifact kinds, guards, canonical JSON, hashes, and byte fixtures.";
+    readonly references: readonly ["DEC-031", "DEC-035", "DEC-039"];
+}, {
+    readonly id: "mandated-signatures";
+    readonly layer: "PROTOCOL";
+    readonly status: "v1-shipped";
+    readonly summary: "A scope never signs; an authorized instance signs through role, mandate, and signature.";
+    readonly references: readonly ["DEC-021", "DEC-035"];
+}, {
+    readonly id: "negotiation-ledger";
+    readonly layer: "PROTOCOL";
+    readonly status: "v1-shipped";
+    readonly summary: "Negotiation state machine, append-only journal, canonical artifact hash, and stabilization rule.";
+    readonly references: readonly ["DEC-019", "DEC-022", "DEC-033"];
+}, {
+    readonly id: "scope-authority-escalation";
+    readonly layer: "PROTOCOL";
+    readonly status: "v1-shipped";
+    readonly summary: "Escalation channels and target resolution by scope authority.";
+    readonly references: readonly ["DEC-012", "DEC-024", "DEC-040"];
+}, {
+    readonly id: "abc-model-profiles";
+    readonly layer: "PROTOCOL";
+    readonly status: "v1-shipped";
+    readonly summary: "Stable ABC model profile ids and compatibility audit vocabulary.";
+    readonly references: readonly ["DEC-041"];
+}, {
+    readonly id: "multi-human-mode-taxonomy";
+    readonly layer: "PROTOCOL";
+    readonly status: "v1-shipped";
+    readonly summary: "Deterministic taxonomy for peer, delegated, shared, federated, quorum, and public-authority modes.";
+    readonly references: readonly ["DEC-042"];
+}, {
+    readonly id: "policy-precedence";
+    readonly layer: "POLICY";
+    readonly status: "v1-open";
+    readonly summary: "Conflict precedence between local, contractual, federated, and public policies is not hard-coded in V1.";
+    readonly references: readonly ["REQ-041", "DEC-039", "DEC-041"];
+}, {
+    readonly id: "controlled-disclosure-profiles";
+    readonly layer: "POLICY";
+    readonly status: "v1-open";
+    readonly summary: "Redaction levels, evidence packages, and CONTROL disclosure limits remain policy profiles.";
+    readonly references: readonly ["REQ-070", "DEC-041"];
+}, {
+    readonly id: "recurring-obligation-cadence";
+    readonly layer: "POLICY";
+    readonly status: "v1-open";
+    readonly summary: "Cadence, grace periods, and reporting thresholds for recurring obligations are domain policy.";
+    readonly references: readonly ["REQ-063", "DEC-041"];
+}, {
+    readonly id: "mandataire-assignment";
+    readonly layer: "POLICY";
+    readonly status: "v1-open";
+    readonly summary: "The protocol requires neutral presentation where applicable; assigning an instance is governance policy.";
+    readonly references: readonly ["DEC-005", "DEC-013"];
+}, {
+    readonly id: "conflict-blocking-thresholds";
+    readonly layer: "POLICY";
+    readonly status: "v1-open";
+    readonly summary: "Which conflicts block signatures versus escalate is a policy decision until a future engine is adopted.";
+    readonly references: readonly ["REQ-054", "DEC-041"];
+}, {
+    readonly id: "local-files-store";
+    readonly layer: "IMPLEMENTATION";
+    readonly status: "v1-shipped";
+    readonly summary: "The local-files layout, schema sentinel, and advisory locks are the reference V1 runtime, not the protocol itself.";
+    readonly references: readonly ["DEC-031", "DEC-036"];
+}, {
+    readonly id: "mcp-stdio-server";
+    readonly layer: "IMPLEMENTATION";
+    readonly status: "v1-shipped";
+    readonly summary: "The stdio JSON-RPC MCP server is a transport binding over the protocol tools.";
+    readonly references: readonly ["DEC-026", "DEC-034"];
+}, {
+    readonly id: "host-setup-snippets";
+    readonly layer: "IMPLEMENTATION";
+    readonly status: "v1-shipped";
+    readonly summary: "Codex and Claude config snippets are replaceable host adapter behavior.";
+    readonly references: readonly ["DEC-028", "DEC-037"];
+}, {
+    readonly id: "cli-json-contract";
+    readonly layer: "IMPLEMENTATION";
+    readonly status: "v1-shipped";
+    readonly summary: "CLI JSON envelopes and exit codes are a stable implementation contract for the shipped CLI.";
+    readonly references: readonly ["DEC-034"];
+}, {
+    readonly id: "transport-auth";
+    readonly layer: "IMPLEMENTATION";
+    readonly status: "v2-deferred";
+    readonly summary: "mTLS, signed bearer, or equivalent multi-user transport auth is deferred to V2.";
+    readonly references: readonly ["DEC-032"];
+}];
+export type H2AGovernanceBoundaryItemId = (typeof H2A_GOVERNANCE_BOUNDARY_ITEMS)[number]["id"];
+export declare function classifyGovernanceBoundary(itemId: string): H2AGovernanceBoundaryItemDescriptor | undefined;
+export declare function listGovernanceBoundaryItems(layer?: string): readonly H2AGovernanceBoundaryItemDescriptor[];
+//# sourceMappingURL=governance-boundary.d.ts.map

package/dist/governance-boundary.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"governance-boundary.d.ts","sourceRoot":"","sources":["../src/governance-boundary.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,8BAA8B,mDAIjC,CAAC;AAEX,eAAO,MAAM,gCAAgC,mDAInC,CAAC;AAEX,MAAM,MAAM,0BAA0B,GACpC,CAAC,OAAO,8BAA8B,CAAC,CAAC,MAAM,CAAC,CAAC;AAClD,MAAM,MAAM,2BAA2B,GACrC,CAAC,OAAO,gCAAgC,CAAC,CAAC,MAAM,CAAC,CAAC;AAEpD,MAAM,WAAW,mCAAmC;IAClD,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,0BAA0B,CAAC;IAC3C,QAAQ,CAAC,MAAM,EAAE,2BAA2B,CAAC;IAC7C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;CACxC;AAED,eAAO,MAAM,6BAA6B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAwH0B,CAAC;AAErE,MAAM,MAAM,2BAA2B,GACrC,CAAC,OAAO,6BAA6B,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC;AAEvD,wBAAgB,0BAA0B,CACxC,MAAM,EAAE,MAAM,GACb,mCAAmC,GAAG,SAAS,CAEjD;AAED,wBAAgB,2BAA2B,CACzC,KAAK,CAAC,EAAE,MAAM,GACb,SAAS,mCAAmC,EAAE,CAUhD"}

package/dist/governance-boundary.js

@@ -0,0 +1,143 @@
+export const H2A_GOVERNANCE_BOUNDARY_LAYERS = [
+    "PROTOCOL",
+    "POLICY",
+    "IMPLEMENTATION"
+];
+export const H2A_GOVERNANCE_BOUNDARY_STATUSES = [
+    "v1-shipped",
+    "v1-open",
+    "v2-deferred"
+];
+export const H2A_GOVERNANCE_BOUNDARY_ITEMS = Object.freeze([
+    {
+        id: "protocol-identity",
+        layer: "PROTOCOL",
+        status: "v1-shipped",
+        summary: "Protocol id, version, envelope frame, and canonical public vocabulary.",
+        references: ["REQ-001", "DEC-010"]
+    },
+    {
+        id: "canonical-artifacts",
+        layer: "PROTOCOL",
+        status: "v1-shipped",
+        summary: "Artifact kinds, guards, canonical JSON, hashes, and byte fixtures.",
+        references: ["DEC-031", "DEC-035", "DEC-039"]
+    },
+    {
+        id: "mandated-signatures",
+        layer: "PROTOCOL",
+        status: "v1-shipped",
+        summary: "A scope never signs; an authorized instance signs through role, mandate, and signature.",
+        references: ["DEC-021", "DEC-035"]
+    },
+    {
+        id: "negotiation-ledger",
+        layer: "PROTOCOL",
+        status: "v1-shipped",
+        summary: "Negotiation state machine, append-only journal, canonical artifact hash, and stabilization rule.",
+        references: ["DEC-019", "DEC-022", "DEC-033"]
+    },
+    {
+        id: "scope-authority-escalation",
+        layer: "PROTOCOL",
+        status: "v1-shipped",
+        summary: "Escalation channels and target resolution by scope authority.",
+        references: ["DEC-012", "DEC-024", "DEC-040"]
+    },
+    {
+        id: "abc-model-profiles",
+        layer: "PROTOCOL",
+        status: "v1-shipped",
+        summary: "Stable ABC model profile ids and compatibility audit vocabulary.",
+        references: ["DEC-041"]
+    },
+    {
+        id: "multi-human-mode-taxonomy",
+        layer: "PROTOCOL",
+        status: "v1-shipped",
+        summary: "Deterministic taxonomy for peer, delegated, shared, federated, quorum, and public-authority modes.",
+        references: ["DEC-042"]
+    },
+    {
+        id: "policy-precedence",
+        layer: "POLICY",
+        status: "v1-open",
+        summary: "Conflict precedence between local, contractual, federated, and public policies is not hard-coded in V1.",
+        references: ["REQ-041", "DEC-039", "DEC-041"]
+    },
+    {
+        id: "controlled-disclosure-profiles",
+        layer: "POLICY",
+        status: "v1-open",
+        summary: "Redaction levels, evidence packages, and CONTROL disclosure limits remain policy profiles.",
+        references: ["REQ-070", "DEC-041"]
+    },
+    {
+        id: "recurring-obligation-cadence",
+        layer: "POLICY",
+        status: "v1-open",
+        summary: "Cadence, grace periods, and reporting thresholds for recurring obligations are domain policy.",
+        references: ["REQ-063", "DEC-041"]
+    },
+    {
+        id: "mandataire-assignment",
+        layer: "POLICY",
+        status: "v1-open",
+        summary: "The protocol requires neutral presentation where applicable; assigning an instance is governance policy.",
+        references: ["DEC-005", "DEC-013"]
+    },
+    {
+        id: "conflict-blocking-thresholds",
+        layer: "POLICY",
+        status: "v1-open",
+        summary: "Which conflicts block signatures versus escalate is a policy decision until a future engine is adopted.",
+        references: ["REQ-054", "DEC-041"]
+    },
+    {
+        id: "local-files-store",
+        layer: "IMPLEMENTATION",
+        status: "v1-shipped",
+        summary: "The local-files layout, schema sentinel, and advisory locks are the reference V1 runtime, not the protocol itself.",
+        references: ["DEC-031", "DEC-036"]
+    },
+    {
+        id: "mcp-stdio-server",
+        layer: "IMPLEMENTATION",
+        status: "v1-shipped",
+        summary: "The stdio JSON-RPC MCP server is a transport binding over the protocol tools.",
+        references: ["DEC-026", "DEC-034"]
+    },
+    {
+        id: "host-setup-snippets",
+        layer: "IMPLEMENTATION",
+        status: "v1-shipped",
+        summary: "Codex and Claude config snippets are replaceable host adapter behavior.",
+        references: ["DEC-028", "DEC-037"]
+    },
+    {
+        id: "cli-json-contract",
+        layer: "IMPLEMENTATION",
+        status: "v1-shipped",
+        summary: "CLI JSON envelopes and exit codes are a stable implementation contract for the shipped CLI.",
+        references: ["DEC-034"]
+    },
+    {
+        id: "transport-auth",
+        layer: "IMPLEMENTATION",
+        status: "v2-deferred",
+        summary: "mTLS, signed bearer, or equivalent multi-user transport auth is deferred to V2.",
+        references: ["DEC-032"]
+    }
+]);
+export function classifyGovernanceBoundary(itemId) {
+    return H2A_GOVERNANCE_BOUNDARY_ITEMS.find((item) => item.id === itemId);
+}
+export function listGovernanceBoundaryItems(layer) {
+    if (!layer)
+        return H2A_GOVERNANCE_BOUNDARY_ITEMS;
+    if (!H2A_GOVERNANCE_BOUNDARY_LAYERS.includes(layer)) {
+        return [];
+    }
+    return H2A_GOVERNANCE_BOUNDARY_ITEMS.filter((item) => item.layer === layer);
+}
+//# sourceMappingURL=governance-boundary.js.map

package/dist/governance-boundary.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"governance-boundary.js","sourceRoot":"","sources":["../src/governance-boundary.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,8BAA8B,GAAG;IAC5C,UAAU;IACV,QAAQ;IACR,gBAAgB;CACR,CAAC;AAEX,MAAM,CAAC,MAAM,gCAAgC,GAAG;IAC9C,YAAY;IACZ,SAAS;IACT,aAAa;CACL,CAAC;AAeX,MAAM,CAAC,MAAM,6BAA6B,GAAG,MAAM,CAAC,MAAM,CAAC;IACzD;QACE,EAAE,EAAE,mBAAmB;QACvB,KAAK,EAAE,UAAU;QACjB,MAAM,EAAE,YAAY;QACpB,OAAO,EAAE,wEAAwE;QACjF,UAAU,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC;KACnC;IACD;QACE,EAAE,EAAE,qBAAqB;QACzB,KAAK,EAAE,UAAU;QACjB,MAAM,EAAE,YAAY;QACpB,OAAO,EAAE,oEAAoE;QAC7E,UAAU,EAAE,CAAC,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC;KAC9C;IACD;QACE,EAAE,EAAE,qBAAqB;QACzB,KAAK,EAAE,UAAU;QACjB,MAAM,EAAE,YAAY;QACpB,OAAO,EAAE,yFAAyF;QAClG,UAAU,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC;KACnC;IACD;QACE,EAAE,EAAE,oBAAoB;QACxB,KAAK,EAAE,UAAU;QACjB,MAAM,EAAE,YAAY;QACpB,OAAO,EAAE,kGAAkG;QAC3G,UAAU,EAAE,CAAC,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC;KAC9C;IACD;QACE,EAAE,EAAE,4BAA4B;QAChC,KAAK,EAAE,UAAU;QACjB,MAAM,EAAE,YAAY;QACpB,OAAO,EAAE,+DAA+D;QACxE,UAAU,EAAE,CAAC,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC;KAC9C;IACD;QACE,EAAE,EAAE,oBAAoB;QACxB,KAAK,EAAE,UAAU;QACjB,MAAM,EAAE,YAAY;QACpB,OAAO,EAAE,kEAAkE;QAC3E,UAAU,EAAE,CAAC,SAAS,CAAC;KACxB;IACD;QACE,EAAE,EAAE,2BAA2B;QAC/B,KAAK,EAAE,UAAU;QACjB,MAAM,EAAE,YAAY;QACpB,OAAO,EAAE,oGAAoG;QAC7G,UAAU,EAAE,CAAC,SAAS,CAAC;KACxB;IACD;QACE,EAAE,EAAE,mBAAmB;QACvB,KAAK,EAAE,QAAQ;QACf,MAAM,EAAE,SAAS;QACjB,OAAO,EAAE,yGAAyG;QAClH,UAAU,EAAE,CAAC,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC;KAC9C;IACD;QACE,EAAE,EAAE,gCAAgC;QACpC,KAAK,EAAE,QAAQ;QACf,MAAM,EAAE,SAAS;QACjB,OAAO,EAAE,4FAA4F;QACrG,UAAU,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC;KACnC;IACD;QACE,EAAE,EAAE,8BAA8B;QAClC,KAAK,EAAE,QAAQ;QACf,MAAM,EAAE,SAAS;QACjB,OAAO,EAAE,+FAA+F;QACxG,UAAU,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC;KACnC;IACD;QACE,EAAE,EAAE,uBAAuB;QAC3B,KAAK,EAAE,QAAQ;QACf,MAAM,EAAE,SAAS;QACjB,OAAO,EAAE,0GAA0G;QACnH,UAAU,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC;KACnC;IACD;QACE,EAAE,EAAE,8BAA8B;QAClC,KAAK,EAAE,QAAQ;QACf,MAAM,EAAE,SAAS;QACjB,OAAO,EAAE,yGAAyG;QAClH,UAAU,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC;KACnC;IACD;QACE,EAAE,EAAE,mBAAmB;QACvB,KAAK,EAAE,gBAAgB;QACvB,MAAM,EAAE,YAAY;QACpB,OAAO,EAAE,oHAAoH;QAC7H,UAAU,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC;KACnC;IACD;QACE,EAAE,EAAE,kBAAkB;QACtB,KAAK,EAAE,gBAAgB;QACvB,MAAM,EAAE,YAAY;QACpB,OAAO,EAAE,+EAA+E;QACxF,UAAU,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC;KACnC;IACD;QACE,EAAE,EAAE,qBAAqB;QACzB,KAAK,EAAE,gBAAgB;QACvB,MAAM,EAAE,YAAY;QACpB,OAAO,EAAE,yEAAyE;QAClF,UAAU,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC;KACnC;IACD;QACE,EAAE,EAAE,mBAAmB;QACvB,KAAK,EAAE,gBAAgB;QACvB,MAAM,EAAE,YAAY;QACpB,OAAO,EAAE,6FAA6F;QACtG,UAAU,EAAE,CAAC,SAAS,CAAC;KACxB;IACD;QACE,EAAE,EAAE,gBAAgB;QACpB,KAAK,EAAE,gBAAgB;QACvB,MAAM,EAAE,aAAa;QACrB,OAAO,EAAE,iFAAiF;QAC1F,UAAU,EAAE,CAAC,SAAS,CAAC;KACxB;CACgE,CAAC,CAAC;AAKrE,MAAM,UAAU,0BAA0B,CACxC,MAAc;IAEd,OAAO,6BAA6B,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,MAAM,CAAC,CAAC;AAC1E,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,KAAc;IAEd,IAAI,CAAC,KAAK;QAAE,OAAO,6BAA6B,CAAC;IACjD,IACE,CAAC,8BAA8B,CAAC,QAAQ,CACtC,KAAmC,CACpC,EACD,CAAC;QACD,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,6BAA6B,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC;AAC9E,CAAC"}

package/dist/index.d.ts

@@ -1,5 +1,24 @@
+export { H2A_ABC_MODEL_CAPABILITIES, H2A_ABC_MODEL_IDS, H2A_ABC_MODEL_PROFILES, auditAbcModelCompatibility, getAbcModelProfile } from "./abc.js";
+export type { H2AAbcModelCapability, H2AAbcModelCapabilityDescriptor, H2AAbcModelCapabilityStatus, H2AAbcModelCompatibilityResult, H2AAbcModelId, H2AAbcModelProfileDescriptor, H2AAbcTopology, H2AAbcTrack } from "./abc.js";
+export { H2A_MULTI_HUMAN_MODE_IDS, H2A_MULTI_HUMAN_MODES, getMultiHumanMode, selectMultiHumanMode } from "./multi-human.js";
+export type { H2AMultiHumanChannel, H2AMultiHumanModeDescriptor, H2AMultiHumanModeId, H2AMultiHumanModeRequest, H2AMultiHumanModeSelection, H2AMultiHumanModeSelectionFailure, H2AMultiHumanModeSelectionResult } from "./multi-human.js";
+export { H2A_GOVERNANCE_BOUNDARY_ITEMS, H2A_GOVERNANCE_BOUNDARY_LAYERS, H2A_GOVERNANCE_BOUNDARY_STATUSES, classifyGovernanceBoundary, listGovernanceBoundaryItems } from "./governance-boundary.js";
+export type { H2AGovernanceBoundaryItemDescriptor, H2AGovernanceBoundaryItemId, H2AGovernanceBoundaryLayer, H2AGovernanceBoundaryStatus } from "./governance-boundary.js";
 export { createEnvelope, isH2AEnvelope } from "./envelope.js";
 export { assertValidNegotiationState } from "./negotiation.js";
-export { H2A_ARTIFACT_KINDS, H2A_ENVELOPE_TYPES, H2A_NEGOTIATION_STATES, H2A_PROTOCOL, H2A_ROLES, H2A_VERSION } from "./types.js";
-export type { H2AActorRef, H2AActorRegistration, H2AArtifactKind, H2AEnvelope, H2AEnvelopeType, H2ANegotiationRecord, H2ANegotiationState, H2ARole, H2ASignature } from "./types.js";
+export { canonicalize, computeHash } from "./canonical.js";
+export { signCanonical, verifyCanonical } from "./signature.js";
+export type { SignOptions } from "./signature.js";
+export { appendJournalEntry, createJournalEntry, journalEntryAsCanonicalString, verifyJournalChain } from "./journal.js";
+export type { H2AJournalEntry, H2AJournalPayload, H2AJournalVerification } from "./journal.js";
+export { isAmendment, isAuthority, isContract, isEnforcementPlan, isEngagement, isMandate, isPolicy, isSignature } from "./artifacts.js";
+export { H2A_AUTHORITY_MATRIX, assertCanSignArtifactKind, canSignArtifactKind } from "./authority.js";
+export { H2A_CONTRACTUAL_ARTIFACT_PROFILES, assertContractualArtifactInvariants, auditContractualArtifact, getContractualArtifactProfile } from "./contractual.js";
+export type { H2AContractualArtifact, H2AContractualArtifactAuditResult, H2AContractualArtifactKind, H2AContractualArtifactProfile, H2AContractualArtifactProfileDescriptor } from "./contractual.js";
+export { H2A_ESCALATION_AUTHORITY_KINDS, H2A_ESCALATION_CHANNELS, assertEscalationTargetResolved, resolveEscalationTarget } from "./escalation.js";
+export type { H2AEscalationAuthorityKind, H2AEscalationChannel, H2AEscalationResolution, H2AEscalationResolveOptions, H2AEscalationResolvedTarget, H2AEscalationTargetRequest, H2AEscalationUnresolvedTarget } from "./escalation.js";
+export { H2A_CANONICAL_FIXTURES } from "./fixtures-index.js";
+export type { H2ACanonicalFixtureManifestEntry } from "./fixtures-index.js";
+export { H2A_ARTIFACT_KINDS, H2A_AUTHORITY_KINDS, H2A_ENVELOPE_TYPES, H2A_NEGOTIATION_STATES, H2A_POLICY_ADOPTION_MODES, H2A_PROTOCOL, H2A_ROLES, H2A_VERSION } from "./types.js";
+export type { H2AActorRef, H2AActorRegistration, H2AAmendment, H2AArtifactKind, H2AAuthority, H2AAuthorityKind, H2AContract, H2AEnforcementPlan, H2AEngagement, H2AEnvelope, H2AEnvelopeType, H2AMandate, H2ANegotiationRecord, H2ANegotiationState, H2APolicy, H2APolicyAdoptionMode, H2ARole, H2ASignature } from "./types.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,cAAc,EACd,aAAa,EACd,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,2BAA2B,EAAE,MAAM,kBAAkB,CAAC;AAC/D,OAAO,EACL,kBAAkB,EAClB,kBAAkB,EAClB,sBAAsB,EACtB,YAAY,EACZ,SAAS,EACT,WAAW,EACZ,MAAM,YAAY,CAAC;AACpB,YAAY,EACV,WAAW,EACX,oBAAoB,EACpB,eAAe,EACf,WAAW,EACX,eAAe,EACf,oBAAoB,EACpB,mBAAmB,EACnB,OAAO,EACP,YAAY,EACb,MAAM,YAAY,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,0BAA0B,EAC1B,iBAAiB,EACjB,sBAAsB,EACtB,0BAA0B,EAC1B,kBAAkB,EACnB,MAAM,UAAU,CAAC;AAClB,YAAY,EACV,qBAAqB,EACrB,+BAA+B,EAC/B,2BAA2B,EAC3B,8BAA8B,EAC9B,aAAa,EACb,4BAA4B,EAC5B,cAAc,EACd,WAAW,EACZ,MAAM,UAAU,CAAC;AAClB,OAAO,EACL,wBAAwB,EACxB,qBAAqB,EACrB,iBAAiB,EACjB,oBAAoB,EACrB,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EACV,oBAAoB,EACpB,2BAA2B,EAC3B,mBAAmB,EACnB,wBAAwB,EACxB,0BAA0B,EAC1B,iCAAiC,EACjC,gCAAgC,EACjC,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,6BAA6B,EAC7B,8BAA8B,EAC9B,gCAAgC,EAChC,0BAA0B,EAC1B,2BAA2B,EAC5B,MAAM,0BAA0B,CAAC;AAClC,YAAY,EACV,mCAAmC,EACnC,2BAA2B,EAC3B,0BAA0B,EAC1B,2BAA2B,EAC5B,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,cAAc,EACd,aAAa,EACd,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,2BAA2B,EAAE,MAAM,kBAAkB,CAAC;AAC/D,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC3D,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAChE,YAAY,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,EACL,kBAAkB,EAClB,kBAAkB,EAClB,6BAA6B,EAC7B,kBAAkB,EACnB,MAAM,cAAc,CAAC;AACtB,YAAY,EACV,eAAe,EACf,iBAAiB,EACjB,sBAAsB,EACvB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,WAAW,EACX,WAAW,EACX,UAAU,EACV,iBAAiB,EACjB,YAAY,EACZ,SAAS,EACT,QAAQ,EACR,WAAW,EACZ,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,oBAAoB,EACpB,yBAAyB,EACzB,mBAAmB,EACpB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,iCAAiC,EACjC,mCAAmC,EACnC,wBAAwB,EACxB,6BAA6B,EAC9B,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EACV,sBAAsB,EACtB,iCAAiC,EACjC,0BAA0B,EAC1B,6BAA6B,EAC7B,uCAAuC,EACxC,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,8BAA8B,EAC9B,uBAAuB,EACvB,8BAA8B,EAC9B,uBAAuB,EACxB,MAAM,iBAAiB,CAAC;AACzB,YAAY,EACV,0BAA0B,EAC1B,oBAAoB,EACpB,uBAAuB,EACvB,2BAA2B,EAC3B,2BAA2B,EAC3B,0BAA0B,EAC1B,6BAA6B,EAC9B,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAC;AAC7D,YAAY,EAAE,gCAAgC,EAAE,MAAM,qBAAqB,CAAC;AAC5E,OAAO,EACL,kBAAkB,EAClB,mBAAmB,EACnB,kBAAkB,EAClB,sBAAsB,EACtB,yBAAyB,EACzB,YAAY,EACZ,SAAS,EACT,WAAW,EACZ,MAAM,YAAY,CAAC;AACpB,YAAY,EACV,WAAW,EACX,oBAAoB,EACpB,YAAY,EACZ,eAAe,EACf,YAAY,EACZ,gBAAgB,EAChB,WAAW,EACX,kBAAkB,EAClB,aAAa,EACb,WAAW,EACX,eAAe,EACf,UAAU,EACV,oBAAoB,EACpB,mBAAmB,EACnB,SAAS,EACT,qBAAqB,EACrB,OAAO,EACP,YAAY,EACb,MAAM,YAAY,CAAC"}

package/dist/index.js

@@ -1,4 +1,15 @@
+export { H2A_ABC_MODEL_CAPABILITIES, H2A_ABC_MODEL_IDS, H2A_ABC_MODEL_PROFILES, auditAbcModelCompatibility, getAbcModelProfile } from "./abc.js";
+export { H2A_MULTI_HUMAN_MODE_IDS, H2A_MULTI_HUMAN_MODES, getMultiHumanMode, selectMultiHumanMode } from "./multi-human.js";
+export { H2A_GOVERNANCE_BOUNDARY_ITEMS, H2A_GOVERNANCE_BOUNDARY_LAYERS, H2A_GOVERNANCE_BOUNDARY_STATUSES, classifyGovernanceBoundary, listGovernanceBoundaryItems } from "./governance-boundary.js";
 export { createEnvelope, isH2AEnvelope } from "./envelope.js";
 export { assertValidNegotiationState } from "./negotiation.js";
-export { H2A_ARTIFACT_KINDS, H2A_ENVELOPE_TYPES, H2A_NEGOTIATION_STATES, H2A_PROTOCOL, H2A_ROLES, H2A_VERSION } from "./types.js";
+export { canonicalize, computeHash } from "./canonical.js";
+export { signCanonical, verifyCanonical } from "./signature.js";
+export { appendJournalEntry, createJournalEntry, journalEntryAsCanonicalString, verifyJournalChain } from "./journal.js";
+export { isAmendment, isAuthority, isContract, isEnforcementPlan, isEngagement, isMandate, isPolicy, isSignature } from "./artifacts.js";
+export { H2A_AUTHORITY_MATRIX, assertCanSignArtifactKind, canSignArtifactKind } from "./authority.js";
+export { H2A_CONTRACTUAL_ARTIFACT_PROFILES, assertContractualArtifactInvariants, auditContractualArtifact, getContractualArtifactProfile } from "./contractual.js";
+export { H2A_ESCALATION_AUTHORITY_KINDS, H2A_ESCALATION_CHANNELS, assertEscalationTargetResolved, resolveEscalationTarget } from "./escalation.js";
+export { H2A_CANONICAL_FIXTURES } from "./fixtures-index.js";
+export { H2A_ARTIFACT_KINDS, H2A_AUTHORITY_KINDS, H2A_ENVELOPE_TYPES, H2A_NEGOTIATION_STATES, H2A_POLICY_ADOPTION_MODES, H2A_PROTOCOL, H2A_ROLES, H2A_VERSION } from "./types.js";
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,cAAc,EACd,aAAa,EACd,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,2BAA2B,EAAE,MAAM,kBAAkB,CAAC;AAC/D,OAAO,EACL,kBAAkB,EAClB,kBAAkB,EAClB,sBAAsB,EACtB,YAAY,EACZ,SAAS,EACT,WAAW,EACZ,MAAM,YAAY,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,0BAA0B,EAC1B,iBAAiB,EACjB,sBAAsB,EACtB,0BAA0B,EAC1B,kBAAkB,EACnB,MAAM,UAAU,CAAC;AAWlB,OAAO,EACL,wBAAwB,EACxB,qBAAqB,EACrB,iBAAiB,EACjB,oBAAoB,EACrB,MAAM,kBAAkB,CAAC;AAU1B,OAAO,EACL,6BAA6B,EAC7B,8BAA8B,EAC9B,gCAAgC,EAChC,0BAA0B,EAC1B,2BAA2B,EAC5B,MAAM,0BAA0B,CAAC;AAOlC,OAAO,EACL,cAAc,EACd,aAAa,EACd,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,2BAA2B,EAAE,MAAM,kBAAkB,CAAC;AAC/D,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC3D,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAEhE,OAAO,EACL,kBAAkB,EAClB,kBAAkB,EAClB,6BAA6B,EAC7B,kBAAkB,EACnB,MAAM,cAAc,CAAC;AAMtB,OAAO,EACL,WAAW,EACX,WAAW,EACX,UAAU,EACV,iBAAiB,EACjB,YAAY,EACZ,SAAS,EACT,QAAQ,EACR,WAAW,EACZ,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,oBAAoB,EACpB,yBAAyB,EACzB,mBAAmB,EACpB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,iCAAiC,EACjC,mCAAmC,EACnC,wBAAwB,EACxB,6BAA6B,EAC9B,MAAM,kBAAkB,CAAC;AAQ1B,OAAO,EACL,8BAA8B,EAC9B,uBAAuB,EACvB,8BAA8B,EAC9B,uBAAuB,EACxB,MAAM,iBAAiB,CAAC;AAUzB,OAAO,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAC;AAE7D,OAAO,EACL,kBAAkB,EAClB,mBAAmB,EACnB,kBAAkB,EAClB,sBAAsB,EACtB,yBAAyB,EACzB,YAAY,EACZ,SAAS,EACT,WAAW,EACZ,MAAM,YAAY,CAAC"}

package/dist/journal.d.ts

@@ -0,0 +1,37 @@
+import { H2A_PROTOCOL, H2A_VERSION, type H2AActorRef, type H2AEnvelopeType, type H2ASignature } from "./types.js";
+export interface H2AJournalPayload<TBody = unknown> {
+    id: string;
+    type: H2AEnvelopeType;
+    actor: H2AActorRef;
+    body: TBody;
+    createdAt: string;
+    target?: Partial<H2AActorRef>;
+    artifactKind?: string;
+    contractId?: string;
+    engagementId?: string;
+    negotiationId?: string;
+    policyIds?: string[];
+    baseArtifactHash?: string;
+    causationId?: string;
+    correlationId?: string;
+    signatures?: H2ASignature[];
+}
+export interface H2AJournalEntry<TBody = unknown> extends H2AJournalPayload<TBody> {
+    protocol: typeof H2A_PROTOCOL;
+    version: typeof H2A_VERSION;
+    sequence: number;
+    prevHash?: string;
+    contentHash: string;
+}
+export declare function createJournalEntry<TBody>(payload: H2AJournalPayload<TBody>): H2AJournalEntry<TBody>;
+export declare function appendJournalEntry<TBody>(previous: H2AJournalEntry<unknown>, payload: H2AJournalPayload<TBody>): H2AJournalEntry<TBody>;
+export type H2AJournalVerification = {
+    ok: true;
+} | {
+    ok: false;
+    index: number;
+    reason: string;
+};
+export declare function verifyJournalChain(entries: ReadonlyArray<H2AJournalEntry<unknown>>): H2AJournalVerification;
+export declare function journalEntryAsCanonicalString(entry: H2AJournalEntry<unknown>): string;
+//# sourceMappingURL=journal.d.ts.map

package/dist/journal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"journal.d.ts","sourceRoot":"","sources":["../src/journal.ts"],"names":[],"mappings":"AACA,OAAO,EACL,YAAY,EACZ,WAAW,EACX,KAAK,WAAW,EAChB,KAAK,eAAe,EACpB,KAAK,YAAY,EAClB,MAAM,YAAY,CAAC;AAEpB,MAAM,WAAW,iBAAiB,CAAC,KAAK,GAAG,OAAO;IAChD,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,eAAe,CAAC;IACtB,KAAK,EAAE,WAAW,CAAC;IACnB,IAAI,EAAE,KAAK,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;IAC9B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,YAAY,EAAE,CAAC;CAC7B;AAED,MAAM,WAAW,eAAe,CAAC,KAAK,GAAG,OAAO,CAAE,SAAQ,iBAAiB,CAAC,KAAK,CAAC;IAChF,QAAQ,EAAE,OAAO,YAAY,CAAC;IAC9B,OAAO,EAAE,OAAO,WAAW,CAAC;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;CACrB;AAmBD,wBAAgB,kBAAkB,CAAC,KAAK,EACtC,OAAO,EAAE,iBAAiB,CAAC,KAAK,CAAC,GAChC,eAAe,CAAC,KAAK,CAAC,CASxB;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EACtC,QAAQ,EAAE,eAAe,CAAC,OAAO,CAAC,EAClC,OAAO,EAAE,iBAAiB,CAAC,KAAK,CAAC,GAChC,eAAe,CAAC,KAAK,CAAC,CASxB;AAED,MAAM,MAAM,sBAAsB,GAC9B;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GACZ;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAEjD,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,aAAa,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,GAC/C,sBAAsB,CA4CxB;AAED,wBAAgB,6BAA6B,CAC3C,KAAK,EAAE,eAAe,CAAC,OAAO,CAAC,GAC9B,MAAM,CAER"}

package/dist/journal.js

@@ -0,0 +1,73 @@
+import { canonicalize, computeHash } from "./canonical.js";
+import { H2A_PROTOCOL, H2A_VERSION } from "./types.js";
+function stripFrame(entry) {
+    const { protocol, version, sequence, prevHash, contentHash, ...payload } = entry;
+    void protocol;
+    void version;
+    void sequence;
+    void prevHash;
+    void contentHash;
+    return payload;
+}
+export function createJournalEntry(payload) {
+    const contentHash = computeHash(payload);
+    return {
+        protocol: H2A_PROTOCOL,
+        version: H2A_VERSION,
+        sequence: 0,
+        contentHash,
+        ...payload
+    };
+}
+export function appendJournalEntry(previous, payload) {
+    return {
+        protocol: H2A_PROTOCOL,
+        version: H2A_VERSION,
+        sequence: previous.sequence + 1,
+        prevHash: previous.contentHash,
+        contentHash: computeHash(payload),
+        ...payload
+    };
+}
+export function verifyJournalChain(entries) {
+    let prev;
+    for (let i = 0; i < entries.length; i++) {
+        const entry = entries[i];
+        if (entry.protocol !== H2A_PROTOCOL) {
+            return { ok: false, index: i, reason: `bad protocol: ${entry.protocol}` };
+        }
+        if (entry.version !== H2A_VERSION) {
+            return { ok: false, index: i, reason: `bad version: ${entry.version}` };
+        }
+        const expectedSequence = prev ? prev.sequence + 1 : 0;
+        if (entry.sequence !== expectedSequence) {
+            return {
+                ok: false,
+                index: i,
+                reason: `bad sequence: expected ${expectedSequence}, got ${entry.sequence}`
+            };
+        }
+        const expectedPrev = prev ? prev.contentHash : undefined;
+        if (entry.prevHash !== expectedPrev) {
+            return {
+                ok: false,
+                index: i,
+                reason: `bad prevHash: expected ${expectedPrev ?? "<none>"}, got ${entry.prevHash ?? "<none>"}`
+            };
+        }
+        const expectedHash = computeHash(stripFrame(entry));
+        if (entry.contentHash !== expectedHash) {
+            return {
+                ok: false,
+                index: i,
+                reason: `bad contentHash: expected ${expectedHash}, got ${entry.contentHash}`
+            };
+        }
+        prev = entry;
+    }
+    return { ok: true };
+}
+export function journalEntryAsCanonicalString(entry) {
+    return canonicalize(entry);
+}
+//# sourceMappingURL=journal.js.map

package/dist/journal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"journal.js","sourceRoot":"","sources":["../src/journal.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC3D,OAAO,EACL,YAAY,EACZ,WAAW,EAIZ,MAAM,YAAY,CAAC;AA4BpB,SAAS,UAAU,CAAQ,KAA6B;IACtD,MAAM,EACJ,QAAQ,EACR,OAAO,EACP,QAAQ,EACR,QAAQ,EACR,WAAW,EACX,GAAG,OAAO,EACX,GAAG,KAAK,CAAC;IACV,KAAK,QAAQ,CAAC;IACd,KAAK,OAAO,CAAC;IACb,KAAK,QAAQ,CAAC;IACd,KAAK,QAAQ,CAAC;IACd,KAAK,WAAW,CAAC;IACjB,OAAO,OAAmC,CAAC;AAC7C,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,OAAiC;IAEjC,MAAM,WAAW,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;IACzC,OAAO;QACL,QAAQ,EAAE,YAAY;QACtB,OAAO,EAAE,WAAW;QACpB,QAAQ,EAAE,CAAC;QACX,WAAW;QACX,GAAG,OAAO;KACX,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,QAAkC,EAClC,OAAiC;IAEjC,OAAO;QACL,QAAQ,EAAE,YAAY;QACtB,OAAO,EAAE,WAAW;QACpB,QAAQ,EAAE,QAAQ,CAAC,QAAQ,GAAG,CAAC;QAC/B,QAAQ,EAAE,QAAQ,CAAC,WAAW;QAC9B,WAAW,EAAE,WAAW,CAAC,OAAO,CAAC;QACjC,GAAG,OAAO;KACX,CAAC;AACJ,CAAC;AAMD,MAAM,UAAU,kBAAkB,CAChC,OAAgD;IAEhD,IAAI,IAA0C,CAAC;IAE/C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACxC,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QAEzB,IAAI,KAAK,CAAC,QAAQ,KAAK,YAAY,EAAE,CAAC;YACpC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,iBAAiB,KAAK,CAAC,QAAQ,EAAE,EAAE,CAAC;QAC5E,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,KAAK,WAAW,EAAE,CAAC;YAClC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,gBAAgB,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;QAC1E,CAAC;QAED,MAAM,gBAAgB,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACtD,IAAI,KAAK,CAAC,QAAQ,KAAK,gBAAgB,EAAE,CAAC;YACxC,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,CAAC;gBACR,MAAM,EAAE,0BAA0B,gBAAgB,SAAS,KAAK,CAAC,QAAQ,EAAE;aAC5E,CAAC;QACJ,CAAC;QAED,MAAM,YAAY,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;QACzD,IAAI,KAAK,CAAC,QAAQ,KAAK,YAAY,EAAE,CAAC;YACpC,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,CAAC;gBACR,MAAM,EAAE,0BAA0B,YAAY,IAAI,QAAQ,SAAS,KAAK,CAAC,QAAQ,IAAI,QAAQ,EAAE;aAChG,CAAC;QACJ,CAAC;QAED,MAAM,YAAY,GAAG,WAAW,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;QACpD,IAAI,KAAK,CAAC,WAAW,KAAK,YAAY,EAAE,CAAC;YACvC,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,CAAC;gBACR,MAAM,EAAE,6BAA6B,YAAY,SAAS,KAAK,CAAC,WAAW,EAAE;aAC9E,CAAC;QACJ,CAAC;QAED,IAAI,GAAG,KAAK,CAAC;IACf,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC;AAED,MAAM,UAAU,6BAA6B,CAC3C,KAA+B;IAE/B,OAAO,YAAY,CAAC,KAAK,CAAC,CAAC;AAC7B,CAAC"}