@sentropic/h2a 0.1.0 → 0.1.7

package/dist/artifacts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifacts.js","sourceRoot":"","sources":["../src/artifacts.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,kBAAkB,EAClB,mBAAmB,EACnB,yBAAyB,EACzB,SAAS,EAWV,MAAM,YAAY,CAAC;AAEpB,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,CAAC;AACrD,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC;AACnF,CAAC;AAED,SAAS,SAAS,CAAI,KAAc,EAAE,KAAqC;IACzE,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;AACtE,CAAC;AAED,SAAS,MAAM,CAAC,KAAc;IAC5B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,SAAS,CAAC,QAAQ,CAAC,KAAgB,CAAC,CAAC;AAC3E,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,kBAAkB,CAAC,QAAQ,CAAC,KAAwB,CAAC,CAAC;AAC5F,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,KAAc;IACxC,OAAO,CACL,QAAQ,CAAC,KAAK,CAAC;QACf,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ;QAC5B,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ;QAC7B,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,CAChC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,KAAc;IACvC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACnC,OAAO,CACL,KAAK,CAAC,IAAI,KAAK,UAAU;QACzB,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ;QAC5B,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC;QAC5B,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ;QAC/B,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;QAC5B,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC;QAC7B,aAAa,CAAC,KAAK,CAAC,WAAW,CAAC;QAChC,SAAS,CAAC,KAAK,CAAC,UAAU,EAAE,WAAW,CAAC,CACzC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,KAAc;IACrC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACnC,OAAO,CACL,KAAK,CAAC,IAAI,KAAK,QAAQ;QACvB,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ;QAC5B,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ;QAC/B,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;QAC9B,OAAO,KAAK,CAAC,eAAe,KAAK,QAAQ;QACzC,OAAO,KAAK,CAAC,YAAY,KAAK,QAAQ;QACtC,yBAAyB,CAAC,QAAQ,CAChC,KAAK,CAAC,YAA0D,CACjE,CACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,KAAc;IACzC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACnC,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY;QAAE,OAAO,KAAK,CAAC;IAC9C,IAAI,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC/C,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAClD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC;QAAE,OAAO,KAAK,CAAC;IACrD,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;QACzC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;YAAE,OAAO,KAAK,CAAC;QACrC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC;QACxC,IAAI,OAAO,OAAO,CAAC,QAAQ,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;IACzD,CAAC;IACD,OAAO,CACL,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC;QAC7B,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC;QAC7B,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,eAAe,CAAC,CACrC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,KAAc;IACxC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACnC,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW;QAAE,OAAO,KAAK,CAAC;IAC7C,IAAI,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC/C,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,UAAU,CAAC;QAAE,OAAO,KAAK,CAAC;IACpD,IAAI,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACrD,IAAI,OAAO,KAAK,CAAC,gBAAgB,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC7D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;QAAE,OAAO,KAAK,CAAC;IAChD,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QACnC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,OAAO,KAAK,CAAC;QACpC,IAAI,OAAO,MAAM,CAAC,EAAE,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QAChD,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;IACpD,CAAC;IACD,OAAO,SAAS,CAAC,KAAK,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;AAClD,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,KAAc;IACtC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACnC,OAAO,CACL,KAAK,CAAC,IAAI,KAAK,SAAS;QACxB,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ;QAC5B,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ;QAClC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC;QAClB,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ;QAC/B,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,CAC5B,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,KAAc;IACxC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACnC,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW;QAAE,OAAO,KAAK,CAAC;IAC7C,IAAI,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC/C,IAAI,OAAO,KAAK,CAAC,aAAa,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC1D,IACE,CAAC,mBAAmB,CAAC,QAAQ,CAC3B,KAAK,CAAC,aAAqD,CAC5D,EACD,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC;QAAE,OAAO,KAAK,CAAC;IAChD,IAAI,KAAK,CAAC,aAAa,KAAK,QAAQ,EAAE,CAAC;QACrC,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QACtD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC,SAAS,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QAC5E,IAAI,KAAK,CAAC,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;IAC3D,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAc;IAC9C,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACnC,IAAI,KAAK,CAAC,IAAI,KAAK,kBAAkB;QAAE,OAAO,KAAK,CAAC;IACpD,IAAI,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC/C,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAClD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC;QAAE,OAAO,KAAK,CAAC;IACjD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC;QAAE,OAAO,KAAK,CAAC;IACpD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC;QAAE,OAAO,KAAK,CAAC;IACjD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/authority.d.ts

@@ -0,0 +1,21 @@
+import { type H2AArtifactKind, type H2ARole } from "./types.js";
+/**
+ * V1 signing authority matrix (DEC-035).
+ *
+ * Maps each canonical {@link H2AArtifactKind} to the set of roles allowed
+ * to produce a binding signature on that artifact kind. This is the
+ * executable counterpart of DEC-004 (governance) and DEC-018/DEC-023
+ * (CONTRACT vs ENFORCEMENT_PLAN ownership).
+ *
+ * `MANDATAIRE` deliberately appears only for `SIGNATURE` — DEC-005 and
+ * DEC-024 keep the mandataire as a *presenter* of decisions, not a binder.
+ * The `SIGNATURE` row admits every role because that kind is the audit
+ * trace of a signing act produced by whoever signed.
+ */
+export declare const H2A_AUTHORITY_MATRIX: Readonly<Record<H2AArtifactKind, {
+    roles: readonly H2ARole[];
+    notes?: string;
+}>>;
+export declare function canSignArtifactKind(role: H2ARole, kind: H2AArtifactKind): boolean;
+export declare function assertCanSignArtifactKind(role: H2ARole, kind: H2AArtifactKind): void;
+//# sourceMappingURL=authority.d.ts.map

package/dist/authority.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authority.d.ts","sourceRoot":"","sources":["../src/authority.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,eAAe,EACpB,KAAK,OAAO,EACb,MAAM,YAAY,CAAC;AAEpB;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,oBAAoB,EAAE,QAAQ,CACzC,MAAM,CAAC,eAAe,EAAE;IAAE,KAAK,EAAE,SAAS,OAAO,EAAE,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CA+CtE,CAAC;AAUH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAIjF;AAED,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,eAAe,GAAG,IAAI,CAOpF"}

package/dist/authority.js

@@ -0,0 +1,73 @@
+import { H2A_ARTIFACT_KINDS, H2A_ROLES } from "./types.js";
+/**
+ * V1 signing authority matrix (DEC-035).
+ *
+ * Maps each canonical {@link H2AArtifactKind} to the set of roles allowed
+ * to produce a binding signature on that artifact kind. This is the
+ * executable counterpart of DEC-004 (governance) and DEC-018/DEC-023
+ * (CONTRACT vs ENFORCEMENT_PLAN ownership).
+ *
+ * `MANDATAIRE` deliberately appears only for `SIGNATURE` — DEC-005 and
+ * DEC-024 keep the mandataire as a *presenter* of decisions, not a binder.
+ * The `SIGNATURE` row admits every role because that kind is the audit
+ * trace of a signing act produced by whoever signed.
+ */
+export const H2A_AUTHORITY_MATRIX = Object.freeze({
+    CONTRACT: {
+        roles: Object.freeze(["PRINCIPAL", "EXECUTIF", "CONDUCTOR"]),
+        notes: "CONTRACT is the binding normative container; PRINCIPAL/EXECUTIF/CONDUCTOR are the only signers (DEC-018)."
+    },
+    POLICY: {
+        roles: Object.freeze(["PRINCIPAL", "EXECUTIF", "CONTROL"]),
+        notes: "POLICY is adopted by PRINCIPAL/EXECUTIF or imposed by CONTROL (DEC-016, DEC-023)."
+    },
+    ENGAGEMENT: {
+        roles: Object.freeze(["PRINCIPAL", "EXECUTIF", "CONDUCTOR"]),
+        notes: "ENGAGEMENT charter signing follows the contract chain — PRINCIPAL/EXECUTIF/CONDUCTOR (DEC-003)."
+    },
+    AMENDMENT: {
+        roles: Object.freeze([
+            "PRINCIPAL",
+            "EXECUTIF",
+            "CONDUCTOR",
+            "CONTROL"
+        ]),
+        notes: "Amendments can come from the contract chain (PRINCIPAL/EXECUTIF/CONDUCTOR) or be imposed by CONTROL (DEC-004)."
+    },
+    MANDATE: {
+        roles: Object.freeze(["PRINCIPAL", "EXECUTIF"]),
+        notes: "Mandates are issued by the executive function (PRINCIPAL or EXECUTIF) — DEC-021."
+    },
+    AUTHORITY: {
+        roles: Object.freeze(["PRINCIPAL", "EXECUTIF"]),
+        notes: "Authority records (instance/quorum) are constituted by the executive function (DEC-021)."
+    },
+    SIGNATURE: {
+        roles: Object.freeze([...H2A_ROLES]),
+        notes: "SIGNATURE is the audit trace of a signing act and is admissible from any role that can sign anything."
+    },
+    ENFORCEMENT_PLAN: {
+        roles: Object.freeze(["PRINCIPAL", "EXECUTIF", "CONTROL"]),
+        notes: "Enforcement plans are produced by CONTROL under PRINCIPAL/EXECUTIF authority (DEC-023)."
+    }
+});
+// Sanity check: every canonical kind has an entry. Catches future drift if
+// H2A_ARTIFACT_KINDS grows but the matrix is not updated in lockstep.
+for (const kind of H2A_ARTIFACT_KINDS) {
+    if (!(kind in H2A_AUTHORITY_MATRIX)) {
+        throw new Error(`H2A_AUTHORITY_MATRIX is missing an entry for kind ${kind}`);
+    }
+}
+export function canSignArtifactKind(role, kind) {
+    const entry = H2A_AUTHORITY_MATRIX[kind];
+    if (!entry)
+        return false;
+    return entry.roles.includes(role);
+}
+export function assertCanSignArtifactKind(role, kind) {
+    if (!canSignArtifactKind(role, kind)) {
+        const allowed = H2A_AUTHORITY_MATRIX[kind]?.roles ?? [];
+        throw new Error(`H2A authority: role ${role} is not allowed to sign artifact kind ${kind} (allowed: [${allowed.join(",")}])`);
+    }
+}
+//# sourceMappingURL=authority.js.map

package/dist/authority.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authority.js","sourceRoot":"","sources":["../src/authority.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,kBAAkB,EAClB,SAAS,EAGV,MAAM,YAAY,CAAC;AAEpB;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAE7B,MAAM,CAAC,MAAM,CAAC;IAChB,QAAQ,EAAE;QACR,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,UAAU,EAAE,WAAW,CAAC,CAAuB;QAClF,KAAK,EACH,2GAA2G;KAC9G;IACD,MAAM,EAAE;QACN,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,UAAU,EAAE,SAAS,CAAC,CAAuB;QAChF,KAAK,EACH,mFAAmF;KACtF;IACD,UAAU,EAAE;QACV,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,UAAU,EAAE,WAAW,CAAC,CAAuB;QAClF,KAAK,EACH,iGAAiG;KACpG;IACD,SAAS,EAAE;QACT,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC;YACnB,WAAW;YACX,UAAU;YACV,WAAW;YACX,SAAS;SACV,CAAuB;QACxB,KAAK,EACH,gHAAgH;KACnH;IACD,OAAO,EAAE;QACP,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,UAAU,CAAC,CAAuB;QACrE,KAAK,EACH,kFAAkF;KACrF;IACD,SAAS,EAAE;QACT,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,UAAU,CAAC,CAAuB;QACrE,KAAK,EACH,0FAA0F;KAC7F;IACD,SAAS,EAAE;QACT,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC,CAAuB;QAC1D,KAAK,EACH,uGAAuG;KAC1G;IACD,gBAAgB,EAAE;QAChB,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,UAAU,EAAE,SAAS,CAAC,CAAuB;QAChF,KAAK,EACH,yFAAyF;KAC5F;CACF,CAAC,CAAC;AAEH,2EAA2E;AAC3E,sEAAsE;AACtE,KAAK,MAAM,IAAI,IAAI,kBAAkB,EAAE,CAAC;IACtC,IAAI,CAAC,CAAC,IAAI,IAAI,oBAAoB,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,qDAAqD,IAAI,EAAE,CAAC,CAAC;IAC/E,CAAC;AACH,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,IAAa,EAAE,IAAqB;IACtE,MAAM,KAAK,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;IACzC,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,OAAO,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,IAAa,EAAE,IAAqB;IAC5E,IAAI,CAAC,mBAAmB,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC;QACrC,MAAM,OAAO,GAAG,oBAAoB,CAAC,IAAI,CAAC,EAAE,KAAK,IAAI,EAAE,CAAC;QACxD,MAAM,IAAI,KAAK,CACb,uBAAuB,IAAI,yCAAyC,IAAI,eAAe,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAC7G,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/canonical.d.ts

@@ -0,0 +1,3 @@
+export declare function canonicalize(value: unknown): string;
+export declare function computeHash(value: unknown): string;
+//# sourceMappingURL=canonical.d.ts.map

package/dist/canonical.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"canonical.d.ts","sourceRoot":"","sources":["../src/canonical.ts"],"names":[],"mappings":"AA8CA,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAEnD;AAED,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAIlD"}

package/dist/canonical.js

@@ -0,0 +1,38 @@
+import { createHash } from "node:crypto";
+function toCanonical(value) {
+    if (value === null) {
+        return null;
+    }
+    if (Array.isArray(value)) {
+        return value.map((entry) => toCanonical(entry));
+    }
+    if (typeof value === "object") {
+        const source = value;
+        const sortedKeys = Object.keys(source)
+            .filter((key) => source[key] !== undefined)
+            .sort();
+        const out = {};
+        for (const key of sortedKeys) {
+            out[key] = toCanonical(source[key]);
+        }
+        return out;
+    }
+    if (typeof value === "number" && !Number.isFinite(value)) {
+        throw new Error(`canonicalize: non-finite numbers are not supported (${value})`);
+    }
+    if (typeof value === "string" ||
+        typeof value === "number" ||
+        typeof value === "boolean") {
+        return value;
+    }
+    throw new Error(`canonicalize: unsupported value type (${typeof value})`);
+}
+export function canonicalize(value) {
+    return JSON.stringify(toCanonical(value));
+}
+export function computeHash(value) {
+    const canonical = canonicalize(value);
+    const digest = createHash("sha256").update(canonical, "utf8").digest("hex");
+    return `sha256:${digest}`;
+}
+//# sourceMappingURL=canonical.js.map

package/dist/canonical.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"canonical.js","sourceRoot":"","sources":["../src/canonical.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAUzC,SAAS,WAAW,CAAC,KAAc;IACjC,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACnB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC;IAClD,CAAC;IAED,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,KAAgC,CAAC;QAChD,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;aACnC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,SAAS,CAAC;aAC1C,IAAI,EAAE,CAAC;QACV,MAAM,GAAG,GAAmC,EAAE,CAAC;QAC/C,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;YAC7B,GAAG,CAAC,GAAG,CAAC,GAAG,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QACtC,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACzD,MAAM,IAAI,KAAK,CAAC,uDAAuD,KAAK,GAAG,CAAC,CAAC;IACnF,CAAC;IAED,IACE,OAAO,KAAK,KAAK,QAAQ;QACzB,OAAO,KAAK,KAAK,QAAQ;QACzB,OAAO,KAAK,KAAK,SAAS,EAC1B,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,yCAAyC,OAAO,KAAK,GAAG,CAAC,CAAC;AAC5E,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,KAAc;IACzC,OAAO,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC;AAC5C,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,KAAc;IACxC,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IACtC,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5E,OAAO,UAAU,MAAM,EAAE,CAAC;AAC5B,CAAC"}

package/dist/contractual.d.ts

@@ -0,0 +1,52 @@
+import type { H2AContract, H2AEngagement, H2APolicy } from "./types.js";
+export type H2AContractualArtifactKind = "CONTRACT" | "POLICY" | "ENGAGEMENT";
+export type H2AContractualArtifact = H2AContract | H2APolicy | H2AEngagement;
+export type H2AContractualArtifactProfile = "normative-container" | "durable-rule" | "operational-executable";
+export interface H2AContractualArtifactProfileDescriptor {
+    readonly kind: H2AContractualArtifactKind;
+    readonly profile: H2AContractualArtifactProfile;
+    readonly durable: boolean;
+    readonly executable: boolean;
+    readonly canContainPolicies: boolean;
+    readonly canReferencePolicies: boolean;
+    readonly canInstantiateEngagements: boolean;
+}
+export interface H2AContractualArtifactAuditResult {
+    readonly ok: boolean;
+    readonly kind?: string;
+    readonly profile?: H2AContractualArtifactProfile;
+    readonly issues: readonly string[];
+}
+export declare const H2A_CONTRACTUAL_ARTIFACT_PROFILES: Readonly<{
+    readonly CONTRACT: Readonly<{
+        kind: "CONTRACT";
+        profile: "normative-container";
+        durable: true;
+        executable: false;
+        canContainPolicies: true;
+        canReferencePolicies: true;
+        canInstantiateEngagements: true;
+    }>;
+    readonly POLICY: Readonly<{
+        kind: "POLICY";
+        profile: "durable-rule";
+        durable: true;
+        executable: false;
+        canContainPolicies: false;
+        canReferencePolicies: false;
+        canInstantiateEngagements: false;
+    }>;
+    readonly ENGAGEMENT: Readonly<{
+        kind: "ENGAGEMENT";
+        profile: "operational-executable";
+        durable: false;
+        executable: true;
+        canContainPolicies: false;
+        canReferencePolicies: true;
+        canInstantiateEngagements: false;
+    }>;
+}>;
+export declare function getContractualArtifactProfile(kind: string): H2AContractualArtifactProfileDescriptor | undefined;
+export declare function auditContractualArtifact(value: unknown): H2AContractualArtifactAuditResult;
+export declare function assertContractualArtifactInvariants(value: unknown): asserts value is H2AContractualArtifact;
+//# sourceMappingURL=contractual.d.ts.map

package/dist/contractual.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contractual.d.ts","sourceRoot":"","sources":["../src/contractual.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EACV,WAAW,EACX,aAAa,EACb,SAAS,EACV,MAAM,YAAY,CAAC;AAEpB,MAAM,MAAM,0BAA0B,GAAG,UAAU,GAAG,QAAQ,GAAG,YAAY,CAAC;AAE9E,MAAM,MAAM,sBAAsB,GAC9B,WAAW,GACX,SAAS,GACT,aAAa,CAAC;AAElB,MAAM,MAAM,6BAA6B,GACrC,qBAAqB,GACrB,cAAc,GACd,wBAAwB,CAAC;AAE7B,MAAM,WAAW,uCAAuC;IACtD,QAAQ,CAAC,IAAI,EAAE,0BAA0B,CAAC;IAC1C,QAAQ,CAAC,OAAO,EAAE,6BAA6B,CAAC;IAChD,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,kBAAkB,EAAE,OAAO,CAAC;IACrC,QAAQ,CAAC,oBAAoB,EAAE,OAAO,CAAC;IACvC,QAAQ,CAAC,yBAAyB,EAAE,OAAO,CAAC;CAC7C;AAED,MAAM,WAAW,iCAAiC;IAChD,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,CAAC,EAAE,6BAA6B,CAAC;IACjD,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;CACpC;AAED,eAAO,MAAM,iCAAiC;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA+B5C,CAAC;AA2DH,wBAAgB,6BAA6B,CAC3C,IAAI,EAAE,MAAM,GACX,uCAAuC,GAAG,SAAS,CAOrD;AAED,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,OAAO,GACb,iCAAiC,CAiDnC;AAED,wBAAgB,mCAAmC,CACjD,KAAK,EAAE,OAAO,GACb,OAAO,CAAC,KAAK,IAAI,sBAAsB,CAOzC"}

package/dist/contractual.js

@@ -0,0 +1,126 @@
+import { isContract, isEngagement, isPolicy } from "./artifacts.js";
+export const H2A_CONTRACTUAL_ARTIFACT_PROFILES = Object.freeze({
+    CONTRACT: Object.freeze({
+        kind: "CONTRACT",
+        profile: "normative-container",
+        durable: true,
+        executable: false,
+        canContainPolicies: true,
+        canReferencePolicies: true,
+        canInstantiateEngagements: true
+    }),
+    POLICY: Object.freeze({
+        kind: "POLICY",
+        profile: "durable-rule",
+        durable: true,
+        executable: false,
+        canContainPolicies: false,
+        canReferencePolicies: false,
+        canInstantiateEngagements: false
+    }),
+    ENGAGEMENT: Object.freeze({
+        kind: "ENGAGEMENT",
+        profile: "operational-executable",
+        durable: false,
+        executable: true,
+        canContainPolicies: false,
+        canReferencePolicies: true,
+        canInstantiateEngagements: false
+    })
+});
+const CONTRACTUAL_KINDS = Object.keys(H2A_CONTRACTUAL_ARTIFACT_PROFILES);
+const POLICY_FIELDS = [
+    "rule",
+    "sourceAuthority",
+    "adoptionMode",
+    "parameters"
+];
+const CONTRACT_FIELDS = [
+    "parties",
+    "clauses",
+    "engagements",
+    "signatures",
+    "obligations",
+    "rights"
+];
+const ENGAGEMENT_FIELDS = [
+    "charter",
+    "roleBindings",
+    "controls",
+    "successCriteria",
+    "contractId",
+    "amendments",
+    "status"
+];
+function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function ownFields(value, fields) {
+    return fields.filter((field) => Object.prototype.hasOwnProperty.call(value, field));
+}
+function addCollapseIssue(issues, kind, collapsedKind, fields, value) {
+    const present = ownFields(value, fields);
+    if (present.length === 0)
+        return;
+    issues.push(`${kind} must not carry ${collapsedKind} fields: ${present.join(", ")}`);
+}
+export function getContractualArtifactProfile(kind) {
+    if (!CONTRACTUAL_KINDS.includes(kind)) {
+        return undefined;
+    }
+    return H2A_CONTRACTUAL_ARTIFACT_PROFILES[kind];
+}
+export function auditContractualArtifact(value) {
+    if (!isRecord(value)) {
+        return { ok: false, issues: ["value is not an object"] };
+    }
+    const kind = typeof value.kind === "string" ? value.kind : undefined;
+    if (!kind) {
+        return { ok: false, issues: ["value.kind is required"] };
+    }
+    const descriptor = getContractualArtifactProfile(kind);
+    if (!descriptor) {
+        return {
+            ok: false,
+            kind,
+            issues: [
+                `${kind} is not a contractual artifact kind (expected CONTRACT, POLICY, ENGAGEMENT)`
+            ]
+        };
+    }
+    const issues = [];
+    if (descriptor.kind === "CONTRACT" && !isContract(value)) {
+        issues.push("CONTRACT is not structurally valid");
+    }
+    if (descriptor.kind === "POLICY" && !isPolicy(value)) {
+        issues.push("POLICY is not structurally valid");
+    }
+    if (descriptor.kind === "ENGAGEMENT" && !isEngagement(value)) {
+        issues.push("ENGAGEMENT is not structurally valid");
+    }
+    if (descriptor.kind === "CONTRACT") {
+        addCollapseIssue(issues, "CONTRACT", "POLICY", POLICY_FIELDS, value);
+        addCollapseIssue(issues, "CONTRACT", "ENGAGEMENT", ENGAGEMENT_FIELDS, value);
+    }
+    else if (descriptor.kind === "POLICY") {
+        addCollapseIssue(issues, "POLICY", "CONTRACT", CONTRACT_FIELDS, value);
+        addCollapseIssue(issues, "POLICY", "ENGAGEMENT", ENGAGEMENT_FIELDS, value);
+    }
+    else {
+        addCollapseIssue(issues, "ENGAGEMENT", "CONTRACT", CONTRACT_FIELDS, value);
+        addCollapseIssue(issues, "ENGAGEMENT", "POLICY", POLICY_FIELDS, value);
+    }
+    return {
+        ok: issues.length === 0,
+        kind: descriptor.kind,
+        profile: descriptor.profile,
+        issues
+    };
+}
+export function assertContractualArtifactInvariants(value) {
+    const result = auditContractualArtifact(value);
+    if (!result.ok) {
+        throw new Error(`Contractual artifact invariant violation: ${result.issues.join("; ")}`);
+    }
+}
+//# sourceMappingURL=contractual.js.map

package/dist/contractual.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"contractual.js","sourceRoot":"","sources":["../src/contractual.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,UAAU,EACV,YAAY,EACZ,QAAQ,EACT,MAAM,gBAAgB,CAAC;AAoCxB,MAAM,CAAC,MAAM,iCAAiC,GAAG,MAAM,CAAC,MAAM,CAAC;IAC7D,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC;QACtB,IAAI,EAAE,UAAU;QAChB,OAAO,EAAE,qBAAqB;QAC9B,OAAO,EAAE,IAAI;QACb,UAAU,EAAE,KAAK;QACjB,kBAAkB,EAAE,IAAI;QACxB,oBAAoB,EAAE,IAAI;QAC1B,yBAAyB,EAAE,IAAI;KAChC,CAAC;IACF,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC;QACpB,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,cAAc;QACvB,OAAO,EAAE,IAAI;QACb,UAAU,EAAE,KAAK;QACjB,kBAAkB,EAAE,KAAK;QACzB,oBAAoB,EAAE,KAAK;QAC3B,yBAAyB,EAAE,KAAK;KACjC,CAAC;IACF,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC;QACxB,IAAI,EAAE,YAAY;QAClB,OAAO,EAAE,wBAAwB;QACjC,OAAO,EAAE,KAAK;QACd,UAAU,EAAE,IAAI;QAChB,kBAAkB,EAAE,KAAK;QACzB,oBAAoB,EAAE,IAAI;QAC1B,yBAAyB,EAAE,KAAK;KACjC,CAAC;CAIH,CAAC,CAAC;AAEH,MAAM,iBAAiB,GAAG,MAAM,CAAC,IAAI,CACnC,iCAAiC,CACF,CAAC;AAElC,MAAM,aAAa,GAAG;IACpB,MAAM;IACN,iBAAiB;IACjB,cAAc;IACd,YAAY;CACJ,CAAC;AAEX,MAAM,eAAe,GAAG;IACtB,SAAS;IACT,SAAS;IACT,aAAa;IACb,YAAY;IACZ,aAAa;IACb,QAAQ;CACA,CAAC;AAEX,MAAM,iBAAiB,GAAG;IACxB,SAAS;IACT,cAAc;IACd,UAAU;IACV,iBAAiB;IACjB,YAAY;IACZ,YAAY;IACZ,QAAQ;CACA,CAAC;AAEX,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,SAAS,CAChB,KAA8B,EAC9B,MAAyB;IAEzB,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAC7B,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,CACnD,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CACvB,MAAgB,EAChB,IAAgC,EAChC,aAAyC,EACzC,MAAyB,EACzB,KAA8B;IAE9B,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACzC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IACjC,MAAM,CAAC,IAAI,CACT,GAAG,IAAI,mBAAmB,aAAa,YAAY,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACxE,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,6BAA6B,CAC3C,IAAY;IAEZ,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,IAAkC,CAAC,EAAE,CAAC;QACpE,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,iCAAiC,CACtC,IAAkC,CACnC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,KAAc;IAEd,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,wBAAwB,CAAC,EAAE,CAAC;IAC3D,CAAC;IAED,MAAM,IAAI,GAAG,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IACrE,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,wBAAwB,CAAC,EAAE,CAAC;IAC3D,CAAC;IAED,MAAM,UAAU,GAAG,6BAA6B,CAAC,IAAI,CAAC,CAAC;IACvD,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI;YACJ,MAAM,EAAE;gBACN,GAAG,IAAI,6EAA6E;aACrF;SACF,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,UAAU,CAAC,IAAI,KAAK,UAAU,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QACzD,MAAM,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC;IACpD,CAAC;IACD,IAAI,UAAU,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrD,MAAM,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;IAClD,CAAC;IACD,IAAI,UAAU,CAAC,IAAI,KAAK,YAAY,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;QAC7D,MAAM,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC;IACtD,CAAC;IAED,IAAI,UAAU,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QACnC,gBAAgB,CAAC,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,aAAa,EAAE,KAAK,CAAC,CAAC;QACrE,gBAAgB,CAAC,MAAM,EAAE,UAAU,EAAE,YAAY,EAAE,iBAAiB,EAAE,KAAK,CAAC,CAAC;IAC/E,CAAC;SAAM,IAAI,UAAU,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QACxC,gBAAgB,CAAC,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,eAAe,EAAE,KAAK,CAAC,CAAC;QACvE,gBAAgB,CAAC,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,iBAAiB,EAAE,KAAK,CAAC,CAAC;IAC7E,CAAC;SAAM,CAAC;QACN,gBAAgB,CAAC,MAAM,EAAE,YAAY,EAAE,UAAU,EAAE,eAAe,EAAE,KAAK,CAAC,CAAC;QAC3E,gBAAgB,CAAC,MAAM,EAAE,YAAY,EAAE,QAAQ,EAAE,aAAa,EAAE,KAAK,CAAC,CAAC;IACzE,CAAC;IAED,OAAO;QACL,EAAE,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;QACvB,IAAI,EAAE,UAAU,CAAC,IAAI;QACrB,OAAO,EAAE,UAAU,CAAC,OAAO;QAC3B,MAAM;KACP,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mCAAmC,CACjD,KAAc;IAEd,MAAM,MAAM,GAAG,wBAAwB,CAAC,KAAK,CAAC,CAAC;IAC/C,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CACb,6CAA6C,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACxE,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/escalation.d.ts

@@ -0,0 +1,40 @@
+import type { H2AEnforcementPlan } from "./types.js";
+export declare const H2A_ESCALATION_CHANNELS: readonly ["advise", "decide", "alert"];
+export declare const H2A_ESCALATION_AUTHORITY_KINDS: readonly ["PRINCIPAL", "EXECUTIF", "QUORUM", "CONTROL", "EXTERNAL_AUTHORITY", "RECOURSE"];
+export type H2AEscalationChannel = (typeof H2A_ESCALATION_CHANNELS)[number];
+export type H2AEscalationAuthorityKind = (typeof H2A_ESCALATION_AUTHORITY_KINDS)[number];
+export interface H2AEscalationTargetRequest {
+    readonly scope: string;
+    readonly channel: string;
+    readonly trigger?: string;
+    readonly domain?: string;
+}
+export interface H2AEscalationResolveOptions {
+    /**
+     * Explicit mono-human fallback target. DEC-024 keeps PRINCIPAL as the
+     * default only when the caller provides that local principal target.
+     */
+    readonly fallbackPrincipal?: string;
+}
+export interface H2AEscalationResolvedTarget {
+    readonly ok: true;
+    readonly scope: string;
+    readonly channel: H2AEscalationChannel;
+    readonly trigger?: string;
+    readonly domain?: string;
+    readonly authorityKind: H2AEscalationAuthorityKind;
+    readonly target: string;
+    readonly source: "enforcement-plan" | "fallback-principal";
+}
+export interface H2AEscalationUnresolvedTarget {
+    readonly ok: false;
+    readonly scope?: string;
+    readonly channel?: string;
+    readonly trigger?: string;
+    readonly domain?: string;
+    readonly issues: readonly string[];
+}
+export type H2AEscalationResolution = H2AEscalationResolvedTarget | H2AEscalationUnresolvedTarget;
+export declare function resolveEscalationTarget(plan: Pick<H2AEnforcementPlan, "escalations">, request: H2AEscalationTargetRequest, options?: H2AEscalationResolveOptions): H2AEscalationResolution;
+export declare function assertEscalationTargetResolved(resolution: H2AEscalationResolution): asserts resolution is H2AEscalationResolvedTarget;
+//# sourceMappingURL=escalation.d.ts.map

package/dist/escalation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"escalation.d.ts","sourceRoot":"","sources":["../src/escalation.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAErD,eAAO,MAAM,uBAAuB,wCAI1B,CAAC;AAEX,eAAO,MAAM,8BAA8B,2FAOjC,CAAC;AAEX,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,uBAAuB,CAAC,CAAC,MAAM,CAAC,CAAC;AAC5E,MAAM,MAAM,0BAA0B,GACpC,CAAC,OAAO,8BAA8B,CAAC,CAAC,MAAM,CAAC,CAAC;AAElD,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,2BAA2B;IAC1C;;;OAGG;IACH,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;CACrC;AAED,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAClB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,oBAAoB,CAAC;IACvC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,aAAa,EAAE,0BAA0B,CAAC;IACnD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,kBAAkB,GAAG,oBAAoB,CAAC;CAC5D;AAED,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IACnB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;CACpC;AAED,MAAM,MAAM,uBAAuB,GAC/B,2BAA2B,GAC3B,6BAA6B,CAAC;AA+BlC,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,IAAI,CAAC,kBAAkB,EAAE,aAAa,CAAC,EAC7C,OAAO,EAAE,0BAA0B,EACnC,OAAO,GAAE,2BAAgC,GACxC,uBAAuB,CA0FzB;AAED,wBAAgB,8BAA8B,CAC5C,UAAU,EAAE,uBAAuB,GAClC,OAAO,CAAC,UAAU,IAAI,2BAA2B,CAMnD"}

package/dist/escalation.js

@@ -0,0 +1,114 @@
+export const H2A_ESCALATION_CHANNELS = [
+    "advise",
+    "decide",
+    "alert"
+];
+export const H2A_ESCALATION_AUTHORITY_KINDS = [
+    "PRINCIPAL",
+    "EXECUTIF",
+    "QUORUM",
+    "CONTROL",
+    "EXTERNAL_AUTHORITY",
+    "RECOURSE"
+];
+function isEscalationChannel(value) {
+    return H2A_ESCALATION_CHANNELS.includes(value);
+}
+function isEscalationAuthorityKind(value) {
+    return (typeof value === "string" &&
+        H2A_ESCALATION_AUTHORITY_KINDS.includes(value));
+}
+function withOptionalRequestFields(base, request, routeDomain) {
+    return {
+        ...base,
+        ...(request.trigger ? { trigger: request.trigger } : {}),
+        ...(request.domain && routeDomain === request.domain
+            ? { domain: request.domain }
+            : {})
+    };
+}
+export function resolveEscalationTarget(plan, request, options = {}) {
+    if (!isEscalationChannel(request.channel)) {
+        return {
+            ok: false,
+            scope: request.scope,
+            channel: request.channel,
+            trigger: request.trigger,
+            domain: request.domain,
+            issues: [
+                `unknown escalation channel "${request.channel}" (expected advise|decide|alert)`
+            ]
+        };
+    }
+    const candidates = plan.escalations
+        .map((route, index) => {
+        if (typeof route.target !== "string" || route.target.length === 0) {
+            return undefined;
+        }
+        if (route.channel !== undefined && route.channel !== request.channel) {
+            return undefined;
+        }
+        if (route.scope !== undefined && route.scope !== request.scope) {
+            return undefined;
+        }
+        if (request.trigger && route.trigger !== request.trigger) {
+            return undefined;
+        }
+        if (request.domain &&
+            route.domain !== undefined &&
+            route.domain !== request.domain) {
+            return undefined;
+        }
+        let score = 0;
+        if (request.domain && route.domain === request.domain)
+            score += 8;
+        if (request.trigger && route.trigger === request.trigger)
+            score += 4;
+        if (route.scope === request.scope)
+            score += 2;
+        if (route.channel === request.channel)
+            score += 1;
+        return { route, index, score };
+    })
+        .filter((entry) => entry !== undefined)
+        .sort((a, b) => b.score - a.score || a.index - b.index);
+    const selected = candidates[0]?.route;
+    if (selected) {
+        return withOptionalRequestFields({
+            ok: true,
+            scope: request.scope,
+            channel: request.channel,
+            authorityKind: isEscalationAuthorityKind(selected.authorityKind)
+                ? selected.authorityKind
+                : "PRINCIPAL",
+            target: selected.target,
+            source: "enforcement-plan"
+        }, request, selected.domain);
+    }
+    if (options.fallbackPrincipal) {
+        return withOptionalRequestFields({
+            ok: true,
+            scope: request.scope,
+            channel: request.channel,
+            authorityKind: "PRINCIPAL",
+            target: options.fallbackPrincipal,
+            source: "fallback-principal"
+        }, request);
+    }
+    return {
+        ok: false,
+        scope: request.scope,
+        channel: request.channel,
+        trigger: request.trigger,
+        domain: request.domain,
+        issues: [
+            `no escalation target for scope=${request.scope}, channel=${request.channel}${request.trigger ? `, trigger=${request.trigger}` : ""}${request.domain ? `, domain=${request.domain}` : ""}`
+        ]
+    };
+}
+export function assertEscalationTargetResolved(resolution) {
+    if (!resolution.ok) {
+        throw new Error(`Escalation target unresolved: ${resolution.issues.join("; ")}`);
+    }
+}
+//# sourceMappingURL=escalation.js.map

package/dist/escalation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"escalation.js","sourceRoot":"","sources":["../src/escalation.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,QAAQ;IACR,QAAQ;IACR,OAAO;CACC,CAAC;AAEX,MAAM,CAAC,MAAM,8BAA8B,GAAG;IAC5C,WAAW;IACX,UAAU;IACV,QAAQ;IACR,SAAS;IACT,oBAAoB;IACpB,UAAU;CACF,CAAC;AA6CX,SAAS,mBAAmB,CAAC,KAAa;IACxC,OAAO,uBAAuB,CAAC,QAAQ,CAAC,KAA6B,CAAC,CAAC;AACzE,CAAC;AAED,SAAS,yBAAyB,CAChC,KAAc;IAEd,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACzB,8BAA8B,CAAC,QAAQ,CACrC,KAAmC,CACpC,CACF,CAAC;AACJ,CAAC;AAED,SAAS,yBAAyB,CAChC,IAA6D,EAC7D,OAAmC,EACnC,WAAoB;IAEpB,OAAO;QACL,GAAG,IAAI;QACP,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxD,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,WAAW,KAAK,OAAO,CAAC,MAAM;YAClD,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE;YAC5B,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,IAA6C,EAC7C,OAAmC,EACnC,UAAuC,EAAE;IAEzC,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1C,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,MAAM,EAAE;gBACN,+BAA+B,OAAO,CAAC,OAAO,kCAAkC;aACjF;SACF,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW;SAChC,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QACpB,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAClE,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI,KAAK,CAAC,OAAO,KAAK,OAAO,CAAC,OAAO,EAAE,CAAC;YACrE,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,KAAK,KAAK,OAAO,CAAC,KAAK,EAAE,CAAC;YAC/D,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,IAAI,OAAO,CAAC,OAAO,IAAI,KAAK,CAAC,OAAO,KAAK,OAAO,CAAC,OAAO,EAAE,CAAC;YACzD,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,IACE,OAAO,CAAC,MAAM;YACd,KAAK,CAAC,MAAM,KAAK,SAAS;YAC1B,KAAK,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM,EAC/B,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,IAAI,OAAO,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM;YAAE,KAAK,IAAI,CAAC,CAAC;QAClE,IAAI,OAAO,CAAC,OAAO,IAAI,KAAK,CAAC,OAAO,KAAK,OAAO,CAAC,OAAO;YAAE,KAAK,IAAI,CAAC,CAAC;QACrE,IAAI,KAAK,CAAC,KAAK,KAAK,OAAO,CAAC,KAAK;YAAE,KAAK,IAAI,CAAC,CAAC;QAC9C,IAAI,KAAK,CAAC,OAAO,KAAK,OAAO,CAAC,OAAO;YAAE,KAAK,IAAI,CAAC,CAAC;QAClD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IACjC,CAAC,CAAC;SACD,MAAM,CAAC,CAAC,KAAK,EAAsC,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC;SAC1E,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;IAE1D,MAAM,QAAQ,GAAG,UAAU,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC;IACtC,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,yBAAyB,CAC9B;YACE,EAAE,EAAE,IAAI;YACR,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,aAAa,EAAE,yBAAyB,CAAC,QAAQ,CAAC,aAAa,CAAC;gBAC9D,CAAC,CAAC,QAAQ,CAAC,aAAa;gBACxB,CAAC,CAAC,WAAW;YACf,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,MAAM,EAAE,kBAAkB;SAC3B,EACD,OAAO,EACP,QAAQ,CAAC,MAAM,CAChB,CAAC;IACJ,CAAC;IAED,IAAI,OAAO,CAAC,iBAAiB,EAAE,CAAC;QAC9B,OAAO,yBAAyB,CAC9B;YACE,EAAE,EAAE,IAAI;YACR,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,aAAa,EAAE,WAAW;YAC1B,MAAM,EAAE,OAAO,CAAC,iBAAiB;YACjC,MAAM,EAAE,oBAAoB;SAC7B,EACD,OAAO,CACR,CAAC;IACJ,CAAC;IAED,OAAO;QACL,EAAE,EAAE,KAAK;QACT,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,MAAM,EAAE;YACN,kCAAkC,OAAO,CAAC,KAAK,aAAa,OAAO,CAAC,OAAO,GACzE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EACrD,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,YAAY,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;SACxD;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,8BAA8B,CAC5C,UAAmC;IAEnC,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CACb,iCAAiC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAChE,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/fixtures-index.d.ts

@@ -0,0 +1,16 @@
+import type { H2AArtifactKind } from "./types.js";
+export interface H2ACanonicalFixtureManifestEntry {
+    /** Path relative to the package root (e.g. `fixtures/contract.json`). */
+    path: string;
+    /** The canonical {@link H2AArtifactKind} this fixture is an instance of. */
+    kind: H2AArtifactKind;
+    /** The fixture artifact's own `id`. */
+    id: string;
+    /**
+     * SHA-256 hex of the file content bytes (no `sha256:` prefix). The full
+     * canonical hash is `"sha256:" + sha256` and matches `computeHash(parsed)`.
+     */
+    sha256: string;
+}
+export declare const H2A_CANONICAL_FIXTURES: readonly H2ACanonicalFixtureManifestEntry[];
+//# sourceMappingURL=fixtures-index.d.ts.map

package/dist/fixtures-index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fixtures-index.d.ts","sourceRoot":"","sources":["../src/fixtures-index.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAElD,MAAM,WAAW,gCAAgC;IAC/C,yEAAyE;IACzE,IAAI,EAAE,MAAM,CAAC;IACb,4EAA4E;IAC5E,IAAI,EAAE,eAAe,CAAC;IACtB,uCAAuC;IACvC,EAAE,EAAE,MAAM,CAAC;IACX;;;OAGG;IACH,MAAM,EAAE,MAAM,CAAC;CAChB;AAUD,eAAO,MAAM,sBAAsB,EAAE,SAAS,gCAAgC,EACX,CAAC"}

package/dist/fixtures-index.js

@@ -0,0 +1,11 @@
+import { readFileSync } from "node:fs";
+import { dirname, join } from "node:path";
+import { fileURLToPath } from "node:url";
+const HERE = dirname(fileURLToPath(import.meta.url));
+// `dist/fixtures-index.js` → package root is one level up; fixtures sit at
+// `<package>/fixtures/` (DEC-035). Loaded once at module init from disk so
+// the canonical bytes never drift between source and runtime.
+const MANIFEST_PATH = join(HERE, "..", "fixtures", "manifest.json");
+const parsed = JSON.parse(readFileSync(MANIFEST_PATH, "utf8"));
+export const H2A_CANONICAL_FIXTURES = Object.freeze(parsed.map((entry) => Object.freeze({ ...entry })));
+//# sourceMappingURL=fixtures-index.js.map

package/dist/fixtures-index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fixtures-index.js","sourceRoot":"","sources":["../src/fixtures-index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAkBzC,MAAM,IAAI,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AACrD,2EAA2E;AAC3E,2EAA2E;AAC3E,8DAA8D;AAC9D,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,eAAe,CAAC,CAAC;AAEpE,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,aAAa,EAAE,MAAM,CAAC,CAAuC,CAAC;AAErG,MAAM,CAAC,MAAM,sBAAsB,GACjC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC"}