@thehonestmachine/oath-core 0.1.0

package/dist/sth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sth.js","sourceRoot":"","sources":["../src/sth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AACxC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,EACL,UAAU,EACV,iBAAiB,EACjB,KAAK,EACL,gBAAgB,EAChB,oBAAoB,EACpB,iBAAiB,EACjB,WAAW,GACZ,MAAM,eAAe,CAAC;AAGvB,MAAM,cAAc,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC;AAE9C,SAAS,gBAAgB,CAAC,KAAc,EAAE,gBAAyB;IACjE,MAAM,GAAG,GAAG,iBAAiB,CAAC,KAAK,EAAE,kBAAkB,CAAC,CAAC;IACzD,MAAM,QAAQ,GAAG,CAAC,QAAQ,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC;IACnE,UAAU,CACR,GAAG,EACH,kBAAkB,EAClB,gBAAgB,CAAC,CAAC,CAAC,CAAC,GAAG,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,EACxD,gBAAgB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CACtC,CAAC;IACF,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,aAAa,CAAC,oDAAoD,CAAC,CAAC;IAChF,CAAC;IACD,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,aAAa,CAAC,2DAA2D,CAAC,CAAC;IACvF,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,aAAa,CAAC,8DAA8D,CAAC,CAAC;IAC1F,CAAC;IACD,IAAI,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,WAAW,CAAC,KAAK,cAAc,EAAE,CAAC;QAClE,MAAM,IAAI,aAAa,CAAC,+DAA+D,CAAC,CAAC;IAC3F,CAAC;IACD,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,aAAa,CAAC,8DAA8D,CAAC,CAAC;IAC1F,CAAC;IACD,IAAI,gBAAgB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,aAAa,CAAC,8DAA8D,CAAC,CAAC;IAC1F,CAAC;AACH,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,cAAc,CAAC,KAAc;IAC3C,gBAAgB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,KAAc;IACnD,gBAAgB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;AACjC,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,eAAe,CAAC,GAAsC;IACpE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,QAAQ,EAAE,GAAG,GAAqB,CAAC;IACrE,sBAAsB,CAAC,QAAQ,CAAC,CAAC;IACjC,OAAO,cAAc,CAAC,QAAQ,CAAC,CAAC;AAClC,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,QAA0B,EAAE,aAAqB;IACvE,sBAAsB,CAAC,QAAQ,CAAC,CAAC;IACjC,MAAM,SAAS,GAAG,MAAM,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,aAAa,CAAC,CAAC;IAClE,OAAO,EAAE,GAAG,QAAQ,EAAE,SAAS,EAAE,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,GAAmB,EAAE,eAAuB;IAC7E,cAAc,CAAC,GAAG,CAAC,CAAC;IACpB,OAAO,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE,eAAe,CAAC,GAAG,CAAC,EAAE,eAAe,CAAC,CAAC;AACxE,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAc,EAAE,gBAAyB;IACrE,MAAM,OAAO,GAAG,iBAAiB,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IACpD,MAAM,QAAQ,GAAG,CAAC,QAAQ,EAAE,WAAW,EAAE,aAAa,EAAE,aAAa,CAAC,CAAC;IACvE,UAAU,CACR,OAAO,EACP,SAAS,EACT,gBAAgB,CAAC,CAAC,CAAC,CAAC,GAAG,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,EACxD,gBAAgB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CACtC,CAAC;IACF,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;QACzC,MAAM,IAAI,aAAa,CAAC,2CAA2C,CAAC,CAAC;IACvE,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,aAAa,CAAC,qDAAqD,CAAC,CAAC;IACjF,CAAC;IACD,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC;QACzC,MAAM,IAAI,aAAa,CAAC,uDAAuD,CAAC,CAAC;IACnF,CAAC;IACD,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,aAAa,CAAC,6CAA6C,CAAC,CAAC;IACzE,CAAC;IACD,IAAI,gBAAgB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;QACzD,MAAM,IAAI,aAAa,CAAC,qDAAqD,CAAC,CAAC;IACjF,CAAC;AACH,CAAC;AAED,2DAA2D;AAC3D,MAAM,UAAU,kBAAkB,CAAC,KAAc;IAC/C,oBAAoB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,KAAc;IACvD,oBAAoB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;AACrC,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,mBAAmB,CAAC,OAAkC;IACpE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,QAAQ,EAAE,GAAG,OAAkB,CAAC;IAClE,0BAA0B,CAAC,QAAQ,CAAC,CAAC;IACrC,OAAO,cAAc,CAAC,QAAQ,CAAC,CAAC;AAClC,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,QAAyB,EAAE,aAAqB;IAC1E,0BAA0B,CAAC,QAAQ,CAAC,CAAC;IACrC,MAAM,SAAS,GAAG,MAAM,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,aAAa,CAAC,CAAC;IAClE,OAAO,EAAE,GAAG,QAAQ,EAAE,SAAS,EAAE,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,OAAgB,EAAE,eAAuB;IAC9E,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAC5B,OAAO,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,mBAAmB,CAAC,OAAO,CAAC,EAAE,eAAe,CAAC,CAAC;AACpF,CAAC"}

package/dist/types.d.ts

@@ -0,0 +1,90 @@
+/** Structures defined by SPEC.md v0.1. Field names match the canonical JSON. */
+export type Verdict = 'compliant' | 'violation' | 'uncertain';
+export type LawMode = 'machine' | 'judgment';
+export interface Law {
+    n: number;
+    mode: LawMode;
+    text: string;
+}
+export interface OathCommitments {
+    entries_per_30d?: number;
+    max_latency_seconds?: number;
+}
+export interface UnsignedOathDoc {
+    spec_version: string;
+    agent: string;
+    display_name?: string;
+    version: number;
+    pubkey: string;
+    scope: string;
+    commitments?: OathCommitments;
+    laws: Law[];
+    created_at: string;
+}
+export interface OathDoc extends UnsignedOathDoc {
+    signature: string;
+}
+export interface Action {
+    type: string;
+    summary: string;
+    content_hash: string | null;
+    occurred_at: string;
+}
+export interface MachineAdjudication {
+    mode: 'machine';
+    check: string;
+    check_version?: string;
+}
+export interface ModelAdjudication {
+    mode: 'model';
+    model: string;
+    prompt_hash: string;
+    inputs_hash: string;
+}
+export type Adjudication = MachineAdjudication | ModelAdjudication;
+export interface Confession {
+    note: string;
+}
+export interface UnsignedEntry {
+    spec_version: string;
+    agent: string;
+    oath_version: number;
+    action: Action;
+    verdict: Verdict;
+    law_cited: number | null;
+    adjudication: Adjudication;
+    confession?: Confession;
+    timestamp: string;
+}
+export interface Entry extends UnsignedEntry {
+    signature: string;
+}
+export interface UnsignedTreeHead {
+    ledger: string;
+    tree_size: number;
+    root_hash: string;
+    timestamp: string;
+}
+export interface SignedTreeHead extends UnsignedTreeHead {
+    signature: string;
+}
+export interface UnsignedReceipt {
+    ledger: string;
+    leaf_hash: string;
+    received_at: string;
+    mmd_seconds: number;
+}
+export interface Receipt extends UnsignedReceipt {
+    signature: string;
+}
+export interface InclusionProof {
+    leaf_index: number;
+    tree_size: number;
+    audit_path: string[];
+}
+export interface ConsistencyProof {
+    old_size: number;
+    new_size: number;
+    path: string[];
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAEhF,MAAM,MAAM,OAAO,GAAG,WAAW,GAAG,WAAW,GAAG,WAAW,CAAC;AAE9D,MAAM,MAAM,OAAO,GAAG,SAAS,GAAG,UAAU,CAAC;AAE7C,MAAM,WAAW,GAAG;IAClB,CAAC,EAAE,MAAM,CAAC;IACV,IAAI,EAAE,OAAO,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,eAAe;IAC9B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,eAAe;IAC9B,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,eAAe,CAAC;IAC9B,IAAI,EAAE,GAAG,EAAE,CAAC;IACZ,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,OAAQ,SAAQ,eAAe;IAC9C,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,MAAM;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,SAAS,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,OAAO,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,MAAM,YAAY,GAAG,mBAAmB,GAAG,iBAAiB,CAAC;AAEnE,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,aAAa;IAC5B,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,YAAY,EAAE,YAAY,CAAC;IAC3B,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,KAAM,SAAQ,aAAa;IAC1C,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,cAAe,SAAQ,gBAAgB;IACtD,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,OAAQ,SAAQ,eAAe;IAC9C,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,cAAc;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,EAAE,CAAC;CAChB"}

package/dist/types.js

@@ -0,0 +1,3 @@
+/** Structures defined by SPEC.md v0.1. Field names match the canonical JSON. */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,gFAAgF"}

package/dist/validate.d.ts

@@ -0,0 +1,17 @@
+/** Spec §1.2: lowercase alphanumeric + hyphens, 1–64 chars, no edge hyphens. */
+export declare const HANDLE_RE: RegExp;
+export declare function isHandle(value: unknown): value is string;
+/**
+ * Spec §1.2: RFC 3339 UTC with Z suffix. Calendar validity is checked
+ * explicitly — Date.parse silently rolls over impossible dates like Feb 30.
+ */
+export declare function isTimestamp(value: unknown): value is string;
+/** Lowercase hex of exactly `byteLength` bytes. */
+export declare function isHex(value: unknown, byteLength: number): value is string;
+export declare function isPositiveInteger(value: unknown): value is number;
+export declare function isNonNegativeInteger(value: unknown): value is number;
+export declare function isNonEmptyString(value: unknown): value is string;
+export declare function assertPlainObject(value: unknown, label: string): Record<string, unknown>;
+/** Spec §1.2: unknown fields MUST be rejected. */
+export declare function assertKeys(obj: Record<string, unknown>, label: string, required: readonly string[], optional: readonly string[]): void;
+//# sourceMappingURL=validate.d.ts.map

package/dist/validate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate.d.ts","sourceRoot":"","sources":["../src/validate.ts"],"names":[],"mappings":"AAEA,gFAAgF;AAChF,eAAO,MAAM,SAAS,QAAyC,CAAC;AAEhE,wBAAgB,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAExD;AAWD;;;GAGG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAS3D;AAED,mDAAmD;AACnD,wBAAgB,KAAK,CAAC,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,GAAG,KAAK,IAAI,MAAM,CAMzE;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAEjE;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAEpE;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAEhE;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CASxF;AAED,kDAAkD;AAClD,wBAAgB,UAAU,CACxB,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC5B,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,SAAS,MAAM,EAAE,EAC3B,QAAQ,EAAE,SAAS,MAAM,EAAE,GAC1B,IAAI,CASN"}

package/dist/validate.js

@@ -0,0 +1,65 @@
+import { ProtocolError } from './errors.js';
+/** Spec §1.2: lowercase alphanumeric + hyphens, 1–64 chars, no edge hyphens. */
+export const HANDLE_RE = /^[a-z0-9]([a-z0-9-]{0,62}[a-z0-9])?$/;
+export function isHandle(value) {
+    return typeof value === 'string' && HANDLE_RE.test(value);
+}
+const TIMESTAMP_RE = /^(\d{4})-(0[1-9]|1[0-2])-(0[1-9]|[12]\d|3[01])T([01]\d|2[0-3]):[0-5]\d:[0-5]\d(\.\d{1,9})?Z$/;
+const DAYS_IN_MONTH = [31, 28, 31, 30, 31, 30, 31, 31, 30, 31, 30, 31];
+function isLeapYear(year) {
+    return (year % 4 === 0 && year % 100 !== 0) || year % 400 === 0;
+}
+/**
+ * Spec §1.2: RFC 3339 UTC with Z suffix. Calendar validity is checked
+ * explicitly — Date.parse silently rolls over impossible dates like Feb 30.
+ */
+export function isTimestamp(value) {
+    if (typeof value !== 'string')
+        return false;
+    const m = TIMESTAMP_RE.exec(value);
+    if (m === null)
+        return false;
+    const year = Number(m[1]);
+    const month = Number(m[2]);
+    const day = Number(m[3]);
+    const maxDay = month === 2 && isLeapYear(year) ? 29 : DAYS_IN_MONTH[month - 1];
+    return day <= maxDay;
+}
+/** Lowercase hex of exactly `byteLength` bytes. */
+export function isHex(value, byteLength) {
+    return (typeof value === 'string' &&
+        value.length === byteLength * 2 &&
+        /^[0-9a-f]*$/.test(value));
+}
+export function isPositiveInteger(value) {
+    return typeof value === 'number' && Number.isSafeInteger(value) && value >= 1;
+}
+export function isNonNegativeInteger(value) {
+    return typeof value === 'number' && Number.isSafeInteger(value) && value >= 0;
+}
+export function isNonEmptyString(value) {
+    return typeof value === 'string' && value.length > 0;
+}
+export function assertPlainObject(value, label) {
+    if (value === null || typeof value !== 'object' || Array.isArray(value)) {
+        throw new ProtocolError(`${label} must be a JSON object`);
+    }
+    const proto = Object.getPrototypeOf(value);
+    if (proto !== Object.prototype && proto !== null) {
+        throw new ProtocolError(`${label} must be a plain JSON object`);
+    }
+    return value;
+}
+/** Spec §1.2: unknown fields MUST be rejected. */
+export function assertKeys(obj, label, required, optional) {
+    for (const key of required) {
+        if (!(key in obj))
+            throw new ProtocolError(`${label} is missing required field "${key}"`);
+    }
+    for (const key of Object.keys(obj)) {
+        if (!required.includes(key) && !optional.includes(key)) {
+            throw new ProtocolError(`${label} has unknown field "${key}"`);
+        }
+    }
+}
+//# sourceMappingURL=validate.js.map

package/dist/validate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate.js","sourceRoot":"","sources":["../src/validate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAE5C,gFAAgF;AAChF,MAAM,CAAC,MAAM,SAAS,GAAG,sCAAsC,CAAC;AAEhE,MAAM,UAAU,QAAQ,CAAC,KAAc;IACrC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC5D,CAAC;AAED,MAAM,YAAY,GAChB,8FAA8F,CAAC;AAEjG,MAAM,aAAa,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAU,CAAC;AAEhF,SAAS,UAAU,CAAC,IAAY;IAC9B,OAAO,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,GAAG,GAAG,KAAK,CAAC,CAAC,IAAI,IAAI,GAAG,GAAG,KAAK,CAAC,CAAC;AAClE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,KAAc;IACxC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,MAAM,CAAC,GAAG,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACnC,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC7B,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1B,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3B,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACzB,MAAM,MAAM,GAAG,KAAK,KAAK,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,GAAG,CAAC,CAAE,CAAC;IAChF,OAAO,GAAG,IAAI,MAAM,CAAC;AACvB,CAAC;AAED,mDAAmD;AACnD,MAAM,UAAU,KAAK,CAAC,KAAc,EAAE,UAAkB;IACtD,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,CAAC,MAAM,KAAK,UAAU,GAAG,CAAC;QAC/B,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAC1B,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAc;IAC9C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;AAChF,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,KAAc;IACjD,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;AAChF,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC7C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;AACvD,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAc,EAAE,KAAa;IAC7D,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,MAAM,IAAI,aAAa,CAAC,GAAG,KAAK,wBAAwB,CAAC,CAAC;IAC5D,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IAC3C,IAAI,KAAK,KAAK,MAAM,CAAC,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACjD,MAAM,IAAI,aAAa,CAAC,GAAG,KAAK,8BAA8B,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,KAAgC,CAAC;AAC1C,CAAC;AAED,kDAAkD;AAClD,MAAM,UAAU,UAAU,CACxB,GAA4B,EAC5B,KAAa,EACb,QAA2B,EAC3B,QAA2B;IAE3B,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,IAAI,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC;YAAE,MAAM,IAAI,aAAa,CAAC,GAAG,KAAK,+BAA+B,GAAG,GAAG,CAAC,CAAC;IAC5F,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACnC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACvD,MAAM,IAAI,aAAa,CAAC,GAAG,KAAK,uBAAuB,GAAG,GAAG,CAAC,CAAC;QACjE,CAAC;IACH,CAAC;AACH,CAAC"}

package/package.json

@@ -0,0 +1,55 @@
+{
+  "name": "@thehonestmachine/oath-core",
+  "version": "0.1.0",
+  "description": "The OATH protocol, no I/O: canonicalization, hashing, the Merkle log, proofs, signatures, and validation of oaths, entries, tree heads, and receipts.",
+  "license": "Apache-2.0",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist",
+    "src",
+    "LICENSE"
+  ],
+  "homepage": "https://oath.sh",
+  "dependencies": {
+    "@noble/ed25519": "^2.3.0",
+    "@noble/hashes": "^1.8.0"
+  },
+  "devDependencies": {
+    "@vitest/coverage-v8": "^3.2.4",
+    "typescript": "^5.8.3",
+    "vitest": "^3.2.4"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/aamir222686/oath.git",
+    "directory": "packages/core"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "engines": {
+    "node": ">=20"
+  },
+  "keywords": [
+    "oath",
+    "ai-agents",
+    "accountability",
+    "transparency",
+    "merkle",
+    "certificate-transparency"
+  ],
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "test": "vitest run",
+    "coverage": "vitest run --coverage"
+  }
+}

package/src/bytes.ts

@@ -0,0 +1,46 @@
+import { utf8ToBytes } from '@noble/hashes/utils';
+import { ProtocolError } from './errors.js';
+
+export function utf8Bytes(s: string): Uint8Array {
+  return utf8ToBytes(s);
+}
+
+const HEX_CHARS = '0123456789abcdef';
+
+export function bytesToHex(bytes: Uint8Array): string {
+  let out = '';
+  for (const b of bytes) {
+    out += HEX_CHARS[b >> 4]! + HEX_CHARS[b & 0x0f]!;
+  }
+  return out;
+}
+
+/** Strict per spec §1.2: lowercase hex only, even length. */
+export function hexToBytes(hex: string): Uint8Array {
+  if (hex.length % 2 !== 0) throw new ProtocolError('hex string has odd length');
+  if (!/^[0-9a-f]*$/.test(hex)) throw new ProtocolError('hex string must be lowercase 0-9a-f');
+  const out = new Uint8Array(hex.length / 2);
+  for (let i = 0; i < out.length; i++) {
+    out[i] = parseInt(hex.slice(i * 2, i * 2 + 2), 16);
+  }
+  return out;
+}
+
+export function bytesEqual(a: Uint8Array, b: Uint8Array): boolean {
+  if (a.length !== b.length) return false;
+  let diff = 0;
+  for (let i = 0; i < a.length; i++) diff |= a[i]! ^ b[i]!;
+  return diff === 0;
+}
+
+export function concatBytes(...arrays: Uint8Array[]): Uint8Array {
+  let total = 0;
+  for (const a of arrays) total += a.length;
+  const out = new Uint8Array(total);
+  let offset = 0;
+  for (const a of arrays) {
+    out.set(a, offset);
+    offset += a.length;
+  }
+  return out;
+}

package/src/ed25519.ts

@@ -0,0 +1,40 @@
+import * as ed from '@noble/ed25519';
+import { sha512 } from '@noble/hashes/sha512';
+import { ProtocolError } from './errors.js';
+import { bytesToHex, hexToBytes } from './bytes.js';
+
+// @noble/ed25519 v2 needs a synchronous SHA-512 wired in for the sync API.
+ed.etc.sha512Sync = (...messages: Uint8Array[]) => sha512(ed.etc.concatBytes(...messages));
+
+function keyBytes(hex: string, byteLength: number, label: string): Uint8Array {
+  const bytes = hexToBytes(hex);
+  if (bytes.length !== byteLength) {
+    throw new ProtocolError(`${label} must be ${byteLength} bytes of lowercase hex`);
+  }
+  return bytes;
+}
+
+/** Derive the public key (hex) from a 32-byte private seed (hex). */
+export function edPublicKey(seedHex: string): string {
+  return bytesToHex(ed.getPublicKey(keyBytes(seedHex, 32, 'private key seed')));
+}
+
+/** Sign a message with a 32-byte private seed; returns the 64-byte signature as hex. */
+export function edSign(message: Uint8Array, seedHex: string): string {
+  return bytesToHex(ed.sign(message, keyBytes(seedHex, 32, 'private key seed')));
+}
+
+/**
+ * Verify an Ed25519 signature. Returns false (never throws) for signatures
+ * that fail, including structurally invalid curve points — every verifier
+ * must reach the same answer on the same bytes.
+ */
+export function edVerify(signatureHex: string, message: Uint8Array, pubkeyHex: string): boolean {
+  const signature = keyBytes(signatureHex, 64, 'signature');
+  const pubkey = keyBytes(pubkeyHex, 32, 'public key');
+  try {
+    return ed.verify(signature, message, pubkey);
+  } catch {
+    return false;
+  }
+}

package/src/entry.ts

@@ -0,0 +1,208 @@
+import { ProtocolError } from './errors.js';
+import { canonicalBytes } from './jcs.js';
+import { leafHash } from './merkle.js';
+import { bytesToHex } from './bytes.js';
+import { edSign, edVerify } from './ed25519.js';
+import { DEFAULT_MAX_LATENCY_SECONDS, SPEC_VERSION } from './oath.js';
+import {
+  assertKeys,
+  assertPlainObject,
+  isHandle,
+  isHex,
+  isNonEmptyString,
+  isPositiveInteger,
+  isTimestamp,
+} from './validate.js';
+import type { Entry, OathDoc, UnsignedEntry } from './types.js';
+
+const REQUIRED = [
+  'spec_version',
+  'agent',
+  'oath_version',
+  'action',
+  'verdict',
+  'law_cited',
+  'adjudication',
+  'timestamp',
+];
+const OPTIONAL = ['confession'];
+
+/** Dotted lowercase identifier (SPEC.md §3.1), e.g. "cycle.publish". */
+const ACTION_TYPE_RE = /^[a-z0-9-]+(\.[a-z0-9-]+)*$/;
+
+/** Action types reserved by the spec (§3.4). */
+export const RESERVED_ACTION_TYPES = ['oath.swear', 'oath.amend'] as const;
+
+function validateAction(value: unknown): void {
+  const action = assertPlainObject(value, 'entry action');
+  assertKeys(action, 'entry action', ['type', 'summary', 'content_hash', 'occurred_at'], []);
+  const type = action['type'];
+  if (!isNonEmptyString(type) || !ACTION_TYPE_RE.test(type)) {
+    throw new ProtocolError('action type must be a dotted lowercase identifier');
+  }
+  if (!isNonEmptyString(action['summary'])) {
+    throw new ProtocolError('action summary must be a non-empty string');
+  }
+  if (action['content_hash'] !== null && !isHex(action['content_hash'], 32)) {
+    throw new ProtocolError('action content_hash must be 32 bytes of lowercase hex or null');
+  }
+  if (!isTimestamp(action['occurred_at'])) {
+    throw new ProtocolError('action occurred_at must be an RFC 3339 UTC timestamp');
+  }
+  if (type.startsWith('oath.')) {
+    if (!(RESERVED_ACTION_TYPES as readonly string[]).includes(type)) {
+      throw new ProtocolError('action types beginning "oath." are reserved by the spec');
+    }
+    if (action['content_hash'] === null) {
+      throw new ProtocolError(`${type} entries must carry the oath hash in content_hash`);
+    }
+  }
+}
+
+function validateAdjudication(value: unknown): void {
+  const adjudication = assertPlainObject(value, 'entry adjudication');
+  const mode = adjudication['mode'];
+  if (mode === 'machine') {
+    assertKeys(adjudication, 'machine adjudication', ['mode', 'check'], ['check_version']);
+    if (!isNonEmptyString(adjudication['check'])) {
+      throw new ProtocolError('machine adjudication check must be a non-empty string');
+    }
+    if ('check_version' in adjudication && !isNonEmptyString(adjudication['check_version'])) {
+      throw new ProtocolError('machine adjudication check_version must be a non-empty string');
+    }
+  } else if (mode === 'model') {
+    assertKeys(adjudication, 'model adjudication', ['mode', 'model', 'prompt_hash', 'inputs_hash'], []);
+    if (!isNonEmptyString(adjudication['model'])) {
+      throw new ProtocolError('model adjudication model must be a non-empty string');
+    }
+    if (!isHex(adjudication['prompt_hash'], 32)) {
+      throw new ProtocolError('model adjudication prompt_hash must be 32 bytes of lowercase hex');
+    }
+    if (!isHex(adjudication['inputs_hash'], 32)) {
+      throw new ProtocolError('model adjudication inputs_hash must be 32 bytes of lowercase hex');
+    }
+  } else {
+    throw new ProtocolError('adjudication mode must be "machine" or "model"');
+  }
+}
+
+function validateEntryShape(value: unknown, requireSignature: boolean): void {
+  const entry = assertPlainObject(value, 'entry');
+  const required = requireSignature ? [...REQUIRED, 'signature'] : REQUIRED;
+  const optional = requireSignature ? OPTIONAL : [...OPTIONAL, 'signature'];
+  assertKeys(entry, 'entry', required, optional);
+
+  if (entry['spec_version'] !== SPEC_VERSION) {
+    throw new ProtocolError(`entry spec_version must be "${SPEC_VERSION}"`);
+  }
+  if (!isHandle(entry['agent'])) throw new ProtocolError('entry agent must be a valid handle');
+  if (!isPositiveInteger(entry['oath_version'])) {
+    throw new ProtocolError('entry oath_version must be an integer >= 1');
+  }
+  validateAction(entry['action']);
+
+  const verdict = entry['verdict'];
+  if (verdict !== 'compliant' && verdict !== 'violation' && verdict !== 'uncertain') {
+    throw new ProtocolError('verdict must be "compliant", "violation", or "uncertain"');
+  }
+  const lawCited = entry['law_cited'];
+  if (lawCited !== null && !isPositiveInteger(lawCited)) {
+    throw new ProtocolError('law_cited must be a law number or null');
+  }
+  if (verdict === 'violation' && lawCited === null) {
+    throw new ProtocolError('a violation must cite the violated law (SPEC.md §3.3)');
+  }
+  if ('confession' in entry) {
+    const confession = assertPlainObject(entry['confession'], 'confession');
+    assertKeys(confession, 'confession', ['note'], []);
+    if (!isNonEmptyString(confession['note'])) {
+      throw new ProtocolError('confession note must be a non-empty string');
+    }
+  } else if (verdict !== 'compliant') {
+    throw new ProtocolError(`a ${verdict} verdict requires a confession (SPEC.md §3.3)`);
+  }
+
+  validateAdjudication(entry['adjudication']);
+  if (!isTimestamp(entry['timestamp'])) {
+    throw new ProtocolError('entry timestamp must be an RFC 3339 UTC timestamp');
+  }
+  if (requireSignature && !isHex(entry['signature'], 64)) {
+    throw new ProtocolError('entry signature must be 64 bytes of lowercase hex');
+  }
+}
+
+/** Validate a complete signed entry (SPEC.md §3). Structural only. */
+export function assertValidEntry(value: unknown): asserts value is Entry {
+  validateEntryShape(value, true);
+}
+
+/** Validate an entry that has not been signed yet. */
+export function assertValidUnsignedEntry(value: unknown): asserts value is UnsignedEntry {
+  validateEntryShape(value, false);
+}
+
+/** Canonical bytes of the entry without its signature — the signing input. */
+export function entrySigningInput(entry: UnsignedEntry | Entry): Uint8Array {
+  const { signature: _signature, ...unsigned } = entry as Entry;
+  assertValidUnsignedEntry(unsigned);
+  return canonicalBytes(unsigned);
+}
+
+/** The leaf bytes (SPEC.md §3.2): canonical bytes of the complete signed entry. */
+export function leafBytesOf(entry: Entry): Uint8Array {
+  assertValidEntry(entry);
+  return canonicalBytes(entry);
+}
+
+/** The entry's Merkle leaf hash as hex: SHA-256(0x00 || leaf bytes). */
+export function entryLeafHash(entry: Entry): string {
+  return bytesToHex(leafHash(leafBytesOf(entry)));
+}
+
+export function signEntry(unsigned: UnsignedEntry, seedHex: string): Entry {
+  assertValidUnsignedEntry(unsigned);
+  const signature = edSign(canonicalBytes(unsigned), seedHex);
+  return { ...unsigned, signature };
+}
+
+export function verifyEntrySignature(entry: Entry, pubkeyHex: string): boolean {
+  assertValidEntry(entry);
+  return edVerify(entry.signature, entrySigningInput(entry), pubkeyHex);
+}
+
+/**
+ * Cross-check an entry against the oath version it cites (SPEC.md §3, §7):
+ * agent and version match, any cited law exists, and the signature verifies
+ * against the oath's key.
+ */
+export function assertEntryUnderOath(entry: Entry, oath: OathDoc): void {
+  assertValidEntry(entry);
+  if (entry.agent !== oath.agent) {
+    throw new ProtocolError('entry agent does not match the oath');
+  }
+  if (entry.oath_version !== oath.version) {
+    throw new ProtocolError('entry oath_version does not match the oath');
+  }
+  if (entry.law_cited !== null && entry.law_cited > oath.laws.length) {
+    throw new ProtocolError(`entry cites law ${entry.law_cited}, but the oath has ${oath.laws.length} laws`);
+  }
+  if (!verifyEntrySignature(entry, oath.pubkey)) {
+    throw new ProtocolError("entry signature does not verify against the oath's key");
+  }
+}
+
+/**
+ * Promptness (SPEC.md §8.2): the entry was authored within the oath's
+ * max_latency_seconds (default 300) of the action occurring.
+ */
+export function isPrompt(
+  entry: Entry,
+  maxLatencySeconds: number = DEFAULT_MAX_LATENCY_SECONDS,
+): boolean {
+  assertValidEntry(entry);
+  if (!isPositiveInteger(maxLatencySeconds)) {
+    throw new ProtocolError('maxLatencySeconds must be an integer >= 1');
+  }
+  const delta = Date.parse(entry.timestamp) - Date.parse(entry.action.occurred_at);
+  return delta <= maxLatencySeconds * 1000;
+}

package/src/errors.ts

@@ -0,0 +1,4 @@
+/** Thrown when a structure or operation violates the OATH protocol spec. */
+export class ProtocolError extends Error {
+  override name = 'ProtocolError';
+}

package/src/hash.ts

@@ -0,0 +1,10 @@
+import { sha256 as nobleSha256 } from '@noble/hashes/sha256';
+import { bytesToHex } from './bytes.js';
+
+export function sha256(bytes: Uint8Array): Uint8Array {
+  return nobleSha256(bytes);
+}
+
+export function sha256Hex(bytes: Uint8Array): string {
+  return bytesToHex(nobleSha256(bytes));
+}

package/src/index.ts

@@ -0,0 +1,82 @@
+export { ProtocolError } from './errors.js';
+export { bytesToHex, hexToBytes, bytesEqual, concatBytes, utf8Bytes } from './bytes.js';
+export { sha256, sha256Hex } from './hash.js';
+export { canonicalize, canonicalBytes } from './jcs.js';
+export {
+  HANDLE_RE,
+  isHandle,
+  isTimestamp,
+  isHex,
+  isPositiveInteger,
+  isNonNegativeInteger,
+  isNonEmptyString,
+  assertPlainObject,
+  assertKeys,
+} from './validate.js';
+export { edPublicKey, edSign, edVerify } from './ed25519.js';
+export {
+  EMPTY_ROOT,
+  leafHash,
+  nodeHash,
+  rootFromLeafHashes,
+  inclusionPath,
+  consistencyPath,
+  verifyInclusion,
+  verifyConsistency,
+} from './merkle.js';
+export {
+  SPEC_VERSION,
+  DEFAULT_MAX_LATENCY_SECONDS,
+  assertValidOathDoc,
+  assertValidUnsignedOathDoc,
+  oathSigningInput,
+  oathHash,
+  signOathDoc,
+  verifyOathSignature,
+  assertValidAmendment,
+} from './oath.js';
+export {
+  RESERVED_ACTION_TYPES,
+  assertValidEntry,
+  assertValidUnsignedEntry,
+  entrySigningInput,
+  leafBytesOf,
+  entryLeafHash,
+  signEntry,
+  verifyEntrySignature,
+  assertEntryUnderOath,
+  isPrompt,
+} from './entry.js';
+export {
+  assertValidSth,
+  assertValidUnsignedSth,
+  sthSigningInput,
+  signSth,
+  verifySthSignature,
+  assertValidReceipt,
+  assertValidUnsignedReceipt,
+  receiptSigningInput,
+  signReceipt,
+  verifyReceiptSignature,
+} from './sth.js';
+export type {
+  Verdict,
+  LawMode,
+  Law,
+  OathCommitments,
+  UnsignedOathDoc,
+  OathDoc,
+  Action,
+  MachineAdjudication,
+  ModelAdjudication,
+  Adjudication,
+  Confession,
+  UnsignedEntry,
+  Entry,
+  UnsignedTreeHead,
+  SignedTreeHead,
+  UnsignedReceipt,
+  Receipt,
+  InclusionProof,
+  ConsistencyProof,
+} from './types.js';