aae-protocol 0.0.1 → 0.9.0

package/dist/models.js

@@ -0,0 +1,288 @@
+/**
+ * Zod schemas + inferred TypeScript types for AAE protocol shapes.
+ *
+ * These mirror schemas/*.schema.json and the SPEC. When you change one,
+ * change the others and bump conformance test fixtures.
+ */
+import { z } from "zod";
+export const PROTOCOL_VERSION = "0.8";
+const ulidSchema = z
+    .string()
+    .regex(/^[0-9A-HJKMNP-TV-Z]{26}$/, "must be a ULID");
+const sha256Schema = z
+    .string()
+    .regex(/^sha256:[a-f0-9]{64}$/, "must be sha256:<hex>");
+const versionSchema = z.string().regex(/^\d+\.\d+(\.\d+)?$/);
+// ──────────────────────────────────────────────────────────────────────────
+// Enums
+// ──────────────────────────────────────────────────────────────────────────
+export const BlastRadius = {
+    READ_ONLY: "read_only",
+    SINGLE_SERVICE: "single_service",
+    SINGLE_HOST: "single_host",
+    MULTI_HOST: "multi_host",
+    IRREVERSIBLE: "irreversible",
+};
+export const BlastRadiusSchema = z.enum([
+    "read_only",
+    "single_service",
+    "single_host",
+    "multi_host",
+    "irreversible",
+]);
+export const Decision = {
+    ALLOW: "allow",
+    DENY: "deny",
+    REQUIRE_APPROVAL: "require_approval",
+};
+/**
+ * v0.8: the decision enum is closed at exactly these three values. Unknown
+ * decision values — including the two refined v0.3 values retired in v0.8 —
+ * MUST fail parsing; consumers reject rather than coerce.
+ */
+export const DecisionSchema = z.enum(["allow", "deny", "require_approval"]);
+/** v0.3: whether a tool's effects can be undone. */
+export const ReversibilitySchema = z.enum([
+    "reversible",
+    "partially_reversible",
+    "irreversible",
+]);
+/** v0.7: standard ext.confidence shape on policy decisions. A low-confidence
+ * allow is still an allow (G-2-safe); hosts may route it to spot checks. */
+export const ConfidenceSchema = z
+    .object({
+    score: z.number().min(0).max(1),
+    basis: z.string().optional(),
+})
+    .passthrough();
+/** v0.3: standard ext.cost_estimate shape for cost-aware policy. */
+export const CostEstimateSchema = z
+    .object({
+    currency: z.string().min(1),
+    amount: z.number().nonnegative(),
+    amount_max: z.number().nonnegative().optional(),
+    basis: z.string().optional(),
+    confidence: z.number().min(0).max(1).optional(),
+})
+    .passthrough();
+/** Core strictness modes (SPEC §5.3). */
+export const Strictness = {
+    STRICT_LITERAL: "strict_literal",
+    STRICT_TEMPLATE: "strict_template",
+};
+/**
+ * v0.8: strictness is an open string. Core normatively defines
+ * `strict_literal` (REQUIRED, default) and `strict_template` (OPTIONAL);
+ * any other value is a companion/extension mode, and a host that does not
+ * implement the requested mode MUST fail closed (C-16), never downgrade.
+ */
+export const StrictnessSchema = z.string().min(1);
+// ──────────────────────────────────────────────────────────────────────────
+// Proposal
+// ──────────────────────────────────────────────────────────────────────────
+export const StepSchema = z
+    .object({
+    tool: z.string().min(1),
+    args: z.record(z.unknown()),
+    expected: z.record(z.unknown()).optional(),
+    blast_radius: BlastRadiusSchema,
+})
+    .strict();
+export const ContextSchema = z
+    .object({
+    rationale: z.string().min(1),
+    triggered_by: z.string().optional(),
+    // Also the carrier of the v0.8 negotiation idiom (SPEC §5.5): a
+    // proposal submitted in response to a guided deny references the
+    // original proposal_id here.
+    derived_from: z.string().optional(),
+})
+    .passthrough(); // host-specific extensions allowed
+export const ProposalSchema = z
+    .object({
+    aae_version: versionSchema,
+    proposal_id: ulidSchema,
+    agent_id: z.string().min(1),
+    // v0.3, optional (G-1): ordered provenance; last entry must equal agent_id
+    agent_chain: z.array(z.string().min(1)).min(1).optional(),
+    tenant_id: z.string().min(1),
+    intent: z.string().regex(/^[a-z][a-z0-9_]*$/),
+    context: ContextSchema,
+    steps: z.array(StepSchema).min(1),
+    submitted_at: z.string().datetime({ offset: true }),
+})
+    .strict()
+    .superRefine((p, ctx) => {
+    if (p.agent_chain &&
+        p.agent_chain[p.agent_chain.length - 1] !== p.agent_id) {
+        ctx.addIssue({
+            code: z.ZodIssueCode.custom,
+            message: "agent_chain[-1] must equal agent_id",
+        });
+    }
+});
+// ──────────────────────────────────────────────────────────────────────────
+// Preview
+// ──────────────────────────────────────────────────────────────────────────
+export const EffectSchema = z
+    .object({
+    type: z.string(),
+    target: z.string(),
+    from: z.string().nullable().optional(),
+    to: z.string().nullable().optional(),
+    details: z.record(z.unknown()).optional(),
+})
+    .strict();
+export const StepPreviewSchema = z
+    .object({
+    step_index: z.number().int().nonnegative(),
+    predicted_effects: z.array(EffectSchema),
+    estimated_duration_ms: z.number().int().nonnegative().optional(),
+    diff: z.string().nullable().optional(),
+    warnings: z.array(z.string()).default([]),
+    preview_unsupported_reason: z.string().optional(),
+    // v0.3: non-normative extension fields; standardized shape: cost_estimate
+    ext: z.record(z.unknown()).nullish(),
+})
+    .strict();
+/** Parse a decision's ext.confidence into the standard shape, if present. */
+export function confidenceOf(decision) {
+    const raw = decision.ext?.confidence;
+    if (raw === undefined || raw === null)
+        return null;
+    return ConfidenceSchema.parse(raw);
+}
+/** Parse a step preview's ext.cost_estimate into the standard shape, if present. */
+export function costEstimateOf(preview) {
+    const raw = preview.ext?.cost_estimate;
+    if (raw === undefined || raw === null)
+        return null;
+    return CostEstimateSchema.parse(raw);
+}
+export const PreviewSchema = z
+    .object({
+    aae_version: versionSchema,
+    preview_id: ulidSchema,
+    proposal_id: ulidSchema,
+    step_previews: z.array(StepPreviewSchema),
+    aggregate_blast_radius: BlastRadiusSchema,
+    preview_unsupported: z.boolean(),
+    generated_at: z.string().datetime({ offset: true }),
+})
+    .strict();
+// ──────────────────────────────────────────────────────────────────────────
+// Policy decision
+// ──────────────────────────────────────────────────────────────────────────
+export const PolicyDecisionSchema = z
+    .object({
+    aae_version: versionSchema,
+    decision_id: ulidSchema,
+    proposal_id: ulidSchema,
+    decision: DecisionSchema,
+    policy_version: z.string(),
+    rules_evaluated: z.array(z.string()),
+    reason: z.string(),
+    required_approvers: z.array(z.string()).optional(),
+    expires_at: z.string().datetime({ offset: true }).optional(),
+    strictness: StrictnessSchema.default("strict_literal"),
+    decided_at: z.string().datetime({ offset: true }),
+    // v0.7: non-normative extensions; standardized shape: confidence
+    ext: z.record(z.unknown()).nullish(),
+})
+    .strict()
+    .superRefine((d, ctx) => {
+    if (d.decision === "allow" && !d.expires_at) {
+        ctx.addIssue({
+            code: z.ZodIssueCode.custom,
+            message: "expires_at is required when decision is 'allow'",
+        });
+    }
+    if (d.decision === "require_approval" && !d.required_approvers?.length) {
+        ctx.addIssue({
+            code: z.ZodIssueCode.custom,
+            message: `required_approvers is required when decision is '${d.decision}'`,
+        });
+    }
+});
+// ──────────────────────────────────────────────────────────────────────────
+// Capability token
+// ──────────────────────────────────────────────────────────────────────────
+export const CapabilityScopeSchema = z
+    .object({
+    tool: z.string(),
+    approved_steps_hash: sha256Schema,
+    target_constraints: z.record(z.unknown()).optional(),
+})
+    .passthrough();
+export const CapabilityTokenSchema = z
+    .object({
+    aae_version: versionSchema,
+    token_id: ulidSchema,
+    proposal_id: ulidSchema,
+    decision_id: ulidSchema,
+    scope: CapabilityScopeSchema,
+    iat: z.number().int(),
+    exp: z.number().int(),
+    iss: z.string(),
+    sub: z.string().optional(),
+    max_uses: z.number().int().min(1),
+})
+    .strict();
+// ──────────────────────────────────────────────────────────────────────────
+// Audit event
+// ──────────────────────────────────────────────────────────────────────────
+export const EventSignatureSchema = z
+    .object({
+    alg: z.enum(["ed25519", "ecdsa-p256", "rsa-pss-sha256"]),
+    key_id: z.string(),
+    value: z.string(),
+})
+    .strict();
+/**
+ * v0.8 core event type binding an out-of-chain artifact to a chain event by
+ * content hash. Required payload fields: `artifact_hash` (algorithm-prefixed
+ * canonical hash), `bound_event_id`, `artifact_kind` (free-form string, e.g.
+ * `legible_record`, `session_recording`). Optional: `uri`, `media_type`,
+ * `producer_id`, `producer_version`. Artifacts are advisory; the chain event
+ * is authoritative.
+ */
+export const EVENT_TYPE_ARTIFACT_ATTESTED = "artifact_attested";
+export const AuditEventSchema = z
+    .object({
+    aae_version: versionSchema,
+    event_id: ulidSchema,
+    // Open string; core v0.8 adds `artifact_attested`. Consumers MUST
+    // ignore unknown event types.
+    event_type: z.string(),
+    proposal_id: ulidSchema,
+    tenant_id: z.string().min(1),
+    agent_id: z.string().min(1),
+    actor: z.string(),
+    ts: z.string().datetime({ offset: true }),
+    payload: z.record(z.unknown()),
+    prev_event_hash: sha256Schema.nullable(),
+    this_event_hash: sha256Schema,
+    signature: EventSignatureSchema.nullish(),
+})
+    .strict();
+// ──────────────────────────────────────────────────────────────────────────
+// Tool registration
+// ──────────────────────────────────────────────────────────────────────────
+export const ToolRegistrationSchema = z
+    .object({
+    aae_version: versionSchema,
+    name: z.string().regex(/^[a-z][a-z0-9_]*$/),
+    description: z.string().optional(),
+    plan_schema: z.record(z.unknown()),
+    preview_schema: z.record(z.unknown()).optional(),
+    preview_supported: z.boolean(),
+    default_blast_radius: BlastRadiusSchema,
+    aae_required: z.boolean(),
+    // v0.3 optional metadata (G-4)
+    data_classes_touched: z.array(z.string()).default([]),
+    compliance_relevant: z.boolean().default(false),
+    systems_of_record: z.array(z.string()).default([]),
+    reversibility: ReversibilitySchema.optional(),
+})
+    .strict();
+//# sourceMappingURL=models.js.map

package/dist/models.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"models.js","sourceRoot":"","sources":["../src/models.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,gBAAgB,GAAG,KAAc,CAAC;AAE/C,MAAM,UAAU,GAAG,CAAC;KAClB,MAAM,EAAE;KACR,KAAK,CAAC,0BAA0B,EAAE,gBAAgB,CAAC,CAAC;AACtD,MAAM,YAAY,GAAG,CAAC;KACpB,MAAM,EAAE;KACR,KAAK,CAAC,uBAAuB,EAAE,sBAAsB,CAAC,CAAC;AACzD,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;AAE7D,6EAA6E;AAC7E,QAAQ;AACR,6EAA6E;AAE7E,MAAM,CAAC,MAAM,WAAW,GAAG;IAC1B,SAAS,EAAE,WAAW;IACtB,cAAc,EAAE,gBAAgB;IAChC,WAAW,EAAE,aAAa;IAC1B,UAAU,EAAE,YAAY;IACxB,YAAY,EAAE,cAAc;CACnB,CAAC;AACX,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,IAAI,CAAC;IACvC,WAAW;IACX,gBAAgB;IAChB,aAAa;IACb,YAAY;IACZ,cAAc;CACd,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,QAAQ,GAAG;IACvB,KAAK,EAAE,OAAO;IACd,IAAI,EAAE,MAAM;IACZ,gBAAgB,EAAE,kBAAkB;CAC3B,CAAC;AACX;;;;GAIG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,kBAAkB,CAAC,CAAC,CAAC;AAG5E,oDAAoD;AACpD,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,IAAI,CAAC;IACzC,YAAY;IACZ,sBAAsB;IACtB,cAAc;CACd,CAAC,CAAC;AAGH;4EAC4E;AAC5E,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC;KAC/B,MAAM,CAAC;IACP,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC5B,CAAC;KACD,WAAW,EAAE,CAAC;AAGhB,oEAAoE;AACpE,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC;KACjC,MAAM,CAAC;IACP,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE;IAChC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;IAC/C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CAC/C,CAAC;KACD,WAAW,EAAE,CAAC;AAGhB,yCAAyC;AACzC,MAAM,CAAC,MAAM,UAAU,GAAG;IACzB,cAAc,EAAE,gBAAgB;IAChC,eAAe,EAAE,iBAAiB;CACzB,CAAC;AACX;;;;;GAKG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AAGlD,6EAA6E;AAC7E,WAAW;AACX,6EAA6E;AAE7E,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC;KACzB,MAAM,CAAC;IACP,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;IAC3B,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC1C,YAAY,EAAE,iBAAiB;CAC/B,CAAC;KACD,MAAM,EAAE,CAAC;AAGX,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC;KAC5B,MAAM,CAAC;IACP,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACnC,gEAAgE;IAChE,iEAAiE;IACjE,6BAA6B;IAC7B,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACnC,CAAC;KACD,WAAW,EAAE,CAAC,CAAC,mCAAmC;AAGpD,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC;KAC7B,MAAM,CAAC;IACP,WAAW,EAAE,aAAa;IAC1B,WAAW,EAAE,UAAU;IACvB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,2EAA2E;IAC3E,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACzD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,mBAAmB,CAAC;IAC7C,OAAO,EAAE,aAAa;IACtB,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACjC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;CACnD,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE;IACvB,IACC,CAAC,CAAC,WAAW;QACb,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,QAAQ,EACrD,CAAC;QACF,GAAG,CAAC,QAAQ,CAAC;YACZ,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,OAAO,EAAE,qCAAqC;SAC9C,CAAC,CAAC;IACJ,CAAC;AACF,CAAC,CAAC,CAAC;AAGJ,6EAA6E;AAC7E,UAAU;AACV,6EAA6E;AAE7E,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC;KAC3B,MAAM,CAAC;IACP,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACtC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACpC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;CACzC,CAAC;KACD,MAAM,EAAE,CAAC;AAGX,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC;KAChC,MAAM,CAAC;IACP,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAC1C,iBAAiB,EAAE,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC;IACxC,qBAAqB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;IAChE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACtC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACzC,0BAA0B,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjD,0EAA0E;IAC1E,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;CACpC,CAAC;KACD,MAAM,EAAE,CAAC;AAGX,6EAA6E;AAC7E,MAAM,UAAU,YAAY,CAAC,QAAwB;IACpD,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,EAAE,UAAU,CAAC;IACrC,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACnD,OAAO,gBAAgB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;AACpC,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,cAAc,CAAC,OAAoB;IAClD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,aAAa,CAAC;IACvC,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACnD,OAAO,kBAAkB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;AACtC,CAAC;AAED,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC;KAC5B,MAAM,CAAC;IACP,WAAW,EAAE,aAAa;IAC1B,UAAU,EAAE,UAAU;IACtB,WAAW,EAAE,UAAU;IACvB,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC;IACzC,sBAAsB,EAAE,iBAAiB;IACzC,mBAAmB,EAAE,CAAC,CAAC,OAAO,EAAE;IAChC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;CACnD,CAAC;KACD,MAAM,EAAE,CAAC;AAGX,6EAA6E;AAC7E,kBAAkB;AAClB,6EAA6E;AAE7E,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC;KACnC,MAAM,CAAC;IACP,WAAW,EAAE,aAAa;IAC1B,WAAW,EAAE,UAAU;IACvB,WAAW,EAAE,UAAU;IACvB,QAAQ,EAAE,cAAc;IACxB,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE;IAC1B,eAAe,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IACpC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,kBAAkB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAClD,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC5D,UAAU,EAAE,gBAAgB,CAAC,OAAO,CAAC,gBAAgB,CAAC;IACtD,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IACjD,iEAAiE;IACjE,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;CACpC,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE;IACvB,IAAI,CAAC,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC;QAC7C,GAAG,CAAC,QAAQ,CAAC;YACZ,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,OAAO,EAAE,iDAAiD;SAC1D,CAAC,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,CAAC,QAAQ,KAAK,kBAAkB,IAAI,CAAC,CAAC,CAAC,kBAAkB,EAAE,MAAM,EAAE,CAAC;QACxE,GAAG,CAAC,QAAQ,CAAC;YACZ,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,OAAO,EAAE,oDAAoD,CAAC,CAAC,QAAQ,GAAG;SAC1E,CAAC,CAAC;IACJ,CAAC;AACF,CAAC,CAAC,CAAC;AAGJ,6EAA6E;AAC7E,mBAAmB;AACnB,6EAA6E;AAE7E,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC;KACpC,MAAM,CAAC;IACP,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,mBAAmB,EAAE,YAAY;IACjC,kBAAkB,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;CACpD,CAAC;KACD,WAAW,EAAE,CAAC;AAGhB,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC;KACpC,MAAM,CAAC;IACP,WAAW,EAAE,aAAa;IAC1B,QAAQ,EAAE,UAAU;IACpB,WAAW,EAAE,UAAU;IACvB,WAAW,EAAE,UAAU;IACvB,KAAK,EAAE,qBAAqB;IAC5B,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IACrB,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IACrB,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE;IACf,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CACjC,CAAC;KACD,MAAM,EAAE,CAAC;AAGX,6EAA6E;AAC7E,cAAc;AACd,6EAA6E;AAE7E,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC;KACnC,MAAM,CAAC;IACP,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,YAAY,EAAE,gBAAgB,CAAC,CAAC;IACxD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;CACjB,CAAC;KACD,MAAM,EAAE,CAAC;AAGX;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,mBAA4B,CAAC;AAEzE,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC;KAC/B,MAAM,CAAC;IACP,WAAW,EAAE,aAAa;IAC1B,QAAQ,EAAE,UAAU;IACpB,kEAAkE;IAClE,8BAA8B;IAC9B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,WAAW,EAAE,UAAU;IACvB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IACzC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;IAC9B,eAAe,EAAE,YAAY,CAAC,QAAQ,EAAE;IACxC,eAAe,EAAE,YAAY;IAC7B,SAAS,EAAE,oBAAoB,CAAC,OAAO,EAAE;CACzC,CAAC;KACD,MAAM,EAAE,CAAC;AAGX,6EAA6E;AAC7E,oBAAoB;AACpB,6EAA6E;AAE7E,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC;KACrC,MAAM,CAAC;IACP,WAAW,EAAE,aAAa;IAC1B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,mBAAmB,CAAC;IAC3C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;IAClC,cAAc,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;IAChD,iBAAiB,EAAE,CAAC,CAAC,OAAO,EAAE;IAC9B,oBAAoB,EAAE,iBAAiB;IACvC,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE;IACzB,+BAA+B;IAC/B,oBAAoB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACrD,mBAAmB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IAC/C,iBAAiB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAClD,aAAa,EAAE,mBAAmB,CAAC,QAAQ,EAAE;CAC7C,CAAC;KACD,MAAM,EAAE,CAAC"}

package/dist/signing.d.ts

@@ -0,0 +1,52 @@
+/**
+ * Audit-event signatures (SPEC §3.5, v0.7).
+ *
+ * The signer signs the event's ATTESTATION BYTES —
+ * `canonicalize(view sans signature sans this_event_hash) || prev_event_hash`
+ * — which are exactly the bytes an unsigned event would hash. The signature
+ * is attached, then `this_event_hash` is computed over the view INCLUDING it.
+ * So: the chain commits to the signature (stripping it is hash-detectable
+ * without keys), and the signature commits to content AND chain position
+ * (prev hash is inside the signed bytes).
+ *
+ * Consequence: signatures are applied at append time or never.
+ *
+ * v0.x permits exactly one algorithm, `ed25519` — deterministic, so signed
+ * fixtures are byte-reproducible.
+ */
+/** The only signature algorithm permitted in v0.x. */
+export declare const SIGNATURE_ALG: "ed25519";
+export declare class SignatureError extends Error {
+    readonly eventId?: string | undefined;
+    name: string;
+    constructor(message: string, eventId?: string | undefined);
+}
+/** The bytes a signature covers. */
+export declare function attestationBytes(event: Record<string, unknown>, prevEventHash: string | null): Buffer;
+/** An Ed25519 event signer over a PKCS#8 PEM private key. */
+export declare class Ed25519EventSigner {
+    readonly keyId: string;
+    private readonly key;
+    constructor(keyId: string, privateKeyPem: string);
+    sign(data: Buffer): string;
+}
+/**
+ * Value-based chain production WITH a signature: seal prev, sign, attach,
+ * then hash the view including the signature.
+ */
+export declare function appendEventValueSigned(event: Record<string, unknown>, prevEventHash: string | null, signer: Ed25519EventSigner): Record<string, unknown>;
+/**
+ * Verify one signed event against a keyId -> PEM public key map.
+ *
+ * Returns true/false for a present signature. Structural problems (missing
+ * signature, unknown key, unpermitted algorithm) THROW — operators must be
+ * able to tell "forged" from "misconfigured".
+ */
+export declare function verifyEventSignature(event: Record<string, unknown>, trustedKeys: Record<string, string>): boolean;
+/**
+ * Verify signatures across a chain; returns how many verified. Unsigned
+ * events are permitted unless requireAll; a present-but-invalid signature
+ * always throws.
+ */
+export declare function verifyChainSignatures(events: Record<string, unknown>[], trustedKeys: Record<string, string>, requireAll?: boolean): number;
+//# sourceMappingURL=signing.d.ts.map

package/dist/signing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"signing.d.ts","sourceRoot":"","sources":["../src/signing.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAYH,sDAAsD;AACtD,eAAO,MAAM,aAAa,EAAG,SAAkB,CAAC;AAEhD,qBAAa,cAAe,SAAQ,KAAK;aAIvB,OAAO,CAAC,EAAE,MAAM;IAHxB,IAAI,SAAoB;gBAEhC,OAAO,EAAE,MAAM,EACC,OAAO,CAAC,EAAE,MAAM,YAAA;CAIjC;AAED,oCAAoC;AACpC,wBAAgB,gBAAgB,CAC/B,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,aAAa,EAAE,MAAM,GAAG,IAAI,GAC1B,MAAM,CASR;AAED,6DAA6D;AAC7D,qBAAa,kBAAkB;aAIb,KAAK,EAAE,MAAM;IAH9B,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAY;gBAGf,KAAK,EAAE,MAAM,EAC7B,aAAa,EAAE,MAAM;IAUtB,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM;CAI1B;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CACrC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,aAAa,EAAE,MAAM,GAAG,IAAI,EAC5B,MAAM,EAAE,kBAAkB,GACxB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAgBzB;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CACnC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GACjC,OAAO,CAuCT;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CACpC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,EACjC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EACnC,UAAU,UAAQ,GAChB,MAAM,CAqBR"}

package/dist/signing.js

@@ -0,0 +1,123 @@
+/**
+ * Audit-event signatures (SPEC §3.5, v0.7).
+ *
+ * The signer signs the event's ATTESTATION BYTES —
+ * `canonicalize(view sans signature sans this_event_hash) || prev_event_hash`
+ * — which are exactly the bytes an unsigned event would hash. The signature
+ * is attached, then `this_event_hash` is computed over the view INCLUDING it.
+ * So: the chain commits to the signature (stripping it is hash-detectable
+ * without keys), and the signature commits to content AND chain position
+ * (prev hash is inside the signed bytes).
+ *
+ * Consequence: signatures are applied at append time or never.
+ *
+ * v0.x permits exactly one algorithm, `ed25519` — deterministic, so signed
+ * fixtures are byte-reproducible.
+ */
+import { createPrivateKey, createPublicKey, sign as nodeSign, verify as nodeVerify, } from "node:crypto";
+import { canonicalize } from "json-canonicalize";
+import { computeEventHash, eventForHashing } from "./hashchain.js";
+/** The only signature algorithm permitted in v0.x. */
+export const SIGNATURE_ALG = "ed25519";
+export class SignatureError extends Error {
+    eventId;
+    name = "SignatureError";
+    constructor(message, eventId) {
+        super(message);
+        this.eventId = eventId;
+    }
+}
+/** The bytes a signature covers. */
+export function attestationBytes(event, prevEventHash) {
+    // The signed view omits the signature itself (and this_event_hash, which
+    // eventForHashing already drops): a signature cannot cover itself.
+    const { signature: _omit, ...view } = eventForHashing(event);
+    void _omit;
+    return Buffer.concat([
+        Buffer.from(canonicalize(view), "utf8"),
+        Buffer.from(prevEventHash ?? "", "utf8"),
+    ]);
+}
+/** An Ed25519 event signer over a PKCS#8 PEM private key. */
+export class Ed25519EventSigner {
+    keyId;
+    key;
+    constructor(keyId, privateKeyPem) {
+        this.keyId = keyId;
+        this.key = createPrivateKey(privateKeyPem);
+        if (this.key.asymmetricKeyType !== "ed25519") {
+            throw new SignatureError(`signing key ${keyId} is not ed25519 (the only permitted v0.x algorithm)`);
+        }
+    }
+    sign(data) {
+        // Ed25519 in node: algorithm is null (the key determines it).
+        return nodeSign(null, data, this.key).toString("base64url");
+    }
+}
+/**
+ * Value-based chain production WITH a signature: seal prev, sign, attach,
+ * then hash the view including the signature.
+ */
+export function appendEventValueSigned(event, prevEventHash, signer) {
+    const sealed = {
+        ...event,
+        prev_event_hash: prevEventHash,
+    };
+    sealed.signature = {
+        alg: SIGNATURE_ALG,
+        key_id: signer.keyId,
+        value: signer.sign(attestationBytes(sealed, prevEventHash)),
+    };
+    // hash AFTER attaching: the chain commits to the signature
+    sealed.this_event_hash = computeEventHash(eventForHashing(sealed), prevEventHash);
+    return sealed;
+}
+/**
+ * Verify one signed event against a keyId -> PEM public key map.
+ *
+ * Returns true/false for a present signature. Structural problems (missing
+ * signature, unknown key, unpermitted algorithm) THROW — operators must be
+ * able to tell "forged" from "misconfigured".
+ */
+export function verifyEventSignature(event, trustedKeys) {
+    const eventId = String(event.event_id ?? "<unknown>");
+    const sig = event.signature;
+    if (sig === null || sig === undefined) {
+        throw new SignatureError("event carries no signature", eventId);
+    }
+    if (sig.alg !== SIGNATURE_ALG) {
+        throw new SignatureError(`signature algorithm ${String(sig.alg)} not permitted in v0.x (ed25519 only)`, eventId);
+    }
+    const pem = trustedKeys[String(sig.key_id)];
+    if (pem === undefined) {
+        throw new SignatureError(`unknown signing key ${String(sig.key_id)}`, eventId);
+    }
+    const key = createPublicKey(pem);
+    if (key.asymmetricKeyType !== "ed25519") {
+        throw new SignatureError(`trusted key ${String(sig.key_id)} is not ed25519`, eventId);
+    }
+    const data = attestationBytes(event, event.prev_event_hash ?? null);
+    return nodeVerify(null, data, key, Buffer.from(String(sig.value), "base64url"));
+}
+/**
+ * Verify signatures across a chain; returns how many verified. Unsigned
+ * events are permitted unless requireAll; a present-but-invalid signature
+ * always throws.
+ */
+export function verifyChainSignatures(events, trustedKeys, requireAll = false) {
+    let verified = 0;
+    for (const ev of events) {
+        if (ev.signature === null || ev.signature === undefined) {
+            if (requireAll) {
+                throw new SignatureError("unsigned event in a chain requiring signatures", String(ev.event_id ?? "<unknown>"));
+            }
+            continue;
+        }
+        if (!verifyEventSignature(ev, trustedKeys)) {
+            throw new SignatureError("event signature did not verify (content, position, or signature altered)", String(ev.event_id ?? "<unknown>"));
+        }
+        verified += 1;
+    }
+    return verified;
+}
+//# sourceMappingURL=signing.js.map

package/dist/signing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"signing.js","sourceRoot":"","sources":["../src/signing.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAEN,gBAAgB,EAChB,eAAe,EACf,IAAI,IAAI,QAAQ,EAChB,MAAM,IAAI,UAAU,GACpB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAEnE,sDAAsD;AACtD,MAAM,CAAC,MAAM,aAAa,GAAG,SAAkB,CAAC;AAEhD,MAAM,OAAO,cAAe,SAAQ,KAAK;IAIvB;IAHR,IAAI,GAAG,gBAAgB,CAAC;IACjC,YACC,OAAe,EACC,OAAgB;QAEhC,KAAK,CAAC,OAAO,CAAC,CAAC;QAFC,YAAO,GAAP,OAAO,CAAS;IAGjC,CAAC;CACD;AAED,oCAAoC;AACpC,MAAM,UAAU,gBAAgB,CAC/B,KAA8B,EAC9B,aAA4B;IAE5B,yEAAyE;IACzE,mEAAmE;IACnE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;IAC7D,KAAK,KAAK,CAAC;IACX,OAAO,MAAM,CAAC,MAAM,CAAC;QACpB,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QACvC,MAAM,CAAC,IAAI,CAAC,aAAa,IAAI,EAAE,EAAE,MAAM,CAAC;KACxC,CAAC,CAAC;AACJ,CAAC;AAED,6DAA6D;AAC7D,MAAM,OAAO,kBAAkB;IAIb;IAHA,GAAG,CAAY;IAEhC,YACiB,KAAa,EAC7B,aAAqB;QADL,UAAK,GAAL,KAAK,CAAQ;QAG7B,IAAI,CAAC,GAAG,GAAG,gBAAgB,CAAC,aAAa,CAAC,CAAC;QAC3C,IAAI,IAAI,CAAC,GAAG,CAAC,iBAAiB,KAAK,SAAS,EAAE,CAAC;YAC9C,MAAM,IAAI,cAAc,CACvB,eAAe,KAAK,qDAAqD,CACzE,CAAC;QACH,CAAC;IACF,CAAC;IAED,IAAI,CAAC,IAAY;QAChB,8DAA8D;QAC9D,OAAO,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC7D,CAAC;CACD;AAED;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CACrC,KAA8B,EAC9B,aAA4B,EAC5B,MAA0B;IAE1B,MAAM,MAAM,GAA4B;QACvC,GAAG,KAAK;QACR,eAAe,EAAE,aAAa;KAC9B,CAAC;IACF,MAAM,CAAC,SAAS,GAAG;QAClB,GAAG,EAAE,aAAa;QAClB,MAAM,EAAE,MAAM,CAAC,KAAK;QACpB,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;KAC3D,CAAC;IACF,2DAA2D;IAC3D,MAAM,CAAC,eAAe,GAAG,gBAAgB,CACxC,eAAe,CAAC,MAAM,CAAC,EACvB,aAAa,CACb,CAAC;IACF,OAAO,MAAM,CAAC;AACf,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CACnC,KAA8B,EAC9B,WAAmC;IAEnC,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,QAAQ,IAAI,WAAW,CAAC,CAAC;IACtD,MAAM,GAAG,GAAG,KAAK,CAAC,SAGN,CAAC;IACb,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACvC,MAAM,IAAI,cAAc,CAAC,4BAA4B,EAAE,OAAO,CAAC,CAAC;IACjE,CAAC;IACD,IAAI,GAAG,CAAC,GAAG,KAAK,aAAa,EAAE,CAAC;QAC/B,MAAM,IAAI,cAAc,CACvB,uBAAuB,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,uCAAuC,EAC7E,OAAO,CACP,CAAC;IACH,CAAC;IACD,MAAM,GAAG,GAAG,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;IAC5C,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACvB,MAAM,IAAI,cAAc,CACvB,uBAAuB,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAC3C,OAAO,CACP,CAAC;IACH,CAAC;IACD,MAAM,GAAG,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,GAAG,CAAC,iBAAiB,KAAK,SAAS,EAAE,CAAC;QACzC,MAAM,IAAI,cAAc,CACvB,eAAe,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,iBAAiB,EAClD,OAAO,CACP,CAAC;IACH,CAAC;IACD,MAAM,IAAI,GAAG,gBAAgB,CAC5B,KAAK,EACJ,KAAK,CAAC,eAAiC,IAAI,IAAI,CAChD,CAAC;IACF,OAAO,UAAU,CAChB,IAAI,EACJ,IAAI,EACJ,GAAG,EACH,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,WAAW,CAAC,CAC3C,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CACpC,MAAiC,EACjC,WAAmC,EACnC,UAAU,GAAG,KAAK;IAElB,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,KAAK,MAAM,EAAE,IAAI,MAAM,EAAE,CAAC;QACzB,IAAI,EAAE,CAAC,SAAS,KAAK,IAAI,IAAI,EAAE,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACzD,IAAI,UAAU,EAAE,CAAC;gBAChB,MAAM,IAAI,cAAc,CACvB,gDAAgD,EAChD,MAAM,CAAC,EAAE,CAAC,QAAQ,IAAI,WAAW,CAAC,CAClC,CAAC;YACH,CAAC;YACD,SAAS;QACV,CAAC;QACD,IAAI,CAAC,oBAAoB,CAAC,EAAE,EAAE,WAAW,CAAC,EAAE,CAAC;YAC5C,MAAM,IAAI,cAAc,CACvB,0EAA0E,EAC1E,MAAM,CAAC,EAAE,CAAC,QAAQ,IAAI,WAAW,CAAC,CAClC,CAAC;QACH,CAAC;QACD,QAAQ,IAAI,CAAC,CAAC;IACf,CAAC;IACD,OAAO,QAAQ,CAAC;AACjB,CAAC"}

package/package.json

@@ -1,17 +1,65 @@
 {
   "name": "aae-protocol",
-  "version": "0.0.1",
-  "description": "Accountable Agentic Execution — name reservation placeholder (see repository)",
+  "version": "0.9.0",
+  "description": "Accountable Agentic Execution \u2014 protocol SDK for TypeScript",
   "license": "MIT OR Apache-2.0",
-  "author": "Brent Ellis <brent@r3motely.com>",
+  "author": "Brent Ellis <brent@r3motely.net>",
   "repository": {
     "type": "git",
-    "url": "https://github.com/r3moteBee/aae.git"
+    "url": "https://github.com/r3moteBee/aae.git",
+    "directory": "sdks/typescript"
   },
   "homepage": "https://github.com/r3moteBee/aae",
-  "keywords": ["agent", "ai", "governance", "policy", "audit", "aae"],
+  "bugs": "https://github.com/r3moteBee/aae/issues",
+  "keywords": [
+    "agent",
+    "ai",
+    "governance",
+    "policy",
+    "audit",
+    "aae"
+  ],
   "type": "module",
-  "main": "./index.js",
-  "files": ["index.js", "README.md"],
-  "engines": { "node": ">=20" }
+  "main": "./dist/index.js",
+  "module": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    },
+    "./hashchain": {
+      "types": "./dist/hashchain.d.ts",
+      "import": "./dist/hashchain.js"
+    }
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "../../LICENSE-MIT",
+    "../../LICENSE-APACHE"
+  ],
+  "engines": {
+    "node": ">=20"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "test": "vitest run",
+    "test:conformance": "vitest run test/conformance.test.ts",
+    "lint": "biome check src test",
+    "produce-chain": "node scripts/produce-chain.mjs",
+    "verify-chain": "node scripts/verify-chain.mjs"
+  },
+  "dependencies": {
+    "zod": "^3.23.0",
+    "ulid": "^2.3.0",
+    "json-canonicalize": "^1.0.6",
+    "jose": "^5.6.0"
+  },
+  "devDependencies": {
+    "@biomejs/biome": "^1.8.0",
+    "@types/node": "^20.14.0",
+    "typescript": "^5.5.0",
+    "vitest": "^1.6.0"
+  }
 }

package/index.js

@@ -1,4 +0,0 @@
-// Name-reservation placeholder for the AAE protocol SDK.
-// Contains no implementation. See https://github.com/r3moteBee/aae —
-// the real SDK ships at version 0.7.0 and later.
-export const VERSION = "0.0.1";