@agenticprimitives/a2a 0.0.0-alpha.1

package/dist/push.js

@@ -0,0 +1,39 @@
+// Signed push delivery (spec 269 FR-5.2 / SR-5). On a terminal state the assignee SA signs a canonical
+// envelope and POSTs it to the sender-registered webhook; the receiver independently verifies the
+// assignee's signature + dedupes on (taskId, state). Signing + the HTTP POST are INJECTED (the package
+// holds no keys + no transport); the assignee signer MUST be a KMS/session signer (SR-8), never a raw key.
+import { keccak256, encodeAbiParameters, toBytes } from 'viem';
+/** Canonical digest the assignee signs (binds task, state, artifact set, timestamp). */
+export function hashPushPayload(p) {
+    return keccak256(encodeAbiParameters([{ type: 'bytes32' }, { type: 'bytes32' }, { type: 'bytes32[]' }, { type: 'uint256' }], [p.taskId, keccak256(toBytes(p.state)), p.artifactIds, BigInt(p.ts)]));
+}
+/** Build + sign + best-effort-POST the terminal push, with bounded retry. Returns whether it was
+ *  delivered. A no-op (false) when the task has no `pushConfig`. */
+export async function deliverPush(record, sign, send, now, retries = 2) {
+    if (!record.pushConfig?.url)
+        return false;
+    const payload = {
+        taskId: record.task.taskId,
+        state: record.task.state,
+        artifactIds: record.task.artifactIds,
+        ts: Math.floor(now / 1000),
+    };
+    const signature = await sign(hashPushPayload(payload));
+    const envelope = { payload, signature, token: record.pushConfig.token };
+    for (let attempt = 0; attempt <= retries; attempt++) {
+        try {
+            await send(record.pushConfig.url, envelope);
+            return true;
+        }
+        catch {
+            if (attempt === retries)
+                return false;
+        }
+    }
+    return false;
+}
+/** Receiver-side verification: the assignee SA signed this envelope over the recomputed digest. */
+export async function verifyPushEnvelope(envelope, assigneeSA, verify) {
+    return verify(assigneeSA, hashPushPayload(envelope.payload), envelope.signature);
+}
+//# sourceMappingURL=push.js.map

package/dist/push.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"push.js","sourceRoot":"","sources":["../src/push.ts"],"names":[],"mappings":"AAAA,uGAAuG;AACvG,kGAAkG;AAClG,uGAAuG;AACvG,2GAA2G;AAC3G,OAAO,EAAE,SAAS,EAAE,mBAAmB,EAAE,OAAO,EAA0B,MAAM,MAAM,CAAC;AAmBvF,wFAAwF;AACxF,MAAM,UAAU,eAAe,CAAC,CAAc;IAC5C,OAAO,SAAS,CACd,mBAAmB,CACjB,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,EACtF,CAAC,CAAC,CAAC,MAAM,EAAE,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CACrE,CACF,CAAC;AACJ,CAAC;AAOD;oEACoE;AACpE,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,MAAkB,EAClB,IAAoB,EACpB,IAAgB,EAChB,GAAW,EACX,OAAO,GAAG,CAAC;IAEX,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,GAAG;QAAE,OAAO,KAAK,CAAC;IAC1C,MAAM,OAAO,GAAgB;QAC3B,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM;QAC1B,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK;QACxB,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW;QACpC,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC;KAC3B,CAAC;IACF,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC;IACvD,MAAM,QAAQ,GAAiB,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;IACtF,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC;QACpD,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;YAC5C,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,OAAO,KAAK,OAAO;gBAAE,OAAO,KAAK,CAAC;QACxC,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,mGAAmG;AACnG,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,QAAsB,EACtB,UAAmB,EACnB,MAA2E;IAE3E,OAAO,MAAM,CAAC,UAAU,EAAE,eAAe,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC;AACnF,CAAC"}

package/dist/runtime.d.ts

@@ -0,0 +1,53 @@
+import { type HandoffPolicy } from '@agenticprimitives/fulfillment';
+import type { Address, Hex } from '@agenticprimitives/types';
+import type { Delegation } from '@agenticprimitives/delegation';
+import type { TaskRecord, TaskState, TaskEvent, A2aMessage } from './types.js';
+import { isTerminal } from './types.js';
+import { type SkillContext, type SkillHandler } from './skill-handler.js';
+/** Build a fresh `submitted` task record from a verified inbound message + grant. */
+export declare function newTaskRecord(args: {
+    taskId: Hex;
+    principal: Address;
+    assignee: Address;
+    sender: Address;
+    skill: string;
+    delegation: Delegation;
+    inbound: A2aMessage;
+    permissionGrantRef: Hex;
+    inputHash: Hex;
+    now: number;
+    deadline?: number;
+    maxRetries?: number;
+    parentCaseId?: Hex;
+}): TaskRecord;
+export type TransitionResult = {
+    ok: true;
+    record: TaskRecord;
+    event: TaskEvent;
+} | {
+    ok: false;
+    reason: string;
+};
+/** Apply a state transition, fail-closed via the fulfillment transition table. Bumps `rev` + emits the
+ *  status event. Does NOT persist — the caller writes the returned record to the TaskStore. */
+export declare function applyTransition(record: TaskRecord, to: TaskState, opts?: {
+    now: number;
+    error?: string;
+}): TransitionResult;
+/**
+ * Dispatch a `submitted` task: reject if the skill is unknown; otherwise move it to `working`, run the
+ * handler, and map the outcome to the next state. Returns the final record + the ordered events. The
+ * caller (alarm loop) persists the record and fans the events to streams/push. `makeContext` wires the
+ * per-task vault / mcp / emitArtifact (W4) — the runtime stays transport-agnostic.
+ */
+export declare function dispatchTask(record: TaskRecord, registry: Map<string, SkillHandler>, makeContext: (record: TaskRecord) => Omit<SkillContext, 'requestAuth' | 'requestHandoff' | 'principal' | 'sender' | 'taskId' | 'skill'> & {
+    input: unknown;
+    delegation: Delegation;
+}, now: number, opts?: {
+    handoffPolicy?: HandoffPolicy;
+}): Promise<{
+    record: TaskRecord;
+    events: TaskEvent[];
+}>;
+export { isTerminal };
+//# sourceMappingURL=runtime.d.ts.map

package/dist/runtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../src/runtime.ts"],"names":[],"mappings":"AAKA,OAAO,EAAuC,KAAK,aAAa,EAAE,MAAM,gCAAgC,CAAC;AACzG,OAAO,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,+BAA+B,CAAC;AAChE,OAAO,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAC/E,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AACxC,OAAO,EAAkC,KAAK,YAAY,EAAE,KAAK,YAAY,EAAoB,MAAM,oBAAoB,CAAC;AAE5H,qFAAqF;AACrF,wBAAgB,aAAa,CAAC,IAAI,EAAE;IAClC,MAAM,EAAE,GAAG,CAAC;IACZ,SAAS,EAAE,OAAO,CAAC;IACnB,QAAQ,EAAE,OAAO,CAAC;IAClB,MAAM,EAAE,OAAO,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,UAAU,CAAC;IACvB,OAAO,EAAE,UAAU,CAAC;IACpB,kBAAkB,EAAE,GAAG,CAAC;IACxB,SAAS,EAAE,GAAG,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,GAAG,CAAC;CACpB,GAAG,UAAU,CAuBb;AAED,MAAM,MAAM,gBAAgB,GACxB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,UAAU,CAAC;IAAC,KAAK,EAAE,SAAS,CAAA;CAAE,GAClD;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAElC;+FAC+F;AAC/F,wBAAgB,eAAe,CAC7B,MAAM,EAAE,UAAU,EAClB,EAAE,EAAE,SAAS,EACb,IAAI,GAAE;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAe,GACjD,gBAAgB,CAalB;AAED;;;;;GAKG;AACH,wBAAsB,YAAY,CAChC,MAAM,EAAE,UAAU,EAClB,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC,EACnC,WAAW,EAAE,CAAC,MAAM,EAAE,UAAU,KAAK,IAAI,CAAC,YAAY,EAAE,aAAa,GAAG,gBAAgB,GAAG,WAAW,GAAG,QAAQ,GAAG,QAAQ,GAAG,OAAO,CAAC,GAAG;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,UAAU,EAAE,UAAU,CAAA;CAAE,EACpL,GAAG,EAAE,MAAM,EACX,IAAI,CAAC,EAAE;IAAE,aAAa,CAAC,EAAE,aAAa,CAAA;CAAE,GACvC,OAAO,CAAC;IAAE,MAAM,EAAE,UAAU,CAAC;IAAC,MAAM,EAAE,SAAS,EAAE,CAAA;CAAE,CAAC,CAkFtD;AAED,OAAO,EAAE,UAAU,EAAE,CAAC"}

package/dist/runtime.js

@@ -0,0 +1,154 @@
+// The Task runtime (spec 269 §3). Pure lifecycle logic over the fulfillment Task state machine: create a
+// submitted task, validate every transition via canTaskTransition (fail-closed), and dispatch a working
+// task to its skill handler — mapping the handler result (or AuthRequired / unknown-skill / throw) onto
+// the next state. Storage + delivery are the caller's job (the TaskStore port + the JSON-RPC layer); this
+// module never blocks on I/O beyond the handler it's given, and emits the events the stream/push paths use.
+import { canTaskTransition, isHandoffAllowed } from '@agenticprimitives/fulfillment';
+import { isTerminal } from './types.js';
+import { AuthRequired, HandoffRequested } from './skill-handler.js';
+/** Build a fresh `submitted` task record from a verified inbound message + grant. */
+export function newTaskRecord(args) {
+    return {
+        task: {
+            taskId: args.taskId,
+            parentCaseId: args.parentCaseId,
+            state: 'submitted',
+            assignee: args.assignee,
+            assigneeKind: 'agent',
+            inputHash: args.inputHash,
+            artifactIds: [],
+            deadline: args.deadline,
+            maxRetries: args.maxRetries ?? 0,
+            permissionGrantRef: args.permissionGrantRef,
+        },
+        principal: args.principal,
+        sender: args.sender,
+        skill: args.skill,
+        delegation: args.delegation,
+        inbound: [args.inbound],
+        artifacts: [],
+        rev: 1,
+        updatedAt: args.now,
+    };
+}
+/** Apply a state transition, fail-closed via the fulfillment transition table. Bumps `rev` + emits the
+ *  status event. Does NOT persist — the caller writes the returned record to the TaskStore. */
+export function applyTransition(record, to, opts = { now: 0 }) {
+    const from = record.task.state;
+    if (from === to)
+        return { ok: false, reason: `already in ${to}` };
+    if (!canTaskTransition(from, to))
+        return { ok: false, reason: `illegal transition ${from} -> ${to}` };
+    const rev = record.rev + 1;
+    const next = {
+        ...record,
+        task: { ...record.task, state: to },
+        error: to === 'failed' ? opts.error : record.error,
+        rev,
+        updatedAt: opts.now,
+    };
+    return { ok: true, record: next, event: { kind: 'task.status', taskId: record.task.taskId, state: to, rev } };
+}
+/**
+ * Dispatch a `submitted` task: reject if the skill is unknown; otherwise move it to `working`, run the
+ * handler, and map the outcome to the next state. Returns the final record + the ordered events. The
+ * caller (alarm loop) persists the record and fans the events to streams/push. `makeContext` wires the
+ * per-task vault / mcp / emitArtifact (W4) — the runtime stays transport-agnostic.
+ */
+export async function dispatchTask(record, registry, makeContext, now, opts) {
+    const events = [];
+    if (record.task.state !== 'submitted') {
+        return { record, events };
+    }
+    const handler = registry.get(record.skill);
+    if (!handler) {
+        const rejected = applyTransition(record, 'rejected', { now, error: `unknown skill: ${record.skill}` });
+        if (rejected.ok) {
+            events.push(rejected.event);
+            return { record: { ...rejected.record, error: `unknown skill: ${record.skill}` }, events };
+        }
+        return { record, events };
+    }
+    const working = applyTransition(record, 'working', { now });
+    if (!working.ok)
+        return { record, events };
+    let cur = working.record;
+    events.push(working.event);
+    const base = makeContext(cur);
+    const ctx = {
+        ...base,
+        taskId: cur.task.taskId,
+        principal: cur.principal,
+        sender: cur.sender,
+        requestAuth: (reason) => {
+            throw new AuthRequired(reason);
+        },
+        requestHandoff: (req) => {
+            throw new HandoffRequested(req);
+        },
+    };
+    let result;
+    try {
+        result = await handler.handle(ctx);
+    }
+    catch (e) {
+        if (e instanceof AuthRequired) {
+            const auth = applyTransition(cur, 'auth-required', { now });
+            if (auth.ok) {
+                events.push(auth.event);
+                return { record: auth.record, events };
+            }
+            return { record: cur, events };
+        }
+        if (e instanceof HandoffRequested) {
+            // FR-3.6 / FLF-INV-09 — gate the reassignment on the agent's HandoffPolicy + the hop budget;
+            // fail-closed: no policy, a disallowed target, or an exhausted hop budget rejects the task.
+            const req = e.request;
+            const hops = (cur.hopCount ?? 0) + 1;
+            const ok = opts?.handoffPolicy
+                && isHandoffAllowed(opts.handoffPolicy, req.target, req.targetClass)
+                && hops <= opts.handoffPolicy.maxHopCount;
+            if (!ok) {
+                // The handler is mid-processing (`working`), so the illegal handoff fails the task (working→failed;
+                // working→rejected is not a legal transition). Fail-closed.
+                const reason = `handoff not permitted: ${req.target}${req.targetClass ? ` (${req.targetClass})` : ''}`;
+                const fail = applyTransition(cur, 'failed', { now, error: reason });
+                if (fail.ok) {
+                    events.push(fail.event);
+                    return { record: { ...fail.record, error: reason }, events };
+                }
+                return { record: cur, events };
+            }
+            // The local agent's part is done; record the handoff for the transport to deliver to the target,
+            // which re-verifies the (possibly re-scoped) delegation on receipt.
+            const done = applyTransition(cur, 'completed', { now });
+            if (done.ok) {
+                events.push(done.event);
+                return { record: { ...done.record, handoff: req, hopCount: hops }, events };
+            }
+            return { record: cur, events };
+        }
+        const failed = applyTransition(cur, 'failed', { now, error: e instanceof Error ? e.message : String(e) });
+        if (failed.ok) {
+            events.push(failed.event);
+            return { record: failed.record, events };
+        }
+        return { record: cur, events };
+    }
+    const t = applyTransition(cur, result.state, { now, error: result.error });
+    if (!t.ok) {
+        const failed = applyTransition(cur, 'failed', { now, error: `handler returned illegal state ${result.state}` });
+        if (failed.ok) {
+            events.push(failed.event);
+            return { record: failed.record, events };
+        }
+        return { record: cur, events };
+    }
+    cur = result.state === 'completed' && result.artifactIds
+        ? { ...t.record, task: { ...t.record.task, artifactIds: result.artifactIds } }
+        : t.record;
+    events.push(t.event);
+    return { record: cur, events };
+}
+export { isTerminal };
+//# sourceMappingURL=runtime.js.map

package/dist/runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.js","sourceRoot":"","sources":["../src/runtime.ts"],"names":[],"mappings":"AAAA,yGAAyG;AACzG,wGAAwG;AACxG,wGAAwG;AACxG,0GAA0G;AAC1G,4GAA4G;AAC5G,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAsB,MAAM,gCAAgC,CAAC;AAIzG,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AACxC,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAA0D,MAAM,oBAAoB,CAAC;AAE5H,qFAAqF;AACrF,MAAM,UAAU,aAAa,CAAC,IAc7B;IACC,OAAO;QACL,IAAI,EAAE;YACJ,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,KAAK,EAAE,WAAW;YAClB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,YAAY,EAAE,OAAO;YACrB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,WAAW,EAAE,EAAE;YACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,CAAC;YAChC,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;SAC5C;QACD,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,OAAO,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC;QACvB,SAAS,EAAE,EAAE;QACb,GAAG,EAAE,CAAC;QACN,SAAS,EAAE,IAAI,CAAC,GAAG;KACpB,CAAC;AACJ,CAAC;AAMD;+FAC+F;AAC/F,MAAM,UAAU,eAAe,CAC7B,MAAkB,EAClB,EAAa,EACb,OAAwC,EAAE,GAAG,EAAE,CAAC,EAAE;IAElD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;IAC/B,IAAI,IAAI,KAAK,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,EAAE,EAAE,CAAC;IAClE,IAAI,CAAC,iBAAiB,CAAC,IAAI,EAAE,EAAE,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,sBAAsB,IAAI,OAAO,EAAE,EAAE,EAAE,CAAC;IACtG,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC;IAC3B,MAAM,IAAI,GAAe;QACvB,GAAG,MAAM;QACT,IAAI,EAAE,EAAE,GAAG,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE;QACnC,KAAK,EAAE,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK;QAClD,GAAG;QACH,SAAS,EAAE,IAAI,CAAC,GAAG;KACpB,CAAC;IACF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC;AAChH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,MAAkB,EAClB,QAAmC,EACnC,WAAoL,EACpL,GAAW,EACX,IAAwC;IAExC,MAAM,MAAM,GAAgB,EAAE,CAAC;IAC/B,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;QACtC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAC5B,CAAC;IAED,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC3C,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,QAAQ,GAAG,eAAe,CAAC,MAAM,EAAE,UAAU,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,kBAAkB,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACvG,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;YAChB,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YAC5B,OAAO,EAAE,MAAM,EAAE,EAAE,GAAG,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,kBAAkB,MAAM,CAAC,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC;QAC7F,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAC5B,CAAC;IAED,MAAM,OAAO,GAAG,eAAe,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;IAC5D,IAAI,CAAC,OAAO,CAAC,EAAE;QAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAC3C,IAAI,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC;IACzB,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAE3B,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IAC9B,MAAM,GAAG,GAAiB;QACxB,GAAG,IAAI;QACP,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM;QACvB,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,WAAW,EAAE,CAAC,MAAc,EAAS,EAAE;YACrC,MAAM,IAAI,YAAY,CAAC,MAAM,CAAC,CAAC;QACjC,CAAC;QACD,cAAc,EAAE,CAAC,GAAG,EAAS,EAAE;YAC7B,MAAM,IAAI,gBAAgB,CAAC,GAAG,CAAC,CAAC;QAClC,CAAC;KACF,CAAC;IAEF,IAAI,MAAmB,CAAC;IACxB,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACrC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,CAAC,YAAY,YAAY,EAAE,CAAC;YAC9B,MAAM,IAAI,GAAG,eAAe,CAAC,GAAG,EAAE,eAAe,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;YAC5D,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC;gBAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC;YAAC,CAAC;YACjF,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC;QACjC,CAAC;QACD,IAAI,CAAC,YAAY,gBAAgB,EAAE,CAAC;YAClC,6FAA6F;YAC7F,4FAA4F;YAC5F,MAAM,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC;YACtB,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;YACrC,MAAM,EAAE,GAAG,IAAI,EAAE,aAAa;mBACzB,gBAAgB,CAAC,IAAI,CAAC,aAAa,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,WAAW,CAAC;mBACjE,IAAI,IAAI,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC;YAC5C,IAAI,CAAC,EAAE,EAAE,CAAC;gBACR,oGAAoG;gBACpG,4DAA4D;gBAC5D,MAAM,MAAM,GAAG,0BAA0B,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,WAAW,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;gBACvG,MAAM,IAAI,GAAG,eAAe,CAAC,GAAG,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;gBACpE,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC;oBAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;oBAAC,OAAO,EAAE,MAAM,EAAE,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,CAAC;gBAAC,CAAC;gBACvG,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC;YACjC,CAAC;YACD,iGAAiG;YACjG,oEAAoE;YACpE,MAAM,IAAI,GAAG,eAAe,CAAC,GAAG,EAAE,WAAW,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;YACxD,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC;gBAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBAAC,OAAO,EAAE,MAAM,EAAE,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,CAAC;YAAC,CAAC;YACtH,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC;QACjC,CAAC;QACD,MAAM,MAAM,GAAG,eAAe,CAAC,GAAG,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC1G,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;YAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC;QAAC,CAAC;QACvF,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC;IACjC,CAAC;IAED,MAAM,CAAC,GAAG,eAAe,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;IAC3E,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QACV,MAAM,MAAM,GAAG,eAAe,CAAC,GAAG,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,kCAAkC,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAChH,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;YAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC;QAAC,CAAC;QACvF,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC;IACjC,CAAC;IACD,GAAG,GAAG,MAAM,CAAC,KAAK,KAAK,WAAW,IAAI,MAAM,CAAC,WAAW;QACtD,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,EAAE;QAC9E,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IACb,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACrB,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC;AACjC,CAAC;AAED,OAAO,EAAE,UAAU,EAAE,CAAC"}

package/dist/skill-handler.d.ts

@@ -0,0 +1,88 @@
+import type { Address, Hex } from '@agenticprimitives/types';
+import type { Delegation } from '@agenticprimitives/delegation';
+import type { VaultRef } from './types.js';
+/** Minimal vault seam — the consumer wires demo-mcp vault read/write over a delegation. FR-3.4: a handler
+ *  delivers a result into ANOTHER principal's vault by passing a `delegation` THAT principal granted
+ *  (delegator == the record owner); the consumer routes it through `callMcpToolViaDelegation` so demo-mcp
+ *  keys the record by that principal. Omit `delegation` to read/write the agent's own (assignee) store. */
+export interface VaultClient {
+    read(ref: VaultRef, opts?: {
+        delegation?: Delegation;
+    }): Promise<unknown>;
+    write(args: {
+        owner: Address;
+        recordType: string;
+        data: unknown;
+        delegation?: Delegation;
+    }): Promise<VaultRef>;
+}
+/** Minimal MCP seam — call a tool via the delegation token (reuses the a2a→mcp leg, W4). */
+export interface McpClient {
+    callTool(args: {
+        tool: string;
+        toolArgs?: Record<string, unknown>;
+    }): Promise<unknown>;
+}
+/** Thrown by `requestAuth` to suspend a task pending a fresh/again-scoped delegation (FR-3.5). The
+ *  dispatcher catches it and transitions the task to `auth-required`. */
+export declare class AuthRequired extends Error {
+    readonly authReason: string;
+    constructor(authReason: string);
+}
+/** The reassignment a handler requests via `requestHandoff` (FR-3.6). The target agent re-verifies the
+ *  (possibly re-scoped) delegation when it receives the handed-off task. */
+export interface HandoffRequest {
+    /** The agent SA to reassign to. */
+    target: Address;
+    /** The target's agent class (checked against `HandoffPolicy.allowedAgentClasses`). */
+    targetClass?: string;
+    /** The skill the target should run (defaults to the current task's skill). */
+    skill?: string;
+    reason?: string;
+}
+/** Thrown by `requestHandoff` to reassign a task to another agent (FR-3.6). The dispatcher gates it on
+ *  `isHandoffAllowed(handoffPolicy, …)` + the hop budget, then records the handoff for the transport to
+ *  deliver. A disallowed handoff `rejects` the task — fail-closed (FLF-INV-09). */
+export declare class HandoffRequested extends Error {
+    readonly request: HandoffRequest;
+    constructor(request: HandoffRequest);
+}
+export interface SkillContext {
+    taskId: Hex;
+    /** On whose behalf the sender acts (delegation.delegator). */
+    principal: Address;
+    /** The submitting agent SA (delegation.delegate). */
+    sender: Address;
+    /** The input body (already read from the vault by the runtime). */
+    input: unknown;
+    /** The verified, captured grant. */
+    delegation: Delegation;
+    vault: VaultClient;
+    mcp: McpClient;
+    /** Emit a result artifact: the runtime writes the body to the ASSIGNEE's vault (A2A-INV-04), computes
+     *  the bodyHash, records the ref, and returns the artifactId. Only the hash/ref travel in task state. */
+    emitArtifact(a: {
+        artifactKind: string;
+        body: unknown;
+        bodyContentType?: string;
+        disclosurePolicy?: string;
+        caseId?: Hex;
+    }): Promise<Hex>;
+    /** Suspend pending a fresh grant — throws `AuthRequired`. */
+    requestAuth(reason: string): never;
+    /** Reassign the task to another agent (FR-3.6) — throws `HandoffRequested`. The dispatcher gates it on
+     *  the agent's `HandoffPolicy`; a disallowed target rejects the task. */
+    requestHandoff(req: HandoffRequest): never;
+}
+export interface SkillResult {
+    state: 'completed' | 'failed' | 'input-required';
+    artifactIds?: Hex[];
+    error?: string;
+}
+export interface SkillHandler {
+    skill: string;
+    handle(ctx: SkillContext): Promise<SkillResult>;
+}
+/** Index handlers by skill name; reject duplicate registrations. */
+export declare function buildSkillRegistry(handlers: SkillHandler[]): Map<string, SkillHandler>;
+//# sourceMappingURL=skill-handler.d.ts.map

package/dist/skill-handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"skill-handler.d.ts","sourceRoot":"","sources":["../src/skill-handler.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,+BAA+B,CAAC;AAChE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAE3C;;;2GAG2G;AAC3G,MAAM,WAAW,WAAW;IAC1B,IAAI,CAAC,GAAG,EAAE,QAAQ,EAAE,IAAI,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,UAAU,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC1E,KAAK,CAAC,IAAI,EAAE;QAAE,KAAK,EAAE,OAAO,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,OAAO,CAAC;QAAC,UAAU,CAAC,EAAE,UAAU,CAAA;KAAE,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;CAChH;AAED,4FAA4F;AAC5F,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACxF;AAED;yEACyE;AACzE,qBAAa,YAAa,SAAQ,KAAK;aACT,UAAU,EAAE,MAAM;gBAAlB,UAAU,EAAE,MAAM;CAI/C;AAED;4EAC4E;AAC5E,MAAM,WAAW,cAAc;IAC7B,mCAAmC;IACnC,MAAM,EAAE,OAAO,CAAC;IAChB,sFAAsF;IACtF,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,8EAA8E;IAC9E,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;mFAEmF;AACnF,qBAAa,gBAAiB,SAAQ,KAAK;aACb,OAAO,EAAE,cAAc;gBAAvB,OAAO,EAAE,cAAc;CAIpD;AAED,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,GAAG,CAAC;IACZ,8DAA8D;IAC9D,SAAS,EAAE,OAAO,CAAC;IACnB,qDAAqD;IACrD,MAAM,EAAE,OAAO,CAAC;IAChB,mEAAmE;IACnE,KAAK,EAAE,OAAO,CAAC;IACf,oCAAoC;IACpC,UAAU,EAAE,UAAU,CAAC;IACvB,KAAK,EAAE,WAAW,CAAC;IACnB,GAAG,EAAE,SAAS,CAAC;IACf;6GACyG;IACzG,YAAY,CAAC,CAAC,EAAE;QACd,YAAY,EAAE,MAAM,CAAC;QACrB,IAAI,EAAE,OAAO,CAAC;QACd,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,gBAAgB,CAAC,EAAE,MAAM,CAAC;QAC1B,MAAM,CAAC,EAAE,GAAG,CAAC;KACd,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IACjB,6DAA6D;IAC7D,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,KAAK,CAAC;IACnC;6EACyE;IACzE,cAAc,CAAC,GAAG,EAAE,cAAc,GAAG,KAAK,CAAC;CAC5C;AAED,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,WAAW,GAAG,QAAQ,GAAG,gBAAgB,CAAC;IACjD,WAAW,CAAC,EAAE,GAAG,EAAE,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;CACjD;AAED,oEAAoE;AACpE,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,YAAY,EAAE,GAAG,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC,CAOtF"}

package/dist/skill-handler.js

@@ -0,0 +1,32 @@
+/** Thrown by `requestAuth` to suspend a task pending a fresh/again-scoped delegation (FR-3.5). The
+ *  dispatcher catches it and transitions the task to `auth-required`. */
+export class AuthRequired extends Error {
+    authReason;
+    constructor(authReason) {
+        super(`auth-required: ${authReason}`);
+        this.authReason = authReason;
+        this.name = 'AuthRequired';
+    }
+}
+/** Thrown by `requestHandoff` to reassign a task to another agent (FR-3.6). The dispatcher gates it on
+ *  `isHandoffAllowed(handoffPolicy, …)` + the hop budget, then records the handoff for the transport to
+ *  deliver. A disallowed handoff `rejects` the task — fail-closed (FLF-INV-09). */
+export class HandoffRequested extends Error {
+    request;
+    constructor(request) {
+        super(`handoff-requested: ${request.target}`);
+        this.request = request;
+        this.name = 'HandoffRequested';
+    }
+}
+/** Index handlers by skill name; reject duplicate registrations. */
+export function buildSkillRegistry(handlers) {
+    const reg = new Map();
+    for (const h of handlers) {
+        if (reg.has(h.skill))
+            throw new Error(`duplicate skill handler: ${h.skill}`);
+        reg.set(h.skill, h);
+    }
+    return reg;
+}
+//# sourceMappingURL=skill-handler.js.map

package/dist/skill-handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"skill-handler.js","sourceRoot":"","sources":["../src/skill-handler.ts"],"names":[],"mappings":"AAsBA;yEACyE;AACzE,MAAM,OAAO,YAAa,SAAQ,KAAK;IACT;IAA5B,YAA4B,UAAkB;QAC5C,KAAK,CAAC,kBAAkB,UAAU,EAAE,CAAC,CAAC;QADZ,eAAU,GAAV,UAAU,CAAQ;QAE5C,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;IAC7B,CAAC;CACF;AAcD;;mFAEmF;AACnF,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IACb;IAA5B,YAA4B,OAAuB;QACjD,KAAK,CAAC,sBAAsB,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QADpB,YAAO,GAAP,OAAO,CAAgB;QAEjD,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;IACjC,CAAC;CACF;AAyCD,oEAAoE;AACpE,MAAM,UAAU,kBAAkB,CAAC,QAAwB;IACzD,MAAM,GAAG,GAAG,IAAI,GAAG,EAAwB,CAAC;IAC5C,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;QAC7E,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IACtB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/sse.d.ts

@@ -0,0 +1,9 @@
+import type { TaskEvent } from './types.js';
+export declare const SSE_HEADERS: Record<string, string>;
+/** Serialize a task event as an SSE frame: `event: <kind>` + `data: <json>`. */
+export declare function formatSseEvent(event: TaskEvent): string;
+/** An SSE keep-alive comment frame. */
+export declare function formatSseComment(text?: string): string;
+/** Whether a stream should close after this event (terminal task states end the stream). */
+export declare function isStreamEnd(event: TaskEvent): boolean;
+//# sourceMappingURL=sse.d.ts.map

package/dist/sse.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sse.d.ts","sourceRoot":"","sources":["../src/sse.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAE5C,eAAO,MAAM,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAI9C,CAAC;AAEF,gFAAgF;AAChF,wBAAgB,cAAc,CAAC,KAAK,EAAE,SAAS,GAAG,MAAM,CAEvD;AAED,uCAAuC;AACvC,wBAAgB,gBAAgB,CAAC,IAAI,SAAe,GAAG,MAAM,CAE5D;AAED,4FAA4F;AAC5F,wBAAgB,WAAW,CAAC,KAAK,EAAE,SAAS,GAAG,OAAO,CAErD"}

package/dist/sse.js

@@ -0,0 +1,18 @@
+export const SSE_HEADERS = {
+    'content-type': 'text/event-stream',
+    'cache-control': 'no-cache',
+    connection: 'keep-alive',
+};
+/** Serialize a task event as an SSE frame: `event: <kind>` + `data: <json>`. */
+export function formatSseEvent(event) {
+    return `event: ${event.kind}\ndata: ${JSON.stringify(event)}\n\n`;
+}
+/** An SSE keep-alive comment frame. */
+export function formatSseComment(text = 'keep-alive') {
+    return `: ${text}\n\n`;
+}
+/** Whether a stream should close after this event (terminal task states end the stream). */
+export function isStreamEnd(event) {
+    return event.kind === 'task.status' && (event.state === 'completed' || event.state === 'failed' || event.state === 'canceled' || event.state === 'rejected');
+}
+//# sourceMappingURL=sse.js.map

package/dist/sse.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sse.js","sourceRoot":"","sources":["../src/sse.ts"],"names":[],"mappings":"AAKA,MAAM,CAAC,MAAM,WAAW,GAA2B;IACjD,cAAc,EAAE,mBAAmB;IACnC,eAAe,EAAE,UAAU;IAC3B,UAAU,EAAE,YAAY;CACzB,CAAC;AAEF,gFAAgF;AAChF,MAAM,UAAU,cAAc,CAAC,KAAgB;IAC7C,OAAO,UAAU,KAAK,CAAC,IAAI,WAAW,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC;AACpE,CAAC;AAED,uCAAuC;AACvC,MAAM,UAAU,gBAAgB,CAAC,IAAI,GAAG,YAAY;IAClD,OAAO,KAAK,IAAI,MAAM,CAAC;AACzB,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,WAAW,CAAC,KAAgB;IAC1C,OAAO,KAAK,CAAC,IAAI,KAAK,aAAa,IAAI,CAAC,KAAK,CAAC,KAAK,KAAK,WAAW,IAAI,KAAK,CAAC,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,KAAK,KAAK,UAAU,IAAI,KAAK,CAAC,KAAK,KAAK,UAAU,CAAC,CAAC;AAC/J,CAAC"}

package/dist/task-store.d.ts

@@ -0,0 +1,16 @@
+import type { Hex } from '@agenticprimitives/types';
+import type { TaskRecord } from './types.js';
+export interface TaskStore {
+    /** Persist (insert or replace) a task record. */
+    put(record: TaskRecord): Promise<void>;
+    /** Load a task record, or null if unknown. */
+    get(taskId: Hex): Promise<TaskRecord | null>;
+    /** Task ids in a non-terminal state that are due for processing (drives the alarm loop). */
+    listDue(now: number): Promise<Hex[]>;
+    /** Single-use message-id reservation (FR-4.3 inbound replay guard). Returns false if already seen. */
+    reserveMessageId(messageId: Hex, ttlSec: number): Promise<boolean>;
+}
+/** Reference in-memory TaskStore — used by the test harness + non-Worker consumers. NOT for production
+ *  (no cross-isolate durability); the Cloudflare DO adapter is the durable implementation. */
+export declare function createInMemoryTaskStore(): TaskStore;
+//# sourceMappingURL=task-store.d.ts.map

package/dist/task-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"task-store.d.ts","sourceRoot":"","sources":["../src/task-store.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,0BAA0B,CAAC;AACpD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAE7C,MAAM,WAAW,SAAS;IACxB,iDAAiD;IACjD,GAAG,CAAC,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACvC,8CAA8C;IAC9C,GAAG,CAAC,MAAM,EAAE,GAAG,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;IAC7C,4FAA4F;IAC5F,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IACrC,sGAAsG;IACtG,gBAAgB,CAAC,SAAS,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACpE;AAED;8FAC8F;AAC9F,wBAAgB,uBAAuB,IAAI,SAAS,CA2BnD"}

package/dist/task-store.js

@@ -0,0 +1,34 @@
+/** Reference in-memory TaskStore — used by the test harness + non-Worker consumers. NOT for production
+ *  (no cross-isolate durability); the Cloudflare DO adapter is the durable implementation. */
+export function createInMemoryTaskStore() {
+    const tasks = new Map();
+    const seen = new Map(); // messageId -> expiry (sec)
+    const due = new Set();
+    return {
+        async put(record) {
+            tasks.set(record.task.taskId.toLowerCase(), record);
+            const key = record.task.taskId.toLowerCase();
+            if (record.task.state === 'submitted' || record.task.state === 'working')
+                due.add(key);
+            else
+                due.delete(key);
+        },
+        async get(taskId) {
+            return tasks.get(taskId.toLowerCase()) ?? null;
+        },
+        async listDue() {
+            return [...due];
+        },
+        async reserveMessageId(messageId, ttlSec) {
+            const key = messageId.toLowerCase();
+            const exp = seen.get(key);
+            // `now` is injected by callers in tests; here we approximate with a monotonic-free check: a present
+            // entry means used. (The durable adapter uses KV TTL.)
+            if (exp !== undefined)
+                return false;
+            seen.set(key, ttlSec);
+            return true;
+        },
+    };
+}
+//# sourceMappingURL=task-store.js.map

package/dist/task-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"task-store.js","sourceRoot":"","sources":["../src/task-store.ts"],"names":[],"mappings":"AAiBA;8FAC8F;AAC9F,MAAM,UAAU,uBAAuB;IACrC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAsB,CAAC;IAC5C,MAAM,IAAI,GAAG,IAAI,GAAG,EAAkB,CAAC,CAAC,4BAA4B;IACpE,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,OAAO;QACL,KAAK,CAAC,GAAG,CAAC,MAAM;YACd,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,MAAM,CAAC,CAAC;YACpD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;YAC7C,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,KAAK,WAAW,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS;gBAAE,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;;gBAClF,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACvB,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,MAAM;YACd,OAAO,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,IAAI,IAAI,CAAC;QACjD,CAAC;QACD,KAAK,CAAC,OAAO;YACX,OAAO,CAAC,GAAG,GAAG,CAAU,CAAC;QAC3B,CAAC;QACD,KAAK,CAAC,gBAAgB,CAAC,SAAS,EAAE,MAAM;YACtC,MAAM,GAAG,GAAG,SAAS,CAAC,WAAW,EAAE,CAAC;YACpC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAC1B,oGAAoG;YACpG,uDAAuD;YACvD,IAAI,GAAG,KAAK,SAAS;gBAAE,OAAO,KAAK,CAAC;YACpC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YACtB,OAAO,IAAI,CAAC;QACd,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/types.d.ts

@@ -0,0 +1,80 @@
+import type { Address, Hex } from '@agenticprimitives/types';
+import type { Delegation } from '@agenticprimitives/delegation';
+import type { Task, TaskState, Artifact } from '@agenticprimitives/fulfillment';
+import type { HandoffRequest } from './skill-handler.js';
+export type { Task, TaskState, Artifact };
+/** A2A-INV-04 — message/artifact bodies are vault records, never inline. A ref names where to read the
+ *  body (the assignee's per-agent demo-mcp vault namespace). The hash binds the content. */
+export interface VaultRef {
+    /** SA whose vault namespace holds the record (the assignee). */
+    owner: Address;
+    /** demo-mcp record type, e.g. `a2a:msg:<taskId>` / `a2a:artifact:<artifactId>`. */
+    recordType: string;
+}
+/** An inbound A2A message (the request that creates a task, or a follow-up on a thread). Signed by the
+ *  sender; the body is a VaultRef, the hash binds it. */
+export interface A2aMessage {
+    messageId: Hex;
+    threadId?: string;
+    /** The SA that sent it (the delegation's delegate / requester). */
+    sender: Address;
+    /** The requested skill (dispatched by name; unknown → task rejected). */
+    skill: string;
+    /** Where the input body lives + its hash. */
+    bodyRef: VaultRef;
+    bodyHash: Hex;
+    /** Sender signature over the canonical message (A2A-INV-01). */
+    signature: Hex;
+    createdAt: number;
+}
+/** An A2A artifact = a fulfillment Artifact plus the vault ref to its body. */
+export interface A2aArtifact extends Artifact {
+    bodyRef: VaultRef;
+}
+/** The full per-task record the runtime persists (answers tasks/get + resumes after eviction). */
+export interface TaskRecord {
+    task: Task;
+    /** The principal the sender acts FOR (the delegation's delegator) — what withDelegation keys on. */
+    principal: Address;
+    /** The SA that submitted the task (the delegate). */
+    sender: Address;
+    skill: string;
+    /** The verified, captured grant — handed to the skill handler + re-checked on revocation (FR-3.3/FR-4.6). */
+    delegation: Delegation;
+    inbound: A2aMessage[];
+    artifacts: A2aArtifact[];
+    /** Webhook registered via tasks/pushNotificationConfig/set; signed push fires here on terminal state. */
+    pushConfig?: PushConfig;
+    /** FR-3.6 — set when a handler reassigned this task (policy-gated). The transport delivers a
+     *  message/send to `handoff.target`, which re-verifies the delegation. */
+    handoff?: HandoffRequest;
+    /** Number of hand-offs this task has been through — checked against `HandoffPolicy.maxHopCount`. */
+    hopCount?: number;
+    /** Last error on a `failed` transition, surfaced to tasks/get. */
+    error?: string;
+    /** Monotonic version, bumped on every mutation — drives stream/idempotency. */
+    rev: number;
+    updatedAt: number;
+}
+/** Push webhook config (FR-5.2). */
+export interface PushConfig {
+    url: string;
+    token?: string;
+}
+/** Stream/push event emitted on each task mutation. */
+export type TaskEvent = {
+    kind: 'task.status';
+    taskId: Hex;
+    state: TaskState;
+    rev: number;
+    error?: string;
+} | {
+    kind: 'task.artifact';
+    taskId: Hex;
+    artifactId: Hex;
+    rev: number;
+};
+/** Terminal states — no further transitions; delivery (push) fires here. */
+export declare const TERMINAL_STATES: ReadonlySet<TaskState>;
+export declare function isTerminal(state: TaskState): boolean;
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,+BAA+B,CAAC;AAChE,OAAO,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,gCAAgC,CAAC;AAChF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAEzD,YAAY,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;AAE1C;4FAC4F;AAC5F,MAAM,WAAW,QAAQ;IACvB,gEAAgE;IAChE,KAAK,EAAE,OAAO,CAAC;IACf,mFAAmF;IACnF,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;yDACyD;AACzD,MAAM,WAAW,UAAU;IACzB,SAAS,EAAE,GAAG,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,mEAAmE;IACnE,MAAM,EAAE,OAAO,CAAC;IAChB,yEAAyE;IACzE,KAAK,EAAE,MAAM,CAAC;IACd,6CAA6C;IAC7C,OAAO,EAAE,QAAQ,CAAC;IAClB,QAAQ,EAAE,GAAG,CAAC;IACd,gEAAgE;IAChE,SAAS,EAAE,GAAG,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,+EAA+E;AAC/E,MAAM,WAAW,WAAY,SAAQ,QAAQ;IAC3C,OAAO,EAAE,QAAQ,CAAC;CACnB;AAED,kGAAkG;AAClG,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,IAAI,CAAC;IACX,oGAAoG;IACpG,SAAS,EAAE,OAAO,CAAC;IACnB,qDAAqD;IACrD,MAAM,EAAE,OAAO,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,6GAA6G;IAC7G,UAAU,EAAE,UAAU,CAAC;IACvB,OAAO,EAAE,UAAU,EAAE,CAAC;IACtB,SAAS,EAAE,WAAW,EAAE,CAAC;IACzB,yGAAyG;IACzG,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB;8EAC0E;IAC1E,OAAO,CAAC,EAAE,cAAc,CAAC;IACzB,oGAAoG;IACpG,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,kEAAkE;IAClE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,+EAA+E;IAC/E,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,oCAAoC;AACpC,MAAM,WAAW,UAAU;IACzB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,uDAAuD;AACvD,MAAM,MAAM,SAAS,GACjB;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,MAAM,EAAE,GAAG,CAAC;IAAC,KAAK,EAAE,SAAS,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,GACnF;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,MAAM,EAAE,GAAG,CAAC;IAAC,UAAU,EAAE,GAAG,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC;AAEzE,4EAA4E;AAC5E,eAAO,MAAM,eAAe,EAAE,WAAW,CAAC,SAAS,CAKjD,CAAC;AAEH,wBAAgB,UAAU,CAAC,KAAK,EAAE,SAAS,GAAG,OAAO,CAEpD"}

package/dist/types.js

@@ -0,0 +1,11 @@
+/** Terminal states — no further transitions; delivery (push) fires here. */
+export const TERMINAL_STATES = new Set([
+    'completed',
+    'failed',
+    'canceled',
+    'rejected',
+]);
+export function isTerminal(state) {
+    return TERMINAL_STATES.has(state);
+}
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AA8EA,4EAA4E;AAC5E,MAAM,CAAC,MAAM,eAAe,GAA2B,IAAI,GAAG,CAAY;IACxE,WAAW;IACX,QAAQ;IACR,UAAU;IACV,UAAU;CACX,CAAC,CAAC;AAEH,MAAM,UAAU,UAAU,CAAC,KAAgB;IACzC,OAAO,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AACpC,CAAC"}