@agenticprimitives/a2a 0.0.0-alpha.3 → 0.0.0-alpha.30

package/dist/session-wire.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-wire.d.ts","sourceRoot":"","sources":["../src/session-wire.ts"],"names":[],"mappings":"AA0BA,OAAO,EAAmD,KAAK,OAAO,EAAE,KAAK,GAAG,EAAE,MAAM,MAAM,CAAC;AAC/F,OAAO,EAAmD,KAAK,UAAU,EAAE,MAAM,+BAA+B,CAAC;AAGjH,kFAAkF;AAClF,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,OAAO,CAAC;IACnB,QAAQ,EAAE,OAAO,CAAC;IAClB,SAAS,EAAE,GAAG,CAAC;IACf,OAAO,EAAE,KAAK,CAAC;QAAE,QAAQ,EAAE,OAAO,CAAC;QAAC,KAAK,EAAE,GAAG,CAAC;QAAC,IAAI,CAAC,EAAE,GAAG,CAAA;KAAE,CAAC,CAAC;IAC9D,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,GAAG,CAAC;CAChB;AAED;;4CAE4C;AAC5C,eAAO,MAAM,wBAAwB,SAAS,CAAC;AAU/C,+EAA+E;AAC/E,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,gBAAgB,EAAE,GAAG,EAAE,GAAG,GAAG,GAAG,CAE1E;AAED;mDACmD;AACnD,wBAAgB,4BAA4B,CAAC,SAAS,EAAE,MAAM,GAAG;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAC,GAAG,EAAE,GAAG,CAAA;CAAE,GAAG,IAAI,CAS3G;AAED,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,gBAAgB,GAAG,UAAU,CAShE;AAED,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,UAAU,GAAG,gBAAgB,CAMhE;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,qBAAqB,CACnC,IAAI,EAAE,gBAAgB,EACtB,SAAS,EAAE;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAA;CAAE,EACxD,MAAM,EAAE,MAAM,EACd,IAAI,CAAC,EAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,GACxB,MAAM,GAAG,IAAI,CA2Bf;AAED;;;;GAIG;AACH,wBAAsB,6BAA6B,CAAC,IAAI,EAAE;IACxD,MAAM,EAAE,OAAO,CAAC;IAChB,MAAM,EAAE,GAAG,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,cAAc,EAAE,MAAM,CAAA;KAAE,CAAC;IACzD,mBAAmB,EAAE,CAAC,CAAC,EAAE,UAAU,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACzD,SAAS,EAAE,CAAC,CAAC,EAAE,UAAU,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAC/C,kFAAkF;IAClF,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,iEAAiE;IACjE,GAAG,CAAC,EAAE,MAAM,CAAC;CACd,GAAG,OAAO,CAAC,OAAO,CAAC,CAuBnB;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,4BAA4B,CAAC,IAAI,EAAE;IACvD,MAAM,EAAE,OAAO,CAAC;IAChB,MAAM,EAAE,GAAG,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;IAClB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,sEAAsE;IACtE,EAAE,EAAE,MAAM,CAAC;IACX,mBAAmB,EAAE,CAAC,CAAC,EAAE,UAAU,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACzD,SAAS,EAAE,CAAC,CAAC,EAAE,UAAU,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CAChD,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAyBzB;AAED,qGAAqG;AACrG,eAAO,MAAM,eAAe,SAAU,OAAO,KAAG,GAAuD,CAAC"}

package/dist/session-wire.js

@@ -0,0 +1,226 @@
+// SESSION WIRES — how an agent signs as an identity whose key it does not hold. Spec 350 §8 / spec 326.
+//
+// THE CALLER-SIGNATURE GAP, RESOLVED (spec 329 §3.1, generalized). A runtime holds no key for the identity
+// it acts as — an org's DO holds no org key, a relying service must never custody the service agent it
+// acts as (ADR-0019: a relying key is always a DELEGATE, never a custodian), a skills worker signs as
+// `skills-agent` without holding it. Yet A2A needs per-message sender signatures and per-poll caller
+// signatures that verify against THAT identity. A ceremony therefore mints a NARROW delegation —
+// delegator = the identity, delegate = a KMS session key, allowedMethods = a pinned set of skill
+// selectors (never the any-skill sentinel), allowedTargets pinned, timestamp-bounded — signed by the
+// identity's own custody credential. The runtime stores the wire; NO raw key ever rests there; the KMS
+// key signs each digest on demand.
+//
+// ON THE WIRE such a signature is the SESSION-WRAPPED form: `0x51` (a type byte no on-chain validator
+// accepts — it fails closed anywhere but a gate that understands it) followed by hex(utf8(JSON({ wire,
+// sig }))). A gate verifies it fail-closed PER MESSAGE: delegator === the claimed signer; timestamp window
+// live; a pinned selector set that names the requested skill and never A2A_ANY_SKILL; the raw ECDSA sig
+// recovers to the wire's delegate; the wire's own signature ERC-1271-verifies against the delegator; AND
+// the wire is unrevoked on chain — so a custodian's revocation kills the authority at every gate, now.
+//
+// WHY THIS IS HERE. Four copies of this file existed across two repos (demo-a2a's session-wire.ts and
+// org-wire.ts, skills-a2a's service-wire.ts, and a sibling worker's). "Copy the wire implementation, do not
+// invent a third" was the instruction, and the count had already reached four. It is an A2A signature
+// format that consumes this package's own `skillSelector`; it belongs here, and the apps now consume it.
+// What STAYS in the apps is policy — which caveat SHAPE counts as stewardship vs member access, which
+// contracts a stewardship wire must pin. `org-wire.ts`'s `hasStewardshipShape` is a positive identity
+// test no generic layer can express, and it does not move.
+import { hashMessage, keccak256, recoverAddress, toBytes } from 'viem';
+import { decodeAllowedMethodsTerms, decodeTimestampTerms } from '@agenticprimitives/delegation';
+import { A2A_ANY_SKILL, skillSelector } from './grant.js';
+/** Signature type byte for the session-wrapped form. Unknown to AgentAccount `_validateSig` (fails closed
+ *  on chain) and to every other verifier — only a gate that calls `verifySessionWrappedSignature` accepts
+ *  it, and only after full verification. */
+export const SESSION_WRAPPED_SIG_TYPE = '0x51';
+const utf8ToHex = (s) => `0x${Array.from(new TextEncoder().encode(s), (b) => b.toString(16).padStart(2, '0')).join('')}`;
+const hexToUtf8 = (h) => {
+    const clean = h.startsWith('0x') ? h.slice(2) : h;
+    const bytes = new Uint8Array(clean.length / 2);
+    for (let i = 0; i < bytes.length; i++)
+        bytes[i] = parseInt(clean.slice(i * 2, i * 2 + 2), 16);
+    return new TextDecoder().decode(bytes);
+};
+/** Wrap a raw session-key ECDSA signature with the wire that authorizes it. */
+export function wrapSessionSignature(wire, sig) {
+    return (SESSION_WRAPPED_SIG_TYPE + utf8ToHex(JSON.stringify({ wire, sig })).slice(2));
+}
+/** Parse the session-wrapped form; null for any other signature shape (callers then use the standard
+ *  ERC-1271 path — one detector, no ambiguity). */
+export function parseSessionWrappedSignature(signature) {
+    if (!signature?.startsWith(SESSION_WRAPPED_SIG_TYPE) || signature.length <= SESSION_WRAPPED_SIG_TYPE.length)
+        return null;
+    try {
+        const parsed = JSON.parse(hexToUtf8(`0x${signature.slice(SESSION_WRAPPED_SIG_TYPE.length)}`));
+        if (!parsed?.wire?.delegator || !parsed.wire.delegate || !parsed.wire.signature || !parsed.sig)
+            return null;
+        return { wire: parsed.wire, sig: parsed.sig };
+    }
+    catch {
+        return null;
+    }
+}
+export function wireToDelegation(w) {
+    return {
+        delegator: w.delegator,
+        delegate: w.delegate,
+        authority: w.authority,
+        caveats: w.caveats.map((c) => ({ enforcer: c.enforcer, terms: c.terms, args: (c.args ?? '0x') })),
+        salt: BigInt(w.salt),
+        signature: w.signature,
+    };
+}
+export function delegationToWire(d) {
+    return {
+        delegator: d.delegator, delegate: d.delegate, authority: d.authority,
+        caveats: d.caveats.map((c) => ({ enforcer: c.enforcer, terms: c.terms, ...(c.args && c.args !== '0x' ? { args: c.args } : {}) })),
+        salt: d.salt.toString(), signature: d.signature,
+    };
+}
+/**
+ * Shape check for a session wire (at ceremony store time AND at every gate hit): timestamp-bounded, a
+ * pinned allowedMethods set that never carries the any-skill sentinel and — when `skill` is given — names
+ * that skill's selector.
+ *
+ * `skill` should be passed wherever the request names one: a wire minted for one rail must not authorize
+ * another. It is omitted only on the read/control path (`tasks/get`, `tasks/cancel`,
+ * `pushNotificationConfig/set`), whose digest binds a method and a taskId, not a skill. That omission is
+ * narrow rather than lax — the wire must still be pinned, live, ERC-1271-valid and unrevoked, and the task
+ * runtime independently requires the caller to BE a party to the task.
+ */
+export function checkSessionWireShape(wire, enforcers, nowSec, opts) {
+    const byEnforcer = (addr) => (wire.caveats ?? []).find((c) => (c.enforcer ?? '').toLowerCase() === addr.toLowerCase());
+    const tsCav = byEnforcer(enforcers.timestamp);
+    if (!tsCav?.terms)
+        return 'session wire must be timestamp-bounded';
+    try {
+        const win = decodeTimestampTerms(tsCav.terms);
+        const now = BigInt(nowSec);
+        if (now < win.validAfter || now >= win.validUntil)
+            return 'session wire outside its timestamp window';
+    }
+    catch {
+        return 'session wire timestamp terms undecodable';
+    }
+    const amCav = byEnforcer(enforcers.allowedMethods);
+    if (!amCav?.terms)
+        return 'session wire must carry an allowedMethods caveat';
+    try {
+        const selectors = decodeAllowedMethodsTerms(amCav.terms).map((s) => s.toLowerCase());
+        // A PINNED SET, never the any-skill sentinel. A leaked delegate key can send only what the custodian
+        // enumerated; `A2A_ANY_SKILL` is the line between "these operations" and "anything this agent can do".
+        if (selectors.some((s) => s === A2A_ANY_SKILL.toLowerCase()))
+            return 'session wire must never carry the any-skill sentinel';
+        if (selectors.length === 0)
+            return 'session wire allowedMethods must name at least one selector';
+        if (opts?.skill) {
+            const want = skillSelector(opts.skill).toLowerCase();
+            if (!selectors.includes(want))
+                return `session wire allowedMethods does not name the ${opts.skill} selector`;
+        }
+    }
+    catch {
+        return 'session wire allowedMethods terms undecodable';
+    }
+    return null;
+}
+/**
+ * Verify a session-wrapped signature for `signer` over `digest`, fail-closed on every leg. The on-chain
+ * checks are the SAME injected ones the standard gate uses (`OnChainChecks`) — revocation is immediate.
+ * Pass `skill` whenever the request names one.
+ */
+export async function verifySessionWrappedSignature(args) {
+    const parsed = parseSessionWrappedSignature(args.signature);
+    if (!parsed)
+        return false;
+    const { wire, sig } = parsed;
+    if (wire.delegator.toLowerCase() !== args.signer.toLowerCase())
+        return false;
+    const shapeOpts = args.skill ? { skill: args.skill } : undefined;
+    if (checkSessionWireShape(wire, args.enforcers, Math.floor((args.now ?? Date.now()) / 1000), shapeOpts) !== null)
+        return false;
+    // The raw sig must recover to the wire's delegate (the KMS session key). Accept both raw-digest and
+    // eth-signed-message recovery, mirroring AgentAccount._verifyEcdsa.
+    const delegate = wire.delegate.toLowerCase();
+    let recovered = false;
+    try {
+        recovered = (await recoverAddress({ hash: args.digest, signature: sig })).toLowerCase() === delegate;
+    }
+    catch { /* try wrapped */ }
+    if (!recovered) {
+        try {
+            recovered = (await recoverAddress({ hash: hashMessage({ raw: toBytes(args.digest) }), signature: sig })).toLowerCase() === delegate;
+        }
+        catch {
+            return false;
+        }
+    }
+    if (!recovered)
+        return false;
+    const d = wireToDelegation(wire);
+    try {
+        if (await args.isRevoked(d))
+            return false; // custodian revoke ⇒ immediate kill at every gate
+        return await args.verifyDelegationSig(d);
+    }
+    catch {
+        return false; // fail-closed on chain-read failure (ADR-0013)
+    }
+}
+/**
+ * Verify a session-wrapped signature over a digest THAT WAS SIGNED AT A KNOWN TIME — a release, an attestation, anything
+ * that must keep verifying for as long as it is served, long after the time-boxed leaf that signed it expired (spec 412
+ * W5 / spec 413). Every leg of `verifySessionWrappedSignature` except two:
+ *   • the timestamp window is judged AT `at` (when the thing was signed), not now — back-dating widens nothing, because
+ *     the leaf must still verify ERC-1271 against the signer and the key must still recover;
+ *   • no skill selector is required: a message gate asks "may this key send THIS skill"; a signed artifact asks only
+ *     "did the signer's agent sign it while its leaf was live".
+ * Revocation is read NOW: a leaf the custodian revoked stops vouching for anything it ever signed.
+ * Returns null when every leg holds, else the leg that failed, in words. Fail-closed on a chain-read failure.
+ */
+export async function verifySessionLeafSignatureAt(args) {
+    const parsed = parseSessionWrappedSignature(args.signature);
+    if (!parsed)
+        return 'not a session-wrapped signature';
+    const { wire, sig } = parsed;
+    if (wire.delegator.toLowerCase() !== args.signer.toLowerCase())
+        return 'the leaf is not the signer\'s';
+    const delegate = wire.delegate.toLowerCase();
+    let recovered = false;
+    try {
+        recovered = (await recoverAddress({ hash: args.digest, signature: sig })).toLowerCase() === delegate;
+    }
+    catch { /* try the eth-signed form */ }
+    if (!recovered) {
+        try {
+            recovered = (await recoverAddress({ hash: hashMessage({ raw: toBytes(args.digest) }), signature: sig })).toLowerCase() === delegate;
+        }
+        catch { /* no */ }
+    }
+    if (!recovered)
+        return 'the signature does not recover to the leaf\'s session key';
+    const tsCav = (wire.caveats ?? []).find((c) => (c.enforcer ?? '').toLowerCase() === args.timestampEnforcer.toLowerCase());
+    if (!tsCav?.terms)
+        return 'the leaf carries no timestamp caveat';
+    try {
+        const win = decodeTimestampTerms(tsCav.terms);
+        const at = BigInt(Math.floor(args.at / 1000));
+        if (at < win.validAfter || at >= win.validUntil)
+            return 'the leaf was not live when the digest was signed';
+    }
+    catch {
+        return 'the leaf\'s timestamp terms are undecodable';
+    }
+    const d = wireToDelegation(wire);
+    try {
+        if (await args.isRevoked(d))
+            return 'the leaf was revoked on chain';
+        if (!(await args.verifyDelegationSig(d)))
+            return 'the leaf does not verify ERC-1271 against the signer';
+    }
+    catch (e) {
+        return `the chain could not be read (${e instanceof Error ? e.message : 'unknown'})`;
+    }
+    return null;
+}
+/** keccak over stable-JSON — the a2a body-hash convention (equals the task runtime's `hashBody`). */
+export const sessionBodyHash = (data) => keccak256(toBytes(JSON.stringify(data ?? null)));
+//# sourceMappingURL=session-wire.js.map

package/dist/session-wire.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-wire.js","sourceRoot":"","sources":["../src/session-wire.ts"],"names":[],"mappings":"AAAA,wGAAwG;AACxG,EAAE;AACF,2GAA2G;AAC3G,uGAAuG;AACvG,sGAAsG;AACtG,qGAAqG;AACrG,iGAAiG;AACjG,iGAAiG;AACjG,qGAAqG;AACrG,uGAAuG;AACvG,mCAAmC;AACnC,EAAE;AACF,sGAAsG;AACtG,uGAAuG;AACvG,2GAA2G;AAC3G,wGAAwG;AACxG,yGAAyG;AACzG,uGAAuG;AACvG,EAAE;AACF,sGAAsG;AACtG,4GAA4G;AAC5G,sGAAsG;AACtG,yGAAyG;AACzG,sGAAsG;AACtG,sGAAsG;AACtG,2DAA2D;AAC3D,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,cAAc,EAAE,OAAO,EAA0B,MAAM,MAAM,CAAC;AAC/F,OAAO,EAAE,yBAAyB,EAAE,oBAAoB,EAAmB,MAAM,+BAA+B,CAAC;AACjH,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAY1D;;4CAE4C;AAC5C,MAAM,CAAC,MAAM,wBAAwB,GAAG,MAAM,CAAC;AAE/C,MAAM,SAAS,GAAG,CAAC,CAAS,EAAO,EAAE,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,EAAS,CAAC;AAC7I,MAAM,SAAS,GAAG,CAAC,CAAS,EAAU,EAAE;IACtC,MAAM,KAAK,GAAG,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAClD,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC/C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,KAAK,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC9F,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACzC,CAAC,CAAC;AAEF,+EAA+E;AAC/E,MAAM,UAAU,oBAAoB,CAAC,IAAsB,EAAE,GAAQ;IACnE,OAAO,CAAC,wBAAwB,GAAG,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAQ,CAAC;AAC/F,CAAC;AAED;mDACmD;AACnD,MAAM,UAAU,4BAA4B,CAAC,SAAiB;IAC5D,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,wBAAwB,CAAC,IAAI,SAAS,CAAC,MAAM,IAAI,wBAAwB,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzH,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,SAAS,CAAC,KAAK,CAAC,wBAAwB,CAAC,MAAM,CAAC,EAAE,CAAC,CAA2C,CAAC;QACxI,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,SAAS,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,MAAM,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QAC5G,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,CAAmB;IAClD,OAAO;QACL,SAAS,EAAE,CAAC,CAAC,SAAS;QACtB,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,SAAS,EAAE,CAAC,CAAC,SAAS;QACtB,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,IAAI,CAAQ,EAAE,CAAC,CAAC;QACxG,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;QACpB,SAAS,EAAE,CAAC,CAAC,SAAS;KACvB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,CAAa;IAC5C,OAAO;QACL,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS;QACpE,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,KAAY,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QAC/I,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,SAAgB;KACvD,CAAC;AACJ,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,qBAAqB,CACnC,IAAsB,EACtB,SAAwD,EACxD,MAAc,EACd,IAAyB;IAEzB,MAAM,UAAU,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,KAAK,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;IAC/H,MAAM,KAAK,GAAG,UAAU,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IAC9C,IAAI,CAAC,KAAK,EAAE,KAAK;QAAE,OAAO,wCAAwC,CAAC;IACnE,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,oBAAoB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC9C,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;QAC3B,IAAI,GAAG,GAAG,GAAG,CAAC,UAAU,IAAI,GAAG,IAAI,GAAG,CAAC,UAAU;YAAE,OAAO,2CAA2C,CAAC;IACxG,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,0CAA0C,CAAC;IACpD,CAAC;IACD,MAAM,KAAK,GAAG,UAAU,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;IACnD,IAAI,CAAC,KAAK,EAAE,KAAK;QAAE,OAAO,kDAAkD,CAAC;IAC7E,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,yBAAyB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;QACrF,qGAAqG;QACrG,uGAAuG;QACvG,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,aAAa,CAAC,WAAW,EAAE,CAAC;YAAE,OAAO,sDAAsD,CAAC;QAC5H,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,6DAA6D,CAAC;QACjG,IAAI,IAAI,EAAE,KAAK,EAAE,CAAC;YAChB,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;YACrD,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC;gBAAE,OAAO,iDAAiD,IAAI,CAAC,KAAK,WAAW,CAAC;QAC/G,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,+CAA+C,CAAC;IACzD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,6BAA6B,CAAC,IAWnD;IACC,MAAM,MAAM,GAAG,4BAA4B,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC5D,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC1B,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,MAAM,CAAC;IAC7B,IAAI,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,KAAK,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE;QAAE,OAAO,KAAK,CAAC;IAC7E,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IACjE,IAAI,qBAAqB,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,EAAE,SAAS,CAAC,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC/H,oGAAoG;IACpG,oEAAoE;IACpE,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;IAC7C,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,IAAI,CAAC;QAAC,SAAS,GAAG,CAAC,MAAM,cAAc,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,QAAQ,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;IACzI,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,IAAI,CAAC;YAAC,SAAS,GAAG,CAAC,MAAM,cAAc,CAAC,EAAE,IAAI,EAAE,WAAW,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,QAAQ,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,KAAK,CAAC;QAAC,CAAC;IACtK,CAAC;IACD,IAAI,CAAC,SAAS;QAAE,OAAO,KAAK,CAAC;IAC7B,MAAM,CAAC,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACjC,IAAI,CAAC;QACH,IAAI,MAAM,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC,CAAC,kDAAkD;QAC7F,OAAO,MAAM,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC,CAAC,+CAA+C;IAC/D,CAAC;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAAC,IASlD;IACC,MAAM,MAAM,GAAG,4BAA4B,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC5D,IAAI,CAAC,MAAM;QAAE,OAAO,iCAAiC,CAAC;IACtD,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,MAAM,CAAC;IAC7B,IAAI,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,KAAK,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE;QAAE,OAAO,+BAA+B,CAAC;IACvG,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;IAC7C,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,IAAI,CAAC;QAAC,SAAS,GAAG,CAAC,MAAM,cAAc,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,QAAQ,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,6BAA6B,CAAC,CAAC;IACrJ,IAAI,CAAC,SAAS,EAAE,CAAC;QAAC,IAAI,CAAC;YAAC,SAAS,GAAG,CAAC,MAAM,cAAc,CAAC,EAAE,IAAI,EAAE,WAAW,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,QAAQ,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,CAAC;IAAC,CAAC;IACnL,IAAI,CAAC,SAAS;QAAE,OAAO,2DAA2D,CAAC;IACnF,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,KAAK,IAAI,CAAC,iBAAiB,CAAC,WAAW,EAAE,CAAC,CAAC;IAC1H,IAAI,CAAC,KAAK,EAAE,KAAK;QAAE,OAAO,sCAAsC,CAAC;IACjE,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,oBAAoB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC9C,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;QAC9C,IAAI,EAAE,GAAG,GAAG,CAAC,UAAU,IAAI,EAAE,IAAI,GAAG,CAAC,UAAU;YAAE,OAAO,kDAAkD,CAAC;IAC7G,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,6CAA6C,CAAC;IAAC,CAAC;IACjE,MAAM,CAAC,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACjC,IAAI,CAAC;QACH,IAAI,MAAM,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;YAAE,OAAO,+BAA+B,CAAC;QACpE,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC;YAAE,OAAO,sDAAsD,CAAC;IAC1G,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,gCAAgC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC;IACvF,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,qGAAqG;AACrG,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,IAAa,EAAO,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC"}

package/dist/skill-handler.d.ts

@@ -1,6 +1,7 @@
 import type { Address, Hex } from '@agenticprimitives/types';
 import type { Delegation } from '@agenticprimitives/delegation';
 import type { VaultRef } from './types.js';
+import type { SkillPayment } from './payment-gate.js';
 /** Minimal vault seam — the consumer wires demo-mcp vault read/write over a delegation. FR-3.4: a handler
  *  delivers a result into ANOTHER principal's vault by passing a `delegation` THAT principal granted
  *  (delegator == the record owner); the consumer routes it through `callMcpToolViaDelegation` so demo-mcp
@@ -16,11 +17,16 @@ export interface VaultClient {
         delegation?: Delegation;
     }): Promise<VaultRef>;
 }
-/** Minimal MCP seam — call a tool via the delegation token (reuses the a2a→mcp leg, W4). */
+/** Minimal MCP seam — call a tool via the delegation token (reuses the a2a→mcp leg, W4). Symmetric with
+ *  `VaultClient`: pass the task's `delegation` (the grant THAT principal signed) so the composed MCP call
+ *  rides the on-chain authority (ADR-0041); the consumer routes it through `callMcpToolViaDelegation`. Omit
+ *  `delegation` only for an agent-self call that needs no principal grant. This is the port the Ring-0
+ *  orchestration loop's `ToolInvoker` wraps (ADR-0044). */
 export interface McpClient {
     callTool(args: {
         tool: string;
         toolArgs?: Record<string, unknown>;
+        delegation?: Delegation;
     }): Promise<unknown>;
 }
 /** Thrown by `requestAuth` to suspend a task pending a fresh/again-scoped delegation (FR-3.5). The
@@ -67,6 +73,8 @@ export interface SkillContext {
         bodyContentType?: string;
         disclosurePolicy?: string;
         caseId?: Hex;
+        /** URI-keyed A2A extension metadata to record on the artifact (e.g. skill-provenance). */
+        metadata?: Record<string, unknown>;
     }): Promise<Hex>;
     /** Suspend pending a fresh grant — throws `AuthRequired`. */
     requestAuth(reason: string): never;
@@ -79,8 +87,25 @@ export interface SkillResult {
     artifactIds?: Hex[];
     error?: string;
 }
+/**
+ * Who may SEE a skill on an agent card (spec 338 §8, ADR-0056 §6). Mirrors `surface-catalog`'s
+ * `SurfaceExposure` structurally — not imported, so `a2a` stays dependency-light.
+ *
+ * Absent ⇒ `public`, preserving pre-spec-338 behaviour. Visibility is NOT authorization: a skill
+ * hidden from a card is still gated by delegation + policy if someone guesses its name, and a skill
+ * shown on a card grants nothing.
+ */
+export type SkillExposure = 'public' | 'authenticated' | 'private' | 'service-only';
 export interface SkillHandler {
     skill: string;
+    /** Card visibility. Omit ⇒ `public`. See `SkillExposure`. */
+    exposure?: SkillExposure;
+    /** For `exposure: 'private'` — canonical ids permitted to see it. Empty/absent ⇒ nobody. */
+    audience?: readonly string[];
+    /** PAY-A2A-1 — optional price. A priced skill is gated by the injected `PaymentGate` BEFORE `handle`
+     *  runs; an unpaid request parks `input-required` with `x402.payment.*` metadata (the handler is never
+     *  reached). Free skills omit this. */
+    payment?: SkillPayment;
     handle(ctx: SkillContext): Promise<SkillResult>;
 }
 /** Index handlers by skill name; reject duplicate registrations. */

package/dist/skill-handler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"skill-handler.d.ts","sourceRoot":"","sources":["../src/skill-handler.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,+BAA+B,CAAC;AAChE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAE3C;;;2GAG2G;AAC3G,MAAM,WAAW,WAAW;IAC1B,IAAI,CAAC,GAAG,EAAE,QAAQ,EAAE,IAAI,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,UAAU,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC1E,KAAK,CAAC,IAAI,EAAE;QAAE,KAAK,EAAE,OAAO,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,OAAO,CAAC;QAAC,UAAU,CAAC,EAAE,UAAU,CAAA;KAAE,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;CAChH;AAED,4FAA4F;AAC5F,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACxF;AAED;yEACyE;AACzE,qBAAa,YAAa,SAAQ,KAAK;aACT,UAAU,EAAE,MAAM;gBAAlB,UAAU,EAAE,MAAM;CAI/C;AAED;4EAC4E;AAC5E,MAAM,WAAW,cAAc;IAC7B,mCAAmC;IACnC,MAAM,EAAE,OAAO,CAAC;IAChB,sFAAsF;IACtF,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,8EAA8E;IAC9E,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;mFAEmF;AACnF,qBAAa,gBAAiB,SAAQ,KAAK;aACb,OAAO,EAAE,cAAc;gBAAvB,OAAO,EAAE,cAAc;CAIpD;AAED,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,GAAG,CAAC;IACZ,8DAA8D;IAC9D,SAAS,EAAE,OAAO,CAAC;IACnB,qDAAqD;IACrD,MAAM,EAAE,OAAO,CAAC;IAChB,mEAAmE;IACnE,KAAK,EAAE,OAAO,CAAC;IACf,oCAAoC;IACpC,UAAU,EAAE,UAAU,CAAC;IACvB,KAAK,EAAE,WAAW,CAAC;IACnB,GAAG,EAAE,SAAS,CAAC;IACf;6GACyG;IACzG,YAAY,CAAC,CAAC,EAAE;QACd,YAAY,EAAE,MAAM,CAAC;QACrB,IAAI,EAAE,OAAO,CAAC;QACd,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,gBAAgB,CAAC,EAAE,MAAM,CAAC;QAC1B,MAAM,CAAC,EAAE,GAAG,CAAC;KACd,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IACjB,6DAA6D;IAC7D,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,KAAK,CAAC;IACnC;6EACyE;IACzE,cAAc,CAAC,GAAG,EAAE,cAAc,GAAG,KAAK,CAAC;CAC5C;AAED,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,WAAW,GAAG,QAAQ,GAAG,gBAAgB,CAAC;IACjD,WAAW,CAAC,EAAE,GAAG,EAAE,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;CACjD;AAED,oEAAoE;AACpE,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,YAAY,EAAE,GAAG,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC,CAOtF"}
+{"version":3,"file":"skill-handler.d.ts","sourceRoot":"","sources":["../src/skill-handler.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,+BAA+B,CAAC;AAChE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEtD;;;2GAG2G;AAC3G,MAAM,WAAW,WAAW;IAC1B,IAAI,CAAC,GAAG,EAAE,QAAQ,EAAE,IAAI,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,UAAU,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC1E,KAAK,CAAC,IAAI,EAAE;QAAE,KAAK,EAAE,OAAO,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,OAAO,CAAC;QAAC,UAAU,CAAC,EAAE,UAAU,CAAA;KAAE,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;CAChH;AAED;;;;2DAI2D;AAC3D,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAAC,UAAU,CAAC,EAAE,UAAU,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACjH;AAED;yEACyE;AACzE,qBAAa,YAAa,SAAQ,KAAK;aACT,UAAU,EAAE,MAAM;gBAAlB,UAAU,EAAE,MAAM;CAI/C;AAED;4EAC4E;AAC5E,MAAM,WAAW,cAAc;IAC7B,mCAAmC;IACnC,MAAM,EAAE,OAAO,CAAC;IAChB,sFAAsF;IACtF,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,8EAA8E;IAC9E,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;mFAEmF;AACnF,qBAAa,gBAAiB,SAAQ,KAAK;aACb,OAAO,EAAE,cAAc;gBAAvB,OAAO,EAAE,cAAc;CAIpD;AAED,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,GAAG,CAAC;IACZ,8DAA8D;IAC9D,SAAS,EAAE,OAAO,CAAC;IACnB,qDAAqD;IACrD,MAAM,EAAE,OAAO,CAAC;IAChB,mEAAmE;IACnE,KAAK,EAAE,OAAO,CAAC;IACf,oCAAoC;IACpC,UAAU,EAAE,UAAU,CAAC;IACvB,KAAK,EAAE,WAAW,CAAC;IACnB,GAAG,EAAE,SAAS,CAAC;IACf;6GACyG;IACzG,YAAY,CAAC,CAAC,EAAE;QACd,YAAY,EAAE,MAAM,CAAC;QACrB,IAAI,EAAE,OAAO,CAAC;QACd,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,gBAAgB,CAAC,EAAE,MAAM,CAAC;QAC1B,MAAM,CAAC,EAAE,GAAG,CAAC;QACb,0FAA0F;QAC1F,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KACpC,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IACjB,6DAA6D;IAC7D,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,KAAK,CAAC;IACnC;6EACyE;IACzE,cAAc,CAAC,GAAG,EAAE,cAAc,GAAG,KAAK,CAAC;CAC5C;AAED,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,WAAW,GAAG,QAAQ,GAAG,gBAAgB,CAAC;IACjD,WAAW,CAAC,EAAE,GAAG,EAAE,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;GAOG;AACH,MAAM,MAAM,aAAa,GAAG,QAAQ,GAAG,eAAe,GAAG,SAAS,GAAG,cAAc,CAAC;AAEpF,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,6DAA6D;IAC7D,QAAQ,CAAC,EAAE,aAAa,CAAC;IACzB,4FAA4F;IAC5F,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC7B;;2CAEuC;IACvC,OAAO,CAAC,EAAE,YAAY,CAAC;IACvB,MAAM,CAAC,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;CACjD;AAED,oEAAoE;AACpE,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,YAAY,EAAE,GAAG,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC,CAOtF"}

package/dist/skill-handler.js.map

@@ -1 +1 @@
-{"version":3,"file":"skill-handler.js","sourceRoot":"","sources":["../src/skill-handler.ts"],"names":[],"mappings":"AAsBA;yEACyE;AACzE,MAAM,OAAO,YAAa,SAAQ,KAAK;IACT;IAA5B,YAA4B,UAAkB;QAC5C,KAAK,CAAC,kBAAkB,UAAU,EAAE,CAAC,CAAC;QADZ,eAAU,GAAV,UAAU,CAAQ;QAE5C,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;IAC7B,CAAC;CACF;AAcD;;mFAEmF;AACnF,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IACb;IAA5B,YAA4B,OAAuB;QACjD,KAAK,CAAC,sBAAsB,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QADpB,YAAO,GAAP,OAAO,CAAgB;QAEjD,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;IACjC,CAAC;CACF;AAyCD,oEAAoE;AACpE,MAAM,UAAU,kBAAkB,CAAC,QAAwB;IACzD,MAAM,GAAG,GAAG,IAAI,GAAG,EAAwB,CAAC;IAC5C,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;QAC7E,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IACtB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}
+{"version":3,"file":"skill-handler.js","sourceRoot":"","sources":["../src/skill-handler.ts"],"names":[],"mappings":"AA2BA;yEACyE;AACzE,MAAM,OAAO,YAAa,SAAQ,KAAK;IACT;IAA5B,YAA4B,UAAkB;QAC5C,KAAK,CAAC,kBAAkB,UAAU,EAAE,CAAC,CAAC;QADZ,eAAU,GAAV,UAAU,CAAQ;QAE5C,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;IAC7B,CAAC;CACF;AAcD;;mFAEmF;AACnF,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IACb;IAA5B,YAA4B,OAAuB;QACjD,KAAK,CAAC,sBAAsB,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QADpB,YAAO,GAAP,OAAO,CAAgB;QAEjD,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;IACjC,CAAC;CACF;AA6DD,oEAAoE;AACpE,MAAM,UAAU,kBAAkB,CAAC,QAAwB;IACzD,MAAM,GAAG,GAAG,IAAI,GAAG,EAAwB,CAAC;IAC5C,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;QAC7E,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IACtB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/standard/app-delegation.d.ts

@@ -0,0 +1,60 @@
+import type { Hex } from '@agenticprimitives/types';
+import type { DelegationWireV1 } from '../session-wire.js';
+/** The capability the person's agent runs for an engagement — one message to another agent, sent as the asker. */
+export declare const ENGAGEMENT_INVOKE_CAPABILITY = "engagement.agent.invoke";
+export interface AppDelegationAskInput {
+    /** The person's ask-as-me wire: delegator = the person, delegate = this app's ask key, caveat `harness.ask`. */
+    wire: DelegationWireV1;
+    /** The person's words, verbatim. */
+    question: string;
+    /** The service the person's agent engages (a registry name: `catalog.svc`). */
+    service: string;
+    /** A fresh nonce per ask (the runtime's assertion ledger spends it once). Default: 16 hex chars from `crypto`. */
+    nonce?: string;
+}
+/** The `/harness/ask` body, as a stable string — the assertion's `bodyHash` is over THESE bytes, so the caller posts
+ *  this string unchanged. */
+export declare function appDelegationAskBody(input: AppDelegationAskInput): string;
+/**
+ * ONE signed ask: the body plus the `A2A-Session` headers — a caller assertion by the app's ask key (the wire's
+ * delegate), wrapped with the wire so the runtime can verify the delegation it rides. `signDigest` is the app's
+ * signer for that key (an AKCS delegate, a KMS key — never a person's key); `audience` is the person agent's origin.
+ */
+export declare function appDelegationAsk(input: AppDelegationAskInput & {
+    audience: string;
+    signDigest: (digest: Hex) => Promise<Hex>;
+    now?: () => number;
+}): Promise<{
+    raw: string;
+    headers: Record<string, string>;
+}>;
+/** The reply shape `/harness/ask` answers with, as far as an engaging client reads it. */
+export interface AppDelegationReplyV1 {
+    ok?: boolean;
+    error?: string;
+    runRef?: string;
+    hasProvenance?: unknown;
+    reply?: {
+        kind?: string;
+        runRef?: string;
+        text?: string;
+        summary?: string;
+        error?: string;
+        results?: Array<{
+            toolId: string;
+            result: unknown;
+        }>;
+    };
+}
+/**
+ * What the engaged service answered, as the person's agent recorded it: the result of the `engagement.agent.invoke`
+ * step (the service's own answer, an observation of the person's agent — never authority), the agent's words, and
+ * the run that did it. `null` when the reply carries no engagement.
+ */
+export declare function engagementHopOf(out: AppDelegationReplyV1 | null | undefined): {
+    said: string;
+    runRef?: string;
+    hop: Record<string, unknown> | null;
+    hasProvenance?: unknown;
+} | null;
+//# sourceMappingURL=app-delegation.d.ts.map

package/dist/standard/app-delegation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-delegation.d.ts","sourceRoot":"","sources":["../../src/standard/app-delegation.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,0BAA0B,CAAC;AACpD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAG3D,kHAAkH;AAClH,eAAO,MAAM,4BAA4B,4BAA4B,CAAC;AAEtE,MAAM,WAAW,qBAAqB;IACpC,gHAAgH;IAChH,IAAI,EAAE,gBAAgB,CAAC;IACvB,oCAAoC;IACpC,QAAQ,EAAE,MAAM,CAAC;IACjB,+EAA+E;IAC/E,OAAO,EAAE,MAAM,CAAC;IAChB,kHAAkH;IAClH,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;6BAC6B;AAC7B,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,qBAAqB,GAAG,MAAM,CASzE;AAED;;;;GAIG;AACH,wBAAsB,gBAAgB,CACpC,KAAK,EAAE,qBAAqB,GAAG;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,CAAC,MAAM,EAAE,GAAG,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;CAAE,GACjH,OAAO,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,CAAC,CAK3D;AAED,0FAA0F;AAC1F,MAAM,WAAW,oBAAoB;IACnC,EAAE,CAAC,EAAE,OAAO,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,KAAK,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,KAAK,CAAC;YAAE,MAAM,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,OAAO,CAAA;SAAE,CAAC,CAAA;KAAE,CAAC;CACnJ;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,oBAAoB,GAAG,IAAI,GAAG,SAAS,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAAC,aAAa,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,IAAI,CAMpL"}

package/dist/standard/app-delegation.js

@@ -0,0 +1,40 @@
+import { STANDARD_SURFACE_SKILL, sessionWireSigner } from './caller.js';
+/** The capability the person's agent runs for an engagement — one message to another agent, sent as the asker. */
+export const ENGAGEMENT_INVOKE_CAPABILITY = 'engagement.agent.invoke';
+/** The `/harness/ask` body, as a stable string — the assertion's `bodyHash` is over THESE bytes, so the caller posts
+ *  this string unchanged. */
+export function appDelegationAskBody(input) {
+    const nonce = input.nonce ?? [...crypto.getRandomValues(new Uint8Array(8))].map((b) => b.toString(16).padStart(2, '0')).join('');
+    return JSON.stringify({
+        method: STANDARD_SURFACE_SKILL,
+        nonce,
+        addressee: input.wire.delegator,
+        message: `ask ${input.service}: ${input.question}`,
+        plan: { steps: [{ toolId: ENGAGEMENT_INVOKE_CAPABILITY, args: { agent: input.service, message: input.question } }] },
+    });
+}
+/**
+ * ONE signed ask: the body plus the `A2A-Session` headers — a caller assertion by the app's ask key (the wire's
+ * delegate), wrapped with the wire so the runtime can verify the delegation it rides. `signDigest` is the app's
+ * signer for that key (an AKCS delegate, a KMS key — never a person's key); `audience` is the person agent's origin.
+ */
+export async function appDelegationAsk(input) {
+    const raw = appDelegationAskBody(input);
+    const sign = sessionWireSigner({ agent: input.wire.delegate, wire: input.wire, signDigest: input.signDigest, audience: input.audience, ...(input.now ? { now: input.now } : {}) });
+    const headers = await sign(raw, STANDARD_SURFACE_SKILL);
+    return { raw, headers: { 'content-type': 'application/json', accept: 'application/json', ...headers } };
+}
+/**
+ * What the engaged service answered, as the person's agent recorded it: the result of the `engagement.agent.invoke`
+ * step (the service's own answer, an observation of the person's agent — never authority), the agent's words, and
+ * the run that did it. `null` when the reply carries no engagement.
+ */
+export function engagementHopOf(out) {
+    if (!out?.ok || !out.reply)
+        return null;
+    const hop = (out.reply.results ?? []).find((r) => r.toolId === ENGAGEMENT_INVOKE_CAPABILITY)?.result;
+    const said = (out.reply.text ?? out.reply.summary ?? '').trim();
+    const runRef = out.reply.runRef ?? out.runRef;
+    return { said, ...(runRef ? { runRef } : {}), hop: hop && typeof hop === 'object' ? hop : null, ...(out.hasProvenance !== undefined ? { hasProvenance: out.hasProvenance } : {}) };
+}
+//# sourceMappingURL=app-delegation.js.map

package/dist/standard/app-delegation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-delegation.js","sourceRoot":"","sources":["../../src/standard/app-delegation.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAExE,kHAAkH;AAClH,MAAM,CAAC,MAAM,4BAA4B,GAAG,yBAAyB,CAAC;AAatE;6BAC6B;AAC7B,MAAM,UAAU,oBAAoB,CAAC,KAA4B;IAC/D,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,CAAC,GAAG,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjI,OAAO,IAAI,CAAC,SAAS,CAAC;QACpB,MAAM,EAAE,sBAAsB;QAC9B,KAAK;QACL,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,SAAS;QAC/B,OAAO,EAAE,OAAO,KAAK,CAAC,OAAO,KAAK,KAAK,CAAC,QAAQ,EAAE;QAClD,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,4BAA4B,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,QAAQ,EAAE,EAAE,CAAC,EAAE;KACrH,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,KAAkH;IAElH,MAAM,GAAG,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;IACxC,MAAM,IAAI,GAAG,iBAAiB,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,QAAyB,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IACpM,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,GAAG,EAAE,sBAAsB,CAAC,CAAC;IACxD,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,EAAE,kBAAkB,EAAE,GAAG,OAAO,EAAE,EAAE,CAAC;AAC1G,CAAC;AAWD;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,GAA4C;IAC1E,IAAI,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxC,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,4BAA4B,CAAC,EAAE,MAAM,CAAC;IACrG,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAChE,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC;IAC9C,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAE,GAA+B,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,GAAG,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AAClN,CAAC"}

package/dist/standard/caller.d.ts

@@ -0,0 +1,107 @@
+import { type Address, type Hex } from 'viem';
+import type { Delegation } from '@agenticprimitives/delegation';
+import { type DelegationWireV1 } from '../session-wire.js';
+import type { Principal } from './server.js';
+/** The Authorization scheme an agent presents its session wire under. */
+export declare const SESSION_AUTH_SCHEME = "A2A-Session";
+/** The skill a session wire must pin to reach the standard surface: asking this agent, and nothing else.
+ *  A wire that names other selectors and not this one is refused — pinning is the point. */
+export declare const STANDARD_SURFACE_SKILL = "harness.ask";
+/** What a caller signs. Every field is bound: a captured assertion cannot be replayed onto another method,
+ *  another body, another host, or a later moment. `issuedAt` is IN the digest and checked (stale / ahead refused,
+ *  the digest claimed once) — the wire path's freshness field that the deleted JSON-RPC dispatcher once dropped
+ *  (audit a2a-issuedat-dropped-in-dispatch; the folded wire of spec 372 S4 is where the check lives now). */
+export interface CallerAssertionV1 {
+    /** The Smart Agent the caller acts AS — must equal the wire's delegator. */
+    agent: string;
+    /** The A2A method this assertion is for. */
+    method: string;
+    /** keccak256 over the raw JSON-RPC request body. */
+    bodyHash: Hex;
+    /** Seconds since the epoch. */
+    issuedAt: number;
+    /** The origin the request is addressed to (`https://host`), so an assertion for one agent's host is not
+     *  usable at another's. */
+    audience: string;
+    /** The `0x51`-wrapped session signature over `callerAssertionDigest(...)`. */
+    signature: string;
+}
+/** The digest a caller signs — keccak over stable JSON, the a2a body-hash convention. */
+export declare function callerAssertionDigest(a: Omit<CallerAssertionV1, 'signature'>): Hex;
+/** keccak over the raw request body, exactly as it arrived — never over a re-serialized parse. */
+export declare const requestBodyHash: (raw: string) => Hex;
+/** Build the `Authorization` header value a runtime sends. */
+export declare function sessionAuthorizationHeader(a: CallerAssertionV1): string;
+/** Read an `A2A-Session` header. Returns null for any other scheme (a `Bearer` is a person's, not ours) and
+ *  for anything malformed — never a partial assertion. */
+export declare function parseSessionAuthorization(header: string | null | undefined): CallerAssertionV1 | null;
+export interface SessionWirePrincipalDeps {
+    /** The enforcer addresses the wire's caveats must carry (this deployment's). */
+    enforcers: {
+        timestamp: string;
+        allowedMethods: string;
+    };
+    /** ERC-1271 / ECDSA verification of the wire against its delegator. */
+    verifyDelegationSig: (d: Delegation) => Promise<boolean>;
+    /** On-chain revocation — a custodian's revoke kills the caller at the next request. */
+    isRevoked: (d: Delegation) => Promise<boolean>;
+    /**
+     * Verify an assertion the agent signed DIRECTLY — ERC-1271 against its own account, no session key in
+     * between. Some agents can do that (a relayer holding the SA's credential, a persona in this estate) and
+     * before the fold they proved themselves exactly this way, with `caller` + `signature` on the wire.
+     *
+     * NOT A FALLBACK (ADR-0013). The signature's own type byte chooses: `0x51` is session-wrapped and takes
+     * the wire path; anything else takes this one. Neither runs because the other failed, and omitting this
+     * means a direct signature is simply not admitted.
+     */
+    verifyAgentSignature?: (agent: Address, digest: Hex, signature: Hex) => Promise<boolean>;
+    /**
+     * The skill the wire must pin for this request (default `STANDARD_SURFACE_SKILL`). A function is asked per
+     * request with the assertion's `method` and answers the selector to require, or `null` to refuse that method
+     * outright — so one principal can admit `harness.ask` under an ask wire and `harness.read` under a read-only
+     * wire, and a wire pinned to one never opens the other (spec 433 W2: the Home's runtime reads a self-hosted
+     * agent's runs under a wire that can read and cannot ask).
+     */
+    skill?: string | ((method: string) => string | null);
+    /** How old an assertion may be (default 120 s). */
+    maxAgeSec?: number;
+    /** Tolerated clock skew for an assertion dated ahead (default 30 s). */
+    skewSec?: number;
+    now?: () => number;
+    /**
+     * Spend an assertion, once. Returns true when THIS call claimed it and false when it was already spent.
+     * The default is an in-isolate map, which is not replay protection where requests fan out across
+     * isolates — bind the estate's single writer (the agent's own object) in production.
+     */
+    claim?: (digest: Hex, expiresAtMs: number) => Promise<boolean>;
+    /** Told why a caller was refused — for the operator's log, never for the caller (a refusal says only
+     *  that it was refused; which leg failed is not a fact an unauthenticated caller is owed). */
+    onRefused?: (reason: string, agent?: string) => void;
+}
+/**
+ * The `principal` implementation for agents. Returns `{ agent, kind: 'agent' }` on every leg passing, and
+ * `null` otherwise — the server answers 401 and no method runs.
+ *
+ * SINGLE-USE. An accepted assertion's digest is SPENT: a captured request cannot be replayed while it is
+ * still fresh. With `claim` bound to the estate's single writer this holds everywhere; without it, only
+ * within this isolate — which on a fanned-out edge is no protection at all, and was observed live before
+ * the ledger existed. The claim happens AFTER the signature verifies, so an unauthenticated caller can
+ * spend nothing and write nothing.
+ */
+export declare function sessionWirePrincipal(deps: SessionWirePrincipalDeps): (request: Request) => Promise<Principal | null>;
+/** Re-export so a client can build a wire-signed call without reaching past the standard surface. */
+export type { DelegationWireV1 };
+/** THE CLIENT HALF — what a runtime holds to speak as itself: its agent, its session wire, and a signer over the
+ *  runtime's OWN key (a port: the private key never enters this package). Returns the per-request header builder
+ *  `createStandardA2aClient({ signRequest })` takes; each request's assertion binds the method, the body hash, the
+ *  audience and the moment, and is spent once at the addressed agent (S3c). The same code path the S3c gate drove. */
+export declare function sessionWireSigner(o: {
+    agent: Address;
+    wire: DelegationWireV1;
+    /** Signs a 32-byte digest with the runtime's key; returns the raw 65-byte signature. */
+    signDigest: (digest: Hex) => Promise<Hex>;
+    /** The origin the requests are addressed to (`https://host`); defaults from the endpoint's origin. */
+    audience: string;
+    now?: () => number;
+}): (raw: string, method: string) => Promise<Record<string, string>>;
+//# sourceMappingURL=caller.d.ts.map

package/dist/standard/caller.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"caller.d.ts","sourceRoot":"","sources":["../../src/standard/caller.ts"],"names":[],"mappings":"AAkBA,OAAO,EAAsB,KAAK,OAAO,EAAE,KAAK,GAAG,EAAE,MAAM,MAAM,CAAC;AAClE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,+BAA+B,CAAC;AAChE,OAAO,EAAqF,KAAK,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAC9I,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAE7C,yEAAyE;AACzE,eAAO,MAAM,mBAAmB,gBAAgB,CAAC;AAEjD;4FAC4F;AAC5F,eAAO,MAAM,sBAAsB,gBAAgB,CAAC;AAEpD;;;6GAG6G;AAC7G,MAAM,WAAW,iBAAiB;IAChC,4EAA4E;IAC5E,KAAK,EAAE,MAAM,CAAC;IACd,4CAA4C;IAC5C,MAAM,EAAE,MAAM,CAAC;IACf,oDAAoD;IACpD,QAAQ,EAAE,GAAG,CAAC;IACd,+BAA+B;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB;+BAC2B;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,8EAA8E;IAC9E,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,yFAAyF;AACzF,wBAAgB,qBAAqB,CAAC,CAAC,EAAE,IAAI,CAAC,iBAAiB,EAAE,WAAW,CAAC,GAAG,GAAG,CASlF;AAED,kGAAkG;AAClG,eAAO,MAAM,eAAe,QAAS,MAAM,KAAG,GAA8B,CAAC;AAQ7E,8DAA8D;AAC9D,wBAAgB,0BAA0B,CAAC,CAAC,EAAE,iBAAiB,GAAG,MAAM,CAEvE;AAED;0DAC0D;AAC1D,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,iBAAiB,GAAG,IAAI,CAerG;AAED,MAAM,WAAW,wBAAwB;IACvC,gFAAgF;IAChF,SAAS,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,cAAc,EAAE,MAAM,CAAA;KAAE,CAAC;IACzD,uEAAuE;IACvE,mBAAmB,EAAE,CAAC,CAAC,EAAE,UAAU,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACzD,uFAAuF;IACvF,SAAS,EAAE,CAAC,CAAC,EAAE,UAAU,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAC/C;;;;;;;;OAQG;IACH,oBAAoB,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACzF;;;;;;OAMG;IACH,KAAK,CAAC,EAAE,MAAM,GAAG,CAAC,CAAC,MAAM,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC,CAAC;IACrD,mDAAmD;IACnD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,wEAAwE;IACxE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB;;;;OAIG;IACH,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAC/D;kGAC8F;IAC9F,SAAS,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;CACtD;AAED;;;;;;;;;GASG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,wBAAwB,GAAG,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CA8DpH;AAED,qGAAqG;AACrG,YAAY,EAAE,gBAAgB,EAAE,CAAC;AAEjC;;;sHAGsH;AACtH,wBAAgB,iBAAiB,CAAC,CAAC,EAAE;IACnC,KAAK,EAAE,OAAO,CAAC;IACf,IAAI,EAAE,gBAAgB,CAAC;IACvB,wFAAwF;IACxF,UAAU,EAAE,CAAC,MAAM,EAAE,GAAG,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC;IAC1C,sGAAsG;IACtG,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CASnE"}