@agenticprimitives/account-custody 1.0.0-alpha.4 → 1.0.0-alpha.41

package/README.md

@@ -1,10 +1,14 @@
 # @agenticprimitives/account-custody
 
-Custody-layer SDK for Smart Agent account safety and recovery.
+> Part of **[Agentic Primitives](https://agenticprimitives.dev)** — the open-source trust substrate for agentic applications: identity that can sign, authority checked at act time, evidence the owner carries. [Developer kit](https://github.com/agentictrustlabs/agentic-primitives) · [All packages](https://agenticprimitives.dev/developers)
 
-This package owns the TypeScript surface around `CustodyPolicy`: ABI exports,
-`CustodyAction` argument builders, EIP-712 typed data, quorum signature packing,
-and custody-domain types.
+**Custody is not authority.**
+
+Most stacks blur the two: the key that lets an agent act is also the key that controls the account, so a leaked session becomes a lost identity. This package exists to keep them apart. Credential add, replace, and remove on a Smart Agent are custody-policy operations — gated by trustee quorums, guardian quorums, multi-credential self-recovery, or multi-sig — and are never modeled as delegations ([ADR-0011](../../docs/architecture/decisions/0011-credential-recovery-and-re-association.md), [spec 221](../../specs/221-credential-recovery.md)). A delegated party can act within its caveats; it can never promote itself into custody.
+
+The payoff is recovery without identity loss. `CustodyAction.RecoverAccount` performs an atomic add-new + remove-old credential rotation under the account's custody policy. The canonical Smart Agent address never changes; every delegation it ever issued stays valid; only the credential set moves. This package is the TypeScript surface for that machinery: the `CustodyPolicy` ABI, `CustodyAction` argument builders, EIP-712 typed data, quorum signature packing, and the custody-domain types.
+
+> Part of [agenticprimitives](../../README.md) — the trust substrate for the agent economy: one canonical Smart Agent identity with custody, delegation, naming, credentials, and audit evidence designed as one system.
 
 ## Install
 
@@ -23,6 +27,17 @@ import {
 } from '@agenticprimitives/account-custody';
 ```
 
+What you get:
+
+- `custodyPolicyAbi` — the ABI for the on-chain `CustodyPolicy` ERC-7579 module ([`packages/contracts/src/custody/CustodyPolicy.sol`](../contracts/src/custody/CustodyPolicy.sol)), kept in lockstep with the deployed bytecode.
+- `CustodyAction` enum (a mirror of the on-chain enum) plus per-action `buildXxxArgs` encoders — including `buildRecoverAccountArgs` for credential rotation.
+- EIP-712 typed-data shapes for `ScheduleCustodyChangeRequest` / `ApplyCustodyChangeRequest` / `CancelScheduledChangeRequest`, with `custodyDomain({ chainId, verifyingContract })` — guaranteed to hash to the same `structHash` the Solidity computes.
+- Quorum signature packing (`packQuorumSigs`) and custody-domain types: `Custodian`, `Trustee`, `CustodyCouncil`, `ScheduledChange`, `CustodyMode`, `RiskTier`.
+
+## How it's different
+
+The common pattern for org control and recovery is a third-party multi-sig (Safe) plus a separate recovery product (Argent-style guardians) bolted onto an account they don't define. That works until the seams matter: the multi-sig's notion of "owner" and the recovery product's notion of "guardian" are different identity models, and neither knows about the delegations the account has issued. Here custody is a native ERC-7579 module on the same Smart Agent — quorums, trustees, scheduled changes, and recovery in one policy, designed alongside the delegation layer it explicitly firewalls ([spec 213](../../specs/213-custody-layer-carve-out.md)). No third-party multi-sig dependency; we ported the signature-packing patterns worth porting and own the rest.
+
 ## Boundary
 
 This package speaks custody vocabulary only:
@@ -33,8 +48,7 @@ This package speaks custody vocabulary only:
 - `CustodyAction`
 - `ScheduledChange`
 
-It does not own delegation caveats, MCP transport, passkey ceremonies, account
-deployment, or key-custody providers. See `CLAUDE.md` for routing.
+It does not own delegation caveats, MCP transport, passkey ceremonies, account deployment, or key-custody providers (note: `key-custody` is *key* custody — KMS backends; this is *account* custody). See [`CLAUDE.md`](CLAUDE.md) for routing and [`spec.md`](spec.md) for the contract.
 
 ## Validate
 
@@ -42,3 +56,7 @@ deployment, or key-custody providers. See `CLAUDE.md` for routing.
 pnpm --filter @agenticprimitives/account-custody typecheck
 pnpm --filter @agenticprimitives/account-custody test
 ```
+
+## Status
+
+Testnet/pilot-ready. Production launch is gated on the public checklist in the root README — including third-party contract audit and governance key rotation. Track every security finding live in [`docs/audits/findings.yaml`](../../docs/audits/findings.yaml).

package/dist/actions.d.ts

@@ -15,7 +15,10 @@ export declare enum CustodyAction {
     ChangeValueCeiling = 12,
     SetRecoveryApprovals = 13,
     RecoverAccount = 14,
-    ChangeApprovalsRequired = 15
+    ChangeApprovalsRequired = 15,
+    /** Spec 410 §1.2 (contracts generation 3) — a PLANNED rotation: one credential in, one out, every standing
+     *  approved-digest wire re-approved under the new custody epoch, in one applied change. T4. */
+    RotateCredential = 16
 }
 export declare function buildAddCustodianArgs(custodian: Address): Hex;
 export declare function buildRemoveCustodianArgs(custodian: Address): Hex;
@@ -42,15 +45,23 @@ export declare function buildApplySystemUpdateArgs(newImpl: Address): Hex;
  */
 export declare function buildChangeApprovalsRequiredArgs(tier: number, newCount: number): Hex;
 /**
- * Encode args for `AddPasskeyCredential(credentialIdDigest, x, y)`.
+ * Encode args for `AddPasskeyCredential(credentialIdDigest, x, y, rpIdHash)`.
  * Side effect on AgentAccount: also registers the PIA derived from
  * `(x, y)` as a first-class custodian.
  *
  * Wave 2C C-6 hardening: on-chain initializer rejects credentialIdDigest
  * == 0; this builder echoes that check at the wire-format boundary so
  * the demo never spends gas on a guaranteed-revert tx.
+ *
+ * H7-C.1 / CON-WEBAUTHN-001 (encoded shape updated 2026-06-01): the
+ * on-chain `CustodyPolicy.AddPasskeyCredential` decoder reads 4 fields
+ * `(bytes32, uint256, uint256, bytes32)` and forwards `rpIdHash` to
+ * `AgentAccount.addPasskey(...)`. `addPasskey` reverts on `rpIdHash ==
+ * bytes32(0)` (`InvalidRpIdHash`), so the SDK MUST require a non-zero
+ * rpIdHash here. Encoding only 3 fields produced silent-reverts in the
+ * inner userOp (Act 3 'AddPasskey Bob on Org' live debug).
  */
-export declare function buildAddPasskeyCredentialArgs(credentialIdDigest: Hex, x: bigint, y: bigint): Hex;
+export declare function buildAddPasskeyCredentialArgs(credentialIdDigest: Hex, x: bigint, y: bigint, rpIdHash: Hex): Hex;
 /** Encode args for `RemovePasskeyCredential(credentialIdDigest)`. */
 export declare function buildRemovePasskeyCredentialArgs(credentialIdDigest: Hex): Hex;
 /**
@@ -67,6 +78,11 @@ export interface RecoveryPasskeyAdd {
     credentialIdDigest: Hex;
     x: bigint;
     y: bigint;
+    /** H7-C.1 / CON-WEBAUTHN-001: rpIdHash binds the passkey to its RP. Required
+     *  by the on-chain `AgentAccountRecoveryPasskeyAdd` struct (IAgentAccount.sol).
+     *  The recovery handler `CustodyPolicy._applyRecoverAccount` forwards this to
+     *  `AgentAccount.addPasskey(...)` which reverts `InvalidRpIdHash()` on zero. */
+    rpIdHash: Hex;
 }
 /**
  * Encode args for `RecoverAccount(args)` — atomic add/remove of owners
@@ -87,4 +103,35 @@ export declare function buildRecoverAccountArgs(args: {
     addPasskeys?: readonly RecoveryPasskeyAdd[];
     removePasskeyCredentialIdDigests?: readonly Hex[];
 }): Hex;
+/**
+ * Encode args for `RotateCredential(args)` — spec 410 §1.2, contracts generation 3. Exactly one credential
+ * is added (`addOwner` XOR `addPasskey`) and exactly one retired (`removeOwner` XOR
+ * `removePasskeyCredentialIdDigest`); `reapprove` lists the delegation digests the module re-approves AFTER
+ * the retirement through `AgentAccount.approveDigest`, so each key is derived on chain under the new epoch.
+ *
+ * This is the ONLY custody action that carries a re-approval list. `buildRecoverAccountArgs` has no such
+ * field: recovery re-approves nothing and ends with `revokeAllApprovedDigests` (THESIS-1a).
+ *
+ * Solidity struct (packages/contracts/src/IAgentAccount.sol):
+ *   struct AgentAccountRotateCredentialArgs {
+ *     address addOwner;
+ *     AgentAccountRecoveryPasskeyAdd addPasskey;   // (bytes32 credentialIdDigest, uint256 x, uint256 y, bytes32 rpIdHash)
+ *     address removeOwner;
+ *     bytes32 removePasskeyCredentialIdDigest;
+ *     bytes32[] reapprove;
+ *   }
+ */
+export declare function buildRotateCredentialArgs(args: {
+    add: {
+        owner: Address;
+    } | {
+        passkey: RecoveryPasskeyAdd;
+    };
+    remove: {
+        owner: Address;
+    } | {
+        passkeyCredentialIdDigest: Hex;
+    };
+    reapprove: readonly Hex[];
+}): Hex;
 //# sourceMappingURL=actions.d.ts.map

package/dist/actions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"actions.d.ts","sourceRoot":"","sources":["../src/actions.ts"],"names":[],"mappings":"AAQA,OAAO,EAAuB,KAAK,OAAO,EAAE,KAAK,GAAG,EAAE,MAAM,MAAM,CAAC;AAEnE,oBAAY,aAAa;IACvB,YAAY,IAAI;IAChB,eAAe,IAAI;IACnB,oBAAoB,IAAI;IACxB,uBAAuB,IAAI;IAC3B,UAAU,IAAI;IACd,aAAa,IAAI;IACjB,iBAAiB,IAAI;IACrB,iBAAiB,IAAI;IACrB,uBAAuB,IAAI;IAC3B,eAAe,IAAI;IACnB,mBAAmB,KAAK;IACxB,mBAAmB,KAAK;IACxB,kBAAkB,KAAK;IACvB,oBAAoB,KAAK;IACzB,cAAc,KAAK;IACnB,uBAAuB,KAAK;CAC7B;AAuCD,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,OAAO,GAAG,GAAG,CAG7D;AAED,wBAAgB,wBAAwB,CAAC,SAAS,EAAE,OAAO,GAAG,GAAG,CAGhE;AAED,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,OAAO,GAAG,GAAG,CAGzD;AAED,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,OAAO,GAAG,GAAG,CAG5D;AAED,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,GAAG,CAGtE;AAED,wBAAgB,2BAA2B,CAAC,aAAa,EAAE,MAAM,GAAG,GAAG,CAGtE;AAED;;;;;;;GAOG;AACH,wBAAgB,6BAA6B,CAAC,SAAS,EAAE,MAAM,GAAG,GAAG,CAGpE;AAED,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,OAAO,GAAG,GAAG,CAGhE;AAED;;;;;;GAMG;AACH,wBAAgB,gCAAgC,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,GAAG,CAOpF;AAED;;;;;;;;GAQG;AACH,wBAAgB,6BAA6B,CAC3C,kBAAkB,EAAE,GAAG,EACvB,CAAC,EAAE,MAAM,EACT,CAAC,EAAE,MAAM,GACR,GAAG,CAWL;AAED,qEAAqE;AACrE,wBAAgB,gCAAgC,CAAC,kBAAkB,EAAE,GAAG,GAAG,GAAG,CAG7E;AAED;;;;GAIG;AACH,wBAAgB,4BAA4B,CAC1C,aAAa,EAAE,SAAS,OAAO,EAAE,EACjC,gBAAgB,EAAE,SAAS,OAAO,EAAE,GACnC,GAAG,CAOL;AAED;;;GAGG;AACH,MAAM,WAAW,kBAAkB;IACjC,kBAAkB,EAAE,GAAG,CAAC;IACxB,CAAC,EAAE,MAAM,CAAC;IACV,CAAC,EAAE,MAAM,CAAC;CACX;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAAE;IAC5C,SAAS,CAAC,EAAE,SAAS,OAAO,EAAE,CAAC;IAC/B,YAAY,CAAC,EAAE,SAAS,OAAO,EAAE,CAAC;IAClC,WAAW,CAAC,EAAE,SAAS,kBAAkB,EAAE,CAAC;IAC5C,gCAAgC,CAAC,EAAE,SAAS,GAAG,EAAE,CAAC;CACnD,GAAG,GAAG,CAwDN"}
+{"version":3,"file":"actions.d.ts","sourceRoot":"","sources":["../src/actions.ts"],"names":[],"mappings":"AAQA,OAAO,EAAuB,KAAK,OAAO,EAAE,KAAK,GAAG,EAAE,MAAM,MAAM,CAAC;AAEnE,oBAAY,aAAa;IACvB,YAAY,IAAI;IAChB,eAAe,IAAI;IACnB,oBAAoB,IAAI;IACxB,uBAAuB,IAAI;IAC3B,UAAU,IAAI;IACd,aAAa,IAAI;IACjB,iBAAiB,IAAI;IACrB,iBAAiB,IAAI;IACrB,uBAAuB,IAAI;IAC3B,eAAe,IAAI;IACnB,mBAAmB,KAAK;IACxB,mBAAmB,KAAK;IACxB,kBAAkB,KAAK;IACvB,oBAAoB,KAAK;IACzB,cAAc,KAAK;IACnB,uBAAuB,KAAK;IAC5B;mGAC+F;IAC/F,gBAAgB,KAAK;CACtB;AAuCD,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,OAAO,GAAG,GAAG,CAG7D;AAED,wBAAgB,wBAAwB,CAAC,SAAS,EAAE,OAAO,GAAG,GAAG,CAGhE;AAED,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,OAAO,GAAG,GAAG,CAGzD;AAED,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,OAAO,GAAG,GAAG,CAG5D;AAED,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,GAAG,CAGtE;AAED,wBAAgB,2BAA2B,CAAC,aAAa,EAAE,MAAM,GAAG,GAAG,CAGtE;AAED;;;;;;;GAOG;AACH,wBAAgB,6BAA6B,CAAC,SAAS,EAAE,MAAM,GAAG,GAAG,CAGpE;AAED,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,OAAO,GAAG,GAAG,CAGhE;AAED;;;;;;GAMG;AACH,wBAAgB,gCAAgC,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,GAAG,CAOpF;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,6BAA6B,CAC3C,kBAAkB,EAAE,GAAG,EACvB,CAAC,EAAE,MAAM,EACT,CAAC,EAAE,MAAM,EACT,QAAQ,EAAE,GAAG,GACZ,GAAG,CAeL;AAED,qEAAqE;AACrE,wBAAgB,gCAAgC,CAAC,kBAAkB,EAAE,GAAG,GAAG,GAAG,CAG7E;AAED;;;;GAIG;AACH,wBAAgB,4BAA4B,CAC1C,aAAa,EAAE,SAAS,OAAO,EAAE,EACjC,gBAAgB,EAAE,SAAS,OAAO,EAAE,GACnC,GAAG,CAOL;AAED;;;GAGG;AACH,MAAM,WAAW,kBAAkB;IACjC,kBAAkB,EAAE,GAAG,CAAC;IACxB,CAAC,EAAE,MAAM,CAAC;IACV,CAAC,EAAE,MAAM,CAAC;IACV;;;oFAGgF;IAChF,QAAQ,EAAE,GAAG,CAAC;CACf;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAAE;IAC5C,SAAS,CAAC,EAAE,SAAS,OAAO,EAAE,CAAC;IAC/B,YAAY,CAAC,EAAE,SAAS,OAAO,EAAE,CAAC;IAClC,WAAW,CAAC,EAAE,SAAS,kBAAkB,EAAE,CAAC;IAC5C,gCAAgC,CAAC,EAAE,SAAS,GAAG,EAAE,CAAC;CACnD,GAAG,GAAG,CAgEN;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,yBAAyB,CAAC,IAAI,EAAE;IAC9C,GAAG,EAAE;QAAE,KAAK,EAAE,OAAO,CAAA;KAAE,GAAG;QAAE,OAAO,EAAE,kBAAkB,CAAA;KAAE,CAAC;IAC1D,MAAM,EAAE;QAAE,KAAK,EAAE,OAAO,CAAA;KAAE,GAAG;QAAE,yBAAyB,EAAE,GAAG,CAAA;KAAE,CAAC;IAChE,SAAS,EAAE,SAAS,GAAG,EAAE,CAAC;CAC3B,GAAG,GAAG,CA8CN"}

package/dist/actions.js

@@ -24,6 +24,9 @@ export var CustodyAction;
     CustodyAction[CustodyAction["SetRecoveryApprovals"] = 13] = "SetRecoveryApprovals";
     CustodyAction[CustodyAction["RecoverAccount"] = 14] = "RecoverAccount";
     CustodyAction[CustodyAction["ChangeApprovalsRequired"] = 15] = "ChangeApprovalsRequired";
+    /** Spec 410 §1.2 (contracts generation 3) — a PLANNED rotation: one credential in, one out, every standing
+     *  approved-digest wire re-approved under the new custody epoch, in one applied change. T4. */
+    CustodyAction[CustodyAction["RotateCredential"] = 16] = "RotateCredential";
 })(CustodyAction || (CustodyAction = {}));
 // ─── Range / shape validators ────────────────────────────────────────────
 const ADDRESS_RE = /^0x[0-9a-fA-F]{40}$/;
@@ -108,22 +111,34 @@ export function buildChangeApprovalsRequiredArgs(tier, newCount) {
     return encodeAbiParameters([{ type: 'uint8' }, { type: 'uint8' }], [tier, newCount]);
 }
 /**
- * Encode args for `AddPasskeyCredential(credentialIdDigest, x, y)`.
+ * Encode args for `AddPasskeyCredential(credentialIdDigest, x, y, rpIdHash)`.
  * Side effect on AgentAccount: also registers the PIA derived from
  * `(x, y)` as a first-class custodian.
  *
  * Wave 2C C-6 hardening: on-chain initializer rejects credentialIdDigest
  * == 0; this builder echoes that check at the wire-format boundary so
  * the demo never spends gas on a guaranteed-revert tx.
+ *
+ * H7-C.1 / CON-WEBAUTHN-001 (encoded shape updated 2026-06-01): the
+ * on-chain `CustodyPolicy.AddPasskeyCredential` decoder reads 4 fields
+ * `(bytes32, uint256, uint256, bytes32)` and forwards `rpIdHash` to
+ * `AgentAccount.addPasskey(...)`. `addPasskey` reverts on `rpIdHash ==
+ * bytes32(0)` (`InvalidRpIdHash`), so the SDK MUST require a non-zero
+ * rpIdHash here. Encoding only 3 fields produced silent-reverts in the
+ * inner userOp (Act 3 'AddPasskey Bob on Org' live debug).
  */
-export function buildAddPasskeyCredentialArgs(credentialIdDigest, x, y) {
+export function buildAddPasskeyCredentialArgs(credentialIdDigest, x, y, rpIdHash) {
     assertBytes32('AddPasskeyCredential.credentialIdDigest', credentialIdDigest);
     if (credentialIdDigest === ('0x' + '00'.repeat(32))) {
         throw new RangeError('[custody] AddPasskeyCredential.credentialIdDigest: must be non-zero (audit C-6)');
     }
     assertUint256('AddPasskeyCredential.x', x, 1n);
     assertUint256('AddPasskeyCredential.y', y, 1n);
-    return encodeAbiParameters([{ type: 'bytes32' }, { type: 'uint256' }, { type: 'uint256' }], [credentialIdDigest, x, y]);
+    assertBytes32('AddPasskeyCredential.rpIdHash', rpIdHash);
+    if (rpIdHash === ('0x' + '00'.repeat(32))) {
+        throw new RangeError('[custody] AddPasskeyCredential.rpIdHash: must be non-zero (AgentAccount.addPasskey reverts on zero rpIdHash — H7-C.1)');
+    }
+    return encodeAbiParameters([{ type: 'bytes32' }, { type: 'uint256' }, { type: 'uint256' }, { type: 'bytes32' }], [credentialIdDigest, x, y, rpIdHash]);
 }
 /** Encode args for `RemovePasskeyCredential(credentialIdDigest)`. */
 export function buildRemovePasskeyCredentialArgs(credentialIdDigest) {
@@ -171,6 +186,10 @@ export function buildRecoverAccountArgs(args) {
         }
         assertUint256('RecoverAccount.addPasskeys.x', p.x, 1n);
         assertUint256('RecoverAccount.addPasskeys.y', p.y, 1n);
+        assertBytes32('RecoverAccount.addPasskeys.rpIdHash', p.rpIdHash);
+        if (p.rpIdHash === ('0x' + '00'.repeat(32))) {
+            throw new RangeError('[custody] RecoverAccount.addPasskeys: rpIdHash must be non-zero (H7-C.1 — AgentAccount.addPasskey reverts on zero)');
+        }
     }
     for (const d of removePasskeyCredentialIdDigests) {
         assertBytes32('RecoverAccount.removePasskeyCredentialIdDigests', d);
@@ -194,6 +213,10 @@ export function buildRecoverAccountArgs(args) {
                         { name: 'credentialIdDigest', type: 'bytes32' },
                         { name: 'x', type: 'uint256' },
                         { name: 'y', type: 'uint256' },
+                        // H7-C.1 / CON-WEBAUTHN-001: AgentAccountRecoveryPasskeyAdd struct
+                        // gained rpIdHash. Off-chain encoder was missing it (drift bug
+                        // fixed 2026-06-01, same class as PRs #91, #92, #95).
+                        { name: 'rpIdHash', type: 'bytes32' },
                     ],
                 },
                 { name: 'removePasskeyCredentialIdDigests', type: 'bytes32[]' },
@@ -206,4 +229,74 @@ export function buildRecoverAccountArgs(args) {
             removePasskeyCredentialIdDigests: removePasskeyCredentialIdDigests,
         }]);
 }
+/**
+ * Encode args for `RotateCredential(args)` — spec 410 §1.2, contracts generation 3. Exactly one credential
+ * is added (`addOwner` XOR `addPasskey`) and exactly one retired (`removeOwner` XOR
+ * `removePasskeyCredentialIdDigest`); `reapprove` lists the delegation digests the module re-approves AFTER
+ * the retirement through `AgentAccount.approveDigest`, so each key is derived on chain under the new epoch.
+ *
+ * This is the ONLY custody action that carries a re-approval list. `buildRecoverAccountArgs` has no such
+ * field: recovery re-approves nothing and ends with `revokeAllApprovedDigests` (THESIS-1a).
+ *
+ * Solidity struct (packages/contracts/src/IAgentAccount.sol):
+ *   struct AgentAccountRotateCredentialArgs {
+ *     address addOwner;
+ *     AgentAccountRecoveryPasskeyAdd addPasskey;   // (bytes32 credentialIdDigest, uint256 x, uint256 y, bytes32 rpIdHash)
+ *     address removeOwner;
+ *     bytes32 removePasskeyCredentialIdDigest;
+ *     bytes32[] reapprove;
+ *   }
+ */
+export function buildRotateCredentialArgs(args) {
+    const ZERO32 = ('0x' + '00'.repeat(32));
+    const ZERO_ADDR = ('0x' + '00'.repeat(20));
+    let addOwner = ZERO_ADDR;
+    let addPasskey = { credentialIdDigest: ZERO32, x: 0n, y: 0n, rpIdHash: ZERO32 };
+    if ('owner' in args.add) {
+        assertAddress('RotateCredential.add.owner', args.add.owner);
+        if (args.add.owner === ZERO_ADDR)
+            throw new RangeError('[custody] RotateCredential.add.owner: must be non-zero');
+        addOwner = args.add.owner;
+    }
+    else {
+        const p = args.add.passkey;
+        assertBytes32('RotateCredential.add.passkey.credentialIdDigest', p.credentialIdDigest);
+        if (p.credentialIdDigest === ZERO32)
+            throw new RangeError('[custody] RotateCredential.add.passkey: credentialIdDigest must be non-zero (audit C-6)');
+        assertUint256('RotateCredential.add.passkey.x', p.x, 1n);
+        assertUint256('RotateCredential.add.passkey.y', p.y, 1n);
+        assertBytes32('RotateCredential.add.passkey.rpIdHash', p.rpIdHash);
+        if (p.rpIdHash === ZERO32)
+            throw new RangeError('[custody] RotateCredential.add.passkey: rpIdHash must be non-zero (H7-C.1)');
+        addPasskey = p;
+    }
+    let removeOwner = ZERO_ADDR;
+    let removePasskeyCredentialIdDigest = ZERO32;
+    if ('owner' in args.remove) {
+        assertAddress('RotateCredential.remove.owner', args.remove.owner);
+        if (args.remove.owner === ZERO_ADDR)
+            throw new RangeError('[custody] RotateCredential.remove.owner: must be non-zero');
+        removeOwner = args.remove.owner;
+    }
+    else {
+        assertBytes32('RotateCredential.remove.passkeyCredentialIdDigest', args.remove.passkeyCredentialIdDigest);
+        if (args.remove.passkeyCredentialIdDigest === ZERO32)
+            throw new RangeError('[custody] RotateCredential.remove.passkeyCredentialIdDigest: must be non-zero');
+        removePasskeyCredentialIdDigest = args.remove.passkeyCredentialIdDigest;
+    }
+    for (const d of args.reapprove)
+        assertBytes32('RotateCredential.reapprove', d);
+    return encodeAbiParameters([{
+            type: 'tuple',
+            components: [
+                { name: 'addOwner', type: 'address' },
+                { name: 'addPasskey', type: 'tuple', components: [
+                        { name: 'credentialIdDigest', type: 'bytes32' }, { name: 'x', type: 'uint256' }, { name: 'y', type: 'uint256' }, { name: 'rpIdHash', type: 'bytes32' },
+                    ] },
+                { name: 'removeOwner', type: 'address' },
+                { name: 'removePasskeyCredentialIdDigest', type: 'bytes32' },
+                { name: 'reapprove', type: 'bytes32[]' },
+            ],
+        }], [{ addOwner, addPasskey, removeOwner, removePasskeyCredentialIdDigest, reapprove: [...args.reapprove] }]);
+}
 //# sourceMappingURL=actions.js.map

package/dist/actions.js.map

@@ -1 +1 @@
-{"version":3,"file":"actions.js","sourceRoot":"","sources":["../src/actions.ts"],"names":[],"mappings":"AAAA,mFAAmF;AACnF,0EAA0E;AAC1E,2EAA2E;AAC3E,EAAE;AACF,sEAAsE;AACtE,kEAAkE;AAClE,2BAA2B;AAE3B,OAAO,EAAE,mBAAmB,EAA0B,MAAM,MAAM,CAAC;AAEnE,MAAM,CAAN,IAAY,aAiBX;AAjBD,WAAY,aAAa;IACvB,iEAAgB,CAAA;IAChB,uEAAmB,CAAA;IACnB,iFAAwB,CAAA;IACxB,uFAA2B,CAAA;IAC3B,6DAAc,CAAA;IACd,mEAAiB,CAAA;IACjB,2EAAqB,CAAA;IACrB,2EAAqB,CAAA;IACrB,uFAA2B,CAAA;IAC3B,uEAAmB,CAAA;IACnB,gFAAwB,CAAA;IACxB,gFAAwB,CAAA;IACxB,8EAAuB,CAAA;IACvB,kFAAyB,CAAA;IACzB,sEAAmB,CAAA;IACnB,wFAA4B,CAAA;AAC9B,CAAC,EAjBW,aAAa,KAAb,aAAa,QAiBxB;AAED,4EAA4E;AAE5E,MAAM,UAAU,GAAG,qBAAqB,CAAC;AACzC,MAAM,UAAU,GAAG,qBAAqB,CAAC;AACzC,MAAM,QAAQ,GAAG,CAAC,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;AACnC,MAAM,MAAM,GAAG,GAAG,CAAC;AAEnB,SAAS,aAAa,CAAC,KAAa,EAAE,CAAU;IAC9C,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QACjD,MAAM,IAAI,UAAU,CAAC,aAAa,KAAK,gCAAgC,CAAC,GAAG,CAAC,CAAC;IAC/E,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,KAAa,EAAE,CAAM;IAC1C,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QACjD,MAAM,IAAI,UAAU,CAAC,aAAa,KAAK,wBAAwB,CAAC,GAAG,CAAC,CAAC;IACvE,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,KAAa,EAAE,CAAS,EAAE,GAAG,GAAG,CAAC,EAAE,GAAG,GAAG,MAAM;IAClE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,GAAG,EAAE,CAAC;QAC/C,MAAM,IAAI,UAAU,CAAC,aAAa,KAAK,qBAAqB,GAAG,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IACzF,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,KAAa,EAAE,CAAS,EAAE,GAAG,GAAG,EAAE,EAAE,GAAG,GAAG,QAAQ;IACvE,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,GAAG,EAAE,CAAC;QAChD,MAAM,IAAI,UAAU,CAAC,aAAa,KAAK,uBAAuB,GAAG,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IAC3F,CAAC;AACH,CAAC;AAED,4EAA4E;AAC5E,EAAE;AACF,yEAAyE;AACzE,0EAA0E;AAC1E,oCAAoC;AAEpC,MAAM,UAAU,qBAAqB,CAAC,SAAkB;IACtD,aAAa,CAAC,wBAAwB,EAAE,SAAS,CAAC,CAAC;IACnD,OAAO,mBAAmB,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;AACjE,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,SAAkB;IACzD,aAAa,CAAC,2BAA2B,EAAE,SAAS,CAAC,CAAC;IACtD,OAAO,mBAAmB,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;AACjE,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,OAAgB;IAClD,aAAa,CAAC,oBAAoB,EAAE,OAAO,CAAC,CAAC;IAC7C,OAAO,mBAAmB,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;AAC/D,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,OAAgB;IACrD,aAAa,CAAC,uBAAuB,EAAE,OAAO,CAAC,CAAC;IAChD,OAAO,mBAAmB,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;AAC/D,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,OAAsB;IAC/D,WAAW,CAAC,2BAA2B,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IACxD,OAAO,mBAAmB,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;AAC7D,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,aAAqB;IAC/D,aAAa,CAAC,kCAAkC,EAAE,aAAa,CAAC,CAAC;IACjE,OAAO,mBAAmB,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC;AACrE,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,6BAA6B,CAAC,SAAiB;IAC7D,WAAW,CAAC,gCAAgC,EAAE,SAAS,CAAC,CAAC;IACzD,OAAO,mBAAmB,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;AAC/D,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,OAAgB;IACzD,aAAa,CAAC,2BAA2B,EAAE,OAAO,CAAC,CAAC;IACpD,OAAO,mBAAmB,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;AAC/D,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gCAAgC,CAAC,IAAY,EAAE,QAAgB;IAC7E,WAAW,CAAC,8BAA8B,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IACxD,WAAW,CAAC,kCAAkC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;IAC7D,OAAO,mBAAmB,CACxB,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EACtC,CAAC,IAAI,EAAE,QAAQ,CAAC,CACjB,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,6BAA6B,CAC3C,kBAAuB,EACvB,CAAS,EACT,CAAS;IAET,aAAa,CAAC,yCAAyC,EAAE,kBAAkB,CAAC,CAAC;IAC7E,IAAI,kBAAkB,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,UAAU,CAAC,iFAAiF,CAAC,CAAC;IAC1G,CAAC;IACD,aAAa,CAAC,wBAAwB,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;IAC/C,aAAa,CAAC,wBAAwB,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;IAC/C,OAAO,mBAAmB,CACxB,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,EAC/D,CAAC,kBAAkB,EAAE,CAAC,EAAE,CAAC,CAAC,CAC3B,CAAC;AACJ,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,gCAAgC,CAAC,kBAAuB;IACtE,aAAa,CAAC,4CAA4C,EAAE,kBAAkB,CAAC,CAAC;IAChF,OAAO,mBAAmB,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAC;AAC1E,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,4BAA4B,CAC1C,aAAiC,EACjC,gBAAoC;IAEpC,KAAK,MAAM,CAAC,IAAI,aAAa;QAAE,aAAa,CAAC,yBAAyB,EAAE,CAAC,CAAC,CAAC;IAC3E,KAAK,MAAM,CAAC,IAAI,gBAAgB;QAAE,aAAa,CAAC,4BAA4B,EAAE,CAAC,CAAC,CAAC;IACjF,OAAO,mBAAmB,CACxB,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,EAC9C,CAAC,aAA0B,EAAE,gBAA6B,CAAC,CAC5D,CAAC;AACJ,CAAC;AAYD;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,uBAAuB,CAAC,IAKvC;IACC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC;IACvC,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,EAAE,CAAC;IAC7C,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC;IAC3C,MAAM,gCAAgC,GAAG,IAAI,CAAC,gCAAgC,IAAI,EAAE,CAAC;IAErF,KAAK,MAAM,CAAC,IAAI,SAAS;QAAE,aAAa,CAAC,0BAA0B,EAAE,CAAC,CAAC,CAAC;IACxE,KAAK,MAAM,CAAC,IAAI,YAAY;QAAE,aAAa,CAAC,6BAA6B,EAAE,CAAC,CAAC,CAAC;IAC9E,KAAK,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;QAC5B,aAAa,CAAC,+CAA+C,EAAE,CAAC,CAAC,kBAAkB,CAAC,CAAC;QACrF,IAAI,CAAC,CAAC,kBAAkB,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;YACtD,MAAM,IAAI,UAAU,CAAC,uFAAuF,CAAC,CAAC;QAChH,CAAC;QACD,aAAa,CAAC,8BAA8B,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACvD,aAAa,CAAC,8BAA8B,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACzD,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,gCAAgC,EAAE,CAAC;QACjD,aAAa,CAAC,iDAAiD,EAAE,CAAC,CAAC,CAAC;IACtE,CAAC;IAED,IACE,SAAS,CAAC,MAAM,KAAK,CAAC;QACtB,YAAY,CAAC,MAAM,KAAK,CAAC;QACzB,WAAW,CAAC,MAAM,KAAK,CAAC;QACxB,gCAAgC,CAAC,MAAM,KAAK,CAAC,EAC7C,CAAC;QACD,MAAM,IAAI,UAAU,CAAC,2EAA2E,CAAC,CAAC;IACpG,CAAC;IAED,OAAO,mBAAmB,CACxB;QACE;YACE,IAAI,EAAE,OAAO;YACb,UAAU,EAAE;gBACV,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,WAAW,EAAE;gBACxC,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,WAAW,EAAE;gBAC3C;oBACE,IAAI,EAAE,aAAa;oBACnB,IAAI,EAAE,SAAS;oBACf,UAAU,EAAE;wBACV,EAAE,IAAI,EAAE,oBAAoB,EAAE,IAAI,EAAE,SAAS,EAAE;wBAC/C,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE;wBAC9B,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE;qBAC/B;iBACF;gBACD,EAAE,IAAI,EAAE,kCAAkC,EAAE,IAAI,EAAE,WAAW,EAAE;aAChE;SACF;KACF,EACD,CAAC;YACC,SAAS,EAAE,SAAsB;YACjC,YAAY,EAAE,YAAyB;YACvC,WAAW,EAAE,WAAmC;YAChD,gCAAgC,EAAE,gCAAyC;SAC5E,CAAC,CACH,CAAC;AACJ,CAAC"}
+{"version":3,"file":"actions.js","sourceRoot":"","sources":["../src/actions.ts"],"names":[],"mappings":"AAAA,mFAAmF;AACnF,0EAA0E;AAC1E,2EAA2E;AAC3E,EAAE;AACF,sEAAsE;AACtE,kEAAkE;AAClE,2BAA2B;AAE3B,OAAO,EAAE,mBAAmB,EAA0B,MAAM,MAAM,CAAC;AAEnE,MAAM,CAAN,IAAY,aAoBX;AApBD,WAAY,aAAa;IACvB,iEAAgB,CAAA;IAChB,uEAAmB,CAAA;IACnB,iFAAwB,CAAA;IACxB,uFAA2B,CAAA;IAC3B,6DAAc,CAAA;IACd,mEAAiB,CAAA;IACjB,2EAAqB,CAAA;IACrB,2EAAqB,CAAA;IACrB,uFAA2B,CAAA;IAC3B,uEAAmB,CAAA;IACnB,gFAAwB,CAAA;IACxB,gFAAwB,CAAA;IACxB,8EAAuB,CAAA;IACvB,kFAAyB,CAAA;IACzB,sEAAmB,CAAA;IACnB,wFAA4B,CAAA;IAC5B;mGAC+F;IAC/F,0EAAqB,CAAA;AACvB,CAAC,EApBW,aAAa,KAAb,aAAa,QAoBxB;AAED,4EAA4E;AAE5E,MAAM,UAAU,GAAG,qBAAqB,CAAC;AACzC,MAAM,UAAU,GAAG,qBAAqB,CAAC;AACzC,MAAM,QAAQ,GAAG,CAAC,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;AACnC,MAAM,MAAM,GAAG,GAAG,CAAC;AAEnB,SAAS,aAAa,CAAC,KAAa,EAAE,CAAU;IAC9C,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QACjD,MAAM,IAAI,UAAU,CAAC,aAAa,KAAK,gCAAgC,CAAC,GAAG,CAAC,CAAC;IAC/E,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,KAAa,EAAE,CAAM;IAC1C,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QACjD,MAAM,IAAI,UAAU,CAAC,aAAa,KAAK,wBAAwB,CAAC,GAAG,CAAC,CAAC;IACvE,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,KAAa,EAAE,CAAS,EAAE,GAAG,GAAG,CAAC,EAAE,GAAG,GAAG,MAAM;IAClE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,GAAG,EAAE,CAAC;QAC/C,MAAM,IAAI,UAAU,CAAC,aAAa,KAAK,qBAAqB,GAAG,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IACzF,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,KAAa,EAAE,CAAS,EAAE,GAAG,GAAG,EAAE,EAAE,GAAG,GAAG,QAAQ;IACvE,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,GAAG,EAAE,CAAC;QAChD,MAAM,IAAI,UAAU,CAAC,aAAa,KAAK,uBAAuB,GAAG,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IAC3F,CAAC;AACH,CAAC;AAED,4EAA4E;AAC5E,EAAE;AACF,yEAAyE;AACzE,0EAA0E;AAC1E,oCAAoC;AAEpC,MAAM,UAAU,qBAAqB,CAAC,SAAkB;IACtD,aAAa,CAAC,wBAAwB,EAAE,SAAS,CAAC,CAAC;IACnD,OAAO,mBAAmB,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;AACjE,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,SAAkB;IACzD,aAAa,CAAC,2BAA2B,EAAE,SAAS,CAAC,CAAC;IACtD,OAAO,mBAAmB,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;AACjE,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,OAAgB;IAClD,aAAa,CAAC,oBAAoB,EAAE,OAAO,CAAC,CAAC;IAC7C,OAAO,mBAAmB,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;AAC/D,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,OAAgB;IACrD,aAAa,CAAC,uBAAuB,EAAE,OAAO,CAAC,CAAC;IAChD,OAAO,mBAAmB,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;AAC/D,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,OAAsB;IAC/D,WAAW,CAAC,2BAA2B,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IACxD,OAAO,mBAAmB,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;AAC7D,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,aAAqB;IAC/D,aAAa,CAAC,kCAAkC,EAAE,aAAa,CAAC,CAAC;IACjE,OAAO,mBAAmB,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC;AACrE,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,6BAA6B,CAAC,SAAiB;IAC7D,WAAW,CAAC,gCAAgC,EAAE,SAAS,CAAC,CAAC;IACzD,OAAO,mBAAmB,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;AAC/D,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,OAAgB;IACzD,aAAa,CAAC,2BAA2B,EAAE,OAAO,CAAC,CAAC;IACpD,OAAO,mBAAmB,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;AAC/D,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gCAAgC,CAAC,IAAY,EAAE,QAAgB;IAC7E,WAAW,CAAC,8BAA8B,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IACxD,WAAW,CAAC,kCAAkC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;IAC7D,OAAO,mBAAmB,CACxB,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EACtC,CAAC,IAAI,EAAE,QAAQ,CAAC,CACjB,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,6BAA6B,CAC3C,kBAAuB,EACvB,CAAS,EACT,CAAS,EACT,QAAa;IAEb,aAAa,CAAC,yCAAyC,EAAE,kBAAkB,CAAC,CAAC;IAC7E,IAAI,kBAAkB,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,UAAU,CAAC,iFAAiF,CAAC,CAAC;IAC1G,CAAC;IACD,aAAa,CAAC,wBAAwB,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;IAC/C,aAAa,CAAC,wBAAwB,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;IAC/C,aAAa,CAAC,+BAA+B,EAAE,QAAQ,CAAC,CAAC;IACzD,IAAI,QAAQ,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,UAAU,CAAC,uHAAuH,CAAC,CAAC;IAChJ,CAAC;IACD,OAAO,mBAAmB,CACxB,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,EACpF,CAAC,kBAAkB,EAAE,CAAC,EAAE,CAAC,EAAE,QAAQ,CAAC,CACrC,CAAC;AACJ,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,gCAAgC,CAAC,kBAAuB;IACtE,aAAa,CAAC,4CAA4C,EAAE,kBAAkB,CAAC,CAAC;IAChF,OAAO,mBAAmB,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAC;AAC1E,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,4BAA4B,CAC1C,aAAiC,EACjC,gBAAoC;IAEpC,KAAK,MAAM,CAAC,IAAI,aAAa;QAAE,aAAa,CAAC,yBAAyB,EAAE,CAAC,CAAC,CAAC;IAC3E,KAAK,MAAM,CAAC,IAAI,gBAAgB;QAAE,aAAa,CAAC,4BAA4B,EAAE,CAAC,CAAC,CAAC;IACjF,OAAO,mBAAmB,CACxB,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,EAC9C,CAAC,aAA0B,EAAE,gBAA6B,CAAC,CAC5D,CAAC;AACJ,CAAC;AAiBD;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,uBAAuB,CAAC,IAKvC;IACC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC;IACvC,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,EAAE,CAAC;IAC7C,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC;IAC3C,MAAM,gCAAgC,GAAG,IAAI,CAAC,gCAAgC,IAAI,EAAE,CAAC;IAErF,KAAK,MAAM,CAAC,IAAI,SAAS;QAAE,aAAa,CAAC,0BAA0B,EAAE,CAAC,CAAC,CAAC;IACxE,KAAK,MAAM,CAAC,IAAI,YAAY;QAAE,aAAa,CAAC,6BAA6B,EAAE,CAAC,CAAC,CAAC;IAC9E,KAAK,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;QAC5B,aAAa,CAAC,+CAA+C,EAAE,CAAC,CAAC,kBAAkB,CAAC,CAAC;QACrF,IAAI,CAAC,CAAC,kBAAkB,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;YACtD,MAAM,IAAI,UAAU,CAAC,uFAAuF,CAAC,CAAC;QAChH,CAAC;QACD,aAAa,CAAC,8BAA8B,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACvD,aAAa,CAAC,8BAA8B,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACvD,aAAa,CAAC,qCAAqC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC;QACjE,IAAI,CAAC,CAAC,QAAQ,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;YAC5C,MAAM,IAAI,UAAU,CAAC,oHAAoH,CAAC,CAAC;QAC7I,CAAC;IACH,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,gCAAgC,EAAE,CAAC;QACjD,aAAa,CAAC,iDAAiD,EAAE,CAAC,CAAC,CAAC;IACtE,CAAC;IAED,IACE,SAAS,CAAC,MAAM,KAAK,CAAC;QACtB,YAAY,CAAC,MAAM,KAAK,CAAC;QACzB,WAAW,CAAC,MAAM,KAAK,CAAC;QACxB,gCAAgC,CAAC,MAAM,KAAK,CAAC,EAC7C,CAAC;QACD,MAAM,IAAI,UAAU,CAAC,2EAA2E,CAAC,CAAC;IACpG,CAAC;IAED,OAAO,mBAAmB,CACxB;QACE;YACE,IAAI,EAAE,OAAO;YACb,UAAU,EAAE;gBACV,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,WAAW,EAAE;gBACxC,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,WAAW,EAAE;gBAC3C;oBACE,IAAI,EAAE,aAAa;oBACnB,IAAI,EAAE,SAAS;oBACf,UAAU,EAAE;wBACV,EAAE,IAAI,EAAE,oBAAoB,EAAE,IAAI,EAAE,SAAS,EAAE;wBAC/C,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE;wBAC9B,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE;wBAC9B,mEAAmE;wBACnE,+DAA+D;wBAC/D,sDAAsD;wBACtD,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE;qBACtC;iBACF;gBACD,EAAE,IAAI,EAAE,kCAAkC,EAAE,IAAI,EAAE,WAAW,EAAE;aAChE;SACF;KACF,EACD,CAAC;YACC,SAAS,EAAE,SAAsB;YACjC,YAAY,EAAE,YAAyB;YACvC,WAAW,EAAE,WAAmC;YAChD,gCAAgC,EAAE,gCAAyC;SAC5E,CAAC,CACH,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,yBAAyB,CAAC,IAIzC;IACC,MAAM,MAAM,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAQ,CAAC;IAC/C,MAAM,SAAS,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAY,CAAC;IACtD,IAAI,QAAQ,GAAY,SAAS,CAAC;IAClC,IAAI,UAAU,GAAuB,EAAE,kBAAkB,EAAE,MAAM,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;IACpG,IAAI,OAAO,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;QACxB,aAAa,CAAC,4BAA4B,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC5D,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,KAAK,SAAS;YAAE,MAAM,IAAI,UAAU,CAAC,wDAAwD,CAAC,CAAC;QACjH,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;IAC5B,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;QAC3B,aAAa,CAAC,iDAAiD,EAAE,CAAC,CAAC,kBAAkB,CAAC,CAAC;QACvF,IAAI,CAAC,CAAC,kBAAkB,KAAK,MAAM;YAAE,MAAM,IAAI,UAAU,CAAC,yFAAyF,CAAC,CAAC;QACrJ,aAAa,CAAC,gCAAgC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACzD,aAAa,CAAC,gCAAgC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACzD,aAAa,CAAC,uCAAuC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC;QACnE,IAAI,CAAC,CAAC,QAAQ,KAAK,MAAM;YAAE,MAAM,IAAI,UAAU,CAAC,4EAA4E,CAAC,CAAC;QAC9H,UAAU,GAAG,CAAC,CAAC;IACjB,CAAC;IACD,IAAI,WAAW,GAAY,SAAS,CAAC;IACrC,IAAI,+BAA+B,GAAQ,MAAM,CAAC;IAClD,IAAI,OAAO,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAC3B,aAAa,CAAC,+BAA+B,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAClE,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS;YAAE,MAAM,IAAI,UAAU,CAAC,2DAA2D,CAAC,CAAC;QACvH,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;IAClC,CAAC;SAAM,CAAC;QACN,aAAa,CAAC,mDAAmD,EAAE,IAAI,CAAC,MAAM,CAAC,yBAAyB,CAAC,CAAC;QAC1G,IAAI,IAAI,CAAC,MAAM,CAAC,yBAAyB,KAAK,MAAM;YAAE,MAAM,IAAI,UAAU,CAAC,+EAA+E,CAAC,CAAC;QAC5J,+BAA+B,GAAG,IAAI,CAAC,MAAM,CAAC,yBAAyB,CAAC;IAC1E,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,SAAS;QAAE,aAAa,CAAC,4BAA4B,EAAE,CAAC,CAAC,CAAC;IAC/E,OAAO,mBAAmB,CACxB,CAAC;YACC,IAAI,EAAE,OAAO;YACb,UAAU,EAAE;gBACV,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE;gBACrC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE;wBAC/C,EAAE,IAAI,EAAE,oBAAoB,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE;qBACvJ,EAAE;gBACH,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,SAAS,EAAE;gBACxC,EAAE,IAAI,EAAE,iCAAiC,EAAE,IAAI,EAAE,SAAS,EAAE;gBAC5D,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,WAAW,EAAE;aACzC;SACF,CAAC,EACF,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,WAAW,EAAE,+BAA+B,EAAE,SAAS,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CACzG,CAAC;AACJ,CAAC"}

package/dist/governance.d.ts

@@ -0,0 +1,91 @@
+import { type Address, type Hex } from 'viem';
+import { CustodyAction } from './actions.js';
+/** The same shape `@agenticprimitives/agent-account` executes (`ContractCall`); declared structurally so this package
+ *  keeps its vocabulary firewall (spec 213) and no dependency on the account SDK. */
+export interface CustodyCall {
+    to: Address;
+    value: bigint;
+    data: Hex;
+}
+/** ERC-7579 executor module type id — `AgentAccount.MODULE_TYPE_EXECUTOR`. */
+export declare const MODULE_TYPE_EXECUTOR = 2n;
+/** Tier indices as the contract's arrays use them (index = tier; index 0 unused). Spec 207 §5. */
+export declare const TIER: {
+    readonly read: 1;
+    readonly write: 2;
+    readonly value: 3;
+    readonly admin: 4;
+    readonly critical: 5;
+    readonly recovery: 6;
+};
+export interface CustodyPolicyInstallInput {
+    /** 1 hybrid (the Home's person default) · 2 threshold · 3 org. Mode 0 means "no policy" and is never installed. */
+    mode: 1 | 2 | 3;
+    /** Smart Agent addresses (verified by ERC-1271 in the quorum), never raw keys. */
+    trustees: readonly Address[];
+    /** T6 trustee quorum; must be ≤ trustees.length (CP-2). Defaults to a majority: floor(N/2) + 1. */
+    recoveryApprovals?: number;
+    /** approvalsRequired by tier, index = tier. Unset tiers take the contract's defaults (CP-1 floor). */
+    approvalsByTier?: Partial<Record<1 | 2 | 3 | 4 | 5, number>>;
+    /** safety delays in seconds by tier, index = tier. T6 MUST be > 0 — refused here, as the contract would at schedule time. */
+    delaysByTier?: Partial<Record<1 | 2 | 3 | 4 | 5 | 6, number>>;
+    /** T3 high-value ceiling in wei. */
+    t3HighValueCeiling?: bigint;
+    /** Turns on `v = 1` approved-hash quorum slots for this account; zero turns them off. */
+    approvedHashRegistry?: Address;
+}
+/** The Home's HYBRID defaults for a person (spec 422 §4.2): her own credential changes keep needing one of her own
+ *  credentials (T4 = 1), and the delays match the factory's floors (T4 1h · T5 24h · T6 48h). */
+export declare const HOME_HYBRID_DEFAULTS: {
+    readonly approvalsByTier: {
+        readonly 4: 1;
+        readonly 5: 1;
+    };
+    readonly delaysByTier: {
+        readonly 4: 3600;
+        readonly 5: 86400;
+        readonly 6: 172800;
+    };
+    readonly t3HighValueCeiling: 10000000000000000n;
+};
+export declare const majorityOf: (n: number) => number;
+/** `abi.encode(uint8 mode, uint8 recThr, address[] trustees, uint8[7] thresholds, uint32[7] delays, uint256 t3, address reg)`. */
+export declare function buildCustodyPolicyInstallData(input: CustodyPolicyInstallInput): Hex;
+/** `execute(self, installModule(EXECUTOR, custodyPolicy, data))` — the ONE self-call that names a person's trustees.
+ *  Signed by a credential that signs for her today; after it lands the account is custody-governed. */
+export declare function installCustodyPolicyCall(account: Address, custodyPolicy: Address, installData: Hex): CustodyCall;
+export declare function scheduleCustodyChangeCall(custodyPolicy: Address, input: {
+    account: Address;
+    action: CustodyAction;
+    args: Hex;
+    quorumSigs: Hex;
+}): CustodyCall;
+export declare function applyCustodyChangeCall(custodyPolicy: Address, input: {
+    account: Address;
+    changeId: bigint;
+    quorumSigs: Hex;
+}): CustodyCall;
+export declare function cancelScheduledChangeCall(custodyPolicy: Address, input: {
+    account: Address;
+    changeId: bigint;
+    quorumSigs: Hex;
+}): CustodyCall;
+export interface CustodyDigestInput {
+    chainId: number;
+    custodyPolicy: Address;
+    account: Address;
+    action: CustodyAction;
+    args: Hex;
+    changeId: bigint;
+}
+/** The digest a quorum signs to SCHEDULE: `changeId` is `scheduledChangeCount(account) + 1` at signing time. */
+export declare function scheduleCustodyChangeDigest(i: CustodyDigestInput): Hex;
+export declare function applyCustodyChangeDigest(i: CustodyDigestInput & {
+    eta: bigint;
+}): Hex;
+export declare function cancelScheduledChangeDigest(i: CustodyDigestInput & {
+    eta: bigint;
+}): Hex;
+/** A tier's safety delay, read from the chain, in words a person reads ("48 hours"). */
+export declare function delayWords(seconds: number): string;
+//# sourceMappingURL=governance.d.ts.map

package/dist/governance.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"governance.d.ts","sourceRoot":"","sources":["../src/governance.ts"],"names":[],"mappings":"AAQA,OAAO,EAAqE,KAAK,OAAO,EAAE,KAAK,GAAG,EAAE,MAAM,MAAM,CAAC;AAEjH,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAG7C;qFACqF;AACrF,MAAM,WAAW,WAAW;IAAG,EAAE,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,GAAG,CAAA;CAAE;AAEtE,8EAA8E;AAC9E,eAAO,MAAM,oBAAoB,KAAK,CAAC;AAMvC,kGAAkG;AAClG,eAAO,MAAM,IAAI;;;;;;;CAA+E,CAAC;AAEjG,MAAM,WAAW,yBAAyB;IACxC,mHAAmH;IACnH,IAAI,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAChB,kFAAkF;IAClF,QAAQ,EAAE,SAAS,OAAO,EAAE,CAAC;IAC7B,mGAAmG;IACnG,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,sGAAsG;IACtG,eAAe,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;IAC7D,6HAA6H;IAC7H,YAAY,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;IAC9D,oCAAoC;IACpC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,yFAAyF;IACzF,oBAAoB,CAAC,EAAE,OAAO,CAAC;CAChC;AAED;iGACiG;AACjG,eAAO,MAAM,oBAAoB;;;;;;;;;;;CAIvB,CAAC;AAEX,eAAO,MAAM,UAAU,MAAO,MAAM,KAAG,MAA+C,CAAC;AAEvF,kIAAkI;AAClI,wBAAgB,6BAA6B,CAAC,KAAK,EAAE,yBAAyB,GAAG,GAAG,CAoBnF;AAED;uGACuG;AACvG,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,GAAG,WAAW,CAEhH;AAED,wBAAgB,yBAAyB,CAAC,aAAa,EAAE,OAAO,EAAE,KAAK,EAAE;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,aAAa,CAAC;IAAC,IAAI,EAAE,GAAG,CAAC;IAAC,UAAU,EAAE,GAAG,CAAA;CAAE,GAAG,WAAW,CAE7J;AACD,wBAAgB,sBAAsB,CAAC,aAAa,EAAE,OAAO,EAAE,KAAK,EAAE;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,GAAG,CAAA;CAAE,GAAG,WAAW,CAE1I;AACD,wBAAgB,yBAAyB,CAAC,aAAa,EAAE,OAAO,EAAE,KAAK,EAAE;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,GAAG,CAAA;CAAE,GAAG,WAAW,CAE7I;AAED,MAAM,WAAW,kBAAkB;IAAG,OAAO,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,aAAa,CAAC;IAAC,IAAI,EAAE,GAAG,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE;AAErJ,gHAAgH;AAChH,wBAAgB,2BAA2B,CAAC,CAAC,EAAE,kBAAkB,GAAG,GAAG,CAEtE;AACD,wBAAgB,wBAAwB,CAAC,CAAC,EAAE,kBAAkB,GAAG;IAAE,GAAG,EAAE,MAAM,CAAA;CAAE,GAAG,GAAG,CAErF;AACD,wBAAgB,2BAA2B,CAAC,CAAC,EAAE,kBAAkB,GAAG;IAAE,GAAG,EAAE,MAAM,CAAA;CAAE,GAAG,GAAG,CAExF;AAED,wFAAwF;AACxF,wBAAgB,UAAU,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAKlD"}

package/dist/governance.js

@@ -0,0 +1,94 @@
+// Spec 422 §4.2 / §4.3 — the custody-governance calls a HOME makes for a person: install the CustodyPolicy on a
+// deployed mode-0 account (naming trustees), schedule / apply / cancel a custody change, and the EIP-712 digests the
+// quorum signs. Pure builders over viem; nothing here talks to a chain.
+//
+// WHY AN INSTALL BUILDER WITH DEFAULTS: `CustodyPolicy.onInstall` stores delays VERBATIM and enforces no minimum
+// (the factory's floors apply only at deploy). A post-deploy install that left T6 at 0 would succeed and leave
+// `RecoverAccount` unschedulable (`TimelockRequiredForTier(6)`); one that left T4 at 0 would make every credential
+// change immediate. The Home's hybrid install sets them explicitly — proven in `test/Spec422Recovery.t.sol`.
+import { encodeAbiParameters, encodeFunctionData, hashTypedData, keccak256 } from 'viem';
+import { custodyPolicyAbi } from './abi.js';
+import { custodyDomain, ScheduleCustodyChangeRequest, ApplyCustodyChangeRequest, CancelScheduledChangeRequest } from './eip712.js';
+/** ERC-7579 executor module type id — `AgentAccount.MODULE_TYPE_EXECUTOR`. */
+export const MODULE_TYPE_EXECUTOR = 2n;
+const INSTALL_MODULE_ABI = [
+    { type: 'function', name: 'installModule', stateMutability: 'nonpayable', inputs: [{ name: 'moduleTypeId', type: 'uint256' }, { name: 'module', type: 'address' }, { name: 'initData', type: 'bytes' }], outputs: [] },
+];
+/** Tier indices as the contract's arrays use them (index = tier; index 0 unused). Spec 207 §5. */
+export const TIER = { read: 1, write: 2, value: 3, admin: 4, critical: 5, recovery: 6 };
+/** The Home's HYBRID defaults for a person (spec 422 §4.2): her own credential changes keep needing one of her own
+ *  credentials (T4 = 1), and the delays match the factory's floors (T4 1h · T5 24h · T6 48h). */
+export const HOME_HYBRID_DEFAULTS = {
+    approvalsByTier: { 4: 1, 5: 1 },
+    delaysByTier: { 4: 3600, 5: 86_400, 6: 172_800 },
+    t3HighValueCeiling: 10000000000000000n, // 0.01 ether, the factory's value
+};
+export const majorityOf = (n) => (n === 0 ? 0 : Math.floor(n / 2) + 1);
+/** `abi.encode(uint8 mode, uint8 recThr, address[] trustees, uint8[7] thresholds, uint32[7] delays, uint256 t3, address reg)`. */
+export function buildCustodyPolicyInstallData(input) {
+    if (![1, 2, 3].includes(input.mode))
+        throw new Error(`custody mode must be 1, 2 or 3 (got ${input.mode})`);
+    const trustees = [...new Set(input.trustees.map((t) => t.toLowerCase()))];
+    if (trustees.length !== input.trustees.length)
+        throw new Error('duplicate trustee');
+    if (trustees.some((t) => /^0x0{40}$/.test(t)))
+        throw new Error('a trustee must be an address');
+    const rec = input.recoveryApprovals ?? majorityOf(trustees.length);
+    if (rec > trustees.length)
+        throw new Error(`recovery approvals (${rec}) exceed the trustee count (${trustees.length})`);
+    if (trustees.length > 0 && rec === 0)
+        throw new Error('recovery approvals must be at least 1 when trustees are named');
+    const approvals = { ...HOME_HYBRID_DEFAULTS.approvalsByTier, ...(input.approvalsByTier ?? {}) };
+    const delays = { ...HOME_HYBRID_DEFAULTS.delaysByTier, ...(input.delaysByTier ?? {}) };
+    if (!(delays[6] > 0))
+        throw new Error('the recovery (T6) safety delay must be set — onInstall stores it verbatim and a zero makes RecoverAccount unschedulable');
+    if (!(delays[5] > 0))
+        throw new Error('the critical (T5) safety delay must be set');
+    const thresholds = [0, 0, 0, 0, 0, 0, 0];
+    const timelocks = [0, 0, 0, 0, 0, 0, 0];
+    for (const [k, v] of Object.entries(approvals))
+        thresholds[Number(k)] = Number(v);
+    for (const [k, v] of Object.entries(delays))
+        timelocks[Number(k)] = Number(v);
+    return encodeAbiParameters([{ type: 'uint8' }, { type: 'uint8' }, { type: 'address[]' }, { type: 'uint8[7]' }, { type: 'uint32[7]' }, { type: 'uint256' }, { type: 'address' }], [input.mode, rec, trustees, thresholds, timelocks, input.t3HighValueCeiling ?? HOME_HYBRID_DEFAULTS.t3HighValueCeiling, input.approvedHashRegistry ?? '0x0000000000000000000000000000000000000000']);
+}
+/** `execute(self, installModule(EXECUTOR, custodyPolicy, data))` — the ONE self-call that names a person's trustees.
+ *  Signed by a credential that signs for her today; after it lands the account is custody-governed. */
+export function installCustodyPolicyCall(account, custodyPolicy, installData) {
+    return { to: account, value: 0n, data: encodeFunctionData({ abi: INSTALL_MODULE_ABI, functionName: 'installModule', args: [MODULE_TYPE_EXECUTOR, custodyPolicy, installData] }) };
+}
+export function scheduleCustodyChangeCall(custodyPolicy, input) {
+    return { to: custodyPolicy, value: 0n, data: encodeFunctionData({ abi: custodyPolicyAbi, functionName: 'scheduleCustodyChange', args: [input.account, input.action, input.args, input.quorumSigs] }) };
+}
+export function applyCustodyChangeCall(custodyPolicy, input) {
+    return { to: custodyPolicy, value: 0n, data: encodeFunctionData({ abi: custodyPolicyAbi, functionName: 'applyCustodyChange', args: [input.account, input.changeId, input.quorumSigs] }) };
+}
+export function cancelScheduledChangeCall(custodyPolicy, input) {
+    return { to: custodyPolicy, value: 0n, data: encodeFunctionData({ abi: custodyPolicyAbi, functionName: 'cancelScheduledChange', args: [input.account, input.changeId, input.quorumSigs] }) };
+}
+/** The digest a quorum signs to SCHEDULE: `changeId` is `scheduledChangeCount(account) + 1` at signing time. */
+export function scheduleCustodyChangeDigest(i) {
+    return hashTypedData({ domain: custodyDomain({ chainId: i.chainId, verifyingContract: i.custodyPolicy }), types: ScheduleCustodyChangeRequest, primaryType: 'ScheduleCustodyChangeRequest', message: { account: i.account, action: i.action, argsHash: keccak256(i.args), changeId: i.changeId } });
+}
+export function applyCustodyChangeDigest(i) {
+    return hashTypedData({ domain: custodyDomain({ chainId: i.chainId, verifyingContract: i.custodyPolicy }), types: ApplyCustodyChangeRequest, primaryType: 'ApplyCustodyChangeRequest', message: { account: i.account, action: i.action, argsHash: keccak256(i.args), changeId: i.changeId, eta: i.eta } });
+}
+export function cancelScheduledChangeDigest(i) {
+    return hashTypedData({ domain: custodyDomain({ chainId: i.chainId, verifyingContract: i.custodyPolicy }), types: CancelScheduledChangeRequest, primaryType: 'CancelScheduledChangeRequest', message: { account: i.account, action: i.action, argsHash: keccak256(i.args), changeId: i.changeId, eta: i.eta } });
+}
+/** A tier's safety delay, read from the chain, in words a person reads ("48 hours"). */
+export function delayWords(seconds) {
+    if (seconds <= 0)
+        return 'no delay';
+    if (seconds % 86_400 === 0) {
+        const d = seconds / 86_400;
+        return `${d} day${d === 1 ? '' : 's'}`;
+    }
+    if (seconds % 3600 === 0) {
+        const h = seconds / 3600;
+        return `${h} hour${h === 1 ? '' : 's'}`;
+    }
+    const m = Math.round(seconds / 60);
+    return `${m} minute${m === 1 ? '' : 's'}`;
+}
+//# sourceMappingURL=governance.js.map

package/dist/governance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"governance.js","sourceRoot":"","sources":["../src/governance.ts"],"names":[],"mappings":"AAAA,gHAAgH;AAChH,qHAAqH;AACrH,wEAAwE;AACxE,EAAE;AACF,iHAAiH;AACjH,+GAA+G;AAC/G,mHAAmH;AACnH,6GAA6G;AAC7G,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,aAAa,EAAE,SAAS,EAA0B,MAAM,MAAM,CAAC;AACjH,OAAO,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAE5C,OAAO,EAAE,aAAa,EAAE,4BAA4B,EAAE,yBAAyB,EAAE,4BAA4B,EAAE,MAAM,aAAa,CAAC;AAMnI,8EAA8E;AAC9E,MAAM,CAAC,MAAM,oBAAoB,GAAG,EAAE,CAAC;AAEvC,MAAM,kBAAkB,GAAG;IACzB,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,eAAe,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE;CAC9M,CAAC;AAEX,kGAAkG;AAClG,MAAM,CAAC,MAAM,IAAI,GAAG,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAW,CAAC;AAmBjG;iGACiG;AACjG,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC,eAAe,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE;IAC/B,YAAY,EAAE,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE;IAChD,kBAAkB,EAAE,kBAAuB,EAAE,kCAAkC;CACvE,CAAC;AAEX,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;AAEvF,kIAAkI;AAClI,MAAM,UAAU,6BAA6B,CAAC,KAAgC;IAC5E,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC;IAC3G,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAc,CAAC;IACvF,IAAI,QAAQ,CAAC,MAAM,KAAK,KAAK,CAAC,QAAQ,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;IACpF,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAC/F,MAAM,GAAG,GAAG,KAAK,CAAC,iBAAiB,IAAI,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACnE,IAAI,GAAG,GAAG,QAAQ,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,GAAG,+BAA+B,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;IACxH,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,GAAG,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;IACvH,MAAM,SAAS,GAAG,EAAE,GAAG,oBAAoB,CAAC,eAAe,EAAE,GAAG,CAAC,KAAK,CAAC,eAAe,IAAI,EAAE,CAAC,EAAE,CAAC;IAChG,MAAM,MAAM,GAAG,EAAE,GAAG,oBAAoB,CAAC,YAAY,EAAE,GAAG,CAAC,KAAK,CAAC,YAAY,IAAI,EAAE,CAAC,EAAE,CAAC;IACvF,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,yHAAyH,CAAC,CAAC;IACjK,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IACpF,MAAM,UAAU,GAAa,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IACnD,MAAM,SAAS,GAAa,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IAClD,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC;QAAE,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IAClF,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IAC9E,OAAO,mBAAmB,CACxB,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,EACpJ,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,UAA0F,EAAE,SAAyF,EAAE,KAAK,CAAC,kBAAkB,IAAI,oBAAoB,CAAC,kBAAkB,EAAE,KAAK,CAAC,oBAAoB,IAAI,4CAA4C,CAAC,CACpW,CAAC;AACJ,CAAC;AAED;uGACuG;AACvG,MAAM,UAAU,wBAAwB,CAAC,OAAgB,EAAE,aAAsB,EAAE,WAAgB;IACjG,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,kBAAkB,CAAC,EAAE,GAAG,EAAE,kBAAkB,EAAE,YAAY,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC,oBAAoB,EAAE,aAAa,EAAE,WAAW,CAAC,EAAE,CAAC,EAAE,CAAC;AACpL,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,aAAsB,EAAE,KAA8E;IAC9I,OAAO,EAAE,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,kBAAkB,CAAC,EAAE,GAAG,EAAE,gBAAgB,EAAE,YAAY,EAAE,uBAAuB,EAAE,IAAI,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC,EAAE,CAAC;AACzM,CAAC;AACD,MAAM,UAAU,sBAAsB,CAAC,aAAsB,EAAE,KAA8D;IAC3H,OAAO,EAAE,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,kBAAkB,CAAC,EAAE,GAAG,EAAE,gBAAgB,EAAE,YAAY,EAAE,oBAAoB,EAAE,IAAI,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC,EAAE,CAAC;AAC5L,CAAC;AACD,MAAM,UAAU,yBAAyB,CAAC,aAAsB,EAAE,KAA8D;IAC9H,OAAO,EAAE,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,kBAAkB,CAAC,EAAE,GAAG,EAAE,gBAAgB,EAAE,YAAY,EAAE,uBAAuB,EAAE,IAAI,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC,EAAE,CAAC;AAC/L,CAAC;AAID,gHAAgH;AAChH,MAAM,UAAU,2BAA2B,CAAC,CAAqB;IAC/D,OAAO,aAAa,CAAC,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,iBAAiB,EAAE,CAAC,CAAC,aAAa,EAAE,CAAC,EAAE,KAAK,EAAE,4BAA4B,EAAE,WAAW,EAAE,8BAA8B,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;AACtS,CAAC;AACD,MAAM,UAAU,wBAAwB,CAAC,CAAuC;IAC9E,OAAO,aAAa,CAAC,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,iBAAiB,EAAE,CAAC,CAAC,aAAa,EAAE,CAAC,EAAE,KAAK,EAAE,yBAAyB,EAAE,WAAW,EAAE,2BAA2B,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;AAC5S,CAAC;AACD,MAAM,UAAU,2BAA2B,CAAC,CAAuC;IACjF,OAAO,aAAa,CAAC,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,iBAAiB,EAAE,CAAC,CAAC,aAAa,EAAE,CAAC,EAAE,KAAK,EAAE,4BAA4B,EAAE,WAAW,EAAE,8BAA8B,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;AAClT,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,UAAU,CAAC,OAAe;IACxC,IAAI,OAAO,IAAI,CAAC;QAAE,OAAO,UAAU,CAAC;IACpC,IAAI,OAAO,GAAG,MAAM,KAAK,CAAC,EAAE,CAAC;QAAC,MAAM,CAAC,GAAG,OAAO,GAAG,MAAM,CAAC;QAAC,OAAO,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;IAAC,CAAC;IACnG,IAAI,OAAO,GAAG,IAAI,KAAK,CAAC,EAAE,CAAC;QAAC,MAAM,CAAC,GAAG,OAAO,GAAG,IAAI,CAAC;QAAC,OAAO,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;IAAC,CAAC;IAChG,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,EAAE,CAAC,CAAC;IAAC,OAAO,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;AAChF,CAAC"}

package/dist/index.d.ts

@@ -1,6 +1,7 @@
 export { custodyPolicyAbi } from './abi.js';
-export { CustodyAction, buildAddCustodianArgs, buildRemoveCustodianArgs, buildAddTrusteeArgs, buildRemoveTrusteeArgs, buildChangeCustodyModeArgs, buildChangeValueCeilingArgs, buildSetRecoveryApprovalsArgs, buildApplySystemUpdateArgs, buildChangeApprovalsRequiredArgs, buildAddPasskeyCredentialArgs, buildRemovePasskeyCredentialArgs, buildRotateAllCustodiansArgs, buildRecoverAccountArgs, type RecoveryPasskeyAdd, } from './actions.js';
+export { CustodyAction, buildAddCustodianArgs, buildRemoveCustodianArgs, buildAddTrusteeArgs, buildRemoveTrusteeArgs, buildChangeCustodyModeArgs, buildChangeValueCeilingArgs, buildSetRecoveryApprovalsArgs, buildApplySystemUpdateArgs, buildChangeApprovalsRequiredArgs, buildAddPasskeyCredentialArgs, buildRemovePasskeyCredentialArgs, buildRotateAllCustodiansArgs, buildRecoverAccountArgs, buildRotateCredentialArgs, type RecoveryPasskeyAdd, } from './actions.js';
 export { CUSTODY_DOMAIN_NAME, CUSTODY_DOMAIN_VERSION, custodyDomain, ScheduleCustodyChangeRequest, ApplyCustodyChangeRequest, CancelScheduledChangeRequest, type ScheduleCustodyChangeMessage, type ApplyCustodyChangeMessage, type CancelScheduledChangeMessage, } from './eip712.js';
 export { type Custodian, type Trustee, type CustodyCouncil, type ScheduledChange, type CustodyMode, type RiskTier, CUSTODY_MODE_BY_INDEX, } from './types.js';
-export { type EcdsaSlot, type ContractSigSlot, type ApprovedHashSlot, type PasskeySlot, type QuorumSlot, type WebAuthnAssertion, packQuorumSigs, encodePasskeyTailBody, passkeyIdentity, } from './quorum-slots.js';
+export { type EcdsaSlot, type ContractSigSlot, type ApprovedHashSlot, type PasskeySlot, type QuorumSlot, type WebAuthnAssertion, packQuorumSigs, encodePasskeyTailBody, passkeyIdentity, SELF_PASSKEY_TRUSTEE, } from './quorum-slots.js';
+export { type CustodyCall, type CustodyPolicyInstallInput, type CustodyDigestInput, MODULE_TYPE_EXECUTOR, TIER, HOME_HYBRID_DEFAULTS, majorityOf, buildCustodyPolicyInstallData, installCustodyPolicyCall, scheduleCustodyChangeCall, applyCustodyChangeCall, cancelScheduledChangeCall, scheduleCustodyChangeDigest, applyCustodyChangeDigest, cancelScheduledChangeDigest, delayWords, } from './governance.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAE5C,OAAO,EACL,aAAa,EACb,qBAAqB,EACrB,wBAAwB,EACxB,mBAAmB,EACnB,sBAAsB,EACtB,0BAA0B,EAC1B,2BAA2B,EAC3B,6BAA6B,EAC7B,0BAA0B,EAC1B,gCAAgC,EAChC,6BAA6B,EAC7B,gCAAgC,EAChC,4BAA4B,EAC5B,uBAAuB,EACvB,KAAK,kBAAkB,GACxB,MAAM,cAAc,CAAC;AAEtB,OAAO,EACL,mBAAmB,EACnB,sBAAsB,EACtB,aAAa,EACb,4BAA4B,EAC5B,yBAAyB,EACzB,4BAA4B,EAC5B,KAAK,4BAA4B,EACjC,KAAK,yBAAyB,EAC9B,KAAK,4BAA4B,GAClC,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,KAAK,SAAS,EACd,KAAK,OAAO,EACZ,KAAK,cAAc,EACnB,KAAK,eAAe,EACpB,KAAK,WAAW,EAChB,KAAK,QAAQ,EACb,qBAAqB,GACtB,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,KAAK,SAAS,EACd,KAAK,eAAe,EACpB,KAAK,gBAAgB,EACrB,KAAK,WAAW,EAChB,KAAK,UAAU,EACf,KAAK,iBAAiB,EACtB,cAAc,EACd,qBAAqB,EACrB,eAAe,GAChB,MAAM,mBAAmB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAE5C,OAAO,EACL,aAAa,EACb,qBAAqB,EACrB,wBAAwB,EACxB,mBAAmB,EACnB,sBAAsB,EACtB,0BAA0B,EAC1B,2BAA2B,EAC3B,6BAA6B,EAC7B,0BAA0B,EAC1B,gCAAgC,EAChC,6BAA6B,EAC7B,gCAAgC,EAChC,4BAA4B,EAC5B,uBAAuB,EACvB,yBAAyB,EACzB,KAAK,kBAAkB,GACxB,MAAM,cAAc,CAAC;AAEtB,OAAO,EACL,mBAAmB,EACnB,sBAAsB,EACtB,aAAa,EACb,4BAA4B,EAC5B,yBAAyB,EACzB,4BAA4B,EAC5B,KAAK,4BAA4B,EACjC,KAAK,yBAAyB,EAC9B,KAAK,4BAA4B,GAClC,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,KAAK,SAAS,EACd,KAAK,OAAO,EACZ,KAAK,cAAc,EACnB,KAAK,eAAe,EACpB,KAAK,WAAW,EAChB,KAAK,QAAQ,EACb,qBAAqB,GACtB,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,KAAK,SAAS,EACd,KAAK,eAAe,EACpB,KAAK,gBAAgB,EACrB,KAAK,WAAW,EAChB,KAAK,UAAU,EACf,KAAK,iBAAiB,EACtB,cAAc,EACd,qBAAqB,EACrB,eAAe,EACf,oBAAoB,GACrB,MAAM,mBAAmB,CAAC;AAI3B,OAAO,EACL,KAAK,WAAW,EAChB,KAAK,yBAAyB,EAC9B,KAAK,kBAAkB,EACvB,oBAAoB,EACpB,IAAI,EACJ,oBAAoB,EACpB,UAAU,EACV,6BAA6B,EAC7B,wBAAwB,EACxB,yBAAyB,EACzB,sBAAsB,EACtB,yBAAyB,EACzB,2BAA2B,EAC3B,wBAAwB,EACxB,2BAA2B,EAC3B,UAAU,GACX,MAAM,iBAAiB,CAAC"}

package/dist/index.js

@@ -8,8 +8,11 @@
 // Delegation / Steward / Caveat concepts belong in @agenticprimitives/delegation.
 // See spec 212 § 2.2 + spec 213 for the vocabulary firewall.
 export { custodyPolicyAbi } from './abi.js';
-export { CustodyAction, buildAddCustodianArgs, buildRemoveCustodianArgs, buildAddTrusteeArgs, buildRemoveTrusteeArgs, buildChangeCustodyModeArgs, buildChangeValueCeilingArgs, buildSetRecoveryApprovalsArgs, buildApplySystemUpdateArgs, buildChangeApprovalsRequiredArgs, buildAddPasskeyCredentialArgs, buildRemovePasskeyCredentialArgs, buildRotateAllCustodiansArgs, buildRecoverAccountArgs, } from './actions.js';
+export { CustodyAction, buildAddCustodianArgs, buildRemoveCustodianArgs, buildAddTrusteeArgs, buildRemoveTrusteeArgs, buildChangeCustodyModeArgs, buildChangeValueCeilingArgs, buildSetRecoveryApprovalsArgs, buildApplySystemUpdateArgs, buildChangeApprovalsRequiredArgs, buildAddPasskeyCredentialArgs, buildRemovePasskeyCredentialArgs, buildRotateAllCustodiansArgs, buildRecoverAccountArgs, buildRotateCredentialArgs, } from './actions.js';
 export { CUSTODY_DOMAIN_NAME, CUSTODY_DOMAIN_VERSION, custodyDomain, ScheduleCustodyChangeRequest, ApplyCustodyChangeRequest, CancelScheduledChangeRequest, } from './eip712.js';
 export { CUSTODY_MODE_BY_INDEX, } from './types.js';
-export { packQuorumSigs, encodePasskeyTailBody, passkeyIdentity, } from './quorum-slots.js';
+export { packQuorumSigs, encodePasskeyTailBody, passkeyIdentity, SELF_PASSKEY_TRUSTEE, } from './quorum-slots.js';
+// Spec 422 §4 — the governance calls a Home makes for a person: install the policy post-deploy (naming trustees),
+// schedule / apply / cancel a change, and the digests a quorum signs.
+export { MODULE_TYPE_EXECUTOR, TIER, HOME_HYBRID_DEFAULTS, majorityOf, buildCustodyPolicyInstallData, installCustodyPolicyCall, scheduleCustodyChangeCall, applyCustodyChangeCall, cancelScheduledChangeCall, scheduleCustodyChangeDigest, applyCustodyChangeDigest, cancelScheduledChangeDigest, delayWords, } from './governance.js';
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,yDAAyD;AACzD,EAAE;AACF,uEAAuE;AACvE,oEAAoE;AACpE,8EAA8E;AAC9E,EAAE;AACF,wEAAwE;AACxE,kFAAkF;AAClF,6DAA6D;AAE7D,OAAO,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAE5C,OAAO,EACL,aAAa,EACb,qBAAqB,EACrB,wBAAwB,EACxB,mBAAmB,EACnB,sBAAsB,EACtB,0BAA0B,EAC1B,2BAA2B,EAC3B,6BAA6B,EAC7B,0BAA0B,EAC1B,gCAAgC,EAChC,6BAA6B,EAC7B,gCAAgC,EAChC,4BAA4B,EAC5B,uBAAuB,GAExB,MAAM,cAAc,CAAC;AAEtB,OAAO,EACL,mBAAmB,EACnB,sBAAsB,EACtB,aAAa,EACb,4BAA4B,EAC5B,yBAAyB,EACzB,4BAA4B,GAI7B,MAAM,aAAa,CAAC;AAErB,OAAO,EAOL,qBAAqB,GACtB,MAAM,YAAY,CAAC;AAEpB,OAAO,EAOL,cAAc,EACd,qBAAqB,EACrB,eAAe,GAChB,MAAM,mBAAmB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,yDAAyD;AACzD,EAAE;AACF,uEAAuE;AACvE,oEAAoE;AACpE,8EAA8E;AAC9E,EAAE;AACF,wEAAwE;AACxE,kFAAkF;AAClF,6DAA6D;AAE7D,OAAO,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAE5C,OAAO,EACL,aAAa,EACb,qBAAqB,EACrB,wBAAwB,EACxB,mBAAmB,EACnB,sBAAsB,EACtB,0BAA0B,EAC1B,2BAA2B,EAC3B,6BAA6B,EAC7B,0BAA0B,EAC1B,gCAAgC,EAChC,6BAA6B,EAC7B,gCAAgC,EAChC,4BAA4B,EAC5B,uBAAuB,EACvB,yBAAyB,GAE1B,MAAM,cAAc,CAAC;AAEtB,OAAO,EACL,mBAAmB,EACnB,sBAAsB,EACtB,aAAa,EACb,4BAA4B,EAC5B,yBAAyB,EACzB,4BAA4B,GAI7B,MAAM,aAAa,CAAC;AAErB,OAAO,EAOL,qBAAqB,GACtB,MAAM,YAAY,CAAC;AAEpB,OAAO,EAOL,cAAc,EACd,qBAAqB,EACrB,eAAe,EACf,oBAAoB,GACrB,MAAM,mBAAmB,CAAC;AAE3B,kHAAkH;AAClH,sEAAsE;AACtE,OAAO,EAIL,oBAAoB,EACpB,IAAI,EACJ,oBAAoB,EACpB,UAAU,EACV,6BAA6B,EAC7B,wBAAwB,EACxB,yBAAyB,EACzB,sBAAsB,EACtB,yBAAyB,EACzB,2BAA2B,EAC3B,wBAAwB,EACxB,2BAA2B,EAC3B,UAAU,GACX,MAAM,iBAAiB,CAAC"}

package/dist/quorum-slots.d.ts

@@ -28,21 +28,44 @@ export type ApprovedHashSlot = {
 };
 export type PasskeySlot = {
     type: 'passkey';
-    /** Passkey-Identity-Address: keccak256(abi.encode(x, y)) cast to address. */
+    /** ACCOUNT-SCOPED Passkey-Identity-Address (spec 302 W2):
+     *  keccak256(abi.encode(x, y, account)) cast to address, where `account` is
+     *  the AgentAccount whose custody this signature claims (the on-chain
+     *  verifier re-derives with the same scope). Use `passkeyIdentity(x, y, account)`. */
     pia: Address;
     /** P-256 public key. Re-derived and asserted equal to `pia` inside SignatureSlotRecovery. */
     x: bigint;
     y: bigint;
+    /** H7-C.1 / CON-WEBAUTHN-001: rpIdHash binds the assertion to the RP the
+     *  authenticator was registered against. Required by the on-chain decoder
+     *  at `SignatureSlotRecovery.recoverFromSlot` (line 172, 4-field tuple) —
+     *  prior to 2026-06-01 this was missing from the encoder, producing a
+     *  3-field blob the decoder couldn't parse → empty revert. */
+    rpIdHash: Hex;
     /** Decoded WebAuthn assertion produced by the browser ceremony. */
     assertion: WebAuthnAssertion;
 };
 export type QuorumSlot = EcdsaSlot | ContractSigSlot | ApprovedHashSlot | PasskeySlot;
 /**
  * Encode a v=2 passkey slot's tail body as `abi.encode(uint256 x,
- * uint256 y, WebAuthnLib.Assertion assertion)` — the shape
- * `SignatureSlotRecovery.recoverFromSlot` decodes for v=2 slots.
+ * uint256 y, bytes32 rpIdHash, WebAuthnLib.Assertion assertion)` — the
+ * shape `SignatureSlotRecovery.recoverFromSlot` decodes (line 172-173)
+ * for v=2 slots.
+ *
+ * H7-C.1 / CON-WEBAUTHN-001 (encoder updated 2026-06-01): the on-chain
+ * decoder added `bytes32 rpIdHash` between `(x, y)` and the assertion,
+ * but this off-chain encoder was left at 3 fields. `abi.decode` of a
+ * 3-field blob into a 4-field tuple underflows → EMPTY revert from
+ * the EntryPoint (no UserOperationRevertReason emitted). Live-debug
+ * symptom (Act 3 'AddPasskey Bob on Org' with Alice signing via
+ * passkey): user sees the opaque 'inner userOp reverted (no
+ * UserOperationEvent…)' chain. SIWE/EOA path used v=27/28 slots
+ * which don't hit this decoder — that's why it worked.
+ *
+ * Same drift class as PRs #91 (direct-deploy ABI) and #92
+ * (AddPasskeyCredential args).
  */
-export declare function encodePasskeyTailBody(x: bigint, y: bigint, assertion: WebAuthnAssertion): Hex;
+export declare function encodePasskeyTailBody(x: bigint, y: bigint, rpIdHash: Hex, assertion: WebAuthnAssertion): Hex;
 /**
  * Pack a sorted set of slots into the bytes blob CustodyPolicy expects.
  * Slot encoding follows Safe's convention; dynamic tails (v=0 + v=2)
@@ -53,9 +76,26 @@ export declare function encodePasskeyTailBody(x: bigint, y: bigint, assertion: W
  */
 export declare function packQuorumSigs(slots: readonly QuorumSlot[]): Hex;
 /**
- * Derive a Passkey-Identity-Address from a P-256 public key. Mirrors
- * `AgentAccount.passkeyIdentity` exactly so off-chain code can compute
+ * Derive the ACCOUNT-SCOPED Passkey-Identity-Address for a P-256 public key.
+ * Mirrors `AgentAccount.passkeyIdentity` exactly so off-chain code can compute
  * the same address without a chain call.
+ *
+ * Spec 302 W2: the PIA is `keccak256(abi.encode(x, y, account))` — the same
+ * physical passkey yields a DIFFERENT custodian address on every account it
+ * custodies, killing the public cross-account join key the global derivation
+ * created (one log scan clustered a person's SA with every org/treasury SA
+ * their root passkey controls). Consequence: the PIA CANNOT be computed
+ * before the account address exists — for the deploy-time "self-passkey is a
+ * trustee" bootstrap, pass {@link SELF_PASSKEY_TRUSTEE} in `trustees[]` and
+ * the factory resolves it post-deploy.
+ */
+export declare function passkeyIdentity(x: bigint, y: bigint, account: Address): Address;
+/**
+ * Spec 302 W2 — `AgentAccountFactory.SELF_PASSKEY_TRUSTEE`: the trustee-slot
+ * sentinel meaning "the initial passkey's PIA on the account being deployed".
+ * `address(uint160(uint256(keccak256("ap.trustee.self-initial-passkey"))))`.
+ * The CREATE2 salt commits to the sentinel (deterministic pre-deploy); the
+ * factory substitutes the real per-account PIA when installing CustodyPolicy.
  */
-export declare function passkeyIdentity(x: bigint, y: bigint): Address;
+export declare const SELF_PASSKEY_TRUSTEE: Address;
 //# sourceMappingURL=quorum-slots.d.ts.map

package/dist/quorum-slots.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"quorum-slots.d.ts","sourceRoot":"","sources":["../src/quorum-slots.ts"],"names":[],"mappings":"AAmBA,OAAO,EAML,KAAK,OAAO,EACZ,KAAK,GAAG,EACT,MAAM,MAAM,CAAC;AAEd,MAAM,WAAW,iBAAiB;IAChC,iBAAiB,EAAE,GAAG,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,CAAC,EAAE,MAAM,CAAC;IACV,CAAC,EAAE,MAAM,CAAC;IACV,kBAAkB,EAAE,GAAG,CAAC;CACzB;AAED,MAAM,MAAM,SAAS,GAAG;IACtB,IAAI,EAAE,OAAO,CAAC;IACd,MAAM,EAAE,OAAO,CAAC;IAChB,wDAAwD;IACxD,SAAS,EAAE,GAAG,CAAC;CAChB,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B,IAAI,EAAE,cAAc,CAAC;IACrB,uEAAuE;IACvE,MAAM,EAAE,OAAO,CAAC;IAChB,sDAAsD;IACtD,aAAa,EAAE,GAAG,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,IAAI,EAAE,eAAe,CAAC;IACtB,8DAA8D;IAC9D,MAAM,EAAE,OAAO,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG;IACxB,IAAI,EAAE,SAAS,CAAC;IAChB,6EAA6E;IAC7E,GAAG,EAAE,OAAO,CAAC;IACb,6FAA6F;IAC7F,CAAC,EAAE,MAAM,CAAC;IACV,CAAC,EAAE,MAAM,CAAC;IACV,mEAAmE;IACnE,SAAS,EAAE,iBAAiB,CAAC;CAC9B,CAAC;AAEF,MAAM,MAAM,UAAU,GAAG,SAAS,GAAG,eAAe,GAAG,gBAAgB,GAAG,WAAW,CAAC;AAiBtF;;;;GAIG;AACH,wBAAgB,qBAAqB,CACnC,CAAC,EAAE,MAAM,EACT,CAAC,EAAE,MAAM,EACT,SAAS,EAAE,iBAAiB,GAC3B,GAAG,CASL;AAED;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,SAAS,UAAU,EAAE,GAAG,GAAG,CAiDhE;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,OAAO,CAO7D"}
+{"version":3,"file":"quorum-slots.d.ts","sourceRoot":"","sources":["../src/quorum-slots.ts"],"names":[],"mappings":"AAmBA,OAAO,EAML,KAAK,OAAO,EACZ,KAAK,GAAG,EACT,MAAM,MAAM,CAAC;AAEd,MAAM,WAAW,iBAAiB;IAChC,iBAAiB,EAAE,GAAG,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,CAAC,EAAE,MAAM,CAAC;IACV,CAAC,EAAE,MAAM,CAAC;IACV,kBAAkB,EAAE,GAAG,CAAC;CACzB;AAED,MAAM,MAAM,SAAS,GAAG;IACtB,IAAI,EAAE,OAAO,CAAC;IACd,MAAM,EAAE,OAAO,CAAC;IAChB,wDAAwD;IACxD,SAAS,EAAE,GAAG,CAAC;CAChB,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B,IAAI,EAAE,cAAc,CAAC;IACrB,uEAAuE;IACvE,MAAM,EAAE,OAAO,CAAC;IAChB,sDAAsD;IACtD,aAAa,EAAE,GAAG,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,IAAI,EAAE,eAAe,CAAC;IACtB,8DAA8D;IAC9D,MAAM,EAAE,OAAO,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG;IACxB,IAAI,EAAE,SAAS,CAAC;IAChB;;;0FAGsF;IACtF,GAAG,EAAE,OAAO,CAAC;IACb,6FAA6F;IAC7F,CAAC,EAAE,MAAM,CAAC;IACV,CAAC,EAAE,MAAM,CAAC;IACV;;;;kEAI8D;IAC9D,QAAQ,EAAE,GAAG,CAAC;IACd,mEAAmE;IACnE,SAAS,EAAE,iBAAiB,CAAC;CAC9B,CAAC;AAEF,MAAM,MAAM,UAAU,GAAG,SAAS,GAAG,eAAe,GAAG,gBAAgB,GAAG,WAAW,CAAC;AAiBtF;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,qBAAqB,CACnC,CAAC,EAAE,MAAM,EACT,CAAC,EAAE,MAAM,EACT,QAAQ,EAAE,GAAG,EACb,SAAS,EAAE,iBAAiB,GAC3B,GAAG,CAUL;AAED;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,SAAS,UAAU,EAAE,GAAG,GAAG,CAiDhE;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,eAAe,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAO/E;AAED;;;;;;GAMG;AACH,eAAO,MAAM,oBAAoB,EAAE,OAAsD,CAAC"}

package/dist/quorum-slots.js

@@ -33,15 +33,30 @@ const ASSERTION_COMPONENTS = [
 ];
 /**
  * Encode a v=2 passkey slot's tail body as `abi.encode(uint256 x,
- * uint256 y, WebAuthnLib.Assertion assertion)` — the shape
- * `SignatureSlotRecovery.recoverFromSlot` decodes for v=2 slots.
+ * uint256 y, bytes32 rpIdHash, WebAuthnLib.Assertion assertion)` — the
+ * shape `SignatureSlotRecovery.recoverFromSlot` decodes (line 172-173)
+ * for v=2 slots.
+ *
+ * H7-C.1 / CON-WEBAUTHN-001 (encoder updated 2026-06-01): the on-chain
+ * decoder added `bytes32 rpIdHash` between `(x, y)` and the assertion,
+ * but this off-chain encoder was left at 3 fields. `abi.decode` of a
+ * 3-field blob into a 4-field tuple underflows → EMPTY revert from
+ * the EntryPoint (no UserOperationRevertReason emitted). Live-debug
+ * symptom (Act 3 'AddPasskey Bob on Org' with Alice signing via
+ * passkey): user sees the opaque 'inner userOp reverted (no
+ * UserOperationEvent…)' chain. SIWE/EOA path used v=27/28 slots
+ * which don't hit this decoder — that's why it worked.
+ *
+ * Same drift class as PRs #91 (direct-deploy ABI) and #92
+ * (AddPasskeyCredential args).
  */
-export function encodePasskeyTailBody(x, y, assertion) {
+export function encodePasskeyTailBody(x, y, rpIdHash, assertion) {
     return encodeAbiParameters([
         { type: 'uint256' },
         { type: 'uint256' },
+        { type: 'bytes32' },
         { type: 'tuple', components: ASSERTION_COMPONENTS },
-    ], [x, y, assertion]);
+    ], [x, y, rpIdHash, assertion]);
 }
 /**
  * Pack a sorted set of slots into the bytes blob CustodyPolicy expects.
@@ -89,7 +104,7 @@ export function packQuorumSigs(slots) {
             const r = padHex(slot.pia, { size: 32 });
             const s = padHex(toHex(BigInt(runningOffset)), { size: 32 });
             slotFragments.push(concat([r, s, '0x02']));
-            const blob = encodePasskeyTailBody(slot.x, slot.y, slot.assertion);
+            const blob = encodePasskeyTailBody(slot.x, slot.y, slot.rpIdHash, slot.assertion);
             const blobBytes = (blob.length - 2) / 2;
             tailFragments.push(concat([padHex(toHex(BigInt(blobBytes)), { size: 32 }), blob]));
             runningOffset += 32 + blobBytes;
@@ -98,13 +113,30 @@ export function packQuorumSigs(slots) {
     return concat([...slotFragments, ...tailFragments]);
 }
 /**
- * Derive a Passkey-Identity-Address from a P-256 public key. Mirrors
- * `AgentAccount.passkeyIdentity` exactly so off-chain code can compute
+ * Derive the ACCOUNT-SCOPED Passkey-Identity-Address for a P-256 public key.
+ * Mirrors `AgentAccount.passkeyIdentity` exactly so off-chain code can compute
  * the same address without a chain call.
+ *
+ * Spec 302 W2: the PIA is `keccak256(abi.encode(x, y, account))` — the same
+ * physical passkey yields a DIFFERENT custodian address on every account it
+ * custodies, killing the public cross-account join key the global derivation
+ * created (one log scan clustered a person's SA with every org/treasury SA
+ * their root passkey controls). Consequence: the PIA CANNOT be computed
+ * before the account address exists — for the deploy-time "self-passkey is a
+ * trustee" bootstrap, pass {@link SELF_PASSKEY_TRUSTEE} in `trustees[]` and
+ * the factory resolves it post-deploy.
  */
-export function passkeyIdentity(x, y) {
-    const packed = encodeAbiParameters([{ type: 'uint256' }, { type: 'uint256' }], [x, y]);
+export function passkeyIdentity(x, y, account) {
+    const packed = encodeAbiParameters([{ type: 'uint256' }, { type: 'uint256' }, { type: 'address' }], [x, y, account]);
     const hash = keccak256(packed);
     return (`0x${hash.slice(-40)}`);
 }
+/**
+ * Spec 302 W2 — `AgentAccountFactory.SELF_PASSKEY_TRUSTEE`: the trustee-slot
+ * sentinel meaning "the initial passkey's PIA on the account being deployed".
+ * `address(uint160(uint256(keccak256("ap.trustee.self-initial-passkey"))))`.
+ * The CREATE2 salt commits to the sentinel (deterministic pre-deploy); the
+ * factory substitutes the real per-account PIA when installing CustodyPolicy.
+ */
+export const SELF_PASSKEY_TRUSTEE = '0x2c75f6553caa0512418a595f36ffe4b751ed7a54';
 //# sourceMappingURL=quorum-slots.js.map

package/dist/quorum-slots.js.map

@@ -1 +1 @@
-{"version":3,"file":"quorum-slots.js","sourceRoot":"","sources":["../src/quorum-slots.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,EAAE;AACF,yEAAyE;AACzE,yEAAyE;AACzE,yEAAyE;AACzE,iEAAiE;AACjE,qEAAqE;AACrE,qCAAqC;AACrC,EAAE;AACF,2BAA2B;AAC3B,iEAAiE;AACjE,8EAA8E;AAC9E,4EAA4E;AAC5E,oFAAoF;AACpF,iFAAiF;AACjF,EAAE;AACF,wEAAwE;AACxE,2CAA2C;AAE3C,OAAO,EACL,MAAM,EACN,mBAAmB,EACnB,SAAS,EACT,MAAM,EACN,KAAK,GAGN,MAAM,MAAM,CAAC;AA8Cd,SAAS,UAAU,CAAC,IAAgB;IAClC,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC,GAAG,CAAC;IAC7C,OAAO,IAAI,CAAC,MAAM,CAAC;AACrB,CAAC;AAED,MAAM,oBAAoB,GAAG;IAC3B,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,OAAO,EAAE;IAC5C,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,QAAQ,EAAE;IAC1C,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,SAAS,EAAE;IAC3C,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,SAAS,EAAE;IACtC,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE;IAC9B,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE;IAC9B,EAAE,IAAI,EAAE,oBAAoB,EAAE,IAAI,EAAE,SAAS,EAAE;CACvC,CAAC;AAEX;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CACnC,CAAS,EACT,CAAS,EACT,SAA4B;IAE5B,OAAO,mBAAmB,CACxB;QACE,EAAE,IAAI,EAAE,SAAS,EAAE;QACnB,EAAE,IAAI,EAAE,SAAS,EAAE;QACnB,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,oBAAoB,EAAE;KACpD,EACD,CAAC,CAAC,EAAE,CAAC,EAAE,SAAS,CAAC,CAClB,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,cAAc,CAAC,KAA4B;IACzD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAChE,CAAC;IACD,MAAM,MAAM,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACtC,UAAU,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CACnE,CAAC;IACF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,CAAC,WAAW,EAAE,KAAK,UAAU,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAE,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;YACtF,MAAM,IAAI,KAAK,CAAC,oCAAoC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,EAAE,CAAC,CAAC;QAChF,CAAC;IACH,CAAC;IAED,MAAM,cAAc,GAAG,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC;IAC1C,MAAM,aAAa,GAAU,EAAE,CAAC;IAChC,MAAM,aAAa,GAAU,EAAE,CAAC;IAEhC,IAAI,aAAa,GAAG,cAAc,CAAC;IACnC,KAAK,MAAM,IAAI,IAAI,MAAM,EAAE,CAAC;QAC1B,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC1B,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC;gBACzC,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;YACtE,CAAC;YACD,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACrC,CAAC;aAAM,IAAI,IAAI,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;YACzC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;YAC5C,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;YACvC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,MAAa,CAAC,CAAC,CAAC,CAAC;QACpD,CAAC;aAAM,IAAI,IAAI,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;YACxC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;YAC5C,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;YAC7D,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,MAAa,CAAC,CAAC,CAAC,CAAC;YAClD,MAAM,SAAS,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;YACtD,aAAa,CAAC,IAAI,CAChB,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC,CAC7E,CAAC;YACF,aAAa,IAAI,EAAE,GAAG,SAAS,CAAC;QAClC,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;YACzC,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;YAC7D,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,MAAa,CAAC,CAAC,CAAC,CAAC;YAClD,MAAM,IAAI,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;YACnE,MAAM,SAAS,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;YACxC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;YACnF,aAAa,IAAI,EAAE,GAAG,SAAS,CAAC;QAClC,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC,CAAC,GAAG,aAAa,EAAE,GAAG,aAAa,CAAC,CAAC,CAAC;AACtD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,CAAS,EAAE,CAAS;IAClD,MAAM,MAAM,GAAG,mBAAmB,CAChC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,EAC1C,CAAC,CAAC,EAAE,CAAC,CAAC,CACP,CAAC;IACF,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;IAC/B,OAAO,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,EAAE,CAAY,CAAC;AAC7C,CAAC"}
+{"version":3,"file":"quorum-slots.js","sourceRoot":"","sources":["../src/quorum-slots.ts"],"names":[],"mappings":"AAAA,gEAAgE;AAChE,EAAE;AACF,yEAAyE;AACzE,yEAAyE;AACzE,yEAAyE;AACzE,iEAAiE;AACjE,qEAAqE;AACrE,qCAAqC;AACrC,EAAE;AACF,2BAA2B;AAC3B,iEAAiE;AACjE,8EAA8E;AAC9E,4EAA4E;AAC5E,oFAAoF;AACpF,iFAAiF;AACjF,EAAE;AACF,wEAAwE;AACxE,2CAA2C;AAE3C,OAAO,EACL,MAAM,EACN,mBAAmB,EACnB,SAAS,EACT,MAAM,EACN,KAAK,GAGN,MAAM,MAAM,CAAC;AAuDd,SAAS,UAAU,CAAC,IAAgB;IAClC,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC,GAAG,CAAC;IAC7C,OAAO,IAAI,CAAC,MAAM,CAAC;AACrB,CAAC;AAED,MAAM,oBAAoB,GAAG;IAC3B,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,OAAO,EAAE;IAC5C,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,QAAQ,EAAE;IAC1C,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,SAAS,EAAE;IAC3C,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,SAAS,EAAE;IACtC,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE;IAC9B,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE;IAC9B,EAAE,IAAI,EAAE,oBAAoB,EAAE,IAAI,EAAE,SAAS,EAAE;CACvC,CAAC;AAEX;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,qBAAqB,CACnC,CAAS,EACT,CAAS,EACT,QAAa,EACb,SAA4B;IAE5B,OAAO,mBAAmB,CACxB;QACE,EAAE,IAAI,EAAE,SAAS,EAAE;QACnB,EAAE,IAAI,EAAE,SAAS,EAAE;QACnB,EAAE,IAAI,EAAE,SAAS,EAAE;QACnB,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,oBAAoB,EAAE;KACpD,EACD,CAAC,CAAC,EAAE,CAAC,EAAE,QAAQ,EAAE,SAAS,CAAC,CAC5B,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,cAAc,CAAC,KAA4B;IACzD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAChE,CAAC;IACD,MAAM,MAAM,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACtC,UAAU,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CACnE,CAAC;IACF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,CAAC,WAAW,EAAE,KAAK,UAAU,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAE,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;YACtF,MAAM,IAAI,KAAK,CAAC,oCAAoC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,EAAE,CAAC,CAAC;QAChF,CAAC;IACH,CAAC;IAED,MAAM,cAAc,GAAG,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC;IAC1C,MAAM,aAAa,GAAU,EAAE,CAAC;IAChC,MAAM,aAAa,GAAU,EAAE,CAAC;IAEhC,IAAI,aAAa,GAAG,cAAc,CAAC;IACnC,KAAK,MAAM,IAAI,IAAI,MAAM,EAAE,CAAC;QAC1B,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC1B,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC;gBACzC,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;YACtE,CAAC;YACD,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACrC,CAAC;aAAM,IAAI,IAAI,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;YACzC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;YAC5C,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;YACvC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,MAAa,CAAC,CAAC,CAAC,CAAC;QACpD,CAAC;aAAM,IAAI,IAAI,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;YACxC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;YAC5C,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;YAC7D,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,MAAa,CAAC,CAAC,CAAC,CAAC;YAClD,MAAM,SAAS,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;YACtD,aAAa,CAAC,IAAI,CAChB,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC,CAC7E,CAAC;YACF,aAAa,IAAI,EAAE,GAAG,SAAS,CAAC;QAClC,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;YACzC,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;YAC7D,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,MAAa,CAAC,CAAC,CAAC,CAAC;YAClD,MAAM,IAAI,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;YAClF,MAAM,SAAS,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;YACxC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;YACnF,aAAa,IAAI,EAAE,GAAG,SAAS,CAAC;QAClC,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC,CAAC,GAAG,aAAa,EAAE,GAAG,aAAa,CAAC,CAAC,CAAC;AACtD,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,eAAe,CAAC,CAAS,EAAE,CAAS,EAAE,OAAgB;IACpE,MAAM,MAAM,GAAG,mBAAmB,CAChC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,EAC/D,CAAC,CAAC,EAAE,CAAC,EAAE,OAAO,CAAC,CAChB,CAAC;IACF,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;IAC/B,OAAO,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,EAAE,CAAY,CAAC;AAC7C,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAY,4CAA4C,CAAC"}

package/package.json

@@ -1,17 +1,21 @@
 {
   "name": "@agenticprimitives/account-custody",
-  "version": "1.0.0-alpha.4",
+  "version": "1.0.0-alpha.41",
   "description": "Custody-layer SDK: CustodyPolicy ABI, CustodyAction enum + arg builders, EIP-712 typed-data helpers, and Custodian/Trustee/CustodyCouncil types. Speaks custody-domain vocabulary only — no delegation / steward / caveat concepts (those belong in @agenticprimitives/delegation).",
+  "homepage": "https://agenticprimitives.dev",
+  "bugs": {
+    "url": "https://github.com/agentictrustlabs/agenticprimitives/issues"
+  },
+  "author": {
+    "name": "Agentic Trust Labs",
+    "url": "https://agenticprimitives.dev"
+  },
   "license": "MIT",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/agentictrustlabs/agenticprimitives.git",
     "directory": "packages/account-custody"
   },
-  "homepage": "https://github.com/agentictrustlabs/agenticprimitives/tree/master/packages/account-custody",
-  "bugs": {
-    "url": "https://github.com/agentictrustlabs/agenticprimitives/issues"
-  },
   "type": "module",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
@@ -31,19 +35,24 @@
     "access": "public"
   },
   "peerDependencies": {
-    "viem": "^2.50.0",
-    "@agenticprimitives/types": "1.0.0-alpha.4"
+    "viem": "^2.52.2",
+    "@agenticprimitives/types": "^1.0.0-alpha.41"
   },
   "devDependencies": {
     "@types/node": "^22.7.0",
-    "vitest": "^2.1.0"
+    "vitest": "^4.1.11"
   },
   "keywords": [
     "custody",
     "multi-sig",
     "trustee",
     "recovery",
-    "agentic"
+    "agentic",
+    "agentic-primitives",
+    "agenticprimitives",
+    "ai-agents",
+    "agent-authority",
+    "agentic-trust"
   ],
   "scripts": {
     "build": "tsc -p tsconfig.build.json",