@agenticprimitives/agent-naming 1.0.0-alpha.4 → 1.0.0-alpha.41

package/dist/custody.js

@@ -16,8 +16,14 @@
  * walletClient submission on top.
  */
 import { encodeFunctionData } from 'viem';
-import { agentNameAttributeResolverAbi, agentNameRegistryAbi, permissionlessSubregistryAbi, } from './abis';
-import { PREDICATE_ID, AGENT_KIND_ID } from './records';
+import { normalizeLabel } from './normalize.js';
+import { agentNameAttributeResolverAbi, agentNameRegistryAbi, permissionlessSubregistryAbi, } from './abis.js';
+import { PREDICATE_ID, AGENT_KIND_ID, AGENT_TYPE_ID, encodeAccounts } from './records.js';
+import { agentProfileResolverTypeAbi } from './abis.js';
+import { rootClassForDerivedType } from '@agenticprimitives/types';
+import { parseAgentName } from './grammar.js';
+import { ROLE_TYPED } from './claim.js';
+import { derivedTypeForTld } from './constants.js';
 // ─── Registry writes ───────────────────────────────────────────────
 /**
  * Build a call to register `<label>.<parent>` under the parent
@@ -25,6 +31,8 @@ import { PREDICATE_ID, AGENT_KIND_ID } from './records';
  * delegate (msg.sender check on chain).
  */
 export function buildRegisterSubnameCall(args) {
+    // AN-1: normalize + reject on the WRITE path (homoglyph/case/zero-width squat defense).
+    const label = normalizeLabel(args.label);
     return {
         to: args.registry,
         value: 0n,
@@ -33,7 +41,7 @@ export function buildRegisterSubnameCall(args) {
             functionName: 'register',
             args: [
                 args.parentNode,
-                args.label,
+                label,
                 args.newOwner,
                 args.resolver ?? '0x0000000000000000000000000000000000000000',
                 args.expiry ?? 0n,
@@ -118,6 +126,21 @@ export function buildSetStringAttributeCall(args) {
     };
 }
 /** Build a typed `setAddressAttribute(node, predicate, value)` call. */
+/**
+ * `string[]` attribute write (`atl:accounts` — spec 346 §3.8 / ap-federation spec 440 §C). The resolver validates the
+ * predicate's datatype on chain; the caller validates the VALUES with `encodeAccounts` first, as `buildRecordCalls` does.
+ */
+export function buildSetStringArrayAttributeCall(args) {
+    return {
+        to: args.resolver,
+        value: 0n,
+        data: encodeFunctionData({
+            abi: agentNameAttributeResolverAbi,
+            functionName: 'setStringArrayAttribute',
+            args: [args.node, args.predicate, [...args.values]],
+        }),
+    };
+}
 export function buildSetAddressAttributeCall(args) {
     return {
         to: args.resolver,
@@ -172,6 +195,21 @@ export function buildRecordCalls(args) {
     if (records.mcpEndpoint !== undefined) {
         out.push(buildSetStringAttributeCall({ resolver, node, predicate: PREDICATE_ID.mcpEndpoint, value: records.mcpEndpoint }));
     }
+    if (records.appContext !== undefined) {
+        out.push(buildSetStringAttributeCall({ resolver, node, predicate: PREDICATE_ID.appContext, value: records.appContext }));
+    }
+    if (records.orgRole !== undefined) {
+        out.push(buildSetStringAttributeCall({ resolver, node, predicate: PREDICATE_ID.orgRole, value: records.orgRole }));
+    }
+    if (records.serviceUrl !== undefined) {
+        out.push(buildSetStringAttributeCall({ resolver, node, predicate: PREDICATE_ID.serviceUrl, value: records.serviceUrl }));
+    }
+    if (records.siteUrl !== undefined) {
+        out.push(buildSetStringAttributeCall({ resolver, node, predicate: PREDICATE_ID.siteUrl, value: records.siteUrl }));
+    }
+    if (records.description !== undefined) {
+        out.push(buildSetStringAttributeCall({ resolver, node, predicate: PREDICATE_ID.description, value: records.description }));
+    }
     if (records.metadataUri !== undefined) {
         out.push(buildSetStringAttributeCall({ resolver, node, predicate: PREDICATE_ID.metadataUri, value: records.metadataUri }));
     }
@@ -187,6 +225,17 @@ export function buildRecordCalls(args) {
     if (records.nativeId !== undefined) {
         out.push(buildSetStringAttributeCall({ resolver, node, predicate: PREDICATE_ID.nativeId, value: records.nativeId }));
     }
+    // One account per chain, CAIP-10, sorted — validated by `encodeAccounts` BEFORE any signature (mirrors `encodeRecords`).
+    if (records.accounts !== undefined) {
+        out.push(buildSetStringArrayAttributeCall({ resolver, node, predicate: PREDICATE_ID.accounts, values: encodeAccounts(records.accounts) }));
+    }
+    // spec 347 §8.3 — released A2A card publication records (mirrors `encodeRecords`).
+    if (records.cardDigest !== undefined) {
+        out.push(buildSetBytes32AttributeCall({ resolver, node, predicate: PREDICATE_ID.cardDigest, value: records.cardDigest }));
+    }
+    if (records.cardUri !== undefined) {
+        out.push(buildSetStringAttributeCall({ resolver, node, predicate: PREDICATE_ID.cardUri, value: records.cardUri }));
+    }
     return out;
 }
 // ─── PermissionlessSubregistry ─────────────────────────────────────
@@ -201,14 +250,101 @@ export function buildRecordCalls(args) {
  * has previously claimed a name through this subregistry instance.
  */
 export function buildSubregistryRegisterCall(args) {
+    // AN-1: normalize + reject on the WRITE path (homoglyph/case/zero-width squat defense).
+    const label = normalizeLabel(args.label);
     return {
         to: args.subregistry,
         value: 0n,
         data: encodeFunctionData({
             abi: permissionlessSubregistryAbi,
             functionName: 'register',
-            args: [args.label, args.newOwner],
+            args: [label, args.newOwner],
         }),
     };
 }
+// ─── Typed naming (spec 346) ────────────────────────────────────────
+/**
+ * Step 1b of the bootstrap (spec 346 §3.6): declare the SA's derived type on its OWN profile subject.
+ * `msg.sender` MUST be the SA (`AgentProfileResolver.onlyAgent`) — compose these into the SA's execute
+ * batch. Registers the profile mirror first when `registered` is false (the typed setters require it),
+ * writing the ROOT kind there; then `atl:agentType` (+ `atl:serviceRole` when given, REQUIRED and equal
+ * to the type name for `workspace` and `registry`).
+ */
+export function buildDeclareAgentTypeCalls(args) {
+    if (ROLE_TYPED.has(args.agentType) && args.serviceRole !== args.agentType) {
+        throw new Error(`[agent-naming] ${args.agentType} requires serviceRole = '${args.agentType}'`);
+    }
+    const calls = [];
+    if (!args.registered) {
+        calls.push({
+            to: args.profileResolver,
+            value: 0n,
+            data: encodeFunctionData({
+                abi: agentProfileResolverTypeAbi,
+                functionName: 'register',
+                args: [args.agent, args.displayName ?? '', '', AGENT_KIND_ID[rootClassForDerivedType(args.agentType)], ''],
+            }),
+        });
+    }
+    calls.push({
+        to: args.profileResolver,
+        value: 0n,
+        data: encodeFunctionData({
+            abi: agentProfileResolverTypeAbi,
+            functionName: 'setBytes32Property',
+            args: [args.agent, PREDICATE_ID.agentType, AGENT_TYPE_ID[args.agentType]],
+        }),
+    });
+    if (args.serviceRole !== undefined) {
+        calls.push({
+            to: args.profileResolver,
+            value: 0n,
+            data: encodeFunctionData({
+                abi: agentProfileResolverTypeAbi,
+                functionName: 'setStringProperty',
+                args: [args.agent, PREDICATE_ID.serviceRole, args.serviceRole],
+            }),
+        });
+    }
+    if (args.subtype !== undefined) {
+        calls.push({
+            to: args.profileResolver,
+            value: 0n,
+            data: encodeFunctionData({
+                abi: agentProfileResolverTypeAbi,
+                functionName: 'setStringProperty',
+                args: [args.agent, PREDICATE_ID.agentSubtype, args.subtype],
+            }),
+        });
+    }
+    return calls;
+}
+/**
+ * Steps 2–3 of the bootstrap for a CANONICAL (root-level) typed name (spec 346 §3.3): claim
+ * `<label>.<tld>` through that root's `PermissionlessSubregistry`, write the root kind + optional records
+ * on the new node, and set the primary name. The caller MUST have run `validateTypedClaim` (or
+ * `AgentNamingClient.checkTypedName`) — this builder only refuses a suffix/type disagreement it can see
+ * locally. `setPrimaryName` requires `msg.sender == owner`; the subregistry claim may be sent by anyone.
+ */
+export function buildTypedClaimCalls(args) {
+    const p = parseAgentName(args.name);
+    if (p.kind !== 'canonical') {
+        throw new Error(`[agent-naming] buildTypedClaimCalls handles canonical names only (got ${p.kind} "${p.normalized}")`);
+    }
+    const expected = derivedTypeForTld(p.handle.tld);
+    if (expected !== args.agentType) {
+        throw new Error(`[agent-naming] type_mismatch: ".${p.handle.tld}" names ${expected}, subject declares ${args.agentType}`);
+    }
+    const subregistry = args.subregistries[p.handle.tld];
+    if (!subregistry)
+        throw new Error(`[agent-naming] no PermissionlessSubregistry configured for ".${p.handle.tld}"`);
+    const claim = buildSubregistryRegisterCall({ subregistry, label: p.handle.label, newOwner: args.owner });
+    const records = buildRecordCalls({
+        resolver: args.resolver,
+        node: p.node,
+        records: { ...(args.records ?? {}), addr: args.owner, agentKind: rootClassForDerivedType(args.agentType) },
+    });
+    const primaryName = buildSetPrimaryNameCall({ registry: args.registry, node: p.node });
+    return { claim, records, primaryName, node: p.node };
+}
 //# sourceMappingURL=custody.js.map

package/dist/custody.js.map

@@ -1 +1 @@
-{"version":3,"file":"custody.js","sourceRoot":"","sources":["../src/custody.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,kBAAkB,EAAE,MAAM,MAAM,CAAC;AAE1C,OAAO,EACL,6BAA6B,EAC7B,oBAAoB,EACpB,4BAA4B,GAC7B,MAAM,QAAQ,CAAC;AAChB,OAAO,EAAE,YAAY,EAAE,aAAa,EAAsB,MAAM,WAAW,CAAC;AAU5E,sEAAsE;AAEtE;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CAAC,IAOxC;IACC,OAAO;QACL,EAAE,EAAE,IAAI,CAAC,QAAQ;QACjB,KAAK,EAAE,EAAE;QACT,IAAI,EAAE,kBAAkB,CAAC;YACvB,GAAG,EAAE,oBAAoB;YACzB,YAAY,EAAE,UAAU;YACxB,IAAI,EAAE;gBACJ,IAAI,CAAC,UAAU;gBACf,IAAI,CAAC,KAAK;gBACV,IAAI,CAAC,QAAQ;gBACb,IAAI,CAAC,QAAQ,IAAK,4CAAwD;gBAC1E,IAAI,CAAC,MAAM,IAAI,EAAE;aAClB;SACF,CAAC;KACH,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,wBAAwB,CAAC,IAIxC;IACC,OAAO;QACL,EAAE,EAAE,IAAI,CAAC,QAAQ;QACjB,KAAK,EAAE,EAAE;QACT,IAAI,EAAE,kBAAkB,CAAC;YACvB,GAAG,EAAE,oBAAoB;YACzB,YAAY,EAAE,UAAU;YACxB,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC;SACjC,CAAC;KACH,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,2BAA2B,CAAC,IAI3C;IACC,OAAO;QACL,EAAE,EAAE,IAAI,CAAC,QAAQ;QACjB,KAAK,EAAE,EAAE;QACT,IAAI,EAAE,kBAAkB,CAAC;YACvB,GAAG,EAAE,oBAAoB;YACzB,YAAY,EAAE,aAAa;YAC3B,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC;SACpC,CAAC;KACH,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CAAC,IAIvC;IACC,OAAO;QACL,EAAE,EAAE,IAAI,CAAC,QAAQ;QACjB,KAAK,EAAE,EAAE;QACT,IAAI,EAAE,kBAAkB,CAAC;YACvB,GAAG,EAAE,oBAAoB;YACzB,YAAY,EAAE,gBAAgB;YAC9B,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC;SACpC,CAAC;KACH,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CAAC,IAGvC;IACC,OAAO;QACL,EAAE,EAAE,IAAI,CAAC,QAAQ;QACjB,KAAK,EAAE,EAAE;QACT,IAAI,EAAE,kBAAkB,CAAC;YACvB,GAAG,EAAE,oBAAoB;YACzB,YAAY,EAAE,gBAAgB;YAC9B,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;SAClB,CAAC;KACH,CAAC;AACJ,CAAC;AAED,sEAAsE;AAEtE,uEAAuE;AACvE,MAAM,UAAU,2BAA2B,CAAC,IAK3C;IACC,OAAO;QACL,EAAE,EAAE,IAAI,CAAC,QAAQ;QACjB,KAAK,EAAE,EAAE;QACT,IAAI,EAAE,kBAAkB,CAAC;YACvB,GAAG,EAAE,6BAA6B;YAClC,YAAY,EAAE,oBAAoB;YAClC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC;SAC9C,CAAC;KACH,CAAC;AACJ,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,4BAA4B,CAAC,IAK5C;IACC,OAAO;QACL,EAAE,EAAE,IAAI,CAAC,QAAQ;QACjB,KAAK,EAAE,EAAE;QACT,IAAI,EAAE,kBAAkB,CAAC;YACvB,GAAG,EAAE,6BAA6B;YAClC,YAAY,EAAE,qBAAqB;YACnC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC;SAC9C,CAAC;KACH,CAAC;AACJ,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,4BAA4B,CAAC,IAK5C;IACC,OAAO;QACL,EAAE,EAAE,IAAI,CAAC,QAAQ;QACjB,KAAK,EAAE,EAAE;QACT,IAAI,EAAE,kBAAkB,CAAC;YACvB,GAAG,EAAE,6BAA6B;YAClC,YAAY,EAAE,qBAAqB;YACnC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC;SAC9C,CAAC;KACH,CAAC;AACJ,CAAC;AAED,sEAAsE;AAEtE;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAIhC;IACC,MAAM,GAAG,GAAmB,EAAE,CAAC;IAC/B,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IACzC,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC/B,GAAG,CAAC,IAAI,CAAC,4BAA4B,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,YAAY,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAChH,CAAC;IACD,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QACpC,GAAG,CAAC,IAAI,CAAC,4BAA4B,CAAC;YACpC,QAAQ,EAAE,IAAI;YACd,SAAS,EAAE,YAAY,CAAC,SAAS;YACjC,KAAK,EAAE,aAAa,CAAC,OAAO,CAAC,SAAsB,CAAC;SACrD,CAAC,CAAC,CAAC;IACN,CAAC;IACD,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QACtC,GAAG,CAAC,IAAI,CAAC,2BAA2B,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,YAAY,CAAC,WAAW,EAAE,KAAK,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;IAC7H,CAAC;IACD,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QACtC,GAAG,CAAC,IAAI,CAAC,2BAA2B,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,YAAY,CAAC,WAAW,EAAE,KAAK,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;IAC7H,CAAC;IACD,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QACtC,GAAG,CAAC,IAAI,CAAC,2BAA2B,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,YAAY,CAAC,WAAW,EAAE,KAAK,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;IAC7H,CAAC;IACD,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QACtC,GAAG,CAAC,IAAI,CAAC,2BAA2B,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,YAAY,CAAC,WAAW,EAAE,KAAK,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;IAC7H,CAAC;IACD,IAAI,OAAO,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QACvC,GAAG,CAAC,IAAI,CAAC,4BAA4B,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,YAAY,CAAC,YAAY,EAAE,KAAK,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;IAChI,CAAC;IACD,IAAI,OAAO,CAAC,uBAAuB,KAAK,SAAS,EAAE,CAAC;QAClD,GAAG,CAAC,IAAI,CAAC,4BAA4B,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,YAAY,CAAC,uBAAuB,EAAE,KAAK,EAAE,OAAO,CAAC,uBAAuB,EAAE,CAAC,CAAC,CAAC;IACtJ,CAAC;IACD,IAAI,OAAO,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;QACxC,GAAG,CAAC,IAAI,CAAC,4BAA4B,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,YAAY,CAAC,aAAa,EAAE,KAAK,EAAE,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC;IAClI,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QACnC,GAAG,CAAC,IAAI,CAAC,2BAA2B,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,YAAY,CAAC,QAAQ,EAAE,KAAK,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;IACvH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,sEAAsE;AAEtE;;;;;;;;;GASG;AACH,MAAM,UAAU,4BAA4B,CAAC,IAI5C;IACC,OAAO;QACL,EAAE,EAAE,IAAI,CAAC,WAAW;QACpB,KAAK,EAAE,EAAE;QACT,IAAI,EAAE,kBAAkB,CAAC;YACvB,GAAG,EAAE,4BAA4B;YACjC,YAAY,EAAE,UAAU;YACxB,IAAI,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC;SAClC,CAAC;KACH,CAAC;AACJ,CAAC"}
+{"version":3,"file":"custody.js","sourceRoot":"","sources":["../src/custody.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,kBAAkB,EAAE,MAAM,MAAM,CAAC;AAE1C,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,EACL,6BAA6B,EAC7B,oBAAoB,EACpB,4BAA4B,GAC7B,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,aAAa,EAAE,cAAc,EAAsB,MAAM,cAAc,CAAC;AAC9G,OAAO,EAAE,2BAA2B,EAAE,MAAM,WAAW,CAAC;AACxD,OAAO,EAAE,uBAAuB,EAAyB,MAAM,0BAA0B,CAAC;AAC1F,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AACxC,OAAO,EAAE,iBAAiB,EAAiB,MAAM,gBAAgB,CAAC;AAUlE,sEAAsE;AAEtE;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CAAC,IAOxC;IACC,wFAAwF;IACxF,MAAM,KAAK,GAAG,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACzC,OAAO;QACL,EAAE,EAAE,IAAI,CAAC,QAAQ;QACjB,KAAK,EAAE,EAAE;QACT,IAAI,EAAE,kBAAkB,CAAC;YACvB,GAAG,EAAE,oBAAoB;YACzB,YAAY,EAAE,UAAU;YACxB,IAAI,EAAE;gBACJ,IAAI,CAAC,UAAU;gBACf,KAAK;gBACL,IAAI,CAAC,QAAQ;gBACb,IAAI,CAAC,QAAQ,IAAK,4CAAwD;gBAC1E,IAAI,CAAC,MAAM,IAAI,EAAE;aAClB;SACF,CAAC;KACH,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,wBAAwB,CAAC,IAIxC;IACC,OAAO;QACL,EAAE,EAAE,IAAI,CAAC,QAAQ;QACjB,KAAK,EAAE,EAAE;QACT,IAAI,EAAE,kBAAkB,CAAC;YACvB,GAAG,EAAE,oBAAoB;YACzB,YAAY,EAAE,UAAU;YACxB,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC;SACjC,CAAC;KACH,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,2BAA2B,CAAC,IAI3C;IACC,OAAO;QACL,EAAE,EAAE,IAAI,CAAC,QAAQ;QACjB,KAAK,EAAE,EAAE;QACT,IAAI,EAAE,kBAAkB,CAAC;YACvB,GAAG,EAAE,oBAAoB;YACzB,YAAY,EAAE,aAAa;YAC3B,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC;SACpC,CAAC;KACH,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CAAC,IAIvC;IACC,OAAO;QACL,EAAE,EAAE,IAAI,CAAC,QAAQ;QACjB,KAAK,EAAE,EAAE;QACT,IAAI,EAAE,kBAAkB,CAAC;YACvB,GAAG,EAAE,oBAAoB;YACzB,YAAY,EAAE,gBAAgB;YAC9B,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC;SACpC,CAAC;KACH,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CAAC,IAGvC;IACC,OAAO;QACL,EAAE,EAAE,IAAI,CAAC,QAAQ;QACjB,KAAK,EAAE,EAAE;QACT,IAAI,EAAE,kBAAkB,CAAC;YACvB,GAAG,EAAE,oBAAoB;YACzB,YAAY,EAAE,gBAAgB;YAC9B,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;SAClB,CAAC;KACH,CAAC;AACJ,CAAC;AAED,sEAAsE;AAEtE,uEAAuE;AACvE,MAAM,UAAU,2BAA2B,CAAC,IAK3C;IACC,OAAO;QACL,EAAE,EAAE,IAAI,CAAC,QAAQ;QACjB,KAAK,EAAE,EAAE;QACT,IAAI,EAAE,kBAAkB,CAAC;YACvB,GAAG,EAAE,6BAA6B;YAClC,YAAY,EAAE,oBAAoB;YAClC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC;SAC9C,CAAC;KACH,CAAC;AACJ,CAAC;AAED,wEAAwE;AACxE;;;GAGG;AACH,MAAM,UAAU,gCAAgC,CAAC,IAKhD;IACC,OAAO;QACL,EAAE,EAAE,IAAI,CAAC,QAAQ;QACjB,KAAK,EAAE,EAAE;QACT,IAAI,EAAE,kBAAkB,CAAC;YACvB,GAAG,EAAE,6BAA6B;YAClC,YAAY,EAAE,yBAAyB;YACvC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;SACpD,CAAC;KACH,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,IAK5C;IACC,OAAO;QACL,EAAE,EAAE,IAAI,CAAC,QAAQ;QACjB,KAAK,EAAE,EAAE;QACT,IAAI,EAAE,kBAAkB,CAAC;YACvB,GAAG,EAAE,6BAA6B;YAClC,YAAY,EAAE,qBAAqB;YACnC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC;SAC9C,CAAC;KACH,CAAC;AACJ,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,4BAA4B,CAAC,IAK5C;IACC,OAAO;QACL,EAAE,EAAE,IAAI,CAAC,QAAQ;QACjB,KAAK,EAAE,EAAE;QACT,IAAI,EAAE,kBAAkB,CAAC;YACvB,GAAG,EAAE,6BAA6B;YAClC,YAAY,EAAE,qBAAqB;YACnC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC;SAC9C,CAAC;KACH,CAAC;AACJ,CAAC;AAED,sEAAsE;AAEtE;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAIhC;IACC,MAAM,GAAG,GAAmB,EAAE,CAAC;IAC/B,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IACzC,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC/B,GAAG,CAAC,IAAI,CAAC,4BAA4B,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,YAAY,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAChH,CAAC;IACD,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QACpC,GAAG,CAAC,IAAI,CAAC,4BAA4B,CAAC;YACpC,QAAQ,EAAE,IAAI;YACd,SAAS,EAAE,YAAY,CAAC,SAAS;YACjC,KAAK,EAAE,aAAa,CAAC,OAAO,CAAC,SAAsB,CAAC;SACrD,CAAC,CAAC,CAAC;IACN,CAAC;IACD,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QACtC,GAAG,CAAC,IAAI,CAAC,2BAA2B,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,YAAY,CAAC,WAAW,EAAE,KAAK,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;IAC7H,CAAC;IACD,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QACtC,GAAG,CAAC,IAAI,CAAC,2BAA2B,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,YAAY,CAAC,WAAW,EAAE,KAAK,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;IAC7H,CAAC;IACD,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QACtC,GAAG,CAAC,IAAI,CAAC,2BAA2B,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,YAAY,CAAC,WAAW,EAAE,KAAK,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;IAC7H,CAAC;IACD,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACrC,GAAG,CAAC,IAAI,CAAC,2BAA2B,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,YAAY,CAAC,UAAU,EAAE,KAAK,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;IAC3H,CAAC;IACD,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAClC,GAAG,CAAC,IAAI,CAAC,2BAA2B,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,YAAY,CAAC,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IACrH,CAAC;IACD,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACrC,GAAG,CAAC,IAAI,CAAC,2BAA2B,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,YAAY,CAAC,UAAU,EAAE,KAAK,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;IAC3H,CAAC;IACD,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAClC,GAAG,CAAC,IAAI,CAAC,2BAA2B,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,YAAY,CAAC,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IACrH,CAAC;IACD,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QACtC,GAAG,CAAC,IAAI,CAAC,2BAA2B,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,YAAY,CAAC,WAAW,EAAE,KAAK,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;IAC7H,CAAC;IACD,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QACtC,GAAG,CAAC,IAAI,CAAC,2BAA2B,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,YAAY,CAAC,WAAW,EAAE,KAAK,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;IAC7H,CAAC;IACD,IAAI,OAAO,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QACvC,GAAG,CAAC,IAAI,CAAC,4BAA4B,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,YAAY,CAAC,YAAY,EAAE,KAAK,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;IAChI,CAAC;IACD,IAAI,OAAO,CAAC,uBAAuB,KAAK,SAAS,EAAE,CAAC;QAClD,GAAG,CAAC,IAAI,CAAC,4BAA4B,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,YAAY,CAAC,uBAAuB,EAAE,KAAK,EAAE,OAAO,CAAC,uBAAuB,EAAE,CAAC,CAAC,CAAC;IACtJ,CAAC;IACD,IAAI,OAAO,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;QACxC,GAAG,CAAC,IAAI,CAAC,4BAA4B,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,YAAY,CAAC,aAAa,EAAE,KAAK,EAAE,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC;IAClI,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QACnC,GAAG,CAAC,IAAI,CAAC,2BAA2B,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,YAAY,CAAC,QAAQ,EAAE,KAAK,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;IACvH,CAAC;IACD,yHAAyH;IACzH,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QACnC,GAAG,CAAC,IAAI,CAAC,gCAAgC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,cAAc,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;IAC7I,CAAC;IACD,mFAAmF;IACnF,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACrC,GAAG,CAAC,IAAI,CAAC,4BAA4B,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,YAAY,CAAC,UAAU,EAAE,KAAK,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;IAC5H,CAAC;IACD,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAClC,GAAG,CAAC,IAAI,CAAC,2BAA2B,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,YAAY,CAAC,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IACrH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,sEAAsE;AAEtE;;;;;;;;;GASG;AACH,MAAM,UAAU,4BAA4B,CAAC,IAI5C;IACC,wFAAwF;IACxF,MAAM,KAAK,GAAG,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACzC,OAAO;QACL,EAAE,EAAE,IAAI,CAAC,WAAW;QACpB,KAAK,EAAE,EAAE;QACT,IAAI,EAAE,kBAAkB,CAAC;YACvB,GAAG,EAAE,4BAA4B;YACjC,YAAY,EAAE,UAAU;YACxB,IAAI,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC;SAC7B,CAAC;KACH,CAAC;AACJ,CAAC;AAED,uEAAuE;AAEvE;;;;;;GAMG;AACH,MAAM,UAAU,0BAA0B,CAAC,IAW1C;IACC,IAAI,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,WAAW,KAAK,IAAI,CAAC,SAAS,EAAE,CAAC;QAC1E,MAAM,IAAI,KAAK,CAAC,kBAAkB,IAAI,CAAC,SAAS,4BAA4B,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC;IACjG,CAAC;IACD,MAAM,KAAK,GAAmB,EAAE,CAAC;IACjC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;QACrB,KAAK,CAAC,IAAI,CAAC;YACT,EAAE,EAAE,IAAI,CAAC,eAAe;YACxB,KAAK,EAAE,EAAE;YACT,IAAI,EAAE,kBAAkB,CAAC;gBACvB,GAAG,EAAE,2BAA2B;gBAChC,YAAY,EAAE,UAAU;gBACxB,IAAI,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,WAAW,IAAI,EAAE,EAAE,EAAE,EAAE,aAAa,CAAC,uBAAuB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC;aAC3G,CAAC;SACH,CAAC,CAAC;IACL,CAAC;IACD,KAAK,CAAC,IAAI,CAAC;QACT,EAAE,EAAE,IAAI,CAAC,eAAe;QACxB,KAAK,EAAE,EAAE;QACT,IAAI,EAAE,kBAAkB,CAAC;YACvB,GAAG,EAAE,2BAA2B;YAChC,YAAY,EAAE,oBAAoB;YAClC,IAAI,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,YAAY,CAAC,SAAS,EAAE,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;SAC1E,CAAC;KACH,CAAC,CAAC;IACH,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QACnC,KAAK,CAAC,IAAI,CAAC;YACT,EAAE,EAAE,IAAI,CAAC,eAAe;YACxB,KAAK,EAAE,EAAE;YACT,IAAI,EAAE,kBAAkB,CAAC;gBACvB,GAAG,EAAE,2BAA2B;gBAChC,YAAY,EAAE,mBAAmB;gBACjC,IAAI,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,YAAY,CAAC,WAAW,EAAE,IAAI,CAAC,WAAW,CAAC;aAC/D,CAAC;SACH,CAAC,CAAC;IACL,CAAC;IACD,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAC/B,KAAK,CAAC,IAAI,CAAC;YACT,EAAE,EAAE,IAAI,CAAC,eAAe;YACxB,KAAK,EAAE,EAAE;YACT,IAAI,EAAE,kBAAkB,CAAC;gBACvB,GAAG,EAAE,2BAA2B;gBAChC,YAAY,EAAE,mBAAmB;gBACjC,IAAI,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,YAAY,CAAC,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC;aAC5D,CAAC;SACH,CAAC,CAAC;IACL,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAQpC;IACC,MAAM,CAAC,GAAG,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpC,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CAAC,yEAAyE,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC;IACxH,CAAC;IACD,MAAM,QAAQ,GAAG,iBAAiB,CAAC,CAAC,CAAC,MAAO,CAAC,GAAG,CAAC,CAAC;IAClD,IAAI,QAAQ,KAAK,IAAI,CAAC,SAAS,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC,MAAO,CAAC,GAAG,WAAW,QAAQ,sBAAsB,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;IAC7H,CAAC;IACD,MAAM,WAAW,GAAG,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,MAAO,CAAC,GAAe,CAAC,CAAC;IAClE,IAAI,CAAC,WAAW;QAAE,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC,MAAO,CAAC,GAAG,GAAG,CAAC,CAAC;IACpH,MAAM,KAAK,GAAG,4BAA4B,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC,MAAO,CAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;IAC1G,MAAM,OAAO,GAAG,gBAAgB,CAAC;QAC/B,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,OAAO,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,SAAS,EAAE,uBAAuB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE;KAC3G,CAAC,CAAC;IACH,MAAM,WAAW,GAAG,uBAAuB,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACvF,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;AACvD,CAAC"}

package/dist/dns.d.ts

@@ -0,0 +1,91 @@
+/**
+ * DNS subdomain + A2A endpoint convention (spec 346 §5) — a PURE projection of a handle onto a zone
+ * the caller supplies. No hostname, zone or provider is baked in (ADR-0021): packages own the two
+ * protocol paths; apps/deployments own the zone.
+ *
+ * | handle                            | host                                | rule |
+ * | richcanvas.org                    | richcanvas.org                      | org = zone apex |
+ * | rpedersen.me (ownsDomain)         | rpedersen.me                        | the real .me domain |
+ * | rpedersen.me (hosted)             | rpedersen.<homeZone>                | <label>.<home-zone> |
+ * | rpedersen.me@richcanvas.org       | rpedersen.richcanvas.org            | <person-label>.<zone> — no type |
+ * | architecture.team@richcanvas.org  | architecture-team.richcanvas.org    | <label>-<type>.<zone> |
+ * | northern-colorado.team (root)     | northern-colorado-team.<zone>       | hosted under the registry/governor zone |
+ *
+ * THE TYPE IS A HYPHENATED SUFFIX ON ONE LABEL, NOT ITS OWN LABEL (changed 2026-08-30). A DNS wildcard
+ * matches exactly one label, so `<label>.<type>.<zone>` needs a wildcard per type — and a cert per type,
+ * which public CAs (Cloudflare Universal SSL included) do not issue below `*.zone` without a paid add-on.
+ * Every agent under a zone at `<label>-<type>.<zone>` is covered by the one `*.<zone>` wildcard the zone
+ * already has. Folding the type into the label instead of dropping it keeps two properties the dotted form
+ * had: the type is legible in the host, and the projection stays REVERSIBLE — `alice.me` and `alice.org`
+ * would both want `alice.<zone>` if the type were simply dropped, forcing an inbound host to guess which
+ * root it meant. Persons and legacy roots keep the bare `<label>.<zone>` form, so a label ending in
+ * `-<agent-type>` is refused for them at claim time (`validateTypedClaim`) — the ambiguity is removed by
+ * construction rather than resolved by precedence.
+ *
+ * The type in DNS is still a fixed projection of the suffix and is NEVER parsed as authority.
+ */
+import { type ParsedAgentName } from './grammar.js';
+/** A2A JSON-RPC path (must equal `@agenticprimitives/a2a` `A2A_JSONRPC_PATH` — golden-vector tested, no import edge). */
+export declare const A2A_JSONRPC_PATH: "/api/a2a";
+/** A2A agent-card discovery path (origin-scoped — why every agent gets its own host). */
+export declare const A2A_AGENT_CARD_PATH: "/.well-known/agent-card.json";
+export interface DnsHostOptions {
+    /** The zone the context principal controls: an org apex (`richcanvas.org`) or a Home/registry zone. */
+    zone: string;
+    /** For hosted persons: the Home zone (e.g. `home.example`). Defaults to `zone`. */
+    homeZone?: string;
+    /** The person owns the real `.me` domain matching the handle — the host IS the handle. */
+    ownsDomain?: boolean;
+}
+/** Project a handle onto a DNS host per the §5 table. Root / type-node / legacy names have no host. */
+export declare function dnsHostForHandle(name: string | ParsedAgentName, opts: DnsHostOptions): string;
+/**
+ * The inverse of `dnsHostForHandle` for a hosted zone: `<label>-<type>.<zone>` → `<label>.<type>`, and a
+ * bare `<label>.<zone>` → null (a person/legacy label, whose root the deployment decides from its ordered
+ * root list). Pure; never guesses a type that is not in the closed suffix set.
+ */
+export declare function handleForDnsHost(host: string, zone: string): {
+    label: string;
+    tld: string;
+    name: string;
+} | null;
+export declare function agentCardUrlForHost(host: string): string;
+export declare function a2aEndpointForHost(host: string): string;
+/** Edge-addressed alternative (spec 346 §5): `POST <edge>/api/a2a/<handle>` when a zone cannot mint subdomains. */
+export declare function edgeA2aPathForHandle(edgeBase: string, name: string | ParsedAgentName): string;
+/**
+ * The single-label subdomain of `zone`: `alice.<zone>` → `alice`. The apex, deeper nesting, a non-matching host
+ * and any label in `exclude` (a Home passes `['www']`) → null. Port suffixes are ignored.
+ */
+export declare function parseSubdomainLabel(hostname: string | undefined, zone: string, exclude?: readonly string[]): string | null;
+/** `<label>-<type>` → the typed name it projects (`alice-home-church` → `alice-home.church`), or null when the
+ *  label carries no known type suffix. A CANDIDATE — the caller resolves it against the chain. */
+export declare function typedNameForLabel(rest: string): string | null;
+/**
+ * The inbound host → the name it projects, for the two shapes ONE base zone serves:
+ *   `<label>.<zone>`         → `<label>-<type>` reads as `<label>.<type>`; otherwise `<label>.<legacyParent>`
+ *   `<label>.<type>.<zone>`  → `<label>.<type>` — the dotted form served until 2026-08-30, kept because cards
+ *                              published under it carry that URL in signed bytes; nothing emits it (`hostForName`).
+ * The DNS label is returned RAW as `label`: a label may read BOTH ways (`alice-home-church` is `alice-home.church`
+ * and also the legacy `alice-home-church.<legacyParent>`), so the choice belongs to the caller, which resolves an
+ * ORDERED candidate set against the chain — one mechanism, ordered candidates, not a fallback (ADR-0013).
+ * Apex, deeper nesting, an unknown type level → null.
+ */
+export declare function parseTypedAgentHost(hostname: string | undefined, zone: string, legacyParent: string): {
+    label: string;
+    name: string;
+} | null;
+/**
+ * The inverse: the public host a deployment serves an on-chain name at. `<label>.<parent>` for any parent in
+ * `legacyParents` (the ordered person / legacy roots an estate serves — a list, because an estate mid-migration
+ * serves several) → `<label>.<zone>`; `<label>.<tld>` for any other agent type → `<label>-<tld>.<zone>`. Deeper or
+ * untyped → null (no host to publish at). A projection of the name, never authority.
+ */
+export declare function hostForName(name: string, zone: string, legacyParents: readonly string[]): string | null;
+/**
+ * The on-chain name for an explicit handle (an edge path `POST /api/a2a/<handle>`, an injected subdomain header).
+ * A bare label is `<label>.<legacyParent>`; a typed handle (`x.t`, `x.t@c.u`, `c.u/x.t`) or a legacy dotted name
+ * is parsed by the grammar. Root and type-node forms name no subject → null. One grammar, no guessing.
+ */
+export declare function agentNameForHandle(handle: string, legacyParent: string): string | null;
+//# sourceMappingURL=dns.d.ts.map

package/dist/dns.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dns.d.ts","sourceRoot":"","sources":["../src/dns.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,OAAO,EAAkB,KAAK,eAAe,EAAE,MAAM,cAAc,CAAC;AAIpE,yHAAyH;AACzH,eAAO,MAAM,gBAAgB,EAAG,UAAmB,CAAC;AACpD,yFAAyF;AACzF,eAAO,MAAM,mBAAmB,EAAG,8BAAuC,CAAC;AAE3E,MAAM,WAAW,cAAc;IAC7B,uGAAuG;IACvG,IAAI,EAAE,MAAM,CAAC;IACb,mFAAmF;IACnF,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,0FAA0F;IAC1F,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAUD,uGAAuG;AACvG,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,eAAe,EAAE,IAAI,EAAE,cAAc,GAAG,MAAM,CAoB7F;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAehH;AAED,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAExD;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEvD;AAED,mHAAmH;AACnH,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,eAAe,GAAG,MAAM,CAM7F;AAQD;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,GAAE,SAAS,MAAM,EAAO,GAAG,MAAM,GAAG,IAAI,CAQ9H;AAED;kGACkG;AAClG,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAM7D;AAED;;;;;;;;;GASG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAU5I;AAED;;;;;GAKG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,GAAG,IAAI,CAOvG;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAWtF"}

package/dist/dns.js

@@ -0,0 +1,196 @@
+/**
+ * DNS subdomain + A2A endpoint convention (spec 346 §5) — a PURE projection of a handle onto a zone
+ * the caller supplies. No hostname, zone or provider is baked in (ADR-0021): packages own the two
+ * protocol paths; apps/deployments own the zone.
+ *
+ * | handle                            | host                                | rule |
+ * | richcanvas.org                    | richcanvas.org                      | org = zone apex |
+ * | rpedersen.me (ownsDomain)         | rpedersen.me                        | the real .me domain |
+ * | rpedersen.me (hosted)             | rpedersen.<homeZone>                | <label>.<home-zone> |
+ * | rpedersen.me@richcanvas.org       | rpedersen.richcanvas.org            | <person-label>.<zone> — no type |
+ * | architecture.team@richcanvas.org  | architecture-team.richcanvas.org    | <label>-<type>.<zone> |
+ * | northern-colorado.team (root)     | northern-colorado-team.<zone>       | hosted under the registry/governor zone |
+ *
+ * THE TYPE IS A HYPHENATED SUFFIX ON ONE LABEL, NOT ITS OWN LABEL (changed 2026-08-30). A DNS wildcard
+ * matches exactly one label, so `<label>.<type>.<zone>` needs a wildcard per type — and a cert per type,
+ * which public CAs (Cloudflare Universal SSL included) do not issue below `*.zone` without a paid add-on.
+ * Every agent under a zone at `<label>-<type>.<zone>` is covered by the one `*.<zone>` wildcard the zone
+ * already has. Folding the type into the label instead of dropping it keeps two properties the dotted form
+ * had: the type is legible in the host, and the projection stays REVERSIBLE — `alice.me` and `alice.org`
+ * would both want `alice.<zone>` if the type were simply dropped, forcing an inbound host to guess which
+ * root it meant. Persons and legacy roots keep the bare `<label>.<zone>` form, so a label ending in
+ * `-<agent-type>` is refused for them at claim time (`validateTypedClaim`) — the ambiguity is removed by
+ * construction rather than resolved by precedence.
+ *
+ * The type in DNS is still a fixed projection of the suffix and is NEVER parsed as authority.
+ */
+import { parseAgentName } from './grammar.js';
+import { allAgentTlds, derivedTypeForTld, isAgentTld } from './constants.js';
+import { InvalidNameError } from './errors.js';
+/** A2A JSON-RPC path (must equal `@agenticprimitives/a2a` `A2A_JSONRPC_PATH` — golden-vector tested, no import edge). */
+export const A2A_JSONRPC_PATH = '/api/a2a';
+/** A2A agent-card discovery path (origin-scoped — why every agent gets its own host). */
+export const A2A_AGENT_CARD_PATH = '/.well-known/agent-card.json';
+const HOSTNAME_RE = /^(?=.{1,253}$)([a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?\.)+[a-z][a-z0-9-]{0,62}$/;
+function assertZone(zone, what) {
+    const z = zone.trim().toLowerCase().replace(/\.$/, '');
+    if (!HOSTNAME_RE.test(z))
+        throw new InvalidNameError(zone, `${what} must be a DNS zone (got "${zone}")`);
+    return z;
+}
+/** Project a handle onto a DNS host per the §5 table. Root / type-node / legacy names have no host. */
+export function dnsHostForHandle(name, opts) {
+    const p = typeof name === 'string' ? parseAgentName(name) : name;
+    const zone = assertZone(opts.zone, 'zone');
+    if (p.kind !== 'canonical' && p.kind !== 'scoped') {
+        throw new InvalidNameError(p.normalized, `no DNS host for a ${p.kind} name`);
+    }
+    const { label, tld } = p.handle;
+    const type = p.derivedType;
+    if (p.kind === 'canonical') {
+        if (type === 'org')
+            return zone;
+        if (type === 'person') {
+            if (opts.ownsDomain)
+                return `${label}.${tld}`;
+            return `${label}.${assertZone(opts.homeZone ?? opts.zone, 'homeZone')}`;
+        }
+        return `${label}-${tld}.${zone}`;
+    }
+    // scoped / contextual
+    if (type === 'person')
+        return `${label}.${zone}`;
+    return `${label}-${tld}.${zone}`;
+}
+/**
+ * The inverse of `dnsHostForHandle` for a hosted zone: `<label>-<type>.<zone>` → `<label>.<type>`, and a
+ * bare `<label>.<zone>` → null (a person/legacy label, whose root the deployment decides from its ordered
+ * root list). Pure; never guesses a type that is not in the closed suffix set.
+ */
+export function handleForDnsHost(host, zone) {
+    const h = host.trim().toLowerCase().replace(/\.$/, '');
+    const z = zone.trim().toLowerCase().replace(/\.$/, '');
+    if (!h.endsWith(`.${z}`))
+        return null;
+    const rest = h.slice(0, h.length - z.length - 1);
+    if (!rest || rest.includes('.'))
+        return null;
+    for (const tld of allAgentTlds()) {
+        const suffix = `-${tld}`;
+        if (rest.endsWith(suffix) && rest.length > suffix.length) {
+            const label = rest.slice(0, -suffix.length);
+            const canonical = derivedTypeForTld(tld) === null ? tld : tld;
+            return { label, tld: canonical, name: `${label}.${canonical}` };
+        }
+    }
+    return null;
+}
+export function agentCardUrlForHost(host) {
+    return `https://${assertZone(host, 'host')}${A2A_AGENT_CARD_PATH}`;
+}
+export function a2aEndpointForHost(host) {
+    return `https://${assertZone(host, 'host')}${A2A_JSONRPC_PATH}`;
+}
+/** Edge-addressed alternative (spec 346 §5): `POST <edge>/api/a2a/<handle>` when a zone cannot mint subdomains. */
+export function edgeA2aPathForHandle(edgeBase, name) {
+    const p = typeof name === 'string' ? parseAgentName(name) : name;
+    if (p.kind !== 'canonical' && p.kind !== 'scoped') {
+        throw new InvalidNameError(p.normalized, `no edge path for a ${p.kind} name`);
+    }
+    return `${edgeBase.replace(/\/+$/, '')}${A2A_JSONRPC_PATH}/${p.normalized}`;
+}
+// ── The deployment-zone projection (spec 346 §5, promoted from the agent runtime's host-context in spec 399
+// §4): a Home and its runtime both serve names under ONE base zone and both had a copy of these — the Card
+// Studio's "MUST match hostForName in demo-a2a" comment was the two-literal drift this closes. Every zone, root
+// and parent is a PARAMETER; the deployment binds its own (ADR-0021). None of these is authority: a host is a
+// projection of a name, and an inbound label is a CANDIDATE the caller resolves against the chain. ──────────
+/**
+ * The single-label subdomain of `zone`: `alice.<zone>` → `alice`. The apex, deeper nesting, a non-matching host
+ * and any label in `exclude` (a Home passes `['www']`) → null. Port suffixes are ignored.
+ */
+export function parseSubdomainLabel(hostname, zone, exclude = []) {
+    if (!hostname)
+        return null;
+    const host = (hostname.split(':')[0] ?? '').toLowerCase();
+    const base = zone.trim().toLowerCase().replace(/\.$/, '');
+    if (host === base || !host.endsWith('.' + base))
+        return null;
+    const label = host.slice(0, host.length - base.length - 1);
+    if (!label || label.includes('.') || exclude.includes(label))
+        return null;
+    return label;
+}
+/** `<label>-<type>` → the typed name it projects (`alice-home-church` → `alice-home.church`), or null when the
+ *  label carries no known type suffix. A CANDIDATE — the caller resolves it against the chain. */
+export function typedNameForLabel(rest) {
+    for (const tld of allAgentTlds()) {
+        const suffix = `-${tld}`;
+        if (rest.endsWith(suffix) && rest.length > suffix.length)
+            return `${rest.slice(0, -suffix.length)}.${tld}`;
+    }
+    return null;
+}
+/**
+ * The inbound host → the name it projects, for the two shapes ONE base zone serves:
+ *   `<label>.<zone>`         → `<label>-<type>` reads as `<label>.<type>`; otherwise `<label>.<legacyParent>`
+ *   `<label>.<type>.<zone>`  → `<label>.<type>` — the dotted form served until 2026-08-30, kept because cards
+ *                              published under it carry that URL in signed bytes; nothing emits it (`hostForName`).
+ * The DNS label is returned RAW as `label`: a label may read BOTH ways (`alice-home-church` is `alice-home.church`
+ * and also the legacy `alice-home-church.<legacyParent>`), so the choice belongs to the caller, which resolves an
+ * ORDERED candidate set against the chain — one mechanism, ordered candidates, not a fallback (ADR-0013).
+ * Apex, deeper nesting, an unknown type level → null.
+ */
+export function parseTypedAgentHost(hostname, zone, legacyParent) {
+    if (!hostname)
+        return null;
+    const host = (hostname.split(':')[0] ?? '').toLowerCase();
+    const base = zone.trim().toLowerCase().replace(/\.$/, '');
+    if (host === base || !host.endsWith('.' + base))
+        return null;
+    const rest = host.slice(0, host.length - base.length - 1);
+    const parts = rest.split('.');
+    if (parts.length === 1 && parts[0])
+        return { label: parts[0], name: typedNameForLabel(parts[0]) ?? `${parts[0]}.${legacyParent}` };
+    if (parts.length === 2 && parts[0] && isAgentTld(parts[1]))
+        return { label: `${parts[0]}.${parts[1]}`, name: `${parts[0]}.${parts[1]}` };
+    return null;
+}
+/**
+ * The inverse: the public host a deployment serves an on-chain name at. `<label>.<parent>` for any parent in
+ * `legacyParents` (the ordered person / legacy roots an estate serves — a list, because an estate mid-migration
+ * serves several) → `<label>.<zone>`; `<label>.<tld>` for any other agent type → `<label>-<tld>.<zone>`. Deeper or
+ * untyped → null (no host to publish at). A projection of the name, never authority.
+ */
+export function hostForName(name, zone, legacyParents) {
+    const parts = name.trim().toLowerCase().split('.');
+    if (parts.length !== 2 || !parts[0] || !parts[1])
+        return null;
+    const [label, tld] = parts;
+    if (legacyParents.includes(tld))
+        return `${label}.${zone}`;
+    if (isAgentTld(tld))
+        return `${label}-${tld}.${zone}`;
+    return null;
+}
+/**
+ * The on-chain name for an explicit handle (an edge path `POST /api/a2a/<handle>`, an injected subdomain header).
+ * A bare label is `<label>.<legacyParent>`; a typed handle (`x.t`, `x.t@c.u`, `c.u/x.t`) or a legacy dotted name
+ * is parsed by the grammar. Root and type-node forms name no subject → null. One grammar, no guessing.
+ */
+export function agentNameForHandle(handle, legacyParent) {
+    const h = handle.trim().toLowerCase();
+    if (!h)
+        return null;
+    if (!h.includes('.') && !h.includes('@') && !h.includes('/'))
+        return `${h}.${legacyParent}`;
+    try {
+        const p = parseAgentName(h);
+        return p.kind === 'canonical' || p.kind === 'scoped' || p.kind === 'legacy' ? p.normalized : null;
+    }
+    catch (e) {
+        if (e instanceof InvalidNameError)
+            return null;
+        throw e;
+    }
+}
+//# sourceMappingURL=dns.js.map

package/dist/dns.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dns.js","sourceRoot":"","sources":["../src/dns.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,OAAO,EAAE,cAAc,EAAwB,MAAM,cAAc,CAAC;AACpE,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAC7E,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAE/C,yHAAyH;AACzH,MAAM,CAAC,MAAM,gBAAgB,GAAG,UAAmB,CAAC;AACpD,yFAAyF;AACzF,MAAM,CAAC,MAAM,mBAAmB,GAAG,8BAAuC,CAAC;AAW3E,MAAM,WAAW,GAAG,4EAA4E,CAAC;AAEjG,SAAS,UAAU,CAAC,IAAY,EAAE,IAAY;IAC5C,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACvD,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,MAAM,IAAI,gBAAgB,CAAC,IAAI,EAAE,GAAG,IAAI,6BAA6B,IAAI,IAAI,CAAC,CAAC;IACzG,OAAO,CAAC,CAAC;AACX,CAAC;AAED,uGAAuG;AACvG,MAAM,UAAU,gBAAgB,CAAC,IAA8B,EAAE,IAAoB;IACnF,MAAM,CAAC,GAAG,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACjE,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC3C,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAClD,MAAM,IAAI,gBAAgB,CAAC,CAAC,CAAC,UAAU,EAAE,qBAAqB,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC;IAC/E,CAAC;IACD,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,MAAO,CAAC;IACjC,MAAM,IAAI,GAAG,CAAC,CAAC,WAAY,CAAC;IAE5B,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QAC3B,IAAI,IAAI,KAAK,KAAK;YAAE,OAAO,IAAI,CAAC;QAChC,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtB,IAAI,IAAI,CAAC,UAAU;gBAAE,OAAO,GAAG,KAAK,IAAI,GAAG,EAAE,CAAC;YAC9C,OAAO,GAAG,KAAK,IAAI,UAAU,CAAC,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE,CAAC;QAC1E,CAAC;QACD,OAAO,GAAG,KAAK,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;IACnC,CAAC;IACD,sBAAsB;IACtB,IAAI,IAAI,KAAK,QAAQ;QAAE,OAAO,GAAG,KAAK,IAAI,IAAI,EAAE,CAAC;IACjD,OAAO,GAAG,KAAK,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;AACnC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,IAAY;IACzD,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACvD,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACvD,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAAE,OAAO,IAAI,CAAC;IACtC,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACjD,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7C,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE,EAAE,CAAC;QACjC,MAAM,MAAM,GAAG,IAAI,GAAG,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;YACzD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAC5C,MAAM,SAAS,GAAG,iBAAiB,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;YAC9D,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,KAAK,IAAI,SAAS,EAAE,EAAE,CAAC;QAClE,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,IAAY;IAC9C,OAAO,WAAW,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,mBAAmB,EAAE,CAAC;AACrE,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,OAAO,WAAW,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,gBAAgB,EAAE,CAAC;AAClE,CAAC;AAED,mHAAmH;AACnH,MAAM,UAAU,oBAAoB,CAAC,QAAgB,EAAE,IAA8B;IACnF,MAAM,CAAC,GAAG,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACjE,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAClD,MAAM,IAAI,gBAAgB,CAAC,CAAC,CAAC,UAAU,EAAE,sBAAsB,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC;IAChF,CAAC;IACD,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,gBAAgB,IAAI,CAAC,CAAC,UAAU,EAAE,CAAC;AAC9E,CAAC;AAED,6GAA6G;AAC7G,2GAA2G;AAC3G,gHAAgH;AAChH,8GAA8G;AAC9G,8GAA8G;AAE9G;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,QAA4B,EAAE,IAAY,EAAE,UAA6B,EAAE;IAC7G,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3B,MAAM,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAC1D,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC1D,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,GAAG,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC3D,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1E,OAAO,KAAK,CAAC;AACf,CAAC;AAED;kGACkG;AAClG,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE,EAAE,CAAC;QACjC,MAAM,MAAM,GAAG,IAAI,GAAG,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM;YAAE,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,GAAG,EAAE,CAAC;IAC7G,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,mBAAmB,CAAC,QAA4B,EAAE,IAAY,EAAE,YAAoB;IAClG,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3B,MAAM,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAC1D,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC1D,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,GAAG,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7D,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC1D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,YAAY,EAAE,EAAE,CAAC;IACnI,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IAC1I,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CAAC,IAAY,EAAE,IAAY,EAAE,aAAgC;IACtF,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACnD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9D,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,GAAG,KAAyB,CAAC;IAC/C,IAAI,aAAa,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,KAAK,IAAI,IAAI,EAAE,CAAC;IAC3D,IAAI,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,KAAK,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;IACtD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAAc,EAAE,YAAoB;IACrE,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACtC,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACpB,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC,IAAI,YAAY,EAAE,CAAC;IAC5F,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC;QAC5B,OAAO,CAAC,CAAC,IAAI,KAAK,WAAW,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC;IACpG,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,CAAC,YAAY,gBAAgB;YAAE,OAAO,IAAI,CAAC;QAC/C,MAAM,CAAC,CAAC;IACV,CAAC;AACH,CAAC"}

package/dist/federated.d.ts

@@ -0,0 +1,31 @@
+/** CAIP-2 for an EVM chain: `eip155:<chainId>`. */
+export type Caip2Chain = `eip155:${number}`;
+export interface FederatedAgentNameV1 {
+    type: 'FederatedAgentNameV1';
+    /** The canonical display form the grammar produces (`alice.me`, `vault.svc@richcanvas.org`). */
+    name: string;
+    /** The chain of the registry that holds the name (CAIP-2). */
+    chain: Caip2Chain;
+}
+export declare const caip2ForChainId: (chainId: number) => Caip2Chain;
+export declare function chainIdOfCaip2(chain: string): number;
+/**
+ * Build the pair. The name is parsed (so a chain written into it, a reserved label or an unknown suffix is
+ * refused with the grammar's own reason) and normalized to its canonical display form.
+ */
+export declare function federatedAgentName(name: string, chainId: number): FederatedAgentNameV1;
+export interface DisplayAgentNameOptions {
+    /** The chain the viewer is standing in. Absent = no town (a federation surface): always qualified. */
+    viewerChainId?: number;
+    /** A human label for the name's town, when the caller knows it (`faithchain`). Shown beside the chain. */
+    townLabel?: string;
+}
+/**
+ * The never-bare rule. `alice.me` inside its home chain; `alice.me · faithchain (eip155:34348)` anywhere else.
+ * The separator is a middle dot so the result can never be re-parsed as a name (a dot-handle never contains
+ * spaces), which is the point: a qualified display is for eyes, not for `parseAgentName`.
+ */
+export declare function displayAgentName(ref: FederatedAgentNameV1, opts?: DisplayAgentNameOptions): string;
+/** Two references name the same record iff both halves agree. A label alone never does (naming doc N4). */
+export declare function sameFederatedName(a: FederatedAgentNameV1, b: FederatedAgentNameV1): boolean;
+//# sourceMappingURL=federated.d.ts.map

package/dist/federated.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"federated.d.ts","sourceRoot":"","sources":["../src/federated.ts"],"names":[],"mappings":"AAkBA,mDAAmD;AACnD,MAAM,MAAM,UAAU,GAAG,UAAU,MAAM,EAAE,CAAC;AAE5C,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,sBAAsB,CAAC;IAC7B,gGAAgG;IAChG,IAAI,EAAE,MAAM,CAAC;IACb,8DAA8D;IAC9D,KAAK,EAAE,UAAU,CAAC;CACnB;AAED,eAAO,MAAM,eAAe,YAAa,MAAM,KAAG,UAGjD,CAAC;AAEF,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAIpD;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,oBAAoB,CAItF;AAED,MAAM,WAAW,uBAAuB;IACtC,sGAAsG;IACtG,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,0GAA0G;IAC1G,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,oBAAoB,EAAE,IAAI,GAAE,uBAA4B,GAAG,MAAM,CAItG;AAED,2GAA2G;AAC3G,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,oBAAoB,EAAE,CAAC,EAAE,oBAAoB,GAAG,OAAO,CAE3F"}

package/dist/federated.js

@@ -0,0 +1,54 @@
+/**
+ * The federated reference (ap-federation spec 440 §C / naming doc N4; spec 346 §3.7). PURE — no I/O.
+ *
+ * A name that crosses a town boundary travels as the PAIR { name, chain }: the typed handle exactly as the
+ * grammar accepts it, and the CAIP-2 chain of the registry that holds it. The chain is a RECORD beside the
+ * name and never a component of it — `alice.me@faithchain` is refused by the grammar (`@` means context,
+ * spec 346 §3), and ERC-7828's `name@chain` was refused for the same reason (Ring 0 chains-and-estates §5.1).
+ *
+ * The display rule: inside its home chain a handle is bare; anywhere else it carries its chain (and the
+ * town's label when the caller supplies one). A viewer that is in no town — a federation site, a log, a
+ * receipt — prints every name qualified. This is ENSIP-19's rule (show a primary name only where it round
+ * trips) and the petname-system rule (a label you did not issue is shown with its issuer) applied to towns.
+ *
+ * Nothing here resolves anything: the pair is a reference, the display is a string, and neither is authority.
+ */
+import { parseAgentName, formatAgentName } from './grammar.js';
+import { InvalidNameError } from './errors.js';
+export const caip2ForChainId = (chainId) => {
+    if (!Number.isInteger(chainId) || chainId <= 0)
+        throw new InvalidNameError(String(chainId), 'chain_id: a positive integer chain id');
+    return `eip155:${chainId}`;
+};
+export function chainIdOfCaip2(chain) {
+    const m = /^eip155:(\d+)$/.exec(chain);
+    if (!m)
+        throw new InvalidNameError(chain, 'caip2: expected eip155:<chainId>');
+    return Number(m[1]);
+}
+/**
+ * Build the pair. The name is parsed (so a chain written into it, a reserved label or an unknown suffix is
+ * refused with the grammar's own reason) and normalized to its canonical display form.
+ */
+export function federatedAgentName(name, chainId) {
+    const p = parseAgentName(name);
+    if (p.kind === 'root' || p.kind === 'type-node')
+        throw new InvalidNameError(name, `not_a_handle: a ${p.kind} node is not an agent's name`);
+    return { type: 'FederatedAgentNameV1', name: formatAgentName(p), chain: caip2ForChainId(chainId) };
+}
+/**
+ * The never-bare rule. `alice.me` inside its home chain; `alice.me · faithchain (eip155:34348)` anywhere else.
+ * The separator is a middle dot so the result can never be re-parsed as a name (a dot-handle never contains
+ * spaces), which is the point: a qualified display is for eyes, not for `parseAgentName`.
+ */
+export function displayAgentName(ref, opts = {}) {
+    const home = opts.viewerChainId !== undefined && caip2ForChainId(opts.viewerChainId) === ref.chain;
+    if (home)
+        return ref.name;
+    return opts.townLabel ? `${ref.name} · ${opts.townLabel} (${ref.chain})` : `${ref.name} · ${ref.chain}`;
+}
+/** Two references name the same record iff both halves agree. A label alone never does (naming doc N4). */
+export function sameFederatedName(a, b) {
+    return a.name === b.name && a.chain === b.chain;
+}
+//# sourceMappingURL=federated.js.map

package/dist/federated.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"federated.js","sourceRoot":"","sources":["../src/federated.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/D,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAa/C,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,OAAe,EAAc,EAAE;IAC7D,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,OAAO,IAAI,CAAC;QAAE,MAAM,IAAI,gBAAgB,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,uCAAuC,CAAC,CAAC;IACrI,OAAO,UAAU,OAAO,EAAE,CAAC;AAC7B,CAAC,CAAC;AAEF,MAAM,UAAU,cAAc,CAAC,KAAa;IAC1C,MAAM,CAAC,GAAG,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACvC,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,gBAAgB,CAAC,KAAK,EAAE,kCAAkC,CAAC,CAAC;IAC9E,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACtB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAY,EAAE,OAAe;IAC9D,MAAM,CAAC,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;IAC/B,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW;QAAE,MAAM,IAAI,gBAAgB,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAAC,IAAI,8BAA8B,CAAC,CAAC;IAC3I,OAAO,EAAE,IAAI,EAAE,sBAAsB,EAAE,IAAI,EAAE,eAAe,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,eAAe,CAAC,OAAO,CAAC,EAAE,CAAC;AACrG,CAAC;AASD;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,GAAyB,EAAE,OAAgC,EAAE;IAC5F,MAAM,IAAI,GAAG,IAAI,CAAC,aAAa,KAAK,SAAS,IAAI,eAAe,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,GAAG,CAAC,KAAK,CAAC;IACnG,IAAI,IAAI;QAAE,OAAO,GAAG,CAAC,IAAI,CAAC;IAC1B,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,IAAI,MAAM,IAAI,CAAC,SAAS,KAAK,GAAG,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,IAAI,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC;AAC1G,CAAC;AAED,2GAA2G;AAC3G,MAAM,UAAU,iBAAiB,CAAC,CAAuB,EAAE,CAAuB;IAChF,OAAO,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,KAAK,CAAC;AAClD,CAAC"}