@agenticprimitives/agent-profile 0.1.0-alpha.2

package/dist/caip10.js

@@ -0,0 +1,56 @@
+/**
+ * CAIP-10 chain-agnostic account identifier helpers (HCS-14 +
+ * ERC-8004 aligned; ADR-0008).
+ *
+ * Subpath: `@agenticprimitives/agent-profile/caip10`.
+ *
+ * Grammar (per CAIP-10):
+ *   <namespace>:<reference>:<address>
+ *
+ * Encoder is strict (allowlist-only namespaces); decoder is permissive
+ * (any grammar-valid string accepted) — this is the "validate at write,
+ * forward-compat at read" pattern.
+ */
+import { CAIP10_NAMESPACE_ALLOWLIST } from './constants';
+import { InvalidCaip10Error } from './errors';
+export { CAIP10_NAMESPACE_ALLOWLIST };
+const CAIP10_GRAMMAR = /^([-a-z0-9]{3,8}):([-_a-zA-Z0-9]{1,32}):([-.%a-zA-Z0-9]{1,128})$/;
+/**
+ * Build a CAIP-10 string. Strict on the encode side — namespace must
+ * be in `CAIP10_NAMESPACE_ALLOWLIST`. Address half is lowercased for
+ * `eip155` so callers can't smuggle two different on-chain canonical
+ * forms past the equality check.
+ */
+export function buildCaip10Address(parts) {
+    const { namespace, reference, address } = parts;
+    if (!CAIP10_NAMESPACE_ALLOWLIST.has(namespace)) {
+        throw new InvalidCaip10Error(`${namespace}:${reference}:${address}`, `namespace "${namespace}" not in allowlist (${[...CAIP10_NAMESPACE_ALLOWLIST].join('|')})`);
+    }
+    const normalizedAddress = namespace === 'eip155' ? address.toLowerCase() : address;
+    const out = `${namespace}:${reference}:${normalizedAddress}`;
+    if (!CAIP10_GRAMMAR.test(out)) {
+        throw new InvalidCaip10Error(out, 'does not match CAIP-10 grammar');
+    }
+    return out;
+}
+/**
+ * Parse any grammar-valid CAIP-10 string into its parts. Permissive on
+ * the read side — does NOT require namespace allowlist membership
+ * (forward-compat: future indexers may publish namespaces we haven't
+ * yet added). Throws only on grammar violations.
+ */
+export function parseCaip10(value) {
+    const m = CAIP10_GRAMMAR.exec(value);
+    if (!m) {
+        throw new InvalidCaip10Error(value, 'does not match CAIP-10 grammar');
+    }
+    return { namespace: m[1], reference: m[2], address: m[3] };
+}
+/**
+ * Grammar-only validity check (does NOT enforce the allowlist).
+ * Use `buildCaip10Address` if you need allowlist enforcement.
+ */
+export function isValidCaip10(value) {
+    return CAIP10_GRAMMAR.test(value);
+}
+//# sourceMappingURL=caip10.js.map

package/dist/caip10.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"caip10.js","sourceRoot":"","sources":["../src/caip10.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,0BAA0B,EAAE,MAAM,aAAa,CAAC;AACzD,OAAO,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAC;AAQ9C,OAAO,EAAE,0BAA0B,EAAE,CAAC;AAEtC,MAAM,cAAc,GAAG,kEAAkE,CAAC;AAE1F;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAkB;IACnD,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;IAChD,IAAI,CAAC,0BAA0B,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,kBAAkB,CAC1B,GAAG,SAAS,IAAI,SAAS,IAAI,OAAO,EAAE,EACtC,cAAc,SAAS,uBAAuB,CAAC,GAAG,0BAA0B,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAC3F,CAAC;IACJ,CAAC;IACD,MAAM,iBAAiB,GAAG,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;IACnF,MAAM,GAAG,GAAG,GAAG,SAAS,IAAI,SAAS,IAAI,iBAAiB,EAAE,CAAC;IAC7D,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,kBAAkB,CAAC,GAAG,EAAE,gCAAgC,CAAC,CAAC;IACtE,CAAC;IACD,OAAO,GAAoB,CAAC;AAC9B,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CAAC,KAAa;IACvC,MAAM,CAAC,GAAG,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrC,IAAI,CAAC,CAAC,EAAE,CAAC;QACP,MAAM,IAAI,kBAAkB,CAAC,KAAK,EAAE,gCAAgC,CAAC,CAAC;IACxE,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,CAAE,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,CAAE,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,CAAE,EAAE,CAAC;AAChE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,KAAa;IACzC,OAAO,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AACpC,CAAC"}

package/dist/calls.d.ts

@@ -0,0 +1,74 @@
+/**
+ * Pure encoded call builders for AgentProfileResolver writes
+ * (ID Phase 4).
+ *
+ * Subpath: `@agenticprimitives/agent-profile/calls`.
+ *
+ * Each builder returns a `ContractCall` (`{ to, value, data }`) so
+ * callers can submit via any path — direct walletClient.sendTransaction
+ * (see AgentIdentityClient), AgentAccount.execute, CustodyPolicy
+ * ceremony, ERC-4337 UserOp, etc.
+ *
+ * Per ADR-0007 the package boundary forbids importing agent-naming /
+ * agent-relationships / delegation / custody — these builders stay
+ * pure encode-only.
+ */
+import type { Address, Hex } from '@agenticprimitives/types';
+/** Minimal call-shape: the standard `{ to, value, data }` triple. */
+export interface ContractCall {
+    to: Address;
+    value: bigint;
+    data: Hex;
+}
+/**
+ * Build a call to register an agent's profile for the first time.
+ * The walletClient's account MUST equal `agent`. Subsequent updates
+ * go through the typed setters / setMetadata.
+ */
+export declare function buildRegisterProfileCall(args: {
+    profileResolver: Address;
+    agent: Address;
+    displayName?: string;
+    description?: string;
+    agentKind?: Hex;
+    profileSchemaURI?: string;
+}): ContractCall;
+/**
+ * Build a call to set / update the off-chain profile anchor
+ * (metadataURI + metadataHash). The walletClient's account MUST
+ * equal `agent` AND the agent must already be registered.
+ */
+export declare function buildSetProfileMetadataCall(args: {
+    profileResolver: Address;
+    agent: Address;
+    metadataURI: string;
+    metadataHash: Hex;
+}): ContractCall;
+/** Set a single string property on an agent's profile. */
+export declare function buildSetProfileStringCall(args: {
+    profileResolver: Address;
+    agent: Address;
+    predicate: Hex;
+    value: string;
+}): ContractCall;
+/** Set a single address property on an agent's profile. */
+export declare function buildSetProfileAddressCall(args: {
+    profileResolver: Address;
+    agent: Address;
+    predicate: Hex;
+    value: Address;
+}): ContractCall;
+/** Set a single bytes32 property on an agent's profile. */
+export declare function buildSetProfileBytes32Call(args: {
+    profileResolver: Address;
+    agent: Address;
+    predicate: Hex;
+    value: Hex;
+}): ContractCall;
+/** Flip the `atl:profileActive` boolean for an agent. */
+export declare function buildSetProfileActiveCall(args: {
+    profileResolver: Address;
+    agent: Address;
+    active: boolean;
+}): ContractCall;
+//# sourceMappingURL=calls.d.ts.map

package/dist/calls.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"calls.d.ts","sourceRoot":"","sources":["../src/calls.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAGH,OAAO,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,0BAA0B,CAAC;AAG7D,qEAAqE;AACrE,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,OAAO,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,GAAG,CAAC;CACX;AAID;;;;GAIG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAAE;IAC7C,eAAe,EAAE,OAAO,CAAC;IACzB,KAAK,EAAE,OAAO,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,GAAG,CAAC;IAChB,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B,GAAG,YAAY,CAgBf;AAED;;;;GAIG;AACH,wBAAgB,2BAA2B,CAAC,IAAI,EAAE;IAChD,eAAe,EAAE,OAAO,CAAC;IACzB,KAAK,EAAE,OAAO,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,GAAG,CAAC;CACnB,GAAG,YAAY,CAUf;AAED,0DAA0D;AAC1D,wBAAgB,yBAAyB,CAAC,IAAI,EAAE;IAC9C,eAAe,EAAE,OAAO,CAAC;IACzB,KAAK,EAAE,OAAO,CAAC;IACf,SAAS,EAAE,GAAG,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;CACf,GAAG,YAAY,CAUf;AAED,2DAA2D;AAC3D,wBAAgB,0BAA0B,CAAC,IAAI,EAAE;IAC/C,eAAe,EAAE,OAAO,CAAC;IACzB,KAAK,EAAE,OAAO,CAAC;IACf,SAAS,EAAE,GAAG,CAAC;IACf,KAAK,EAAE,OAAO,CAAC;CAChB,GAAG,YAAY,CAUf;AAED,2DAA2D;AAC3D,wBAAgB,0BAA0B,CAAC,IAAI,EAAE;IAC/C,eAAe,EAAE,OAAO,CAAC;IACzB,KAAK,EAAE,OAAO,CAAC;IACf,SAAS,EAAE,GAAG,CAAC;IACf,KAAK,EAAE,GAAG,CAAC;CACZ,GAAG,YAAY,CAUf;AAED,yDAAyD;AACzD,wBAAgB,yBAAyB,CAAC,IAAI,EAAE;IAC9C,eAAe,EAAE,OAAO,CAAC;IACzB,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,EAAE,OAAO,CAAC;CACjB,GAAG,YAAY,CAUf"}

package/dist/calls.js

@@ -0,0 +1,105 @@
+/**
+ * Pure encoded call builders for AgentProfileResolver writes
+ * (ID Phase 4).
+ *
+ * Subpath: `@agenticprimitives/agent-profile/calls`.
+ *
+ * Each builder returns a `ContractCall` (`{ to, value, data }`) so
+ * callers can submit via any path — direct walletClient.sendTransaction
+ * (see AgentIdentityClient), AgentAccount.execute, CustodyPolicy
+ * ceremony, ERC-4337 UserOp, etc.
+ *
+ * Per ADR-0007 the package boundary forbids importing agent-naming /
+ * agent-relationships / delegation / custody — these builders stay
+ * pure encode-only.
+ */
+import { encodeFunctionData } from 'viem';
+import { agentProfileResolverAbi } from './abis';
+const ZERO_BYTES32 = '0x0000000000000000000000000000000000000000000000000000000000000000';
+/**
+ * Build a call to register an agent's profile for the first time.
+ * The walletClient's account MUST equal `agent`. Subsequent updates
+ * go through the typed setters / setMetadata.
+ */
+export function buildRegisterProfileCall(args) {
+    return {
+        to: args.profileResolver,
+        value: 0n,
+        data: encodeFunctionData({
+            abi: agentProfileResolverAbi,
+            functionName: 'register',
+            args: [
+                args.agent,
+                args.displayName ?? '',
+                args.description ?? '',
+                args.agentKind ?? ZERO_BYTES32,
+                args.profileSchemaURI ?? '',
+            ],
+        }),
+    };
+}
+/**
+ * Build a call to set / update the off-chain profile anchor
+ * (metadataURI + metadataHash). The walletClient's account MUST
+ * equal `agent` AND the agent must already be registered.
+ */
+export function buildSetProfileMetadataCall(args) {
+    return {
+        to: args.profileResolver,
+        value: 0n,
+        data: encodeFunctionData({
+            abi: agentProfileResolverAbi,
+            functionName: 'setMetadata',
+            args: [args.agent, args.metadataURI, args.metadataHash],
+        }),
+    };
+}
+/** Set a single string property on an agent's profile. */
+export function buildSetProfileStringCall(args) {
+    return {
+        to: args.profileResolver,
+        value: 0n,
+        data: encodeFunctionData({
+            abi: agentProfileResolverAbi,
+            functionName: 'setStringProperty',
+            args: [args.agent, args.predicate, args.value],
+        }),
+    };
+}
+/** Set a single address property on an agent's profile. */
+export function buildSetProfileAddressCall(args) {
+    return {
+        to: args.profileResolver,
+        value: 0n,
+        data: encodeFunctionData({
+            abi: agentProfileResolverAbi,
+            functionName: 'setAddressProperty',
+            args: [args.agent, args.predicate, args.value],
+        }),
+    };
+}
+/** Set a single bytes32 property on an agent's profile. */
+export function buildSetProfileBytes32Call(args) {
+    return {
+        to: args.profileResolver,
+        value: 0n,
+        data: encodeFunctionData({
+            abi: agentProfileResolverAbi,
+            functionName: 'setBytes32Property',
+            args: [args.agent, args.predicate, args.value],
+        }),
+    };
+}
+/** Flip the `atl:profileActive` boolean for an agent. */
+export function buildSetProfileActiveCall(args) {
+    return {
+        to: args.profileResolver,
+        value: 0n,
+        data: encodeFunctionData({
+            abi: agentProfileResolverAbi,
+            functionName: 'setActive',
+            args: [args.agent, args.active],
+        }),
+    };
+}
+//# sourceMappingURL=calls.js.map

package/dist/calls.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"calls.js","sourceRoot":"","sources":["../src/calls.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,kBAAkB,EAAE,MAAM,MAAM,CAAC;AAE1C,OAAO,EAAE,uBAAuB,EAAE,MAAM,QAAQ,CAAC;AASjD,MAAM,YAAY,GAAG,oEAA2E,CAAC;AAEjG;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CAAC,IAOxC;IACC,OAAO;QACL,EAAE,EAAE,IAAI,CAAC,eAAe;QACxB,KAAK,EAAE,EAAE;QACT,IAAI,EAAE,kBAAkB,CAAC;YACvB,GAAG,EAAE,uBAAuB;YAC5B,YAAY,EAAE,UAAU;YACxB,IAAI,EAAE;gBACJ,IAAI,CAAC,KAAK;gBACV,IAAI,CAAC,WAAW,IAAI,EAAE;gBACtB,IAAI,CAAC,WAAW,IAAI,EAAE;gBACtB,IAAI,CAAC,SAAS,IAAI,YAAY;gBAC9B,IAAI,CAAC,gBAAgB,IAAI,EAAE;aAC5B;SACF,CAAC;KACH,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,2BAA2B,CAAC,IAK3C;IACC,OAAO;QACL,EAAE,EAAE,IAAI,CAAC,eAAe;QACxB,KAAK,EAAE,EAAE;QACT,IAAI,EAAE,kBAAkB,CAAC;YACvB,GAAG,EAAE,uBAAuB;YAC5B,YAAY,EAAE,aAAa;YAC3B,IAAI,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,YAAY,CAAC;SACxD,CAAC;KACH,CAAC;AACJ,CAAC;AAED,0DAA0D;AAC1D,MAAM,UAAU,yBAAyB,CAAC,IAKzC;IACC,OAAO;QACL,EAAE,EAAE,IAAI,CAAC,eAAe;QACxB,KAAK,EAAE,EAAE;QACT,IAAI,EAAE,kBAAkB,CAAC;YACvB,GAAG,EAAE,uBAAuB;YAC5B,YAAY,EAAE,mBAAmB;YACjC,IAAI,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC;SAC/C,CAAC;KACH,CAAC;AACJ,CAAC;AAED,2DAA2D;AAC3D,MAAM,UAAU,0BAA0B,CAAC,IAK1C;IACC,OAAO;QACL,EAAE,EAAE,IAAI,CAAC,eAAe;QACxB,KAAK,EAAE,EAAE;QACT,IAAI,EAAE,kBAAkB,CAAC;YACvB,GAAG,EAAE,uBAAuB;YAC5B,YAAY,EAAE,oBAAoB;YAClC,IAAI,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC;SAC/C,CAAC;KACH,CAAC;AACJ,CAAC;AAED,2DAA2D;AAC3D,MAAM,UAAU,0BAA0B,CAAC,IAK1C;IACC,OAAO;QACL,EAAE,EAAE,IAAI,CAAC,eAAe;QACxB,KAAK,EAAE,EAAE;QACT,IAAI,EAAE,kBAAkB,CAAC;YACvB,GAAG,EAAE,uBAAuB;YAC5B,YAAY,EAAE,oBAAoB;YAClC,IAAI,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC;SAC/C,CAAC;KACH,CAAC;AACJ,CAAC;AAED,yDAAyD;AACzD,MAAM,UAAU,yBAAyB,CAAC,IAIzC;IACC,OAAO;QACL,EAAE,EAAE,IAAI,CAAC,eAAe;QACxB,KAAK,EAAE,EAAE;QACT,IAAI,EAAE,kBAAkB,CAAC;YACvB,GAAG,EAAE,uBAAuB;YAC5B,YAAY,EAAE,WAAW;YACzB,IAAI,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC;SAChC,CAAC;KACH,CAAC;AACJ,CAAC"}

package/dist/client.d.ts

@@ -0,0 +1,81 @@
+import { type Address, type Hex, type WalletClient } from 'viem';
+import type { AgentCard, AgentIdentityClientOpts, PublishProfileInput, VerificationMethod } from './types';
+/**
+ * Optional per-call submission context. Required for write methods.
+ */
+export interface WriteContext {
+    walletClient: WalletClient;
+}
+/**
+ * Read + write client for agent identity profiles.
+ *
+ * Phase 2 lands the `fetchProfile` read path against the live
+ * AgentProfileResolver: read `metadata-uri` + `metadata-hash`,
+ * HTTP-fetch the JSON, verify the canonical-JSON content-hash
+ * matches the on-chain anchor (anti-mutation invariant).
+ *
+ * Configuration: `opts.profileResolver` MUST be the deployed
+ * AgentProfileResolver contract address.
+ */
+export interface AgentIdentityClientOptsLive extends AgentIdentityClientOpts {
+    profileResolver: Address;
+    /** Optional fetcher (test injection). Defaults to globalThis.fetch. */
+    fetch?: typeof fetch;
+}
+export declare class AgentIdentityClient {
+    readonly opts: AgentIdentityClientOptsLive;
+    private readonly publicClient;
+    private readonly profileResolver;
+    private readonly fetcher;
+    constructor(opts: AgentIdentityClientOptsLive);
+    /**
+     * Fetch the AgentCard for `agent`:
+     *   1. Read `atl:metadataURI` + `atl:metadataHash` from the
+     *      AgentProfileResolver (on-chain anchor).
+     *   2. HTTP-fetch the JSON at metadataURI.
+     *   3. Compute `profileContentHash(parsed)` over canonical JSON.
+     *   4. Compare against the on-chain hash; throw on mismatch
+     *      (anti-mutation invariant — spec 217 § 6).
+     *
+     * Returns `null` when no profile is published OR the agent has no
+     * `atl:metadataURI` record (treated equivalently — the on-chain
+     * anchor is absent).
+     */
+    fetchProfile(agent: Address): Promise<AgentCard | null>;
+    /**
+     * Verify endpoint control for an MCP server profile. Phase 2
+     * scope: shape-only (caller declares which method). Real
+     * verification (DNS TXT lookup, signed-URL recovery, HTTP
+     * challenge, VP signature) ships in a follow-up.
+     */
+    verifyEndpoint(agent: Address, endpoint: string, methods: VerificationMethod[]): Promise<VerificationMethod | null>;
+    /**
+     * Publish a profile by:
+     *   1. Validating the AgentCard + computing its canonical
+     *      content-hash.
+     *   2. (If `expectedHash` set) asserting it matches our computed
+     *      hash — anti-spoof self-check.
+     *   3. (If agent is not yet registered AND `registerWith` is set)
+     *      calling AgentProfileResolver.register first.
+     *   4. Calling AgentProfileResolver.setMetadata(metadataURI,
+     *      contentHash) to anchor the profile.
+     *
+     * The walletClient's account MUST equal `input.agent` — the
+     * contract enforces `msg.sender == agent`.
+     *
+     * Storage is OUT OF SCOPE for this SDK (per ADR-0007): the caller
+     * uploads the canonical JSON to `metadataURI` BEFORE calling this
+     * method. Use `canonicalProfileJson(input.profile)` to produce the
+     * exact bytes that hash to the on-chain anchor.
+     *
+     * Returns the metadata-set tx hash (the canonical "I've published"
+     * marker). If `register` was called, that tx is awaited first.
+     */
+    publishProfile(input: PublishProfileInput, ctx: WriteContext): Promise<Hex>;
+    /**
+     * Submit a single ContractCall via the bound walletClient. Uses
+     * explicit nonce fetch + retry on "replacement underpriced".
+     */
+    private _submit;
+}
+//# sourceMappingURL=client.d.ts.map

package/dist/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA,OAAO,EAA8C,KAAK,OAAO,EAAE,KAAK,GAAG,EAAqB,KAAK,YAAY,EAAE,MAAM,MAAM,CAAC;AAQhI,OAAO,KAAK,EACV,SAAS,EACT,uBAAuB,EACvB,mBAAmB,EACnB,kBAAkB,EACnB,MAAM,SAAS,CAAC;AAEjB;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,YAAY,EAAE,YAAY,CAAC;CAC5B;AAMD;;;;;;;;;;GAUG;AACH,MAAM,WAAW,2BAA4B,SAAQ,uBAAuB;IAC1E,eAAe,EAAE,OAAO,CAAC;IACzB,uEAAuE;IACvE,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;CACtB;AAED,qBAAa,mBAAmB;IAKlB,QAAQ,CAAC,IAAI,EAAE,2BAA2B;IAJtD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAe;IAC5C,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAU;IAC1C,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAe;gBAElB,IAAI,EAAE,2BAA2B;IAetD;;;;;;;;;;;;OAYG;IACG,YAAY,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC;IAiC7D;;;;;OAKG;IACG,cAAc,CAClB,KAAK,EAAE,OAAO,EACd,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,kBAAkB,EAAE,GAC5B,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC;IAYrC;;;;;;;;;;;;;;;;;;;;;OAqBG;IACG,cAAc,CAAC,KAAK,EAAE,mBAAmB,EAAE,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC;IAiDjF;;;OAGG;YACW,OAAO;CAiCtB"}

package/dist/client.js

@@ -0,0 +1,200 @@
+import { createPublicClient, http, keccak256, toHex } from 'viem';
+import { agentProfileResolverAbi } from './abis';
+import { profileContentHash, canonicalProfileJson } from './profile';
+import { ProfileHashMismatchError } from './errors';
+import { buildRegisterProfileCall, buildSetProfileMetadataCall, } from './calls';
+const ZERO_NODE = '0x0000000000000000000000000000000000000000000000000000000000000000';
+const ATL_METADATA_URI = keccak256(toHex('atl:metadataURI'));
+const ATL_METADATA_HASH = keccak256(toHex('atl:metadataHash'));
+export class AgentIdentityClient {
+    opts;
+    publicClient;
+    profileResolver;
+    fetcher;
+    constructor(opts) {
+        this.opts = opts;
+        if (!opts.rpcUrl)
+            throw new Error('[agent-profile] rpcUrl required');
+        if (typeof opts.chainId !== 'number') {
+            throw new Error('[agent-profile] chainId required');
+        }
+        if (!opts.profileResolver) {
+            throw new Error('[agent-profile] profileResolver address required');
+        }
+        this.publicClient = createPublicClient({ transport: http(opts.rpcUrl) });
+        this.profileResolver = opts.profileResolver;
+        this.fetcher = opts.fetch ?? globalThis.fetch.bind(globalThis);
+    }
+    // ─── Reads (Phase 2 — live) ─────────────────────────────────────
+    /**
+     * Fetch the AgentCard for `agent`:
+     *   1. Read `atl:metadataURI` + `atl:metadataHash` from the
+     *      AgentProfileResolver (on-chain anchor).
+     *   2. HTTP-fetch the JSON at metadataURI.
+     *   3. Compute `profileContentHash(parsed)` over canonical JSON.
+     *   4. Compare against the on-chain hash; throw on mismatch
+     *      (anti-mutation invariant — spec 217 § 6).
+     *
+     * Returns `null` when no profile is published OR the agent has no
+     * `atl:metadataURI` record (treated equivalently — the on-chain
+     * anchor is absent).
+     */
+    async fetchProfile(agent) {
+        const [uri, anchorHash] = await Promise.all([
+            this.publicClient.readContract({
+                address: this.profileResolver,
+                abi: agentProfileResolverAbi,
+                functionName: 'getStringProperty',
+                args: [agent, ATL_METADATA_URI],
+            }),
+            this.publicClient.readContract({
+                address: this.profileResolver,
+                abi: agentProfileResolverAbi,
+                functionName: 'getBytes32Property',
+                args: [agent, ATL_METADATA_HASH],
+            }),
+        ]);
+        if (!uri || uri === '')
+            return null;
+        const response = await this.fetcher(uri);
+        if (!response.ok) {
+            throw new Error(`[agent-profile] failed to fetch profile JSON: HTTP ${response.status}`);
+        }
+        const body = await response.text();
+        const parsed = JSON.parse(body);
+        // Round-trip via our canonical serializer to validate shape AND
+        // produce the canonical content hash to compare against the anchor.
+        const canonical = canonicalProfileJson(parsed);
+        void canonical; // forces validation
+        const computed = profileContentHash(parsed);
+        if (anchorHash !== ZERO_NODE && computed !== anchorHash) {
+            throw new ProfileHashMismatchError(anchorHash, computed);
+        }
+        return parsed;
+    }
+    /**
+     * Verify endpoint control for an MCP server profile. Phase 2
+     * scope: shape-only (caller declares which method). Real
+     * verification (DNS TXT lookup, signed-URL recovery, HTTP
+     * challenge, VP signature) ships in a follow-up.
+     */
+    async verifyEndpoint(agent, endpoint, methods) {
+        void agent;
+        void endpoint;
+        void methods;
+        throw new Error('I Phase 2.5 — endpoint verification ships separately; ' +
+            'wire DNS-TXT / signed-URL / HTTP-challenge / VP after Phase 2 lands');
+    }
+    // ─── Writes (Phase 4 — live) ─────────────────────────────────────
+    /**
+     * Publish a profile by:
+     *   1. Validating the AgentCard + computing its canonical
+     *      content-hash.
+     *   2. (If `expectedHash` set) asserting it matches our computed
+     *      hash — anti-spoof self-check.
+     *   3. (If agent is not yet registered AND `registerWith` is set)
+     *      calling AgentProfileResolver.register first.
+     *   4. Calling AgentProfileResolver.setMetadata(metadataURI,
+     *      contentHash) to anchor the profile.
+     *
+     * The walletClient's account MUST equal `input.agent` — the
+     * contract enforces `msg.sender == agent`.
+     *
+     * Storage is OUT OF SCOPE for this SDK (per ADR-0007): the caller
+     * uploads the canonical JSON to `metadataURI` BEFORE calling this
+     * method. Use `canonicalProfileJson(input.profile)` to produce the
+     * exact bytes that hash to the on-chain anchor.
+     *
+     * Returns the metadata-set tx hash (the canonical "I've published"
+     * marker). If `register` was called, that tx is awaited first.
+     */
+    async publishProfile(input, ctx) {
+        // Validate + compute hash.
+        canonicalProfileJson(input.profile); // throws on invalid shape
+        const computed = profileContentHash(input.profile);
+        if (input.expectedHash && input.expectedHash.toLowerCase() !== computed.toLowerCase()) {
+            throw new ProfileHashMismatchError(input.expectedHash, computed);
+        }
+        // Register first if needed.
+        const isRegistered = await this.publicClient.readContract({
+            address: this.profileResolver,
+            abi: agentProfileResolverAbi,
+            functionName: 'isRegistered',
+            args: [input.agent],
+        });
+        if (!isRegistered) {
+            const registerCall = buildRegisterProfileCall({
+                profileResolver: this.profileResolver,
+                agent: input.agent,
+                displayName: input.registerWith?.displayName,
+                description: input.registerWith?.description,
+                agentKind: input.registerWith?.agentKind,
+                profileSchemaURI: input.registerWith?.profileSchemaURI,
+            });
+            await this._submit(ctx, registerCall);
+            // Base Sepolia uses a load-balanced RPC pool; the next read
+            // can hit a node that hasn't yet observed our register tx.
+            // Poll isRegistered until true (cap at 10×2 s = 20 s) so the
+            // subsequent setMetadata simulation sees the new state.
+            for (let i = 0; i < 10; i++) {
+                const ok = await this.publicClient.readContract({
+                    address: this.profileResolver,
+                    abi: agentProfileResolverAbi,
+                    functionName: 'isRegistered',
+                    args: [input.agent],
+                });
+                if (ok)
+                    break;
+                await new Promise((r) => setTimeout(r, 2000));
+            }
+        }
+        // Set the metadata anchor.
+        const setCall = buildSetProfileMetadataCall({
+            profileResolver: this.profileResolver,
+            agent: input.agent,
+            metadataURI: input.metadataURI,
+            metadataHash: computed,
+        });
+        return await this._submit(ctx, setCall);
+    }
+    /**
+     * Submit a single ContractCall via the bound walletClient. Uses
+     * explicit nonce fetch + retry on "replacement underpriced".
+     */
+    async _submit(ctx, call) {
+        const { walletClient } = ctx;
+        const account = walletClient.account;
+        if (!account)
+            throw new Error('[agent-profile] walletClient has no account');
+        let lastErr;
+        for (let attempt = 0; attempt < 3; attempt++) {
+            try {
+                const nonce = await this.publicClient.getTransactionCount({
+                    address: account.address,
+                    blockTag: 'pending',
+                });
+                const hash = await walletClient.sendTransaction({
+                    to: call.to,
+                    value: call.value,
+                    data: call.data,
+                    nonce,
+                    account: walletClient.account,
+                    chain: walletClient.chain ?? null,
+                });
+                await this.publicClient.waitForTransactionReceipt({ hash });
+                return hash;
+            }
+            catch (err) {
+                lastErr = err;
+                const msg = err.message ?? '';
+                if (msg.includes('replacement') || msg.includes('underpriced')) {
+                    await new Promise((r) => setTimeout(r, 2000));
+                    continue;
+                }
+                throw err;
+            }
+        }
+        throw lastErr instanceof Error ? lastErr : new Error('[agent-profile] _submit: exceeded retries');
+    }
+}
+//# sourceMappingURL=client.js.map

package/dist/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAgE,MAAM,MAAM,CAAC;AAChI,OAAO,EAAE,uBAAuB,EAAE,MAAM,QAAQ,CAAC;AACjD,OAAO,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AACrE,OAAO,EAAE,wBAAwB,EAAE,MAAM,UAAU,CAAC;AACpD,OAAO,EACL,wBAAwB,EACxB,2BAA2B,GAC5B,MAAM,SAAS,CAAC;AAejB,MAAM,SAAS,GAAG,oEAA6E,CAAC;AAChG,MAAM,gBAAgB,GAAI,SAAS,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC;AAC9D,MAAM,iBAAiB,GAAG,SAAS,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC;AAmB/D,MAAM,OAAO,mBAAmB;IAKT;IAJJ,YAAY,CAAe;IAC3B,eAAe,CAAU;IACzB,OAAO,CAAe;IAEvC,YAAqB,IAAiC;QAAjC,SAAI,GAAJ,IAAI,CAA6B;QACpD,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACrE,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YACrC,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;QACtD,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;QACtE,CAAC;QACD,IAAI,CAAC,YAAY,GAAG,kBAAkB,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACzE,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,eAAe,CAAC;QAC5C,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACjE,CAAC;IAED,mEAAmE;IAEnE;;;;;;;;;;;;OAYG;IACH,KAAK,CAAC,YAAY,CAAC,KAAc;QAC/B,MAAM,CAAC,GAAG,EAAE,UAAU,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAC1C,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC;gBAC7B,OAAO,EAAE,IAAI,CAAC,eAAe;gBAC7B,GAAG,EAAE,uBAAuB;gBAC5B,YAAY,EAAE,mBAAmB;gBACjC,IAAI,EAAE,CAAC,KAAK,EAAE,gBAAgB,CAAC;aAChC,CAAC;YACF,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC;gBAC7B,OAAO,EAAE,IAAI,CAAC,eAAe;gBAC7B,GAAG,EAAE,uBAAuB;gBAC5B,YAAY,EAAE,oBAAoB;gBAClC,IAAI,EAAE,CAAC,KAAK,EAAE,iBAAiB,CAAC;aACjC,CAAC;SACH,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,IAAI,GAAG,KAAK,EAAE;YAAE,OAAO,IAAI,CAAC;QACpC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACzC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,sDAAsD,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QAC3F,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAc,CAAC;QAC7C,gEAAgE;QAChE,oEAAoE;QACpE,MAAM,SAAS,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC;QAC/C,KAAK,SAAS,CAAC,CAAC,oBAAoB;QACpC,MAAM,QAAQ,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;QAC5C,IAAI,UAAU,KAAK,SAAS,IAAI,QAAQ,KAAK,UAAU,EAAE,CAAC;YACxD,MAAM,IAAI,wBAAwB,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QAC3D,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,cAAc,CAClB,KAAc,EACd,QAAgB,EAChB,OAA6B;QAE7B,KAAK,KAAK,CAAC;QACX,KAAK,QAAQ,CAAC;QACd,KAAK,OAAO,CAAC;QACb,MAAM,IAAI,KAAK,CACb,wDAAwD;YACtD,qEAAqE,CACxE,CAAC;IACJ,CAAC;IAED,oEAAoE;IAEpE;;;;;;;;;;;;;;;;;;;;;OAqBG;IACH,KAAK,CAAC,cAAc,CAAC,KAA0B,EAAE,GAAiB;QAChE,2BAA2B;QAC3B,oBAAoB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,0BAA0B;QAC/D,MAAM,QAAQ,GAAG,kBAAkB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACnD,IAAI,KAAK,CAAC,YAAY,IAAI,KAAK,CAAC,YAAY,CAAC,WAAW,EAAE,KAAK,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC;YACtF,MAAM,IAAI,wBAAwB,CAAC,KAAK,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;QACnE,CAAC;QACD,4BAA4B;QAC5B,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC;YACxD,OAAO,EAAE,IAAI,CAAC,eAAe;YAC7B,GAAG,EAAE,uBAAuB;YAC5B,YAAY,EAAE,cAAc;YAC5B,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC;SACpB,CAAC,CAAC;QACH,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,MAAM,YAAY,GAAG,wBAAwB,CAAC;gBAC5C,eAAe,EAAE,IAAI,CAAC,eAAe;gBACrC,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,WAAW,EAAE,KAAK,CAAC,YAAY,EAAE,WAAW;gBAC5C,WAAW,EAAE,KAAK,CAAC,YAAY,EAAE,WAAW;gBAC5C,SAAS,EAAE,KAAK,CAAC,YAAY,EAAE,SAAS;gBACxC,gBAAgB,EAAE,KAAK,CAAC,YAAY,EAAE,gBAAgB;aACvD,CAAC,CAAC;YACH,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;YACtC,4DAA4D;YAC5D,2DAA2D;YAC3D,6DAA6D;YAC7D,wDAAwD;YACxD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC5B,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC;oBAC9C,OAAO,EAAE,IAAI,CAAC,eAAe;oBAC7B,GAAG,EAAE,uBAAuB;oBAC5B,YAAY,EAAE,cAAc;oBAC5B,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC;iBACpB,CAAC,CAAC;gBACH,IAAI,EAAE;oBAAE,MAAM;gBACd,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;YAChD,CAAC;QACH,CAAC;QACD,2BAA2B;QAC3B,MAAM,OAAO,GAAG,2BAA2B,CAAC;YAC1C,eAAe,EAAE,IAAI,CAAC,eAAe;YACrC,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,YAAY,EAAE,QAAQ;SACvB,CAAC,CAAC;QACH,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAC1C,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,OAAO,CAAC,GAAiB,EAAE,IAA+C;QACtF,MAAM,EAAE,YAAY,EAAE,GAAG,GAAG,CAAC;QAC7B,MAAM,OAAO,GAAI,YAAmD,CAAC,OAAO,CAAC;QAC7E,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;QAC7E,IAAI,OAAgB,CAAC;QACrB,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC;YAC7C,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,mBAAmB,CAAC;oBACxD,OAAO,EAAE,OAAO,CAAC,OAAO;oBACxB,QAAQ,EAAE,SAAS;iBACpB,CAAC,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,eAAe,CAAC;oBAC9C,EAAE,EAAE,IAAI,CAAC,EAAE;oBACX,KAAK,EAAE,IAAI,CAAC,KAAK;oBACjB,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,KAAK;oBACL,OAAO,EAAE,YAAY,CAAC,OAAQ;oBAC9B,KAAK,EAAE,YAAY,CAAC,KAAK,IAAI,IAAI;iBAClC,CAAC,CAAC;gBACH,MAAM,IAAI,CAAC,YAAY,CAAC,yBAAyB,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC5D,OAAO,IAAI,CAAC;YACd,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,GAAG,GAAG,CAAC;gBACd,MAAM,GAAG,GAAI,GAAa,CAAC,OAAO,IAAI,EAAE,CAAC;gBACzC,IAAI,GAAG,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;oBAC/D,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;oBAC9C,SAAS;gBACX,CAAC;gBACD,MAAM,GAAG,CAAC;YACZ,CAAC;QACH,CAAC;QACD,MAAM,OAAO,YAAY,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IACpG,CAAC;CACF"}

package/dist/constants.d.ts

@@ -0,0 +1,30 @@
+import { type Hex } from 'viem';
+/**
+ * `authOrigin` profile predicate (spec 229 §4). A person agent declares
+ * **where its central auth lives** (the origin holding its ROOT credential)
+ * as an on-chain string property: `getStringProperty(agent, AUTH_ORIGIN)` → e.g.
+ * `"https://<handle>.<connect-domain>"`. The concrete domain is a deployment
+ * concern owned by the consuming app, never this package (see the
+ * "no deployment-domain code in packages" rule in the root CLAUDE.md).
+ *
+ * Relying sites resolve `name → agent → authOrigin` as a SINGLE read
+ * (ADR-0013, one mechanism). An UNSET facet is an *answer*, not a trigger to
+ * try a second lookup — it resolves to the relying site's configured platform
+ * default origin (a pure constant). Predicate = `keccak256("authOrigin")`.
+ */
+export declare const AUTH_ORIGIN: Hex;
+/**
+ * Phase 1 CAIP-10 namespace allowlist. Per ADR-0008 the encoder is
+ * strict (validate-at-write); the decoder is permissive
+ * (forward-compatible). Expand this list when a concrete consumer
+ * needs cross-resolver interop with a new chain family — PR + golden
+ * vector test required.
+ */
+export declare const CAIP10_NAMESPACE_ALLOWLIST: ReadonlySet<string>;
+/**
+ * AgentCard schema version. Bump on any breaking change to the typed
+ * profile shape; canonical-JSON content-hash incorporates this field
+ * so old + new profiles never collide.
+ */
+export declare const AGENT_CARD_SCHEMA_VERSION: 1;
+//# sourceMappingURL=constants.d.ts.map

package/dist/constants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":"AAAA,OAAO,EAAoB,KAAK,GAAG,EAAE,MAAM,MAAM,CAAC;AAElD;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,WAAW,EAAE,GAAoC,CAAC;AAE/D;;;;;;GAMG;AACH,eAAO,MAAM,0BAA0B,EAAE,WAAW,CAAC,MAAM,CAIzD,CAAC;AAEH;;;;GAIG;AACH,eAAO,MAAM,yBAAyB,EAAG,CAAU,CAAC"}

package/dist/constants.js

@@ -0,0 +1,34 @@
+import { keccak256, toHex } from 'viem';
+/**
+ * `authOrigin` profile predicate (spec 229 §4). A person agent declares
+ * **where its central auth lives** (the origin holding its ROOT credential)
+ * as an on-chain string property: `getStringProperty(agent, AUTH_ORIGIN)` → e.g.
+ * `"https://<handle>.<connect-domain>"`. The concrete domain is a deployment
+ * concern owned by the consuming app, never this package (see the
+ * "no deployment-domain code in packages" rule in the root CLAUDE.md).
+ *
+ * Relying sites resolve `name → agent → authOrigin` as a SINGLE read
+ * (ADR-0013, one mechanism). An UNSET facet is an *answer*, not a trigger to
+ * try a second lookup — it resolves to the relying site's configured platform
+ * default origin (a pure constant). Predicate = `keccak256("authOrigin")`.
+ */
+export const AUTH_ORIGIN = keccak256(toHex('authOrigin'));
+/**
+ * Phase 1 CAIP-10 namespace allowlist. Per ADR-0008 the encoder is
+ * strict (validate-at-write); the decoder is permissive
+ * (forward-compatible). Expand this list when a concrete consumer
+ * needs cross-resolver interop with a new chain family — PR + golden
+ * vector test required.
+ */
+export const CAIP10_NAMESPACE_ALLOWLIST = new Set([
+    'eip155', // EVM chains
+    'hedera', // Hedera Hashgraph
+    'solana', // Solana
+]);
+/**
+ * AgentCard schema version. Bump on any breaking change to the typed
+ * profile shape; canonical-JSON content-hash incorporates this field
+ * so old + new profiles never collide.
+ */
+export const AGENT_CARD_SCHEMA_VERSION = 1;
+//# sourceMappingURL=constants.js.map

package/dist/constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,KAAK,EAAY,MAAM,MAAM,CAAC;AAElD;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,WAAW,GAAQ,SAAS,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC;AAE/D;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAwB,IAAI,GAAG,CAAC;IACrE,QAAQ,EAAE,aAAa;IACvB,QAAQ,EAAE,mBAAmB;IAC7B,QAAQ,EAAE,SAAS;CACpB,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAU,CAAC"}

package/dist/errors.d.ts

@@ -0,0 +1,22 @@
+export declare class InvalidProfileError extends Error {
+    readonly reason: string;
+    readonly field?: string | undefined;
+    constructor(reason: string, field?: string | undefined);
+}
+export declare class ProfileHashMismatchError extends Error {
+    readonly expected: string;
+    readonly actual: string;
+    constructor(expected: string, actual: string);
+}
+export declare class EndpointVerificationError extends Error {
+    readonly method: string;
+    readonly endpoint: string;
+    readonly reason: string;
+    constructor(method: string, endpoint: string, reason: string);
+}
+export declare class InvalidCaip10Error extends Error {
+    readonly value: string;
+    readonly reason: string;
+    constructor(value: string, reason: string);
+}
+//# sourceMappingURL=errors.d.ts.map

package/dist/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA,qBAAa,mBAAoB,SAAQ,KAAK;IAChC,QAAQ,CAAC,MAAM,EAAE,MAAM;IAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM;gBAAvC,MAAM,EAAE,MAAM,EAAW,KAAK,CAAC,EAAE,MAAM,YAAA;CAO7D;AAED,qBAAa,wBAAyB,SAAQ,KAAK;IACrC,QAAQ,CAAC,QAAQ,EAAE,MAAM;IAAE,QAAQ,CAAC,MAAM,EAAE,MAAM;gBAAzC,QAAQ,EAAE,MAAM,EAAW,MAAM,EAAE,MAAM;CAM/D;AAED,qBAAa,yBAA0B,SAAQ,KAAK;IACtC,QAAQ,CAAC,MAAM,EAAE,MAAM;IAAE,QAAQ,CAAC,QAAQ,EAAE,MAAM;IAAE,QAAQ,CAAC,MAAM,EAAE,MAAM;gBAAlE,MAAM,EAAE,MAAM,EAAW,QAAQ,EAAE,MAAM,EAAW,MAAM,EAAE,MAAM;CAIxF;AAED,qBAAa,kBAAmB,SAAQ,KAAK;IAC/B,QAAQ,CAAC,KAAK,EAAE,MAAM;IAAE,QAAQ,CAAC,MAAM,EAAE,MAAM;gBAAtC,KAAK,EAAE,MAAM,EAAW,MAAM,EAAE,MAAM;CAI5D"}