@agenticprimitives/agent-profile 1.0.0-alpha.21 → 1.0.0-alpha.23

package/dist/a2a/field-binding.js

@@ -0,0 +1,242 @@
+/**
+ * Field provenance (spec 347 §4.3; ADR-0062 §4): inherit the card base, curate with recorded overrides,
+ * detect when an inherited source moved under a draft. PURE — the clock is an input.
+ *
+ * Sources are STRUCTURAL (no package import): `surfaceCards` is shaped like `surface-catalog`'s
+ * `toCardProjectionSet(...)` output, `publicSkillCandidates` like `capability-claims`'
+ * `A2aAgentSkillDescriptor`. surface-catalog remains the only generator of inherited interface/skill
+ * fields; capability claims add PUBLIC skills with their own provenance.
+ */
+import { cardContentDigest, jcsDigest } from './canonical.js';
+import { getAtPointer, joinPointer, setAtPointer } from './pointer.js';
+const DEFAULT_MODES = ['text/plain', 'application/json'];
+/** Generate the card base from canonical sources. Every field carries an `inherit` or `computed` binding. */
+export function inheritCardBase(input) {
+    const b = {};
+    const bind = (pointer, mode, kind, ref) => {
+        b[pointer] = { pointer, mode, source: ref ? { kind, ref } : { kind }, state: 'fresh', updatedAt: input.now };
+    };
+    const profileName = input.profile.displayName;
+    const name = input.names?.primary ?? profileName ?? 'agent';
+    bind('/name', 'inherit', input.names?.primary ? 'agent-naming' : 'agent-profile');
+    const description = input.profile.description ?? `A2A endpoint for ${name}.`;
+    bind('/description', input.profile.description ? 'inherit' : 'computed', 'agent-profile');
+    const protocolVersion = input.protocolVersion ?? '1.0';
+    bind('/protocolVersion', 'computed', 'runtime');
+    const version = input.agentVersion ?? '0.1.0';
+    bind('/version', input.agentVersion ? 'inherit' : 'computed', 'deployment');
+    const card = {
+        protocolVersion,
+        name,
+        description,
+        version,
+        supportedInterfaces: [],
+        capabilities: {},
+        defaultInputModes: input.mediaModes?.input ?? DEFAULT_MODES.slice(),
+        defaultOutputModes: input.mediaModes?.output ?? DEFAULT_MODES.slice(),
+        skills: [],
+    };
+    bind('/defaultInputModes', input.mediaModes?.input ? 'inherit' : 'computed', input.mediaModes?.input ? 'surface-catalog' : 'runtime');
+    bind('/defaultOutputModes', input.mediaModes?.output ? 'inherit' : 'computed', input.mediaModes?.output ? 'surface-catalog' : 'runtime');
+    const providerUrl = input.deployment.provider?.url ?? input.profile.homepage ?? input.deployment.host;
+    const providerOrg = input.deployment.provider?.organization ?? profileName;
+    if (providerOrg && providerUrl) {
+        card.provider = { organization: providerOrg, url: providerUrl };
+        bind('/provider', 'inherit', input.deployment.provider ? 'deployment' : 'agent-profile');
+    }
+    const docUrl = input.deployment.documentationUrl ?? input.profile.homepage;
+    if (docUrl) {
+        card.documentationUrl = docUrl;
+        bind('/documentationUrl', 'inherit', input.deployment.documentationUrl ? 'deployment' : 'agent-profile');
+    }
+    if (input.profile.avatar) {
+        card.iconUrl = input.profile.avatar;
+        bind('/iconUrl', 'inherit', 'agent-profile');
+    }
+    if (input.surfaceInterfaces && input.surfaceInterfaces.length > 0) {
+        card.supportedInterfaces = input.surfaceInterfaces.map((i) => ({ ...i }));
+        bind('/supportedInterfaces', 'inherit', 'surface-catalog');
+    }
+    else {
+        card.supportedInterfaces = [{ url: input.deployment.a2aUrl, protocolBinding: input.deployment.protocolBinding ?? 'JSONRPC' }];
+        bind('/supportedInterfaces', 'computed', 'deployment');
+    }
+    // `card.capabilities` is A2A's PROTOCOL flags, not what the agent can do (that is `card.skills`, fed
+    // from `profile.capabilities` below). Two sources feed it, and the precedence is not arbitrary:
+    // RUNTIME EVIDENCE WINS. `profile.protocolFeatures` is the owner's declaration and fills only what the
+    // runtime did not report — a declaration must never overrule what the runtime says it implements,
+    // because `pushNotifications` in particular is derived, and claiming it without evidence is
+    // CAPABILITY_UNVERIFIED (ADR-0059). Absent both, every flag is false rather than omitted: silence here
+    // reads as "no", which is the honest default for a capability claim.
+    const rc = input.runtimeCapabilities;
+    const pf = input.profile.protocolFeatures;
+    const flag = (k) => rc?.[k] ?? pf?.[k] ?? false;
+    const extendedAgentCard = rc?.extendedAgentCard ?? pf?.extendedAgentCard;
+    const extensions = rc?.extensions ?? pf?.extensions;
+    card.capabilities = {
+        streaming: flag('streaming'),
+        pushNotifications: flag('pushNotifications'),
+        stateTransitionHistory: flag('stateTransitionHistory'),
+        ...(extendedAgentCard !== undefined ? { extendedAgentCard } : {}),
+        ...(extensions ? { extensions: extensions.map((e) => ({ ...e })) } : {}),
+    };
+    bind('/capabilities', rc || pf ? 'inherit' : 'computed', rc ? 'runtime' : pf ? 'agent-profile' : 'runtime');
+    // `card.skills` is the WIRE NAME for advertised capabilities. This projector is the only writer of it,
+    // and `profile.capabilities` is now the system of record — the card used to be the only place these
+    // lived, which made a signed wire document the source of truth for a fact the owner should own.
+    //
+    // Three sources, in precedence order, first id wins:
+    //   1. profile.capabilities  — what the owner declared
+    //   2. surface-catalog       — public surfaces the runtime actually serves but the profile omits
+    //   3. capability-claims     — eligible public claims not covered above
+    // Later sources only ADD ids; they never restate one the profile already describes, so editing the
+    // profile is always what changes the card.
+    const toSkill = (c) => ({
+        id: c.id,
+        name: c.name,
+        description: c.description,
+        tags: c.tags.slice(),
+        ...(c.examples ? { examples: c.examples.slice() } : {}),
+        ...(c.inputModes ? { inputModes: c.inputModes.slice() } : {}),
+        ...(c.outputModes ? { outputModes: c.outputModes.slice() } : {}),
+    });
+    const profileCaps = input.profile.capabilities ?? [];
+    const skills = profileCaps.map(toSkill);
+    bind('/skills', 'inherit', profileCaps.length > 0 ? 'agent-profile' : 'surface-catalog');
+    const seen = new Set(skills.map((s) => s.id));
+    for (const [i] of profileCaps.entries())
+        bind(joinPointer('skills', i), 'inherit', 'agent-profile', profileCaps[i].id);
+    for (const s2 of input.surfaceCards.public) {
+        if (seen.has(s2.id))
+            continue;
+        seen.add(s2.id);
+        const idx = skills.length;
+        skills.push({ id: s2.id, name: s2.name, description: s2.description ?? s2.name, tags: [] });
+        bind(joinPointer('skills', idx), 'inherit', 'surface-catalog', s2.id);
+    }
+    for (const cand of input.publicSkillCandidates ?? []) {
+        if (seen.has(cand.id))
+            continue;
+        seen.add(cand.id);
+        const idx = skills.length;
+        skills.push(toSkill(cand));
+        bind(joinPointer('skills', idx), 'inherit', 'capability-claims', cand.id);
+    }
+    card.skills = skills;
+    return { card, fieldBindings: b, snapshotDigest: cardContentDigest(card) };
+}
+/** Start a draft from an inherited base. */
+export function draftFromBase(base, opts) {
+    const revision = opts.revision ?? 1;
+    const draft = {
+        cardResourceId: opts.cardResourceId,
+        revision,
+        state: 'draft',
+        card: base.card,
+        fieldBindings: base.fieldBindings,
+        extendedCardPolicies: [],
+        sourceSnapshotDigest: base.snapshotDigest,
+        etag: '',
+        updatedAt: opts.now,
+        ...(opts.basedOnReleaseId ? { basedOnReleaseId: opts.basedOnReleaseId } : {}),
+    };
+    return { ...draft, etag: draftEtag(draft) };
+}
+/** Opaque optimistic-concurrency token: digest of card + bindings + revision. */
+export function draftEtag(d) {
+    return jcsDigest({ card: d.card, fieldBindings: d.fieldBindings, revision: d.revision, policies: d.extendedCardPolicies }).slice(7, 39);
+}
+/**
+ * Curate one field. Returns a NEW draft (revision+1) with an `override` binding at `pointer` that remembers
+ * the digest of the value it replaced. Nothing is mutated. `value === undefined` removes the field.
+ */
+export function applyOverride(draft, pointer, value, opts) {
+    const previous = getAtPointer(draft.card, pointer);
+    const card = setAtPointer(draft.card, pointer, value);
+    const existing = draft.fieldBindings[pointer];
+    const binding = {
+        pointer,
+        mode: 'override',
+        source: opts.source ?? { kind: 'user' },
+        ...(opts.evidence ? { evidence: opts.evidence } : {}),
+        state: 'fresh',
+        updatedAt: opts.now,
+        // Keep the ORIGINAL inherited value's digest across repeated overrides of the same field.
+        baseDigest: existing?.mode === 'override' && existing.baseDigest ? existing.baseDigest : jcsDigest(previous ?? null),
+    };
+    const next = {
+        ...draft,
+        revision: draft.revision + 1,
+        state: 'draft',
+        card,
+        fieldBindings: { ...draft.fieldBindings, [pointer]: binding },
+        updatedAt: opts.now,
+    };
+    return { ...next, etag: draftEtag(next) };
+}
+/**
+ * Compare a draft against a freshly inherited base. Published releases are never touched; the draft's
+ * bindings become `stale` (inherited value moved) or `conflict` (base moved under an override). The
+ * editor then shows old / new / effective and the user accepts, retains, or revises.
+ */
+export function detectStale(draft, freshBase) {
+    const stale = [];
+    const conflict = [];
+    const bindings = {};
+    for (const [pointer, binding] of Object.entries(draft.fieldBindings)) {
+        const fresh = getAtPointer(freshBase.card, pointer);
+        const freshDigest = jcsDigest(fresh ?? null);
+        if (binding.mode === 'override') {
+            if (binding.baseDigest && binding.baseDigest !== freshDigest) {
+                conflict.push(pointer);
+                bindings[pointer] = { ...binding, state: 'conflict' };
+            }
+            else
+                bindings[pointer] = binding;
+            continue;
+        }
+        if (binding.mode === 'manual') {
+            bindings[pointer] = binding;
+            continue;
+        }
+        const current = getAtPointer(draft.card, pointer);
+        if (jcsDigest(current ?? null) !== freshDigest) {
+            stale.push(pointer);
+            bindings[pointer] = { ...binding, state: 'stale' };
+        }
+        else
+            bindings[pointer] = binding.state === 'stale' ? { ...binding, state: 'fresh' } : binding;
+    }
+    const anyStale = stale.length > 0 || conflict.length > 0;
+    const next = {
+        ...draft,
+        fieldBindings: bindings,
+        state: anyStale ? 'stale' : draft.state === 'stale' ? 'draft' : draft.state,
+    };
+    return { stale, conflict, draft: { ...next, etag: draftEtag(next) } };
+}
+/** Accept the fresh inherited value for one stale pointer (binding back to `inherit`, state `fresh`). */
+export function acceptInherited(draft, pointer, freshBase, now) {
+    const freshBinding = freshBase.fieldBindings[pointer];
+    const value = getAtPointer(freshBase.card, pointer);
+    const prefix = `${pointer}/`;
+    // Accepting a container replaces its per-item bindings (`/skills/3`) with the fresh base's — positional
+    // pointers below the accepted value are meaningless once the value itself changed.
+    const kept = Object.fromEntries(Object.entries(draft.fieldBindings).filter(([p]) => p !== pointer && !p.startsWith(prefix)));
+    const below = Object.fromEntries(Object.entries(freshBase.fieldBindings)
+        .filter(([p]) => p.startsWith(prefix))
+        .map(([p, b]) => [p, { ...b, updatedAt: now }]));
+    const next = {
+        ...draft,
+        revision: draft.revision + 1,
+        card: setAtPointer(draft.card, pointer, value),
+        fieldBindings: {
+            ...kept,
+            ...below,
+            [pointer]: freshBinding ? { ...freshBinding, updatedAt: now } : { pointer, mode: 'inherit', source: { kind: 'import' }, state: 'fresh', updatedAt: now },
+        },
+        updatedAt: now,
+    };
+    return { ...next, etag: draftEtag(next) };
+}
+//# sourceMappingURL=field-binding.js.map

package/dist/a2a/field-binding.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"field-binding.js","sourceRoot":"","sources":["../../src/a2a/field-binding.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH,OAAO,EAAE,iBAAiB,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAC9D,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AA8EvE,MAAM,aAAa,GAAG,CAAC,YAAY,EAAE,kBAAkB,CAAC,CAAC;AAEzD,6GAA6G;AAC7G,MAAM,UAAU,eAAe,CAAC,KAA2B;IACzD,MAAM,CAAC,GAAmC,EAAE,CAAC;IAC7C,MAAM,IAAI,GAAG,CAAC,OAAe,EAAE,IAA4B,EAAE,IAA4B,EAAE,GAAY,EAAQ,EAAE;QAC/G,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC;IAC/G,CAAC,CAAC;IACF,MAAM,WAAW,GAAG,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC;IAC9C,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,EAAE,OAAO,IAAI,WAAW,IAAI,OAAO,CAAC;IAC5D,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;IAClF,MAAM,WAAW,GAAG,KAAK,CAAC,OAAO,CAAC,WAAW,IAAI,oBAAoB,IAAI,GAAG,CAAC;IAC7E,IAAI,CAAC,cAAc,EAAE,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC;IAC1F,MAAM,eAAe,GAAG,KAAK,CAAC,eAAe,IAAI,KAAK,CAAC;IACvD,IAAI,CAAC,kBAAkB,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC;IAChD,MAAM,OAAO,GAAG,KAAK,CAAC,YAAY,IAAI,OAAO,CAAC;IAC9C,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;IAE5E,MAAM,IAAI,GAAmB;QAC3B,eAAe;QACf,IAAI;QACJ,WAAW;QACX,OAAO;QACP,mBAAmB,EAAE,EAAE;QACvB,YAAY,EAAE,EAAE;QAChB,iBAAiB,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,IAAI,aAAa,CAAC,KAAK,EAAE;QACnE,kBAAkB,EAAE,KAAK,CAAC,UAAU,EAAE,MAAM,IAAI,aAAa,CAAC,KAAK,EAAE;QACrE,MAAM,EAAE,EAAE;KACX,CAAC;IACF,IAAI,CAAC,oBAAoB,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACtI,IAAI,CAAC,qBAAqB,EAAE,KAAK,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAEzI,MAAM,WAAW,GAAG,KAAK,CAAC,UAAU,CAAC,QAAQ,EAAE,GAAG,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC;IACtG,MAAM,WAAW,GAAG,KAAK,CAAC,UAAU,CAAC,QAAQ,EAAE,YAAY,IAAI,WAAW,CAAC;IAC3E,IAAI,WAAW,IAAI,WAAW,EAAE,CAAC;QAC/B,IAAI,CAAC,QAAQ,GAAG,EAAE,YAAY,EAAE,WAAW,EAAE,GAAG,EAAE,WAAW,EAAE,CAAC;QAChE,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;IAC3F,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,UAAU,CAAC,gBAAgB,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;IAC3E,IAAI,MAAM,EAAE,CAAC;QACX,IAAI,CAAC,gBAAgB,GAAG,MAAM,CAAC;QAC/B,IAAI,CAAC,mBAAmB,EAAE,SAAS,EAAE,KAAK,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;IAC3G,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;QACzB,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QACpC,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,eAAe,CAAC,CAAC;IAC/C,CAAC;IAED,IAAI,KAAK,CAAC,iBAAiB,IAAI,KAAK,CAAC,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClE,IAAI,CAAC,mBAAmB,GAAG,KAAK,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;QAC1E,IAAI,CAAC,sBAAsB,EAAE,SAAS,EAAE,iBAAiB,CAAC,CAAC;IAC7D,CAAC;SAAM,CAAC;QACN,IAAI,CAAC,mBAAmB,GAAG,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,UAAU,CAAC,MAAM,EAAE,eAAe,EAAE,KAAK,CAAC,UAAU,CAAC,eAAe,IAAI,SAAS,EAAE,CAAC,CAAC;QAC9H,IAAI,CAAC,sBAAsB,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC;IACzD,CAAC;IAED,qGAAqG;IACrG,gGAAgG;IAChG,uGAAuG;IACvG,kGAAkG;IAClG,4FAA4F;IAC5F,uGAAuG;IACvG,qEAAqE;IACrE,MAAM,EAAE,GAAG,KAAK,CAAC,mBAAmB,CAAC;IACrC,MAAM,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC,gBAAgB,CAAC;IAC1C,MAAM,IAAI,GAAG,CAAC,CAA+D,EAAW,EAAE,CACxF,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC;IAC9B,MAAM,iBAAiB,GAAG,EAAE,EAAE,iBAAiB,IAAI,EAAE,EAAE,iBAAiB,CAAC;IACzE,MAAM,UAAU,GAAG,EAAE,EAAE,UAAU,IAAI,EAAE,EAAE,UAAU,CAAC;IACpD,IAAI,CAAC,YAAY,GAAG;QAClB,SAAS,EAAE,IAAI,CAAC,WAAW,CAAC;QAC5B,iBAAiB,EAAE,IAAI,CAAC,mBAAmB,CAAC;QAC5C,sBAAsB,EAAE,IAAI,CAAC,wBAAwB,CAAC;QACtD,GAAG,CAAC,iBAAiB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACzE,CAAC;IACF,IAAI,CAAC,eAAe,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAE5G,uGAAuG;IACvG,oGAAoG;IACpG,gGAAgG;IAChG,EAAE;IACF,qDAAqD;IACrD,uDAAuD;IACvD,iGAAiG;IACjG,wEAAwE;IACxE,mGAAmG;IACnG,2CAA2C;IAC3C,MAAM,OAAO,GAAG,CAAC,CAA2B,EAAmB,EAAE,CAAC,CAAC;QACjE,EAAE,EAAE,CAAC,CAAC,EAAE;QACR,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,WAAW,EAAE,CAAC,CAAC,WAAW;QAC1B,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE;QACpB,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7D,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACjE,CAAC,CAAC;IACH,MAAM,WAAW,GAAG,KAAK,CAAC,OAAO,CAAC,YAAY,IAAI,EAAE,CAAC;IACrD,MAAM,MAAM,GAAsB,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC3D,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC;IACzF,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC9C,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,WAAW,CAAC,OAAO,EAAE;QAAE,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,eAAe,EAAE,WAAW,CAAC,CAAC,CAAE,CAAC,EAAE,CAAC,CAAC;IACxH,KAAK,MAAM,EAAE,IAAI,KAAK,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC;QAC3C,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;YAAE,SAAS;QAC9B,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QAChB,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC;QAC1B,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,WAAW,EAAE,EAAE,CAAC,WAAW,IAAI,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QAC5F,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,GAAG,CAAC,EAAE,SAAS,EAAE,iBAAiB,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;IACxE,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,qBAAqB,IAAI,EAAE,EAAE,CAAC;QACrD,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAAE,SAAS;QAChC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAClB,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC;QAC1B,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QAC3B,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,GAAG,CAAC,EAAE,SAAS,EAAE,mBAAmB,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;IAC5E,CAAC;IACD,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IAErB,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,EAAE,cAAc,EAAE,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC;AAC7E,CAAC;AAED,4CAA4C;AAC5C,MAAM,UAAU,aAAa,CAAC,IAAuB,EAAE,IAA2F;IAChJ,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC;IACpC,MAAM,KAAK,GAAwB;QACjC,cAAc,EAAE,IAAI,CAAC,cAAc;QACnC,QAAQ;QACR,KAAK,EAAE,OAAO;QACd,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,oBAAoB,EAAE,EAAE;QACxB,oBAAoB,EAAE,IAAI,CAAC,cAAc;QACzC,IAAI,EAAE,EAAE;QACR,SAAS,EAAE,IAAI,CAAC,GAAG;QACnB,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9E,CAAC;IACF,OAAO,EAAE,GAAG,KAAK,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;AAC9C,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,SAAS,CAAC,CAA4F;IACpH,OAAO,SAAS,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,aAAa,EAAE,CAAC,CAAC,aAAa,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC,oBAAoB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAC1I,CAAC;AAQD;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,KAA0B,EAAE,OAAe,EAAE,KAAc,EAAE,IAA0B;IACnH,MAAM,QAAQ,GAAG,YAAY,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACnD,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;IACtD,MAAM,QAAQ,GAAG,KAAK,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;IAC9C,MAAM,OAAO,GAAmB;QAC9B,OAAO;QACP,IAAI,EAAE,UAAU;QAChB,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE;QACvC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,KAAK,EAAE,OAAO;QACd,SAAS,EAAE,IAAI,CAAC,GAAG;QACnB,0FAA0F;QAC1F,UAAU,EAAE,QAAQ,EAAE,IAAI,KAAK,UAAU,IAAI,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,IAAI,IAAI,CAAC;KACrH,CAAC;IACF,MAAM,IAAI,GAAwB;QAChC,GAAG,KAAK;QACR,QAAQ,EAAE,KAAK,CAAC,QAAQ,GAAG,CAAC;QAC5B,KAAK,EAAE,OAAO;QACd,IAAI;QACJ,aAAa,EAAE,EAAE,GAAG,KAAK,CAAC,aAAa,EAAE,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE;QAC7D,SAAS,EAAE,IAAI,CAAC,GAAG;KACpB,CAAC;IACF,OAAO,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;AAC5C,CAAC;AAWD;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,KAA0B,EAAE,SAA6D;IACnH,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,QAAQ,GAAmC,EAAE,CAAC;IACpD,KAAK,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,CAAC;QACrE,MAAM,KAAK,GAAG,YAAY,CAAC,SAAS,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACpD,MAAM,WAAW,GAAG,SAAS,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC;QAC7C,IAAI,OAAO,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YAChC,IAAI,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,UAAU,KAAK,WAAW,EAAE,CAAC;gBAC7D,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBACvB,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;YACxD,CAAC;;gBAAM,QAAQ,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;YACnC,SAAS;QACX,CAAC;QACD,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC9B,QAAQ,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;YAC5B,SAAS;QACX,CAAC;QACD,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAClD,IAAI,SAAS,CAAC,OAAO,IAAI,IAAI,CAAC,KAAK,WAAW,EAAE,CAAC;YAC/C,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACpB,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;QACrD,CAAC;;YAAM,QAAQ,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC,KAAK,KAAK,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;IAClG,CAAC;IACD,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;IACzD,MAAM,IAAI,GAAwB;QAChC,GAAG,KAAK;QACR,aAAa,EAAE,QAAQ;QACvB,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK;KAC5E,CAAC;IACF,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;AACxE,CAAC;AAED,yGAAyG;AACzG,MAAM,UAAU,eAAe,CAAC,KAA0B,EAAE,OAAe,EAAE,SAA4D,EAAE,GAAW;IACpJ,MAAM,YAAY,GAAG,SAAS,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;IACtD,MAAM,KAAK,GAAG,YAAY,CAAC,SAAS,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACpD,MAAM,MAAM,GAAG,GAAG,OAAO,GAAG,CAAC;IAC7B,wGAAwG;IACxG,mFAAmF;IACnF,MAAM,IAAI,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,OAAO,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAC7H,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAC9B,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,aAAa,CAAC;SACpC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;SACrC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC,CAClD,CAAC;IACF,MAAM,IAAI,GAAwB;QAChC,GAAG,KAAK;QACR,QAAQ,EAAE,KAAK,CAAC,QAAQ,GAAG,CAAC;QAC5B,IAAI,EAAE,YAAY,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC;QAC9C,aAAa,EAAE;YACb,GAAG,IAAI;YACP,GAAG,KAAK;YACR,CAAC,OAAO,CAAC,EAAE,YAAY,CAAC,CAAC,CAAC,EAAE,GAAG,YAAY,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE;SACzJ;QACD,SAAS,EAAE,GAAG;KACf,CAAC;IACF,OAAO,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;AAC5C,CAAC"}

package/dist/a2a/import.d.ts

@@ -0,0 +1,39 @@
+/**
+ * Import an A2A Agent Card document (spec 347 §7).
+ *
+ *   1. keep the exact source bytes + their digest (evidence — never mutated);
+ *   2. verify EXISTING signatures over the raw object BEFORE any normalization (with keys ⇒ pass/fail;
+ *      without keys ⇒ `evidenceNeeded`, never "assumed fine");
+ *   3. split known A2A 1.0 fields from unknown ones (unknown recorded by JSON pointer + `UNKNOWN_FIELD`);
+ *   4. validate the typed view.
+ *
+ * The result is an import PROPOSAL — the caller decides what (if anything) becomes a draft. Nothing here
+ * writes canonical profile data.
+ */
+import type { ProjectionDiagnosticV1 } from '@agenticprimitives/types';
+import { type A2ACardKeyResolver, type VerifyA2ACardSignaturesResult } from './jws.js';
+import { type A2AImportedCardV1, type CardEnvironment } from './types.js';
+import { type ValidateA2ACardOptions } from './validation.js';
+export declare class A2ACardImportError extends Error {
+    readonly code: string;
+    constructor(message: string, code: string);
+}
+export interface ImportA2ACardOptions {
+    uri?: string;
+    retrievedAt?: string;
+    /** `kid` → key for verifying signatures already on the document. Absent ⇒ `SIGNATURE_UNVERIFIED`. */
+    verifyKeys?: A2ACardKeyResolver;
+    /** Validation context for the typed view. Default `{ environment: 'development' }`. */
+    validation?: Partial<ValidateA2ACardOptions> & {
+        environment?: CardEnvironment;
+    };
+}
+export interface ImportA2ACardResult {
+    imported: A2AImportedCardV1;
+    diagnostics: ProjectionDiagnosticV1[];
+    /** Present only when the source carried signatures. */
+    signatureVerification?: VerifyA2ACardSignaturesResult;
+}
+/** Import a card document. Throws `A2ACardImportError` only when the source is not a JSON object. */
+export declare function importA2ACard(source: Uint8Array | string, opts?: ImportA2ACardOptions): Promise<ImportA2ACardResult>;
+//# sourceMappingURL=import.d.ts.map

package/dist/a2a/import.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"import.d.ts","sourceRoot":"","sources":["../../src/a2a/import.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAEvE,OAAO,EAA2B,KAAK,kBAAkB,EAAE,KAAK,6BAA6B,EAAE,MAAM,UAAU,CAAC;AAEhH,OAAO,EAA8C,KAAK,iBAAiB,EAAE,KAAK,eAAe,EAAE,MAAM,YAAY,CAAC;AACtH,OAAO,EAAqC,KAAK,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AAEjG,qBAAa,kBAAmB,SAAQ,KAAK;IACd,QAAQ,CAAC,IAAI,EAAE,MAAM;gBAAtC,OAAO,EAAE,MAAM,EAAW,IAAI,EAAE,MAAM;CAInD;AAED,MAAM,WAAW,oBAAoB;IACnC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,qGAAqG;IACrG,UAAU,CAAC,EAAE,kBAAkB,CAAC;IAChC,uFAAuF;IACvF,UAAU,CAAC,EAAE,OAAO,CAAC,sBAAsB,CAAC,GAAG;QAAE,WAAW,CAAC,EAAE,eAAe,CAAA;KAAE,CAAC;CAClF;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,WAAW,EAAE,sBAAsB,EAAE,CAAC;IACtC,uDAAuD;IACvD,qBAAqB,CAAC,EAAE,6BAA6B,CAAC;CACvD;AAcD,qGAAqG;AACrG,wBAAsB,aAAa,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM,EAAE,IAAI,GAAE,oBAAyB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAuF9H"}

package/dist/a2a/import.js

@@ -0,0 +1,134 @@
+/**
+ * Import an A2A Agent Card document (spec 347 §7).
+ *
+ *   1. keep the exact source bytes + their digest (evidence — never mutated);
+ *   2. verify EXISTING signatures over the raw object BEFORE any normalization (with keys ⇒ pass/fail;
+ *      without keys ⇒ `evidenceNeeded`, never "assumed fine");
+ *   3. split known A2A 1.0 fields from unknown ones (unknown recorded by JSON pointer + `UNKNOWN_FIELD`);
+ *   4. validate the typed view.
+ *
+ * The result is an import PROPOSAL — the caller decides what (if anything) becomes a draft. Nothing here
+ * writes canonical profile data.
+ */
+import { sha256Digest } from './canonical.js';
+import { verifyA2ACardSignatures } from './jws.js';
+import { joinPointer } from './pointer.js';
+import { A2A_CARD_KNOWN_FIELDS } from './types.js';
+import { DIAGNOSTIC_CODES, validateA2ACard } from './validation.js';
+export class A2ACardImportError extends Error {
+    code;
+    constructor(message, code) {
+        super(message);
+        this.code = code;
+        this.name = 'A2ACardImportError';
+    }
+}
+const KNOWN_TOP = new Set(A2A_CARD_KNOWN_FIELDS);
+const KNOWN_NESTED = {
+    provider: new Set(['organization', 'url']),
+    capabilities: new Set(['streaming', 'pushNotifications', 'stateTransitionHistory', 'extendedAgentCard', 'extensions']),
+    supportedInterfaces: new Set(['url', 'protocolBinding', 'protocolVersion', 'tenant']),
+    skills: new Set(['id', 'name', 'description', 'tags', 'examples', 'inputModes', 'outputModes', 'securityRequirements']),
+    signatures: new Set(['protected', 'signature', 'header']),
+};
+const utf8 = new TextEncoder();
+const utf8dec = new TextDecoder();
+/** Import a card document. Throws `A2ACardImportError` only when the source is not a JSON object. */
+export async function importA2ACard(source, opts = {}) {
+    const sourceBytes = typeof source === 'string' ? utf8.encode(source) : new Uint8Array(source);
+    const sourceDigest = sha256Digest(sourceBytes);
+    let raw;
+    try {
+        raw = JSON.parse(utf8dec.decode(sourceBytes));
+    }
+    catch (e) {
+        throw new A2ACardImportError(`source is not JSON: ${e.message}`, DIAGNOSTIC_CODES.SOURCE_NOT_JSON);
+    }
+    if (!raw || typeof raw !== 'object' || Array.isArray(raw)) {
+        throw new A2ACardImportError('source is not a JSON object', DIAGNOSTIC_CODES.SOURCE_NOT_JSON);
+    }
+    const rawObj = raw;
+    const diagnostics = [];
+    // 2. signatures — over the RAW object (unknown fields included), before any normalization.
+    let signatureVerification;
+    if (Array.isArray(rawObj.signatures) && rawObj.signatures.length > 0) {
+        if (opts.verifyKeys) {
+            signatureVerification = await verifyA2ACardSignatures(rawObj, { keys: opts.verifyKeys });
+            if (!signatureVerification.ok) {
+                diagnostics.push({
+                    code: DIAGNOSTIC_CODES.SIGNATURE_INVALID,
+                    severity: 'error',
+                    sourcePointer: '/signatures',
+                    message: `signature verification failed: ${signatureVerification.failures.map((f) => `${f.kid || '?'}:${f.reason}`).join(', ')}`,
+                });
+            }
+        }
+        else {
+            diagnostics.push({
+                code: DIAGNOSTIC_CODES.SIGNATURE_UNVERIFIED,
+                severity: 'evidenceNeeded',
+                sourcePointer: '/signatures',
+                message: 'the document carries signatures but no verification keys were supplied',
+                explanation: 'Unverified is not verified. Supply `verifyKeys` (kid → public key) to establish who signed this card.',
+            });
+        }
+    }
+    // 3. known vs unknown.
+    const unknownFields = {};
+    const known = {};
+    for (const [k, v] of Object.entries(rawObj)) {
+        if (!KNOWN_TOP.has(k)) {
+            unknownFields[joinPointer(k)] = v;
+            continue;
+        }
+        known[k] = v;
+    }
+    for (const [field, allowed] of Object.entries(KNOWN_NESTED)) {
+        const v = known[field];
+        if (Array.isArray(v)) {
+            known[field] = v.map((item, i) => splitUnknown(item, allowed, joinPointer(field, i), unknownFields));
+        }
+        else if (v && typeof v === 'object') {
+            known[field] = splitUnknown(v, allowed, joinPointer(field), unknownFields);
+        }
+    }
+    for (const pointer of Object.keys(unknownFields)) {
+        diagnostics.push({
+            code: DIAGNOSTIC_CODES.UNKNOWN_FIELD,
+            severity: 'warning',
+            sourcePointer: pointer,
+            message: `field ${pointer} is not part of the A2A 1.0 Agent Card model; preserved as an unknown field`,
+            explanation: 'Unknown fields are kept beside the typed card and reported, never silently dropped or promoted.',
+        });
+    }
+    const card = known;
+    // 4. validate the typed view.
+    const env = opts.validation?.environment ?? 'development';
+    diagnostics.push(...validateA2ACard(card, {
+        ...opts.validation,
+        environment: env,
+        protocolVersion: opts.validation?.protocolVersion ?? (typeof card.protocolVersion === 'string' ? card.protocolVersion : '1.0'),
+    }));
+    const imported = {
+        card,
+        unknownFields,
+        sourceBytes,
+        sourceDigest,
+        ...(opts.retrievedAt ? { retrievedAt: opts.retrievedAt } : {}),
+        ...(opts.uri ? { uri: opts.uri } : {}),
+    };
+    return { imported, diagnostics, ...(signatureVerification ? { signatureVerification } : {}) };
+}
+function splitUnknown(item, allowed, base, unknownFields) {
+    if (!item || typeof item !== 'object' || Array.isArray(item))
+        return item;
+    const out = {};
+    for (const [k, v] of Object.entries(item)) {
+        if (allowed.has(k))
+            out[k] = v;
+        else
+            unknownFields[`${base}${joinPointer(k)}`] = v;
+    }
+    return out;
+}
+//# sourceMappingURL=import.js.map

package/dist/a2a/import.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"import.js","sourceRoot":"","sources":["../../src/a2a/import.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAGH,OAAO,EAAE,YAAY,EAAiB,MAAM,gBAAgB,CAAC;AAC7D,OAAO,EAAE,uBAAuB,EAA+D,MAAM,UAAU,CAAC;AAChH,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,qBAAqB,EAAqE,MAAM,YAAY,CAAC;AACtH,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAA+B,MAAM,iBAAiB,CAAC;AAEjG,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IACL;IAAtC,YAAY,OAAe,EAAW,IAAY;QAChD,KAAK,CAAC,OAAO,CAAC,CAAC;QADqB,SAAI,GAAJ,IAAI,CAAQ;QAEhD,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;IACnC,CAAC;CACF;AAkBD,MAAM,SAAS,GAAG,IAAI,GAAG,CAAS,qBAAqB,CAAC,CAAC;AACzD,MAAM,YAAY,GAAgC;IAChD,QAAQ,EAAE,IAAI,GAAG,CAAC,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;IAC1C,YAAY,EAAE,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,mBAAmB,EAAE,wBAAwB,EAAE,mBAAmB,EAAE,YAAY,CAAC,CAAC;IACtH,mBAAmB,EAAE,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,QAAQ,CAAC,CAAC;IACrF,MAAM,EAAE,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,sBAAsB,CAAC,CAAC;IACvH,UAAU,EAAE,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;CAC1D,CAAC;AAEF,MAAM,IAAI,GAAG,IAAI,WAAW,EAAE,CAAC;AAC/B,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;AAElC,qGAAqG;AACrG,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,MAA2B,EAAE,OAA6B,EAAE;IAC9F,MAAM,WAAW,GAAG,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC;IAC9F,MAAM,YAAY,GAAG,YAAY,CAAC,WAAW,CAAC,CAAC;IAC/C,IAAI,GAAY,CAAC;IACjB,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC;IAChD,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,IAAI,kBAAkB,CAAC,uBAAwB,CAAW,CAAC,OAAO,EAAE,EAAE,gBAAgB,CAAC,eAAe,CAAC,CAAC;IAChH,CAAC;IACD,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,kBAAkB,CAAC,6BAA6B,EAAE,gBAAgB,CAAC,eAAe,CAAC,CAAC;IAChG,CAAC;IACD,MAAM,MAAM,GAAG,GAAe,CAAC;IAC/B,MAAM,WAAW,GAA6B,EAAE,CAAC;IAEjD,2FAA2F;IAC3F,IAAI,qBAAgE,CAAC;IACrE,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrE,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,qBAAqB,GAAG,MAAM,uBAAuB,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;YACzF,IAAI,CAAC,qBAAqB,CAAC,EAAE,EAAE,CAAC;gBAC9B,WAAW,CAAC,IAAI,CAAC;oBACf,IAAI,EAAE,gBAAgB,CAAC,iBAAiB;oBACxC,QAAQ,EAAE,OAAO;oBACjB,aAAa,EAAE,aAAa;oBAC5B,OAAO,EAAE,kCAAkC,qBAAqB,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;iBACjI,CAAC,CAAC;YACL,CAAC;QACH,CAAC;aAAM,CAAC;YACN,WAAW,CAAC,IAAI,CAAC;gBACf,IAAI,EAAE,gBAAgB,CAAC,oBAAoB;gBAC3C,QAAQ,EAAE,gBAAgB;gBAC1B,aAAa,EAAE,aAAa;gBAC5B,OAAO,EAAE,wEAAwE;gBACjF,WAAW,EAAE,uGAAuG;aACrH,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,uBAAuB;IACvB,MAAM,aAAa,GAA4B,EAAE,CAAC;IAClD,MAAM,KAAK,GAA4B,EAAE,CAAC;IAC1C,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC5C,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YACtB,aAAa,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YAClC,SAAS;QACX,CAAC;QACD,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACf,CAAC;IACD,KAAK,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;QAC5D,MAAM,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;QACvB,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;YACrB,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,EAAE,WAAW,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC,CAAC;QACvG,CAAC;aAAM,IAAI,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;YACtC,KAAK,CAAC,KAAK,CAAC,GAAG,YAAY,CAAC,CAAC,EAAE,OAAO,EAAE,WAAW,CAAC,KAAK,CAAC,EAAE,aAAa,CAAC,CAAC;QAC7E,CAAC;IACH,CAAC;IACD,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC;QACjD,WAAW,CAAC,IAAI,CAAC;YACf,IAAI,EAAE,gBAAgB,CAAC,aAAa;YACpC,QAAQ,EAAE,SAAS;YACnB,aAAa,EAAE,OAAO;YACtB,OAAO,EAAE,SAAS,OAAO,6EAA6E;YACtG,WAAW,EAAE,iGAAiG;SAC/G,CAAC,CAAC;IACL,CAAC;IACD,MAAM,IAAI,GAAG,KAAkC,CAAC;IAEhD,8BAA8B;IAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,EAAE,WAAW,IAAI,aAAa,CAAC;IAC1D,WAAW,CAAC,IAAI,CACd,GAAG,eAAe,CAAC,IAAI,EAAE;QACvB,GAAG,IAAI,CAAC,UAAU;QAClB,WAAW,EAAE,GAAG;QAChB,eAAe,EAAE,IAAI,CAAC,UAAU,EAAE,eAAe,IAAI,CAAC,OAAO,IAAI,CAAC,eAAe,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,KAAK,CAAC;KAC/H,CAAC,CACH,CAAC;IAEF,MAAM,QAAQ,GAAsB;QAClC,IAAI;QACJ,aAAa;QACb,WAAW;QACX,YAAY;QACZ,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9D,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACvC,CAAC;IACF,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,GAAG,CAAC,qBAAqB,CAAC,CAAC,CAAC,EAAE,qBAAqB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AAChG,CAAC;AAED,SAAS,YAAY,CAAC,IAAa,EAAE,OAAoB,EAAE,IAAY,EAAE,aAAsC;IAC7G,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1E,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAA+B,CAAC,EAAE,CAAC;QACrE,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;;YAC1B,aAAa,CAAC,GAAG,IAAI,GAAG,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/a2a/index.d.ts

@@ -0,0 +1,13 @@
+export type { A2AProtocolBinding, A2AAgentInterfaceV1, A2AAgentProviderV1, A2AAgentExtensionV1, A2AAgentCapabilitiesV1, A2AApiKeySecuritySchemeV1, A2AHttpSecuritySchemeV1, A2AOAuthFlowV1, A2AOAuth2SecuritySchemeV1, A2AOpenIdConnectSecuritySchemeV1, A2AMutualTlsSecuritySchemeV1, A2ASecuritySchemeV1, A2ASecurityRequirementV1, A2AAgentSkillV1, A2AAgentCardSignatureV1, A2AAgentCardV1, A2AImportedCardV1, OptionalPresence, FieldBindingMode, FieldBindingSourceKind, FieldBindingState, FieldBindingV1, CardEnvironment, CardDraftState, CardReleaseState, ExtendedCardPolicyV1, A2AAgentCardResourceV1, A2AAgentCardDraftV1, A2ACardSignatureRefV1, SmartAgentCardBindingV1, SignedSmartAgentCardBindingV1, CardRevocationV1, A2AAgentCardReleaseV1, CardSigningKeyAuthorizationV1, Sha256, } from './types.js';
+export { A2A_SECURITY_SCHEME_TYPES, A2A_CARD_KNOWN_FIELDS } from './types.js';
+export { unsignedCard, canonicalCardJson, canonicalCardBytes, cardContentDigest, signedCardContentDigest, sha256Digest, jcsDigest, type CardLike, } from './canonical.js';
+export { base64UrlEncode, base64UrlDecode, jwkThumbprint, supportsEdDSA, generateA2ACardSigningKey, importVerificationKey, signA2ACard, verifyA2ACardSignatures, decodeProtectedHeader, type A2ACardJwsAlg, type A2ACardSigningKeyPair, type SignA2ACardOptions, type SignA2ACardResult, type A2ACardKeyResolver, type VerifyA2ACardSignaturesOptions, type VerifyA2ACardSignaturesResult, type A2ACardSignatureFailureReason, } from './jws.js';
+export { SMART_AGENT_CARD_BINDING_DOMAIN_NAME, SMART_AGENT_CARD_BINDING_DOMAIN_VERSION, SMART_AGENT_CARD_BINDING_TYPES, SMART_AGENT_CARD_BINDING_TYPE_STRING, smartAgentCardBindingDomain, smartAgentCardBindingMessage, smartAgentCardBindingDigest, verifySmartAgentCardBinding, sha256ToBytes32, bytes32ToSha256, thumbprintToBytes32, bytes32ToThumbprint, type VerifySmartAgentCardBindingResult, type VerifySmartAgentCardBindingOptions, } from './binding.js';
+export type { Erc1271Verifier } from '../card.js';
+export { parsePointer, escapePointerToken, joinPointer, getAtPointer, setAtPointer } from './pointer.js';
+export { inheritCardBase, draftFromBase, draftEtag, applyOverride, detectStale, acceptInherited, type SurfaceCardSkillLike, type PublicSkillCandidateLike, type InheritCardBaseInput, type InheritedCardBase, type ApplyOverrideOptions, type StaleReport, } from './field-binding.js';
+export { DIAGNOSTIC_CODES, validateA2ACard, hasErrors, isPrivateHost, type DiagnosticCode, type CatalogSkillLike, type RuntimeCapabilityEvidence, type ValidateA2ACardOptions, } from './validation.js';
+export { importA2ACard, A2ACardImportError, type ImportA2ACardOptions, type ImportA2ACardResult } from './import.js';
+export { CARD_RELEASE_TRANSITIONS, TERMINAL_RELEASE_STATES, isProjectionReady, createRelease, transition, attachSignature, attachSmartAgentBinding, revoke, forkDraft, A2ACardLifecycleError, A2ACardValidationError, type CreateReleaseOptions, type TransitionContext, type AttachSignatureInput, type RevokeOptions, } from './release.js';
+export { PLAYBOOK_BINDING_EXT_URI, playbookBindingExtension, readPlaybookBinding, withPlaybookBinding, playbookBoundRelease, type PlaybookBindingV1, } from './playbook-binding.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/a2a/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/a2a/index.ts"],"names":[],"mappings":"AAcA,YAAY,EACV,kBAAkB,EAClB,mBAAmB,EACnB,kBAAkB,EAClB,mBAAmB,EACnB,sBAAsB,EACtB,yBAAyB,EACzB,uBAAuB,EACvB,cAAc,EACd,yBAAyB,EACzB,gCAAgC,EAChC,4BAA4B,EAC5B,mBAAmB,EACnB,wBAAwB,EACxB,eAAe,EACf,uBAAuB,EACvB,cAAc,EACd,iBAAiB,EACjB,gBAAgB,EAChB,gBAAgB,EAChB,sBAAsB,EACtB,iBAAiB,EACjB,cAAc,EACd,eAAe,EACf,cAAc,EACd,gBAAgB,EAChB,oBAAoB,EACpB,sBAAsB,EACtB,mBAAmB,EACnB,qBAAqB,EACrB,uBAAuB,EACvB,6BAA6B,EAC7B,gBAAgB,EAChB,qBAAqB,EACrB,6BAA6B,EAC7B,MAAM,GACP,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,yBAAyB,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AAE9E,OAAO,EACL,YAAY,EACZ,iBAAiB,EACjB,kBAAkB,EAClB,iBAAiB,EACjB,uBAAuB,EACvB,YAAY,EACZ,SAAS,EACT,KAAK,QAAQ,GACd,MAAM,gBAAgB,CAAC;AAExB,OAAO,EACL,eAAe,EACf,eAAe,EACf,aAAa,EACb,aAAa,EACb,yBAAyB,EACzB,qBAAqB,EACrB,WAAW,EACX,uBAAuB,EACvB,qBAAqB,EACrB,KAAK,aAAa,EAClB,KAAK,qBAAqB,EAC1B,KAAK,kBAAkB,EACvB,KAAK,iBAAiB,EACtB,KAAK,kBAAkB,EACvB,KAAK,8BAA8B,EACnC,KAAK,6BAA6B,EAClC,KAAK,6BAA6B,GACnC,MAAM,UAAU,CAAC;AAElB,OAAO,EACL,oCAAoC,EACpC,uCAAuC,EACvC,8BAA8B,EAC9B,oCAAoC,EACpC,2BAA2B,EAC3B,4BAA4B,EAC5B,2BAA2B,EAC3B,2BAA2B,EAC3B,eAAe,EACf,eAAe,EACf,mBAAmB,EACnB,mBAAmB,EACnB,KAAK,iCAAiC,EACtC,KAAK,kCAAkC,GACxC,MAAM,cAAc,CAAC;AACtB,YAAY,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAElD,OAAO,EAAE,YAAY,EAAE,kBAAkB,EAAE,WAAW,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAEzG,OAAO,EACL,eAAe,EACf,aAAa,EACb,SAAS,EACT,aAAa,EACb,WAAW,EACX,eAAe,EACf,KAAK,oBAAoB,EACzB,KAAK,wBAAwB,EAC7B,KAAK,oBAAoB,EACzB,KAAK,iBAAiB,EACtB,KAAK,oBAAoB,EACzB,KAAK,WAAW,GACjB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,gBAAgB,EAChB,eAAe,EACf,SAAS,EACT,aAAa,EACb,KAAK,cAAc,EACnB,KAAK,gBAAgB,EACrB,KAAK,yBAAyB,EAC9B,KAAK,sBAAsB,GAC5B,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAE,KAAK,oBAAoB,EAAE,KAAK,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAErH,OAAO,EACL,wBAAwB,EACxB,uBAAuB,EACvB,iBAAiB,EACjB,aAAa,EACb,UAAU,EACV,eAAe,EACf,uBAAuB,EACvB,MAAM,EACN,SAAS,EACT,qBAAqB,EACrB,sBAAsB,EACtB,KAAK,oBAAoB,EACzB,KAAK,iBAAiB,EACtB,KAAK,oBAAoB,EACzB,KAAK,aAAa,GACnB,MAAM,cAAc,CAAC;AAEtB,OAAO,EACL,wBAAwB,EACxB,wBAAwB,EACxB,mBAAmB,EACnB,mBAAmB,EACnB,oBAAoB,EACpB,KAAK,iBAAiB,GACvB,MAAM,uBAAuB,CAAC"}

package/dist/a2a/index.js

@@ -0,0 +1,24 @@
+// @agenticprimitives/agent-profile/a2a — the A2A Agent Card model (spec 347 §4; ADR-0062).
+//
+// The A2A card says what THIS A2A server does and how to reach it. It is NOT the identity (the SA address),
+// NOT the Canonical Agent Profile (`CanonicalAgentProfileV1`, root export), and NOT a registry entry.
+//
+//   types          A2AAgentCardV1 + resource / draft / release / binding / provenance records
+//   canonical      strip `signatures` → RFC 8785 JCS → bytes → sha256 digests
+//   jws            ES256 (WebCrypto) detached JWS sign / fail-closed verify, RFC 7638 thumbprints
+//   binding        SmartAgentCardBindingV1 EIP-712 digest + ERC-1271 verify (injected port)
+//   field-binding  inheritCardBase / applyOverride / detectStale (pure provenance)
+//   validation     validateA2ACard → ProjectionDiagnosticV1[] (stable DIAGNOSTIC_CODES)
+//   import         importA2ACard: source bytes kept, signatures verified BEFORE normalizing, unknown fields
+//   release        createRelease / transition / attachSignature / attachSmartAgentBinding / revoke / forkDraft
+export { A2A_SECURITY_SCHEME_TYPES, A2A_CARD_KNOWN_FIELDS } from './types.js';
+export { unsignedCard, canonicalCardJson, canonicalCardBytes, cardContentDigest, signedCardContentDigest, sha256Digest, jcsDigest, } from './canonical.js';
+export { base64UrlEncode, base64UrlDecode, jwkThumbprint, supportsEdDSA, generateA2ACardSigningKey, importVerificationKey, signA2ACard, verifyA2ACardSignatures, decodeProtectedHeader, } from './jws.js';
+export { SMART_AGENT_CARD_BINDING_DOMAIN_NAME, SMART_AGENT_CARD_BINDING_DOMAIN_VERSION, SMART_AGENT_CARD_BINDING_TYPES, SMART_AGENT_CARD_BINDING_TYPE_STRING, smartAgentCardBindingDomain, smartAgentCardBindingMessage, smartAgentCardBindingDigest, verifySmartAgentCardBinding, sha256ToBytes32, bytes32ToSha256, thumbprintToBytes32, bytes32ToThumbprint, } from './binding.js';
+export { parsePointer, escapePointerToken, joinPointer, getAtPointer, setAtPointer } from './pointer.js';
+export { inheritCardBase, draftFromBase, draftEtag, applyOverride, detectStale, acceptInherited, } from './field-binding.js';
+export { DIAGNOSTIC_CODES, validateA2ACard, hasErrors, isPrivateHost, } from './validation.js';
+export { importA2ACard, A2ACardImportError } from './import.js';
+export { CARD_RELEASE_TRANSITIONS, TERMINAL_RELEASE_STATES, isProjectionReady, createRelease, transition, attachSignature, attachSmartAgentBinding, revoke, forkDraft, A2ACardLifecycleError, A2ACardValidationError, } from './release.js';
+export { PLAYBOOK_BINDING_EXT_URI, playbookBindingExtension, readPlaybookBinding, withPlaybookBinding, playbookBoundRelease, } from './playbook-binding.js';
+//# sourceMappingURL=index.js.map

package/dist/a2a/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/a2a/index.ts"],"names":[],"mappings":"AAAA,2FAA2F;AAC3F,EAAE;AACF,4GAA4G;AAC5G,sGAAsG;AACtG,EAAE;AACF,8FAA8F;AAC9F,8EAA8E;AAC9E,kGAAkG;AAClG,4FAA4F;AAC5F,mFAAmF;AACnF,wFAAwF;AACxF,4GAA4G;AAC5G,+GAA+G;AAuC/G,OAAO,EAAE,yBAAyB,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AAE9E,OAAO,EACL,YAAY,EACZ,iBAAiB,EACjB,kBAAkB,EAClB,iBAAiB,EACjB,uBAAuB,EACvB,YAAY,EACZ,SAAS,GAEV,MAAM,gBAAgB,CAAC;AAExB,OAAO,EACL,eAAe,EACf,eAAe,EACf,aAAa,EACb,aAAa,EACb,yBAAyB,EACzB,qBAAqB,EACrB,WAAW,EACX,uBAAuB,EACvB,qBAAqB,GAStB,MAAM,UAAU,CAAC;AAElB,OAAO,EACL,oCAAoC,EACpC,uCAAuC,EACvC,8BAA8B,EAC9B,oCAAoC,EACpC,2BAA2B,EAC3B,4BAA4B,EAC5B,2BAA2B,EAC3B,2BAA2B,EAC3B,eAAe,EACf,eAAe,EACf,mBAAmB,EACnB,mBAAmB,GAGpB,MAAM,cAAc,CAAC;AAGtB,OAAO,EAAE,YAAY,EAAE,kBAAkB,EAAE,WAAW,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAEzG,OAAO,EACL,eAAe,EACf,aAAa,EACb,SAAS,EACT,aAAa,EACb,WAAW,EACX,eAAe,GAOhB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,gBAAgB,EAChB,eAAe,EACf,SAAS,EACT,aAAa,GAKd,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAuD,MAAM,aAAa,CAAC;AAErH,OAAO,EACL,wBAAwB,EACxB,uBAAuB,EACvB,iBAAiB,EACjB,aAAa,EACb,UAAU,EACV,eAAe,EACf,uBAAuB,EACvB,MAAM,EACN,SAAS,EACT,qBAAqB,EACrB,sBAAsB,GAKvB,MAAM,cAAc,CAAC;AAEtB,OAAO,EACL,wBAAwB,EACxB,wBAAwB,EACxB,mBAAmB,EACnB,mBAAmB,EACnB,oBAAoB,GAErB,MAAM,uBAAuB,CAAC"}

package/dist/a2a/jws.d.ts

@@ -0,0 +1,76 @@
+/**
+ * Standard A2A card signatures: detached JWS over the canonical card bytes (spec 347 §4.2).
+ *
+ *   signing input = base64url(protected) "." base64url(canonicalCardBytes)
+ *   protected     = { alg: 'ES256' | 'EdDSA', kid: <RFC 7638 JWK thumbprint> }
+ *
+ * WebCrypto only (`globalThis.crypto.subtle`, Node ≥ 20 and workerd) — no `jose`. ES256 (P-256) is the
+ * Ring-0 default; EdDSA is used only when the runtime can do it (`supportsEdDSA()`), never required.
+ *
+ * Verification is FAIL-CLOSED (ADR-0013): no signatures, an unknown `kid`, an unsupported `alg`, a header
+ * that cannot be parsed, or any bad signature ⇒ `ok: false`. A non-AP A2A client verifies these signatures
+ * and never needs the Smart Agent binding (`binding.ts`).
+ */
+import { type CardLike } from './canonical.js';
+import type { A2AAgentCardSignatureV1, A2AAgentCardV1 } from './types.js';
+export type A2ACardJwsAlg = 'ES256' | 'EdDSA';
+export declare function base64UrlEncode(bytes: Uint8Array): string;
+export declare function base64UrlDecode(s: string): Uint8Array;
+/** RFC 7638 thumbprint: sha256 over the JCS of the REQUIRED public members only, base64url. */
+export declare function jwkThumbprint(jwk: JsonWebKey): Promise<string>;
+/** Is EdDSA (Ed25519) usable here? Feature-detected, never assumed (workerd has no Ed25519). */
+export declare function supportsEdDSA(): Promise<boolean>;
+export interface A2ACardSigningKeyPair {
+    alg: A2ACardJwsAlg;
+    privateKey: CryptoKey;
+    publicKey: CryptoKey;
+    publicJwk: JsonWebKey;
+    /** RFC 7638 thumbprint of `publicJwk` — the `kid`. */
+    kid: string;
+}
+/** Generate a card-signing key pair. ES256 by default; `EdDSA` throws where the runtime lacks it. */
+export declare function generateA2ACardSigningKey(alg?: A2ACardJwsAlg): Promise<A2ACardSigningKeyPair>;
+/** Import a public JWK as a verification key for `alg`. */
+export declare function importVerificationKey(jwk: JsonWebKey, alg: A2ACardJwsAlg): Promise<CryptoKey>;
+export interface SignA2ACardOptions {
+    privateKey: CryptoKey;
+    /** RFC 7638 thumbprint of the matching public key (`jwkThumbprint`). */
+    kid: string;
+    alg?: A2ACardJwsAlg;
+}
+export interface SignA2ACardResult<T extends CardLike> {
+    /** `card` with the new signature APPENDED to `signatures` (existing ones kept). */
+    card: T & {
+        signatures: A2AAgentCardSignatureV1[];
+    };
+    signature: A2AAgentCardSignatureV1;
+    /** RFC 7515 compact serialization with a DETACHED payload (`<protected>..<signature>`). */
+    compact: string;
+    /** base64url of the canonical bytes — the detached payload a verifier re-derives. */
+    payload: string;
+}
+/** Sign the canonical card bytes; returns the card with the signature appended. Pure apart from the key op. */
+export declare function signA2ACard<T extends CardLike>(card: T, opts: SignA2ACardOptions): Promise<SignA2ACardResult<T>>;
+export type A2ACardKeyResolver = (kid: string) => CryptoKey | JsonWebKey | undefined | Promise<CryptoKey | JsonWebKey | undefined>;
+export interface VerifyA2ACardSignaturesOptions {
+    /** `kid` → public key. Returning `undefined` fails that entry (`unknown_kid`); never guesses. */
+    keys: A2ACardKeyResolver;
+}
+export type A2ACardSignatureFailureReason = 'no_signatures' | 'bad_entry' | 'bad_protected_header' | 'unsupported_alg' | 'unknown_kid' | 'key_import_failed' | 'signature_invalid';
+export interface VerifyA2ACardSignaturesResult {
+    /** True ONLY when ≥ 1 signature is present and EVERY signature verified. */
+    ok: boolean;
+    verified: string[];
+    failures: {
+        kid: string;
+        reason: A2ACardSignatureFailureReason;
+    }[];
+}
+/** Re-derive the canonical bytes and verify every signature entry. Fail-closed. */
+export declare function verifyA2ACardSignatures(card: CardLike | A2AAgentCardV1, opts: VerifyA2ACardSignaturesOptions): Promise<VerifyA2ACardSignaturesResult>;
+/** Decode a signature entry's protected header (`alg`, `kid`) without verifying anything. */
+export declare function decodeProtectedHeader(entry: A2AAgentCardSignatureV1): {
+    alg?: string;
+    kid?: string;
+};
+//# sourceMappingURL=jws.d.ts.map

package/dist/a2a/jws.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"jws.d.ts","sourceRoot":"","sources":["../../src/a2a/jws.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAGH,OAAO,EAAsB,KAAK,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AACnE,OAAO,KAAK,EAAE,uBAAuB,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAE1E,MAAM,MAAM,aAAa,GAAG,OAAO,GAAG,OAAO,CAAC;AAI9C,wBAAgB,eAAe,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAIzD;AAED,wBAAgB,eAAe,CAAC,CAAC,EAAE,MAAM,GAAG,UAAU,CAOrD;AAaD,+FAA+F;AAC/F,wBAAsB,aAAa,CAAC,GAAG,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAiBpE;AASD,gGAAgG;AAChG,wBAAsB,aAAa,IAAI,OAAO,CAAC,OAAO,CAAC,CAOtD;AAED,MAAM,WAAW,qBAAqB;IACpC,GAAG,EAAE,aAAa,CAAC;IACnB,UAAU,EAAE,SAAS,CAAC;IACtB,SAAS,EAAE,SAAS,CAAC;IACrB,SAAS,EAAE,UAAU,CAAC;IACtB,sDAAsD;IACtD,GAAG,EAAE,MAAM,CAAC;CACb;AAED,qGAAqG;AACrG,wBAAsB,yBAAyB,CAAC,GAAG,GAAE,aAAuB,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAS5G;AAED,2DAA2D;AAC3D,wBAAsB,qBAAqB,CAAC,GAAG,EAAE,UAAU,EAAE,GAAG,EAAE,aAAa,GAAG,OAAO,CAAC,SAAS,CAAC,CAInG;AAQD,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE,SAAS,CAAC;IACtB,wEAAwE;IACxE,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,CAAC,EAAE,aAAa,CAAC;CACrB;AAED,MAAM,WAAW,iBAAiB,CAAC,CAAC,SAAS,QAAQ;IACnD,mFAAmF;IACnF,IAAI,EAAE,CAAC,GAAG;QAAE,UAAU,EAAE,uBAAuB,EAAE,CAAA;KAAE,CAAC;IACpD,SAAS,EAAE,uBAAuB,CAAC;IACnC,2FAA2F;IAC3F,OAAO,EAAE,MAAM,CAAC;IAChB,qFAAqF;IACrF,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,+GAA+G;AAC/G,wBAAsB,WAAW,CAAC,CAAC,SAAS,QAAQ,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,kBAAkB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAetH;AAID,MAAM,MAAM,kBAAkB,GAAG,CAAC,GAAG,EAAE,MAAM,KAAK,SAAS,GAAG,UAAU,GAAG,SAAS,GAAG,OAAO,CAAC,SAAS,GAAG,UAAU,GAAG,SAAS,CAAC,CAAC;AAEnI,MAAM,WAAW,8BAA8B;IAC7C,iGAAiG;IACjG,IAAI,EAAE,kBAAkB,CAAC;CAC1B;AAED,MAAM,MAAM,6BAA6B,GACrC,eAAe,GACf,WAAW,GACX,sBAAsB,GACtB,iBAAiB,GACjB,aAAa,GACb,mBAAmB,GACnB,mBAAmB,CAAC;AAExB,MAAM,WAAW,6BAA6B;IAC5C,4EAA4E;IAC5E,EAAE,EAAE,OAAO,CAAC;IACZ,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,QAAQ,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,6BAA6B,CAAA;KAAE,EAAE,CAAC;CACpE;AAED,mFAAmF;AACnF,wBAAsB,uBAAuB,CAC3C,IAAI,EAAE,QAAQ,GAAG,cAAc,EAC/B,IAAI,EAAE,8BAA8B,GACnC,OAAO,CAAC,6BAA6B,CAAC,CAgExC;AAMD,6FAA6F;AAC7F,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,uBAAuB,GAAG;IAAE,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,CAEpG"}