@agenticprimitives/agreements 0.0.0-alpha.10

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Agentic Trust Labs
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,48 @@
+# @agenticprimitives/agreements
+
+**Two agents strike a deal. The chain should be able to prove the deal existed and how it ended — without ever learning what it was.** Most on-chain agreement records leak by design: parties, terms, schedules, all readable forever. This package is the SDK for `AgreementRegistry.sol`, a commitment-only registry — the chain stores keccak commitments over the party set, issuer, terms, and schedule, plus a status machine (`ACTIVE → COMPLETED / DISPUTED / REVOKED`). The human-readable agreement is a W3C verifiable credential held off chain by the parties; the chain holds only enough to anchor and adjudicate it.
+
+Status transitions are as strict as registration is private: the contract recomputes the transition digest from the commitment, target status, and nullifier on chain, and requires party signatures over that recomputed value — never a caller-supplied hash, and never an issuer-only revoke.
+
+> Part of [agenticprimitives](../../README.md) — the trust substrate for the agent economy: one canonical Smart Agent identity with custody, delegation, naming, credentials, and audit evidence designed as one system.
+
+## What ships today
+
+The W1 foundational slice — commitment math, typehashes, and payload shapes the contract relies on:
+
+- **Commitment math** — `computeAgreementCommitment(...)` (spec 241 §3), `partySetCommitment(party1, party2)`, `issuerCommitment(issuer)`, `bytesCommitment(value)` for terms/schedule hashes.
+- **`STATUS`** — discriminators matching `AgreementRegistry.STATUS_*` (`NONE` / `ACTIVE` / `COMPLETED` / `DISPUTED` / `REVOKED`).
+- **`TRANSITION_TYPEHASH` + `transitionDigest(...)`** — the digest parties sign for a status transition. `updateStatus` recomputes it on chain (RW1-3, [ADR-0027](../../docs/architecture/decisions/0027-canonical-authority-binding.md)); `chainId` and the registry address are bound against cross-chain replay (AGR-1).
+- **`AGREEMENT_ISSUER_TYPEHASH` + `issuerAttestationDigest(...)`** — the issuer's registration attestation, recomputed and verified on chain (SC-1).
+- **`nullifierFor(...)`** — per-transition one-shot nullifier derivation.
+- **Payload shapes** — `AgreementIssuancePayload`, `StatusUpdatePayload` (including the RW1-2 revealed-party fields the contract uses to recompute the commitment and check each signer is a party).
+
+Every typehash MUST byte-equal its `AgreementRegistry.sol` constant — enforced by the cross-stack `check:eip712-typehash-equality` CI gate.
+
+Planned for later waves per the [W1 implementation wave plan](../../docs/architecture/w1-implementation-wave-plan.md): the `AgreementCredential` shape (PD-22), `AgreementRegistryClient` read client, and the joint-assertion gateway helper that lets [`attestations`](../attestations) verify an agreement back-pointer before asserting on it.
+
+## How it's different
+
+Against EAS-style attestation registries and e-signature platforms:
+
+1. **Commitment-only on chain.** No party addresses, no terms, no schedule in `register(...)` calldata — a static-analysis regression test enforces it (AR-12). Even timestamps are epoch-bucketed (spec 241 §3.4). Attestation registries publish the claim; this registry publishes only its shadow.
+2. **The chain recomputes; it never trusts.** Transition digests and issuer attestations are recomputed on chain from revealed components — a leaked signature cannot be replayed against a different agreement, status, chain, or registry deployment.
+3. **No issuer-only exit.** Completion, dispute, and revocation follow the bilateral / either-party matrix of spec 241 §5.4.1. The issuer who notarized the agreement cannot unilaterally kill it (D-18).
+4. **Contracts and SDK are one artifact.** Typehash parity is CI-gated, so the client cannot drift from the chain — the failure mode that quietly breaks stitched signing stacks.
+
+## Status
+
+**Foundational (W1) — code shipped; not production enforcement.** The commitment math, typehashes, and payload shapes above are real and gate-checked; the credential shape, read client, and gateway land in Wave 4 per the [wave plan](../../docs/architecture/w1-implementation-wave-plan.md). See [AUDIT.md](./AUDIT.md).
+
+> Testnet/pilot-ready. Production launch is gated on the public checklist in the root README — including third-party contract audit and governance key rotation. Track every security finding live in [`docs/audits/findings.yaml`](../../docs/audits/findings.yaml).
+
+**Owns spine layers:** layer 8.
+**Authoritative spec:** [`specs/241-agreement-commitment-registry.md`](../../specs/241-agreement-commitment-registry.md) — see `spec.md` for the symlink. Bounded surface: `CLAUDE.md` + `capability.manifest.json`.
+
+## Build
+
+```bash
+pnpm --filter @agenticprimitives/agreements typecheck
+pnpm --filter @agenticprimitives/agreements test
+pnpm --filter @agenticprimitives/agreements build
+```

package/dist/index.d.ts

@@ -0,0 +1,110 @@
+/**
+ * @agenticprimitives/agreements — Commitment-only AgreementRegistry SDK +
+ * AgreementCredential shape (PD-22).
+ *
+ * Authoritative spec: specs/241-agreement-commitment-registry.md
+ */
+import type { Address, Hex } from '@agenticprimitives/types';
+export declare const PACKAGE_NAME = "@agenticprimitives/agreements";
+export declare const PACKAGE_STATUS: "w1-foundational";
+export declare const SPEC_REF = "specs/241-agreement-commitment-registry.md";
+export type Hex32 = `0x${string}`;
+/** Status discriminators matching `AgreementRegistry.STATUS_*`. */
+export declare const STATUS: {
+    readonly NONE: 0;
+    readonly ACTIVE: 1;
+    readonly COMPLETED: 2;
+    readonly DISPUTED: 3;
+    readonly REVOKED: 4;
+};
+export type AgreementStatus = (typeof STATUS)[keyof typeof STATUS];
+/**
+ * RW1-3 (ADR-0027) — canonical transition typehash. MUST byte-equal
+ * `AgreementRegistry.TRANSITION_TYPEHASH`; enforced by the cross-stack
+ * typehash-equality gate (`check:eip712-typehash-equality`).
+ */
+export declare const TRANSITION_TYPEHASH: Hex32;
+/**
+ * Recompute the transition digest the parties sign (RW1-3). Equals the contract's
+ * `keccak256(abi.encode(TRANSITION_TYPEHASH, agreementCommitment, toStatus, nullifier, chainId,
+ * verifyingContract))` — the on-chain `updateStatus` recomputes the same digest and verifies the party
+ * signatures against it. AGR-1: `chainId` + the registry address are bound (anti cross-chain/replay).
+ */
+export declare function transitionDigest(args: {
+    agreementCommitment: Hex32;
+    toStatus: AgreementStatus;
+    nullifier: Hex32;
+    chainId: bigint;
+    verifyingContract: Address;
+}): Hex32;
+/**
+ * SC-1 (audit 2026-06-09) — canonical issuer-attestation typehash. MUST byte-equal
+ * `AgreementRegistry.AGREEMENT_ISSUER_TYPEHASH`; locked by the cross-stack typehash-equality gate.
+ */
+export declare const AGREEMENT_ISSUER_TYPEHASH: Hex32;
+/**
+ * Recompute the digest the issuer signs (SC-1). Equals the contract's
+ * `keccak256(abi.encode(AGREEMENT_ISSUER_TYPEHASH, agreementCommitment, schemaHash, issuer, chainId,
+ * verifyingContract))` — `register` recomputes the same digest and verifies the issuer signature
+ * against it (no caller-supplied attestation hash). Bind `chainId` + the registry address.
+ */
+export declare function issuerAttestationDigest(args: {
+    agreementCommitment: Hex32;
+    schemaHash: Hex32;
+    issuer: Address;
+    chainId: bigint;
+    verifyingContract: Address;
+}): Hex32;
+/** Recompute the commitment per spec 241 §3 (AR-01). */
+export declare function computeAgreementCommitment(args: {
+    partySetCommitment: Hex32;
+    issuerCommitment: Hex32;
+    termsCommitment: Hex32;
+    scheduleCommitment: Hex32;
+    salt: bigint;
+}): Hex32;
+/** Canonical party commitment: keccak256(abi.encodePacked(party1, party2)) — order-sensitive. */
+export declare function partySetCommitment(party1: Address, party2: Address): Hex32;
+/** Issuer commitment: keccak256(abi.encodePacked(issuer)). */
+export declare function issuerCommitment(issuer: Address): Hex32;
+/** Canonical hash of an arbitrary string for terms / schedule commitments. */
+export declare function bytesCommitment(value: string): Hex32;
+/** Nullifier derivation helper (per-mandate one-shot). */
+export declare function nullifierFor(args: {
+    agreementCommitment: Hex32;
+    toStatus: AgreementStatus;
+    party: Address;
+    secret: Hex32;
+}): Hex32;
+export interface AgreementIssuancePayload {
+    schemaHash: Hex32;
+    issuer: Address;
+    issuerSignature: Hex;
+    agreementCommitment: Hex32;
+    partySetCommitment: Hex32;
+    issuerCommitment: Hex32;
+    termsCommitment: Hex32;
+    scheduleCommitment: Hex32;
+    salt: bigint;
+}
+export interface StatusUpdatePayload {
+    agreementCommitment: Hex32;
+    toStatus: AgreementStatus;
+    nullifier: Hex32;
+    /** Signatures over the recomputed {@link transitionDigest} (RW1-3) — the
+     *  contract no longer accepts a caller-supplied `transitionStructHash`. */
+    signature1: Hex;
+    signature2: Hex;
+    signer1: Address;
+    signer2: Address;
+    /** RW1-2 (ADR-0027): the revealed parties + commitment components. The
+     *  contract recomputes the agreement commitment from these and requires each
+     *  signer to be one of the two parties. */
+    party1: Address;
+    party2: Address;
+    issuerCommitment: Hex32;
+    termsCommitment: Hex32;
+    scheduleCommitment: Hex32;
+    commitmentSalt: bigint;
+}
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,0BAA0B,CAAC;AAE7D,eAAO,MAAM,YAAY,kCAAkC,CAAC;AAC5D,eAAO,MAAM,cAAc,EAAG,iBAA0B,CAAC;AACzD,eAAO,MAAM,QAAQ,+CAA+C,CAAC;AAErE,MAAM,MAAM,KAAK,GAAG,KAAK,MAAM,EAAE,CAAC;AAElC,mEAAmE;AACnE,eAAO,MAAM,MAAM;;;;;;CAMT,CAAC;AACX,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,MAAM,CAAC,CAAC,MAAM,OAAO,MAAM,CAAC,CAAC;AAEnE;;;;GAIG;AACH,eAAO,MAAM,mBAAmB,EAAE,KAQjC,CAAC;AAEF;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE;IACrC,mBAAmB,EAAE,KAAK,CAAC;IAC3B,QAAQ,EAAE,eAAe,CAAC;IAC1B,SAAS,EAAE,KAAK,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,iBAAiB,EAAE,OAAO,CAAC;CAC5B,GAAG,KAAK,CAUR;AAED;;;GAGG;AACH,eAAO,MAAM,yBAAyB,EAAE,KAMvC,CAAC;AAEF;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAAE;IAC5C,mBAAmB,EAAE,KAAK,CAAC;IAC3B,UAAU,EAAE,KAAK,CAAC;IAClB,MAAM,EAAE,OAAO,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,iBAAiB,EAAE,OAAO,CAAC;CAC5B,GAAG,KAAK,CASR;AAED,wDAAwD;AACxD,wBAAgB,0BAA0B,CAAC,IAAI,EAAE;IAC/C,kBAAkB,EAAE,KAAK,CAAC;IAC1B,gBAAgB,EAAE,KAAK,CAAC;IACxB,eAAe,EAAE,KAAK,CAAC;IACvB,kBAAkB,EAAE,KAAK,CAAC;IAC1B,IAAI,EAAE,MAAM,CAAC;CACd,GAAG,KAAK,CAQR;AAED,iGAAiG;AACjG,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,GAAG,KAAK,CAK1E;AAED,8DAA8D;AAC9D,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,OAAO,GAAG,KAAK,CAIvD;AAED,8EAA8E;AAC9E,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,CAEpD;AAED,0DAA0D;AAC1D,wBAAgB,YAAY,CAAC,IAAI,EAAE;IACjC,mBAAmB,EAAE,KAAK,CAAC;IAC3B,QAAQ,EAAE,eAAe,CAAC;IAC1B,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,EAAE,KAAK,CAAC;CACf,GAAG,KAAK,CAOR;AAED,MAAM,WAAW,wBAAwB;IACvC,UAAU,EAAE,KAAK,CAAC;IAClB,MAAM,EAAE,OAAO,CAAC;IAChB,eAAe,EAAE,GAAG,CAAC;IACrB,mBAAmB,EAAE,KAAK,CAAC;IAC3B,kBAAkB,EAAE,KAAK,CAAC;IAC1B,gBAAgB,EAAE,KAAK,CAAC;IACxB,eAAe,EAAE,KAAK,CAAC;IACvB,kBAAkB,EAAE,KAAK,CAAC;IAC1B,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,mBAAmB;IAClC,mBAAmB,EAAE,KAAK,CAAC;IAC3B,QAAQ,EAAE,eAAe,CAAC;IAC1B,SAAS,EAAE,KAAK,CAAC;IACjB;+EAC2E;IAC3E,UAAU,EAAE,GAAG,CAAC;IAChB,UAAU,EAAE,GAAG,CAAC;IAChB,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,OAAO,CAAC;IACjB;;+CAE2C;IAC3C,MAAM,EAAE,OAAO,CAAC;IAChB,MAAM,EAAE,OAAO,CAAC;IAChB,gBAAgB,EAAE,KAAK,CAAC;IACxB,eAAe,EAAE,KAAK,CAAC;IACvB,kBAAkB,EAAE,KAAK,CAAC;IAC1B,cAAc,EAAE,MAAM,CAAC;CACxB"}

package/dist/index.js

@@ -0,0 +1,135 @@
+/**
+ * @agenticprimitives/agreements — Commitment-only AgreementRegistry SDK +
+ * AgreementCredential shape (PD-22).
+ *
+ * Authoritative spec: specs/241-agreement-commitment-registry.md
+ */
+import { keccak_256 } from '@noble/hashes/sha3.js';
+import { utf8ToBytes } from '@noble/hashes/utils.js';
+export const PACKAGE_NAME = '@agenticprimitives/agreements';
+export const PACKAGE_STATUS = 'w1-foundational';
+export const SPEC_REF = 'specs/241-agreement-commitment-registry.md';
+/** Status discriminators matching `AgreementRegistry.STATUS_*`. */
+export const STATUS = {
+    NONE: 0,
+    ACTIVE: 1,
+    COMPLETED: 2,
+    DISPUTED: 3,
+    REVOKED: 4,
+};
+/**
+ * RW1-3 (ADR-0027) — canonical transition typehash. MUST byte-equal
+ * `AgreementRegistry.TRANSITION_TYPEHASH`; enforced by the cross-stack
+ * typehash-equality gate (`check:eip712-typehash-equality`).
+ */
+export const TRANSITION_TYPEHASH = toHex32(keccak_256(
+// AGR-1 (audit 2026-06-10): bind chainId + verifyingContract so a transition signature can't be
+// replayed cross-chain or on a redeployed registry.
+utf8ToBytes('AgreementTransition(bytes32 agreementCommitment,uint8 toStatus,bytes32 nullifier,uint256 chainId,address verifyingContract)')));
+/**
+ * Recompute the transition digest the parties sign (RW1-3). Equals the contract's
+ * `keccak256(abi.encode(TRANSITION_TYPEHASH, agreementCommitment, toStatus, nullifier, chainId,
+ * verifyingContract))` — the on-chain `updateStatus` recomputes the same digest and verifies the party
+ * signatures against it. AGR-1: `chainId` + the registry address are bound (anti cross-chain/replay).
+ */
+export function transitionDigest(args) {
+    const buf = new Uint8Array(6 * 32);
+    writeHex32(buf, 0, TRANSITION_TYPEHASH);
+    writeHex32(buf, 32, args.agreementCommitment);
+    // uint8 toStatus, abi-encoded as a left-padded 32-byte word.
+    buf[95] = args.toStatus & 0xff;
+    writeHex32(buf, 96, args.nullifier);
+    writeUint256(buf, 128, args.chainId);
+    writeAddressLeftPadded(buf, 160, args.verifyingContract);
+    return toHex32(keccak_256(buf));
+}
+/**
+ * SC-1 (audit 2026-06-09) — canonical issuer-attestation typehash. MUST byte-equal
+ * `AgreementRegistry.AGREEMENT_ISSUER_TYPEHASH`; locked by the cross-stack typehash-equality gate.
+ */
+export const AGREEMENT_ISSUER_TYPEHASH = toHex32(keccak_256(utf8ToBytes('AgreementIssuerAttestation(bytes32 agreementCommitment,bytes32 schemaHash,address issuer,uint256 chainId,address verifyingContract)')));
+/**
+ * Recompute the digest the issuer signs (SC-1). Equals the contract's
+ * `keccak256(abi.encode(AGREEMENT_ISSUER_TYPEHASH, agreementCommitment, schemaHash, issuer, chainId,
+ * verifyingContract))` — `register` recomputes the same digest and verifies the issuer signature
+ * against it (no caller-supplied attestation hash). Bind `chainId` + the registry address.
+ */
+export function issuerAttestationDigest(args) {
+    const buf = new Uint8Array(6 * 32);
+    writeHex32(buf, 0, AGREEMENT_ISSUER_TYPEHASH);
+    writeHex32(buf, 32, args.agreementCommitment);
+    writeHex32(buf, 64, args.schemaHash);
+    writeAddressLeftPadded(buf, 96, args.issuer);
+    writeUint256(buf, 128, args.chainId);
+    writeAddressLeftPadded(buf, 160, args.verifyingContract);
+    return toHex32(keccak_256(buf));
+}
+/** Recompute the commitment per spec 241 §3 (AR-01). */
+export function computeAgreementCommitment(args) {
+    const buf = new Uint8Array(5 * 32);
+    writeHex32(buf, 0, args.partySetCommitment);
+    writeHex32(buf, 32, args.issuerCommitment);
+    writeHex32(buf, 64, args.termsCommitment);
+    writeHex32(buf, 96, args.scheduleCommitment);
+    writeUint256(buf, 128, args.salt);
+    return toHex32(keccak_256(buf));
+}
+/** Canonical party commitment: keccak256(abi.encodePacked(party1, party2)) — order-sensitive. */
+export function partySetCommitment(party1, party2) {
+    const buf = new Uint8Array(40);
+    writeAddressTight(buf, 0, party1);
+    writeAddressTight(buf, 20, party2);
+    return toHex32(keccak_256(buf));
+}
+/** Issuer commitment: keccak256(abi.encodePacked(issuer)). */
+export function issuerCommitment(issuer) {
+    const buf = new Uint8Array(20);
+    writeAddressTight(buf, 0, issuer);
+    return toHex32(keccak_256(buf));
+}
+/** Canonical hash of an arbitrary string for terms / schedule commitments. */
+export function bytesCommitment(value) {
+    return toHex32(keccak_256(utf8ToBytes(value)));
+}
+/** Nullifier derivation helper (per-mandate one-shot). */
+export function nullifierFor(args) {
+    const buf = new Uint8Array(32 + 1 + 32 + 32);
+    writeHex32(buf, 0, args.agreementCommitment);
+    buf[32] = args.toStatus;
+    writeAddressLeftPadded(buf, 33, args.party);
+    writeHex32(buf, 65, args.secret);
+    return toHex32(keccak_256(buf));
+}
+// ─── Helpers ──────────────────────────────────────────────────────────
+function toHex32(b) {
+    let hex = '0x';
+    for (const v of b)
+        hex += v.toString(16).padStart(2, '0');
+    return hex;
+}
+function writeAddressTight(buf, offset, addr) {
+    const clean = addr.toLowerCase().replace(/^0x/, '');
+    for (let i = 0; i < 20; i++) {
+        buf[offset + i] = parseInt(clean.substring(i * 2, i * 2 + 2), 16);
+    }
+}
+function writeAddressLeftPadded(buf, offset, addr) {
+    const clean = addr.toLowerCase().replace(/^0x/, '');
+    for (let i = 0; i < 20; i++) {
+        buf[offset + 12 + i] = parseInt(clean.substring(i * 2, i * 2 + 2), 16);
+    }
+}
+function writeHex32(buf, offset, h) {
+    const clean = h.toLowerCase().replace(/^0x/, '').padStart(64, '0');
+    for (let i = 0; i < 32; i++) {
+        buf[offset + i] = parseInt(clean.substring(i * 2, i * 2 + 2), 16);
+    }
+}
+function writeUint256(buf, offset, n) {
+    let v = n;
+    for (let i = 31; i >= 0; i--) {
+        buf[offset + i] = Number(v & 0xffn);
+        v = v >> 8n;
+    }
+}
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAGrD,MAAM,CAAC,MAAM,YAAY,GAAG,+BAA+B,CAAC;AAC5D,MAAM,CAAC,MAAM,cAAc,GAAG,iBAA0B,CAAC;AACzD,MAAM,CAAC,MAAM,QAAQ,GAAG,4CAA4C,CAAC;AAIrE,mEAAmE;AACnE,MAAM,CAAC,MAAM,MAAM,GAAG;IACpB,IAAI,EAAE,CAAC;IACP,MAAM,EAAE,CAAC;IACT,SAAS,EAAE,CAAC;IACZ,QAAQ,EAAE,CAAC;IACX,OAAO,EAAE,CAAC;CACF,CAAC;AAGX;;;;GAIG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAU,OAAO,CAC/C,UAAU;AACR,gGAAgG;AAChG,oDAAoD;AACpD,WAAW,CACT,6HAA6H,CAC9H,CACF,CACF,CAAC;AAEF;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAMhC;IACC,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IACnC,UAAU,CAAC,GAAG,EAAE,CAAC,EAAE,mBAAmB,CAAC,CAAC;IACxC,UAAU,CAAC,GAAG,EAAE,EAAE,EAAE,IAAI,CAAC,mBAAmB,CAAC,CAAC;IAC9C,6DAA6D;IAC7D,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;IAC/B,UAAU,CAAC,GAAG,EAAE,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IACpC,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IACrC,sBAAsB,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC;IACzD,OAAO,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;AAClC,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAU,OAAO,CACrD,UAAU,CACR,WAAW,CACT,qIAAqI,CACtI,CACF,CACF,CAAC;AAEF;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CAAC,IAMvC;IACC,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IACnC,UAAU,CAAC,GAAG,EAAE,CAAC,EAAE,yBAAyB,CAAC,CAAC;IAC9C,UAAU,CAAC,GAAG,EAAE,EAAE,EAAE,IAAI,CAAC,mBAAmB,CAAC,CAAC;IAC9C,UAAU,CAAC,GAAG,EAAE,EAAE,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;IACrC,sBAAsB,CAAC,GAAG,EAAE,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IAC7C,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IACrC,sBAAsB,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC;IACzD,OAAO,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;AAClC,CAAC;AAED,wDAAwD;AACxD,MAAM,UAAU,0BAA0B,CAAC,IAM1C;IACC,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IACnC,UAAU,CAAC,GAAG,EAAE,CAAC,EAAE,IAAI,CAAC,kBAAkB,CAAC,CAAC;IAC5C,UAAU,CAAC,GAAG,EAAE,EAAE,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAC3C,UAAU,CAAC,GAAG,EAAE,EAAE,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;IAC1C,UAAU,CAAC,GAAG,EAAE,EAAE,EAAE,IAAI,CAAC,kBAAkB,CAAC,CAAC;IAC7C,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IAClC,OAAO,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;AAClC,CAAC;AAED,iGAAiG;AACjG,MAAM,UAAU,kBAAkB,CAAC,MAAe,EAAE,MAAe;IACjE,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;IAC/B,iBAAiB,CAAC,GAAG,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;IAClC,iBAAiB,CAAC,GAAG,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC;IACnC,OAAO,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;AAClC,CAAC;AAED,8DAA8D;AAC9D,MAAM,UAAU,gBAAgB,CAAC,MAAe;IAC9C,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;IAC/B,iBAAiB,CAAC,GAAG,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;IAClC,OAAO,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;AAClC,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,eAAe,CAAC,KAAa;IAC3C,OAAO,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACjD,CAAC;AAED,0DAA0D;AAC1D,MAAM,UAAU,YAAY,CAAC,IAK5B;IACC,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;IAC7C,UAAU,CAAC,GAAG,EAAE,CAAC,EAAE,IAAI,CAAC,mBAAmB,CAAC,CAAC;IAC7C,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC;IACxB,sBAAsB,CAAC,GAAG,EAAE,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IAC5C,UAAU,CAAC,GAAG,EAAE,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IACjC,OAAO,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;AAClC,CAAC;AAmCD,yEAAyE;AAEzE,SAAS,OAAO,CAAC,CAAa;IAC5B,IAAI,GAAG,GAAG,IAAI,CAAC;IACf,KAAK,MAAM,CAAC,IAAI,CAAC;QAAE,GAAG,IAAI,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC1D,OAAO,GAAY,CAAC;AACtB,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAe,EAAE,MAAc,EAAE,IAAa;IACvE,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACpD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5B,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACpE,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAAC,GAAe,EAAE,MAAc,EAAE,IAAa;IAC5E,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACpD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5B,GAAG,CAAC,MAAM,GAAG,EAAE,GAAG,CAAC,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACzE,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,GAAe,EAAE,MAAc,EAAE,CAAQ;IAC3D,MAAM,KAAK,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;IACnE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5B,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACpE,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,GAAe,EAAE,MAAc,EAAE,CAAS;IAC9D,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,KAAK,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC7B,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC;QACpC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;IACd,CAAC;AACH,CAAC"}

package/package.json

@@ -0,0 +1,58 @@
+{
+  "name": "@agenticprimitives/agreements",
+  "version": "0.0.0-alpha.10",
+  "description": "Commitment-only AgreementRegistry SDK. Owns AgreementCredential shape (PD-22) + commitment math + bilateral status transitions + joint-assertion gateway.",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/agentictrustlabs/agenticprimitives.git",
+    "directory": "packages/agreements"
+  },
+  "homepage": "https://github.com/agentictrustlabs/agenticprimitives/tree/master/packages/agreements",
+  "bugs": {
+    "url": "https://github.com/agentictrustlabs/agenticprimitives/issues"
+  },
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "files": [
+    "LICENSE",
+    "dist",
+    "spec.md",
+    "README.md"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "peerDependencies": {
+    "viem": "^2.52.2"
+  },
+  "devDependencies": {
+    "vitest": "^4.1.8",
+    "viem": "^2.52.2"
+  },
+  "keywords": [
+    "agentic",
+    "primitives",
+    "agreements"
+  ],
+  "dependencies": {
+    "@noble/hashes": "^2.2.0",
+    "@agenticprimitives/types": "1.0.0-alpha.13",
+    "@agenticprimitives/verifiable-credentials": "0.0.0-alpha.10"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.build.json",
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "test": "vitest run",
+    "test:unit": "vitest run test/unit --passWithNoTests",
+    "test:watch": "vitest",
+    "clean": "rm -rf dist"
+  }
+}

package/spec.md

@@ -0,0 +1,5 @@
+# Spec pointer
+
+Canonical spec: [`../../specs/241-*.md`](../../specs/)
+
+Owning layers (per [coordination-substrate.md](../../docs/architecture/coordination-substrate.md)): layer-8.