@agenticprimitives/connect 0.1.0-alpha.2

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Agentic Trust Labs
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,51 @@
+# @agenticprimitives/connect
+
+**Agentic Connect** — the SSO broker ([spec 224](../../specs/224-agentic-connect.md);
+[ADR-0014](../../docs/architecture/decisions/0014-connect-is-an-sso-broker.md)).
+It runs at one central origin, proves a credential once (via
+[`connect-auth`](../connect-auth)), resolves it to a canonical agent (via
+[`identity-directory`](../identity-directory)), and issues a **CAIP-10-subject,
+no-owner `AgentSession`** that relying sites verify with the broker's public key.
+
+## What's here
+
+```
+token.ts     AgentSession mint/verify + JWKS — asymmetric (EdDSA/ES256), alg-pinned (CN-4)
+broker.ts    convergence (0→bootstrap / 1→issue / many→disambiguate) + issuance gates (CN-2/5/6/8)
+redirect.ts  redirect_uri allowlist + single-use auth-code store (CN-1/9)
+```
+
+## Usage (sketch)
+
+```ts
+import { generateBrokerKeypair, issueForResolution, verifyAgentSession, publishJwks } from '@agenticprimitives/connect';
+
+const signer = await generateBrokerKeypair();           // EdDSA by default
+const jwks = await publishJwks([signer]);               // serve at /.well-known/jwks.json
+
+// after connect-auth verifies a credential and identity-directory resolves it:
+const out = await issueForResolution({ resolution, principal, signer, aud: clientId, iss: connectOrigin, ttlSeconds: 600 });
+// out.status: 'issued' (token) | 'bootstrap' | 'disambiguate' | 'rejected'
+
+// relying site:
+const v = await verifyAgentSession(token, { keys: await importJwks(jwks), expectedIss: connectOrigin, expectedAud: clientId });
+```
+
+## Security (audit CN controls)
+
+- **Token (CN-4):** verification pins the algorithm to the key (by `kid`), never
+  the token's header — rejects `alg:none` + RS/ES↔HS confusion; an `AgentSession`
+  carrying an `owner` is rejected (ADR-0016).
+- **Issuance (CN-6/CN-8):** an existing-agent session needs `onchain-confirmed`
+  assurance (which the directory only assigns after an on-chain membership
+  confirm — a revoked credential never reaches issuance); a non-`eip155` subject
+  is identifier-only (no control session).
+- **Disambiguation (CN-5):** the chosen subject is server-validated against the
+  resolution set; never a client-echoed `sub`.
+- **Redirect (CN-1/9):** exact-match `redirect_uri` allowlist + single-use,
+  TTL-bounded auth-code exchange — the token never rides in a URL.
+- **Step-up (CN-2):** `requiresStepUp` classifies custody-class actions; a
+  login-grade session authorizes no on-chain write.
+
+The HS256 same-origin `BrokerSession` is `connect-auth`'s, a different token from
+this asymmetric cross-origin `AgentSession`.

package/dist/broker.d.ts

@@ -0,0 +1,78 @@
+import { type Resolution, type IdentityDirectory } from '@agenticprimitives/identity-directory';
+import type { CanonicalAgentId, CredentialPrincipal, Assurance } from '@agenticprimitives/types';
+import { type BrokerSigner } from './token';
+export type { IdentityDirectory };
+/** The convergence cardinality the broker branches on (spec 224 §5). */
+export type Convergence = {
+    kind: 'none';
+} | {
+    kind: 'one';
+    agent: CanonicalAgentId;
+    assurance: Assurance;
+} | {
+    kind: 'many';
+    agents: Array<{
+        id: CanonicalAgentId;
+        assurance: Assurance;
+    }>;
+};
+export declare function convergence(resolution: Resolution): Convergence;
+/** Only `eip155` subjects are custodied by this stack (CN-8; spec 226 §4). */
+export declare function isCustodiedNamespace(id: CanonicalAgentId): boolean;
+/** A control session that authenticates an existing agent needs this floor (CN-6). */
+export declare const SESSION_ISSUANCE_FLOOR: Assurance;
+export type IssueDecision = {
+    ok: true;
+} | {
+    ok: false;
+    reason: string;
+};
+/** Gate a would-be session issuance for one resolved agent. */
+export declare function canIssueSession(agentId: CanonicalAgentId, assurance: Assurance, opts?: {
+    floor?: Assurance;
+}): IssueDecision;
+/**
+ * Disambiguation server-binding (CN-5): the user's chosen subject MUST be a
+ * member of the exact resolution set. Never trust a client-echoed `sub`.
+ */
+export declare function selectFromResolution(resolution: Resolution, chosenSub: string): CanonicalAgentId | null;
+/** Custody-class actions that require step-up (CN-2 / §8). */
+export declare const CUSTODY_CLASS_ACTIONS: readonly ["credential-change", "custody-policy-change", "high-value-spend", "delegation-issue"];
+export type CustodyClassAction = (typeof CUSTODY_CLASS_ACTIONS)[number];
+/** Does this action require step-up to a custody-grade credential? */
+export declare function requiresStepUp(action: string): action is CustodyClassAction;
+export interface IssueForResolutionInput {
+    resolution: Resolution;
+    principal: CredentialPrincipal;
+    signer: BrokerSigner;
+    aud: string;
+    iss: string;
+    ttlSeconds: number;
+    floor?: Assurance;
+    now?: () => number;
+}
+export type IssueOutcome = {
+    status: 'issued';
+    token: string;
+    sub: CanonicalAgentId;
+    assurance: Assurance;
+} | {
+    status: 'bootstrap';
+} | {
+    status: 'disambiguate';
+    agents: Array<{
+        id: CanonicalAgentId;
+        assurance: Assurance;
+    }>;
+} | {
+    status: 'rejected';
+    reason: string;
+};
+/**
+ * Drive convergence → outcome. The single-agent path enforces the non-EVM gate +
+ * assurance floor before minting; 0 → bootstrap (the caller rate-limits, CN-11);
+ * many → disambiguate (the caller then re-enters with a chosen sub validated via
+ * selectFromResolution, CN-5).
+ */
+export declare function issueForResolution(input: IssueForResolutionInput): Promise<IssueOutcome>;
+//# sourceMappingURL=broker.d.ts.map

package/dist/broker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"broker.d.ts","sourceRoot":"","sources":["../src/broker.ts"],"names":[],"mappings":"AAcA,OAAO,EAAoB,KAAK,UAAU,EAAE,KAAK,iBAAiB,EAAE,MAAM,uCAAuC,CAAC;AAClH,OAAO,KAAK,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAC;AACjG,OAAO,EAAoB,KAAK,YAAY,EAAE,MAAM,SAAS,CAAC;AAE9D,YAAY,EAAE,iBAAiB,EAAE,CAAC;AAElC,wEAAwE;AACxE,MAAM,MAAM,WAAW,GACnB;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAChB;IAAE,IAAI,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,gBAAgB,CAAC;IAAC,SAAS,EAAE,SAAS,CAAA;CAAE,GAC9D;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,gBAAgB,CAAC;QAAC,SAAS,EAAE,SAAS,CAAA;KAAE,CAAC,CAAA;CAAE,CAAC;AAEpF,wBAAgB,WAAW,CAAC,UAAU,EAAE,UAAU,GAAG,WAAW,CAK/D;AAED,8EAA8E;AAC9E,wBAAgB,oBAAoB,CAAC,EAAE,EAAE,gBAAgB,GAAG,OAAO,CAElE;AAED,sFAAsF;AACtF,eAAO,MAAM,sBAAsB,EAAE,SAA+B,CAAC;AAErE,MAAM,MAAM,aAAa,GAAG;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAEzE,+DAA+D;AAC/D,wBAAgB,eAAe,CAC7B,OAAO,EAAE,gBAAgB,EACzB,SAAS,EAAE,SAAS,EACpB,IAAI,GAAE;IAAE,KAAK,CAAC,EAAE,SAAS,CAAA;CAAO,GAC/B,aAAa,CASf;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,GAAG,gBAAgB,GAAG,IAAI,CAGvG;AAED,8DAA8D;AAC9D,eAAO,MAAM,qBAAqB,iGAKxB,CAAC;AACX,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,qBAAqB,CAAC,CAAC,MAAM,CAAC,CAAC;AAExE,sEAAsE;AACtE,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,IAAI,kBAAkB,CAE3E;AAED,MAAM,WAAW,uBAAuB;IACtC,UAAU,EAAE,UAAU,CAAC;IACvB,SAAS,EAAE,mBAAmB,CAAC;IAC/B,MAAM,EAAE,YAAY,CAAC;IACrB,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,SAAS,CAAC;IAClB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB;AAED,MAAM,MAAM,YAAY,GACpB;IAAE,MAAM,EAAE,QAAQ,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,gBAAgB,CAAC;IAAC,SAAS,EAAE,SAAS,CAAA;CAAE,GAChF;IAAE,MAAM,EAAE,WAAW,CAAA;CAAE,GACvB;IAAE,MAAM,EAAE,cAAc,CAAC;IAAC,MAAM,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,gBAAgB,CAAC;QAAC,SAAS,EAAE,SAAS,CAAA;KAAE,CAAC,CAAA;CAAE,GACzF;IAAE,MAAM,EAAE,UAAU,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAE3C;;;;;GAKG;AACH,wBAAsB,kBAAkB,CAAC,KAAK,EAAE,uBAAuB,GAAG,OAAO,CAAC,YAAY,CAAC,CAqB9F"}

package/dist/broker.js

@@ -0,0 +1,86 @@
+// Broker convergence + session issuance (spec 224 §5/§8).
+//
+// Ties identity-directory resolution to AgentSession issuance, enforcing:
+//   - Convergence cardinality: 0 → bootstrap, 1 → issue, many → disambiguate.
+//   - Session-issuance assurance FLOOR (CN-6): an existing-agent session needs
+//     `onchain-confirmed` (which the directory only assigns after an on-chain
+//     membership confirm — so a revoked credential never reaches issuance).
+//   - Non-EVM control-status GATE (CN-8): a non-`eip155` subject is identifier-
+//     only — read/identifier-grade at most, never a control session.
+//   - Disambiguation server-binding (CN-5): the chosen sub MUST be in the
+//     resolution set returned by convergence.
+//   - Step-up classification (CN-2 / §8): custody-class actions need a
+//     custody-grade credential; a login-grade session authorizes no on-chain write.
+import { compareAssurance } from '@agenticprimitives/identity-directory';
+import { mintAgentSession } from './token';
+export function convergence(resolution) {
+    const agents = resolution.agents;
+    if (agents.length === 0)
+        return { kind: 'none' };
+    if (agents.length === 1)
+        return { kind: 'one', agent: agents[0].id, assurance: agents[0].assurance };
+    return { kind: 'many', agents: agents.map((a) => ({ id: a.id, assurance: a.assurance })) };
+}
+/** Only `eip155` subjects are custodied by this stack (CN-8; spec 226 §4). */
+export function isCustodiedNamespace(id) {
+    return id.startsWith('eip155:');
+}
+/** A control session that authenticates an existing agent needs this floor (CN-6). */
+export const SESSION_ISSUANCE_FLOOR = 'onchain-confirmed';
+/** Gate a would-be session issuance for one resolved agent. */
+export function canIssueSession(agentId, assurance, opts = {}) {
+    if (!isCustodiedNamespace(agentId)) {
+        return { ok: false, reason: 'non-EVM subject is identifier-only (read/identifier-grade only); cannot issue a control session (CN-8)' };
+    }
+    const floor = opts.floor ?? SESSION_ISSUANCE_FLOOR;
+    if (compareAssurance(assurance, floor) < 0) {
+        return { ok: false, reason: `assurance "${assurance}" is below the issuance floor "${floor}" (CN-6); step-up required` };
+    }
+    return { ok: true };
+}
+/**
+ * Disambiguation server-binding (CN-5): the user's chosen subject MUST be a
+ * member of the exact resolution set. Never trust a client-echoed `sub`.
+ */
+export function selectFromResolution(resolution, chosenSub) {
+    const match = resolution.agents.find((a) => a.id === chosenSub);
+    return match ? match.id : null;
+}
+/** Custody-class actions that require step-up (CN-2 / §8). */
+export const CUSTODY_CLASS_ACTIONS = [
+    'credential-change',
+    'custody-policy-change',
+    'high-value-spend',
+    'delegation-issue',
+];
+/** Does this action require step-up to a custody-grade credential? */
+export function requiresStepUp(action) {
+    return CUSTODY_CLASS_ACTIONS.includes(action);
+}
+/**
+ * Drive convergence → outcome. The single-agent path enforces the non-EVM gate +
+ * assurance floor before minting; 0 → bootstrap (the caller rate-limits, CN-11);
+ * many → disambiguate (the caller then re-enters with a chosen sub validated via
+ * selectFromResolution, CN-5).
+ */
+export async function issueForResolution(input) {
+    const c = convergence(input.resolution);
+    if (c.kind === 'none')
+        return { status: 'bootstrap' };
+    if (c.kind === 'many')
+        return { status: 'disambiguate', agents: c.agents };
+    const decision = canIssueSession(c.agent, c.assurance, { floor: input.floor });
+    if (!decision.ok)
+        return { status: 'rejected', reason: decision.reason };
+    const token = await mintAgentSession({
+        sub: c.agent,
+        principal: input.principal,
+        assurance: c.assurance,
+        aud: input.aud,
+        iss: input.iss,
+        ttlSeconds: input.ttlSeconds,
+        now: input.now,
+    }, input.signer);
+    return { status: 'issued', token, sub: c.agent, assurance: c.assurance };
+}
+//# sourceMappingURL=broker.js.map

package/dist/broker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"broker.js","sourceRoot":"","sources":["../src/broker.ts"],"names":[],"mappings":"AAAA,0DAA0D;AAC1D,EAAE;AACF,0EAA0E;AAC1E,8EAA8E;AAC9E,+EAA+E;AAC/E,8EAA8E;AAC9E,4EAA4E;AAC5E,gFAAgF;AAChF,qEAAqE;AACrE,0EAA0E;AAC1E,8CAA8C;AAC9C,uEAAuE;AACvE,oFAAoF;AAEpF,OAAO,EAAE,gBAAgB,EAA2C,MAAM,uCAAuC,CAAC;AAElH,OAAO,EAAE,gBAAgB,EAAqB,MAAM,SAAS,CAAC;AAU9D,MAAM,UAAU,WAAW,CAAC,UAAsB;IAChD,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;IACjC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IACjD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAE,CAAC,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAE,CAAC,SAAS,EAAE,CAAC;IACvG,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,EAAE,CAAC;AAC7F,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,oBAAoB,CAAC,EAAoB;IACvD,OAAO,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;AAClC,CAAC;AAED,sFAAsF;AACtF,MAAM,CAAC,MAAM,sBAAsB,GAAc,mBAAmB,CAAC;AAIrE,+DAA+D;AAC/D,MAAM,UAAU,eAAe,CAC7B,OAAyB,EACzB,SAAoB,EACpB,OAA8B,EAAE;IAEhC,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC,EAAE,CAAC;QACnC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,wGAAwG,EAAE,CAAC;IACzI,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,sBAAsB,CAAC;IACnD,IAAI,gBAAgB,CAAC,SAAS,EAAE,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,SAAS,kCAAkC,KAAK,4BAA4B,EAAE,CAAC;IAC3H,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,UAAsB,EAAE,SAAiB;IAC5E,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC;IAChE,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACjC,CAAC;AAED,8DAA8D;AAC9D,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,mBAAmB;IACnB,uBAAuB;IACvB,kBAAkB;IAClB,kBAAkB;CACV,CAAC;AAGX,sEAAsE;AACtE,MAAM,UAAU,cAAc,CAAC,MAAc;IAC3C,OAAQ,qBAA2C,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AACvE,CAAC;AAmBD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,KAA8B;IACrE,MAAM,CAAC,GAAG,WAAW,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACxC,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IACtD,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;IAE3E,MAAM,QAAQ,GAAG,eAAe,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;IAC/E,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;IAEzE,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAClC;QACE,GAAG,EAAE,CAAC,CAAC,KAAK;QACZ,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,SAAS,EAAE,CAAC,CAAC,SAAS;QACtB,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,GAAG,EAAE,KAAK,CAAC,GAAG;KACf,EACD,KAAK,CAAC,MAAM,CACb,CAAC;IACF,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC;AAC3E,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,4 @@
+export { generateBrokerKeypair, mintAgentSession, verifyAgentSession, mintIdToken, mintBoundIdToken, verifyIdToken, verifyEnrollmentGrantBinding, verifyPkceS256, exportPublicJwk, publishJwks, importJwks, type BrokerAlg, type BrokerSigner, type VerifyKey, type VerifyResult, type VerifyOpts, type MintAgentSessionInput, type OidcIdToken, type MintIdTokenInput, type BoundMintIdTokenInput, type VerifyIdTokenResult, type VerifyIdTokenOpts, } from './token';
+export { convergence, isCustodiedNamespace, SESSION_ISSUANCE_FLOOR, canIssueSession, selectFromResolution, requiresStepUp, CUSTODY_CLASS_ACTIONS, issueForResolution, type Convergence, type IssueDecision, type CustodyClassAction, type IssueForResolutionInput, type IssueOutcome, } from './broker';
+export { validateRedirectUri, newAuthCode, createInMemoryAuthCodeStore, type AuthCodeValue, type AuthCodeStore, } from './redirect';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAWA,OAAO,EACL,qBAAqB,EACrB,gBAAgB,EAChB,kBAAkB,EAClB,WAAW,EACX,gBAAgB,EAChB,aAAa,EACb,4BAA4B,EAC5B,cAAc,EACd,eAAe,EACf,WAAW,EACX,UAAU,EACV,KAAK,SAAS,EACd,KAAK,YAAY,EACjB,KAAK,SAAS,EACd,KAAK,YAAY,EACjB,KAAK,UAAU,EACf,KAAK,qBAAqB,EAC1B,KAAK,WAAW,EAChB,KAAK,gBAAgB,EACrB,KAAK,qBAAqB,EAC1B,KAAK,mBAAmB,EACxB,KAAK,iBAAiB,GACvB,MAAM,SAAS,CAAC;AAGjB,OAAO,EACL,WAAW,EACX,oBAAoB,EACpB,sBAAsB,EACtB,eAAe,EACf,oBAAoB,EACpB,cAAc,EACd,qBAAqB,EACrB,kBAAkB,EAClB,KAAK,WAAW,EAChB,KAAK,aAAa,EAClB,KAAK,kBAAkB,EACvB,KAAK,uBAAuB,EAC5B,KAAK,YAAY,GAClB,MAAM,UAAU,CAAC;AAGlB,OAAO,EACL,mBAAmB,EACnB,WAAW,EACX,2BAA2B,EAC3B,KAAK,aAAa,EAClB,KAAK,aAAa,GACnB,MAAM,YAAY,CAAC"}

package/dist/index.js

@@ -0,0 +1,16 @@
+// @agenticprimitives/connect — the SSO broker (spec 224 / ADR-0014).
+//
+// State-machine + token issuer that ties connect-auth (credential ceremonies) +
+// identity-directory (resolution) into a CAIP-10-subject, no-owner AgentSession.
+//
+// See:
+//   - capability.manifest.json — boundary (types + connect-auth + identity-directory)
+//   - ../../specs/224-agentic-connect.md — the contract
+//   - ../../docs/architecture/decisions/0014-connect-is-an-sso-broker.md
+// Token layer (asymmetric AgentSession + JWKS; CN-4) + OIDC id_token / PKCE (spec 230).
+export { generateBrokerKeypair, mintAgentSession, verifyAgentSession, mintIdToken, mintBoundIdToken, verifyIdToken, verifyEnrollmentGrantBinding, verifyPkceS256, exportPublicJwk, publishJwks, importJwks, } from './token';
+// Broker convergence + issuance (CN-2/5/6/8).
+export { convergence, isCustodiedNamespace, SESSION_ISSUANCE_FLOOR, canIssueSession, selectFromResolution, requiresStepUp, CUSTODY_CLASS_ACTIONS, issueForResolution, } from './broker';
+// Redirect & response delivery (CN-1/9).
+export { validateRedirectUri, newAuthCode, createInMemoryAuthCodeStore, } from './redirect';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,qEAAqE;AACrE,EAAE;AACF,gFAAgF;AAChF,iFAAiF;AACjF,EAAE;AACF,OAAO;AACP,sFAAsF;AACtF,wDAAwD;AACxD,yEAAyE;AAEzE,wFAAwF;AACxF,OAAO,EACL,qBAAqB,EACrB,gBAAgB,EAChB,kBAAkB,EAClB,WAAW,EACX,gBAAgB,EAChB,aAAa,EACb,4BAA4B,EAC5B,cAAc,EACd,eAAe,EACf,WAAW,EACX,UAAU,GAYX,MAAM,SAAS,CAAC;AAEjB,8CAA8C;AAC9C,OAAO,EACL,WAAW,EACX,oBAAoB,EACpB,sBAAsB,EACtB,eAAe,EACf,oBAAoB,EACpB,cAAc,EACd,qBAAqB,EACrB,kBAAkB,GAMnB,MAAM,UAAU,CAAC;AAElB,yCAAyC;AACzC,OAAO,EACL,mBAAmB,EACnB,WAAW,EACX,2BAA2B,GAG5B,MAAM,YAAY,CAAC"}

package/dist/redirect.d.ts

@@ -0,0 +1,27 @@
+/**
+ * Validate a requested `redirect_uri` against a per-client allowlist (CN-1).
+ * EXACT match only — never substring/prefix (open-redirect defense). The
+ * allowlist is registered out-of-band per `client_id`, never user-supplied.
+ */
+export declare function validateRedirectUri(registered: readonly string[], requested: string): boolean;
+export interface AuthCodeValue {
+    /** The minted AgentSession token. */
+    token: string;
+    /** The relying-site client_id this code (and token) is bound to. */
+    aud: string;
+}
+export interface AuthCodeStore {
+    /** Store a code → value with a TTL (ms). */
+    put(code: string, value: AuthCodeValue, ttlMs: number): void;
+    /** Single-use take: returns the value once (removing it) if present + unexpired, else null. */
+    take(code: string): AuthCodeValue | null;
+}
+/** Generate a single-use authorization code. */
+export declare function newAuthCode(byteLen?: number): string;
+/**
+ * In-memory single-use auth-code store (demo/tests; CN-9). `take` is atomic
+ * (deletes on read) so a code can be exchanged at most once. Production uses a
+ * shared store (e.g. KV/D1) with the same single-use contract.
+ */
+export declare function createInMemoryAuthCodeStore(now?: () => number): AuthCodeStore;
+//# sourceMappingURL=redirect.d.ts.map

package/dist/redirect.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redirect.d.ts","sourceRoot":"","sources":["../src/redirect.ts"],"names":[],"mappings":"AASA;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAE7F;AAED,MAAM,WAAW,aAAa;IAC5B,qCAAqC;IACrC,KAAK,EAAE,MAAM,CAAC;IACd,oEAAoE;IACpE,GAAG,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,aAAa;IAC5B,4CAA4C;IAC5C,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7D,+FAA+F;IAC/F,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,aAAa,GAAG,IAAI,CAAC;CAC1C;AAED,gDAAgD;AAChD,wBAAgB,WAAW,CAAC,OAAO,SAAK,GAAG,MAAM,CAKhD;AAED;;;;GAIG;AACH,wBAAgB,2BAA2B,CAAC,GAAG,GAAE,MAAM,MAAyB,GAAG,aAAa,CAc/F"}

package/dist/redirect.js

@@ -0,0 +1,46 @@
+// Redirect & response delivery (spec 224 §4a; CN-1 / CN-9).
+//
+// The AgentSession is NOT delivered as a bearer token in a redirect URL.
+// Instead: the broker mints the token, stores it under a single-use, short-TTL
+// authorization CODE, and redirects with the code; the relying site exchanges
+// the code server-side at the broker token endpoint for the token. This keeps
+// the token out of URLs/history/Referer and gives the broker (which holds the
+// atomic store) the single-use replay guarantee — relying sites need no store.
+/**
+ * Validate a requested `redirect_uri` against a per-client allowlist (CN-1).
+ * EXACT match only — never substring/prefix (open-redirect defense). The
+ * allowlist is registered out-of-band per `client_id`, never user-supplied.
+ */
+export function validateRedirectUri(registered, requested) {
+    return registered.includes(requested);
+}
+/** Generate a single-use authorization code. */
+export function newAuthCode(byteLen = 32) {
+    const b = new Uint8Array(byteLen);
+    globalThis.crypto.getRandomValues(b);
+    let s = typeof Buffer !== 'undefined' ? Buffer.from(b).toString('base64') : btoa(String.fromCharCode(...b));
+    return s.replace(/\+/g, '-').replace(/\//g, '_').replace(/=+$/, '');
+}
+/**
+ * In-memory single-use auth-code store (demo/tests; CN-9). `take` is atomic
+ * (deletes on read) so a code can be exchanged at most once. Production uses a
+ * shared store (e.g. KV/D1) with the same single-use contract.
+ */
+export function createInMemoryAuthCodeStore(now = () => Date.now()) {
+    const store = new Map();
+    return {
+        put(code, value, ttlMs) {
+            store.set(code, { value, expiresAt: now() + ttlMs });
+        },
+        take(code) {
+            const rec = store.get(code);
+            if (!rec)
+                return null;
+            store.delete(code); // single-use: gone after one read, even if expired
+            if (rec.expiresAt <= now())
+                return null;
+            return rec.value;
+        },
+    };
+}
+//# sourceMappingURL=redirect.js.map

package/dist/redirect.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redirect.js","sourceRoot":"","sources":["../src/redirect.ts"],"names":[],"mappings":"AAAA,4DAA4D;AAC5D,EAAE;AACF,yEAAyE;AACzE,+EAA+E;AAC/E,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,+EAA+E;AAE/E;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,UAA6B,EAAE,SAAiB;IAClF,OAAO,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;AACxC,CAAC;AAgBD,gDAAgD;AAChD,MAAM,UAAU,WAAW,CAAC,OAAO,GAAG,EAAE;IACtC,MAAM,CAAC,GAAG,IAAI,UAAU,CAAC,OAAO,CAAC,CAAC;IAClC,UAAU,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;IACrC,IAAI,CAAC,GAAG,OAAO,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAC5G,OAAO,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AACtE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,2BAA2B,CAAC,MAAoB,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE;IAC9E,MAAM,KAAK,GAAG,IAAI,GAAG,EAAuD,CAAC;IAC7E,OAAO;QACL,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK;YACpB,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;QACvD,CAAC;QACD,IAAI,CAAC,IAAI;YACP,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAC5B,IAAI,CAAC,GAAG;gBAAE,OAAO,IAAI,CAAC;YACtB,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,mDAAmD;YACvE,IAAI,GAAG,CAAC,SAAS,IAAI,GAAG,EAAE;gBAAE,OAAO,IAAI,CAAC;YACxC,OAAO,GAAG,CAAC,KAAK,CAAC;QACnB,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/token.d.ts

@@ -0,0 +1,193 @@
+import type { AgentSession, CanonicalAgentId, CredentialPrincipal, Assurance } from '@agenticprimitives/types';
+export type BrokerAlg = 'EdDSA' | 'ES256';
+export interface BrokerSigner {
+    kid: string;
+    alg: BrokerAlg;
+    privateKey: CryptoKey;
+    publicKey: CryptoKey;
+}
+/** A public verification key (the relying-site side; from a JWKS). */
+export interface VerifyKey {
+    kid: string;
+    alg: BrokerAlg;
+    publicKey: CryptoKey;
+}
+/** Generate a broker signing keypair. EdDSA (Ed25519) by default; ES256 fallback. */
+export declare function generateBrokerKeypair(alg?: BrokerAlg): Promise<BrokerSigner>;
+export interface MintAgentSessionInput {
+    sub: CanonicalAgentId;
+    principal: CredentialPrincipal;
+    assurance: Assurance;
+    /** Relying-site client_id (exact-match audience). */
+    aud: string;
+    /** The Connect origin. */
+    iss: string;
+    ttlSeconds: number;
+    now?: () => number;
+    jti?: string;
+    /** Per-subject derivation rotation (Google × KMS custody, spec 235 §5b). Carried so the custody
+     *  gate derives the matching per-subject key. Omitted for non-rotated sessions. */
+    rotation?: number;
+}
+/** Mint a signed AgentSession (asymmetric). */
+export declare function mintAgentSession(input: MintAgentSessionInput, signer: BrokerSigner): Promise<string>;
+export type VerifyResult = {
+    ok: true;
+    session: AgentSession;
+} | {
+    ok: false;
+    reason: string;
+};
+export interface VerifyOpts {
+    keys: VerifyKey[];
+    /**
+     * Audience expected for this AgentSession. **Required** (H7-B.4 closure of
+     * PKG-CONNECT-001-sec). The legacy optional form let a caller verify any
+     * AgentSession against any audience-A token mistakenly accepted at
+     * audience-B. Aligns with `verifyIdToken` which already required this.
+     */
+    expectedAud: string;
+    expectedIss?: string;
+    now?: () => number;
+    /**
+     * H7-B.4: explicit `iat` clock-skew tolerance in seconds. Default 30.
+     * Tokens whose `iat` is more than `clockSkewSec` in the future are
+     * rejected (closes PKG-CONNECT-002 — future-dated tokens were accepted).
+     */
+    clockSkewSec?: number;
+}
+/** Verify an AgentSession. Alg is PINNED to the key (by kid), never the token's header. */
+export declare function verifyAgentSession(token: string, opts: VerifyOpts): Promise<VerifyResult>;
+export interface OidcIdToken {
+    iss: string;
+    sub: CanonicalAgentId;
+    aud: string;
+    iat: number;
+    exp: number;
+    nonce?: string;
+    agent_name?: string;
+    canonical_agent_id: CanonicalAgentId;
+}
+/**
+ * @internal — broker-internal mint shape. **Do not call from relying-app
+ * code** (app-level SEC-001/SEC-002 root cause). The bound surface is
+ * {@link BoundMintIdTokenInput} + {@link mintBoundIdToken} (H7-B.5 closure
+ * of PKG-connect-001-arch). The two-flow split keeps the broker's internal
+ * mint distinct from any cross-origin enrollment mint a relying app might
+ * attempt.
+ */
+export interface MintIdTokenInput {
+    iss: string;
+    sub: CanonicalAgentId;
+    aud: string;
+    ttlSeconds: number;
+    nonce?: string;
+    agentName?: string;
+    now?: () => number;
+}
+/**
+ * H7-B.5 (PKG-connect-001-arch closure) — the **bound** mint surface.
+ *
+ * Every id_token issued in response to a cross-origin enrollment grant MUST
+ * carry binding fields tying the token to:
+ *
+ *   - `enrollmentGrantId` — the server-minted grant the user authorized
+ *     (closes the SEC-001 app-level root cause: tokens issued without
+ *     reference to an in-flight grant can be replayed to any registered RP).
+ *   - `delegationHash` — keccak256 of the issued scoped delegation
+ *     (closes SEC-002 lateral-movement: tokens become tied to the exact
+ *     delegation, not just `{aud, sub}`).
+ *
+ * Relying apps verify these via {@link verifyEnrollmentGrantBinding} after
+ * a standard {@link verifyIdToken} pass.
+ */
+export interface BoundMintIdTokenInput extends MintIdTokenInput {
+    /** Server-minted grant id this mint is authorized by (spec 230 §4.2). */
+    enrollmentGrantId: string;
+    /** keccak256 of the scoped delegation accompanying this enrollment. */
+    delegationHash: `0x${string}`;
+}
+/**
+ * @internal — mints an OIDC id_token signed with the broker key. Used by
+ * the broker's own re-auth path where no enrollment grant exists.
+ *
+ * Cross-origin enrollment **MUST** use {@link mintBoundIdToken} which
+ * additionally encodes `enrollment_grant_id` + `delegation_hash` so the
+ * relying app can verify the bind via {@link verifyEnrollmentGrantBinding}.
+ *
+ * `canonical_agent_id` mirrors `sub`.
+ */
+export declare function mintIdToken(input: MintIdTokenInput, signer: BrokerSigner): Promise<string>;
+/**
+ * H7-B.5 — mint an id_token bound to a server-minted enrollment grant +
+ * a scoped delegation hash. The two fields land on the wire as
+ * `enrollment_grant_id` + `delegation_hash` claims. Closes the package-side
+ * gap that let app-level SEC-001/SEC-002 ship.
+ */
+export declare function mintBoundIdToken(input: BoundMintIdTokenInput, signer: BrokerSigner): Promise<string>;
+/**
+ * H7-B.5 — relying-app helper. After a successful {@link verifyIdToken},
+ * pass the verified token + the expected binding (the grant id the app
+ * just consumed + the keccak256 of the scoped delegation it received).
+ *
+ * Returns `{ ok: true }` only when both bindings match. Off-chain replay
+ * of a token issued for a different grant or against a different delegation
+ * (the SEC-001 / SEC-002 vectors) fails with a precise reason.
+ */
+export declare function verifyEnrollmentGrantBinding(token: string, expected: {
+    enrollmentGrantId: string;
+    delegationHash: `0x${string}`;
+}): {
+    ok: true;
+} | {
+    ok: false;
+    reason: 'malformed' | 'missing-grant-id' | 'grant-id-mismatch' | 'missing-delegation-hash' | 'delegation-hash-mismatch';
+};
+export type VerifyIdTokenResult = {
+    ok: true;
+    claims: OidcIdToken;
+} | {
+    ok: false;
+    reason: string;
+};
+export interface VerifyIdTokenOpts {
+    keys: VerifyKey[];
+    expectedIss: string;
+    expectedAud: string;
+    expectedNonce?: string;
+    now?: () => number;
+}
+/** Verify an OIDC id_token. Alg PINNED to the key by `kid` (rejects alg:none/confusion);
+ *  `iss`/`aud` exact-match; `nonce` checked when expected; `exp` enforced. */
+export declare function verifyIdToken(token: string, opts: VerifyIdTokenOpts): Promise<VerifyIdTokenResult>;
+/** PKCE S256 verification (RFC 7636): `base64url(SHA-256(verifier)) === challenge`.
+ *  Used at the token endpoint to bind a code to the client's `code_verifier`. */
+export declare function verifyPkceS256(codeVerifier: string, codeChallenge: string): Promise<boolean>;
+type PublicJwk = JsonWebKey & {
+    kid: string;
+    alg: string;
+    use: string;
+};
+/** Export a signer's public key as a JWKS entry. */
+export declare function exportPublicJwk(k: {
+    kid: string;
+    alg: BrokerAlg;
+    publicKey: CryptoKey;
+}): Promise<PublicJwk>;
+/** Publish a JWKS document for relying sites to fetch + verify against. */
+export declare function publishJwks(keys: Array<{
+    kid: string;
+    alg: BrokerAlg;
+    publicKey: CryptoKey;
+}>): Promise<{
+    keys: PublicJwk[];
+}>;
+/** Import a JWKS document into verification keys (relying-site side). */
+export declare function importJwks(jwks: {
+    keys: Array<JsonWebKey & {
+        kid?: string;
+        alg?: string;
+    }>;
+}): Promise<VerifyKey[]>;
+export {};
+//# sourceMappingURL=token.d.ts.map

package/dist/token.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"token.d.ts","sourceRoot":"","sources":["../src/token.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EACV,YAAY,EACZ,gBAAgB,EAChB,mBAAmB,EACnB,SAAS,EACV,MAAM,0BAA0B,CAAC;AAElC,MAAM,MAAM,SAAS,GAAG,OAAO,GAAG,OAAO,CAAC;AAE1C,MAAM,WAAW,YAAY;IAC3B,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,SAAS,CAAC;IACf,UAAU,EAAE,SAAS,CAAC;IACtB,SAAS,EAAE,SAAS,CAAC;CACtB;AAED,sEAAsE;AACtE,MAAM,WAAW,SAAS;IACxB,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,SAAS,CAAC;IACf,SAAS,EAAE,SAAS,CAAC;CACtB;AAyBD,qFAAqF;AACrF,wBAAsB,qBAAqB,CAAC,GAAG,GAAE,SAAmB,GAAG,OAAO,CAAC,YAAY,CAAC,CAM3F;AAED,MAAM,WAAW,qBAAqB;IACpC,GAAG,EAAE,gBAAgB,CAAC;IACtB,SAAS,EAAE,mBAAmB,CAAC;IAC/B,SAAS,EAAE,SAAS,CAAC;IACrB,qDAAqD;IACrD,GAAG,EAAE,MAAM,CAAC;IACZ,0BAA0B;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,UAAU,EAAE,MAAM,CAAC;IACnB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;uFACmF;IACnF,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,+CAA+C;AAC/C,wBAAsB,gBAAgB,CAAC,KAAK,EAAE,qBAAqB,EAAE,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,CAsB1G;AAED,MAAM,MAAM,YAAY,GAAG;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,YAAY,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAE/F,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,SAAS,EAAE,CAAC;IAClB;;;;;OAKG;IACH,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,2FAA2F;AAC3F,wBAAsB,kBAAkB,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,YAAY,CAAC,CA8C/F;AAYD,MAAM,WAAW,WAAW;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,gBAAgB,CAAC;IACtB,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,kBAAkB,EAAE,gBAAgB,CAAC;CACtC;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,gBAAgB;IAC/B,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,gBAAgB,CAAC;IACtB,GAAG,EAAE,MAAM,CAAC;IACZ,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,WAAW,qBAAsB,SAAQ,gBAAgB;IAC7D,yEAAyE;IACzE,iBAAiB,EAAE,MAAM,CAAC;IAC1B,uEAAuE;IACvE,cAAc,EAAE,KAAK,MAAM,EAAE,CAAC;CAC/B;AAED;;;;;;;;;GASG;AACH,wBAAsB,WAAW,CAAC,KAAK,EAAE,gBAAgB,EAAE,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,CAiBhG;AAED;;;;;GAKG;AACH,wBAAsB,gBAAgB,CACpC,KAAK,EAAE,qBAAqB,EAC5B,MAAM,EAAE,YAAY,GACnB,OAAO,CAAC,MAAM,CAAC,CAsBjB;AAED;;;;;;;;GAQG;AACH,wBAAgB,4BAA4B,CAC1C,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE;IAAE,iBAAiB,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,KAAK,MAAM,EAAE,CAAA;CAAE,GAEpE;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GACZ;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,WAAW,GAAG,kBAAkB,GAAG,mBAAmB,GAAG,yBAAyB,GAAG,0BAA0B,CAAA;CAAE,CAsBzI;AAED,MAAM,MAAM,mBAAmB,GAAG;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,WAAW,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAEpG,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,SAAS,EAAE,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB;AAED;8EAC8E;AAC9E,wBAAsB,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CA4BxG;AAED;iFACiF;AACjF,wBAAsB,cAAc,CAAC,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAGlG;AAED,KAAK,SAAS,GAAG,UAAU,GAAG;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC;AAExE,oDAAoD;AACpD,wBAAsB,eAAe,CAAC,CAAC,EAAE;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,SAAS,CAAC;IAAC,SAAS,EAAE,SAAS,CAAA;CAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAGlH;AAED,2EAA2E;AAC3E,wBAAsB,WAAW,CAAC,IAAI,EAAE,KAAK,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,SAAS,CAAC;IAAC,SAAS,EAAE,SAAS,CAAA;CAAE,CAAC,GAAG,OAAO,CAAC;IAAE,IAAI,EAAE,SAAS,EAAE,CAAA;CAAE,CAAC,CAEpI;AAED,yEAAyE;AACzE,wBAAsB,UAAU,CAAC,IAAI,EAAE;IAAE,IAAI,EAAE,KAAK,CAAC,UAAU,GAAG;QAAE,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CAAE,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC,CAezH"}

package/dist/token.js

@@ -0,0 +1,260 @@
+// AgentSession token layer — asymmetric, JWKS-verifiable (spec 224 §4; CN-4).
+//
+// The cross-origin AgentSession is signed with the broker's PRIVATE key and
+// verified by relying sites with the PUBLIC key (via JWKS). EdDSA (Ed25519) is
+// the default; ES256 (ECDSA P-256) is a capability fallback. Both are Web Crypto
+// (no JWT library). The HS256 same-origin BrokerSession is a different token
+// (connect-auth's mintSession) — never verified here.
+//
+// SECURITY (CN-4): the verifier PINS the algorithm to the KEY (resolved by kid),
+// never to the token's own `alg` header — so alg-confusion (RS/ES↔HS) and
+// `alg: none` are rejected. ADR-0016: an AgentSession has NO `owner` field; a
+// token carrying one is rejected (defense in depth).
+import { base64urlEncode, base64urlDecode } from '@agenticprimitives/connect-auth';
+function genParams(alg) {
+    return alg === 'EdDSA' ? { name: 'Ed25519' } : { name: 'ECDSA', namedCurve: 'P-256' };
+}
+function importParams(alg) {
+    return alg === 'EdDSA' ? { name: 'Ed25519' } : { name: 'ECDSA', namedCurve: 'P-256' };
+}
+function sigParams(alg) {
+    return alg === 'EdDSA' ? { name: 'Ed25519' } : { name: 'ECDSA', hash: 'SHA-256' };
+}
+function randomB64url(byteLen) {
+    const b = new Uint8Array(byteLen);
+    globalThis.crypto.getRandomValues(b);
+    return base64urlEncode(b);
+}
+/** Copy into a fresh ArrayBuffer-backed view (Web Crypto BufferSource typing). */
+function freshBytes(u) {
+    const out = new Uint8Array(u.byteLength);
+    out.set(u);
+    return out;
+}
+/** Generate a broker signing keypair. EdDSA (Ed25519) by default; ES256 fallback. */
+export async function generateBrokerKeypair(alg = 'EdDSA') {
+    const kp = (await globalThis.crypto.subtle.generateKey(genParams(alg), true, [
+        'sign',
+        'verify',
+    ]));
+    return { kid: randomB64url(8), alg, privateKey: kp.privateKey, publicKey: kp.publicKey };
+}
+/** Mint a signed AgentSession (asymmetric). */
+export async function mintAgentSession(input, signer) {
+    const nowSec = Math.floor((input.now?.() ?? Date.now()) / 1000);
+    const payload = {
+        sub: input.sub,
+        principal: input.principal,
+        assurance: input.assurance,
+        aud: input.aud,
+        iss: input.iss,
+        iat: nowSec,
+        exp: nowSec + input.ttlSeconds,
+        jti: input.jti ?? randomB64url(12),
+        ...(input.rotation ? { rotation: input.rotation } : {}),
+    };
+    const header = { alg: signer.alg, kid: signer.kid, typ: 'JWT' };
+    const enc = new TextEncoder();
+    const signingInput = `${base64urlEncode(enc.encode(JSON.stringify(header)))}.${base64urlEncode(enc.encode(JSON.stringify(payload)))}`;
+    const sig = await globalThis.crypto.subtle.sign(sigParams(signer.alg), signer.privateKey, new TextEncoder().encode(signingInput));
+    return `${signingInput}.${base64urlEncode(new Uint8Array(sig))}`;
+}
+/** Verify an AgentSession. Alg is PINNED to the key (by kid), never the token's header. */
+export async function verifyAgentSession(token, opts) {
+    const parts = token.split('.');
+    if (parts.length !== 3)
+        return { ok: false, reason: 'not a 3-part JWT' };
+    const [h, p, s] = parts;
+    let header;
+    let payload;
+    try {
+        header = JSON.parse(new TextDecoder().decode(base64urlDecode(h)));
+        payload = JSON.parse(new TextDecoder().decode(base64urlDecode(p)));
+    }
+    catch {
+        return { ok: false, reason: 'header/payload not valid JSON' };
+    }
+    const key = opts.keys.find((k) => k.kid === header.kid);
+    if (!key)
+        return { ok: false, reason: `no key for kid "${header.kid}"` };
+    // Pin alg to the key — rejects alg-confusion + alg:none.
+    if (header.alg !== key.alg)
+        return { ok: false, reason: `alg "${header.alg}" does not match key alg "${key.alg}"` };
+    // iss-first (so an HS BrokerSession token can never enter this verifier).
+    if (opts.expectedIss && payload.iss !== opts.expectedIss)
+        return { ok: false, reason: 'iss mismatch' };
+    const valid = await globalThis.crypto.subtle.verify(sigParams(key.alg), key.publicKey, freshBytes(base64urlDecode(s)), new TextEncoder().encode(`${h}.${p}`));
+    if (!valid)
+        return { ok: false, reason: 'signature invalid' };
+    // H7-B.4: expectedAud is required (PKG-CONNECT-001-sec closure). The legacy
+    // optional form let callers verify any AgentSession against any audience.
+    if (typeof opts.expectedAud !== 'string' || opts.expectedAud.length === 0) {
+        return { ok: false, reason: 'expectedAud is required (H7-B.4)' };
+    }
+    if (payload.aud !== opts.expectedAud)
+        return { ok: false, reason: 'aud mismatch' };
+    const nowSec = Math.floor((opts.now?.() ?? Date.now()) / 1000);
+    if (typeof payload.exp !== 'number' || payload.exp <= nowSec)
+        return { ok: false, reason: 'expired' };
+    // H7-B.4: reject future-dated `iat` beyond clock-skew tolerance (PKG-CONNECT-002).
+    const clockSkewSec = opts.clockSkewSec ?? 30;
+    if (typeof payload.iat === 'number') {
+        const iat = payload.iat;
+        if (iat > nowSec + clockSkewSec)
+            return { ok: false, reason: 'iat in future beyond clock skew' };
+    }
+    if (payload.owner !== undefined)
+        return { ok: false, reason: 'AgentSession must not carry an owner field (ADR-0016)' };
+    return { ok: true, session: payload };
+}
+/**
+ * @internal — mints an OIDC id_token signed with the broker key. Used by
+ * the broker's own re-auth path where no enrollment grant exists.
+ *
+ * Cross-origin enrollment **MUST** use {@link mintBoundIdToken} which
+ * additionally encodes `enrollment_grant_id` + `delegation_hash` so the
+ * relying app can verify the bind via {@link verifyEnrollmentGrantBinding}.
+ *
+ * `canonical_agent_id` mirrors `sub`.
+ */
+export async function mintIdToken(input, signer) {
+    const nowSec = Math.floor((input.now?.() ?? Date.now()) / 1000);
+    const payload = {
+        iss: input.iss,
+        sub: input.sub,
+        aud: input.aud,
+        iat: nowSec,
+        exp: nowSec + input.ttlSeconds,
+        canonical_agent_id: input.sub,
+        ...(input.nonce ? { nonce: input.nonce } : {}),
+        ...(input.agentName ? { agent_name: input.agentName } : {}),
+    };
+    const header = { alg: signer.alg, kid: signer.kid, typ: 'JWT' };
+    const enc = new TextEncoder();
+    const signingInput = `${base64urlEncode(enc.encode(JSON.stringify(header)))}.${base64urlEncode(enc.encode(JSON.stringify(payload)))}`;
+    const sig = await globalThis.crypto.subtle.sign(sigParams(signer.alg), signer.privateKey, enc.encode(signingInput));
+    return `${signingInput}.${base64urlEncode(new Uint8Array(sig))}`;
+}
+/**
+ * H7-B.5 — mint an id_token bound to a server-minted enrollment grant +
+ * a scoped delegation hash. The two fields land on the wire as
+ * `enrollment_grant_id` + `delegation_hash` claims. Closes the package-side
+ * gap that let app-level SEC-001/SEC-002 ship.
+ */
+export async function mintBoundIdToken(input, signer) {
+    const nowSec = Math.floor((input.now?.() ?? Date.now()) / 1000);
+    const payload = {
+        iss: input.iss,
+        sub: input.sub,
+        aud: input.aud,
+        iat: nowSec,
+        exp: nowSec + input.ttlSeconds,
+        canonical_agent_id: input.sub,
+        enrollment_grant_id: input.enrollmentGrantId,
+        delegation_hash: input.delegationHash,
+        ...(input.nonce ? { nonce: input.nonce } : {}),
+        ...(input.agentName ? { agent_name: input.agentName } : {}),
+    };
+    const header = { alg: signer.alg, kid: signer.kid, typ: 'JWT' };
+    const enc = new TextEncoder();
+    const signingInput = `${base64urlEncode(enc.encode(JSON.stringify(header)))}.${base64urlEncode(enc.encode(JSON.stringify(payload)))}`;
+    const sig = await globalThis.crypto.subtle.sign(sigParams(signer.alg), signer.privateKey, enc.encode(signingInput));
+    return `${signingInput}.${base64urlEncode(new Uint8Array(sig))}`;
+}
+/**
+ * H7-B.5 — relying-app helper. After a successful {@link verifyIdToken},
+ * pass the verified token + the expected binding (the grant id the app
+ * just consumed + the keccak256 of the scoped delegation it received).
+ *
+ * Returns `{ ok: true }` only when both bindings match. Off-chain replay
+ * of a token issued for a different grant or against a different delegation
+ * (the SEC-001 / SEC-002 vectors) fails with a precise reason.
+ */
+export function verifyEnrollmentGrantBinding(token, expected) {
+    const parts = token.split('.');
+    if (parts.length !== 3)
+        return { ok: false, reason: 'malformed' };
+    let payload;
+    try {
+        payload = JSON.parse(new TextDecoder().decode(base64urlDecode(parts[1])));
+    }
+    catch {
+        return { ok: false, reason: 'malformed' };
+    }
+    if (typeof payload.enrollment_grant_id !== 'string') {
+        return { ok: false, reason: 'missing-grant-id' };
+    }
+    if (payload.enrollment_grant_id !== expected.enrollmentGrantId) {
+        return { ok: false, reason: 'grant-id-mismatch' };
+    }
+    if (typeof payload.delegation_hash !== 'string') {
+        return { ok: false, reason: 'missing-delegation-hash' };
+    }
+    if (payload.delegation_hash.toLowerCase() !== expected.delegationHash.toLowerCase()) {
+        return { ok: false, reason: 'delegation-hash-mismatch' };
+    }
+    return { ok: true };
+}
+/** Verify an OIDC id_token. Alg PINNED to the key by `kid` (rejects alg:none/confusion);
+ *  `iss`/`aud` exact-match; `nonce` checked when expected; `exp` enforced. */
+export async function verifyIdToken(token, opts) {
+    const parts = token.split('.');
+    if (parts.length !== 3)
+        return { ok: false, reason: 'not a 3-part JWT' };
+    const [h, p, s] = parts;
+    let header;
+    let claims;
+    try {
+        header = JSON.parse(new TextDecoder().decode(base64urlDecode(h)));
+        claims = JSON.parse(new TextDecoder().decode(base64urlDecode(p)));
+    }
+    catch {
+        return { ok: false, reason: 'header/payload not valid JSON' };
+    }
+    const key = opts.keys.find((k) => k.kid === header.kid);
+    if (!key)
+        return { ok: false, reason: `no key for kid "${header.kid}"` };
+    if (header.alg !== key.alg)
+        return { ok: false, reason: `alg "${header.alg}" does not match key alg "${key.alg}"` };
+    if (claims.iss !== opts.expectedIss)
+        return { ok: false, reason: 'iss mismatch' };
+    const valid = await globalThis.crypto.subtle.verify(sigParams(key.alg), key.publicKey, freshBytes(base64urlDecode(s)), new TextEncoder().encode(`${h}.${p}`));
+    if (!valid)
+        return { ok: false, reason: 'signature invalid' };
+    if (claims.aud !== opts.expectedAud)
+        return { ok: false, reason: 'aud mismatch' };
+    if (opts.expectedNonce !== undefined && claims.nonce !== opts.expectedNonce)
+        return { ok: false, reason: 'nonce mismatch' };
+    const nowSec = Math.floor((opts.now?.() ?? Date.now()) / 1000);
+    if (typeof claims.exp !== 'number' || claims.exp <= nowSec)
+        return { ok: false, reason: 'expired' };
+    return { ok: true, claims };
+}
+/** PKCE S256 verification (RFC 7636): `base64url(SHA-256(verifier)) === challenge`.
+ *  Used at the token endpoint to bind a code to the client's `code_verifier`. */
+export async function verifyPkceS256(codeVerifier, codeChallenge) {
+    const digest = await globalThis.crypto.subtle.digest('SHA-256', new TextEncoder().encode(codeVerifier));
+    return base64urlEncode(new Uint8Array(digest)) === codeChallenge;
+}
+/** Export a signer's public key as a JWKS entry. */
+export async function exportPublicJwk(k) {
+    const jwk = await globalThis.crypto.subtle.exportKey('jwk', k.publicKey);
+    return { ...jwk, kid: k.kid, alg: k.alg, use: 'sig' };
+}
+/** Publish a JWKS document for relying sites to fetch + verify against. */
+export async function publishJwks(keys) {
+    return { keys: await Promise.all(keys.map(exportPublicJwk)) };
+}
+/** Import a JWKS document into verification keys (relying-site side). */
+export async function importJwks(jwks) {
+    const out = [];
+    for (const jwk of jwks.keys) {
+        const alg = jwk.alg;
+        if (alg !== 'EdDSA' && alg !== 'ES256')
+            continue; // only the broker's algs
+        const publicKey = await globalThis.crypto.subtle.importKey('jwk', jwk, importParams(alg), false, ['verify']);
+        out.push({ kid: jwk.kid ?? '', alg, publicKey });
+    }
+    return out;
+}
+//# sourceMappingURL=token.js.map

package/dist/token.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token.js","sourceRoot":"","sources":["../src/token.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,EAAE;AACF,4EAA4E;AAC5E,+EAA+E;AAC/E,iFAAiF;AACjF,6EAA6E;AAC7E,sDAAsD;AACtD,EAAE;AACF,iFAAiF;AACjF,0EAA0E;AAC1E,8EAA8E;AAC9E,qDAAqD;AAErD,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAwBnF,SAAS,SAAS,CAAC,GAAc;IAC/B,OAAO,GAAG,KAAK,OAAO,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;AACxF,CAAC;AACD,SAAS,YAAY,CAAC,GAAc;IAClC,OAAO,GAAG,KAAK,OAAO,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;AACxF,CAAC;AACD,SAAS,SAAS,CAAC,GAAc;IAC/B,OAAO,GAAG,KAAK,OAAO,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;AACpF,CAAC;AAED,SAAS,YAAY,CAAC,OAAe;IACnC,MAAM,CAAC,GAAG,IAAI,UAAU,CAAC,OAAO,CAAC,CAAC;IAClC,UAAU,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;IACrC,OAAO,eAAe,CAAC,CAAC,CAAC,CAAC;AAC5B,CAAC;AAED,kFAAkF;AAClF,SAAS,UAAU,CAAC,CAAa;IAC/B,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IACzC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACX,OAAO,GAAG,CAAC;AACb,CAAC;AAED,qFAAqF;AACrF,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,MAAiB,OAAO;IAClE,MAAM,EAAE,GAAG,CAAC,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,GAAG,CAAwB,EAAE,IAAI,EAAE;QAClG,MAAM;QACN,QAAQ;KACT,CAAC,CAAkB,CAAC;IACrB,OAAO,EAAE,GAAG,EAAE,YAAY,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,EAAE,CAAC,UAAU,EAAE,SAAS,EAAE,EAAE,CAAC,SAAS,EAAE,CAAC;AAC3F,CAAC;AAkBD,+CAA+C;AAC/C,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,KAA4B,EAAE,MAAoB;IACvF,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;IAChE,MAAM,OAAO,GAAiB;QAC5B,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,GAAG,EAAE,MAAM;QACX,GAAG,EAAE,MAAM,GAAG,KAAK,CAAC,UAAU;QAC9B,GAAG,EAAE,KAAK,CAAC,GAAG,IAAI,YAAY,CAAC,EAAE,CAAC;QAClC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACxD,CAAC;IACF,MAAM,MAAM,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;IAChE,MAAM,GAAG,GAAG,IAAI,WAAW,EAAE,CAAC;IAC9B,MAAM,YAAY,GAAG,GAAG,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;IACtI,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAC7C,SAAS,CAAC,MAAM,CAAC,GAAG,CAAwB,EAC5C,MAAM,CAAC,UAAU,EACjB,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,CACvC,CAAC;IACF,OAAO,GAAG,YAAY,IAAI,eAAe,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;AACnE,CAAC;AAuBD,2FAA2F;AAC3F,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,KAAa,EAAE,IAAgB;IACtE,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;IACzE,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,GAAG,KAAiC,CAAC;IAEpD,IAAI,MAAsC,CAAC;IAC3C,IAAI,OAA2C,CAAC;IAChD,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAClE,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACrE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,+BAA+B,EAAE,CAAC;IAChE,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG,CAAC,CAAC;IACxD,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,MAAM,CAAC,GAAG,GAAG,EAAE,CAAC;IACzE,yDAAyD;IACzD,IAAI,MAAM,CAAC,GAAG,KAAK,GAAG,CAAC,GAAG;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,MAAM,CAAC,GAAG,6BAA6B,GAAG,CAAC,GAAG,GAAG,EAAE,CAAC;IACpH,0EAA0E;IAC1E,IAAI,IAAI,CAAC,WAAW,IAAI,OAAO,CAAC,GAAG,KAAK,IAAI,CAAC,WAAW;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;IAEvG,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CACjD,SAAS,CAAC,GAAG,CAAC,GAAG,CAAwB,EACzC,GAAG,CAAC,SAAS,EACb,UAAU,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,EAC9B,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CACtC,CAAC;IACF,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;IAE9D,4EAA4E;IAC5E,0EAA0E;IAC1E,IAAI,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ,IAAI,IAAI,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1E,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,kCAAkC,EAAE,CAAC;IACnE,CAAC;IACD,IAAI,OAAO,CAAC,GAAG,KAAK,IAAI,CAAC,WAAW;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;IACnF,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;IAC/D,IAAI,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ,IAAI,OAAO,CAAC,GAAG,IAAI,MAAM;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IACtG,mFAAmF;IACnF,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,EAAE,CAAC;IAC7C,IAAI,OAAQ,OAA6B,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC3D,MAAM,GAAG,GAAI,OAA2B,CAAC,GAAG,CAAC;QAC7C,IAAI,GAAG,GAAG,MAAM,GAAG,YAAY;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,iCAAiC,EAAE,CAAC;IACnG,CAAC;IACD,IAAK,OAA+B,CAAC,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,uDAAuD,EAAE,CAAC;IAEhJ,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAuB,EAAE,CAAC;AACxD,CAAC;AAgED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,KAAuB,EAAE,MAAoB;IAC7E,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;IAChE,MAAM,OAAO,GAAgB;QAC3B,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,GAAG,EAAE,MAAM;QACX,GAAG,EAAE,MAAM,GAAG,KAAK,CAAC,UAAU;QAC9B,kBAAkB,EAAE,KAAK,CAAC,GAAG;QAC7B,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9C,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC5D,CAAC;IACF,MAAM,MAAM,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;IAChE,MAAM,GAAG,GAAG,IAAI,WAAW,EAAE,CAAC;IAC9B,MAAM,YAAY,GAAG,GAAG,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;IACtI,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAwB,EAAE,MAAM,CAAC,UAAU,EAAE,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC;IAC3I,OAAO,GAAG,YAAY,IAAI,eAAe,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;AACnE,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,KAA4B,EAC5B,MAAoB;IAEpB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;IAChE,MAAM,OAAO,GAGT;QACF,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,GAAG,EAAE,MAAM;QACX,GAAG,EAAE,MAAM,GAAG,KAAK,CAAC,UAAU;QAC9B,kBAAkB,EAAE,KAAK,CAAC,GAAG;QAC7B,mBAAmB,EAAE,KAAK,CAAC,iBAAiB;QAC5C,eAAe,EAAE,KAAK,CAAC,cAAc;QACrC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9C,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC5D,CAAC;IACF,MAAM,MAAM,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;IAChE,MAAM,GAAG,GAAG,IAAI,WAAW,EAAE,CAAC;IAC9B,MAAM,YAAY,GAAG,GAAG,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;IACtI,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAwB,EAAE,MAAM,CAAC,UAAU,EAAE,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC;IAC3I,OAAO,GAAG,YAAY,IAAI,eAAe,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;AACnE,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,4BAA4B,CAC1C,KAAa,EACb,QAAsE;IAItE,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IAClE,IAAI,OAAqE,CAAC;IAC1E,IAAI,CAAC;QACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC;IAC7E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IAC5C,CAAC;IACD,IAAI,OAAO,OAAO,CAAC,mBAAmB,KAAK,QAAQ,EAAE,CAAC;QACpD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;IACnD,CAAC;IACD,IAAI,OAAO,CAAC,mBAAmB,KAAK,QAAQ,CAAC,iBAAiB,EAAE,CAAC;QAC/D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;IACpD,CAAC;IACD,IAAI,OAAO,OAAO,CAAC,eAAe,KAAK,QAAQ,EAAE,CAAC;QAChD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,yBAAyB,EAAE,CAAC;IAC1D,CAAC;IACD,IAAK,OAAO,CAAC,eAA0B,CAAC,WAAW,EAAE,KAAK,QAAQ,CAAC,cAAc,CAAC,WAAW,EAAE,EAAE,CAAC;QAChG,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,0BAA0B,EAAE,CAAC;IAC3D,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC;AAYD;8EAC8E;AAC9E,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,KAAa,EAAE,IAAuB;IACxE,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;IACzE,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,GAAG,KAAiC,CAAC;IACpD,IAAI,MAAsC,CAAC;IAC3C,IAAI,MAAmB,CAAC;IACxB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAClE,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACpE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,+BAA+B,EAAE,CAAC;IAChE,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG,CAAC,CAAC;IACxD,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,MAAM,CAAC,GAAG,GAAG,EAAE,CAAC;IACzE,IAAI,MAAM,CAAC,GAAG,KAAK,GAAG,CAAC,GAAG;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,MAAM,CAAC,GAAG,6BAA6B,GAAG,CAAC,GAAG,GAAG,EAAE,CAAC;IACpH,IAAI,MAAM,CAAC,GAAG,KAAK,IAAI,CAAC,WAAW;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;IAClF,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CACjD,SAAS,CAAC,GAAG,CAAC,GAAG,CAAwB,EACzC,GAAG,CAAC,SAAS,EACb,UAAU,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,EAC9B,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CACtC,CAAC;IACF,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;IAC9D,IAAI,MAAM,CAAC,GAAG,KAAK,IAAI,CAAC,WAAW;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;IAClF,IAAI,IAAI,CAAC,aAAa,KAAK,SAAS,IAAI,MAAM,CAAC,KAAK,KAAK,IAAI,CAAC,aAAa;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;IAC5H,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;IAC/D,IAAI,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,IAAI,MAAM,CAAC,GAAG,IAAI,MAAM;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IACpG,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AAC9B,CAAC;AAED;iFACiF;AACjF,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,YAAoB,EAAE,aAAqB;IAC9E,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC;IACxG,OAAO,eAAe,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC,KAAK,aAAa,CAAC;AACnE,CAAC;AAID,oDAAoD;AACpD,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,CAAwD;IAC5F,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC;IACzE,OAAO,EAAE,GAAG,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;AACxD,CAAC;AAED,2EAA2E;AAC3E,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,IAAkE;IAClG,OAAO,EAAE,IAAI,EAAE,MAAM,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,EAAE,CAAC;AAChE,CAAC;AAED,yEAAyE;AACzE,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAAkE;IACjG,MAAM,GAAG,GAAgB,EAAE,CAAC;IAC5B,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC;QACpB,IAAI,GAAG,KAAK,OAAO,IAAI,GAAG,KAAK,OAAO;YAAE,SAAS,CAAC,yBAAyB;QAC3E,MAAM,SAAS,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CACxD,KAAK,EACL,GAAG,EACH,YAAY,CAAC,GAAG,CAAwB,EACxC,KAAK,EACL,CAAC,QAAQ,CAAC,CACX,CAAC;QACF,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,IAAI,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,CAAC;IACnD,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/package.json

@@ -0,0 +1,57 @@
+{
+  "name": "@agenticprimitives/connect",
+  "version": "0.1.0-alpha.2",
+  "description": "Agentic Connect \u2014 the SSO broker (spec 224 / ADR-0014). Mints CAIP-10-subject, no-owner AgentSessions (asymmetric + JWKS); drives entry-flow convergence (connect-auth verify \u2192 identity-directory resolve \u2192 issue/bootstrap/disambiguate) with assurance floor, non-EVM gate, and code-exchange redirect security.",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/agentictrustlabs/agenticprimitives.git",
+    "directory": "packages/connect"
+  },
+  "homepage": "https://github.com/agentictrustlabs/agenticprimitives/tree/master/packages/connect",
+  "bugs": {
+    "url": "https://github.com/agentictrustlabs/agenticprimitives/issues"
+  },
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "files": [
+    "LICENSE",
+    "dist",
+    "spec.md",
+    "README.md"
+  ],
+  "scripts": {
+    "build": "tsc -p tsconfig.build.json",
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "test": "vitest run",
+    "test:unit": "vitest run test/unit",
+    "test:integration": "vitest run test/integration --passWithNoTests",
+    "test:watch": "vitest",
+    "clean": "rm -rf dist"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "peerDependencies": {
+    "@agenticprimitives/connect-auth": "workspace:*",
+    "@agenticprimitives/identity-directory": "workspace:*",
+    "@agenticprimitives/types": "workspace:*"
+  },
+  "devDependencies": {
+    "vitest": "^2.1.0"
+  },
+  "keywords": [
+    "sso",
+    "broker",
+    "agentsession",
+    "jwks",
+    "agentic"
+  ]
+}

package/spec.md

@@ -0,0 +1,13 @@
+# Spec — @agenticprimitives/connect
+
+The authoritative spec is [`specs/224-agentic-connect.md`](../../specs/224-agentic-connect.md)
+(broker model, AgentSession shape, token design §4, redirect/response §4a, entry
+flows + convergence §5, OIDC §6, WebAuthn §7, step-up §8, anti-patterns §9).
+
+Decision record: [ADR-0014 — Connect is an SSO broker at a central origin](../../docs/architecture/decisions/0014-connect-is-an-sso-broker.md).
+Subject + no-owner: [ADR-0016](../../docs/architecture/decisions/0016-canonical-agent-id-is-the-sso-subject.md).
+OIDC/social = login facet: [ADR-0017](../../docs/architecture/decisions/0017-oidc-social-is-a-login-facet-not-custody.md).
+Security controls CN-1…CN-12: [`docs/audits/sso-wave-audit-findings.md`](../../docs/audits/sso-wave-audit-findings.md).
+
+This file is the per-package pointer required by `check:package-docs`; do not
+duplicate the spec here — edit spec 224.