@agenticprimitives/content-primitives 1.0.0-alpha.10

package/CLAUDE.md

@@ -0,0 +1,62 @@
+# @agenticprimitives/content-primitives — Claude guide
+
+Name → resolve → commit → entitlement-gate → cite, for content that lives
+off-platform and is controlled by third-party rights holders. **Bible verses are
+its first usage domain (spec 267), not its vocabulary.**
+
+## The one idea
+
+**Content is not an Agent.** A `CanonicalLocus` (a passage address) is
+**scheme-anchored** — a deterministic `locusId`, never registered, never an SA
+facet. Only *issuers/corpora* and *parties* are Smart Agents (ADR-0010 still
+governs them via `agent-naming`). This is the FRBR Work/Item split and the reason
+this is a new substrate, not an `agent-naming` record type. See ADR-0033.
+
+## What this package owns (FRBR)
+
+- `CanonicalLocus` (Work) — `computeLocusId(scheme, normalizedPath)`.
+- `CorpusManifest` (Manifestation) — issuer-owned, Merkle `corpusRoot`.
+- `ContentDescriptor` (Item) — the deliverable leaf; `commitment` +
+  `retrievalPointer` + issuer signature. **Never the text.**
+- `Entitlement` / `CitationAssertion` — VC 2.0 subjects (envelope from
+  `verifiable-credentials`).
+- Merkle helpers (`/merkle` subpath), commitment + descriptor verification,
+  fail-closed `evaluateEntitlement`.
+
+## Hard rules (ADR-0033 — do not break)
+
+- **R3 — no rendering text** in any descriptor, a commitment preimage we store,
+  or on-chain. Descriptors carry a `retrievalPointer`.
+- **R1 — no licensed/copyrighted content** in src/tests/fixtures (CI:
+  `check:no-licensed-content`).
+- **R4 — content-agnostic.** No faith/vertical vocabulary; `contentType` + the
+  `ReferenceScheme` are app-injected (CI: `check:no-domain-in-packages`).
+- **R5 — trust = issuer signature + access policy**, never a platform claim.
+
+## Boundary
+
+Allowed imports: `@agenticprimitives/types`, `@agenticprimitives/verifiable-credentials`,
+`viem`. ERC-1271 verification is **injected** (`SignatureVerifier`, ADR-0006) — do
+NOT import `agent-account`/`agent-naming`; apps compose them.
+
+## Drift triggers — STOP
+
+- "Register a locus / give a verse an SA / put it in `agent-naming`" — **STOP.**
+  Loci are scheme-anchored content (ADR-0033).
+- "Store the verse text / put text in the commitment we keep / on-chain" — **STOP** (R3).
+- "Hardcode a translation, book table, OSIS grammar, or `'bible-verse'`" — **STOP.**
+  App layer (spec 267); inject a `ReferenceScheme`.
+- "Implement the ZK/payment reserved fns" — that's Phase 4/5 (spec 266 §6).
+
+## Read first
+
+`../../specs/266-verifiable-content-substrate.md` ·
+`../../docs/architecture/decisions/0033-content-agnostic-verifiable-content-firewall.md`
+· then `src/index.ts`.
+
+## Validate
+
+```bash
+pnpm --filter @agenticprimitives/content-primitives typecheck
+pnpm --filter @agenticprimitives/content-primitives test
+```

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Agentic Trust Labs
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,63 @@
+# @agenticprimitives/content-primitives
+
+The verifiable content substrate — name, resolve, commit, entitlement-gate, and cite content that lives off-platform and is controlled by third-party rights holders.
+
+Agents increasingly act on content they do not own: quoting a licensed text, citing a canonical passage, gating access to a rights-held corpus. The naive approaches all fail — copy the text and you violate the license; trust the platform and the citation is unverifiable; mint every passage an identity and the identity layer drowns. This package takes the third path: content is **never an agent and never stored**. A unit of content gets a deterministic, scheme-anchored address; an issuer (who IS a Smart Agent) signs a commitment to it; readers verify the signature, evaluate the entitlement, and cite the result — all without the text ever entering the substrate ([ADR-0033](../../docs/architecture/decisions/0033-content-agnostic-verifiable-content-firewall.md)).
+
+The package is strictly content-agnostic: no rendering text in any descriptor or commitment we store (R3), no licensed material in the repo (R1), and the reference grammar is app-injected, never hardcoded (R4). Trust derives from the issuer's signature and access policy, never a platform claim (R5).
+
+Part of [agenticprimitives](../../README.md) — the trust substrate for the agent economy: one canonical Smart Agent identity with custody, delegation, naming, credentials, and audit evidence designed as one system.
+
+## Model (FRBR)
+
+| FRBR | Type | Notes |
+| --- | --- | --- |
+| Work | `CanonicalLocus` | scheme-anchored deterministic `locusId`; never registered |
+| Manifestation | `CorpusManifest` | issuer-owned, Merkle `corpusRoot`, signed |
+| Item | `ContentDescriptor` | commitment + `retrievalPointer` + issuer signature — **never text** |
+| — | `Entitlement` / `CitationAssertion` | W3C VC 2.0 subjects |
+
+The FRBR Work/Item split is why this is a new substrate and not another naming-record type: a content locus is an address computed from a reference scheme, while only issuers, corpora owners, and parties are Smart Agents (ADR-0010 still governs *them*).
+
+## Quick start
+
+```ts
+import {
+  buildCanonicalLocus, corpusRef, contentCommitment,
+  buildContentDescriptor, verifyContentDescriptor,
+  evaluateEntitlement, buildCitationAssertion,
+} from '@agenticprimitives/content-primitives';
+
+// 1. App supplies the reference grammar (kept out of the package — R4).
+const clauseScheme = { id: 'standard-clause', normalize: (p: string) => /* canonical form */ p };
+const locus = buildCanonicalLocus(clauseScheme, 'Part 4, Section 2'); // -> { locusId, path: 'Part4.Section2' }
+
+// 2. Issuer commits to off-platform text + signs a descriptor (no text on-chain — R3).
+const commitment = contentCommitment(renderingText); // keccak256, off-platform
+const descriptor = await buildContentDescriptor(
+  { locusId: locus.locusId, corpusRef: ref, contentType: 'standard-clause',
+    commitment, proofPolicy: 'signature', accessPolicy: 'public',
+    retrievalPointer: 'content://standard-clause/v3/Part4.Section2', issuer },
+  issuerSign, // signs descriptorHash via the issuer SA (ERC-1271)
+);
+
+// 3. Reader verifies (signature injected — ADR-0006) + gates + cites.
+const ok = await verifyContentDescriptor(descriptor, { verifySignature });
+const gate = evaluateEntitlement(descriptor.accessPolicy, descriptor.corpusRef);
+```
+
+Entitlement evaluation is fail-closed; Merkle helpers ship under the `/merkle` subpath; ERC-1271 signature verification is dependency-injected so the package stays at the base of the graph.
+
+## Status
+
+Phases 1–3 (naming, commitment, descriptor verification, entitlement gating, citation) are implemented and tested. **ZK proofs and paid access are reserved (Phase 4/5) and throw until implemented** — the full SDK surface and phased roadmap live in [spec 266](../../specs/266-verifiable-content-substrate.md) (see [`spec.md`](./spec.md)).
+
+Testnet/pilot-ready. Production launch is gated on the public checklist in the root README — including third-party contract audit and governance key rotation. Track every security finding live in [`docs/audits/findings.yaml`](../../docs/audits/findings.yaml).
+
+## Build
+
+```bash
+pnpm --filter @agenticprimitives/content-primitives typecheck
+pnpm --filter @agenticprimitives/content-primitives test
+pnpm --filter @agenticprimitives/content-primitives build
+```

package/dist/descriptor.d.ts

@@ -0,0 +1,67 @@
+import { type Hex } from 'viem';
+import type { BuildDescriptorInput, ContentCommitment, ContentDescriptor, DelegatingSigner, DelegatedAuthorityVerifier, SignatureVerifier } from './types.js';
+/**
+ * The frozen Phase-1 normalization profile id (spec 266 §7). Rules of
+ * `canonical-text-v1`: NFC; trim leading/trailing whitespace; collapse internal
+ * whitespace runs to a single space; text body only (verse numbers, labels,
+ * footnotes, headings, cross-refs, formatting are excluded by the caller before
+ * commitment); digest SHA-256 over UTF-8. Bump the version to change any rule.
+ */
+export declare const NORMALIZATION_V1 = "ap:normalization:canonical-text-v1";
+/** Apply the canonical-text-v1 normalization to a rendering body. */
+export declare function canonicalizeRendering(text: string): string;
+/**
+ * Structured commitment to an off-platform rendering (spec 266 §7):
+ * SHA-256 of the canonical-text-v1-normalized body. SHA-256 (not keccak) keeps
+ * the content commitment portable/standard; it is verified off-chain and never
+ * stored on-chain (ADR-0033 R3). Binds a descriptor to a rendering WITHOUT
+ * revealing it.
+ */
+export declare function contentCommitment(text: string): ContentCommitment;
+/** True iff `text` canonicalizes+hashes to the commitment value. */
+export declare function verifyCommitment(text: string, commitment: ContentCommitment): boolean;
+/** Throwing variant of {@link verifyCommitment}. */
+export declare function assertCommitment(text: string, commitment: ContentCommitment): void;
+/**
+ * Deterministic, domain-separated hash of the unsigned descriptor — both its
+ * cryptographic identity (ContentDescriptorId) AND the ERC-1271 signing
+ * preimage. `keccak256("ap:content-descriptor:v1\0" || JCS(unsigned))`. The
+ * domain separator keeps it from ever colliding with a canonical-locus id.
+ */
+export declare function descriptorHash(d: BuildDescriptorInput): Hex;
+/**
+ * Build a signed {@link ContentDescriptor}. `sign` signs {@link descriptorHash} — either as the issuer's
+ * own Smart Agent (ERC-1271), or, when `delegatingSigner` is given, as the issuer-AUTHORIZED operational
+ * key (e.g. Cloud KMS). The attached `delegatingSigner` lets a verifier root trust in the issuer SA while
+ * the day-to-day signing key is delegated/rotatable (no issuer custodian key held).
+ */
+export declare function buildContentDescriptor(input: BuildDescriptorInput, sign: (hash: Hex) => Promise<Hex> | Hex, delegatingSigner?: DelegatingSigner): Promise<ContentDescriptor>;
+export interface VerifyDescriptorOpts {
+    /** Verifies an ERC-1271/ECDSA signature by a signer (injected; ADR-0006). */
+    verifySignature: SignatureVerifier;
+    /** Verifies an issuer→delegate authorization leaf — REQUIRED when the descriptor carries
+     *  `delegatingSigner` (else delegate-signed descriptors fail closed). Injected (ADR-0006). */
+    verifyDelegatedAuthority?: DelegatedAuthorityVerifier;
+    /** Required when proofPolicy is `merkle-membership-v1`. */
+    corpusRoot?: Hex;
+    inclusionProof?: Hex[];
+    /** Current time (seconds) for validity/status checks; defaults to now. */
+    nowSeconds?: number;
+}
+/** Result of {@link verifyContentDescriptor} — an auditable VerificationResult. */
+export interface VerificationResult {
+    ok: boolean;
+    reason?: string;
+    signatureVerified: boolean;
+    statusOk: boolean;
+    withinValidity: boolean;
+    inclusionVerified?: boolean;
+}
+/**
+ * Verify a descriptor fail-closed (spec 266 §7): status must be `active`, the
+ * validity window must contain `now`, the issuer ERC-1271 signature over the
+ * canonical descriptor hash must verify, and — for `merkle-membership-v1` — the
+ * commitment must prove under `corpusRoot`. Reserved proof policies are rejected.
+ */
+export declare function verifyContentDescriptor(d: ContentDescriptor, opts: VerifyDescriptorOpts): Promise<VerificationResult>;
+//# sourceMappingURL=descriptor.d.ts.map

package/dist/descriptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"descriptor.d.ts","sourceRoot":"","sources":["../src/descriptor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAsC,KAAK,GAAG,EAAE,MAAM,MAAM,CAAC;AAEpE,OAAO,KAAK,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,0BAA0B,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAI9J;;;;;;GAMG;AACH,eAAO,MAAM,gBAAgB,uCAAuC,CAAC;AAErE,qEAAqE;AACrE,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAE1D;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,iBAAiB,CAOjE;AAED,oEAAoE;AACpE,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,iBAAiB,GAAG,OAAO,CAGrF;AAED,oDAAoD;AACpD,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,iBAAiB,GAAG,IAAI,CAIlF;AAKD;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,CAAC,EAAE,oBAAoB,GAAG,GAAG,CAE3D;AAED;;;;;GAKG;AACH,wBAAsB,sBAAsB,CAC1C,KAAK,EAAE,oBAAoB,EAC3B,IAAI,EAAE,CAAC,IAAI,EAAE,GAAG,KAAK,OAAO,CAAC,GAAG,CAAC,GAAG,GAAG,EACvC,gBAAgB,CAAC,EAAE,gBAAgB,GAClC,OAAO,CAAC,iBAAiB,CAAC,CAG5B;AAED,MAAM,WAAW,oBAAoB;IACnC,6EAA6E;IAC7E,eAAe,EAAE,iBAAiB,CAAC;IACnC;kGAC8F;IAC9F,wBAAwB,CAAC,EAAE,0BAA0B,CAAC;IACtD,2DAA2D;IAC3D,UAAU,CAAC,EAAE,GAAG,CAAC;IACjB,cAAc,CAAC,EAAE,GAAG,EAAE,CAAC;IACvB,0EAA0E;IAC1E,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,mFAAmF;AACnF,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,iBAAiB,EAAE,OAAO,CAAC;IAC3B,QAAQ,EAAE,OAAO,CAAC;IAClB,cAAc,EAAE,OAAO,CAAC;IACxB,iBAAiB,CAAC,EAAE,OAAO,CAAC;CAC7B;AAED;;;;;GAKG;AACH,wBAAsB,uBAAuB,CAC3C,CAAC,EAAE,iBAAiB,EACpB,IAAI,EAAE,oBAAoB,GACzB,OAAO,CAAC,kBAAkB,CAAC,CAiD7B"}

package/dist/descriptor.js

@@ -0,0 +1,128 @@
+import { keccak256, sha256, concat, toBytes } from 'viem';
+import { jcsCanonicalize } from '@agenticprimitives/verifiable-credentials';
+import { leafHash, verifyInclusion } from './merkle.js';
+import { CommitmentMismatchError } from './errors.js';
+/**
+ * The frozen Phase-1 normalization profile id (spec 266 §7). Rules of
+ * `canonical-text-v1`: NFC; trim leading/trailing whitespace; collapse internal
+ * whitespace runs to a single space; text body only (verse numbers, labels,
+ * footnotes, headings, cross-refs, formatting are excluded by the caller before
+ * commitment); digest SHA-256 over UTF-8. Bump the version to change any rule.
+ */
+export const NORMALIZATION_V1 = 'ap:normalization:canonical-text-v1';
+/** Apply the canonical-text-v1 normalization to a rendering body. */
+export function canonicalizeRendering(text) {
+    return text.normalize('NFC').replace(/\s+/g, ' ').trim();
+}
+/**
+ * Structured commitment to an off-platform rendering (spec 266 §7):
+ * SHA-256 of the canonical-text-v1-normalized body. SHA-256 (not keccak) keeps
+ * the content commitment portable/standard; it is verified off-chain and never
+ * stored on-chain (ADR-0033 R3). Binds a descriptor to a rendering WITHOUT
+ * revealing it.
+ */
+export function contentCommitment(text) {
+    return {
+        type: 'canonicalTextCommitment',
+        normalization: NORMALIZATION_V1,
+        algorithm: 'sha-256',
+        value: sha256(toBytes(canonicalizeRendering(text))),
+    };
+}
+/** True iff `text` canonicalizes+hashes to the commitment value. */
+export function verifyCommitment(text, commitment) {
+    if (commitment.algorithm !== 'sha-256' || commitment.normalization !== NORMALIZATION_V1)
+        return false;
+    return contentCommitment(text).value.toLowerCase() === commitment.value.toLowerCase();
+}
+/** Throwing variant of {@link verifyCommitment}. */
+export function assertCommitment(text, commitment) {
+    if (!verifyCommitment(text, commitment)) {
+        throw new CommitmentMismatchError('rendering does not match descriptor commitment');
+    }
+}
+/** Domain separator for the descriptor identity (distinct from the locus id). */
+const DESCRIPTOR_DOMAIN_SEP = 'ap:content-descriptor:v1\0';
+/**
+ * Deterministic, domain-separated hash of the unsigned descriptor — both its
+ * cryptographic identity (ContentDescriptorId) AND the ERC-1271 signing
+ * preimage. `keccak256("ap:content-descriptor:v1\0" || JCS(unsigned))`. The
+ * domain separator keeps it from ever colliding with a canonical-locus id.
+ */
+export function descriptorHash(d) {
+    return keccak256(concat([toBytes(DESCRIPTOR_DOMAIN_SEP), toBytes(jcsCanonicalize(d))]));
+}
+/**
+ * Build a signed {@link ContentDescriptor}. `sign` signs {@link descriptorHash} — either as the issuer's
+ * own Smart Agent (ERC-1271), or, when `delegatingSigner` is given, as the issuer-AUTHORIZED operational
+ * key (e.g. Cloud KMS). The attached `delegatingSigner` lets a verifier root trust in the issuer SA while
+ * the day-to-day signing key is delegated/rotatable (no issuer custodian key held).
+ */
+export async function buildContentDescriptor(input, sign, delegatingSigner) {
+    const signature = await sign(descriptorHash(input));
+    return { ...input, signature, ...(delegatingSigner ? { delegatingSigner } : {}) };
+}
+/**
+ * Verify a descriptor fail-closed (spec 266 §7): status must be `active`, the
+ * validity window must contain `now`, the issuer ERC-1271 signature over the
+ * canonical descriptor hash must verify, and — for `merkle-membership-v1` — the
+ * commitment must prove under `corpusRoot`. Reserved proof policies are rejected.
+ */
+export async function verifyContentDescriptor(d, opts) {
+    const now = opts.nowSeconds ?? Math.floor(Date.now() / 1000);
+    const statusOk = d.status === 'active';
+    const fromOk = !d.validFrom || Math.floor(new Date(d.validFrom).getTime() / 1000) <= now;
+    const untilOk = !d.validUntil || Math.floor(new Date(d.validUntil).getTime() / 1000) >= now;
+    const withinValidity = fromOk && untilOk;
+    const { signature, delegatingSigner, ...unsigned } = d;
+    const hash = descriptorHash(unsigned);
+    // Trust ALWAYS roots in the issuer SA. Either the issuer signed directly, or it authorized a delegate
+    // key (proven by the leaf) that signed — and even then the descriptor's issuer.address must equal the
+    // delegating issuer, so a delegate can never re-attribute a descriptor to a different issuer.
+    let signatureVerified;
+    let sigReason = 'issuer signature did not verify';
+    if (delegatingSigner) {
+        if (!opts.verifyDelegatedAuthority) {
+            signatureVerified = false;
+            sigReason = 'descriptor is delegate-signed but no delegated-authority verifier was provided';
+        }
+        else if (d.issuer.address.toLowerCase() !== delegatingSigner.delegatorIssuer.toLowerCase()) {
+            signatureVerified = false;
+            sigReason = 'delegatingSigner.delegatorIssuer ≠ descriptor issuer';
+        }
+        else {
+            const authOk = await opts.verifyDelegatedAuthority(delegatingSigner);
+            const sigOk = authOk && (await opts.verifySignature({ signer: delegatingSigner.delegateKey, hash, signature }));
+            signatureVerified = sigOk;
+            if (!authOk)
+                sigReason = 'issuer did not authorize the delegate signing key';
+            else if (!sigOk)
+                sigReason = 'delegate-key signature did not verify';
+        }
+    }
+    else {
+        signatureVerified = await opts.verifySignature({ signer: d.issuer.address, hash, signature });
+    }
+    const base = { ok: false, signatureVerified, statusOk, withinValidity };
+    if (!statusOk)
+        return { ...base, reason: `descriptor status is ${d.status}` };
+    if (!withinValidity)
+        return { ...base, reason: 'descriptor outside its validity window' };
+    if (!signatureVerified)
+        return { ...base, reason: sigReason };
+    switch (d.proofPolicy) {
+        case 'issuer-signature-v1':
+        case 'issuer-signature-and-hash-v1':
+            return { ...base, ok: true };
+        case 'merkle-membership-v1': {
+            if (!d.commitment || !opts.corpusRoot || !opts.inclusionProof) {
+                return { ...base, reason: 'merkle-membership-v1 requires commitment + corpusRoot + inclusionProof' };
+            }
+            const inclusionVerified = verifyInclusion(leafHash(d.commitment.value), opts.inclusionProof, opts.corpusRoot);
+            return { ...base, ok: inclusionVerified, inclusionVerified, reason: inclusionVerified ? undefined : 'commitment not included under corpusRoot' };
+        }
+        default:
+            return { ...base, reason: `proofPolicy ${d.proofPolicy} is reserved (spec 266 §6/§8)` };
+    }
+}
+//# sourceMappingURL=descriptor.js.map

package/dist/descriptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"descriptor.js","sourceRoot":"","sources":["../src/descriptor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAY,MAAM,MAAM,CAAC;AACpE,OAAO,EAAE,eAAe,EAAE,MAAM,2CAA2C,CAAC;AAE5E,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACxD,OAAO,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC;AAEtD;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,oCAAoC,CAAC;AAErE,qEAAqE;AACrE,MAAM,UAAU,qBAAqB,CAAC,IAAY;IAChD,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;AAC3D,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,OAAO;QACL,IAAI,EAAE,yBAAyB;QAC/B,aAAa,EAAE,gBAAgB;QAC/B,SAAS,EAAE,SAAS;QACpB,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC;KACpD,CAAC;AACJ,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,UAA6B;IAC1E,IAAI,UAAU,CAAC,SAAS,KAAK,SAAS,IAAI,UAAU,CAAC,aAAa,KAAK,gBAAgB;QAAE,OAAO,KAAK,CAAC;IACtG,OAAO,iBAAiB,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,UAAU,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;AACxF,CAAC;AAED,oDAAoD;AACpD,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,UAA6B;IAC1E,IAAI,CAAC,gBAAgB,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE,CAAC;QACxC,MAAM,IAAI,uBAAuB,CAAC,gDAAgD,CAAC,CAAC;IACtF,CAAC;AACH,CAAC;AAED,iFAAiF;AACjF,MAAM,qBAAqB,GAAG,4BAA4B,CAAC;AAE3D;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,CAAuB;IACpD,OAAO,SAAS,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,qBAAqB,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC1F,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,KAA2B,EAC3B,IAAuC,EACvC,gBAAmC;IAEnC,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC;IACpD,OAAO,EAAE,GAAG,KAAK,EAAE,SAAS,EAAE,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AACpF,CAAC;AAyBD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,CAAoB,EACpB,IAA0B;IAE1B,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAC7D,MAAM,QAAQ,GAAG,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC;IACvC,MAAM,MAAM,GAAG,CAAC,CAAC,CAAC,SAAS,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,IAAI,GAAG,CAAC;IACzF,MAAM,OAAO,GAAG,CAAC,CAAC,CAAC,UAAU,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,IAAI,GAAG,CAAC;IAC5F,MAAM,cAAc,GAAG,MAAM,IAAI,OAAO,CAAC;IAEzC,MAAM,EAAE,SAAS,EAAE,gBAAgB,EAAE,GAAG,QAAQ,EAAE,GAAG,CAAC,CAAC;IACvD,MAAM,IAAI,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;IACtC,sGAAsG;IACtG,sGAAsG;IACtG,8FAA8F;IAC9F,IAAI,iBAA0B,CAAC;IAC/B,IAAI,SAAS,GAAG,iCAAiC,CAAC;IAClD,IAAI,gBAAgB,EAAE,CAAC;QACrB,IAAI,CAAC,IAAI,CAAC,wBAAwB,EAAE,CAAC;YACnC,iBAAiB,GAAG,KAAK,CAAC;YAAC,SAAS,GAAG,gFAAgF,CAAC;QAC1H,CAAC;aAAM,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,KAAK,gBAAgB,CAAC,eAAe,CAAC,WAAW,EAAE,EAAE,CAAC;YAC7F,iBAAiB,GAAG,KAAK,CAAC;YAAC,SAAS,GAAG,sDAAsD,CAAC;QAChG,CAAC;aAAM,CAAC;YACN,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,wBAAwB,CAAC,gBAAgB,CAAC,CAAC;YACrE,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,IAAI,CAAC,eAAe,CAAC,EAAE,MAAM,EAAE,gBAAgB,CAAC,WAAW,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;YAChH,iBAAiB,GAAG,KAAK,CAAC;YAC1B,IAAI,CAAC,MAAM;gBAAE,SAAS,GAAG,mDAAmD,CAAC;iBACxE,IAAI,CAAC,KAAK;gBAAE,SAAS,GAAG,uCAAuC,CAAC;QACvE,CAAC;IACH,CAAC;SAAM,CAAC;QACN,iBAAiB,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;IAChG,CAAC;IAED,MAAM,IAAI,GAAuB,EAAE,EAAE,EAAE,KAAK,EAAE,iBAAiB,EAAE,QAAQ,EAAE,cAAc,EAAE,CAAC;IAC5F,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,wBAAwB,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IAC9E,IAAI,CAAC,cAAc;QAAE,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,wCAAwC,EAAE,CAAC;IAC1F,IAAI,CAAC,iBAAiB;QAAE,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAE9D,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;QACtB,KAAK,qBAAqB,CAAC;QAC3B,KAAK,8BAA8B;YACjC,OAAO,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QAC/B,KAAK,sBAAsB,CAAC,CAAC,CAAC;YAC5B,IAAI,CAAC,CAAC,CAAC,UAAU,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;gBAC9D,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,wEAAwE,EAAE,CAAC;YACvG,CAAC;YACD,MAAM,iBAAiB,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;YAC9G,OAAO,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,EAAE,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,0CAA0C,EAAE,CAAC;QACnJ,CAAC;QACD;YACE,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,eAAe,CAAC,CAAC,WAAW,+BAA+B,EAAE,CAAC;IAC5F,CAAC;AACH,CAAC"}

package/dist/entitlement.d.ts

@@ -0,0 +1,64 @@
+import type { UnsignedCredential } from '@agenticprimitives/verifiable-credentials';
+import type { Address, Hex } from '@agenticprimitives/types';
+import type { AccessPolicy, ContentCommitment, Entitlement } from './types.js';
+export interface EntitlementDecision {
+    decision: 'allow' | 'deny';
+    reason?: string;
+}
+/**
+ * Gate retrieval against a corpus's access policy (spec 266 §3 step 5).
+ * Deterministic, fail-closed (spec 266 §7). An accessPolicy is a POLICY INPUT,
+ * not a legal grant (ADR-0033 R5): the platform still decides here.
+ *  - `public`   → allow.
+ *  - `licensed`/`private` → require a presented {@link Entitlement} whose subject
+ *    corpusRef matches and which has not expired.
+ *  - unknown policy → deny.
+ *
+ * Cryptographic verification of the entitlement VC (issuer signature,
+ * revocation) is the caller's job via the `verifiable-credentials` verifier —
+ * pass an already-verified credential (ADR-0013: one mechanism, no fallback).
+ */
+export declare function evaluateEntitlement(accessPolicy: AccessPolicy, corpusRef: Hex, entitlement?: Entitlement, nowSeconds?: number): EntitlementDecision;
+export interface CitationInput {
+    /** Issuer of the citation (the resolving agent's SA, CAIP-10 or DID). */
+    issuer: string;
+    subjectId: string;
+    canonicalId: Hex;
+    descriptorId: string;
+    contentType: string;
+    citationKind: 'quote' | 'reference' | 'summary' | 'paraphrase';
+    commitment?: ContentCommitment;
+    commitmentVerified: boolean;
+    contentIssuer: Address;
+    validFrom: string;
+    /** Agentic provenance (which run/output produced the citation). */
+    agentRunId?: string;
+    outputId?: string;
+    /** Optional hash of the specific quoted span + the normalization spec used. */
+    quoteSpanHash?: Hex;
+    normalizationSpec?: string;
+    underEntitlement?: string;
+}
+/**
+ * Build an UNSIGNED citation credential — the AI-safe citation record. The
+ * caller signs it via `verifiable-credentials.signCredential` and emits it to
+ * the audit/provenance package (spec 266 §audit; do NOT invent a parallel audit
+ * model). Carries the commitment + verification result + agentic provenance,
+ * NEVER the rendering text (ADR-0033 R3).
+ */
+export declare function buildCitationAssertion(input: CitationInput): UnsignedCredential<{
+    id: string;
+    agentRunId?: string;
+    outputId?: string;
+    citationKind: 'quote' | 'reference' | 'summary' | 'paraphrase';
+    canonicalId: Hex;
+    descriptorId: string;
+    contentType: string;
+    commitment?: ContentCommitment;
+    commitmentVerified: boolean;
+    quoteSpanHash?: Hex;
+    normalizationSpec?: string;
+    issuer: Address;
+    underEntitlement?: string;
+}>;
+//# sourceMappingURL=entitlement.d.ts.map

package/dist/entitlement.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"entitlement.d.ts","sourceRoot":"","sources":["../src/entitlement.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,2CAA2C,CAAC;AACpF,OAAO,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,KAAK,EAAE,YAAY,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE/E,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,OAAO,GAAG,MAAM,CAAC;IAC3B,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,mBAAmB,CACjC,YAAY,EAAE,YAAY,EAC1B,SAAS,EAAE,GAAG,EACd,WAAW,CAAC,EAAE,WAAW,EACzB,UAAU,GAAE,MAAsC,GACjD,mBAAmB,CAkBrB;AAED,MAAM,WAAW,aAAa;IAC5B,yEAAyE;IACzE,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,GAAG,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,OAAO,GAAG,WAAW,GAAG,SAAS,GAAG,YAAY,CAAC;IAC/D,UAAU,CAAC,EAAE,iBAAiB,CAAC;IAC/B,kBAAkB,EAAE,OAAO,CAAC;IAC5B,aAAa,EAAE,OAAO,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,mEAAmE;IACnE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,+EAA+E;IAC/E,aAAa,CAAC,EAAE,GAAG,CAAC;IACpB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,aAAa,GAAG,kBAAkB,CAAC;IAC/E,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,OAAO,GAAG,WAAW,GAAG,SAAS,GAAG,YAAY,CAAC;IAC/D,WAAW,EAAE,GAAG,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,iBAAiB,CAAC;IAC/B,kBAAkB,EAAE,OAAO,CAAC;IAC5B,aAAa,CAAC,EAAE,GAAG,CAAC;IACpB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,MAAM,EAAE,OAAO,CAAC;IAChB,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B,CAAC,CAsBD"}

package/dist/entitlement.js

@@ -0,0 +1,64 @@
+/**
+ * Gate retrieval against a corpus's access policy (spec 266 §3 step 5).
+ * Deterministic, fail-closed (spec 266 §7). An accessPolicy is a POLICY INPUT,
+ * not a legal grant (ADR-0033 R5): the platform still decides here.
+ *  - `public`   → allow.
+ *  - `licensed`/`private` → require a presented {@link Entitlement} whose subject
+ *    corpusRef matches and which has not expired.
+ *  - unknown policy → deny.
+ *
+ * Cryptographic verification of the entitlement VC (issuer signature,
+ * revocation) is the caller's job via the `verifiable-credentials` verifier —
+ * pass an already-verified credential (ADR-0013: one mechanism, no fallback).
+ */
+export function evaluateEntitlement(accessPolicy, corpusRef, entitlement, nowSeconds = Math.floor(Date.now() / 1000)) {
+    if (accessPolicy === 'public')
+        return { decision: 'allow' };
+    if (accessPolicy !== 'licensed' && accessPolicy !== 'private') {
+        return { decision: 'deny', reason: `unknown accessPolicy: ${String(accessPolicy)}` };
+    }
+    if (!entitlement) {
+        return { decision: 'deny', reason: `${accessPolicy} corpus requires an entitlement` };
+    }
+    if (entitlement.credentialSubject.corpusRef.toLowerCase() !== corpusRef.toLowerCase()) {
+        return { decision: 'deny', reason: 'entitlement is for a different corpus' };
+    }
+    if (entitlement.validUntil) {
+        const exp = Math.floor(new Date(entitlement.validUntil).getTime() / 1000);
+        if (Number.isFinite(exp) && exp < nowSeconds) {
+            return { decision: 'deny', reason: 'entitlement expired' };
+        }
+    }
+    return { decision: 'allow' };
+}
+/**
+ * Build an UNSIGNED citation credential — the AI-safe citation record. The
+ * caller signs it via `verifiable-credentials.signCredential` and emits it to
+ * the audit/provenance package (spec 266 §audit; do NOT invent a parallel audit
+ * model). Carries the commitment + verification result + agentic provenance,
+ * NEVER the rendering text (ADR-0033 R3).
+ */
+export function buildCitationAssertion(input) {
+    return {
+        '@context': ['https://www.w3.org/ns/credentials/v2'],
+        type: ['VerifiableCredential', 'CitationAssertion'],
+        issuer: input.issuer,
+        validFrom: input.validFrom,
+        credentialSubject: {
+            id: input.subjectId,
+            ...(input.agentRunId ? { agentRunId: input.agentRunId } : {}),
+            ...(input.outputId ? { outputId: input.outputId } : {}),
+            citationKind: input.citationKind,
+            canonicalId: input.canonicalId,
+            descriptorId: input.descriptorId,
+            contentType: input.contentType,
+            ...(input.commitment ? { commitment: input.commitment } : {}),
+            commitmentVerified: input.commitmentVerified,
+            ...(input.quoteSpanHash ? { quoteSpanHash: input.quoteSpanHash } : {}),
+            ...(input.normalizationSpec ? { normalizationSpec: input.normalizationSpec } : {}),
+            issuer: input.contentIssuer,
+            ...(input.underEntitlement ? { underEntitlement: input.underEntitlement } : {}),
+        },
+    };
+}
+//# sourceMappingURL=entitlement.js.map

package/dist/entitlement.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"entitlement.js","sourceRoot":"","sources":["../src/entitlement.ts"],"names":[],"mappings":"AASA;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,mBAAmB,CACjC,YAA0B,EAC1B,SAAc,EACd,WAAyB,EACzB,aAAqB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;IAElD,IAAI,YAAY,KAAK,QAAQ;QAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;IAC5D,IAAI,YAAY,KAAK,UAAU,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;QAC9D,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,yBAAyB,MAAM,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC;IACvF,CAAC;IACD,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,YAAY,iCAAiC,EAAE,CAAC;IACxF,CAAC;IACD,IAAI,WAAW,CAAC,iBAAiB,CAAC,SAAS,CAAC,WAAW,EAAE,KAAK,SAAS,CAAC,WAAW,EAAE,EAAE,CAAC;QACtF,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,uCAAuC,EAAE,CAAC;IAC/E,CAAC;IACD,IAAI,WAAW,CAAC,UAAU,EAAE,CAAC;QAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC;QAC1E,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,UAAU,EAAE,CAAC;YAC7C,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC;QAC7D,CAAC;IACH,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;AAC/B,CAAC;AAuBD;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CAAC,KAAoB;IAezD,OAAO;QACL,UAAU,EAAE,CAAC,sCAAsC,CAAC;QACpD,IAAI,EAAE,CAAC,sBAAsB,EAAE,mBAAmB,CAAC;QACnD,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,iBAAiB,EAAE;YACjB,EAAE,EAAE,KAAK,CAAC,SAAS;YACnB,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7D,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvD,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7D,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;YAC5C,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtE,GAAG,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,KAAK,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClF,MAAM,EAAE,KAAK,CAAC,aAAa;YAC3B,GAAG,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,KAAK,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAChF;KACF,CAAC;AACJ,CAAC"}

package/dist/errors.d.ts

@@ -0,0 +1,9 @@
+/** A reference path failed its scheme's normalization. */
+export declare class InvalidReferenceError extends Error {
+    constructor(message: string);
+}
+/** A rendering's keccak commitment did not match its descriptor. */
+export declare class CommitmentMismatchError extends Error {
+    constructor(message: string);
+}
+//# sourceMappingURL=errors.d.ts.map

package/dist/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA,0DAA0D;AAC1D,qBAAa,qBAAsB,SAAQ,KAAK;gBAClC,OAAO,EAAE,MAAM;CAI5B;AAED,oEAAoE;AACpE,qBAAa,uBAAwB,SAAQ,KAAK;gBACpC,OAAO,EAAE,MAAM;CAI5B"}

package/dist/errors.js

@@ -0,0 +1,15 @@
+/** A reference path failed its scheme's normalization. */
+export class InvalidReferenceError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'InvalidReferenceError';
+    }
+}
+/** A rendering's keccak commitment did not match its descriptor. */
+export class CommitmentMismatchError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'CommitmentMismatchError';
+    }
+}
+//# sourceMappingURL=errors.js.map

package/dist/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA,0DAA0D;AAC1D,MAAM,OAAO,qBAAsB,SAAQ,KAAK;IAC9C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;IACtC,CAAC;CACF;AAED,oEAAoE;AACpE,MAAM,OAAO,uBAAwB,SAAQ,KAAK;IAChD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;IACxC,CAAC;CACF"}

package/dist/index.d.ts

@@ -0,0 +1,13 @@
+export declare const PACKAGE_NAME = "@agenticprimitives/content-primitives";
+export declare const PACKAGE_STATUS: "phase-1";
+export declare const SPEC_REF = "specs/266-verifiable-content-substrate.md";
+export type { AccessPolicy, ProofPolicy, DescriptorStatus, RightsStatus, TrustProfile, CanonicalLocus, CanonicalLocusEnvelope, CanonicalReference, ContentCommitment, CorpusManifest, WorkMeta, IssuerIdentityRef, ContentDescriptor, BuildDescriptorInput, SignatureVerifier, DelegatingSigner, DelegatedAuthorityVerifier, Entitlement, CitationAssertion, } from './types.js';
+export { computeCanonicalId, canonicalReference, corpusRef, LOCUS_ID_SCHEME } from './reference.js';
+export { jcsCanonicalize, canonicalHash } from '@agenticprimitives/verifiable-credentials';
+export { hashPair, leafHash, buildCorpusTree, merkleRoot, merkleProof, verifyInclusion, type CorpusTree, } from './merkle.js';
+export { NORMALIZATION_V1, canonicalizeRendering, contentCommitment, verifyCommitment, assertCommitment, descriptorHash, buildContentDescriptor, verifyContentDescriptor, type VerifyDescriptorOpts, type VerificationResult, } from './descriptor.js';
+export { resolveCandidates, type ResolutionConstraints, type Candidate, type ResolutionResult, type TrustProfileConfig, } from './resolution.js';
+export { evaluateEntitlement, buildCitationAssertion, type EntitlementDecision, type CitationInput, } from './entitlement.js';
+export { InvalidReferenceError, CommitmentMismatchError } from './errors.js';
+export { buildInclusionZkProof, bindPaymentMandate } from './reserved.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAYA,eAAO,MAAM,YAAY,0CAA0C,CAAC;AACpE,eAAO,MAAM,cAAc,EAAG,SAAkB,CAAC;AACjD,eAAO,MAAM,QAAQ,8CAA8C,CAAC;AAEpE,YAAY,EACV,YAAY,EACZ,WAAW,EACX,gBAAgB,EAChB,YAAY,EACZ,YAAY,EACZ,cAAc,EACd,sBAAsB,EACtB,kBAAkB,EAClB,iBAAiB,EACjB,cAAc,EACd,QAAQ,EACR,iBAAiB,EACjB,iBAAiB,EACjB,oBAAoB,EACpB,iBAAiB,EACjB,gBAAgB,EAChB,0BAA0B,EAC1B,WAAW,EACX,iBAAiB,GAClB,MAAM,YAAY,CAAC;AAEpB,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAGpG,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,2CAA2C,CAAC;AAE3F,OAAO,EACL,QAAQ,EACR,QAAQ,EACR,eAAe,EACf,UAAU,EACV,WAAW,EACX,eAAe,EACf,KAAK,UAAU,GAChB,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,gBAAgB,EAChB,qBAAqB,EACrB,iBAAiB,EACjB,gBAAgB,EAChB,gBAAgB,EAChB,cAAc,EACd,sBAAsB,EACtB,uBAAuB,EACvB,KAAK,oBAAoB,EACzB,KAAK,kBAAkB,GACxB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,iBAAiB,EACjB,KAAK,qBAAqB,EAC1B,KAAK,SAAS,EACd,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,GACxB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,mBAAmB,EACnB,sBAAsB,EACtB,KAAK,mBAAmB,EACxB,KAAK,aAAa,GACnB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAAE,qBAAqB,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC;AAG7E,OAAO,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC"}

package/dist/index.js

@@ -0,0 +1,26 @@
+// @agenticprimitives/content-primitives — the Verifiable Content Substrate SDK.
+//
+// Name → resolve → verify → retrieve → cite → audit, for content that lives
+// off-platform and is controlled by third-party rights holders. Content-
+// agnostic (ADR-0033): a verse is content, not an Agent; a canonical locus is a
+// deterministic hash of a scheme-INDEPENDENT structured form (registry-free, no
+// allocator), never a Smart Agent facet. No vertical/faith vocabulary, no
+// rendering text — descriptors carry a retrievalPointer + a SHA-256 commitment.
+//
+// See: ../../specs/266-verifiable-content-substrate.md
+//      ../../docs/architecture/decisions/0033-content-agnostic-verifiable-content-firewall.md
+export const PACKAGE_NAME = '@agenticprimitives/content-primitives';
+export const PACKAGE_STATUS = 'phase-1';
+export const SPEC_REF = 'specs/266-verifiable-content-substrate.md';
+export { computeCanonicalId, canonicalReference, corpusRef, LOCUS_ID_SCHEME } from './reference.js';
+// Re-export the ONE canonicalization stack (RFC 8785) — shared with credential
+// hashing so descriptor/locus ids and VC hashes never drift.
+export { jcsCanonicalize, canonicalHash } from '@agenticprimitives/verifiable-credentials';
+export { hashPair, leafHash, buildCorpusTree, merkleRoot, merkleProof, verifyInclusion, } from './merkle.js';
+export { NORMALIZATION_V1, canonicalizeRendering, contentCommitment, verifyCommitment, assertCommitment, descriptorHash, buildContentDescriptor, verifyContentDescriptor, } from './descriptor.js';
+export { resolveCandidates, } from './resolution.js';
+export { evaluateEntitlement, buildCitationAssertion, } from './entitlement.js';
+export { InvalidReferenceError, CommitmentMismatchError } from './errors.js';
+// Reserved for later phases (throw until implemented; spec 266 §6).
+export { buildInclusionZkProof, bindPaymentMandate } from './reserved.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,EAAE;AACF,4EAA4E;AAC5E,yEAAyE;AACzE,gFAAgF;AAChF,gFAAgF;AAChF,0EAA0E;AAC1E,gFAAgF;AAChF,EAAE;AACF,uDAAuD;AACvD,8FAA8F;AAE9F,MAAM,CAAC,MAAM,YAAY,GAAG,uCAAuC,CAAC;AACpE,MAAM,CAAC,MAAM,cAAc,GAAG,SAAkB,CAAC;AACjD,MAAM,CAAC,MAAM,QAAQ,GAAG,2CAA2C,CAAC;AAwBpE,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACpG,+EAA+E;AAC/E,6DAA6D;AAC7D,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,2CAA2C,CAAC;AAE3F,OAAO,EACL,QAAQ,EACR,QAAQ,EACR,eAAe,EACf,UAAU,EACV,WAAW,EACX,eAAe,GAEhB,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,gBAAgB,EAChB,qBAAqB,EACrB,iBAAiB,EACjB,gBAAgB,EAChB,gBAAgB,EAChB,cAAc,EACd,sBAAsB,EACtB,uBAAuB,GAGxB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,iBAAiB,GAKlB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,mBAAmB,EACnB,sBAAsB,GAGvB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAAE,qBAAqB,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC;AAE7E,oEAAoE;AACpE,OAAO,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC"}

package/dist/jcs.d.ts

@@ -0,0 +1,4 @@
+export declare function canonicalize(value: unknown): unknown;
+/** Canonical JSON string of `value` (sorted keys, undefined omitted). */
+export declare function jcsString(value: unknown): string;
+//# sourceMappingURL=jcs.d.ts.map

package/dist/jcs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"jcs.d.ts","sourceRoot":"","sources":["../src/jcs.ts"],"names":[],"mappings":"AAMA,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAYpD;AAED,yEAAyE;AACzE,wBAAgB,SAAS,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAEhD"}

package/dist/jcs.js

@@ -0,0 +1,25 @@
+// Deterministic, sorted-key canonical JSON (JCS-style). Sufficient for our
+// records (string/hex/number/bool fields); not a full RFC 8785 number
+// normalizer — keep numeric fields integer-valued. Used for both the canonical
+// locus id and the descriptor signing digest so hashing is stable regardless of
+// key insertion order.
+export function canonicalize(value) {
+    if (Array.isArray(value))
+        return value.map(canonicalize);
+    if (value && typeof value === 'object') {
+        const out = {};
+        for (const k of Object.keys(value).sort()) {
+            const v = value[k];
+            if (v === undefined)
+                continue; // omit undefined so optional fields don't shift the hash
+            out[k] = canonicalize(v);
+        }
+        return out;
+    }
+    return value;
+}
+/** Canonical JSON string of `value` (sorted keys, undefined omitted). */
+export function jcsString(value) {
+    return JSON.stringify(canonicalize(value));
+}
+//# sourceMappingURL=jcs.js.map

package/dist/jcs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jcs.js","sourceRoot":"","sources":["../src/jcs.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAC3E,sEAAsE;AACtE,+EAA+E;AAC/E,gFAAgF;AAChF,uBAAuB;AAEvB,MAAM,UAAU,YAAY,CAAC,KAAc;IACzC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IACzD,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,MAAM,GAAG,GAA4B,EAAE,CAAC;QACxC,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,KAAgC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YACrE,MAAM,CAAC,GAAI,KAAiC,CAAC,CAAC,CAAC,CAAC;YAChD,IAAI,CAAC,KAAK,SAAS;gBAAE,SAAS,CAAC,yDAAyD;YACxF,GAAG,CAAC,CAAC,CAAC,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC;QAC3B,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,SAAS,CAAC,KAAc;IACtC,OAAO,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;AAC7C,CAAC"}