@agenticprimitives/content-primitives 1.0.0-alpha.10

package/dist/merkle.d.ts

@@ -0,0 +1,29 @@
+import { type Hex } from 'viem';
+/** Hash an ordered pair after sorting: keccak256(min || max). */
+export declare function hashPair(a: Hex, b: Hex): Hex;
+/**
+ * Leaf hash for a descriptor commitment. Double-hash (`keccak256(keccak256(c))`)
+ * to domain-separate leaves from internal nodes (second-preimage resistance).
+ */
+export declare function leafHash(descriptorCommitment: Hex): Hex;
+export interface CorpusTree {
+    root: Hex;
+    /** layers[0] = leaves, layers[n] = [root]. */
+    layers: Hex[][];
+}
+/**
+ * Build a Merkle tree over already-hashed leaves (see {@link leafHash}). An odd
+ * node at any level is promoted unchanged to the next level. Empty input yields
+ * the zero root.
+ */
+export declare function buildCorpusTree(leaves: Hex[]): CorpusTree;
+/** Convenience: root of a fresh tree over `leaves`. */
+export declare function merkleRoot(leaves: Hex[]): Hex;
+/**
+ * Inclusion proof (sibling path) for the leaf at `index`. Promoted (odd) nodes
+ * contribute no sibling at that level — matching {@link buildCorpusTree}.
+ */
+export declare function merkleProof(tree: CorpusTree, index: number): Hex[];
+/** Fold a leaf with its proof and compare against the root. */
+export declare function verifyInclusion(leaf: Hex, proof: Hex[], root: Hex): boolean;
+//# sourceMappingURL=merkle.d.ts.map

package/dist/merkle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"merkle.d.ts","sourceRoot":"","sources":["../src/merkle.ts"],"names":[],"mappings":"AAAA,OAAO,EAA8B,KAAK,GAAG,EAAE,MAAM,MAAM,CAAC;AAa5D,iEAAiE;AACjE,wBAAgB,QAAQ,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,GAAG,GAAG,CAG5C;AAED;;;GAGG;AACH,wBAAgB,QAAQ,CAAC,oBAAoB,EAAE,GAAG,GAAG,GAAG,CAEvD;AAED,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,GAAG,CAAC;IACV,8CAA8C;IAC9C,MAAM,EAAE,GAAG,EAAE,EAAE,CAAC;CACjB;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,UAAU,CAezD;AAED,uDAAuD;AACvD,wBAAgB,UAAU,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,GAAG,CAE7C;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,GAAG,GAAG,EAAE,CAWlE;AAED,+DAA+D;AAC/D,wBAAgB,eAAe,CAAC,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,GAAG,GAAG,OAAO,CAI3E"}

package/dist/merkle.js

@@ -0,0 +1,74 @@
+import { keccak256, concat, toBytes } from 'viem';
+// Generic Merkle commitment over a corpus of descriptor commitments (spec 266
+// §4). Net-new to the monorepo (the repo previously had only flat keccak
+// commitments in `agreements`). Sorted-pair hashing (OpenZeppelin-compatible)
+// so inclusion proofs are sibling-order-independent and verifiable on-chain in
+// a future ContentCorpusRegistry (spec 266 Phase 3).
+/** Order two hashes ascending (sorted-pair convention). */
+function sortPair(a, b) {
+    return a.toLowerCase() <= b.toLowerCase() ? [a, b] : [b, a];
+}
+/** Hash an ordered pair after sorting: keccak256(min || max). */
+export function hashPair(a, b) {
+    const [lo, hi] = sortPair(a, b);
+    return keccak256(concat([lo, hi]));
+}
+/**
+ * Leaf hash for a descriptor commitment. Double-hash (`keccak256(keccak256(c))`)
+ * to domain-separate leaves from internal nodes (second-preimage resistance).
+ */
+export function leafHash(descriptorCommitment) {
+    return keccak256(toBytes(keccak256(toBytes(descriptorCommitment))));
+}
+/**
+ * Build a Merkle tree over already-hashed leaves (see {@link leafHash}). An odd
+ * node at any level is promoted unchanged to the next level. Empty input yields
+ * the zero root.
+ */
+export function buildCorpusTree(leaves) {
+    if (leaves.length === 0) {
+        return { root: ('0x' + '0'.repeat(64)), layers: [[]] };
+    }
+    const layers = [leaves.slice()];
+    while (layers[layers.length - 1].length > 1) {
+        const prev = layers[layers.length - 1];
+        const next = [];
+        for (let i = 0; i < prev.length; i += 2) {
+            if (i + 1 === prev.length)
+                next.push(prev[i]);
+            else
+                next.push(hashPair(prev[i], prev[i + 1]));
+        }
+        layers.push(next);
+    }
+    return { root: layers[layers.length - 1][0], layers };
+}
+/** Convenience: root of a fresh tree over `leaves`. */
+export function merkleRoot(leaves) {
+    return buildCorpusTree(leaves).root;
+}
+/**
+ * Inclusion proof (sibling path) for the leaf at `index`. Promoted (odd) nodes
+ * contribute no sibling at that level — matching {@link buildCorpusTree}.
+ */
+export function merkleProof(tree, index) {
+    const proof = [];
+    let idx = index;
+    for (let level = 0; level < tree.layers.length - 1; level++) {
+        const nodes = tree.layers[level];
+        const isRight = idx % 2 === 1;
+        const siblingIdx = isRight ? idx - 1 : idx + 1;
+        if (siblingIdx < nodes.length)
+            proof.push(nodes[siblingIdx]);
+        idx = Math.floor(idx / 2);
+    }
+    return proof;
+}
+/** Fold a leaf with its proof and compare against the root. */
+export function verifyInclusion(leaf, proof, root) {
+    let computed = leaf;
+    for (const sibling of proof)
+        computed = hashPair(computed, sibling);
+    return computed.toLowerCase() === root.toLowerCase();
+}
+//# sourceMappingURL=merkle.js.map

package/dist/merkle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"merkle.js","sourceRoot":"","sources":["../src/merkle.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAY,MAAM,MAAM,CAAC;AAE5D,8EAA8E;AAC9E,yEAAyE;AACzE,8EAA8E;AAC9E,+EAA+E;AAC/E,qDAAqD;AAErD,2DAA2D;AAC3D,SAAS,QAAQ,CAAC,CAAM,EAAE,CAAM;IAC9B,OAAO,CAAC,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAC9D,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,QAAQ,CAAC,CAAM,EAAE,CAAM;IACrC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAChC,OAAO,SAAS,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;AACrC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,QAAQ,CAAC,oBAAyB;IAChD,OAAO,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,CAAC;AACtE,CAAC;AAQD;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,MAAa;IAC3C,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,EAAE,IAAI,EAAE,CAAC,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAQ,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC;IAChE,CAAC;IACD,MAAM,MAAM,GAAY,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;IACzC,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC;QACxC,MAAM,IAAI,GAAU,EAAE,CAAC;QACvB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;YACxC,IAAI,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,MAAM;gBAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC;;gBAC1C,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAE,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,CAAE,CAAC,CAAC,CAAC;QACnD,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpB,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC,CAAC,CAAE,EAAE,MAAM,EAAE,CAAC;AAC1D,CAAC;AAED,uDAAuD;AACvD,MAAM,UAAU,UAAU,CAAC,MAAa;IACtC,OAAO,eAAe,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC;AACtC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,IAAgB,EAAE,KAAa;IACzD,MAAM,KAAK,GAAU,EAAE,CAAC;IACxB,IAAI,GAAG,GAAG,KAAK,CAAC;IAChB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC;QAC5D,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAE,CAAC;QAClC,MAAM,OAAO,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC;QAC9B,MAAM,UAAU,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC;QAC/C,IAAI,UAAU,GAAG,KAAK,CAAC,MAAM;YAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAE,CAAC,CAAC;QAC9D,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;IAC5B,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,+DAA+D;AAC/D,MAAM,UAAU,eAAe,CAAC,IAAS,EAAE,KAAY,EAAE,IAAS;IAChE,IAAI,QAAQ,GAAG,IAAI,CAAC;IACpB,KAAK,MAAM,OAAO,IAAI,KAAK;QAAE,QAAQ,GAAG,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACpE,OAAO,QAAQ,CAAC,WAAW,EAAE,KAAK,IAAI,CAAC,WAAW,EAAE,CAAC;AACvD,CAAC"}

package/dist/reference.d.ts

@@ -0,0 +1,28 @@
+import { type Hex } from 'viem';
+import type { Address } from '@agenticprimitives/types';
+import type { CanonicalLocusEnvelope, CanonicalReference } from './types.js';
+/** The single canonical-locus id construction (pick-one; spec 266 §2.1). */
+export declare const LOCUS_ID_SCHEME: "ap-locus-id-v1";
+/**
+ * Deterministic, scheme-independent canonical-locus id (spec 266 §2.1):
+ *   `keccak256(utf8(DOMAIN_SEP) || utf8(JCS(envelope)))`.
+ *
+ * The CORE treats `envelope.canonicalLocus` as opaque controlled-token bytes;
+ * the vertical extension owns its meaning + validates it before this call.
+ * Because the id hashes a *normalized structured envelope* (not a surface
+ * string) under an explicit `locusProfile`, all surface grammars that denote the
+ * same locus collide to the same id, and only a deliberate profile/versification
+ * change moves it. Registry-free + reproducible — no allocator, no Smart Agent
+ * (ADR-0033). keccak keeps it EVM-anchorable for the Phase-3 registry. JCS does
+ * NOT Unicode-normalize strings, so callers MUST pass controlled tokens only.
+ */
+export declare function computeCanonicalId(envelope: CanonicalLocusEnvelope): Hex;
+/** Build a {@link CanonicalReference} from an envelope (+ optional human alias). */
+export declare function canonicalReference(envelope: CanonicalLocusEnvelope, alias?: string): CanonicalReference;
+/**
+ * Deterministic corpus reference (spec 266 §2.2).
+ * `corpusRef = keccak256(utf8(`${issuer}/${edition}/${version}`))`. Issuer
+ * address is lowercased so the id is independent of checksum casing.
+ */
+export declare function corpusRef(issuer: Address, edition: string, version: string): Hex;
+//# sourceMappingURL=reference.d.ts.map

package/dist/reference.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reference.d.ts","sourceRoot":"","sources":["../src/reference.ts"],"names":[],"mappings":"AAAA,OAAO,EAA8B,KAAK,GAAG,EAAE,MAAM,MAAM,CAAC;AAC5D,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,0BAA0B,CAAC;AAExD,OAAO,KAAK,EAAE,sBAAsB,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAE7E,4EAA4E;AAC5E,eAAO,MAAM,eAAe,EAAG,gBAAyB,CAAC;AAKzD;;;;;;;;;;;;GAYG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,sBAAsB,GAAG,GAAG,CAExE;AAED,oFAAoF;AACpF,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,sBAAsB,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,kBAAkB,CAEvG;AAED;;;;GAIG;AACH,wBAAgB,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,GAAG,CAEhF"}

package/dist/reference.js

@@ -0,0 +1,35 @@
+import { keccak256, concat, toBytes } from 'viem';
+import { jcsCanonicalize } from '@agenticprimitives/verifiable-credentials';
+/** The single canonical-locus id construction (pick-one; spec 266 §2.1). */
+export const LOCUS_ID_SCHEME = 'ap-locus-id-v1';
+/** Domain separator — prevents cross-primitive / cross-version hash collisions. */
+const LOCUS_ID_DOMAIN_SEP = 'ap:canonical-locus-id:v1\0';
+/**
+ * Deterministic, scheme-independent canonical-locus id (spec 266 §2.1):
+ *   `keccak256(utf8(DOMAIN_SEP) || utf8(JCS(envelope)))`.
+ *
+ * The CORE treats `envelope.canonicalLocus` as opaque controlled-token bytes;
+ * the vertical extension owns its meaning + validates it before this call.
+ * Because the id hashes a *normalized structured envelope* (not a surface
+ * string) under an explicit `locusProfile`, all surface grammars that denote the
+ * same locus collide to the same id, and only a deliberate profile/versification
+ * change moves it. Registry-free + reproducible — no allocator, no Smart Agent
+ * (ADR-0033). keccak keeps it EVM-anchorable for the Phase-3 registry. JCS does
+ * NOT Unicode-normalize strings, so callers MUST pass controlled tokens only.
+ */
+export function computeCanonicalId(envelope) {
+    return keccak256(concat([toBytes(LOCUS_ID_DOMAIN_SEP), toBytes(jcsCanonicalize(envelope))]));
+}
+/** Build a {@link CanonicalReference} from an envelope (+ optional human alias). */
+export function canonicalReference(envelope, alias) {
+    return { id: computeCanonicalId(envelope), envelope, ...(alias ? { alias } : {}) };
+}
+/**
+ * Deterministic corpus reference (spec 266 §2.2).
+ * `corpusRef = keccak256(utf8(`${issuer}/${edition}/${version}`))`. Issuer
+ * address is lowercased so the id is independent of checksum casing.
+ */
+export function corpusRef(issuer, edition, version) {
+    return keccak256(toBytes(`${issuer.toLowerCase()}/${edition}/${version}`));
+}
+//# sourceMappingURL=reference.js.map

package/dist/reference.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reference.js","sourceRoot":"","sources":["../src/reference.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAY,MAAM,MAAM,CAAC;AAE5D,OAAO,EAAE,eAAe,EAAE,MAAM,2CAA2C,CAAC;AAG5E,4EAA4E;AAC5E,MAAM,CAAC,MAAM,eAAe,GAAG,gBAAyB,CAAC;AAEzD,mFAAmF;AACnF,MAAM,mBAAmB,GAAG,4BAA4B,CAAC;AAEzD;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,kBAAkB,CAAC,QAAgC;IACjE,OAAO,SAAS,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,mBAAmB,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC/F,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,kBAAkB,CAAC,QAAgC,EAAE,KAAc;IACjF,OAAO,EAAE,EAAE,EAAE,kBAAkB,CAAC,QAAQ,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AACrF,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,SAAS,CAAC,MAAe,EAAE,OAAe,EAAE,OAAe;IACzE,OAAO,SAAS,CAAC,OAAO,CAAC,GAAG,MAAM,CAAC,WAAW,EAAE,IAAI,OAAO,IAAI,OAAO,EAAE,CAAC,CAAC,CAAC;AAC7E,CAAC"}

package/dist/reserved.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Zero-knowledge inclusion / "AI-cited-correctly" proof (spec 266 Phase 4).
+ * Reserved — proves a commitment is in a corpus (or that a citation is
+ * faithful) without revealing the rendering.
+ */
+export declare function buildInclusionZkProof(): Promise<never>;
+/**
+ * Bind a payment mandate to entitlement issuance for paid access (spec 266
+ * Phase 5). Reserved.
+ */
+export declare function bindPaymentMandate(): never;
+//# sourceMappingURL=reserved.d.ts.map

package/dist/reserved.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reserved.d.ts","sourceRoot":"","sources":["../src/reserved.ts"],"names":[],"mappings":"AAIA;;;;GAIG;AACH,wBAAsB,qBAAqB,IAAI,OAAO,CAAC,KAAK,CAAC,CAE5D;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,IAAI,KAAK,CAE1C"}

package/dist/reserved.js

@@ -0,0 +1,19 @@
+// Reserved API surface for later phases (spec 266 §6). These lock the shape so
+// apps can be written against them, and throw until implemented — mirroring the
+// agent-naming Phase-1 skeleton discipline. NO silent no-ops (ADR-0013).
+/**
+ * Zero-knowledge inclusion / "AI-cited-correctly" proof (spec 266 Phase 4).
+ * Reserved — proves a commitment is in a corpus (or that a citation is
+ * faithful) without revealing the rendering.
+ */
+export async function buildInclusionZkProof() {
+    throw new Error('verifiable-content: ZK proofs are reserved (spec 266 Phase 4)');
+}
+/**
+ * Bind a payment mandate to entitlement issuance for paid access (spec 266
+ * Phase 5). Reserved.
+ */
+export function bindPaymentMandate() {
+    throw new Error('verifiable-content: paid access is reserved (spec 266 Phase 5)');
+}
+//# sourceMappingURL=reserved.js.map

package/dist/reserved.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reserved.js","sourceRoot":"","sources":["../src/reserved.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,gFAAgF;AAChF,yEAAyE;AAEzE;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB;IACzC,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;AACnF,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB;IAChC,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;AACpF,CAAC"}

package/dist/resolution.d.ts

@@ -0,0 +1,41 @@
+import type { Address } from '@agenticprimitives/types';
+import type { ContentDescriptor, CanonicalReference, RightsStatus, TrustProfile } from './types.js';
+export interface ResolutionConstraints {
+    contentType?: string;
+    language?: string;
+    /** Acceptable rights postures (e.g. ['public-domain']). */
+    rightsStatus?: RightsStatus[];
+    trustProfile?: TrustProfile;
+}
+/** A descriptor plus the profile/constraint screening outcome (pre-verification). */
+export interface Candidate {
+    descriptor: ContentDescriptor;
+    /** True iff the descriptor's issuer is in the active trust profile's allowlist. */
+    issuerTrusted: boolean;
+    /** True iff the descriptor passed all constraint filters. */
+    admitted: boolean;
+    /** Why a candidate was screened out (when !admitted). */
+    reason?: string;
+}
+export interface ResolutionResult {
+    canonicalReference: CanonicalReference;
+    candidates: Candidate[];
+}
+/** A trust profile = an issuer allowlist + posture flags. Phase 1 wires
+ *  `public-domain-demo` only; the rest are reserved shapes (spec 266 §policy). */
+export interface TrustProfileConfig {
+    profile: TrustProfile;
+    /** Issuer Smart Agent addresses trusted under this profile. Empty = trust none. */
+    trustedIssuers: Address[];
+    /** If set, only these rights postures are admitted. */
+    allowedRightsStatus?: RightsStatus[];
+    /** If true, an untrusted issuer is screened out (admitted=false). */
+    requireTrustedIssuer: boolean;
+}
+/**
+ * Screen descriptors for a canonical reference into a candidate set under a
+ * trust profile + constraints. Pure + deterministic. Does NOT verify signatures
+ * (that is the caller's per-candidate step) — it screens *eligibility*.
+ */
+export declare function resolveCandidates(reference: CanonicalReference, descriptors: ContentDescriptor[], profile: TrustProfileConfig, constraints?: ResolutionConstraints): ResolutionResult;
+//# sourceMappingURL=resolution.d.ts.map

package/dist/resolution.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolution.d.ts","sourceRoot":"","sources":["../src/resolution.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,0BAA0B,CAAC;AACxD,OAAO,KAAK,EACV,iBAAiB,EACjB,kBAAkB,EAClB,YAAY,EACZ,YAAY,EACb,MAAM,YAAY,CAAC;AAQpB,MAAM,WAAW,qBAAqB;IACpC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,2DAA2D;IAC3D,YAAY,CAAC,EAAE,YAAY,EAAE,CAAC;IAC9B,YAAY,CAAC,EAAE,YAAY,CAAC;CAC7B;AAED,qFAAqF;AACrF,MAAM,WAAW,SAAS;IACxB,UAAU,EAAE,iBAAiB,CAAC;IAC9B,mFAAmF;IACnF,aAAa,EAAE,OAAO,CAAC;IACvB,6DAA6D;IAC7D,QAAQ,EAAE,OAAO,CAAC;IAClB,yDAAyD;IACzD,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,gBAAgB;IAC/B,kBAAkB,EAAE,kBAAkB,CAAC;IACvC,UAAU,EAAE,SAAS,EAAE,CAAC;CACzB;AAED;kFACkF;AAClF,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,YAAY,CAAC;IACtB,mFAAmF;IACnF,cAAc,EAAE,OAAO,EAAE,CAAC;IAC1B,uDAAuD;IACvD,mBAAmB,CAAC,EAAE,YAAY,EAAE,CAAC;IACrC,qEAAqE;IACrE,oBAAoB,EAAE,OAAO,CAAC;CAC/B;AAMD;;;;GAIG;AACH,wBAAgB,iBAAiB,CAC/B,SAAS,EAAE,kBAAkB,EAC7B,WAAW,EAAE,iBAAiB,EAAE,EAChC,OAAO,EAAE,kBAAkB,EAC3B,WAAW,GAAE,qBAA0B,GACtC,gBAAgB,CAsBlB"}

package/dist/resolution.js

@@ -0,0 +1,35 @@
+function issuerIn(list, issuer) {
+    return list.some((a) => a.toLowerCase() === issuer.toLowerCase());
+}
+/**
+ * Screen descriptors for a canonical reference into a candidate set under a
+ * trust profile + constraints. Pure + deterministic. Does NOT verify signatures
+ * (that is the caller's per-candidate step) — it screens *eligibility*.
+ */
+export function resolveCandidates(reference, descriptors, profile, constraints = {}) {
+    const candidates = descriptors
+        .filter((d) => d.canonicalId.toLowerCase() === reference.id.toLowerCase())
+        .map((descriptor) => {
+        const issuerTrusted = issuerIn(profile.trustedIssuers, descriptor.issuer.address);
+        let reason;
+        if (descriptor.status !== 'active')
+            reason = `status ${descriptor.status}`;
+        else if (profile.requireTrustedIssuer && !issuerTrusted)
+            reason = 'issuer not in trust profile allowlist';
+        else if (constraints.contentType && descriptor.contentType !== constraints.contentType)
+            reason = 'contentType mismatch';
+        else if (constraints.language && descriptor.work?.language && descriptor.work.language !== constraints.language)
+            reason = 'language mismatch';
+        else {
+            const allowedRights = constraints.rightsStatus ?? profile.allowedRightsStatus;
+            if (allowedRights && allowedRights.length > 0) {
+                const rs = descriptor.work?.rightsStatus ?? 'unknown';
+                if (!allowedRights.includes(rs))
+                    reason = `rightsStatus ${rs} not permitted`;
+            }
+        }
+        return { descriptor, issuerTrusted, admitted: reason === undefined, reason };
+    });
+    return { canonicalReference: reference, candidates };
+}
+//# sourceMappingURL=resolution.js.map

package/dist/resolution.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolution.js","sourceRoot":"","sources":["../src/resolution.ts"],"names":[],"mappings":"AAkDA,SAAS,QAAQ,CAAC,IAAe,EAAE,MAAe;IAChD,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;AACpE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAC/B,SAA6B,EAC7B,WAAgC,EAChC,OAA2B,EAC3B,cAAqC,EAAE;IAEvC,MAAM,UAAU,GAAgB,WAAW;SACxC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,WAAW,EAAE,KAAK,SAAS,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC;SACzE,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE;QAClB,MAAM,aAAa,GAAG,QAAQ,CAAC,OAAO,CAAC,cAAc,EAAE,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAClF,IAAI,MAA0B,CAAC;QAE/B,IAAI,UAAU,CAAC,MAAM,KAAK,QAAQ;YAAE,MAAM,GAAG,UAAU,UAAU,CAAC,MAAM,EAAE,CAAC;aACtE,IAAI,OAAO,CAAC,oBAAoB,IAAI,CAAC,aAAa;YAAE,MAAM,GAAG,uCAAuC,CAAC;aACrG,IAAI,WAAW,CAAC,WAAW,IAAI,UAAU,CAAC,WAAW,KAAK,WAAW,CAAC,WAAW;YAAE,MAAM,GAAG,sBAAsB,CAAC;aACnH,IAAI,WAAW,CAAC,QAAQ,IAAI,UAAU,CAAC,IAAI,EAAE,QAAQ,IAAI,UAAU,CAAC,IAAI,CAAC,QAAQ,KAAK,WAAW,CAAC,QAAQ;YAAE,MAAM,GAAG,mBAAmB,CAAC;aACzI,CAAC;YACJ,MAAM,aAAa,GAAG,WAAW,CAAC,YAAY,IAAI,OAAO,CAAC,mBAAmB,CAAC;YAC9E,IAAI,aAAa,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC9C,MAAM,EAAE,GAAG,UAAU,CAAC,IAAI,EAAE,YAAY,IAAI,SAAS,CAAC;gBACtD,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAAE,MAAM,GAAG,gBAAgB,EAAE,gBAAgB,CAAC;YAC/E,CAAC;QACH,CAAC;QACD,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,KAAK,SAAS,EAAE,MAAM,EAAE,CAAC;IAC/E,CAAC,CAAC,CAAC;IAEL,OAAO,EAAE,kBAAkB,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC;AACvD,CAAC"}

package/dist/types.d.ts

@@ -0,0 +1,194 @@
+import type { Address, Hex } from '@agenticprimitives/types';
+import type { VerifiableCredential } from '@agenticprimitives/verifiable-credentials';
+/**
+ * Who may retrieve a rendering (apcnt:accessPolicy codelist; spec 266 §2.2).
+ * `public` needs no entitlement; `licensed`/`private` are gated. An accessPolicy
+ * is a POLICY INPUT, never a legal grant (ADR-0033 R5; spec 266 §threat-model).
+ */
+export type AccessPolicy = 'public' | 'licensed' | 'private';
+/**
+ * How a descriptor's authenticity/inclusion is proven (apcnt:proofPolicy). The
+ * enum is fixed now so apps can target it; Phase 1 implements the `*-v1`
+ * signature/hash/merkle paths — the rest are reserved (spec 266 §6/§8).
+ */
+export type ProofPolicy = 'issuer-signature-v1' | 'issuer-signature-and-hash-v1' | 'merkle-membership-v1' | 'signed-api-response-v1' | 'entitlement-attestation-v1' | 'zk-membership-v1';
+/** Lifecycle of a descriptor. Verification is fail-closed on non-`active`. */
+export type DescriptorStatus = 'active' | 'revoked' | 'superseded';
+/** Rights posture of the underlying work (a policy input, not a grant). */
+export type RightsStatus = 'public-domain' | 'open-license' | 'licensed' | 'unknown';
+/** Phase-1 trust profiles (spec 266 §policy). Only `public-domain-demo` is wired.
+ *  Generic, vertical-agnostic names — an app may map them to domain labels. */
+export type TrustProfile = 'public-domain-demo' | 'strict-verified-issuer' | 'community-experimental' | 'restricted-high-assurance';
+/**
+ * A scheme-independent, structured canonical locus. The CORE treats this as an
+ * OPAQUE record. Its keys MUST be controlled tokens (never user strings, display
+ * labels, or surface-grammar strings) supplied by a vertical-extension package,
+ * because JCS does NOT Unicode-normalize strings — the extension normalizes all
+ * surface forms to controlled tokens BEFORE they reach the hash. Two surface
+ * grammars that denote the same locus MUST produce an equal canonical locus.
+ */
+export type CanonicalLocus = Record<string, unknown>;
+/**
+ * The hashed envelope (spec 266 §2.1). The id commits not just to the locus
+ * fields but to the PROFILE that defines their meaning + the domain — so the
+ * same JSON can never conceptually collide across primitives or versions.
+ */
+export interface CanonicalLocusEnvelope {
+    /** Fixed id construction scheme, e.g. 'ap-locus-id-v1'. */
+    idScheme: string;
+    /** Vertical domain tag, e.g. 'lyrics' / 'legal-code' / 'doc'. */
+    contentDomain: string;
+    /** Versioned locus profile (the governance seam), e.g. 'ap.<domain>.locus.v1'. */
+    locusProfile: string;
+    /** The controlled-token canonical locus (opaque to the core). */
+    canonicalLocus: CanonicalLocus;
+}
+/** FRBR Work locus: the deterministic, domain-separated id of an envelope. */
+export interface CanonicalReference {
+    /** keccak256("ap:canonical-locus-id:v1\0" || JCS(envelope)) — registry-free. */
+    id: Hex;
+    /** The envelope the id was computed from. */
+    envelope: CanonicalLocusEnvelope;
+    /** Optional human alias that resolved to this reference (e.g. 'doc:section-1.2'). */
+    alias?: string;
+}
+/** Commitment to off-platform rendering text (structured + versioned; spec 266 §7). */
+export interface ContentCommitment {
+    type: 'canonicalTextCommitment';
+    /** The frozen normalization profile id, e.g. 'ap:normalization:canonical-text-v1'. */
+    normalization: string;
+    /** Digest algorithm of the normalized text. */
+    algorithm: 'sha-256';
+    /** Digest value (hex). NEVER the text (ADR-0033 R3). */
+    value: Hex;
+}
+/**
+ * FRBR Expression/Manifestation — a versioned body of renderings published by an
+ * issuer Smart Agent, committed by a Merkle `corpusRoot` + signed manifest.
+ * Carries NO rendering text (ADR-0033 R3).
+ */
+export interface CorpusManifest {
+    /** keccak256(utf8(`${issuer}/${edition}/${version}`)). */
+    corpusRef: Hex;
+    issuer: Address;
+    edition: string;
+    version: string;
+    /** The content type this corpus renders (e.g. 'text.passage'). */
+    scheme: string;
+    /** Merkle root over the per-locus descriptor commitments. */
+    corpusRoot: Hex;
+    accessPolicy: AccessPolicy;
+    proofPolicy: ProofPolicy;
+    /** keccak/sha digest of the off-chain license-terms doc (R5). Never the terms. */
+    licenseTermsHash: Hex;
+    metadataUri?: string;
+}
+/** Bibliographic metadata about the underlying work (policy inputs). */
+export interface WorkMeta {
+    title?: string;
+    abbreviation?: string;
+    language?: string;
+    edition?: string;
+    rightsStatus?: RightsStatus;
+}
+/** Issuer reference — a Smart Agent address plus an optional DID/CAIP-10 label. */
+export interface IssuerIdentityRef {
+    address: Address;
+    /** Optional CAIP-10 / DID label for display + verificationMethod. */
+    did?: string;
+}
+/**
+ * FRBR Item — an issuer's signed claim about a rendering of a canonical locus.
+ * Points AT off-chain text via `retrievalPointer`; NEVER contains it (R3).
+ * Trust flows from `signature` (issuer ERC-1271), not the platform (R5).
+ */
+export interface ContentDescriptor {
+    /** Stable descriptor id (issuer-scoped), e.g. 'desc_bsb_<canonicalIdShort>'. */
+    id: string;
+    /** The scheme-independent canonical locus this describes. */
+    canonicalId: Hex;
+    /** Opaque app content type, e.g. 'text.passage'. */
+    contentType: string;
+    issuer: IssuerIdentityRef;
+    issuedAt: string;
+    status: DescriptorStatus;
+    version?: string;
+    validFrom?: string;
+    validUntil?: string;
+    revocationRef?: string;
+    /** Bibliographic metadata (title/language/edition/rightsStatus). */
+    work?: WorkMeta;
+    /** Structured domain semantics supplied by the vertical (e.g. section/line/edition). */
+    selector?: Record<string, unknown>;
+    /** Commitment to the off-platform rendering (optional for signature-only proofs). */
+    commitment?: ContentCommitment;
+    /** URI/locator for the off-chain text. NEVER the text itself (R3). */
+    retrievalPointer: string;
+    proofPolicy: ProofPolicy;
+    accessPolicy: AccessPolicy;
+    /** Membership corpus (when proofPolicy is merkle-membership-v1). */
+    corpusRef?: Hex;
+    /** Signature over descriptorHash(unsigned). Either the issuer's own ERC-1271 signature, OR — when
+     *  `delegatingSigner` is present — a signature by the delegated signing key the issuer authorized. */
+    signature: Hex;
+    /** Present when the descriptor was signed by an issuer-AUTHORIZED operational key (e.g. a Cloud-KMS
+     *  key the issuer delegated) rather than the issuer's own custodian. Trust still roots in the issuer
+     *  SA (`delegatorIssuer` == `issuer.address`); the leaf proves the issuer authorized `delegateKey`. */
+    delegatingSigner?: DelegatingSigner;
+}
+/** An issuer's authorization of an operational signing key (spec 266 + spec 270 session-delegation). */
+export interface DelegatingSigner {
+    /** The canonical issuer SA the descriptor's trust roots in (e.g. lbsb.impact). Equals `issuer.address`. */
+    delegatorIssuer: Address;
+    /** The operational key that actually signed the descriptor — authorized by `delegatorIssuer`. */
+    delegateKey: Address;
+    /** The signed delegation binding `delegateKey` → `delegatorIssuer`. OPAQUE here; the app's injected
+     *  {@link DelegatedAuthorityVerifier} validates it (keeps content-primitives delegation-agnostic). */
+    delegationLeaf: unknown;
+}
+/**
+ * Verifies a signature over a hash by `signer`. Apps inject one backed by an
+ * `AgentAccountClient.isValidSignature` (ERC-1271/6492); tests inject a fake.
+ * Decoupled per ADR-0006's injected-context pattern.
+ */
+export type SignatureVerifier = (args: {
+    signer: Address;
+    hash: Hex;
+    signature: Hex;
+}) => Promise<boolean> | boolean;
+/**
+ * Verifies that `delegatorIssuer` authorized `delegateKey` to sign content on its behalf, by validating
+ * the signed `delegationLeaf` (the leaf's delegator == delegatorIssuer, delegate == delegateKey, signed by
+ * delegatorIssuer's ERC-1271, within caveats). Injected (ADR-0006) so content-primitives stays free of the
+ * delegation package.
+ */
+export type DelegatedAuthorityVerifier = (args: DelegatingSigner) => Promise<boolean> | boolean;
+/** Input to {@link buildContentDescriptor} (everything but the signature + how-it-was-signed metadata). */
+export type BuildDescriptorInput = Omit<ContentDescriptor, 'signature' | 'delegatingSigner'>;
+/** A credential asserting a subject may access a corpus (apcnt:Entitlement). */
+export type Entitlement = VerifiableCredential<{
+    id: string;
+    corpusRef: Hex;
+    accessPolicy: AccessPolicy;
+    terms?: string;
+}>;
+/** The AI-safe citation record (apcnt:CitationAssertion). Carries provenance,
+ *  never rendering text. */
+export type CitationAssertion = VerifiableCredential<{
+    id: string;
+    /** Agentic provenance — which run/output cited this. */
+    agentRunId?: string;
+    outputId?: string;
+    citationKind: 'quote' | 'reference' | 'summary' | 'paraphrase';
+    canonicalId: Hex;
+    descriptorId: string;
+    contentType: string;
+    commitment?: ContentCommitment;
+    commitmentVerified: boolean;
+    /** Optional hash of the specific quoted span + the normalization used. */
+    quoteSpanHash?: Hex;
+    normalizationSpec?: string;
+    issuer: Address;
+    underEntitlement?: string;
+}>;
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AAEtF;;;;GAIG;AACH,MAAM,MAAM,YAAY,GAAG,QAAQ,GAAG,UAAU,GAAG,SAAS,CAAC;AAE7D;;;;GAIG;AACH,MAAM,MAAM,WAAW,GACnB,qBAAqB,GACrB,8BAA8B,GAC9B,sBAAsB,GACtB,wBAAwB,GACxB,4BAA4B,GAC5B,kBAAkB,CAAC;AAEvB,8EAA8E;AAC9E,MAAM,MAAM,gBAAgB,GAAG,QAAQ,GAAG,SAAS,GAAG,YAAY,CAAC;AAEnE,2EAA2E;AAC3E,MAAM,MAAM,YAAY,GAAG,eAAe,GAAG,cAAc,GAAG,UAAU,GAAG,SAAS,CAAC;AAErF;+EAC+E;AAC/E,MAAM,MAAM,YAAY,GACpB,oBAAoB,GACpB,wBAAwB,GACxB,wBAAwB,GACxB,2BAA2B,CAAC;AAEhC;;;;;;;GAOG;AACH,MAAM,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAErD;;;;GAIG;AACH,MAAM,WAAW,sBAAsB;IACrC,2DAA2D;IAC3D,QAAQ,EAAE,MAAM,CAAC;IACjB,iEAAiE;IACjE,aAAa,EAAE,MAAM,CAAC;IACtB,kFAAkF;IAClF,YAAY,EAAE,MAAM,CAAC;IACrB,iEAAiE;IACjE,cAAc,EAAE,cAAc,CAAC;CAChC;AAED,8EAA8E;AAC9E,MAAM,WAAW,kBAAkB;IACjC,gFAAgF;IAChF,EAAE,EAAE,GAAG,CAAC;IACR,6CAA6C;IAC7C,QAAQ,EAAE,sBAAsB,CAAC;IACjC,qFAAqF;IACrF,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,uFAAuF;AACvF,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,yBAAyB,CAAC;IAChC,sFAAsF;IACtF,aAAa,EAAE,MAAM,CAAC;IACtB,+CAA+C;IAC/C,SAAS,EAAE,SAAS,CAAC;IACrB,wDAAwD;IACxD,KAAK,EAAE,GAAG,CAAC;CACZ;AAED;;;;GAIG;AACH,MAAM,WAAW,cAAc;IAC7B,0DAA0D;IAC1D,SAAS,EAAE,GAAG,CAAC;IACf,MAAM,EAAE,OAAO,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,kEAAkE;IAClE,MAAM,EAAE,MAAM,CAAC;IACf,6DAA6D;IAC7D,UAAU,EAAE,GAAG,CAAC;IAChB,YAAY,EAAE,YAAY,CAAC;IAC3B,WAAW,EAAE,WAAW,CAAC;IACzB,kFAAkF;IAClF,gBAAgB,EAAE,GAAG,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,wEAAwE;AACxE,MAAM,WAAW,QAAQ;IACvB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,YAAY,CAAC;CAC7B;AAED,mFAAmF;AACnF,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,OAAO,CAAC;IACjB,qEAAqE;IACrE,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED;;;;GAIG;AACH,MAAM,WAAW,iBAAiB;IAChC,gFAAgF;IAChF,EAAE,EAAE,MAAM,CAAC;IACX,6DAA6D;IAC7D,WAAW,EAAE,GAAG,CAAC;IACjB,oDAAoD;IACpD,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,iBAAiB,CAAC;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,gBAAgB,CAAC;IACzB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,oEAAoE;IACpE,IAAI,CAAC,EAAE,QAAQ,CAAC;IAChB,wFAAwF;IACxF,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,qFAAqF;IACrF,UAAU,CAAC,EAAE,iBAAiB,CAAC;IAC/B,sEAAsE;IACtE,gBAAgB,EAAE,MAAM,CAAC;IACzB,WAAW,EAAE,WAAW,CAAC;IACzB,YAAY,EAAE,YAAY,CAAC;IAC3B,oEAAoE;IACpE,SAAS,CAAC,EAAE,GAAG,CAAC;IAChB;0GACsG;IACtG,SAAS,EAAE,GAAG,CAAC;IACf;;2GAEuG;IACvG,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;CACrC;AAED,wGAAwG;AACxG,MAAM,WAAW,gBAAgB;IAC/B,2GAA2G;IAC3G,eAAe,EAAE,OAAO,CAAC;IACzB,iGAAiG;IACjG,WAAW,EAAE,OAAO,CAAC;IACrB;0GACsG;IACtG,cAAc,EAAE,OAAO,CAAC;CACzB;AAED;;;;GAIG;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,IAAI,EAAE;IACrC,MAAM,EAAE,OAAO,CAAC;IAChB,IAAI,EAAE,GAAG,CAAC;IACV,SAAS,EAAE,GAAG,CAAC;CAChB,KAAK,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;AAEjC;;;;;GAKG;AACH,MAAM,MAAM,0BAA0B,GAAG,CAAC,IAAI,EAAE,gBAAgB,KAAK,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;AAEhG,2GAA2G;AAC3G,MAAM,MAAM,oBAAoB,GAAG,IAAI,CAAC,iBAAiB,EAAE,WAAW,GAAG,kBAAkB,CAAC,CAAC;AAE7F,gFAAgF;AAChF,MAAM,MAAM,WAAW,GAAG,oBAAoB,CAAC;IAC7C,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,GAAG,CAAC;IACf,YAAY,EAAE,YAAY,CAAC;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC,CAAC;AAEH;4BAC4B;AAC5B,MAAM,MAAM,iBAAiB,GAAG,oBAAoB,CAAC;IACnD,EAAE,EAAE,MAAM,CAAC;IACX,wDAAwD;IACxD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,OAAO,GAAG,WAAW,GAAG,SAAS,GAAG,YAAY,CAAC;IAC/D,WAAW,EAAE,GAAG,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,iBAAiB,CAAC;IAC/B,kBAAkB,EAAE,OAAO,CAAC;IAC5B,0EAA0E;IAC1E,aAAa,CAAC,EAAE,GAAG,CAAC;IACpB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,MAAM,EAAE,OAAO,CAAC;IAChB,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B,CAAC,CAAC"}

package/dist/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":""}

package/package.json

@@ -0,0 +1,64 @@
+{
+  "name": "@agenticprimitives/content-primitives",
+  "version": "1.0.0-alpha.10",
+  "description": "Verifiable Content Substrate SDK: name, resolve, commit, entitlement-gate, and cite off-platform content controlled by third-party rights holders. Owns CanonicalLocus / CorpusManifest / ContentDescriptor / CitationAssertion / Entitlement (FRBR-aligned), deterministic locusId, Merkle corpus commitments, and issuer-signature verification. Content-agnostic — no vertical/faith vocabulary, no content text (ADR-0033).",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/agentictrustlabs/agenticprimitives.git",
+    "directory": "packages/content-primitives"
+  },
+  "homepage": "https://github.com/agentictrustlabs/agenticprimitives/tree/master/packages/content-primitives",
+  "bugs": {
+    "url": "https://github.com/agentictrustlabs/agenticprimitives/issues"
+  },
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    },
+    "./merkle": {
+      "types": "./dist/merkle.d.ts",
+      "import": "./dist/merkle.js"
+    }
+  },
+  "files": [
+    "LICENSE",
+    "dist",
+    "spec.md",
+    "README.md",
+    "CLAUDE.md"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "peerDependencies": {
+    "viem": "^2.52.2",
+    "@agenticprimitives/types": "1.0.0-alpha.9",
+    "@agenticprimitives/verifiable-credentials": "0.0.0-alpha.6"
+  },
+  "devDependencies": {
+    "@types/node": "^22.7.0",
+    "vitest": "^4.1.8"
+  },
+  "keywords": [
+    "content",
+    "commitment",
+    "merkle",
+    "provenance",
+    "citation",
+    "agentic"
+  ],
+  "scripts": {
+    "build": "tsc -p tsconfig.build.json",
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "test": "vitest run",
+    "test:unit": "vitest run test/reference.test.ts test/merkle.test.ts test/descriptor.test.ts test/entitlement.test.ts test/resolution.test.ts --passWithNoTests",
+    "test:integration": "vitest run test/integration --passWithNoTests",
+    "test:watch": "vitest",
+    "clean": "rm -rf dist"
+  }
+}

package/spec.md

@@ -0,0 +1,16 @@
+# @agenticprimitives/content-primitives — spec
+
+The full design lives in
+[`../../specs/266-verifiable-content-substrate.md`](../../specs/266-verifiable-content-substrate.md).
+
+Architecture decision:
+
+- [ADR-0033](../../docs/architecture/decisions/0033-content-agnostic-verifiable-content-firewall.md)
+  — content-agnostic firewall; content loci are scheme-anchored (an ADR-0010
+  carve-out); no licensed content (R1), no content text on-chain (R3).
+
+First usage domain: the scripture demo vertical
+([spec 267](../../specs/267-scripture-demo-vertical.md)) — all Bible/faith
+specifics live in `apps/demo-bible-*`, never here.
+
+Do not edit a divergent copy here — edit the canonical spec.