@agenticprimitives/content-primitives 1.0.0-alpha.6

package/CLAUDE.md

@@ -0,0 +1,62 @@
+# @agenticprimitives/content-primitives — Claude guide
+
+Name → resolve → commit → entitlement-gate → cite, for content that lives
+off-platform and is controlled by third-party rights holders. **Bible verses are
+its first usage domain (spec 267), not its vocabulary.**
+
+## The one idea
+
+**Content is not an Agent.** A `CanonicalLocus` (a passage address) is
+**scheme-anchored** — a deterministic `locusId`, never registered, never an SA
+facet. Only *issuers/corpora* and *parties* are Smart Agents (ADR-0010 still
+governs them via `agent-naming`). This is the FRBR Work/Item split and the reason
+this is a new substrate, not an `agent-naming` record type. See ADR-0033.
+
+## What this package owns (FRBR)
+
+- `CanonicalLocus` (Work) — `computeLocusId(scheme, normalizedPath)`.
+- `CorpusManifest` (Manifestation) — issuer-owned, Merkle `corpusRoot`.
+- `ContentDescriptor` (Item) — the deliverable leaf; `commitment` +
+  `retrievalPointer` + issuer signature. **Never the text.**
+- `Entitlement` / `CitationAssertion` — VC 2.0 subjects (envelope from
+  `verifiable-credentials`).
+- Merkle helpers (`/merkle` subpath), commitment + descriptor verification,
+  fail-closed `evaluateEntitlement`.
+
+## Hard rules (ADR-0033 — do not break)
+
+- **R3 — no rendering text** in any descriptor, a commitment preimage we store,
+  or on-chain. Descriptors carry a `retrievalPointer`.
+- **R1 — no licensed/copyrighted content** in src/tests/fixtures (CI:
+  `check:no-licensed-content`).
+- **R4 — content-agnostic.** No faith/vertical vocabulary; `contentType` + the
+  `ReferenceScheme` are app-injected (CI: `check:no-domain-in-packages`).
+- **R5 — trust = issuer signature + access policy**, never a platform claim.
+
+## Boundary
+
+Allowed imports: `@agenticprimitives/types`, `@agenticprimitives/verifiable-credentials`,
+`viem`. ERC-1271 verification is **injected** (`SignatureVerifier`, ADR-0006) — do
+NOT import `agent-account`/`agent-naming`; apps compose them.
+
+## Drift triggers — STOP
+
+- "Register a locus / give a verse an SA / put it in `agent-naming`" — **STOP.**
+  Loci are scheme-anchored content (ADR-0033).
+- "Store the verse text / put text in the commitment we keep / on-chain" — **STOP** (R3).
+- "Hardcode a translation, book table, OSIS grammar, or `'bible-verse'`" — **STOP.**
+  App layer (spec 267); inject a `ReferenceScheme`.
+- "Implement the ZK/payment reserved fns" — that's Phase 4/5 (spec 266 §6).
+
+## Read first
+
+`../../specs/266-verifiable-content-substrate.md` ·
+`../../docs/architecture/decisions/0033-content-agnostic-verifiable-content-firewall.md`
+· then `src/index.ts`.
+
+## Validate
+
+```bash
+pnpm --filter @agenticprimitives/content-primitives typecheck
+pnpm --filter @agenticprimitives/content-primitives test
+```

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Agentic Trust Labs
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,49 @@
+# @agenticprimitives/content-primitives
+
+Verifiable Content Substrate — name, resolve, commit, entitlement-gate, and cite
+content that lives off-platform and is controlled by third-party rights holders.
+
+It is **content-agnostic** ([ADR-0033](../../docs/architecture/decisions/0033-content-agnostic-verifiable-content-firewall.md)):
+a referenced unit of content (e.g. a Bible verse) is **not** a Smart Agent, and
+this package never embeds a translation, a faith term, or any rendering text.
+Bible verses are its first usage domain ([spec 267](../../specs/267-scripture-demo-vertical.md)),
+not its vocabulary.
+
+## Model (FRBR)
+
+| FRBR | Type | Notes |
+| --- | --- | --- |
+| Work | `CanonicalLocus` | scheme-anchored deterministic `locusId`; never registered |
+| Manifestation | `CorpusManifest` | issuer-owned, Merkle `corpusRoot`, signed |
+| Item | `ContentDescriptor` | commitment + `retrievalPointer` + issuer signature — **never text** |
+| — | `Entitlement` / `CitationAssertion` | W3C VC 2.0 subjects |
+
+## Quick start
+
+```ts
+import {
+  buildCanonicalLocus, corpusRef, contentCommitment,
+  buildContentDescriptor, verifyContentDescriptor,
+  evaluateEntitlement, buildCitationAssertion,
+} from '@agenticprimitives/content-primitives';
+
+// 1. App supplies the reference grammar (kept out of the package — R4).
+const bibleVerse = { id: 'bible-verse', normalize: (p: string) => /* OSIS */ p };
+const locus = buildCanonicalLocus(bibleVerse, 'John 3:16'); // -> { locusId, path: 'John.3.16' }
+
+// 2. Issuer commits to off-platform text + signs a descriptor (no text on-chain — R3).
+const commitment = contentCommitment(renderingText); // keccak256, off-platform
+const descriptor = await buildContentDescriptor(
+  { locusId: locus.locusId, corpusRef: ref, contentType: 'bible-verse',
+    commitment, proofPolicy: 'signature', accessPolicy: 'public',
+    retrievalPointer: 'content://bible-verse/bsb/John.3.16', issuer },
+  issuerSign, // signs descriptorHash via the issuer SA (ERC-1271)
+);
+
+// 3. Reader verifies (signature injected — ADR-0006) + gates + cites.
+const ok = await verifyContentDescriptor(descriptor, { verifySignature });
+const gate = evaluateEntitlement(descriptor.accessPolicy, descriptor.corpusRef);
+```
+
+Full SDK + phased roadmap: [spec 266](../../specs/266-verifiable-content-substrate.md).
+ZK proofs and paid access are reserved (Phase 4/5) and throw until implemented.

package/dist/descriptor.d.ts

@@ -0,0 +1,62 @@
+import { type Hex } from 'viem';
+import type { BuildDescriptorInput, ContentCommitment, ContentDescriptor, SignatureVerifier } from './types.js';
+/**
+ * The frozen Phase-1 normalization profile id (spec 266 §7). Rules of
+ * `canonical-text-v1`: NFC; trim leading/trailing whitespace; collapse internal
+ * whitespace runs to a single space; text body only (verse numbers, labels,
+ * footnotes, headings, cross-refs, formatting are excluded by the caller before
+ * commitment); digest SHA-256 over UTF-8. Bump the version to change any rule.
+ */
+export declare const NORMALIZATION_V1 = "ap:normalization:canonical-text-v1";
+/** Apply the canonical-text-v1 normalization to a rendering body. */
+export declare function canonicalizeRendering(text: string): string;
+/**
+ * Structured commitment to an off-platform rendering (spec 266 §7):
+ * SHA-256 of the canonical-text-v1-normalized body. SHA-256 (not keccak) keeps
+ * the content commitment portable/standard; it is verified off-chain and never
+ * stored on-chain (ADR-0033 R3). Binds a descriptor to a rendering WITHOUT
+ * revealing it.
+ */
+export declare function contentCommitment(text: string): ContentCommitment;
+/** True iff `text` canonicalizes+hashes to the commitment value. */
+export declare function verifyCommitment(text: string, commitment: ContentCommitment): boolean;
+/** Throwing variant of {@link verifyCommitment}. */
+export declare function assertCommitment(text: string, commitment: ContentCommitment): void;
+/**
+ * Deterministic, domain-separated hash of the unsigned descriptor — both its
+ * cryptographic identity (ContentDescriptorId) AND the ERC-1271 signing
+ * preimage. `keccak256("ap:content-descriptor:v1\0" || JCS(unsigned))`. The
+ * domain separator keeps it from ever colliding with a canonical-locus id.
+ */
+export declare function descriptorHash(d: BuildDescriptorInput): Hex;
+/**
+ * Build a signed {@link ContentDescriptor}. `sign` is the issuer's signer over
+ * {@link descriptorHash} (its Smart Agent's ERC-1271 path).
+ */
+export declare function buildContentDescriptor(input: BuildDescriptorInput, sign: (hash: Hex) => Promise<Hex> | Hex): Promise<ContentDescriptor>;
+export interface VerifyDescriptorOpts {
+    /** Verifies the issuer's ERC-1271 signature (injected; ADR-0006). */
+    verifySignature: SignatureVerifier;
+    /** Required when proofPolicy is `merkle-membership-v1`. */
+    corpusRoot?: Hex;
+    inclusionProof?: Hex[];
+    /** Current time (seconds) for validity/status checks; defaults to now. */
+    nowSeconds?: number;
+}
+/** Result of {@link verifyContentDescriptor} — an auditable VerificationResult. */
+export interface VerificationResult {
+    ok: boolean;
+    reason?: string;
+    signatureVerified: boolean;
+    statusOk: boolean;
+    withinValidity: boolean;
+    inclusionVerified?: boolean;
+}
+/**
+ * Verify a descriptor fail-closed (spec 266 §7): status must be `active`, the
+ * validity window must contain `now`, the issuer ERC-1271 signature over the
+ * canonical descriptor hash must verify, and — for `merkle-membership-v1` — the
+ * commitment must prove under `corpusRoot`. Reserved proof policies are rejected.
+ */
+export declare function verifyContentDescriptor(d: ContentDescriptor, opts: VerifyDescriptorOpts): Promise<VerificationResult>;
+//# sourceMappingURL=descriptor.d.ts.map

package/dist/descriptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"descriptor.d.ts","sourceRoot":"","sources":["../src/descriptor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAsC,KAAK,GAAG,EAAE,MAAM,MAAM,CAAC;AAEpE,OAAO,KAAK,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAIhH;;;;;;GAMG;AACH,eAAO,MAAM,gBAAgB,uCAAuC,CAAC;AAErE,qEAAqE;AACrE,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAE1D;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,iBAAiB,CAOjE;AAED,oEAAoE;AACpE,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,iBAAiB,GAAG,OAAO,CAGrF;AAED,oDAAoD;AACpD,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,iBAAiB,GAAG,IAAI,CAIlF;AAKD;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,CAAC,EAAE,oBAAoB,GAAG,GAAG,CAE3D;AAED;;;GAGG;AACH,wBAAsB,sBAAsB,CAC1C,KAAK,EAAE,oBAAoB,EAC3B,IAAI,EAAE,CAAC,IAAI,EAAE,GAAG,KAAK,OAAO,CAAC,GAAG,CAAC,GAAG,GAAG,GACtC,OAAO,CAAC,iBAAiB,CAAC,CAG5B;AAED,MAAM,WAAW,oBAAoB;IACnC,qEAAqE;IACrE,eAAe,EAAE,iBAAiB,CAAC;IACnC,2DAA2D;IAC3D,UAAU,CAAC,EAAE,GAAG,CAAC;IACjB,cAAc,CAAC,EAAE,GAAG,EAAE,CAAC;IACvB,0EAA0E;IAC1E,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,mFAAmF;AACnF,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,iBAAiB,EAAE,OAAO,CAAC;IAC3B,QAAQ,EAAE,OAAO,CAAC;IAClB,cAAc,EAAE,OAAO,CAAC;IACxB,iBAAiB,CAAC,EAAE,OAAO,CAAC;CAC7B;AAED;;;;;GAKG;AACH,wBAAsB,uBAAuB,CAC3C,CAAC,EAAE,iBAAiB,EACpB,IAAI,EAAE,oBAAoB,GACzB,OAAO,CAAC,kBAAkB,CAAC,CA8B7B"}

package/dist/descriptor.js

@@ -0,0 +1,100 @@
+import { keccak256, sha256, concat, toBytes } from 'viem';
+import { jcsCanonicalize } from '@agenticprimitives/verifiable-credentials';
+import { leafHash, verifyInclusion } from './merkle.js';
+import { CommitmentMismatchError } from './errors.js';
+/**
+ * The frozen Phase-1 normalization profile id (spec 266 §7). Rules of
+ * `canonical-text-v1`: NFC; trim leading/trailing whitespace; collapse internal
+ * whitespace runs to a single space; text body only (verse numbers, labels,
+ * footnotes, headings, cross-refs, formatting are excluded by the caller before
+ * commitment); digest SHA-256 over UTF-8. Bump the version to change any rule.
+ */
+export const NORMALIZATION_V1 = 'ap:normalization:canonical-text-v1';
+/** Apply the canonical-text-v1 normalization to a rendering body. */
+export function canonicalizeRendering(text) {
+    return text.normalize('NFC').replace(/\s+/g, ' ').trim();
+}
+/**
+ * Structured commitment to an off-platform rendering (spec 266 §7):
+ * SHA-256 of the canonical-text-v1-normalized body. SHA-256 (not keccak) keeps
+ * the content commitment portable/standard; it is verified off-chain and never
+ * stored on-chain (ADR-0033 R3). Binds a descriptor to a rendering WITHOUT
+ * revealing it.
+ */
+export function contentCommitment(text) {
+    return {
+        type: 'canonicalTextCommitment',
+        normalization: NORMALIZATION_V1,
+        algorithm: 'sha-256',
+        value: sha256(toBytes(canonicalizeRendering(text))),
+    };
+}
+/** True iff `text` canonicalizes+hashes to the commitment value. */
+export function verifyCommitment(text, commitment) {
+    if (commitment.algorithm !== 'sha-256' || commitment.normalization !== NORMALIZATION_V1)
+        return false;
+    return contentCommitment(text).value.toLowerCase() === commitment.value.toLowerCase();
+}
+/** Throwing variant of {@link verifyCommitment}. */
+export function assertCommitment(text, commitment) {
+    if (!verifyCommitment(text, commitment)) {
+        throw new CommitmentMismatchError('rendering does not match descriptor commitment');
+    }
+}
+/** Domain separator for the descriptor identity (distinct from the locus id). */
+const DESCRIPTOR_DOMAIN_SEP = 'ap:content-descriptor:v1\0';
+/**
+ * Deterministic, domain-separated hash of the unsigned descriptor — both its
+ * cryptographic identity (ContentDescriptorId) AND the ERC-1271 signing
+ * preimage. `keccak256("ap:content-descriptor:v1\0" || JCS(unsigned))`. The
+ * domain separator keeps it from ever colliding with a canonical-locus id.
+ */
+export function descriptorHash(d) {
+    return keccak256(concat([toBytes(DESCRIPTOR_DOMAIN_SEP), toBytes(jcsCanonicalize(d))]));
+}
+/**
+ * Build a signed {@link ContentDescriptor}. `sign` is the issuer's signer over
+ * {@link descriptorHash} (its Smart Agent's ERC-1271 path).
+ */
+export async function buildContentDescriptor(input, sign) {
+    const signature = await sign(descriptorHash(input));
+    return { ...input, signature };
+}
+/**
+ * Verify a descriptor fail-closed (spec 266 §7): status must be `active`, the
+ * validity window must contain `now`, the issuer ERC-1271 signature over the
+ * canonical descriptor hash must verify, and — for `merkle-membership-v1` — the
+ * commitment must prove under `corpusRoot`. Reserved proof policies are rejected.
+ */
+export async function verifyContentDescriptor(d, opts) {
+    const now = opts.nowSeconds ?? Math.floor(Date.now() / 1000);
+    const statusOk = d.status === 'active';
+    const fromOk = !d.validFrom || Math.floor(new Date(d.validFrom).getTime() / 1000) <= now;
+    const untilOk = !d.validUntil || Math.floor(new Date(d.validUntil).getTime() / 1000) >= now;
+    const withinValidity = fromOk && untilOk;
+    const { signature, ...unsigned } = d;
+    const hash = descriptorHash(unsigned);
+    const signatureVerified = await opts.verifySignature({ signer: d.issuer.address, hash, signature });
+    const base = { ok: false, signatureVerified, statusOk, withinValidity };
+    if (!statusOk)
+        return { ...base, reason: `descriptor status is ${d.status}` };
+    if (!withinValidity)
+        return { ...base, reason: 'descriptor outside its validity window' };
+    if (!signatureVerified)
+        return { ...base, reason: 'issuer signature did not verify' };
+    switch (d.proofPolicy) {
+        case 'issuer-signature-v1':
+        case 'issuer-signature-and-hash-v1':
+            return { ...base, ok: true };
+        case 'merkle-membership-v1': {
+            if (!d.commitment || !opts.corpusRoot || !opts.inclusionProof) {
+                return { ...base, reason: 'merkle-membership-v1 requires commitment + corpusRoot + inclusionProof' };
+            }
+            const inclusionVerified = verifyInclusion(leafHash(d.commitment.value), opts.inclusionProof, opts.corpusRoot);
+            return { ...base, ok: inclusionVerified, inclusionVerified, reason: inclusionVerified ? undefined : 'commitment not included under corpusRoot' };
+        }
+        default:
+            return { ...base, reason: `proofPolicy ${d.proofPolicy} is reserved (spec 266 §6/§8)` };
+    }
+}
+//# sourceMappingURL=descriptor.js.map

package/dist/descriptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"descriptor.js","sourceRoot":"","sources":["../src/descriptor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAY,MAAM,MAAM,CAAC;AACpE,OAAO,EAAE,eAAe,EAAE,MAAM,2CAA2C,CAAC;AAE5E,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACxD,OAAO,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC;AAEtD;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,oCAAoC,CAAC;AAErE,qEAAqE;AACrE,MAAM,UAAU,qBAAqB,CAAC,IAAY;IAChD,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;AAC3D,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,OAAO;QACL,IAAI,EAAE,yBAAyB;QAC/B,aAAa,EAAE,gBAAgB;QAC/B,SAAS,EAAE,SAAS;QACpB,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC;KACpD,CAAC;AACJ,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,UAA6B;IAC1E,IAAI,UAAU,CAAC,SAAS,KAAK,SAAS,IAAI,UAAU,CAAC,aAAa,KAAK,gBAAgB;QAAE,OAAO,KAAK,CAAC;IACtG,OAAO,iBAAiB,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,UAAU,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;AACxF,CAAC;AAED,oDAAoD;AACpD,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,UAA6B;IAC1E,IAAI,CAAC,gBAAgB,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE,CAAC;QACxC,MAAM,IAAI,uBAAuB,CAAC,gDAAgD,CAAC,CAAC;IACtF,CAAC;AACH,CAAC;AAED,iFAAiF;AACjF,MAAM,qBAAqB,GAAG,4BAA4B,CAAC;AAE3D;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,CAAuB;IACpD,OAAO,SAAS,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,qBAAqB,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC1F,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,KAA2B,EAC3B,IAAuC;IAEvC,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC;IACpD,OAAO,EAAE,GAAG,KAAK,EAAE,SAAS,EAAE,CAAC;AACjC,CAAC;AAsBD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,CAAoB,EACpB,IAA0B;IAE1B,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAC7D,MAAM,QAAQ,GAAG,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC;IACvC,MAAM,MAAM,GAAG,CAAC,CAAC,CAAC,SAAS,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,IAAI,GAAG,CAAC;IACzF,MAAM,OAAO,GAAG,CAAC,CAAC,CAAC,UAAU,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,IAAI,GAAG,CAAC;IAC5F,MAAM,cAAc,GAAG,MAAM,IAAI,OAAO,CAAC;IAEzC,MAAM,EAAE,SAAS,EAAE,GAAG,QAAQ,EAAE,GAAG,CAAC,CAAC;IACrC,MAAM,IAAI,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;IACtC,MAAM,iBAAiB,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;IAEpG,MAAM,IAAI,GAAuB,EAAE,EAAE,EAAE,KAAK,EAAE,iBAAiB,EAAE,QAAQ,EAAE,cAAc,EAAE,CAAC;IAC5F,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,wBAAwB,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IAC9E,IAAI,CAAC,cAAc;QAAE,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,wCAAwC,EAAE,CAAC;IAC1F,IAAI,CAAC,iBAAiB;QAAE,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,iCAAiC,EAAE,CAAC;IAEtF,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;QACtB,KAAK,qBAAqB,CAAC;QAC3B,KAAK,8BAA8B;YACjC,OAAO,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QAC/B,KAAK,sBAAsB,CAAC,CAAC,CAAC;YAC5B,IAAI,CAAC,CAAC,CAAC,UAAU,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;gBAC9D,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,wEAAwE,EAAE,CAAC;YACvG,CAAC;YACD,MAAM,iBAAiB,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;YAC9G,OAAO,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,EAAE,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,0CAA0C,EAAE,CAAC;QACnJ,CAAC;QACD;YACE,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,eAAe,CAAC,CAAC,WAAW,+BAA+B,EAAE,CAAC;IAC5F,CAAC;AACH,CAAC"}

package/dist/entitlement.d.ts

@@ -0,0 +1,64 @@
+import type { UnsignedCredential } from '@agenticprimitives/verifiable-credentials';
+import type { Address, Hex } from '@agenticprimitives/types';
+import type { AccessPolicy, ContentCommitment, Entitlement } from './types.js';
+export interface EntitlementDecision {
+    decision: 'allow' | 'deny';
+    reason?: string;
+}
+/**
+ * Gate retrieval against a corpus's access policy (spec 266 §3 step 5).
+ * Deterministic, fail-closed (spec 266 §7). An accessPolicy is a POLICY INPUT,
+ * not a legal grant (ADR-0033 R5): the platform still decides here.
+ *  - `public`   → allow.
+ *  - `licensed`/`private` → require a presented {@link Entitlement} whose subject
+ *    corpusRef matches and which has not expired.
+ *  - unknown policy → deny.
+ *
+ * Cryptographic verification of the entitlement VC (issuer signature,
+ * revocation) is the caller's job via the `verifiable-credentials` verifier —
+ * pass an already-verified credential (ADR-0013: one mechanism, no fallback).
+ */
+export declare function evaluateEntitlement(accessPolicy: AccessPolicy, corpusRef: Hex, entitlement?: Entitlement, nowSeconds?: number): EntitlementDecision;
+export interface CitationInput {
+    /** Issuer of the citation (the resolving agent's SA, CAIP-10 or DID). */
+    issuer: string;
+    subjectId: string;
+    canonicalId: Hex;
+    descriptorId: string;
+    contentType: string;
+    citationKind: 'quote' | 'reference' | 'summary' | 'paraphrase';
+    commitment?: ContentCommitment;
+    commitmentVerified: boolean;
+    contentIssuer: Address;
+    validFrom: string;
+    /** Agentic provenance (which run/output produced the citation). */
+    agentRunId?: string;
+    outputId?: string;
+    /** Optional hash of the specific quoted span + the normalization spec used. */
+    quoteSpanHash?: Hex;
+    normalizationSpec?: string;
+    underEntitlement?: string;
+}
+/**
+ * Build an UNSIGNED citation credential — the AI-safe citation record. The
+ * caller signs it via `verifiable-credentials.signCredential` and emits it to
+ * the audit/provenance package (spec 266 §audit; do NOT invent a parallel audit
+ * model). Carries the commitment + verification result + agentic provenance,
+ * NEVER the rendering text (ADR-0033 R3).
+ */
+export declare function buildCitationAssertion(input: CitationInput): UnsignedCredential<{
+    id: string;
+    agentRunId?: string;
+    outputId?: string;
+    citationKind: 'quote' | 'reference' | 'summary' | 'paraphrase';
+    canonicalId: Hex;
+    descriptorId: string;
+    contentType: string;
+    commitment?: ContentCommitment;
+    commitmentVerified: boolean;
+    quoteSpanHash?: Hex;
+    normalizationSpec?: string;
+    issuer: Address;
+    underEntitlement?: string;
+}>;
+//# sourceMappingURL=entitlement.d.ts.map

package/dist/entitlement.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"entitlement.d.ts","sourceRoot":"","sources":["../src/entitlement.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,2CAA2C,CAAC;AACpF,OAAO,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,KAAK,EAAE,YAAY,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE/E,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,OAAO,GAAG,MAAM,CAAC;IAC3B,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,mBAAmB,CACjC,YAAY,EAAE,YAAY,EAC1B,SAAS,EAAE,GAAG,EACd,WAAW,CAAC,EAAE,WAAW,EACzB,UAAU,GAAE,MAAsC,GACjD,mBAAmB,CAkBrB;AAED,MAAM,WAAW,aAAa;IAC5B,yEAAyE;IACzE,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,GAAG,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,OAAO,GAAG,WAAW,GAAG,SAAS,GAAG,YAAY,CAAC;IAC/D,UAAU,CAAC,EAAE,iBAAiB,CAAC;IAC/B,kBAAkB,EAAE,OAAO,CAAC;IAC5B,aAAa,EAAE,OAAO,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,mEAAmE;IACnE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,+EAA+E;IAC/E,aAAa,CAAC,EAAE,GAAG,CAAC;IACpB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,aAAa,GAAG,kBAAkB,CAAC;IAC/E,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,OAAO,GAAG,WAAW,GAAG,SAAS,GAAG,YAAY,CAAC;IAC/D,WAAW,EAAE,GAAG,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,iBAAiB,CAAC;IAC/B,kBAAkB,EAAE,OAAO,CAAC;IAC5B,aAAa,CAAC,EAAE,GAAG,CAAC;IACpB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,MAAM,EAAE,OAAO,CAAC;IAChB,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B,CAAC,CAsBD"}

package/dist/entitlement.js

@@ -0,0 +1,64 @@
+/**
+ * Gate retrieval against a corpus's access policy (spec 266 §3 step 5).
+ * Deterministic, fail-closed (spec 266 §7). An accessPolicy is a POLICY INPUT,
+ * not a legal grant (ADR-0033 R5): the platform still decides here.
+ *  - `public`   → allow.
+ *  - `licensed`/`private` → require a presented {@link Entitlement} whose subject
+ *    corpusRef matches and which has not expired.
+ *  - unknown policy → deny.
+ *
+ * Cryptographic verification of the entitlement VC (issuer signature,
+ * revocation) is the caller's job via the `verifiable-credentials` verifier —
+ * pass an already-verified credential (ADR-0013: one mechanism, no fallback).
+ */
+export function evaluateEntitlement(accessPolicy, corpusRef, entitlement, nowSeconds = Math.floor(Date.now() / 1000)) {
+    if (accessPolicy === 'public')
+        return { decision: 'allow' };
+    if (accessPolicy !== 'licensed' && accessPolicy !== 'private') {
+        return { decision: 'deny', reason: `unknown accessPolicy: ${String(accessPolicy)}` };
+    }
+    if (!entitlement) {
+        return { decision: 'deny', reason: `${accessPolicy} corpus requires an entitlement` };
+    }
+    if (entitlement.credentialSubject.corpusRef.toLowerCase() !== corpusRef.toLowerCase()) {
+        return { decision: 'deny', reason: 'entitlement is for a different corpus' };
+    }
+    if (entitlement.validUntil) {
+        const exp = Math.floor(new Date(entitlement.validUntil).getTime() / 1000);
+        if (Number.isFinite(exp) && exp < nowSeconds) {
+            return { decision: 'deny', reason: 'entitlement expired' };
+        }
+    }
+    return { decision: 'allow' };
+}
+/**
+ * Build an UNSIGNED citation credential — the AI-safe citation record. The
+ * caller signs it via `verifiable-credentials.signCredential` and emits it to
+ * the audit/provenance package (spec 266 §audit; do NOT invent a parallel audit
+ * model). Carries the commitment + verification result + agentic provenance,
+ * NEVER the rendering text (ADR-0033 R3).
+ */
+export function buildCitationAssertion(input) {
+    return {
+        '@context': ['https://www.w3.org/ns/credentials/v2'],
+        type: ['VerifiableCredential', 'CitationAssertion'],
+        issuer: input.issuer,
+        validFrom: input.validFrom,
+        credentialSubject: {
+            id: input.subjectId,
+            ...(input.agentRunId ? { agentRunId: input.agentRunId } : {}),
+            ...(input.outputId ? { outputId: input.outputId } : {}),
+            citationKind: input.citationKind,
+            canonicalId: input.canonicalId,
+            descriptorId: input.descriptorId,
+            contentType: input.contentType,
+            ...(input.commitment ? { commitment: input.commitment } : {}),
+            commitmentVerified: input.commitmentVerified,
+            ...(input.quoteSpanHash ? { quoteSpanHash: input.quoteSpanHash } : {}),
+            ...(input.normalizationSpec ? { normalizationSpec: input.normalizationSpec } : {}),
+            issuer: input.contentIssuer,
+            ...(input.underEntitlement ? { underEntitlement: input.underEntitlement } : {}),
+        },
+    };
+}
+//# sourceMappingURL=entitlement.js.map

package/dist/entitlement.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"entitlement.js","sourceRoot":"","sources":["../src/entitlement.ts"],"names":[],"mappings":"AASA;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,mBAAmB,CACjC,YAA0B,EAC1B,SAAc,EACd,WAAyB,EACzB,aAAqB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;IAElD,IAAI,YAAY,KAAK,QAAQ;QAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;IAC5D,IAAI,YAAY,KAAK,UAAU,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;QAC9D,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,yBAAyB,MAAM,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC;IACvF,CAAC;IACD,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,YAAY,iCAAiC,EAAE,CAAC;IACxF,CAAC;IACD,IAAI,WAAW,CAAC,iBAAiB,CAAC,SAAS,CAAC,WAAW,EAAE,KAAK,SAAS,CAAC,WAAW,EAAE,EAAE,CAAC;QACtF,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,uCAAuC,EAAE,CAAC;IAC/E,CAAC;IACD,IAAI,WAAW,CAAC,UAAU,EAAE,CAAC;QAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC;QAC1E,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,UAAU,EAAE,CAAC;YAC7C,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC;QAC7D,CAAC;IACH,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;AAC/B,CAAC;AAuBD;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CAAC,KAAoB;IAezD,OAAO;QACL,UAAU,EAAE,CAAC,sCAAsC,CAAC;QACpD,IAAI,EAAE,CAAC,sBAAsB,EAAE,mBAAmB,CAAC;QACnD,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,iBAAiB,EAAE;YACjB,EAAE,EAAE,KAAK,CAAC,SAAS;YACnB,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7D,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvD,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7D,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;YAC5C,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtE,GAAG,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,KAAK,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClF,MAAM,EAAE,KAAK,CAAC,aAAa;YAC3B,GAAG,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,KAAK,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAChF;KACF,CAAC;AACJ,CAAC"}

package/dist/errors.d.ts

@@ -0,0 +1,9 @@
+/** A reference path failed its scheme's normalization. */
+export declare class InvalidReferenceError extends Error {
+    constructor(message: string);
+}
+/** A rendering's keccak commitment did not match its descriptor. */
+export declare class CommitmentMismatchError extends Error {
+    constructor(message: string);
+}
+//# sourceMappingURL=errors.d.ts.map

package/dist/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA,0DAA0D;AAC1D,qBAAa,qBAAsB,SAAQ,KAAK;gBAClC,OAAO,EAAE,MAAM;CAI5B;AAED,oEAAoE;AACpE,qBAAa,uBAAwB,SAAQ,KAAK;gBACpC,OAAO,EAAE,MAAM;CAI5B"}

package/dist/errors.js

@@ -0,0 +1,15 @@
+/** A reference path failed its scheme's normalization. */
+export class InvalidReferenceError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'InvalidReferenceError';
+    }
+}
+/** A rendering's keccak commitment did not match its descriptor. */
+export class CommitmentMismatchError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'CommitmentMismatchError';
+    }
+}
+//# sourceMappingURL=errors.js.map

package/dist/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA,0DAA0D;AAC1D,MAAM,OAAO,qBAAsB,SAAQ,KAAK;IAC9C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;IACtC,CAAC;CACF;AAED,oEAAoE;AACpE,MAAM,OAAO,uBAAwB,SAAQ,KAAK;IAChD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;IACxC,CAAC;CACF"}

package/dist/index.d.ts

@@ -0,0 +1,13 @@
+export declare const PACKAGE_NAME = "@agenticprimitives/content-primitives";
+export declare const PACKAGE_STATUS: "phase-1";
+export declare const SPEC_REF = "specs/266-verifiable-content-substrate.md";
+export type { AccessPolicy, ProofPolicy, DescriptorStatus, RightsStatus, TrustProfile, CanonicalLocus, CanonicalLocusEnvelope, CanonicalReference, ContentCommitment, CorpusManifest, WorkMeta, IssuerIdentityRef, ContentDescriptor, BuildDescriptorInput, SignatureVerifier, Entitlement, CitationAssertion, } from './types.js';
+export { computeCanonicalId, canonicalReference, corpusRef, LOCUS_ID_SCHEME } from './reference.js';
+export { jcsCanonicalize, canonicalHash } from '@agenticprimitives/verifiable-credentials';
+export { hashPair, leafHash, buildCorpusTree, merkleRoot, merkleProof, verifyInclusion, type CorpusTree, } from './merkle.js';
+export { NORMALIZATION_V1, canonicalizeRendering, contentCommitment, verifyCommitment, assertCommitment, descriptorHash, buildContentDescriptor, verifyContentDescriptor, type VerifyDescriptorOpts, type VerificationResult, } from './descriptor.js';
+export { resolveCandidates, type ResolutionConstraints, type Candidate, type ResolutionResult, type TrustProfileConfig, } from './resolution.js';
+export { evaluateEntitlement, buildCitationAssertion, type EntitlementDecision, type CitationInput, } from './entitlement.js';
+export { InvalidReferenceError, CommitmentMismatchError } from './errors.js';
+export { buildInclusionZkProof, bindPaymentMandate } from './reserved.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAYA,eAAO,MAAM,YAAY,0CAA0C,CAAC;AACpE,eAAO,MAAM,cAAc,EAAG,SAAkB,CAAC;AACjD,eAAO,MAAM,QAAQ,8CAA8C,CAAC;AAEpE,YAAY,EACV,YAAY,EACZ,WAAW,EACX,gBAAgB,EAChB,YAAY,EACZ,YAAY,EACZ,cAAc,EACd,sBAAsB,EACtB,kBAAkB,EAClB,iBAAiB,EACjB,cAAc,EACd,QAAQ,EACR,iBAAiB,EACjB,iBAAiB,EACjB,oBAAoB,EACpB,iBAAiB,EACjB,WAAW,EACX,iBAAiB,GAClB,MAAM,YAAY,CAAC;AAEpB,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAGpG,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,2CAA2C,CAAC;AAE3F,OAAO,EACL,QAAQ,EACR,QAAQ,EACR,eAAe,EACf,UAAU,EACV,WAAW,EACX,eAAe,EACf,KAAK,UAAU,GAChB,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,gBAAgB,EAChB,qBAAqB,EACrB,iBAAiB,EACjB,gBAAgB,EAChB,gBAAgB,EAChB,cAAc,EACd,sBAAsB,EACtB,uBAAuB,EACvB,KAAK,oBAAoB,EACzB,KAAK,kBAAkB,GACxB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,iBAAiB,EACjB,KAAK,qBAAqB,EAC1B,KAAK,SAAS,EACd,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,GACxB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,mBAAmB,EACnB,sBAAsB,EACtB,KAAK,mBAAmB,EACxB,KAAK,aAAa,GACnB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAAE,qBAAqB,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC;AAG7E,OAAO,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC"}

package/dist/index.js

@@ -0,0 +1,26 @@
+// @agenticprimitives/content-primitives — the Verifiable Content Substrate SDK.
+//
+// Name → resolve → verify → retrieve → cite → audit, for content that lives
+// off-platform and is controlled by third-party rights holders. Content-
+// agnostic (ADR-0033): a verse is content, not an Agent; a canonical locus is a
+// deterministic hash of a scheme-INDEPENDENT structured form (registry-free, no
+// allocator), never a Smart Agent facet. No vertical/faith vocabulary, no
+// rendering text — descriptors carry a retrievalPointer + a SHA-256 commitment.
+//
+// See: ../../specs/266-verifiable-content-substrate.md
+//      ../../docs/architecture/decisions/0033-content-agnostic-verifiable-content-firewall.md
+export const PACKAGE_NAME = '@agenticprimitives/content-primitives';
+export const PACKAGE_STATUS = 'phase-1';
+export const SPEC_REF = 'specs/266-verifiable-content-substrate.md';
+export { computeCanonicalId, canonicalReference, corpusRef, LOCUS_ID_SCHEME } from './reference.js';
+// Re-export the ONE canonicalization stack (RFC 8785) — shared with credential
+// hashing so descriptor/locus ids and VC hashes never drift.
+export { jcsCanonicalize, canonicalHash } from '@agenticprimitives/verifiable-credentials';
+export { hashPair, leafHash, buildCorpusTree, merkleRoot, merkleProof, verifyInclusion, } from './merkle.js';
+export { NORMALIZATION_V1, canonicalizeRendering, contentCommitment, verifyCommitment, assertCommitment, descriptorHash, buildContentDescriptor, verifyContentDescriptor, } from './descriptor.js';
+export { resolveCandidates, } from './resolution.js';
+export { evaluateEntitlement, buildCitationAssertion, } from './entitlement.js';
+export { InvalidReferenceError, CommitmentMismatchError } from './errors.js';
+// Reserved for later phases (throw until implemented; spec 266 §6).
+export { buildInclusionZkProof, bindPaymentMandate } from './reserved.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,EAAE;AACF,4EAA4E;AAC5E,yEAAyE;AACzE,gFAAgF;AAChF,gFAAgF;AAChF,0EAA0E;AAC1E,gFAAgF;AAChF,EAAE;AACF,uDAAuD;AACvD,8FAA8F;AAE9F,MAAM,CAAC,MAAM,YAAY,GAAG,uCAAuC,CAAC;AACpE,MAAM,CAAC,MAAM,cAAc,GAAG,SAAkB,CAAC;AACjD,MAAM,CAAC,MAAM,QAAQ,GAAG,2CAA2C,CAAC;AAsBpE,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACpG,+EAA+E;AAC/E,6DAA6D;AAC7D,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,2CAA2C,CAAC;AAE3F,OAAO,EACL,QAAQ,EACR,QAAQ,EACR,eAAe,EACf,UAAU,EACV,WAAW,EACX,eAAe,GAEhB,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,gBAAgB,EAChB,qBAAqB,EACrB,iBAAiB,EACjB,gBAAgB,EAChB,gBAAgB,EAChB,cAAc,EACd,sBAAsB,EACtB,uBAAuB,GAGxB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,iBAAiB,GAKlB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,mBAAmB,EACnB,sBAAsB,GAGvB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAAE,qBAAqB,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC;AAE7E,oEAAoE;AACpE,OAAO,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC"}

package/dist/jcs.d.ts

@@ -0,0 +1,4 @@
+export declare function canonicalize(value: unknown): unknown;
+/** Canonical JSON string of `value` (sorted keys, undefined omitted). */
+export declare function jcsString(value: unknown): string;
+//# sourceMappingURL=jcs.d.ts.map

package/dist/jcs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"jcs.d.ts","sourceRoot":"","sources":["../src/jcs.ts"],"names":[],"mappings":"AAMA,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAYpD;AAED,yEAAyE;AACzE,wBAAgB,SAAS,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAEhD"}

package/dist/jcs.js

@@ -0,0 +1,25 @@
+// Deterministic, sorted-key canonical JSON (JCS-style). Sufficient for our
+// records (string/hex/number/bool fields); not a full RFC 8785 number
+// normalizer — keep numeric fields integer-valued. Used for both the canonical
+// locus id and the descriptor signing digest so hashing is stable regardless of
+// key insertion order.
+export function canonicalize(value) {
+    if (Array.isArray(value))
+        return value.map(canonicalize);
+    if (value && typeof value === 'object') {
+        const out = {};
+        for (const k of Object.keys(value).sort()) {
+            const v = value[k];
+            if (v === undefined)
+                continue; // omit undefined so optional fields don't shift the hash
+            out[k] = canonicalize(v);
+        }
+        return out;
+    }
+    return value;
+}
+/** Canonical JSON string of `value` (sorted keys, undefined omitted). */
+export function jcsString(value) {
+    return JSON.stringify(canonicalize(value));
+}
+//# sourceMappingURL=jcs.js.map

package/dist/jcs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jcs.js","sourceRoot":"","sources":["../src/jcs.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAC3E,sEAAsE;AACtE,+EAA+E;AAC/E,gFAAgF;AAChF,uBAAuB;AAEvB,MAAM,UAAU,YAAY,CAAC,KAAc;IACzC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IACzD,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,MAAM,GAAG,GAA4B,EAAE,CAAC;QACxC,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,KAAgC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YACrE,MAAM,CAAC,GAAI,KAAiC,CAAC,CAAC,CAAC,CAAC;YAChD,IAAI,CAAC,KAAK,SAAS;gBAAE,SAAS,CAAC,yDAAyD;YACxF,GAAG,CAAC,CAAC,CAAC,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC;QAC3B,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,SAAS,CAAC,KAAc;IACtC,OAAO,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;AAC7C,CAAC"}

package/dist/merkle.d.ts

@@ -0,0 +1,29 @@
+import { type Hex } from 'viem';
+/** Hash an ordered pair after sorting: keccak256(min || max). */
+export declare function hashPair(a: Hex, b: Hex): Hex;
+/**
+ * Leaf hash for a descriptor commitment. Double-hash (`keccak256(keccak256(c))`)
+ * to domain-separate leaves from internal nodes (second-preimage resistance).
+ */
+export declare function leafHash(descriptorCommitment: Hex): Hex;
+export interface CorpusTree {
+    root: Hex;
+    /** layers[0] = leaves, layers[n] = [root]. */
+    layers: Hex[][];
+}
+/**
+ * Build a Merkle tree over already-hashed leaves (see {@link leafHash}). An odd
+ * node at any level is promoted unchanged to the next level. Empty input yields
+ * the zero root.
+ */
+export declare function buildCorpusTree(leaves: Hex[]): CorpusTree;
+/** Convenience: root of a fresh tree over `leaves`. */
+export declare function merkleRoot(leaves: Hex[]): Hex;
+/**
+ * Inclusion proof (sibling path) for the leaf at `index`. Promoted (odd) nodes
+ * contribute no sibling at that level — matching {@link buildCorpusTree}.
+ */
+export declare function merkleProof(tree: CorpusTree, index: number): Hex[];
+/** Fold a leaf with its proof and compare against the root. */
+export declare function verifyInclusion(leaf: Hex, proof: Hex[], root: Hex): boolean;
+//# sourceMappingURL=merkle.d.ts.map

package/dist/merkle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"merkle.d.ts","sourceRoot":"","sources":["../src/merkle.ts"],"names":[],"mappings":"AAAA,OAAO,EAA8B,KAAK,GAAG,EAAE,MAAM,MAAM,CAAC;AAa5D,iEAAiE;AACjE,wBAAgB,QAAQ,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,GAAG,GAAG,CAG5C;AAED;;;GAGG;AACH,wBAAgB,QAAQ,CAAC,oBAAoB,EAAE,GAAG,GAAG,GAAG,CAEvD;AAED,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,GAAG,CAAC;IACV,8CAA8C;IAC9C,MAAM,EAAE,GAAG,EAAE,EAAE,CAAC;CACjB;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,UAAU,CAezD;AAED,uDAAuD;AACvD,wBAAgB,UAAU,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,GAAG,CAE7C;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,GAAG,GAAG,EAAE,CAWlE;AAED,+DAA+D;AAC/D,wBAAgB,eAAe,CAAC,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,GAAG,GAAG,OAAO,CAI3E"}

package/dist/merkle.js

@@ -0,0 +1,74 @@
+import { keccak256, concat, toBytes } from 'viem';
+// Generic Merkle commitment over a corpus of descriptor commitments (spec 266
+// §4). Net-new to the monorepo (the repo previously had only flat keccak
+// commitments in `agreements`). Sorted-pair hashing (OpenZeppelin-compatible)
+// so inclusion proofs are sibling-order-independent and verifiable on-chain in
+// a future ContentCorpusRegistry (spec 266 Phase 3).
+/** Order two hashes ascending (sorted-pair convention). */
+function sortPair(a, b) {
+    return a.toLowerCase() <= b.toLowerCase() ? [a, b] : [b, a];
+}
+/** Hash an ordered pair after sorting: keccak256(min || max). */
+export function hashPair(a, b) {
+    const [lo, hi] = sortPair(a, b);
+    return keccak256(concat([lo, hi]));
+}
+/**
+ * Leaf hash for a descriptor commitment. Double-hash (`keccak256(keccak256(c))`)
+ * to domain-separate leaves from internal nodes (second-preimage resistance).
+ */
+export function leafHash(descriptorCommitment) {
+    return keccak256(toBytes(keccak256(toBytes(descriptorCommitment))));
+}
+/**
+ * Build a Merkle tree over already-hashed leaves (see {@link leafHash}). An odd
+ * node at any level is promoted unchanged to the next level. Empty input yields
+ * the zero root.
+ */
+export function buildCorpusTree(leaves) {
+    if (leaves.length === 0) {
+        return { root: ('0x' + '0'.repeat(64)), layers: [[]] };
+    }
+    const layers = [leaves.slice()];
+    while (layers[layers.length - 1].length > 1) {
+        const prev = layers[layers.length - 1];
+        const next = [];
+        for (let i = 0; i < prev.length; i += 2) {
+            if (i + 1 === prev.length)
+                next.push(prev[i]);
+            else
+                next.push(hashPair(prev[i], prev[i + 1]));
+        }
+        layers.push(next);
+    }
+    return { root: layers[layers.length - 1][0], layers };
+}
+/** Convenience: root of a fresh tree over `leaves`. */
+export function merkleRoot(leaves) {
+    return buildCorpusTree(leaves).root;
+}
+/**
+ * Inclusion proof (sibling path) for the leaf at `index`. Promoted (odd) nodes
+ * contribute no sibling at that level — matching {@link buildCorpusTree}.
+ */
+export function merkleProof(tree, index) {
+    const proof = [];
+    let idx = index;
+    for (let level = 0; level < tree.layers.length - 1; level++) {
+        const nodes = tree.layers[level];
+        const isRight = idx % 2 === 1;
+        const siblingIdx = isRight ? idx - 1 : idx + 1;
+        if (siblingIdx < nodes.length)
+            proof.push(nodes[siblingIdx]);
+        idx = Math.floor(idx / 2);
+    }
+    return proof;
+}
+/** Fold a leaf with its proof and compare against the root. */
+export function verifyInclusion(leaf, proof, root) {
+    let computed = leaf;
+    for (const sibling of proof)
+        computed = hashPair(computed, sibling);
+    return computed.toLowerCase() === root.toLowerCase();
+}
+//# sourceMappingURL=merkle.js.map

package/dist/merkle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"merkle.js","sourceRoot":"","sources":["../src/merkle.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAY,MAAM,MAAM,CAAC;AAE5D,8EAA8E;AAC9E,yEAAyE;AACzE,8EAA8E;AAC9E,+EAA+E;AAC/E,qDAAqD;AAErD,2DAA2D;AAC3D,SAAS,QAAQ,CAAC,CAAM,EAAE,CAAM;IAC9B,OAAO,CAAC,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAC9D,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,QAAQ,CAAC,CAAM,EAAE,CAAM;IACrC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAChC,OAAO,SAAS,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;AACrC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,QAAQ,CAAC,oBAAyB;IAChD,OAAO,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,CAAC;AACtE,CAAC;AAQD;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,MAAa;IAC3C,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,EAAE,IAAI,EAAE,CAAC,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAQ,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC;IAChE,CAAC;IACD,MAAM,MAAM,GAAY,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;IACzC,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC;QACxC,MAAM,IAAI,GAAU,EAAE,CAAC;QACvB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;YACxC,IAAI,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,MAAM;gBAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC;;gBAC1C,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAE,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,CAAE,CAAC,CAAC,CAAC;QACnD,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpB,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC,CAAC,CAAE,EAAE,MAAM,EAAE,CAAC;AAC1D,CAAC;AAED,uDAAuD;AACvD,MAAM,UAAU,UAAU,CAAC,MAAa;IACtC,OAAO,eAAe,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC;AACtC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,IAAgB,EAAE,KAAa;IACzD,MAAM,KAAK,GAAU,EAAE,CAAC;IACxB,IAAI,GAAG,GAAG,KAAK,CAAC;IAChB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC;QAC5D,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAE,CAAC;QAClC,MAAM,OAAO,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC;QAC9B,MAAM,UAAU,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC;QAC/C,IAAI,UAAU,GAAG,KAAK,CAAC,MAAM;YAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAE,CAAC,CAAC;QAC9D,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;IAC5B,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,+DAA+D;AAC/D,MAAM,UAAU,eAAe,CAAC,IAAS,EAAE,KAAY,EAAE,IAAS;IAChE,IAAI,QAAQ,GAAG,IAAI,CAAC;IACpB,KAAK,MAAM,OAAO,IAAI,KAAK;QAAE,QAAQ,GAAG,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACpE,OAAO,QAAQ,CAAC,WAAW,EAAE,KAAK,IAAI,CAAC,WAAW,EAAE,CAAC;AACvD,CAAC"}

package/dist/reference.d.ts

@@ -0,0 +1,28 @@
+import { type Hex } from 'viem';
+import type { Address } from '@agenticprimitives/types';
+import type { CanonicalLocusEnvelope, CanonicalReference } from './types.js';
+/** The single canonical-locus id construction (pick-one; spec 266 §2.1). */
+export declare const LOCUS_ID_SCHEME: "ap-locus-id-v1";
+/**
+ * Deterministic, scheme-independent canonical-locus id (spec 266 §2.1):
+ *   `keccak256(utf8(DOMAIN_SEP) || utf8(JCS(envelope)))`.
+ *
+ * The CORE treats `envelope.canonicalLocus` as opaque controlled-token bytes;
+ * the vertical extension owns its meaning + validates it before this call.
+ * Because the id hashes a *normalized structured envelope* (not a surface
+ * string) under an explicit `locusProfile`, all surface grammars that denote the
+ * same locus collide to the same id, and only a deliberate profile/versification
+ * change moves it. Registry-free + reproducible — no allocator, no Smart Agent
+ * (ADR-0033). keccak keeps it EVM-anchorable for the Phase-3 registry. JCS does
+ * NOT Unicode-normalize strings, so callers MUST pass controlled tokens only.
+ */
+export declare function computeCanonicalId(envelope: CanonicalLocusEnvelope): Hex;
+/** Build a {@link CanonicalReference} from an envelope (+ optional human alias). */
+export declare function canonicalReference(envelope: CanonicalLocusEnvelope, alias?: string): CanonicalReference;
+/**
+ * Deterministic corpus reference (spec 266 §2.2).
+ * `corpusRef = keccak256(utf8(`${issuer}/${edition}/${version}`))`. Issuer
+ * address is lowercased so the id is independent of checksum casing.
+ */
+export declare function corpusRef(issuer: Address, edition: string, version: string): Hex;
+//# sourceMappingURL=reference.d.ts.map

package/dist/reference.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reference.d.ts","sourceRoot":"","sources":["../src/reference.ts"],"names":[],"mappings":"AAAA,OAAO,EAA8B,KAAK,GAAG,EAAE,MAAM,MAAM,CAAC;AAC5D,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,0BAA0B,CAAC;AAExD,OAAO,KAAK,EAAE,sBAAsB,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAE7E,4EAA4E;AAC5E,eAAO,MAAM,eAAe,EAAG,gBAAyB,CAAC;AAKzD;;;;;;;;;;;;GAYG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,sBAAsB,GAAG,GAAG,CAExE;AAED,oFAAoF;AACpF,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,sBAAsB,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,kBAAkB,CAEvG;AAED;;;;GAIG;AACH,wBAAgB,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,GAAG,CAEhF"}

package/dist/reference.js

@@ -0,0 +1,35 @@
+import { keccak256, concat, toBytes } from 'viem';
+import { jcsCanonicalize } from '@agenticprimitives/verifiable-credentials';
+/** The single canonical-locus id construction (pick-one; spec 266 §2.1). */
+export const LOCUS_ID_SCHEME = 'ap-locus-id-v1';
+/** Domain separator — prevents cross-primitive / cross-version hash collisions. */
+const LOCUS_ID_DOMAIN_SEP = 'ap:canonical-locus-id:v1\0';
+/**
+ * Deterministic, scheme-independent canonical-locus id (spec 266 §2.1):
+ *   `keccak256(utf8(DOMAIN_SEP) || utf8(JCS(envelope)))`.
+ *
+ * The CORE treats `envelope.canonicalLocus` as opaque controlled-token bytes;
+ * the vertical extension owns its meaning + validates it before this call.
+ * Because the id hashes a *normalized structured envelope* (not a surface
+ * string) under an explicit `locusProfile`, all surface grammars that denote the
+ * same locus collide to the same id, and only a deliberate profile/versification
+ * change moves it. Registry-free + reproducible — no allocator, no Smart Agent
+ * (ADR-0033). keccak keeps it EVM-anchorable for the Phase-3 registry. JCS does
+ * NOT Unicode-normalize strings, so callers MUST pass controlled tokens only.
+ */
+export function computeCanonicalId(envelope) {
+    return keccak256(concat([toBytes(LOCUS_ID_DOMAIN_SEP), toBytes(jcsCanonicalize(envelope))]));
+}
+/** Build a {@link CanonicalReference} from an envelope (+ optional human alias). */
+export function canonicalReference(envelope, alias) {
+    return { id: computeCanonicalId(envelope), envelope, ...(alias ? { alias } : {}) };
+}
+/**
+ * Deterministic corpus reference (spec 266 §2.2).
+ * `corpusRef = keccak256(utf8(`${issuer}/${edition}/${version}`))`. Issuer
+ * address is lowercased so the id is independent of checksum casing.
+ */
+export function corpusRef(issuer, edition, version) {
+    return keccak256(toBytes(`${issuer.toLowerCase()}/${edition}/${version}`));
+}
+//# sourceMappingURL=reference.js.map

package/dist/reference.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reference.js","sourceRoot":"","sources":["../src/reference.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAY,MAAM,MAAM,CAAC;AAE5D,OAAO,EAAE,eAAe,EAAE,MAAM,2CAA2C,CAAC;AAG5E,4EAA4E;AAC5E,MAAM,CAAC,MAAM,eAAe,GAAG,gBAAyB,CAAC;AAEzD,mFAAmF;AACnF,MAAM,mBAAmB,GAAG,4BAA4B,CAAC;AAEzD;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,kBAAkB,CAAC,QAAgC;IACjE,OAAO,SAAS,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,mBAAmB,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC/F,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,kBAAkB,CAAC,QAAgC,EAAE,KAAc;IACjF,OAAO,EAAE,EAAE,EAAE,kBAAkB,CAAC,QAAQ,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AACrF,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,SAAS,CAAC,MAAe,EAAE,OAAe,EAAE,OAAe;IACzE,OAAO,SAAS,CAAC,OAAO,CAAC,GAAG,MAAM,CAAC,WAAW,EAAE,IAAI,OAAO,IAAI,OAAO,EAAE,CAAC,CAAC,CAAC;AAC7E,CAAC"}

package/dist/reserved.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Zero-knowledge inclusion / "AI-cited-correctly" proof (spec 266 Phase 4).
+ * Reserved — proves a commitment is in a corpus (or that a citation is
+ * faithful) without revealing the rendering.
+ */
+export declare function buildInclusionZkProof(): Promise<never>;
+/**
+ * Bind a payment mandate to entitlement issuance for paid access (spec 266
+ * Phase 5). Reserved.
+ */
+export declare function bindPaymentMandate(): never;
+//# sourceMappingURL=reserved.d.ts.map

package/dist/reserved.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reserved.d.ts","sourceRoot":"","sources":["../src/reserved.ts"],"names":[],"mappings":"AAIA;;;;GAIG;AACH,wBAAsB,qBAAqB,IAAI,OAAO,CAAC,KAAK,CAAC,CAE5D;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,IAAI,KAAK,CAE1C"}

package/dist/reserved.js

@@ -0,0 +1,19 @@
+// Reserved API surface for later phases (spec 266 §6). These lock the shape so
+// apps can be written against them, and throw until implemented — mirroring the
+// agent-naming Phase-1 skeleton discipline. NO silent no-ops (ADR-0013).
+/**
+ * Zero-knowledge inclusion / "AI-cited-correctly" proof (spec 266 Phase 4).
+ * Reserved — proves a commitment is in a corpus (or that a citation is
+ * faithful) without revealing the rendering.
+ */
+export async function buildInclusionZkProof() {
+    throw new Error('verifiable-content: ZK proofs are reserved (spec 266 Phase 4)');
+}
+/**
+ * Bind a payment mandate to entitlement issuance for paid access (spec 266
+ * Phase 5). Reserved.
+ */
+export function bindPaymentMandate() {
+    throw new Error('verifiable-content: paid access is reserved (spec 266 Phase 5)');
+}
+//# sourceMappingURL=reserved.js.map

package/dist/reserved.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reserved.js","sourceRoot":"","sources":["../src/reserved.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,gFAAgF;AAChF,yEAAyE;AAEzE;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB;IACzC,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;AACnF,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB;IAChC,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;AACpF,CAAC"}

package/dist/resolution.d.ts

@@ -0,0 +1,41 @@
+import type { Address } from '@agenticprimitives/types';
+import type { ContentDescriptor, CanonicalReference, RightsStatus, TrustProfile } from './types.js';
+export interface ResolutionConstraints {
+    contentType?: string;
+    language?: string;
+    /** Acceptable rights postures (e.g. ['public-domain']). */
+    rightsStatus?: RightsStatus[];
+    trustProfile?: TrustProfile;
+}
+/** A descriptor plus the profile/constraint screening outcome (pre-verification). */
+export interface Candidate {
+    descriptor: ContentDescriptor;
+    /** True iff the descriptor's issuer is in the active trust profile's allowlist. */
+    issuerTrusted: boolean;
+    /** True iff the descriptor passed all constraint filters. */
+    admitted: boolean;
+    /** Why a candidate was screened out (when !admitted). */
+    reason?: string;
+}
+export interface ResolutionResult {
+    canonicalReference: CanonicalReference;
+    candidates: Candidate[];
+}
+/** A trust profile = an issuer allowlist + posture flags. Phase 1 wires
+ *  `public-domain-demo` only; the rest are reserved shapes (spec 266 §policy). */
+export interface TrustProfileConfig {
+    profile: TrustProfile;
+    /** Issuer Smart Agent addresses trusted under this profile. Empty = trust none. */
+    trustedIssuers: Address[];
+    /** If set, only these rights postures are admitted. */
+    allowedRightsStatus?: RightsStatus[];
+    /** If true, an untrusted issuer is screened out (admitted=false). */
+    requireTrustedIssuer: boolean;
+}
+/**
+ * Screen descriptors for a canonical reference into a candidate set under a
+ * trust profile + constraints. Pure + deterministic. Does NOT verify signatures
+ * (that is the caller's per-candidate step) — it screens *eligibility*.
+ */
+export declare function resolveCandidates(reference: CanonicalReference, descriptors: ContentDescriptor[], profile: TrustProfileConfig, constraints?: ResolutionConstraints): ResolutionResult;
+//# sourceMappingURL=resolution.d.ts.map

package/dist/resolution.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolution.d.ts","sourceRoot":"","sources":["../src/resolution.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,0BAA0B,CAAC;AACxD,OAAO,KAAK,EACV,iBAAiB,EACjB,kBAAkB,EAClB,YAAY,EACZ,YAAY,EACb,MAAM,YAAY,CAAC;AAQpB,MAAM,WAAW,qBAAqB;IACpC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,2DAA2D;IAC3D,YAAY,CAAC,EAAE,YAAY,EAAE,CAAC;IAC9B,YAAY,CAAC,EAAE,YAAY,CAAC;CAC7B;AAED,qFAAqF;AACrF,MAAM,WAAW,SAAS;IACxB,UAAU,EAAE,iBAAiB,CAAC;IAC9B,mFAAmF;IACnF,aAAa,EAAE,OAAO,CAAC;IACvB,6DAA6D;IAC7D,QAAQ,EAAE,OAAO,CAAC;IAClB,yDAAyD;IACzD,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,gBAAgB;IAC/B,kBAAkB,EAAE,kBAAkB,CAAC;IACvC,UAAU,EAAE,SAAS,EAAE,CAAC;CACzB;AAED;kFACkF;AAClF,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,YAAY,CAAC;IACtB,mFAAmF;IACnF,cAAc,EAAE,OAAO,EAAE,CAAC;IAC1B,uDAAuD;IACvD,mBAAmB,CAAC,EAAE,YAAY,EAAE,CAAC;IACrC,qEAAqE;IACrE,oBAAoB,EAAE,OAAO,CAAC;CAC/B;AAMD;;;;GAIG;AACH,wBAAgB,iBAAiB,CAC/B,SAAS,EAAE,kBAAkB,EAC7B,WAAW,EAAE,iBAAiB,EAAE,EAChC,OAAO,EAAE,kBAAkB,EAC3B,WAAW,GAAE,qBAA0B,GACtC,gBAAgB,CAsBlB"}

package/dist/resolution.js

@@ -0,0 +1,35 @@
+function issuerIn(list, issuer) {
+    return list.some((a) => a.toLowerCase() === issuer.toLowerCase());
+}
+/**
+ * Screen descriptors for a canonical reference into a candidate set under a
+ * trust profile + constraints. Pure + deterministic. Does NOT verify signatures
+ * (that is the caller's per-candidate step) — it screens *eligibility*.
+ */
+export function resolveCandidates(reference, descriptors, profile, constraints = {}) {
+    const candidates = descriptors
+        .filter((d) => d.canonicalId.toLowerCase() === reference.id.toLowerCase())
+        .map((descriptor) => {
+        const issuerTrusted = issuerIn(profile.trustedIssuers, descriptor.issuer.address);
+        let reason;
+        if (descriptor.status !== 'active')
+            reason = `status ${descriptor.status}`;
+        else if (profile.requireTrustedIssuer && !issuerTrusted)
+            reason = 'issuer not in trust profile allowlist';
+        else if (constraints.contentType && descriptor.contentType !== constraints.contentType)
+            reason = 'contentType mismatch';
+        else if (constraints.language && descriptor.work?.language && descriptor.work.language !== constraints.language)
+            reason = 'language mismatch';
+        else {
+            const allowedRights = constraints.rightsStatus ?? profile.allowedRightsStatus;
+            if (allowedRights && allowedRights.length > 0) {
+                const rs = descriptor.work?.rightsStatus ?? 'unknown';
+                if (!allowedRights.includes(rs))
+                    reason = `rightsStatus ${rs} not permitted`;
+            }
+        }
+        return { descriptor, issuerTrusted, admitted: reason === undefined, reason };
+    });
+    return { canonicalReference: reference, candidates };
+}
+//# sourceMappingURL=resolution.js.map

package/dist/resolution.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolution.js","sourceRoot":"","sources":["../src/resolution.ts"],"names":[],"mappings":"AAkDA,SAAS,QAAQ,CAAC,IAAe,EAAE,MAAe;IAChD,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;AACpE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAC/B,SAA6B,EAC7B,WAAgC,EAChC,OAA2B,EAC3B,cAAqC,EAAE;IAEvC,MAAM,UAAU,GAAgB,WAAW;SACxC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,WAAW,EAAE,KAAK,SAAS,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC;SACzE,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE;QAClB,MAAM,aAAa,GAAG,QAAQ,CAAC,OAAO,CAAC,cAAc,EAAE,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAClF,IAAI,MAA0B,CAAC;QAE/B,IAAI,UAAU,CAAC,MAAM,KAAK,QAAQ;YAAE,MAAM,GAAG,UAAU,UAAU,CAAC,MAAM,EAAE,CAAC;aACtE,IAAI,OAAO,CAAC,oBAAoB,IAAI,CAAC,aAAa;YAAE,MAAM,GAAG,uCAAuC,CAAC;aACrG,IAAI,WAAW,CAAC,WAAW,IAAI,UAAU,CAAC,WAAW,KAAK,WAAW,CAAC,WAAW;YAAE,MAAM,GAAG,sBAAsB,CAAC;aACnH,IAAI,WAAW,CAAC,QAAQ,IAAI,UAAU,CAAC,IAAI,EAAE,QAAQ,IAAI,UAAU,CAAC,IAAI,CAAC,QAAQ,KAAK,WAAW,CAAC,QAAQ;YAAE,MAAM,GAAG,mBAAmB,CAAC;aACzI,CAAC;YACJ,MAAM,aAAa,GAAG,WAAW,CAAC,YAAY,IAAI,OAAO,CAAC,mBAAmB,CAAC;YAC9E,IAAI,aAAa,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC9C,MAAM,EAAE,GAAG,UAAU,CAAC,IAAI,EAAE,YAAY,IAAI,SAAS,CAAC;gBACtD,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAAE,MAAM,GAAG,gBAAgB,EAAE,gBAAgB,CAAC;YAC/E,CAAC;QACH,CAAC;QACD,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,KAAK,SAAS,EAAE,MAAM,EAAE,CAAC;IAC/E,CAAC,CAAC,CAAC;IAEL,OAAO,EAAE,kBAAkB,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC;AACvD,CAAC"}

package/dist/types.d.ts

@@ -0,0 +1,172 @@
+import type { Address, Hex } from '@agenticprimitives/types';
+import type { VerifiableCredential } from '@agenticprimitives/verifiable-credentials';
+/**
+ * Who may retrieve a rendering (apcnt:accessPolicy codelist; spec 266 §2.2).
+ * `public` needs no entitlement; `licensed`/`private` are gated. An accessPolicy
+ * is a POLICY INPUT, never a legal grant (ADR-0033 R5; spec 266 §threat-model).
+ */
+export type AccessPolicy = 'public' | 'licensed' | 'private';
+/**
+ * How a descriptor's authenticity/inclusion is proven (apcnt:proofPolicy). The
+ * enum is fixed now so apps can target it; Phase 1 implements the `*-v1`
+ * signature/hash/merkle paths — the rest are reserved (spec 266 §6/§8).
+ */
+export type ProofPolicy = 'issuer-signature-v1' | 'issuer-signature-and-hash-v1' | 'merkle-membership-v1' | 'signed-api-response-v1' | 'entitlement-attestation-v1' | 'zk-membership-v1';
+/** Lifecycle of a descriptor. Verification is fail-closed on non-`active`. */
+export type DescriptorStatus = 'active' | 'revoked' | 'superseded';
+/** Rights posture of the underlying work (a policy input, not a grant). */
+export type RightsStatus = 'public-domain' | 'open-license' | 'licensed' | 'unknown';
+/** Phase-1 trust profiles (spec 266 §policy). Only `public-domain-demo` is wired.
+ *  Generic, vertical-agnostic names — an app may map them to domain labels. */
+export type TrustProfile = 'public-domain-demo' | 'strict-verified-issuer' | 'community-experimental' | 'restricted-high-assurance';
+/**
+ * A scheme-independent, structured canonical locus. The CORE treats this as an
+ * OPAQUE record. Its keys MUST be controlled tokens (never user strings, display
+ * labels, or surface-grammar strings) supplied by a vertical-extension package,
+ * because JCS does NOT Unicode-normalize strings — the extension normalizes all
+ * surface forms to controlled tokens BEFORE they reach the hash. Two surface
+ * grammars that denote the same locus MUST produce an equal canonical locus.
+ */
+export type CanonicalLocus = Record<string, unknown>;
+/**
+ * The hashed envelope (spec 266 §2.1). The id commits not just to the locus
+ * fields but to the PROFILE that defines their meaning + the domain — so the
+ * same JSON can never conceptually collide across primitives or versions.
+ */
+export interface CanonicalLocusEnvelope {
+    /** Fixed id construction scheme, e.g. 'ap-locus-id-v1'. */
+    idScheme: string;
+    /** Vertical domain tag, e.g. 'lyrics' / 'legal-code' / 'doc'. */
+    contentDomain: string;
+    /** Versioned locus profile (the governance seam), e.g. 'ap.<domain>.locus.v1'. */
+    locusProfile: string;
+    /** The controlled-token canonical locus (opaque to the core). */
+    canonicalLocus: CanonicalLocus;
+}
+/** FRBR Work locus: the deterministic, domain-separated id of an envelope. */
+export interface CanonicalReference {
+    /** keccak256("ap:canonical-locus-id:v1\0" || JCS(envelope)) — registry-free. */
+    id: Hex;
+    /** The envelope the id was computed from. */
+    envelope: CanonicalLocusEnvelope;
+    /** Optional human alias that resolved to this reference (e.g. 'doc:section-1.2'). */
+    alias?: string;
+}
+/** Commitment to off-platform rendering text (structured + versioned; spec 266 §7). */
+export interface ContentCommitment {
+    type: 'canonicalTextCommitment';
+    /** The frozen normalization profile id, e.g. 'ap:normalization:canonical-text-v1'. */
+    normalization: string;
+    /** Digest algorithm of the normalized text. */
+    algorithm: 'sha-256';
+    /** Digest value (hex). NEVER the text (ADR-0033 R3). */
+    value: Hex;
+}
+/**
+ * FRBR Expression/Manifestation — a versioned body of renderings published by an
+ * issuer Smart Agent, committed by a Merkle `corpusRoot` + signed manifest.
+ * Carries NO rendering text (ADR-0033 R3).
+ */
+export interface CorpusManifest {
+    /** keccak256(utf8(`${issuer}/${edition}/${version}`)). */
+    corpusRef: Hex;
+    issuer: Address;
+    edition: string;
+    version: string;
+    /** The content type this corpus renders (e.g. 'text.passage'). */
+    scheme: string;
+    /** Merkle root over the per-locus descriptor commitments. */
+    corpusRoot: Hex;
+    accessPolicy: AccessPolicy;
+    proofPolicy: ProofPolicy;
+    /** keccak/sha digest of the off-chain license-terms doc (R5). Never the terms. */
+    licenseTermsHash: Hex;
+    metadataUri?: string;
+}
+/** Bibliographic metadata about the underlying work (policy inputs). */
+export interface WorkMeta {
+    title?: string;
+    abbreviation?: string;
+    language?: string;
+    edition?: string;
+    rightsStatus?: RightsStatus;
+}
+/** Issuer reference — a Smart Agent address plus an optional DID/CAIP-10 label. */
+export interface IssuerIdentityRef {
+    address: Address;
+    /** Optional CAIP-10 / DID label for display + verificationMethod. */
+    did?: string;
+}
+/**
+ * FRBR Item — an issuer's signed claim about a rendering of a canonical locus.
+ * Points AT off-chain text via `retrievalPointer`; NEVER contains it (R3).
+ * Trust flows from `signature` (issuer ERC-1271), not the platform (R5).
+ */
+export interface ContentDescriptor {
+    /** Stable descriptor id (issuer-scoped), e.g. 'desc_bsb_<canonicalIdShort>'. */
+    id: string;
+    /** The scheme-independent canonical locus this describes. */
+    canonicalId: Hex;
+    /** Opaque app content type, e.g. 'text.passage'. */
+    contentType: string;
+    issuer: IssuerIdentityRef;
+    issuedAt: string;
+    status: DescriptorStatus;
+    version?: string;
+    validFrom?: string;
+    validUntil?: string;
+    revocationRef?: string;
+    /** Bibliographic metadata (title/language/edition/rightsStatus). */
+    work?: WorkMeta;
+    /** Structured domain semantics supplied by the vertical (e.g. section/line/edition). */
+    selector?: Record<string, unknown>;
+    /** Commitment to the off-platform rendering (optional for signature-only proofs). */
+    commitment?: ContentCommitment;
+    /** URI/locator for the off-chain text. NEVER the text itself (R3). */
+    retrievalPointer: string;
+    proofPolicy: ProofPolicy;
+    accessPolicy: AccessPolicy;
+    /** Membership corpus (when proofPolicy is merkle-membership-v1). */
+    corpusRef?: Hex;
+    /** Issuer ERC-1271 signature over descriptorHash(unsigned). */
+    signature: Hex;
+}
+/** Input to {@link buildContentDescriptor} (everything but the signature). */
+export type BuildDescriptorInput = Omit<ContentDescriptor, 'signature'>;
+/**
+ * Verifies an issuer signature. Apps inject one backed by an
+ * `AgentAccountClient.isValidSignature` (ERC-1271/6492); tests inject a fake.
+ * Decoupled per ADR-0006's injected-context pattern.
+ */
+export type SignatureVerifier = (args: {
+    signer: Address;
+    hash: Hex;
+    signature: Hex;
+}) => Promise<boolean> | boolean;
+/** A credential asserting a subject may access a corpus (apcnt:Entitlement). */
+export type Entitlement = VerifiableCredential<{
+    id: string;
+    corpusRef: Hex;
+    accessPolicy: AccessPolicy;
+    terms?: string;
+}>;
+/** The AI-safe citation record (apcnt:CitationAssertion). Carries provenance,
+ *  never rendering text. */
+export type CitationAssertion = VerifiableCredential<{
+    id: string;
+    /** Agentic provenance — which run/output cited this. */
+    agentRunId?: string;
+    outputId?: string;
+    citationKind: 'quote' | 'reference' | 'summary' | 'paraphrase';
+    canonicalId: Hex;
+    descriptorId: string;
+    contentType: string;
+    commitment?: ContentCommitment;
+    commitmentVerified: boolean;
+    /** Optional hash of the specific quoted span + the normalization used. */
+    quoteSpanHash?: Hex;
+    normalizationSpec?: string;
+    issuer: Address;
+    underEntitlement?: string;
+}>;
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AAEtF;;;;GAIG;AACH,MAAM,MAAM,YAAY,GAAG,QAAQ,GAAG,UAAU,GAAG,SAAS,CAAC;AAE7D;;;;GAIG;AACH,MAAM,MAAM,WAAW,GACnB,qBAAqB,GACrB,8BAA8B,GAC9B,sBAAsB,GACtB,wBAAwB,GACxB,4BAA4B,GAC5B,kBAAkB,CAAC;AAEvB,8EAA8E;AAC9E,MAAM,MAAM,gBAAgB,GAAG,QAAQ,GAAG,SAAS,GAAG,YAAY,CAAC;AAEnE,2EAA2E;AAC3E,MAAM,MAAM,YAAY,GAAG,eAAe,GAAG,cAAc,GAAG,UAAU,GAAG,SAAS,CAAC;AAErF;+EAC+E;AAC/E,MAAM,MAAM,YAAY,GACpB,oBAAoB,GACpB,wBAAwB,GACxB,wBAAwB,GACxB,2BAA2B,CAAC;AAEhC;;;;;;;GAOG;AACH,MAAM,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAErD;;;;GAIG;AACH,MAAM,WAAW,sBAAsB;IACrC,2DAA2D;IAC3D,QAAQ,EAAE,MAAM,CAAC;IACjB,iEAAiE;IACjE,aAAa,EAAE,MAAM,CAAC;IACtB,kFAAkF;IAClF,YAAY,EAAE,MAAM,CAAC;IACrB,iEAAiE;IACjE,cAAc,EAAE,cAAc,CAAC;CAChC;AAED,8EAA8E;AAC9E,MAAM,WAAW,kBAAkB;IACjC,gFAAgF;IAChF,EAAE,EAAE,GAAG,CAAC;IACR,6CAA6C;IAC7C,QAAQ,EAAE,sBAAsB,CAAC;IACjC,qFAAqF;IACrF,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,uFAAuF;AACvF,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,yBAAyB,CAAC;IAChC,sFAAsF;IACtF,aAAa,EAAE,MAAM,CAAC;IACtB,+CAA+C;IAC/C,SAAS,EAAE,SAAS,CAAC;IACrB,wDAAwD;IACxD,KAAK,EAAE,GAAG,CAAC;CACZ;AAED;;;;GAIG;AACH,MAAM,WAAW,cAAc;IAC7B,0DAA0D;IAC1D,SAAS,EAAE,GAAG,CAAC;IACf,MAAM,EAAE,OAAO,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,kEAAkE;IAClE,MAAM,EAAE,MAAM,CAAC;IACf,6DAA6D;IAC7D,UAAU,EAAE,GAAG,CAAC;IAChB,YAAY,EAAE,YAAY,CAAC;IAC3B,WAAW,EAAE,WAAW,CAAC;IACzB,kFAAkF;IAClF,gBAAgB,EAAE,GAAG,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,wEAAwE;AACxE,MAAM,WAAW,QAAQ;IACvB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,YAAY,CAAC;CAC7B;AAED,mFAAmF;AACnF,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,OAAO,CAAC;IACjB,qEAAqE;IACrE,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED;;;;GAIG;AACH,MAAM,WAAW,iBAAiB;IAChC,gFAAgF;IAChF,EAAE,EAAE,MAAM,CAAC;IACX,6DAA6D;IAC7D,WAAW,EAAE,GAAG,CAAC;IACjB,oDAAoD;IACpD,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,iBAAiB,CAAC;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,gBAAgB,CAAC;IACzB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,oEAAoE;IACpE,IAAI,CAAC,EAAE,QAAQ,CAAC;IAChB,wFAAwF;IACxF,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,qFAAqF;IACrF,UAAU,CAAC,EAAE,iBAAiB,CAAC;IAC/B,sEAAsE;IACtE,gBAAgB,EAAE,MAAM,CAAC;IACzB,WAAW,EAAE,WAAW,CAAC;IACzB,YAAY,EAAE,YAAY,CAAC;IAC3B,oEAAoE;IACpE,SAAS,CAAC,EAAE,GAAG,CAAC;IAChB,+DAA+D;IAC/D,SAAS,EAAE,GAAG,CAAC;CAChB;AAED,8EAA8E;AAC9E,MAAM,MAAM,oBAAoB,GAAG,IAAI,CAAC,iBAAiB,EAAE,WAAW,CAAC,CAAC;AAExE;;;;GAIG;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,IAAI,EAAE;IACrC,MAAM,EAAE,OAAO,CAAC;IAChB,IAAI,EAAE,GAAG,CAAC;IACV,SAAS,EAAE,GAAG,CAAC;CAChB,KAAK,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;AAEjC,gFAAgF;AAChF,MAAM,MAAM,WAAW,GAAG,oBAAoB,CAAC;IAC7C,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,GAAG,CAAC;IACf,YAAY,EAAE,YAAY,CAAC;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC,CAAC;AAEH;4BAC4B;AAC5B,MAAM,MAAM,iBAAiB,GAAG,oBAAoB,CAAC;IACnD,EAAE,EAAE,MAAM,CAAC;IACX,wDAAwD;IACxD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,OAAO,GAAG,WAAW,GAAG,SAAS,GAAG,YAAY,CAAC;IAC/D,WAAW,EAAE,GAAG,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,iBAAiB,CAAC;IAC/B,kBAAkB,EAAE,OAAO,CAAC;IAC5B,0EAA0E;IAC1E,aAAa,CAAC,EAAE,GAAG,CAAC;IACpB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,MAAM,EAAE,OAAO,CAAC;IAChB,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B,CAAC,CAAC"}

package/dist/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":""}

package/package.json

@@ -0,0 +1,64 @@
+{
+  "name": "@agenticprimitives/content-primitives",
+  "version": "1.0.0-alpha.6",
+  "description": "Verifiable Content Substrate SDK: name, resolve, commit, entitlement-gate, and cite off-platform content controlled by third-party rights holders. Owns CanonicalLocus / CorpusManifest / ContentDescriptor / CitationAssertion / Entitlement (FRBR-aligned), deterministic locusId, Merkle corpus commitments, and issuer-signature verification. Content-agnostic — no vertical/faith vocabulary, no content text (ADR-0033).",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/agentictrustlabs/agenticprimitives.git",
+    "directory": "packages/content-primitives"
+  },
+  "homepage": "https://github.com/agentictrustlabs/agenticprimitives/tree/master/packages/content-primitives",
+  "bugs": {
+    "url": "https://github.com/agentictrustlabs/agenticprimitives/issues"
+  },
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    },
+    "./merkle": {
+      "types": "./dist/merkle.d.ts",
+      "import": "./dist/merkle.js"
+    }
+  },
+  "files": [
+    "LICENSE",
+    "dist",
+    "spec.md",
+    "README.md",
+    "CLAUDE.md"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "peerDependencies": {
+    "viem": "^2.52.2",
+    "@agenticprimitives/types": "1.0.0-alpha.6",
+    "@agenticprimitives/verifiable-credentials": "0.0.0-alpha.2"
+  },
+  "devDependencies": {
+    "@types/node": "^22.7.0",
+    "vitest": "^4.1.8"
+  },
+  "keywords": [
+    "content",
+    "commitment",
+    "merkle",
+    "provenance",
+    "citation",
+    "agentic"
+  ],
+  "scripts": {
+    "build": "tsc -p tsconfig.build.json",
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "test": "vitest run",
+    "test:unit": "vitest run test/reference.test.ts test/merkle.test.ts test/descriptor.test.ts test/entitlement.test.ts",
+    "test:integration": "vitest run test/integration.test.ts",
+    "test:watch": "vitest",
+    "clean": "rm -rf dist"
+  }
+}

package/spec.md

@@ -0,0 +1,16 @@
+# @agenticprimitives/content-primitives — spec
+
+The full design lives in
+[`../../specs/266-verifiable-content-substrate.md`](../../specs/266-verifiable-content-substrate.md).
+
+Architecture decision:
+
+- [ADR-0033](../../docs/architecture/decisions/0033-content-agnostic-verifiable-content-firewall.md)
+  — content-agnostic firewall; content loci are scheme-anchored (an ADR-0010
+  carve-out); no licensed content (R1), no content text on-chain (R3).
+
+First usage domain: the scripture demo vertical
+([spec 267](../../specs/267-scripture-demo-vertical.md)) — all Bible/faith
+specifics live in `apps/demo-bible-*`, never here.
+
+Do not edit a divergent copy here — edit the canonical spec.