@agenticprimitives/fabric 0.0.0-alpha.1

package/CLAUDE.md

@@ -0,0 +1,67 @@
+# @agenticprimitives/fabric — Claude guide
+
+The **Agentic Interaction Fabric** (spec 316): the A2A-native substrate that absorbs `messaging`
+(envelope/inbox) + `interactions` (case/run) into ONE canonical exchange object over a two-level
+exec/case FSM. Decentralized (per-principal gateway + vault), tiered (T0/T1/T2), authority
+re-verified against the principal SA. Transport-agnostic core; the Cloudflare `PrincipalGatewayDO`
+adapter ships from `./cloudflare`.
+
+## Status (wave-by-wave build)
+- **W1 DONE:** exec/case FSM spine + absorbed messaging/interactions reducers (`./messaging`,
+  `./interactions` subpaths) + unified reducer + inbox projection. Golden-vectored.
+- **W2 DONE (`./cloudflare` adapter):** `PrincipalGatewayDO`, co-resident on one `state.storage.sql`
+  trust domain — `createDurableObjectSqlVault` (per-owner DEK, L2 envelope crypto); durable
+  single-writer `createDurableObjectExchangeStore` (fail-closed `applyExchangeEvent`); T0
+  `deliver`/`applyEvent`/`inbox`; T1 `AuthorityVerdictCache` + `RequestIdLedger` (§3a: cached verdict
+  A + single-use requestId); **co-resident MCP** (`invokeFast` runs the tool IN-PROCESS over the DO
+  vault after the A→B→requestId gate; heavy verify + KEK wrapper INJECTED via `GatewayDeps`); **T2
+  orchestration loop** (co-resident tools AS the `orchestration` ToolInvoker; only the LLM planner
+  injected); **signed `DeliveryReceiptV1`** (DO-local secp256k1). The ONLY subtree importing
+  `@cloudflare/workers-types`.
+- **W4 DONE:** `GatewaySurfaceCommitmentV1` (gatewayRoot preimage) + peer `DeliveryEnvelopeV1` +
+  `receiveDelivery` + `OutboxStore` store-and-forward.
+- **Next:** on-chain `atl:gatewayRoot` record (contracts, separate); `A2aTaskDO`/`SessionStoreDO`
+  absorption + `alarm()` drain; `fetch`/`alarm` e2e via vitest-pool-workers.
+
+## What this package owns
+- `ExchangeRecordV1` — the ONE canonical object (spine id `xch_`); two-level FSM: `ExecState`
+  (transport, reused from `fulfillment`) + optional `CaseState` (business substate).
+- `EXEC_CASE_COUPLING` + `canExchangeTransition`/`isExecCaseConsistent` — exhaustive, fail-closed
+  coupling (`src/exchange-state.ts`). Communication (T0) carries NO case; `delivered`/`seen` are
+  inbox read-receipt facts, never case states (Blocker 6).
+- The `IntentEnvelopeV1`/`MessageEnvelopeV1` wire object + inbox projection (from `messaging`), the
+  case reducer + typed payloads + runs (from `interactions`), delivery/admission/discovery.
+
+## Hard rules
+- **Authority is never satisfied by the exchange.** A request carries an `authorityRef`; approving a
+  case advances the lifecycle, it NEVER unlocks a resource (spec 316 §2, ADR-0041).
+- **`ExecState` is `fulfillment`'s `TaskState`, unmodified** — `fulfillment` stays a pure leaf.
+- **Fail-closed coupling.** An `(exec, case)` pair with no mapping is a typed rejection.
+- **Transport-agnostic core.** No Cloudflare/MCP/A2A-SDK imports in `src/` — `./cloudflare` is the
+  only adapter and the only `@cloudflare/workers-types` consumer.
+
+## Boundary
+`types`, `fulfillment`, `vault`, `audit`, `delegation`, `chain-state`, `tool-policy`, `agent-naming`
+(injected resolver) ← `fabric`; `fabric/cloudflare → orchestration` (adapter-only); `fabric →
+provenance` (the PROV-O projector). No back-edges; nothing imports `fabric` except `./cloudflare` + apps.
+
+## Validate
+```bash
+pnpm --filter @agenticprimitives/fabric typecheck
+pnpm --filter @agenticprimitives/fabric test
+```
+
+## Capabilities this package participates in
+- **Messaging + Interactions** ([`specs/309`](../../specs/309-messaging-and-interactions.md)) — fabric IS
+  the substrate the messaging (envelope/inbox) + interactions (case/run) capability was absorbed into
+  (spec 316 W1); demo guide: [`apps/demo-sso-next/docs/messaging-interactions/guide.md`](../../apps/demo-sso-next/docs/messaging-interactions/guide.md).
+- **Home / agentic control plane + inbox** ([`specs/310`](../../specs/310-agentic-trust-home-control-plane-and-inbox.md)) —
+  the vault-resident inbox + control-plane projections read fabric wire types; demo guide:
+  [`apps/demo-sso-next/docs/home-inbox/guide.md`](../../apps/demo-sso-next/docs/home-inbox/guide.md).
+- Index: [`docs/architecture/cross-cutting-capabilities.md`](../../docs/architecture/cross-cutting-capabilities.md).
+
+## Spec + demo guides
+`../../specs/316-agentic-interaction-fabric.md` (architect-of-record) +
+`../../docs/architecture/agentic-interaction-fabric-target.md` + ADR-0047. Demo guides: spec 309
+`../../apps/demo-sso-next/docs/messaging-interactions/guide.md` · spec 310
+`../../apps/demo-sso-next/docs/home-inbox/guide.md`.

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Agentic Trust Labs
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,21 @@
+# @agenticprimitives/fabric
+
+The **Agentic Interaction Fabric** (spec 316): the A2A-native substrate that absorbs `messaging`
+(envelope/inbox) and `interactions` (case/run) into ONE canonical exchange object over a two-level
+exec/case state machine. Transport-agnostic core; the Cloudflare gateway ships as a `./cloudflare` adapter.
+
+- **One object:** `ExchangeRecordV1` — an `ExecState` transport envelope carrying an optional 11-state
+  `CaseState` business substate, coupled by an exhaustive fail-closed table.
+- **One reducer:** `applyExchangeEvent` over a single append-only event stream (message | case | artifact |
+  transport). The inbox is a projection (`projectInboxItem`).
+- **Subpaths:** `@agenticprimitives/fabric/messaging` + `/interactions` re-export the absorbed surfaces.
+
+Authority is never satisfied by the exchange — a request carries an `authorityRef`; approving a case advances
+the lifecycle, it never unlocks a resource (ADR-0041).
+
+See `CLAUDE.md` for the implementation guide and `../../specs/316-agentic-interaction-fabric.md` (architect
+of record) + `../../docs/architecture/agentic-interaction-fabric-target.md` + ADR-0047.
+Interaction-flow diagrams (person↔person, org channels, cases) + XMTP/Diode alignment:
+[`docs/architecture.md`](docs/architecture.md) · commercial comparison:
+[`docs/fabric-capabilities-vs-commercial.md`](docs/fabric-capabilities-vs-commercial.md) · gaps:
+[`docs/fabric-capability-gaps.md`](docs/fabric-capability-gaps.md).

package/dist/case-machine.d.ts

@@ -0,0 +1,76 @@
+import type { CanonicalAgentId } from '@agenticprimitives/types';
+import type { VaultRef } from '@agenticprimitives/vault';
+import type { AuthorityRef, InteractionKind } from './interactions/index.js';
+import type { MessageId, ContextRefV1, SignatureProof } from './messaging/index.js';
+import type { CaseState } from './exchange-state.js';
+import type { ExchangeId } from './exchange-record.js';
+/** The minimal fields the case FSM reads (roles/state/expiry) and writes (state/accumulators). The full
+ *  `FabricCaseV1` and a lean record-derived view both satisfy this. */
+export interface CaseFsmFields {
+    /** Case identity — a `string` so BOTH `FabricCaseV1` (`ExchangeId`) and the absorbed interactions
+     *  `InteractionCaseV1` (`InteractionId`) satisfy the shared machine (13→11 reconciliation, D2). The machine
+     *  uses `id` only for the wrong-case equality check. */
+    id: string;
+    state: CaseState;
+    requester: CanonicalAgentId;
+    responder: CanonicalAgentId;
+    resourceOwner?: CanonicalAgentId;
+    expiresAt?: string;
+    updatedAt: string;
+    latestMessageId?: MessageId;
+    evidenceRefs: VaultRef[];
+    authorityRefs: AuthorityRef[];
+}
+/** The full case record — the FSM facet plus the display/anchoring fields (kind/subject/context/root). */
+export interface FabricCaseV1 extends CaseFsmFields {
+    version: 'ap.case.v1';
+    /** The fabric case narrows `id` to the exchange spine id. */
+    id: ExchangeId;
+    kind: InteractionKind;
+    subject: string;
+    /** Entities this case is ABOUT (spec 312) — about-ness, never authority. */
+    contextRefs?: ContextRefV1[];
+    createdAt: string;
+    rootMessageId: MessageId;
+    latestMessageId: MessageId;
+}
+/** Case transitions. `admit`/`view` from the absorbed machine are REMOVED (now inbox read-receipt events). */
+export type CaseTransition = 'submit' | 'triage' | 'ask-info' | 'submit-info' | 'approve' | 'issue-credential' | 'deliver-credential' | 'deny' | 'expire' | 'revoke' | 'fail';
+/** A signed lifecycle event (verification is the runtime's job; the machine checks the actor's ROLE). */
+export interface CaseTransitionEventV1 {
+    version: 'ap.case.event.v1';
+    /** `string` for the same reason as `CaseFsmFields.id` (D2). */
+    caseId: string;
+    transition: CaseTransition;
+    actor: CanonicalAgentId;
+    at: string;
+    messageId?: MessageId;
+    reason?: string;
+    /** Replay dedupe — same key ⇒ same outcome, applied once. */
+    idempotencyKey?: string;
+    evidenceRef?: VaultRef;
+    authorityRef?: AuthorityRef;
+    signature?: SignatureProof;
+}
+export declare const TERMINAL_CASE_STATES: readonly CaseState[];
+export declare function isTerminalCaseState(state: CaseState): boolean;
+export type CaseRejection = 'wrong-case' | 'invalid-transition' | 'unauthorized-actor' | 'case-expired' | 'not-yet-due';
+export type CaseResult = {
+    ok: true;
+    case: FabricCaseV1;
+} | {
+    ok: false;
+    reason: CaseRejection;
+};
+/**
+ * Pure, fail-closed (spec 316 §2). Generic over the concrete case type: preserves whatever extra fields
+ * `T` carries beyond `CaseFsmFields`. Returns the next case or a typed rejection — never a silent no-op.
+ */
+export declare function applyCaseTransition<T extends CaseFsmFields>(current: T, event: CaseTransitionEventV1): {
+    ok: true;
+    case: T;
+} | {
+    ok: false;
+    reason: CaseRejection;
+};
+//# sourceMappingURL=case-machine.d.ts.map

package/dist/case-machine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"case-machine.d.ts","sourceRoot":"","sources":["../src/case-machine.ts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAC;AACzD,OAAO,KAAK,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC7E,OAAO,KAAK,EAAE,SAAS,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACpF,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAEvD;uEACuE;AACvE,MAAM,WAAW,aAAa;IAC5B;;4DAEwD;IACxD,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,SAAS,CAAC;IACjB,SAAS,EAAE,gBAAgB,CAAC;IAC5B,SAAS,EAAE,gBAAgB,CAAC;IAC5B,aAAa,CAAC,EAAE,gBAAgB,CAAC;IACjC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,CAAC,EAAE,SAAS,CAAC;IAC5B,YAAY,EAAE,QAAQ,EAAE,CAAC;IACzB,aAAa,EAAE,YAAY,EAAE,CAAC;CAC/B;AAED,0GAA0G;AAC1G,MAAM,WAAW,YAAa,SAAQ,aAAa;IACjD,OAAO,EAAE,YAAY,CAAC;IACtB,6DAA6D;IAC7D,EAAE,EAAE,UAAU,CAAC;IACf,IAAI,EAAE,eAAe,CAAC;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,4EAA4E;IAC5E,WAAW,CAAC,EAAE,YAAY,EAAE,CAAC;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,SAAS,CAAC;IACzB,eAAe,EAAE,SAAS,CAAC;CAC5B;AAED,8GAA8G;AAC9G,MAAM,MAAM,cAAc,GACtB,QAAQ,GACR,QAAQ,GACR,UAAU,GACV,aAAa,GACb,SAAS,GACT,kBAAkB,GAClB,oBAAoB,GACpB,MAAM,GACN,QAAQ,GACR,QAAQ,GACR,MAAM,CAAC;AAEX,yGAAyG;AACzG,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,kBAAkB,CAAC;IAC5B,+DAA+D;IAC/D,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,cAAc,CAAC;IAC3B,KAAK,EAAE,gBAAgB,CAAC;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,6DAA6D;IAC7D,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,WAAW,CAAC,EAAE,QAAQ,CAAC;IACvB,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,SAAS,CAAC,EAAE,cAAc,CAAC;CAC5B;AAED,eAAO,MAAM,oBAAoB,EAAE,SAAS,SAAS,EAA4D,CAAC;AAElH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,SAAS,GAAG,OAAO,CAE7D;AA2BD,MAAM,MAAM,aAAa,GACrB,YAAY,GACZ,oBAAoB,GACpB,oBAAoB,GACpB,cAAc,GACd,aAAa,CAAC;AAElB,MAAM,MAAM,UAAU,GAAG;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,YAAY,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,aAAa,CAAA;CAAE,CAAC;AAcjG;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,CAAC,SAAS,aAAa,EACzD,OAAO,EAAE,CAAC,EACV,KAAK,EAAE,qBAAqB,GAC3B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,CAAC,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,aAAa,CAAA;CAAE,CA4B9D"}

package/dist/case-machine.js

@@ -0,0 +1,83 @@
+// The case (business-substate) machine — ABSORBED from `@agenticprimitives/interactions` (spec 309 §6.1)
+// and re-anchored on the fabric's corrected 11-state `CaseState` (spec 316 §2, Blocker 6). Fail-closed:
+//   - unknown transitions reject;
+//   - a correctly-signed but UNAUTHORIZED event does not change state (typed rejection, never a silent no-op);
+//   - operations on an expired case reject (only `expire`/`fail` may land).
+// Signature VERIFICATION is the runtime's job; this machine enforces that the claimed actor holds the
+// required ROLE for the move.
+//
+// The machine operates on the MINIMAL `CaseFsmFields` facet it actually reads/writes, so both the full case
+// record (`FabricCaseV1`) and a lean `ExchangeRecordV1`-derived view (`caseViewFromRecord`) satisfy it — the
+// generic `applyCaseTransition` preserves whatever extra fields the concrete type carries.
+//
+// Difference from the absorbed `interactions` machine: `delivered`/`seen` are NO LONGER case states — they
+// are inbox read-receipt facts. So `admit`(submitted→delivered)/`view`(delivered→seen) are DROPPED (they
+// become `ExchangeEventV1` `kind:'message'` events), and the moves that referenced `seen`/`delivered`
+// re-anchor on `submitted`/`triaged`.
+export const TERMINAL_CASE_STATES = ['denied', 'completed', 'expired', 'revoked', 'failed'];
+export function isTerminalCaseState(state) {
+    return TERMINAL_CASE_STATES.includes(state);
+}
+const TRANSITIONS = {
+    submit: { from: ['draft'], to: 'submitted', signers: ['requester'] },
+    triage: { from: ['submitted'], to: 'triaged', signers: ['responder'] },
+    'ask-info': { from: ['submitted', 'triaged'], to: 'needs-info', signers: ['responder'] },
+    // needs-info → triaged (NOT submitted): the requester supplied info, the responder RESUMES working
+    // (couples to exec `working`), preserving the "responder engaged" phase across the info loop.
+    'submit-info': { from: ['needs-info'], to: 'triaged', signers: ['requester'] },
+    approve: { from: ['submitted', 'triaged'], to: 'approved', signers: ['responder', 'resource-owner'] },
+    'issue-credential': { from: ['approved'], to: 'issued', signers: ['resource-owner', 'responder'] },
+    'deliver-credential': { from: ['issued'], to: 'completed', signers: ['resource-owner', 'responder'] },
+    deny: { from: 'any-non-terminal', to: 'denied', signers: ['responder', 'resource-owner'] },
+    expire: { from: 'any-non-terminal', to: 'expired', signers: ['any'] },
+    revoke: { from: 'any-non-terminal', to: 'revoked', signers: ['responder', 'resource-owner'] },
+    fail: { from: 'any-non-terminal', to: 'failed', signers: ['any'] },
+};
+function actorRoles(c, actor) {
+    const roles = new Set(['any']);
+    if (actor === c.requester)
+        roles.add('requester');
+    if (actor === c.responder)
+        roles.add('responder');
+    if (c.resourceOwner !== undefined && actor === c.resourceOwner)
+        roles.add('resource-owner');
+    return roles;
+}
+function isPastExpiry(c, atIso) {
+    return c.expiresAt !== undefined && Date.parse(atIso) >= Date.parse(c.expiresAt);
+}
+/**
+ * Pure, fail-closed (spec 316 §2). Generic over the concrete case type: preserves whatever extra fields
+ * `T` carries beyond `CaseFsmFields`. Returns the next case or a typed rejection — never a silent no-op.
+ */
+export function applyCaseTransition(current, event) {
+    if (event.caseId !== current.id)
+        return { ok: false, reason: 'wrong-case' };
+    const spec = TRANSITIONS[event.transition];
+    if (!spec)
+        return { ok: false, reason: 'invalid-transition' };
+    const fromOk = spec.from === 'any-non-terminal' ? !isTerminalCaseState(current.state) : spec.from.includes(current.state);
+    if (!fromOk)
+        return { ok: false, reason: 'invalid-transition' };
+    // `expire` only lands once the deadline passed; everything else (except `fail`) rejects on an expired case.
+    if (event.transition === 'expire') {
+        if (current.expiresAt === undefined || !isPastExpiry(current, event.at))
+            return { ok: false, reason: 'not-yet-due' };
+    }
+    else if (event.transition !== 'fail' && isPastExpiry(current, event.at)) {
+        return { ok: false, reason: 'case-expired' };
+    }
+    const roles = actorRoles(current, event.actor);
+    if (!spec.signers.some((r) => roles.has(r)))
+        return { ok: false, reason: 'unauthorized-actor' };
+    const next = {
+        ...current,
+        state: spec.to,
+        updatedAt: event.at,
+        latestMessageId: event.messageId ?? current.latestMessageId,
+        evidenceRefs: event.evidenceRef ? [...current.evidenceRefs, event.evidenceRef] : current.evidenceRefs,
+        authorityRefs: event.authorityRef ? [...current.authorityRefs, event.authorityRef] : current.authorityRefs,
+    };
+    return { ok: true, case: next };
+}
+//# sourceMappingURL=case-machine.js.map

package/dist/case-machine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"case-machine.js","sourceRoot":"","sources":["../src/case-machine.ts"],"names":[],"mappings":"AAAA,yGAAyG;AACzG,wGAAwG;AACxG,kCAAkC;AAClC,+GAA+G;AAC/G,4EAA4E;AAC5E,sGAAsG;AACtG,8BAA8B;AAC9B,EAAE;AACF,4GAA4G;AAC5G,6GAA6G;AAC7G,2FAA2F;AAC3F,EAAE;AACF,2GAA2G;AAC3G,yGAAyG;AACzG,sGAAsG;AACtG,sCAAsC;AAwEtC,MAAM,CAAC,MAAM,oBAAoB,GAAyB,CAAC,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;AAElH,MAAM,UAAU,mBAAmB,CAAC,KAAgB;IAClD,OAAO,oBAAoB,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAC9C,CAAC;AAWD,MAAM,WAAW,GAA2C;IAC1D,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,WAAW,CAAC,EAAE;IACpE,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,WAAW,CAAC,EAAE;IACtE,UAAU,EAAE,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,SAAS,CAAC,EAAE,EAAE,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC,WAAW,CAAC,EAAE;IACxF,mGAAmG;IACnG,8FAA8F;IAC9F,aAAa,EAAE,EAAE,IAAI,EAAE,CAAC,YAAY,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,WAAW,CAAC,EAAE;IAC9E,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,SAAS,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,WAAW,EAAE,gBAAgB,CAAC,EAAE;IACrG,kBAAkB,EAAE,EAAE,IAAI,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,gBAAgB,EAAE,WAAW,CAAC,EAAE;IAClG,oBAAoB,EAAE,EAAE,IAAI,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,gBAAgB,EAAE,WAAW,CAAC,EAAE;IACrG,IAAI,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,WAAW,EAAE,gBAAgB,CAAC,EAAE;IAC1F,MAAM,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE;IACrE,MAAM,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,WAAW,EAAE,gBAAgB,CAAC,EAAE;IAC7F,IAAI,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE;CACnE,CAAC;AAWF,SAAS,UAAU,CAAC,CAAgB,EAAE,KAAa;IACjD,MAAM,KAAK,GAAG,IAAI,GAAG,CAAO,CAAC,KAAK,CAAC,CAAC,CAAC;IACrC,IAAI,KAAK,KAAK,CAAC,CAAC,SAAS;QAAE,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAClD,IAAI,KAAK,KAAK,CAAC,CAAC,SAAS;QAAE,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAClD,IAAI,CAAC,CAAC,aAAa,KAAK,SAAS,IAAI,KAAK,KAAK,CAAC,CAAC,aAAa;QAAE,KAAK,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAC5F,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,YAAY,CAAC,CAAgB,EAAE,KAAa;IACnD,OAAO,CAAC,CAAC,SAAS,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;AACnF,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CACjC,OAAU,EACV,KAA4B;IAE5B,IAAI,KAAK,CAAC,MAAM,KAAK,OAAO,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;IAE5E,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAC3C,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;IAE9D,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,KAAK,kBAAkB,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC1H,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;IAEhE,4GAA4G;IAC5G,IAAI,KAAK,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;QAClC,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;IACvH,CAAC;SAAM,IAAI,KAAK,CAAC,UAAU,KAAK,MAAM,IAAI,YAAY,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;QAC1E,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;IAC/C,CAAC;IAED,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IAC/C,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;IAEhG,MAAM,IAAI,GAAM;QACd,GAAG,OAAO;QACV,KAAK,EAAE,IAAI,CAAC,EAAE;QACd,SAAS,EAAE,KAAK,CAAC,EAAE;QACnB,eAAe,EAAE,KAAK,CAAC,SAAS,IAAI,OAAO,CAAC,eAAe;QAC3D,YAAY,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,YAAY,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY;QACrG,aAAa,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,aAAa,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa;KAC3G,CAAC;IACF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AAClC,CAAC"}

package/dist/client/index.d.ts

@@ -0,0 +1,114 @@
+import type { CanonicalAgentId } from '@agenticprimitives/types';
+import type { DirectoryListingV1, ChannelV1, MessageEnvelopeV1 } from '../messaging/index.js';
+export type FetchLike = (input: string, init?: {
+    method?: string;
+    headers?: Record<string, string>;
+    body?: string;
+}) => Promise<{
+    ok: boolean;
+    status: number;
+    json: () => Promise<unknown>;
+}>;
+export interface FabricClientOptions {
+    /** The a2a substrate origin serving `/interactions/*` (e.g. the demo-a2a Worker). */
+    baseUrl: string;
+    /** The owner's broker session id_token (aud = the Home audience, iss = the broker). */
+    session: string;
+    /** Injected fetch (defaults to the global). Lets non-browser/relying hosts supply their own. */
+    fetch?: FetchLike;
+}
+/** A capability record the owner reads/writes self-only over the interactions grant (spec 323 W2). */
+export type CapabilityRecordType = 'impact-profile' | 'skills.data' | 'home.manifest' | 'control-events.data';
+export interface RelationshipEntry {
+    org: string;
+    relationship: 'member' | 'steward';
+    orgName?: string;
+    kind?: string;
+    parent?: string;
+    delegationHash?: string;
+    delegations?: unknown[];
+    updatedAt: string;
+}
+export interface RelationshipsDoc {
+    orgs: Record<string, RelationshipEntry>;
+}
+export declare class FabricError extends Error {
+    readonly status: number;
+    readonly op: string;
+    constructor(message: string, status: number, op: string);
+}
+/**
+ * A client bound to ONE owner session. `principal` on each call is the person (their own records) or
+ * an org they steward. Throws {@link FabricError} on a non-ok response (a 403/409 from a real gate —
+ * membership, plane-not-enabled — is surfaced with its status so callers can branch, e.g. show an
+ * "enable storage" affordance). `session` is sent in the body of every owner-facing op.
+ */
+export declare function createFabricClient(opts: FabricClientOptions): {
+    /** Storage liveness for a principal (open — no session needed). */
+    status: (principal: string) => Promise<{
+        granted: boolean;
+        current: boolean;
+        deliveryGranted: boolean;
+    }>;
+    relationships: {
+        get: (principal: string) => Promise<RelationshipsDoc>;
+        merge: (principal: string, entry: Partial<RelationshipEntry> & {
+            org: string;
+        }, remove?: boolean) => Promise<Record<string, unknown>>;
+    };
+    record: {
+        get: <T = unknown>(principal: string, recordType: CapabilityRecordType) => Promise<T | null>;
+        put: (principal: string, recordType: CapabilityRecordType, record: unknown) => Promise<Record<string, unknown>>;
+    };
+    memberProfile: {
+        put: (principal: string, org: string, profile: Record<string, unknown>) => Promise<Record<string, unknown>>;
+    };
+    directory: {
+        list: (principal: string, stewardship?: unknown) => Promise<{
+            listing: DirectoryListingV1;
+            label: string;
+        }[]>;
+        publish: (principal: string, listing: DirectoryListingV1, label?: string, subjectStewardship?: unknown) => Promise<Record<string, unknown>>;
+        revoke: (principal: string) => Promise<Record<string, unknown>>;
+    };
+    channels: {
+        list: (principal: string, stewardship?: unknown) => Promise<{
+            channels: ChannelV1[];
+            you: string;
+            steward: boolean;
+        }>;
+        read: (principal: string, channelId: string, stewardship?: unknown) => Promise<{
+            channels: ChannelV1[];
+            bodies: Record<string, string>;
+            you: string;
+            steward: boolean;
+        }>;
+        create: (principal: string, title: string, stewardship?: unknown) => Promise<{
+            channelId: string;
+        }>;
+        post: (principal: string, channelId: string, bodyText: string) => Promise<{
+            messageId: string;
+        }>;
+    };
+    inbox: {
+        get: <T = unknown>(principal: string) => Promise<T | null>;
+        put: (principal: string, doc: unknown) => Promise<Record<string, unknown>>;
+        readBody: (principal: string, resource: string) => Promise<{
+            b64: string;
+            contentType: string;
+            bodyHash: string;
+        } | null>;
+    };
+    /** The issuance ledger — self, or a steward presenting the stewardship wire. */
+    grants: {
+        list: (principal: string, stewardship?: unknown) => Promise<{
+            hash: string;
+            delegate: string;
+            resources: string[];
+            storedAt: string;
+        }[]>;
+    };
+};
+export type FabricClient = ReturnType<typeof createFabricClient>;
+export type { CanonicalAgentId, DirectoryListingV1, ChannelV1, MessageEnvelopeV1 };
+//# sourceMappingURL=index.d.ts.map

package/dist/client/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/client/index.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAO,KAAK,EAAE,kBAAkB,EAAE,SAAS,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAE9F,MAAM,MAAM,SAAS,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;IAC7C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,IAAI,CAAC,EAAE,MAAM,CAAC;CACf,KAAK,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAA;CAAE,CAAC,CAAC;AAE7E,MAAM,WAAW,mBAAmB;IAClC,qFAAqF;IACrF,OAAO,EAAE,MAAM,CAAC;IAChB,uFAAuF;IACvF,OAAO,EAAE,MAAM,CAAC;IAChB,gGAAgG;IAChG,KAAK,CAAC,EAAE,SAAS,CAAC;CACnB;AAED,sGAAsG;AACtG,MAAM,MAAM,oBAAoB,GAAG,gBAAgB,GAAG,aAAa,GAAG,eAAe,GAAG,qBAAqB,CAAC;AAE9G,MAAM,WAAW,iBAAiB;IAChC,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,EAAE,QAAQ,GAAG,SAAS,CAAC;IACnC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,WAAW,CAAC,EAAE,OAAO,EAAE,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;CACnB;AACD,MAAM,WAAW,gBAAgB;IAAG,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAA;CAAE;AAE7E,qBAAa,WAAY,SAAQ,KAAK;IACP,QAAQ,CAAC,MAAM,EAAE,MAAM;IAAE,QAAQ,CAAC,EAAE,EAAE,MAAM;gBAA7D,OAAO,EAAE,MAAM,EAAW,MAAM,EAAE,MAAM,EAAW,EAAE,EAAE,MAAM;CAI1E;AAKD;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,mBAAmB;IAmBxD,mEAAmE;wBAC/C,MAAM;iBACR,OAAO;iBAAW,OAAO;yBAAmB,OAAO;;;yBAIlD,MAAM;2BACJ,MAAM,SAAS,OAAO,CAAC,iBAAiB,CAAC,GAAG;YAAE,GAAG,EAAE,MAAM,CAAA;SAAE;;;cAIxE,CAAC,uBAAuB,MAAM,cAAc,oBAAoB;yBAErD,MAAM,cAAc,oBAAoB,UAAU,OAAO;;;yBAIzD,MAAM,OAAO,MAAM,WAAW,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;;;0BAMpD,MAAM,gBAAgB,OAAO;qBACX,kBAAkB;mBAAS,MAAM;;6BAChD,MAAM,WAAW,kBAAkB,UAAU,MAAM,uBAAuB,OAAO;4BAElF,MAAM;;;0BAKR,MAAM,gBAAgB,OAAO;sBAC5B,SAAS,EAAE;iBAAO,MAAM;qBAAW,OAAO;;0BAC3C,MAAM,aAAa,MAAM,gBAAgB,OAAO;sBAC/C,SAAS,EAAE;oBAAU,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;iBAAO,MAAM;qBAAW,OAAO;;4BACzE,MAAM,SAAS,MAAM,gBAAgB,OAAO;uBAC5C,MAAM;;0BACR,MAAM,aAAa,MAAM,YAAY,MAAM;uBACzC,MAAM;;;;cAKpB,CAAC,uBAAuB,MAAM;yBACnB,MAAM,OAAO,OAAO;8BACf,MAAM,YAAY,MAAM;iBACtB,MAAM;yBAAe,MAAM;sBAAY,MAAM;;;IAGvE,gFAAgF;;0BAE5D,MAAM,gBAAgB,OAAO;kBAChB,MAAM;sBAAY,MAAM;uBAAa,MAAM,EAAE;sBAAY,MAAM;;;EAGnG;AAED,MAAM,MAAM,YAAY,GAAG,UAAU,CAAC,OAAO,kBAAkB,CAAC,CAAC;AACjE,YAAY,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,SAAS,EAAE,iBAAiB,EAAE,CAAC"}

package/dist/client/index.js

@@ -0,0 +1,76 @@
+export class FabricError extends Error {
+    status;
+    op;
+    constructor(message, status, op) {
+        super(message);
+        this.status = status;
+        this.op = op;
+        this.name = 'FabricError';
+    }
+}
+const trimBase = (u) => u.replace(/\/$/, '');
+const isAddress = (s) => /^0x[0-9a-fA-F]{40}$/.test(s);
+/**
+ * A client bound to ONE owner session. `principal` on each call is the person (their own records) or
+ * an org they steward. Throws {@link FabricError} on a non-ok response (a 403/409 from a real gate —
+ * membership, plane-not-enabled — is surfaced with its status so callers can branch, e.g. show an
+ * "enable storage" affordance). `session` is sent in the body of every owner-facing op.
+ */
+export function createFabricClient(opts) {
+    const base = trimBase(opts.baseUrl);
+    const doFetch = opts.fetch ?? ((input, init) => fetch(input, init));
+    async function call(principal, op, extra = {}, withSession = true) {
+        if (!isAddress(principal))
+            throw new FabricError(`principal must be a 0x…40 address`, 400, op);
+        const resp = await doFetch(`${base}/interactions/${principal.toLowerCase()}/${op}`, {
+            method: 'POST',
+            headers: { 'content-type': 'application/json' },
+            body: JSON.stringify({ ...(withSession ? { session: opts.session } : {}), ...extra }),
+        });
+        const body = (await resp.json().catch(() => ({})));
+        if (!resp.ok || body.ok === false) {
+            throw new FabricError(body.error ?? `interactions.${op} failed (${resp.status})`, resp.status, op);
+        }
+        return body;
+    }
+    return {
+        /** Storage liveness for a principal (open — no session needed). */
+        status: (principal) => call(principal, 'status', {}, false),
+        // ── Owner-own capability records (self-only; spec 323 W2) ──
+        relationships: {
+            get: (principal) => call(principal, 'relationships.get').then((r) => r.relationships),
+            merge: (principal, entry, remove = false) => call(principal, 'relationships.merge', { entry, ...(remove ? { remove: true } : {}) }),
+        },
+        record: {
+            get: (principal, recordType) => call(principal, 'record.get', { recordType }).then((r) => r.record),
+            put: (principal, recordType, record) => call(principal, 'record.put', { recordType, record }),
+        },
+        memberProfile: {
+            put: (principal, org, profile) => call(principal, 'member.profile.put', { org, profile }),
+        },
+        // ── Directory (membership) ──
+        directory: {
+            list: (principal, stewardship) => call(principal, 'directory.list', stewardship ? { stewardship } : {}).then((r) => r.listings),
+            publish: (principal, listing, label, subjectStewardship) => call(principal, 'directory.publish', { listing, ...(label ? { label } : {}), ...(subjectStewardship ? { subjectStewardship } : {}) }),
+            revoke: (principal) => call(principal, 'directory.revoke'),
+        },
+        // ── Channels ──
+        channels: {
+            list: (principal, stewardship) => call(principal, 'channels.list', stewardship ? { stewardship } : {}),
+            read: (principal, channelId, stewardship) => call(principal, 'channels.read', { channelId, ...(stewardship ? { stewardship } : {}) }),
+            create: (principal, title, stewardship) => call(principal, 'channels.create', { title, ...(stewardship ? { stewardship } : {}) }),
+            post: (principal, channelId, bodyText) => call(principal, 'channels.post', { channelId, bodyText }),
+        },
+        // ── Inbox (owner-facing residency; the W4 session path) ──
+        inbox: {
+            get: (principal) => call(principal, 'inbox.get').then((r) => r.doc),
+            put: (principal, doc) => call(principal, 'inbox.put', { doc }),
+            readBody: (principal, resource) => call(principal, 'inbox.body.get', { resource }).then((r) => r.record),
+        },
+        /** The issuance ledger — self, or a steward presenting the stewardship wire. */
+        grants: {
+            list: (principal, stewardship) => call(principal, 'grants.list', stewardship ? { stewardship } : {}).then((r) => r.grants),
+        },
+    };
+}
+//# sourceMappingURL=index.js.map

package/dist/client/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/client/index.ts"],"names":[],"mappings":"AA6CA,MAAM,OAAO,WAAY,SAAQ,KAAK;IACE;IAAyB;IAA/D,YAAY,OAAe,EAAW,MAAc,EAAW,EAAU;QACvE,KAAK,CAAC,OAAO,CAAC,CAAC;QADqB,WAAM,GAAN,MAAM,CAAQ;QAAW,OAAE,GAAF,EAAE,CAAQ;QAEvE,IAAI,CAAC,IAAI,GAAG,aAAa,CAAC;IAC5B,CAAC;CACF;AAED,MAAM,QAAQ,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AAC7D,MAAM,SAAS,GAAG,CAAC,CAAS,EAAW,EAAE,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAExE;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAyB;IAC1D,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACpC,MAAM,OAAO,GAAc,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAqC,CAAC,CAAC;IAEnH,KAAK,UAAU,IAAI,CAA8B,SAAiB,EAAE,EAAU,EAAE,QAAiC,EAAE,EAAE,WAAW,GAAG,IAAI;QACrI,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC;YAAE,MAAM,IAAI,WAAW,CAAC,mCAAmC,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;QAC/F,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,GAAG,IAAI,iBAAiB,SAAS,CAAC,WAAW,EAAE,IAAI,EAAE,EAAE,EAAE;YAClF,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,KAAK,EAAE,CAAC;SACtF,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAyC,CAAC;QAC3F,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,EAAE,KAAK,KAAK,EAAE,CAAC;YAClC,MAAM,IAAI,WAAW,CAAC,IAAI,CAAC,KAAK,IAAI,gBAAgB,EAAE,YAAY,IAAI,CAAC,MAAM,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACrG,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO;QACL,mEAAmE;QACnE,MAAM,EAAE,CAAC,SAAiB,EAAE,EAAE,CAC5B,IAAI,CAAmE,SAAS,EAAE,QAAQ,EAAE,EAAE,EAAE,KAAK,CAAC;QAExG,8DAA8D;QAC9D,aAAa,EAAE;YACb,GAAG,EAAE,CAAC,SAAiB,EAAE,EAAE,CAAC,IAAI,CAAsC,SAAS,EAAE,mBAAmB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC;YAClI,KAAK,EAAE,CAAC,SAAiB,EAAE,KAAmD,EAAE,MAAM,GAAG,KAAK,EAAE,EAAE,CAChG,IAAI,CAAC,SAAS,EAAE,qBAAqB,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;SACzF;QACD,MAAM,EAAE;YACN,GAAG,EAAE,CAAc,SAAiB,EAAE,UAAgC,EAAE,EAAE,CACxE,IAAI,CAAuB,SAAS,EAAE,YAAY,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;YAC3F,GAAG,EAAE,CAAC,SAAiB,EAAE,UAAgC,EAAE,MAAe,EAAE,EAAE,CAC5E,IAAI,CAAC,SAAS,EAAE,YAAY,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;SACxD;QACD,aAAa,EAAE;YACb,GAAG,EAAE,CAAC,SAAiB,EAAE,GAAW,EAAE,OAAgC,EAAE,EAAE,CACxE,IAAI,CAAC,SAAS,EAAE,oBAAoB,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;SAC1D;QAED,+BAA+B;QAC/B,SAAS,EAAE;YACT,IAAI,EAAE,CAAC,SAAiB,EAAE,WAAqB,EAAE,EAAE,CACjD,IAAI,CAAsE,SAAS,EAAE,gBAAgB,EAAE,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;YACpK,OAAO,EAAE,CAAC,SAAiB,EAAE,OAA2B,EAAE,KAAc,EAAE,kBAA4B,EAAE,EAAE,CACxG,IAAI,CAAC,SAAS,EAAE,mBAAmB,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;YACvI,MAAM,EAAE,CAAC,SAAiB,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,kBAAkB,CAAC;SACnE;QAED,iBAAiB;QACjB,QAAQ,EAAE;YACR,IAAI,EAAE,CAAC,SAAiB,EAAE,WAAqB,EAAE,EAAE,CACjD,IAAI,CAA2D,SAAS,EAAE,eAAe,EAAE,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChI,IAAI,EAAE,CAAC,SAAiB,EAAE,SAAiB,EAAE,WAAqB,EAAE,EAAE,CACpE,IAAI,CAA2F,SAAS,EAAE,eAAe,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;YACpL,MAAM,EAAE,CAAC,SAAiB,EAAE,KAAa,EAAE,WAAqB,EAAE,EAAE,CAClE,IAAI,CAAwB,SAAS,EAAE,iBAAiB,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;YAC/G,IAAI,EAAE,CAAC,SAAiB,EAAE,SAAiB,EAAE,QAAgB,EAAE,EAAE,CAC/D,IAAI,CAAwB,SAAS,EAAE,eAAe,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;SACnF;QAED,4DAA4D;QAC5D,KAAK,EAAE;YACL,GAAG,EAAE,CAAc,SAAiB,EAAE,EAAE,CAAC,IAAI,CAAoB,SAAS,EAAE,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;YAC3G,GAAG,EAAE,CAAC,SAAiB,EAAE,GAAY,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,EAAE,EAAE,GAAG,EAAE,CAAC;YAC/E,QAAQ,EAAE,CAAC,SAAiB,EAAE,QAAgB,EAAE,EAAE,CAChD,IAAI,CAA4E,SAAS,EAAE,gBAAgB,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;SACnJ;QAED,gFAAgF;QAChF,MAAM,EAAE;YACN,IAAI,EAAE,CAAC,SAAiB,EAAE,WAAqB,EAAE,EAAE,CACjD,IAAI,CAA+F,SAAS,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;SACzL;KACF,CAAC;AACJ,CAAC"}

package/dist/cloudflare/authority-verdict-cache.d.ts

@@ -0,0 +1,27 @@
+/** The args-INDEPENDENT sub-verdict (A). Establishes WHO (principal) may act under WHICH delegation with
+ *  WHICH session key, at a given epoch/manager — never WHAT args are permitted (that is the uncached B). */
+export interface AuthorityVerdict {
+    principal: string;
+    sessionKey: string;
+    delegationHash: string;
+    /** The deployment epoch (spec 311) the verdict was created under — the epoch-invalidation key. */
+    epoch: string;
+    /** The DelegationManager address the verdict was validated against. */
+    manager: string;
+    /** ISO time the cold-path `verifyDelegationToken` produced this verdict. */
+    verifiedAt: string;
+}
+export type AuthorityVerdictKey = Pick<AuthorityVerdict, 'sessionKey' | 'delegationHash' | 'epoch' | 'manager'>;
+export interface AuthorityVerdictCache {
+    /** Cold-path only: cache the full-verify verdict (A). */
+    put(verdict: AuthorityVerdict): Promise<void>;
+    /** Warm T1: the cached (A) verdict, or `null` (⇒ fall to the cold path). NEVER treat a hit as permission
+     *  to act — the caller MUST still run the per-call caveat pass (B) + reserve the requestId. */
+    get(key: AuthorityVerdictKey): Promise<AuthorityVerdict | null>;
+    /** Revocation notice: drop every verdict for a delegation (monotonic invalidation). */
+    invalidateDelegation(delegationHash: string): Promise<void>;
+    /** Deployment-epoch change (spec 311): drop every verdict NOT on `currentEpoch`. */
+    sweepEpoch(currentEpoch: string): Promise<void>;
+}
+export declare function createDurableObjectAuthorityVerdictCache(sql: SqlStorage): AuthorityVerdictCache;
+//# sourceMappingURL=authority-verdict-cache.d.ts.map

package/dist/cloudflare/authority-verdict-cache.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authority-verdict-cache.d.ts","sourceRoot":"","sources":["../../src/cloudflare/authority-verdict-cache.ts"],"names":[],"mappings":"AA6BA;4GAC4G;AAC5G,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,kGAAkG;IAClG,KAAK,EAAE,MAAM,CAAC;IACd,uEAAuE;IACvE,OAAO,EAAE,MAAM,CAAC;IAChB,4EAA4E;IAC5E,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,MAAM,mBAAmB,GAAG,IAAI,CAAC,gBAAgB,EAAE,YAAY,GAAG,gBAAgB,GAAG,OAAO,GAAG,SAAS,CAAC,CAAC;AAYhH,MAAM,WAAW,qBAAqB;IACpC,yDAAyD;IACzD,GAAG,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9C;mGAC+F;IAC/F,GAAG,CAAC,GAAG,EAAE,mBAAmB,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAAC;IAChE,uFAAuF;IACvF,oBAAoB,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5D,oFAAoF;IACpF,UAAU,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACjD;AAKD,wBAAgB,wCAAwC,CAAC,GAAG,EAAE,UAAU,GAAG,qBAAqB,CA6C/F"}

package/dist/cloudflare/authority-verdict-cache.js

@@ -0,0 +1,66 @@
+/// <reference types="@cloudflare/workers-types" />
+// AuthorityVerdictCache (spec 316 §3a — the T1 fast-path verdict, L2).
+//
+// SECURITY MODEL — the §3a split (do not collapse it): the T1 authorization is TWO parts.
+//   (A) the ARGS-INDEPENDENT verdict cached here: at cold-path creation a FULL `verifyDelegationToken` ran
+//       and established — DEL-001 session-key↔delegation binding, delegation ERC-1271 validity, and
+//       `delegator === principal` — keyed by (sessionKeyPubkey, delegationHash, deploymentEpoch,
+//       delegationManager). It is monotonic-invalidated on revoke (drop the delegationHash) or epoch change
+//       (sweep everything not on the current epoch).
+//   (B) the PER-CALL caveat pass that is NEVER cached — the full off-chain caveat evaluator against the
+//       concrete args on EVERY T1 invoke, with the evaluated argsHash bound into a single-use requestId.
+// Authorization = (A) PLUS (B), NEVER (A) alone. This cache stores ONLY (A). A hit means "the binding +
+// validity held as of `verifiedAt` and has not been revoked/epoch-swept" — it is NOT permission to act; the
+// caller MUST still run (B) + reserve the requestId. Never authorize from a revocation-only lookup.
+//
+// Stored on the DO's `state.storage.sql` (co-located with the vault + exchange stream, one trust domain).
+const CREATE_TABLE = `CREATE TABLE IF NOT EXISTS authority_verdicts (
+  cache_key       TEXT PRIMARY KEY,
+  principal       TEXT NOT NULL,
+  session_key     TEXT NOT NULL,
+  delegation_hash TEXT NOT NULL,
+  epoch           TEXT NOT NULL,
+  manager         TEXT NOT NULL,
+  verified_at     TEXT NOT NULL
+)`;
+const CREATE_IDX_DELEG = `CREATE INDEX IF NOT EXISTS idx_authority_verdicts_deleg ON authority_verdicts (delegation_hash)`;
+const CREATE_IDX_EPOCH = `CREATE INDEX IF NOT EXISTS idx_authority_verdicts_epoch ON authority_verdicts (epoch)`;
+const keyOf = (k) => `${k.sessionKey.toLowerCase()}|${k.delegationHash.toLowerCase()}|${k.epoch}|${k.manager.toLowerCase()}`;
+export function createDurableObjectAuthorityVerdictCache(sql) {
+    sql.exec(CREATE_TABLE);
+    sql.exec(CREATE_IDX_DELEG);
+    sql.exec(CREATE_IDX_EPOCH);
+    return {
+        async put(v) {
+            sql.exec(`INSERT INTO authority_verdicts (cache_key, principal, session_key, delegation_hash, epoch, manager, verified_at)
+         VALUES (?, ?, ?, ?, ?, ?, ?)
+         ON CONFLICT(cache_key) DO UPDATE SET
+           principal = excluded.principal, session_key = excluded.session_key,
+           delegation_hash = excluded.delegation_hash, epoch = excluded.epoch,
+           manager = excluded.manager, verified_at = excluded.verified_at`, keyOf(v), v.principal.toLowerCase(), v.sessionKey.toLowerCase(), v.delegationHash.toLowerCase(), v.epoch, v.manager.toLowerCase(), v.verifiedAt);
+        },
+        async get(key) {
+            const rows = sql
+                .exec('SELECT * FROM authority_verdicts WHERE cache_key = ?', keyOf(key))
+                .toArray();
+            const r = rows[0];
+            if (!r)
+                return null;
+            return {
+                principal: r.principal,
+                sessionKey: r.session_key,
+                delegationHash: r.delegation_hash,
+                epoch: r.epoch,
+                manager: r.manager,
+                verifiedAt: r.verified_at,
+            };
+        },
+        async invalidateDelegation(delegationHash) {
+            sql.exec('DELETE FROM authority_verdicts WHERE delegation_hash = ?', delegationHash.toLowerCase());
+        },
+        async sweepEpoch(currentEpoch) {
+            sql.exec('DELETE FROM authority_verdicts WHERE epoch != ?', currentEpoch);
+        },
+    };
+}
+//# sourceMappingURL=authority-verdict-cache.js.map

package/dist/cloudflare/authority-verdict-cache.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authority-verdict-cache.js","sourceRoot":"","sources":["../../src/cloudflare/authority-verdict-cache.ts"],"names":[],"mappings":"AAAA,mDAAmD;AACnD,uEAAuE;AACvE,EAAE;AACF,0FAA0F;AAC1F,2GAA2G;AAC3G,oGAAoG;AACpG,iGAAiG;AACjG,4GAA4G;AAC5G,qDAAqD;AACrD,wGAAwG;AACxG,yGAAyG;AACzG,wGAAwG;AACxG,4GAA4G;AAC5G,oGAAoG;AACpG,EAAE;AACF,0GAA0G;AAE1G,MAAM,YAAY,GAAG;;;;;;;;EAQnB,CAAC;AACH,MAAM,gBAAgB,GAAG,iGAAiG,CAAC;AAC3H,MAAM,gBAAgB,GAAG,uFAAuF,CAAC;AAwCjH,MAAM,KAAK,GAAG,CAAC,CAAsB,EAAU,EAAE,CAC/C,GAAG,CAAC,CAAC,UAAU,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,cAAc,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC;AAE1G,MAAM,UAAU,wCAAwC,CAAC,GAAe;IACtE,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACvB,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAC3B,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAE3B,OAAO;QACL,KAAK,CAAC,GAAG,CAAC,CAAC;YACT,GAAG,CAAC,IAAI,CACN;;;;;0EAKkE,EAClE,KAAK,CAAC,CAAC,CAAC,EACR,CAAC,CAAC,SAAS,CAAC,WAAW,EAAE,EACzB,CAAC,CAAC,UAAU,CAAC,WAAW,EAAE,EAC1B,CAAC,CAAC,cAAc,CAAC,WAAW,EAAE,EAC9B,CAAC,CAAC,KAAK,EACP,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,EACvB,CAAC,CAAC,UAAU,CACb,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,GAAG;YACX,MAAM,IAAI,GAAG,GAAG;iBACb,IAAI,CAAa,sDAAsD,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;iBACpF,OAAO,EAAE,CAAC;YACb,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,IAAI,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAC;YACpB,OAAO;gBACL,SAAS,EAAE,CAAC,CAAC,SAAS;gBACtB,UAAU,EAAE,CAAC,CAAC,WAAW;gBACzB,cAAc,EAAE,CAAC,CAAC,eAAe;gBACjC,KAAK,EAAE,CAAC,CAAC,KAAK;gBACd,OAAO,EAAE,CAAC,CAAC,OAAO;gBAClB,UAAU,EAAE,CAAC,CAAC,WAAW;aAC1B,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,oBAAoB,CAAC,cAAc;YACvC,GAAG,CAAC,IAAI,CAAC,0DAA0D,EAAE,cAAc,CAAC,WAAW,EAAE,CAAC,CAAC;QACrG,CAAC;QACD,KAAK,CAAC,UAAU,CAAC,YAAY;YAC3B,GAAG,CAAC,IAAI,CAAC,iDAAiD,EAAE,YAAY,CAAC,CAAC;QAC5E,CAAC;KACF,CAAC;AACJ,CAAC"}