@agenticprimitives/fabric 0.0.0-alpha.1

package/dist/messaging/rules.js

@@ -0,0 +1,109 @@
+// Deterministic inbox rules (spec 309 §5). Rules may ONLY mutate the
+// projection (move/label/category/read-state/priority) and fire notifications.
+// The action union is closed on purpose: a rule can never issue entitlements,
+// grant delegation, release keys, or change custody — those verbs do not exist
+// here and must never be added.
+const PRIORITY_ORDER = ['low', 'normal', 'high', 'urgent'];
+/** Shared context-match used by rules and `listByContext` — ONE mechanism (ADR-0013). */
+export function matchesContextRef(refs, query) {
+    return refs.some((r) => r.kind === query.kind && (query.id === undefined || r.id === query.id));
+}
+export function matchesRulePredicate(predicate, envelope, item) {
+    if (predicate.fromAnyOf && !predicate.fromAnyOf.includes(envelope.from))
+        return false;
+    if (predicate.kindAnyOf && !predicate.kindAnyOf.includes(envelope.kind))
+        return false;
+    if (predicate.subjectContainsAnyOf) {
+        const subject = (envelope.subject ?? '').toLowerCase();
+        if (!predicate.subjectContainsAnyOf.some((s) => subject.includes(s.toLowerCase())))
+            return false;
+    }
+    if (predicate.labelAnyOf && !predicate.labelAnyOf.some((l) => item.labels.includes(l)))
+        return false;
+    if (predicate.priorityAtLeast !== undefined) {
+        if (PRIORITY_ORDER.indexOf(item.priority) < PRIORITY_ORDER.indexOf(predicate.priorityAtLeast))
+            return false;
+    }
+    if (predicate.hasAttachments !== undefined) {
+        if (((envelope.attachments?.length ?? 0) > 0) !== predicate.hasAttachments)
+            return false;
+    }
+    if (predicate.classificationAnyOf && !predicate.classificationAnyOf.includes(envelope.classification))
+        return false;
+    if (predicate.hasInteraction !== undefined) {
+        if ((envelope.interactionId !== undefined) !== predicate.hasInteraction)
+            return false;
+    }
+    if (predicate.contextRefAnyOf) {
+        const refs = envelope.contextRefs ?? [];
+        if (!predicate.contextRefAnyOf.some((q) => matchesContextRef(refs, q)))
+            return false;
+    }
+    return true;
+}
+/**
+ * Pure, deterministic rule pass over a freshly projected inbox item.
+ * Rules run in (order, id) order; disabled rules skip; `except` vetoes `when`;
+ * `stopProcessing` halts later rules after the current one's actions apply.
+ */
+export function applyInboxRules(item, envelope, rules) {
+    const ordered = [...rules].sort((a, b) => a.order - b.order || a.id.localeCompare(b.id));
+    let next = { ...item, labels: [...item.labels], categories: [...item.categories] };
+    const notifications = [];
+    const appliedRuleIds = [];
+    let suppressed = false;
+    for (const rule of ordered) {
+        if (!rule.enabled)
+            continue;
+        if (!matchesRulePredicate(rule.when, envelope, next))
+            continue;
+        if (rule.except && matchesRulePredicate(rule.except, envelope, next))
+            continue;
+        appliedRuleIds.push(rule.id);
+        for (const action of rule.actions) {
+            switch (action.type) {
+                case 'move':
+                    next.folder = action.folder;
+                    break;
+                case 'label':
+                    if (!next.labels.includes(action.label))
+                        next.labels.push(action.label);
+                    break;
+                case 'category':
+                    if (!next.categories.includes(action.category))
+                        next.categories.push(action.category);
+                    break;
+                case 'mark-read':
+                    next.unread = false;
+                    break;
+                case 'mark-unread':
+                    next.unread = true;
+                    break;
+                case 'set-priority':
+                    next.priority = action.priority;
+                    break;
+                case 'notify':
+                    notifications.push({
+                        version: 'ap.message.notification.v1',
+                        messageId: next.messageId,
+                        ruleId: rule.id,
+                        channel: action.channel,
+                        at: next.lastEventAt,
+                    });
+                    break;
+                case 'suppress-notification':
+                    suppressed = true;
+                    break;
+            }
+        }
+        if (rule.stopProcessing)
+            break;
+    }
+    return {
+        item: next,
+        notifications: suppressed ? [] : notifications,
+        suppressed,
+        appliedRuleIds,
+    };
+}
+//# sourceMappingURL=rules.js.map

package/dist/messaging/rules.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rules.js","sourceRoot":"","sources":["../../src/messaging/rules.ts"],"names":[],"mappings":"AAAA,qEAAqE;AACrE,+EAA+E;AAC/E,8EAA8E;AAC9E,+EAA+E;AAC/E,gCAAgC;AAchC,MAAM,cAAc,GAA+B,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;AAkBvF,yFAAyF;AACzF,MAAM,UAAU,iBAAiB,CAC/B,IAA6B,EAC7B,KAAoC;IAEpC,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,EAAE,KAAK,SAAS,IAAI,CAAC,CAAC,EAAE,KAAK,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;AAClG,CAAC;AAuCD,MAAM,UAAU,oBAAoB,CAClC,SAA+B,EAC/B,QAA2B,EAC3B,IAAiB;IAEjB,IAAI,SAAS,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACtF,IAAI,SAAS,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACtF,IAAI,SAAS,CAAC,oBAAoB,EAAE,CAAC;QACnC,MAAM,OAAO,GAAG,CAAC,QAAQ,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QACvD,IAAI,CAAC,SAAS,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;IACnG,CAAC;IACD,IAAI,SAAS,CAAC,UAAU,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACrG,IAAI,SAAS,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;QAC5C,IAAI,cAAc,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,cAAc,CAAC,OAAO,CAAC,SAAS,CAAC,eAAe,CAAC;YAC3F,OAAO,KAAK,CAAC;IACjB,CAAC;IACD,IAAI,SAAS,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;QAC3C,IAAI,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,SAAS,CAAC,cAAc;YAAE,OAAO,KAAK,CAAC;IAC3F,CAAC;IACD,IAAI,SAAS,CAAC,mBAAmB,IAAI,CAAC,SAAS,CAAC,mBAAmB,CAAC,QAAQ,CAAC,QAAQ,CAAC,cAAc,CAAC;QACnG,OAAO,KAAK,CAAC;IACf,IAAI,SAAS,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;QAC3C,IAAI,CAAC,QAAQ,CAAC,aAAa,KAAK,SAAS,CAAC,KAAK,SAAS,CAAC,cAAc;YAAE,OAAO,KAAK,CAAC;IACxF,CAAC;IACD,IAAI,SAAS,CAAC,eAAe,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,QAAQ,CAAC,WAAW,IAAI,EAAE,CAAC;QACxC,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;IACvF,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAUD;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAC7B,IAAiB,EACjB,QAA2B,EAC3B,KAAoB;IAEpB,MAAM,OAAO,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACzF,IAAI,IAAI,GAAgB,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;IAChG,MAAM,aAAa,GAA0B,EAAE,CAAC;IAChD,MAAM,cAAc,GAAa,EAAE,CAAC;IACpC,IAAI,UAAU,GAAG,KAAK,CAAC;IAEvB,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC3B,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,SAAS;QAC5B,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC;YAAE,SAAS;QAC/D,IAAI,IAAI,CAAC,MAAM,IAAI,oBAAoB,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC;YAAE,SAAS;QAE/E,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC7B,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAClC,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;gBACpB,KAAK,MAAM;oBACT,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;oBAC5B,MAAM;gBACR,KAAK,OAAO;oBACV,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC;wBAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;oBACxE,MAAM;gBACR,KAAK,UAAU;oBACb,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC;wBAAE,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;oBACtF,MAAM;gBACR,KAAK,WAAW;oBACd,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;oBACpB,MAAM;gBACR,KAAK,aAAa;oBAChB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;oBACnB,MAAM;gBACR,KAAK,cAAc;oBACjB,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;oBAChC,MAAM;gBACR,KAAK,QAAQ;oBACX,aAAa,CAAC,IAAI,CAAC;wBACjB,OAAO,EAAE,4BAA4B;wBACrC,SAAS,EAAE,IAAI,CAAC,SAAS;wBACzB,MAAM,EAAE,IAAI,CAAC,EAAE;wBACf,OAAO,EAAE,MAAM,CAAC,OAAO;wBACvB,EAAE,EAAE,IAAI,CAAC,WAAW;qBACrB,CAAC,CAAC;oBACH,MAAM;gBACR,KAAK,uBAAuB;oBAC1B,UAAU,GAAG,IAAI,CAAC;oBAClB,MAAM;YACV,CAAC;QACH,CAAC;QACD,IAAI,IAAI,CAAC,cAAc;YAAE,MAAM;IACjC,CAAC;IAED,OAAO;QACL,IAAI,EAAE,IAAI;QACV,aAAa,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa;QAC9C,UAAU;QACV,cAAc;KACf,CAAC;AACJ,CAAC"}

package/dist/messaging/store.d.ts

@@ -0,0 +1,24 @@
+import type { FolderKind, InboxItemV1, MessageEnvelopeV1, MessageEventV1, MessageId } from './types.js';
+/**
+ * Pure projection step. Given the previous inbox row (or undefined for the
+ * first event) and the next lifecycle event, produce the new row.
+ * Throws on a messageId mismatch — events never apply across messages.
+ */
+export declare function applyMessageEvent(prev: InboxItemV1 | undefined, envelope: MessageEnvelopeV1, event: MessageEventV1): InboxItemV1;
+export interface MessageStore {
+    /**
+     * Admit an envelope. Fail-closed: structurally invalid envelopes throw.
+     * Re-putting an identical envelope is idempotent; a DIFFERENT envelope under
+     * an existing id throws (blocks envelope substitution under a known id).
+     */
+    putMessage(envelope: MessageEnvelopeV1): void;
+    getMessage(id: MessageId): MessageEnvelopeV1 | null;
+    /** Append a lifecycle event. Throws for unknown messages or id mismatch. */
+    appendEvent(event: MessageEventV1): InboxItemV1;
+    listEvents(id: MessageId): MessageEventV1[];
+    getInboxItem(id: MessageId): InboxItemV1 | null;
+    listInbox(folder?: FolderKind): InboxItemV1[];
+    unreadCount(folder?: FolderKind): number;
+}
+export declare function createInMemoryMessageStore(): MessageStore;
+//# sourceMappingURL=store.d.ts.map

package/dist/messaging/store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../src/messaging/store.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EACV,UAAU,EACV,WAAW,EACX,iBAAiB,EACjB,cAAc,EACd,SAAS,EACV,MAAM,YAAY,CAAC;AAiBpB;;;;GAIG;AACH,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE,WAAW,GAAG,SAAS,EAC7B,QAAQ,EAAE,iBAAiB,EAC3B,KAAK,EAAE,cAAc,GACpB,WAAW,CAqDb;AAED,MAAM,WAAW,YAAY;IAC3B;;;;OAIG;IACH,UAAU,CAAC,QAAQ,EAAE,iBAAiB,GAAG,IAAI,CAAC;IAC9C,UAAU,CAAC,EAAE,EAAE,SAAS,GAAG,iBAAiB,GAAG,IAAI,CAAC;IACpD,4EAA4E;IAC5E,WAAW,CAAC,KAAK,EAAE,cAAc,GAAG,WAAW,CAAC;IAChD,UAAU,CAAC,EAAE,EAAE,SAAS,GAAG,cAAc,EAAE,CAAC;IAC5C,YAAY,CAAC,EAAE,EAAE,SAAS,GAAG,WAAW,GAAG,IAAI,CAAC;IAChD,SAAS,CAAC,MAAM,CAAC,EAAE,UAAU,GAAG,WAAW,EAAE,CAAC;IAC9C,WAAW,CAAC,MAAM,CAAC,EAAE,UAAU,GAAG,MAAM,CAAC;CAC1C;AAED,wBAAgB,0BAA0B,IAAI,YAAY,CA4CzD"}

package/dist/messaging/store.js

@@ -0,0 +1,120 @@
+// Single-perspective message store: one agent's copy of envelopes + lifecycle
+// events + the deterministic inbox projection over them (spec 309 §5, §7).
+//
+// The projection is a pure reducer — replaying the same events always yields
+// the same InboxItemV1. Rules / categories / delta cursors land in W2.
+import { validateMessageEnvelope } from './envelope.js';
+import { canonicalizeMessage } from './hash.js';
+/** Where a message lands when first admitted, by perspective + kind. */
+function initialFolder(envelope, event) {
+    switch (event.eventType) {
+        case 'drafted':
+            return 'drafts';
+        case 'sent':
+            return 'sent';
+        default:
+            // Typed requests queue for review instead of burying in mail (spec 309 §6).
+            return envelope.kind === 'request' ? 'pending' : 'inbox';
+    }
+}
+/**
+ * Pure projection step. Given the previous inbox row (or undefined for the
+ * first event) and the next lifecycle event, produce the new row.
+ * Throws on a messageId mismatch — events never apply across messages.
+ */
+export function applyMessageEvent(prev, envelope, event) {
+    if (event.messageId !== envelope.id) {
+        throw new Error(`event ${event.messageId} does not belong to message ${envelope.id}`);
+    }
+    const base = prev ?? {
+        messageId: envelope.id,
+        conversationId: envelope.conversationId,
+        folder: initialFolder(envelope, event),
+        labels: [...(envelope.labels ?? [])],
+        categories: [],
+        contextRefs: [...(envelope.contextRefs ?? [])],
+        unread: event.eventType === 'admitted' || event.eventType === 'delivered',
+        priority: envelope.priority ?? 'normal',
+        lastEventAt: event.at,
+        interactionId: envelope.interactionId,
+    };
+    const next = { ...base, lastEventAt: event.at };
+    switch (event.eventType) {
+        case 'admitted':
+        case 'delivered':
+            next.folder = prev ? prev.folder : initialFolder(envelope, event);
+            next.unread = true;
+            break;
+        case 'read':
+            next.unread = false;
+            break;
+        case 'archived':
+            next.folder = 'archive';
+            break;
+        case 'deleted':
+        case 'tombstoned':
+            next.folder = 'trash';
+            next.bodyPreview = undefined;
+            break;
+        case 'restored':
+            next.folder = envelope.kind === 'request' ? 'pending' : 'inbox';
+            break;
+        case 'drafted':
+            next.folder = 'drafts';
+            next.unread = false;
+            break;
+        case 'sent':
+            next.folder = 'sent';
+            next.unread = false;
+            break;
+        case 'seen':
+        case 'failed':
+            // Notification shown / delivery failed — no folder or unread change.
+            break;
+    }
+    return next;
+}
+export function createInMemoryMessageStore() {
+    const envelopes = new Map();
+    const events = new Map();
+    const items = new Map();
+    return {
+        putMessage(envelope) {
+            const errors = validateMessageEnvelope(envelope);
+            if (errors.length > 0) {
+                throw new Error(`invalid message envelope ${envelope.id}: ${errors.join(', ')}`);
+            }
+            const existing = envelopes.get(envelope.id);
+            if (existing && canonicalizeMessage(existing) !== canonicalizeMessage(envelope)) {
+                throw new Error(`duplicate message id ${envelope.id} with different content`);
+            }
+            envelopes.set(envelope.id, envelope);
+        },
+        getMessage(id) {
+            return envelopes.get(id) ?? null;
+        },
+        appendEvent(event) {
+            const envelope = envelopes.get(event.messageId);
+            if (!envelope)
+                throw new Error(`unknown message ${event.messageId}`);
+            const next = applyMessageEvent(items.get(event.messageId), envelope, event);
+            events.set(event.messageId, [...(events.get(event.messageId) ?? []), event]);
+            items.set(event.messageId, next);
+            return next;
+        },
+        listEvents(id) {
+            return [...(events.get(id) ?? [])];
+        },
+        getInboxItem(id) {
+            return items.get(id) ?? null;
+        },
+        listInbox(folder) {
+            const all = [...items.values()].filter((i) => (folder ? i.folder === folder : true));
+            return all.sort((a, b) => b.lastEventAt.localeCompare(a.lastEventAt));
+        },
+        unreadCount(folder) {
+            return [...items.values()].filter((i) => i.unread && (folder ? i.folder === folder : true)).length;
+        },
+    };
+}
+//# sourceMappingURL=store.js.map

package/dist/messaging/store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../../src/messaging/store.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,2EAA2E;AAC3E,EAAE;AACF,6EAA6E;AAC7E,uEAAuE;AASvE,OAAO,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAC;AACxD,OAAO,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAEhD,wEAAwE;AACxE,SAAS,aAAa,CAAC,QAA2B,EAAE,KAAqB;IACvE,QAAQ,KAAK,CAAC,SAAS,EAAE,CAAC;QACxB,KAAK,SAAS;YACZ,OAAO,QAAQ,CAAC;QAClB,KAAK,MAAM;YACT,OAAO,MAAM,CAAC;QAChB;YACE,4EAA4E;YAC5E,OAAO,QAAQ,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC;IAC7D,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAC/B,IAA6B,EAC7B,QAA2B,EAC3B,KAAqB;IAErB,IAAI,KAAK,CAAC,SAAS,KAAK,QAAQ,CAAC,EAAE,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,SAAS,KAAK,CAAC,SAAS,+BAA+B,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC;IACxF,CAAC;IAED,MAAM,IAAI,GAAgB,IAAI,IAAI;QAChC,SAAS,EAAE,QAAQ,CAAC,EAAE;QACtB,cAAc,EAAE,QAAQ,CAAC,cAAc;QACvC,MAAM,EAAE,aAAa,CAAC,QAAQ,EAAE,KAAK,CAAC;QACtC,MAAM,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;QACpC,UAAU,EAAE,EAAE;QACd,WAAW,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;QAC9C,MAAM,EAAE,KAAK,CAAC,SAAS,KAAK,UAAU,IAAI,KAAK,CAAC,SAAS,KAAK,WAAW;QACzE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,IAAI,QAAQ;QACvC,WAAW,EAAE,KAAK,CAAC,EAAE;QACrB,aAAa,EAAE,QAAQ,CAAC,aAAa;KACtC,CAAC;IAEF,MAAM,IAAI,GAAgB,EAAE,GAAG,IAAI,EAAE,WAAW,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC;IAC7D,QAAQ,KAAK,CAAC,SAAS,EAAE,CAAC;QACxB,KAAK,UAAU,CAAC;QAChB,KAAK,WAAW;YACd,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;YAClE,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;YACnB,MAAM;QACR,KAAK,MAAM;YACT,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;YACpB,MAAM;QACR,KAAK,UAAU;YACb,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC;YACxB,MAAM;QACR,KAAK,SAAS,CAAC;QACf,KAAK,YAAY;YACf,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC;YACtB,IAAI,CAAC,WAAW,GAAG,SAAS,CAAC;YAC7B,MAAM;QACR,KAAK,UAAU;YACb,IAAI,CAAC,MAAM,GAAG,QAAQ,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC;YAChE,MAAM;QACR,KAAK,SAAS;YACZ,IAAI,CAAC,MAAM,GAAG,QAAQ,CAAC;YACvB,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;YACpB,MAAM;QACR,KAAK,MAAM;YACT,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;YACrB,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;YACpB,MAAM;QACR,KAAK,MAAM,CAAC;QACZ,KAAK,QAAQ;YACX,qEAAqE;YACrE,MAAM;IACV,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAkBD,MAAM,UAAU,0BAA0B;IACxC,MAAM,SAAS,GAAG,IAAI,GAAG,EAAgC,CAAC;IAC1D,MAAM,MAAM,GAAG,IAAI,GAAG,EAA+B,CAAC;IACtD,MAAM,KAAK,GAAG,IAAI,GAAG,EAA0B,CAAC;IAEhD,OAAO;QACL,UAAU,CAAC,QAAQ;YACjB,MAAM,MAAM,GAAG,uBAAuB,CAAC,QAAQ,CAAC,CAAC;YACjD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtB,MAAM,IAAI,KAAK,CAAC,4BAA4B,QAAQ,CAAC,EAAE,KAAK,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACnF,CAAC;YACD,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;YAC5C,IAAI,QAAQ,IAAI,mBAAmB,CAAC,QAAQ,CAAC,KAAK,mBAAmB,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAChF,MAAM,IAAI,KAAK,CAAC,wBAAwB,QAAQ,CAAC,EAAE,yBAAyB,CAAC,CAAC;YAChF,CAAC;YACD,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;QACvC,CAAC;QACD,UAAU,CAAC,EAAE;YACX,OAAO,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC;QACnC,CAAC;QACD,WAAW,CAAC,KAAK;YACf,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YAChD,IAAI,CAAC,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;YACrE,MAAM,IAAI,GAAG,iBAAiB,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;YAC5E,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;YAC7E,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;YACjC,OAAO,IAAI,CAAC;QACd,CAAC;QACD,UAAU,CAAC,EAAE;YACX,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QACrC,CAAC;QACD,YAAY,CAAC,EAAE;YACb,OAAO,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC;QAC/B,CAAC;QACD,SAAS,CAAC,MAAM;YACd,MAAM,GAAG,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;YACrF,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC;QACxE,CAAC;QACD,WAAW,CAAC,MAAM;YAChB,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAC/B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CACzD,CAAC,MAAM,CAAC;QACX,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/messaging/types.d.ts

@@ -0,0 +1,166 @@
+import type { CanonicalAgentId, Hex32, SignatureProof } from '@agenticprimitives/types';
+import type { VaultRef, VaultClassification } from '@agenticprimitives/vault';
+export type { Hex32, SignatureProof };
+export type MessageId = `msg_${string}`;
+export type ConversationId = `conv_${string}`;
+export type ThreadId = `thr_${string}`;
+export type FolderKind = 'inbox' | 'sent' | 'drafts' | 'archive' | 'trash' | 'pending' | 'custom';
+export type MessagePriority = 'low' | 'normal' | 'high' | 'urgent';
+export type MessageKind = 'plain' | 'request' | 'response' | 'credential-delivery' | 'receipt' | 'system' | 'tombstone';
+/**
+ * Typed "about-ness" pointer (spec 312 §4.1): binds a message/conversation to
+ * an entity — an org agent, a community, a segment, a content hash, an
+ * attestation. Display + routing metadata only, NEVER authority. Kinds are
+ * app-defined (ADR-0021 — vertical vocabularies live in app kind registries).
+ */
+export interface ContextRefV1 {
+    /** App-defined kind, e.g. 'org-agent' | 'community' | 'segment' | 'content-hash'. */
+    kind: string;
+    /** Stable id: CAIP-10, URI, attestation UID, content hash, app id. */
+    id: string;
+    /** Optional content/credential binding (doc hash, attestation digest…). */
+    hash?: Hex32;
+    /** Display-only label; not authoritative, not verified. */
+    label?: string;
+}
+export interface MessageAttachmentRef {
+    ref: VaultRef;
+    hash: Hex32;
+    contentType: string;
+    filename?: string;
+    bytes?: number;
+}
+/** Declares deletion/tombstone intent. NOT adversary-proof deletion (spec 309 §8.9). */
+export interface RetentionPolicyRef {
+    policyId: string;
+    deleteAfter?: string;
+    tombstoneOnDelete: boolean;
+}
+/**
+ * The canonical message envelope. `body`/`attachments` reference vault bytes;
+ * `bodyHash` MUST match those bytes (enforced at delivery, spec 309 §8.4).
+ */
+export interface MessageEnvelopeV1 {
+    version: 'ap.message.v1';
+    id: MessageId;
+    conversationId: ConversationId;
+    threadId?: ThreadId;
+    inReplyTo?: MessageId;
+    kind: MessageKind;
+    from: CanonicalAgentId;
+    to: CanonicalAgentId[];
+    cc?: CanonicalAgentId[];
+    /** BCC / hidden recipients ⇒ per-recipient envelopes; never in shared state (spec 309 §8.6). */
+    recipientPartition?: string;
+    subject?: string;
+    createdAt: string;
+    expiresAt?: string;
+    classification: VaultClassification;
+    body: VaultRef;
+    bodyHash: Hex32;
+    bodyContentType: string;
+    attachments?: MessageAttachmentRef[];
+    /** String ref into an `interactions` case (no import back-edge). */
+    interactionId?: string;
+    /** Entities this message is ABOUT (spec 312) — covered by the envelope hash,
+     *  so refs are signed with the message. Bounded (≤ 8, enforced). */
+    contextRefs?: ContextRefV1[];
+    retention?: RetentionPolicyRef;
+    labels?: string[];
+    priority?: MessagePriority;
+    signature?: SignatureProof;
+}
+export type MessageEventType = 'drafted' | 'sent' | 'admitted' | 'delivered' | 'seen' | 'read' | 'archived' | 'deleted' | 'restored' | 'tombstoned' | 'failed';
+export interface MessageEventV1 {
+    version: 'ap.message.event.v1';
+    messageId: MessageId;
+    actor: CanonicalAgentId;
+    eventType: MessageEventType;
+    at: string;
+    reason?: string;
+    evidenceRef?: VaultRef;
+    signature?: SignatureProof;
+}
+/** The materialized per-message inbox row (a projection over events). */
+export interface InboxItemV1 {
+    messageId: MessageId;
+    conversationId: ConversationId;
+    folder: FolderKind;
+    labels: string[];
+    categories: string[];
+    /** Projected copy of the envelope's context refs (spec 312) — lets rules and
+     *  views filter by context without re-reading envelopes. */
+    contextRefs: ContextRefV1[];
+    unread: boolean;
+    priority: MessagePriority;
+    lastEventAt: string;
+    bodyPreview?: string;
+    interactionId?: string;
+}
+/**
+ * Conversation metadata (spec 312 §4.2 — the `ConversationRef` promised in
+ * spec 309 §5). A projection-layer descriptor over an opaque ConversationId:
+ * a Slack-channel-shaped view (title, participants, context anchors). Each
+ * side keeps its OWN copy; a descriptor never authorizes delivery — admission
+ * still validates every envelope independently.
+ */
+/** Conversation shape (spec 324 §10) — a projection profile, never authority. A `forum`-profile conversation
+ *  is the org's discussion space that hosts `DiscussionTopicV1` partitions (the Telegram-forum shape). */
+export type ConversationProfile = 'direct' | 'group' | 'discussion' | 'broadcast' | 'forum' | 'announcement' | 'support';
+export interface ConversationDescriptorV1 {
+    version: 'ap.conversation.v1';
+    id: ConversationId;
+    /** The agent whose store owns this descriptor copy. */
+    owner: CanonicalAgentId;
+    title?: string;
+    participants: CanonicalAgentId[];
+    /** Entities this conversation is anchored to. */
+    contextRefs?: ContextRefV1[];
+    /** Who may append: fixed participant set, owner-curated, or open to anyone
+     *  in the anchored context (org shared inbox). Projection policy only. */
+    participantPolicy: 'fixed' | 'owner-managed' | 'open-to-context';
+    createdAt: string;
+    archived?: boolean;
+    /** The OrganizationAgent that hosts this conversation, if it is an org's discussion space. */
+    hostOrganization?: CanonicalAgentId;
+    /** The conversation shape. A `forum` hosts DiscussionTopics; `direct`/`group` are DM/small-group. */
+    profile?: ConversationProfile;
+    subject?: string;
+    description?: string;
+    /** Access posture of the conversation (topics inherit it; §10). */
+    confidentialityMode?: 'open' | 'members-only' | 'confidential';
+    /** Ref to the enrollment policy governing who may participate (resolved externally; never inline authority). */
+    enrollmentPolicyRef?: string;
+}
+/**
+ * A DiscussionTopic (spec 324 §10) — a named partition of an org's discussion space (the Telegram-forum
+ * shape). What today's "channels" (`#general`, "fundraising") ACTUALLY are: DiscussionTopics inside the org's
+ * default `forum`-profile Conversation, NOT sibling Conversations. No `Channel`/`Space` class is added. Topics
+ * inherit Conversation access; a restricted topic uses a `discussion`-scoped RoleAssignment/delegation.
+ */
+export interface DiscussionTopicV1 {
+    version: 'ap.discussion-topic.v1';
+    discussionId: string;
+    conversationId: ConversationId;
+    title: string;
+    description?: string;
+    iconRef?: VaultRef;
+    createdByAgent: CanonicalAgentId;
+    createdAt: string;
+    status: 'open' | 'closed' | 'archived';
+    pinned?: boolean;
+    hidden?: boolean;
+}
+/** A MessageThread (spec 324 §10) — a reply chain rooted at one exchange within a DiscussionTopic. */
+export interface MessageThreadV1 {
+    version: 'ap.message-thread.v1';
+    discussionId: string;
+    conversationId: ConversationId;
+    /** The exchange that roots the thread (an `xch_` id; typed as string to avoid a messaging→record cycle). */
+    rootExchangeId: string;
+    rootMessageId?: MessageId;
+    title?: string;
+    createdAt: string;
+    status: 'open' | 'closed' | 'archived';
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/messaging/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/messaging/types.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,gBAAgB,EAAE,KAAK,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AACxF,OAAO,KAAK,EAAE,QAAQ,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAG9E,YAAY,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;AAEtC,MAAM,MAAM,SAAS,GAAG,OAAO,MAAM,EAAE,CAAC;AACxC,MAAM,MAAM,cAAc,GAAG,QAAQ,MAAM,EAAE,CAAC;AAC9C,MAAM,MAAM,QAAQ,GAAG,OAAO,MAAM,EAAE,CAAC;AAEvC,MAAM,MAAM,UAAU,GAAG,OAAO,GAAG,MAAM,GAAG,QAAQ,GAAG,SAAS,GAAG,OAAO,GAAG,SAAS,GAAG,QAAQ,CAAC;AAElG,MAAM,MAAM,eAAe,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,QAAQ,CAAC;AAEnE,MAAM,MAAM,WAAW,GACnB,OAAO,GACP,SAAS,GACT,UAAU,GACV,qBAAqB,GACrB,SAAS,GACT,QAAQ,GACR,WAAW,CAAC;AAEhB;;;;;GAKG;AACH,MAAM,WAAW,YAAY;IAC3B,qFAAqF;IACrF,IAAI,EAAE,MAAM,CAAC;IACb,sEAAsE;IACtE,EAAE,EAAE,MAAM,CAAC;IACX,2EAA2E;IAC3E,IAAI,CAAC,EAAE,KAAK,CAAC;IACb,2DAA2D;IAC3D,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,oBAAoB;IACnC,GAAG,EAAE,QAAQ,CAAC;IACd,IAAI,EAAE,KAAK,CAAC;IACZ,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,wFAAwF;AACxF,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,iBAAiB,EAAE,OAAO,CAAC;CAC5B;AAED;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,eAAe,CAAC;IACzB,EAAE,EAAE,SAAS,CAAC;IACd,cAAc,EAAE,cAAc,CAAC;IAC/B,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,IAAI,EAAE,WAAW,CAAC;IAClB,IAAI,EAAE,gBAAgB,CAAC;IACvB,EAAE,EAAE,gBAAgB,EAAE,CAAC;IACvB,EAAE,CAAC,EAAE,gBAAgB,EAAE,CAAC;IACxB,gGAAgG;IAChG,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,mBAAmB,CAAC;IACpC,IAAI,EAAE,QAAQ,CAAC;IACf,QAAQ,EAAE,KAAK,CAAC;IAChB,eAAe,EAAE,MAAM,CAAC;IACxB,WAAW,CAAC,EAAE,oBAAoB,EAAE,CAAC;IACrC,oEAAoE;IACpE,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;wEACoE;IACpE,WAAW,CAAC,EAAE,YAAY,EAAE,CAAC;IAC7B,SAAS,CAAC,EAAE,kBAAkB,CAAC;IAC/B,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B,SAAS,CAAC,EAAE,cAAc,CAAC;CAC5B;AAED,MAAM,MAAM,gBAAgB,GACxB,SAAS,GACT,MAAM,GACN,UAAU,GACV,WAAW,GACX,MAAM,GACN,MAAM,GACN,UAAU,GACV,SAAS,GACT,UAAU,GACV,YAAY,GACZ,QAAQ,CAAC;AAEb,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,qBAAqB,CAAC;IAC/B,SAAS,EAAE,SAAS,CAAC;IACrB,KAAK,EAAE,gBAAgB,CAAC;IACxB,SAAS,EAAE,gBAAgB,CAAC;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,QAAQ,CAAC;IACvB,SAAS,CAAC,EAAE,cAAc,CAAC;CAC5B;AAED,yEAAyE;AACzE,MAAM,WAAW,WAAW;IAC1B,SAAS,EAAE,SAAS,CAAC;IACrB,cAAc,EAAE,cAAc,CAAC;IAC/B,MAAM,EAAE,UAAU,CAAC;IACnB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB;gEAC4D;IAC5D,WAAW,EAAE,YAAY,EAAE,CAAC;IAC5B,MAAM,EAAE,OAAO,CAAC;IAChB,QAAQ,EAAE,eAAe,CAAC;IAC1B,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;;;;;GAMG;AACH;0GAC0G;AAC1G,MAAM,MAAM,mBAAmB,GAC3B,QAAQ,GAAG,OAAO,GAAG,YAAY,GAAG,WAAW,GAAG,OAAO,GAAG,cAAc,GAAG,SAAS,CAAC;AAE3F,MAAM,WAAW,wBAAwB;IACvC,OAAO,EAAE,oBAAoB,CAAC;IAC9B,EAAE,EAAE,cAAc,CAAC;IACnB,uDAAuD;IACvD,KAAK,EAAE,gBAAgB,CAAC;IACxB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,gBAAgB,EAAE,CAAC;IACjC,iDAAiD;IACjD,WAAW,CAAC,EAAE,YAAY,EAAE,CAAC;IAC7B;8EAC0E;IAC1E,iBAAiB,EAAE,OAAO,GAAG,eAAe,GAAG,iBAAiB,CAAC;IACjE,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,OAAO,CAAC;IAEnB,8FAA8F;IAC9F,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IACpC,qGAAqG;IACrG,OAAO,CAAC,EAAE,mBAAmB,CAAC;IAC9B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,mEAAmE;IACnE,mBAAmB,CAAC,EAAE,MAAM,GAAG,cAAc,GAAG,cAAc,CAAC;IAC/D,gHAAgH;IAChH,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED;;;;;GAKG;AACH,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,wBAAwB,CAAC;IAClC,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,cAAc,CAAC;IAC/B,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,QAAQ,CAAC;IACnB,cAAc,EAAE,gBAAgB,CAAC;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,GAAG,QAAQ,GAAG,UAAU,CAAC;IACvC,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,sGAAsG;AACtG,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,sBAAsB,CAAC;IAChC,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,cAAc,CAAC;IAC/B,4GAA4G;IAC5G,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,CAAC,EAAE,SAAS,CAAC;IAC1B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,GAAG,QAAQ,GAAG,UAAU,CAAC;CACxC"}

package/dist/messaging/types.js

@@ -0,0 +1,7 @@
+// @agenticprimitives/messaging — wire + projection types (spec 309 §5).
+//
+// A message CARRIES a request / evidence / credential reference; a message is
+// NEVER authority (spec 309 §4.2). Bodies live in the vault — the envelope and
+// inbox state carry hashes + refs only (spec 309 §4.3).
+export {};
+//# sourceMappingURL=types.js.map

package/dist/messaging/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/messaging/types.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,EAAE;AACF,8EAA8E;AAC9E,+EAA+E;AAC/E,wDAAwD"}

package/dist/messaging/vault-store.d.ts

@@ -0,0 +1,37 @@
+import type { Vault, VaultClassification, VaultRef } from '@agenticprimitives/vault';
+import type { MessageEnvelopeV1, MessageId, Hex32 } from './types.js';
+export declare const MESSAGE_BODY_RECORD_TYPE = "message.body";
+export declare const MESSAGE_ATTACHMENT_RECORD_TYPE = "message.attachment";
+/** 1-1 (DM) body resource — spec 322 W3 namespacing: `message.body:dm:<id>`. Changing THIS
+ *  function cuts every 1-1 write AND read over together (they both derive from it); pre-cutover
+ *  bodies at `message.body:<id>` are orphaned by design (no-migration doctrine). Channel bodies use
+ *  {@link topicBodyResource} — a DIFFERENT scope family, so the delivery grant and the
+ *  interactions grant can never reach each other's bodies (closes FAB-SSO-2). */
+export declare function messageBodyResource(id: MessageId): string;
+/** Topic-post body resource (spec 324 §10; renamed from channel bodies in the W6 key migration) —
+ *  `message.body:topic:<conversationId>:<messageId>`. */
+export declare function topicBodyResource(conversationId: string, id: MessageId): string;
+export declare function messageAttachmentResource(id: MessageId, index: number): string;
+export interface PutBodyResult {
+    ref: VaultRef;
+    bodyHash: Hex32;
+}
+/** One side's (sender or recipient) vault residency for message bodies. */
+export interface MessageBodyStore {
+    /** Store body bytes for a message; returns the ref + hash the envelope binds. */
+    putBody(args: {
+        messageId: MessageId;
+        bytes: Uint8Array;
+        contentType: string;
+        classification: VaultClassification;
+        /** Override the storage resource (channel bodies — {@link topicBodyResource}); defaults to the DM namespace. */
+        resource?: string;
+    }): Promise<PutBodyResult>;
+    /**
+     * Load the body an envelope references and verify it against `bodyHash`.
+     * Fail-closed: missing record or hash mismatch throws — never partial bytes.
+     */
+    loadBody(envelope: MessageEnvelopeV1): Promise<Uint8Array>;
+}
+export declare function createVaultMessageBodyStore(vault: Vault, owner: string): MessageBodyStore;
+//# sourceMappingURL=vault-store.d.ts.map

package/dist/messaging/vault-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vault-store.d.ts","sourceRoot":"","sources":["../../src/messaging/vault-store.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,KAAK,EAAE,mBAAmB,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAC;AACrF,OAAO,KAAK,EAAE,iBAAiB,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AAGtE,eAAO,MAAM,wBAAwB,iBAAiB,CAAC;AACvD,eAAO,MAAM,8BAA8B,uBAAuB,CAAC;AAEnE;;;;iFAIiF;AACjF,wBAAgB,mBAAmB,CAAC,EAAE,EAAE,SAAS,GAAG,MAAM,CAEzD;AAED;yDACyD;AACzD,wBAAgB,iBAAiB,CAAC,cAAc,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,GAAG,MAAM,CAE/E;AAED,wBAAgB,yBAAyB,CAAC,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAE9E;AAqBD,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,QAAQ,CAAC;IACd,QAAQ,EAAE,KAAK,CAAC;CACjB;AAED,2EAA2E;AAC3E,MAAM,WAAW,gBAAgB;IAC/B,iFAAiF;IACjF,OAAO,CAAC,IAAI,EAAE;QACZ,SAAS,EAAE,SAAS,CAAC;QACrB,KAAK,EAAE,UAAU,CAAC;QAClB,WAAW,EAAE,MAAM,CAAC;QACpB,cAAc,EAAE,mBAAmB,CAAC;QACpC,gHAAgH;QAChH,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IAC3B;;;OAGG;IACH,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;CAC5D;AAED,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,GAAG,gBAAgB,CAwBzF"}

package/dist/messaging/vault-store.js

@@ -0,0 +1,62 @@
+// Vault body residency (spec 309 §9). Message bodies and attachments are
+// vault records — envelopes and projections carry `VaultRef` + hash only.
+// Reads are fail-closed: bytes that do not match the envelope's `bodyHash`
+// never reach the caller (ADR-0013 — a mismatch is an error, not a fallback).
+import { sha256Hex32 } from './hash.js';
+export const MESSAGE_BODY_RECORD_TYPE = 'message.body';
+export const MESSAGE_ATTACHMENT_RECORD_TYPE = 'message.attachment';
+/** 1-1 (DM) body resource — spec 322 W3 namespacing: `message.body:dm:<id>`. Changing THIS
+ *  function cuts every 1-1 write AND read over together (they both derive from it); pre-cutover
+ *  bodies at `message.body:<id>` are orphaned by design (no-migration doctrine). Channel bodies use
+ *  {@link topicBodyResource} — a DIFFERENT scope family, so the delivery grant and the
+ *  interactions grant can never reach each other's bodies (closes FAB-SSO-2). */
+export function messageBodyResource(id) {
+    return `${MESSAGE_BODY_RECORD_TYPE}:dm:${id}`;
+}
+/** Topic-post body resource (spec 324 §10; renamed from channel bodies in the W6 key migration) —
+ *  `message.body:topic:<conversationId>:<messageId>`. */
+export function topicBodyResource(conversationId, id) {
+    return `${MESSAGE_BODY_RECORD_TYPE}:topic:${conversationId}:${id}`;
+}
+export function messageAttachmentResource(id, index) {
+    return `${MESSAGE_ATTACHMENT_RECORD_TYPE}:${id}:${index}`;
+}
+function toBase64(bytes) {
+    let bin = '';
+    for (const b of bytes)
+        bin += String.fromCharCode(b);
+    return btoa(bin);
+}
+function fromBase64(b64) {
+    const bin = atob(b64);
+    const out = new Uint8Array(bin.length);
+    for (let i = 0; i < bin.length; i += 1)
+        out[i] = bin.charCodeAt(i);
+    return out;
+}
+export function createVaultMessageBodyStore(vault, owner) {
+    return {
+        async putBody({ messageId, bytes, contentType, classification, resource: resourceOverride }) {
+            const bodyHash = await sha256Hex32(bytes);
+            const resource = resourceOverride ?? messageBodyResource(messageId);
+            const stored = { b64: toBase64(bytes), contentType, bodyHash };
+            await vault.write({ owner, resource, data: stored, classification });
+            return {
+                ref: { resource, classification, updatedAt: new Date().toISOString() },
+                bodyHash,
+            };
+        },
+        async loadBody(envelope) {
+            const obj = await vault.read({ owner, resource: envelope.body.resource });
+            if (obj === null) {
+                throw new Error(`message body ${envelope.body.resource} not found in vault`);
+            }
+            const bytes = fromBase64(obj.data.b64);
+            if ((await sha256Hex32(bytes)) !== envelope.bodyHash) {
+                throw new Error(`message body ${envelope.id} does not match envelope bodyHash`);
+            }
+            return bytes;
+        },
+    };
+}
+//# sourceMappingURL=vault-store.js.map

package/dist/messaging/vault-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vault-store.js","sourceRoot":"","sources":["../../src/messaging/vault-store.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,0EAA0E;AAC1E,2EAA2E;AAC3E,8EAA8E;AAI9E,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAExC,MAAM,CAAC,MAAM,wBAAwB,GAAG,cAAc,CAAC;AACvD,MAAM,CAAC,MAAM,8BAA8B,GAAG,oBAAoB,CAAC;AAEnE;;;;iFAIiF;AACjF,MAAM,UAAU,mBAAmB,CAAC,EAAa;IAC/C,OAAO,GAAG,wBAAwB,OAAO,EAAE,EAAE,CAAC;AAChD,CAAC;AAED;yDACyD;AACzD,MAAM,UAAU,iBAAiB,CAAC,cAAsB,EAAE,EAAa;IACrE,OAAO,GAAG,wBAAwB,UAAU,cAAc,IAAI,EAAE,EAAE,CAAC;AACrE,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,EAAa,EAAE,KAAa;IACpE,OAAO,GAAG,8BAA8B,IAAI,EAAE,IAAI,KAAK,EAAE,CAAC;AAC5D,CAAC;AAED,SAAS,QAAQ,CAAC,KAAiB;IACjC,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,MAAM,CAAC,IAAI,KAAK;QAAE,GAAG,IAAI,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACrD,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;AACnB,CAAC;AAED,SAAS,UAAU,CAAC,GAAW;IAC7B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;IACtB,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACvC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC;QAAE,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IACnE,OAAO,GAAG,CAAC;AACb,CAAC;AA+BD,MAAM,UAAU,2BAA2B,CAAC,KAAY,EAAE,KAAa;IACrE,OAAO;QACL,KAAK,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,WAAW,EAAE,cAAc,EAAE,QAAQ,EAAE,gBAAgB,EAAE;YACzF,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,KAAK,CAAC,CAAC;YAC1C,MAAM,QAAQ,GAAG,gBAAgB,IAAI,mBAAmB,CAAC,SAAS,CAAC,CAAC;YACpE,MAAM,MAAM,GAAe,EAAE,GAAG,EAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC;YAC3E,MAAM,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC;YACrE,OAAO;gBACL,GAAG,EAAE,EAAE,QAAQ,EAAE,cAAc,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE;gBACtE,QAAQ;aACT,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,QAAQ,CAAC,QAAQ;YACrB,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,IAAI,CAAa,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;YACtF,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;gBACjB,MAAM,IAAI,KAAK,CAAC,gBAAgB,QAAQ,CAAC,IAAI,CAAC,QAAQ,qBAAqB,CAAC,CAAC;YAC/E,CAAC;YACD,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACvC,IAAI,CAAC,MAAM,WAAW,CAAC,KAAK,CAAC,CAAC,KAAK,QAAQ,CAAC,QAAQ,EAAE,CAAC;gBACrD,MAAM,IAAI,KAAK,CAAC,gBAAgB,QAAQ,CAAC,EAAE,mCAAmC,CAAC,CAAC;YAClF,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/record-catalog.d.ts

@@ -0,0 +1,22 @@
+export interface RecordCatalogEntry {
+    /** Vault resource pattern — exact name or `<prefix>:*` family (matches the canonical
+     *  VAULT_RECORD_SCOPE prefix-wildcard semantics in the delegation package). */
+    pattern: string;
+    /** Wire discriminator of the payload (`version:` tag), or null for raw/opaque payloads. */
+    typeTag: string | null;
+    /** Ontology semantic name (T-box class IRI), or null where no artifact class exists. */
+    classIri: string | null;
+    /** Declared SHACL shape (C-box IRI) — ENFORCED by this package's TS validators. */
+    shapeIri: string | null;
+    /** Minimum classification of the record's content. */
+    classificationFloor: 'internal' | 'confidential';
+    owner: 'person' | 'org' | 'both';
+}
+/** Interaction-substrate records (spec 322 §1). W3 renames/splits (board.*, message.body
+ *  namespacing, org.profile) are listed as TARGET names; pre-W3 legacy names are marked. There is
+ *  NO data migration — existing interaction data is disposable (product decision 2026-07-10); new
+ *  records start clean at each wave. */
+export declare const RECORD_CATALOG: readonly RecordCatalogEntry[];
+/** Look up the catalog entry governing a concrete resource name (exact, then prefix family). */
+export declare function catalogEntryFor(resource: string): RecordCatalogEntry | undefined;
+//# sourceMappingURL=record-catalog.d.ts.map

package/dist/record-catalog.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"record-catalog.d.ts","sourceRoot":"","sources":["../src/record-catalog.ts"],"names":[],"mappings":"AAQA,MAAM,WAAW,kBAAkB;IACjC;mFAC+E;IAC/E,OAAO,EAAE,MAAM,CAAC;IAChB,2FAA2F;IAC3F,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,wFAAwF;IACxF,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,mFAAmF;IACnF,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,sDAAsD;IACtD,mBAAmB,EAAE,UAAU,GAAG,cAAc,CAAC;IACjD,KAAK,EAAE,QAAQ,GAAG,KAAK,GAAG,MAAM,CAAC;CAClC;AAED;;;wCAGwC;AACxC,eAAO,MAAM,cAAc,EAAE,SAAS,kBAAkB,EAkB9C,CAAC;AAEX,gGAAgG;AAChG,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,kBAAkB,GAAG,SAAS,CAIhF"}

package/dist/record-catalog.js

@@ -0,0 +1,35 @@
+// The REGISTERED RECORD CATALOG (spec 322 §1) — the one table binding vault resource patterns to
+// their wire type tag, ontology class/shape IRIs, and classification floor. The CATALOG — never the
+// resource string — is the ontology binding: resource strings stay compact opaque locators
+// (packages/vault stays dependency-free), payload tags version (`ap.*.v1`), record names never do.
+// Grammar: `<domain>.<record>` for singleton docs; `<domain>.<record>:<instance>` for keyed
+// families — dot separates name segments; colon appears exactly once, before an instance id.
+import { CLASS, SHAPE } from '@agenticprimitives/ontology';
+/** Interaction-substrate records (spec 322 §1). W3 renames/splits (board.*, message.body
+ *  namespacing, org.profile) are listed as TARGET names; pre-W3 legacy names are marked. There is
+ *  NO data migration — existing interaction data is disposable (product decision 2026-07-10); new
+ *  records start clean at each wave. */
+export const RECORD_CATALOG = [
+    // 1-1 messaging (person AND org inboxes — same doc shape)
+    { pattern: 'inbox.data', typeTag: null, classIri: null, shapeIri: null, classificationFloor: 'internal', owner: 'both' },
+    { pattern: 'message.body:*', typeTag: null, classIri: null, shapeIri: null, classificationFloor: 'confidential', owner: 'both' },
+    // Channel board (org) — pre-W3 legacy single doc, then the split
+    { pattern: 'channels.data', typeTag: null, classIri: CLASS.ChannelBoard, shapeIri: SHAPE.ChannelBoard, classificationFloor: 'internal', owner: 'org' },
+    { pattern: 'conversation.index', typeTag: null, classIri: CLASS.ChannelBoard, shapeIri: SHAPE.ChannelBoard, classificationFloor: 'internal', owner: 'org' },
+    { pattern: 'conversation.topic:*', typeTag: 'ap.conversation.v1', classIri: CLASS.Conversation, shapeIri: SHAPE.Conversation, classificationFloor: 'internal', owner: 'org' },
+    // Membership directory (org)
+    { pattern: 'directory.data', typeTag: 'ap.home.directory-listing.v1', classIri: CLASS.DirectoryListing, shapeIri: SHAPE.DirectoryListing, classificationFloor: 'internal', owner: 'org' },
+    // Person-side authoritative state (spec 322 §1)
+    { pattern: 'relationships.data', typeTag: null, classIri: null, shapeIri: null, classificationFloor: 'confidential', owner: 'person' },
+    { pattern: 'member.profile:*', typeTag: null, classIri: null, shapeIri: null, classificationFloor: 'internal', owner: 'person' },
+    // Capability ledgers (issuance METADATA only — never signed wires; spec 322 §2)
+    { pattern: 'grants.delivery', typeTag: null, classIri: null, shapeIri: null, classificationFloor: 'confidential', owner: 'both' },
+    // Org admin (reachable from NO messaging scope)
+    { pattern: 'org.profile', typeTag: null, classIri: null, shapeIri: null, classificationFloor: 'internal', owner: 'org' },
+    { pattern: 'org.invite:*', typeTag: null, classIri: null, shapeIri: null, classificationFloor: 'confidential', owner: 'org' },
+];
+/** Look up the catalog entry governing a concrete resource name (exact, then prefix family). */
+export function catalogEntryFor(resource) {
+    return RECORD_CATALOG.find((e) => e.pattern === resource || (e.pattern.endsWith('*') && resource.startsWith(e.pattern.slice(0, -1))));
+}
+//# sourceMappingURL=record-catalog.js.map