@agenticprimitives/fabric 0.0.0-alpha.1

package/dist/inbox-doc.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"inbox-doc.js","sourceRoot":"","sources":["../src/inbox-doc.ts"],"names":[],"mappings":"AAAA,oGAAoG;AACpG,oGAAoG;AACpG,iGAAiG;AACjG,sGAAsG;AACtG,0DAA0D;AAC1D,OAAO,EACL,4BAA4B,GAM7B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,8BAA8B,GAM/B,MAAM,yBAAyB,CAAC;AAkBjC,MAAM,UAAU,cAAc;IAC5B,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;AAC9F,CAAC;AAED,yGAAyG;AACzG,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,GAAG,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAuC,CAAC;IAChG,OAAO,GAAkB,CAAC;AAC5B,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,kBAAkB,CAAC,QAAgB,EAAE,GAAgB;IACnE,MAAM,SAAS,GAAG,4BAA4B,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC7D,KAAK,MAAM,QAAQ,IAAI,GAAG,CAAC,SAAS;QAAE,SAAS,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IACrE,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,MAAM;QAAE,SAAS,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;IAE7D,MAAM,YAAY,GAAG,8BAA8B,EAAE,CAAC;IACtD,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,UAAU;QAAE,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IACxD,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC;QAC/B,MAAM,CAAC,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QACrC,IAAI,CAAC,CAAC,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC,aAAa,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IAC1F,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC;AACrC,CAAC;AAED;;wEAEwE;AACxE,MAAM,UAAU,gBAAgB,CAAC,UAAoC,EAAE,IAAgC;IACrG,IAAI,CAAC,IAAI,EAAE,MAAM;QAAE,OAAO,KAAK,CAAC;IAChC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC,UAAU,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IACrF,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IACjE,IAAI,CAAC,KAAK,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAChC,UAAU,CAAC,WAAW,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,WAAW,IAAI,EAAE,CAAC,EAAE,GAAG,KAAK,CAAC,CAAC;IACvE,OAAO,IAAI,CAAC;AACd,CAAC;AAED;kGACkG;AAClG,MAAM,UAAU,kBAAkB,CAAC,GAAgB,EAAE,UAAoC;IACvF,MAAM,QAAQ,GAAG,GAAG,CAAC,aAAa,IAAI,EAAE,CAAC;IACzC,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,UAAU,CAAC,EAAE,CAAC,CAAC;IAC3D,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,GAAG,CAAC,aAAa,GAAG,CAAC,GAAG,QAAQ,EAAE,UAAU,CAAC,CAAC;QAC9C,OAAO;IACT,CAAC;IACD,gBAAgB,CAAC,KAAK,EAAE,UAAU,CAAC,WAAW,CAAC,CAAC;AAClD,CAAC"}

package/dist/inbox-projection.d.ts

@@ -0,0 +1,15 @@
+import type { InboxItemV1, MessageEnvelopeV1 } from './messaging/index.js';
+import type { ExchangeEventV1 } from './exchange-record.js';
+/** A `kind:'message'` fabric event — the inbox-relevant slice of the stream. */
+export type InboxProjectionEvent = Extract<ExchangeEventV1, {
+    kind: 'message';
+}>;
+/**
+ * Project a `message`-kind fabric event onto the inbox row for its message. Pure; `prev === undefined`
+ * seeds the row from the envelope. Adapts the fabric event to messaging's `MessageEventV1` and delegates to
+ * the absorbed `applyMessageEvent` reducer, so folder/unread semantics stay identical across the absorption.
+ */
+export declare function projectInboxItem(prev: InboxItemV1 | undefined, envelope: MessageEnvelopeV1, event: InboxProjectionEvent): InboxItemV1;
+export { applyMessageEvent, applyInboxRules, createInMemoryInboxProjector } from './messaging/index.js';
+export type { InboxItemV1, InboxRuleV1, InboxProjector, CreateInboxProjectorOpts, FolderKind, } from './messaging/index.js';
+//# sourceMappingURL=inbox-projection.d.ts.map

package/dist/inbox-projection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"inbox-projection.d.ts","sourceRoot":"","sources":["../src/inbox-projection.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,WAAW,EAAE,iBAAiB,EAAkB,MAAM,sBAAsB,CAAC;AAC3F,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAE5D,gFAAgF;AAChF,MAAM,MAAM,oBAAoB,GAAG,OAAO,CAAC,eAAe,EAAE;IAAE,IAAI,EAAE,SAAS,CAAA;CAAE,CAAC,CAAC;AAEjF;;;;GAIG;AACH,wBAAgB,gBAAgB,CAC9B,IAAI,EAAE,WAAW,GAAG,SAAS,EAC7B,QAAQ,EAAE,iBAAiB,EAC3B,KAAK,EAAE,oBAAoB,GAC1B,WAAW,CAUb;AAGD,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,4BAA4B,EAAE,MAAM,sBAAsB,CAAC;AACxG,YAAY,EACV,WAAW,EACX,WAAW,EACX,cAAc,EACd,wBAAwB,EACxB,UAAU,GACX,MAAM,sBAAsB,CAAC"}

package/dist/inbox-projection.js

@@ -0,0 +1,28 @@
+// Inbox projection (spec 316 §b) — the per-message inbox row is a PROJECTION over the fabric event stream,
+// resident in the recipient's vault, maintained by the gateway DO. This absorbs messaging's pure inbox
+// reducer: a `kind:'message'` `ExchangeEventV1` (a read-receipt / lifecycle fact) folds onto an `InboxItemV1`
+// exactly as `applyMessageEvent` does — `delivered` ⇒ unread, `read` ⇒ read, `archived`/`deleted` ⇒ folder,
+// etc. The record reducer (`applyExchangeEvent`) records the event; THIS projects it into the inbox view.
+//
+// (The reducer + projector are absorbed as internal fabric surface; `messaging`'s inbox modules are retired
+// into the fabric in the atomic messaging+interactions absorption step.)
+import { applyMessageEvent } from './messaging/index.js';
+/**
+ * Project a `message`-kind fabric event onto the inbox row for its message. Pure; `prev === undefined`
+ * seeds the row from the envelope. Adapts the fabric event to messaging's `MessageEventV1` and delegates to
+ * the absorbed `applyMessageEvent` reducer, so folder/unread semantics stay identical across the absorption.
+ */
+export function projectInboxItem(prev, envelope, event) {
+    const messageEvent = {
+        version: 'ap.message.event.v1',
+        messageId: event.messageId,
+        actor: event.actor,
+        eventType: event.eventType,
+        at: event.at,
+        evidenceRef: event.evidenceRef,
+    };
+    return applyMessageEvent(prev, envelope, messageEvent);
+}
+// Re-export the pure inbox-projection surface so `fabric` is the one import for inbox views + rules.
+export { applyMessageEvent, applyInboxRules, createInMemoryInboxProjector } from './messaging/index.js';
+//# sourceMappingURL=inbox-projection.js.map

package/dist/inbox-projection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"inbox-projection.js","sourceRoot":"","sources":["../src/inbox-projection.ts"],"names":[],"mappings":"AAAA,2GAA2G;AAC3G,uGAAuG;AACvG,8GAA8G;AAC9G,4GAA4G;AAC5G,0GAA0G;AAC1G,EAAE;AACF,4GAA4G;AAC5G,yEAAyE;AAEzE,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAOzD;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAC9B,IAA6B,EAC7B,QAA2B,EAC3B,KAA2B;IAE3B,MAAM,YAAY,GAAmB;QACnC,OAAO,EAAE,qBAAqB;QAC9B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,EAAE,EAAE,KAAK,CAAC,EAAE;QACZ,WAAW,EAAE,KAAK,CAAC,WAAW;KAC/B,CAAC;IACF,OAAO,iBAAiB,CAAC,IAAI,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;AACzD,CAAC;AAED,qGAAqG;AACrG,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,4BAA4B,EAAE,MAAM,sBAAsB,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,19 @@
+export { canTaskTransition, canExchangeTransition, expectedExecForCase, isExecCaseConsistent, EXEC_CASE_COUPLING, TRANSPORT_SET_EXEC, EXEC_STATES, CASE_STATES, } from './exchange-state.js';
+export type { ExecState, CaseState } from './exchange-state.js';
+export { hashExchangeEnvelope, hashIntentEnvelope, actorOf } from './exchange-record.js';
+export type { ExchangeId, ExchangeEnvelopeV1, IntentEnvelopeV1, ExchangeRecordV1, ExchangeEventV1, ArtifactRef, } from './exchange-record.js';
+export { performativeForKind } from './communicative-act.js';
+export type { Performative, CommunicativeActV1, SemanticContentRef, EvidenceRef, } from './communicative-act.js';
+export { applyCaseTransition, isTerminalCaseState, TERMINAL_CASE_STATES, } from './case-machine.js';
+export type { FabricCaseV1, CaseFsmFields, CaseTransition, CaseTransitionEventV1, CaseResult, CaseRejection, } from './case-machine.js';
+export { applyExchangeEvent, caseViewFromRecord } from './exchange-reducer.js';
+export type { ExchangeApplyResult } from './exchange-reducer.js';
+export { projectInboxItem, applyMessageEvent, applyInboxRules, createInMemoryInboxProjector, } from './inbox-projection.js';
+export type { InboxProjectionEvent, InboxItemV1, InboxRuleV1, InboxProjector, CreateInboxProjectorOpts, FolderKind, } from './inbox-projection.js';
+export { buildGatewaySurfaceCommitment, hashGatewaySurfaceCommitment, verifyGatewaySurfaceCommitment, } from './gateway-surface.js';
+export type { GatewaySurfaceCommitmentV1 } from './gateway-surface.js';
+export { buildDeliveryEnvelope, admitDeliveryEnvelope, deliveryToExchangeRecord, } from './delivery-envelope.js';
+export type { DeliveryEnvelopeV1, DeliveryAdmission } from './delivery-envelope.js';
+export { emptyInboxData, parseInboxData, hydrateInboxStores, mergeContextRefs, upsertConversation, type InboxDataV1, } from './inbox-doc.js';
+export { RECORD_CATALOG, catalogEntryFor, type RecordCatalogEntry } from './record-catalog.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AASA,OAAO,EACL,iBAAiB,EACjB,qBAAqB,EACrB,mBAAmB,EACnB,oBAAoB,EACpB,kBAAkB,EAClB,kBAAkB,EAClB,WAAW,EACX,WAAW,GACZ,MAAM,qBAAqB,CAAC;AAC7B,YAAY,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAGhE,OAAO,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AACzF,YAAY,EACV,UAAU,EACV,kBAAkB,EAClB,gBAAgB,EAChB,gBAAgB,EAChB,eAAe,EACf,WAAW,GACZ,MAAM,sBAAsB,CAAC;AAG9B,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAC7D,YAAY,EACV,YAAY,EACZ,kBAAkB,EAClB,kBAAkB,EAClB,WAAW,GACZ,MAAM,wBAAwB,CAAC;AAGhC,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,oBAAoB,GACrB,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EACV,YAAY,EACZ,aAAa,EACb,cAAc,EACd,qBAAqB,EACrB,UAAU,EACV,aAAa,GACd,MAAM,mBAAmB,CAAC;AAG3B,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC/E,YAAY,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAGjE,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,eAAe,EACf,4BAA4B,GAC7B,MAAM,uBAAuB,CAAC;AAC/B,YAAY,EACV,oBAAoB,EACpB,WAAW,EACX,WAAW,EACX,cAAc,EACd,wBAAwB,EACxB,UAAU,GACX,MAAM,uBAAuB,CAAC;AAG/B,OAAO,EACL,6BAA6B,EAC7B,4BAA4B,EAC5B,8BAA8B,GAC/B,MAAM,sBAAsB,CAAC;AAC9B,YAAY,EAAE,0BAA0B,EAAE,MAAM,sBAAsB,CAAC;AAGvE,OAAO,EACL,qBAAqB,EACrB,qBAAqB,EACrB,wBAAwB,GACzB,MAAM,wBAAwB,CAAC;AAChC,YAAY,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAIpF,OAAO,EACL,cAAc,EACd,cAAc,EACd,kBAAkB,EAClB,gBAAgB,EAChB,kBAAkB,EAClB,KAAK,WAAW,GACjB,MAAM,gBAAgB,CAAC;AAIxB,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,KAAK,kBAAkB,EAAE,MAAM,qBAAqB,CAAC"}

package/dist/index.js

@@ -0,0 +1,30 @@
+// @agenticprimitives/fabric — the Agentic Interaction Fabric (spec 316).
+//
+// The A2A-native substrate that absorbs messaging (envelope/inbox) + interactions (case/run) into one
+// canonical exchange object over a two-level exec/case FSM. Transport-agnostic core; the Cloudflare
+// PrincipalGatewayDO adapter ships from ./cloudflare (added in a later wave).
+//
+// Wave 1 (this slice): the two-level exec/case state machine spine. Envelope + inbox reducers + case
+// payloads are absorbed from messaging/interactions in the subsequent Wave-1 steps.
+export { canTaskTransition, canExchangeTransition, expectedExecForCase, isExecCaseConsistent, EXEC_CASE_COUPLING, TRANSPORT_SET_EXEC, EXEC_STATES, CASE_STATES, } from './exchange-state.js';
+// The canonical exchange object (spec 316 §b) — absorbs the messaging envelope + composes the two-level FSM.
+export { hashExchangeEnvelope, hashIntentEnvelope, actorOf } from './exchange-record.js';
+// Fabric semantic acts (spec 324 §9) — the speech-act layer over the transport envelope. Never authority.
+export { performativeForKind } from './communicative-act.js';
+// The absorbed case (business-substate) machine — interactions FSM re-anchored on the 11-state CaseState.
+export { applyCaseTransition, isTerminalCaseState, TERMINAL_CASE_STATES, } from './case-machine.js';
+// The unified exchange-event reducer (spec 316 §b/§2) — one append-only stream, one reducer over the record.
+export { applyExchangeEvent, caseViewFromRecord } from './exchange-reducer.js';
+// Inbox projection (spec 316 §b) — the vault-resident inbox row projected from the message-event slice.
+export { projectInboxItem, applyMessageEvent, applyInboxRules, createInMemoryInboxProjector, } from './inbox-projection.js';
+// Gateway surface commitment (spec 316 §4.1 / W4 — decentralized discovery; the atl:gatewayRoot preimage).
+export { buildGatewaySurfaceCommitment, hashGatewaySurfaceCommitment, verifyGatewaySurfaceCommitment, } from './gateway-surface.js';
+// Peer delivery envelope (spec 316 §4 / W4 — decentralized p2p delivery + admission).
+export { buildDeliveryEnvelope, admitDeliveryEnvelope, deliveryToExchangeRecord, } from './delivery-envelope.js';
+// The event-sourced inbox document + pure operations (spec 322 W1) — every app renders/mutates the
+// same `inbox.data` record through these; storage and side effects stay with the caller.
+export { emptyInboxData, parseInboxData, hydrateInboxStores, mergeContextRefs, upsertConversation, } from './inbox-doc.js';
+// The registered record catalog (spec 322 §1) — resource pattern → type tag + ontology binding +
+// classification floor. The catalog, never the resource string, carries the semantics.
+export { RECORD_CATALOG, catalogEntryFor } from './record-catalog.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,EAAE;AACF,sGAAsG;AACtG,oGAAoG;AACpG,8EAA8E;AAC9E,EAAE;AACF,qGAAqG;AACrG,oFAAoF;AAEpF,OAAO,EACL,iBAAiB,EACjB,qBAAqB,EACrB,mBAAmB,EACnB,oBAAoB,EACpB,kBAAkB,EAClB,kBAAkB,EAClB,WAAW,EACX,WAAW,GACZ,MAAM,qBAAqB,CAAC;AAG7B,6GAA6G;AAC7G,OAAO,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAUzF,0GAA0G;AAC1G,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAQ7D,0GAA0G;AAC1G,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,oBAAoB,GACrB,MAAM,mBAAmB,CAAC;AAU3B,6GAA6G;AAC7G,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAG/E,wGAAwG;AACxG,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,eAAe,EACf,4BAA4B,GAC7B,MAAM,uBAAuB,CAAC;AAU/B,2GAA2G;AAC3G,OAAO,EACL,6BAA6B,EAC7B,4BAA4B,EAC5B,8BAA8B,GAC/B,MAAM,sBAAsB,CAAC;AAG9B,sFAAsF;AACtF,OAAO,EACL,qBAAqB,EACrB,qBAAqB,EACrB,wBAAwB,GACzB,MAAM,wBAAwB,CAAC;AAGhC,mGAAmG;AACnG,yFAAyF;AACzF,OAAO,EACL,cAAc,EACd,cAAc,EACd,kBAAkB,EAClB,gBAAgB,EAChB,kBAAkB,GAEnB,MAAM,gBAAgB,CAAC;AAExB,iGAAiG;AACjG,uFAAuF;AACvF,OAAO,EAAE,cAAc,EAAE,eAAe,EAA2B,MAAM,qBAAqB,CAAC"}

package/dist/interactions/audited.d.ts

@@ -0,0 +1,12 @@
+import type { AuditSink } from '@agenticprimitives/audit';
+import { type TransitionResult } from './machine.js';
+import type { InteractionStore } from './store.js';
+import type { InteractionTransitionEventV1 } from './types.js';
+export interface AuditedInteractionStore {
+    applyEvent(event: InteractionTransitionEventV1): Promise<TransitionResult>;
+}
+export declare function createAuditedInteractionStore(opts: {
+    store: InteractionStore;
+    audit: AuditSink;
+}): AuditedInteractionStore;
+//# sourceMappingURL=audited.d.ts.map

package/dist/interactions/audited.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audited.d.ts","sourceRoot":"","sources":["../../src/interactions/audited.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAC;AAC1D,OAAO,EAA8B,KAAK,gBAAgB,EAAE,MAAM,cAAc,CAAC;AACjF,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AACnD,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,YAAY,CAAC;AAE/D,MAAM,WAAW,uBAAuB;IACtC,UAAU,CAAC,KAAK,EAAE,4BAA4B,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;CAC5E;AAED,wBAAgB,6BAA6B,CAAC,IAAI,EAAE;IAClD,KAAK,EAAE,gBAAgB,CAAC;IACxB,KAAK,EAAE,SAAS,CAAC;CAClB,GAAG,uBAAuB,CAkE1B"}

package/dist/interactions/audited.js

@@ -0,0 +1,67 @@
+// Audited transition application (spec 309 §8.8): privileged lifecycle
+// outcomes (approve/deny/issue/deliver/revoke…) must leave a durable audit row.
+//
+// Fail-closed ordering: simulate (pure) → AUDIT (await) → commit. If the audit
+// write throws, the transition is NOT committed. Rejections are audited as
+// `denied` — a denial is a security outcome, not an error.
+import { applyInteractionTransition } from './machine.js';
+export function createAuditedInteractionStore(opts) {
+    const { store, audit } = opts;
+    function base(event) {
+        return {
+            id: globalThis.crypto.randomUUID(),
+            timestamp: new Date().toISOString(),
+            actor: { type: 'user', id: event.actor },
+            subject: { type: 'interaction', id: event.interactionId },
+            // Ids/hashes/decisions only — never request bodies or PII (spec 309 §9).
+            context: {
+                transition: event.transition,
+                at: event.at,
+                messageId: event.messageId ?? null,
+                authorityKind: event.authorityRef?.kind ?? null,
+                authorityHash: event.authorityRef?.hash ?? null,
+                idempotencyKey: event.idempotencyKey ?? null,
+            },
+        };
+    }
+    return {
+        async applyEvent(event) {
+            const current = store.getCase(event.interactionId);
+            if (!current) {
+                await audit.write({
+                    ...base(event),
+                    action: 'interactions.transition.reject',
+                    outcome: 'denied',
+                    reason: 'wrong-case',
+                });
+                return { ok: false, reason: 'wrong-case' };
+            }
+            // Idempotent replay is a no-op: no new audit row, no re-application.
+            if (event.idempotencyKey !== undefined &&
+                store.listEvents(event.interactionId).some((e) => e.idempotencyKey === event.idempotencyKey)) {
+                return { ok: true, case: current };
+            }
+            // Pure simulation decides accept/reject BEFORE any side effect.
+            const simulated = applyInteractionTransition(current, event);
+            if (!simulated.ok) {
+                await audit.write({
+                    ...base(event),
+                    action: 'interactions.transition.reject',
+                    outcome: 'denied',
+                    reason: simulated.reason,
+                });
+                return simulated;
+            }
+            // Audit BEFORE commit — a failed write blocks the transition.
+            const accept = base(event);
+            await audit.write({
+                ...accept,
+                action: 'interactions.transition.accept',
+                outcome: 'success',
+                context: { ...accept.context, toState: simulated.case.state },
+            });
+            return store.applyEvent(event);
+        },
+    };
+}
+//# sourceMappingURL=audited.js.map

package/dist/interactions/audited.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audited.js","sourceRoot":"","sources":["../../src/interactions/audited.ts"],"names":[],"mappings":"AAAA,uEAAuE;AACvE,gFAAgF;AAChF,EAAE;AACF,+EAA+E;AAC/E,2EAA2E;AAC3E,2DAA2D;AAG3D,OAAO,EAAE,0BAA0B,EAAyB,MAAM,cAAc,CAAC;AAQjF,MAAM,UAAU,6BAA6B,CAAC,IAG7C;IACC,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC;IAE9B,SAAS,IAAI,CAAC,KAAmC;QAC/C,OAAO;YACL,EAAE,EAAE,UAAU,CAAC,MAAM,CAAC,UAAU,EAAE;YAClC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,KAAK,EAAE,EAAE,IAAI,EAAE,MAAe,EAAE,EAAE,EAAE,KAAK,CAAC,KAAK,EAAE;YACjD,OAAO,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,EAAE,KAAK,CAAC,aAAa,EAAE;YACzD,yEAAyE;YACzE,OAAO,EAAE;gBACP,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,EAAE,EAAE,KAAK,CAAC,EAAE;gBACZ,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,IAAI;gBAClC,aAAa,EAAE,KAAK,CAAC,YAAY,EAAE,IAAI,IAAI,IAAI;gBAC/C,aAAa,EAAE,KAAK,CAAC,YAAY,EAAE,IAAI,IAAI,IAAI;gBAC/C,cAAc,EAAE,KAAK,CAAC,cAAc,IAAI,IAAI;aAC7C;SACF,CAAC;IACJ,CAAC;IAED,OAAO;QACL,KAAK,CAAC,UAAU,CAAC,KAAK;YACpB,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;YACnD,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,KAAK,CAAC,KAAK,CAAC;oBAChB,GAAG,IAAI,CAAC,KAAK,CAAC;oBACd,MAAM,EAAE,gCAAgC;oBACxC,OAAO,EAAE,QAAQ;oBACjB,MAAM,EAAE,YAAY;iBACrB,CAAC,CAAC;gBACH,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;YAC7C,CAAC;YAED,qEAAqE;YACrE,IACE,KAAK,CAAC,cAAc,KAAK,SAAS;gBAClC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,KAAK,KAAK,CAAC,cAAc,CAAC,EAC5F,CAAC;gBACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;YACrC,CAAC;YAED,gEAAgE;YAChE,MAAM,SAAS,GAAG,0BAA0B,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YAC7D,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;gBAClB,MAAM,KAAK,CAAC,KAAK,CAAC;oBAChB,GAAG,IAAI,CAAC,KAAK,CAAC;oBACd,MAAM,EAAE,gCAAgC;oBACxC,OAAO,EAAE,QAAQ;oBACjB,MAAM,EAAE,SAAS,CAAC,MAAM;iBACzB,CAAC,CAAC;gBACH,OAAO,SAAS,CAAC;YACnB,CAAC;YAED,8DAA8D;YAC9D,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;YAC3B,MAAM,KAAK,CAAC,KAAK,CAAC;gBAChB,GAAG,MAAM;gBACT,MAAM,EAAE,gCAAgC;gBACxC,OAAO,EAAE,SAAS;gBAClB,OAAO,EAAE,EAAE,GAAG,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,IAAI,CAAC,KAAK,EAAE;aAC9D,CAAC,CAAC;YAEH,OAAO,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACjC,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/interactions/builders.d.ts

@@ -0,0 +1,24 @@
+import { type Hex32, type MessageId } from '../messaging/index.js';
+import type { CanonicalAgentId } from '@agenticprimitives/types';
+import type { InteractionCaseV1, InteractionId, InteractionInterruptId, InteractionKind, InteractionRunId } from './types.js';
+export declare function generateInteractionId(): InteractionId;
+export declare function generateRunId(): InteractionRunId;
+export declare function generateInterruptId(): InteractionInterruptId;
+export interface CreateInteractionCaseInput {
+    id?: InteractionId;
+    kind: InteractionKind;
+    subject: string;
+    requester: CanonicalAgentId;
+    responder: CanonicalAgentId;
+    resourceOwner?: CanonicalAgentId;
+    rootMessageId: MessageId;
+    createdAt: string;
+    expiresAt?: string;
+}
+/** New cases always start in `draft` — entering the lifecycle requires a
+ *  signed `submit` from the requester (no pre-advanced states). */
+export declare function createInteractionCase(input: CreateInteractionCaseInput): InteractionCaseV1;
+/** Canonical hash of a case snapshot (sorted-key JSON, same convention as
+ *  messaging/verification-receipts) — for receipts, audit rows, and dedupe. */
+export declare function hashInteractionCase(c: InteractionCaseV1): Promise<Hex32>;
+//# sourceMappingURL=builders.d.ts.map

package/dist/interactions/builders.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"builders.d.ts","sourceRoot":"","sources":["../../src/interactions/builders.ts"],"names":[],"mappings":"AAEA,OAAO,EAAoC,KAAK,KAAK,EAAE,KAAK,SAAS,EAAE,MAAM,uBAAuB,CAAC;AACrG,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAO,KAAK,EACV,iBAAiB,EACjB,aAAa,EACb,sBAAsB,EACtB,eAAe,EACf,gBAAgB,EACjB,MAAM,YAAY,CAAC;AAUpB,wBAAgB,qBAAqB,IAAI,aAAa,CAErD;AAED,wBAAgB,aAAa,IAAI,gBAAgB,CAEhD;AAED,wBAAgB,mBAAmB,IAAI,sBAAsB,CAE5D;AAED,MAAM,WAAW,0BAA0B;IACzC,EAAE,CAAC,EAAE,aAAa,CAAC;IACnB,IAAI,EAAE,eAAe,CAAC;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,gBAAgB,CAAC;IAC5B,SAAS,EAAE,gBAAgB,CAAC;IAC5B,aAAa,CAAC,EAAE,gBAAgB,CAAC;IACjC,aAAa,EAAE,SAAS,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;mEACmE;AACnE,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,0BAA0B,GAAG,iBAAiB,CAqB1F;AAED;+EAC+E;AAC/E,wBAAsB,mBAAmB,CAAC,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,KAAK,CAAC,CAE9E"}

package/dist/interactions/builders.js

@@ -0,0 +1,48 @@
+// Case + payload builders and interaction hashing (spec 309 §6).
+import { canonicalizeMessage, sha256Hex32 } from '../messaging/index.js';
+function randomSuffix() {
+    const bytes = new Uint8Array(16);
+    globalThis.crypto.getRandomValues(bytes);
+    return Array.from(bytes)
+        .map((b) => b.toString(16).padStart(2, '0'))
+        .join('');
+}
+export function generateInteractionId() {
+    return `int_${randomSuffix()}`;
+}
+export function generateRunId() {
+    return `run_${randomSuffix()}`;
+}
+export function generateInterruptId() {
+    return `irq_${randomSuffix()}`;
+}
+/** New cases always start in `draft` — entering the lifecycle requires a
+ *  signed `submit` from the requester (no pre-advanced states). */
+export function createInteractionCase(input) {
+    if (input.expiresAt !== undefined && Date.parse(input.expiresAt) <= Date.parse(input.createdAt)) {
+        throw new Error(`interaction expiry ${input.expiresAt} is not after creation ${input.createdAt}`);
+    }
+    return {
+        version: 'ap.interaction.v1',
+        id: input.id ?? generateInteractionId(),
+        kind: input.kind,
+        subject: input.subject,
+        requester: input.requester,
+        responder: input.responder,
+        resourceOwner: input.resourceOwner,
+        state: 'draft',
+        createdAt: input.createdAt,
+        updatedAt: input.createdAt,
+        expiresAt: input.expiresAt,
+        rootMessageId: input.rootMessageId,
+        latestMessageId: input.rootMessageId,
+        evidenceRefs: [],
+        authorityRefs: [],
+    };
+}
+/** Canonical hash of a case snapshot (sorted-key JSON, same convention as
+ *  messaging/verification-receipts) — for receipts, audit rows, and dedupe. */
+export async function hashInteractionCase(c) {
+    return sha256Hex32(canonicalizeMessage(c));
+}
+//# sourceMappingURL=builders.js.map

package/dist/interactions/builders.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"builders.js","sourceRoot":"","sources":["../../src/interactions/builders.ts"],"names":[],"mappings":"AAAA,iEAAiE;AAEjE,OAAO,EAAE,mBAAmB,EAAE,WAAW,EAA8B,MAAM,uBAAuB,CAAC;AAUrG,SAAS,YAAY;IACnB,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;IACjC,UAAU,CAAC,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;IACzC,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC;SACrB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;SAC3C,IAAI,CAAC,EAAE,CAAC,CAAC;AACd,CAAC;AAED,MAAM,UAAU,qBAAqB;IACnC,OAAO,OAAO,YAAY,EAAE,EAAE,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,aAAa;IAC3B,OAAO,OAAO,YAAY,EAAE,EAAE,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,mBAAmB;IACjC,OAAO,OAAO,YAAY,EAAE,EAAE,CAAC;AACjC,CAAC;AAcD;mEACmE;AACnE,MAAM,UAAU,qBAAqB,CAAC,KAAiC;IACrE,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;QAChG,MAAM,IAAI,KAAK,CAAC,sBAAsB,KAAK,CAAC,SAAS,0BAA0B,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;IACpG,CAAC;IACD,OAAO;QACL,OAAO,EAAE,mBAAmB;QAC5B,EAAE,EAAE,KAAK,CAAC,EAAE,IAAI,qBAAqB,EAAE;QACvC,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,KAAK,EAAE,OAAO;QACd,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,eAAe,EAAE,KAAK,CAAC,aAAa;QACpC,YAAY,EAAE,EAAE;QAChB,aAAa,EAAE,EAAE;KAClB,CAAC;AACJ,CAAC;AAED;+EAC+E;AAC/E,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,CAAoB;IAC5D,OAAO,WAAW,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,CAAC;AAC7C,CAAC"}

package/dist/interactions/cards.d.ts

@@ -0,0 +1,32 @@
+import type { VaultRef } from '@agenticprimitives/vault';
+import type { SignatureProof } from '../messaging/index.js';
+import type { InteractionId, InteractionTransitionType } from './types.js';
+export type ActionCardKind = 'access-request' | 'entitlement-request' | 'credential-review' | 'tool-approval' | 'delegation-review' | 'policy-exception' | 'revocation-notice' | 'needs-information';
+/** An action the card offers. It maps to a lifecycle transition — pressing a
+ *  button can only propose a SIGNED transition event; it grants nothing. */
+export interface ActionDescriptorV1 {
+    actionId: string;
+    label: string;
+    transition: InteractionTransitionType;
+    style?: 'primary' | 'secondary' | 'destructive';
+    /** Ref to an input schema when the action needs data (needs-info answers). */
+    inputSchemaRef?: string;
+}
+export interface ActionCardV1 {
+    version: 'ap.interaction.action-card.v1';
+    cardId: string;
+    interactionId: InteractionId;
+    cardKind: ActionCardKind;
+    title: string;
+    summary?: string;
+    /** Vault refs the renderer MAY resolve (recipient-side authorization applies). */
+    dataRefs?: VaultRef[];
+    /** Ref to an ActionRiskMetadataV1 record backing the card's risk display. */
+    riskRef?: string;
+    allowedActions: ActionDescriptorV1[];
+    proposedBy?: SignatureProof;
+}
+export type CardValidationError = 'bad_version' | 'empty_title' | 'no_actions' | 'duplicate_action_id';
+/** Structural gate before a card is stored/forwarded to a renderer. */
+export declare function validateActionCard(card: ActionCardV1): CardValidationError[];
+//# sourceMappingURL=cards.d.ts.map

package/dist/interactions/cards.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cards.d.ts","sourceRoot":"","sources":["../../src/interactions/cards.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAC;AACzD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,KAAK,EAAE,aAAa,EAAE,yBAAyB,EAAE,MAAM,YAAY,CAAC;AAE3E,MAAM,MAAM,cAAc,GACtB,gBAAgB,GAChB,qBAAqB,GACrB,mBAAmB,GACnB,eAAe,GACf,mBAAmB,GACnB,kBAAkB,GAClB,mBAAmB,GACnB,mBAAmB,CAAC;AAExB;4EAC4E;AAC5E,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,yBAAyB,CAAC;IACtC,KAAK,CAAC,EAAE,SAAS,GAAG,WAAW,GAAG,aAAa,CAAC;IAChD,8EAA8E;IAC9E,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,+BAA+B,CAAC;IACzC,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,aAAa,CAAC;IAC7B,QAAQ,EAAE,cAAc,CAAC;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,kFAAkF;IAClF,QAAQ,CAAC,EAAE,QAAQ,EAAE,CAAC;IACtB,6EAA6E;IAC7E,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,kBAAkB,EAAE,CAAC;IACrC,UAAU,CAAC,EAAE,cAAc,CAAC;CAC7B;AAED,MAAM,MAAM,mBAAmB,GAC3B,aAAa,GACb,aAAa,GACb,YAAY,GACZ,qBAAqB,CAAC;AAE1B,uEAAuE;AACvE,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,YAAY,GAAG,mBAAmB,EAAE,CAU5E"}

package/dist/interactions/cards.js

@@ -0,0 +1,20 @@
+// ActionCardV1 — the TRANSPORT half (spec 309 §6.2): a declarative
+// approval/request card the sender PROPOSES. The receiving Home chooses how
+// (and whether) to render it with trusted native components — never arbitrary
+// remote UI. The render/uiProfile half lives in spec 310 (`home`).
+/** Structural gate before a card is stored/forwarded to a renderer. */
+export function validateActionCard(card) {
+    const errors = [];
+    if (card.version !== 'ap.interaction.action-card.v1')
+        errors.push('bad_version');
+    if (!card.title?.trim())
+        errors.push('empty_title');
+    if (!Array.isArray(card.allowedActions) || card.allowedActions.length === 0) {
+        errors.push('no_actions');
+    }
+    else if (new Set(card.allowedActions.map((a) => a.actionId)).size !== card.allowedActions.length) {
+        errors.push('duplicate_action_id');
+    }
+    return errors;
+}
+//# sourceMappingURL=cards.js.map

package/dist/interactions/cards.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cards.js","sourceRoot":"","sources":["../../src/interactions/cards.ts"],"names":[],"mappings":"AAAA,mEAAmE;AACnE,4EAA4E;AAC5E,8EAA8E;AAC9E,mEAAmE;AAgDnE,uEAAuE;AACvE,MAAM,UAAU,kBAAkB,CAAC,IAAkB;IACnD,MAAM,MAAM,GAA0B,EAAE,CAAC;IACzC,IAAI,IAAI,CAAC,OAAO,KAAK,+BAA+B;QAAE,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IACjF,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE;QAAE,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IACpD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,IAAI,CAAC,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5E,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAC5B,CAAC;SAAM,IAAI,IAAI,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,CAAC;QACnG,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;IACrC,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/interactions/index.d.ts

@@ -0,0 +1,15 @@
+export declare const PACKAGE_NAME = "@agenticprimitives/fabric/interactions";
+export declare const PACKAGE_STATUS: "w5-mandates+tickets";
+export declare const SPEC_REF = "specs/309-messaging-and-interactions.md";
+export { type InteractionId, type InteractionRunId, type InteractionInterruptId, type InteractionKind, type InteractionState, type AuthorityRef, type InteractionCaseV1, type InteractionTransitionType, type InteractionTransitionEventV1, type AccessRequestV1, type EntitlementRequestV1, type ApprovalDecisionV1, type NeedsInfoV1, type CredentialDeliveryV1, type RevocationNoticeV1, type InteractionRunState, type InteractionRunEventType, type InteractionRunV1, type InteractionRunEventV1, type InteractionInterruptV1, type InteractionResumeV1, } from './types.js';
+export { TERMINAL_STATES, isTerminalState, type TransitionRejection, type TransitionResult, applyInteractionTransition, } from './machine.js';
+export { generateInteractionId, generateRunId, generateInterruptId, type CreateInteractionCaseInput, createInteractionCase, hashInteractionCase, } from './builders.js';
+export { type RunRejection, type RunStepResult, startRun, raiseInterrupt, applyResume, completeRun, failRun, } from './runs.js';
+export { type InteractionStore, createInMemoryInteractionStore } from './store.js';
+export { type AuditedInteractionStore, createAuditedInteractionStore } from './audited.js';
+export { type MandateResourceScope, type MandateConstraints, type InteractionMandateV1, type MandateCoverageReason, type MandateCoverageResult, checkMandateCoversRequest, type MandateVerificationReason, type MandateVerificationResult, type MandateVerificationPort, precheckMandateSignature, } from './mandates.js';
+export { type PresentationDefinitionRef, type CredentialFormat, type PermissionTicketV1, type ClaimsChallengeV1, type ClaimsPresentationV1, type CreatePermissionTicketInput, createPermissionTicket, isTicketExpired, type ChallengeAnswerReason, type ChallengeAnswerResult, checkPresentationAnswersChallenge, } from './tickets.js';
+export { type DataSensitivity, type ActionRiskMetadataV1, type RiskDisposition, type RiskEvaluationOpts, type RiskEvaluation, evaluateActionRisk, } from './risk.js';
+export { type ActionCardKind, type ActionDescriptorV1, type ActionCardV1, type CardValidationError, validateActionCard, } from './cards.js';
+export { type InteractionExchangeRecordV1, buildExchangeRecord, type RelationshipExchangePort, } from './relationship.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/interactions/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/interactions/index.ts"],"names":[],"mappings":"AAUA,eAAO,MAAM,YAAY,2CAA2C,CAAC;AACrE,eAAO,MAAM,cAAc,EAAG,qBAA8B,CAAC;AAC7D,eAAO,MAAM,QAAQ,4CAA4C,CAAC;AAElE,OAAO,EACL,KAAK,aAAa,EAClB,KAAK,gBAAgB,EACrB,KAAK,sBAAsB,EAC3B,KAAK,eAAe,EACpB,KAAK,gBAAgB,EACrB,KAAK,YAAY,EACjB,KAAK,iBAAiB,EACtB,KAAK,yBAAyB,EAC9B,KAAK,4BAA4B,EACjC,KAAK,eAAe,EACpB,KAAK,oBAAoB,EACzB,KAAK,kBAAkB,EACvB,KAAK,WAAW,EAChB,KAAK,oBAAoB,EACzB,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,EACxB,KAAK,uBAAuB,EAC5B,KAAK,gBAAgB,EACrB,KAAK,qBAAqB,EAC1B,KAAK,sBAAsB,EAC3B,KAAK,mBAAmB,GACzB,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,eAAe,EACf,eAAe,EACf,KAAK,mBAAmB,EACxB,KAAK,gBAAgB,EACrB,0BAA0B,GAC3B,MAAM,cAAc,CAAC;AAEtB,OAAO,EACL,qBAAqB,EACrB,aAAa,EACb,mBAAmB,EACnB,KAAK,0BAA0B,EAC/B,qBAAqB,EACrB,mBAAmB,GACpB,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,KAAK,YAAY,EACjB,KAAK,aAAa,EAClB,QAAQ,EACR,cAAc,EACd,WAAW,EACX,WAAW,EACX,OAAO,GACR,MAAM,WAAW,CAAC;AAEnB,OAAO,EAAE,KAAK,gBAAgB,EAAE,8BAA8B,EAAE,MAAM,YAAY,CAAC;AAEnF,OAAO,EAAE,KAAK,uBAAuB,EAAE,6BAA6B,EAAE,MAAM,cAAc,CAAC;AAE3F,OAAO,EACL,KAAK,oBAAoB,EACzB,KAAK,kBAAkB,EACvB,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,EAC1B,KAAK,qBAAqB,EAC1B,yBAAyB,EACzB,KAAK,yBAAyB,EAC9B,KAAK,yBAAyB,EAC9B,KAAK,uBAAuB,EAC5B,wBAAwB,GACzB,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,KAAK,yBAAyB,EAC9B,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,EACvB,KAAK,iBAAiB,EACtB,KAAK,oBAAoB,EACzB,KAAK,2BAA2B,EAChC,sBAAsB,EACtB,eAAe,EACf,KAAK,qBAAqB,EAC1B,KAAK,qBAAqB,EAC1B,iCAAiC,GAClC,MAAM,cAAc,CAAC;AAEtB,OAAO,EACL,KAAK,eAAe,EACpB,KAAK,oBAAoB,EACzB,KAAK,eAAe,EACpB,KAAK,kBAAkB,EACvB,KAAK,cAAc,EACnB,kBAAkB,GACnB,MAAM,WAAW,CAAC;AAEnB,OAAO,EACL,KAAK,cAAc,EACnB,KAAK,kBAAkB,EACvB,KAAK,YAAY,EACjB,KAAK,mBAAmB,EACxB,kBAAkB,GACnB,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,KAAK,2BAA2B,EAChC,mBAAmB,EACnB,KAAK,wBAAwB,GAC9B,MAAM,mBAAmB,CAAC"}

package/dist/interactions/index.js

@@ -0,0 +1,23 @@
+// @agenticprimitives/interactions — typed, signed, resumable request/response/
+// approval/credential-delivery lifecycles over messages (spec 309 part B).
+// W3 slice: InteractionCaseV1 + the fail-closed state machine, typed payloads,
+// run/interrupt/resume primitives, case hashing, and an in-memory store with
+// idempotent replay + deterministic expiry.
+//
+// Doctrine: interactions NEVER mint authority. Approval here is a lifecycle
+// fact; the resulting delegation / entitlement / credential is produced and
+// verified by the owning packages and carried by reference (AuthorityRef).
+export const PACKAGE_NAME = '@agenticprimitives/fabric/interactions';
+export const PACKAGE_STATUS = 'w5-mandates+tickets';
+export const SPEC_REF = 'specs/309-messaging-and-interactions.md';
+export { TERMINAL_STATES, isTerminalState, applyInteractionTransition, } from './machine.js';
+export { generateInteractionId, generateRunId, generateInterruptId, createInteractionCase, hashInteractionCase, } from './builders.js';
+export { startRun, raiseInterrupt, applyResume, completeRun, failRun, } from './runs.js';
+export { createInMemoryInteractionStore } from './store.js';
+export { createAuditedInteractionStore } from './audited.js';
+export { checkMandateCoversRequest, precheckMandateSignature, } from './mandates.js';
+export { createPermissionTicket, isTicketExpired, checkPresentationAnswersChallenge, } from './tickets.js';
+export { evaluateActionRisk, } from './risk.js';
+export { validateActionCard, } from './cards.js';
+export { buildExchangeRecord, } from './relationship.js';
+//# sourceMappingURL=index.js.map

package/dist/interactions/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/interactions/index.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,2EAA2E;AAC3E,+EAA+E;AAC/E,6EAA6E;AAC7E,4CAA4C;AAC5C,EAAE;AACF,4EAA4E;AAC5E,4EAA4E;AAC5E,2EAA2E;AAE3E,MAAM,CAAC,MAAM,YAAY,GAAG,wCAAwC,CAAC;AACrE,MAAM,CAAC,MAAM,cAAc,GAAG,qBAA8B,CAAC;AAC7D,MAAM,CAAC,MAAM,QAAQ,GAAG,yCAAyC,CAAC;AA0BlE,OAAO,EACL,eAAe,EACf,eAAe,EAGf,0BAA0B,GAC3B,MAAM,cAAc,CAAC;AAEtB,OAAO,EACL,qBAAqB,EACrB,aAAa,EACb,mBAAmB,EAEnB,qBAAqB,EACrB,mBAAmB,GACpB,MAAM,eAAe,CAAC;AAEvB,OAAO,EAGL,QAAQ,EACR,cAAc,EACd,WAAW,EACX,WAAW,EACX,OAAO,GACR,MAAM,WAAW,CAAC;AAEnB,OAAO,EAAyB,8BAA8B,EAAE,MAAM,YAAY,CAAC;AAEnF,OAAO,EAAgC,6BAA6B,EAAE,MAAM,cAAc,CAAC;AAE3F,OAAO,EAML,yBAAyB,EAIzB,wBAAwB,GACzB,MAAM,eAAe,CAAC;AAEvB,OAAO,EAOL,sBAAsB,EACtB,eAAe,EAGf,iCAAiC,GAClC,MAAM,cAAc,CAAC;AAEtB,OAAO,EAML,kBAAkB,GACnB,MAAM,WAAW,CAAC;AAEnB,OAAO,EAKL,kBAAkB,GACnB,MAAM,YAAY,CAAC;AAEpB,OAAO,EAEL,mBAAmB,GAEpB,MAAM,mBAAmB,CAAC"}

package/dist/interactions/machine.d.ts

@@ -0,0 +1,19 @@
+import { isTerminalCaseState, type CaseRejection } from '../case-machine.js';
+import type { InteractionCaseV1, InteractionState, InteractionTransitionEventV1 } from './types.js';
+export declare const TERMINAL_STATES: readonly InteractionState[];
+export declare const isTerminalState: typeof isTerminalCaseState;
+export type TransitionRejection = CaseRejection;
+export type TransitionResult = {
+    ok: true;
+    case: InteractionCaseV1;
+} | {
+    ok: false;
+    reason: TransitionRejection;
+};
+/**
+ * Apply a lifecycle event to an interaction case. Adapter over the shared 11-state case machine: maps the
+ * interactions `interactionId` onto the case `caseId` and delegates to `applyCaseTransition`. Pure,
+ * fail-closed, role-checked — unchanged semantics for the surviving transitions.
+ */
+export declare function applyInteractionTransition(current: InteractionCaseV1, event: InteractionTransitionEventV1): TransitionResult;
+//# sourceMappingURL=machine.d.ts.map

package/dist/interactions/machine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"machine.d.ts","sourceRoot":"","sources":["../../src/interactions/machine.ts"],"names":[],"mappings":"AAQA,OAAO,EAEL,mBAAmB,EAEnB,KAAK,aAAa,EACnB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,4BAA4B,EAAE,MAAM,YAAY,CAAC;AAEpG,eAAO,MAAM,eAAe,EAAE,SAAS,gBAAgB,EAAyB,CAAC;AACjF,eAAO,MAAM,eAAe,4BAAsB,CAAC;AAEnD,MAAM,MAAM,mBAAmB,GAAG,aAAa,CAAC;AAChD,MAAM,MAAM,gBAAgB,GACxB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,iBAAiB,CAAA;CAAE,GACrC;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,mBAAmB,CAAA;CAAE,CAAC;AAE/C;;;;GAIG;AACH,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,iBAAiB,EAC1B,KAAK,EAAE,4BAA4B,GAClC,gBAAgB,CAclB"}

package/dist/interactions/machine.js

@@ -0,0 +1,31 @@
+// The interaction state machine — RECONCILED onto the fabric's 11-state case machine (13→11, spec 316 §2).
+// This module no longer defines its own FSM; it ADAPTS the interactions event shape (`interactionId`) onto
+// the shared `applyCaseTransition` and re-exports the machine surface under the interactions names, so the
+// absorbed stores (`store.ts`/`audited.ts`) — which are transition-agnostic — keep working unchanged.
+//
+// `delivered`/`seen` are gone (inbox facts); `admit`/`view` are gone (inbox message events). The
+// happy-path re-anchors on `submitted`/`triaged` (see `../case-machine.ts`).
+import { applyCaseTransition, isTerminalCaseState, TERMINAL_CASE_STATES, } from '../case-machine.js';
+export const TERMINAL_STATES = TERMINAL_CASE_STATES;
+export const isTerminalState = isTerminalCaseState;
+/**
+ * Apply a lifecycle event to an interaction case. Adapter over the shared 11-state case machine: maps the
+ * interactions `interactionId` onto the case `caseId` and delegates to `applyCaseTransition`. Pure,
+ * fail-closed, role-checked — unchanged semantics for the surviving transitions.
+ */
+export function applyInteractionTransition(current, event) {
+    return applyCaseTransition(current, {
+        version: 'ap.case.event.v1',
+        caseId: event.interactionId,
+        transition: event.transition,
+        actor: event.actor,
+        at: event.at,
+        messageId: event.messageId,
+        reason: event.reason,
+        idempotencyKey: event.idempotencyKey,
+        evidenceRef: event.evidenceRef,
+        authorityRef: event.authorityRef,
+        signature: event.signature,
+    });
+}
+//# sourceMappingURL=machine.js.map

package/dist/interactions/machine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"machine.js","sourceRoot":"","sources":["../../src/interactions/machine.ts"],"names":[],"mappings":"AAAA,2GAA2G;AAC3G,2GAA2G;AAC3G,2GAA2G;AAC3G,sGAAsG;AACtG,EAAE;AACF,iGAAiG;AACjG,6EAA6E;AAE7E,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,oBAAoB,GAErB,MAAM,oBAAoB,CAAC;AAG5B,MAAM,CAAC,MAAM,eAAe,GAAgC,oBAAoB,CAAC;AACjF,MAAM,CAAC,MAAM,eAAe,GAAG,mBAAmB,CAAC;AAOnD;;;;GAIG;AACH,MAAM,UAAU,0BAA0B,CACxC,OAA0B,EAC1B,KAAmC;IAEnC,OAAO,mBAAmB,CAAC,OAAO,EAAE;QAClC,OAAO,EAAE,kBAAkB;QAC3B,MAAM,EAAE,KAAK,CAAC,aAAa;QAC3B,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,EAAE,EAAE,KAAK,CAAC,EAAE;QACZ,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,SAAS,EAAE,KAAK,CAAC,SAAS;KAC3B,CAAC,CAAC;AACL,CAAC"}

package/dist/interactions/mandates.d.ts

@@ -0,0 +1,64 @@
+import type { CanonicalAgentId } from '@agenticprimitives/types';
+import type { Hex32, SignatureProof } from '../messaging/index.js';
+import type { AccessRequestV1, AuthorityRef } from './types.js';
+export interface MandateResourceScope {
+    resource: string;
+    fields?: string[];
+    purpose?: string;
+}
+export interface MandateConstraints {
+    expiresAt?: string;
+    approvalRequired?: boolean;
+    onwardSharingAllowed?: boolean;
+    maxDataSensitivity?: string;
+}
+export interface InteractionMandateV1 {
+    version: 'ap.interaction.mandate.v1';
+    mandateId: string;
+    /** Whose intent this is (the delegator of the underlying token). */
+    principal: CanonicalAgentId;
+    /** The agent authorized to ASK (the delegate of the underlying token). */
+    actingAgent: CanonicalAgentId;
+    relyingApp?: string;
+    allowedActions: string[];
+    resourceScope: MandateResourceScope;
+    constraints: MandateConstraints;
+    /** The delegation token that IS the authority — referenced, never embedded. */
+    delegationHash: Hex32;
+    /** Verification-receipt of the consent ceremony (spec 303). */
+    consentReceipt?: AuthorityRef;
+    signature?: SignatureProof;
+}
+export type MandateCoverageReason = 'covered' | 'wrong-acting-agent' | 'action-not-allowed' | 'resource-mismatch' | 'field-outside-scope' | 'purpose-mismatch' | 'mandate-expired';
+export interface MandateCoverageResult {
+    covered: boolean;
+    reason: MandateCoverageReason;
+}
+/**
+ * Pure, fail-closed scope check: does this mandate's DECLARED scope cover the
+ * request? A `covered` result is necessary but NOT sufficient — callers must
+ * also verify the mandate (signature + underlying delegation + receipt) via
+ * `MandateVerificationPort` before treating it as backing authority.
+ */
+export declare function checkMandateCoversRequest(mandate: InteractionMandateV1, request: Pick<AccessRequestV1, 'resource' | 'actions' | 'fields' | 'purpose'>, requestedBy: CanonicalAgentId, atIso: string): MandateCoverageResult;
+export type MandateVerificationReason = 'verified' | 'unsigned-mandate' | 'signer-not-principal' | 'delegation-invalid' | 'delegation-revoked' | 'receipt-invalid';
+export interface MandateVerificationResult {
+    verified: boolean;
+    reason: MandateVerificationReason;
+}
+/**
+ * Port for the checks this package must NOT re-implement (ADR-0013 — one
+ * mechanism): delegation validity/revocation lives in `delegation` +
+ * chain-state; receipt verification lives in `verification-receipts`.
+ * Consumers wire those packages behind this port.
+ */
+export interface MandateVerificationPort {
+    verifyMandate(mandate: InteractionMandateV1): Promise<MandateVerificationResult>;
+}
+/**
+ * Structural pre-check consumers run BEFORE the port: an unsigned mandate, or
+ * one whose signer is not the principal, is advisory — never authorization
+ * (spec 309 §8.11). Fail-closed.
+ */
+export declare function precheckMandateSignature(mandate: InteractionMandateV1): MandateVerificationResult;
+//# sourceMappingURL=mandates.d.ts.map

package/dist/interactions/mandates.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mandates.d.ts","sourceRoot":"","sources":["../../src/interactions/mandates.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAO,KAAK,EAAE,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACnE,OAAO,KAAK,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAEhE,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,kBAAkB;IACjC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,2BAA2B,CAAC;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,oEAAoE;IACpE,SAAS,EAAE,gBAAgB,CAAC;IAC5B,0EAA0E;IAC1E,WAAW,EAAE,gBAAgB,CAAC;IAC9B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,aAAa,EAAE,oBAAoB,CAAC;IACpC,WAAW,EAAE,kBAAkB,CAAC;IAChC,+EAA+E;IAC/E,cAAc,EAAE,KAAK,CAAC;IACtB,+DAA+D;IAC/D,cAAc,CAAC,EAAE,YAAY,CAAC;IAC9B,SAAS,CAAC,EAAE,cAAc,CAAC;CAC5B;AAED,MAAM,MAAM,qBAAqB,GAC7B,SAAS,GACT,oBAAoB,GACpB,oBAAoB,GACpB,mBAAmB,GACnB,qBAAqB,GACrB,kBAAkB,GAClB,iBAAiB,CAAC;AAEtB,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,qBAAqB,CAAC;CAC/B;AAED;;;;;GAKG;AACH,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,oBAAoB,EAC7B,OAAO,EAAE,IAAI,CAAC,eAAe,EAAE,UAAU,GAAG,SAAS,GAAG,QAAQ,GAAG,SAAS,CAAC,EAC7E,WAAW,EAAE,gBAAgB,EAC7B,KAAK,EAAE,MAAM,GACZ,qBAAqB,CAmCvB;AAED,MAAM,MAAM,yBAAyB,GACjC,UAAU,GACV,kBAAkB,GAClB,sBAAsB,GACtB,oBAAoB,GACpB,oBAAoB,GACpB,iBAAiB,CAAC;AAEtB,MAAM,WAAW,yBAAyB;IACxC,QAAQ,EAAE,OAAO,CAAC;IAClB,MAAM,EAAE,yBAAyB,CAAC;CACnC;AAED;;;;;GAKG;AACH,MAAM,WAAW,uBAAuB;IACtC,aAAa,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,yBAAyB,CAAC,CAAC;CAClF;AAED;;;;GAIG;AACH,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,oBAAoB,GAAG,yBAAyB,CAMjG"}

package/dist/interactions/mandates.js

@@ -0,0 +1,62 @@
+// InteractionMandateV1 (spec 309 §6.2) — a signed statement of PRINCIPAL
+// intent: "agent X may request resource R for purpose P under constraints C
+// until T", generalized from AP2's signed-mandate idea.
+//
+// Doctrine mapping: the AUTHORITY behind a mandate is a `delegation` token
+// (spec 202/270) referenced by hash, plus a `verification-receipt` of the
+// consent ceremony (spec 303). This package carries the references and does
+// the pure SCOPE-COVERAGE check; verifying the delegation signature/revocation
+// and the receipt is the injected verifier's job (spec 309 §8.11: an unsigned
+// or unverified mandate is advisory metadata, never an authorization).
+/**
+ * Pure, fail-closed scope check: does this mandate's DECLARED scope cover the
+ * request? A `covered` result is necessary but NOT sufficient — callers must
+ * also verify the mandate (signature + underlying delegation + receipt) via
+ * `MandateVerificationPort` before treating it as backing authority.
+ */
+export function checkMandateCoversRequest(mandate, request, requestedBy, atIso) {
+    if (requestedBy !== mandate.actingAgent) {
+        return { covered: false, reason: 'wrong-acting-agent' };
+    }
+    if (mandate.constraints.expiresAt !== undefined &&
+        Date.parse(atIso) >= Date.parse(mandate.constraints.expiresAt)) {
+        return { covered: false, reason: 'mandate-expired' };
+    }
+    if (!request.actions.every((a) => mandate.allowedActions.includes(a))) {
+        return { covered: false, reason: 'action-not-allowed' };
+    }
+    if (request.resource !== mandate.resourceScope.resource) {
+        return { covered: false, reason: 'resource-mismatch' };
+    }
+    // A field-scoped mandate denies any requested field outside its grant; an
+    // unscoped mandate covers all fields (entitlements-package convention).
+    if (mandate.resourceScope.fields !== undefined) {
+        const granted = mandate.resourceScope.fields;
+        if ((request.fields ?? []).some((f) => !granted.includes(f))) {
+            return { covered: false, reason: 'field-outside-scope' };
+        }
+        if (request.fields === undefined) {
+            // Unscoped request against a field-scoped mandate asks for everything.
+            return { covered: false, reason: 'field-outside-scope' };
+        }
+    }
+    if (mandate.resourceScope.purpose !== undefined &&
+        request.purpose !== mandate.resourceScope.purpose) {
+        return { covered: false, reason: 'purpose-mismatch' };
+    }
+    return { covered: true, reason: 'covered' };
+}
+/**
+ * Structural pre-check consumers run BEFORE the port: an unsigned mandate, or
+ * one whose signer is not the principal, is advisory — never authorization
+ * (spec 309 §8.11). Fail-closed.
+ */
+export function precheckMandateSignature(mandate) {
+    if (mandate.signature === undefined)
+        return { verified: false, reason: 'unsigned-mandate' };
+    if (mandate.signature.signer !== mandate.principal) {
+        return { verified: false, reason: 'signer-not-principal' };
+    }
+    return { verified: true, reason: 'verified' };
+}
+//# sourceMappingURL=mandates.js.map