@agenticprimitives/fabric 0.0.0-alpha.1

package/dist/interactions/types.d.ts

@@ -0,0 +1,160 @@
+import type { CanonicalAgentId } from '@agenticprimitives/types';
+import type { VaultRef } from '@agenticprimitives/vault';
+import type { ContextRefV1, MessageId, SignatureProof, Hex32 } from '../messaging/index.js';
+import type { CaseState } from '../exchange-state.js';
+import type { CaseTransition } from '../case-machine.js';
+export type InteractionId = `int_${string}`;
+export type InteractionRunId = `run_${string}`;
+export type InteractionInterruptId = `irq_${string}`;
+export type InteractionKind = 'access-request' | 'entitlement-request' | 'approval-request' | 'credential-delivery' | 'revocation-notice' | 'ownership-offer' | 'relationship-proposal' | 'support-thread' | 'agent-task';
+export type InteractionState = CaseState;
+/** By-reference pointer at authority produced by the owning packages —
+ *  interactions carries these, it never creates the underlying grant. */
+export interface AuthorityRef {
+    kind: 'delegation' | 'entitlement' | 'verifiable-credential' | 'verification-receipt';
+    /** Hash of the authority artifact (delegation hash, credential hash, …). */
+    hash: Hex32;
+    ref?: VaultRef;
+}
+export interface InteractionCaseV1 {
+    version: 'ap.interaction.v1';
+    id: InteractionId;
+    kind: InteractionKind;
+    subject: string;
+    /** Entities this case is ABOUT (spec 312 §4.3) — parallel to evidenceRefs/
+     *  authorityRefs; an access request about a specific report renders on that
+     *  report's page alongside its messages. About-ness, never authority. */
+    contextRefs?: ContextRefV1[];
+    requester: CanonicalAgentId;
+    responder: CanonicalAgentId;
+    resourceOwner?: CanonicalAgentId;
+    state: InteractionState;
+    createdAt: string;
+    updatedAt: string;
+    expiresAt?: string;
+    rootMessageId: MessageId;
+    latestMessageId: MessageId;
+    evidenceRefs: VaultRef[];
+    authorityRefs: AuthorityRef[];
+}
+export type InteractionTransitionType = CaseTransition;
+/** A signed lifecycle event. Signature VERIFICATION is the runtime's job; the
+ *  state machine checks that the ACTOR holds the required role for the move. */
+export interface InteractionTransitionEventV1 {
+    version: 'ap.interaction.event.v1';
+    interactionId: InteractionId;
+    transition: InteractionTransitionType;
+    actor: CanonicalAgentId;
+    at: string;
+    messageId?: MessageId;
+    reason?: string;
+    /** Replay dedupe (spec 309 §8.10). Same key ⇒ same outcome, applied once. */
+    idempotencyKey?: string;
+    evidenceRef?: VaultRef;
+    authorityRef?: AuthorityRef;
+    signature?: SignatureProof;
+}
+export interface AccessRequestV1 {
+    type: 'ap.interaction.access-request.v1';
+    interactionId: InteractionId;
+    resource: string;
+    actions: string[];
+    fields?: string[];
+    purpose?: string;
+    expiresAt?: string;
+    /** e.g. a mandate/consent receipt backing the ask (W5 wires verification). */
+    evidenceRefs?: AuthorityRef[];
+}
+export interface EntitlementRequestV1 {
+    type: 'ap.interaction.entitlement-request.v1';
+    interactionId: InteractionId;
+    audience: string;
+    resource: string;
+    actions: string[];
+    fields?: string[];
+    purpose?: string;
+    classificationCeiling?: string;
+    expiresAt?: string;
+}
+export interface ApprovalDecisionV1 {
+    type: 'ap.interaction.approval-decision.v1';
+    interactionId: InteractionId;
+    decision: 'approved' | 'denied';
+    decidedBy: CanonicalAgentId;
+    decidedAt: string;
+    reason?: string;
+    /** What the approval produced — issued by the authority packages, referenced here. */
+    resultingAuthority?: AuthorityRef[];
+}
+export interface NeedsInfoV1 {
+    type: 'ap.interaction.needs-info.v1';
+    interactionId: InteractionId;
+    askedBy: CanonicalAgentId;
+    askedAt: string;
+    questions: string[];
+    responseSchemaRef?: string;
+    expiresAt?: string;
+}
+export interface CredentialDeliveryV1 {
+    type: 'ap.interaction.credential-delivery.v1';
+    interactionId: InteractionId;
+    issuer: CanonicalAgentId;
+    subject: CanonicalAgentId;
+    credentialFormat: 'jwt-vc' | 'sd-jwt-vc' | 'w3c-vc';
+    /** Credential lives in the recipient vault; the delivery carries hash + ref. */
+    credentialHash: Hex32;
+    credentialRef?: VaultRef;
+    statusEvidenceRef?: VaultRef;
+}
+export interface RevocationNoticeV1 {
+    type: 'ap.interaction.revocation-notice.v1';
+    interactionId: InteractionId;
+    revokedBy: CanonicalAgentId;
+    revokedAt: string;
+    revokedAuthority: AuthorityRef;
+    reason?: string;
+}
+export type InteractionRunState = 'running' | 'paused' | 'completed' | 'failed';
+export type InteractionRunEventType = 'run-started' | 'message-received' | 'state-snapshot' | 'state-delta' | 'tool-call-requested' | 'approval-required' | 'human-interrupt-raised' | 'agent-interrupt-raised' | 'resume-submitted' | 'credential-issued' | 'run-completed' | 'run-failed';
+export interface InteractionRunV1 {
+    version: 'ap.interaction.run.v1';
+    runId: InteractionRunId;
+    interactionId: InteractionId;
+    state: InteractionRunState;
+    startedAt: string;
+    updatedAt: string;
+    /** Set while paused — the interrupt a resume must answer. */
+    pendingInterruptId?: InteractionInterruptId;
+}
+export interface InteractionRunEventV1 {
+    version: 'ap.interaction.run-event.v1';
+    runId: InteractionRunId;
+    seq: number;
+    eventType: InteractionRunEventType;
+    at: string;
+    payload?: unknown;
+}
+export interface InteractionInterruptV1 {
+    version: 'ap.interaction.interrupt.v1';
+    interruptId: InteractionInterruptId;
+    runId: InteractionRunId;
+    raisedBy: 'human' | 'agent';
+    reason: string;
+    responseSchemaRef?: string;
+    expiresAt?: string;
+    idempotencyKey: string;
+    /** Empty/omitted ⇒ any responder the runtime authenticates may answer. */
+    allowedResponders?: CanonicalAgentId[];
+}
+/** A signed answer to an interrupt. It resumes the run — it never itself
+ *  grants authority (spec 309 §6.2). */
+export interface InteractionResumeV1 {
+    version: 'ap.interaction.resume.v1';
+    interruptId: InteractionInterruptId;
+    responder: CanonicalAgentId;
+    at: string;
+    response?: unknown;
+    idempotencyKey: string;
+    signature?: SignatureProof;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/interactions/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/interactions/types.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAC;AACzD,OAAO,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,cAAc,EAAE,KAAK,EAAE,MAAM,uBAAuB,CAAC;AAC5F,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAEzD,MAAM,MAAM,aAAa,GAAG,OAAO,MAAM,EAAE,CAAC;AAC5C,MAAM,MAAM,gBAAgB,GAAG,OAAO,MAAM,EAAE,CAAC;AAC/C,MAAM,MAAM,sBAAsB,GAAG,OAAO,MAAM,EAAE,CAAC;AAErD,MAAM,MAAM,eAAe,GACvB,gBAAgB,GAChB,qBAAqB,GACrB,kBAAkB,GAClB,qBAAqB,GACrB,mBAAmB,GACnB,iBAAiB,GACjB,uBAAuB,GACvB,gBAAgB,GAChB,YAAY,CAAC;AAIjB,MAAM,MAAM,gBAAgB,GAAG,SAAS,CAAC;AAEzC;yEACyE;AACzE,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,YAAY,GAAG,aAAa,GAAG,uBAAuB,GAAG,sBAAsB,CAAC;IACtF,4EAA4E;IAC5E,IAAI,EAAE,KAAK,CAAC;IACZ,GAAG,CAAC,EAAE,QAAQ,CAAC;CAChB;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,mBAAmB,CAAC;IAC7B,EAAE,EAAE,aAAa,CAAC;IAClB,IAAI,EAAE,eAAe,CAAC;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB;;6EAEyE;IACzE,WAAW,CAAC,EAAE,YAAY,EAAE,CAAC;IAC7B,SAAS,EAAE,gBAAgB,CAAC;IAC5B,SAAS,EAAE,gBAAgB,CAAC;IAC5B,aAAa,CAAC,EAAE,gBAAgB,CAAC;IACjC,KAAK,EAAE,gBAAgB,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,SAAS,CAAC;IACzB,eAAe,EAAE,SAAS,CAAC;IAC3B,YAAY,EAAE,QAAQ,EAAE,CAAC;IACzB,aAAa,EAAE,YAAY,EAAE,CAAC;CAC/B;AAID,MAAM,MAAM,yBAAyB,GAAG,cAAc,CAAC;AAEvD;gFACgF;AAChF,MAAM,WAAW,4BAA4B;IAC3C,OAAO,EAAE,yBAAyB,CAAC;IACnC,aAAa,EAAE,aAAa,CAAC;IAC7B,UAAU,EAAE,yBAAyB,CAAC;IACtC,KAAK,EAAE,gBAAgB,CAAC;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,6EAA6E;IAC7E,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,WAAW,CAAC,EAAE,QAAQ,CAAC;IACvB,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,SAAS,CAAC,EAAE,cAAc,CAAC;CAC5B;AAMD,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,kCAAkC,CAAC;IACzC,aAAa,EAAE,aAAa,CAAC;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,8EAA8E;IAC9E,YAAY,CAAC,EAAE,YAAY,EAAE,CAAC;CAC/B;AAED,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,uCAAuC,CAAC;IAC9C,aAAa,EAAE,aAAa,CAAC;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,qCAAqC,CAAC;IAC5C,aAAa,EAAE,aAAa,CAAC;IAC7B,QAAQ,EAAE,UAAU,GAAG,QAAQ,CAAC;IAChC,SAAS,EAAE,gBAAgB,CAAC;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,sFAAsF;IACtF,kBAAkB,CAAC,EAAE,YAAY,EAAE,CAAC;CACrC;AAED,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,8BAA8B,CAAC;IACrC,aAAa,EAAE,aAAa,CAAC;IAC7B,OAAO,EAAE,gBAAgB,CAAC;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,uCAAuC,CAAC;IAC9C,aAAa,EAAE,aAAa,CAAC;IAC7B,MAAM,EAAE,gBAAgB,CAAC;IACzB,OAAO,EAAE,gBAAgB,CAAC;IAC1B,gBAAgB,EAAE,QAAQ,GAAG,WAAW,GAAG,QAAQ,CAAC;IACpD,gFAAgF;IAChF,cAAc,EAAE,KAAK,CAAC;IACtB,aAAa,CAAC,EAAE,QAAQ,CAAC;IACzB,iBAAiB,CAAC,EAAE,QAAQ,CAAC;CAC9B;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,qCAAqC,CAAC;IAC5C,aAAa,EAAE,aAAa,CAAC;IAC7B,SAAS,EAAE,gBAAgB,CAAC;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,gBAAgB,EAAE,YAAY,CAAC;IAC/B,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAMD,MAAM,MAAM,mBAAmB,GAAG,SAAS,GAAG,QAAQ,GAAG,WAAW,GAAG,QAAQ,CAAC;AAEhF,MAAM,MAAM,uBAAuB,GAC/B,aAAa,GACb,kBAAkB,GAClB,gBAAgB,GAChB,aAAa,GACb,qBAAqB,GACrB,mBAAmB,GACnB,wBAAwB,GACxB,wBAAwB,GACxB,kBAAkB,GAClB,mBAAmB,GACnB,eAAe,GACf,YAAY,CAAC;AAEjB,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,uBAAuB,CAAC;IACjC,KAAK,EAAE,gBAAgB,CAAC;IACxB,aAAa,EAAE,aAAa,CAAC;IAC7B,KAAK,EAAE,mBAAmB,CAAC;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,6DAA6D;IAC7D,kBAAkB,CAAC,EAAE,sBAAsB,CAAC;CAC7C;AAED,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,6BAA6B,CAAC;IACvC,KAAK,EAAE,gBAAgB,CAAC;IACxB,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,uBAAuB,CAAC;IACnC,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,6BAA6B,CAAC;IACvC,WAAW,EAAE,sBAAsB,CAAC;IACpC,KAAK,EAAE,gBAAgB,CAAC;IACxB,QAAQ,EAAE,OAAO,GAAG,OAAO,CAAC;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,0EAA0E;IAC1E,iBAAiB,CAAC,EAAE,gBAAgB,EAAE,CAAC;CACxC;AAED;wCACwC;AACxC,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,0BAA0B,CAAC;IACpC,WAAW,EAAE,sBAAsB,CAAC;IACpC,SAAS,EAAE,gBAAgB,CAAC;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,CAAC,EAAE,cAAc,CAAC;CAC5B"}

package/dist/interactions/types.js

@@ -0,0 +1,7 @@
+// @agenticprimitives/interactions — case, payload, and run types (spec 309 §6).
+//
+// Doctrine: an interaction NEVER mints authority. It references delegation /
+// entitlement / credential artifacts by hash or vault ref (`AuthorityRef`) and
+// tracks the lifecycle around them; verification stays in the owning packages.
+export {};
+//# sourceMappingURL=types.js.map

package/dist/interactions/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/interactions/types.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,EAAE;AACF,6EAA6E;AAC7E,+EAA+E;AAC/E,+EAA+E"}

package/dist/messaging/board.d.ts

@@ -0,0 +1,54 @@
+import type { CanonicalAgentId } from '@agenticprimitives/types';
+import type { ConversationDescriptorV1, MessageEnvelopeV1 } from './types.js';
+export interface ChannelMessageEntryV1 {
+    envelope: MessageEnvelopeV1;
+    authorName: string;
+}
+export interface ChannelV1 {
+    descriptor: ConversationDescriptorV1;
+    title: string;
+    createdBy: string;
+    messages: ChannelMessageEntryV1[];
+    visibility?: 'public' | 'private';
+    /** For a private topic: the member SAs (lowercased 0x) allowed to see/post. The creator is always included. */
+    members?: string[];
+}
+/** Can `viewerSa` (0x) see this topic? Public ⇒ always; private ⇒ only if listed in `members`. `isSteward`
+ *  overrides (a steward manages every topic). One mechanism — used by the store list + the UI. */
+export declare function canSeeChannel(channel: ChannelV1, viewerSa: string, isSteward?: boolean): boolean;
+/** Bounded per-channel history in the board doc (projection only — bodies live in the vault). */
+export declare const BOARD_HISTORY_LIMIT = 200;
+export type BoardResult<T> = {
+    ok: true;
+} & T | {
+    ok: false;
+    error: string;
+};
+/** Create a channel on the board (mutates `board` on success). Title-unique per context.
+ *  `contextId` is the org/context SA (substrate vocabulary — spec 322 §5; the wire literal
+ *  `kind:'community'` is inside signed hashes and renames only at 316's envelope re-cut). */
+export declare function createBoardChannel(board: ChannelV1[], opts: {
+    contextId: string;
+    owner: CanonicalAgentId;
+    title: string;
+    createdBy: string;
+    now?: string;
+    visibility?: 'public' | 'private';
+    members?: string[];
+    creatorSa?: string;
+}): BoardResult<{
+    channel: ChannelV1;
+}>;
+/** Build + append a post to a channel (mutates the channel on success). The envelope's body
+ *  reference points at the board owner's vault (`message.body:<id>`); the CALLER persists the
+ *  body there (hash-bound) and the board doc itself — this stays pure over the doc. */
+export declare function appendBoardPost(board: ChannelV1[], opts: {
+    channelId: string;
+    from: CanonicalAgentId;
+    authorName: string;
+    bodyText: string;
+    now?: string;
+}): Promise<BoardResult<{
+    envelope: MessageEnvelopeV1;
+}>>;
+//# sourceMappingURL=board.d.ts.map

package/dist/messaging/board.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"board.d.ts","sourceRoot":"","sources":["../../src/messaging/board.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAKjE,OAAO,KAAK,EAAE,wBAAwB,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAE9E,MAAM,WAAW,qBAAqB;IACpC,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,SAAS;IACxB,UAAU,EAAE,wBAAwB,CAAC;IACrC,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,qBAAqB,EAAE,CAAC;IAGlC,UAAU,CAAC,EAAE,QAAQ,GAAG,SAAS,CAAC;IAClC,+GAA+G;IAC/G,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;CACpB;AAED;kGACkG;AAClG,wBAAgB,aAAa,CAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,UAAQ,GAAG,OAAO,CAK9F;AAED,iGAAiG;AACjG,eAAO,MAAM,mBAAmB,MAAM,CAAC;AAEvC,MAAM,MAAM,WAAW,CAAC,CAAC,IAAI;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG,CAAC,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAE7E;;6FAE6F;AAC7F,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,SAAS,EAAE,EAClB,IAAI,EAAE;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,gBAAgB,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,QAAQ,GAAG,SAAS,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,GAC9K,WAAW,CAAC;IAAE,OAAO,EAAE,SAAS,CAAA;CAAE,CAAC,CA+BrC;AAED;;uFAEuF;AACvF,wBAAsB,eAAe,CACnC,KAAK,EAAE,SAAS,EAAE,EAClB,IAAI,EAAE;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,gBAAgB,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GACtG,OAAO,CAAC,WAAW,CAAC;IAAE,QAAQ,EAAE,iBAAiB,CAAA;CAAE,CAAC,CAAC,CA8BvD"}

package/dist/messaging/board.js

@@ -0,0 +1,90 @@
+import { generateConversationId, generateMessageId, validateMessageEnvelope } from './envelope.js';
+import { sha256Hex32 } from './hash.js';
+import { validateConversationDescriptor } from './conversation.js';
+import { topicBodyResource } from './vault-store.js';
+/** Can `viewerSa` (0x) see this topic? Public ⇒ always; private ⇒ only if listed in `members`. `isSteward`
+ *  overrides (a steward manages every topic). One mechanism — used by the store list + the UI. */
+export function canSeeChannel(channel, viewerSa, isSteward = false) {
+    if (channel.visibility !== 'private')
+        return true;
+    if (isSteward)
+        return true;
+    const me = viewerSa.toLowerCase();
+    return (channel.members ?? []).some((m) => m.toLowerCase() === me);
+}
+/** Bounded per-channel history in the board doc (projection only — bodies live in the vault). */
+export const BOARD_HISTORY_LIMIT = 200;
+/** Create a channel on the board (mutates `board` on success). Title-unique per context.
+ *  `contextId` is the org/context SA (substrate vocabulary — spec 322 §5; the wire literal
+ *  `kind:'community'` is inside signed hashes and renames only at 316's envelope re-cut). */
+export function createBoardChannel(board, opts) {
+    const title = opts.title.trim();
+    if (!title || title.length > 80)
+        return { ok: false, error: 'title required (≤ 80 chars)' };
+    if (board.some((c) => c.title.toLowerCase() === title.toLowerCase())) {
+        return { ok: false, error: 'a channel with this title already exists' };
+    }
+    const isPrivate = opts.visibility === 'private';
+    const descriptor = {
+        version: 'ap.conversation.v1',
+        id: generateConversationId(),
+        owner: opts.owner,
+        title,
+        participants: [opts.owner],
+        contextRefs: [{ kind: 'community', id: opts.contextId.toLowerCase() }],
+        participantPolicy: 'open-to-context',
+        createdAt: opts.now ?? new Date().toISOString(),
+        // spec 324 §10 — private topics are members-only; public inherit the org's conversation access.
+        ...(isPrivate ? { confidentialityMode: 'members-only' } : {}),
+    };
+    const errors = validateConversationDescriptor(descriptor);
+    if (errors.length > 0)
+        return { ok: false, error: `invalid channel: ${errors.join(', ')}` };
+    // The creator is always a member of a private topic; dedupe + lowercase.
+    const members = isPrivate
+        ? [...new Set([opts.creatorSa?.toLowerCase(), ...(opts.members ?? []).map((m) => m.toLowerCase())].filter((m) => !!m))]
+        : undefined;
+    const channel = {
+        descriptor, title, createdBy: opts.createdBy, messages: [],
+        ...(isPrivate ? { visibility: 'private', members } : {}),
+    };
+    board.push(channel);
+    return { ok: true, channel };
+}
+/** Build + append a post to a channel (mutates the channel on success). The envelope's body
+ *  reference points at the board owner's vault (`message.body:<id>`); the CALLER persists the
+ *  body there (hash-bound) and the board doc itself — this stays pure over the doc. */
+export async function appendBoardPost(board, opts) {
+    const bodyText = opts.bodyText.trim();
+    if (!opts.channelId || !bodyText)
+        return { ok: false, error: 'channelId + bodyText required' };
+    const channel = board.find((c) => c.descriptor.id === opts.channelId);
+    if (!channel)
+        return { ok: false, error: 'unknown channel' };
+    const now = opts.now ?? new Date().toISOString();
+    const messageId = generateMessageId();
+    const envelope = {
+        version: 'ap.message.v1',
+        id: messageId,
+        conversationId: channel.descriptor.id,
+        kind: 'plain',
+        from: opts.from,
+        // Shared-board addressing: the descriptor's owner stands for the board (spec 313 §6).
+        to: [channel.descriptor.owner],
+        createdAt: now,
+        classification: 'internal',
+        body: { resource: topicBodyResource(channel.descriptor.id, messageId), classification: 'internal', updatedAt: now },
+        bodyHash: await sha256Hex32(new TextEncoder().encode(bodyText)),
+        bodyContentType: 'text/plain',
+        contextRefs: channel.descriptor.contextRefs,
+    };
+    const errors = validateMessageEnvelope(envelope);
+    if (errors.length > 0)
+        return { ok: false, error: `invalid post: ${errors.join(', ')}` };
+    channel.messages.push({ envelope, authorName: opts.authorName });
+    if (channel.messages.length > BOARD_HISTORY_LIMIT) {
+        channel.messages.splice(0, channel.messages.length - BOARD_HISTORY_LIMIT);
+    }
+    return { ok: true, envelope };
+}
+//# sourceMappingURL=board.js.map

package/dist/messaging/board.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"board.js","sourceRoot":"","sources":["../../src/messaging/board.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAC;AACnG,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACxC,OAAO,EAAE,8BAA8B,EAAE,MAAM,mBAAmB,CAAC;AACnE,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAoBrD;kGACkG;AAClG,MAAM,UAAU,aAAa,CAAC,OAAkB,EAAE,QAAgB,EAAE,SAAS,GAAG,KAAK;IACnF,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAClD,IAAI,SAAS;QAAE,OAAO,IAAI,CAAC;IAC3B,MAAM,EAAE,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;IAClC,OAAO,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC;AACrE,CAAC;AAED,iGAAiG;AACjG,MAAM,CAAC,MAAM,mBAAmB,GAAG,GAAG,CAAC;AAIvC;;6FAE6F;AAC7F,MAAM,UAAU,kBAAkB,CAChC,KAAkB,EAClB,IAA+K;IAE/K,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;IAChC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,6BAA6B,EAAE,CAAC;IAC5F,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;QACrE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,0CAA0C,EAAE,CAAC;IAC1E,CAAC;IACD,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,KAAK,SAAS,CAAC;IAChD,MAAM,UAAU,GAA6B;QAC3C,OAAO,EAAE,oBAAoB;QAC7B,EAAE,EAAE,sBAAsB,EAAE;QAC5B,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,KAAK;QACL,YAAY,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC;QAC1B,WAAW,EAAE,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,EAAE,CAAC;QACtE,iBAAiB,EAAE,iBAAiB;QACpC,SAAS,EAAE,IAAI,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QAC/C,gGAAgG;QAChG,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,cAAuB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACvE,CAAC;IACF,MAAM,MAAM,GAAG,8BAA8B,CAAC,UAAU,CAAC,CAAC;IAC1D,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,oBAAoB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;IAC5F,yEAAyE;IACzE,MAAM,OAAO,GAAG,SAAS;QACvB,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACpI,CAAC,CAAC,SAAS,CAAC;IACd,MAAM,OAAO,GAAc;QACzB,UAAU,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,QAAQ,EAAE,EAAE;QAC1D,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,SAAkB,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAClE,CAAC;IACF,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACpB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AAC/B,CAAC;AAED;;uFAEuF;AACvF,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,KAAkB,EAClB,IAAuG;IAEvG,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;IACtC,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,+BAA+B,EAAE,CAAC;IAC/F,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,KAAK,IAAI,CAAC,SAAS,CAAC,CAAC;IACtE,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC;IAE7D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACjD,MAAM,SAAS,GAAG,iBAAiB,EAAE,CAAC;IACtC,MAAM,QAAQ,GAAsB;QAClC,OAAO,EAAE,eAAe;QACxB,EAAE,EAAE,SAAS;QACb,cAAc,EAAE,OAAO,CAAC,UAAU,CAAC,EAAE;QACrC,IAAI,EAAE,OAAO;QACb,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,sFAAsF;QACtF,EAAE,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC;QAC9B,SAAS,EAAE,GAAG;QACd,cAAc,EAAE,UAAU;QAC1B,IAAI,EAAE,EAAE,QAAQ,EAAE,iBAAiB,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,CAAC,EAAE,cAAc,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,EAAE;QACnH,QAAQ,EAAE,MAAM,WAAW,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC/D,eAAe,EAAE,YAAY;QAC7B,WAAW,EAAE,OAAO,CAAC,UAAU,CAAC,WAAW;KAC5C,CAAC;IACF,MAAM,MAAM,GAAG,uBAAuB,CAAC,QAAQ,CAAC,CAAC;IACjD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,iBAAiB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;IACzF,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;IACjE,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,GAAG,mBAAmB,EAAE,CAAC;QAClD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,OAAO,CAAC,QAAQ,CAAC,MAAM,GAAG,mBAAmB,CAAC,CAAC;IAC5E,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;AAChC,CAAC"}

package/dist/messaging/conversation.d.ts

@@ -0,0 +1,35 @@
+import type { ConversationDescriptorV1 } from './types.js';
+export type ConversationValidationError = 'bad_version' | 'bad_id' | 'missing_owner' | 'empty_participants' | 'owner_not_participant' | 'bad_participant_policy' | 'bad_created_at' | 'too_many_context_refs' | 'bad_context_ref';
+/** Structural validation, fail-closed. Empty array iff admissible. */
+export declare function validateConversationDescriptor(d: ConversationDescriptorV1): ConversationValidationError[];
+/**
+ * Group inbox items into conversation buckets, newest activity first — the
+ * conversation-first list the synthesis inbox renders (spec 312 §7.1).
+ * Pure over the projection; descriptors (when present) supply titles/anchors.
+ */
+export interface ConversationSummaryV1 {
+    conversationId: ConversationDescriptorV1['id'];
+    messageCount: number;
+    unread: number;
+    lastEventAt: string;
+    /** Union of context refs across the conversation's messages. */
+    contextRefs: {
+        kind: string;
+        id: string;
+        label?: string;
+    }[];
+    /** True when any message in the conversation awaits review (pending folder). */
+    hasPending: boolean;
+}
+export declare function summarizeConversations(items: readonly {
+    conversationId: ConversationDescriptorV1['id'];
+    folder: string;
+    unread: boolean;
+    lastEventAt: string;
+    contextRefs: {
+        kind: string;
+        id: string;
+        label?: string;
+    }[];
+}[]): ConversationSummaryV1[];
+//# sourceMappingURL=conversation.d.ts.map

package/dist/messaging/conversation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"conversation.d.ts","sourceRoot":"","sources":["../../src/messaging/conversation.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,YAAY,CAAC;AAK3D,MAAM,MAAM,2BAA2B,GACnC,aAAa,GACb,QAAQ,GACR,eAAe,GACf,oBAAoB,GACpB,uBAAuB,GACvB,wBAAwB,GACxB,gBAAgB,GAChB,uBAAuB,GACvB,iBAAiB,CAAC;AAQtB,sEAAsE;AACtE,wBAAgB,8BAA8B,CAC5C,CAAC,EAAE,wBAAwB,GAC1B,2BAA2B,EAAE,CAsB/B;AAED;;;;GAIG;AACH,MAAM,WAAW,qBAAqB;IACpC,cAAc,EAAE,wBAAwB,CAAC,IAAI,CAAC,CAAC;IAC/C,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,gEAAgE;IAChE,WAAW,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAC5D,gFAAgF;IAChF,UAAU,EAAE,OAAO,CAAC;CACrB;AAED,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,SAAS;IACd,cAAc,EAAE,wBAAwB,CAAC,IAAI,CAAC,CAAC;IAC/C,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,OAAO,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CAC7D,EAAE,GACF,qBAAqB,EAAE,CAwBzB"}

package/dist/messaging/conversation.js

@@ -0,0 +1,72 @@
+// ConversationDescriptorV1 (spec 312 §4.2) — projection metadata over an
+// opaque ConversationId. A descriptor is a VIEW (title, participants, context
+// anchors, append policy); it never authorizes delivery — admission validates
+// every envelope independently, and each side keeps its own descriptor copy.
+import { MAX_CONTEXT_REFS } from './envelope.js';
+const HEX32_RE = /^0x[0-9a-f]{64}$/;
+const POLICIES = [
+    'fixed',
+    'owner-managed',
+    'open-to-context',
+];
+/** Structural validation, fail-closed. Empty array iff admissible. */
+export function validateConversationDescriptor(d) {
+    const errors = [];
+    if (d.version !== 'ap.conversation.v1')
+        errors.push('bad_version');
+    if (!d.id?.startsWith('conv_'))
+        errors.push('bad_id');
+    if (!d.owner)
+        errors.push('missing_owner');
+    if (!Array.isArray(d.participants) || d.participants.length === 0) {
+        errors.push('empty_participants');
+    }
+    else if (d.owner && !d.participants.some((p) => p.toLowerCase() === d.owner.toLowerCase())) {
+        errors.push('owner_not_participant');
+    }
+    if (!POLICIES.includes(d.participantPolicy))
+        errors.push('bad_participant_policy');
+    if (!d.createdAt || Number.isNaN(Date.parse(d.createdAt)))
+        errors.push('bad_created_at');
+    if (d.contextRefs !== undefined) {
+        if (d.contextRefs.length > MAX_CONTEXT_REFS)
+            errors.push('too_many_context_refs');
+        for (const ref of d.contextRefs) {
+            if (!ref.kind?.trim() || !ref.id?.trim() || (ref.hash !== undefined && !HEX32_RE.test(ref.hash))) {
+                errors.push('bad_context_ref');
+                break;
+            }
+        }
+    }
+    return errors;
+}
+export function summarizeConversations(items) {
+    const byConv = new Map();
+    for (const item of items) {
+        if (item.folder === 'trash')
+            continue;
+        const s = byConv.get(item.conversationId) ?? {
+            conversationId: item.conversationId,
+            messageCount: 0,
+            unread: 0,
+            lastEventAt: item.lastEventAt,
+            contextRefs: [],
+            hasPending: false,
+        };
+        s.messageCount += 1;
+        if (item.unread)
+            s.unread += 1;
+        if (item.lastEventAt > s.lastEventAt)
+            s.lastEventAt = item.lastEventAt;
+        if (item.folder === 'pending')
+            s.hasPending = true;
+        for (const ref of item.contextRefs) {
+            if (!s.contextRefs.some((r) => r.kind === ref.kind && r.id === ref.id)) {
+                s.contextRefs.push({ kind: ref.kind, id: ref.id, label: ref.label });
+            }
+        }
+        byConv.set(item.conversationId, s);
+    }
+    return [...byConv.values()].sort((a, b) => b.lastEventAt.localeCompare(a.lastEventAt));
+}
+//# sourceMappingURL=conversation.js.map

package/dist/messaging/conversation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"conversation.js","sourceRoot":"","sources":["../../src/messaging/conversation.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,8EAA8E;AAC9E,8EAA8E;AAC9E,6EAA6E;AAG7E,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAEjD,MAAM,QAAQ,GAAG,kBAAkB,CAAC;AAapC,MAAM,QAAQ,GAA6D;IACzE,OAAO;IACP,eAAe;IACf,iBAAiB;CAClB,CAAC;AAEF,sEAAsE;AACtE,MAAM,UAAU,8BAA8B,CAC5C,CAA2B;IAE3B,MAAM,MAAM,GAAkC,EAAE,CAAC;IACjD,IAAI,CAAC,CAAC,OAAO,KAAK,oBAAoB;QAAE,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IACnE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,UAAU,CAAC,OAAO,CAAC;QAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACtD,IAAI,CAAC,CAAC,CAAC,KAAK;QAAE,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAC3C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClE,MAAM,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;IACpC,CAAC;SAAM,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;QAC7F,MAAM,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;IACvC,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,iBAAiB,CAAC;QAAE,MAAM,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;IACnF,IAAI,CAAC,CAAC,CAAC,SAAS,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAAE,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IACzF,IAAI,CAAC,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QAChC,IAAI,CAAC,CAAC,WAAW,CAAC,MAAM,GAAG,gBAAgB;YAAE,MAAM,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;QAClF,KAAK,MAAM,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;YAChC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;gBACjG,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;gBAC/B,MAAM;YACR,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAkBD,MAAM,UAAU,sBAAsB,CACpC,KAMG;IAEH,MAAM,MAAM,GAAG,IAAI,GAAG,EAAiC,CAAC;IACxD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO;YAAE,SAAS;QACtC,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI;YAC3C,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,YAAY,EAAE,CAAC;YACf,MAAM,EAAE,CAAC;YACT,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,WAAW,EAAE,EAAE;YACf,UAAU,EAAE,KAAK;SAClB,CAAC;QACF,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC;QACpB,IAAI,IAAI,CAAC,MAAM;YAAE,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC;QAC/B,IAAI,IAAI,CAAC,WAAW,GAAG,CAAC,CAAC,WAAW;YAAE,CAAC,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;QACvE,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;YAAE,CAAC,CAAC,UAAU,GAAG,IAAI,CAAC;QACnD,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACnC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;gBACvE,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;YACvE,CAAC;QACH,CAAC;QACD,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC;IACrC,CAAC;IACD,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC;AACzF,CAAC"}

package/dist/messaging/delivery.d.ts

@@ -0,0 +1,19 @@
+import type { AuditSink } from '@agenticprimitives/audit';
+import type { InboxProjector } from './projector.js';
+import type { MessageEnvelopeV1, MessageEventV1 } from './types.js';
+import type { RuleApplication } from './rules.js';
+export interface AuditedInboxDelivery {
+    /**
+     * Admit an inbound envelope into the recipient's projection. When
+     * `bodyBytes` is provided the body-hash binding is enforced (§8.4); pass the
+     * bytes fetched from the vault whenever the body was transported.
+     */
+    admit(envelope: MessageEnvelopeV1, event: MessageEventV1, bodyBytes?: Uint8Array): Promise<RuleApplication>;
+}
+export declare function createAuditedInboxDelivery(opts: {
+    projector: InboxProjector;
+    audit: AuditSink;
+    /** The admitting agent (recipient / inbox custodian) — audit actor id. */
+    recipient: string;
+}): AuditedInboxDelivery;
+//# sourceMappingURL=delivery.d.ts.map

package/dist/messaging/delivery.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delivery.d.ts","sourceRoot":"","sources":["../../src/messaging/delivery.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAC;AAC1D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AACrD,OAAO,KAAK,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAGpE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAmBlD,MAAM,WAAW,oBAAoB;IACnC;;;;OAIG;IACH,KAAK,CACH,QAAQ,EAAE,iBAAiB,EAC3B,KAAK,EAAE,cAAc,EACrB,SAAS,CAAC,EAAE,UAAU,GACrB,OAAO,CAAC,eAAe,CAAC,CAAC;CAC7B;AAED,wBAAgB,0BAA0B,CAAC,IAAI,EAAE;IAC/C,SAAS,EAAE,cAAc,CAAC;IAC1B,KAAK,EAAE,SAAS,CAAC;IACjB,0EAA0E;IAC1E,SAAS,EAAE,MAAM,CAAC;CACnB,GAAG,oBAAoB,CAiCvB"}

package/dist/messaging/delivery.js

@@ -0,0 +1,56 @@
+// Audited recipient-side admission (spec 309 §7 "direct app↔inbox", §8.4, §8.8).
+//
+// Fail-closed ordering: validate → verify body hash → AUDIT (await) → commit.
+// If the audit write fails the message is NOT admitted (spec 291 discipline for
+// privileged outcomes); rejects are audited as `denied` before throwing.
+import { validateMessageEnvelope } from './envelope.js';
+import { verifyBodyHash } from './hash.js';
+function auditEventBase(envelope, recipient) {
+    return {
+        id: globalThis.crypto.randomUUID(),
+        timestamp: new Date().toISOString(),
+        actor: { type: 'service', id: recipient },
+        subject: { type: 'message', id: envelope.id },
+        // Hashes/ids only — never bodies, subjects, or PII (spec 309 §9).
+        context: {
+            from: envelope.from,
+            kind: envelope.kind,
+            classification: envelope.classification,
+            bodyHash: envelope.bodyHash,
+            conversationId: envelope.conversationId,
+        },
+    };
+}
+export function createAuditedInboxDelivery(opts) {
+    const { projector, audit, recipient } = opts;
+    async function reject(envelope, reason) {
+        await audit.write({
+            ...auditEventBase(envelope, recipient),
+            action: 'messaging.deliver.reject',
+            outcome: 'denied',
+            reason,
+        });
+        throw new Error(`message ${envelope.id} rejected: ${reason}`);
+    }
+    return {
+        async admit(envelope, event, bodyBytes) {
+            const errors = validateMessageEnvelope(envelope);
+            if (errors.length > 0)
+                return reject(envelope, `invalid envelope: ${errors.join(', ')}`);
+            if (event.messageId !== envelope.id)
+                return reject(envelope, 'event/envelope id mismatch');
+            if (bodyBytes !== undefined && !(await verifyBodyHash(envelope, bodyBytes))) {
+                return reject(envelope, 'bodyHash mismatch');
+            }
+            // Audit BEFORE commit — if this write throws, nothing was admitted.
+            await audit.write({
+                ...auditEventBase(envelope, recipient),
+                action: 'messaging.deliver.accept',
+                outcome: 'success',
+            });
+            projector.putMessage(envelope);
+            return projector.appendEvent(event);
+        },
+    };
+}
+//# sourceMappingURL=delivery.js.map

package/dist/messaging/delivery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delivery.js","sourceRoot":"","sources":["../../src/messaging/delivery.ts"],"names":[],"mappings":"AAAA,iFAAiF;AACjF,EAAE;AACF,8EAA8E;AAC9E,gFAAgF;AAChF,yEAAyE;AAKzE,OAAO,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAC;AACxD,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAG3C,SAAS,cAAc,CAAC,QAA2B,EAAE,SAAiB;IACpE,OAAO;QACL,EAAE,EAAE,UAAU,CAAC,MAAM,CAAC,UAAU,EAAE;QAClC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,KAAK,EAAE,EAAE,IAAI,EAAE,SAAkB,EAAE,EAAE,EAAE,SAAS,EAAE;QAClD,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,QAAQ,CAAC,EAAE,EAAE;QAC7C,kEAAkE;QAClE,OAAO,EAAE;YACP,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,cAAc,EAAE,QAAQ,CAAC,cAAc;YACvC,QAAQ,EAAE,QAAQ,CAAC,QAAQ;YAC3B,cAAc,EAAE,QAAQ,CAAC,cAAc;SACxC;KACF,CAAC;AACJ,CAAC;AAeD,MAAM,UAAU,0BAA0B,CAAC,IAK1C;IACC,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC;IAE7C,KAAK,UAAU,MAAM,CAAC,QAA2B,EAAE,MAAc;QAC/D,MAAM,KAAK,CAAC,KAAK,CAAC;YAChB,GAAG,cAAc,CAAC,QAAQ,EAAE,SAAS,CAAC;YACtC,MAAM,EAAE,0BAA0B;YAClC,OAAO,EAAE,QAAQ;YACjB,MAAM;SACP,CAAC,CAAC;QACH,MAAM,IAAI,KAAK,CAAC,WAAW,QAAQ,CAAC,EAAE,cAAc,MAAM,EAAE,CAAC,CAAC;IAChE,CAAC;IAED,OAAO;QACL,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,EAAE,SAAS;YACpC,MAAM,MAAM,GAAG,uBAAuB,CAAC,QAAQ,CAAC,CAAC;YACjD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;gBAAE,OAAO,MAAM,CAAC,QAAQ,EAAE,qBAAqB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACzF,IAAI,KAAK,CAAC,SAAS,KAAK,QAAQ,CAAC,EAAE;gBAAE,OAAO,MAAM,CAAC,QAAQ,EAAE,4BAA4B,CAAC,CAAC;YAC3F,IAAI,SAAS,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,cAAc,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,EAAE,CAAC;gBAC5E,OAAO,MAAM,CAAC,QAAQ,EAAE,mBAAmB,CAAC,CAAC;YAC/C,CAAC;YAED,oEAAoE;YACpE,MAAM,KAAK,CAAC,KAAK,CAAC;gBAChB,GAAG,cAAc,CAAC,QAAQ,EAAE,SAAS,CAAC;gBACtC,MAAM,EAAE,0BAA0B;gBAClC,OAAO,EAAE,SAAS;aACnB,CAAC,CAAC;YAEH,SAAS,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;YAC/B,OAAO,SAAS,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QACtC,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/messaging/directory.d.ts

@@ -0,0 +1,32 @@
+import type { CanonicalAgentId } from '@agenticprimitives/types';
+import type { ContextRefV1, SignatureProof } from './types.js';
+/**
+ * A member's self-signed presence listing in a community context (spec 312 §4.4 / 318 / 322).
+ * The membership source of truth for channel access: current listing + valid spec-321 delegation
+ * ⟹ member. Vault-resident (`directory.data` in the context org's vault at spec-322 W3) — never
+ * on-chain, never the public KB (ADR-0040; the opt-in anchor is a separate attestation).
+ */
+export interface DirectoryListingV1 {
+    type: 'ap.home.directory-listing.v1';
+    /** The person SA publishing themselves (self-published only). */
+    subject: CanonicalAgentId;
+    /** The community context this listing is scoped to (org SA, community id…). */
+    context: ContextRefV1;
+    displayName: string;
+    /** Display-only; not verified role claims. */
+    roles?: string[];
+    /** Where signed envelopes can be delivered (the subject's Home inbox). */
+    inboxEndpoint?: string;
+    visibility: 'community' | 'public';
+    publishedAt: string;
+    expiresAt?: string;
+    proof: SignatureProof;
+}
+export type ListingValidationError = 'bad_type' | 'missing_subject' | 'bad_context' | 'missing_display_name' | 'bad_visibility' | 'bad_published_at' | 'bad_expires_at' | 'missing_proof' | 'proof_not_subject';
+/** Structural validation, fail-closed. The caller MUST additionally verify the
+ *  proof signature against the subject SA (ERC-1271) before indexing AND at gate time
+ *  (spec 322 §4) — a listing no one signed is not a listing. */
+export declare function validateDirectoryListing(l: DirectoryListingV1): ListingValidationError[];
+/** True iff the listing is currently in force. Expired ⇒ not discoverable. */
+export declare function isListingCurrent(l: DirectoryListingV1, atIso: string): boolean;
+//# sourceMappingURL=directory.d.ts.map

package/dist/messaging/directory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"directory.d.ts","sourceRoot":"","sources":["../../src/messaging/directory.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAO,KAAK,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAE/D;;;;;GAKG;AACH,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,8BAA8B,CAAC;IACrC,iEAAiE;IACjE,OAAO,EAAE,gBAAgB,CAAC;IAC1B,+EAA+E;IAC/E,OAAO,EAAE,YAAY,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,8CAA8C;IAC9C,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,0EAA0E;IAC1E,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,WAAW,GAAG,QAAQ,CAAC;IACnC,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,cAAc,CAAC;CACvB;AAED,MAAM,MAAM,sBAAsB,GAC9B,UAAU,GACV,iBAAiB,GACjB,aAAa,GACb,sBAAsB,GACtB,gBAAgB,GAChB,kBAAkB,GAClB,gBAAgB,GAChB,eAAe,GACf,mBAAmB,CAAC;AAExB;;gEAEgE;AAChE,wBAAgB,wBAAwB,CAAC,CAAC,EAAE,kBAAkB,GAAG,sBAAsB,EAAE,CAexF;AAED,8EAA8E;AAC9E,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,kBAAkB,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAI9E"}

package/dist/messaging/directory.js

@@ -0,0 +1,35 @@
+/** Structural validation, fail-closed. The caller MUST additionally verify the
+ *  proof signature against the subject SA (ERC-1271) before indexing AND at gate time
+ *  (spec 322 §4) — a listing no one signed is not a listing. */
+export function validateDirectoryListing(l) {
+    const errors = [];
+    if (l.type !== 'ap.home.directory-listing.v1')
+        errors.push('bad_type');
+    if (!l.subject)
+        errors.push('missing_subject');
+    if (!l.context?.kind?.trim() || !l.context?.id?.trim())
+        errors.push('bad_context');
+    if (!l.displayName?.trim())
+        errors.push('missing_display_name');
+    if (l.visibility !== 'community' && l.visibility !== 'public')
+        errors.push('bad_visibility');
+    if (!l.publishedAt || Number.isNaN(Date.parse(l.publishedAt)))
+        errors.push('bad_published_at');
+    if (l.expiresAt !== undefined && Number.isNaN(Date.parse(l.expiresAt)))
+        errors.push('bad_expires_at');
+    if (!l.proof?.signature)
+        errors.push('missing_proof');
+    else if (l.subject && l.proof.signer.toLowerCase() !== l.subject.toLowerCase()) {
+        // Self-published only: the proof signer IS the subject (ADR-0025).
+        errors.push('proof_not_subject');
+    }
+    return errors;
+}
+/** True iff the listing is currently in force. Expired ⇒ not discoverable. */
+export function isListingCurrent(l, atIso) {
+    const at = Date.parse(atIso);
+    if (Number.isNaN(at) || at < Date.parse(l.publishedAt))
+        return false;
+    return l.expiresAt === undefined || at < Date.parse(l.expiresAt);
+}
+//# sourceMappingURL=directory.js.map

package/dist/messaging/directory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"directory.js","sourceRoot":"","sources":["../../src/messaging/directory.ts"],"names":[],"mappings":"AA8CA;;gEAEgE;AAChE,MAAM,UAAU,wBAAwB,CAAC,CAAqB;IAC5D,MAAM,MAAM,GAA6B,EAAE,CAAC;IAC5C,IAAI,CAAC,CAAC,IAAI,KAAK,8BAA8B;QAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACvE,IAAI,CAAC,CAAC,CAAC,OAAO;QAAE,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAC/C,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE;QAAE,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IACnF,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,IAAI,EAAE;QAAE,MAAM,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IAChE,IAAI,CAAC,CAAC,UAAU,KAAK,WAAW,IAAI,CAAC,CAAC,UAAU,KAAK,QAAQ;QAAE,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAC7F,IAAI,CAAC,CAAC,CAAC,WAAW,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;QAAE,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IAC/F,IAAI,CAAC,CAAC,SAAS,KAAK,SAAS,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAAE,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IACtG,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,SAAS;QAAE,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;SACjD,IAAI,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC;QAC/E,mEAAmE;QACnE,MAAM,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IACnC,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,gBAAgB,CAAC,CAAqB,EAAE,KAAa;IACnE,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC7B,IAAI,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC;QAAE,OAAO,KAAK,CAAC;IACrE,OAAO,CAAC,CAAC,SAAS,KAAK,SAAS,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;AACnE,CAAC"}