@agenticprimitives/home 0.0.0-alpha.1

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Agentic Trust Labs
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,62 @@
+# @agenticprimitives/home
+
+Portable **Agentic Trust Home** contracts ([spec 310](../../specs/310-agentic-trust-home-control-plane-and-inbox.md)):
+the schemas, fail-closed validators, and deterministic projections behind a personal/org
+trust control plane — the place an agent's owner reviews everything acting in their name.
+
+A Home serves five surfaces: **identity entry**, **connected apps**, **managed agents**,
+**authority review**, and the **agentic inbox**. This package defines what a Home *publishes
+and renders*; it contains no routes, UI, branding, or deployment specifics (ADR-0021). The
+reference Home app is `demo-sso-next` (spec 234).
+
+Two doctrine points shape everything here:
+
+- **A Home is a facet, not the identity** (ADR-0010/0011). The Smart Agent address never
+  changes when a Home is added, rotated, or deprecated.
+- **A Home renders authority, never mints it.** Approve/deny/issue/revoke route through
+  `delegation`/`entitlements`/custody packages; this package only carries `AuthorityRef`
+  pointers at their artifacts.
+
+## Surface
+
+| Export | What it is |
+| --- | --- |
+| `HomeManifestV1` | Signed, portable discovery document: endpoints, surfaces, capabilities, inbox binding, validity window |
+| `validateHomeManifest` / `isManifestCurrent` | Fail-closed structural + currency gates; unsigned/expired/suspended ⇒ not trusted |
+| `ManifestVerificationPort` | Port for cryptographic proof verification (SA / operator-under-delegation) — wired by the consumer |
+| `HomeInboxBindingV1` | ActivityPub-shaped inbox/outbox declaration: supported message/interaction kinds, crypto + delivery profiles |
+| `HomeActionCardV1` + `validateHomeActionCard` / `resolveCardAction` | Declarative approval card (render half); only declared `allowedActions` resolve — unknown action ⇒ `null` ⇒ reject |
+| `ManagedAgentEntryV1` | "Agents you manage" console row: type, relationship, control grade, status, actions |
+| `ConnectedAppGrantV1` | Connected relying app row; `grantRef` REFERENCES a delegation token |
+| `HomeControlEventV1` | Durable-audit-backed control-plane timeline row |
+| `projectHomeInboxSummary` | Pure deterministic dashboard counts over `messaging` + `interactions` projections |
+
+## Usage
+
+```ts
+import {
+  isManifestCurrent,
+  resolveCardAction,
+  projectHomeInboxSummary,
+} from '@agenticprimitives/home';
+
+// Trust gate before using any Home endpoint (reachable ≠ trusted):
+if (!isManifestCurrent(manifest, new Date().toISOString())) throw new Error('untrusted home');
+const ok = await verificationPort.verifyManifestProof(manifest); // consumer-wired crypto
+
+// Card response handling — unknown actions are rejections, never defaults:
+const action = resolveCardAction(card, submittedActionId);
+if (!action) return reject('action_not_allowed');
+// action.transition feeds the interactions state machine; it grants nothing.
+
+// Dashboard badge:
+const summary = projectHomeInboxSummary({ items, cases, runs });
+// summary.attentionCount = pending approvals + paused runs
+```
+
+## Boundary
+
+Imports `types`, `vault`, `messaging`, `interactions` (types/refs only). Must not import
+`a2a`, `mcp-runtime`, `agent-account`, Next.js, React, or anything host-specific. Status:
+`w1-contracts` — manifest publication and the inbox/console pages land in the reference app
+(spec 310 W2–W5).

package/dist/index.d.ts

@@ -0,0 +1,7 @@
+export declare const PACKAGE_NAME = "@agenticprimitives/home";
+export declare const PACKAGE_STATUS: "w1-contracts";
+export declare const SPEC_REF = "specs/310-agentic-trust-home-control-plane-and-inbox.md";
+export { type ProofRefV1, type PolicyRefV1, type AuditRefV1, type EndpointRefV1, type StoreRefV1, type AppRefV1, type HomeSurfaceKind, type HomeSurfaceDescriptorV1, type HomeEndpointSetV1, type HomeCapabilityCardV1, type HomeCryptoProfileDescriptorV1, type HomeInboxBindingV1, type HomeManifestV1, type HomeContextV1, type ManagedAgentEntryV1, type ConnectedAppGrantV1, type HomeCardUiProfile, type HomeActionCardKind, type HomeActionDescriptorV1, type HomeActionCardV1, type HomeControlEventV1, } from './types.js';
+export { type ManifestValidationError, validateHomeManifest, isManifestCurrent, type ManifestVerificationPort, type CardValidationError, validateHomeActionCard, resolveCardAction, } from './validate.js';
+export { type HomeInboxSummaryV1, projectHomeInboxSummary } from './projection.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAUA,eAAO,MAAM,YAAY,4BAA4B,CAAC;AACtD,eAAO,MAAM,cAAc,EAAG,cAAuB,CAAC;AACtD,eAAO,MAAM,QAAQ,4DAA4D,CAAC;AAElF,OAAO,EACL,KAAK,UAAU,EACf,KAAK,WAAW,EAChB,KAAK,UAAU,EACf,KAAK,aAAa,EAClB,KAAK,UAAU,EACf,KAAK,QAAQ,EACb,KAAK,eAAe,EACpB,KAAK,uBAAuB,EAC5B,KAAK,iBAAiB,EACtB,KAAK,oBAAoB,EACzB,KAAK,6BAA6B,EAClC,KAAK,kBAAkB,EACvB,KAAK,cAAc,EACnB,KAAK,aAAa,EAClB,KAAK,mBAAmB,EACxB,KAAK,mBAAmB,EACxB,KAAK,iBAAiB,EACtB,KAAK,kBAAkB,EACvB,KAAK,sBAAsB,EAC3B,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,GACxB,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,KAAK,uBAAuB,EAC5B,oBAAoB,EACpB,iBAAiB,EACjB,KAAK,wBAAwB,EAC7B,KAAK,mBAAmB,EACxB,sBAAsB,EACtB,iBAAiB,GAClB,MAAM,eAAe,CAAC;AAEvB,OAAO,EAAE,KAAK,kBAAkB,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC"}

package/dist/index.js

@@ -0,0 +1,15 @@
+// @agenticprimitives/home — portable Agentic Trust Home contracts (spec 310).
+// W1 slice: schemas + fail-closed validators for the manifest, surfaces, inbox
+// binding, action cards (render half), managed-agent/connected-app
+// projections, control-plane events — plus the deterministic inbox summary.
+//
+// Doctrine: a Home is a facet, not the identity (ADR-0010); it renders
+// authority, never mints it; this package contains no routes, UI, branding, or
+// deployment specifics (ADR-0021). Apps (e.g. the reference Home in
+// demo-sso-next, spec 234) own rendering, publication, and storage.
+export const PACKAGE_NAME = '@agenticprimitives/home';
+export const PACKAGE_STATUS = 'w1-contracts';
+export const SPEC_REF = 'specs/310-agentic-trust-home-control-plane-and-inbox.md';
+export { validateHomeManifest, isManifestCurrent, validateHomeActionCard, resolveCardAction, } from './validate.js';
+export { projectHomeInboxSummary } from './projection.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,+EAA+E;AAC/E,mEAAmE;AACnE,4EAA4E;AAC5E,EAAE;AACF,uEAAuE;AACvE,+EAA+E;AAC/E,oEAAoE;AACpE,oEAAoE;AAEpE,MAAM,CAAC,MAAM,YAAY,GAAG,yBAAyB,CAAC;AACtD,MAAM,CAAC,MAAM,cAAc,GAAG,cAAuB,CAAC;AACtD,MAAM,CAAC,MAAM,QAAQ,GAAG,yDAAyD,CAAC;AA0BlF,OAAO,EAEL,oBAAoB,EACpB,iBAAiB,EAGjB,sBAAsB,EACtB,iBAAiB,GAClB,MAAM,eAAe,CAAC;AAEvB,OAAO,EAA2B,uBAAuB,EAAE,MAAM,iBAAiB,CAAC"}

package/dist/projection.d.ts

@@ -0,0 +1,26 @@
+import type { FolderKind, InboxItemV1 } from '@agenticprimitives/fabric/messaging';
+import type { InteractionCaseV1, InteractionRunV1 } from '@agenticprimitives/fabric/interactions';
+export interface HomeInboxSummaryV1 {
+    type: 'ap.home.inbox-summary.v1';
+    /** Unread message count per folder, folders sorted alphabetically. */
+    folders: Array<{
+        folder: FolderKind;
+        total: number;
+        unread: number;
+    }>;
+    unreadTotal: number;
+    /** Cases awaiting this Home's decision (submitted/triaged). */
+    pendingApprovals: number;
+    /** Cases waiting on the REQUESTER to answer (needs-info). */
+    needsInfo: number;
+    /** Runs paused on a human/agent interrupt. */
+    pausedRuns: number;
+    /** Highest-signal single number for a badge: approvals + paused runs. */
+    attentionCount: number;
+}
+export declare function projectHomeInboxSummary(input: {
+    items: readonly InboxItemV1[];
+    cases?: readonly InteractionCaseV1[];
+    runs?: readonly InteractionRunV1[];
+}): HomeInboxSummaryV1;
+//# sourceMappingURL=projection.d.ts.map

package/dist/projection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"projection.d.ts","sourceRoot":"","sources":["../src/projection.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,qCAAqC,CAAC;AACnF,OAAO,KAAK,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,wCAAwC,CAAC;AAOlG,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,0BAA0B,CAAC;IACjC,sEAAsE;IACtE,OAAO,EAAE,KAAK,CAAC;QAAE,MAAM,EAAE,UAAU,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACtE,WAAW,EAAE,MAAM,CAAC;IACpB,+DAA+D;IAC/D,gBAAgB,EAAE,MAAM,CAAC;IACzB,6DAA6D;IAC7D,SAAS,EAAE,MAAM,CAAC;IAClB,8CAA8C;IAC9C,UAAU,EAAE,MAAM,CAAC;IACnB,yEAAyE;IACzE,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,wBAAgB,uBAAuB,CAAC,KAAK,EAAE;IAC7C,KAAK,EAAE,SAAS,WAAW,EAAE,CAAC;IAC9B,KAAK,CAAC,EAAE,SAAS,iBAAiB,EAAE,CAAC;IACrC,IAAI,CAAC,EAAE,SAAS,gBAAgB,EAAE,CAAC;CACpC,GAAG,kBAAkB,CA6BrB"}

package/dist/projection.js

@@ -0,0 +1,37 @@
+// Deterministic Home inbox summary (spec 310 §4): the counts the Home's
+// dashboard renders — unread messages, pending approvals, needs-info, paused
+// runs — computed as a pure function over the `messaging` + `interactions`
+// projections. Same inputs ⇒ same summary, always.
+/** Interaction states awaiting a RESPONDER decision (the Home's review queue). 13→11 reconciliation:
+ *  `delivered`/`seen` are no longer case states (they are inbox `unread` facts) — a case the Home has
+ *  received-but-not-decided is `submitted`; a case it is actively working is `triaged`. */
+const AWAITING_DECISION = ['submitted', 'triaged'];
+export function projectHomeInboxSummary(input) {
+    const byFolder = new Map();
+    let unreadTotal = 0;
+    for (const item of input.items) {
+        const f = byFolder.get(item.folder) ?? { total: 0, unread: 0 };
+        f.total += 1;
+        if (item.unread) {
+            f.unread += 1;
+            unreadTotal += 1;
+        }
+        byFolder.set(item.folder, f);
+    }
+    const cases = input.cases ?? [];
+    const pendingApprovals = cases.filter((c) => AWAITING_DECISION.includes(c.state)).length;
+    const needsInfo = cases.filter((c) => c.state === 'needs-info').length;
+    const pausedRuns = (input.runs ?? []).filter((r) => r.state === 'paused').length;
+    return {
+        type: 'ap.home.inbox-summary.v1',
+        folders: [...byFolder.entries()]
+            .map(([folder, counts]) => ({ folder, ...counts }))
+            .sort((a, b) => a.folder.localeCompare(b.folder)),
+        unreadTotal,
+        pendingApprovals,
+        needsInfo,
+        pausedRuns,
+        attentionCount: pendingApprovals + pausedRuns,
+    };
+}
+//# sourceMappingURL=projection.js.map

package/dist/projection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"projection.js","sourceRoot":"","sources":["../src/projection.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,6EAA6E;AAC7E,2EAA2E;AAC3E,mDAAmD;AAKnD;;2FAE2F;AAC3F,MAAM,iBAAiB,GAA0C,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;AAiB1F,MAAM,UAAU,uBAAuB,CAAC,KAIvC;IACC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAiD,CAAC;IAC1E,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QAC/B,MAAM,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;QAC/D,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;QACb,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC;YACd,WAAW,IAAI,CAAC,CAAC;QACnB,CAAC;QACD,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC/B,CAAC;IAED,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC;IAChC,MAAM,gBAAgB,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;IACzF,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,YAAY,CAAC,CAAC,MAAM,CAAC;IACvE,MAAM,UAAU,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,MAAM,CAAC;IAEjF,OAAO;QACL,IAAI,EAAE,0BAA0B;QAChC,OAAO,EAAE,CAAC,GAAG,QAAQ,CAAC,OAAO,EAAE,CAAC;aAC7B,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;aAClD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QACnD,WAAW;QACX,gBAAgB;QAChB,SAAS;QACT,UAAU;QACV,cAAc,EAAE,gBAAgB,GAAG,UAAU;KAC9C,CAAC;AACJ,CAAC"}

package/dist/types.d.ts

@@ -0,0 +1,145 @@
+import type { CanonicalAgentId } from '@agenticprimitives/types';
+import type { VaultRef } from '@agenticprimitives/vault';
+import type { SignatureProof } from '@agenticprimitives/fabric/messaging';
+import type { AuthorityRef, InteractionTransitionType } from '@agenticprimitives/fabric/interactions';
+/** Signature over the canonical form of a Home artifact. Verification (SA /
+ *  ERC-1271 / operator-under-delegation) is the consumer runtime's job. */
+export type ProofRefV1 = SignatureProof;
+/** Opaque pointer at a policy document (by id/URI) — never embedded. */
+export type PolicyRefV1 = string;
+/** Opaque pointer at an audit row/chain entry backing a control-plane event. */
+export type AuditRefV1 = string;
+/** A reachable surface endpoint (URL or URI template). A surface, not identity. */
+export type EndpointRefV1 = string;
+/** Opaque pointer at a store (vault namespace, projection stream id, …). */
+export type StoreRefV1 = string;
+/** A relying app, by its canonical agent id or registered client id. */
+export type AppRefV1 = string;
+/** The five Home surfaces (spec 310 §2). */
+export type HomeSurfaceKind = 'identity-entry' | 'connected-apps' | 'managed-agents' | 'authority-review' | 'inbox';
+export interface HomeSurfaceDescriptorV1 {
+    surface: HomeSurfaceKind;
+    /** How capable this Home's implementation of the surface is. */
+    level: 'view' | 'act' | 'full';
+    endpoint?: EndpointRefV1;
+}
+export interface HomeEndpointSetV1 {
+    sso?: EndpointRefV1;
+    a2a?: EndpointRefV1;
+    inbox?: EndpointRefV1;
+    outbox?: EndpointRefV1;
+    wellKnown?: EndpointRefV1;
+}
+export interface HomeCapabilityCardV1 {
+    supportedMessageKinds: string[];
+    supportedInteractionKinds: string[];
+    supportedCardProfiles: HomeCardUiProfile[];
+    supportedCredentialFormats?: string[];
+}
+export interface HomeCryptoProfileDescriptorV1 {
+    profile: string;
+    keyRef?: string;
+}
+export interface HomeInboxBindingV1 {
+    owner: CanonicalAgentId;
+    inboxEndpoint?: EndpointRefV1;
+    outboxEndpoint?: EndpointRefV1;
+    messageStoreRef?: StoreRefV1;
+    interactionStoreRef?: StoreRefV1;
+    projectionStoreRef?: StoreRefV1;
+    supportedMessageKinds: string[];
+    supportedInteractionKinds: string[];
+    supportedCryptoProfiles: string[];
+    supportedDeliveryProfiles: string[];
+}
+/**
+ * The signed, portable Home manifest — how any counterparty discovers what
+ * this agent's Home serves. Publication route (well-known / profile / A2A
+ * AgentCard) is the app's choice; the primitive owns only the schema.
+ */
+export interface HomeManifestV1 {
+    type: 'ap.home.manifest.v1';
+    homeId: string;
+    /** The identity this Home is a facet of (ADR-0010). */
+    owner: CanonicalAgentId;
+    /** Who runs the Home, when it differs from the owner. */
+    operator?: CanonicalAgentId;
+    status: 'active' | 'rotating' | 'deprecated' | 'suspended';
+    endpoints: HomeEndpointSetV1;
+    surfaces: HomeSurfaceDescriptorV1[];
+    capabilities: HomeCapabilityCardV1;
+    inbox?: HomeInboxBindingV1;
+    cryptoProfiles?: HomeCryptoProfileDescriptorV1[];
+    policyRefs?: PolicyRefV1[];
+    validFrom: string;
+    validUntil?: string;
+    proof: ProofRefV1;
+}
+/** Which agent context a Home session is operating as (owner may steward many). */
+export interface HomeContextV1 {
+    homeId: string;
+    subject: CanonicalAgentId;
+    activeAgent: CanonicalAgentId;
+    surfaces: HomeSurfaceKind[];
+}
+export interface ManagedAgentEntryV1 {
+    agent: CanonicalAgentId;
+    agentType: 'person' | 'organization' | 'service' | 'treasury' | 'vault' | 'device';
+    relationship: 'self' | 'owned_by_subject' | 'administered_by_subject' | 'delegated_to_subject' | 'represented_by_subject' | 'service_for_subject';
+    controlGrade: 'view' | 'operate' | 'admin' | 'custody' | 'root';
+    status: 'active' | 'pending' | 'disabled' | 'revoked';
+    supportedActions: HomeActionDescriptorV1[];
+}
+/** A connected relying app and the delegation backing it — the grant is a
+ *  REFERENCE to a `delegation` token, never a new authority object. */
+export interface ConnectedAppGrantV1 {
+    app: AppRefV1;
+    grantRef: AuthorityRef;
+    scope: string[];
+    grantedAt: string;
+    expiresAt?: string;
+    status: 'active' | 'expired' | 'revoked';
+}
+export type HomeCardUiProfile = 'agenticprimitives-card-v1' | 'a2ui' | 'open-json-ui' | 'mcp-ui-resource';
+/** Same vocabulary as `interactions`' ActionCardKind (transport half) so a
+ *  received card maps 1:1 onto its render descriptor. */
+export type HomeActionCardKind = 'access-request' | 'entitlement-request' | 'credential-review' | 'tool-approval' | 'delegation-review' | 'policy-exception' | 'revocation-notice' | 'needs-information';
+/** An action a card/agent-entry offers. Pressing it can only PROPOSE a signed
+ *  lifecycle transition — it grants nothing (spec 310 §6.3). */
+export interface HomeActionDescriptorV1 {
+    actionId: string;
+    label: string;
+    transition: InteractionTransitionType;
+    style?: 'primary' | 'secondary' | 'destructive';
+    inputSchemaRef?: string;
+}
+/** The RENDER half of the declarative card (transport half is `interactions`'
+ *  ActionCardV1): the Home chooses trusted native components per `uiProfile` —
+ *  arbitrary remote UI never executes by default (spec 310 §4.1). */
+export interface HomeActionCardV1 {
+    type: 'ap.home.action-card.v1';
+    cardId: string;
+    interactionId: string;
+    messageId?: string;
+    cardKind: HomeActionCardKind;
+    title: string;
+    summary?: string;
+    dataRefs: VaultRef[];
+    /** Ref to a signed ActionRiskMetadataV1 (spec 309) backing the risk display. */
+    risk?: string;
+    allowedActions: HomeActionDescriptorV1[];
+    uiProfile: HomeCardUiProfile;
+    schemaRef?: string;
+    proof: ProofRefV1;
+}
+/** Control-plane audit projection — a durable-audit-backed timeline row. */
+export interface HomeControlEventV1 {
+    type: 'ap.home.control-event.v1';
+    homeId: string;
+    actor: CanonicalAgentId;
+    eventType: 'grant-issued' | 'grant-revoked' | 'agent-added' | 'agent-disabled' | 'credential-issued' | 'credential-received' | 'inbox-decision' | 'home-rotated';
+    at: string;
+    refs: (AuthorityRef | VaultRef)[];
+    auditRef: AuditRefV1;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAC;AACzD,OAAO,KAAK,EAAgB,cAAc,EAAE,MAAM,qCAAqC,CAAC;AACxF,OAAO,KAAK,EAAE,YAAY,EAAE,yBAAyB,EAAE,MAAM,wCAAwC,CAAC;AAEtG;2EAC2E;AAC3E,MAAM,MAAM,UAAU,GAAG,cAAc,CAAC;AAExC,wEAAwE;AACxE,MAAM,MAAM,WAAW,GAAG,MAAM,CAAC;AAEjC,gFAAgF;AAChF,MAAM,MAAM,UAAU,GAAG,MAAM,CAAC;AAEhC,mFAAmF;AACnF,MAAM,MAAM,aAAa,GAAG,MAAM,CAAC;AAEnC,4EAA4E;AAC5E,MAAM,MAAM,UAAU,GAAG,MAAM,CAAC;AAEhC,wEAAwE;AACxE,MAAM,MAAM,QAAQ,GAAG,MAAM,CAAC;AAE9B,4CAA4C;AAC5C,MAAM,MAAM,eAAe,GACvB,gBAAgB,GAChB,gBAAgB,GAChB,gBAAgB,GAChB,kBAAkB,GAClB,OAAO,CAAC;AAEZ,MAAM,WAAW,uBAAuB;IACtC,OAAO,EAAE,eAAe,CAAC;IACzB,gEAAgE;IAChE,KAAK,EAAE,MAAM,GAAG,KAAK,GAAG,MAAM,CAAC;IAC/B,QAAQ,CAAC,EAAE,aAAa,CAAC;CAC1B;AAED,MAAM,WAAW,iBAAiB;IAChC,GAAG,CAAC,EAAE,aAAa,CAAC;IACpB,GAAG,CAAC,EAAE,aAAa,CAAC;IACpB,KAAK,CAAC,EAAE,aAAa,CAAC;IACtB,MAAM,CAAC,EAAE,aAAa,CAAC;IACvB,SAAS,CAAC,EAAE,aAAa,CAAC;CAC3B;AAED,MAAM,WAAW,oBAAoB;IACnC,qBAAqB,EAAE,MAAM,EAAE,CAAC;IAChC,yBAAyB,EAAE,MAAM,EAAE,CAAC;IACpC,qBAAqB,EAAE,iBAAiB,EAAE,CAAC;IAC3C,0BAA0B,CAAC,EAAE,MAAM,EAAE,CAAC;CACvC;AAED,MAAM,WAAW,6BAA6B;IAC5C,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,gBAAgB,CAAC;IACxB,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,cAAc,CAAC,EAAE,aAAa,CAAC;IAC/B,eAAe,CAAC,EAAE,UAAU,CAAC;IAC7B,mBAAmB,CAAC,EAAE,UAAU,CAAC;IACjC,kBAAkB,CAAC,EAAE,UAAU,CAAC;IAChC,qBAAqB,EAAE,MAAM,EAAE,CAAC;IAChC,yBAAyB,EAAE,MAAM,EAAE,CAAC;IACpC,uBAAuB,EAAE,MAAM,EAAE,CAAC;IAClC,yBAAyB,EAAE,MAAM,EAAE,CAAC;CACrC;AAED;;;;GAIG;AACH,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,qBAAqB,CAAC;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,uDAAuD;IACvD,KAAK,EAAE,gBAAgB,CAAC;IACxB,yDAAyD;IACzD,QAAQ,CAAC,EAAE,gBAAgB,CAAC;IAC5B,MAAM,EAAE,QAAQ,GAAG,UAAU,GAAG,YAAY,GAAG,WAAW,CAAC;IAC3D,SAAS,EAAE,iBAAiB,CAAC;IAC7B,QAAQ,EAAE,uBAAuB,EAAE,CAAC;IACpC,YAAY,EAAE,oBAAoB,CAAC;IACnC,KAAK,CAAC,EAAE,kBAAkB,CAAC;IAC3B,cAAc,CAAC,EAAE,6BAA6B,EAAE,CAAC;IACjD,UAAU,CAAC,EAAE,WAAW,EAAE,CAAC;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,UAAU,CAAC;CACnB;AAED,mFAAmF;AACnF,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,gBAAgB,CAAC;IAC1B,WAAW,EAAE,gBAAgB,CAAC;IAC9B,QAAQ,EAAE,eAAe,EAAE,CAAC;CAC7B;AAED,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,gBAAgB,CAAC;IACxB,SAAS,EAAE,QAAQ,GAAG,cAAc,GAAG,SAAS,GAAG,UAAU,GAAG,OAAO,GAAG,QAAQ,CAAC;IACnF,YAAY,EACR,MAAM,GACN,kBAAkB,GAClB,yBAAyB,GACzB,sBAAsB,GACtB,wBAAwB,GACxB,qBAAqB,CAAC;IAC1B,YAAY,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,GAAG,SAAS,GAAG,MAAM,CAAC;IAChE,MAAM,EAAE,QAAQ,GAAG,SAAS,GAAG,UAAU,GAAG,SAAS,CAAC;IACtD,gBAAgB,EAAE,sBAAsB,EAAE,CAAC;CAC5C;AAED;uEACuE;AACvE,MAAM,WAAW,mBAAmB;IAClC,GAAG,EAAE,QAAQ,CAAC;IACd,QAAQ,EAAE,YAAY,CAAC;IACvB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,QAAQ,GAAG,SAAS,GAAG,SAAS,CAAC;CAC1C;AAED,MAAM,MAAM,iBAAiB,GACzB,2BAA2B,GAC3B,MAAM,GACN,cAAc,GACd,iBAAiB,CAAC;AAEtB;yDACyD;AACzD,MAAM,MAAM,kBAAkB,GAC1B,gBAAgB,GAChB,qBAAqB,GACrB,mBAAmB,GACnB,eAAe,GACf,mBAAmB,GACnB,kBAAkB,GAClB,mBAAmB,GACnB,mBAAmB,CAAC;AAExB;gEACgE;AAChE,MAAM,WAAW,sBAAsB;IACrC,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,yBAAyB,CAAC;IACtC,KAAK,CAAC,EAAE,SAAS,GAAG,WAAW,GAAG,aAAa,CAAC;IAChD,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;qEAEqE;AACrE,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,wBAAwB,CAAC;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,kBAAkB,CAAC;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,QAAQ,EAAE,CAAC;IACrB,gFAAgF;IAChF,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,cAAc,EAAE,sBAAsB,EAAE,CAAC;IACzC,SAAS,EAAE,iBAAiB,CAAC;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,UAAU,CAAC;CACnB;AAED,4EAA4E;AAC5E,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,0BAA0B,CAAC;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,gBAAgB,CAAC;IACxB,SAAS,EACL,cAAc,GACd,eAAe,GACf,aAAa,GACb,gBAAgB,GAChB,mBAAmB,GACnB,qBAAqB,GACrB,gBAAgB,GAChB,cAAc,CAAC;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,CAAC,YAAY,GAAG,QAAQ,CAAC,EAAE,CAAC;IAClC,QAAQ,EAAE,UAAU,CAAC;CACtB"}

package/dist/types.js

@@ -0,0 +1,8 @@
+// @agenticprimitives/home — portable Agentic Trust Home contracts (spec 310 §3).
+//
+// Doctrine: a Home is a FACET of a Smart Agent, never the identity (ADR-0010);
+// it RENDERS authority, never mints it; endpoints are surfaces subject to edge
+// admission (ADR-0043), not authorization. This package is schema + validation
+// + deterministic projection — no routes, no UI, no branding (ADR-0021).
+export {};
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,iFAAiF;AACjF,EAAE;AACF,+EAA+E;AAC/E,+EAA+E;AAC/E,+EAA+E;AAC/E,yEAAyE"}

package/dist/validate.d.ts

@@ -0,0 +1,23 @@
+import type { HomeActionCardV1, HomeManifestV1, HomeActionDescriptorV1 } from './types.js';
+export type ManifestValidationError = 'bad_type' | 'missing_home_id' | 'missing_owner' | 'bad_status' | 'no_surfaces' | 'bad_surface' | 'duplicate_surface' | 'bad_valid_from' | 'bad_valid_until' | 'expires_before_valid_from' | 'missing_proof' | 'proof_signer_not_owner_or_operator';
+/** Structural gate. Empty array ⇔ structurally admissible. */
+export declare function validateHomeManifest(m: HomeManifestV1): ManifestValidationError[];
+/**
+ * Currency gate (spec 310 §6.2): an unsigned, structurally invalid, expired,
+ * not-yet-valid, or suspended manifest is NOT trusted. Fail-closed.
+ */
+export declare function isManifestCurrent(m: HomeManifestV1, atIso: string): boolean;
+/** Port for the check this package must not implement: verify `proof` against
+ *  the owner SA (ERC-1271) or the operator's delegation. Consumers wire it. */
+export interface ManifestVerificationPort {
+    verifyManifestProof(manifest: HomeManifestV1): Promise<boolean>;
+}
+export type CardValidationError = 'bad_type' | 'empty_title' | 'no_actions' | 'duplicate_action_id' | 'missing_proof';
+export declare function validateHomeActionCard(card: HomeActionCardV1): CardValidationError[];
+/**
+ * Allowed-actions enforcement (spec 310 §6.4): a user/agent response to a card
+ * may only invoke an action the card declared. Returns the descriptor or null
+ * — a null MUST be treated as a rejection, never a default action.
+ */
+export declare function resolveCardAction(card: HomeActionCardV1, actionId: string): HomeActionDescriptorV1 | null;
+//# sourceMappingURL=validate.d.ts.map

package/dist/validate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate.d.ts","sourceRoot":"","sources":["../src/validate.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EACV,gBAAgB,EAChB,cAAc,EACd,sBAAsB,EACvB,MAAM,YAAY,CAAC;AAepB,MAAM,MAAM,uBAAuB,GAC/B,UAAU,GACV,iBAAiB,GACjB,eAAe,GACf,YAAY,GACZ,aAAa,GACb,aAAa,GACb,mBAAmB,GACnB,gBAAgB,GAChB,iBAAiB,GACjB,2BAA2B,GAC3B,eAAe,GACf,oCAAoC,CAAC;AAEzC,8DAA8D;AAC9D,wBAAgB,oBAAoB,CAAC,CAAC,EAAE,cAAc,GAAG,uBAAuB,EAAE,CAgCjF;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,cAAc,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAO3E;AAED;+EAC+E;AAC/E,MAAM,WAAW,wBAAwB;IACvC,mBAAmB,CAAC,QAAQ,EAAE,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACjE;AAED,MAAM,MAAM,mBAAmB,GAC3B,UAAU,GACV,aAAa,GACb,YAAY,GACZ,qBAAqB,GACrB,eAAe,CAAC;AAEpB,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,gBAAgB,GAAG,mBAAmB,EAAE,CAapF;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE,gBAAgB,EACtB,QAAQ,EAAE,MAAM,GACf,sBAAsB,GAAG,IAAI,CAE/B"}

package/dist/validate.js

@@ -0,0 +1,94 @@
+// Fail-closed structural validation for Home artifacts (spec 310 §6).
+// Structural only — cryptographic verification of `proof` (owner SA / operator
+// under delegation) is the consumer runtime's job, behind the port below.
+const MANIFEST_STATUSES = ['active', 'rotating', 'deprecated', 'suspended'];
+const SURFACE_KINDS = [
+    'identity-entry',
+    'connected-apps',
+    'managed-agents',
+    'authority-review',
+    'inbox',
+];
+function isIsoDate(s) {
+    return typeof s === 'string' && !Number.isNaN(Date.parse(s));
+}
+/** Structural gate. Empty array ⇔ structurally admissible. */
+export function validateHomeManifest(m) {
+    const errors = [];
+    if (m.type !== 'ap.home.manifest.v1')
+        errors.push('bad_type');
+    if (!m.homeId?.trim())
+        errors.push('missing_home_id');
+    if (!m.owner)
+        errors.push('missing_owner');
+    if (!MANIFEST_STATUSES.includes(m.status))
+        errors.push('bad_status');
+    if (!Array.isArray(m.surfaces) || m.surfaces.length === 0) {
+        errors.push('no_surfaces');
+    }
+    else {
+        if (m.surfaces.some((s) => !SURFACE_KINDS.includes(s.surface)))
+            errors.push('bad_surface');
+        if (new Set(m.surfaces.map((s) => s.surface)).size !== m.surfaces.length) {
+            errors.push('duplicate_surface');
+        }
+    }
+    if (!isIsoDate(m.validFrom))
+        errors.push('bad_valid_from');
+    if (m.validUntil !== undefined) {
+        if (!isIsoDate(m.validUntil))
+            errors.push('bad_valid_until');
+        else if (isIsoDate(m.validFrom) && Date.parse(m.validUntil) <= Date.parse(m.validFrom)) {
+            errors.push('expires_before_valid_from');
+        }
+    }
+    if (!m.proof?.signature) {
+        errors.push('missing_proof');
+    }
+    else if (m.proof.signer !== m.owner && (m.operator === undefined || m.proof.signer !== m.operator)) {
+        // Spec 310 §6.2: signed by the owner SA, or the operator under delegation.
+        errors.push('proof_signer_not_owner_or_operator');
+    }
+    return errors;
+}
+/**
+ * Currency gate (spec 310 §6.2): an unsigned, structurally invalid, expired,
+ * not-yet-valid, or suspended manifest is NOT trusted. Fail-closed.
+ */
+export function isManifestCurrent(m, atIso) {
+    if (validateHomeManifest(m).length > 0)
+        return false;
+    if (m.status === 'suspended' || m.status === 'deprecated')
+        return false;
+    const at = Date.parse(atIso);
+    if (at < Date.parse(m.validFrom))
+        return false;
+    if (m.validUntil !== undefined && at >= Date.parse(m.validUntil))
+        return false;
+    return true;
+}
+export function validateHomeActionCard(card) {
+    const errors = [];
+    if (card.type !== 'ap.home.action-card.v1')
+        errors.push('bad_type');
+    if (!card.title?.trim())
+        errors.push('empty_title');
+    if (!Array.isArray(card.allowedActions) || card.allowedActions.length === 0) {
+        errors.push('no_actions');
+    }
+    else if (new Set(card.allowedActions.map((a) => a.actionId)).size !== card.allowedActions.length) {
+        errors.push('duplicate_action_id');
+    }
+    if (!card.proof?.signature)
+        errors.push('missing_proof');
+    return errors;
+}
+/**
+ * Allowed-actions enforcement (spec 310 §6.4): a user/agent response to a card
+ * may only invoke an action the card declared. Returns the descriptor or null
+ * — a null MUST be treated as a rejection, never a default action.
+ */
+export function resolveCardAction(card, actionId) {
+    return card.allowedActions.find((a) => a.actionId === actionId) ?? null;
+}
+//# sourceMappingURL=validate.js.map

package/dist/validate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate.js","sourceRoot":"","sources":["../src/validate.ts"],"names":[],"mappings":"AAAA,sEAAsE;AACtE,+EAA+E;AAC/E,0EAA0E;AAQ1E,MAAM,iBAAiB,GAAG,CAAC,QAAQ,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,CAAU,CAAC;AACrF,MAAM,aAAa,GAAG;IACpB,gBAAgB;IAChB,gBAAgB;IAChB,gBAAgB;IAChB,kBAAkB;IAClB,OAAO;CACC,CAAC;AAEX,SAAS,SAAS,CAAC,CAAS;IAC1B,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AAC/D,CAAC;AAgBD,8DAA8D;AAC9D,MAAM,UAAU,oBAAoB,CAAC,CAAiB;IACpD,MAAM,MAAM,GAA8B,EAAE,CAAC;IAC7C,IAAI,CAAC,CAAC,IAAI,KAAK,qBAAqB;QAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC9D,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE;QAAE,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IACtD,IAAI,CAAC,CAAC,CAAC,KAAK;QAAE,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAC3C,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC;QAAE,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAErE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1D,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAC7B,CAAC;SAAM,CAAC;QACN,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC3F,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;YACzE,MAAM,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QACnC,CAAC;IACH,CAAC;IAED,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;QAAE,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAC3D,IAAI,CAAC,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QAC/B,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;aACxD,IAAI,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC;YACvF,MAAM,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC;IAED,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,SAAS,EAAE,CAAC;QACxB,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAC/B,CAAC;SAAM,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC;QACrG,2EAA2E;QAC3E,MAAM,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC;IACpD,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,CAAiB,EAAE,KAAa;IAChE,IAAI,oBAAoB,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACrD,IAAI,CAAC,CAAC,MAAM,KAAK,WAAW,IAAI,CAAC,CAAC,MAAM,KAAK,YAAY;QAAE,OAAO,KAAK,CAAC;IACxE,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC7B,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;QAAE,OAAO,KAAK,CAAC;IAC/C,IAAI,CAAC,CAAC,UAAU,KAAK,SAAS,IAAI,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC;QAAE,OAAO,KAAK,CAAC;IAC/E,OAAO,IAAI,CAAC;AACd,CAAC;AAeD,MAAM,UAAU,sBAAsB,CAAC,IAAsB;IAC3D,MAAM,MAAM,GAA0B,EAAE,CAAC;IACzC,IAAI,IAAI,CAAC,IAAI,KAAK,wBAAwB;QAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACpE,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE;QAAE,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IACpD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,IAAI,CAAC,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5E,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAC5B,CAAC;SAAM,IACL,IAAI,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,cAAc,CAAC,MAAM,EACvF,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;IACrC,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS;QAAE,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IACzD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAC/B,IAAsB,EACtB,QAAgB;IAEhB,OAAO,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,IAAI,IAAI,CAAC;AAC1E,CAAC"}

package/package.json

@@ -0,0 +1,58 @@
+{
+  "name": "@agenticprimitives/home",
+  "version": "0.0.0-alpha.1",
+  "description": "Portable Agentic Trust Home contracts (spec 310): signed Home manifests, surface descriptors, inbox bindings, action cards, managed-agent/connected-app projections, control-plane events. Schema + validation + deterministic projection only — no routes, UI, or branding.",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/agentictrustlabs/agenticprimitives.git",
+    "directory": "packages/home"
+  },
+  "homepage": "https://github.com/agentictrustlabs/agenticprimitives/tree/master/packages/home",
+  "bugs": {
+    "url": "https://github.com/agentictrustlabs/agenticprimitives/issues"
+  },
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "files": [
+    "LICENSE",
+    "dist",
+    "spec.md",
+    "README.md"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "dependencies": {
+    "@agenticprimitives/fabric": "0.0.0-alpha.1",
+    "@agenticprimitives/types": "1.0.0-alpha.17",
+    "@agenticprimitives/vault": "0.0.0-alpha.2"
+  },
+  "devDependencies": {
+    "vitest": "^4.1.8",
+    "@types/node": "^22.7.0"
+  },
+  "keywords": [
+    "agentic",
+    "primitives",
+    "home",
+    "control-plane",
+    "inbox",
+    "smart-agent"
+  ],
+  "scripts": {
+    "build": "tsc -p tsconfig.build.json",
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "test": "vitest run",
+    "test:unit": "vitest run test/unit --passWithNoTests",
+    "test:watch": "vitest",
+    "clean": "rm -rf dist"
+  }
+}

package/spec.md

@@ -0,0 +1,20 @@
+# @agenticprimitives/home — spec
+
+Full design: [`../../specs/310-agentic-trust-home-control-plane-and-inbox.md`](../../specs/310-agentic-trust-home-control-plane-and-inbox.md).
+
+This release (W1) implements the **portable contracts**: `HomeManifestV1` + fail-closed
+validation/currency gates, `HomeInboxBindingV1`, `HomeActionCardV1` (render half) with
+allowed-actions enforcement, `ManagedAgentEntryV1`/`ConnectedAppGrantV1` projections,
+`HomeControlEventV1`, and the deterministic `projectHomeInboxSummary`. Remaining: manifest
+publication + inbox/console pages in `demo-sso-next` (W2–W5, app layer).
+
+Architecture decisions:
+- [ADR-0010](../../docs/architecture/decisions/0010-smart-agent-canonical-identifier.md) /
+  [ADR-0011](../../docs/architecture/decisions/0011-credential-recovery-and-re-association.md) —
+  a Home is a facet; the SA address never changes when a Home rotates.
+- [ADR-0013](../../docs/architecture/decisions/0013-no-silent-fallbacks.md) — unknown card
+  action ⇒ reject; manifest proof verification has one mechanism, behind a port.
+- [ADR-0021](../../docs/architecture/decisions/0021-generic-packages-vs-white-label-apps.md) —
+  no branding/routes/deployment content; `demo-sso-next` owns the product surface.
+
+Do not edit a divergent copy here — edit the canonical spec.