@agenticprimitives/identity-directory-adapters 0.1.0-alpha.2

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Agentic Trust Labs
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,48 @@
+# @agenticprimitives/identity-directory-adapters
+
+Port implementations for [`@agenticprimitives/identity-directory`](../identity-directory)
+(spec 223 / [ADR-0015](../../docs/architecture/decisions/0015-identity-directory-is-an-evidence-backed-read-model.md)).
+The composition layer that binds the directory's ports to real sources — and the
+**one package allowed to import `agent-naming`** (spec 100 §4). The directory core
+stays source-agnostic.
+
+## What's here
+
+```
+makeNamingPort({ client, chainId })   wrap agent-naming + eip155 Address↔CanonicalAgentId lift
+makeOnChainReadPort(readers)          assemble OnChainReadPort from { exists, confirmsCredential }
+viemExists(client)                    a contract-agnostic exists (bytecode-at-address)
+createInMemoryIndexer(entries)        an in-memory IndexerPort (demo + tests)
+toCanonicalAgentId / addressOf        eip155 CAIP-10 glue
+```
+
+## Usage
+
+```ts
+import { createDirectory } from '@agenticprimitives/identity-directory';
+import {
+  makeNamingPort, makeOnChainReadPort, viemExists, createInMemoryIndexer,
+} from '@agenticprimitives/identity-directory-adapters';
+
+const dir = createDirectory({
+  naming: makeNamingPort({ client: namingClient, chainId: 8453 }),
+  onChain: makeOnChainReadPort({
+    exists: viemExists(publicClient),
+    // app-wired to the real membership getter (isCustodian/isTrustee):
+    confirmsCredential: async (id, p) => publicClient.readContract({ /* … */ }),
+  }),
+  indexer: createInMemoryIndexer(seedEntries),
+});
+```
+
+## Boundaries
+
+- `confirmsCredential` is **app-wired** — the on-chain membership getter is
+  contract- and credential-kind-specific (an EOA address vs a passkey
+  `credentialIdDigest`), so this package does not guess it. It MUST reflect the
+  *current* set so a revoked credential returns `false` (the directory drops it).
+- The in-memory indexer is **non-authoritative** — it proposes candidates; the
+  directory confirms them on-chain. The production indexer is a SPARQL/GraphDB
+  adapter (spec 225 §7), landing later.
+- CAIP-10 here is **eip155-only glue**; the canonical multi-namespace builder is
+  `@agenticprimitives/agent-profile` (`/caip10`), kept out of this adapter's deps.

package/dist/caip10.d.ts

@@ -0,0 +1,7 @@
+import type { Address, CanonicalAgentId } from '@agenticprimitives/types';
+export declare const EIP155_NAMESPACE: "eip155";
+/** Build an eip155 `CanonicalAgentId` from a chainId + EVM address (lowercased). */
+export declare function toCanonicalAgentId(chainId: number, address: Address): CanonicalAgentId;
+/** Extract the EVM address from an eip155 `CanonicalAgentId`. Throws on a non-eip155 id. */
+export declare function addressOf(id: CanonicalAgentId): Address;
+//# sourceMappingURL=caip10.d.ts.map

package/dist/caip10.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"caip10.d.ts","sourceRoot":"","sources":["../src/caip10.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAE1E,eAAO,MAAM,gBAAgB,EAAG,QAAiB,CAAC;AAElD,oFAAoF;AACpF,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,gBAAgB,CAEtF;AAED,4FAA4F;AAC5F,wBAAgB,SAAS,CAAC,EAAE,EAAE,gBAAgB,GAAG,OAAO,CAMvD"}

package/dist/caip10.js

@@ -0,0 +1,21 @@
+// EVM-only CAIP-10 glue for the directory adapters.
+//
+// The canonical, multi-namespace CAIP-10 builder/parser lives in
+// `@agenticprimitives/agent-profile` (`/caip10`, `buildCaip10Address`). These are
+// the eip155-only helpers this EVM adapter needs — spec 100 §4 deliberately keeps
+// agent-profile OUT of the adapter's dependency set, and this adapter only ever
+// produces/parses `eip155:<chainId>:<address>` ids.
+export const EIP155_NAMESPACE = 'eip155';
+/** Build an eip155 `CanonicalAgentId` from a chainId + EVM address (lowercased). */
+export function toCanonicalAgentId(chainId, address) {
+    return `${EIP155_NAMESPACE}:${chainId}:${address.toLowerCase()}`;
+}
+/** Extract the EVM address from an eip155 `CanonicalAgentId`. Throws on a non-eip155 id. */
+export function addressOf(id) {
+    const parts = id.split(':');
+    if (parts.length !== 3 || parts[0] !== EIP155_NAMESPACE) {
+        throw new Error(`identity-directory-adapters: expected an eip155 CanonicalAgentId, got "${id}"`);
+    }
+    return parts[2];
+}
+//# sourceMappingURL=caip10.js.map

package/dist/caip10.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"caip10.js","sourceRoot":"","sources":["../src/caip10.ts"],"names":[],"mappings":"AAAA,oDAAoD;AACpD,EAAE;AACF,iEAAiE;AACjE,kFAAkF;AAClF,kFAAkF;AAClF,gFAAgF;AAChF,oDAAoD;AAIpD,MAAM,CAAC,MAAM,gBAAgB,GAAG,QAAiB,CAAC;AAElD,oFAAoF;AACpF,MAAM,UAAU,kBAAkB,CAAC,OAAe,EAAE,OAAgB;IAClE,OAAO,GAAG,gBAAgB,IAAI,OAAO,IAAI,OAAO,CAAC,WAAW,EAAE,EAAsB,CAAC;AACvF,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,SAAS,CAAC,EAAoB;IAC5C,MAAM,KAAK,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC5B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,gBAAgB,EAAE,CAAC;QACxD,MAAM,IAAI,KAAK,CAAC,0EAA0E,EAAE,GAAG,CAAC,CAAC;IACnG,CAAC;IACD,OAAO,KAAK,CAAC,CAAC,CAAY,CAAC;AAC7B,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,5 @@
+export { toCanonicalAgentId, addressOf, EIP155_NAMESPACE } from './caip10';
+export { makeNamingPort, type NamingReads } from './naming';
+export { makeOnChainReadPort, viemExists, type OnChainReaders } from './onchain';
+export { createInMemoryIndexer, type IndexerEntry } from './indexer';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,kBAAkB,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAC3E,OAAO,EAAE,cAAc,EAAE,KAAK,WAAW,EAAE,MAAM,UAAU,CAAC;AAC5D,OAAO,EAAE,mBAAmB,EAAE,UAAU,EAAE,KAAK,cAAc,EAAE,MAAM,WAAW,CAAC;AACjF,OAAO,EAAE,qBAAqB,EAAE,KAAK,YAAY,EAAE,MAAM,WAAW,CAAC"}

package/dist/index.js

@@ -0,0 +1,15 @@
+// @agenticprimitives/identity-directory-adapters — port implementations.
+//
+// The composition layer that wires identity-directory's ports to real sources.
+// The ONE package allowed to import agent-naming (spec 100 §4 / ADR-0015); kept
+// out of the directory core so the read model stays source-agnostic.
+//
+// See:
+//   - capability.manifest.json — boundary
+//   - ../../specs/223-identity-directory.md — the contract
+//   - ../identity-directory — the ports these implement
+export { toCanonicalAgentId, addressOf, EIP155_NAMESPACE } from './caip10';
+export { makeNamingPort } from './naming';
+export { makeOnChainReadPort, viemExists } from './onchain';
+export { createInMemoryIndexer } from './indexer';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,EAAE;AACF,+EAA+E;AAC/E,gFAAgF;AAChF,qEAAqE;AACrE,EAAE;AACF,OAAO;AACP,0CAA0C;AAC1C,2DAA2D;AAC3D,wDAAwD;AAExD,OAAO,EAAE,kBAAkB,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAC3E,OAAO,EAAE,cAAc,EAAoB,MAAM,UAAU,CAAC;AAC5D,OAAO,EAAE,mBAAmB,EAAE,UAAU,EAAuB,MAAM,WAAW,CAAC;AACjF,OAAO,EAAE,qBAAqB,EAAqB,MAAM,WAAW,CAAC"}

package/dist/indexer.d.ts

@@ -0,0 +1,16 @@
+import type { CanonicalAgentId, CredentialPrincipal, Assurance } from '@agenticprimitives/types';
+import type { IndexerPort } from '@agenticprimitives/identity-directory';
+/** A credential/oidc → agent edge with provenance. For OIDC, `principalId` is `${iss}#${sub}`. */
+export interface IndexerEntry {
+    agent: CanonicalAgentId;
+    principalKind: CredentialPrincipal['kind'];
+    principalId: string;
+    assurance?: Assurance;
+    ref?: string;
+    blockNumber?: bigint;
+}
+/** An in-memory IndexerPort, seedable + appendable. */
+export declare function createInMemoryIndexer(entries?: IndexerEntry[]): IndexerPort & {
+    add(entry: IndexerEntry): void;
+};
+//# sourceMappingURL=indexer.d.ts.map

package/dist/indexer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"indexer.d.ts","sourceRoot":"","sources":["../src/indexer.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAC;AACjG,OAAO,KAAK,EAAE,WAAW,EAAgB,MAAM,uCAAuC,CAAC;AAEvF,kGAAkG;AAClG,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,gBAAgB,CAAC;IACxB,aAAa,EAAE,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAC3C,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,uDAAuD;AACvD,wBAAgB,qBAAqB,CACnC,OAAO,GAAE,YAAY,EAAO,GAC3B,WAAW,GAAG;IAAE,GAAG,CAAC,KAAK,EAAE,YAAY,GAAG,IAAI,CAAA;CAAE,CAyBlD"}

package/dist/indexer.js

@@ -0,0 +1,33 @@
+// IndexerPort adapter — in-memory (demo + tests).
+//
+// The production IndexerPort is a SPARQL/GraphDB-backed adapter (spec 225 §7);
+// this is the "indexed registry" without a backend yet. It is NON-AUTHORITATIVE:
+// it only PROPOSES candidate agents — the directory confirms them against the
+// authoritative on-chain read before treating them as onchain-confirmed
+// (spec 223 §7). So a stale/poisoned entry here can never, by itself, authorize.
+/** An in-memory IndexerPort, seedable + appendable. */
+export function createInMemoryIndexer(entries = []) {
+    const store = [...entries];
+    function linksFor(kind, id) {
+        return store
+            .filter((e) => e.principalKind === kind && e.principalId === id)
+            .map((e) => ({
+            agent: e.agent,
+            assurance: e.assurance ?? 'asserted',
+            ref: e.ref ?? 'in-memory',
+            blockNumber: e.blockNumber,
+        }));
+    }
+    return {
+        async agentsByCredential(principal) {
+            return linksFor(principal.kind, principal.id);
+        },
+        async agentsByOidcSubject(iss, sub) {
+            return linksFor('oidc', `${iss}#${sub}`);
+        },
+        add(entry) {
+            store.push(entry);
+        },
+    };
+}
+//# sourceMappingURL=indexer.js.map

package/dist/indexer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"indexer.js","sourceRoot":"","sources":["../src/indexer.ts"],"names":[],"mappings":"AAAA,kDAAkD;AAClD,EAAE;AACF,+EAA+E;AAC/E,iFAAiF;AACjF,8EAA8E;AAC9E,wEAAwE;AACxE,iFAAiF;AAejF,uDAAuD;AACvD,MAAM,UAAU,qBAAqB,CACnC,UAA0B,EAAE;IAE5B,MAAM,KAAK,GAAmB,CAAC,GAAG,OAAO,CAAC,CAAC;IAE3C,SAAS,QAAQ,CAAC,IAAiC,EAAE,EAAU;QAC7D,OAAO,KAAK;aACT,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,KAAK,IAAI,IAAI,CAAC,CAAC,WAAW,KAAK,EAAE,CAAC;aAC/D,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACX,KAAK,EAAE,CAAC,CAAC,KAAK;YACd,SAAS,EAAE,CAAC,CAAC,SAAS,IAAI,UAAU;YACpC,GAAG,EAAE,CAAC,CAAC,GAAG,IAAI,WAAW;YACzB,WAAW,EAAE,CAAC,CAAC,WAAW;SAC3B,CAAC,CAAC,CAAC;IACR,CAAC;IAED,OAAO;QACL,KAAK,CAAC,kBAAkB,CAAC,SAAS;YAChC,OAAO,QAAQ,CAAC,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,CAAC,CAAC;QAChD,CAAC;QACD,KAAK,CAAC,mBAAmB,CAAC,GAAG,EAAE,GAAG;YAChC,OAAO,QAAQ,CAAC,MAAM,EAAE,GAAG,GAAG,IAAI,GAAG,EAAE,CAAC,CAAC;QAC3C,CAAC;QACD,GAAG,CAAC,KAAK;YACP,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpB,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/naming.d.ts

@@ -0,0 +1,11 @@
+import type { NamingPort } from '@agenticprimitives/identity-directory';
+import type { AgentNamingClient } from '@agenticprimitives/agent-naming';
+/** The subset of `AgentNamingClient` the NamingPort needs (also satisfied by a test double). */
+export type NamingReads = Pick<AgentNamingClient, 'resolveName' | 'reverseResolve'>;
+export interface MakeNamingPortOpts {
+    client: NamingReads;
+    /** The chainId the naming registry lives on — binds `Address → CanonicalAgentId`. */
+    chainId: number;
+}
+export declare function makeNamingPort(opts: MakeNamingPortOpts): NamingPort;
+//# sourceMappingURL=naming.d.ts.map

package/dist/naming.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"naming.d.ts","sourceRoot":"","sources":["../src/naming.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,uCAAuC,CAAC;AACxE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AAGzE,gGAAgG;AAChG,MAAM,MAAM,WAAW,GAAG,IAAI,CAAC,iBAAiB,EAAE,aAAa,GAAG,gBAAgB,CAAC,CAAC;AAEpF,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,WAAW,CAAC;IACpB,qFAAqF;IACrF,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,kBAAkB,GAAG,UAAU,CAkBnE"}

package/dist/naming.js

@@ -0,0 +1,29 @@
+// NamingPort adapter — wraps agent-naming's read client.
+//
+// This is the eip155 Address ↔ CanonicalAgentId lift (audit P1-2): the shipped
+// agent-naming client is chain-UNqualified (resolveName → Address), so the
+// adapter binds a configured chainId to lift the result. A `null` from the
+// client is a terminal "no such name" (ADR-0013) — the directory core does not
+// escalate to another port.
+import { toCanonicalAgentId, addressOf } from './caip10';
+export function makeNamingPort(opts) {
+    return {
+        async forward(name) {
+            const addr = await opts.client.resolveName(name);
+            return addr ? toCanonicalAgentId(opts.chainId, addr) : null;
+        },
+        async reverse(id) {
+            // Only eip155 ids round-trip through EVM naming; a non-eip155 id has no
+            // reverse here (returns null rather than throwing into the read path).
+            let address;
+            try {
+                address = addressOf(id);
+            }
+            catch {
+                return null;
+            }
+            return opts.client.reverseResolve(address);
+        },
+    };
+}
+//# sourceMappingURL=naming.js.map

package/dist/naming.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"naming.js","sourceRoot":"","sources":["../src/naming.ts"],"names":[],"mappings":"AAAA,yDAAyD;AACzD,EAAE;AACF,+EAA+E;AAC/E,2EAA2E;AAC3E,2EAA2E;AAC3E,+EAA+E;AAC/E,4BAA4B;AAK5B,OAAO,EAAE,kBAAkB,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAWzD,MAAM,UAAU,cAAc,CAAC,IAAwB;IACrD,OAAO;QACL,KAAK,CAAC,OAAO,CAAC,IAAI;YAChB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;YACjD,OAAO,IAAI,CAAC,CAAC,CAAC,kBAAkB,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC9D,CAAC;QACD,KAAK,CAAC,OAAO,CAAC,EAAE;YACd,wEAAwE;YACxE,uEAAuE;YACvE,IAAI,OAAgB,CAAC;YACrB,IAAI,CAAC;gBACH,OAAO,GAAG,SAAS,CAAC,EAAE,CAAC,CAAC;YAC1B,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,IAAI,CAAC;YACd,CAAC;YACD,OAAO,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;QAC7C,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/onchain.d.ts

@@ -0,0 +1,23 @@
+import type { CanonicalAgentId, CredentialPrincipal } from '@agenticprimitives/types';
+import type { OnChainReadPort } from '@agenticprimitives/identity-directory';
+import type { PublicClient } from 'viem';
+export interface OnChainReaders {
+    /** Does the agent exist as a deployed account on this chain? */
+    exists(id: CanonicalAgentId): Promise<boolean>;
+    /**
+     * Is `principal` CURRENTLY a control credential of `id`? Wire this to the
+     * appropriate on-chain membership getter (e.g. `isCustodian`/`isTrustee`).
+     * MUST reflect the current set so a revoked credential returns false
+     * (the directory drops it — audit P1-3).
+     */
+    confirmsCredential(id: CanonicalAgentId, principal: CredentialPrincipal): Promise<boolean>;
+}
+/** Assemble an OnChainReadPort from the two reader functions. */
+export declare function makeOnChainReadPort(readers: OnChainReaders): OnChainReadPort;
+/**
+ * A contract-agnostic `exists` reader: an agent "exists" when there is bytecode
+ * at its address (deployed). Counterfactual (not-yet-deployed) agents read as
+ * `false` — wire a factory/initCode check if you need to treat them as existing.
+ */
+export declare function viemExists(client: Pick<PublicClient, 'getCode'>): (id: CanonicalAgentId) => Promise<boolean>;
+//# sourceMappingURL=onchain.d.ts.map

package/dist/onchain.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"onchain.d.ts","sourceRoot":"","sources":["../src/onchain.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AACtF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uCAAuC,CAAC;AAC7E,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,MAAM,CAAC;AAGzC,MAAM,WAAW,cAAc;IAC7B,gEAAgE;IAChE,MAAM,CAAC,EAAE,EAAE,gBAAgB,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC/C;;;;;OAKG;IACH,kBAAkB,CAAC,EAAE,EAAE,gBAAgB,EAAE,SAAS,EAAE,mBAAmB,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC5F;AAED,iEAAiE;AACjE,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,cAAc,GAAG,eAAe,CAK5E;AAED;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,YAAY,EAAE,SAAS,CAAC,GAAG,CAAC,EAAE,EAAE,gBAAgB,KAAK,OAAO,CAAC,OAAO,CAAC,CAK5G"}

package/dist/onchain.js

@@ -0,0 +1,28 @@
+// OnChainReadPort adapter (viem).
+//
+// `exists` is contract-agnostic (bytecode-at-address) and provided here.
+// `confirmsCredential` maps a CredentialPrincipal to an on-chain membership
+// CHECK (isCustodian/isTrustee on the AgentAccount/custody contract) — that
+// getter is contract- AND credential-kind-specific (an EOA address vs a passkey
+// credentialIdDigest read differently), so it is WIRED BY THE APP rather than
+// guessed here. The adapter assembles the port from the two readers.
+import { addressOf } from './caip10';
+/** Assemble an OnChainReadPort from the two reader functions. */
+export function makeOnChainReadPort(readers) {
+    return {
+        exists: (id) => readers.exists(id),
+        confirmsCredential: (id, principal) => readers.confirmsCredential(id, principal),
+    };
+}
+/**
+ * A contract-agnostic `exists` reader: an agent "exists" when there is bytecode
+ * at its address (deployed). Counterfactual (not-yet-deployed) agents read as
+ * `false` — wire a factory/initCode check if you need to treat them as existing.
+ */
+export function viemExists(client) {
+    return async (id) => {
+        const code = await client.getCode({ address: addressOf(id) });
+        return !!code && code !== '0x';
+    };
+}
+//# sourceMappingURL=onchain.js.map

package/dist/onchain.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"onchain.js","sourceRoot":"","sources":["../src/onchain.ts"],"names":[],"mappings":"AAAA,kCAAkC;AAClC,EAAE;AACF,yEAAyE;AACzE,4EAA4E;AAC5E,4EAA4E;AAC5E,gFAAgF;AAChF,8EAA8E;AAC9E,qEAAqE;AAKrE,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAcrC,iEAAiE;AACjE,MAAM,UAAU,mBAAmB,CAAC,OAAuB;IACzD,OAAO;QACL,MAAM,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAClC,kBAAkB,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,EAAE,CAAC,OAAO,CAAC,kBAAkB,CAAC,EAAE,EAAE,SAAS,CAAC;KACjF,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,MAAqC;IAC9D,OAAO,KAAK,EAAE,EAAE,EAAE,EAAE;QAClB,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QAC9D,OAAO,CAAC,CAAC,IAAI,IAAI,IAAI,KAAK,IAAI,CAAC;IACjC,CAAC,CAAC;AACJ,CAAC"}

package/package.json

@@ -0,0 +1,58 @@
+{
+  "name": "@agenticprimitives/identity-directory-adapters",
+  "version": "0.1.0-alpha.2",
+  "description": "Port implementations for @agenticprimitives/identity-directory: NamingPort (wraps agent-naming), OnChainReadPort (viem readContract), IndexerPort (in-memory; SPARQL/GraphDB later). The one composition layer allowed to import agent-naming (spec 100 \u00a74 / ADR-0015).",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/agentictrustlabs/agenticprimitives.git",
+    "directory": "packages/identity-directory-adapters"
+  },
+  "homepage": "https://github.com/agentictrustlabs/agenticprimitives/tree/master/packages/identity-directory-adapters",
+  "bugs": {
+    "url": "https://github.com/agentictrustlabs/agenticprimitives/issues"
+  },
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "files": [
+    "LICENSE",
+    "dist",
+    "spec.md",
+    "README.md"
+  ],
+  "scripts": {
+    "build": "tsc -p tsconfig.build.json",
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "test": "vitest run",
+    "test:unit": "vitest run test/unit",
+    "test:integration": "vitest run test/integration --passWithNoTests",
+    "test:watch": "vitest",
+    "clean": "rm -rf dist"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "peerDependencies": {
+    "@agenticprimitives/agent-naming": "workspace:*",
+    "@agenticprimitives/identity-directory": "workspace:*",
+    "@agenticprimitives/types": "workspace:*",
+    "viem": "^2.50.0"
+  },
+  "devDependencies": {
+    "vitest": "^2.1.0"
+  },
+  "keywords": [
+    "identity",
+    "directory",
+    "adapters",
+    "ports",
+    "agentic"
+  ]
+}

package/spec.md

@@ -0,0 +1,14 @@
+# Spec — @agenticprimitives/identity-directory-adapters
+
+This package implements the ports defined by
+[`specs/223-identity-directory.md`](../../specs/223-identity-directory.md) §5
+(NamingPort / OnChainReadPort / IndexerPort). The directory's contract — domain
+model, convergence, doctrine — is spec 223; this package adds no new contract,
+only source bindings.
+
+Decision record: [ADR-0015 — identity-directory is an evidence-backed read model](../../docs/architecture/decisions/0015-identity-directory-is-an-evidence-backed-read-model.md).
+Boundary: [spec 100 §4](../../specs/100-package-boundary-doctrine.md) — adapters is
+the one composition layer permitted to import `agent-naming`.
+
+This file is the per-package pointer required by `check:package-docs`; do not
+duplicate the spec here — edit spec 223.