@agenticprimitives/identity-directory-adapters 1.0.0-alpha.4 → 1.0.0-alpha.40

package/README.md

@@ -1,10 +1,10 @@
 # @agenticprimitives/identity-directory-adapters
 
-Port implementations for [`@agenticprimitives/identity-directory`](../identity-directory)
-(spec 223 / [ADR-0015](../../docs/architecture/decisions/0015-identity-directory-is-an-evidence-backed-read-model.md)).
-The composition layer that binds the directory's ports to real sources — and the
-**one package allowed to import `agent-naming`** (spec 100 §4). The directory core
-stays source-agnostic.
+> Part of **[Agentic Primitives](https://agenticprimitives.dev)** — the open-source trust substrate for agentic applications: identity that can sign, authority checked at act time, evidence the owner carries. [Developer kit](https://github.com/agentictrustlabs/agentic-primitives) · [All packages](https://agenticprimitives.dev/developers)
+
+**The binding layer that keeps the directory honest.** [`identity-directory`](../identity-directory) can promise "indexer proposes, on-chain confirms" only because its core never touches a real data source — it declares ports, and this package implements them. That separation is enforced, not aspirational: this is the **one package allowed to import `agent-naming`** (spec 100 §4 / [ADR-0015](../../docs/architecture/decisions/0015-identity-directory-is-an-evidence-backed-read-model.md)), so every naming read in the identity stack flows through one auditable seam. Adapters translate sources into ports and add no policy of their own.
+
+Part of [agenticprimitives](../../README.md) — the trust substrate for the agent economy: one canonical Smart Agent identity with custody, delegation, naming, credentials, and audit evidence designed as one system.
 
 ## What's here
 
@@ -35,14 +35,33 @@ const dir = createDirectory({
 });
 ```
 
+## How it's different
+
+The competing pattern is the **monolithic indexer/resolver SDK** — one client that talks to every source and bakes resolution policy into the data access. The cost shows up later: you cannot swap a source, cannot audit which mechanism answered a query, and the index silently becomes authoritative. The ports-and-adapters split here means:
+
+- **Sources are swappable.** Naming, on-chain reads, and the indexer are independent factories; a new source for an existing port is one new factory, not a rewrite.
+- **Authority placement is visible in the types.** `confirmsCredential` is a live on-chain membership check, the indexer is a proposer — the interfaces make it impossible to confuse the two.
+- **No adapter ever escalates.** Each port is one mechanism; there is no `try naming, catch → on-chain` fallback anywhere ([ADR-0013](../../docs/architecture/decisions/0013-no-silent-fallbacks.md)), and reads are `readContract`/`getCode` only — never `eth_getLogs` ([ADR-0012](../../docs/architecture/decisions/0012-no-eth-getlogs-in-product-read-paths.md)).
+
 ## Boundaries
 
-- `confirmsCredential` is **app-wired** — the on-chain membership getter is
-  contract- and credential-kind-specific (an EOA address vs a passkey
-  `credentialIdDigest`), so this package does not guess it. It MUST reflect the
-  *current* set so a revoked credential returns `false` (the directory drops it).
-- The in-memory indexer is **non-authoritative** — it proposes candidates; the
-  directory confirms them on-chain. The production indexer is a SPARQL/GraphDB
-  adapter (spec 225 §7), landing later.
-- CAIP-10 here is **eip155-only glue**; the canonical multi-namespace builder is
-  `@agenticprimitives/agent-profile` (`/caip10`), kept out of this adapter's deps.
+- `confirmsCredential` is **app-wired** — the on-chain membership getter is contract- and credential-kind-specific (an EOA address vs a passkey `credentialIdDigest`), so this package does not guess it. It MUST reflect the *current* set so a revoked credential returns `false` (the directory drops it). Never wire it to a cached or event-derived list that could revive a revoked credential.
+- The in-memory indexer is **non-authoritative** — it proposes candidates; the directory confirms them on-chain. The production indexer is a SPARQL/GraphDB adapter (spec 225 §7), landing later.
+- CAIP-10 here is **eip155-only glue**; the canonical multi-namespace builder is `@agenticprimitives/agent-profile` (`/caip10`), deliberately kept out of this adapter's dependency set.
+
+## Validation
+
+```bash
+pnpm --filter @agenticprimitives/identity-directory build   # core dist (vitest resolution)
+pnpm --filter @agenticprimitives/identity-directory-adapters typecheck
+pnpm --filter @agenticprimitives/identity-directory-adapters test
+pnpm check:forbidden-terms
+```
+
+## Status
+
+Testnet/pilot-ready. Production launch is gated on the public checklist in the root [`README.md`](../../README.md#status--honest-version) — including third-party contract audit and governance key rotation. Track every security finding live in [`docs/audits/findings.yaml`](../../docs/audits/findings.yaml). The shipped indexer is the in-memory reference (demo + tests); the production SPARQL/GraphDB adapter is roadmap.
+
+## License
+
+UNLICENSED (internal monorepo, not published).

package/dist/caip10.d.ts

@@ -2,6 +2,6 @@ import type { Address, CanonicalAgentId } from '@agenticprimitives/types';
 export declare const EIP155_NAMESPACE: "eip155";
 /** Build an eip155 `CanonicalAgentId` from a chainId + EVM address (lowercased). */
 export declare function toCanonicalAgentId(chainId: number, address: Address): CanonicalAgentId;
-/** Extract the EVM address from an eip155 `CanonicalAgentId`. Throws on a non-eip155 id. */
+/** Extract the EVM address from an eip155 `CanonicalAgentId`. Throws on a non-eip155 id or a malformed address. */
 export declare function addressOf(id: CanonicalAgentId): Address;
 //# sourceMappingURL=caip10.d.ts.map

package/dist/caip10.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"caip10.d.ts","sourceRoot":"","sources":["../src/caip10.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAE1E,eAAO,MAAM,gBAAgB,EAAG,QAAiB,CAAC;AAElD,oFAAoF;AACpF,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,gBAAgB,CAEtF;AAED,4FAA4F;AAC5F,wBAAgB,SAAS,CAAC,EAAE,EAAE,gBAAgB,GAAG,OAAO,CAMvD"}
+{"version":3,"file":"caip10.d.ts","sourceRoot":"","sources":["../src/caip10.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAE1E,eAAO,MAAM,gBAAgB,EAAG,QAAiB,CAAC;AAElD,oFAAoF;AACpF,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,gBAAgB,CAEtF;AAED,mHAAmH;AACnH,wBAAgB,SAAS,CAAC,EAAE,EAAE,gBAAgB,GAAG,OAAO,CAavD"}

package/dist/caip10.js

@@ -10,12 +10,19 @@ export const EIP155_NAMESPACE = 'eip155';
 export function toCanonicalAgentId(chainId, address) {
     return `${EIP155_NAMESPACE}:${chainId}:${address.toLowerCase()}`;
 }
-/** Extract the EVM address from an eip155 `CanonicalAgentId`. Throws on a non-eip155 id. */
+/** Extract the EVM address from an eip155 `CanonicalAgentId`. Throws on a non-eip155 id or a malformed address. */
 export function addressOf(id) {
     const parts = id.split(':');
     if (parts.length !== 3 || parts[0] !== EIP155_NAMESPACE) {
         throw new Error(`identity-directory-adapters: expected an eip155 CanonicalAgentId, got "${id}"`);
     }
-    return parts[2];
+    // NEW-IDA-2: the third token was returned as an Address with NO validation — a malformed id
+    // (`eip155:1:not-an-address`) flowed downstream as a bogus principal into on-chain reads. Require a
+    // well-formed 20-byte hex address (fail-closed).
+    const addr = parts[2] ?? '';
+    if (!/^0x[0-9a-fA-F]{40}$/.test(addr)) {
+        throw new Error(`identity-directory-adapters: eip155 CanonicalAgentId has a malformed address: "${id}"`);
+    }
+    return addr;
 }
 //# sourceMappingURL=caip10.js.map

package/dist/caip10.js.map

@@ -1 +1 @@
-{"version":3,"file":"caip10.js","sourceRoot":"","sources":["../src/caip10.ts"],"names":[],"mappings":"AAAA,oDAAoD;AACpD,EAAE;AACF,iEAAiE;AACjE,kFAAkF;AAClF,kFAAkF;AAClF,gFAAgF;AAChF,oDAAoD;AAIpD,MAAM,CAAC,MAAM,gBAAgB,GAAG,QAAiB,CAAC;AAElD,oFAAoF;AACpF,MAAM,UAAU,kBAAkB,CAAC,OAAe,EAAE,OAAgB;IAClE,OAAO,GAAG,gBAAgB,IAAI,OAAO,IAAI,OAAO,CAAC,WAAW,EAAE,EAAsB,CAAC;AACvF,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,SAAS,CAAC,EAAoB;IAC5C,MAAM,KAAK,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC5B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,gBAAgB,EAAE,CAAC;QACxD,MAAM,IAAI,KAAK,CAAC,0EAA0E,EAAE,GAAG,CAAC,CAAC;IACnG,CAAC;IACD,OAAO,KAAK,CAAC,CAAC,CAAY,CAAC;AAC7B,CAAC"}
+{"version":3,"file":"caip10.js","sourceRoot":"","sources":["../src/caip10.ts"],"names":[],"mappings":"AAAA,oDAAoD;AACpD,EAAE;AACF,iEAAiE;AACjE,kFAAkF;AAClF,kFAAkF;AAClF,gFAAgF;AAChF,oDAAoD;AAIpD,MAAM,CAAC,MAAM,gBAAgB,GAAG,QAAiB,CAAC;AAElD,oFAAoF;AACpF,MAAM,UAAU,kBAAkB,CAAC,OAAe,EAAE,OAAgB;IAClE,OAAO,GAAG,gBAAgB,IAAI,OAAO,IAAI,OAAO,CAAC,WAAW,EAAE,EAAsB,CAAC;AACvF,CAAC;AAED,mHAAmH;AACnH,MAAM,UAAU,SAAS,CAAC,EAAoB;IAC5C,MAAM,KAAK,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC5B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,gBAAgB,EAAE,CAAC;QACxD,MAAM,IAAI,KAAK,CAAC,0EAA0E,EAAE,GAAG,CAAC,CAAC;IACnG,CAAC;IACD,4FAA4F;IAC5F,oGAAoG;IACpG,iDAAiD;IACjD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC5B,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CAAC,kFAAkF,EAAE,GAAG,CAAC,CAAC;IAC3G,CAAC;IACD,OAAO,IAAe,CAAC;AACzB,CAAC"}

package/dist/index.d.ts

@@ -1,5 +1,5 @@
-export { toCanonicalAgentId, addressOf, EIP155_NAMESPACE } from './caip10';
-export { makeNamingPort, type NamingReads } from './naming';
-export { makeOnChainReadPort, viemExists, type OnChainReaders } from './onchain';
-export { createInMemoryIndexer, type IndexerEntry } from './indexer';
+export { toCanonicalAgentId, addressOf, EIP155_NAMESPACE } from './caip10.js';
+export { makeNamingPort, type NamingReads } from './naming.js';
+export { makeOnChainReadPort, viemExists, type OnChainReaders } from './onchain.js';
+export { createInMemoryIndexer, type IndexerEntry } from './indexer.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,kBAAkB,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAC3E,OAAO,EAAE,cAAc,EAAE,KAAK,WAAW,EAAE,MAAM,UAAU,CAAC;AAC5D,OAAO,EAAE,mBAAmB,EAAE,UAAU,EAAE,KAAK,cAAc,EAAE,MAAM,WAAW,CAAC;AACjF,OAAO,EAAE,qBAAqB,EAAE,KAAK,YAAY,EAAE,MAAM,WAAW,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,kBAAkB,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC9E,OAAO,EAAE,cAAc,EAAE,KAAK,WAAW,EAAE,MAAM,aAAa,CAAC;AAC/D,OAAO,EAAE,mBAAmB,EAAE,UAAU,EAAE,KAAK,cAAc,EAAE,MAAM,cAAc,CAAC;AACpF,OAAO,EAAE,qBAAqB,EAAE,KAAK,YAAY,EAAE,MAAM,cAAc,CAAC"}

package/dist/index.js

@@ -8,8 +8,8 @@
 //   - capability.manifest.json — boundary
 //   - ../../specs/223-identity-directory.md — the contract
 //   - ../identity-directory — the ports these implement
-export { toCanonicalAgentId, addressOf, EIP155_NAMESPACE } from './caip10';
-export { makeNamingPort } from './naming';
-export { makeOnChainReadPort, viemExists } from './onchain';
-export { createInMemoryIndexer } from './indexer';
+export { toCanonicalAgentId, addressOf, EIP155_NAMESPACE } from './caip10.js';
+export { makeNamingPort } from './naming.js';
+export { makeOnChainReadPort, viemExists } from './onchain.js';
+export { createInMemoryIndexer } from './indexer.js';
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,EAAE;AACF,+EAA+E;AAC/E,gFAAgF;AAChF,qEAAqE;AACrE,EAAE;AACF,OAAO;AACP,0CAA0C;AAC1C,2DAA2D;AAC3D,wDAAwD;AAExD,OAAO,EAAE,kBAAkB,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAC3E,OAAO,EAAE,cAAc,EAAoB,MAAM,UAAU,CAAC;AAC5D,OAAO,EAAE,mBAAmB,EAAE,UAAU,EAAuB,MAAM,WAAW,CAAC;AACjF,OAAO,EAAE,qBAAqB,EAAqB,MAAM,WAAW,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,EAAE;AACF,+EAA+E;AAC/E,gFAAgF;AAChF,qEAAqE;AACrE,EAAE;AACF,OAAO;AACP,0CAA0C;AAC1C,2DAA2D;AAC3D,wDAAwD;AAExD,OAAO,EAAE,kBAAkB,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC9E,OAAO,EAAE,cAAc,EAAoB,MAAM,aAAa,CAAC;AAC/D,OAAO,EAAE,mBAAmB,EAAE,UAAU,EAAuB,MAAM,cAAc,CAAC;AACpF,OAAO,EAAE,qBAAqB,EAAqB,MAAM,cAAc,CAAC"}

package/dist/naming.js

@@ -5,7 +5,7 @@
 // adapter binds a configured chainId to lift the result. A `null` from the
 // client is a terminal "no such name" (ADR-0013) — the directory core does not
 // escalate to another port.
-import { toCanonicalAgentId, addressOf } from './caip10';
+import { toCanonicalAgentId, addressOf } from './caip10.js';
 export function makeNamingPort(opts) {
     return {
         async forward(name) {

package/dist/naming.js.map

@@ -1 +1 @@
-{"version":3,"file":"naming.js","sourceRoot":"","sources":["../src/naming.ts"],"names":[],"mappings":"AAAA,yDAAyD;AACzD,EAAE;AACF,+EAA+E;AAC/E,2EAA2E;AAC3E,2EAA2E;AAC3E,+EAA+E;AAC/E,4BAA4B;AAK5B,OAAO,EAAE,kBAAkB,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAWzD,MAAM,UAAU,cAAc,CAAC,IAAwB;IACrD,OAAO;QACL,KAAK,CAAC,OAAO,CAAC,IAAI;YAChB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;YACjD,OAAO,IAAI,CAAC,CAAC,CAAC,kBAAkB,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC9D,CAAC;QACD,KAAK,CAAC,OAAO,CAAC,EAAE;YACd,wEAAwE;YACxE,uEAAuE;YACvE,IAAI,OAAgB,CAAC;YACrB,IAAI,CAAC;gBACH,OAAO,GAAG,SAAS,CAAC,EAAE,CAAC,CAAC;YAC1B,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,IAAI,CAAC;YACd,CAAC;YACD,OAAO,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;QAC7C,CAAC;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"naming.js","sourceRoot":"","sources":["../src/naming.ts"],"names":[],"mappings":"AAAA,yDAAyD;AACzD,EAAE;AACF,+EAA+E;AAC/E,2EAA2E;AAC3E,2EAA2E;AAC3E,+EAA+E;AAC/E,4BAA4B;AAK5B,OAAO,EAAE,kBAAkB,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAW5D,MAAM,UAAU,cAAc,CAAC,IAAwB;IACrD,OAAO;QACL,KAAK,CAAC,OAAO,CAAC,IAAI;YAChB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;YACjD,OAAO,IAAI,CAAC,CAAC,CAAC,kBAAkB,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC9D,CAAC;QACD,KAAK,CAAC,OAAO,CAAC,EAAE;YACd,wEAAwE;YACxE,uEAAuE;YACvE,IAAI,OAAgB,CAAC;YACrB,IAAI,CAAC;gBACH,OAAO,GAAG,SAAS,CAAC,EAAE,CAAC,CAAC;YAC1B,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,IAAI,CAAC;YACd,CAAC;YACD,OAAO,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;QAC7C,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/onchain.js

@@ -6,7 +6,7 @@
 // getter is contract- AND credential-kind-specific (an EOA address vs a passkey
 // credentialIdDigest read differently), so it is WIRED BY THE APP rather than
 // guessed here. The adapter assembles the port from the two readers.
-import { addressOf } from './caip10';
+import { addressOf } from './caip10.js';
 /** Assemble an OnChainReadPort from the two reader functions. */
 export function makeOnChainReadPort(readers) {
     return {

package/dist/onchain.js.map

@@ -1 +1 @@
-{"version":3,"file":"onchain.js","sourceRoot":"","sources":["../src/onchain.ts"],"names":[],"mappings":"AAAA,kCAAkC;AAClC,EAAE;AACF,yEAAyE;AACzE,4EAA4E;AAC5E,4EAA4E;AAC5E,gFAAgF;AAChF,8EAA8E;AAC9E,qEAAqE;AAKrE,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAcrC,iEAAiE;AACjE,MAAM,UAAU,mBAAmB,CAAC,OAAuB;IACzD,OAAO;QACL,MAAM,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAClC,kBAAkB,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,EAAE,CAAC,OAAO,CAAC,kBAAkB,CAAC,EAAE,EAAE,SAAS,CAAC;KACjF,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,MAAqC;IAC9D,OAAO,KAAK,EAAE,EAAE,EAAE,EAAE;QAClB,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QAC9D,OAAO,CAAC,CAAC,IAAI,IAAI,IAAI,KAAK,IAAI,CAAC;IACjC,CAAC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"onchain.js","sourceRoot":"","sources":["../src/onchain.ts"],"names":[],"mappings":"AAAA,kCAAkC;AAClC,EAAE;AACF,yEAAyE;AACzE,4EAA4E;AAC5E,4EAA4E;AAC5E,gFAAgF;AAChF,8EAA8E;AAC9E,qEAAqE;AAKrE,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAcxC,iEAAiE;AACjE,MAAM,UAAU,mBAAmB,CAAC,OAAuB;IACzD,OAAO;QACL,MAAM,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAClC,kBAAkB,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,EAAE,CAAC,OAAO,CAAC,kBAAkB,CAAC,EAAE,EAAE,SAAS,CAAC;KACjF,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,MAAqC;IAC9D,OAAO,KAAK,EAAE,EAAE,EAAE,EAAE;QAClB,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QAC9D,OAAO,CAAC,CAAC,IAAI,IAAI,IAAI,KAAK,IAAI,CAAC;IACjC,CAAC,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,17 +1,21 @@
 {
   "name": "@agenticprimitives/identity-directory-adapters",
-  "version": "1.0.0-alpha.4",
+  "version": "1.0.0-alpha.40",
   "description": "Port implementations for @agenticprimitives/identity-directory: NamingPort (wraps agent-naming), OnChainReadPort (viem readContract), IndexerPort (in-memory; SPARQL/GraphDB later). The one composition layer allowed to import agent-naming (spec 100 §4 / ADR-0015).",
+  "homepage": "https://agenticprimitives.dev",
+  "bugs": {
+    "url": "https://github.com/agentictrustlabs/agenticprimitives/issues"
+  },
+  "author": {
+    "name": "Agentic Trust Labs",
+    "url": "https://agenticprimitives.dev"
+  },
   "license": "MIT",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/agentictrustlabs/agenticprimitives.git",
     "directory": "packages/identity-directory-adapters"
   },
-  "homepage": "https://github.com/agentictrustlabs/agenticprimitives/tree/master/packages/identity-directory-adapters",
-  "bugs": {
-    "url": "https://github.com/agentictrustlabs/agenticprimitives/issues"
-  },
   "type": "module",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
@@ -31,26 +35,31 @@
     "access": "public"
   },
   "peerDependencies": {
-    "viem": "^2.50.0",
-    "@agenticprimitives/identity-directory": "1.0.0-alpha.4",
-    "@agenticprimitives/agent-naming": "1.0.0-alpha.4",
-    "@agenticprimitives/types": "1.0.0-alpha.4"
+    "viem": "^2.52.2",
+    "@agenticprimitives/agent-naming": "^1.0.0-alpha.40",
+    "@agenticprimitives/identity-directory": "^1.0.0-alpha.40",
+    "@agenticprimitives/types": "^1.0.0-alpha.40"
   },
   "devDependencies": {
-    "vitest": "^2.1.0"
+    "vitest": "^4.1.11"
   },
   "keywords": [
     "identity",
     "directory",
     "adapters",
     "ports",
-    "agentic"
+    "agentic",
+    "agentic-primitives",
+    "agenticprimitives",
+    "ai-agents",
+    "agent-authority",
+    "agentic-trust"
   ],
   "scripts": {
     "build": "tsc -p tsconfig.build.json",
     "typecheck": "tsc -p tsconfig.json --noEmit",
     "test": "vitest run",
-    "test:unit": "vitest run test/unit",
+    "test:unit": "vitest run test/unit --passWithNoTests",
     "test:integration": "vitest run test/integration --passWithNoTests",
     "test:watch": "vitest",
     "clean": "rm -rf dist"