@agenticprimitives/intent-engagement 0.0.0-alpha.2 → 0.0.0-alpha.20

package/README.md

@@ -1,5 +1,7 @@
 # @agenticprimitives/intent-engagement
 
+> Part of **[Agentic Primitives](https://agenticprimitives.dev)** — the open-source trust substrate for agentic applications: identity that can sign, authority checked at act time, evidence the owner carries. [Developer kit](https://github.com/agentictrustlabs/agentic-primitives) · [All packages](https://agenticprimitives.dev/developers)
+
 The layer between *candidate found* and *authorized provider is working* (spec 336): a **probe** carrying a minimized
 projection of an intent, the provider's **response** (offer · decline · needs-clarification · referral ·
 temporarily-unavailable · human-ux-required — business facts, never errors), a **firm offer** signed over RFC 8785

package/dist/external-operation.d.ts

@@ -0,0 +1,74 @@
+import type { Hex } from 'viem';
+export declare const EXTERNAL_OPERATION_INTENT_TYPE: "ap.external-operation.v1";
+export interface ExternalOperationRefV1 {
+    /** The company agent's CAIP-10 when it has one, else its issuer URL as an https: ORIGIN (no path). */
+    authority: string;
+    /** The company's id for the operation / session. */
+    operationId: string;
+    /** Integer ≥ 0. A new revision is a new ref — and a new intent. */
+    revision: number;
+    /** keccak256 over the RFC 8785 canonical JSON of the terms the company sent. */
+    termsDigest: Hex;
+    /** Unix seconds. After it the company will not perform the operation; neither will a mandate cover it. */
+    expiresAt: number;
+}
+/** The intent the mandate binds: the ref under one type tag, nothing else — so the digest is the ref's. */
+export interface ExternalOperationIntentV1 extends ExternalOperationRefV1 {
+    type: typeof EXTERNAL_OPERATION_INTENT_TYPE;
+}
+/** Validate a candidate ref. `[]` when well-formed. */
+export declare function validateExternalOperationRef(r: unknown): string[];
+/** keccak256(JCS(terms)) — the terms exactly as the company sent them; a changed byte is a changed digest. */
+export declare const externalOperationTermsDigest: (terms: unknown) => Hex;
+/** Build a ref from what the company sent. Throws on a malformed input — a ref is never half-built. */
+export declare function externalOperationRef(input: {
+    authority: string;
+    operationId: string;
+    revision: number;
+    terms: unknown;
+    expiresAt: number;
+}): ExternalOperationRefV1;
+/** The intent as the harness runs it and the mandate caveat binds it (`step.intent`). */
+export declare function externalOperationIntent(ref: ExternalOperationRefV1): ExternalOperationIntentV1;
+/** What the mandate caveat binds — `delegation.intentDigest(externalOperationIntent(ref))`, byte for byte. */
+export declare const externalOperationIntentDigest: (ref: ExternalOperationRefV1) => Hex;
+/** The `Idempotency-Key` a client sends with this operation — derived from the intent digest, so one intent is one key. */
+export declare const externalOperationIdempotencyKey: (ref: ExternalOperationRefV1) => string;
+/** Same operation (authority + operationId), any revision. */
+export declare const isSameExternalOperation: (a: ExternalOperationRefV1, b: ExternalOperationRefV1) => boolean;
+/**
+ * Does `next` supersede `prior`? Only a HIGHER revision of the SAME operation does; the parked act for `prior` is
+ * replaced and `prior`'s mandate covers nothing of `next` (a different digest). Equal revisions with different
+ * terms are a protocol error, not a supersession.
+ */
+export declare function supersedesExternalOperation(next: ExternalOperationRefV1, prior: ExternalOperationRefV1): boolean;
+/** PAP's `approved_by` vocabulary, as a projection of OUR facts. */
+export type ExternalApprovedBy = 'user' | 'standing_permission';
+/**
+ * The verified facts a caller holds about an operation's authority. Each field is the OUTCOME of a verification the
+ * authority layer already made (`delegation`'s mandate verifier; the spec 397 §11 covering-wire check) — this module
+ * verifies nothing and takes no signatures, so a `true` here is a claim the caller is responsible for.
+ */
+export interface ExternalOperationAuthorityFacts {
+    /** A mandate whose intent-digest caveat equals `externalOperationIntentDigest(ref)` verified for this step. */
+    mandateVerifiedForIntentDigest?: Hex;
+    /** A standing wire (spec 397 §11) whose caveats — payee, cap, action, company, window — cover these terms. */
+    coveringStandingWire?: {
+        wireRef: string;
+        coversIntentDigest: Hex;
+    };
+}
+/**
+ * The ONLY producer of PAP's `approved_by`. `user` iff a mandate was verified over THIS ref's digest;
+ * `standing_permission` iff a covering wire names THIS digest; else null — the act parks. A chat "yes", a
+ * company's own assertion, a conversation transcript: none of them is an input here.
+ */
+export declare function externalApprovedBy(ref: ExternalOperationRefV1, facts: ExternalOperationAuthorityFacts): ExternalApprovedBy | null;
+/** The company's lifecycle word → the harness run state (spec 398 one state vocabulary; spec 442 §5). */
+export declare const EXTERNAL_OPERATION_STATE: Readonly<Record<'proposed' | 'in_progress' | 'succeeded' | 'failed' | 'cancelled', string>>;
+/**
+ * Confirming the same ref twice spends the same intent nonce: the chain refuses the second as reused. Stated here as
+ * the rule a client enforces BEFORE the chain does — a confirm is attempted once per `(authority, operationId, revision)`.
+ */
+export declare const externalOperationConfirmKey: (ref: ExternalOperationRefV1) => string;
+//# sourceMappingURL=external-operation.d.ts.map

package/dist/external-operation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"external-operation.d.ts","sourceRoot":"","sources":["../src/external-operation.ts"],"names":[],"mappings":"AAyBA,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,MAAM,CAAC;AAEhC,eAAO,MAAM,8BAA8B,EAAG,0BAAmC,CAAC;AAMlF,MAAM,WAAW,sBAAsB;IACrC,sGAAsG;IACtG,SAAS,EAAE,MAAM,CAAC;IAClB,oDAAoD;IACpD,WAAW,EAAE,MAAM,CAAC;IACpB,mEAAmE;IACnE,QAAQ,EAAE,MAAM,CAAC;IACjB,gFAAgF;IAChF,WAAW,EAAE,GAAG,CAAC;IACjB,0GAA0G;IAC1G,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,2GAA2G;AAC3G,MAAM,WAAW,yBAA0B,SAAQ,sBAAsB;IACvE,IAAI,EAAE,OAAO,8BAA8B,CAAC;CAC7C;AAED,uDAAuD;AACvD,wBAAgB,4BAA4B,CAAC,CAAC,EAAE,OAAO,GAAG,MAAM,EAAE,CAajE;AAED,8GAA8G;AAC9G,eAAO,MAAM,4BAA4B,UAAW,OAAO,KAAG,GAAsB,CAAC;AAErF,uGAAuG;AACvG,wBAAgB,oBAAoB,CAAC,KAAK,EAAE;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,OAAO,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GAAG,sBAAsB,CAWnK;AAED,yFAAyF;AACzF,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,sBAAsB,GAAG,yBAAyB,CAI9F;AAED,8GAA8G;AAC9G,eAAO,MAAM,6BAA6B,QAAS,sBAAsB,KAAG,GAA6C,CAAC;AAE1H,2HAA2H;AAC3H,eAAO,MAAM,+BAA+B,QAAS,sBAAsB,KAAG,MAA4C,CAAC;AAE3H,8DAA8D;AAC9D,eAAO,MAAM,uBAAuB,MAAO,sBAAsB,KAAK,sBAAsB,KAAG,OAC/B,CAAC;AAEjE;;;;GAIG;AACH,wBAAgB,2BAA2B,CAAC,IAAI,EAAE,sBAAsB,EAAE,KAAK,EAAE,sBAAsB,GAAG,OAAO,CAEhH;AAID,oEAAoE;AACpE,MAAM,MAAM,kBAAkB,GAAG,MAAM,GAAG,qBAAqB,CAAC;AAEhE;;;;GAIG;AACH,MAAM,WAAW,+BAA+B;IAC9C,+GAA+G;IAC/G,8BAA8B,CAAC,EAAE,GAAG,CAAC;IACrC,8GAA8G;IAC9G,oBAAoB,CAAC,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,kBAAkB,EAAE,GAAG,CAAA;KAAE,CAAC;CACrE;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,sBAAsB,EAAE,KAAK,EAAE,+BAA+B,GAAG,kBAAkB,GAAG,IAAI,CAKjI;AAID,yGAAyG;AACzG,eAAO,MAAM,wBAAwB,EAAE,QAAQ,CAAC,MAAM,CAAC,UAAU,GAAG,aAAa,GAAG,WAAW,GAAG,QAAQ,GAAG,WAAW,EAAE,MAAM,CAAC,CAMhI,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,2BAA2B,QAAS,sBAAsB,KAAG,MAA+D,CAAC"}

package/dist/external-operation.js

@@ -0,0 +1,115 @@
+// AN EXTERNAL OPERATION IS AN INTENT — spec 442 §5 (ontology `ap:ExternalOperation`).
+//
+// PAP's Operations extension, ACP's checkout session and UCP's checkout are the same object seen from the
+// company's side: a pinned set of terms the company proposes and will perform at most once when the user
+// approves. On our side that object already has a name — an INTENT whose digest a mandate binds (spec 336
+// §8.3, spec 350 §3.6). This module is the reference type and the digest rule; nothing here is authority.
+//
+//   ExternalOperationRefV1  authority · operationId · revision · termsDigest · expiresAt
+//   intent                  { type: 'ap.external-operation.v1', ...ref }     — what the mandate caveat binds
+//   intentDigest            keccak256(JCS(intent))                            — `delegation.intentDigest`, byte for byte
+//
+// The company's words, ours (spec 442 §5):
+//   proposed              → a PARKED act at the approval door; the person sees the company's name and the terms
+//   approved_by: user     → the mandate signature over intentDigest — the ONLY producer of `user`
+//   standing_permission   → a spec 397 §11 standing wire whose caveats cover the terms — the ONLY producer
+//   confirm               → ExecuteAcceptedOffer with the mandate; one operationId‖revision = one intent nonce on chain,
+//                           so a second confirm is refused as reuse (PAP's at-most-once stated as a chain fact)
+//   in_progress           → `effect-uncertain`; we never report failed while the company says unknown
+//   new revision          → a NEW intent: the parked act is replaced, never silently re-approved
+//   cancel                → decline (proposed) / revoke the mandate (in progress)
+//   result.summary        → the receipt's counterpart statement — evidence, never our record of what we did
+//
+// A chat "yes" produces neither word. The company's own `approved_by` is its claim, recorded as such.
+import { digestOf } from './digests.js';
+export const EXTERNAL_OPERATION_INTENT_TYPE = 'ap.external-operation.v1';
+const CAIP10_EVM = /^eip155:\d+:0x[0-9a-fA-F]{40}$/;
+const HTTPS_ORIGIN = /^https:\/\/[^\s/?#]+$/;
+const HEX32 = /^0x[0-9a-f]{64}$/;
+/** Validate a candidate ref. `[]` when well-formed. */
+export function validateExternalOperationRef(r) {
+    const issues = [];
+    if (typeof r !== 'object' || r === null || Array.isArray(r))
+        return ['ref: must be an object'];
+    const x = r;
+    for (const k of Object.keys(x))
+        if (!['authority', 'operationId', 'revision', 'termsDigest', 'expiresAt'].includes(k))
+            issues.push(`ref.${k}: unknown property`);
+    if (typeof x.authority !== 'string' || !(CAIP10_EVM.test(x.authority) || HTTPS_ORIGIN.test(x.authority))) {
+        issues.push('ref.authority: must be a CAIP-10 (eip155:<chainId>:<address>) or an https origin');
+    }
+    if (typeof x.operationId !== 'string' || !x.operationId.trim())
+        issues.push('ref.operationId: required');
+    if (!Number.isInteger(x.revision) || x.revision < 0)
+        issues.push('ref.revision: must be a non-negative integer');
+    if (typeof x.termsDigest !== 'string' || !HEX32.test(x.termsDigest))
+        issues.push('ref.termsDigest: must be 0x + 64 lowercase hex (keccak256 of the JCS terms)');
+    if (!Number.isInteger(x.expiresAt) || x.expiresAt <= 0)
+        issues.push('ref.expiresAt: must be a positive integer (unix seconds)');
+    return issues;
+}
+/** keccak256(JCS(terms)) — the terms exactly as the company sent them; a changed byte is a changed digest. */
+export const externalOperationTermsDigest = (terms) => digestOf(terms);
+/** Build a ref from what the company sent. Throws on a malformed input — a ref is never half-built. */
+export function externalOperationRef(input) {
+    const ref = {
+        authority: input.authority,
+        operationId: input.operationId,
+        revision: input.revision,
+        termsDigest: externalOperationTermsDigest(input.terms),
+        expiresAt: input.expiresAt,
+    };
+    const issues = validateExternalOperationRef(ref);
+    if (issues.length)
+        throw new Error(`ExternalOperationRefV1: ${issues.join('; ')}`);
+    return ref;
+}
+/** The intent as the harness runs it and the mandate caveat binds it (`step.intent`). */
+export function externalOperationIntent(ref) {
+    const issues = validateExternalOperationRef(ref);
+    if (issues.length)
+        throw new Error(`ExternalOperationRefV1: ${issues.join('; ')}`);
+    return { type: EXTERNAL_OPERATION_INTENT_TYPE, authority: ref.authority, operationId: ref.operationId, revision: ref.revision, termsDigest: ref.termsDigest, expiresAt: ref.expiresAt };
+}
+/** What the mandate caveat binds — `delegation.intentDigest(externalOperationIntent(ref))`, byte for byte. */
+export const externalOperationIntentDigest = (ref) => digestOf(externalOperationIntent(ref));
+/** The `Idempotency-Key` a client sends with this operation — derived from the intent digest, so one intent is one key. */
+export const externalOperationIdempotencyKey = (ref) => externalOperationIntentDigest(ref);
+/** Same operation (authority + operationId), any revision. */
+export const isSameExternalOperation = (a, b) => a.authority === b.authority && a.operationId === b.operationId;
+/**
+ * Does `next` supersede `prior`? Only a HIGHER revision of the SAME operation does; the parked act for `prior` is
+ * replaced and `prior`'s mandate covers nothing of `next` (a different digest). Equal revisions with different
+ * terms are a protocol error, not a supersession.
+ */
+export function supersedesExternalOperation(next, prior) {
+    return isSameExternalOperation(next, prior) && next.revision > prior.revision;
+}
+/**
+ * The ONLY producer of PAP's `approved_by`. `user` iff a mandate was verified over THIS ref's digest;
+ * `standing_permission` iff a covering wire names THIS digest; else null — the act parks. A chat "yes", a
+ * company's own assertion, a conversation transcript: none of them is an input here.
+ */
+export function externalApprovedBy(ref, facts) {
+    const digest = externalOperationIntentDigest(ref);
+    if (facts.mandateVerifiedForIntentDigest && facts.mandateVerifiedForIntentDigest.toLowerCase() === digest)
+        return 'user';
+    if (facts.coveringStandingWire && facts.coveringStandingWire.coversIntentDigest.toLowerCase() === digest)
+        return 'standing_permission';
+    return null;
+}
+// ─── lifecycle words ──────────────────────────────────────────────────────────────────────────────
+/** The company's lifecycle word → the harness run state (spec 398 one state vocabulary; spec 442 §5). */
+export const EXTERNAL_OPERATION_STATE = {
+    proposed: 'awaiting-approval',
+    in_progress: 'effect-uncertain',
+    succeeded: 'completed',
+    failed: 'failed',
+    cancelled: 'cancelled',
+};
+/**
+ * Confirming the same ref twice spends the same intent nonce: the chain refuses the second as reused. Stated here as
+ * the rule a client enforces BEFORE the chain does — a confirm is attempted once per `(authority, operationId, revision)`.
+ */
+export const externalOperationConfirmKey = (ref) => `${ref.authority}|${ref.operationId}|${ref.revision}`;
+//# sourceMappingURL=external-operation.js.map

package/dist/external-operation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"external-operation.js","sourceRoot":"","sources":["../src/external-operation.ts"],"names":[],"mappings":"AAAA,sFAAsF;AACtF,EAAE;AACF,0GAA0G;AAC1G,yGAAyG;AACzG,0GAA0G;AAC1G,0GAA0G;AAC1G,EAAE;AACF,yFAAyF;AACzF,6GAA6G;AAC7G,yHAAyH;AACzH,EAAE;AACF,2CAA2C;AAC3C,gHAAgH;AAChH,kGAAkG;AAClG,2GAA2G;AAC3G,yHAAyH;AACzH,gHAAgH;AAChH,sGAAsG;AACtG,iGAAiG;AACjG,kFAAkF;AAClF,4GAA4G;AAC5G,EAAE;AACF,sGAAsG;AAEtG,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAGxC,MAAM,CAAC,MAAM,8BAA8B,GAAG,0BAAmC,CAAC;AAElF,MAAM,UAAU,GAAG,gCAAgC,CAAC;AACpD,MAAM,YAAY,GAAG,uBAAuB,CAAC;AAC7C,MAAM,KAAK,GAAG,kBAAkB,CAAC;AAoBjC,uDAAuD;AACvD,MAAM,UAAU,4BAA4B,CAAC,CAAU;IACrD,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAAE,OAAO,CAAC,wBAAwB,CAAC,CAAC;IAC/F,MAAM,CAAC,GAAG,CAA4B,CAAC;IACvC,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,IAAI,CAAC,CAAC,WAAW,EAAE,aAAa,EAAE,UAAU,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACjK,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;QACzG,MAAM,CAAC,IAAI,CAAC,kFAAkF,CAAC,CAAC;IAClG,CAAC;IACD,IAAI,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,EAAE;QAAE,MAAM,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;IACzG,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAK,CAAC,CAAC,QAAmB,GAAG,CAAC;QAAE,MAAM,CAAC,IAAI,CAAC,8CAA8C,CAAC,CAAC;IAC7H,IAAI,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC;QAAE,MAAM,CAAC,IAAI,CAAC,6EAA6E,CAAC,CAAC;IAChK,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,IAAK,CAAC,CAAC,SAAoB,IAAI,CAAC;QAAE,MAAM,CAAC,IAAI,CAAC,0DAA0D,CAAC,CAAC;IAC5I,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,8GAA8G;AAC9G,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,KAAc,EAAO,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAErF,uGAAuG;AACvG,MAAM,UAAU,oBAAoB,CAAC,KAAsG;IACzI,MAAM,GAAG,GAA2B;QAClC,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,WAAW,EAAE,4BAA4B,CAAC,KAAK,CAAC,KAAK,CAAC;QACtD,SAAS,EAAE,KAAK,CAAC,SAAS;KAC3B,CAAC;IACF,MAAM,MAAM,GAAG,4BAA4B,CAAC,GAAG,CAAC,CAAC;IACjD,IAAI,MAAM,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACnF,OAAO,GAAG,CAAC;AACb,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,uBAAuB,CAAC,GAA2B;IACjE,MAAM,MAAM,GAAG,4BAA4B,CAAC,GAAG,CAAC,CAAC;IACjD,IAAI,MAAM,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACnF,OAAO,EAAE,IAAI,EAAE,8BAA8B,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC;AAC1L,CAAC;AAED,8GAA8G;AAC9G,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,GAA2B,EAAO,EAAE,CAAC,QAAQ,CAAC,uBAAuB,CAAC,GAAG,CAAC,CAAC,CAAC;AAE1H,2HAA2H;AAC3H,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC,GAA2B,EAAU,EAAE,CAAC,6BAA6B,CAAC,GAAG,CAAC,CAAC;AAE3H,8DAA8D;AAC9D,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAyB,EAAE,CAAyB,EAAW,EAAE,CACvG,CAAC,CAAC,SAAS,KAAK,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,WAAW,KAAK,CAAC,CAAC,WAAW,CAAC;AAEjE;;;;GAIG;AACH,MAAM,UAAU,2BAA2B,CAAC,IAA4B,EAAE,KAA6B;IACrG,OAAO,uBAAuB,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;AAChF,CAAC;AAmBD;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,GAA2B,EAAE,KAAsC;IACpG,MAAM,MAAM,GAAG,6BAA6B,CAAC,GAAG,CAAC,CAAC;IAClD,IAAI,KAAK,CAAC,8BAA8B,IAAI,KAAK,CAAC,8BAA8B,CAAC,WAAW,EAAE,KAAK,MAAM;QAAE,OAAO,MAAM,CAAC;IACzH,IAAI,KAAK,CAAC,oBAAoB,IAAI,KAAK,CAAC,oBAAoB,CAAC,kBAAkB,CAAC,WAAW,EAAE,KAAK,MAAM;QAAE,OAAO,qBAAqB,CAAC;IACvI,OAAO,IAAI,CAAC;AACd,CAAC;AAED,qGAAqG;AAErG,yGAAyG;AACzG,MAAM,CAAC,MAAM,wBAAwB,GAAgG;IACnI,QAAQ,EAAE,mBAAmB;IAC7B,WAAW,EAAE,kBAAkB;IAC/B,SAAS,EAAE,WAAW;IACtB,MAAM,EAAE,QAAQ;IAChB,SAAS,EAAE,WAAW;CACvB,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,GAA2B,EAAU,EAAE,CAAC,GAAG,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC"}

package/dist/index.d.ts

@@ -10,4 +10,6 @@ export type { CandidateSource, CandidateV1, ReceiptSigner } from './ports.js';
 export type { CampaignBudgetV1, OfferEvaluationV1 } from './campaign.js';
 export { openCampaign, selectOffer } from './campaign.js';
 export { fulfillmentReceipt } from './fulfillment.js';
+export { EXTERNAL_OPERATION_INTENT_TYPE, EXTERNAL_OPERATION_STATE, validateExternalOperationRef, externalOperationTermsDigest, externalOperationRef, externalOperationIntent, externalOperationIntentDigest, externalOperationIdempotencyKey, externalOperationConfirmKey, isSameExternalOperation, supersedesExternalOperation, externalApprovedBy, } from './external-operation.js';
+export type { ExternalOperationRefV1, ExternalOperationIntentV1, ExternalApprovedBy, ExternalOperationAuthorityFacts } from './external-operation.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,YAAY,yCAAyC,CAAC;AACnE,eAAO,MAAM,cAAc,EAAG,kBAA2B,CAAC;AAC1D,eAAO,MAAM,QAAQ,2CAA2C,CAAC;AAEjE,YAAY,EACV,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,YAAY,EAAE,oBAAoB,EAChI,mBAAmB,EAAE,iBAAiB,EAAE,2BAA2B,EAAE,sBAAsB,EAAE,UAAU,EAAE,aAAa,EACtH,yBAAyB,EAAE,2BAA2B,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,YAAY,EAChH,+BAA+B,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,sBAAsB,EAChH,oBAAoB,EAAE,kBAAkB,EAAE,eAAe,EAAE,UAAU,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,kBAAkB,GACvI,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AACpD,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,gBAAgB,EAAE,WAAW,EAAE,WAAW,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AACrI,YAAY,EAAE,qBAAqB,EAAE,OAAO,EAAE,QAAQ,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACrH,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AACvH,YAAY,EAAE,eAAe,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC9E,YAAY,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AACzE,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC1D,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,YAAY,yCAAyC,CAAC;AACnE,eAAO,MAAM,cAAc,EAAG,kBAA2B,CAAC;AAC1D,eAAO,MAAM,QAAQ,2CAA2C,CAAC;AAEjE,YAAY,EACV,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,YAAY,EAAE,oBAAoB,EAChI,mBAAmB,EAAE,iBAAiB,EAAE,2BAA2B,EAAE,sBAAsB,EAAE,UAAU,EAAE,aAAa,EACtH,yBAAyB,EAAE,2BAA2B,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,YAAY,EAChH,+BAA+B,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,sBAAsB,EAChH,oBAAoB,EAAE,kBAAkB,EAAE,eAAe,EAAE,UAAU,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,kBAAkB,GACvI,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AACpD,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,gBAAgB,EAAE,WAAW,EAAE,WAAW,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AACrI,YAAY,EAAE,qBAAqB,EAAE,OAAO,EAAE,QAAQ,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACrH,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AACvH,YAAY,EAAE,eAAe,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC9E,YAAY,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AACzE,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC1D,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAGtD,OAAO,EACL,8BAA8B,EAC9B,wBAAwB,EACxB,4BAA4B,EAC5B,4BAA4B,EAC5B,oBAAoB,EACpB,uBAAuB,EACvB,6BAA6B,EAC7B,+BAA+B,EAC/B,2BAA2B,EAC3B,uBAAuB,EACvB,2BAA2B,EAC3B,kBAAkB,GACnB,MAAM,yBAAyB,CAAC;AACjC,YAAY,EAAE,sBAAsB,EAAE,yBAAyB,EAAE,kBAAkB,EAAE,+BAA+B,EAAE,MAAM,yBAAyB,CAAC"}

package/dist/index.js

@@ -6,4 +6,7 @@ export { digestOf, wireProjection, projectionDigest, probeDigest, offerDigest, a
 export { initialEngagement, decideEngagement, evolveEngagement, replayEngagement, stepEngagement } from './reducer.js';
 export { openCampaign, selectOffer } from './campaign.js';
 export { fulfillmentReceipt } from './fulfillment.js';
+// Spec 442 §5 — an external operation (PAP operation / ACP session / UCP checkout) is an INTENT whose digest a
+// mandate binds; `approved_by` is produced only from a verified mandate or a covering standing wire.
+export { EXTERNAL_OPERATION_INTENT_TYPE, EXTERNAL_OPERATION_STATE, validateExternalOperationRef, externalOperationTermsDigest, externalOperationRef, externalOperationIntent, externalOperationIntentDigest, externalOperationIdempotencyKey, externalOperationConfirmKey, isSameExternalOperation, supersedesExternalOperation, externalApprovedBy, } from './external-operation.js';
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,YAAY,GAAG,sCAAsC,CAAC;AACnE,MAAM,CAAC,MAAM,cAAc,GAAG,kBAA2B,CAAC;AAC1D,MAAM,CAAC,MAAM,QAAQ,GAAG,wCAAwC,CAAC;AASjE,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AACpD,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,gBAAgB,EAAE,WAAW,EAAE,WAAW,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAErI,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAGvH,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC1D,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,YAAY,GAAG,sCAAsC,CAAC;AACnE,MAAM,CAAC,MAAM,cAAc,GAAG,kBAA2B,CAAC;AAC1D,MAAM,CAAC,MAAM,QAAQ,GAAG,wCAAwC,CAAC;AASjE,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AACpD,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,gBAAgB,EAAE,WAAW,EAAE,WAAW,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAErI,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAGvH,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC1D,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,+GAA+G;AAC/G,qGAAqG;AACrG,OAAO,EACL,8BAA8B,EAC9B,wBAAwB,EACxB,4BAA4B,EAC5B,4BAA4B,EAC5B,oBAAoB,EACpB,uBAAuB,EACvB,6BAA6B,EAC7B,+BAA+B,EAC/B,2BAA2B,EAC3B,uBAAuB,EACvB,2BAA2B,EAC3B,kBAAkB,GACnB,MAAM,yBAAyB,CAAC"}

package/package.json

@@ -1,7 +1,15 @@
 {
   "name": "@agenticprimitives/intent-engagement",
-  "version": "0.0.0-alpha.2",
+  "version": "0.0.0-alpha.20",
   "description": "Intent engagement protocol core (spec 336 §8): probe → response → offer → acceptance → mandate requirement → execute → receipt as pure documents, JCS digests, and two deterministic reducers. Transport-free; grants nothing.",
+  "homepage": "https://agenticprimitives.dev",
+  "bugs": {
+    "url": "https://github.com/agentictrustlabs/agenticprimitives/issues"
+  },
+  "author": {
+    "name": "Agentic Trust Labs",
+    "url": "https://agenticprimitives.dev"
+  },
   "type": "module",
   "exports": {
     ".": {
@@ -16,7 +24,7 @@
     "README.md"
   ],
   "devDependencies": {
-    "vitest": "^4.1.8"
+    "vitest": "^4.1.11"
   },
   "publishConfig": {
     "access": "public"
@@ -33,11 +41,16 @@
     "intent",
     "engagement",
     "offer",
-    "mandate"
+    "mandate",
+    "agentic-primitives",
+    "agenticprimitives",
+    "ai-agents",
+    "agent-authority",
+    "agentic-trust"
   ],
   "dependencies": {
     "viem": "^2.52.2",
-    "@agenticprimitives/types": "1.0.0-alpha.23"
+    "@agenticprimitives/types": "1.0.0-alpha.41"
   },
   "scripts": {
     "build": "tsc -p tsconfig.build.json",