@agenticprimitives/ontology 0.1.0-alpha.2

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Agentic Trust Labs
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,51 @@
+# @agenticprimitives/ontology
+
+The **monorepo-wide formal vocabulary** for agentic primitives — the off-chain
+source of truth that the on-chain ontology ([ADR-0009](../../docs/architecture/decisions/0009-on-chain-ontology-shacl-naming.md))
+instantiates and that [`identity-directory`](../identity-directory) (spec 223)
+conforms to.
+
+See [spec 225](../../specs/225-ontology.md) for the full contract and
+[ADR-0018](../../docs/architecture/decisions/0018-agenticprimitives-wide-formal-ontology.md)
+for the decision.
+
+## Layout (T-box / C-box / A-box)
+
+```
+context.jsonld   @context — namespace prefix → IRI bindings
+tbox/            RDFS/OWL schema (classes + properties), per domain
+cbox/            SHACL shapes + SKOS controlled vocabularies (codelists)
+abox/            example / fixture instances (tests + golden vectors only)
+src/index.ts     typed IRI constants + artifact paths
+```
+
+This mirrors the reference ontology work
+(`agentictrustlabs/smart-agent/docs/ontology`): T-box = terminology, C-box =
+constraints + controlled vocabularies, A-box = instances.
+
+## Usage
+
+```ts
+import { NS, CLASS, SHAPE, ARTIFACTS, artifactPath } from '@agenticprimitives/ontology';
+
+CLASS.CanonicalAgentId; // "https://agenticprimitives.dev/ns/core#CanonicalAgentId"
+artifactPath(ARTIFACTS.tbox[0]); // absolute path to tbox/core.ttl — load into a SPARQL store
+```
+
+The package is **declarative**: it ships the vocabulary artifacts and exposes
+their IRIs/paths. It contains no runtime auth/policy logic. SHACL-engine
+validation over instances, and the live A-box knowledge graph (a SPARQL store —
+Ontotext GraphDB reference), are wired by consumers in Phase 2 (spec 225 §11).
+
+## Scope (Phase 1)
+
+Bounded to the agent-trust core: identity, credential, custody, delegation,
+audit, naming, org. Marketplace / intents / geo are out of scope (spec 225 §11).
+
+## What this is NOT
+
+- Not the TS types — `@agenticprimitives/types` owns `CanonicalAgentId`,
+  `Assurance`, etc.; this package names the IRIs. One brand.
+- Not the runtime CAIP-10 builder — that is `@agenticprimitives/agent-profile`.
+- Not an authority — it names + validates; it never grants custody or mints
+  identity.

package/cbox/canonical-agent-id-shape.shacl.ttl

@@ -0,0 +1,41 @@
+# C-box — SHACL shapes (constraints). Spec 225 §6.
+# Phase 1 ships the load-bearing shape (CanonicalAgentId) + a CredentialFacet
+# shape. SHACL-engine validation over instances is wired in Phase 2 (spec 225 §11);
+# the on-chain ShapeRegistry (ADR-0009) is the per-chain enforcement peer.
+
+@prefix ap:   <https://agenticprimitives.dev/ns/core#> .
+@prefix apcr: <https://agenticprimitives.dev/ns/credential#> .
+@prefix apid: <https://agenticprimitives.dev/ns/identity#> .
+@prefix sh:   <http://www.w3.org/ns/shacl#> .
+@prefix rdfs: <http://www.w3.org/2000/01/rdf-schema#> .
+@prefix xsd:  <http://www.w3.org/2001/XMLSchema#> .
+
+# A CanonicalAgentId value MUST be a CAIP-10 string whose namespace is in the
+# Phase-1 allowlist {eip155, hedera, solana} (ADR-0008). The pattern bakes the
+# allowlist into the grammar so a single sh:pattern enforces both.
+ap:CanonicalAgentIdShape a sh:NodeShape ;
+    rdfs:label "CanonicalAgentId shape" ;
+    rdfs:comment "Bind via sh:targetObjectsOf on any CanonicalAgentId-valued predicate (e.g. a subject's identifier). Phase 2 wires targets + the engine." ;
+    sh:nodeKind sh:Literal ;
+    sh:datatype xsd:string ;
+    sh:pattern "^(eip155|hedera|solana):[-_a-zA-Z0-9]{1,32}:[-.%a-zA-Z0-9]{1,128}$" ;
+    sh:message "CanonicalAgentId must be a CAIP-10 string with namespace in {eip155, hedera, solana}." .
+
+# A CredentialFacet references exactly one Agent and carries exactly one Evidence
+# (spec 223 §4). Modeled as property constraints; targets bound in Phase 2.
+ap:CredentialFacetShape a sh:NodeShape ;
+    rdfs:label "CredentialFacet shape" ;
+    sh:targetClass apcr:CredentialFacet ;
+    sh:property [
+        sh:path apid:isFacetOf ;
+        sh:minCount 1 ;
+        sh:maxCount 1 ;
+        sh:class ap:Agent ;
+        sh:message "A CredentialFacet must reference exactly one Agent."
+    ] ;
+    sh:property [
+        sh:path ap:hasEvidence ;
+        sh:minCount 1 ;
+        sh:maxCount 1 ;
+        sh:message "A CredentialFacet must carry exactly one Evidence."
+    ] .

package/cbox/controlled-vocabularies.ttl

@@ -0,0 +1,57 @@
+# C-box — controlled vocabularies (SKOS concept schemes / closed codelists).
+# Spec 225 §6. These closed sets are the off-chain source of truth that the
+# on-chain OntologyTermRegistry enum-sets (ADR-0009) bind in lockstep, and that
+# the @agenticprimitives/types unions (AgentType, CredentialKind, Assurance,
+# CredentialRole) mirror. NOTE (audit P1-4): agentKind (4) and profileType (6)
+# are DISTINCT vocabularies.
+
+@prefix ap:   <https://agenticprimitives.dev/ns/core#> .
+@prefix apcr: <https://agenticprimitives.dev/ns/credential#> .
+@prefix apcus: <https://agenticprimitives.dev/ns/custody#> .
+@prefix apid: <https://agenticprimitives.dev/ns/identity#> .
+@prefix skos: <http://www.w3.org/2004/02/skos/core#> .
+@prefix rdfs: <http://www.w3.org/2000/01/rdf-schema#> .
+
+# ─── agentKind — 4 values, on-chain-bound (ADR-0009 enum / types.AgentType) ──
+ap:agentKind a skos:ConceptScheme ;
+    rdfs:label "agentKind" ;
+    rdfs:comment "The 3-value on-chain-bound kind (person/org/service). Distinct from profileType (6 values; agent-profile/HCS-11). treasury is NOT an agentKind — it is a profileType ⊂ service (ap:Treasury rdfs:subClassOf ap:ServiceAgent; tbox/identity)." ;
+    skos:hasTopConcept ap:Person, ap:OrgKind, ap:Service .
+ap:Person   a skos:Concept ; skos:inScheme ap:agentKind ; skos:prefLabel "person" .
+ap:OrgKind  a skos:Concept ; skos:inScheme ap:agentKind ; skos:prefLabel "org" .
+ap:Service  a skos:Concept ; skos:inScheme ap:agentKind ; skos:prefLabel "service" .
+
+# ─── credentialKind (types.CredentialKind) ───────────────────────────
+apcr:credentialKindScheme a skos:ConceptScheme ;
+    rdfs:label "credentialKind" ;
+    skos:hasTopConcept apcr:Passkey, apcr:SiweEoa, apcr:Hardware, apcr:Oidc .
+apcr:Passkey  a skos:Concept ; skos:inScheme apcr:credentialKindScheme ; skos:prefLabel "passkey" .
+apcr:SiweEoa  a skos:Concept ; skos:inScheme apcr:credentialKindScheme ; skos:prefLabel "siwe-eoa" .
+apcr:Hardware a skos:Concept ; skos:inScheme apcr:credentialKindScheme ; skos:prefLabel "hardware" .
+apcr:Oidc     a skos:Concept ; skos:inScheme apcr:credentialKindScheme ; skos:prefLabel "oidc" .
+
+# ─── credentialRole — login-grade vs custody-grade (ADR-0017) ─────────
+apcr:credentialRoleScheme a skos:ConceptScheme ;
+    rdfs:label "credentialRole" ;
+    skos:hasTopConcept apcr:LoginGrade, apcr:CustodyGrade .
+apcr:LoginGrade   a skos:Concept ; skos:inScheme apcr:credentialRoleScheme ; skos:prefLabel "login-grade" .
+apcr:CustodyGrade a skos:Concept ; skos:inScheme apcr:credentialRoleScheme ; skos:prefLabel "custody-grade" .
+
+# ─── assurance — ordered ladder (types.Assurance) ─────────────────────
+apcus:assuranceScheme a skos:ConceptScheme ;
+    rdfs:label "assurance" ;
+    rdfs:comment "Ordered low→high: unverified < asserted < onchain-read < onchain-confirmed." ;
+    skos:hasTopConcept apcus:Unverified, apcus:Asserted, apcus:OnchainRead, apcus:OnchainConfirmed .
+apcus:Unverified       a skos:Concept ; skos:inScheme apcus:assuranceScheme ; skos:prefLabel "unverified" ; skos:notation "0" .
+apcus:Asserted         a skos:Concept ; skos:inScheme apcus:assuranceScheme ; skos:prefLabel "asserted" ; skos:notation "1" ; skos:broader apcus:Unverified .
+apcus:OnchainRead      a skos:Concept ; skos:inScheme apcus:assuranceScheme ; skos:prefLabel "onchain-read" ; skos:notation "2" ; skos:broader apcus:Asserted .
+apcus:OnchainConfirmed a skos:Concept ; skos:inScheme apcus:assuranceScheme ; skos:prefLabel "onchain-confirmed" ; skos:notation "3" ; skos:broader apcus:OnchainRead .
+
+# ─── controlStatus — custodied vs identifier-only (spec 226 §4) ───────
+ap:controlStatusScheme a skos:ConceptScheme ;
+    rdfs:label "controlStatus" ;
+    skos:hasTopConcept ap:Custodied, ap:IdentifierOnly .
+ap:Custodied      a skos:Concept ; skos:inScheme ap:controlStatusScheme ; skos:prefLabel "custodied" ;
+    rdfs:comment "EVM (eip155) — custodied via ERC-4337/ERC-1271." .
+ap:IdentifierOnly a skos:Concept ; skos:inScheme ap:controlStatusScheme ; skos:prefLabel "identifier-only" ;
+    rdfs:comment "hedera:* / solana:* — addressable, not custodied by this stack." .

package/context.jsonld

@@ -0,0 +1,21 @@
+{
+  "@context": {
+    "ap": "https://agenticprimitives.dev/ns/core#",
+    "apid": "https://agenticprimitives.dev/ns/identity#",
+    "apcr": "https://agenticprimitives.dev/ns/credential#",
+    "apdel": "https://agenticprimitives.dev/ns/delegation#",
+    "apcus": "https://agenticprimitives.dev/ns/custody#",
+    "apaud": "https://agenticprimitives.dev/ns/audit#",
+    "apnam": "https://agenticprimitives.dev/ns/naming#",
+    "aprel": "https://agenticprimitives.dev/ns/relationships#",
+    "aporg": "https://agenticprimitives.dev/ns/org#",
+
+    "rdf": "http://www.w3.org/1999/02/22-rdf-syntax-ns#",
+    "rdfs": "http://www.w3.org/2000/01/rdf-schema#",
+    "owl": "http://www.w3.org/2002/07/owl#",
+    "xsd": "http://www.w3.org/2001/XMLSchema#",
+    "sh": "http://www.w3.org/ns/shacl#",
+    "skos": "http://www.w3.org/2004/02/skos/core#",
+    "prov": "http://www.w3.org/ns/prov#"
+  }
+}

package/dist/artifacts.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Relative paths (from the package root) of the shipped vocabulary artifacts.
+ * Resolve to an absolute filesystem path with {@link artifactPath} and load into
+ * a SPARQL store / SHACL engine.
+ */
+export declare const ARTIFACTS: {
+    readonly context: "context.jsonld";
+    readonly tbox: readonly ["tbox/core.ttl", "tbox/identity.ttl"];
+    readonly cbox: readonly ["cbox/canonical-agent-id-shape.shacl.ttl", "cbox/controlled-vocabularies.ttl"];
+};
+/**
+ * Resolve a shipped artifact's relative path (see {@link ARTIFACTS}) to an
+ * absolute filesystem path. Works in dev (from `src/`) and after build (from
+ * `dist/`) — the artifacts ship at the package root in both cases.
+ */
+export declare function artifactPath(relativePath: string): string;
+//# sourceMappingURL=artifacts.d.ts.map

package/dist/artifacts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifacts.d.ts","sourceRoot":"","sources":["../src/artifacts.ts"],"names":[],"mappings":"AASA;;;;GAIG;AACH,eAAO,MAAM,SAAS;;;;CAIZ,CAAC;AAEX;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAEzD"}

package/dist/artifacts.js

@@ -0,0 +1,26 @@
+// Node-only artifact loaders for @agenticprimitives/ontology.
+//
+// Subpath: `@agenticprimitives/ontology/artifacts`. Uses `node:url` + the
+// filesystem, so it is NOT browser-bundleable — import it ONLY server-side (a
+// SPARQL loader / SHACL engine). The browser-safe IRI constants are the main
+// entry (`@agenticprimitives/ontology`).
+import { fileURLToPath } from 'node:url';
+/**
+ * Relative paths (from the package root) of the shipped vocabulary artifacts.
+ * Resolve to an absolute filesystem path with {@link artifactPath} and load into
+ * a SPARQL store / SHACL engine.
+ */
+export const ARTIFACTS = {
+    context: 'context.jsonld',
+    tbox: ['tbox/core.ttl', 'tbox/identity.ttl'],
+    cbox: ['cbox/canonical-agent-id-shape.shacl.ttl', 'cbox/controlled-vocabularies.ttl'],
+};
+/**
+ * Resolve a shipped artifact's relative path (see {@link ARTIFACTS}) to an
+ * absolute filesystem path. Works in dev (from `src/`) and after build (from
+ * `dist/`) — the artifacts ship at the package root in both cases.
+ */
+export function artifactPath(relativePath) {
+    return fileURLToPath(new URL(`../${relativePath}`, import.meta.url));
+}
+//# sourceMappingURL=artifacts.js.map

package/dist/artifacts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifacts.js","sourceRoot":"","sources":["../src/artifacts.ts"],"names":[],"mappings":"AAAA,8DAA8D;AAC9D,EAAE;AACF,0EAA0E;AAC1E,8EAA8E;AAC9E,6EAA6E;AAC7E,yCAAyC;AAEzC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC;;;;GAIG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG;IACvB,OAAO,EAAE,gBAAgB;IACzB,IAAI,EAAE,CAAC,eAAe,EAAE,mBAAmB,CAAC;IAC5C,IAAI,EAAE,CAAC,yCAAyC,EAAE,kCAAkC,CAAC;CAC7E,CAAC;AAEX;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,YAAoB;IAC/C,OAAO,aAAa,CAAC,IAAI,GAAG,CAAC,MAAM,YAAY,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AACvE,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,46 @@
+/** Bumped on any breaking change to the shipped vocabulary. */
+export declare const ONTOLOGY_VERSION: "0.1.0";
+/**
+ * Namespace IRIs, split per domain (mirrors the reference
+ * `smartagent.io/ontology/<domain>#` scheme; spec 225 §4). Pinned base:
+ * `https://agenticprimitives.dev/ns/`.
+ */
+export declare const NS: {
+    readonly ap: "https://agenticprimitives.dev/ns/core#";
+    readonly apid: "https://agenticprimitives.dev/ns/identity#";
+    readonly apcr: "https://agenticprimitives.dev/ns/credential#";
+    readonly apdel: "https://agenticprimitives.dev/ns/delegation#";
+    readonly apcus: "https://agenticprimitives.dev/ns/custody#";
+    readonly apaud: "https://agenticprimitives.dev/ns/audit#";
+    readonly apnam: "https://agenticprimitives.dev/ns/naming#";
+    readonly aprel: "https://agenticprimitives.dev/ns/relationships#";
+    readonly aporg: "https://agenticprimitives.dev/ns/org#";
+};
+/** Class IRIs (T-box). Each is `<namespace><LocalName>`. */
+export declare const CLASS: {
+    readonly Agent: "https://agenticprimitives.dev/ns/core#Agent";
+    readonly CanonicalAgentId: "https://agenticprimitives.dev/ns/core#CanonicalAgentId";
+    readonly Facet: "https://agenticprimitives.dev/ns/core#Facet";
+    readonly Evidence: "https://agenticprimitives.dev/ns/core#Evidence";
+    readonly CredentialFacet: "https://agenticprimitives.dev/ns/credential#CredentialFacet";
+    readonly NameFacet: "https://agenticprimitives.dev/ns/naming#NameFacet";
+    readonly OidcSubject: "https://agenticprimitives.dev/ns/identity#OidcSubject";
+    readonly Org: "https://agenticprimitives.dev/ns/org#Org";
+};
+/** Predicate / property IRIs (T-box). */
+export declare const PREDICATE: {
+    readonly isFacetOf: "https://agenticprimitives.dev/ns/identity#isFacetOf";
+    readonly controls: "https://agenticprimitives.dev/ns/credential#controls";
+    readonly hasEvidence: "https://agenticprimitives.dev/ns/core#hasEvidence";
+    readonly assurance: "https://agenticprimitives.dev/ns/core#assurance";
+    readonly controlStatus: "https://agenticprimitives.dev/ns/core#controlStatus";
+    readonly resolvesTo: "https://agenticprimitives.dev/ns/naming#resolvesTo";
+    readonly memberOf: "https://agenticprimitives.dev/ns/org#memberOf";
+    readonly delegatesTo: "https://agenticprimitives.dev/ns/delegation#delegatesTo";
+};
+/** SHACL shape IRIs (C-box). */
+export declare const SHAPE: {
+    readonly CanonicalAgentId: "https://agenticprimitives.dev/ns/core#CanonicalAgentIdShape";
+    readonly CredentialFacet: "https://agenticprimitives.dev/ns/credential#CredentialFacetShape";
+};
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAmBA,+DAA+D;AAC/D,eAAO,MAAM,gBAAgB,EAAG,OAAgB,CAAC;AAEjD;;;;GAIG;AACH,eAAO,MAAM,EAAE;;;;;;;;;;CAUL,CAAC;AAEX,4DAA4D;AAC5D,eAAO,MAAM,KAAK;;;;;;;;;CASR,CAAC;AAEX,yCAAyC;AACzC,eAAO,MAAM,SAAS;;;;;;;;;CASZ,CAAC;AAEX,gCAAgC;AAChC,eAAO,MAAM,KAAK;;;CAGR,CAAC"}

package/dist/index.js

@@ -0,0 +1,66 @@
+// @agenticprimitives/ontology — the monorepo-wide formal vocabulary.
+//
+// This package is DECLARATIVE: it ships the RDFS/OWL T-box + SHACL/SKOS C-box
+// artifacts (the source of truth) and exposes their stable IRIs + paths as
+// typed constants. It has NO runtime auth/policy logic and depends on nothing
+// (the vocabulary root — ADR-0018; spec 225). SHACL-engine validation over
+// arbitrary instances is Phase 2 (spec 225 §11).
+//
+// See:
+//   - ../../specs/225-ontology.md — the contract
+//   - ../../docs/architecture/decisions/0018-agenticprimitives-wide-formal-ontology.md
+//   - ../../docs/architecture/decisions/0009-on-chain-ontology-shacl-naming.md (the on-chain peer)
+//
+// This entry is BROWSER-SAFE (pure IRI constants — no Node builtins), so
+// browser consumers (identity-directory → connect → demo-sso) can bundle it.
+// The Node-only artifact loaders (`ARTIFACTS` paths + `artifactPath`, which use
+// `node:url`/the filesystem) live in the `@agenticprimitives/ontology/artifacts`
+// subpath — import those only server-side.
+/** Bumped on any breaking change to the shipped vocabulary. */
+export const ONTOLOGY_VERSION = '0.1.0';
+/**
+ * Namespace IRIs, split per domain (mirrors the reference
+ * `smartagent.io/ontology/<domain>#` scheme; spec 225 §4). Pinned base:
+ * `https://agenticprimitives.dev/ns/`.
+ */
+export const NS = {
+    ap: 'https://agenticprimitives.dev/ns/core#',
+    apid: 'https://agenticprimitives.dev/ns/identity#',
+    apcr: 'https://agenticprimitives.dev/ns/credential#',
+    apdel: 'https://agenticprimitives.dev/ns/delegation#',
+    apcus: 'https://agenticprimitives.dev/ns/custody#',
+    apaud: 'https://agenticprimitives.dev/ns/audit#',
+    apnam: 'https://agenticprimitives.dev/ns/naming#',
+    aprel: 'https://agenticprimitives.dev/ns/relationships#',
+    aporg: 'https://agenticprimitives.dev/ns/org#',
+};
+/** Class IRIs (T-box). Each is `<namespace><LocalName>`. */
+export const CLASS = {
+    Agent: `${NS.ap}Agent`,
+    CanonicalAgentId: `${NS.ap}CanonicalAgentId`,
+    Facet: `${NS.ap}Facet`,
+    Evidence: `${NS.ap}Evidence`,
+    CredentialFacet: `${NS.apcr}CredentialFacet`,
+    NameFacet: `${NS.apnam}NameFacet`,
+    OidcSubject: `${NS.apid}OidcSubject`,
+    Org: `${NS.aporg}Org`,
+};
+/** Predicate / property IRIs (T-box). */
+export const PREDICATE = {
+    isFacetOf: `${NS.apid}isFacetOf`,
+    controls: `${NS.apcr}controls`,
+    hasEvidence: `${NS.ap}hasEvidence`,
+    assurance: `${NS.ap}assurance`,
+    controlStatus: `${NS.ap}controlStatus`,
+    resolvesTo: `${NS.apnam}resolvesTo`,
+    memberOf: `${NS.aporg}memberOf`,
+    delegatesTo: `${NS.apdel}delegatesTo`,
+};
+/** SHACL shape IRIs (C-box). */
+export const SHAPE = {
+    CanonicalAgentId: `${NS.ap}CanonicalAgentIdShape`,
+    CredentialFacet: `${NS.apcr}CredentialFacetShape`,
+};
+// `ARTIFACTS` + `artifactPath` (Node-only, `node:url`) live in the
+// `@agenticprimitives/ontology/artifacts` subpath — keep this entry browser-safe.
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,qEAAqE;AACrE,EAAE;AACF,8EAA8E;AAC9E,2EAA2E;AAC3E,8EAA8E;AAC9E,2EAA2E;AAC3E,iDAAiD;AACjD,EAAE;AACF,OAAO;AACP,iDAAiD;AACjD,uFAAuF;AACvF,mGAAmG;AACnG,EAAE;AACF,yEAAyE;AACzE,6EAA6E;AAC7E,gFAAgF;AAChF,iFAAiF;AACjF,2CAA2C;AAE3C,+DAA+D;AAC/D,MAAM,CAAC,MAAM,gBAAgB,GAAG,OAAgB,CAAC;AAEjD;;;;GAIG;AACH,MAAM,CAAC,MAAM,EAAE,GAAG;IAChB,EAAE,EAAE,wCAAwC;IAC5C,IAAI,EAAE,4CAA4C;IAClD,IAAI,EAAE,8CAA8C;IACpD,KAAK,EAAE,8CAA8C;IACrD,KAAK,EAAE,2CAA2C;IAClD,KAAK,EAAE,yCAAyC;IAChD,KAAK,EAAE,0CAA0C;IACjD,KAAK,EAAE,iDAAiD;IACxD,KAAK,EAAE,uCAAuC;CACtC,CAAC;AAEX,4DAA4D;AAC5D,MAAM,CAAC,MAAM,KAAK,GAAG;IACnB,KAAK,EAAE,GAAG,EAAE,CAAC,EAAE,OAAO;IACtB,gBAAgB,EAAE,GAAG,EAAE,CAAC,EAAE,kBAAkB;IAC5C,KAAK,EAAE,GAAG,EAAE,CAAC,EAAE,OAAO;IACtB,QAAQ,EAAE,GAAG,EAAE,CAAC,EAAE,UAAU;IAC5B,eAAe,EAAE,GAAG,EAAE,CAAC,IAAI,iBAAiB;IAC5C,SAAS,EAAE,GAAG,EAAE,CAAC,KAAK,WAAW;IACjC,WAAW,EAAE,GAAG,EAAE,CAAC,IAAI,aAAa;IACpC,GAAG,EAAE,GAAG,EAAE,CAAC,KAAK,KAAK;CACb,CAAC;AAEX,yCAAyC;AACzC,MAAM,CAAC,MAAM,SAAS,GAAG;IACvB,SAAS,EAAE,GAAG,EAAE,CAAC,IAAI,WAAW;IAChC,QAAQ,EAAE,GAAG,EAAE,CAAC,IAAI,UAAU;IAC9B,WAAW,EAAE,GAAG,EAAE,CAAC,EAAE,aAAa;IAClC,SAAS,EAAE,GAAG,EAAE,CAAC,EAAE,WAAW;IAC9B,aAAa,EAAE,GAAG,EAAE,CAAC,EAAE,eAAe;IACtC,UAAU,EAAE,GAAG,EAAE,CAAC,KAAK,YAAY;IACnC,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAK,UAAU;IAC/B,WAAW,EAAE,GAAG,EAAE,CAAC,KAAK,aAAa;CAC7B,CAAC;AAEX,gCAAgC;AAChC,MAAM,CAAC,MAAM,KAAK,GAAG;IACnB,gBAAgB,EAAE,GAAG,EAAE,CAAC,EAAE,uBAAuB;IACjD,eAAe,EAAE,GAAG,EAAE,CAAC,IAAI,sBAAsB;CACzC,CAAC;AAEX,mEAAmE;AACnE,kFAAkF"}

package/package.json

@@ -0,0 +1,60 @@
+{
+  "name": "@agenticprimitives/ontology",
+  "version": "0.1.0-alpha.2",
+  "description": "Monorepo-wide formal vocabulary (RDFS/OWL T-box + SHACL/SKOS C-box + A-box fixtures) for agentic primitives. Off-chain source of truth the on-chain ontology (ADR-0009) instantiates. Ships TTL/JSON-LD artifacts + typed IRI constants.",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/agentictrustlabs/agenticprimitives.git",
+    "directory": "packages/ontology"
+  },
+  "homepage": "https://github.com/agentictrustlabs/agenticprimitives/tree/master/packages/ontology",
+  "bugs": {
+    "url": "https://github.com/agentictrustlabs/agenticprimitives/issues"
+  },
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    },
+    "./artifacts": {
+      "types": "./dist/artifacts.d.ts",
+      "import": "./dist/artifacts.js"
+    }
+  },
+  "files": [
+    "LICENSE",
+    "dist",
+    "context.jsonld",
+    "tbox",
+    "cbox",
+    "abox",
+    "README.md"
+  ],
+  "scripts": {
+    "build": "tsc -p tsconfig.build.json",
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "test": "vitest run",
+    "test:unit": "vitest run test/unit",
+    "test:integration": "vitest run test/integration --passWithNoTests",
+    "test:watch": "vitest",
+    "clean": "rm -rf dist"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "devDependencies": {
+    "vitest": "^2.1.0"
+  },
+  "keywords": [
+    "ontology",
+    "rdfs",
+    "owl",
+    "shacl",
+    "knowledge-graph",
+    "agentic"
+  ]
+}

package/tbox/core.ttl

@@ -0,0 +1,71 @@
+# T-box — core vocabulary for agentic primitives.
+# RDFS/OWL terminology only (no instances, no constraints). Spec 225 §5.
+# The on-chain OntologyTermRegistry / ShapeRegistry (ADR-0009) instantiate
+# this vocabulary; off-chain TTL is the source of truth for the IRIs.
+
+@prefix ap:   <https://agenticprimitives.dev/ns/core#> .
+@prefix apid: <https://agenticprimitives.dev/ns/identity#> .
+@prefix rdf:  <http://www.w3.org/1999/02/22-rdf-syntax-ns#> .
+@prefix rdfs: <http://www.w3.org/2000/01/rdf-schema#> .
+@prefix owl:  <http://www.w3.org/2002/07/owl#> .
+@prefix xsd:  <http://www.w3.org/2001/XMLSchema#> .
+@prefix prov: <http://www.w3.org/ns/prov#> .
+
+ap: a owl:Ontology ;
+    rdfs:label "Agentic Primitives — core ontology" ;
+    owl:versionInfo "0.1.0" .
+
+# ─── Classes ──────────────────────────────────────────────────────────
+
+ap:Agent a owl:Class ;
+    rdfs:label "Agent" ;
+    rdfs:comment "The canonical ERC-4337 Smart Agent (ADR-0010). Every other node is a facet of, or edge to, an Agent. Identified by an ap:CanonicalAgentId." .
+
+ap:CanonicalAgentId a owl:Class ;
+    rdfs:label "CanonicalAgentId" ;
+    rdfs:comment "A branded CAIP-10 account identifier (eip155:* / hedera:* / solana:*). The SSO subject + directory key (ADR-0016). Validated by ap:CanonicalAgentIdShape." .
+
+# Agent-kind subclasses. agentKind is 3-valued (person/org/service; cbox); the
+# kind hierarchy is OWL. treasury is NOT an agentKind — it is a KIND OF SERVICE.
+ap:ServiceAgent a owl:Class ;
+    rdfs:subClassOf ap:Agent ;
+    rdfs:label "ServiceAgent" ;
+    rdfs:comment "An agent of kind 'service' (agentKind=service). Service profiles and treasuries are ServiceAgents." .
+
+ap:Treasury a owl:Class ;
+    rdfs:subClassOf ap:ServiceAgent ;
+    rdfs:label "Treasury" ;
+    rdfs:comment "A custody-policy-governed asset account — a KIND OF SERVICE (agentKind=service), distinguished by ProfileType/serviceType='treasury' (specs 210/217/225 §6). NOT a top-level agent kind." .
+
+ap:Facet a owl:Class ;
+    rdfs:label "Facet" ;
+    rdfs:comment "An abstract control/identity facet that points AT an Agent and rotates without changing it (ADR-0011). Subclasses: apcr:CredentialFacet, apnam:NameFacet, apid:OidcSubject." .
+
+ap:Evidence a owl:Class ;
+    rdfs:subClassOf prov:Entity ;
+    rdfs:label "Evidence" ;
+    rdfs:comment "Provenance for an asserted edge: which source asserted it, when, at what block, and at what assurance (spec 223)." .
+
+# ─── Properties ───────────────────────────────────────────────────────
+
+apid:isFacetOf a owl:ObjectProperty ;
+    rdfs:label "isFacetOf" ;
+    rdfs:domain ap:Facet ;
+    rdfs:range ap:Agent ;
+    rdfs:comment "A facet points at exactly one Agent." .
+
+ap:hasEvidence a owl:ObjectProperty ;
+    rdfs:label "hasEvidence" ;
+    rdfs:range ap:Evidence ;
+    rdfs:comment "Attaches provenance to an asserted association." .
+
+ap:assurance a owl:DatatypeProperty ;
+    rdfs:label "assurance" ;
+    rdfs:range xsd:string ;
+    rdfs:comment "Ordered assurance level: unverified < asserted < onchain-read < onchain-confirmed (apcus:assurance vocabulary)." .
+
+ap:controlStatus a owl:DatatypeProperty ;
+    rdfs:label "controlStatus" ;
+    rdfs:domain ap:CanonicalAgentId ;
+    rdfs:range xsd:string ;
+    rdfs:comment "Whether the subject is custodied here (custodied) or addressable-only (identifier-only). Non-EVM namespaces are identifier-only (spec 226 §4)." .

package/tbox/identity.ttl

@@ -0,0 +1,54 @@
+# T-box — identity/credential/naming/org facets. Spec 225 §5.
+
+@prefix ap:   <https://agenticprimitives.dev/ns/core#> .
+@prefix apid: <https://agenticprimitives.dev/ns/identity#> .
+@prefix apcr: <https://agenticprimitives.dev/ns/credential#> .
+@prefix apnam: <https://agenticprimitives.dev/ns/naming#> .
+@prefix aporg: <https://agenticprimitives.dev/ns/org#> .
+@prefix rdfs: <http://www.w3.org/2000/01/rdf-schema#> .
+@prefix owl:  <http://www.w3.org/2002/07/owl#> .
+@prefix xsd:  <http://www.w3.org/2001/XMLSchema#> .
+
+apcr:CredentialFacet a owl:Class ;
+    rdfs:subClassOf ap:Facet ;
+    rdfs:label "CredentialFacet" ;
+    rdfs:comment "A control credential (passkey / SIWE-EOA / hardware / OIDC) that CONTROLS an Agent under its custody policy. Rotates without changing the Agent (ADR-0011). NEVER an owner." .
+
+apnam:NameFacet a owl:Class ;
+    rdfs:subClassOf ap:Facet ;
+    rdfs:label "NameFacet" ;
+    rdfs:comment "A resolvable name (e.g. alice.agent) that resolves to an Agent. Decorative/display — never the sole authority (ADR-0006)." .
+
+apid:OidcSubject a owl:Class ;
+    rdfs:subClassOf ap:Facet ;
+    rdfs:label "OidcSubject" ;
+    rdfs:comment "An OIDC issuer+subject claim recorded as a login facet, not custody (ADR-0017). Keyed on (iss, sub), never email." .
+
+aporg:Org a owl:Class ;
+    rdfs:subClassOf ap:Agent ;
+    rdfs:label "Org" ;
+    rdfs:comment "An organization Agent with members (membership is informational; authority lives in custody/relationships)." .
+
+# ─── Properties ───────────────────────────────────────────────────────
+
+apcr:controls a owl:ObjectProperty ;
+    rdfs:label "controls" ;
+    rdfs:domain apcr:CredentialFacet ;
+    rdfs:range ap:Agent ;
+    rdfs:comment "A credential controls an Agent under custody policy — authorization, never ownership (ADR-0016)." .
+
+apcr:credentialKind a owl:DatatypeProperty ;
+    rdfs:label "credentialKind" ;
+    rdfs:domain apcr:CredentialFacet ;
+    rdfs:range xsd:string ;
+    rdfs:comment "One of the apcr:credentialKind controlled vocabulary: passkey / siwe-eoa / hardware / oidc." .
+
+apnam:resolvesTo a owl:ObjectProperty ;
+    rdfs:label "resolvesTo" ;
+    rdfs:domain apnam:NameFacet ;
+    rdfs:range ap:Agent .
+
+aporg:memberOf a owl:ObjectProperty ;
+    rdfs:label "memberOf" ;
+    rdfs:domain ap:Agent ;
+    rdfs:range aporg:Org .