@agenticprimitives/related-agents 0.0.0-alpha.3

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Agentic Trust Labs
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,65 @@
+# @agenticprimitives/related-agents
+
+**Some relationships are nobody else's business.** When a person creates an organization through a relying app, that person↔org link is among the most sensitive facts in the whole identity stack — and the default in most systems is to leak it: into an app database, into a public graph, into an index. This package makes the private path the only path. A person↔org link is a **private, holder-resident vault credential** — never an on-chain relationship, never relying-app-local person→org state ([ADR-0025](../../docs/architecture/decisions/0025-related-agent-links-are-private.md)). The public trust graph stays org↔org, and only on explicit bilateral consent.
+
+Part of [agenticprimitives](../../README.md) — the trust substrate for the agent economy: one canonical Smart Agent identity with custody, delegation, naming, credentials, and audit evidence designed as one system.
+
+It ships three things: the credential builder that links a person to a **related agent** (e.g. an org they created via a relying app), the scoped-delegation read caveats a grantee receives, and the list-query wire shapes the session broker serves — shapes that deliberately carry **no person id**, so even the listing surface cannot leak the link.
+
+Composes [`verifiable-credentials`](../verifiable-credentials) (DOLCE+DnS Situation + EIP-712 proof) and [`delegation`](../delegation) (caveats). Sibling of [`agent-relationships`](../agent-relationships), which owns *public, on-chain* edges only — the two are firewalled by design: this package may not import that one, and person↔org is never written as an edge.
+
+## Usage
+
+```ts
+import { buildRelatedAgentCredential, relatedAgentReadCaveats } from '@agenticprimitives/related-agents';
+import { signCredential } from '@agenticprimitives/verifiable-credentials';
+
+// The broker mints this during org-create, signed by the person's ROOT credential:
+const unsigned = buildRelatedAgentCredential({
+  holder: personSA, relatedAgent: orgSA,
+  purpose: 'adopter-org', requestedBy: 'relying-app',
+  issuerCaip10: `eip155:84532:${personSA}`,
+  body: { agentName: 'acme-co.agent' },
+  validFrom: new Date().toISOString(),
+});
+const credential = await signCredential(unsigned, personRootSigner);
+
+// The scoped org→grantee delegation caveats:
+const caveats = relatedAgentReadCaveats({
+  enforcers: { timestamp, value, allowedTargets },
+  validUntil, allowedTargets: [orgSA],
+});
+```
+
+The credential is self-issued (holder = issuer = the person's Smart Agent), `visibility = private`, holder-resident. The caveat set a grantee receives is time-bound, zero-value, and target-scoped — the grantee can *read* the org, not move anything. `purpose` is a free string supplied by the app; this package carries no vertical vocabulary.
+
+## How it's different
+
+The competing pattern is **app-local membership tables and public social graphs** — either the relying app owns the person→org row (and the user cannot take it elsewhere or revoke the app's knowledge of it), or the link is published to a graph anyone can crawl:
+
+- **Holder-resident, not app-resident.** The credential lives in the person's vault; the relying app gets a scoped, revocable, time-bound delegation — never the link itself.
+- **Privacy is structural, not a setting.** There is no "public" flag on a person↔org link. The on-chain graph (`agent-relationships`) is reserved for org↔org edges with explicit bilateral consent.
+- **Anchored to canonical identities.** Both ends are Smart Agent addresses, so the private link survives credential rotation and name changes — the same facet doctrine the rest of the substrate runs on.
+
+## Boundaries
+
+- **Storage is not here.** The vault (broker-home KV) and the query endpoints are app/broker-level; this package is shape + builder only.
+- **The VC envelope and signing** belong to `verifiable-credentials`; **delegation minting** belongs to `delegation`. This package composes both, owns neither.
+- **Wire shapes** — `RelatedAgentLink`, `ListRelatedAgentsResponse`, `DelegatedAgentLink`, `ListDelegatedAgentsResponse` — carry no person id.
+
+Canonical spec: [`specs/246-related-agents-vault.md`](../../specs/246-related-agents-vault.md).
+
+## Validation
+
+```bash
+pnpm --filter @agenticprimitives/related-agents typecheck
+pnpm --filter @agenticprimitives/related-agents test
+```
+
+## Status
+
+**w1-foundational** — the credential builder, caveat set, and wire shapes above are what ships today; storage and serving land at the app/broker layer. Testnet/pilot-ready; production launch is gated on the public checklist in the root [`README.md`](../../README.md#status--honest-version) — including third-party contract audit and governance key rotation. Track every security finding live in [`docs/audits/findings.yaml`](../../docs/audits/findings.yaml).
+
+## License
+
+UNLICENSED (internal monorepo, not published).

package/dist/index.d.ts

@@ -0,0 +1,132 @@
+/**
+ * @agenticprimitives/related-agents — private, holder-resident credentials that
+ * link a person to a RELATED agent (e.g. an org they created via a relying app),
+ * plus the scoped-delegation caveats a grantee gets to read related-agent
+ * metadata.
+ *
+ * person↔org is PRIVATE vault state, NEVER an on-chain edge (ADR-0025). This
+ * package owns the credential SHAPE + the scoped-delegation caveat set + the
+ * list-query types — not the storage (Connect-home vault) nor the vocabulary
+ * (`purpose` is a free string; no vertical terms — ADR-0021).
+ *
+ * Composes `verifiable-credentials` (DOLCE+DnS Situation + EIP-712 proof) +
+ * `delegation` (caveats). Sibling of `agent-relationships`, which owns ON-CHAIN
+ * edges only — this is the off-chain, holder-resident, private counterpart.
+ *
+ * Authoritative spec: specs/246-related-agents-vault.md
+ */
+import { type Situation, type UnsignedCredential, type Hex32, type VisibilityTier } from '@agenticprimitives/verifiable-credentials';
+import type { Address, Hex, Caveat, Delegation } from '@agenticprimitives/delegation';
+export declare const PACKAGE_NAME = "@agenticprimitives/related-agents";
+export declare const PACKAGE_STATUS: "w1-foundational";
+export declare const SPEC_REF = "specs/246-related-agents-vault.md";
+/** DOLCE Description for the related-agent situation credential. */
+export declare const RELATED_AGENT_DESCRIPTION = "apra:RelatedAgentCredential";
+/** The freeform body of a related-agent credential (NOT the roles/participants). */
+export interface RelatedAgentBody extends Record<string, unknown> {
+    /** Human-readable name of the related agent (e.g. the org's `.impact` name). */
+    agentName: string;
+    /** Optional app-level kind tag (opaque to this package). */
+    agentKind?: string;
+    /** spec 271 (W0) — the recoverable custody descriptor for this related agent SA. Private (the credential
+     *  is `visibility: private`); lets an authenticated owner reconstruct the SA's custodian (ADR-0035). */
+    custody?: CustodyDescriptor;
+}
+/** How an SA's custodian is reconstructed. For `kms-subject` the owner's `(iss,sub)` is DELIBERATELY
+ *  absent — it is supplied by the live owner session at recovery time, so the descriptor alone never
+ *  identifies the owner (RC-INV-3 / ADR-0025 privacy). */
+export type CustodyKind = {
+    kind: 'kms-subject';
+    rotation: number;
+} | {
+    kind: 'passkey';
+    credentialId: string;
+} | {
+    kind: 'eoa';
+    address: Address;
+};
+/** The recoverable record of how an SA is custodied. Persisted (by the app/Connect, never this package)
+ *  in the owner's PRIVATE related vault. The `salt` is the otherwise-discarded deployment salt
+ *  (random per ADR-0010); reconstruction also needs the KMS master + an authenticated owner session, so
+ *  the descriptor alone grants nothing (RC-INV-1). */
+export interface CustodyDescriptor {
+    /** The SA this descriptor reconstructs the custodian for (== the credential's `relatedAgent` role). */
+    targetSA: Address;
+    /** The deployment salt (bytes32). The piece lost today when an org SA deploys with a random salt. */
+    salt: Hex;
+    /** The custodian reconstruction method. */
+    custody: CustodyKind;
+}
+/** Validate + canonicalize a custody descriptor. Rebuilds `custody` field-by-field so no extra field
+ *  (e.g. a smuggled `iss`/`sub`) can survive into the stored record (RC-INV-3). Fail-closed on bad input. */
+export declare function buildCustodyDescriptor(d: CustodyDescriptor): CustodyDescriptor;
+export type RelatedAgentCredential = UnsignedCredential<Situation<{
+    payload: RelatedAgentBody;
+}>>;
+export interface BuildRelatedAgentCredentialArgs {
+    /** The person SA — holder AND (self-issued) issuer of the credential. */
+    holder: Address;
+    /** The related agent SA (e.g. the org). */
+    relatedAgent: Address;
+    /** App-level purpose tag, e.g. `jp-adopter-org` (free string — no vocabulary here). */
+    purpose: string;
+    /** The relying app that requested the link (its OIDC `client_id`). */
+    requestedBy: string;
+    /** CAIP-10 issuer id (the person home); `eip155:<chainId>:<holder>`. */
+    issuerCaip10: string;
+    body: RelatedAgentBody;
+    validFrom: string;
+    validUntil?: string;
+    /** Defaults to 'private' — person↔org links are private by default (ADR-0025). */
+    visibility?: VisibilityTier;
+}
+/** Build the unsigned, self-issued related-agent situation credential. The caller
+ *  signs it with the holder's ROOT credential (issuer = holder = personSA). */
+export declare function buildRelatedAgentCredential(args: BuildRelatedAgentCredentialArgs): RelatedAgentCredential;
+/** The credential hash a relying app holds as `proofHash` (RFC-8785 JCS keccak). */
+export declare function relatedAgentProofHash(credential: RelatedAgentCredential): Hex32;
+export interface RelatedAgentReadCaveatArgs {
+    /** Deployment enforcer addresses (supplied by the app — NOT hardcoded here). */
+    enforcers: {
+        timestamp: Address;
+        value: Address;
+        allowedTargets: Address;
+    };
+    /** Unix seconds the grant is valid until. */
+    validUntil: number;
+    /** The read targets the grantee may call (e.g. naming + relationship contracts). */
+    allowedTargets: Address[];
+    /** Optional valid-after (defaults 0). */
+    validAfter?: number;
+}
+/** Build the standard scoped-read caveat set for a related-agent delegation
+ *  (org→relying-site OR org→broker-org): time-bounded, zero-value, target-scoped.
+ *  Reuses the `delegation` caveat primitives — no new enforcer. */
+export declare function relatedAgentReadCaveats(args: RelatedAgentReadCaveatArgs): Caveat[];
+/** A related-agent link a relying app receives or lists — carries NO person id. */
+export interface RelatedAgentLink {
+    orgAgent: Address;
+    orgName: string;
+    purpose: string;
+    requestedBy: string;
+    /** The scoped org→grantee delegation. */
+    delegation: Delegation;
+    /** Hash of the private vault credential backing this link. */
+    proofHash: Hex32;
+}
+/** Response of `GET /connect/related-orgs?client_id=` (person-session-authorized). */
+export interface ListRelatedAgentsResponse {
+    orgs: RelatedAgentLink[];
+}
+/** A single org that delegated to a grantee agent (e.g. the broker org). */
+export interface DelegatedAgentLink {
+    orgAgent: Address;
+    orgName: string;
+    delegation: Delegation;
+}
+/** Response of `GET /connect/delegated-orgs?delegate=` (delegate-control-authorized). */
+export interface ListDelegatedAgentsResponse {
+    orgs: DelegatedAgentLink[];
+}
+export type { Address, Hex };
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAIL,KAAK,SAAS,EACd,KAAK,kBAAkB,EACvB,KAAK,KAAK,EACV,KAAK,cAAc,EACpB,MAAM,2CAA2C,CAAC;AAOnD,OAAO,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,+BAA+B,CAAC;AAEtF,eAAO,MAAM,YAAY,sCAAsC,CAAC;AAChE,eAAO,MAAM,cAAc,EAAG,iBAA0B,CAAC;AACzD,eAAO,MAAM,QAAQ,sCAAsC,CAAC;AAE5D,oEAAoE;AACpE,eAAO,MAAM,yBAAyB,gCAAgC,CAAC;AAEvE,oFAAoF;AACpF,MAAM,WAAW,gBAAiB,SAAQ,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAC/D,gFAAgF;IAChF,SAAS,EAAE,MAAM,CAAC;IAClB,4DAA4D;IAC5D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;4GACwG;IACxG,OAAO,CAAC,EAAE,iBAAiB,CAAC;CAC7B;AAID;;0DAE0D;AAC1D,MAAM,MAAM,WAAW,GACnB;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GACzC;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,GACzC;IAAE,IAAI,EAAE,KAAK,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,CAAC;AAEtC;;;sDAGsD;AACtD,MAAM,WAAW,iBAAiB;IAChC,uGAAuG;IACvG,QAAQ,EAAE,OAAO,CAAC;IAClB,qGAAqG;IACrG,IAAI,EAAE,GAAG,CAAC;IACV,2CAA2C;IAC3C,OAAO,EAAE,WAAW,CAAC;CACtB;AAKD;6GAC6G;AAC7G,wBAAgB,sBAAsB,CAAC,CAAC,EAAE,iBAAiB,GAAG,iBAAiB,CA2B9E;AAED,MAAM,MAAM,sBAAsB,GAAG,kBAAkB,CAAC,SAAS,CAAC;IAAE,OAAO,EAAE,gBAAgB,CAAA;CAAE,CAAC,CAAC,CAAC;AAElG,MAAM,WAAW,+BAA+B;IAC9C,yEAAyE;IACzE,MAAM,EAAE,OAAO,CAAC;IAChB,2CAA2C;IAC3C,YAAY,EAAE,OAAO,CAAC;IACtB,uFAAuF;IACvF,OAAO,EAAE,MAAM,CAAC;IAChB,sEAAsE;IACtE,WAAW,EAAE,MAAM,CAAC;IACpB,wEAAwE;IACxE,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,gBAAgB,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,kFAAkF;IAClF,UAAU,CAAC,EAAE,cAAc,CAAC;CAC7B;AAED;+EAC+E;AAC/E,wBAAgB,2BAA2B,CAAC,IAAI,EAAE,+BAA+B,GAAG,sBAAsB,CAuBzG;AAED,oFAAoF;AACpF,wBAAgB,qBAAqB,CAAC,UAAU,EAAE,sBAAsB,GAAG,KAAK,CAE/E;AAID,MAAM,WAAW,0BAA0B;IACzC,gFAAgF;IAChF,SAAS,EAAE;QAAE,SAAS,EAAE,OAAO,CAAC;QAAC,KAAK,EAAE,OAAO,CAAC;QAAC,cAAc,EAAE,OAAO,CAAA;KAAE,CAAC;IAC3E,6CAA6C;IAC7C,UAAU,EAAE,MAAM,CAAC;IACnB,oFAAoF;IACpF,cAAc,EAAE,OAAO,EAAE,CAAC;IAC1B,yCAAyC;IACzC,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;mEAEmE;AACnE,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,0BAA0B,GAAG,MAAM,EAAE,CAMlF;AAID,mFAAmF;AACnF,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,OAAO,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,yCAAyC;IACzC,UAAU,EAAE,UAAU,CAAC;IACvB,8DAA8D;IAC9D,SAAS,EAAE,KAAK,CAAC;CAClB;AAED,sFAAsF;AACtF,MAAM,WAAW,yBAAyB;IACxC,IAAI,EAAE,gBAAgB,EAAE,CAAC;CAC1B;AAED,4EAA4E;AAC5E,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,OAAO,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,UAAU,CAAC;CACxB;AAED,yFAAyF;AACzF,MAAM,WAAW,2BAA2B;IAC1C,IAAI,EAAE,kBAAkB,EAAE,CAAC;CAC5B;AAED,YAAY,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC"}

package/dist/index.js

@@ -0,0 +1,101 @@
+/**
+ * @agenticprimitives/related-agents — private, holder-resident credentials that
+ * link a person to a RELATED agent (e.g. an org they created via a relying app),
+ * plus the scoped-delegation caveats a grantee gets to read related-agent
+ * metadata.
+ *
+ * person↔org is PRIVATE vault state, NEVER an on-chain edge (ADR-0025). This
+ * package owns the credential SHAPE + the scoped-delegation caveat set + the
+ * list-query types — not the storage (Connect-home vault) nor the vocabulary
+ * (`purpose` is a free string; no vertical terms — ADR-0021).
+ *
+ * Composes `verifiable-credentials` (DOLCE+DnS Situation + EIP-712 proof) +
+ * `delegation` (caveats). Sibling of `agent-relationships`, which owns ON-CHAIN
+ * edges only — this is the off-chain, holder-resident, private counterpart.
+ *
+ * Authoritative spec: specs/246-related-agents-vault.md
+ */
+import { buildSituation, credentialHash, VC_CONTEXT_V2, } from '@agenticprimitives/verifiable-credentials';
+import { buildCaveat, encodeTimestampTerms, encodeValueTerms, encodeAllowedTargetsTerms, } from '@agenticprimitives/delegation';
+export const PACKAGE_NAME = '@agenticprimitives/related-agents';
+export const PACKAGE_STATUS = 'w1-foundational';
+export const SPEC_REF = 'specs/246-related-agents-vault.md';
+/** DOLCE Description for the related-agent situation credential. */
+export const RELATED_AGENT_DESCRIPTION = 'apra:RelatedAgentCredential';
+const CD_ADDRESS = /^0x[0-9a-fA-F]{40}$/;
+const CD_BYTES32 = /^0x[0-9a-fA-F]{64}$/;
+/** Validate + canonicalize a custody descriptor. Rebuilds `custody` field-by-field so no extra field
+ *  (e.g. a smuggled `iss`/`sub`) can survive into the stored record (RC-INV-3). Fail-closed on bad input. */
+export function buildCustodyDescriptor(d) {
+    if (!CD_ADDRESS.test(d.targetSA))
+        throw new Error('custody descriptor: targetSA must be a 20-byte address');
+    if (!CD_BYTES32.test(d.salt))
+        throw new Error('custody descriptor: salt must be bytes32 (0x + 64 hex)');
+    let custody;
+    switch (d.custody.kind) {
+        case 'kms-subject': {
+            const { rotation } = d.custody;
+            if (!Number.isInteger(rotation) || rotation < 0) {
+                throw new Error('custody descriptor: kms-subject rotation must be a non-negative integer');
+            }
+            custody = { kind: 'kms-subject', rotation }; // explicit — drops any smuggled owner identifier
+            break;
+        }
+        case 'passkey': {
+            if (!d.custody.credentialId)
+                throw new Error('custody descriptor: passkey requires credentialId');
+            custody = { kind: 'passkey', credentialId: d.custody.credentialId };
+            break;
+        }
+        case 'eoa': {
+            if (!CD_ADDRESS.test(d.custody.address))
+                throw new Error('custody descriptor: eoa address invalid');
+            custody = { kind: 'eoa', address: d.custody.address };
+            break;
+        }
+        default:
+            throw new Error(`custody descriptor: unknown custody kind ${d.custody.kind}`);
+    }
+    return { targetSA: d.targetSA, salt: d.salt, custody };
+}
+/** Build the unsigned, self-issued related-agent situation credential. The caller
+ *  signs it with the holder's ROOT credential (issuer = holder = personSA). */
+export function buildRelatedAgentCredential(args) {
+    const situation = buildSituation({
+        description: RELATED_AGENT_DESCRIPTION,
+        roles: {
+            holder: args.holder,
+            relatedAgent: args.relatedAgent,
+            issuer: args.holder, // self-issued
+        },
+        body: { payload: args.body },
+        participants: {
+            purpose: args.purpose,
+            requestedBy: args.requestedBy,
+            visibility: args.visibility ?? 'private',
+        },
+    });
+    return {
+        '@context': [VC_CONTEXT_V2],
+        type: ['VerifiableCredential', 'RelatedAgentCredential'],
+        issuer: args.issuerCaip10,
+        validFrom: args.validFrom,
+        validUntil: args.validUntil,
+        credentialSubject: situation,
+    };
+}
+/** The credential hash a relying app holds as `proofHash` (RFC-8785 JCS keccak). */
+export function relatedAgentProofHash(credential) {
+    return credentialHash(credential);
+}
+/** Build the standard scoped-read caveat set for a related-agent delegation
+ *  (org→relying-site OR org→broker-org): time-bounded, zero-value, target-scoped.
+ *  Reuses the `delegation` caveat primitives — no new enforcer. */
+export function relatedAgentReadCaveats(args) {
+    return [
+        buildCaveat(args.enforcers.timestamp, encodeTimestampTerms(args.validAfter ?? 0, args.validUntil)),
+        buildCaveat(args.enforcers.value, encodeValueTerms(0n)),
+        buildCaveat(args.enforcers.allowedTargets, encodeAllowedTargetsTerms(args.allowedTargets)),
+    ];
+}
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EACL,cAAc,EACd,cAAc,EACd,aAAa,GAKd,MAAM,2CAA2C,CAAC;AACnD,OAAO,EACL,WAAW,EACX,oBAAoB,EACpB,gBAAgB,EAChB,yBAAyB,GAC1B,MAAM,+BAA+B,CAAC;AAGvC,MAAM,CAAC,MAAM,YAAY,GAAG,mCAAmC,CAAC;AAChE,MAAM,CAAC,MAAM,cAAc,GAAG,iBAA0B,CAAC;AACzD,MAAM,CAAC,MAAM,QAAQ,GAAG,mCAAmC,CAAC;AAE5D,oEAAoE;AACpE,MAAM,CAAC,MAAM,yBAAyB,GAAG,6BAA6B,CAAC;AAoCvE,MAAM,UAAU,GAAG,qBAAqB,CAAC;AACzC,MAAM,UAAU,GAAG,qBAAqB,CAAC;AAEzC;6GAC6G;AAC7G,MAAM,UAAU,sBAAsB,CAAC,CAAoB;IACzD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC5G,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IACxG,IAAI,OAAoB,CAAC;IACzB,QAAQ,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QACvB,KAAK,aAAa,CAAC,CAAC,CAAC;YACnB,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC;YAC/B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,CAAC,EAAE,CAAC;gBAChD,MAAM,IAAI,KAAK,CAAC,yEAAyE,CAAC,CAAC;YAC7F,CAAC;YACD,OAAO,GAAG,EAAE,IAAI,EAAE,aAAa,EAAE,QAAQ,EAAE,CAAC,CAAC,iDAAiD;YAC9F,MAAM;QACR,CAAC;QACD,KAAK,SAAS,CAAC,CAAC,CAAC;YACf,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY;gBAAE,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;YAClG,OAAO,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;YACpE,MAAM;QACR,CAAC;QACD,KAAK,KAAK,CAAC,CAAC,CAAC;YACX,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;YACpG,OAAO,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;YACtD,MAAM;QACR,CAAC;QACD;YACE,MAAM,IAAI,KAAK,CAAC,4CAA6C,CAAC,CAAC,OAA6B,CAAC,IAAI,EAAE,CAAC,CAAC;IACzG,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC;AACzD,CAAC;AAsBD;+EAC+E;AAC/E,MAAM,UAAU,2BAA2B,CAAC,IAAqC;IAC/E,MAAM,SAAS,GAAG,cAAc,CAAgC;QAC9D,WAAW,EAAE,yBAAyB;QACtC,KAAK,EAAE;YACL,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,cAAc;SACpC;QACD,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE;QAC5B,YAAY,EAAE;YACZ,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,SAAS;SACzC;KACF,CAAC,CAAC;IACH,OAAO;QACL,UAAU,EAAE,CAAC,aAAa,CAAC;QAC3B,IAAI,EAAE,CAAC,sBAAsB,EAAE,wBAAwB,CAAC;QACxD,MAAM,EAAE,IAAI,CAAC,YAAY;QACzB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,iBAAiB,EAAE,SAAS;KAC7B,CAAC;AACJ,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,qBAAqB,CAAC,UAAkC;IACtE,OAAO,cAAc,CAAC,UAAU,CAAC,CAAC;AACpC,CAAC;AAeD;;mEAEmE;AACnE,MAAM,UAAU,uBAAuB,CAAC,IAAgC;IACtE,OAAO;QACL,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,oBAAoB,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QAClG,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,gBAAgB,CAAC,EAAE,CAAC,CAAC;QACvD,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,cAAc,EAAE,yBAAyB,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;KAC3F,CAAC;AACJ,CAAC"}

package/package.json

@@ -0,0 +1,59 @@
+{
+  "name": "@agenticprimitives/related-agents",
+  "version": "0.0.0-alpha.3",
+  "description": "Private, holder-resident related-agent credentials (person↔org links as vault situation credentials, never on-chain edges — ADR-0025) + scoped-delegation read caveats + list-query shapes. Composes verifiable-credentials + delegation.",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/agentictrustlabs/agenticprimitives.git",
+    "directory": "packages/related-agents"
+  },
+  "homepage": "https://github.com/agentictrustlabs/agenticprimitives/tree/master/packages/related-agents",
+  "bugs": {
+    "url": "https://github.com/agentictrustlabs/agenticprimitives/issues"
+  },
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "files": [
+    "LICENSE",
+    "dist",
+    "spec.md",
+    "README.md"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "peerDependencies": {
+    "viem": "^2.52.2"
+  },
+  "devDependencies": {
+    "vitest": "^4.1.8",
+    "viem": "^2.52.2"
+  },
+  "keywords": [
+    "agentic",
+    "primitives",
+    "related-agents",
+    "vault"
+  ],
+  "dependencies": {
+    "@agenticprimitives/delegation": "1.0.0-alpha.7",
+    "@agenticprimitives/verifiable-credentials": "0.0.0-alpha.3",
+    "@agenticprimitives/types": "1.0.0-alpha.7"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.build.json",
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "test": "vitest run",
+    "test:unit": "vitest run test/unit --passWithNoTests",
+    "test:watch": "vitest",
+    "clean": "rm -rf dist"
+  }
+}

package/spec.md

@@ -0,0 +1,6 @@
+# Spec pointer
+
+Canonical spec: [`../../specs/246-related-agents-vault.md`](../../specs/246-related-agents-vault.md)
+
+Architecture-of-record: [ADR-0025](../../docs/architecture/decisions/0025-related-agent-links-are-private.md)
+(person↔org links are private vault credentials, not on-chain edges).