@agenticprimitives/runtime-member 0.0.0-alpha.2

package/dist/standing.d.ts

@@ -0,0 +1,58 @@
+import { type Address, type Hex } from 'viem';
+import { type MandateRequirementV1 } from '@agenticprimitives/delegation';
+import type { Signer } from './client.js';
+/** The enforcer addresses a standing grant and its children are written against. */
+export interface StandingEnforcers {
+    timestamp: Address;
+    allowedMethods: Address;
+    value: Address;
+    allowedTargets: Address;
+    digestBinding: Address;
+}
+export interface StandingGrantV1 {
+    v: 1;
+    /** The standing delegation: member SA → the runtime's key, signed by the member's custodian. Wire-shaped (salt as a string). */
+    wire: Record<string, unknown>;
+    ref: Hex;
+    /** What it allows, as the handler reads it — the parent requirement `deriveMandate` bounds a child by. */
+    requirement: Omit<MandateRequirementV1, 'intentDigest'>;
+    enforcers: StandingEnforcers;
+    chainId: number;
+    delegationManager: Address;
+    grantedAt: string;
+}
+export interface BuildStandingInput {
+    member: Address;
+    runtimeKey: Address;
+    capabilities: string[];
+    /** The LOCATIONS the grant is bounded to — for `messaging.direct.send` the recipients it may write to (the
+     *  capability's resource is who is messaged; the sender is the delegator). Omitted: any location, as itself. */
+    locations?: Address[];
+    validForSeconds: number;
+    enforcers: StandingEnforcers;
+    chainId: number;
+    delegationManager: Address;
+    /** The member's custodian — the only party who can grant. A port; the key is never here. */
+    signDigest: Signer;
+}
+/** The standing grant, signed by the custodian. No intent binding — that is what makes it standing. */
+export declare function buildStandingGrant(i: BuildStandingInput): Promise<StandingGrantV1>;
+/** What a parked run said it needs — read off the AUTH_REQUIRED task's data part. */
+export interface ParkedNeed {
+    requirement: MandateRequirementV1;
+    delegator: Address;
+    delegate: Address;
+}
+export declare function parkedNeedOf(data: unknown): ParkedNeed | null;
+export type Derived = {
+    ok: true;
+    presented: Array<Record<string, unknown>>;
+    childRef: Hex;
+} | {
+    ok: false;
+    reason: string;
+};
+/** The child for THIS intent, from the standing grant, signed with the runtime's key — or why not. The run's need must
+ *  be an act OF the member (delegator = the member) and ⊆ the grant; anything else stays parked for the steward. */
+export declare function deriveForNeed(standing: StandingGrantV1, need: ParkedNeed, member: Address, sign: Signer): Promise<Derived>;
+//# sourceMappingURL=standing.d.ts.map

package/dist/standing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"standing.d.ts","sourceRoot":"","sources":["../src/standing.ts"],"names":[],"mappings":"AAcA,OAAO,EAAS,KAAK,OAAO,EAAE,KAAK,GAAG,EAAE,MAAM,MAAM,CAAC;AACrD,OAAO,EAAmI,KAAK,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAC3M,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAE1C,oFAAoF;AACpF,MAAM,WAAW,iBAAiB;IAAG,SAAS,EAAE,OAAO,CAAC;IAAC,cAAc,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,OAAO,CAAC;IAAC,cAAc,EAAE,OAAO,CAAC;IAAC,aAAa,EAAE,OAAO,CAAA;CAAE;AAEnJ,MAAM,WAAW,eAAe;IAC9B,CAAC,EAAE,CAAC,CAAC;IACL,gIAAgI;IAChI,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,GAAG,EAAE,GAAG,CAAC;IACT,0GAA0G;IAC1G,WAAW,EAAE,IAAI,CAAC,oBAAoB,EAAE,cAAc,CAAC,CAAC;IACxD,SAAS,EAAE,iBAAiB,CAAC;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,iBAAiB,EAAE,OAAO,CAAC;IAC3B,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,OAAO,CAAC;IAChB,UAAU,EAAE,OAAO,CAAC;IACpB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB;oHACgH;IAChH,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC;IACtB,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,iBAAiB,CAAC;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,iBAAiB,EAAE,OAAO,CAAC;IAC3B,4FAA4F;IAC5F,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,uGAAuG;AACvG,wBAAsB,kBAAkB,CAAC,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,eAAe,CAAC,CAUxF;AAED,qFAAqF;AACrF,MAAM,WAAW,UAAU;IAAG,WAAW,EAAE,oBAAoB,CAAC;IAAC,SAAS,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,OAAO,CAAA;CAAE;AAExG,wBAAgB,YAAY,CAAC,IAAI,EAAE,OAAO,GAAG,UAAU,GAAG,IAAI,CAK7D;AAED,MAAM,MAAM,OAAO,GAAG;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAAC,QAAQ,EAAE,GAAG,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAE7H;oHACoH;AACpH,wBAAsB,aAAa,CAAC,QAAQ,EAAE,eAAe,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAoBhI"}

package/dist/standing.js

@@ -0,0 +1,65 @@
+// THE OPEN MANDATE (spec 400 W2a) — what makes a hosted runtime feel live without lending it anyone's session.
+//
+// Every write a runtime attempts parks for the steward's signature (§5.3). For ONE capability the steward may decide
+// once instead of every time: she signs a STANDING GRANT — a delegation from the member's Smart Agent to the runtime's
+// own key, `messaging.direct.send` at the member, time-bounded, no value, and (the whole point) NO intent binding —
+// which is a capability, not a mandate (delegation/mandate.ts). When a reply then parks, the runtime DERIVES the
+// mandate the run asked for: a child of the standing grant bound to exactly that intent digest (`deriveMandate`,
+// subset-checked), signs it with its own key, and continues the same run presenting the chain [child, standing]. The
+// harness verifies every link (the standing grant's signature against the member's SA, its revocation on chain, the
+// child ⊆ parent, the intent binding) before the step acts — as it would a steward's one-prompt approval. Revoke the
+// standing grant on chain and the next derivation is refused everywhere; the runtime never held a pen of anyone's.
+//
+// What this is NOT: a session, a bearer, a "trusted runtime" flag, or a pre-approval of anything but the named
+// capability at the named agent within the window. A commit, an allocation, a payment still park.
+import { toHex } from 'viem';
+import { capabilityHandler, deriveMandate, hashDelegation, CAPABILITY_RAR_TYPE, DEFAULT_SUBSET_HANDLERS, ROOT_AUTHORITY } from '@agenticprimitives/delegation';
+/** The standing grant, signed by the custodian. No intent binding — that is what makes it standing. */
+export async function buildStandingGrant(i) {
+    if (!i.capabilities.length)
+        throw new Error('a standing grant names at least one capability');
+    const now = Math.floor(Date.now() / 1000);
+    const requirement = { type: CAPABILITY_RAR_TYPE, actions: i.capabilities, ...(i.locations?.length ? { locations: i.locations.map((l) => l.toLowerCase()) } : {}), validAfter: now - 60, validUntil: now + i.validForSeconds };
+    const caveats = capabilityHandler.toCaveats(requirement, i.enforcers);
+    const salt = BigInt(toHex(crypto.getRandomValues(new Uint8Array(16))));
+    const d = { delegator: i.member, delegate: i.runtimeKey, authority: ROOT_AUTHORITY, caveats, salt, signature: '0x' };
+    const ref = hashDelegation(d, i.chainId, i.delegationManager);
+    d.signature = await i.signDigest(ref);
+    return { v: 1, wire: { ...d, salt: salt.toString() }, ref, requirement, enforcers: i.enforcers, chainId: i.chainId, delegationManager: i.delegationManager, grantedAt: new Date().toISOString() };
+}
+export function parkedNeedOf(data) {
+    const d = data;
+    if (!d?.requirement || typeof d.requirement !== 'object' || !d.delegator || !d.delegate)
+        return null;
+    if (typeof d.requirement.intentDigest !== 'string' || !Array.isArray(d.requirement.actions))
+        return null;
+    return { requirement: d.requirement, delegator: d.delegator, delegate: d.delegate };
+}
+/** The child for THIS intent, from the standing grant, signed with the runtime's key — or why not. The run's need must
+ *  be an act OF the member (delegator = the member) and ⊆ the grant; anything else stays parked for the steward. */
+export async function deriveForNeed(standing, need, member, sign) {
+    if (need.delegator.toLowerCase() !== member.toLowerCase())
+        return { ok: false, reason: `the run needs an act of ${need.delegator}, not of ${member}` };
+    if (need.requirement.type !== CAPABILITY_RAR_TYPE)
+        return { ok: false, reason: `the run needs a ${need.requirement.type} mandate; the standing grant is a capability` };
+    const parent = { ...standing.wire, salt: BigInt(String(standing.wire.salt)) };
+    const salt = BigInt(toHex(crypto.getRandomValues(new Uint8Array(16))));
+    // The child's window is the run's need CLAMPED into the grant's: a mandate narrower in time than the run asked for
+    // still covers this moment, and a child may never outlive its parent. Outside the grant's window altogether → refused.
+    const validAfter = Math.max(need.requirement.validAfter ?? 0, standing.requirement.validAfter ?? 0);
+    const validUntil = Math.min(need.requirement.validUntil, standing.requirement.validUntil);
+    const now = Math.floor(Date.now() / 1000);
+    if (validAfter > now || validUntil <= now)
+        return { ok: false, reason: `the standing grant's window (until ${new Date(standing.requirement.validUntil * 1000).toISOString().slice(0, 16)}) does not cover now` };
+    const out = deriveMandate({
+        parent, parentRequirement: { ...standing.requirement, intentDigest: need.requirement.intentDigest },
+        requirement: { ...need.requirement, validAfter, validUntil }, grantee: need.delegate, enforcers: standing.enforcers, chainId: standing.chainId, delegationManager: standing.delegationManager, salt,
+        handlers: DEFAULT_SUBSET_HANDLERS, // the capability handler, explicitly — the ambient registry is the harness's to fill
+    });
+    if (!out.ok)
+        return { ok: false, reason: out.reason };
+    const signature = await sign(out.digest);
+    const child = { ...out.delegation, signature, salt: salt.toString() };
+    return { ok: true, presented: [child, standing.wire], childRef: out.digest };
+}
+//# sourceMappingURL=standing.js.map

package/dist/standing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"standing.js","sourceRoot":"","sources":["../src/standing.ts"],"names":[],"mappings":"AAAA,+GAA+G;AAC/G,EAAE;AACF,qHAAqH;AACrH,uHAAuH;AACvH,oHAAoH;AACpH,iHAAiH;AACjH,iHAAiH;AACjH,qHAAqH;AACrH,oHAAoH;AACpH,qHAAqH;AACrH,mHAAmH;AACnH,EAAE;AACF,+GAA+G;AAC/G,kGAAkG;AAClG,OAAO,EAAE,KAAK,EAA0B,MAAM,MAAM,CAAC;AACrD,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAAE,cAAc,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,cAAc,EAA8C,MAAM,+BAA+B,CAAC;AAkC3M,uGAAuG;AACvG,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,CAAqB;IAC5D,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IAC9F,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAC1C,MAAM,WAAW,GAA+C,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,CAAC,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAa,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,UAAU,EAAE,GAAG,GAAG,EAAE,EAAE,UAAU,EAAE,GAAG,GAAG,CAAC,CAAC,eAAe,EAAE,CAAC;IACrR,MAAM,OAAO,GAAG,iBAAiB,CAAC,SAAS,CAAC,WAAmC,EAAE,CAAC,CAAC,SAAkB,CAAC,CAAC;IACvG,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACvE,MAAM,CAAC,GAAe,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,UAAU,EAAE,SAAS,EAAE,cAAc,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IACjI,MAAM,GAAG,GAAG,cAAc,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,iBAAiB,CAAC,CAAC;IAC9D,CAAC,CAAC,SAAS,GAAG,MAAM,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IACtC,OAAO,EAAE,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,iBAAiB,EAAE,CAAC,CAAC,iBAAiB,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;AACpM,CAAC;AAKD,MAAM,UAAU,YAAY,CAAC,IAAa;IACxC,MAAM,CAAC,GAAG,IAAiG,CAAC;IAC5G,IAAI,CAAC,CAAC,EAAE,WAAW,IAAI,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IACrG,IAAI,OAAO,CAAC,CAAC,WAAW,CAAC,YAAY,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IACzG,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,SAAS,EAAE,CAAC,CAAC,SAAoB,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAmB,EAAE,CAAC;AAC5G,CAAC;AAID;oHACoH;AACpH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,QAAyB,EAAE,IAAgB,EAAE,MAAe,EAAE,IAAY;IAC5G,IAAI,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,WAAW,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,2BAA2B,IAAI,CAAC,SAAS,YAAY,MAAM,EAAE,EAAE,CAAC;IACvJ,IAAI,IAAI,CAAC,WAAW,CAAC,IAAI,KAAK,mBAAmB;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,IAAI,CAAC,WAAW,CAAC,IAAI,8CAA8C,EAAE,CAAC;IACxK,MAAM,MAAM,GAAG,EAAE,GAAG,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAA2B,CAAC;IACvG,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACvE,mHAAmH;IACnH,uHAAuH;IACvH,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU,IAAI,CAAC,EAAE,QAAQ,CAAC,WAAW,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC;IACpG,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,QAAQ,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;IAC1F,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAC1C,IAAI,UAAU,GAAG,GAAG,IAAI,UAAU,IAAI,GAAG;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,sCAAsC,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,sBAAsB,EAAE,CAAC;IACjN,MAAM,GAAG,GAAG,aAAa,CAAC;QACxB,MAAM,EAAE,iBAAiB,EAAE,EAAE,GAAG,QAAQ,CAAC,WAAW,EAAE,YAAY,EAAE,IAAI,CAAC,WAAW,CAAC,YAAY,EAA0B;QAC3H,WAAW,EAAE,EAAE,GAAG,IAAI,CAAC,WAAW,EAAE,UAAU,EAAE,UAAU,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAkB,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB,EAAE,IAAI;QAC5M,QAAQ,EAAE,uBAAuB,EAAI,qFAAqF;KAC3H,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC;IACtD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACzC,MAAM,KAAK,GAAG,EAAE,GAAG,GAAG,CAAC,UAAU,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC;IACtE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,KAA2C,EAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC;AACrH,CAAC"}

package/dist/workspace-mcp.d.ts

@@ -0,0 +1,88 @@
+import { MethodRegistry, type JsonRpcResponse } from '@agenticprimitives/mcp-protocol';
+import { type AskOutcome, type Plan } from './client.js';
+import { type RuntimeMemberRecordV1 } from './keystore.js';
+export declare const WORKSPACE_MCP_DOCTRINE = "You are a MEMBER of a workspace, acting as your own service agent. These tools reach the workspace as you:\n- workspace_ask: ask the workspace (or any agent by name) something. A read answers from records under your membership; an act you have no authority for PARKS for the steward's signature \u2014 the result tells you the run reference. Do not retry a parked act; say it is waiting.\n- workspace_reply: send a direct message as yourself. Sending is an act: it parks for the steward's signature too, and the result says so.\n- workspace_inbox: what has been said to you since a cursor \u2014 your own inbox.\n- workspace_status: the state of a run you started (by task id).\nA permission prompt on your own machine is not authority in the workspace. Nothing you do here is ever done \"as\" a person.";
+export declare const inboxPlan: (since?: string, limit?: number) => Plan;
+export declare const replyPlan: (to: string, text: string) => Plan;
+/** Spec 400 W2 (B3) — a reply IN THE TOPIC a mention came from (the thread `conv_topic-<org>-<channelId>`). */
+export declare const topicReplyPlan: (org: string, channelId: string, text: string) => Plan;
+/** A topic thread, parsed off a conversation id (mirrors the Worker's `topicThreadId`). */
+export declare function topicOf(conversationId: string | undefined): {
+    org: string;
+    channelId: string;
+} | null;
+/** Words for an outcome the agent can act on — parked is said as parked. */
+export declare function describeOutcome(o: AskOutcome): string;
+export interface WorkspaceMcpOptions {
+    record: RuntimeMemberRecordV1;
+    fetch?: typeof fetch;
+}
+export declare function createWorkspaceMcp(o: WorkspaceMcpOptions): {
+    registry: MethodRegistry;
+    handle: (raw: string) => Promise<JsonRpcResponse | null>;
+    tools: readonly [{
+        readonly name: "workspace_ask";
+        readonly description: "Ask the workspace, or any agent by typed name, as yourself. Reads answer under your membership; acts park for the steward's mandate (the result names the run).";
+        readonly inputSchema: {
+            readonly type: "object";
+            readonly properties: {
+                readonly message: {
+                    readonly type: "string";
+                };
+                readonly addressee: {
+                    readonly type: "string";
+                    readonly description: "A typed name (soup-kitchen.org, mara.me). Default: your workspace.";
+                };
+            };
+            readonly required: readonly ["message"];
+        };
+    }, {
+        readonly name: "workspace_reply";
+        readonly description: "Send a direct message as yourself. An act: it parks for the steward's signature; the result says so.";
+        readonly inputSchema: {
+            readonly type: "object";
+            readonly properties: {
+                readonly to: {
+                    readonly type: "string";
+                    readonly description: "A typed name or address";
+                };
+                readonly text: {
+                    readonly type: "string";
+                };
+            };
+            readonly required: readonly ["to", "text"];
+        };
+    }, {
+        readonly name: "workspace_inbox";
+        readonly description: "What has been said to you since a cursor — your own inbox. Pass the returned cursor next time.";
+        readonly inputSchema: {
+            readonly type: "object";
+            readonly properties: {
+                readonly since: {
+                    readonly type: "string";
+                };
+                readonly limit: {
+                    readonly type: "integer";
+                };
+            };
+        };
+    }, {
+        readonly name: "workspace_status";
+        readonly description: "The state of a run you started, by its task id.";
+        readonly inputSchema: {
+            readonly type: "object";
+            readonly properties: {
+                readonly taskId: {
+                    readonly type: "string";
+                };
+                readonly addressee: {
+                    readonly type: "string";
+                };
+            };
+            readonly required: readonly ["taskId"];
+        };
+    }];
+};
+/** stdio: one message per line in, one per line out; nothing else on stdout (the agent is parsing it). */
+export declare function runWorkspaceMcpStdio(memberName: string): Promise<void>;
+//# sourceMappingURL=workspace-mcp.d.ts.map

package/dist/workspace-mcp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-mcp.d.ts","sourceRoot":"","sources":["../src/workspace-mcp.ts"],"names":[],"mappings":"AAQA,OAAO,EACL,cAAc,EACO,KAAK,eAAe,EAC1C,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAS,KAAK,UAAU,EAAE,KAAK,IAAI,EAAE,MAAM,aAAa,CAAC;AAChE,OAAO,EAAqB,KAAK,qBAAqB,EAAE,MAAM,eAAe,CAAC;AAK9E,eAAO,MAAM,sBAAsB,wyBAKwF,CAAC;AAS5H,eAAO,MAAM,SAAS,WAAY,MAAM,UAAU,MAAM,KAAG,IAA6H,CAAC;AACzL,eAAO,MAAM,SAAS,OAAQ,MAAM,QAAQ,MAAM,KAAG,IAAkG,CAAC;AACxJ,+GAA+G;AAC/G,eAAO,MAAM,cAAc,QAAS,MAAM,aAAa,MAAM,QAAQ,MAAM,KAAG,IAAkG,CAAC;AAEjL,2FAA2F;AAC3F,wBAAgB,OAAO,CAAC,cAAc,EAAE,MAAM,GAAG,SAAS,GAAG;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAGrG;AAED,4EAA4E;AAC5E,wBAAgB,eAAe,CAAC,CAAC,EAAE,UAAU,GAAG,MAAM,CAKrD;AAED,MAAM,WAAW,mBAAmB;IAAG,MAAM,EAAE,qBAAqB,CAAC;IAAC,KAAK,CAAC,EAAE,OAAO,KAAK,CAAA;CAAE;AAE5F,wBAAgB,kBAAkB,CAAC,CAAC,EAAE,mBAAmB;;kBAgD5B,MAAM,KAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAcpE;AAED,0GAA0G;AAC1G,wBAAsB,oBAAoB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAQ5E"}

package/dist/workspace-mcp.js

@@ -0,0 +1,129 @@
+// THE WORKSPACE AS TOOLS — the MCP server an ACP agent spawns for its session (`session/new`'s `mcpServers`), so the
+// workspace reaches the agent as tools it already knows how to call. Every tool here is ONE wire-signed A2A request
+// as the runtime itself (spec 372 S3c); nothing here decides anything: a read answers against the member's standing,
+// a write parks for the steward's mandate — and the tool result says so, in words ("parked: run <ref> waits for the
+// steward's signature"), which is the honest answer, not a refusal and not a click (spec 400 §5.1).
+//
+// stdio, one JSON-RPC message per line — the shape the devkit's Developer MCP uses; nothing but protocol on stdout.
+import { createInterface } from 'node:readline';
+import { MethodRegistry, RpcError, RPC_ERROR, SUPPORTED_PROTOCOL_VERSIONS, buildServerDiscover, negotiateProtocolVersion, parseJsonRpc, parseRequestMeta, } from '@agenticprimitives/mcp-protocol';
+import { askAs } from './client.js';
+import { loadRuntimeMember } from './keystore.js';
+const SERVER_INFO = { name: 'agenticprimitives-workspace-mcp', version: '0.1.0', title: 'Agentic Primitives — the workspace, as the runtime member sees it' };
+const CAPABILITIES = { tools: { listChanged: false }, resources: { listChanged: false, subscribe: false } };
+export const WORKSPACE_MCP_DOCTRINE = `You are a MEMBER of a workspace, acting as your own service agent. These tools reach the workspace as you:
+- workspace_ask: ask the workspace (or any agent by name) something. A read answers from records under your membership; an act you have no authority for PARKS for the steward's signature — the result tells you the run reference. Do not retry a parked act; say it is waiting.
+- workspace_reply: send a direct message as yourself. Sending is an act: it parks for the steward's signature too, and the result says so.
+- workspace_inbox: what has been said to you since a cursor — your own inbox.
+- workspace_status: the state of a run you started (by task id).
+A permission prompt on your own machine is not authority in the workspace. Nothing you do here is ever done "as" a person.`;
+const TOOLS = [
+    { name: 'workspace_ask', description: 'Ask the workspace, or any agent by typed name, as yourself. Reads answer under your membership; acts park for the steward\'s mandate (the result names the run).', inputSchema: { type: 'object', properties: { message: { type: 'string' }, addressee: { type: 'string', description: 'A typed name (soup-kitchen.org, mara.me). Default: your workspace.' } }, required: ['message'] } },
+    { name: 'workspace_reply', description: 'Send a direct message as yourself. An act: it parks for the steward\'s signature; the result says so.', inputSchema: { type: 'object', properties: { to: { type: 'string', description: 'A typed name or address' }, text: { type: 'string' } }, required: ['to', 'text'] } },
+    { name: 'workspace_inbox', description: 'What has been said to you since a cursor — your own inbox. Pass the returned cursor next time.', inputSchema: { type: 'object', properties: { since: { type: 'string' }, limit: { type: 'integer' } } } },
+    { name: 'workspace_status', description: 'The state of a run you started, by its task id.', inputSchema: { type: 'object', properties: { taskId: { type: 'string' }, addressee: { type: 'string' } }, required: ['taskId'] } },
+];
+export const inboxPlan = (since, limit) => ({ steps: [{ toolId: 'messaging.inbox.list', args: { ...(since ? { since } : {}), ...(limit ? { limit } : {}) } }] });
+export const replyPlan = (to, text) => ({ steps: [{ toolId: 'messaging.direct.send', args: { recipient: to, message: text } }] });
+/** Spec 400 W2 (B3) — a reply IN THE TOPIC a mention came from (the thread `conv_topic-<org>-<channelId>`). */
+export const topicReplyPlan = (org, channelId, text) => ({ steps: [{ toolId: 'messaging.topic.post', args: { org, channelId, message: text } }] });
+/** A topic thread, parsed off a conversation id (mirrors the Worker's `topicThreadId`). */
+export function topicOf(conversationId) {
+    const m = /^conv_topic-(0x[0-9a-f]{40})-(.+)$/i.exec(conversationId ?? '');
+    return m ? { org: m[1].toLowerCase(), channelId: m[2] } : null;
+}
+/** Words for an outcome the agent can act on — parked is said as parked. */
+export function describeOutcome(o) {
+    if (o.state === 'ERROR')
+        return `failed: ${o.text}`;
+    if (o.parked)
+        return `parked: run ${o.runRef ?? o.taskId ?? '?'} waits for the steward's signature at their Home — ${o.text || 'the act needs a mandate you do not hold'}. Do not retry; say it is waiting.`;
+    if (o.state === 'TASK_STATE_REJECTED' || o.state === 'TASK_STATE_FAILED')
+        return `refused: ${o.text || o.state}`;
+    return o.text || (o.data !== undefined ? JSON.stringify(o.data) : o.state);
+}
+export function createWorkspaceMcp(o) {
+    const rec = o.record;
+    const call = async (name, args) => {
+        const target = typeof args.addressee === 'string' && args.addressee.trim() ? args.addressee.trim() : rec.workspace.name;
+        switch (name) {
+            case 'workspace_ask': {
+                const out = await askAs(rec, target, String(args.message ?? ''), { fetch: o.fetch });
+                return { said: describeOutcome(out), state: out.state, ...(out.runRef ? { runRef: out.runRef } : {}), ...(out.taskId ? { taskId: out.taskId } : {}), parked: out.parked, ...(out.data !== undefined ? { data: out.data } : {}) };
+            }
+            case 'workspace_reply': {
+                const to = String(args.to ?? '');
+                const text = String(args.text ?? '');
+                if (!to || !text)
+                    throw new RpcError(RPC_ERROR.INVALID_PARAMS, 'to and text are required');
+                const out = await askAs(rec, rec.name, `send ${to} a message: ${text}`, { plan: replyPlan(to, text), fetch: o.fetch });
+                return { said: describeOutcome(out), state: out.state, ...(out.runRef ? { runRef: out.runRef } : {}), ...(out.taskId ? { taskId: out.taskId } : {}), parked: out.parked };
+            }
+            case 'workspace_inbox': {
+                const since = typeof args.since === 'string' ? args.since : undefined;
+                const limit = typeof args.limit === 'number' ? args.limit : undefined;
+                const out = await askAs(rec, rec.name, `what's new for me${since ? ` since ${since}` : ''}`, { plan: inboxPlan(since, limit), fetch: o.fetch });
+                return out.data ?? { said: out.text, state: out.state };
+            }
+            case 'workspace_status': {
+                const { clientFor } = await import('./client.js');
+                const task = await clientFor(rec, target, { fetch: o.fetch }).getTask(String(args.taskId ?? ''));
+                return { state: task.status.state, said: task.status.message?.parts?.map((p) => p.text).filter(Boolean).join('\n') ?? '', runRef: task.metadata?.runRef ?? null };
+            }
+            default: throw new RpcError(RPC_ERROR.INVALID_PARAMS, `unknown tool ${name}`);
+        }
+    };
+    const registry = new MethodRegistry()
+        .register('server/discover', () => buildServerDiscover({ serverInfo: SERVER_INFO, capabilities: CAPABILITIES }))
+        .register('tools/list', () => ({ tools: TOOLS }))
+        .register('resources/list', () => ({ resources: [{ uri: 'ap://workspace/doctrine', name: 'What these tools are and are not', mimeType: 'text/plain' }] }))
+        .register('resources/read', (params) => {
+        if (String(params?.uri ?? '') !== 'ap://workspace/doctrine')
+            throw new RpcError(RPC_ERROR.INVALID_PARAMS, 'unknown resource');
+        return { contents: [{ uri: 'ap://workspace/doctrine', mimeType: 'text/plain', text: WORKSPACE_MCP_DOCTRINE }] };
+    })
+        .register('tools/call', async (params) => {
+        const name = String(params?.name ?? '');
+        const args = params?.arguments ?? {};
+        try {
+            const out = await call(name, args);
+            return { content: [{ type: 'text', text: typeof out === 'string' ? out : JSON.stringify(out, null, 2) }], structuredContent: (typeof out === 'object' && out ? out : { value: out }), isError: false };
+        }
+        catch (e) {
+            if (e instanceof RpcError)
+                return { content: [{ type: 'text', text: e.message }], isError: true };
+            return { content: [{ type: 'text', text: `the workspace could not be reached: ${e instanceof Error ? e.message : String(e)}` }], isError: true };
+        }
+    });
+    const handle = async (raw) => {
+        const parsed = parseJsonRpc(raw);
+        if (!parsed.ok)
+            return parsed.res;
+        const req = parsed.req;
+        const meta = parseRequestMeta(req.params?._meta, undefined);
+        const requested = typeof req.params?.protocolVersion === 'string' ? req.params.protocolVersion : meta.protocolVersion;
+        const version = negotiateProtocolVersion(requested) ?? SUPPORTED_PROTOCOL_VERSIONS[0];
+        const id = req.id ?? null;
+        if (req.method === 'initialize')
+            return { jsonrpc: '2.0', id, result: { protocolVersion: version, capabilities: CAPABILITIES, serverInfo: SERVER_INFO, instructions: WORKSPACE_MCP_DOCTRINE } };
+        if (req.method === 'notifications/initialized')
+            return null;
+        if (req.method === 'ping')
+            return { jsonrpc: '2.0', id, result: {} };
+        return registry.dispatch(req, { meta, protocolVersion: version, raw });
+    };
+    return { registry, handle, tools: TOOLS };
+}
+/** stdio: one message per line in, one per line out; nothing else on stdout (the agent is parsing it). */
+export async function runWorkspaceMcpStdio(memberName) {
+    const { handle } = createWorkspaceMcp({ record: loadRuntimeMember(memberName) });
+    const rl = createInterface({ input: process.stdin, crlfDelay: Infinity });
+    for await (const line of rl) {
+        if (!line.trim())
+            continue;
+        const res = await handle(line);
+        if (res)
+            process.stdout.write(`${JSON.stringify(res)}\n`);
+    }
+}
+//# sourceMappingURL=workspace-mcp.js.map

package/dist/workspace-mcp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-mcp.js","sourceRoot":"","sources":["../src/workspace-mcp.ts"],"names":[],"mappings":"AAAA,qHAAqH;AACrH,oHAAoH;AACpH,qHAAqH;AACrH,oHAAoH;AACpH,oGAAoG;AACpG,EAAE;AACF,oHAAoH;AACpH,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EACL,cAAc,EAAE,QAAQ,EAAE,SAAS,EAAE,2BAA2B,EAAE,mBAAmB,EAAE,wBAAwB,EAAE,YAAY,EAAE,gBAAgB,GAEhJ,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,KAAK,EAA8B,MAAM,aAAa,CAAC;AAChE,OAAO,EAAE,iBAAiB,EAA8B,MAAM,eAAe,CAAC;AAE9E,MAAM,WAAW,GAAG,EAAE,IAAI,EAAE,iCAAiC,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,mEAAmE,EAAE,CAAC;AAC9J,MAAM,YAAY,GAAG,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,CAAC;AAE5G,MAAM,CAAC,MAAM,sBAAsB,GAAG;;;;;2HAKqF,CAAC;AAE5H,MAAM,KAAK,GAAG;IACZ,EAAE,IAAI,EAAE,eAAe,EAAE,WAAW,EAAE,kKAAkK,EAAE,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,oEAAoE,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE;IACja,EAAE,IAAI,EAAE,iBAAiB,EAAE,WAAW,EAAE,uGAAuG,EAAE,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,yBAAyB,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE;IACtT,EAAE,IAAI,EAAE,iBAAiB,EAAE,WAAW,EAAE,gGAAgG,EAAE,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE;IAClP,EAAE,IAAI,EAAE,kBAAkB,EAAE,WAAW,EAAE,iDAAiD,EAAE,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE;CACtN,CAAC;AAEX,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,KAAc,EAAE,KAAc,EAAQ,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,sBAAsB,EAAE,IAAI,EAAE,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;AACzL,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,EAAU,EAAE,IAAY,EAAQ,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,uBAAuB,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;AACxJ,+GAA+G;AAC/G,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,GAAW,EAAE,SAAiB,EAAE,IAAY,EAAQ,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,sBAAsB,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;AAEjL,2FAA2F;AAC3F,MAAM,UAAU,OAAO,CAAC,cAAkC;IACxD,MAAM,CAAC,GAAG,qCAAqC,CAAC,IAAI,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC;IAC3E,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAE,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,CAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACnE,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,eAAe,CAAC,CAAa;IAC3C,IAAI,CAAC,CAAC,KAAK,KAAK,OAAO;QAAE,OAAO,WAAW,CAAC,CAAC,IAAI,EAAE,CAAC;IACpD,IAAI,CAAC,CAAC,MAAM;QAAE,OAAO,eAAe,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,IAAI,GAAG,sDAAsD,CAAC,CAAC,IAAI,IAAI,yCAAyC,oCAAoC,CAAC;IAC7M,IAAI,CAAC,CAAC,KAAK,KAAK,qBAAqB,IAAI,CAAC,CAAC,KAAK,KAAK,mBAAmB;QAAE,OAAO,YAAY,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;IACjH,OAAO,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;AAC7E,CAAC;AAID,MAAM,UAAU,kBAAkB,CAAC,CAAsB;IACvD,MAAM,GAAG,GAAG,CAAC,CAAC,MAAM,CAAC;IACrB,MAAM,IAAI,GAAG,KAAK,EAAE,IAAY,EAAE,IAA6B,EAAoB,EAAE;QACnF,MAAM,MAAM,GAAG,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC;QACxH,QAAQ,IAAI,EAAE,CAAC;YACb,KAAK,eAAe,CAAC,CAAC,CAAC;gBACrB,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;gBACrF,OAAO,EAAE,IAAI,EAAE,eAAe,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;YACnO,CAAC;YACD,KAAK,iBAAiB,CAAC,CAAC,CAAC;gBACvB,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;gBAAC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;gBACvE,IAAI,CAAC,EAAE,IAAI,CAAC,IAAI;oBAAE,MAAM,IAAI,QAAQ,CAAC,SAAS,CAAC,cAAc,EAAE,0BAA0B,CAAC,CAAC;gBAC3F,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,EAAE,QAAQ,EAAE,eAAe,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;gBACvH,OAAO,EAAE,IAAI,EAAE,eAAe,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC;YAC5K,CAAC;YACD,KAAK,iBAAiB,CAAC,CAAC,CAAC;gBACvB,MAAM,KAAK,GAAG,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;gBACtE,MAAM,KAAK,GAAG,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;gBACtE,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,EAAE,oBAAoB,KAAK,CAAC,CAAC,CAAC,UAAU,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;gBAChJ,OAAO,GAAG,CAAC,IAAI,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC;YAC1D,CAAC;YACD,KAAK,kBAAkB,CAAC,CAAC,CAAC;gBACxB,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;gBAClD,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC;gBACjG,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,QAAQ,EAAE,MAAM,IAAI,IAAI,EAAE,CAAC;YACpK,CAAC;YACD,OAAO,CAAC,CAAC,MAAM,IAAI,QAAQ,CAAC,SAAS,CAAC,cAAc,EAAE,gBAAgB,IAAI,EAAE,CAAC,CAAC;QAChF,CAAC;IACH,CAAC,CAAC;IACF,MAAM,QAAQ,GAAG,IAAI,cAAc,EAAE;SAClC,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE,CAAC,mBAAmB,CAAC,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,YAAY,EAAE,CAAuC,CAAC;SACrJ,QAAQ,CAAC,YAAY,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;SAChD,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,GAAG,EAAE,yBAAyB,EAAE,IAAI,EAAE,kCAAkC,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC,EAAE,CAAC,CAAC;SACzJ,QAAQ,CAAC,gBAAgB,EAAE,CAAC,MAAM,EAAE,EAAE;QACrC,IAAI,MAAM,CAAC,MAAM,EAAE,GAAG,IAAI,EAAE,CAAC,KAAK,yBAAyB;YAAE,MAAM,IAAI,QAAQ,CAAC,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;QAC9H,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,GAAG,EAAE,yBAAyB,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,EAAE,sBAAsB,EAAE,CAAC,EAAE,CAAC;IAClH,CAAC,CAAC;SACD,QAAQ,CAAC,YAAY,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;QACvC,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;QACxC,MAAM,IAAI,GAAI,MAAM,EAAE,SAAiD,IAAI,EAAE,CAAC;QAC9E,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACnC,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,iBAAiB,EAAE,CAAC,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAA4B,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QACpO,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,YAAY,QAAQ;gBAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YAClG,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,uCAAuC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QACnJ,CAAC;IACH,CAAC,CAAC,CAAC;IACL,MAAM,MAAM,GAAG,KAAK,EAAE,GAAW,EAAmC,EAAE;QACpE,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,MAAM,CAAC,GAAG,CAAC;QAClC,MAAM,GAAG,GAAG,MAAM,CAAC,GAAqB,CAAC;QACzC,MAAM,IAAI,GAAG,gBAAgB,CAAC,GAAG,CAAC,MAAM,EAAE,KAA4C,EAAE,SAAS,CAAC,CAAC;QACnG,MAAM,SAAS,GAAG,OAAO,GAAG,CAAC,MAAM,EAAE,eAAe,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC;QACtH,MAAM,OAAO,GAAG,wBAAwB,CAAC,SAAS,CAAC,IAAI,2BAA2B,CAAC,CAAC,CAAE,CAAC;QACvF,MAAM,EAAE,GAAG,GAAG,CAAC,EAAE,IAAI,IAAI,CAAC;QAC1B,IAAI,GAAG,CAAC,MAAM,KAAK,YAAY;YAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,eAAe,EAAE,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,sBAAsB,EAAE,EAAqB,CAAC;QACnN,IAAI,GAAG,CAAC,MAAM,KAAK,2BAA2B;YAAE,OAAO,IAAI,CAAC;QAC5D,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM;YAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAqB,CAAC;QACxF,OAAO,QAAQ,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;IACzE,CAAC,CAAC;IACF,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;AAC5C,CAAC;AAED,0GAA0G;AAC1G,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,UAAkB;IAC3D,MAAM,EAAE,MAAM,EAAE,GAAG,kBAAkB,CAAC,EAAE,MAAM,EAAE,iBAAiB,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;IACjF,MAAM,EAAE,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC1E,IAAI,KAAK,EAAE,MAAM,IAAI,IAAI,EAAE,EAAE,CAAC;QAC5B,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;YAAE,SAAS;QAC3B,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,GAAG;YAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC5D,CAAC;AACH,CAAC"}

package/package.json

@@ -0,0 +1,52 @@
+{
+  "name": "@agenticprimitives/runtime-member",
+  "version": "0.0.0-alpha.2",
+  "description": "ADMISSION of an existing general-purpose runtime as a workspace MEMBER, without a rewrite (spec 400 W1 — admission, not 'add coding'): `ap runtime join` (the .svc member's key and session wire, its steward link and playbook), `ap runtime mcp` (the workspace as MCP tools — every call one wire-signed A2A request as the runtime itself), `ap runtime run` (the loop: poll the member's own inbox, prompt the ACP agent, answer where it came from; every write parks for the steward's mandate).",
+  "type": "module",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    },
+    "./equip": {
+      "types": "./dist/equip-entry.d.ts",
+      "import": "./dist/equip-entry.js"
+    }
+  },
+  "bin": {
+    "ap-runtime": "./bin/ap-runtime.mjs"
+  },
+  "files": [
+    "LICENSE",
+    "dist",
+    "spec.md",
+    "README.md",
+    "bin"
+  ],
+  "dependencies": {
+    "@agenticprimitives/a2a": "0.0.0-alpha.23",
+    "@agenticprimitives/contracts": "1.0.0-alpha.25",
+    "@agenticprimitives/mcp-protocol": "0.0.0-alpha.3",
+    "@agenticprimitives/delegation": "1.0.0-alpha.25",
+    "@agenticprimitives/acp": "0.0.0-alpha.2",
+    "@agenticprimitives/types": "1.0.0-alpha.25"
+  },
+  "peerDependencies": {
+    "viem": "^2.52.2"
+  },
+  "devDependencies": {
+    "viem": "^2.52.2",
+    "vitest": "^4.1.8"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "license": "MIT",
+  "scripts": {
+    "build": "tsc -p tsconfig.build.json",
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "test": "vitest run",
+    "test:unit": "vitest run test/unit --passWithNoTests",
+    "clean": "rm -rf dist"
+  }
+}

package/spec.md

@@ -0,0 +1,10 @@
+# @agenticprimitives/runtime-member — package spec
+
+Spec of record: [specs/400-closing-the-workspace-gap-buzz-and-team-agent-platforms.md](../../specs/400-closing-the-workspace-gap-buzz-and-team-agent-platforms.md) §5
+(W1), on [specs/372-standard-a2a-surface-conformance-and-outsiders.md](../../specs/372-standard-a2a-surface-conformance-and-outsiders.md) S3.
+
+Owns the runtime member's keystore, join (key + custodian-signed session wire + steward link + playbook), the workspace
+MCP server the ACP agent spawns (four tools, each one wire-signed A2A request as the runtime), and the run loop (poll
+the member's own inbox with a supplied plan; prompt; reply as itself — the reply parks for the steward's mandate).
+Owns no authority: it signs requests with the runtime's key under a wire the custodian signed; it holds no session
+and presents no mandate. Depends inward on `acp`, `a2a/standard`, `delegation` (to build the wire), `mcp-protocol`.