@agenticprimitives/service-agent 0.0.0-alpha.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Agentic Trust Labs
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,71 @@
+# @agenticprimitives/service-agent
+
+> **Status:** experimental (spec 283 PR1).
+
+A generic framework for building **service agents** — agents that expose a catalog of capabilities
+(skills) and execute them under layered authority. It is provider-neutral and Ring-0 pure: it depends only
+on `@agenticprimitives/types` and imports no wallet, exchange, RPC, MCP, delegation, or policy code. The
+concrete providers and authority evaluators are **injected** by the host.
+
+Domain catalogs — e.g. `@agenticprimitives/treasury` — are separate packages that supply skill definitions
++ a provider-neutral plan; this package runs the lifecycle.
+
+## The lifecycle
+
+```
+define  →  assert  →  entitle / delegate  →  primitive-plan  →  execute  →  receipt
+```
+
+- **define** — a `SkillDefinition` states a skill's meaning: id, version, `effect`
+  (`read|sign|spend|trade|admin`), default `exposure`, the logical capabilities it `requires`, optional
+  I/O schemas, and a `compile()` that emits a **primitive plan**. A definition does NOT claim the host can
+  run it.
+- **assert** — `assertSkills` resolves each definition's `requires` against the `PrimitiveRegistry`. A
+  skill asserts only when every non-optional requirement binds to an installed `Primitive` whose
+  constraints **cover** the requirement (monotonic). The result is an `AssertionReport`
+  (`asserted` / `unavailable` / `rejected`). The optional `publishAssertion` hook is the seam for public
+  disclosure (spec 282: vault claim → `atl:skills` → discovery + A2A card).
+- **entitle / delegate / guard** — the plan's `.authorize('entitlement', …)`, `.authorize('delegation', …)`
+  and `.guard(…)` steps call the **injected** evaluators (mapping to `tool-policy`/`entitlements`,
+  `delegation`, and `tool-policy` at the host). Every gate must ALLOW; the first denial throws the typed
+  error and nothing further runs (fail-closed).
+- **primitive-plan / execute** — `runPlan` resolves `ref()`s, calls registered primitives for `.step`s
+  (plus built-in `ledger.reserve`/`ledger.finalize`), and collects `.output`.
+- **receipt** — `invoke` returns a normalized `ExecutionReceipt` (authority decisions + primitive bindings
+  + outputs); the host sinks/signs it via `audit`.
+
+## Example
+
+```ts
+import { ServiceAgent, defineSkill, createPrimitiveRegistry, primitivePlan, ref } from '@agenticprimitives/service-agent';
+
+const balance = defineSkill<{ accountId: string }, { balance: string }>({
+  id: 'treasury.account.balance', version: '1.0.0', name: 'Read balance',
+  effect: 'read', defaultExposure: 'authenticated',
+  requires: [{ capability: 'account.balance' }],
+  compile: ({ input }) =>
+    primitivePlan('plan.balance')
+      .step('bal', 'account.balance', { accountId: input.accountId })
+      .output({ balance: ref('bal', 'balance') }),
+});
+
+const registry = createPrimitiveRegistry();
+registry.register(myAccountProvider); // advertises { id: 'account.balance', version, constraints }
+
+const agent = new ServiceAgent({ descriptor: { id: '0x…', name: 'Treasury', version: '1.0.0' }, primitives: registry });
+agent.define(balance);
+await agent.assert();
+const receipt = await agent.invoke({ skillId: 'treasury.account.balance', input: { accountId: 'acct-1' } });
+```
+
+For a spend skill, add `.authorize('entitlement', …)`, `.authorize('delegation', …)`, `.guard(…)`, and the
+ledger reserve/finalize steps; wire `entitlements` / `delegations` / `policies` / `ledger` into
+`ServiceAgentOptions`. See `test/conformance.test.ts` for the full lifecycle with fakes.
+
+## What lives elsewhere
+
+- **Providers** (EVM transfer, swap venue, RPC, KMS signer) — EXTERNAL (ADR-0037); they register as
+  `Primitive`s. Demos ship fakes.
+- **Authority logic** — `delegation`, `tool-policy`, `entitlements`; injected as evaluators.
+- **The treasury catalog** — `@agenticprimitives/treasury`. **Public disclosure** — the app, via
+  `publishAssertion` (spec 282).

package/dist/assert.d.ts

@@ -0,0 +1,11 @@
+import type { AnySkillDefinition, AssertionReport, Exposure, PrimitiveRegistry } from './types.js';
+export interface AssertSkillsArgs {
+    definitions: AnySkillDefinition[];
+    registry: PrimitiveRegistry;
+    /** Per-skill exposure override (default = the definition's defaultExposure). */
+    exposure?: (skill: AnySkillDefinition) => Exposure;
+    /** strict (default) fails the report's `rejected` empty-check elsewhere; this fn always returns the report. */
+    now?: () => string;
+}
+export declare function assertSkills(args: AssertSkillsArgs): AssertionReport;
+//# sourceMappingURL=assert.d.ts.map

package/dist/assert.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"assert.d.ts","sourceRoot":"","sources":["../src/assert.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,kBAAkB,EAAE,eAAe,EAAE,QAAQ,EAAE,iBAAiB,EAAkB,MAAM,YAAY,CAAC;AAEnH,MAAM,WAAW,gBAAgB;IAC/B,WAAW,EAAE,kBAAkB,EAAE,CAAC;IAClC,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,gFAAgF;IAChF,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,kBAAkB,KAAK,QAAQ,CAAC;IACnD,+GAA+G;IAC/G,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB;AAED,wBAAgB,YAAY,CAAC,IAAI,EAAE,gBAAgB,GAAG,eAAe,CA2BpE"}

package/dist/assert.js

@@ -0,0 +1,30 @@
+export function assertSkills(args) {
+    const now = args.now ?? (() => new Date(0).toISOString());
+    const report = { asserted: [], unavailable: [], rejected: [] };
+    for (const def of args.definitions) {
+        const bindings = [];
+        const missing = [];
+        for (const req of def.requires) {
+            const b = args.registry.resolve(req);
+            if (b)
+                bindings.push(b);
+            else if (!req.optional)
+                missing.push(req.capability);
+        }
+        if (missing.length > 0) {
+            report.unavailable.push({ skillId: def.id, missingCapabilities: missing });
+            continue;
+        }
+        const assertion = {
+            skillId: def.id,
+            version: def.version,
+            exposure: args.exposure ? args.exposure(def) : def.defaultExposure,
+            primitiveBindings: bindings,
+            issuedAt: now(),
+            status: 'active', // pure capability resolution → active; the ServiceAgent layers health gating.
+        };
+        report.asserted.push(assertion);
+    }
+    return report;
+}
+//# sourceMappingURL=assert.js.map

package/dist/assert.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"assert.js","sourceRoot":"","sources":["../src/assert.ts"],"names":[],"mappings":"AAgBA,MAAM,UAAU,YAAY,CAAC,IAAsB;IACjD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;IAC1D,MAAM,MAAM,GAAoB,EAAE,QAAQ,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IAEhF,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;QACnC,MAAM,QAAQ,GAAG,EAAE,CAAC;QACpB,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,KAAK,MAAM,GAAG,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;YAC/B,MAAM,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACrC,IAAI,CAAC;gBAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;iBACnB,IAAI,CAAC,GAAG,CAAC,QAAQ;gBAAE,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACvD,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,EAAE,EAAE,mBAAmB,EAAE,OAAO,EAAE,CAAC,CAAC;YAC3E,SAAS;QACX,CAAC;QACD,MAAM,SAAS,GAAmB;YAChC,OAAO,EAAE,GAAG,CAAC,EAAE;YACf,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,eAAe;YAClE,iBAAiB,EAAE,QAAQ;YAC3B,QAAQ,EAAE,GAAG,EAAE;YACf,MAAM,EAAE,QAAQ,EAAE,8EAA8E;SACjG,CAAC;QACF,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAClC,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/define-skill.d.ts

@@ -0,0 +1,9 @@
+import type { AnySkillDefinition, SkillDefinition } from './types.js';
+export declare function defineSkill<Input, Output>(def: SkillDefinition<Input, Output>): SkillDefinition<Input, Output>;
+/** Group definitions into a named, reusable profile. */
+export declare function defineProfile(id: string, definitions: AnySkillDefinition[]): {
+    id: string;
+    definitions: AnySkillDefinition[];
+    skillIds: string[];
+};
+//# sourceMappingURL=define-skill.d.ts.map

package/dist/define-skill.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"define-skill.d.ts","sourceRoot":"","sources":["../src/define-skill.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAEtE,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,eAAe,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,eAAe,CAAC,KAAK,EAAE,MAAM,CAAC,CAK9G;AAED,wDAAwD;AACxD,wBAAgB,aAAa,CAAC,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,kBAAkB,EAAE,GAAG;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,kBAAkB,EAAE,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAA;CAAE,CAElJ"}

package/dist/define-skill.js

@@ -0,0 +1,14 @@
+export function defineSkill(def) {
+    if (!def.id || !def.version)
+        throw new Error('[service-agent] skill needs id + version');
+    if (!def.requires)
+        throw new Error(`[service-agent] skill ${def.id} needs a requires[] (may be empty)`);
+    if (typeof def.compile !== 'function')
+        throw new Error(`[service-agent] skill ${def.id} needs a compile()`);
+    return def;
+}
+/** Group definitions into a named, reusable profile. */
+export function defineProfile(id, definitions) {
+    return { id, definitions, skillIds: definitions.map((d) => d.id) };
+}
+//# sourceMappingURL=define-skill.js.map

package/dist/define-skill.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"define-skill.js","sourceRoot":"","sources":["../src/define-skill.ts"],"names":[],"mappings":"AAIA,MAAM,UAAU,WAAW,CAAgB,GAAmC;IAC5E,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IACzF,IAAI,CAAC,GAAG,CAAC,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,GAAG,CAAC,EAAE,oCAAoC,CAAC,CAAC;IACxG,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,GAAG,CAAC,EAAE,oBAAoB,CAAC,CAAC;IAC5G,OAAO,GAAG,CAAC;AACb,CAAC;AAED,wDAAwD;AACxD,MAAM,UAAU,aAAa,CAAC,EAAU,EAAE,WAAiC;IACzE,OAAO,EAAE,EAAE,EAAE,WAAW,EAAE,QAAQ,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AACrE,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,9 @@
+export * from './types.js';
+export { defineSkill, defineProfile } from './define-skill.js';
+export { createPrimitiveRegistry } from './primitive-registry.js';
+export { primitivePlan, PlanBuilder, runPlan, ref } from './plan.js';
+export type { RunPlanDeps, RunPlanResult, StepOpts, StepFailureRecord } from './plan.js';
+export { assertSkills } from './assert.js';
+export type { AssertSkillsArgs } from './assert.js';
+export { ServiceAgent } from './service-agent.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAEA,cAAc,YAAY,CAAC;AAC3B,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAC/D,OAAO,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAClE,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AACrE,YAAY,EAAE,WAAW,EAAE,aAAa,EAAE,QAAQ,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AACzF,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,YAAY,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC"}

package/dist/index.js

@@ -0,0 +1,9 @@
+// @agenticprimitives/service-agent — generic service-agent capability framework (spec 283).
+// define -> assert -> entitle/delegate -> primitive-plan -> execute -> receipt. Provider-neutral, Ring-0.
+export * from './types.js';
+export { defineSkill, defineProfile } from './define-skill.js';
+export { createPrimitiveRegistry } from './primitive-registry.js';
+export { primitivePlan, PlanBuilder, runPlan, ref } from './plan.js';
+export { assertSkills } from './assert.js';
+export { ServiceAgent } from './service-agent.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,0GAA0G;AAC1G,cAAc,YAAY,CAAC;AAC3B,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAC/D,OAAO,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAClE,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAErE,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC"}

package/dist/plan.d.ts

@@ -0,0 +1,49 @@
+import { type AuthorityRecord, type DelegationEvaluator, type EntitlementEvaluator, type LedgerPrimitive, type PlanRef, type PolicyEvaluator, type PrimitivePlan, type PrimitiveRegistry, type InvocationContext, type StepFailurePolicy } from './types.js';
+export declare const ref: (name: string, path?: string) => PlanRef;
+/** Options for a `step` (spec 284 DAG): explicit dependencies + a per-step failure policy. */
+export interface StepOpts {
+    dependsOn?: string[];
+    failure?: StepFailurePolicy;
+}
+/** Fluent compile-target builder. */
+export declare class PlanBuilder {
+    private id;
+    private steps;
+    private outputSpec?;
+    constructor(id: string);
+    step(refName: string, capability: string, args: Record<string, unknown>, opts?: StepOpts): this;
+    authorize(refName: string, evaluator: 'entitlement' | 'delegation', action: string, args: Record<string, unknown>): this;
+    guard(refName: string, action: string, args: Record<string, unknown>): this;
+    checkpoint(refName: string, basedOn: PlanRef[]): this;
+    output(spec: Record<string, unknown>): PrimitivePlan;
+    build(): PrimitivePlan;
+}
+export declare const primitivePlan: (id: string) => PlanBuilder;
+export interface RunPlanDeps {
+    registry: PrimitiveRegistry;
+    entitlements?: EntitlementEvaluator;
+    delegations?: DelegationEvaluator;
+    policies?: PolicyEvaluator;
+    ledger?: LedgerPrimitive;
+    context: InvocationContext;
+}
+export interface StepFailureRecord {
+    stepId: string;
+    reason: string;
+    handled: 'ignored' | 'compensated';
+}
+export interface RunPlanResult {
+    status: 'completed' | 'denied' | 'failed';
+    authority: AuthorityRecord[];
+    bindings: string[];
+    outputs: Record<string, unknown>;
+    reason?: string;
+    /** Steps that failed but were handled by their failure policy (ignore/compensate). Empty when none. */
+    failures?: StepFailureRecord[];
+}
+/** Execute a plan as a DAG (spec 284). Steps run in array order; `dependsOn` is validated fail-closed (a
+ *  dependency on an unknown/later step rejects the plan). Authority gates throw the typed *DeniedError on
+ *  denial (fail-closed, ADR-0013). A failing `step` is handled by its `failure` policy (abort/ignore/
+ *  compensate); `abort` (default) fails the plan. */
+export declare function runPlan(plan: PrimitivePlan, deps: RunPlanDeps): Promise<RunPlanResult>;
+//# sourceMappingURL=plan.d.ts.map

package/dist/plan.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plan.d.ts","sourceRoot":"","sources":["../src/plan.ts"],"names":[],"mappings":"AAIA,OAAO,EAEmB,KAAK,eAAe,EAAE,KAAK,mBAAmB,EAAE,KAAK,oBAAoB,EACjG,KAAK,eAAe,EAAE,KAAK,OAAO,EAAiB,KAAK,eAAe,EAAE,KAAK,aAAa,EAC3F,KAAK,iBAAiB,EAAE,KAAK,iBAAiB,EAAE,KAAK,iBAAiB,EACvE,MAAM,YAAY,CAAC;AAEpB,eAAO,MAAM,GAAG,SAAU,MAAM,SAAS,MAAM,KAAG,OAAkC,CAAC;AAGrF,8FAA8F;AAC9F,MAAM,WAAW,QAAQ;IAAG,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IAAC,OAAO,CAAC,EAAE,iBAAiB,CAAA;CAAE;AAE/E,qCAAqC;AACrC,qBAAa,WAAW;IAGV,OAAO,CAAC,EAAE;IAFtB,OAAO,CAAC,KAAK,CAAkB;IAC/B,OAAO,CAAC,UAAU,CAAC,CAA0B;gBACzB,EAAE,EAAE,MAAM;IAC9B,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,IAAI,CAAC,EAAE,QAAQ,GAAG,IAAI;IAI/F,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,aAAa,GAAG,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI;IAIxH,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI;IAI3E,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,IAAI;IAIrD,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,aAAa;IAIpD,KAAK,IAAI,aAAa;CAGvB;AACD,eAAO,MAAM,aAAa,OAAQ,MAAM,KAAG,WAAkC,CAAC;AAE9E,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,YAAY,CAAC,EAAE,oBAAoB,CAAC;IACpC,WAAW,CAAC,EAAE,mBAAmB,CAAC;IAClC,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B,MAAM,CAAC,EAAE,eAAe,CAAC;IACzB,OAAO,EAAE,iBAAiB,CAAC;CAC5B;AACD,MAAM,WAAW,iBAAiB;IAAG,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,SAAS,GAAG,aAAa,CAAA;CAAE;AACzG,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,WAAW,GAAG,QAAQ,GAAG,QAAQ,CAAC;IAC1C,SAAS,EAAE,eAAe,EAAE,CAAC;IAC7B,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,uGAAuG;IACvG,QAAQ,CAAC,EAAE,iBAAiB,EAAE,CAAC;CAChC;AAeD;;;qDAGqD;AACrD,wBAAsB,OAAO,CAAC,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,aAAa,CAAC,CAoF5F"}

package/dist/plan.js

@@ -0,0 +1,153 @@
+// Primitive plan: a deterministic compile target (builder) + the runner (spec 283). A skill compiles ONLY
+// into registered primitive operations + injected authority gates — no arbitrary execution. The runner
+// enforces the effective envelope monotonically: every authorize/guard must ALLOW (logical AND) before any
+// `step`/`output` after it runs; a denial throws the typed error and nothing further executes.
+import { DelegationDeniedError, EntitlementDeniedError, PolicyDeniedError, } from './types.js';
+export const ref = (name, path) => ({ __ref: name, path });
+const isRef = (v) => typeof v === 'object' && v !== null && '__ref' in v;
+/** Fluent compile-target builder. */
+export class PlanBuilder {
+    id;
+    steps = [];
+    outputSpec;
+    constructor(id) {
+        this.id = id;
+    }
+    step(refName, capability, args, opts) {
+        this.steps.push({ kind: 'step', ref: refName, op: capability, args, dependsOn: opts?.dependsOn, failure: opts?.failure });
+        return this;
+    }
+    authorize(refName, evaluator, action, args) {
+        this.steps.push({ kind: 'authorize', ref: refName, evaluator, op: action, args });
+        return this;
+    }
+    guard(refName, action, args) {
+        this.steps.push({ kind: 'guard', ref: refName, evaluator: 'policy', op: action, args });
+        return this;
+    }
+    checkpoint(refName, basedOn) {
+        this.steps.push({ kind: 'checkpoint', ref: refName, basedOn });
+        return this;
+    }
+    output(spec) {
+        this.outputSpec = spec;
+        return { id: this.id, steps: this.steps, outputSpec: this.outputSpec };
+    }
+    build() {
+        return { id: this.id, steps: this.steps, outputSpec: this.outputSpec };
+    }
+}
+export const primitivePlan = (id) => new PlanBuilder(id);
+function resolveValue(v, results) {
+    if (isRef(v)) {
+        const base = results[v.__ref];
+        if (v.path && base && typeof base === 'object')
+            return base[v.path];
+        return base;
+    }
+    if (Array.isArray(v))
+        return v.map((x) => resolveValue(x, results));
+    if (v && typeof v === 'object') {
+        return Object.fromEntries(Object.entries(v).map(([k, val]) => [k, resolveValue(val, results)]));
+    }
+    return v;
+}
+/** Execute a plan as a DAG (spec 284). Steps run in array order; `dependsOn` is validated fail-closed (a
+ *  dependency on an unknown/later step rejects the plan). Authority gates throw the typed *DeniedError on
+ *  denial (fail-closed, ADR-0013). A failing `step` is handled by its `failure` policy (abort/ignore/
+ *  compensate); `abort` (default) fails the plan. */
+export async function runPlan(plan, deps) {
+    const results = {};
+    const authority = [];
+    const bindings = [];
+    const failures = [];
+    const done = new Set();
+    const ctx = deps.context;
+    // Steps named as a compensation target run ONLY when their failing step triggers them — never in flow.
+    const compensationIds = new Set(plan.steps.flatMap((s) => (s.failure?.mode === 'compensate' ? [s.failure.compensationStepId] : [])));
+    // Execute one `step`-kind step (provider op or built-in ledger op); throws on failure.
+    const execStep = async (step, args) => {
+        const capability = step.op;
+        if (capability === 'ledger.reserve' && deps.ledger)
+            return deps.ledger.reserve(args);
+        if (capability === 'ledger.finalize' && deps.ledger)
+            return deps.ledger.finalize(args);
+        const binding = deps.registry.resolve({ capability });
+        if (!binding)
+            throw new Error(`no primitive for capability ${capability}`);
+        const primitive = deps.registry.get(binding.primitiveId);
+        bindings.push(`${binding.primitiveId}:${binding.capability}`);
+        return primitive.execute(capability, args, { agentId: ctx.agentId, subject: ctx.subject, correlationId: ctx.correlationId, idempotencyKey: ctx.idempotencyKey });
+    };
+    for (const step of plan.steps) {
+        if (compensationIds.has(step.ref))
+            continue; // compensation steps fire only on failure
+        // DAG edge validation — every named dependency must already have run (fail-closed).
+        for (const dep of step.dependsOn ?? []) {
+            if (!done.has(dep))
+                return { status: 'failed', authority, bindings, outputs: results, reason: `step ${step.ref} depends on ${dep}, which has not run`, failures };
+        }
+        const args = resolveValue(step.args ?? {}, results);
+        if (step.kind === 'authorize' || step.kind === 'guard') {
+            const evaluator = step.evaluator === 'entitlement' ? deps.entitlements
+                : step.evaluator === 'delegation' ? deps.delegations
+                    : deps.policies;
+            const action = step.op ?? step.ref;
+            // No evaluator wired → fail closed (an authority gate with nothing to check it MUST deny).
+            const decision = evaluator
+                ? await evaluator.evaluate({ action, resource: args.resource, subject: ctx.subject, agentId: ctx.agentId, input: args.input ?? args })
+                : { allow: false, reason: `no ${step.evaluator} evaluator configured` };
+            authority.push({ action, evaluator: step.evaluator ?? 'policy', decisionId: decision.decisionId, allow: decision.allow });
+            results[step.ref] = decision;
+            if (!decision.allow) {
+                const reason = decision.reason ?? `${step.evaluator} denied`;
+                if (step.evaluator === 'entitlement')
+                    throw new EntitlementDeniedError(reason);
+                if (step.evaluator === 'delegation')
+                    throw new DelegationDeniedError(reason);
+                throw new PolicyDeniedError(reason);
+            }
+            done.add(step.ref);
+            continue;
+        }
+        if (step.kind === 'checkpoint') {
+            results[step.ref] = { ok: true };
+            done.add(step.ref);
+            continue;
+        }
+        if (step.kind === 'step') {
+            try {
+                results[step.ref] = await execStep(step, args);
+            }
+            catch (err) {
+                const reason = err instanceof Error ? err.message : String(err);
+                const policy = step.failure ?? { mode: 'abort' };
+                if (policy.mode === 'ignore') {
+                    failures.push({ stepId: step.ref, reason, handled: 'ignored' });
+                    results[step.ref] = { failed: true, ignored: true, reason, expected: policy.expectedReason };
+                }
+                else if (policy.mode === 'compensate') {
+                    const comp = plan.steps.find((s) => s.ref === policy.compensationStepId && s.kind === 'step');
+                    if (!comp)
+                        return { status: 'failed', authority, bindings, outputs: results, reason: `compensation step ${policy.compensationStepId} not found`, failures };
+                    try {
+                        results[comp.ref] = await execStep(comp, resolveValue(comp.args ?? {}, results));
+                        done.add(comp.ref);
+                    }
+                    catch (ce) {
+                        return { status: 'failed', authority, bindings, outputs: results, reason: `compensation ${comp.ref} failed: ${ce instanceof Error ? ce.message : String(ce)}`, failures };
+                    }
+                    failures.push({ stepId: step.ref, reason, handled: 'compensated' });
+                    results[step.ref] = { failed: true, compensatedBy: comp.ref, reason };
+                }
+                else {
+                    return { status: 'failed', authority, bindings, outputs: results, reason, failures };
+                }
+            }
+            done.add(step.ref);
+        }
+    }
+    const outputs = plan.outputSpec ? resolveValue(plan.outputSpec, results) : results;
+    return { status: 'completed', authority, bindings, outputs, failures };
+}
+//# sourceMappingURL=plan.js.map

package/dist/plan.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plan.js","sourceRoot":"","sources":["../src/plan.ts"],"names":[],"mappings":"AAAA,0GAA0G;AAC1G,uGAAuG;AACvG,2GAA2G;AAC3G,+FAA+F;AAC/F,OAAO,EACL,qBAAqB,EAAE,sBAAsB,EAAE,iBAAiB,GAIjE,MAAM,YAAY,CAAC;AAEpB,MAAM,CAAC,MAAM,GAAG,GAAG,CAAC,IAAY,EAAE,IAAa,EAAW,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;AACrF,MAAM,KAAK,GAAG,CAAC,CAAU,EAAgB,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,OAAO,IAAK,CAAY,CAAC;AAK5G,qCAAqC;AACrC,MAAM,OAAO,WAAW;IAGF;IAFZ,KAAK,GAAe,EAAE,CAAC;IACvB,UAAU,CAA2B;IAC7C,YAAoB,EAAU;QAAV,OAAE,GAAF,EAAE,CAAQ;IAAG,CAAC;IAClC,IAAI,CAAC,OAAe,EAAE,UAAkB,EAAE,IAA6B,EAAE,IAAe;QACtF,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QAC1H,OAAO,IAAI,CAAC;IACd,CAAC;IACD,SAAS,CAAC,OAAe,EAAE,SAAuC,EAAE,MAAc,EAAE,IAA6B;QAC/G,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAClF,OAAO,IAAI,CAAC;IACd,CAAC;IACD,KAAK,CAAC,OAAe,EAAE,MAAc,EAAE,IAA6B;QAClE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QACxF,OAAO,IAAI,CAAC;IACd,CAAC;IACD,UAAU,CAAC,OAAe,EAAE,OAAkB;QAC5C,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;QAC/D,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,CAAC,IAA6B;QAClC,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;QACvB,OAAO,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC;IACzE,CAAC;IACD,KAAK;QACH,OAAO,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC;IACzE,CAAC;CACF;AACD,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,EAAU,EAAe,EAAE,CAAC,IAAI,WAAW,CAAC,EAAE,CAAC,CAAC;AAqB9E,SAAS,YAAY,CAAC,CAAU,EAAE,OAAgC;IAChE,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QACb,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAC9B,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,OAAQ,IAAgC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACjG,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAAE,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;IACpE,IAAI,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;QAC/B,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,CAA4B,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7H,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED;;;qDAGqD;AACrD,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,IAAmB,EAAE,IAAiB;IAClE,MAAM,OAAO,GAA4B,EAAE,CAAC;IAC5C,MAAM,SAAS,GAAsB,EAAE,CAAC;IACxC,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,QAAQ,GAAwB,EAAE,CAAC;IACzC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC;IACzB,uGAAuG;IACvG,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAErI,uFAAuF;IACvF,MAAM,QAAQ,GAAG,KAAK,EAAE,IAAc,EAAE,IAA6B,EAAoB,EAAE;QACzF,MAAM,UAAU,GAAG,IAAI,CAAC,EAAG,CAAC;QAC5B,IAAI,UAAU,KAAK,gBAAgB,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAa,CAAC,CAAC;QAC9F,IAAI,UAAU,KAAK,iBAAiB,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAa,CAAC,CAAC;QAChG,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC;QACtD,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,UAAU,EAAE,CAAC,CAAC;QAC3E,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,CAAE,CAAC;QAC1D,QAAQ,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;QAC9D,OAAO,SAAS,CAAC,OAAO,CAAC,UAAU,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,aAAa,EAAE,GAAG,CAAC,aAAa,EAAE,cAAc,EAAE,GAAG,CAAC,cAAc,EAAE,CAAC,CAAC;IACnK,CAAC,CAAC;IAEF,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QAC9B,IAAI,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,SAAS,CAAC,0CAA0C;QACvF,oFAAoF;QACpF,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,SAAS,IAAI,EAAE,EAAE,CAAC;YACvC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,IAAI,CAAC,GAAG,eAAe,GAAG,qBAAqB,EAAE,QAAQ,EAAE,CAAC;QACpK,CAAC;QACD,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,EAAE,OAAO,CAA4B,CAAC;QAE/E,IAAI,IAAI,CAAC,IAAI,KAAK,WAAW,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YACvD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,KAAK,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY;gBACpE,CAAC,CAAC,IAAI,CAAC,SAAS,KAAK,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW;oBACpD,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC;YAClB,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC;YACnC,2FAA2F;YAC3F,MAAM,QAAQ,GAAsB,SAAS;gBAC3C,CAAC,CAAC,MAAM,SAAS,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,QAA8B,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,IAAI,EAAE,CAAC;gBAC5J,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,IAAI,CAAC,SAAS,uBAAuB,EAAE,CAAC;YAC1E,SAAS,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,QAAQ,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC;YAC1H,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC;YAC7B,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;gBACpB,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,SAAS,CAAC;gBAC7D,IAAI,IAAI,CAAC,SAAS,KAAK,aAAa;oBAAE,MAAM,IAAI,sBAAsB,CAAC,MAAM,CAAC,CAAC;gBAC/E,IAAI,IAAI,CAAC,SAAS,KAAK,YAAY;oBAAE,MAAM,IAAI,qBAAqB,CAAC,MAAM,CAAC,CAAC;gBAC7E,MAAM,IAAI,iBAAiB,CAAC,MAAM,CAAC,CAAC;YACtC,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACnB,SAAS;QACX,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YAC/B,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;YACjC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACnB,SAAS;QACX,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YACzB,IAAI,CAAC;gBACH,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACjD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAChE,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,IAAI,EAAE,IAAI,EAAE,OAAgB,EAAE,CAAC;gBAC1D,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;oBAC7B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;oBAChE,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,cAAc,EAAE,CAAC;gBAC/F,CAAC;qBAAM,IAAI,MAAM,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;oBACxC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,MAAM,CAAC,kBAAkB,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC;oBAC9F,IAAI,CAAC,IAAI;wBAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,qBAAqB,MAAM,CAAC,kBAAkB,YAAY,EAAE,QAAQ,EAAE,CAAC;oBAC5J,IAAI,CAAC;wBACH,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,EAAE,OAAO,CAA4B,CAAC,CAAC;wBAC5G,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;oBACrB,CAAC;oBAAC,OAAO,EAAE,EAAE,CAAC;wBACZ,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,gBAAgB,IAAI,CAAC,GAAG,YAAY,EAAE,YAAY,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC;oBAC5K,CAAC;oBACD,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC,CAAC;oBACpE,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,CAAC;gBACxE,CAAC;qBAAM,CAAC;oBACN,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;gBACvF,CAAC;YACH,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAE,YAAY,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,CAA6B,CAAC,CAAC,CAAC,OAAO,CAAC;IAChH,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;AACzE,CAAC"}

package/dist/primitive-registry.d.ts

@@ -0,0 +1,3 @@
+import type { PrimitiveRegistry } from './types.js';
+export declare function createPrimitiveRegistry(): PrimitiveRegistry;
+//# sourceMappingURL=primitive-registry.d.ts.map

package/dist/primitive-registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"primitive-registry.d.ts","sourceRoot":"","sources":["../src/primitive-registry.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAqF,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAavI,wBAAgB,uBAAuB,IAAI,iBAAiB,CAoB3D"}

package/dist/primitive-registry.js

@@ -0,0 +1,34 @@
+/** Does the advertised capability's constraints cover the requirement's? (requirement ⊆ advertisement) */
+function covers(req, cap) {
+    if (req.capability !== cap.id)
+        return false;
+    const rc = req.constraints;
+    if (!rc)
+        return true;
+    const ac = cap.constraints ?? {};
+    const subset = (need, have) => !need || need.length === 0 || (!!have && need.every((n) => have.includes(n)));
+    return subset(rc.networks, ac.networks) && subset(rc.assetTypes, ac.assetTypes) && subset(rc.operations, ac.operations);
+}
+export function createPrimitiveRegistry() {
+    const byId = new Map();
+    return {
+        register(primitive) {
+            byId.set(primitive.primitiveId, primitive);
+        },
+        resolve(requirement) {
+            for (const p of byId.values()) {
+                const cap = p.capabilities.find((c) => covers(requirement, c));
+                if (cap)
+                    return { requirement: requirement.capability, primitiveId: p.primitiveId, capability: cap.id, version: cap.version };
+            }
+            return null;
+        },
+        get(primitiveId) {
+            return byId.get(primitiveId);
+        },
+        list() {
+            return [...byId.values()];
+        },
+    };
+}
+//# sourceMappingURL=primitive-registry.js.map

package/dist/primitive-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"primitive-registry.js","sourceRoot":"","sources":["../src/primitive-registry.ts"],"names":[],"mappings":"AAMA,0GAA0G;AAC1G,SAAS,MAAM,CAAC,GAAmC,EAAE,GAAwB;IAC3E,IAAI,GAAG,CAAC,UAAU,KAAK,GAAG,CAAC,EAAE;QAAE,OAAO,KAAK,CAAC;IAC5C,MAAM,EAAE,GAAG,GAAG,CAAC,WAAW,CAAC;IAC3B,IAAI,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC;IACrB,MAAM,EAAE,GAAG,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC;IACjC,MAAM,MAAM,GAAG,CAAC,IAAe,EAAE,IAAe,EAAE,EAAE,CAClD,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAChF,OAAO,MAAM,CAAC,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,EAAE,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,MAAM,CAAC,EAAE,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC;AAC1H,CAAC;AAED,MAAM,UAAU,uBAAuB;IACrC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAqB,CAAC;IAC1C,OAAO;QACL,QAAQ,CAAC,SAAoB;YAC3B,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;QAC7C,CAAC;QACD,OAAO,CAAC,WAA2C;YACjD,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;gBAC9B,MAAM,GAAG,GAAG,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC;gBAC/D,IAAI,GAAG;oBAAE,OAAO,EAAE,WAAW,EAAE,WAAW,CAAC,UAAU,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,UAAU,EAAE,GAAG,CAAC,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC;YAChI,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,GAAG,CAAC,WAAmB;YACrB,OAAO,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAC/B,CAAC;QACD,IAAI;YACF,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QAC5B,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/service-agent.d.ts

@@ -0,0 +1,43 @@
+import { type AnySkillDefinition, type AssertionReport, type Exposure, type ExecutionReceipt, type Offering, type ServiceAgentOptions, type SkillInvocation, type SkillProfile } from './types.js';
+export declare class ServiceAgent {
+    private readonly options;
+    private definitions;
+    private assertions;
+    private readonly now;
+    constructor(options: ServiceAgentOptions);
+    define(def: AnySkillDefinition): this;
+    defineProfile(profile: SkillProfile): this;
+    /** Resolve which defined skills the host can execute, HEALTH-GATE them (spec 284), record assertions, and
+     *  publish (spec 282) the ACTIVE ones if wired. An asserted skill is `suspended` if any bound primitive's
+     *  `healthy?()` resolves false or any injected health check fails — "installed once" ≠ "safe now". */
+    assert(opts?: {
+        exposure?: (s: AnySkillDefinition) => Exposure;
+        strict?: boolean;
+    }): Promise<AssertionReport>;
+    /** Collect the reasons a skill should be suspended (empty = healthy/active). */
+    private healthReasons;
+    /** Re-run assertion (e.g. after a primitive's capability is revoked OR a dependency degrades) —
+     *  retracts now-unsupported skills and re-evaluates suspension for the rest. */
+    reconcile(): Promise<AssertionReport>;
+    hasAssertion(skillId: string): boolean;
+    /** Is the skill asserted AND currently active (not suspended)? */
+    isActive(skillId: string): boolean;
+    /** A2A/card projection: the ACTIVE asserted skills at or below the requested exposure (private never
+     *  projected; suspended never projected). The full entitlement/delegation decision still happens at
+     *  invoke time — card visibility is not authorization. */
+    projectSkills(projection: 'public' | 'authenticated'): {
+        id: string;
+        version: string;
+        effect: string;
+    }[];
+    /** Project the asserted skills as first-class Offerings (spec 286) — the live, host-asserted drill-down
+     *  behind discovery. Includes both active AND suspended assertions (status carries availability); private
+     *  skills are never offered. `familyOf` (optional) maps a skill id to its coarse capability family. The
+     *  result is host-asserted + live — callers MUST NOT persist it to the on-chain discovery A-box (ADR-0040). */
+    projectOfferings(projection: 'public' | 'authenticated', opts?: {
+        familyOf?: (skillId: string) => string;
+    }): Offering[];
+    /** Execute a skill: assert-gate → compile plan → run (entitlement ∩ delegation ∩ policy ∩ providers) → receipt. */
+    invoke<Input = unknown>(inv: SkillInvocation<Input>): Promise<ExecutionReceipt>;
+}
+//# sourceMappingURL=service-agent.d.ts.map

package/dist/service-agent.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service-agent.d.ts","sourceRoot":"","sources":["../src/service-agent.ts"],"names":[],"mappings":"AAKA,OAAO,EAEL,KAAK,kBAAkB,EAAE,KAAK,eAAe,EAA0B,KAAK,QAAQ,EAAE,KAAK,gBAAgB,EAC3G,KAAK,QAAQ,EAAE,KAAK,mBAAmB,EAAuB,KAAK,eAAe,EAAE,KAAK,YAAY,EACtG,MAAM,YAAY,CAAC;AAEpB,qBAAa,YAAY;IAKX,OAAO,CAAC,QAAQ,CAAC,OAAO;IAJpC,OAAO,CAAC,WAAW,CAAyC;IAC5D,OAAO,CAAC,UAAU,CAAqC;IACvD,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAe;gBAEN,OAAO,EAAE,mBAAmB;IAIzD,MAAM,CAAC,GAAG,EAAE,kBAAkB,GAAG,IAAI;IAIrC,aAAa,CAAC,OAAO,EAAE,YAAY,GAAG,IAAI;IAK1C;;0GAEsG;IAChG,MAAM,CAAC,IAAI,GAAE;QAAE,QAAQ,CAAC,EAAE,CAAC,CAAC,EAAE,kBAAkB,KAAK,QAAQ,CAAC;QAAC,MAAM,CAAC,EAAE,OAAO,CAAA;KAAO,GAAG,OAAO,CAAC,eAAe,CAAC;IAgBvH,gFAAgF;YAClE,aAAa;IAqB3B;oFACgF;IAC1E,SAAS,IAAI,OAAO,CAAC,eAAe,CAAC;IAI3C,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO;IAGtC,kEAAkE;IAClE,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO;IAIlC;;8DAE0D;IAC1D,aAAa,CAAC,UAAU,EAAE,QAAQ,GAAG,eAAe,GAAG;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,EAAE;IAOxG;;;mHAG+G;IAC/G,gBAAgB,CAAC,UAAU,EAAE,QAAQ,GAAG,eAAe,EAAE,IAAI,GAAE;QAAE,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,MAAM,CAAA;KAAO,GAAG,QAAQ,EAAE;IAwB3H,mHAAmH;IAC7G,MAAM,CAAC,KAAK,GAAG,OAAO,EAAE,GAAG,EAAE,eAAe,CAAC,KAAK,CAAC,GAAG,OAAO,CAAC,gBAAgB,CAAC;CAoCtF"}

package/dist/service-agent.js

@@ -0,0 +1,169 @@
+// ServiceAgent (spec 283) — composition, NOT inheritance (no ServiceSmartAgent base exists; W1 is flat:
+// SA address + AgentCard.type). Holds the skill definitions + assertions, runs the assert + invoke
+// lifecycle, and projects an A2A skill list. Provider-neutral: registry + evaluators + ledger are injected.
+import { assertSkills } from './assert.js';
+import { runPlan } from './plan.js';
+import { SkillNotAssertedError, SkillSuspendedError, } from './types.js';
+export class ServiceAgent {
+    options;
+    definitions = new Map();
+    assertions = new Map();
+    now;
+    constructor(options) {
+        this.options = options;
+        this.now = options.now ?? (() => new Date(0).toISOString());
+    }
+    define(def) {
+        this.definitions.set(def.id, def);
+        return this;
+    }
+    defineProfile(profile) {
+        for (const d of profile.definitions)
+            this.define(d);
+        return this;
+    }
+    /** Resolve which defined skills the host can execute, HEALTH-GATE them (spec 284), record assertions, and
+     *  publish (spec 282) the ACTIVE ones if wired. An asserted skill is `suspended` if any bound primitive's
+     *  `healthy?()` resolves false or any injected health check fails — "installed once" ≠ "safe now". */
+    async assert(opts = {}) {
+        const report = assertSkills({ definitions: [...this.definitions.values()], registry: this.options.primitives, exposure: opts.exposure, now: this.now });
+        this.assertions.clear();
+        for (const a of report.asserted) {
+            const reasons = await this.healthReasons(a.skillId, a.primitiveBindings);
+            a.status = reasons.length === 0 ? 'active' : 'suspended';
+            if (reasons.length > 0)
+                a.suspendedReasons = reasons;
+            this.assertions.set(a.skillId, a);
+            if (a.status === 'active' && this.options.publishAssertion)
+                await this.options.publishAssertion(a);
+        }
+        if (opts.strict && (report.unavailable.length > 0 || report.rejected.length > 0)) {
+            throw new Error(`[service-agent] strict assert failed: ${report.unavailable.map((u) => u.skillId).join(', ')} unavailable`);
+        }
+        return report;
+    }
+    /** Collect the reasons a skill should be suspended (empty = healthy/active). */
+    async healthReasons(skillId, bindings) {
+        const reasons = [];
+        const seen = new Set();
+        for (const b of bindings) {
+            if (seen.has(b.primitiveId))
+                continue;
+            seen.add(b.primitiveId);
+            const primitive = this.options.primitives.get(b.primitiveId);
+            if (primitive?.healthy) {
+                try {
+                    if (!(await primitive.healthy()))
+                        reasons.push(`provider ${b.primitiveId} unhealthy`);
+                }
+                catch (e) {
+                    reasons.push(`provider ${b.primitiveId} health check threw: ${e instanceof Error ? e.message : String(e)}`);
+                }
+            }
+        }
+        const def = this.definitions.get(skillId);
+        for (const check of this.options.healthChecks ?? []) {
+            if (!def)
+                break;
+            try {
+                const v = await check.evaluate({ skill: def, bindings });
+                if (!v.healthy)
+                    reasons.push(v.reason ?? 'health check failed');
+            }
+            catch (e) {
+                reasons.push(`health check threw: ${e instanceof Error ? e.message : String(e)}`);
+            }
+        }
+        return reasons;
+    }
+    /** Re-run assertion (e.g. after a primitive's capability is revoked OR a dependency degrades) —
+     *  retracts now-unsupported skills and re-evaluates suspension for the rest. */
+    async reconcile() {
+        return this.assert();
+    }
+    hasAssertion(skillId) {
+        return this.assertions.has(skillId);
+    }
+    /** Is the skill asserted AND currently active (not suspended)? */
+    isActive(skillId) {
+        return this.assertions.get(skillId)?.status === 'active';
+    }
+    /** A2A/card projection: the ACTIVE asserted skills at or below the requested exposure (private never
+     *  projected; suspended never projected). The full entitlement/delegation decision still happens at
+     *  invoke time — card visibility is not authorization. */
+    projectSkills(projection) {
+        const allowed = projection === 'public' ? ['public'] : ['public', 'authenticated'];
+        return [...this.assertions.values()]
+            .filter((a) => a.status !== 'suspended' && allowed.includes(a.exposure))
+            .map((a) => ({ id: a.skillId, version: a.version, effect: this.definitions.get(a.skillId)?.effect ?? 'read' }));
+    }
+    /** Project the asserted skills as first-class Offerings (spec 286) — the live, host-asserted drill-down
+     *  behind discovery. Includes both active AND suspended assertions (status carries availability); private
+     *  skills are never offered. `familyOf` (optional) maps a skill id to its coarse capability family. The
+     *  result is host-asserted + live — callers MUST NOT persist it to the on-chain discovery A-box (ADR-0040). */
+    projectOfferings(projection, opts = {}) {
+        const allowed = projection === 'public' ? ['public'] : ['public', 'authenticated'];
+        const out = [];
+        for (const a of this.assertions.values()) {
+            if (!allowed.includes(a.exposure))
+                continue;
+            const def = this.definitions.get(a.skillId);
+            if (!def)
+                continue;
+            out.push({
+                agentId: this.options.descriptor.id,
+                skillId: a.skillId,
+                version: a.version,
+                name: def.name,
+                description: def.description,
+                effect: def.effect,
+                exposure: a.exposure,
+                family: opts.familyOf?.(a.skillId),
+                requiredCapabilities: def.requires.map((r) => r.capability),
+                hasInputSchema: !!def.inputSchema,
+                status: a.status ?? 'active',
+            });
+        }
+        return out;
+    }
+    /** Execute a skill: assert-gate → compile plan → run (entitlement ∩ delegation ∩ policy ∩ providers) → receipt. */
+    async invoke(inv) {
+        const def = this.definitions.get(inv.skillId);
+        if (!def)
+            throw new SkillNotAssertedError(`unknown skill ${inv.skillId}`);
+        const assertion = this.assertions.get(inv.skillId);
+        if (!assertion)
+            throw new SkillNotAssertedError(`skill ${inv.skillId} not asserted`);
+        if (assertion.status === 'suspended') {
+            throw new SkillSuspendedError(`skill ${inv.skillId} is suspended: ${(assertion.suspendedReasons ?? []).join('; ') || 'unhealthy'}`);
+        }
+        if (def.effect !== 'read' && !inv.idempotencyKey) {
+            throw new Error(`[service-agent] ${inv.skillId} (effect=${def.effect}) requires an idempotencyKey`);
+        }
+        const startedAt = this.now();
+        const context = { agentId: this.options.descriptor.id, subject: inv.subject, tenant: inv.tenant, correlationId: inv.correlationId, idempotencyKey: inv.idempotencyKey };
+        const input = def.inputSchema ? def.inputSchema.parse(inv.input) : inv.input;
+        const plan = def.compile({ input: input, context });
+        const run = await runPlan(plan, {
+            registry: this.options.primitives,
+            entitlements: this.options.entitlements,
+            delegations: this.options.delegations,
+            policies: this.options.policies,
+            ledger: this.options.ledger,
+            context,
+        });
+        return {
+            receiptId: `${inv.skillId}:${inv.idempotencyKey ?? inv.correlationId ?? startedAt}`,
+            agentId: this.options.descriptor.id,
+            skill: { id: def.id, version: def.version },
+            subject: inv.subject,
+            authority: run.authority,
+            execution: { planId: plan.id, primitiveBindings: run.bindings, outputs: run.outputs },
+            status: run.status === 'completed' ? 'completed' : 'failed',
+            reason: run.reason,
+            startedAt,
+            completedAt: this.now(),
+        };
+    }
+}
+//# sourceMappingURL=service-agent.js.map

package/dist/service-agent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service-agent.js","sourceRoot":"","sources":["../src/service-agent.ts"],"names":[],"mappings":"AAAA,wGAAwG;AACxG,mGAAmG;AACnG,4GAA4G;AAC5G,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EACL,qBAAqB,EAAE,mBAAmB,GAG3C,MAAM,YAAY,CAAC;AAEpB,MAAM,OAAO,YAAY;IAKM;IAJrB,WAAW,GAAG,IAAI,GAAG,EAA8B,CAAC;IACpD,UAAU,GAAG,IAAI,GAAG,EAA0B,CAAC;IACtC,GAAG,CAAe;IAEnC,YAA6B,OAA4B;QAA5B,YAAO,GAAP,OAAO,CAAqB;QACvD,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;IAC9D,CAAC;IAED,MAAM,CAAC,GAAuB;QAC5B,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QAClC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,aAAa,CAAC,OAAqB;QACjC,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,WAAW;YAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACpD,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;0GAEsG;IACtG,KAAK,CAAC,MAAM,CAAC,OAA6E,EAAE;QAC1F,MAAM,MAAM,GAAG,YAAY,CAAC,EAAE,WAAW,EAAE,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QACxJ,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QACxB,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YAChC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,iBAAiB,CAAC,CAAC;YACzE,CAAC,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC;YACzD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;gBAAE,CAAC,CAAC,gBAAgB,GAAG,OAAO,CAAC;YACrD,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YAClC,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,IAAI,CAAC,OAAO,CAAC,gBAAgB;gBAAE,MAAM,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC;QACrG,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,CAAC;YACjF,MAAM,IAAI,KAAK,CAAC,yCAAyC,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAC9H,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,gFAAgF;IACxE,KAAK,CAAC,aAAa,CAAC,OAAe,EAAE,QAA6B;QACxE,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;YACzB,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC;gBAAE,SAAS;YACtC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;YACxB,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;YAC7D,IAAI,SAAS,EAAE,OAAO,EAAE,CAAC;gBACvB,IAAI,CAAC;oBAAC,IAAI,CAAC,CAAC,MAAM,SAAS,CAAC,OAAO,EAAE,CAAC;wBAAE,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,WAAW,YAAY,CAAC,CAAC;gBAAC,CAAC;gBAC9F,OAAO,CAAC,EAAE,CAAC;oBAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,WAAW,wBAAwB,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBAAC,CAAC;YAC5H,CAAC;QACH,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC1C,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,YAAY,IAAI,EAAE,EAAE,CAAC;YACpD,IAAI,CAAC,GAAG;gBAAE,MAAM;YAChB,IAAI,CAAC;gBAAC,MAAM,CAAC,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAC;gBAAC,IAAI,CAAC,CAAC,CAAC,OAAO;oBAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,qBAAqB,CAAC,CAAC;YAAC,CAAC;YAClI,OAAO,CAAC,EAAE,CAAC;gBAAC,OAAO,CAAC,IAAI,CAAC,uBAAuB,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAAC,CAAC;QAClG,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;oFACgF;IAChF,KAAK,CAAC,SAAS;QACb,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC;IACvB,CAAC;IAED,YAAY,CAAC,OAAe;QAC1B,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACtC,CAAC;IACD,kEAAkE;IAClE,QAAQ,CAAC,OAAe;QACtB,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,MAAM,KAAK,QAAQ,CAAC;IAC3D,CAAC;IAED;;8DAE0D;IAC1D,aAAa,CAAC,UAAsC;QAClD,MAAM,OAAO,GAAe,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;QAC/F,OAAO,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC;aACjC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,WAAW,IAAI,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;aACvE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,IAAI,MAAM,EAAE,CAAC,CAAC,CAAC;IACpH,CAAC;IAED;;;mHAG+G;IAC/G,gBAAgB,CAAC,UAAsC,EAAE,OAAmD,EAAE;QAC5G,MAAM,OAAO,GAAe,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;QAC/F,MAAM,GAAG,GAAe,EAAE,CAAC;QAC3B,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,EAAE,CAAC;YACzC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC;gBAAE,SAAS;YAC5C,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;YAC5C,IAAI,CAAC,GAAG;gBAAE,SAAS;YACnB,GAAG,CAAC,IAAI,CAAC;gBACP,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE;gBACnC,OAAO,EAAE,CAAC,CAAC,OAAO;gBAClB,OAAO,EAAE,CAAC,CAAC,OAAO;gBAClB,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,WAAW,EAAE,GAAG,CAAC,WAAW;gBAC5B,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,MAAM,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;gBAClC,oBAAoB,EAAE,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC;gBAC3D,cAAc,EAAE,CAAC,CAAC,GAAG,CAAC,WAAW;gBACjC,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,QAAQ;aAC7B,CAAC,CAAC;QACL,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED,mHAAmH;IACnH,KAAK,CAAC,MAAM,CAAkB,GAA2B;QACvD,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC9C,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,qBAAqB,CAAC,iBAAiB,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QAC1E,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACnD,IAAI,CAAC,SAAS;YAAE,MAAM,IAAI,qBAAqB,CAAC,SAAS,GAAG,CAAC,OAAO,eAAe,CAAC,CAAC;QACrF,IAAI,SAAS,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YACrC,MAAM,IAAI,mBAAmB,CAAC,SAAS,GAAG,CAAC,OAAO,kBAAkB,CAAC,SAAS,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,WAAW,EAAE,CAAC,CAAC;QACtI,CAAC;QACD,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,GAAG,CAAC,cAAc,EAAE,CAAC;YACjD,MAAM,IAAI,KAAK,CAAC,mBAAmB,GAAG,CAAC,OAAO,YAAY,GAAG,CAAC,MAAM,8BAA8B,CAAC,CAAC;QACtG,CAAC;QACD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,OAAO,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,aAAa,EAAE,GAAG,CAAC,aAAa,EAAE,cAAc,EAAE,GAAG,CAAC,cAAc,EAAE,CAAC;QACxK,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;QAC7E,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,KAAc,EAAE,OAAO,EAAE,CAAC,CAAC;QAC7D,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE;YAC9B,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU;YACjC,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,YAAY;YACvC,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW;YACrC,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ;YAC/B,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM;YAC3B,OAAO;SACR,CAAC,CAAC;QACH,OAAO;YACL,SAAS,EAAE,GAAG,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,cAAc,IAAI,GAAG,CAAC,aAAa,IAAI,SAAS,EAAE;YACnF,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE;YACnC,KAAK,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE;YAC3C,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,SAAS,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,iBAAiB,EAAE,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE;YACrF,MAAM,EAAE,GAAG,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ;YAC3D,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,SAAS;YACT,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE;SACxB,CAAC;IACJ,CAAC;CACF"}

package/dist/types.d.ts

@@ -0,0 +1,333 @@
+import type { Address } from '@agenticprimitives/types';
+/** What a skill does — drives default exposure + risk handling (spec 283). */
+export type Effect = 'read' | 'sign' | 'spend' | 'trade' | 'admin';
+/** Whether a skill is discoverable / remotely invocable. `private` = asserted but never projected. */
+export type Exposure = 'private' | 'authenticated' | 'public';
+/** Minimal input/output validator — duck-typed so the framework picks no schema lib. */
+export interface Schema<T> {
+    parse(value: unknown): T;
+}
+/** Constraints a capability (requirement OR advertisement) is scoped by — networks/assets/operations. */
+export interface CapabilityConstraints {
+    networks?: string[];
+    assetTypes?: string[];
+    operations?: string[];
+}
+/** A LOGICAL capability a skill requires (not a concrete provider). */
+export interface PrimitiveCapabilityRequirement {
+    capability: string;
+    versionRange?: string;
+    optional?: boolean;
+    constraints?: CapabilityConstraints;
+}
+/** A capability an installed primitive advertises. */
+export interface PrimitiveCapability {
+    id: string;
+    version: string;
+    constraints?: CapabilityConstraints;
+}
+/** Context passed to a primitive operation at run time. */
+export interface PrimitiveContext {
+    agentId: string;
+    subject?: string;
+    correlationId?: string;
+    idempotencyKey?: string;
+}
+/** What execution shape(s) a plan step produces — see spec 284. `native-dag` decomposes into known
+ *  primitive ops; `opaque-calldata` is provider tx data (decode + simulate + validate before signing);
+ *  `offchain-order` is a signed venue/solver order (validate domain/market/expiry/collateral). */
+export type PlanKind = 'native-dag' | 'opaque-calldata' | 'offchain-order';
+/** Machine-readable provider manifest (spec 284): lets the host reason about a provider's shape + audit
+ *  boundary without hard-coding it. All fields optional so existing providers stay valid (additive). */
+export interface PrimitiveManifest {
+    planKinds?: PlanKind[];
+    supportsQuote?: boolean;
+    supportsSimulation?: boolean;
+    supportsCancellation?: boolean;
+    supportsRecovery?: boolean;
+    /** CAIP-2 namespaces / network ids this provider serves. */
+    chainNamespaces?: string[];
+    networks?: string[];
+    /** Free-form identifier of the audit scope this provider was reviewed under. */
+    auditBoundary?: string;
+}
+/** A registered provider: advertises capabilities + executes their operations. Concrete impls (EVM
+ *  transfer, swap venue, …) live EXTERNAL (ADR-0037) and register here; the demo ships fakes. */
+export interface Primitive {
+    primitiveId: string;
+    capabilities: PrimitiveCapability[];
+    execute(capability: string, input: unknown, ctx: PrimitiveContext): Promise<unknown>;
+    /** Liveness — when present and resolving false, the host SUSPENDS skills bound to this provider. */
+    healthy?(): Promise<boolean>;
+    /** Provider shape + audit boundary (spec 284). Optional. */
+    manifest?(): PrimitiveManifest;
+}
+/** Resolution of one requirement against the registry. */
+export interface CapabilityBinding {
+    requirement: string;
+    primitiveId: string;
+    capability: string;
+    version: string;
+}
+/** The primitive registry — modeled on `payments` registerRail/getRail. */
+export interface PrimitiveRegistry {
+    register(primitive: Primitive): void;
+    /** Resolve a requirement → a binding, or null if no installed primitive satisfies it. */
+    resolve(requirement: PrimitiveCapabilityRequirement): CapabilityBinding | null;
+    get(primitiveId: string): Primitive | undefined;
+    list(): Primitive[];
+}
+export interface AuthorityRequest {
+    action: string;
+    resource?: string;
+    subject?: string;
+    agentId?: string;
+    input?: unknown;
+}
+export interface AuthorityDecision {
+    allow: boolean;
+    decisionId?: string;
+    reason?: string;
+}
+/** "May this caller request this skill for this resource?" → tool-policy.evaluatePolicy + entitlements. */
+export interface EntitlementEvaluator {
+    evaluate(req: AuthorityRequest): Promise<AuthorityDecision>;
+}
+/** "Does the agent have authority FROM the owner?" → delegation.evaluateCaveats / verifyAuthorization. */
+export interface DelegationEvaluator {
+    evaluate(req: AuthorityRequest): Promise<AuthorityDecision>;
+}
+/** Runtime policy gate → tool-policy.evaluatePolicy. */
+export interface PolicyEvaluator {
+    evaluate(req: AuthorityRequest): Promise<AuthorityDecision>;
+}
+/** Ledger reserve/finalize (NET-NEW, spec 283): double-spend guard before execute, reconcile after. */
+export interface LedgerReservation {
+    reservationId: string;
+}
+export interface LedgerPrimitive {
+    reserve(args: {
+        accountId: string;
+        asset: string;
+        amount: string;
+        idempotencyKey: string;
+    }): Promise<LedgerReservation>;
+    finalize(args: {
+        reservationId: string;
+        settlement: unknown;
+    }): Promise<{
+        journalId: string;
+    }>;
+    release?(reservationId: string): Promise<void>;
+}
+export type PlanStepKind = 'step' | 'authorize' | 'guard' | 'checkpoint' | 'output';
+/** A reference to a prior step's output, resolved by the runner. */
+export interface PlanRef {
+    __ref: string;
+    path?: string;
+}
+/** Per-step failure policy (spec 284 DAG plans). `abort` (default) fails the plan; `ignore` records the
+ *  failure + continues (with a declared expected reason); `compensate` runs a named compensation step. */
+export type StepFailurePolicy = {
+    mode: 'abort';
+} | {
+    mode: 'ignore';
+    expectedReason: string;
+} | {
+    mode: 'compensate';
+    compensationStepId: string;
+};
+export interface PlanStep {
+    kind: PlanStepKind;
+    ref: string;
+    op?: string;
+    evaluator?: 'entitlement' | 'delegation' | 'policy';
+    args?: Record<string, unknown>;
+    basedOn?: PlanRef[];
+    /** DAG edges (spec 284): refs of steps that MUST have run before this one. Validated fail-closed — a
+     *  dependency on an unknown/later step rejects the plan. */
+    dependsOn?: string[];
+    /** What to do if a `step` fails (provider throws / no provider). Default `abort`. */
+    failure?: StepFailurePolicy;
+}
+export interface PrimitivePlan {
+    id: string;
+    steps: PlanStep[];
+    outputSpec?: Record<string, unknown>;
+}
+export interface SkillDefinition<Input = unknown, Output = unknown> {
+    id: string;
+    version: string;
+    name: string;
+    description?: string;
+    effect: Effect;
+    defaultExposure: Exposure;
+    requires: PrimitiveCapabilityRequirement[];
+    entitlement?: {
+        action: string;
+        resource?: (input: Input) => string | undefined;
+    };
+    delegation?: {
+        action: string;
+        resource?: (input: Input) => string | undefined;
+    };
+    inputSchema?: Schema<Input>;
+    outputSchema?: Schema<Output>;
+    compile: (args: {
+        input: Input;
+        context: InvocationContext;
+    }) => PrimitivePlan;
+}
+/** A skill definition of unknown concrete I/O — for heterogeneous storage (registry/profile/Map). The
+ *  `any` params are deliberate: `SkillDefinition` is invariant (contravariant `compile`/`resolve` params),
+ *  so a narrow `SkillDefinition<{...}>` is NOT assignable to `<unknown, unknown>`. */
+export type AnySkillDefinition = SkillDefinition<any, any>;
+export interface SkillProfile {
+    id: string;
+    definitions: AnySkillDefinition[];
+}
+/** Whether an asserted skill is safe to execute RIGHT NOW (spec 284). `active` = all required primitives
+ *  resolved AND healthy AND every injected health check passed; `suspended` = capability resolved but a
+ *  runtime dependency is degraded (provider unhealthy, delegation expired, risk engine offline, …).
+ *  A suspended skill is never projected to a card and rejects at invoke — "installed once" ≠ "safe now." */
+export type AssertionStatus = 'active' | 'suspended';
+export interface SkillAssertion {
+    skillId: string;
+    version: string;
+    exposure: Exposure;
+    primitiveBindings: CapabilityBinding[];
+    issuedAt: string;
+    /** Defaults to `active` when produced by the pure `assertSkills` resolver; the ServiceAgent layers
+     *  health gating on top and may flip this to `suspended`. */
+    status?: AssertionStatus;
+    /** Present when `status === 'suspended'` — one entry per failed health signal. */
+    suspendedReasons?: string[];
+}
+/** A runtime health signal layered on top of capability resolution (spec 284). Return `{healthy:false}`
+ *  to SUSPEND the skill (e.g. delegation expired, risk engine offline, network unhealthy). */
+export interface AssertionHealthCheck {
+    evaluate(args: {
+        skill: AnySkillDefinition;
+        bindings: CapabilityBinding[];
+    }): Promise<{
+        healthy: boolean;
+        reason?: string;
+    }>;
+}
+export interface AssertionReport {
+    asserted: SkillAssertion[];
+    unavailable: {
+        skillId: string;
+        missingCapabilities: string[];
+    }[];
+    rejected: {
+        skillId: string;
+        reason: string;
+    }[];
+}
+/** A first-class callable offering = (agent × asserted skill), advertised by a service agent (spec 286).
+ *  Host-asserted + live — never persisted to the on-chain discovery A-box (ADR-0040). Private skills are
+ *  never offered. `status` carries availability (a suspended skill is offered-but-not-callable). The
+ *  `price`/`sla`/`evidence` fields are optional: price/sla are a future host-asserted economics layer;
+ *  `evidence` is stamped by the discovery crawler (endpoint + observedAt + card digest), not the host. */
+export interface Offering {
+    agentId: string;
+    skillId: string;
+    version: string;
+    name: string;
+    description?: string;
+    effect: Effect;
+    exposure: Exposure;
+    family?: string;
+    requiredCapabilities: string[];
+    hasInputSchema: boolean;
+    status: AssertionStatus;
+    price?: {
+        asset: string;
+        amount: string;
+        unit?: string;
+    };
+    sla?: {
+        latencyMs?: number;
+        availabilityBps?: number;
+    };
+    evidence?: {
+        endpoint: string;
+        observedAt: number;
+        cardDigest?: string;
+    };
+}
+export interface InvocationContext {
+    agentId: string;
+    subject?: string;
+    tenant?: string;
+    correlationId?: string;
+    idempotencyKey?: string;
+}
+export interface SkillInvocation<Input = unknown> {
+    skillId: string;
+    input: Input;
+    subject?: string;
+    tenant?: string;
+    correlationId?: string;
+    idempotencyKey?: string;
+}
+export interface AuthorityRecord {
+    action: string;
+    evaluator: string;
+    decisionId?: string;
+    allow: boolean;
+}
+export interface ExecutionReceipt {
+    receiptId: string;
+    agentId: string;
+    skill: {
+        id: string;
+        version: string;
+    };
+    subject?: string;
+    authority: AuthorityRecord[];
+    execution: {
+        planId: string;
+        primitiveBindings: string[];
+        outputs: Record<string, unknown>;
+    };
+    status: 'completed' | 'failed' | 'denied';
+    reason?: string;
+    startedAt: string;
+    completedAt: string;
+}
+export interface ServiceAgentDescriptor {
+    id: string;
+    name: string;
+    version: string;
+}
+export interface ServiceAgentOptions {
+    descriptor: ServiceAgentDescriptor;
+    primitives: PrimitiveRegistry;
+    entitlements?: EntitlementEvaluator;
+    delegations?: DelegationEvaluator;
+    policies?: PolicyEvaluator;
+    ledger?: LedgerPrimitive;
+    /** Wires the public assertion to spec 282 (vault claim -> atl:skills) at the app layer. Optional. */
+    publishAssertion?: (assertion: SkillAssertion) => Promise<void>;
+    /** Runtime health signals layered on capability resolution (spec 284). Any failing check suspends the
+     *  skill. Use for delegation expiry, risk-engine liveness, network health, provider-assertion freshness. */
+    healthChecks?: AssertionHealthCheck[];
+    /** Monotonic clock for receipt/assertion timestamps (injected; the framework avoids ambient Date). */
+    now?: () => string;
+}
+/** Thrown when authority is denied — distinct types so callers can branch (parity with the design). */
+export declare class EntitlementDeniedError extends Error {
+}
+export declare class DelegationDeniedError extends Error {
+}
+export declare class PolicyDeniedError extends Error {
+}
+export declare class SkillNotAssertedError extends Error {
+}
+/** Thrown at invoke when a skill is asserted but currently SUSPENDED (a runtime dependency is degraded). */
+export declare class SkillSuspendedError extends Error {
+}
+export type { Address };
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,0BAA0B,CAAC;AAExD,8EAA8E;AAC9E,MAAM,MAAM,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,OAAO,GAAG,OAAO,CAAC;AAEnE,sGAAsG;AACtG,MAAM,MAAM,QAAQ,GAAG,SAAS,GAAG,eAAe,GAAG,QAAQ,CAAC;AAE9D,wFAAwF;AACxF,MAAM,WAAW,MAAM,CAAC,CAAC;IAAI,KAAK,CAAC,KAAK,EAAE,OAAO,GAAG,CAAC,CAAA;CAAE;AAEvD,yGAAyG;AACzG,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;CACvB;AAED,uEAAuE;AACvE,MAAM,WAAW,8BAA8B;IAC7C,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,WAAW,CAAC,EAAE,qBAAqB,CAAC;CACrC;AAED,sDAAsD;AACtD,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,qBAAqB,CAAC;CACrC;AAED,2DAA2D;AAC3D,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;kGAEkG;AAClG,MAAM,MAAM,QAAQ,GAAG,YAAY,GAAG,iBAAiB,GAAG,gBAAgB,CAAC;AAE3E;wGACwG;AACxG,MAAM,WAAW,iBAAiB;IAChC,SAAS,CAAC,EAAE,QAAQ,EAAE,CAAC;IACvB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,4DAA4D;IAC5D,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,gFAAgF;IAChF,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;iGACiG;AACjG,MAAM,WAAW,SAAS;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,mBAAmB,EAAE,CAAC;IACpC,OAAO,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,gBAAgB,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACrF,oGAAoG;IACpG,OAAO,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;IAC7B,4DAA4D;IAC5D,QAAQ,CAAC,IAAI,iBAAiB,CAAC;CAChC;AAED,0DAA0D;AAC1D,MAAM,WAAW,iBAAiB;IAChC,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,2EAA2E;AAC3E,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,SAAS,EAAE,SAAS,GAAG,IAAI,CAAC;IACrC,yFAAyF;IACzF,OAAO,CAAC,WAAW,EAAE,8BAA8B,GAAG,iBAAiB,GAAG,IAAI,CAAC;IAC/E,GAAG,CAAC,WAAW,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,CAAC;IAChD,IAAI,IAAI,SAAS,EAAE,CAAC;CACrB;AAGD,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AACD,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,OAAO,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AACD,2GAA2G;AAC3G,MAAM,WAAW,oBAAoB;IAAG,QAAQ,CAAC,GAAG,EAAE,gBAAgB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAA;CAAE;AACrG,0GAA0G;AAC1G,MAAM,WAAW,mBAAmB;IAAG,QAAQ,CAAC,GAAG,EAAE,gBAAgB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAA;CAAE;AACpG,wDAAwD;AACxD,MAAM,WAAW,eAAe;IAAG,QAAQ,CAAC,GAAG,EAAE,gBAAgB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAA;CAAE;AAEhG,uGAAuG;AACvG,MAAM,WAAW,iBAAiB;IAAG,aAAa,EAAE,MAAM,CAAA;CAAE;AAC5D,MAAM,WAAW,eAAe;IAC9B,OAAO,CAAC,IAAI,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,cAAc,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACxH,QAAQ,CAAC,IAAI,EAAE;QAAE,aAAa,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC/F,OAAO,CAAC,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAChD;AAGD,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG,WAAW,GAAG,OAAO,GAAG,YAAY,GAAG,QAAQ,CAAC;AACpF,oEAAoE;AACpE,MAAM,WAAW,OAAO;IAAG,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE;AAEzD;0GAC0G;AAC1G,MAAM,MAAM,iBAAiB,GACzB;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE,GACjB;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,cAAc,EAAE,MAAM,CAAA;CAAE,GAC1C;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,kBAAkB,EAAE,MAAM,CAAA;CAAE,CAAC;AAEvD,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,YAAY,CAAC;IACnB,GAAG,EAAE,MAAM,CAAC;IACZ,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,SAAS,CAAC,EAAE,aAAa,GAAG,YAAY,GAAG,QAAQ,CAAC;IACpD,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC;IACpB;gEAC4D;IAC5D,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,qFAAqF;IACrF,OAAO,CAAC,EAAE,iBAAiB,CAAC;CAC7B;AACD,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,QAAQ,EAAE,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACtC;AAGD,MAAM,WAAW,eAAe,CAAC,KAAK,GAAG,OAAO,EAAE,MAAM,GAAG,OAAO;IAChE,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,eAAe,EAAE,QAAQ,CAAC;IAC1B,QAAQ,EAAE,8BAA8B,EAAE,CAAC;IAC3C,WAAW,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,MAAM,GAAG,SAAS,CAAA;KAAE,CAAC;IAClF,UAAU,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,MAAM,GAAG,SAAS,CAAA;KAAE,CAAC;IACjF,WAAW,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5B,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IAC9B,OAAO,EAAE,CAAC,IAAI,EAAE;QAAE,KAAK,EAAE,KAAK,CAAC;QAAC,OAAO,EAAE,iBAAiB,CAAA;KAAE,KAAK,aAAa,CAAC;CAChF;AAED;;sFAEsF;AAEtF,MAAM,MAAM,kBAAkB,GAAG,eAAe,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;AAE3D,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,kBAAkB,EAAE,CAAC;CACnC;AAGD;;;4GAG4G;AAC5G,MAAM,MAAM,eAAe,GAAG,QAAQ,GAAG,WAAW,CAAC;AAErD,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,QAAQ,CAAC;IACnB,iBAAiB,EAAE,iBAAiB,EAAE,CAAC;IACvC,QAAQ,EAAE,MAAM,CAAC;IACjB;iEAC6D;IAC7D,MAAM,CAAC,EAAE,eAAe,CAAC;IACzB,kFAAkF;IAClF,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC7B;AAED;8FAC8F;AAC9F,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,IAAI,EAAE;QAAE,KAAK,EAAE,kBAAkB,CAAC;QAAC,QAAQ,EAAE,iBAAiB,EAAE,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC9H;AACD,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,cAAc,EAAE,CAAC;IAC3B,WAAW,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,mBAAmB,EAAE,MAAM,EAAE,CAAA;KAAE,EAAE,CAAC;IAClE,QAAQ,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CACjD;AAED;;;;0GAI0G;AAC1G,MAAM,WAAW,QAAQ;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,QAAQ,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,oBAAoB,EAAE,MAAM,EAAE,CAAC;IAC/B,cAAc,EAAE,OAAO,CAAC;IACxB,MAAM,EAAE,eAAe,CAAC;IACxB,KAAK,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACzD,GAAG,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,eAAe,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACvD,QAAQ,CAAC,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAC1E;AAGD,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AACD,MAAM,WAAW,eAAe,CAAC,KAAK,GAAG,OAAO;IAC9C,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,KAAK,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AACD,MAAM,WAAW,eAAe;IAAG,MAAM,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,OAAO,CAAA;CAAE;AAC3G,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IACvC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,eAAe,EAAE,CAAC;IAC7B,SAAS,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,iBAAiB,EAAE,MAAM,EAAE,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,CAAC;IAC7F,MAAM,EAAE,WAAW,GAAG,QAAQ,GAAG,QAAQ,CAAC;IAC1C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,sBAAsB;IAAG,EAAE,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE;AAErF,MAAM,WAAW,mBAAmB;IAClC,UAAU,EAAE,sBAAsB,CAAC;IACnC,UAAU,EAAE,iBAAiB,CAAC;IAC9B,YAAY,CAAC,EAAE,oBAAoB,CAAC;IACpC,WAAW,CAAC,EAAE,mBAAmB,CAAC;IAClC,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B,MAAM,CAAC,EAAE,eAAe,CAAC;IACzB,qGAAqG;IACrG,gBAAgB,CAAC,EAAE,CAAC,SAAS,EAAE,cAAc,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAChE;gHAC4G;IAC5G,YAAY,CAAC,EAAE,oBAAoB,EAAE,CAAC;IACtC,sGAAsG;IACtG,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB;AAED,uGAAuG;AACvG,qBAAa,sBAAuB,SAAQ,KAAK;CAAG;AACpD,qBAAa,qBAAsB,SAAQ,KAAK;CAAG;AACnD,qBAAa,iBAAkB,SAAQ,KAAK;CAAG;AAC/C,qBAAa,qBAAsB,SAAQ,KAAK;CAAG;AACnD,4GAA4G;AAC5G,qBAAa,mBAAoB,SAAQ,KAAK;CAAG;AAEjD,YAAY,EAAE,OAAO,EAAE,CAAC"}

package/dist/types.js

@@ -0,0 +1,13 @@
+/** Thrown when authority is denied — distinct types so callers can branch (parity with the design). */
+export class EntitlementDeniedError extends Error {
+}
+export class DelegationDeniedError extends Error {
+}
+export class PolicyDeniedError extends Error {
+}
+export class SkillNotAssertedError extends Error {
+}
+/** Thrown at invoke when a skill is asserted but currently SUSPENDED (a runtime dependency is degraded). */
+export class SkillSuspendedError extends Error {
+}
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AA4RA,uGAAuG;AACvG,MAAM,OAAO,sBAAuB,SAAQ,KAAK;CAAG;AACpD,MAAM,OAAO,qBAAsB,SAAQ,KAAK;CAAG;AACnD,MAAM,OAAO,iBAAkB,SAAQ,KAAK;CAAG;AAC/C,MAAM,OAAO,qBAAsB,SAAQ,KAAK;CAAG;AACnD,4GAA4G;AAC5G,MAAM,OAAO,mBAAoB,SAAQ,KAAK;CAAG"}

package/package.json

@@ -0,0 +1,48 @@
+{
+  "name": "@agenticprimitives/service-agent",
+  "version": "0.0.0-alpha.0",
+  "description": "Generic service-agent capability framework (spec 283): define -> assert -> entitle -> delegate -> primitive-plan -> execute -> receipt. Provider-neutral; all authority evaluators + primitives are injected. Domain catalogs (e.g. @agenticprimitives/treasury) build on it.",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/agentictrustlabs/agenticprimitives.git",
+    "directory": "packages/service-agent"
+  },
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "files": [
+    "LICENSE",
+    "dist",
+    "README.md"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "devDependencies": {
+    "vitest": "^4.1.8"
+  },
+  "keywords": [
+    "agentic",
+    "primitives",
+    "service-agent",
+    "skills",
+    "capability"
+  ],
+  "dependencies": {
+    "@agenticprimitives/types": "1.0.0-alpha.13"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.build.json",
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "test": "vitest run",
+    "test:unit": "vitest run test --passWithNoTests",
+    "clean": "rm -rf dist"
+  }
+}