@agenticprimitives/types 1.0.0-alpha.20 → 1.0.0-alpha.22

package/dist/index.d.ts

@@ -129,4 +129,51 @@ export interface SignatureProof {
  */
 export declare function canonicalizeJson(v: unknown): string;
 export type { SubjectRef, ConfirmationKey, ActorContextV1, SubjectBindingRelationship, BindingAssurance, SubjectBindingV1, } from './actor-context.js';
+export { UNAUTHENTICATED_PEER, isAgentAuthenticatedPeer, isChannelBoundPeer, meetsPeerStrength, validatePeerContext } from './verified-peer-context.js';
+export type { ChannelBinding, PeerAuthMethod, PeerAuthStrength, PeerContextViolation, PeerKeyBinding, VerifiedPeerContextV1, } from './verified-peer-context.js';
+/**
+ * ERC-1271 `isValidSignature` success value — `bytes4(keccak256("isValidSignature(bytes32,bytes)"))`.
+ *
+ * A PROTOCOL constant, not an implementation detail, which is why it lives in the one package
+ * everything may import. It was previously declared in `agent-account`, `connect-auth`, `delegation`,
+ * `payments` and five apps — and `connect-auth` had no choice, because `agent-account` imports IT, so
+ * reaching the other way would be a cycle. A shared constant in `types` is the only home that does
+ * not force somebody to keep a copy.
+ */
+export declare const ERC1271_MAGIC_VALUE: "0x1626ba7e";
+export declare class JcsError extends Error {
+    readonly path: string;
+    constructor(message: string, path: string);
+}
+/**
+ * Canonicalize a JSON-compatible value per RFC 8785.
+ * Returns the canonical string (UTF-8 text; callers wrap with `utf8ToBytes` to hash).
+ */
+export declare function jcsCanonicalize(value: unknown, path?: string): string;
+/** CAIP-10 `namespace:reference:address`. Shape only — says nothing about which namespaces are allowed. */
+export declare const CAIP10_GRAMMAR: RegExp;
+export interface Caip10PartsShape {
+    namespace: string;
+    reference: string;
+    address: string;
+}
+/**
+ * Parse a CAIP-10 identifier by GRAMMAR. Returns `null` — never throws, never guesses.
+ *
+ * NOT a substitute for `agent-profile.parseCaip10`, which additionally enforces the namespace
+ * allowlist. Use this where you only need to know "is this shaped like a CAIP-10 id, and what are its
+ * parts"; use that one where the answer decides authority.
+ */
+export declare function parseCaip10Parts(value: string): Caip10PartsShape | null;
+/** Is this an EVM CAIP-10 id — `eip155:<chainId>:<20-byte address>`? Strict on the address length. */
+export declare function isEvmCaip10(value: string): boolean;
+/**
+ * Build an EVM CAIP-10 id.
+ *
+ * DOES NOT NORMALIZE CASE, deliberately. Callers differ — some emit checksummed addresses and their
+ * output is asserted byte-for-byte — and a shared helper that quietly lowercased would change what
+ * every one of them produces. A dedup that changes bytes is not a dedup. Lowercase at the call site
+ * if that is what you mean.
+ */
+export declare function evmCaip10(chainId: number | string, address: string): string;
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,OAAO,GAAG,KAAK,MAAM,EAAE,CAAC;AACpC,MAAM,MAAM,GAAG,GAAG,KAAK,MAAM,EAAE,CAAC;AAChC,MAAM,MAAM,OAAO,GAAG,MAAM,GAAG;IAAE,QAAQ,CAAC,SAAS,EAAE,OAAO,MAAM,CAAA;CAAE,CAAC;AACrE,MAAM,MAAM,SAAS,CAAC,CAAC,SAAS,MAAM,IAAI,MAAM,GAAG;IAAE,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAA;CAAE,CAAC;AAE3E;;;;;;;;GAQG;AACH,MAAM,MAAM,sBAAsB,GAAG,OAAO,CAAC;AAQ7C;;;;;GAKG;AACH,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG;IAAE,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAA;CAAE,CAAC;AAEpE;;;;;;GAMG;AACH,MAAM,MAAM,gBAAgB,GAAG,aAAa,CAAC;AAE7C,gFAAgF;AAChF,MAAM,WAAW,WAAW;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;CACjB;AASD,+EAA+E;AAC/E,MAAM,MAAM,SAAS,GAAG,YAAY,GAAG,UAAU,GAAG,cAAc,GAAG,mBAAmB,CAAC;AAEzF,8DAA8D;AAI9D,MAAM,MAAM,cAAc,GAAG,SAAS,GAAG,UAAU,GAAG,UAAU,GAAG,MAAM,GAAG,OAAO,GAAG,OAAO,CAAC;AAE9F,gFAAgF;AAChF,MAAM,MAAM,cAAc,GAAG,aAAa,GAAG,eAAe,CAAC;AAE7D,mFAAmF;AACnF,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,cAAc,CAAC;IACrB,8EAA8E;IAC9E,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,SAAS,CAAC;IACrB,mFAAmF;IACnF,IAAI,CAAC,EAAE,cAAc,CAAC;CACvB;AAED;;;;;GAKG;AACH,MAAM,WAAW,YAAY;IAC3B,uEAAuE;IACvE,GAAG,EAAE,gBAAgB,CAAC;IACtB,sDAAsD;IACtD,SAAS,EAAE,mBAAmB,CAAC;IAC/B,oEAAoE;IACpE,SAAS,EAAE,SAAS,CAAC;IACrB,qEAAqE;IACrE,GAAG,EAAE,MAAM,CAAC;IACZ,yCAAyC;IACzC,GAAG,EAAE,MAAM,CAAC;IACZ,iCAAiC;IACjC,GAAG,EAAE,MAAM,CAAC;IACZ,2CAA2C;IAC3C,GAAG,EAAE,MAAM,CAAC;IACZ,iBAAiB;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAYD;;;;;;GAMG;AACH,MAAM,MAAM,SAAS,GAAG,QAAQ,GAAG,KAAK,GAAG,SAAS,CAAC;AAErD;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,WAAW;IAC1B,yDAAyD;IACzD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,sGAAsG;IACtG,SAAS,CAAC,EAAE,SAAS,CAAC;CACvB;AAOD,qGAAqG;AACrG,MAAM,MAAM,KAAK,GAAG,KAAK,MAAM,EAAE,CAAC;AAElC;yDACyD;AACzD,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,gBAAgB,CAAC;IACzB,MAAM,EAAE,SAAS,GAAG,OAAO,GAAG,aAAa,CAAC;IAC5C,SAAS,EAAE,KAAK,MAAM,EAAE,CAAC;CAC1B;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,OAAO,GAAG,MAAM,CASnD;AAID,YAAY,EACV,UAAU,EACV,eAAe,EACf,cAAc,EACd,0BAA0B,EAC1B,gBAAgB,EAChB,gBAAgB,GACjB,MAAM,oBAAoB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAMA,MAAM,MAAM,OAAO,GAAG,KAAK,MAAM,EAAE,CAAC;AACpC,MAAM,MAAM,GAAG,GAAG,KAAK,MAAM,EAAE,CAAC;AAChC,MAAM,MAAM,OAAO,GAAG,MAAM,GAAG;IAAE,QAAQ,CAAC,SAAS,EAAE,OAAO,MAAM,CAAA;CAAE,CAAC;AACrE,MAAM,MAAM,SAAS,CAAC,CAAC,SAAS,MAAM,IAAI,MAAM,GAAG;IAAE,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAA;CAAE,CAAC;AAE3E;;;;;;;;GAQG;AACH,MAAM,MAAM,sBAAsB,GAAG,OAAO,CAAC;AAQ7C;;;;;GAKG;AACH,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG;IAAE,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAA;CAAE,CAAC;AAEpE;;;;;;GAMG;AACH,MAAM,MAAM,gBAAgB,GAAG,aAAa,CAAC;AAE7C,gFAAgF;AAChF,MAAM,WAAW,WAAW;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;CACjB;AASD,+EAA+E;AAC/E,MAAM,MAAM,SAAS,GAAG,YAAY,GAAG,UAAU,GAAG,cAAc,GAAG,mBAAmB,CAAC;AAEzF,8DAA8D;AAI9D,MAAM,MAAM,cAAc,GAAG,SAAS,GAAG,UAAU,GAAG,UAAU,GAAG,MAAM,GAAG,OAAO,GAAG,OAAO,CAAC;AAE9F,gFAAgF;AAChF,MAAM,MAAM,cAAc,GAAG,aAAa,GAAG,eAAe,CAAC;AAE7D,mFAAmF;AACnF,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,cAAc,CAAC;IACrB,8EAA8E;IAC9E,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,SAAS,CAAC;IACrB,mFAAmF;IACnF,IAAI,CAAC,EAAE,cAAc,CAAC;CACvB;AAED;;;;;GAKG;AACH,MAAM,WAAW,YAAY;IAC3B,uEAAuE;IACvE,GAAG,EAAE,gBAAgB,CAAC;IACtB,sDAAsD;IACtD,SAAS,EAAE,mBAAmB,CAAC;IAC/B,oEAAoE;IACpE,SAAS,EAAE,SAAS,CAAC;IACrB,qEAAqE;IACrE,GAAG,EAAE,MAAM,CAAC;IACZ,yCAAyC;IACzC,GAAG,EAAE,MAAM,CAAC;IACZ,iCAAiC;IACjC,GAAG,EAAE,MAAM,CAAC;IACZ,2CAA2C;IAC3C,GAAG,EAAE,MAAM,CAAC;IACZ,iBAAiB;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAYD;;;;;;GAMG;AACH,MAAM,MAAM,SAAS,GAAG,QAAQ,GAAG,KAAK,GAAG,SAAS,CAAC;AAErD;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,WAAW;IAC1B,yDAAyD;IACzD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,sGAAsG;IACtG,SAAS,CAAC,EAAE,SAAS,CAAC;CACvB;AAOD,qGAAqG;AACrG,MAAM,MAAM,KAAK,GAAG,KAAK,MAAM,EAAE,CAAC;AAElC;yDACyD;AACzD,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,gBAAgB,CAAC;IACzB,MAAM,EAAE,SAAS,GAAG,OAAO,GAAG,aAAa,CAAC;IAC5C,SAAS,EAAE,KAAK,MAAM,EAAE,CAAC;CAC1B;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,OAAO,GAAG,MAAM,CASnD;AAID,YAAY,EACV,UAAU,EACV,eAAe,EACf,cAAc,EACd,0BAA0B,EAC1B,gBAAgB,EAChB,gBAAgB,GACjB,MAAM,oBAAoB,CAAC;AAO5B,OAAO,EAAE,oBAAoB,EAAE,wBAAwB,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACxJ,YAAY,EACV,cAAc,EACd,cAAc,EACd,gBAAgB,EAChB,oBAAoB,EACpB,cAAc,EACd,qBAAqB,GACtB,MAAM,4BAA4B,CAAC;AAEpC;;;;;;;;GAQG;AACH,eAAO,MAAM,mBAAmB,EAAG,YAAqB,CAAC;AAkFzD,qBAAa,QAAS,SAAQ,KAAK;IACJ,QAAQ,CAAC,IAAI,EAAE,MAAM;gBAAtC,OAAO,EAAE,MAAM,EAAW,IAAI,EAAE,MAAM;CAGnD;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,GAAE,MAAY,GAAG,MAAM,CA2B1E;AAgBD,2GAA2G;AAC3G,eAAO,MAAM,cAAc,QAAqE,CAAC;AAEjG,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,gBAAgB,GAAG,IAAI,CAGvE;AAED,sGAAsG;AACtG,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAGlD;AAED;;;;;;;GAOG;AACH,wBAAgB,SAAS,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAE3E"}

package/dist/index.js

@@ -1,4 +1,8 @@
-// @agenticprimitives/types — cross-cutting branded primitives. Types-only.
+// @agenticprimitives/types — cross-cutting branded primitives.
+//
+// Near-types-only: the package ships a small number of PURE helpers (`canonicalizeJson`, the
+// peer-context predicates) that are deterministic functions over shapes defined here. No side
+// effects, no I/O, no clocks, no crypto, no state, no imports. See CLAUDE.md for the exact rule.
 /**
  * Deterministic JSON canonicalization: sorted keys, `undefined` members dropped. The shared digest
  * convention used across `messaging` / `verification-receipts` / `key-authorization` so cross-package tooling
@@ -16,4 +20,182 @@ export function canonicalizeJson(v) {
         .map((k) => `${JSON.stringify(k)}:${canonicalizeJson(o[k])}`)
         .join(',')}}`;
 }
+// Verified peer context — transport-layer peer identity (dntls-comparison §17 P1; spec 338 W5).
+// Placed here for the same reason as `ActorContextV1`: >=2 consumers (`a2a`, `mcp-runtime`, `audit`,
+// edge adapters) must share ONE definition without runtime-coupling to each other.
+//
+// IDENTITY, NEVER AUTHORITY. Knowing who connected never implies what they may do.
+export { UNAUTHENTICATED_PEER, isAgentAuthenticatedPeer, isChannelBoundPeer, meetsPeerStrength, validatePeerContext } from './verified-peer-context.js';
+/**
+ * ERC-1271 `isValidSignature` success value — `bytes4(keccak256("isValidSignature(bytes32,bytes)"))`.
+ *
+ * A PROTOCOL constant, not an implementation detail, which is why it lives in the one package
+ * everything may import. It was previously declared in `agent-account`, `connect-auth`, `delegation`,
+ * `payments` and five apps — and `connect-auth` had no choice, because `agent-account` imports IT, so
+ * reaching the other way would be a cycle. A shared constant in `types` is the only home that does
+ * not force somebody to keep a copy.
+ */
+export const ERC1271_MAGIC_VALUE = '0x1626ba7e';
+// ─── RFC 8785 JSON Canonicalization Scheme ──────────────────────────────────
+//
+// WHY THIS LIVES IN `types` AND NOT IN `verifiable-credentials`, WHERE IT WAS WRITTEN.
+// `situations` carried a BYTE-IDENTICAL copy — ~100 lines including the number-formatting rules,
+// duplicated. The obvious fix (situations re-exports from verifiable-credentials) is impossible:
+// `verifiable-credentials` IMPORTS `situations`, so that edge is a cycle. Like `ERC1271_MAGIC_VALUE`,
+// the only home that does not force somebody to keep a copy is the one both can reach.
+//
+// It is PURE — no hashing, no dependency — so `types` stays dependency-free. The keccak wrapper
+// (`canonicalHash`) stays in each consumer, where the hash function it needs already lives.
+//
+// NOT interchangeable with `canonicalizeJson` above. That one is sorted-key JSON.stringify; THIS one
+// implements RFC 8785's number formatting, escaping and code-unit ordering. Swapping one for the
+// other changes bytes, which changes digests, which breaks signatures. Pick deliberately.
+/** UTF-16 code unit comparison — exactly what RFC 8785 §3.2.3 requires. */
+function sortByCodeUnit(a, b) {
+    const len = Math.min(a.length, b.length);
+    for (let i = 0; i < len; i++) {
+        const av = a.charCodeAt(i);
+        const bv = b.charCodeAt(i);
+        if (av !== bv)
+            return av - bv;
+    }
+    return a.length - b.length;
+}
+/** RFC 8259 string serialisation with JCS-compatible escaping (RFC 8785 §3.2.2.2). */
+function serializeString(s) {
+    let out = '"';
+    for (let i = 0; i < s.length; i++) {
+        const code = s.charCodeAt(i);
+        if (code === 0x22) {
+            out += '\\"';
+        }
+        else if (code === 0x5c) {
+            out += '\\\\';
+        }
+        else if (code < 0x20) {
+            // Control characters
+            switch (code) {
+                case 0x08:
+                    out += '\\b';
+                    break;
+                case 0x09:
+                    out += '\\t';
+                    break;
+                case 0x0a:
+                    out += '\\n';
+                    break;
+                case 0x0c:
+                    out += '\\f';
+                    break;
+                case 0x0d:
+                    out += '\\r';
+                    break;
+                default:
+                    out += `\\u${code.toString(16).padStart(4, '0')}`;
+            }
+        }
+        else {
+            out += s[i];
+        }
+    }
+    out += '"';
+    return out;
+}
+/** RFC 8785 §3.2.2.3 — shortest round-tripping IEEE 754 representation. */
+function serializeNumber(n, path) {
+    if (!Number.isFinite(n)) {
+        throw new JcsError(`non-finite number (${n})`, path);
+    }
+    if (Object.is(n, -0))
+        return '0';
+    if (n === 0)
+        return '0';
+    if (Number.isInteger(n) && Math.abs(n) < 1e21) {
+        return n.toString();
+    }
+    // Browsers + Node give us the shortest round-trip via `toString()`
+    // (per ECMA-262 §6.1.6.1.13). RFC 8785 expects the ES round-trip form.
+    return n.toString();
+}
+export class JcsError extends Error {
+    path;
+    constructor(message, path) {
+        super(`[JCS] ${message} at ${path}`);
+        this.path = path;
+    }
+}
+/**
+ * Canonicalize a JSON-compatible value per RFC 8785.
+ * Returns the canonical string (UTF-8 text; callers wrap with `utf8ToBytes` to hash).
+ */
+export function jcsCanonicalize(value, path = '$') {
+    if (value === null)
+        return 'null';
+    if (value === undefined) {
+        throw new JcsError('undefined is not JSON', path);
+    }
+    switch (typeof value) {
+        case 'boolean':
+            return value ? 'true' : 'false';
+        case 'string':
+            return serializeString(value);
+        case 'number':
+            return serializeNumber(value, path);
+        case 'object': {
+            if (Array.isArray(value)) {
+                const items = value.map((v, i) => jcsCanonicalize(v, `${path}[${i}]`));
+                return `[${items.join(',')}]`;
+            }
+            // Plain object
+            const entries = Object.entries(value)
+                .filter(([, v]) => v !== undefined)
+                .sort(([a], [b]) => sortByCodeUnit(a, b));
+            const items = entries.map(([k, v]) => `${serializeString(k)}:${jcsCanonicalize(v, `${path}.${k}`)}`);
+            return `{${items.join(',')}}`;
+        }
+        default:
+            throw new JcsError(`unsupported JSON type: ${typeof value}`, path);
+    }
+}
+// ─── CAIP-10 grammar (ADR-0008, promoted per its own §"ADR-0016 promotes…") ──
+//
+// WHY HERE AND NOT IN `agent-profile`, WHERE THE BUILDER LIVES. Five packages —
+// `edge-runtime`, `geo-features`, `capability-claims`, `rate-control`, `verifiable-credentials` —
+// each re-derived this, and NONE of them may import `agent-profile`. Every copy was forced by the
+// dependency graph, not written out of laziness, and the copies did NOT agree: some accepted any
+// `eip155:<digits>:0x…`, one accepted a SHORT address (`0x[0-9a-fA-F]+`, no length bound), and one
+// was a bare `split(':')`.
+//
+// The split that matters: GRAMMAR is a protocol fact and lives here; the NAMESPACE ALLOWLIST is
+// policy and stays in `agent-profile`, so nothing can bypass it by reaching for the loose parser.
+// `parseCaip10Parts` therefore validates SHAPE only and says so.
+/** CAIP-10 `namespace:reference:address`. Shape only — says nothing about which namespaces are allowed. */
+export const CAIP10_GRAMMAR = /^([-a-z0-9]{3,8}):([-_a-zA-Z0-9]{1,32}):([-.%a-zA-Z0-9]{1,128})$/;
+/**
+ * Parse a CAIP-10 identifier by GRAMMAR. Returns `null` — never throws, never guesses.
+ *
+ * NOT a substitute for `agent-profile.parseCaip10`, which additionally enforces the namespace
+ * allowlist. Use this where you only need to know "is this shaped like a CAIP-10 id, and what are its
+ * parts"; use that one where the answer decides authority.
+ */
+export function parseCaip10Parts(value) {
+    const m = CAIP10_GRAMMAR.exec(value);
+    return m ? { namespace: m[1], reference: m[2], address: m[3] } : null;
+}
+/** Is this an EVM CAIP-10 id — `eip155:<chainId>:<20-byte address>`? Strict on the address length. */
+export function isEvmCaip10(value) {
+    const p = parseCaip10Parts(value);
+    return !!p && p.namespace === 'eip155' && /^\d+$/.test(p.reference) && /^0x[0-9a-fA-F]{40}$/.test(p.address);
+}
+/**
+ * Build an EVM CAIP-10 id.
+ *
+ * DOES NOT NORMALIZE CASE, deliberately. Callers differ — some emit checksummed addresses and their
+ * output is asserted byte-for-byte — and a shared helper that quietly lowercased would change what
+ * every one of them produces. A dedup that changes bytes is not a dedup. Lowercase at the call site
+ * if that is what you mean.
+ */
+export function evmCaip10(chainId, address) {
+    return `eip155:${chainId}:${address}`;
+}
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAqK3E;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,CAAU;IACzC,IAAI,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC;IAC5E,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IACtE,MAAM,CAAC,GAAG,CAA4B,CAAC;IACvC,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;SACtB,IAAI,EAAE;SACN,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC;SACjC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5D,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;AAClB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,+DAA+D;AAC/D,EAAE;AACF,6FAA6F;AAC7F,8FAA8F;AAC9F,iGAAiG;AAqKjG;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,CAAU;IACzC,IAAI,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC;IAC5E,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IACtE,MAAM,CAAC,GAAG,CAA4B,CAAC;IACvC,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;SACtB,IAAI,EAAE;SACN,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC;SACjC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5D,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;AAClB,CAAC;AAaD,gGAAgG;AAChG,qGAAqG;AACrG,mFAAmF;AACnF,EAAE;AACF,mFAAmF;AACnF,OAAO,EAAE,oBAAoB,EAAE,wBAAwB,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AAUxJ;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,YAAqB,CAAC;AAGzD,+EAA+E;AAC/E,EAAE;AACF,uFAAuF;AACvF,iGAAiG;AACjG,iGAAiG;AACjG,sGAAsG;AACtG,uFAAuF;AACvF,EAAE;AACF,gGAAgG;AAChG,4FAA4F;AAC5F,EAAE;AACF,qGAAqG;AACrG,iGAAiG;AACjG,0FAA0F;AAE1F,2EAA2E;AAC3E,SAAS,cAAc,CAAC,CAAS,EAAE,CAAS;IAC1C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;IACzC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;QAC7B,MAAM,EAAE,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QAC3B,MAAM,EAAE,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QAC3B,IAAI,EAAE,KAAK,EAAE;YAAE,OAAO,EAAE,GAAG,EAAE,CAAC;IAChC,CAAC;IACD,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;AAC7B,CAAC;AAED,sFAAsF;AACtF,SAAS,eAAe,CAAC,CAAS;IAChC,IAAI,GAAG,GAAG,GAAG,CAAC;IACd,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAClC,MAAM,IAAI,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QAC7B,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAClB,GAAG,IAAI,KAAK,CAAC;QACf,CAAC;aAAM,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YACzB,GAAG,IAAI,MAAM,CAAC;QAChB,CAAC;aAAM,IAAI,IAAI,GAAG,IAAI,EAAE,CAAC;YACvB,qBAAqB;YACrB,QAAQ,IAAI,EAAE,CAAC;gBACb,KAAK,IAAI;oBACP,GAAG,IAAI,KAAK,CAAC;oBACb,MAAM;gBACR,KAAK,IAAI;oBACP,GAAG,IAAI,KAAK,CAAC;oBACb,MAAM;gBACR,KAAK,IAAI;oBACP,GAAG,IAAI,KAAK,CAAC;oBACb,MAAM;gBACR,KAAK,IAAI;oBACP,GAAG,IAAI,KAAK,CAAC;oBACb,MAAM;gBACR,KAAK,IAAI;oBACP,GAAG,IAAI,KAAK,CAAC;oBACb,MAAM;gBACR;oBACE,GAAG,IAAI,MAAM,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;YACtD,CAAC;QACH,CAAC;aAAM,CAAC;YACN,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QACd,CAAC;IACH,CAAC;IACD,GAAG,IAAI,GAAG,CAAC;IACX,OAAO,GAAG,CAAC;AACb,CAAC;AAED,2EAA2E;AAC3E,SAAS,eAAe,CAAC,CAAS,EAAE,IAAY;IAC9C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,QAAQ,CAAC,sBAAsB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACvD,CAAC;IACD,IAAI,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAAE,OAAO,GAAG,CAAC;IACjC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,GAAG,CAAC;IACxB,IAAI,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,EAAE,CAAC;QAC9C,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;IACtB,CAAC;IACD,mEAAmE;IACnE,uEAAuE;IACvE,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;AACtB,CAAC;AAED,MAAM,OAAO,QAAS,SAAQ,KAAK;IACK;IAAtC,YAAY,OAAe,EAAW,IAAY;QAChD,KAAK,CAAC,SAAS,OAAO,OAAO,IAAI,EAAE,CAAC,CAAC;QADD,SAAI,GAAJ,IAAI,CAAQ;IAElD,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,KAAc,EAAE,OAAe,GAAG;IAChE,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC;IAClC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,MAAM,IAAI,QAAQ,CAAC,uBAAuB,EAAE,IAAI,CAAC,CAAC;IACpD,CAAC;IACD,QAAQ,OAAO,KAAK,EAAE,CAAC;QACrB,KAAK,SAAS;YACZ,OAAO,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;QAClC,KAAK,QAAQ;YACX,OAAO,eAAe,CAAC,KAAK,CAAC,CAAC;QAChC,KAAK,QAAQ;YACX,OAAO,eAAe,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACtC,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBACzB,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,CAAC,EAAE,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;gBACvE,OAAO,IAAI,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAChC,CAAC;YACD,eAAe;YACf,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC;iBAC7D,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC;iBAClC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YAC5C,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,eAAe,CAAC,CAAC,CAAC,IAAI,eAAe,CAAC,CAAC,EAAE,GAAG,IAAI,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;YACrG,OAAO,IAAI,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;QAChC,CAAC;QACD;YACE,MAAM,IAAI,QAAQ,CAAC,0BAA0B,OAAO,KAAK,EAAE,EAAE,IAAI,CAAC,CAAC;IACvE,CAAC;AACH,CAAC;AAGD,gFAAgF;AAChF,EAAE;AACF,gFAAgF;AAChF,kGAAkG;AAClG,kGAAkG;AAClG,iGAAiG;AACjG,mGAAmG;AACnG,2BAA2B;AAC3B,EAAE;AACF,gGAAgG;AAChG,kGAAkG;AAClG,iEAAiE;AAEjE,2GAA2G;AAC3G,MAAM,CAAC,MAAM,cAAc,GAAG,kEAAkE,CAAC;AAQjG;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAa;IAC5C,MAAM,CAAC,GAAG,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,CAAE,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,CAAE,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,CAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC3E,CAAC;AAED,sGAAsG;AACtG,MAAM,UAAU,WAAW,CAAC,KAAa;IACvC,MAAM,CAAC,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;IAClC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;AAC/G,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,SAAS,CAAC,OAAwB,EAAE,OAAe;IACjE,OAAO,UAAU,OAAO,IAAI,OAAO,EAAE,CAAC;AACxC,CAAC"}

package/dist/verified-peer-context.d.ts

@@ -0,0 +1,126 @@
+import type { CanonicalAgentId, Hex32 } from './index.js';
+import type { SubjectRef } from './actor-context.js';
+/** How the peer's identity was established. Open-ended: a new transport is an adapter, not a core change. */
+export type PeerAuthMethod = 
+/** Web PKI server certificate. Authenticates a HOSTNAME, not an agent. */
+'web-pki'
+/** Mutual TLS with a client certificate. */
+ | 'mtls'
+/** SPIFFE/SPIRE workload identity. */
+ | 'spiffe'
+/** An OAuth/OIDC bearer presented at the transport edge. An envelope, never authority (ADR-0041). */
+ | 'oauth'
+/** A shared MAC between internal services. Authenticates a DEPLOYMENT, not a principal. */
+ | 'service-mac'
+/** DIDComm peer authentication. */
+ | 'didcomm'
+/** DNTLS transport peer authentication (not implemented; reserved so adapters can report it). */
+ | 'dntls'
+/** An AP challenge signed by the peer's Smart Agent — the only method that authenticates an SA. */
+ | 'ap-signed-challenge' | (string & {});
+/**
+ * How strongly the peer is authenticated — deliberately NOT a single boolean.
+ *
+ * The distinction that matters: `host` means "a hostname was verified" (Web PKI), which is what most
+ * deployments actually have and is a much weaker claim than "this Smart Agent is on the other end".
+ * Collapsing those into `verified: true` is how a TLS certificate ends up being treated as agent
+ * identity.
+ */
+export type PeerAuthStrength = 
+/** Nothing was verified. The default, and what every unconfigured path must report. */
+'none'
+/** A hostname/deployment was verified. Says nothing about WHICH agent is behind it. */
+ | 'host'
+/** A workload/instance identity was verified (SPIFFE, mTLS client cert). */
+ | 'workload'
+/** The peer proved control of its canonical Smart Agent. */
+ | 'agent';
+/**
+ * Binds an application-layer proof to the channel it arrived on.
+ *
+ * Without this, a signature captured from one connection can be replayed on another — which is the
+ * substantive half of the DNTLS thesis. Presence of a binding is what lets a verifier say "this proof
+ * was made FOR this channel", not merely "this proof is valid somewhere".
+ */
+export interface ChannelBinding {
+    /** e.g. `tls-exporter` (RFC 9266), `tls-server-end-point`, `dntls-session`. */
+    method: 'tls-exporter' | 'tls-server-end-point' | 'dntls-session' | (string & {});
+    /** The binding value the application proof must commit to. */
+    value: Hex32 | string;
+}
+/** A key the peer proved control of on this channel. */
+export interface PeerKeyBinding {
+    keyId?: string;
+    algorithm?: string;
+    /** Thumbprint (e.g. JWK `jkt`, cert `x5t#S256`). */
+    thumbprint: string;
+}
+/**
+ * What a transport adapter verified about the peer.
+ *
+ * Produced at Ring 1 (a Worker, a gateway, a mesh sidecar); consumed by `a2a` / `mcp-runtime` /
+ * `audit` without knowing the producer.
+ */
+export interface VerifiedPeerContextV1 {
+    specVersion: 'ap.verified-peer-context/1';
+    method: PeerAuthMethod;
+    strength: PeerAuthStrength;
+    /**
+     * The peer as identified by the transport. `caip10` ONLY when `strength: 'agent'` — a hostname or
+     * workload id must not be reported as a Smart Agent, which is precisely the conflation this type
+     * exists to prevent.
+     */
+    peer?: SubjectRef;
+    /** Present only when the transport authenticated the canonical Smart Agent itself. */
+    canonicalAgentId?: CanonicalAgentId;
+    keyBinding?: PeerKeyBinding;
+    channelBinding?: ChannelBinding;
+    /** Where the underlying evidence lives (cert chain, SVID, resolution receipt). Never inlined. */
+    evidenceRefs?: readonly string[];
+    observedAt: string;
+    /** When this context stops being usable. A long-lived connection MUST be re-evaluated. */
+    expiresAt?: string;
+}
+/** The context an unconfigured or unauthenticated path MUST report. Never omit the field instead. */
+export declare const UNAUTHENTICATED_PEER: Omit<VerifiedPeerContextV1, 'observedAt'>;
+/** True when the peer context meets a minimum strength. Use this rather than comparing strings. */
+export declare function meetsPeerStrength(actual: PeerAuthStrength, minimum: PeerAuthStrength): boolean;
+/**
+ * True only when the transport authenticated the CANONICAL SMART AGENT — the one condition under
+ * which peer context may be treated as agent identity at all.
+ *
+ * Even then it is identity, not authority: an authenticated peer must still be separately authorized
+ * to act, by the authority chain re-run at the origin.
+ */
+export declare function isAgentAuthenticatedPeer(ctx: VerifiedPeerContextV1): ctx is VerifiedPeerContextV1 & {
+    canonicalAgentId: CanonicalAgentId;
+};
+/**
+ * True when the peer proof is bound to THIS channel — i.e. it cannot be replayed on another
+ * connection by a relay that holds a valid certificate for the host.
+ *
+ * SEPARATE FROM `isAgentAuthenticatedPeer` ON PURPOSE. Those answer different questions:
+ *   - `isAgentAuthenticatedPeer` → WHO is at the other end.
+ *   - `isChannelBoundPeer`       → is that answer tied to THIS connection.
+ *
+ * A nonce-signed challenge proves control of a Smart Agent, so it earns `strength: 'agent'`. It does
+ * NOT, on its own, stop an active relay: a party that terminates TLS for the host can forward the
+ * challenge and the signature. Only a channel binding closes that, which is the substantive half of
+ * the DNTLS thesis (dntls-comparison.md §0.3 item 1).
+ *
+ * A consumer that cares about relay resistance MUST check this, not just strength.
+ */
+export declare function isChannelBoundPeer(ctx: VerifiedPeerContextV1): boolean;
+/** Structural coherence problems — combinations that would misreport what was verified. */
+export interface PeerContextViolation {
+    field: string;
+    message: string;
+}
+/**
+ * Validate a peer context.
+ *
+ * Every rule here guards the same failure: a transport reporting a stronger claim than it actually
+ * verified, which downstream code would then trust as agent identity.
+ */
+export declare function validatePeerContext(ctx: VerifiedPeerContextV1): PeerContextViolation[];
+//# sourceMappingURL=verified-peer-context.d.ts.map

package/dist/verified-peer-context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verified-peer-context.d.ts","sourceRoot":"","sources":["../src/verified-peer-context.ts"],"names":[],"mappings":"AAwBA,OAAO,KAAK,EAAE,gBAAgB,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AAC1D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAErD,6GAA6G;AAC7G,MAAM,MAAM,cAAc;AACxB,0EAA0E;AACxE,SAAS;AACX,4CAA4C;GAC1C,MAAM;AACR,sCAAsC;GACpC,QAAQ;AACV,qGAAqG;GACnG,OAAO;AACT,2FAA2F;GACzF,aAAa;AACf,mCAAmC;GACjC,SAAS;AACX,iGAAiG;GAC/F,OAAO;AACT,mGAAmG;GACjG,qBAAqB,GACrB,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AAElB;;;;;;;GAOG;AACH,MAAM,MAAM,gBAAgB;AAC1B,uFAAuF;AACrF,MAAM;AACR,uFAAuF;GACrF,MAAM;AACR,4EAA4E;GAC1E,UAAU;AACZ,4DAA4D;GAC1D,OAAO,CAAC;AAEZ;;;;;;GAMG;AACH,MAAM,WAAW,cAAc;IAC7B,+EAA+E;IAC/E,MAAM,EAAE,cAAc,GAAG,sBAAsB,GAAG,eAAe,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;IAClF,8DAA8D;IAC9D,KAAK,EAAE,KAAK,GAAG,MAAM,CAAC;CACvB;AAED,wDAAwD;AACxD,MAAM,WAAW,cAAc;IAC7B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,oDAAoD;IACpD,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;;;;GAKG;AACH,MAAM,WAAW,qBAAqB;IACpC,WAAW,EAAE,4BAA4B,CAAC;IAE1C,MAAM,EAAE,cAAc,CAAC;IACvB,QAAQ,EAAE,gBAAgB,CAAC;IAE3B;;;;OAIG;IACH,IAAI,CAAC,EAAE,UAAU,CAAC;IAElB,sFAAsF;IACtF,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IAEpC,UAAU,CAAC,EAAE,cAAc,CAAC;IAC5B,cAAc,CAAC,EAAE,cAAc,CAAC;IAEhC,iGAAiG;IACjG,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAEjC,UAAU,EAAE,MAAM,CAAC;IACnB,0FAA0F;IAC1F,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,qGAAqG;AACrG,eAAO,MAAM,oBAAoB,EAAE,IAAI,CAAC,qBAAqB,EAAE,YAAY,CAI1E,CAAC;AAIF,mGAAmG;AACnG,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,gBAAgB,EAAE,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAE9F;AAED;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CACtC,GAAG,EAAE,qBAAqB,GACzB,GAAG,IAAI,qBAAqB,GAAG;IAAE,gBAAgB,EAAE,gBAAgB,CAAA;CAAE,CAOvE;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,qBAAqB,GAAG,OAAO,CAEtE;AAED,2FAA2F;AAC3F,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,qBAAqB,GAAG,oBAAoB,EAAE,CAkCtF"}

package/dist/verified-peer-context.js

@@ -0,0 +1,105 @@
+// Verified peer context — the transport-layer "who is at the other end of this connection?"
+// (dntls-comparison.md §17 P1; spec 338 W5).
+//
+// THE GAP THIS NAMES: before A2A/MCP parse a byte, peer trust in this substrate has usually collapsed
+// to Web PKI, a hosting provider, an OAuth bearer, or a service MAC (dntls-comparison.md §0.3 item 1).
+// App-layer signatures are NOT channel binding — they prove a message was authored, not that the
+// party you are speaking to is the party that authored it.
+//
+// This type does not close that gap. It gives the gap a SHAPE, so a transport adapter can report what
+// it actually verified, and so `a2a`/`mcp-runtime` can consume peer identity WITHOUT knowing which
+// mechanism produced it (Web PKI today, SPIFFE/mTLS in a mesh, DNTLS if it ever ships).
+//
+// ─── THE RULE THAT MAKES THIS SAFE ──────────────────────────────────────────────────────────────
+//   Verified peer context is IDENTITY, never AUTHORITY.
+//
+// Knowing who connected never implies what they may do. It does not substitute for ANY link in the
+// authority chain, and it is never an input that *widens* one (ADR-0041, ADR-0043, ADR-0056). Its
+// legitimate uses are: binding an app-layer proof to the channel it arrived on, admission decisions
+// at the edge, audit evidence, and policy PREDICATES an authority decision may CONSULT — never
+// replace.
+//
+// (The authority-chain packages are named in their own docs; this file deliberately does not use
+// their vocabulary — `types` is a shared leaf and must not borrow a neighbour's terms.)
+/** The context an unconfigured or unauthenticated path MUST report. Never omit the field instead. */
+export const UNAUTHENTICATED_PEER = {
+    specVersion: 'ap.verified-peer-context/1',
+    method: 'web-pki',
+    strength: 'none',
+};
+const STRENGTH_RANK = { none: 0, host: 1, workload: 2, agent: 3 };
+/** True when the peer context meets a minimum strength. Use this rather than comparing strings. */
+export function meetsPeerStrength(actual, minimum) {
+    return STRENGTH_RANK[actual] >= STRENGTH_RANK[minimum];
+}
+/**
+ * True only when the transport authenticated the CANONICAL SMART AGENT — the one condition under
+ * which peer context may be treated as agent identity at all.
+ *
+ * Even then it is identity, not authority: an authenticated peer must still be separately authorized
+ * to act, by the authority chain re-run at the origin.
+ */
+export function isAgentAuthenticatedPeer(ctx) {
+    return (ctx.strength === 'agent' &&
+        typeof ctx.canonicalAgentId === 'string' &&
+        ctx.peer?.scheme === 'caip10' &&
+        ctx.peer.id === ctx.canonicalAgentId);
+}
+/**
+ * True when the peer proof is bound to THIS channel — i.e. it cannot be replayed on another
+ * connection by a relay that holds a valid certificate for the host.
+ *
+ * SEPARATE FROM `isAgentAuthenticatedPeer` ON PURPOSE. Those answer different questions:
+ *   - `isAgentAuthenticatedPeer` → WHO is at the other end.
+ *   - `isChannelBoundPeer`       → is that answer tied to THIS connection.
+ *
+ * A nonce-signed challenge proves control of a Smart Agent, so it earns `strength: 'agent'`. It does
+ * NOT, on its own, stop an active relay: a party that terminates TLS for the host can forward the
+ * challenge and the signature. Only a channel binding closes that, which is the substantive half of
+ * the DNTLS thesis (dntls-comparison.md §0.3 item 1).
+ *
+ * A consumer that cares about relay resistance MUST check this, not just strength.
+ */
+export function isChannelBoundPeer(ctx) {
+    return isAgentAuthenticatedPeer(ctx) && ctx.channelBinding !== undefined;
+}
+/**
+ * Validate a peer context.
+ *
+ * Every rule here guards the same failure: a transport reporting a stronger claim than it actually
+ * verified, which downstream code would then trust as agent identity.
+ */
+export function validatePeerContext(ctx) {
+    const out = [];
+    if (ctx.strength === 'agent') {
+        if (!ctx.canonicalAgentId) {
+            out.push({ field: 'canonicalAgentId', message: 'strength "agent" requires the canonical Smart Agent it authenticated' });
+        }
+        if (ctx.peer && ctx.peer.scheme !== 'caip10') {
+            out.push({ field: 'peer', message: 'strength "agent" requires a caip10 peer — a hostname or workload id is not a Smart Agent' });
+        }
+        if (ctx.peer?.scheme === 'caip10' && ctx.canonicalAgentId && ctx.peer.id !== ctx.canonicalAgentId) {
+            out.push({ field: 'peer', message: 'peer id and canonicalAgentId disagree' });
+        }
+    }
+    else if (ctx.canonicalAgentId) {
+        // The core conflation: reporting an SA that the transport did not actually authenticate.
+        out.push({
+            field: 'canonicalAgentId',
+            message: `strength "${ctx.strength}" must not carry a canonicalAgentId — only "agent" authenticates a Smart Agent`,
+        });
+    }
+    if (ctx.strength === 'none' && (ctx.keyBinding || ctx.channelBinding)) {
+        out.push({ field: 'strength', message: 'strength "none" must not report key or channel bindings' });
+    }
+    if (!Number.isNaN(Date.parse(ctx.observedAt)) && ctx.expiresAt) {
+        if (Date.parse(ctx.expiresAt) <= Date.parse(ctx.observedAt)) {
+            out.push({ field: 'expiresAt', message: 'expiresAt must be after observedAt' });
+        }
+    }
+    else if (Number.isNaN(Date.parse(ctx.observedAt))) {
+        out.push({ field: 'observedAt', message: 'observedAt must be a parseable ISO-8601 timestamp' });
+    }
+    return out;
+}
+//# sourceMappingURL=verified-peer-context.js.map

package/dist/verified-peer-context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verified-peer-context.js","sourceRoot":"","sources":["../src/verified-peer-context.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,6CAA6C;AAC7C,EAAE;AACF,sGAAsG;AACtG,uGAAuG;AACvG,iGAAiG;AACjG,2DAA2D;AAC3D,EAAE;AACF,sGAAsG;AACtG,mGAAmG;AACnG,wFAAwF;AACxF,EAAE;AACF,mGAAmG;AACnG,wDAAwD;AACxD,EAAE;AACF,mGAAmG;AACnG,kGAAkG;AAClG,oGAAoG;AACpG,+FAA+F;AAC/F,WAAW;AACX,EAAE;AACF,iGAAiG;AACjG,wFAAwF;AAkGxF,qGAAqG;AACrG,MAAM,CAAC,MAAM,oBAAoB,GAA8C;IAC7E,WAAW,EAAE,4BAA4B;IACzC,MAAM,EAAE,SAAS;IACjB,QAAQ,EAAE,MAAM;CACjB,CAAC;AAEF,MAAM,aAAa,GAAqC,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;AAEpG,mGAAmG;AACnG,MAAM,UAAU,iBAAiB,CAAC,MAAwB,EAAE,OAAyB;IACnF,OAAO,aAAa,CAAC,MAAM,CAAC,IAAI,aAAa,CAAC,OAAO,CAAC,CAAC;AACzD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,wBAAwB,CACtC,GAA0B;IAE1B,OAAO,CACL,GAAG,CAAC,QAAQ,KAAK,OAAO;QACxB,OAAO,GAAG,CAAC,gBAAgB,KAAK,QAAQ;QACxC,GAAG,CAAC,IAAI,EAAE,MAAM,KAAK,QAAQ;QAC7B,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,GAAG,CAAC,gBAAgB,CACrC,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,kBAAkB,CAAC,GAA0B;IAC3D,OAAO,wBAAwB,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,cAAc,KAAK,SAAS,CAAC;AAC3E,CAAC;AAQD;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAA0B;IAC5D,MAAM,GAAG,GAA2B,EAAE,CAAC;IAEvC,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QAC7B,IAAI,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;YAC1B,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,OAAO,EAAE,sEAAsE,EAAE,CAAC,CAAC;QAC3H,CAAC;QACD,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC7C,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,0FAA0F,EAAE,CAAC,CAAC;QACnI,CAAC;QACD,IAAI,GAAG,CAAC,IAAI,EAAE,MAAM,KAAK,QAAQ,IAAI,GAAG,CAAC,gBAAgB,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,GAAG,CAAC,gBAAgB,EAAE,CAAC;YAClG,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,uCAAuC,EAAE,CAAC,CAAC;QAChF,CAAC;IACH,CAAC;SAAM,IAAI,GAAG,CAAC,gBAAgB,EAAE,CAAC;QAChC,yFAAyF;QACzF,GAAG,CAAC,IAAI,CAAC;YACP,KAAK,EAAE,kBAAkB;YACzB,OAAO,EAAE,aAAa,GAAG,CAAC,QAAQ,gFAAgF;SACnH,CAAC,CAAC;IACL,CAAC;IAED,IAAI,GAAG,CAAC,QAAQ,KAAK,MAAM,IAAI,CAAC,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;QACtE,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,yDAAyD,EAAE,CAAC,CAAC;IACtG,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;QAC/D,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;YAC5D,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,oCAAoC,EAAE,CAAC,CAAC;QAClF,CAAC;IACH,CAAC;SAAM,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;QACpD,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,mDAAmD,EAAE,CAAC,CAAC;IAClG,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agenticprimitives/types",
-  "version": "1.0.0-alpha.20",
+  "version": "1.0.0-alpha.22",
   "description": "Cross-cutting branded types and chain primitives shared across @agenticprimitives/* packages.",
   "license": "MIT",
   "repository": {
@@ -34,10 +34,14 @@
     "types",
     "agentic"
   ],
+  "devDependencies": {
+    "vitest": "^4.1.8"
+  },
   "scripts": {
     "build": "tsc -p tsconfig.build.json",
     "typecheck": "tsc -p tsconfig.json --noEmit",
-    "test": "echo 'no tests yet' && exit 0",
-    "clean": "rm -rf dist"
+    "test": "vitest run",
+    "clean": "rm -rf dist",
+    "test:unit": "vitest run test/unit --passWithNoTests"
   }
 }