@agentproto/identity 0.1.0-alpha.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 agentproto contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,23 @@
+# @agentproto/identity
+
+AIP-23 `IDENTITY.md` reference implementation. A workspace AIP that defines layered, composable agent identity — typed layers as AIP-18 collections, confidence-scored items, optional temporal entries, and compression-artifact tiers — owning only the workspace root manifest, layer registry, compression policy, junction rules, and cross-AIP composition.
+
+> **Status: 0.1.0-alpha.** Generated by `scripts/scaffold-aip.mjs` — `build()` and `validate()` bodies are TODOs.
+
+Spec: <https://agentproto.sh/docs/aip-23>
+
+## Usage
+
+```ts
+import { defineIdentity } from "@agentproto/identity"
+
+const x = defineIdentity({
+  id: "my-identity",
+  description: "Short purpose.",
+  // ...
+})
+```
+
+## License
+
+MIT — see [LICENSE](./LICENSE).

package/dist/chunk-4ZC5U7ML.mjs

@@ -0,0 +1,35 @@
+import { z } from 'zod';
+import { createDoctype } from '@agentproto/define-doctype';
+
+/**
+ * @agentproto/identity v0.1.0-alpha
+ * AIP-23 IDENTITY.md `defineIdentity` reference implementation.
+ */
+
+var identityFrontmatterSchema = z.object({ "schema": z.literal("identity.workspace/v1").describe("Discriminator for the AIP-23 workspace doctype."), "name": z.string().regex(new RegExp("^[a-z][a-z0-9-]*[a-z0-9]$")).min(2).max(96).describe("Stable kebab-case identifier for the identity or view."), "title": z.string().min(1).max(200).describe("Human-readable title of the identity."), "description": z.string().min(1).max(2e3).describe("One-paragraph statement of purpose: what this identity captures, who or what it is about."), "version": z.string().regex(new RegExp("^[0-9]+\\.[0-9]+\\.[0-9]+(-[A-Za-z0-9.-]+)?$")).describe("Semantic version of the WORKSPACE shape. Bump on collection / artifact-tier / binding / lint / defaults changes. Independent of any individual layer item's version (AIP-18-side)."), "extends": z.string().regex(new RegExp("^(\\.\\./|\\./)[^\\s]+/IDENTITY\\.md$")).min(1).max(512).describe("OPTIONAL \u2014 relative path to a parent IDENTITY.md. Presence makes the manifest a VIEW; absence makes it a WORKSPACE ROOT. Recursive composition; maximum chain depth is 8.").optional(), "appliesTo": z.array(z.string().regex(new RegExp("^(ws://(operators|companies|personas|skills)/[a-z][a-z0-9-]*|\\.\\./[^\\s]+)$")).describe("Either a ws:// ref to an AIP-9 operator, AIP-22 company, AIP-25 persona, or AIP-3 skill, or a relative path to a consumer workspace folder.")).refine((arr) => arr.every((item, i) => arr.indexOf(item) == i), { message: "All items must be unique!" }).describe("OPTIONAL \u2014 list of consumers this VIEW adapts the identity for. Hosts MUST refuse the view if any binding does not resolve. Not inherited; views declare their own scope.").optional(), "executor": z.string().regex(new RegExp("^ws://operators/[a-z][a-z0-9-]*$")).describe("OPTIONAL \u2014 AIP-9 operator the identity is *about* or activates against. The host loads this operator when the identity is opened.").optional(), "governance": z.string().min(1).max(512).describe("OPTIONAL \u2014 AIP-7 policy or audit binding. May be a path to an AIP-7 policy file or a ws:// ref. Identity-level approvals (layer mutations, confidence elevation, persona binding) flow through this ref.").optional(), "work": z.string().regex(new RegExp("^ws://workspaces/[a-z][a-z0-9-]*$")).describe("OPTIONAL \u2014 AIP-20 work tracker the identity participates in (an operator's task queue, a company's program plan).").optional(), "knowledge": z.string().regex(new RegExp("^ws://wikis/[a-z][a-z0-9-]*(/KNOWLEDGE\\.md)?$")).describe("OPTIONAL \u2014 AIP-10 KNOWLEDGE.md ref. The identity's narrative wiki, dossier, exemplars.").optional(), "collections": z.array(z.any()).describe("Layer collections enabled by this identity. Each entry is one AIP-18 collection describing ONE layer kind. Three forms supported: inline (full COLLECTION.md frontmatter), file ref, or registry import. Merge-by-effective-name (alias if set, otherwise the collection's name) across the extends chain.").default([]), "layers": z.object({ "defaultConfidence": z.number().gte(0).lte(1).describe("OPTIONAL \u2014 minimum confidence (0..1) the workspace will store. New items below the floor are refused with identity_confidence_below_floor (HARD). Default is 0.0 (no floor). Workspaces with strict identity standards SHOULD set this to 0.5 or higher.").default(0), "versioning": z.enum(["enabled", "disabled"]).describe("Whether layer items carry an incrementing version on update. ONE-WAY SWITCH: once 'enabled' at any ancestor, descendants MUST NOT set 'disabled'. Refusal: identity_versioning_disable (HARD).").default("enabled"), "temporal": z.object({ "enabled": z.boolean().describe("OPTIONAL \u2014 whether temporal-entry companion items are supported for layers marked temporal: true on their own collection.").default(false), "field": z.string().regex(new RegExp("^[a-z][a-zA-Z0-9_]*$")).describe("OPTIONAL \u2014 field name on temporal-entry items carrying expiry. Hosts walk this field on read to exclude expired entries.").default("validUntil"), "sourceVocabulary": z.array(z.string().regex(new RegExp("^[a-z][a-z0-9-]*[a-z0-9]$"))).refine((arr) => arr.every((item, i) => arr.indexOf(item) == i), { message: "All items must be unique!" }).describe("Controlled vocabulary for temporal-entry.source. APPEND-ONLY across ancestors: descendants MAY add new values but MUST NOT remove existing ones.").default(["configured", "observed", "inferred", "self-reported"]) }).strict().describe("Temporal-layer behaviour at the workspace level.").optional() }).strict().describe("Layer behaviour configuration. Confidence floor, versioning posture, temporal-entry contract.").optional(), "artifacts": z.object({ "enabled": z.boolean().describe("Whether the host generates compression artifacts for layer items.").default(false), "tiers": z.array(z.object({ "id": z.string().regex(new RegExp("^[a-z][a-z0-9-]*$")).describe("Stable kebab-case tier id. Conventional values: short, medium, full. Merge key vs parent."), "maxTokens": z.number().int().gte(1).lte(32768).describe("Target maximum tokens for this tier's artifact. Tiers MUST be MONOTONIC: each tier's maxTokens MUST be strictly greater than the previous tier's. The host re-validates monotonicity after merge."), "strategy": z.string().regex(new RegExp("^[a-z][a-z0-9-]*$")).describe("OPTIONAL \u2014 compression algorithm id. Conventional values: aaak, bullet-list, markdown, or a host-defined string.").optional() }).strict()).describe("Compression tiers. Merge-by-id vs parent; child tier with same id overrides parent's. Monotonicity (strictly increasing maxTokens) is re-validated after merge.").default([]), "locales": z.array(z.string().regex(new RegExp("^[a-z]{2}(-[A-Z]{2})?$"))).refine((arr) => arr.every((item, i) => arr.indexOf(item) == i), { message: "All items must be unique!" }).describe("Locales for which artifacts are generated. ISO 639-1 (e.g. 'en') with optional ISO 3166-1 region (e.g. 'en-US'). When non-empty, the host produces one artifact per (layer, tier, locale) triple.").default([]), "refreshPolicy": z.enum(["on-write", "scheduled", "manual"]).describe("When the host regenerates artifacts. on-write = immediately after layer item mutation (correctness); scheduled = host-defined cadence (cheap, eventually consistent); manual = no auto-refresh.").default("on-write") }).strict().describe("Compression artifact policy. AIP-23's first distinctive contribution.").optional(), "binding": z.object({ "allowedEntities": z.array(z.enum(["operator", "company", "persona", "user", "skill"])).refine((arr) => arr.every((item, i) => arr.indexOf(item) == i), { message: "All items must be unique!" }).describe("Bearer entity kinds allowed to bind layer items. Workspaces narrow to fit their domain (companion-style: [user, persona]; operator-fleet style: [operator, company]). Cross-references: operator \u2192 AIP-9, company \u2192 AIP-22, persona \u2192 AIP-25, skill \u2192 AIP-3, user \u2192 host-defined.").default(["operator"]), "exclusivity": z.literal("per-entity-and-layer").describe("Binding exclusivity rule. ONE-WAY SWITCH on relaxation: once 'per-entity-and-layer' (or stricter, when added) at any ancestor, descendants MUST NOT replace with a more permissive value. Refusal: identity_binding_loosen (HARD). Currently only 'per-entity-and-layer' is defined; future values may add stricter forms.").default("per-entity-and-layer"), "verifyExistence": z.boolean().describe("Whether the host verifies the bearer entity exists before allowing the binding. ONE-WAY SWITCH on relaxation: once 'true' at any ancestor, descendants MUST NOT set false. Refusal: identity_binding_verify_relax (HARD). Setting false is permitted for ephemeral / sandbox deployments but SHOULD never be used in production.").default(true) }).strict().describe("Junction policy. Which bearer entity kinds may bind layer items as their identity, and how exclusively.").optional(), "lints": z.array(z.object({ "id": z.string().regex(new RegExp("^[a-z][a-z0-9-]*$")).describe("Stable kebab-case lint id. Merge key when composing with extends parent."), "kind": z.enum(["orphan-layer", "low-confidence-pinned", "stale-temporal", "unbound-layer", "missing-required-layer", "custom"]).describe("Workspace-spanning lint algorithm. AIP-18 per-collection lints (missing-owner, overdue, required-field, etc.) live on COLLECTION.md and are NOT redeclared here. 'custom' delegates to a host-defined check identified by `id`."), "severity": z.enum(["error", "warn", "info"]).describe("Lint severity. Children may soften; governance policies MAY forbid softening below `error`."), "params": z.record(z.string(), z.any()).describe("Kind-specific parameters. e.g. { layers: [soul, personality] } for missing-required-layer; { days: 30 } for stale-temporal; { threshold: 0.5 } for low-confidence-pinned.").default({}) }).strict()).describe("Workspace-spanning lints. Merge-by-id vs parent.").default([]), "defaults": z.object({ "approvalClass": z.string().regex(new RegExp("^(auto|always|on-mutate|policy:[A-Za-z0-9_./:-]+)$")).describe("Approval class for layer mutations. 'auto' = no gate; 'always' = every mutation requires approval; 'on-mutate' = approval on field-level mutations; 'policy:<ref>' = delegate to an AIP-7 policy.").optional(), "auditMutations": z.boolean().describe("Whether layer mutations are audited. ONE-WAY SWITCH: once true at any ancestor, descendants MUST NOT set false. Refusal: identity_audit_downgrade (HARD).").default(false) }).strict().describe("Default approval and audit posture.").optional(), "display": z.object({ "homePage": z.string().regex(new RegExp("^[A-Za-z0-9][A-Za-z0-9_:-]*$")).describe("OPTIONAL \u2014 id of the layer or item to use as the identity landing page (e.g. SOUL-acme-founder).").optional(), "defaultGrouping": z.enum(["layer", "entity"]).describe("Default grouping for list views. 'layer' = one section per layer kind; 'entity' = one section per bearer entity.").optional() }).strict().describe("Display hints for UIs that render the identity. Runtime-agnostic.").optional(), "metadata": z.record(z.string(), z.any()).describe("Vendor-specific extensions, namespaced under <vendor>. Deep-merged across the extends chain. MUST NOT change the meaning of any spec field.").default({}) }).strict().and(z.any().describe("A view (any manifest with appliesTo set) MUST extend a parent. A workspace-root manifest has neither field.")).describe("Validates the YAML frontmatter portion of an AIP-23 IDENTITY.md (workspace root or per-context view). The single doctype 'identity.workspace/v1' is used in both modes; the host distinguishes by checking whether `extends` is set. Per-layer-kind schemas are delegated to AIP-18 (COLLECTION.md / ITEM.md). Items in any layer collection MUST carry a `confidence` field in 0..1; that requirement is enforced at item-load time by the host, not by this schema (which validates the workspace manifest only).");
+var defineIdentity = createDoctype({
+  aip: 23,
+  name: "identity",
+  readIdentity: (def) => def.name,
+  validate(def) {
+    const d = def;
+    if (Array.isArray(d.appliesTo) && d.appliesTo.length > 0 && d.extends == null) {
+      throw new Error(
+        `defineIdentity (AIP-23): appliesTo is non-empty \u2014 extends MUST be set`
+      );
+    }
+    const result = identityFrontmatterSchema.safeParse(def);
+    if (!result.success) {
+      throw new Error(
+        `defineIdentity (AIP-23): ${result.error.issues.map((i) => `${i.path.join(".")}: ${i.message}`).join("; ")}`
+      );
+    }
+  },
+  build(def) {
+    return { ...def };
+  }
+});
+
+export { defineIdentity, identityFrontmatterSchema };
+//# sourceMappingURL=chunk-4ZC5U7ML.mjs.map
+//# sourceMappingURL=chunk-4ZC5U7ML.mjs.map

package/dist/chunk-4ZC5U7ML.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/schema.ts","../src/define-identity.ts"],"names":[],"mappings":";;;;;;;;AAeO,IAAM,4BAA4B,CAAA,CAAE,MAAA,CAAO,EAAE,QAAA,EAAU,CAAA,CAAE,QAAQ,uBAAuB,CAAA,CAAE,QAAA,CAAS,iDAAiD,GAAG,MAAA,EAAQ,CAAA,CAAE,QAAO,CAAE,KAAA,CAAM,IAAI,MAAA,CAAO,2BAA2B,CAAC,CAAA,CAAE,IAAI,CAAC,CAAA,CAAE,IAAI,EAAE,CAAA,CAAE,SAAS,wDAAwD,CAAA,EAAG,SAAS,CAAA,CAAE,MAAA,GAAS,GAAA,CAAI,CAAC,EAAE,GAAA,CAAI,GAAG,EAAE,QAAA,CAAS,uCAAuC,CAAA,EAAG,aAAA,EAAe,EAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA,CAAE,IAAI,GAAI,CAAA,CAAE,SAAS,2FAA2F,CAAA,EAAG,WAAW,CAAA,CAAE,MAAA,GAAS,KAAA,CAAM,IAAI,OAAO,8CAA8C,CAAC,CAAA,CAAE,QAAA,CAAS,oLAAoL,CAAA,EAAG,SAAA,EAAW,EAAE,MAAA,EAAO,CAAE,MAAM,IAAI,MAAA,CAAO,uCAAuC,CAAC,CAAA,CAAE,IAAI,CAAC,CAAA,CAAE,IAAI,GAAG,CAAA,CAAE,SAAS,gLAA2K,CAAA,CAAE,QAAA,EAAS,EAAG,aAAa,CAAA,CAAE,KAAA,CAAM,EAAE,MAAA,EAAO,CAAE,MAAM,IAAI,MAAA,CAAO,+EAA+E,CAAC,EAAE,QAAA,CAAS,6IAA6I,CAAC,CAAA,CAAE,MAAA,CAAO,CAAC,GAAA,KAAQ,GAAA,CAAI,KAAA,CAAM,CAAC,MAAM,CAAA,KAAM,GAAA,CAAI,QAAQ,IAAI,CAAA,IAAK,CAAC,CAAA,EAAG,EAAE,SAAS,2BAAA,EAA6B,EAAE,QAAA,CAAS,gLAA2K,EAAE,QAAA,EAAS,EAAG,YAAY,CAAA,CAAE,MAAA,EAAO,CAAE,KAAA,CAAM,IAAI,MAAA,CAAO,kCAAkC,CAAC,CAAA,CAAE,QAAA,CAAS,wIAAmI,CAAA,CAAE,QAAA,IAAY,YAAA,EAAc,CAAA,CAAE,QAAO,CAAE,GAAA,CAAI,CAAC,CAAA,CAAE,GAAA,CAAI,GAAG,CAAA,CAAE,QAAA,CAAS,+MAA0M,CAAA,CAAE,UAAS,EAAG,MAAA,EAAQ,EAAE,MAAA,EAAO,CAAE,MAAM,IAAI,MAAA,CAAO,mCAAmC,CAAC,CAAA,CAAE,SAAS,wHAAmH,CAAA,CAAE,UAAS,EAAG,WAAA,EAAa,EAAE,MAAA,EAAO,CAAE,KAAA,CAAM,IAAI,OAAO,gDAAgD,CAAC,EAAE,QAAA,CAAS,6FAAwF,EAAE,QAAA,EAAS,EAAG,aAAA,EAAe,CAAA,CAAE,MAAM,CAAA,CAAE,GAAA,EAAK,CAAA,CAAE,QAAA,CAAS,4SAA4S,CAAA,CAAE,OAAA,CAAQ,EAAW,GAAG,QAAA,EAAU,CAAA,CAAE,OAAO,EAAE,mBAAA,EAAqB,EAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA,CAAE,IAAI,CAAC,CAAA,CAAE,SAAS,+PAA0P,CAAA,CAAE,QAAQ,CAAC,CAAA,EAAG,YAAA,EAAc,CAAA,CAAE,KAAK,CAAC,SAAA,EAAU,UAAU,CAAC,CAAA,CAAE,SAAS,gMAAgM,CAAA,CAAE,QAAQ,SAAS,CAAA,EAAG,YAAY,CAAA,CAAE,MAAA,CAAO,EAAE,SAAA,EAAW,CAAA,CAAE,SAAQ,CAAE,QAAA,CAAS,gIAA2H,CAAA,CAAE,QAAQ,KAAK,CAAA,EAAG,SAAS,CAAA,CAAE,MAAA,GAAS,KAAA,CAAM,IAAI,OAAO,sBAAsB,CAAC,EAAE,QAAA,CAAS,+HAA0H,EAAE,OAAA,CAAQ,YAAY,GAAG,kBAAA,EAAoB,CAAA,CAAE,KAAA,CAAM,CAAA,CAAE,QAAO,CAAE,KAAA,CAAM,IAAI,MAAA,CAAO,2BAA2B,CAAC,CAAC,CAAA,CAAE,OAAO,CAAC,GAAA,KAAQ,IAAI,KAAA,CAAM,CAAC,MAAM,CAAA,KAAM,GAAA,CAAI,QAAQ,IAAI,CAAA,IAAK,CAAC,CAAA,EAAG,EAAE,OAAA,EAAS,2BAAA,EAA6B,CAAA,CAAE,QAAA,CAAS,kJAAkJ,CAAA,CAAE,OAAA,CAAQ,CAAC,YAAA,EAAa,UAAA,EAAW,YAAW,eAAe,CAAC,GAAG,CAAA,CAAE,QAAO,CAAE,QAAA,CAAS,kDAAkD,CAAA,CAAE,UAAS,EAAG,EAAE,MAAA,EAAO,CAAE,SAAS,+FAA+F,CAAA,CAAE,UAAS,EAAG,WAAA,EAAa,EAAE,MAAA,CAAO,EAAE,WAAW,CAAA,CAAE,OAAA,GAAU,QAAA,CAAS,mEAAmE,CAAA,CAAE,OAAA,CAAQ,KAAK,CAAA,EAAG,OAAA,EAAS,EAAE,KAAA,CAAM,CAAA,CAAE,OAAO,EAAE,IAAA,EAAM,EAAE,MAAA,EAAO,CAAE,MAAM,IAAI,MAAA,CAAO,mBAAmB,CAAC,CAAA,CAAE,SAAS,2FAA2F,CAAA,EAAG,WAAA,EAAa,CAAA,CAAE,QAAO,CAAE,GAAA,GAAM,GAAA,CAAI,CAAC,EAAE,GAAA,CAAI,KAAK,CAAA,CAAE,QAAA,CAAS,mMAAmM,CAAA,EAAG,UAAA,EAAY,EAAE,MAAA,EAAO,CAAE,MAAM,IAAI,MAAA,CAAO,mBAAmB,CAAC,EAAE,QAAA,CAAS,uHAAkH,EAAE,QAAA,EAAS,EAAG,CAAA,CAAE,MAAA,EAAQ,CAAA,CAAE,QAAA,CAAS,iKAAiK,CAAA,CAAE,OAAA,CAAQ,EAAW,CAAA,EAAG,WAAW,CAAA,CAAE,KAAA,CAAM,CAAA,CAAE,MAAA,GAAS,KAAA,CAAM,IAAI,OAAO,wBAAwB,CAAC,CAAC,CAAA,CAAE,MAAA,CAAO,CAAC,GAAA,KAAQ,GAAA,CAAI,MAAM,CAAC,IAAA,EAAM,MAAM,GAAA,CAAI,OAAA,CAAQ,IAAI,CAAA,IAAK,CAAC,CAAA,EAAG,EAAE,SAAS,2BAAA,EAA6B,EAAE,QAAA,CAAS,mMAAmM,EAAE,OAAA,CAAQ,EAAW,CAAA,EAAG,eAAA,EAAiB,EAAE,IAAA,CAAK,CAAC,YAAW,WAAA,EAAY,QAAQ,CAAC,CAAA,CAAE,QAAA,CAAS,iMAAiM,CAAA,CAAE,QAAQ,UAAU,CAAA,EAAG,CAAA,CAAE,MAAA,GAAS,QAAA,CAAS,uEAAuE,EAAE,QAAA,EAAS,EAAG,WAAW,CAAA,CAAE,MAAA,CAAO,EAAE,iBAAA,EAAmB,CAAA,CAAE,MAAM,CAAA,CAAE,IAAA,CAAK,CAAC,UAAA,EAAW,WAAU,SAAA,EAAU,MAAA,EAAO,OAAO,CAAC,CAAC,EAAE,MAAA,CAAO,CAAC,QAAQ,GAAA,CAAI,KAAA,CAAM,CAAC,IAAA,EAAM,CAAA,KAAM,IAAI,OAAA,CAAQ,IAAI,KAAK,CAAC,CAAA,EAAG,EAAE,OAAA,EAAS,6BAA6B,CAAA,CAAE,SAAS,4SAAmR,CAAA,CAAE,QAAQ,CAAC,UAAU,CAAC,CAAA,EAAG,aAAA,EAAe,EAAE,OAAA,CAAQ,sBAAsB,EAAE,QAAA,CAAS,4TAA4T,EAAE,OAAA,CAAQ,sBAAsB,CAAA,EAAG,iBAAA,EAAmB,EAAE,OAAA,EAAQ,CAAE,SAAS,kUAAkU,CAAA,CAAE,QAAQ,IAAI,CAAA,EAAG,CAAA,CAAE,MAAA,GAAS,QAAA,CAAS,yGAAyG,EAAE,QAAA,EAAS,EAAG,SAAS,CAAA,CAAE,KAAA,CAAM,CAAA,CAAE,MAAA,CAAO,EAAE,IAAA,EAAM,CAAA,CAAE,QAAO,CAAE,KAAA,CAAM,IAAI,MAAA,CAAO,mBAAmB,CAAC,CAAA,CAAE,SAAS,0EAA0E,CAAA,EAAG,QAAQ,CAAA,CAAE,IAAA,CAAK,CAAC,cAAA,EAAe,uBAAA,EAAwB,gBAAA,EAAiB,eAAA,EAAgB,0BAAyB,QAAQ,CAAC,EAAE,QAAA,CAAS,iOAAiO,GAAG,UAAA,EAAY,CAAA,CAAE,KAAK,CAAC,OAAA,EAAQ,QAAO,MAAM,CAAC,EAAE,QAAA,CAAS,6FAA6F,GAAG,QAAA,EAAU,CAAA,CAAE,MAAA,CAAO,CAAA,CAAE,QAAO,EAAG,CAAA,CAAE,KAAK,CAAA,CAAE,SAAS,2KAA2K,CAAA,CAAE,QAAQ,EAAW,GAAG,CAAA,CAAE,QAAQ,CAAA,CAAE,SAAS,kDAAkD,CAAA,CAAE,OAAA,CAAQ,EAAW,CAAA,EAAG,UAAA,EAAY,EAAE,MAAA,CAAO,EAAE,iBAAiB,CAAA,CAAE,MAAA,GAAS,KAAA,CAAM,IAAI,OAAO,oDAAoD,CAAC,EAAE,QAAA,CAAS,mMAAmM,EAAE,QAAA,EAAS,EAAG,gBAAA,EAAkB,CAAA,CAAE,SAAQ,CAAE,QAAA,CAAS,2JAA2J,CAAA,CAAE,OAAA,CAAQ,KAAK,CAAA,EAAG,EAAE,MAAA,EAAO,CAAE,SAAS,qCAAqC,CAAA,CAAE,UAAS,EAAG,SAAA,EAAW,EAAE,MAAA,CAAO,EAAE,UAAA,EAAY,CAAA,CAAE,QAAO,CAAE,KAAA,CAAM,IAAI,MAAA,CAAO,8BAA8B,CAAC,CAAA,CAAE,QAAA,CAAS,uGAAkG,CAAA,CAAE,QAAA,IAAY,iBAAA,EAAmB,CAAA,CAAE,KAAK,CAAC,OAAA,EAAQ,QAAQ,CAAC,CAAA,CAAE,QAAA,CAAS,kHAAkH,EAAE,QAAA,EAAS,EAAG,CAAA,CAAE,MAAA,GAAS,QAAA,CAAS,mEAAmE,EAAE,QAAA,EAAS,EAAG,YAAY,CAAA,CAAE,MAAA,CAAO,EAAE,MAAA,EAAO,EAAG,EAAE,GAAA,EAAK,CAAA,CAAE,QAAA,CAAS,6IAA6I,CAAA,CAAE,OAAA,CAAQ,EAAW,CAAA,EAAG,CAAA,CAAE,MAAA,GAAS,GAAA,CAAI,CAAA,CAAE,KAAI,CAAE,QAAA,CAAS,6GAA6G,CAAC,CAAA,CAAE,SAAS,qfAAqf;ACM5mV,IAAM,iBAAiB,aAAA,CAAkD;AAAA,EAC9E,GAAA,EAAK,EAAA;AAAA,EACL,IAAA,EAAM,UAAA;AAAA,EACN,YAAA,EAAc,CAAC,GAAA,KAAQ,GAAA,CAAI,IAAA;AAAA,EAC3B,SAAS,GAAA,EAAK;AAKZ,IAAA,MAAM,CAAA,GAAI,GAAA;AACV,IAAA,IACE,KAAA,CAAM,OAAA,CAAQ,CAAA,CAAE,SAAS,CAAA,IACzB,CAAA,CAAE,SAAA,CAAU,MAAA,GAAS,CAAA,IACrB,CAAA,CAAE,OAAA,IAAW,IAAA,EACb;AACA,MAAA,MAAM,IAAI,KAAA;AAAA,QACR,CAAA,0EAAA;AAAA,OACF;AAAA,IACF;AACA,IAAA,MAAM,MAAA,GAAS,yBAAA,CAA0B,SAAA,CAAU,GAAG,CAAA;AACtD,IAAA,IAAI,CAAC,OAAO,OAAA,EAAS;AACnB,MAAA,MAAM,IAAI,KAAA;AAAA,QACR,CAAA,yBAAA,EAA4B,OAAO,KAAA,CAAM,MAAA,CACtC,IAAI,CAAC,CAAA,KAAM,GAAG,CAAA,CAAE,IAAA,CAAK,KAAK,GAAG,CAAC,KAAK,CAAA,CAAE,OAAO,EAAE,CAAA,CAC9C,IAAA,CAAK,IAAI,CAAC,CAAA;AAAA,OACf;AAAA,IACF;AAAA,EACF,CAAA;AAAA,EACA,MAAM,GAAA,EAAK;AAKT,IAAA,OAAO,EAAE,GAAG,GAAA,EAAI;AAAA,EAClB;AACF,CAAC","file":"chunk-4ZC5U7ML.mjs","sourcesContent":["/**\n * AIP-23 IDENTITY.md frontmatter zod schema.\n *\n * Generated from `resources/aip-23/draft/IDENTITY.schema.json` via\n * json-schema-to-zod. Imported by both `define-identity.ts` (TS path\n * validation) and `manifest/index.ts` (.md path validation) so every\n * field-level constraint runs in both authoring paths from a single\n * source of truth — re-run scaffold-aip to refresh after spec changes.\n *\n * Cross-field rules (if/then/allOf in JSON Schema) don't translate\n * cleanly and live in `define-identity.ts`'s `validate(def)` instead.\n */\n\nimport { z } from \"zod\"\n\nexport const identityFrontmatterSchema = z.object({ \"schema\": z.literal(\"identity.workspace/v1\").describe(\"Discriminator for the AIP-23 workspace doctype.\"), \"name\": z.string().regex(new RegExp(\"^[a-z][a-z0-9-]*[a-z0-9]$\")).min(2).max(96).describe(\"Stable kebab-case identifier for the identity or view.\"), \"title\": z.string().min(1).max(200).describe(\"Human-readable title of the identity.\"), \"description\": z.string().min(1).max(2000).describe(\"One-paragraph statement of purpose: what this identity captures, who or what it is about.\"), \"version\": z.string().regex(new RegExp(\"^[0-9]+\\\\.[0-9]+\\\\.[0-9]+(-[A-Za-z0-9.-]+)?$\")).describe(\"Semantic version of the WORKSPACE shape. Bump on collection / artifact-tier / binding / lint / defaults changes. Independent of any individual layer item's version (AIP-18-side).\"), \"extends\": z.string().regex(new RegExp(\"^(\\\\.\\\\./|\\\\./)[^\\\\s]+/IDENTITY\\\\.md$\")).min(1).max(512).describe(\"OPTIONAL — relative path to a parent IDENTITY.md. Presence makes the manifest a VIEW; absence makes it a WORKSPACE ROOT. Recursive composition; maximum chain depth is 8.\").optional(), \"appliesTo\": z.array(z.string().regex(new RegExp(\"^(ws://(operators|companies|personas|skills)/[a-z][a-z0-9-]*|\\\\.\\\\./[^\\\\s]+)$\")).describe(\"Either a ws:// ref to an AIP-9 operator, AIP-22 company, AIP-25 persona, or AIP-3 skill, or a relative path to a consumer workspace folder.\")).refine((arr) => arr.every((item, i) => arr.indexOf(item) == i), { message: \"All items must be unique!\" }).describe(\"OPTIONAL — list of consumers this VIEW adapts the identity for. Hosts MUST refuse the view if any binding does not resolve. Not inherited; views declare their own scope.\").optional(), \"executor\": z.string().regex(new RegExp(\"^ws://operators/[a-z][a-z0-9-]*$\")).describe(\"OPTIONAL — AIP-9 operator the identity is *about* or activates against. The host loads this operator when the identity is opened.\").optional(), \"governance\": z.string().min(1).max(512).describe(\"OPTIONAL — AIP-7 policy or audit binding. May be a path to an AIP-7 policy file or a ws:// ref. Identity-level approvals (layer mutations, confidence elevation, persona binding) flow through this ref.\").optional(), \"work\": z.string().regex(new RegExp(\"^ws://workspaces/[a-z][a-z0-9-]*$\")).describe(\"OPTIONAL — AIP-20 work tracker the identity participates in (an operator's task queue, a company's program plan).\").optional(), \"knowledge\": z.string().regex(new RegExp(\"^ws://wikis/[a-z][a-z0-9-]*(/KNOWLEDGE\\\\.md)?$\")).describe(\"OPTIONAL — AIP-10 KNOWLEDGE.md ref. The identity's narrative wiki, dossier, exemplars.\").optional(), \"collections\": z.array(z.any()).describe(\"Layer collections enabled by this identity. Each entry is one AIP-18 collection describing ONE layer kind. Three forms supported: inline (full COLLECTION.md frontmatter), file ref, or registry import. Merge-by-effective-name (alias if set, otherwise the collection's name) across the extends chain.\").default([] as never), \"layers\": z.object({ \"defaultConfidence\": z.number().gte(0).lte(1).describe(\"OPTIONAL — minimum confidence (0..1) the workspace will store. New items below the floor are refused with identity_confidence_below_floor (HARD). Default is 0.0 (no floor). Workspaces with strict identity standards SHOULD set this to 0.5 or higher.\").default(0), \"versioning\": z.enum([\"enabled\",\"disabled\"]).describe(\"Whether layer items carry an incrementing version on update. ONE-WAY SWITCH: once 'enabled' at any ancestor, descendants MUST NOT set 'disabled'. Refusal: identity_versioning_disable (HARD).\").default(\"enabled\"), \"temporal\": z.object({ \"enabled\": z.boolean().describe(\"OPTIONAL — whether temporal-entry companion items are supported for layers marked temporal: true on their own collection.\").default(false), \"field\": z.string().regex(new RegExp(\"^[a-z][a-zA-Z0-9_]*$\")).describe(\"OPTIONAL — field name on temporal-entry items carrying expiry. Hosts walk this field on read to exclude expired entries.\").default(\"validUntil\"), \"sourceVocabulary\": z.array(z.string().regex(new RegExp(\"^[a-z][a-z0-9-]*[a-z0-9]$\"))).refine((arr) => arr.every((item, i) => arr.indexOf(item) == i), { message: \"All items must be unique!\" }).describe(\"Controlled vocabulary for temporal-entry.source. APPEND-ONLY across ancestors: descendants MAY add new values but MUST NOT remove existing ones.\").default([\"configured\",\"observed\",\"inferred\",\"self-reported\"]) }).strict().describe(\"Temporal-layer behaviour at the workspace level.\").optional() }).strict().describe(\"Layer behaviour configuration. Confidence floor, versioning posture, temporal-entry contract.\").optional(), \"artifacts\": z.object({ \"enabled\": z.boolean().describe(\"Whether the host generates compression artifacts for layer items.\").default(false), \"tiers\": z.array(z.object({ \"id\": z.string().regex(new RegExp(\"^[a-z][a-z0-9-]*$\")).describe(\"Stable kebab-case tier id. Conventional values: short, medium, full. Merge key vs parent.\"), \"maxTokens\": z.number().int().gte(1).lte(32768).describe(\"Target maximum tokens for this tier's artifact. Tiers MUST be MONOTONIC: each tier's maxTokens MUST be strictly greater than the previous tier's. The host re-validates monotonicity after merge.\"), \"strategy\": z.string().regex(new RegExp(\"^[a-z][a-z0-9-]*$\")).describe(\"OPTIONAL — compression algorithm id. Conventional values: aaak, bullet-list, markdown, or a host-defined string.\").optional() }).strict()).describe(\"Compression tiers. Merge-by-id vs parent; child tier with same id overrides parent's. Monotonicity (strictly increasing maxTokens) is re-validated after merge.\").default([] as never), \"locales\": z.array(z.string().regex(new RegExp(\"^[a-z]{2}(-[A-Z]{2})?$\"))).refine((arr) => arr.every((item, i) => arr.indexOf(item) == i), { message: \"All items must be unique!\" }).describe(\"Locales for which artifacts are generated. ISO 639-1 (e.g. 'en') with optional ISO 3166-1 region (e.g. 'en-US'). When non-empty, the host produces one artifact per (layer, tier, locale) triple.\").default([] as never), \"refreshPolicy\": z.enum([\"on-write\",\"scheduled\",\"manual\"]).describe(\"When the host regenerates artifacts. on-write = immediately after layer item mutation (correctness); scheduled = host-defined cadence (cheap, eventually consistent); manual = no auto-refresh.\").default(\"on-write\") }).strict().describe(\"Compression artifact policy. AIP-23's first distinctive contribution.\").optional(), \"binding\": z.object({ \"allowedEntities\": z.array(z.enum([\"operator\",\"company\",\"persona\",\"user\",\"skill\"])).refine((arr) => arr.every((item, i) => arr.indexOf(item) == i), { message: \"All items must be unique!\" }).describe(\"Bearer entity kinds allowed to bind layer items. Workspaces narrow to fit their domain (companion-style: [user, persona]; operator-fleet style: [operator, company]). Cross-references: operator → AIP-9, company → AIP-22, persona → AIP-25, skill → AIP-3, user → host-defined.\").default([\"operator\"]), \"exclusivity\": z.literal(\"per-entity-and-layer\").describe(\"Binding exclusivity rule. ONE-WAY SWITCH on relaxation: once 'per-entity-and-layer' (or stricter, when added) at any ancestor, descendants MUST NOT replace with a more permissive value. Refusal: identity_binding_loosen (HARD). Currently only 'per-entity-and-layer' is defined; future values may add stricter forms.\").default(\"per-entity-and-layer\"), \"verifyExistence\": z.boolean().describe(\"Whether the host verifies the bearer entity exists before allowing the binding. ONE-WAY SWITCH on relaxation: once 'true' at any ancestor, descendants MUST NOT set false. Refusal: identity_binding_verify_relax (HARD). Setting false is permitted for ephemeral / sandbox deployments but SHOULD never be used in production.\").default(true) }).strict().describe(\"Junction policy. Which bearer entity kinds may bind layer items as their identity, and how exclusively.\").optional(), \"lints\": z.array(z.object({ \"id\": z.string().regex(new RegExp(\"^[a-z][a-z0-9-]*$\")).describe(\"Stable kebab-case lint id. Merge key when composing with extends parent.\"), \"kind\": z.enum([\"orphan-layer\",\"low-confidence-pinned\",\"stale-temporal\",\"unbound-layer\",\"missing-required-layer\",\"custom\"]).describe(\"Workspace-spanning lint algorithm. AIP-18 per-collection lints (missing-owner, overdue, required-field, etc.) live on COLLECTION.md and are NOT redeclared here. 'custom' delegates to a host-defined check identified by `id`.\"), \"severity\": z.enum([\"error\",\"warn\",\"info\"]).describe(\"Lint severity. Children may soften; governance policies MAY forbid softening below `error`.\"), \"params\": z.record(z.string(), z.any()).describe(\"Kind-specific parameters. e.g. { layers: [soul, personality] } for missing-required-layer; { days: 30 } for stale-temporal; { threshold: 0.5 } for low-confidence-pinned.\").default({} as never) }).strict()).describe(\"Workspace-spanning lints. Merge-by-id vs parent.\").default([] as never), \"defaults\": z.object({ \"approvalClass\": z.string().regex(new RegExp(\"^(auto|always|on-mutate|policy:[A-Za-z0-9_./:-]+)$\")).describe(\"Approval class for layer mutations. 'auto' = no gate; 'always' = every mutation requires approval; 'on-mutate' = approval on field-level mutations; 'policy:<ref>' = delegate to an AIP-7 policy.\").optional(), \"auditMutations\": z.boolean().describe(\"Whether layer mutations are audited. ONE-WAY SWITCH: once true at any ancestor, descendants MUST NOT set false. Refusal: identity_audit_downgrade (HARD).\").default(false) }).strict().describe(\"Default approval and audit posture.\").optional(), \"display\": z.object({ \"homePage\": z.string().regex(new RegExp(\"^[A-Za-z0-9][A-Za-z0-9_:-]*$\")).describe(\"OPTIONAL — id of the layer or item to use as the identity landing page (e.g. SOUL-acme-founder).\").optional(), \"defaultGrouping\": z.enum([\"layer\",\"entity\"]).describe(\"Default grouping for list views. 'layer' = one section per layer kind; 'entity' = one section per bearer entity.\").optional() }).strict().describe(\"Display hints for UIs that render the identity. Runtime-agnostic.\").optional(), \"metadata\": z.record(z.string(), z.any()).describe(\"Vendor-specific extensions, namespaced under <vendor>. Deep-merged across the extends chain. MUST NOT change the meaning of any spec field.\").default({} as never) }).strict().and(z.any().describe(\"A view (any manifest with appliesTo set) MUST extend a parent. A workspace-root manifest has neither field.\")).describe(\"Validates the YAML frontmatter portion of an AIP-23 IDENTITY.md (workspace root or per-context view). The single doctype 'identity.workspace/v1' is used in both modes; the host distinguishes by checking whether `extends` is set. Per-layer-kind schemas are delegated to AIP-18 (COLLECTION.md / ITEM.md). Items in any layer collection MUST carry a `confidence` field in 0..1; that requirement is enforced at item-load time by the host, not by this schema (which validates the workspace manifest only).\")\n\nexport type IdentityFrontmatter = z.infer<typeof identityFrontmatterSchema>\n","import { createDoctype } from \"@agentproto/define-doctype\"\nimport { identityFrontmatterSchema } from \"./schema.js\"\nimport type { IdentityDefinition, IdentityHandle } from \"./types.js\"\n\n/**\n * AIP-23 reference implementation of `defineIdentity`.\n *\n * Built on `createDoctype` so the cross-AIP invariants (id pattern,\n * description length, top-level freeze, \"defineIdentity (AIP-23): …\"\n * error prefix) run uniformly with every other AIP defineX.\n *\n * Field-level validation runs the schema-derived zod from\n * `./schema.ts` against the input. Same source of truth as the .md\n * path uses (`parseIdentityManifest`), so a malformed TS-authored\n * definition fails with the same diagnostic as a malformed manifest.\n * Cross-field rules go in `validate(def)` after the zod check.\n *\n * Identity / description extractors detected from the JSON Schema:\n *   readIdentity: def.name\n *   readDescription: def.description.\n */\nexport const defineIdentity = createDoctype<IdentityDefinition, IdentityHandle>({\n  aip: 23,\n  name: \"identity\",\n  readIdentity: (def) => def.name,\n  validate(def) {\n    // Cross-field rules run BEFORE field-level zod so structural\n    // errors surface before the cascade of \"missing required field\".\n    //\n    // AIP-23 rule: appliesTo non-empty ⇒ extends required.\n    const d = def as { appliesTo?: readonly unknown[]; extends?: unknown }\n    if (\n      Array.isArray(d.appliesTo) &&\n      d.appliesTo.length > 0 &&\n      d.extends == null\n    ) {\n      throw new Error(\n        `defineIdentity (AIP-23): appliesTo is non-empty — extends MUST be set`,\n      )\n    }\n    const result = identityFrontmatterSchema.safeParse(def)\n    if (!result.success) {\n      throw new Error(\n        `defineIdentity (AIP-23): ${result.error.issues\n          .map((i) => `${i.path.join(\".\")}: ${i.message}`)\n          .join(\"; \")}`,\n      )\n    }\n  },\n  build(def) {\n    // Default build: spread the validated definition into a fresh object.\n    // Hand-tune for nested freezing (Object.freeze on arrays/objects) and\n    // for fields that need defaults applied — see @agentproto/operator\n    // for a reference shape.\n    return { ...def } as IdentityHandle\n  },\n})\n"]}

package/dist/index.d.ts

@@ -0,0 +1,37 @@
+import { I as IdentityDefinition } from './types-CoPDmRyr.js';
+export { a as IdentityHandle } from './types-CoPDmRyr.js';
+
+/**
+ * AIP-23 reference implementation of `defineIdentity`.
+ *
+ * Built on `createDoctype` so the cross-AIP invariants (id pattern,
+ * description length, top-level freeze, "defineIdentity (AIP-23): …"
+ * error prefix) run uniformly with every other AIP defineX.
+ *
+ * Field-level validation runs the schema-derived zod from
+ * `./schema.ts` against the input. Same source of truth as the .md
+ * path uses (`parseIdentityManifest`), so a malformed TS-authored
+ * definition fails with the same diagnostic as a malformed manifest.
+ * Cross-field rules go in `validate(def)` after the zod check.
+ *
+ * Identity / description extractors detected from the JSON Schema:
+ *   readIdentity: def.name
+ *   readDescription: def.description.
+ */
+declare const defineIdentity: (def: IdentityDefinition) => Readonly<IdentityDefinition>;
+
+/**
+ * @agentproto/identity — AIP-23 IDENTITY.md `defineIdentity` reference impl.
+ *
+ * A workspace AIP that defines layered, composable agent identity — typed layers as AIP-18 collections, confidence-scored items, optional temporal entries, and compression-artifact tiers — owning only the workspace root manifest, layer registry, compression policy, junction rules, and cross-AIP composition.
+ *
+ * Spec: https://agentproto.sh/docs/aip-23
+ *
+ * Authoring paths:
+ *   - TS:  `defineIdentity({...})` → `IdentityHandle`
+ *   - MD:  `parseIdentityManifest(src) → identityFromManifest({...})` → `IdentityHandle`
+ */
+declare const SPEC_NAME: "agentidentity/v1";
+declare const SPEC_VERSION: "1.0.0-alpha";
+
+export { IdentityDefinition, SPEC_NAME, SPEC_VERSION, defineIdentity };

package/dist/index.mjs

@@ -0,0 +1,14 @@
+export { defineIdentity } from './chunk-4ZC5U7ML.mjs';
+
+/**
+ * @agentproto/identity v0.1.0-alpha
+ * AIP-23 IDENTITY.md `defineIdentity` reference implementation.
+ */
+
+// src/index.ts
+var SPEC_NAME = "agentidentity/v1";
+var SPEC_VERSION = "1.0.0-alpha";
+
+export { SPEC_NAME, SPEC_VERSION };
+//# sourceMappingURL=index.mjs.map
+//# sourceMappingURL=index.mjs.map

package/dist/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;AAYO,IAAM,SAAA,GAAY;AAClB,IAAM,YAAA,GAAe","file":"index.mjs","sourcesContent":["/**\n * @agentproto/identity — AIP-23 IDENTITY.md `defineIdentity` reference impl.\n *\n * A workspace AIP that defines layered, composable agent identity — typed layers as AIP-18 collections, confidence-scored items, optional temporal entries, and compression-artifact tiers — owning only the workspace root manifest, layer registry, compression policy, junction rules, and cross-AIP composition.\n *\n * Spec: https://agentproto.sh/docs/aip-23\n *\n * Authoring paths:\n *   - TS:  `defineIdentity({...})` → `IdentityHandle`\n *   - MD:  `parseIdentityManifest(src) → identityFromManifest({...})` → `IdentityHandle`\n */\n\nexport const SPEC_NAME = \"agentidentity/v1\" as const\nexport const SPEC_VERSION = \"1.0.0-alpha\" as const\n\nexport { defineIdentity } from \"./define-identity.js\"\nexport type { IdentityDefinition, IdentityHandle } from \"./types.js\"\n"]}

package/dist/manifest/index.d.ts

@@ -0,0 +1,122 @@
+import { z } from 'zod';
+import { a as IdentityHandle } from '../types-CoPDmRyr.js';
+
+/**
+ * AIP-23 IDENTITY.md frontmatter zod schema.
+ *
+ * Generated from `resources/aip-23/draft/IDENTITY.schema.json` via
+ * json-schema-to-zod. Imported by both `define-identity.ts` (TS path
+ * validation) and `manifest/index.ts` (.md path validation) so every
+ * field-level constraint runs in both authoring paths from a single
+ * source of truth — re-run scaffold-aip to refresh after spec changes.
+ *
+ * Cross-field rules (if/then/allOf in JSON Schema) don't translate
+ * cleanly and live in `define-identity.ts`'s `validate(def)` instead.
+ */
+
+declare const identityFrontmatterSchema: z.ZodIntersection<z.ZodObject<{
+    schema: z.ZodLiteral<"identity.workspace/v1">;
+    name: z.ZodString;
+    title: z.ZodString;
+    description: z.ZodString;
+    version: z.ZodString;
+    extends: z.ZodOptional<z.ZodString>;
+    appliesTo: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    executor: z.ZodOptional<z.ZodString>;
+    governance: z.ZodOptional<z.ZodString>;
+    work: z.ZodOptional<z.ZodString>;
+    knowledge: z.ZodOptional<z.ZodString>;
+    collections: z.ZodDefault<z.ZodArray<z.ZodAny>>;
+    layers: z.ZodOptional<z.ZodObject<{
+        defaultConfidence: z.ZodDefault<z.ZodNumber>;
+        versioning: z.ZodDefault<z.ZodEnum<{
+            enabled: "enabled";
+            disabled: "disabled";
+        }>>;
+        temporal: z.ZodOptional<z.ZodObject<{
+            enabled: z.ZodDefault<z.ZodBoolean>;
+            field: z.ZodDefault<z.ZodString>;
+            sourceVocabulary: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        }, z.core.$strict>>;
+    }, z.core.$strict>>;
+    artifacts: z.ZodOptional<z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        tiers: z.ZodDefault<z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            maxTokens: z.ZodNumber;
+            strategy: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>>>;
+        locales: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        refreshPolicy: z.ZodDefault<z.ZodEnum<{
+            "on-write": "on-write";
+            scheduled: "scheduled";
+            manual: "manual";
+        }>>;
+    }, z.core.$strict>>;
+    binding: z.ZodOptional<z.ZodObject<{
+        allowedEntities: z.ZodDefault<z.ZodArray<z.ZodEnum<{
+            operator: "operator";
+            company: "company";
+            persona: "persona";
+            user: "user";
+            skill: "skill";
+        }>>>;
+        exclusivity: z.ZodDefault<z.ZodLiteral<"per-entity-and-layer">>;
+        verifyExistence: z.ZodDefault<z.ZodBoolean>;
+    }, z.core.$strict>>;
+    lints: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        kind: z.ZodEnum<{
+            custom: "custom";
+            "orphan-layer": "orphan-layer";
+            "low-confidence-pinned": "low-confidence-pinned";
+            "stale-temporal": "stale-temporal";
+            "unbound-layer": "unbound-layer";
+            "missing-required-layer": "missing-required-layer";
+        }>;
+        severity: z.ZodEnum<{
+            error: "error";
+            warn: "warn";
+            info: "info";
+        }>;
+        params: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodAny>>;
+    }, z.core.$strict>>>;
+    defaults: z.ZodOptional<z.ZodObject<{
+        approvalClass: z.ZodOptional<z.ZodString>;
+        auditMutations: z.ZodDefault<z.ZodBoolean>;
+    }, z.core.$strict>>;
+    display: z.ZodOptional<z.ZodObject<{
+        homePage: z.ZodOptional<z.ZodString>;
+        defaultGrouping: z.ZodOptional<z.ZodEnum<{
+            layer: "layer";
+            entity: "entity";
+        }>>;
+    }, z.core.$strict>>;
+    metadata: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodAny>>;
+}, z.core.$strict>, z.ZodAny>;
+type IdentityFrontmatter = z.infer<typeof identityFrontmatterSchema>;
+
+/**
+ * AIP-23 IDENTITY.md sidecar parser + manifest-to-handle constructor.
+ *
+ * Mirror of `@agentproto/tool/manifest` and `@agentproto/driver/manifest`:
+ * the .md provides metadata; the TS module supplies any spec-specific
+ * runtime bits (schemas, execute bodies, …) that can't live in
+ * frontmatter. Both inputs end up in `defineIdentity` so the cross-AIP
+ * invariants run uniformly.
+ *
+ *
+ * The frontmatter zod schema below was generated from
+ * `resources/aip-23/draft/IDENTITY.schema.json` via json-schema-to-zod.
+ * Re-run scaffold-aip to refresh after spec changes (or hand-tune
+ * any constraint the converter doesn't capture cleanly).
+ */
+
+interface IdentityManifest {
+    frontmatter: IdentityFrontmatter;
+    body: string;
+}
+declare function parseIdentityManifest(source: string): IdentityManifest;
+declare function identityFromManifest(manifest: IdentityManifest): IdentityHandle;
+
+export { type IdentityFrontmatter, type IdentityManifest, identityFromManifest, identityFrontmatterSchema, parseIdentityManifest };

package/dist/manifest/index.mjs

@@ -0,0 +1,28 @@
+import { identityFrontmatterSchema, defineIdentity } from '../chunk-4ZC5U7ML.mjs';
+export { identityFrontmatterSchema } from '../chunk-4ZC5U7ML.mjs';
+import matter from 'gray-matter';
+
+/**
+ * @agentproto/identity v0.1.0-alpha
+ * AIP-23 IDENTITY.md `defineIdentity` reference implementation.
+ */
+function parseIdentityManifest(source) {
+  const parsed = matter(source);
+  if (Object.keys(parsed.data).length === 0) {
+    throw new Error("parseIdentityManifest: missing or empty frontmatter");
+  }
+  const result = identityFrontmatterSchema.safeParse(parsed.data);
+  if (!result.success) {
+    throw new Error(
+      `parseIdentityManifest: invalid frontmatter \u2014 ${result.error.issues.map((i) => `${i.path.join(".")}: ${i.message}`).join("; ")}`
+    );
+  }
+  return { frontmatter: result.data, body: parsed.content };
+}
+function identityFromManifest(manifest) {
+  return defineIdentity(manifest.frontmatter);
+}
+
+export { identityFromManifest, parseIdentityManifest };
+//# sourceMappingURL=index.mjs.map
+//# sourceMappingURL=index.mjs.map

package/dist/manifest/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/manifest/index.ts"],"names":[],"mappings":";;;;;;;;AA8BO,SAAS,sBAAsB,MAAA,EAAkC;AACtE,EAAA,MAAM,MAAA,GAAS,OAAO,MAAM,CAAA;AAC5B,EAAA,IAAI,OAAO,IAAA,CAAK,MAAA,CAAO,IAAI,CAAA,CAAE,WAAW,CAAA,EAAG;AACzC,IAAA,MAAM,IAAI,MAAM,qDAAqD,CAAA;AAAA,EACvE;AACA,EAAA,MAAM,MAAA,GAAS,yBAAA,CAA0B,SAAA,CAAU,MAAA,CAAO,IAAI,CAAA;AAC9D,EAAA,IAAI,CAAC,OAAO,OAAA,EAAS;AACnB,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,CAAA,kDAAA,EAAgD,OAAO,KAAA,CAAM,MAAA,CAC1D,IAAI,CAAC,CAAA,KAAM,GAAG,CAAA,CAAE,IAAA,CAAK,KAAK,GAAG,CAAC,KAAK,CAAA,CAAE,OAAO,EAAE,CAAA,CAC9C,IAAA,CAAK,IAAI,CAAC,CAAA;AAAA,KACf;AAAA,EACF;AACA,EAAA,OAAO,EAAE,WAAA,EAAa,MAAA,CAAO,IAAA,EAAM,IAAA,EAAM,OAAO,OAAA,EAAQ;AAC1D;AAEO,SAAS,qBAAqB,QAAA,EAA4C;AAK/E,EAAA,OAAO,cAAA,CAAe,SAAS,WAA4C,CAAA;AAC7E","file":"index.mjs","sourcesContent":["/**\n * AIP-23 IDENTITY.md sidecar parser + manifest-to-handle constructor.\n *\n * Mirror of `@agentproto/tool/manifest` and `@agentproto/driver/manifest`:\n * the .md provides metadata; the TS module supplies any spec-specific\n * runtime bits (schemas, execute bodies, …) that can't live in\n * frontmatter. Both inputs end up in `defineIdentity` so the cross-AIP\n * invariants run uniformly.\n *\n *\n * The frontmatter zod schema below was generated from\n * `resources/aip-23/draft/IDENTITY.schema.json` via json-schema-to-zod.\n * Re-run scaffold-aip to refresh after spec changes (or hand-tune\n * any constraint the converter doesn't capture cleanly).\n */\n\nimport matter from \"gray-matter\"\nimport { identityFrontmatterSchema, type IdentityFrontmatter } from \"../schema.js\"\nimport { defineIdentity } from \"../define-identity.js\"\nimport type { IdentityDefinition, IdentityHandle } from \"../types.js\"\n\n// Re-export so consumers can import the schema + inferred type either\n// from \"@@agentproto/identity/manifest\" or directly from \"@@agentproto/identity/schema\".\nexport { identityFrontmatterSchema, type IdentityFrontmatter }\n\nexport interface IdentityManifest {\n  frontmatter: IdentityFrontmatter\n  body: string\n}\n\nexport function parseIdentityManifest(source: string): IdentityManifest {\n  const parsed = matter(source)\n  if (Object.keys(parsed.data).length === 0) {\n    throw new Error(\"parseIdentityManifest: missing or empty frontmatter\")\n  }\n  const result = identityFrontmatterSchema.safeParse(parsed.data)\n  if (!result.success) {\n    throw new Error(\n      `parseIdentityManifest: invalid frontmatter — ${result.error.issues\n        .map((i) => `${i.path.join(\".\")}: ${i.message}`)\n        .join(\"; \")}`,\n    )\n  }\n  return { frontmatter: result.data, body: parsed.content }\n}\n\nexport function identityFromManifest(manifest: IdentityManifest): IdentityHandle {\n  // The zod-validated frontmatter is structurally compatible with\n  // IdentityDefinition; the cast pins the typing once the manifest\n  // schema and the TS interface diverge (e.g. handle has frozen fields\n  // a literal config doesn't carry yet).\n  return defineIdentity(manifest.frontmatter as unknown as IdentityDefinition)\n}\n"]}

package/dist/types-CoPDmRyr.d.ts

@@ -0,0 +1,473 @@
+/**
+ * AIP-23 IdentityDefinition + IdentityHandle.
+ *
+ * `IdentityDefinition` was generated from
+ * `resources/aip-23/draft/IDENTITY.schema.json` via json-schema-to-typescript.
+ * `IdentityHandle` is the readonly view of the same shape; tighten it
+ * by hand for fields that get defaults applied in build().
+ */
+/**
+ * Validates the YAML frontmatter portion of an AIP-23 IDENTITY.md (workspace root or per-context view). The single doctype 'identity.workspace/v1' is used in both modes; the host distinguishes by checking whether `extends` is set. Per-layer-kind schemas are delegated to AIP-18 (COLLECTION.md / ITEM.md). Items in any layer collection MUST carry a `confidence` field in 0..1; that requirement is enforced at item-load time by the host, not by this schema (which validates the workspace manifest only).
+ */
+type IdentityDefinition = {
+    [k: string]: unknown;
+} & {
+    /**
+     * Discriminator for the AIP-23 workspace doctype.
+     */
+    schema: "identity.workspace/v1";
+    /**
+     * Stable kebab-case identifier for the identity or view.
+     */
+    name: string;
+    /**
+     * Human-readable title of the identity.
+     */
+    title: string;
+    /**
+     * One-paragraph statement of purpose: what this identity captures, who or what it is about.
+     */
+    description: string;
+    /**
+     * Semantic version of the WORKSPACE shape. Bump on collection / artifact-tier / binding / lint / defaults changes. Independent of any individual layer item's version (AIP-18-side).
+     */
+    version: string;
+    /**
+     * OPTIONAL — relative path to a parent IDENTITY.md. Presence makes the manifest a VIEW; absence makes it a WORKSPACE ROOT. Recursive composition; maximum chain depth is 8.
+     */
+    extends?: string;
+    /**
+     * OPTIONAL — list of consumers this VIEW adapts the identity for. Hosts MUST refuse the view if any binding does not resolve. Not inherited; views declare their own scope.
+     */
+    appliesTo?: string[];
+    /**
+     * OPTIONAL — AIP-9 operator the identity is *about* or activates against. The host loads this operator when the identity is opened.
+     */
+    executor?: string;
+    /**
+     * OPTIONAL — AIP-7 policy or audit binding. May be a path to an AIP-7 policy file or a ws:// ref. Identity-level approvals (layer mutations, confidence elevation, persona binding) flow through this ref.
+     */
+    governance?: string;
+    /**
+     * OPTIONAL — AIP-20 work tracker the identity participates in (an operator's task queue, a company's program plan).
+     */
+    work?: string;
+    /**
+     * OPTIONAL — AIP-10 KNOWLEDGE.md ref. The identity's narrative wiki, dossier, exemplars.
+     */
+    knowledge?: string;
+    /**
+     * Layer collections enabled by this identity. Each entry is one AIP-18 collection describing ONE layer kind. Three forms supported: inline (full COLLECTION.md frontmatter), file ref, or registry import. Merge-by-effective-name (alias if set, otherwise the collection's name) across the extends chain.
+     */
+    collections?: CollectionEntry[];
+    /**
+     * Layer behaviour configuration. Confidence floor, versioning posture, temporal-entry contract.
+     */
+    layers?: {
+        /**
+         * OPTIONAL — minimum confidence (0..1) the workspace will store. New items below the floor are refused with identity_confidence_below_floor (HARD). Default is 0.0 (no floor). Workspaces with strict identity standards SHOULD set this to 0.5 or higher.
+         */
+        defaultConfidence?: number;
+        /**
+         * Whether layer items carry an incrementing version on update. ONE-WAY SWITCH: once 'enabled' at any ancestor, descendants MUST NOT set 'disabled'. Refusal: identity_versioning_disable (HARD).
+         */
+        versioning?: "enabled" | "disabled";
+        /**
+         * Temporal-layer behaviour at the workspace level.
+         */
+        temporal?: {
+            /**
+             * OPTIONAL — whether temporal-entry companion items are supported for layers marked temporal: true on their own collection.
+             */
+            enabled?: boolean;
+            /**
+             * OPTIONAL — field name on temporal-entry items carrying expiry. Hosts walk this field on read to exclude expired entries.
+             */
+            field?: string;
+            /**
+             * Controlled vocabulary for temporal-entry.source. APPEND-ONLY across ancestors: descendants MAY add new values but MUST NOT remove existing ones.
+             */
+            sourceVocabulary?: string[];
+        };
+    };
+    /**
+     * Compression artifact policy. AIP-23's first distinctive contribution.
+     */
+    artifacts?: {
+        /**
+         * Whether the host generates compression artifacts for layer items.
+         */
+        enabled?: boolean;
+        /**
+         * Compression tiers. Merge-by-id vs parent; child tier with same id overrides parent's. Monotonicity (strictly increasing maxTokens) is re-validated after merge.
+         */
+        tiers?: {
+            /**
+             * Stable kebab-case tier id. Conventional values: short, medium, full. Merge key vs parent.
+             */
+            id: string;
+            /**
+             * Target maximum tokens for this tier's artifact. Tiers MUST be MONOTONIC: each tier's maxTokens MUST be strictly greater than the previous tier's. The host re-validates monotonicity after merge.
+             */
+            maxTokens: number;
+            /**
+             * OPTIONAL — compression algorithm id. Conventional values: aaak, bullet-list, markdown, or a host-defined string.
+             */
+            strategy?: string;
+        }[];
+        /**
+         * Locales for which artifacts are generated. ISO 639-1 (e.g. 'en') with optional ISO 3166-1 region (e.g. 'en-US'). When non-empty, the host produces one artifact per (layer, tier, locale) triple.
+         */
+        locales?: string[];
+        /**
+         * When the host regenerates artifacts. on-write = immediately after layer item mutation (correctness); scheduled = host-defined cadence (cheap, eventually consistent); manual = no auto-refresh.
+         */
+        refreshPolicy?: "on-write" | "scheduled" | "manual";
+    };
+    /**
+     * Junction policy. Which bearer entity kinds may bind layer items as their identity, and how exclusively.
+     */
+    binding?: {
+        /**
+         * Bearer entity kinds allowed to bind layer items. Workspaces narrow to fit their domain (companion-style: [user, persona]; operator-fleet style: [operator, company]). Cross-references: operator → AIP-9, company → AIP-22, persona → AIP-25, skill → AIP-3, user → host-defined.
+         */
+        allowedEntities?: ("operator" | "company" | "persona" | "user" | "skill")[];
+        /**
+         * Binding exclusivity rule. ONE-WAY SWITCH on relaxation: once 'per-entity-and-layer' (or stricter, when added) at any ancestor, descendants MUST NOT replace with a more permissive value. Refusal: identity_binding_loosen (HARD). Currently only 'per-entity-and-layer' is defined; future values may add stricter forms.
+         */
+        exclusivity?: "per-entity-and-layer";
+        /**
+         * Whether the host verifies the bearer entity exists before allowing the binding. ONE-WAY SWITCH on relaxation: once 'true' at any ancestor, descendants MUST NOT set false. Refusal: identity_binding_verify_relax (HARD). Setting false is permitted for ephemeral / sandbox deployments but SHOULD never be used in production.
+         */
+        verifyExistence?: boolean;
+    };
+    /**
+     * Workspace-spanning lints. Merge-by-id vs parent.
+     */
+    lints?: {
+        /**
+         * Stable kebab-case lint id. Merge key when composing with extends parent.
+         */
+        id: string;
+        /**
+         * Workspace-spanning lint algorithm. AIP-18 per-collection lints (missing-owner, overdue, required-field, etc.) live on COLLECTION.md and are NOT redeclared here. 'custom' delegates to a host-defined check identified by `id`.
+         */
+        kind: "orphan-layer" | "low-confidence-pinned" | "stale-temporal" | "unbound-layer" | "missing-required-layer" | "custom";
+        /**
+         * Lint severity. Children may soften; governance policies MAY forbid softening below `error`.
+         */
+        severity: "error" | "warn" | "info";
+        /**
+         * Kind-specific parameters. e.g. { layers: [soul, personality] } for missing-required-layer; { days: 30 } for stale-temporal; { threshold: 0.5 } for low-confidence-pinned.
+         */
+        params?: {
+            [k: string]: unknown;
+        };
+    }[];
+    /**
+     * Default approval and audit posture.
+     */
+    defaults?: {
+        /**
+         * Approval class for layer mutations. 'auto' = no gate; 'always' = every mutation requires approval; 'on-mutate' = approval on field-level mutations; 'policy:<ref>' = delegate to an AIP-7 policy.
+         */
+        approvalClass?: string;
+        /**
+         * Whether layer mutations are audited. ONE-WAY SWITCH: once true at any ancestor, descendants MUST NOT set false. Refusal: identity_audit_downgrade (HARD).
+         */
+        auditMutations?: boolean;
+    };
+    /**
+     * Display hints for UIs that render the identity. Runtime-agnostic.
+     */
+    display?: {
+        /**
+         * OPTIONAL — id of the layer or item to use as the identity landing page (e.g. SOUL-acme-founder).
+         */
+        homePage?: string;
+        /**
+         * Default grouping for list views. 'layer' = one section per layer kind; 'entity' = one section per bearer entity.
+         */
+        defaultGrouping?: "layer" | "entity";
+    };
+    /**
+     * Vendor-specific extensions, namespaced under <vendor>. Deep-merged across the extends chain. MUST NOT change the meaning of any spec field.
+     */
+    metadata?: {
+        [k: string]: unknown;
+    };
+};
+/**
+ * One layer-collection declaration. Either an inline AIP-18 collection schema, or a ref (path or ws:// URI) optionally aliased and version-pinned.
+ */
+type CollectionEntry = CollectionInline | CollectionRef;
+/**
+ * Full AIP-18 collection.schema/v1 frontmatter, parsed in-place. The host registers the layer collection directly via AIP-18's defineCollection without loading a separate file.
+ */
+type Schema = {
+    [k: string]: unknown;
+} & {
+    /**
+     * Discriminator for a collection definition.
+     */
+    schema: "collection.schema/v1";
+    /**
+     * Stable kebab-case identifier. Items reference this name via their `collection:` field.
+     */
+    name: string;
+    /**
+     * Human-readable collection title.
+     */
+    title: string;
+    /**
+     * One-paragraph statement of purpose: what this collection captures and when an item belongs here vs another collection.
+     */
+    description: string;
+    /**
+     * Semantic version of the SHAPE. Bump on field/status/lint changes. Independent of the collection's content.
+     */
+    version: string;
+    /**
+     * OPTIONAL — relative path to a parent COLLECTION.md. Recursive composition; maximum chain depth is 8.
+     */
+    extends?: string;
+    /**
+     * OPTIONAL — list of consumers this collection adapts for. Hosts MUST refuse if any binding does not resolve. Not inherited; each child declares its own scope.
+     */
+    appliesTo?: string[];
+    /**
+     * Item field schema. Merge-by-name vs parent: a child entry with the same `name` replaces the parent's (subject to type-drift refusal); new names are appended.
+     */
+    fields?: FieldDef[];
+    /**
+     * Status state machine. Merge-by-id vs parent. Children may add statuses, mark inherited statuses terminal, or narrow `transitionsTo`; they MUST NOT remove an inherited status.
+     */
+    statuses?: {
+        /**
+         * Stable kebab-case status id. Merge key when composing.
+         */
+        id: string;
+        /**
+         * Human-readable status label.
+         */
+        label: string;
+        /**
+         * Whether items in this status are considered closed. Lints like `overdue` typically skip terminal statuses.
+         */
+        terminal?: boolean;
+        /**
+         * OPTIONAL — allowed next status ids. If omitted, all transitions are permitted.
+         */
+        transitionsTo?: string[];
+    }[];
+    /**
+     * OPTIONAL — default status assigned to new items. MUST refer to a status declared (locally or inherited) by this collection.
+     */
+    initialStatus?: string;
+    /**
+     * Ownership rules. Each leaf field overrides independently across the chain.
+     */
+    ownership?: {
+        /**
+         * How many owners an item may carry. `none` = no ownership concept; `single` = one owner; `multiple` = list of owners.
+         */
+        cardinality?: "none" | "single" | "multiple";
+        /**
+         * Item field name that holds the owner ref.
+         */
+        role?: string;
+        /**
+         * Whether items MUST declare an owner.
+         */
+        required?: boolean;
+    };
+    /**
+     * Deadline rules. Each leaf field overrides independently.
+     */
+    deadline?: {
+        /**
+         * Deadline shape. `none` = no deadline concept; `target-date` = single date; `window` = start+end; `recurrent` = repeating.
+         */
+        kind?: "none" | "target-date" | "window" | "recurrent";
+        /**
+         * Whether items MUST declare a deadline value.
+         */
+        required?: boolean;
+        /**
+         * Item field name that holds the deadline value.
+         */
+        fieldName?: string;
+    };
+    /**
+     * Lint rules. Merge-by-id vs parent.
+     */
+    lints?: {
+        /**
+         * Stable kebab-case lint id. Merge key when composing.
+         */
+        id: string;
+        /**
+         * Lint algorithm. `custom` delegates to a host-defined check identified by `id`.
+         */
+        kind: "missing-owner" | "overdue" | "orphan" | "broken-ref" | "stale" | "required-field" | "custom";
+        /**
+         * Always '*' — items belong to one collection, so the lint always applies to all items of this collection. The field is preserved for symmetry with AIP-10's lint shape.
+         */
+        appliesTo: "*";
+        /**
+         * Lint severity. Children may soften; governance policies MAY forbid softening below `error`.
+         */
+        severity: "error" | "warn" | "info";
+        /**
+         * Kind-specific parameters. e.g. { days: 30 } for `stale`; { field: 'severity' } for `required-field`.
+         */
+        params?: {
+            [k: string]: unknown;
+        };
+    }[];
+    /**
+     * Item identity & filing rules.
+     */
+    identity?: {
+        /**
+         * How to derive an item's slug. Either a field name (e.g. 'title'), the literal 'random', the literal 'sequence', or 'hash:<comma-separated-source-fields>' (e.g. 'hash:title,createdAt').
+         */
+        slugSource?: string;
+        /**
+         * Template for where items are filed on disk. Tokens: {collection}, {slug}, {year}, {month}. e.g. 'items/{collection}/{slug}.md'.
+         */
+        filingPath?: string;
+    };
+    /**
+     * Vendor-specific extensions, namespaced under <vendor>. Deep-merged across the extends chain.
+     */
+    metadata?: {
+        [k: string]: unknown;
+    };
+};
+/**
+ * Inline layer-collection declaration. Full AIP-18 schema embedded; hosts MUST validate it against the AIP-18 COLLECTION schema before registration.
+ */
+interface CollectionInline {
+    inline: Schema;
+}
+/**
+ * Definition of one field on a collection's item schema. Merge-by-name. Type drift between parent and child is HARD refused.
+ */
+interface FieldDef {
+    /**
+     * kebab-or-camel-case field name. Merge key when composing.
+     */
+    name: string;
+    /**
+     * Field type. Drift across composition (parent string -> child number) is HARD refused (`collection_field_type_drift`).
+     */
+    type: "string" | "number" | "boolean" | "enum" | "date" | "datetime" | "text" | "url" | "ref" | "array";
+    /**
+     * Whether items MUST declare this field. A child may narrow false -> true; loosening true -> false is permitted (it removes a constraint without invalidating instances).
+     */
+    required?: boolean;
+    /**
+     * Prose describing what the field captures.
+     */
+    description?: string;
+    /**
+     * Required when type=enum. Children may narrow to a subset; widening to a superset is permitted (it does not invalidate instances).
+     */
+    enum?: string[];
+    items?: FieldDef1;
+    /**
+     * Required when type=ref. The target collection's `name`. Hosts validate that ref values point at items of this collection.
+     */
+    refKind?: string;
+    /**
+     * OPTIONAL regex constraint. Only valid when type=string.
+     */
+    pattern?: string;
+    /**
+     * OPTIONAL minimum. For type=number: minimum value. For type=array: minimum length.
+     */
+    min?: number;
+    /**
+     * OPTIONAL maximum. For type=number: maximum value. For type=array: maximum length.
+     */
+    max?: number;
+    /**
+     * OPTIONAL named format. Common values: email, uri, semver, uuid, slug. Only valid when type=string. Hosts MAY interpret unknown formats as advisory.
+     */
+    format?: string;
+    /**
+     * OPTIONAL deprecation flag. A child may set false to mark an inherited field deprecated; the host preserves the field in the resolved schema (so existing items still validate) but flags new uses via lint. Setting enabled:false on a field a child does not inherit is invalid.
+     */
+    enabled?: boolean;
+}
+/**
+ * Required when type=array. Recursive shape — describes the inner item type.
+ */
+interface FieldDef1 {
+    /**
+     * kebab-or-camel-case field name. Merge key when composing.
+     */
+    name: string;
+    /**
+     * Field type. Drift across composition (parent string -> child number) is HARD refused (`collection_field_type_drift`).
+     */
+    type: "string" | "number" | "boolean" | "enum" | "date" | "datetime" | "text" | "url" | "ref" | "array";
+    /**
+     * Whether items MUST declare this field. A child may narrow false -> true; loosening true -> false is permitted (it removes a constraint without invalidating instances).
+     */
+    required?: boolean;
+    /**
+     * Prose describing what the field captures.
+     */
+    description?: string;
+    /**
+     * Required when type=enum. Children may narrow to a subset; widening to a superset is permitted (it does not invalidate instances).
+     */
+    enum?: string[];
+    items?: FieldDef1;
+    /**
+     * Required when type=ref. The target collection's `name`. Hosts validate that ref values point at items of this collection.
+     */
+    refKind?: string;
+    /**
+     * OPTIONAL regex constraint. Only valid when type=string.
+     */
+    pattern?: string;
+    /**
+     * OPTIONAL minimum. For type=number: minimum value. For type=array: minimum length.
+     */
+    min?: number;
+    /**
+     * OPTIONAL maximum. For type=number: maximum value. For type=array: maximum length.
+     */
+    max?: number;
+    /**
+     * OPTIONAL named format. Common values: email, uri, semver, uuid, slug. Only valid when type=string. Hosts MAY interpret unknown formats as advisory.
+     */
+    format?: string;
+    /**
+     * OPTIONAL deprecation flag. A child may set false to mark an inherited field deprecated; the host preserves the field in the resolved schema (so existing items still validate) but flags new uses via lint. Setting enabled:false on a field a child does not inherit is invalid.
+     */
+    enabled?: boolean;
+}
+/**
+ * Layer-collection ref declaration. Either a file path (./.. /COLLECTION.md) or a registry URI (ws://collections/<slug>).
+ */
+interface CollectionRef {
+    /**
+     * Either a relative path to a COLLECTION.md (file ref) or a ws://collections/<slug> URI (registry import). The host loads the referenced collection via AIP-18 and registers it under its name (or the alias, if set).
+     */
+    ref: string;
+    /**
+     * OPTIONAL — workspace-local name to expose the layer collection under. Two collections resolving to the same effective name (alias or upstream) is a HARD failure: identity_collection_alias_conflict.
+     */
+    alias?: string;
+    /**
+     * OPTIONAL — semver range (e.g. "1.x", "^1.2", "1.2.0"). When set, schema bumps outside the range fail with collection_item_schema_pinned_drift (HARD, AIP-18 vocabulary) at item load time.
+     */
+    version?: string;
+}
+type IdentityHandle = Readonly<IdentityDefinition>;
+
+export type { IdentityDefinition as I, IdentityHandle as a };

package/package.json

@@ -0,0 +1,68 @@
+{
+  "name": "@agentproto/identity",
+  "version": "0.1.0-alpha.0",
+  "description": "@agentproto/identity — AIP-23 IDENTITY.md reference implementation. A workspace AIP that defines layered, composable agent identity — typed layers as AIP-18 collections, confidence-scored items, optional temporal entries, and compression-artifact tiers — owning only the workspace root manifest, layer registry, compression policy, junction rules, and cross-AIP composition.",
+  "keywords": [
+    "agentproto",
+    "aip-23",
+    "identity",
+    "defineIdentity",
+    "open-standard",
+    "agentic"
+  ],
+  "homepage": "https://agentproto.sh/docs/aip-23",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/agentproto/ts",
+    "directory": "packages/identity"
+  },
+  "bugs": {
+    "url": "https://github.com/agentproto/ts/issues"
+  },
+  "license": "MIT",
+  "type": "module",
+  "main": "dist/index.mjs",
+  "module": "dist/index.mjs",
+  "types": "dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.mjs",
+      "default": "./dist/index.mjs"
+    },
+    "./manifest": {
+      "types": "./dist/manifest/index.d.ts",
+      "import": "./dist/manifest/index.mjs",
+      "default": "./dist/manifest/index.mjs"
+    },
+    "./package.json": "./package.json"
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "dependencies": {
+    "gray-matter": "^4.0.3",
+    "zod": "^4.4.3",
+    "@agentproto/define-doctype": "0.1.0"
+  },
+  "devDependencies": {
+    "@types/node": "^25.6.2",
+    "tsup": "^8.5.1",
+    "typescript": "^5.9.3",
+    "vitest": "^3.2.4",
+    "@agentproto/tooling": "0.1.0-alpha.0"
+  },
+  "scripts": {
+    "dev": "tsup --watch",
+    "build": "tsup",
+    "clean": "rm -rf dist",
+    "check-types": "tsc --noEmit",
+    "test": "vitest run --passWithNoTests",
+    "test:watch": "vitest"
+  }
+}