@indexnetwork/protocol 6.12.1-rc.404.1 → 6.14.0-rc.406.1

package/dist/opportunity/outcome/outcome.types.d.ts

@@ -108,4 +108,3 @@ export interface JoinOutcomeHypothesesInput {
     /** Minimum qualified sides. Defaults to the module constant. */
     minComparedSides?: number;
 }
-//# sourceMappingURL=outcome.types.d.ts.map

package/dist/opportunity/outcome/outcome.types.js

@@ -24,4 +24,3 @@
  * questions, ranking, intent, premise, memory, newborn-stamp, or push writes.
  */
 export {};
-//# sourceMappingURL=outcome.types.js.map

package/dist/opportunity/ports/index.d.ts

@@ -0,0 +1,5 @@
+/**
+ * opportunity/ports — injected dependency contracts for the opportunities capability.
+ * IND-551: canonical port definitions.
+ */
+export type { OpportunityToolDeps } from "./opportunity.tools.port.js";

package/dist/opportunity/ports/index.js

@@ -0,0 +1 @@
+export {};

package/dist/opportunity/ports/opportunity.tools.port.d.ts

@@ -0,0 +1,5 @@
+import type { ToolRegistryCompositionDeps } from "../../shared/agent/tool.helpers.js";
+/** Host capabilities consumed by opportunity discovery, delivery, and presentation tools. */
+export type OpportunityToolDeps = Pick<ToolRegistryCompositionDeps, "database" | "userDb" | "systemDb" | "cache" | "chatSummary" | "opportunityDiscovery" | "opportunityPresentation" | "questionGenerator" | "questionerEnqueue" | "findPendingQuestions" | "negotiationSummary" | "negotiationDatabase" | "deliveryLedger" | "discoveryRuns" | "discoveryRunQueue" | "mintConnectLink" | "frontendUrl" | "stampNewbornOpportunities" | "reportToolError"> & {
+    graphs: Pick<ToolRegistryCompositionDeps["graphs"], "index" | "networkMembership" | "opportunity">;
+};

package/dist/opportunity/ports/opportunity.tools.port.js

@@ -0,0 +1 @@
+export {};

package/dist/opportunity/public/index.d.ts

@@ -0,0 +1,58 @@
+/**
+ * opportunity/public — curated public surface of the opportunities capability.
+ *
+ * Re-exports stable contracts from domain, application, and ports.
+ * Cross-capability consumers MUST import through this surface or through
+ * capabilities/opportunities.facade.ts (which re-exports from here).
+ *
+ * IND-551: canonical public surface for the opportunities capability.
+ */
+export { OpportunityGraphState, resolveInitialStatus, } from "../domain/opportunity.state.js";
+export type { SourceProfileData, IndexedIntent, TargetNetwork, CandidateMatch, EvaluatedCandidate, EvaluatedOpportunityActor, EvaluatedOpportunity, OpportunityPersistenceOutcome, OpportunityTrigger, OpportunityGraphOptions, } from "../domain/opportunity.state.js";
+export type { DiscoverDebugStep, DiscoveryResultContract, } from "../domain/opportunity.discovery.contracts.js";
+export { MINIMAL_MAIN_TEXT_MAX_CHARS, PRIMARY_ACTION_LABEL_INTRODUCER, PRIMARY_ACTION_LABEL_DEFAULT, SECONDARY_ACTION_LABEL, getPrimaryActionLabel, } from "../domain/opportunity.labels.js";
+export { deriveRolesFromCorpus, validateOpportunityActors, canUserSeeOpportunity, isActionableForViewer, classifyOpportunity, selectByComposition, deduplicateByPerson, selectDigestCandidates, FEED_SOFT_TARGETS, DIGEST_REDELIVERY_COOLDOWN_DAYS, } from "../domain/opportunity.utils.js";
+export type { OpportunityActorRole, DerivedRoles, FeedCategory, DigestDeliveredRow, } from "../domain/opportunity.utils.js";
+export { normalizeOpportunityActorIntent, resolveOpportunityActorIntent, normalizeOpportunityActors, normalizeCreateOpportunityActorIntents, } from "../domain/opportunity.actor.js";
+export { buildCandidateEvidence, mergeOpportunityEvidence, withCandidateEvidence, withMatchedStrategies, renderOpportunityEvidenceForPrompt, } from "../domain/opportunity.evidence.js";
+export type { EvidenceCandidateInput } from "../domain/opportunity.evidence.js";
+export { hasUnsupportedOpportunityClaim, isUnsupportedOpportunityClaimSentence, stripUnsupportedOpportunityClaims, } from "../domain/opportunity.claim-safety.js";
+export { presentOpportunity, stripUuids, truncateAtBoundary, viewerCentricCardSummary, narratorRemarkFromReasoning, stripIntroducerMentions, } from "../domain/opportunity.presentation.js";
+export type { OpportunityPresentation, UserInfo, } from "../domain/opportunity.presentation.js";
+export { safeFallbackSummary, SAFE_FALLBACK_MAX_CHARS, DEFAULT_EMPTY_FALLBACK_TEXT, } from "../domain/opportunity.safe-presentation.js";
+export { OPPORTUNITY_PRESENTATION_CACHE_VERSION, buildHomeCardPresentationCacheKey, buildHomeCategoryPresentationCacheKey, buildDeliveryCardPresentationCacheKey, buildApiChatCardPresentationCacheKey, } from "../domain/opportunity.presentation-cache.js";
+export { buildDiscoverySummary, toDiscoveryNegotiation, } from "../domain/negotiation-summary.builder.js";
+export type { NegotiationResolution } from "../domain/negotiation-summary.builder.js";
+export type { PoolCandidate, DiscriminatorMiningInput, MinedDiscriminator, ScoredDiscriminator, DiscriminatorShadowResult, } from "../discriminator/discriminator.types.js";
+export { poolQuestionsMiningMode, poolQuestionsMode, poolQuestionsPushMode, poolQuestionsStampNewborn, POOL_DISCRIMINATOR_MIN_POOL_SIZE, POOL_DISCRIMINATOR_MAX_CANDIDATES, POOL_DISCRIMINATOR_MAX_PUBLIC_CONTEXT_CHARS, POOL_QUESTION_MIN_VOI, POOL_QUESTION_MAX_PENDING_PER_INTENT, poolQuestionsRanking, POOL_RERUN_DEBOUNCE_MS, poolQuestionsVisitTrigger, POOL_VISIT_MINING_DEBOUNCE_MS, } from "../discriminator/discriminator.env.js";
+export { buildPoolAdjustment, planPoolAdjustments, mergePoolAdjustment, } from "../discriminator/discriminator.adjustments.js";
+export type { PoolAdjustment, PoolAdjustmentSignal, } from "../discriminator/discriminator.adjustments.js";
+export { synthesizePoolQuestion, selectQuestionDiscriminators, toQuestionDiscriminator, BOTH_MATTER_LABEL, } from "../discriminator/discriminator.question.js";
+export { poolQuestionCycleKey, buildPoolQuestionPushMessage, } from "../discriminator/discriminator.push.js";
+export type { RawEvidenceTurn, RawEvidenceOutcome, RawEvidenceOwnerAnswer, RawEvidenceSegment, } from "../negotiation-evidence/negotiation-evidence.types.js";
+export { negotiationEvidenceQuestionsMode, NEGOTIATION_EVIDENCE_MAX_OPPORTUNITIES, } from "../negotiation-evidence/negotiation-evidence.env.js";
+export type { OutcomeLabel, OutcomeExample, OutcomeShadowResult, } from "../outcome/outcome.types.js";
+export { isOutcomeQuestionsActivated, OUTCOME_MIN_INDEPENDENT_EXAMPLES, OUTCOME_MAX_CANDIDATES, OUTCOME_MAX_PUBLIC_CONTEXT_CHARS, } from "../outcome/outcome.env.js";
+export { computeFeedHealth } from "../feed/feed.health.js";
+export type { FeedHealthInput } from "../feed/feed.health.js";
+export { OpportunityGraphFactory } from "../application/opportunity.graph.js";
+export type { StampNewbornOpportunitiesFn, StampNewbornOpportunitiesInput, } from "../application/opportunity.newborn-stamping.js";
+export { OpportunityEvaluator } from "../application/opportunity.evaluator.js";
+export type { EvaluatorInput } from "../application/opportunity.evaluator.js";
+export { OpportunityPresenter, gatherPresenterContext, } from "../application/opportunity.presenter.js";
+export type { PresenterDatabase } from "../application/opportunity.presenter.js";
+export { persistOpportunities } from "../application/opportunity.persist.js";
+export { selectContactsForDiscovery, shouldRunIntroducerDiscovery, runIntroducerDiscovery, MAX_CONTACTS_PER_CYCLE, MAX_CANDIDATES_PER_CONTACT, INTRODUCER_DISCOVERY_SOURCE, } from "../application/opportunity.introducer.js";
+export type { IntroducerDiscoveryDatabase, IntroducerDiscoveryQueue, ContactWithIntents, } from "../application/opportunity.introducer.js";
+export { getOrCreateDeliveryCardBatch } from "../application/delivery-card.cache.js";
+export { buildPrioritizedNegotiationIntents } from "../application/opportunity.existing-negotiation.js";
+export { PoolDiscriminatorMiner } from "../discriminator/discriminator.miner.js";
+export { PoolDiscriminatorAssigner } from "../discriminator/discriminator.assigner.js";
+export type { PoolDiscriminatorAssignmentInput, PoolDiscriminatorAssignedAxis, } from "../discriminator/discriminator.assigner.js";
+export { runPoolDiscriminatorShadow } from "../discriminator/discriminator.shadow.js";
+export { NegotiationEvidenceMiner } from "../negotiation-evidence/negotiation-evidence.miner.js";
+export { runNegotiationEvidenceShadow } from "../negotiation-evidence/negotiation-evidence.shadow.js";
+export { runOutcomeShadow } from "../outcome/outcome.shadow.js";
+export { HomeGraphFactory } from "../feed/feed.graph.js";
+export { createOpportunityTools } from "../application/opportunity.tools.js";
+export type { OpportunityToolDeps } from "../ports/index.js";

package/dist/opportunity/public/index.js

@@ -0,0 +1,51 @@
+/**
+ * opportunity/public — curated public surface of the opportunities capability.
+ *
+ * Re-exports stable contracts from domain, application, and ports.
+ * Cross-capability consumers MUST import through this surface or through
+ * capabilities/opportunities.facade.ts (which re-exports from here).
+ *
+ * IND-551: canonical public surface for the opportunities capability.
+ */
+// ── Domain exports ────────────────────────────────────────────────────────────
+export { 
+// state
+OpportunityGraphState, resolveInitialStatus, } from "../domain/opportunity.state.js";
+export { MINIMAL_MAIN_TEXT_MAX_CHARS, PRIMARY_ACTION_LABEL_INTRODUCER, PRIMARY_ACTION_LABEL_DEFAULT, SECONDARY_ACTION_LABEL, getPrimaryActionLabel, } from "../domain/opportunity.labels.js";
+export { deriveRolesFromCorpus, validateOpportunityActors, canUserSeeOpportunity, isActionableForViewer, classifyOpportunity, selectByComposition, deduplicateByPerson, selectDigestCandidates, FEED_SOFT_TARGETS, DIGEST_REDELIVERY_COOLDOWN_DAYS, } from "../domain/opportunity.utils.js";
+export { normalizeOpportunityActorIntent, resolveOpportunityActorIntent, normalizeOpportunityActors, normalizeCreateOpportunityActorIntents, } from "../domain/opportunity.actor.js";
+export { buildCandidateEvidence, mergeOpportunityEvidence, withCandidateEvidence, withMatchedStrategies, renderOpportunityEvidenceForPrompt, } from "../domain/opportunity.evidence.js";
+export { hasUnsupportedOpportunityClaim, isUnsupportedOpportunityClaimSentence, stripUnsupportedOpportunityClaims, } from "../domain/opportunity.claim-safety.js";
+export { presentOpportunity, stripUuids, truncateAtBoundary, viewerCentricCardSummary, narratorRemarkFromReasoning, stripIntroducerMentions, } from "../domain/opportunity.presentation.js";
+export { safeFallbackSummary, SAFE_FALLBACK_MAX_CHARS, DEFAULT_EMPTY_FALLBACK_TEXT, } from "../domain/opportunity.safe-presentation.js";
+export { OPPORTUNITY_PRESENTATION_CACHE_VERSION, buildHomeCardPresentationCacheKey, buildHomeCategoryPresentationCacheKey, buildDeliveryCardPresentationCacheKey, buildApiChatCardPresentationCacheKey, } from "../domain/opportunity.presentation-cache.js";
+export { buildDiscoverySummary, toDiscoveryNegotiation, } from "../domain/negotiation-summary.builder.js";
+export { poolQuestionsMiningMode, poolQuestionsMode, poolQuestionsPushMode, poolQuestionsStampNewborn, POOL_DISCRIMINATOR_MIN_POOL_SIZE, POOL_DISCRIMINATOR_MAX_CANDIDATES, POOL_DISCRIMINATOR_MAX_PUBLIC_CONTEXT_CHARS, POOL_QUESTION_MIN_VOI, POOL_QUESTION_MAX_PENDING_PER_INTENT, poolQuestionsRanking, POOL_RERUN_DEBOUNCE_MS, poolQuestionsVisitTrigger, POOL_VISIT_MINING_DEBOUNCE_MS, } from "../discriminator/discriminator.env.js";
+export { buildPoolAdjustment, planPoolAdjustments, mergePoolAdjustment, } from "../discriminator/discriminator.adjustments.js";
+export { synthesizePoolQuestion, selectQuestionDiscriminators, toQuestionDiscriminator, BOTH_MATTER_LABEL, } from "../discriminator/discriminator.question.js";
+export { poolQuestionCycleKey, buildPoolQuestionPushMessage, } from "../discriminator/discriminator.push.js";
+export { negotiationEvidenceQuestionsMode, NEGOTIATION_EVIDENCE_MAX_OPPORTUNITIES, } from "../negotiation-evidence/negotiation-evidence.env.js";
+export { isOutcomeQuestionsActivated, OUTCOME_MIN_INDEPENDENT_EXAMPLES, OUTCOME_MAX_CANDIDATES, OUTCOME_MAX_PUBLIC_CONTEXT_CHARS, } from "../outcome/outcome.env.js";
+// feed domain
+export { computeFeedHealth } from "../feed/feed.health.js";
+// ── Application exports ───────────────────────────────────────────────────────
+export { OpportunityGraphFactory } from "../application/opportunity.graph.js";
+export { OpportunityEvaluator } from "../application/opportunity.evaluator.js";
+export { OpportunityPresenter, gatherPresenterContext, } from "../application/opportunity.presenter.js";
+export { persistOpportunities } from "../application/opportunity.persist.js";
+export { selectContactsForDiscovery, shouldRunIntroducerDiscovery, runIntroducerDiscovery, MAX_CONTACTS_PER_CYCLE, MAX_CANDIDATES_PER_CONTACT, INTRODUCER_DISCOVERY_SOURCE, } from "../application/opportunity.introducer.js";
+export { getOrCreateDeliveryCardBatch } from "../application/delivery-card.cache.js";
+export { buildPrioritizedNegotiationIntents } from "../application/opportunity.existing-negotiation.js";
+// discriminator application
+export { PoolDiscriminatorMiner } from "../discriminator/discriminator.miner.js";
+export { PoolDiscriminatorAssigner } from "../discriminator/discriminator.assigner.js";
+export { runPoolDiscriminatorShadow } from "../discriminator/discriminator.shadow.js";
+// negotiation-evidence application
+export { NegotiationEvidenceMiner } from "../negotiation-evidence/negotiation-evidence.miner.js";
+export { runNegotiationEvidenceShadow } from "../negotiation-evidence/negotiation-evidence.shadow.js";
+// outcome application
+export { runOutcomeShadow } from "../outcome/outcome.shadow.js";
+// feed application
+export { HomeGraphFactory } from "../feed/feed.graph.js";
+// ── Tools ────────────────────────────────────────────────────────────────────
+export { createOpportunityTools } from "../application/opportunity.tools.js";

package/dist/participant-agents/application/agent.tools.d.ts

@@ -0,0 +1,16 @@
+/**
+ * participant-agents/application — agent registration and permission tools.
+ *
+ * Provides createAgentTools: the canonical factory for participant-agent
+ * registration, listing, update, delete, and permission grant/revoke MCP tools.
+ *
+ * Dependencies:
+ * - DefineTool / helpers from shared/agent (unclassified shared infrastructure)
+ * - AgentToolDeps from participant-agents/ports (same capability)
+ *
+ * IND-548: migrated from src/agent/agent.tools.ts.
+ * Legacy path (src/agent/agent.tools.ts) is a thin compatibility shim.
+ */
+import type { DefineTool } from '../../shared/agent/tool.helpers.js';
+import type { AgentToolDeps } from '../ports/index.js';
+export declare function createAgentTools(defineTool: DefineTool, deps: AgentToolDeps): never[] | readonly [any, any, any, any, any, any];

package/dist/participant-agents/application/agent.tools.js

@@ -0,0 +1,313 @@
+/**
+ * participant-agents/application — agent registration and permission tools.
+ *
+ * Provides createAgentTools: the canonical factory for participant-agent
+ * registration, listing, update, delete, and permission grant/revoke MCP tools.
+ *
+ * Dependencies:
+ * - DefineTool / helpers from shared/agent (unclassified shared infrastructure)
+ * - AgentToolDeps from participant-agents/ports (same capability)
+ *
+ * IND-548: migrated from src/agent/agent.tools.ts.
+ * Legacy path (src/agent/agent.tools.ts) is a thin compatibility shim.
+ */
+import { z } from 'zod';
+import { error, success } from '../../shared/agent/tool.helpers.js';
+import { protocolLogger } from '../../shared/observability/protocol.logger.js';
+const logger = protocolLogger('ChatTools:Agent');
+const AGENT_ACTIONS = [
+    'manage:profile',
+    'manage:intents',
+    'manage:networks',
+    'manage:contacts',
+    'manage:opportunities',
+    'manage:negotiations',
+];
+function invalidActionMessage(action) {
+    return `Invalid action: ${action}. Valid actions: ${AGENT_ACTIONS.join(', ')}`;
+}
+function isValidAction(action) {
+    return AGENT_ACTIONS.includes(action);
+}
+function requireAgentDatabase(deps) {
+    if (!deps.agentDatabase) {
+        return null;
+    }
+    return deps.agentDatabase;
+}
+function ensureAgentScopedAccess(context, requestedAgentId) {
+    if (context.agentId && context.agentId !== requestedAgentId) {
+        return 'This agent can only manage its own registration.';
+    }
+    return null;
+}
+function sanitizeAgentForOutput(agent) {
+    return {
+        ...agent,
+        transports: agent.transports,
+    };
+}
+function sanitizeAgentName(name) {
+    const cleanName = name.trim();
+    return cleanName ? cleanName : null;
+}
+function normalizePermissions(permissions) {
+    return [...new Set((permissions ?? []).map((action) => action.trim()).filter(Boolean))];
+}
+export function createAgentTools(defineTool, deps) {
+    const agentDb = requireAgentDatabase(deps);
+    if (!agentDb) {
+        return [];
+    }
+    const registerAgent = defineTool({
+        name: 'register_agent',
+        description: 'Register a new personal agent for the current user. Optionally configure initial permissions. ' +
+            'Use this when connecting an external agent to Index.',
+        querySchema: z.object({
+            name: z.string().min(1).describe('Display name for the agent.'),
+            description: z.string().optional().describe('What the agent does.'),
+            permissions: z.array(z.string()).optional().describe('Optional initial permission actions to grant.'),
+        }),
+        handler: async ({ context, query }) => {
+            if (context.agentId) {
+                return error('Agent registration must be done from a user session (web UI or personal API key), ' +
+                    'not from within an existing agent context. To register a new agent, visit the Index web app.');
+            }
+            try {
+                const name = sanitizeAgentName(query.name);
+                if (!name) {
+                    return error('Agent name is required.');
+                }
+                const permissions = normalizePermissions(query.permissions);
+                for (const permission of permissions) {
+                    if (!isValidAction(permission)) {
+                        return error(invalidActionMessage(permission));
+                    }
+                }
+                const agent = await agentDb.createAgent({
+                    ownerId: context.userId,
+                    name,
+                    description: query.description?.trim() || undefined,
+                    type: 'external',
+                });
+                try {
+                    if (permissions.length > 0) {
+                        await agentDb.grantPermission({
+                            agentId: agent.id,
+                            userId: context.userId,
+                            scope: 'global',
+                            actions: permissions,
+                        });
+                    }
+                }
+                catch (setupError) {
+                    try {
+                        await agentDb.deleteAgent(agent.id);
+                    }
+                    catch {
+                        // Best-effort cleanup to avoid leaving partially registered agents behind.
+                    }
+                    throw setupError;
+                }
+                const fullAgent = await agentDb.getAgentWithRelations(agent.id);
+                return success({
+                    message: `Agent "${agent.name}" registered successfully.`,
+                    agent: sanitizeAgentForOutput(fullAgent ?? ({ ...agent, transports: [], permissions: [] })),
+                });
+            }
+            catch (err) {
+                logger.error('Failed to register agent', { err });
+                return error('Failed to register agent. Please try again.');
+            }
+        },
+    });
+    const listAgents = defineTool({
+        name: 'list_agents',
+        description: 'List all agents the current user owns or has authorized.',
+        querySchema: z.object({}),
+        handler: async ({ context }) => {
+            try {
+                const agents = await agentDb.listAgentsForUser(context.userId);
+                const filteredAgents = context.agentId
+                    ? agents.filter((agent) => agent.id === context.agentId)
+                    : agents;
+                return success({
+                    agents: filteredAgents.map((agent) => sanitizeAgentForOutput(agent)),
+                    count: filteredAgents.length,
+                });
+            }
+            catch (err) {
+                logger.error('Failed to list agents', { err });
+                return error('Failed to list agents. Please try again.');
+            }
+        },
+    });
+    const updateAgent = defineTool({
+        name: 'update_agent',
+        description: 'Update an agent name, description, or status.',
+        querySchema: z.object({
+            agent_id: z.string().min(1).describe('The agent ID to update.'),
+            name: z.string().optional().describe('Updated display name.'),
+            description: z.string().optional().describe('Updated description.'),
+            status: z.enum(['active', 'inactive']).optional().describe('Updated status.'),
+        }),
+        handler: async ({ context, query }) => {
+            const scopeError = ensureAgentScopedAccess(context, query.agent_id);
+            if (scopeError) {
+                return error(scopeError);
+            }
+            try {
+                const agent = await agentDb.getAgent(query.agent_id);
+                if (!agent || agent.ownerId !== context.userId) {
+                    return error('Agent not found');
+                }
+                if (agent.type === 'system') {
+                    return error('System agents cannot be modified');
+                }
+                const updates = {};
+                if (query.name !== undefined) {
+                    const name = query.name.trim();
+                    if (!name) {
+                        return error('Agent name is required');
+                    }
+                    updates.name = name;
+                }
+                if (query.description !== undefined) {
+                    updates.description = query.description.trim() || null;
+                }
+                if (query.status) {
+                    updates.status = query.status;
+                }
+                if (Object.keys(updates).length === 0) {
+                    return error('At least one field is required.');
+                }
+                const updated = await agentDb.updateAgent(query.agent_id, updates);
+                if (!updated) {
+                    return error('Agent not found');
+                }
+                const fullAgent = await agentDb.getAgentWithRelations(query.agent_id);
+                return success({
+                    message: 'Agent updated.',
+                    agent: sanitizeAgentForOutput(fullAgent ?? ({ ...updated, transports: [], permissions: [] })),
+                });
+            }
+            catch (err) {
+                logger.error('Failed to update agent', { err });
+                return error('Failed to update agent. Please try again.');
+            }
+        },
+    });
+    const deleteAgent = defineTool({
+        name: 'delete_agent',
+        description: 'Soft-delete a personal agent and deactivate its transports.',
+        querySchema: z.object({
+            agent_id: z.string().min(1).describe('The agent ID to delete.'),
+        }),
+        handler: async ({ context, query }) => {
+            const scopeError = ensureAgentScopedAccess(context, query.agent_id);
+            if (scopeError) {
+                return error(scopeError);
+            }
+            try {
+                const agent = await agentDb.getAgent(query.agent_id);
+                if (!agent || agent.ownerId !== context.userId) {
+                    return error('Agent not found');
+                }
+                if (agent.type === 'system') {
+                    return error('System agents cannot be deleted');
+                }
+                await agentDb.deleteAgent(query.agent_id);
+                return success({ message: `Agent "${agent.name}" deleted.` });
+            }
+            catch (err) {
+                logger.error('Failed to delete agent', { err });
+                return error('Failed to delete agent. Please try again.');
+            }
+        },
+    });
+    const grantAgentPermission = defineTool({
+        name: 'grant_agent_permission',
+        description: 'Grant one or more permissions to an agent for the current user. ' +
+            'Valid actions: manage:profile, manage:intents, manage:networks, manage:contacts, manage:opportunities, manage:negotiations.',
+        querySchema: z.object({
+            agent_id: z.string().min(1).describe('The agent ID to grant permissions to.'),
+            actions: z.array(z.string()).min(1).describe('Permission actions to grant. Valid values: manage:profile, manage:intents, manage:networks, manage:contacts, manage:opportunities, manage:negotiations.'),
+            scope: z.enum(['global', 'node', 'network']).optional().describe('Optional permission scope.'),
+            scope_id: z.string().optional().describe('Scope target ID for node/network scopes.'),
+        }),
+        handler: async ({ context, query }) => {
+            const scopeError = ensureAgentScopedAccess(context, query.agent_id);
+            if (scopeError) {
+                return error(scopeError);
+            }
+            const actions = normalizePermissions(query.actions);
+            if (actions.length === 0) {
+                return error('At least one non-empty action is required.');
+            }
+            for (const action of actions) {
+                if (!isValidAction(action)) {
+                    return error(invalidActionMessage(action));
+                }
+            }
+            if ((query.scope === 'network' || query.scope === 'node') && !query.scope_id?.trim()) {
+                return error(`scope_id is required for ${query.scope} permissions.`);
+            }
+            try {
+                const agent = await agentDb.getAgent(query.agent_id);
+                if (!agent || agent.ownerId !== context.userId) {
+                    return error('Agent not found');
+                }
+                const permission = await agentDb.grantPermission({
+                    agentId: query.agent_id,
+                    userId: context.userId,
+                    scope: query.scope,
+                    scopeId: query.scope === 'global' || query.scope === undefined ? undefined : query.scope_id?.trim(),
+                    actions,
+                });
+                return success({ message: 'Permission granted.', permission });
+            }
+            catch (err) {
+                logger.error('Failed to grant permission', { err });
+                return error('Failed to grant permission. Please try again.');
+            }
+        },
+    });
+    const revokeAgentPermission = defineTool({
+        name: 'revoke_agent_permission',
+        description: 'Revoke a specific permission from an agent.',
+        querySchema: z.object({
+            agent_id: z.string().min(1).describe('The agent ID that owns the permission.'),
+            permission_id: z.string().min(1).describe('The permission ID to revoke.'),
+        }),
+        handler: async ({ context, query }) => {
+            const scopeError = ensureAgentScopedAccess(context, query.agent_id);
+            if (scopeError) {
+                return error(scopeError);
+            }
+            try {
+                const agent = await agentDb.getAgentWithRelations(query.agent_id);
+                if (!agent || agent.ownerId !== context.userId) {
+                    return error('Agent not found');
+                }
+                const permission = agent.permissions.find((item) => item.id === query.permission_id);
+                if (!permission) {
+                    return error('Permission not found');
+                }
+                await agentDb.revokePermission(query.permission_id);
+                return success({ message: 'Permission revoked.' });
+            }
+            catch (err) {
+                logger.error('Failed to revoke permission', { err });
+                return error('Failed to revoke permission. Please try again.');
+            }
+        },
+    });
+    return [
+        registerAgent,
+        listAgents,
+        updateAgent,
+        deleteAgent,
+        grantAgentPermission,
+        revokeAgentPermission,
+    ];
+}

package/dist/participant-agents/application/index.d.ts

@@ -0,0 +1,21 @@
+/**
+ * participant-agents/application — registration, permission, and dispatch tools.
+ *
+ * Re-exports the application-tier entry points of the participant-agents
+ * capability: the agent registration and permission management tool factory.
+ *
+ * ## Foreground adapters (participant-directed, authenticated)
+ *
+ * - {@link createAgentTools} — `register_agent`, `list_agents`, `update_agent`,
+ *   `delete_agent`, `grant_agent_permission`, `revoke_agent_permission` MCP
+ *   tools for the authenticated registration and permission management path.
+ *
+ * ## Boundary
+ *
+ * Imports from participant-agents/domain, participant-agents/ports, and
+ * shared/ infrastructure — never from runtime/, host implementations, or
+ * other capability internals.
+ *
+ * IND-548: canonical application layer for the participant-agents capability.
+ */
+export { createAgentTools } from "./agent.tools.js";

package/dist/participant-agents/application/index.js

@@ -0,0 +1,22 @@
+/**
+ * participant-agents/application — registration, permission, and dispatch tools.
+ *
+ * Re-exports the application-tier entry points of the participant-agents
+ * capability: the agent registration and permission management tool factory.
+ *
+ * ## Foreground adapters (participant-directed, authenticated)
+ *
+ * - {@link createAgentTools} — `register_agent`, `list_agents`, `update_agent`,
+ *   `delete_agent`, `grant_agent_permission`, `revoke_agent_permission` MCP
+ *   tools for the authenticated registration and permission management path.
+ *
+ * ## Boundary
+ *
+ * Imports from participant-agents/domain, participant-agents/ports, and
+ * shared/ infrastructure — never from runtime/, host implementations, or
+ * other capability internals.
+ *
+ * IND-548: canonical application layer for the participant-agents capability.
+ */
+// ── Registration and permission management tools ──────────────────────────────
+export { createAgentTools } from "./agent.tools.js";

package/dist/participant-agents/domain/agent.types.d.ts

@@ -0,0 +1,76 @@
+/**
+ * participant-agents/domain — pure agent entity types.
+ *
+ * These are the core value-objects for the participant-agents capability:
+ * agent records, transport channels, permission grants, and the well-known
+ * system agent ID constants.
+ *
+ * No application logic, no LLM calls, no cross-capability imports.
+ *
+ * IND-548: canonical home for agent entity types previously in
+ * shared/interfaces/agent.interface.ts.
+ */
+export interface AgentRecord {
+    id: string;
+    ownerId: string;
+    name: string;
+    description: string | null;
+    type: 'personal' | 'external' | 'system';
+    status: 'active' | 'inactive';
+    metadata: Record<string, unknown>;
+    createdAt: Date;
+    updatedAt: Date;
+}
+export interface AgentTransportRecord {
+    id: string;
+    agentId: string;
+    channel: 'mcp';
+    config: Record<string, unknown>;
+    priority: number;
+    active: boolean;
+    failureCount: number;
+}
+export interface AgentPermissionRecord {
+    id: string;
+    agentId: string;
+    userId: string;
+    scope: 'global' | 'node' | 'network';
+    scopeId: string | null;
+    actions: string[];
+    createdAt: Date;
+}
+export interface AgentWithRelations extends AgentRecord {
+    transports: AgentTransportRecord[];
+    permissions: AgentPermissionRecord[];
+}
+export interface CreateAgentInput {
+    ownerId: string;
+    name: string;
+    description?: string;
+    /** Required: personal rows are auto-provisioned negotiators; tool/registration paths create 'external'. */
+    type: 'personal' | 'external' | 'system';
+    metadata?: Record<string, unknown>;
+}
+export interface CreateTransportInput {
+    agentId: string;
+    channel: 'mcp';
+    config?: Record<string, unknown>;
+    priority?: number;
+}
+export interface GrantPermissionInput {
+    agentId: string;
+    userId: string;
+    scope?: 'global' | 'node' | 'network';
+    scopeId?: string;
+    actions: string[];
+}
+/**
+ * Fixed UUIDs for built-in system agents.
+ *
+ * These are seeded into the database on first run and must never change,
+ * as they are referenced by foreign keys and hard-coded in protocol logic.
+ */
+export declare const SYSTEM_AGENT_IDS: {
+    readonly chatOrchestrator: "00000000-0000-0000-0000-000000000001";
+    readonly negotiator: "00000000-0000-0000-0000-000000000002";
+};

package/dist/participant-agents/domain/agent.types.js

@@ -0,0 +1,22 @@
+/**
+ * participant-agents/domain — pure agent entity types.
+ *
+ * These are the core value-objects for the participant-agents capability:
+ * agent records, transport channels, permission grants, and the well-known
+ * system agent ID constants.
+ *
+ * No application logic, no LLM calls, no cross-capability imports.
+ *
+ * IND-548: canonical home for agent entity types previously in
+ * shared/interfaces/agent.interface.ts.
+ */
+/**
+ * Fixed UUIDs for built-in system agents.
+ *
+ * These are seeded into the database on first run and must never change,
+ * as they are referenced by foreign keys and hard-coded in protocol logic.
+ */
+export const SYSTEM_AGENT_IDS = {
+    chatOrchestrator: '00000000-0000-0000-0000-000000000001',
+    negotiator: '00000000-0000-0000-0000-000000000002',
+};

package/dist/participant-agents/domain/index.d.ts

@@ -0,0 +1,20 @@
+/**
+ * participant-agents/domain — pure agent entity value types and constants.
+ *
+ * Contains AgentRecord, AgentTransportRecord, AgentPermissionRecord,
+ * AgentWithRelations, CreateAgentInput, CreateTransportInput,
+ * GrantPermissionInput, and SYSTEM_AGENT_IDS.
+ *
+ * No application logic, no LLM calls, no cross-capability imports.
+ *
+ * ## What does NOT live here
+ *
+ * - AgentDatabase: persistence port — lives in participant-agents/ports.
+ * - AgentDispatcher: dispatch port — lives in participant-agents/ports.
+ * - createAgentTools: application layer — lives in participant-agents/application.
+ *
+ * IND-548: canonical domain layer for the participant-agents capability.
+ * Legacy path (shared/interfaces/agent.interface.ts) is a thin compatibility shim.
+ */
+export type { AgentRecord, AgentTransportRecord, AgentPermissionRecord, AgentWithRelations, CreateAgentInput, CreateTransportInput, GrantPermissionInput, } from "./agent.types.js";
+export { SYSTEM_AGENT_IDS } from "./agent.types.js";

package/dist/participant-agents/domain/index.js

@@ -0,0 +1 @@
+export { SYSTEM_AGENT_IDS } from "./agent.types.js";