@jinn-network/client 0.1.2 → 0.1.3-canary.24b69ea4

package/dist/erc8004/identity.js

@@ -0,0 +1,405 @@
+/**
+ * ERC-8004 IdentityRegistry surface.
+ *
+ * Two complementary capabilities live here:
+ *
+ *   1. `IdentityPublisher` — per-execution `setMetadata` writes that anchor
+ *      envelope/evaluation commitments under the operator's agent NFT. Implements
+ *      the v1 ABI-encoded payload tuple specified in
+ *      `docs/superpowers/specs/2026-04-27-erc-8004-payload-schema.md` §3.1:
+ *
+ *        abi.encode(
+ *            uint8   version,             // = 1
+ *            uint8   tier,                // 0..4
+ *            bytes32 manifestHash,        // = JinnRouter evidenceHash
+ *            bytes   attestationQuoteCid, // raw multibase-decoded CID bytes; 0x for tier < 3
+ *            bytes32 sourceMeasurement    // 0x00...00 for tier < 3
+ *        )
+ *
+ *      The encoded payload is passed to
+ *          IdentityRegistry.setMetadata(agentId, "<kind>:<cid>", payload)
+ *
+ *      per the entity-model decision in §4.2 of
+ *      `docs/superpowers/specs/2026-04-27-erc-8004-entity-model-design.md` —
+ *      one operator agent NFT per Safe; per-execution commitments anchor under it.
+ *
+ *      This module ONLY publishes — it does not mint the agent NFT (`jinn-mono-j07`),
+ *      call `setAgentWallet` (`jinn-mono-aev`), or write reputation/validation
+ *      registries (`jinn-mono-2ff` / `jinn-mono-9jg`).
+ *
+ *   2. `resolveAgentIdForManifest` — evaluator-side lookup of the harness's
+ *      `agentId` from a manifest's `evidenceHash`. Per DR §4.3, the evaluator
+ *      must call `ReputationRegistry.giveFeedback(harnessAgentId, ...)` keyed
+ *      on the harness's ERC-8004 agent NFT id — but the on-chain `claimDelivery`
+ *      payload only carries the `requestId` and `evidenceHash`, not the
+ *      harness's agentId.
+ *
+ *      Resolution paths:
+ *
+ *        (b) Subgraph: `Execution { operator { agentId } where manifestHash: $h }`
+ *            — the Jinn subgraph already indexes envelope publishes joined to the
+ *            operator. This is the recommended path: O(1) and aligned with the
+ *            rest of the discovery surface.
+ *        (c) On-chain `IdentityRegistry.Registered` event scan filtered by the
+ *            harness's Safe address — cheaper than a global scan, but still O(n)
+ *            in registered-events. Documented as a fallback only.
+ *
+ *      This module implements (b). The fallback is intentionally **not** wired in
+ *      yet: the resolver returns `null` cleanly when the subgraph URL is undefined
+ *      or the query has no match, and the caller (the feedback hook) treats that
+ *      as a no-op (DR §4.3: "skip but don't fail — claimDelivery is authoritative").
+ */
+import { encodeAbiParameters } from 'viem';
+import { IDENTITY_REGISTRY_SET_METADATA_ABI, PAYLOAD_TUPLE, PAYLOAD_TUPLE_V2, } from './abis.js';
+// Re-export ABI / payload tuple so callers that import them from the identity
+// module continue to work without depending on `./abis.js` directly.
+export { IDENTITY_REGISTRY_SET_METADATA_ABI, PAYLOAD_TUPLE, PAYLOAD_TUPLE_V2 };
+// ── Errors ───────────────────────────────────────────────────────────────────
+/** Thrown when an `ExecutionPayload` violates §5 strict-mode validity rules. */
+export class PayloadValidationError extends Error {
+    tier;
+    reason;
+    constructor(tier, reason) {
+        super(`payload validation failed (tier=${tier}): ${reason}`);
+        this.name = 'PayloadValidationError';
+        this.tier = tier;
+        this.reason = reason;
+    }
+}
+// ── Constants ────────────────────────────────────────────────────────────────
+const ZERO_BYTES32 = '0x0000000000000000000000000000000000000000000000000000000000000000';
+const EMPTY_BYTES = '0x';
+// ── Helpers ──────────────────────────────────────────────────────────────────
+function isEmptyBytes(value) {
+    // "0x" is empty; "0x" + anything else is non-empty.
+    return value === EMPTY_BYTES || value.length <= 2;
+}
+function isZeroBytes32(value) {
+    return value.toLowerCase() === ZERO_BYTES32;
+}
+/**
+ * Validate `payload` against the strict-mode per-tier rules in payload-schema §5.
+ * Throws `PayloadValidationError` on mismatch; otherwise returns the payload.
+ *
+ * Rules:
+ *   - V1 admits only tiers {0=self-signed, 1=committed, 3=attested}. Tiers 2
+ *     (consensus) and 4 (proved) are V2+ and rejected here.
+ *   - tier ∈ {0,1}: attestationQuoteCid MUST be empty, sourceMeasurement MUST be zero.
+ *   - tier === 3:  attestationQuoteCid MUST be non-empty, sourceMeasurement MUST be non-zero.
+ *   - version MUST equal 1 (this module only emits v1).
+ */
+export function validatePayload(payload) {
+    if (payload.version !== 1) {
+        throw new PayloadValidationError(payload.tier, `version must be 1, got ${payload.version}`);
+    }
+    if (payload.tier !== 0 && payload.tier !== 1 && payload.tier !== 3) {
+        throw new PayloadValidationError(payload.tier, `V1 admits only tiers {0,1,3}; got ${payload.tier}. Tiers 2 (consensus) and 4 (proved) are V2+.`);
+    }
+    // manifestHash must be a 32-byte hex (66 chars including 0x).
+    if (!/^0x[0-9a-fA-F]{64}$/.test(payload.manifestHash)) {
+        throw new PayloadValidationError(payload.tier, `manifestHash must be 32-byte hex (0x + 64 hex chars)`);
+    }
+    // sourceMeasurement must be a 32-byte hex.
+    if (!/^0x[0-9a-fA-F]{64}$/.test(payload.sourceMeasurement)) {
+        throw new PayloadValidationError(payload.tier, `sourceMeasurement must be 32-byte hex (0x + 64 hex chars)`);
+    }
+    // attestationQuoteCid must be valid hex (any even length).
+    if (!/^0x([0-9a-fA-F]{2})*$/.test(payload.attestationQuoteCid)) {
+        throw new PayloadValidationError(payload.tier, `attestationQuoteCid must be hex (0x + even number of hex chars)`);
+    }
+    const requiresAttestation = payload.tier >= 3;
+    const hasQuote = !isEmptyBytes(payload.attestationQuoteCid);
+    const hasMeasurement = !isZeroBytes32(payload.sourceMeasurement);
+    if (requiresAttestation && !hasQuote) {
+        throw new PayloadValidationError(payload.tier, `tier >= 3 requires non-empty attestationQuoteCid`);
+    }
+    if (!requiresAttestation && hasQuote) {
+        throw new PayloadValidationError(payload.tier, `tier < 3 requires empty attestationQuoteCid (got ${payload.attestationQuoteCid.length} chars)`);
+    }
+    if (requiresAttestation && !hasMeasurement) {
+        throw new PayloadValidationError(payload.tier, `tier >= 3 requires non-zero sourceMeasurement`);
+    }
+    if (!requiresAttestation && hasMeasurement) {
+        throw new PayloadValidationError(payload.tier, `tier < 3 requires zero sourceMeasurement`);
+    }
+    return payload;
+}
+/**
+ * ABI-encode the v1 payload per payload-schema §3.1.
+ *
+ * Validates first; throws `PayloadValidationError` on mismatch. Never silently
+ * produces malformed bytes.
+ */
+export function encodeExecutionPayload(payload) {
+    validatePayload(payload);
+    return encodeAbiParameters(PAYLOAD_TUPLE, [
+        payload.version,
+        payload.tier,
+        payload.manifestHash,
+        payload.attestationQuoteCid,
+        payload.sourceMeasurement,
+    ]);
+}
+/** Convert a textual `sha256:<hex>` codeDigest to the 32-byte raw hex form. */
+export function codeDigestSha256ToBytes32(textual) {
+    if (!textual)
+        return ZERO_BYTES32;
+    // Accept both "sha256:<hex>" and bare "<hex>" — be liberal in what we accept
+    // so callers don't have to format defensively.
+    const hex = textual.startsWith('sha256:') ? textual.slice('sha256:'.length) : textual;
+    if (!/^[0-9a-fA-F]{64}$/.test(hex)) {
+        return ZERO_BYTES32;
+    }
+    return (`0x${hex}`);
+}
+/** Convert a HarnessExecutionMode string to the v2 numeric flag. */
+export function modeStringToFlag(mode) {
+    return mode === 'frozen' ? 1 : 0;
+}
+/**
+ * Validate `payload` against v2 strict-mode rules.
+ *
+ * Same per-tier rules as v1 (admit only {0,1,3}; tier ≥ 3 requires non-empty
+ * quote + non-zero measurement). Adds modeFlag ∈ {0,1} and 32-byte codeDigest
+ * shape checks. `implName` may be any string including empty.
+ */
+export function validatePayloadV2(payload) {
+    if (payload.version !== 2) {
+        throw new PayloadValidationError(payload.tier, `version must be 2, got ${payload.version}`);
+    }
+    if (payload.tier !== 0 && payload.tier !== 1 && payload.tier !== 3) {
+        throw new PayloadValidationError(payload.tier, `V2 admits only tiers {0,1,3}; got ${payload.tier}.`);
+    }
+    if (!/^0x[0-9a-fA-F]{64}$/.test(payload.manifestHash)) {
+        throw new PayloadValidationError(payload.tier, `manifestHash must be 32-byte hex (0x + 64 hex chars)`);
+    }
+    if (!/^0x[0-9a-fA-F]{64}$/.test(payload.sourceMeasurement)) {
+        throw new PayloadValidationError(payload.tier, `sourceMeasurement must be 32-byte hex (0x + 64 hex chars)`);
+    }
+    if (!/^0x([0-9a-fA-F]{2})*$/.test(payload.attestationQuoteCid)) {
+        throw new PayloadValidationError(payload.tier, `attestationQuoteCid must be hex (0x + even number of hex chars)`);
+    }
+    if (!/^0x[0-9a-fA-F]{64}$/.test(payload.codeDigest)) {
+        throw new PayloadValidationError(payload.tier, `codeDigest must be 32-byte hex (0x + 64 hex chars)`);
+    }
+    if (payload.modeFlag !== 0 && payload.modeFlag !== 1) {
+        throw new PayloadValidationError(payload.tier, `modeFlag must be 0 (train) or 1 (frozen); got ${payload.modeFlag}`);
+    }
+    const requiresAttestation = payload.tier >= 3;
+    const hasQuote = !isEmptyBytes(payload.attestationQuoteCid);
+    const hasMeasurement = !isZeroBytes32(payload.sourceMeasurement);
+    if (requiresAttestation && !hasQuote) {
+        throw new PayloadValidationError(payload.tier, `tier >= 3 requires non-empty attestationQuoteCid`);
+    }
+    if (!requiresAttestation && hasQuote) {
+        throw new PayloadValidationError(payload.tier, `tier < 3 requires empty attestationQuoteCid`);
+    }
+    if (requiresAttestation && !hasMeasurement) {
+        throw new PayloadValidationError(payload.tier, `tier >= 3 requires non-zero sourceMeasurement`);
+    }
+    if (!requiresAttestation && hasMeasurement) {
+        throw new PayloadValidationError(payload.tier, `tier < 3 requires zero sourceMeasurement`);
+    }
+    return payload;
+}
+/**
+ * ABI-encode a v2 payload per payload-schema §3.
+ *
+ * Validates first; throws `PayloadValidationError` on mismatch.
+ */
+export function encodeExecutionPayloadV2(payload) {
+    validatePayloadV2(payload);
+    return encodeAbiParameters(PAYLOAD_TUPLE_V2, [
+        payload.version,
+        payload.tier,
+        payload.manifestHash,
+        payload.attestationQuoteCid,
+        payload.sourceMeasurement,
+        payload.codeDigest,
+        payload.implName,
+        payload.modeFlag,
+    ]);
+}
+/** Build the `<kind>:<cid>` metadata key per payload-schema §6.1. */
+export function buildMetadataKey(kind, cid) {
+    return `${kind}:${cid}`;
+}
+// ── Publisher ────────────────────────────────────────────────────────────────
+/**
+ * Per-execution `setMetadata` client.
+ *
+ * Stateless beyond config. Each `publishContent()` call validates the payload,
+ * ABI-encodes it, and submits a single `setMetadata(agentId, key, value)`
+ * transaction. Returns the on-chain tx hash. Failures are surfaced to the
+ * caller — the engine catches and logs them as non-fatal.
+ */
+export class IdentityPublisher {
+    identityRegistryAddress;
+    agentId;
+    walletClient;
+    publicClient;
+    constructor(config) {
+        this.identityRegistryAddress = config.identityRegistryAddress;
+        this.agentId = config.agentId;
+        this.walletClient = config.walletClient;
+        this.publicClient = config.publicClient;
+    }
+    /** The agentId this publisher anchors metadata under. */
+    get agent() {
+        return this.agentId;
+    }
+    /** The IdentityRegistry contract this publisher writes to. */
+    get registry() {
+        return this.identityRegistryAddress;
+    }
+    /**
+     * Publish a per-execution commitment under the operator's agent NFT.
+     *
+     * Calls `IdentityRegistry.setMetadata(agentId, "<kind>:<cid>", encode(payload))`.
+     * Returns the on-chain tx hash. Throws on encode/validation/network failure.
+     */
+    async publishContent(args) {
+        const metadataKey = buildMetadataKey(args.kind, args.cid);
+        const metadataValue = encodeExecutionPayload(args.payload);
+        return this._writeMetadata(metadataKey, metadataValue);
+    }
+    /**
+     * Publish a per-execution commitment using the v2 payload tuple.
+     *
+     * Identical write path to `publishContent` — the only difference is the
+     * encoder. Use this when the caller has `codeDigest`, `implName`, and
+     * `mode` in hand and wants the subgraph to index harness identity directly
+     * from the on-chain bytes.
+     *
+     * Legacy callers without harness identity should keep using `publishContent`
+     * (v1) — the subgraph decoder handles both versions and treats v1 as
+     * `mode='train'` with empty `codeDigest`/`implName`.
+     */
+    async publishContentV2(args) {
+        const metadataKey = buildMetadataKey(args.kind, args.cid);
+        const metadataValue = encodeExecutionPayloadV2(args.payload);
+        return this._writeMetadata(metadataKey, metadataValue);
+    }
+    async _writeMetadata(metadataKey, metadataValue) {
+        const account = this.walletClient.account;
+        if (!account) {
+            throw new Error('IdentityPublisher: walletClient has no account configured');
+        }
+        const chain = this.walletClient.chain;
+        if (!chain) {
+            throw new Error('IdentityPublisher: walletClient has no chain configured');
+        }
+        const txHash = await this.walletClient.writeContract({
+            address: this.identityRegistryAddress,
+            abi: IDENTITY_REGISTRY_SET_METADATA_ABI,
+            functionName: 'setMetadata',
+            args: [this.agentId, metadataKey, metadataValue],
+            account,
+            chain,
+        });
+        // Best-effort confirmation; callers that want async fire-and-forget can
+        // ignore the await — but waiting here gives us a clear pass/fail signal
+        // and surfaces revert reasons promptly. The engine treats failures as
+        // non-fatal regardless.
+        await this.publicClient.waitForTransactionReceipt({ hash: txHash });
+        return txHash;
+    }
+}
+const EXECUTIONS_QUERY = `
+  query AgentForManifest($manifestHash: Bytes!) {
+    executions(
+      where: { manifestHash: $manifestHash }
+      first: 1
+    ) {
+      manifestCid
+      operator { agentId }
+    }
+  }
+`;
+/**
+ * Resolve the operator `agentId` for a given manifest hash.
+ *
+ * Returns `null` when:
+ *   - `subgraphUrl` is undefined (no on-chain fallback wired yet — see
+ *     module-level comment).
+ *   - The subgraph has no `Execution` indexed for this `manifestHash` (the
+ *     harness hasn't published an envelope yet, or the subgraph is behind
+ *     head).
+ *   - The query fails or returns malformed data. This is intentional: a
+ *     transient subgraph failure must NOT block the evaluator's
+ *     `claimDelivery` settlement, so the resolver fails closed (no
+ *     feedback) rather than throwing.
+ *
+ * Errors are logged via `console.warn` so a flaky subgraph surface is
+ * observable without rerouting through the engine's logger.
+ */
+export async function resolveAgentIdForManifest(args) {
+    const { manifestHash, subgraphUrl } = args;
+    if (!subgraphUrl) {
+        // Caller has no subgraph configured. The on-chain fallback (scan
+        // IdentityRegistry.Registered events for the harness's Safe) is
+        // documented at module level but not wired yet — return null cleanly
+        // so the feedback hook becomes a no-op.
+        return null;
+    }
+    // The subgraph indexes `manifestHash` as Bytes; pass the 0x-prefixed hex
+    // straight through. Lower-case for stability against subgraphs that
+    // canonicalise to lower-case (most do).
+    const lowered = manifestHash.toLowerCase();
+    const fetchFn = args.fetchImpl ?? fetch;
+    let response;
+    try {
+        response = await fetchFn(subgraphUrl, {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/json' },
+            body: JSON.stringify({
+                query: EXECUTIONS_QUERY,
+                variables: { manifestHash: lowered },
+            }),
+        });
+    }
+    catch (err) {
+        console.warn(`[agent-resolver] subgraph fetch failed for manifestHash=${manifestHash}: ${err instanceof Error ? err.message : err}`);
+        return null;
+    }
+    if (!response.ok) {
+        console.warn(`[agent-resolver] subgraph HTTP ${response.status} for manifestHash=${manifestHash}`);
+        return null;
+    }
+    let json;
+    try {
+        json = (await response.json());
+    }
+    catch (err) {
+        console.warn(`[agent-resolver] subgraph JSON parse failed for manifestHash=${manifestHash}: ${err instanceof Error ? err.message : err}`);
+        return null;
+    }
+    if (json.errors && json.errors.length > 0) {
+        console.warn(`[agent-resolver] subgraph errors for manifestHash=${manifestHash}: ${json.errors
+            .map((e) => e.message)
+            .join('; ')}`);
+        return null;
+    }
+    const executions = json.data?.executions ?? [];
+    if (executions.length === 0) {
+        return null;
+    }
+    // (manifestHash, agentId) is unique by the entity-model design — we only
+    // need the first row. Defensive: if `operator` or `agentId` is null, the
+    // subgraph row is malformed; skip it.
+    const first = executions[0];
+    const agentIdStr = first?.operator?.agentId;
+    if (!agentIdStr) {
+        return null;
+    }
+    let agentId;
+    try {
+        agentId = BigInt(agentIdStr);
+    }
+    catch {
+        console.warn(`[agent-resolver] subgraph returned non-numeric agentId="${agentIdStr}" for manifestHash=${manifestHash}`);
+        return null;
+    }
+    return { agentId, manifestCid: first?.manifestCid ?? null };
+}
+//# sourceMappingURL=identity.js.map

package/dist/erc8004/identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.js","sourceRoot":"","sources":["../../src/erc8004/identity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkDG;AAEH,OAAO,EAAE,mBAAmB,EAAkD,MAAM,MAAM,CAAC;AAC3F,OAAO,EACL,kCAAkC,EAClC,aAAa,EACb,gBAAgB,GACjB,MAAM,WAAW,CAAC;AAEnB,8EAA8E;AAC9E,qEAAqE;AACrE,OAAO,EAAE,kCAAkC,EAAE,aAAa,EAAE,gBAAgB,EAAE,CAAC;AAuD/E,gFAAgF;AAEhF,gFAAgF;AAChF,MAAM,OAAO,sBAAuB,SAAQ,KAAK;IACtC,IAAI,CAAgB;IACpB,MAAM,CAAS;IACxB,YAAY,IAAmB,EAAE,MAAc;QAC7C,KAAK,CAAC,mCAAmC,IAAI,MAAM,MAAM,EAAE,CAAC,CAAC;QAC7D,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAC;QACrC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;CACF;AAED,gFAAgF;AAEhF,MAAM,YAAY,GAAQ,oEAAoE,CAAC;AAC/F,MAAM,WAAW,GAAQ,IAAI,CAAC;AAE9B,gFAAgF;AAEhF,SAAS,YAAY,CAAC,KAAU;IAC9B,oDAAoD;IACpD,OAAO,KAAK,KAAK,WAAW,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC;AACpD,CAAC;AAED,SAAS,aAAa,CAAC,KAAU;IAC/B,OAAO,KAAK,CAAC,WAAW,EAAE,KAAK,YAAY,CAAC;AAC9C,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,eAAe,CAAC,OAAyB;IACvD,IAAI,OAAO,CAAC,OAAO,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,sBAAsB,CAAC,OAAO,CAAC,IAAI,EAAE,0BAA0B,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;IAC9F,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,KAAK,CAAC,IAAI,OAAO,CAAC,IAAI,KAAK,CAAC,IAAI,OAAO,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QACnE,MAAM,IAAI,sBAAsB,CAC9B,OAAO,CAAC,IAAI,EACZ,qCAAqC,OAAO,CAAC,IAAI,+CAA+C,CACjG,CAAC;IACJ,CAAC;IACD,8DAA8D;IAC9D,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;QACtD,MAAM,IAAI,sBAAsB,CAC9B,OAAO,CAAC,IAAI,EACZ,sDAAsD,CACvD,CAAC;IACJ,CAAC;IACD,2CAA2C;IAC3C,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,EAAE,CAAC;QAC3D,MAAM,IAAI,sBAAsB,CAC9B,OAAO,CAAC,IAAI,EACZ,2DAA2D,CAC5D,CAAC;IACJ,CAAC;IACD,2DAA2D;IAC3D,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC,EAAE,CAAC;QAC/D,MAAM,IAAI,sBAAsB,CAC9B,OAAO,CAAC,IAAI,EACZ,iEAAiE,CAClE,CAAC;IACJ,CAAC;IAED,MAAM,mBAAmB,GAAG,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC;IAC9C,MAAM,QAAQ,GAAG,CAAC,YAAY,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAC5D,MAAM,cAAc,GAAG,CAAC,aAAa,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAEjE,IAAI,mBAAmB,IAAI,CAAC,QAAQ,EAAE,CAAC;QACrC,MAAM,IAAI,sBAAsB,CAC9B,OAAO,CAAC,IAAI,EACZ,kDAAkD,CACnD,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,mBAAmB,IAAI,QAAQ,EAAE,CAAC;QACrC,MAAM,IAAI,sBAAsB,CAC9B,OAAO,CAAC,IAAI,EACZ,oDAAoD,OAAO,CAAC,mBAAmB,CAAC,MAAM,SAAS,CAChG,CAAC;IACJ,CAAC;IACD,IAAI,mBAAmB,IAAI,CAAC,cAAc,EAAE,CAAC;QAC3C,MAAM,IAAI,sBAAsB,CAC9B,OAAO,CAAC,IAAI,EACZ,+CAA+C,CAChD,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,mBAAmB,IAAI,cAAc,EAAE,CAAC;QAC3C,MAAM,IAAI,sBAAsB,CAC9B,OAAO,CAAC,IAAI,EACZ,0CAA0C,CAC3C,CAAC;IACJ,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CAAC,OAAyB;IAC9D,eAAe,CAAC,OAAO,CAAC,CAAC;IACzB,OAAO,mBAAmB,CAAC,aAAa,EAAE;QACxC,OAAO,CAAC,OAAO;QACf,OAAO,CAAC,IAAI;QACZ,OAAO,CAAC,YAAY;QACpB,OAAO,CAAC,mBAAmB;QAC3B,OAAO,CAAC,iBAAiB;KAC1B,CAAC,CAAC;AACL,CAAC;AAoDD,+EAA+E;AAC/E,MAAM,UAAU,yBAAyB,CAAC,OAAkC;IAC1E,IAAI,CAAC,OAAO;QAAE,OAAO,YAAY,CAAC;IAClC,6EAA6E;IAC7E,+CAA+C;IAC/C,MAAM,GAAG,GAAG,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;IACtF,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACnC,OAAO,YAAY,CAAC;IACtB,CAAC;IACD,OAAO,CAAC,KAAK,GAAG,EAAE,CAAQ,CAAC;AAC7B,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,gBAAgB,CAAC,IAAwB;IACvD,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACnC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAA2B;IAC3D,IAAI,OAAO,CAAC,OAAO,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,sBAAsB,CAAC,OAAO,CAAC,IAAI,EAAE,0BAA0B,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;IAC9F,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,KAAK,CAAC,IAAI,OAAO,CAAC,IAAI,KAAK,CAAC,IAAI,OAAO,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QACnE,MAAM,IAAI,sBAAsB,CAC9B,OAAO,CAAC,IAAI,EACZ,qCAAqC,OAAO,CAAC,IAAI,GAAG,CACrD,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;QACtD,MAAM,IAAI,sBAAsB,CAC9B,OAAO,CAAC,IAAI,EACZ,sDAAsD,CACvD,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,EAAE,CAAC;QAC3D,MAAM,IAAI,sBAAsB,CAC9B,OAAO,CAAC,IAAI,EACZ,2DAA2D,CAC5D,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC,EAAE,CAAC;QAC/D,MAAM,IAAI,sBAAsB,CAC9B,OAAO,CAAC,IAAI,EACZ,iEAAiE,CAClE,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,sBAAsB,CAC9B,OAAO,CAAC,IAAI,EACZ,oDAAoD,CACrD,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,KAAK,CAAC,IAAI,OAAO,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,sBAAsB,CAC9B,OAAO,CAAC,IAAI,EACZ,iDAAiD,OAAO,CAAC,QAAQ,EAAE,CACpE,CAAC;IACJ,CAAC;IAED,MAAM,mBAAmB,GAAG,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC;IAC9C,MAAM,QAAQ,GAAG,CAAC,YAAY,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAC5D,MAAM,cAAc,GAAG,CAAC,aAAa,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAEjE,IAAI,mBAAmB,IAAI,CAAC,QAAQ,EAAE,CAAC;QACrC,MAAM,IAAI,sBAAsB,CAC9B,OAAO,CAAC,IAAI,EACZ,kDAAkD,CACnD,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,mBAAmB,IAAI,QAAQ,EAAE,CAAC;QACrC,MAAM,IAAI,sBAAsB,CAC9B,OAAO,CAAC,IAAI,EACZ,6CAA6C,CAC9C,CAAC;IACJ,CAAC;IACD,IAAI,mBAAmB,IAAI,CAAC,cAAc,EAAE,CAAC;QAC3C,MAAM,IAAI,sBAAsB,CAC9B,OAAO,CAAC,IAAI,EACZ,+CAA+C,CAChD,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,mBAAmB,IAAI,cAAc,EAAE,CAAC;QAC3C,MAAM,IAAI,sBAAsB,CAC9B,OAAO,CAAC,IAAI,EACZ,0CAA0C,CAC3C,CAAC;IACJ,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CAAC,OAA2B;IAClE,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAC3B,OAAO,mBAAmB,CAAC,gBAAgB,EAAE;QAC3C,OAAO,CAAC,OAAO;QACf,OAAO,CAAC,IAAI;QACZ,OAAO,CAAC,YAAY;QACpB,OAAO,CAAC,mBAAmB;QAC3B,OAAO,CAAC,iBAAiB;QACzB,OAAO,CAAC,UAAU;QAClB,OAAO,CAAC,QAAQ;QAChB,OAAO,CAAC,QAAQ;KACjB,CAAC,CAAC;AACL,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,gBAAgB,CAAC,IAAiB,EAAE,GAAW;IAC7D,OAAO,GAAG,IAAI,IAAI,GAAG,EAAE,CAAC;AAC1B,CAAC;AAED,gFAAgF;AAEhF;;;;;;;GAOG;AACH,MAAM,OAAO,iBAAiB;IACX,uBAAuB,CAAgB;IACvC,OAAO,CAAS;IAChB,YAAY,CAAe;IAC3B,YAAY,CAAe;IAE5C,YAAY,MAA+B;QACzC,IAAI,CAAC,uBAAuB,GAAG,MAAM,CAAC,uBAAuB,CAAC;QAC9D,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;QAC9B,IAAI,CAAC,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC;QACxC,IAAI,CAAC,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC;IAC1C,CAAC;IAED,yDAAyD;IACzD,IAAI,KAAK;QACP,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED,8DAA8D;IAC9D,IAAI,QAAQ;QACV,OAAO,IAAI,CAAC,uBAAuB,CAAC;IACtC,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,cAAc,CAAC,IAAwB;QAC3C,MAAM,WAAW,GAAG,gBAAgB,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QAC1D,MAAM,aAAa,GAAG,sBAAsB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC3D,OAAO,IAAI,CAAC,cAAc,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;IACzD,CAAC;IAED;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,gBAAgB,CAAC,IAA0B;QAC/C,MAAM,WAAW,GAAG,gBAAgB,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QAC1D,MAAM,aAAa,GAAG,wBAAwB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC7D,OAAO,IAAI,CAAC,cAAc,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;IACzD,CAAC;IAEO,KAAK,CAAC,cAAc,CAAC,WAAmB,EAAE,aAAkB;QAClE,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC;QAC1C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;QAC/E,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC;QACtC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;QAC7E,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,aAAa,CAAC;YACnD,OAAO,EAAE,IAAI,CAAC,uBAAuB;YACrC,GAAG,EAAE,kCAAkC;YACvC,YAAY,EAAE,aAAa;YAC3B,IAAI,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,EAAE,aAAa,CAAC;YAChD,OAAO;YACP,KAAK;SACN,CAAC,CAAC;QAEH,wEAAwE;QACxE,wEAAwE;QACxE,sEAAsE;QACtE,wBAAwB;QACxB,MAAM,IAAI,CAAC,YAAY,CAAC,yBAAyB,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QACpE,OAAO,MAAM,CAAC;IAChB,CAAC;CACF;AAsCD,MAAM,gBAAgB,GAAG;;;;;;;;;;CAUxB,CAAC;AAkBF;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,IAAwB;IAExB,MAAM,EAAE,YAAY,EAAE,WAAW,EAAE,GAAG,IAAI,CAAC;IAE3C,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,iEAAiE;QACjE,gEAAgE;QAChE,qEAAqE;QACrE,wCAAwC;QACxC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,yEAAyE;IACzE,oEAAoE;IACpE,wCAAwC;IACxC,MAAM,OAAO,GAAG,YAAY,CAAC,WAAW,EAAmB,CAAC;IAC5D,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC;IAExC,IAAI,QAAkB,CAAC;IACvB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,OAAO,CAAC,WAAW,EAAE;YACpC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,KAAK,EAAE,gBAAgB;gBACvB,SAAS,EAAE,EAAE,YAAY,EAAE,OAAO,EAAE;aACrC,CAAC;SACH,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,IAAI,CACV,2DAA2D,YAAY,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,CACvH,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,OAAO,CAAC,IAAI,CACV,kCAAkC,QAAQ,CAAC,MAAM,qBAAqB,YAAY,EAAE,CACrF,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,IAAiB,CAAC;IACtB,IAAI,CAAC;QACH,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAgB,CAAC;IAChD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,IAAI,CACV,gEAAgE,YAAY,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,CAC5H,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1C,OAAO,CAAC,IAAI,CACV,qDAAqD,YAAY,KAAK,IAAI,CAAC,MAAM;aAC9E,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;aACrB,IAAI,CAAC,IAAI,CAAC,EAAE,CAChB,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,EAAE,UAAU,IAAI,EAAE,CAAC;IAC/C,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,yEAAyE;IACzE,yEAAyE;IACzE,sCAAsC;IACtC,MAAM,KAAK,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;IAC5B,MAAM,UAAU,GAAG,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAC;IAC5C,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,IAAI,CACV,2DAA2D,UAAU,sBAAsB,YAAY,EAAE,CAC1G,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,WAAW,IAAI,IAAI,EAAE,CAAC;AAC9D,CAAC"}

package/dist/erc8004/index.d.ts

@@ -0,0 +1,13 @@
+/**
+ * ERC-8004 surface — Jinn's typed wrappers around the three deployed canonical
+ * registries (Identity, Reputation, Validation). One package owns ABIs,
+ * addresses, and clients; downstream code imports from the barrel only.
+ *
+ * Spec: `docs/superpowers/specs/2026-04-27-erc-8004-entity-model-design.md`.
+ */
+export { REPUTATION_REGISTRY_ADDRESSES, getReputationRegistryAddress, VALIDATION_REGISTRY_ADDRESSES, getValidationRegistryAddress, } from './addresses.js';
+export { IDENTITY_REGISTRY_SET_METADATA_ABI, PAYLOAD_TUPLE, PAYLOAD_TUPLE_V2, REPUTATION_REGISTRY_ABI, VALIDATION_REGISTRY_ABI, } from './abis.js';
+export { IdentityPublisher, PayloadValidationError, buildMetadataKey, encodeExecutionPayload, encodeExecutionPayloadV2, validatePayload, validatePayloadV2, codeDigestSha256ToBytes32, modeStringToFlag, resolveAgentIdForManifest, type ContentKind, type ExecutionPayload, type ExecutionPayloadV2, type ExecutionModeFlag, type ExecutionTier, type IdentityPublisherConfig, type PublishContentArgs, type PublishContentV2Args, type ResolveAgentIdArgs, type ResolvedAgent, } from './identity.js';
+export { ReputationRegistryClient, ZERO_HASH, mapVerdictToScore, submitEvaluatorFeedback, type FeedbackId, type FeedbackHookOutcome, type FeedbackRecord, type FeedbackSummary, type GiveFeedbackArgs, type EvaluatorVerdict, type ReputationRegistryConfig, type RespondToFeedbackArgs, type HarnessExecutionRef, type RevokeFeedbackArgs, type ScoreMapping, } from './reputation.js';
+export { ValidationRegistryClient, type ValidationRecord, type ValidationRegistryConfig, type ValidationStatus, } from './validation.js';
+export { getMetadataValue, queryArtifacts, queryNodes, type SubgraphConfig, type SubgraphResult, } from './subgraph.js';

package/dist/erc8004/index.js

@@ -0,0 +1,20 @@
+/**
+ * ERC-8004 surface — Jinn's typed wrappers around the three deployed canonical
+ * registries (Identity, Reputation, Validation). One package owns ABIs,
+ * addresses, and clients; downstream code imports from the barrel only.
+ *
+ * Spec: `docs/superpowers/specs/2026-04-27-erc-8004-entity-model-design.md`.
+ */
+// ── Addresses ──────────────────────────────────────────────────────────────────
+export { REPUTATION_REGISTRY_ADDRESSES, getReputationRegistryAddress, VALIDATION_REGISTRY_ADDRESSES, getValidationRegistryAddress, } from './addresses.js';
+// ── ABIs ───────────────────────────────────────────────────────────────────────
+export { IDENTITY_REGISTRY_SET_METADATA_ABI, PAYLOAD_TUPLE, PAYLOAD_TUPLE_V2, REPUTATION_REGISTRY_ABI, VALIDATION_REGISTRY_ABI, } from './abis.js';
+// ── IdentityRegistry (publisher + agent resolver) ──────────────────────────────
+export { IdentityPublisher, PayloadValidationError, buildMetadataKey, encodeExecutionPayload, encodeExecutionPayloadV2, validatePayload, validatePayloadV2, codeDigestSha256ToBytes32, modeStringToFlag, resolveAgentIdForManifest, } from './identity.js';
+// ── ReputationRegistry (client + feedback hook) ────────────────────────────────
+export { ReputationRegistryClient, ZERO_HASH, mapVerdictToScore, submitEvaluatorFeedback, } from './reputation.js';
+// ── ValidationRegistry ─────────────────────────────────────────────────────────
+export { ValidationRegistryClient, } from './validation.js';
+// ── Subgraph stub (will move to its own module once the V2 schema lands) ──────
+export { getMetadataValue, queryArtifacts, queryNodes, } from './subgraph.js';
+//# sourceMappingURL=index.js.map

package/dist/erc8004/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/erc8004/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,kFAAkF;AAClF,OAAO,EACL,6BAA6B,EAC7B,4BAA4B,EAC5B,6BAA6B,EAC7B,4BAA4B,GAC7B,MAAM,gBAAgB,CAAC;AAExB,kFAAkF;AAClF,OAAO,EACL,kCAAkC,EAClC,aAAa,EACb,gBAAgB,EAChB,uBAAuB,EACvB,uBAAuB,GACxB,MAAM,WAAW,CAAC;AAEnB,kFAAkF;AAClF,OAAO,EACL,iBAAiB,EACjB,sBAAsB,EACtB,gBAAgB,EAChB,sBAAsB,EACtB,wBAAwB,EACxB,eAAe,EACf,iBAAiB,EACjB,yBAAyB,EACzB,gBAAgB,EAChB,yBAAyB,GAW1B,MAAM,eAAe,CAAC;AAEvB,kFAAkF;AAClF,OAAO,EACL,wBAAwB,EACxB,SAAS,EACT,iBAAiB,EACjB,uBAAuB,GAYxB,MAAM,iBAAiB,CAAC;AAEzB,kFAAkF;AAClF,OAAO,EACL,wBAAwB,GAIzB,MAAM,iBAAiB,CAAC;AAEzB,iFAAiF;AACjF,OAAO,EACL,gBAAgB,EAChB,cAAc,EACd,UAAU,GAGX,MAAM,eAAe,CAAC"}