@keelcodes/manifest 0.1.0

package/LICENSE

@@ -0,0 +1,201 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2026 Keel contributors
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/README.md

@@ -0,0 +1,139 @@
+# @keelcodes/manifest
+
+Consume and produce **[ERC-8313 Protocol Interaction Manifests][erc8313]** (PIM).
+
+A PIM is a machine-readable JSON document describing *how* to interact with a
+smart-contract protocol — not just its ABI, but the ordered workflow that
+fulfils a user intent. It is an **untrusted input**: it arrives from a dApp, a
+registry or a peer agent, so it must be validated and graded before anything is
+executed.
+
+This package is the Keel side of that:
+
+- **consume** — `validatePim` checks an untrusted document against the standard;
+  `trustLevelOf` verifies signatures and assigns a trust level.
+- **produce** — `buildKeelPim` emits Keel's own manifest, describing the Keel
+  policy hook and the ERC-8312 bounded-action substrate.
+
+Everything is a pure function (no I/O; `trustLevelOf` is async only because
+signer recovery is). The same code runs in a wallet, an agent, an MCP server or
+the bundled CLI.
+
+## What it validates
+
+The nine mandatory top-level objects are always required:
+
+`schemaVersion`, `metadata`, `contracts`, `types`, `lookups`, `calculations`,
+`intents`, `ui`, `signatures`.
+
+`validatePim` returns `{ valid, errors, warnings }`; `valid` is `true` only when
+there are no `errors`. Key rules:
+
+- `metadata`: all required fields, the `category` enum, a semver `pimVersion`,
+  and a non-empty `chainId`.
+- `contracts.*`: exactly one of `address` / `lookup` (both or neither is an
+  error), the `role` enum, and a required `description`. A `lookup` must name an
+  entry in `lookups`.
+- `lookups.*`: `contract` must resolve to `contracts`; `function`/`args`/
+  `returns` are required; `validate` assertions need at least one operator;
+  `selectCriterion` is only allowed alongside `select`.
+- `types.*`: the `kind` enum and a required `fields` map.
+- `calculations.*`: required `description`/`formula` (with a `set` instruction)
+  and the `precision` enum.
+- `intents.*`: at least one intent, each with `description` / `requiredInputs` /
+  `steps`; step ids must start at 1 and not skip; `buildTransaction` steps need
+  a declared `contract`, a `function` and a `description`.
+- `ui.intentDescriptions` must cover every named intent.
+- Semantic gates: pass `{ now }` to reject an expired (or not-yet-valid) PIM, and
+  `{ chainId }` to reject one that does not scope the current network — both are
+  "execution engines MUST reject" rules in the standard.
+
+## Usage
+
+```ts
+import { validatePim, trustLevelOf, buildKeelPim } from '@keelcodes/manifest';
+
+const result = validatePim(untrusted, { now: Math.floor(Date.now() / 1000), chainId: 8453 });
+if (!result.valid) throw new Error(JSON.stringify(result.errors));
+
+const trust = await trustLevelOf(untrusted, {
+  protocolSigners: ['0x…'], // addresses on the protocol's website / ENS
+  knownCommunitySigners: ['0x…'],
+  walletVerifiedSigners: ['0x…'],
+});
+
+const keel = buildKeelPim({
+  policyHook: '0x…', // required, never defaulted
+  boundedActions: '0x…', // required, never defaulted
+  chainId: [8453],
+});
+```
+
+Keel's `buildKeelPim` output is asserted to pass `validatePim` in this package's
+tests, so the manifest and the validator can never silently drift apart.
+
+## CLI
+
+The consumer CLI reads the built package (`pnpm build` first) and needs no
+third-party argument parser (`node:util` `parseArgs` only):
+
+```bash
+pnpm --filter @keelcodes/manifest build
+
+node scripts/pim.mjs validate scripts/fixtures/valid.pim.json   # exits non-zero on any error
+node scripts/pim.mjs validate /path/to/manifest.json --chain-id 8453 --now 1800000000
+node scripts/pim.mjs inspect  scripts/fixtures/valid.pim.json   # protocol/chains/intents/trust/contracts
+node scripts/pim.mjs keel --chain-id 8453 \
+  --policy-hook 0x1234567890abcdef1234567890abcdef12345678 \
+  --bounded-actions 0xabcdefabcdefabcdefabcdefabcdefabcdefabcd
+```
+
+`validate` prints one `[severity] path: message` line per issue and exits `1`
+when any error is present — suitable for CI or a wallet's pre-flight gate.
+
+## Trust levels
+
+ERC-8313 defines four levels. This package assigns them from the `signatures`
+section:
+
+| Level | Name | Assigned when |
+|---|---|---|
+| 0 | Unverified | no signature, an unverifiable signature, or a verified signer that is in no known registry |
+| 1 | Community | verified signature from a `knownCommunitySigners` address |
+| 2 | Protocol Signed | verified signature from a `protocolSigners` address |
+| 3 | Wallet Verified | verified signature from a `walletVerifiedSigners` address |
+
+Registry membership is deliberately caller-supplied: a library cannot know which
+address is "on the protocol's website" or "pinned by the wallet team". A
+cryptographically valid signature that is in no registry still grades Level 0,
+exactly as the standard's "signer address is unknown" criterion requires.
+
+### How a signature is verified
+
+The standard says the signature is "of the keccak256 hash of the entire PIM
+excluding the signatures section", with whitespace removed. It does **not** say
+whether that hash is signed directly (raw digest) or wrapped in EIP-191. This
+package tries both interpretations (`recoverAddress` and
+`recoverMessageAddress`) and reports which one matched. It never reports a
+signature as verified unless it actually recovers to the declared `signer`.
+
+## Unverified fields and honest boundaries
+
+- Aligned with the **draft of 2026-06-19** (author Paul Angus Bark, [PR
+  #1836][pr]). Drafts change; treat this as a point-in-time implementation.
+- **Step-level lookup reference is not pinned by the draft.** The standard says
+  lookups "are referenced by name in intent steps" but its all-step-types field
+  table does not name the field. Keel's own manifest uses `lookup: "<name>"` and
+  the validator only *warns* on a dangling reference — it never rejects a
+  manifest for using a different, spec-valid field name.
+- **Signature payload style is ambiguous** (raw digest vs EIP-191), as described
+  above. Both are attempted; unverifiable signatures are reported as such.
+- **Level 3 (Wallet Verified) is not derivable from the document.** The standard
+  defines it as an internal wallet decision; it can only be assigned when the
+  caller supplies the wallet's pinned signers.
+- `buildKeelPim` **never fabricates addresses or signatures**: the hook/substrate
+  addresses are required arguments, and `signatures` is `[]` (Level 0 by
+  construction). Signing the manifest is a release-time step, not library logic.
+
+[erc8313]: https://eips.ethereum.org/EIPS/eip-8313
+[pr]: https://github.com/ethereum/ERCs/pull/1836

package/dist/build.d.ts

@@ -0,0 +1,23 @@
+import type { Pim } from './types.js';
+export interface BuildKeelPimOptions {
+    /** Deployed `KeelPolicyHook` address (ERC-7579 hook module). Required. */
+    policyHook: string;
+    /** Deployed `KeelBoundedActions` address (ERC-8312 substrate). Required. */
+    boundedActions: string;
+    /** Chains the addresses are valid on. Defaults to `[1, 56, 8453]`. */
+    chainId?: number[];
+    /** Semantic version of the manifest document. Defaults to `"1.0.0"`. */
+    pimVersion?: string;
+    /** Author website. Defaults to `"https://keel.codes"`. */
+    website?: string;
+    /** Optional validity window (unix seconds). */
+    validFrom?: number;
+    validUntil?: number;
+}
+/**
+ * Build Keel's PIM from the caller's deployed addresses.
+ *
+ * @throws {PimBuildError} when an address is missing or not a valid hex address.
+ */
+export declare function buildKeelPim(options: BuildKeelPimOptions): Pim;
+//# sourceMappingURL=build.d.ts.map

package/dist/build.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"build.d.ts","sourceRoot":"","sources":["../src/build.ts"],"names":[],"mappings":"AAkBA,OAAO,KAAK,EAAc,GAAG,EAAsB,MAAM,YAAY,CAAC;AAEtE,MAAM,WAAW,mBAAmB;IAClC,0EAA0E;IAC1E,UAAU,EAAE,MAAM,CAAC;IACnB,4EAA4E;IAC5E,cAAc,EAAE,MAAM,CAAC;IACvB,sEAAsE;IACtE,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,wEAAwE;IACxE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,0DAA0D;IAC1D,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,+CAA+C;IAC/C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAMD;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE,mBAAmB,GAAG,GAAG,CA8I9D"}

package/dist/build.js

@@ -0,0 +1,177 @@
+// ============================================================================
+// Keel's own ERC-8313 Protocol Interaction Manifest.
+//
+// This is the *producer* half of the package: a description of Keel's on-chain
+// interaction surface, emitted by code so it can never drift from the packages
+// it documents. The output is asserted to pass `validatePim` in the tests.
+//
+// Honesty boundaries baked in here:
+//  * Contract addresses are NEVER defaulted or hard-coded. The caller must
+//    supply the deployed `KeelPolicyHook` and `KeelBoundedActions` addresses;
+//    a missing/invalid address is a hard build error, not a placeholder.
+//  * `signatures` is `[]`. Keel does not sign its own PIM here, so the manifest
+//    is Level 0 (Unverified) by construction — the manifest must not pretend
+//    otherwise. Signing is a deployment/release-time step, not library logic.
+// ============================================================================
+import { isAddress } from 'viem';
+import { PimBuildError } from './errors.js';
+const DEFAULT_CHAIN_IDS = [1, 56, 8453];
+const DEFAULT_PIM_VERSION = '1.0.0';
+const DEFAULT_WEBSITE = 'https://keel.codes';
+/**
+ * Build Keel's PIM from the caller's deployed addresses.
+ *
+ * @throws {PimBuildError} when an address is missing or not a valid hex address.
+ */
+export function buildKeelPim(options) {
+    const policyHook = assertAddress(options.policyHook, 'policyHook');
+    const boundedActions = assertAddress(options.boundedActions, 'boundedActions');
+    const chainId = options.chainId ?? [...DEFAULT_CHAIN_IDS];
+    const metadata = {
+        protocol: 'Keel',
+        description: 'Keel is an ERC-7579 account-abstraction stack for autonomous agents: policy-bounded sessions enforced by an on-chain hook, escrowed by ERC-8312 bounded-action envelopes.',
+        category: 'other',
+        website: options.website ?? DEFAULT_WEBSITE,
+        author: 'Keel',
+        chainId,
+        pimVersion: options.pimVersion ?? DEFAULT_PIM_VERSION,
+    };
+    if (options.validFrom !== undefined)
+        metadata.validFrom = options.validFrom;
+    if (options.validUntil !== undefined)
+        metadata.validUntil = options.validUntil;
+    return {
+        schemaVersion: '1.0.0',
+        metadata,
+        contracts: {
+            // The hook is where the account's only execution path is gated; the
+            // substrate owns the cross-call aggregate budget.
+            policyHook: {
+                address: policyHook,
+                role: 'other',
+                description: 'KeelPolicyHook (ERC-7579 hook, module type 4): enforces the Keel policy DSL on the account and charges the bound ERC-8312 envelope.',
+            },
+            boundedActions: {
+                address: boundedActions,
+                role: 'registry',
+                description: 'KeelBoundedActions (ERC-8312 substrate): the envelope registry and cursor the account draws against.',
+            },
+        },
+        types: {
+            // Field-for-field mirror of IERC8312.Envelope.
+            Envelope: tuple('An ERC-8312 envelope: an immutable capability commitment plus a mutable aggregate-state commitment.', {
+                id: { type: 'bytes32', description: 'Deterministic envelope id.' },
+                principal: { type: 'address', description: 'Account the envelope is bound to.' },
+                capabilityRoot: { type: 'bytes32', description: 'keccak256 of the canonical capability encoding.' },
+                cursorRoot: { type: 'bytes32', description: 'keccak256 of the current cursor encoding.' },
+                createdAt: { type: 'uint64', unit: 'seconds', description: 'Registration timestamp.' },
+                expiresAt: { type: 'uint64', unit: 'seconds', description: 'Expiry timestamp; 0 means no expiry.' },
+                status: { type: 'uint8', description: 'IERC-8312 Status enum: 0 None, 1 Active, 2 Completed, 3 Contested, 4 Revoked, 5 Expired.' },
+            }),
+            // Field-for-field mirror of KeelBoundedActions.Cursor.
+            Cursor: tuple('The running aggregate state behind an envelope cursorRoot.', {
+                spent: { type: 'uint256', description: 'Total amount drawn so far.' },
+                draws: { type: 'uint256', description: 'Number of accepted draws.' },
+                lastAdvance: { type: 'uint256', unit: 'seconds', description: 'Timestamp of the last accepted draw.' },
+            }),
+        },
+        lookups: {
+            getCursor: lookup('Read the cursorRoot of an envelope.', 'boundedActions', 'getCursor', 'bytes32'),
+            getStatus: lookup('Read the effective lifecycle status of an envelope.', 'boundedActions', 'getStatus', 'uint8'),
+            isActive: lookup('Whether an envelope is Active and not expired.', 'boundedActions', 'isActive', 'bool'),
+        },
+        calculations: {},
+        intents: {
+            grantBoundedSession: {
+                description: 'Register a bounded-action envelope for the principal and bind it to the account session so the hook charges its aggregate budget.',
+                requiredInputs: ['principal', 'capabilityRoot', 'expiresAt', 'initData', 'sessionId'],
+                steps: [
+                    {
+                        id: 1,
+                        action: 'buildTransaction',
+                        description: 'Register the ERC-8312 envelope on the substrate.',
+                        storeAs: 'envelopeId',
+                        contract: 'boundedActions',
+                        function: 'registerEnvelope',
+                        args: {
+                            principal: '{{principal}}',
+                            capabilityRoot: '{{capabilityRoot}}',
+                            expiresAt: '{{expiresAt}}',
+                            initData: '{{initData}}',
+                        },
+                    },
+                    {
+                        id: 2,
+                        action: 'buildTransaction',
+                        description: 'Bind the envelope to the session so the hook charges it on the execution path.',
+                        contract: 'policyHook',
+                        function: 'bindEnvelope',
+                        args: { sessionId: '{{sessionId}}', registry: '{{contracts.boundedActions.address}}', envelopeId: '{{envelopeId}}' },
+                    },
+                ],
+            },
+            drawBoundedAction: {
+                description: 'Draw once against an active envelope, advancing its cursor by the requested amount.',
+                requiredInputs: ['envelopeId', 'amount', 'witness'],
+                steps: [
+                    {
+                        id: 1,
+                        action: 'lookup',
+                        lookup: 'isActive',
+                        description: 'Fail fast unless the envelope is Active and unexpired.',
+                        storeAs: 'active',
+                    },
+                    {
+                        id: 2,
+                        action: 'buildTransaction',
+                        description: 'Advance the cursor by one accepted draw against the witness.',
+                        contract: 'boundedActions',
+                        function: 'advanceCursor',
+                        args: { id: '{{envelopeId}}', witness: '{{witness}}' },
+                    },
+                ],
+            },
+            readEnvelope: {
+                description: 'Read an envelope: its lifecycle status, cursor commitment and whether it is currently active.',
+                requiredInputs: ['envelopeId'],
+                steps: [
+                    { id: 1, action: 'lookup', lookup: 'getStatus', description: 'Read the effective status.', storeAs: 'status' },
+                    { id: 2, action: 'lookup', lookup: 'getCursor', description: 'Read the cursor commitment.', storeAs: 'cursor' },
+                    { id: 3, action: 'lookup', lookup: 'isActive', description: 'Read whether the envelope is active.', storeAs: 'active' },
+                ],
+            },
+        },
+        ui: {
+            labels: {
+                principal: 'Principal',
+                capabilityRoot: 'Capability root',
+                expiresAt: 'Expires at',
+                envelopeId: 'Envelope',
+                amount: 'Draw amount',
+                status: 'Status',
+                cursor: 'Cursor',
+                active: 'Active',
+            },
+            intentDescriptions: {
+                grantBoundedSession: 'Grant a bounded session for {{principal}} until {{expiresAt}}.',
+                drawBoundedAction: 'Draw {{amount}} from envelope {{envelopeId}}.',
+                readEnvelope: 'Read envelope {{envelopeId}}.',
+            },
+        },
+        // Keel does not sign its own PIM: unsigned = Level 0 by construction.
+        signatures: [],
+    };
+}
+function tuple(description, fields) {
+    return { kind: 'tuple', description, fields };
+}
+function lookup(description, contract, fn, returns) {
+    return { description, contract, function: fn, args: { id: '{{envelopeId}}' }, returns };
+}
+function assertAddress(value, name) {
+    if (typeof value !== 'string' || !isAddress(value)) {
+        throw new PimBuildError(`"${name}" must be a valid 20-byte hex address, got ${JSON.stringify(value)}`);
+    }
+    return value;
+}
+//# sourceMappingURL=build.js.map

package/dist/build.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"build.js","sourceRoot":"","sources":["../src/build.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,qDAAqD;AACrD,EAAE;AACF,+EAA+E;AAC/E,+EAA+E;AAC/E,2EAA2E;AAC3E,EAAE;AACF,oCAAoC;AACpC,2EAA2E;AAC3E,8EAA8E;AAC9E,yEAAyE;AACzE,gFAAgF;AAChF,6EAA6E;AAC7E,8EAA8E;AAC9E,+EAA+E;AAE/E,OAAO,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AACjC,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAmB5C,MAAM,iBAAiB,GAAsB,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;AAC3D,MAAM,mBAAmB,GAAG,OAAO,CAAC;AACpC,MAAM,eAAe,GAAG,oBAAoB,CAAC;AAE7C;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,OAA4B;IACvD,MAAM,UAAU,GAAG,aAAa,CAAC,OAAO,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;IACnE,MAAM,cAAc,GAAG,aAAa,CAAC,OAAO,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAC;IAC/E,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,CAAC,GAAG,iBAAiB,CAAC,CAAC;IAE1D,MAAM,QAAQ,GAAoB;QAChC,QAAQ,EAAE,MAAM;QAChB,WAAW,EACT,2KAA2K;QAC7K,QAAQ,EAAE,OAAO;QACjB,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,eAAe;QAC3C,MAAM,EAAE,MAAM;QACd,OAAO;QACP,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,mBAAmB;KACtD,CAAC;IACF,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS;QAAE,QAAQ,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;IAC5E,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS;QAAE,QAAQ,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;IAE/E,OAAO;QACL,aAAa,EAAE,OAAO;QACtB,QAAQ;QACR,SAAS,EAAE;YACT,oEAAoE;YACpE,kDAAkD;YAClD,UAAU,EAAE;gBACV,OAAO,EAAE,UAAU;gBACnB,IAAI,EAAE,OAAO;gBACb,WAAW,EACT,qIAAqI;aACxI;YACD,cAAc,EAAE;gBACd,OAAO,EAAE,cAAc;gBACvB,IAAI,EAAE,UAAU;gBAChB,WAAW,EACT,sGAAsG;aACzG;SACF;QACD,KAAK,EAAE;YACL,+CAA+C;YAC/C,QAAQ,EAAE,KAAK,CAAC,qGAAqG,EAAE;gBACrH,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,4BAA4B,EAAE;gBAClE,SAAS,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,mCAAmC,EAAE;gBAChF,cAAc,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,iDAAiD,EAAE;gBACnG,UAAU,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,2CAA2C,EAAE;gBACzF,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,yBAAyB,EAAE;gBACtF,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,sCAAsC,EAAE;gBACnG,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,0FAA0F,EAAE;aACnI,CAAC;YACF,uDAAuD;YACvD,MAAM,EAAE,KAAK,CAAC,4DAA4D,EAAE;gBAC1E,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,4BAA4B,EAAE;gBACrE,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,2BAA2B,EAAE;gBACpE,WAAW,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,sCAAsC,EAAE;aACvG,CAAC;SACH;QACD,OAAO,EAAE;YACP,SAAS,EAAE,MAAM,CAAC,qCAAqC,EAAE,gBAAgB,EAAE,WAAW,EAAE,SAAS,CAAC;YAClG,SAAS,EAAE,MAAM,CAAC,qDAAqD,EAAE,gBAAgB,EAAE,WAAW,EAAE,OAAO,CAAC;YAChH,QAAQ,EAAE,MAAM,CAAC,gDAAgD,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,CAAC;SACzG;QACD,YAAY,EAAE,EAAE;QAChB,OAAO,EAAE;YACP,mBAAmB,EAAE;gBACnB,WAAW,EACT,mIAAmI;gBACrI,cAAc,EAAE,CAAC,WAAW,EAAE,gBAAgB,EAAE,WAAW,EAAE,UAAU,EAAE,WAAW,CAAC;gBACrF,KAAK,EAAE;oBACL;wBACE,EAAE,EAAE,CAAC;wBACL,MAAM,EAAE,kBAAkB;wBAC1B,WAAW,EAAE,kDAAkD;wBAC/D,OAAO,EAAE,YAAY;wBACrB,QAAQ,EAAE,gBAAgB;wBAC1B,QAAQ,EAAE,kBAAkB;wBAC5B,IAAI,EAAE;4BACJ,SAAS,EAAE,eAAe;4BAC1B,cAAc,EAAE,oBAAoB;4BACpC,SAAS,EAAE,eAAe;4BAC1B,QAAQ,EAAE,cAAc;yBACzB;qBACF;oBACD;wBACE,EAAE,EAAE,CAAC;wBACL,MAAM,EAAE,kBAAkB;wBAC1B,WAAW,EAAE,gFAAgF;wBAC7F,QAAQ,EAAE,YAAY;wBACtB,QAAQ,EAAE,cAAc;wBACxB,IAAI,EAAE,EAAE,SAAS,EAAE,eAAe,EAAE,QAAQ,EAAE,sCAAsC,EAAE,UAAU,EAAE,gBAAgB,EAAE;qBACrH;iBACF;aACF;YACD,iBAAiB,EAAE;gBACjB,WAAW,EAAE,qFAAqF;gBAClG,cAAc,EAAE,CAAC,YAAY,EAAE,QAAQ,EAAE,SAAS,CAAC;gBACnD,KAAK,EAAE;oBACL;wBACE,EAAE,EAAE,CAAC;wBACL,MAAM,EAAE,QAAQ;wBAChB,MAAM,EAAE,UAAU;wBAClB,WAAW,EAAE,wDAAwD;wBACrE,OAAO,EAAE,QAAQ;qBAClB;oBACD;wBACE,EAAE,EAAE,CAAC;wBACL,MAAM,EAAE,kBAAkB;wBAC1B,WAAW,EAAE,8DAA8D;wBAC3E,QAAQ,EAAE,gBAAgB;wBAC1B,QAAQ,EAAE,eAAe;wBACzB,IAAI,EAAE,EAAE,EAAE,EAAE,gBAAgB,EAAE,OAAO,EAAE,aAAa,EAAE;qBACvD;iBACF;aACF;YACD,YAAY,EAAE;gBACZ,WAAW,EAAE,+FAA+F;gBAC5G,cAAc,EAAE,CAAC,YAAY,CAAC;gBAC9B,KAAK,EAAE;oBACL,EAAE,EAAE,EAAE,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,4BAA4B,EAAE,OAAO,EAAE,QAAQ,EAAE;oBAC9G,EAAE,EAAE,EAAE,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,6BAA6B,EAAE,OAAO,EAAE,QAAQ,EAAE;oBAC/G,EAAE,EAAE,EAAE,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,sCAAsC,EAAE,OAAO,EAAE,QAAQ,EAAE;iBACxH;aACF;SACF;QACD,EAAE,EAAE;YACF,MAAM,EAAE;gBACN,SAAS,EAAE,WAAW;gBACtB,cAAc,EAAE,iBAAiB;gBACjC,SAAS,EAAE,YAAY;gBACvB,UAAU,EAAE,UAAU;gBACtB,MAAM,EAAE,aAAa;gBACrB,MAAM,EAAE,QAAQ;gBAChB,MAAM,EAAE,QAAQ;gBAChB,MAAM,EAAE,QAAQ;aACjB;YACD,kBAAkB,EAAE;gBAClB,mBAAmB,EAAE,gEAAgE;gBACrF,iBAAiB,EAAE,+CAA+C;gBAClE,YAAY,EAAE,+BAA+B;aAC9C;SACF;QACD,sEAAsE;QACtE,UAAU,EAAE,EAAE;KACf,CAAC;AACJ,CAAC;AAED,SAAS,KAAK,CAAC,WAAmB,EAAE,MAAyB;IAC3D,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC;AAChD,CAAC;AAED,SAAS,MAAM,CACb,WAAmB,EACnB,QAAgB,EAChB,EAAU,EACV,OAAe;IAEf,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,gBAAgB,EAAE,EAAE,OAAO,EAAE,CAAC;AAC1F,CAAC;AAED,SAAS,aAAa,CAAC,KAAa,EAAE,IAAY;IAChD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;QACnD,MAAM,IAAI,aAAa,CAAC,IAAI,IAAI,8CAA8C,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACzG,CAAC;IACD,OAAO,KAAmB,CAAC;AAC7B,CAAC"}

package/dist/errors.d.ts

@@ -0,0 +1,5 @@
+/** Raised when a PIM cannot be built from the provided inputs (e.g. a bad address). */
+export declare class PimBuildError extends Error {
+    constructor(message: string);
+}
+//# sourceMappingURL=errors.d.ts.map

package/dist/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA,uFAAuF;AACvF,qBAAa,aAAc,SAAQ,KAAK;gBAC1B,OAAO,EAAE,MAAM;CAI5B"}

package/dist/errors.js

@@ -0,0 +1,8 @@
+/** Raised when a PIM cannot be built from the provided inputs (e.g. a bad address). */
+export class PimBuildError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'PimBuildError';
+    }
+}
+//# sourceMappingURL=errors.js.map

package/dist/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA,uFAAuF;AACvF,MAAM,OAAO,aAAc,SAAQ,KAAK;IACtC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;IAC9B,CAAC;CACF"}

package/dist/index.d.ts

@@ -0,0 +1,24 @@
+/**
+ * @keelcodes/manifest
+ *
+ * ERC-8313 Protocol Interaction Manifest (PIM) — the consumer side (validate an
+ * untrusted manifest, grade its trust) and the producer side (emit Keel's own
+ * PIM). Pure functions, no I/O: the same code runs in a wallet, an agent, an MCP
+ * server or a CLI.
+ *
+ * Aligned with the draft of 2026-06-19 (author Paul Angus Bark, PR #1836). Where
+ * the draft does not pin a field, this package says so rather than guessing —
+ * see the README's "Unverified fields".
+ *
+ * @packageDocumentation
+ */
+export { CALCULATION_PRECISIONS, CONTRACT_ROLES, FILTER_OPERATORS, PIM_CATEGORIES, PIM_SECTIONS, SELECT_MODES, STEP_ACTIONS, TYPE_KINDS, VALIDATE_OPERATORS, } from './types.js';
+export type { CalculationPrecision, ContractRole, FilterOperator, Hex, HexAddress, Pim, PimCalculation, PimCategory, PimContract, PimField, PimIntent, PimIssue, PimLookup, PimMetadata, PimSection, PimSignature, PimStep, PimType, PimUi, PimValidateAssertion, SelectMode, SignatureType, StepAction, TypeKind, ValidateOperator, } from './types.js';
+export { PIM_DRAFT, validatePim } from './validate.js';
+export type { PimValidationOptions, PimValidationResult } from './validate.js';
+export { TRUST_LEVELS, canonicalPimJson, pimDigest, trustLevelOf } from './trust.js';
+export type { SignatureRecovery, SignatureScheme, TrustInfo, TrustLevel, TrustLevelDefinition, TrustLevelName, TrustOptions, } from './trust.js';
+export { buildKeelPim } from './build.js';
+export type { BuildKeelPimOptions } from './build.js';
+export { PimBuildError } from './errors.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EACL,sBAAsB,EACtB,cAAc,EACd,gBAAgB,EAChB,cAAc,EACd,YAAY,EACZ,YAAY,EACZ,YAAY,EACZ,UAAU,EACV,kBAAkB,GACnB,MAAM,YAAY,CAAC;AACpB,YAAY,EACV,oBAAoB,EACpB,YAAY,EACZ,cAAc,EACd,GAAG,EACH,UAAU,EACV,GAAG,EACH,cAAc,EACd,WAAW,EACX,WAAW,EACX,QAAQ,EACR,SAAS,EACT,QAAQ,EACR,SAAS,EACT,WAAW,EACX,UAAU,EACV,YAAY,EACZ,OAAO,EACP,OAAO,EACP,KAAK,EACL,oBAAoB,EACpB,UAAU,EACV,aAAa,EACb,UAAU,EACV,QAAQ,EACR,gBAAgB,GACjB,MAAM,YAAY,CAAC;AAEpB,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AACvD,YAAY,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AAE/E,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AACrF,YAAY,EACV,iBAAiB,EACjB,eAAe,EACf,SAAS,EACT,UAAU,EACV,oBAAoB,EACpB,cAAc,EACd,YAAY,GACb,MAAM,YAAY,CAAC;AAEpB,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC1C,YAAY,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAEtD,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC"}

package/dist/index.js

@@ -0,0 +1,20 @@
+/**
+ * @keelcodes/manifest
+ *
+ * ERC-8313 Protocol Interaction Manifest (PIM) — the consumer side (validate an
+ * untrusted manifest, grade its trust) and the producer side (emit Keel's own
+ * PIM). Pure functions, no I/O: the same code runs in a wallet, an agent, an MCP
+ * server or a CLI.
+ *
+ * Aligned with the draft of 2026-06-19 (author Paul Angus Bark, PR #1836). Where
+ * the draft does not pin a field, this package says so rather than guessing —
+ * see the README's "Unverified fields".
+ *
+ * @packageDocumentation
+ */
+export { CALCULATION_PRECISIONS, CONTRACT_ROLES, FILTER_OPERATORS, PIM_CATEGORIES, PIM_SECTIONS, SELECT_MODES, STEP_ACTIONS, TYPE_KINDS, VALIDATE_OPERATORS, } from './types.js';
+export { PIM_DRAFT, validatePim } from './validate.js';
+export { TRUST_LEVELS, canonicalPimJson, pimDigest, trustLevelOf } from './trust.js';
+export { buildKeelPim } from './build.js';
+export { PimBuildError } from './errors.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EACL,sBAAsB,EACtB,cAAc,EACd,gBAAgB,EAChB,cAAc,EACd,YAAY,EACZ,YAAY,EACZ,YAAY,EACZ,UAAU,EACV,kBAAkB,GACnB,MAAM,YAAY,CAAC;AA6BpB,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAGvD,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAWrF,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAG1C,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC"}