@oneie/sdk 0.14.12 → 0.14.14

package/dist/role-actions.d.ts

@@ -0,0 +1,28 @@
+/**
+ * role-actions.ts — the authority VOCABULARY, and nothing else.
+ *
+ * Forty names. No tiers, no floors, no policy: `minTier`, `tierOf`,
+ * `SELF_ACTIONS` and `WRITE_ACTIONS` stay in one.ie/web/src/lib/role-check.ts,
+ * which imports this union as a TYPE and re-exports it, so every existing web
+ * importer is untouched and the authority path gains no runtime dependency on
+ * the SDK.
+ *
+ * It lives here because the receiver registry (`receivers.ts`) must type its
+ * `roleAction` field against the real union (IC row 7) and the SDK cannot import
+ * web. The only alternative was a second copy of the union with nothing holding
+ * the two in sync.
+ *
+ * Subpath export only (`@oneie/sdk/role-actions`) — deliberately NOT re-exported
+ * from src/index.ts, same rule as fn-allowlist: two consumers are CF Workers and
+ * the barrel crashes them.
+ *
+ * The names are LOCKED alongside the four rungs. Adding one is a policy change:
+ * it needs a `minTier` row in role-check.ts in the same diff, or it defaults to
+ * read tier and gates nothing.
+ */
+export declare const ROLE_ACTIONS: readonly ["add_unit", "remove_unit", "mark", "warn", "tune_sensitivity", "read_highways", "read_revenue", "read_toxic", "appoint_role", "read_memory", "read_corpus", "write_corpus", "delete_memory", "discover", "create_group", "update_group", "delete_group", "invite_member", "change_role", "customize_vocabulary", "edit_schema", "mint_capability", "add_attribute", "view_onchain", "chat_read", "chat_write", "vault_sync", "mcp_register", "verify_domain", "manage_lifecycle", "grant_capability", "read_self", "delete_self", "manage_workflows", "view_workflows", "act_as", "manage_integrations", "view_wallet", "read_tasks"];
+/** The real union. `RoleAction` was a loose `string` in receivers.ts until C6. */
+export type RoleAction = (typeof ROLE_ACTIONS)[number];
+/** Narrowing guard — for the one place a declared label has to be tested. */
+export declare function isRoleAction(value: string): value is RoleAction;
+//# sourceMappingURL=role-actions.d.ts.map

package/dist/role-actions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"role-actions.d.ts","sourceRoot":"","sources":["../src/role-actions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,eAAO,MAAM,YAAY,inBAwCf,CAAC;AAEX,kFAAkF;AAClF,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC;AAEvD,6EAA6E;AAC7E,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,IAAI,UAAU,CAE/D"}

package/dist/role-actions.js

@@ -0,0 +1,68 @@
+/**
+ * role-actions.ts — the authority VOCABULARY, and nothing else.
+ *
+ * Forty names. No tiers, no floors, no policy: `minTier`, `tierOf`,
+ * `SELF_ACTIONS` and `WRITE_ACTIONS` stay in one.ie/web/src/lib/role-check.ts,
+ * which imports this union as a TYPE and re-exports it, so every existing web
+ * importer is untouched and the authority path gains no runtime dependency on
+ * the SDK.
+ *
+ * It lives here because the receiver registry (`receivers.ts`) must type its
+ * `roleAction` field against the real union (IC row 7) and the SDK cannot import
+ * web. The only alternative was a second copy of the union with nothing holding
+ * the two in sync.
+ *
+ * Subpath export only (`@oneie/sdk/role-actions`) — deliberately NOT re-exported
+ * from src/index.ts, same rule as fn-allowlist: two consumers are CF Workers and
+ * the barrel crashes them.
+ *
+ * The names are LOCKED alongside the four rungs. Adding one is a policy change:
+ * it needs a `minTier` row in role-check.ts in the same diff, or it defaults to
+ * read tier and gates nothing.
+ */
+export const ROLE_ACTIONS = [
+    "add_unit",
+    "remove_unit",
+    "mark",
+    "warn",
+    "tune_sensitivity",
+    "read_highways",
+    "read_revenue",
+    "read_toxic",
+    "appoint_role",
+    "read_memory",
+    "read_corpus",
+    "write_corpus",
+    "delete_memory",
+    "discover",
+    "create_group",
+    "update_group",
+    "delete_group",
+    "invite_member",
+    "change_role",
+    "customize_vocabulary",
+    "edit_schema",
+    "mint_capability",
+    "add_attribute",
+    "view_onchain",
+    "chat_read",
+    "chat_write",
+    "vault_sync",
+    "mcp_register",
+    "verify_domain",
+    "manage_lifecycle",
+    "grant_capability",
+    "read_self",
+    "delete_self",
+    "manage_workflows",
+    "view_workflows",
+    "act_as",
+    "manage_integrations",
+    "view_wallet",
+    "read_tasks",
+];
+/** Narrowing guard — for the one place a declared label has to be tested. */
+export function isRoleAction(value) {
+    return ROLE_ACTIONS.includes(value);
+}
+//# sourceMappingURL=role-actions.js.map

package/dist/role-actions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"role-actions.js","sourceRoot":"","sources":["../src/role-actions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B,UAAU;IACV,aAAa;IACb,MAAM;IACN,MAAM;IACN,kBAAkB;IAClB,eAAe;IACf,cAAc;IACd,YAAY;IACZ,cAAc;IACd,aAAa;IACb,aAAa;IACb,cAAc;IACd,eAAe;IACf,UAAU;IACV,cAAc;IACd,cAAc;IACd,cAAc;IACd,eAAe;IACf,aAAa;IACb,sBAAsB;IACtB,aAAa;IACb,iBAAiB;IACjB,eAAe;IACf,cAAc;IACd,WAAW;IACX,YAAY;IACZ,YAAY;IACZ,cAAc;IACd,eAAe;IACf,kBAAkB;IAClB,kBAAkB;IAClB,WAAW;IACX,aAAa;IACb,kBAAkB;IAClB,gBAAgB;IAChB,QAAQ;IACR,qBAAqB;IACrB,aAAa;IACb,YAAY;CACJ,CAAC;AAKX,6EAA6E;AAC7E,MAAM,UAAU,YAAY,CAAC,KAAa;IACxC,OAAQ,YAAkC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAC7D,CAAC"}

package/dist/role-tiers.d.ts

@@ -0,0 +1,45 @@
+/**
+ * role-tiers.ts — the authority POLICY. One table, every surface.
+ *
+ * `role-actions.ts` holds the vocabulary; this holds the decision:
+ *
+ *     tierOf(role) >= minTier(action)
+ *
+ * It lives in the SDK for the same reason the vocabulary does — web owns the
+ * walk, but web is not importable from `channels`, and channels gates 137
+ * workspace tools on exactly this question. The copy that did not exist is why
+ * every chat tool fell back to a TypeDB-only check and denied the workspace's
+ * own owner whenever the group tree was unseeded.
+ *
+ * `one.ie/web/src/lib/role-check.ts` re-exports all of this, so every existing
+ * web importer is untouched and there is no second table to drift.
+ *
+ * Subpath export only (`@oneie/sdk/role-tiers`) — same rule as role-actions and
+ * fn-allowlist: consumers are CF Workers and the bare barrel crashes them.
+ */
+import type { RoleAction } from "./role-actions.js";
+/** Four rungs. agent/auditor are actor attributes, not roles. */
+export type MemberRole = "owner" | "admin" | "member" | "viewer";
+/** Numeric rung: own=3, manage=2, write=1, read=0. */
+export type Rung = 0 | 1 | 2 | 3;
+export declare const MEMBER_ROLES: readonly MemberRole[];
+/** Parse an untrusted role string (a D1 column, a webhook body) to a rung.
+ *  An unknown or absent role is `viewer` — the floor, never a grant. */
+export declare function rungOf(role: string | null | undefined): Rung;
+/**
+ * Map a MemberRole to its numeric rung.
+ * The entire authority policy is: tierOf(role) >= minTier(action).
+ */
+export declare function tierOf(role: MemberRole): Rung;
+/**
+ * Minimum rung required to perform an action.
+ * This is the complete policy table — one number per action.
+ *
+ * Tiers (text/security-description-new.md §4):
+ *   3 own    — delete_group, edit_schema, mint_capability, grant_capability, act_as
+ *   2 manage — people & settings (invite, change roles, update group, …)
+ *   1 write  — create & change (mark, warn, create_group, chat_write, …)
+ *   0 read   — discover, view_*, chat_read, read_highways
+ */
+export declare function minTier(action: RoleAction): Rung;
+//# sourceMappingURL=role-tiers.d.ts.map

package/dist/role-tiers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"role-tiers.d.ts","sourceRoot":"","sources":["../src/role-tiers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAEpD,iEAAiE;AACjE,MAAM,MAAM,UAAU,GAAG,OAAO,GAAG,OAAO,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAEjE,sDAAsD;AACtD,MAAM,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AAEjC,eAAO,MAAM,YAAY,EAAE,SAAS,UAAU,EAKpC,CAAC;AAEX;wEACwE;AACxE,wBAAgB,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,IAAI,CAI5D;AAED;;;GAGG;AACH,wBAAgB,MAAM,CAAC,IAAI,EAAE,UAAU,GAAG,IAAI,CAK7C;AAED;;;;;;;;;GASG;AACH,wBAAgB,OAAO,CAAC,MAAM,EAAE,UAAU,GAAG,IAAI,CA0ChD"}

package/dist/role-tiers.js

@@ -0,0 +1,99 @@
+/**
+ * role-tiers.ts — the authority POLICY. One table, every surface.
+ *
+ * `role-actions.ts` holds the vocabulary; this holds the decision:
+ *
+ *     tierOf(role) >= minTier(action)
+ *
+ * It lives in the SDK for the same reason the vocabulary does — web owns the
+ * walk, but web is not importable from `channels`, and channels gates 137
+ * workspace tools on exactly this question. The copy that did not exist is why
+ * every chat tool fell back to a TypeDB-only check and denied the workspace's
+ * own owner whenever the group tree was unseeded.
+ *
+ * `one.ie/web/src/lib/role-check.ts` re-exports all of this, so every existing
+ * web importer is untouched and there is no second table to drift.
+ *
+ * Subpath export only (`@oneie/sdk/role-tiers`) — same rule as role-actions and
+ * fn-allowlist: consumers are CF Workers and the bare barrel crashes them.
+ */
+export const MEMBER_ROLES = [
+    "owner",
+    "admin",
+    "member",
+    "viewer",
+];
+/** Parse an untrusted role string (a D1 column, a webhook body) to a rung.
+ *  An unknown or absent role is `viewer` — the floor, never a grant. */
+export function rungOf(role) {
+    return MEMBER_ROLES.includes(role ?? "")
+        ? tierOf(role)
+        : 0;
+}
+/**
+ * Map a MemberRole to its numeric rung.
+ * The entire authority policy is: tierOf(role) >= minTier(action).
+ */
+export function tierOf(role) {
+    if (role === "owner")
+        return 3;
+    if (role === "admin")
+        return 2;
+    if (role === "member")
+        return 1;
+    return 0; // viewer
+}
+/**
+ * Minimum rung required to perform an action.
+ * This is the complete policy table — one number per action.
+ *
+ * Tiers (text/security-description-new.md §4):
+ *   3 own    — delete_group, edit_schema, mint_capability, grant_capability, act_as
+ *   2 manage — people & settings (invite, change roles, update group, …)
+ *   1 write  — create & change (mark, warn, create_group, chat_write, …)
+ *   0 read   — discover, view_*, chat_read, read_highways
+ */
+export function minTier(action) {
+    switch (action) {
+        // OWN tier (3)
+        case "delete_group":
+        case "edit_schema":
+        case "mint_capability":
+        case "grant_capability":
+        case "act_as":
+            return 3;
+        // MANAGE tier (2)
+        case "add_unit":
+        case "remove_unit":
+        case "update_group":
+        case "invite_member":
+        case "change_role":
+        case "tune_sensitivity":
+        case "read_revenue":
+        case "read_toxic":
+        case "appoint_role":
+        case "delete_memory":
+        case "customize_vocabulary":
+        case "verify_domain":
+        case "manage_lifecycle":
+        case "manage_workflows":
+        case "manage_integrations":
+            return 2;
+        // WRITE tier (1)
+        case "mark":
+        case "warn":
+        case "create_group":
+        case "chat_write":
+        case "add_attribute":
+        case "vault_sync":
+        case "mcp_register":
+        case "read_memory":
+        case "read_corpus":
+        case "write_corpus":
+            return 1;
+        // READ tier (0) — discover, view_*, chat_read, read_highways, self-actions
+        default:
+            return 0;
+    }
+}
+//# sourceMappingURL=role-tiers.js.map

package/dist/role-tiers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"role-tiers.js","sourceRoot":"","sources":["../src/role-tiers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAUH,MAAM,CAAC,MAAM,YAAY,GAA0B;IAClD,OAAO;IACP,OAAO;IACP,QAAQ;IACR,QAAQ;CACC,CAAC;AAEX;wEACwE;AACxE,MAAM,UAAU,MAAM,CAAC,IAA+B;IACrD,OAAQ,YAAkC,CAAC,QAAQ,CAAC,IAAI,IAAI,EAAE,CAAC;QAC9D,CAAC,CAAC,MAAM,CAAC,IAAkB,CAAC;QAC5B,CAAC,CAAC,CAAC,CAAC;AACN,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,MAAM,CAAC,IAAgB;IACtC,IAAI,IAAI,KAAK,OAAO;QAAE,OAAO,CAAC,CAAC;IAC/B,IAAI,IAAI,KAAK,OAAO;QAAE,OAAO,CAAC,CAAC;IAC/B,IAAI,IAAI,KAAK,QAAQ;QAAE,OAAO,CAAC,CAAC;IAChC,OAAO,CAAC,CAAC,CAAC,SAAS;AACpB,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,OAAO,CAAC,MAAkB;IACzC,QAAQ,MAAM,EAAE,CAAC;QAChB,eAAe;QACf,KAAK,cAAc,CAAC;QACpB,KAAK,aAAa,CAAC;QACnB,KAAK,iBAAiB,CAAC;QACvB,KAAK,kBAAkB,CAAC;QACxB,KAAK,QAAQ;YACZ,OAAO,CAAC,CAAC;QACV,kBAAkB;QAClB,KAAK,UAAU,CAAC;QAChB,KAAK,aAAa,CAAC;QACnB,KAAK,cAAc,CAAC;QACpB,KAAK,eAAe,CAAC;QACrB,KAAK,aAAa,CAAC;QACnB,KAAK,kBAAkB,CAAC;QACxB,KAAK,cAAc,CAAC;QACpB,KAAK,YAAY,CAAC;QAClB,KAAK,cAAc,CAAC;QACpB,KAAK,eAAe,CAAC;QACrB,KAAK,sBAAsB,CAAC;QAC5B,KAAK,eAAe,CAAC;QACrB,KAAK,kBAAkB,CAAC;QACxB,KAAK,kBAAkB,CAAC;QACxB,KAAK,qBAAqB;YACzB,OAAO,CAAC,CAAC;QACV,iBAAiB;QACjB,KAAK,MAAM,CAAC;QACZ,KAAK,MAAM,CAAC;QACZ,KAAK,cAAc,CAAC;QACpB,KAAK,YAAY,CAAC;QAClB,KAAK,eAAe,CAAC;QACrB,KAAK,YAAY,CAAC;QAClB,KAAK,cAAc,CAAC;QACpB,KAAK,aAAa,CAAC;QACnB,KAAK,aAAa,CAAC;QACnB,KAAK,cAAc;YAClB,OAAO,CAAC,CAAC;QACV,2EAA2E;QAC3E;YACC,OAAO,CAAC,CAAC;IACX,CAAC;AACF,CAAC"}

package/dist/schemas.d.ts

@@ -71,6 +71,17 @@ export declare const DiscoverResponseSchema: z.ZodObject<{
     count: z.ZodNumber;
     limit: z.ZodNumber;
 }, z.core.$strip>;
+/**
+ * `agents:register`'s reply.
+ *
+ * The five trailing fields are ADDITIVE and appear only on the anonymous
+ * self-registration path — an attested caller registering under an identity it
+ * already holds gets exactly the shape it always got, so no existing consumer
+ * (the MCP `register` tool, channels, the CLI) sees a change.
+ *
+ * `apiKey` is a credential returned once. Same handling as `agent:enroll`'s:
+ * hand it to the caller, never log it, never persist the response.
+ */
 export declare const RegisterResponseSchema: z.ZodObject<{
     ok: z.ZodBoolean;
     uid: z.ZodString;
@@ -79,6 +90,17 @@ export declare const RegisterResponseSchema: z.ZodObject<{
     wallet: z.ZodNullable<z.ZodString>;
     walletLinked: z.ZodBoolean;
     capabilities: z.ZodNumber;
+    actorId: z.ZodOptional<z.ZodString>;
+    apiKey: z.ZodOptional<z.ZodString>;
+    rung: z.ZodOptional<z.ZodEnum<{
+        scoped: "scoped";
+        tenant: "tenant";
+    }>>;
+    float: z.ZodOptional<z.ZodEnum<{
+        locked: "locked";
+        unlocked: "unlocked";
+    }>>;
+    unlock: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
 export declare const PayResponseSchema: z.ZodObject<{
     ok: z.ZodBoolean;
@@ -252,8 +274,8 @@ export declare const WorkflowDiffSchema: z.ZodObject<{
         stepId: z.ZodString;
         field: z.ZodEnum<{
             name: "name";
-            config: "config";
             position: "position";
+            config: "config";
             "exit-condition": "exit-condition";
             owner: "owner";
         }>;

package/dist/schemas.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"schemas.d.ts","sourceRoot":"","sources":["../src/schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,oBAAoB;;;;;;;iBAO/B,CAAC;AAEH,eAAO,MAAM,sBAAsB;;;;;;;iBAOjC,CAAC;AAEH,eAAO,MAAM,uBAAuB;;;;;;;;iBAQlC,CAAC;AAEH,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;iBAelC,CAAC;AAEH,eAAO,MAAM,mBAAmB;;;;;;;;;;;;iBAY9B,CAAC;AAEH,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;iBAKjC,CAAC;AAEH,eAAO,MAAM,sBAAsB;;;;;;;;iBAQjC,CAAC;AAEH,eAAO,MAAM,iBAAiB;;;;;;;iBAO5B,CAAC;AAEH,eAAO,MAAM,kBAAkB;;;;;iBAK7B,CAAC;AAEH,eAAO,MAAM,yBAAyB;;;;iBAIpC,CAAC;AAEH,eAAO,MAAM,yBAAyB;;;;iBAIpC,CAAC;AAEH,eAAO,MAAM,oBAAoB;;;;;iBAK/B,CAAC;AAEH,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;iBAOtB,CAAC;AAEH,eAAO,MAAM,eAAe;;;;;;;;;;;;;iBAS1B,CAAC;AAEH,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;iBAOvB,CAAC;AAGH,eAAO,MAAM,YAAY;;;;;;;;iBAKvB,CAAA;AACF,MAAM,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAA;AAEjD,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;iBAehC,CAAA;AACF,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAA;AAEnE,wBAAgB,cAAc,CAC5B,KAAK,EAAE,MAAM,EACb,OAAO,SAAgB,EACvB,KAAK,SAA+C,GACnD,MAAM,EAAE,CAEV;AAMD,eAAO,MAAM,QAAQ;;;;;;;;;EASnB,CAAC;AACH,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,QAAQ,CAAC,CAAC;AAKhD,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAqB7B,CAAC;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC"}
+{"version":3,"file":"schemas.d.ts","sourceRoot":"","sources":["../src/schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,oBAAoB;;;;;;;iBAO/B,CAAC;AAEH,eAAO,MAAM,sBAAsB;;;;;;;iBAOjC,CAAC;AAEH,eAAO,MAAM,uBAAuB;;;;;;;;iBAQlC,CAAC;AAEH,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;iBAelC,CAAC;AAEH,eAAO,MAAM,mBAAmB;;;;;;;;;;;;iBAY9B,CAAC;AAEH,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;iBAKjC,CAAC;AAEH;;;;;;;;;;GAUG;AACH,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;iBAkBjC,CAAC;AAEH,eAAO,MAAM,iBAAiB;;;;;;;iBAO5B,CAAC;AAEH,eAAO,MAAM,kBAAkB;;;;;iBAK7B,CAAC;AAEH,eAAO,MAAM,yBAAyB;;;;iBAIpC,CAAC;AAEH,eAAO,MAAM,yBAAyB;;;;iBAIpC,CAAC;AAEH,eAAO,MAAM,oBAAoB;;;;;iBAK/B,CAAC;AAEH,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;iBAOtB,CAAC;AAEH,eAAO,MAAM,eAAe;;;;;;;;;;;;;iBAS1B,CAAC;AAEH,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;iBAOvB,CAAC;AAGH,eAAO,MAAM,YAAY;;;;;;;;iBAKvB,CAAA;AACF,MAAM,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAA;AAEjD,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;iBAehC,CAAA;AACF,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAA;AAEnE,wBAAgB,cAAc,CAC5B,KAAK,EAAE,MAAM,EACb,OAAO,SAAgB,EACvB,KAAK,SAA+C,GACnD,MAAM,EAAE,CAEV;AAMD,eAAO,MAAM,QAAQ;;;;;;;;;EASnB,CAAC;AACH,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,QAAQ,CAAC,CAAC;AAKhD,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAqB7B,CAAC;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC"}

package/dist/schemas.js

@@ -59,6 +59,17 @@ export const DiscoverResponseSchema = z.object({
     count: z.number(),
     limit: z.number(),
 });
+/**
+ * `agents:register`'s reply.
+ *
+ * The five trailing fields are ADDITIVE and appear only on the anonymous
+ * self-registration path — an attested caller registering under an identity it
+ * already holds gets exactly the shape it always got, so no existing consumer
+ * (the MCP `register` tool, channels, the CLI) sees a change.
+ *
+ * `apiKey` is a credential returned once. Same handling as `agent:enroll`'s:
+ * hand it to the caller, never log it, never persist the response.
+ */
 export const RegisterResponseSchema = z.object({
     ok: z.boolean(),
     uid: z.string(),
@@ -67,6 +78,16 @@ export const RegisterResponseSchema = z.object({
     wallet: z.string().nullable(),
     walletLinked: z.boolean(),
     capabilities: z.number(),
+    /** Present only when this call minted the identity (anonymous registration). */
+    actorId: z.string().optional(),
+    /** Present only when this call minted the identity. Returned once. */
+    apiKey: z.string().optional(),
+    /** The rung the caller holds. "scoped" = may list and be paid, nothing else. */
+    rung: z.enum(["scoped", "tenant"]).optional(),
+    /** "locked" until one x402 challenge is satisfied. */
+    float: z.enum(["locked", "unlocked"]).optional(),
+    /** Where to satisfy that challenge. */
+    unlock: z.string().optional(),
 });
 export const PayResponseSchema = z.object({
     ok: z.boolean(),

package/dist/schemas.js.map

@@ -1 +1 @@
-{"version":3,"file":"schemas.js","sourceRoot":"","sources":["../src/schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE;IACf,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC9B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;IACpB,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CACtC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;QACzB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;QAChB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;QACpB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;QACtB,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE;KAChB,CAAC,CAAC;CACJ,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE;IACf,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE;CACvB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE;IACf,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACxC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC7C,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACtC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;QACvB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;QAChB,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE;QACf,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC7B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAClC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;KAC5B,CAAC,CAAC,CAAC,QAAQ,EAAE;CACf,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE;IACf,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;IACzB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;CACrB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC;IACpC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;CAClB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE;IACf,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE;IACf,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE;IACzB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;CACzB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE;IACf,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC3B,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE;IACf,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC7B,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE;IACf,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;CACnB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE;IACf,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;CACnB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;CACrB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC;IAClC,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IAC9E,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IACvC,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IACjE,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IACzD,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IAC5D,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;CACtB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;IACxB,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE;IAC1B,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE;CAC7F,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;IACvC,KAAK,EAAE,eAAe;IACtB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;CACtB,CAAC,CAAC;AAEH,kEAAkE;AAClE,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAChC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE;CAChB,CAAC,CAAA;AAGF,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACtC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACrC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,QAAQ,EAAE;IACzC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC/B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,QAAQ,EAAE;CAC1F,CAAC,CAAA;AAGF,MAAM,UAAU,cAAc,CAC5B,KAAa,EACb,OAAO,GAAG,aAAa,EACvB,KAAK,GAAG,4CAA4C;IAEpD,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;AACrE,CAAC;AAED,kFAAkF;AAClF,kFAAkF;AAClF,4EAA4E;AAC5E,qGAAqG;AACrG,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,CAAC,IAAI,CAAC;IAC7B,SAAS,EAAI,kEAAkE;IAC/E,MAAM,EAAO,8EAA8E;IAC3F,OAAO,EAAM,uFAAuF;IACpG,OAAO,EAAM,yFAAyF;IACtG,WAAW,EAAE,0DAA0D;IACvE,OAAO,EAAM,0GAA0G;IACvH,OAAO,EAAM,0DAA0D;IACvE,MAAM,EAAO,iGAAiG;CAC/G,CAAC,CAAC;AAGH,gFAAgF;AAChF,0EAA0E;AAC1E,kFAAkF;AAClF,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;QACpB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAkB,uDAAuD;QAC3F,IAAI,EAAE,QAAQ;QACd,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;QAChB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAkB,2CAA2C;QAC/E,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAK,+BAA+B;KACpE,CAAC,CAAC,CAAC,QAAQ,EAAE;IACd,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,EAAkB,WAAW;IACnE,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;QACxB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;QACtC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAsB,yCAAyC;KAChG,CAAC,CAAC,CAAC,QAAQ,EAAE;IACd,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;QAC3B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;KACvC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACd,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;QACvB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;QAClB,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,gBAAgB,EAAE,OAAO,CAAC,CAAC;QACxE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;KAClB,CAAC,CAAC,CAAC,QAAQ,EAAE;CACf,CAAC,CAAC"}
+{"version":3,"file":"schemas.js","sourceRoot":"","sources":["../src/schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE;IACf,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC9B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;IACpB,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CACtC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;QACzB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;QAChB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;QACpB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;QACtB,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE;KAChB,CAAC,CAAC;CACJ,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE;IACf,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE;CACvB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE;IACf,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACxC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC7C,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACtC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;QACvB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;QAChB,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE;QACf,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC7B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAClC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;KAC5B,CAAC,CAAC,CAAC,QAAQ,EAAE;CACf,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE;IACf,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;IACzB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;CACrB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC;IACpC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;CAClB,CAAC,CAAC;AAEH;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE;IACf,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE;IACf,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE;IACzB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;IACxB,gFAAgF;IAChF,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,sEAAsE;IACtE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,gFAAgF;IAChF,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC7C,sDAAsD;IACtD,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC,QAAQ,EAAE;IAChD,uCAAuC;IACvC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC9B,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE;IACf,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC3B,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE;IACf,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC7B,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE;IACf,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;CACnB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE;IACf,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;CACnB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;CACrB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC;IAClC,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IAC9E,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IACvC,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IACjE,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IACzD,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IAC5D,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;CACtB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;IACxB,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE;IAC1B,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE;CAC7F,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;IACvC,KAAK,EAAE,eAAe;IACtB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;CACtB,CAAC,CAAC;AAEH,kEAAkE;AAClE,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAChC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE;CAChB,CAAC,CAAA;AAGF,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACtC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACrC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,QAAQ,EAAE;IACzC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC/B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,QAAQ,EAAE;CAC1F,CAAC,CAAA;AAGF,MAAM,UAAU,cAAc,CAC5B,KAAa,EACb,OAAO,GAAG,aAAa,EACvB,KAAK,GAAG,4CAA4C;IAEpD,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;AACrE,CAAC;AAED,kFAAkF;AAClF,kFAAkF;AAClF,4EAA4E;AAC5E,qGAAqG;AACrG,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,CAAC,IAAI,CAAC;IAC7B,SAAS,EAAI,kEAAkE;IAC/E,MAAM,EAAO,8EAA8E;IAC3F,OAAO,EAAM,uFAAuF;IACpG,OAAO,EAAM,yFAAyF;IACtG,WAAW,EAAE,0DAA0D;IACvE,OAAO,EAAM,0GAA0G;IACvH,OAAO,EAAM,0DAA0D;IACvE,MAAM,EAAO,iGAAiG;CAC/G,CAAC,CAAC;AAGH,gFAAgF;AAChF,0EAA0E;AAC1E,kFAAkF;AAClF,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;QACpB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAkB,uDAAuD;QAC3F,IAAI,EAAE,QAAQ;QACd,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;QAChB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAkB,2CAA2C;QAC/E,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAK,+BAA+B;KACpE,CAAC,CAAC,CAAC,QAAQ,EAAE;IACd,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,EAAkB,WAAW;IACnE,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;QACxB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;QACtC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAsB,yCAAyC;KAChG,CAAC,CAAC,CAAC,QAAQ,EAAE;IACd,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;QAC3B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;KACvC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACd,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;QACvB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;QAClB,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,gBAAgB,EAAE,OAAO,CAAC,CAAC;QACxE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;KAClB,CAAC,CAAC,CAAC,QAAQ,EAAE;CACf,CAAC,CAAC"}

package/dist/work-contract-grammar.json

@@ -53,9 +53,11 @@
             "objective",
             "output",
             "plan",
+            "product",
             "promise",
             "service",
             "skill",
+            "sku",
             "step",
             "task",
             "token"
@@ -222,6 +224,11 @@
         "build:resume",
         "build:run",
         "capabilities:publish",
+        "cart:add",
+        "cart:clear",
+        "cart:get",
+        "cart:remove",
+        "cart:update",
         "chat:context",
         "chat:grade",
         "chat:harden",
@@ -229,6 +236,9 @@
         "checkout:create",
         "checkout:resume",
         "companies:create",
+        "company:map",
+        "company:render",
+        "company:seo",
         "connect:channel",
         "connect:status",
         "conversation:start",
@@ -246,18 +256,30 @@
         "entity:rename",
         "entity:reply",
         "entity:tag",
+        "event:track",
         "factory:attempt",
         "factory:elaborate",
+        "factory:event",
+        "factory:size",
         "fn:run",
+        "foundation:deep",
+        "foundation:derive",
+        "foundation:extract",
+        "foundation:promote-draft",
+        "foundation:read",
+        "foundation:save",
+        "foundation:start",
         "funnel:advance",
         "funnel:create",
         "funnel:publish",
         "funnel:update-step",
+        "git:pr",
         "grant-capability",
         "groups:invite",
         "groups:join",
         "groups:leave",
         "groups:members",
+        "health:diagnose",
         "human:notify",
         "human:resolve",
         "identity:address",
@@ -265,6 +287,7 @@
         "lens:list",
         "lens:run",
         "lens:save",
+        "lifecycle:of",
         "lifecycle:save",
         "links:bulk-create",
         "links:create",
@@ -281,6 +304,7 @@
         "market:offer",
         "market:offers",
         "market:reject",
+        "market:search",
         "market:settle",
         "market:verify",
         "message:send",
@@ -297,6 +321,9 @@
         "notify:count",
         "notify:list",
         "notify:read",
+        "order:claim",
+        "order:install",
+        "orders:status",
         "pages:create",
         "pages:edit",
         "pages:fill-pack",
@@ -340,6 +367,7 @@
         "seo:keywords-for-keyword",
         "seo:llm-mentions",
         "seo:serp",
+        "settings:set-home-page",
         "settings:write",
         "signals:list",
         "skill:run",
@@ -352,19 +380,41 @@
         "space:join",
         "space:post",
         "stats:current",
+        "storefront:enable",
         "storefront:stats",
         "subscriptions:register",
         "tasks:announce",
         "tasks:claim",
+        "tasks:comment",
         "tasks:create",
+        "tasks:depend",
         "tasks:everywhere",
+        "tasks:follow",
+        "tasks:follows",
+        "tasks:generate",
         "tasks:launch",
         "tasks:link",
+        "tasks:list",
         "tasks:mine",
+        "tasks:notes",
+        "tasks:priority",
+        "tasks:reap",
+        "tasks:reassign",
+        "tasks:rename",
+        "tasks:schedule",
         "tasks:stake",
+        "tasks:status",
+        "tasks:subtask",
+        "tasks:tag",
         "tasks:undepend",
+        "tasks:unfollow",
         "thread:append",
+        "tools:composio",
         "tools:connect",
+        "variants:archive",
+        "variants:create",
+        "variants:list",
+        "variants:update",
         "video:contact-call",
         "video:create-room",
         "video:create-session",
@@ -373,6 +423,8 @@
         "video:invite",
         "video:join-event",
         "video:quick-room",
+        "video:request-meeting",
+        "video:room-status",
         "video:schedule-webinar",
         "video:start-recording",
         "video:start-stream",
@@ -387,8 +439,16 @@
         "voice:call",
         "voice:provision",
         "voice:token",
+        "wallet:create",
+        "wallet:get",
+        "wallet:invoice",
+        "wallet:portfolio",
+        "wallet:rehearse",
+        "wallet:send",
+        "wallet:transactions",
         "web:crawl",
         "workflow:apply-diff",
+        "workflow:apply-tql",
         "workflow:create",
         "workflow:delete",
         "workflow:fade",
@@ -398,7 +458,9 @@
         "workflow:run",
         "workflow:runs",
         "workflow:settled-notify",
+        "workflow:step-stats",
         "workflow:stop",
+        "workflow:tql",
         "workflow:trigger",
         "workflow:update",
         "workflow:validate",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@oneie/sdk",
-  "version": "0.14.12",
+  "version": "0.14.14",
   "description": "ONE substrate SDK — signals, units, persist, launch handoff.",
   "type": "module",
   "main": "./dist/index.js",
@@ -47,6 +47,10 @@
       "types": "./dist/receivers.d.ts",
       "import": "./dist/receivers.js"
     },
+    "./blocks": {
+      "types": "./dist/blocks.d.ts",
+      "import": "./dist/blocks.js"
+    },
     "./work-contract": {
       "types": "./dist/work-contract.d.ts",
       "import": "./dist/work-contract.js"
@@ -87,6 +91,18 @@
       "types": "./dist/fn-allowlist.d.ts",
       "import": "./dist/fn-allowlist.js"
     },
+    "./role-tiers": {
+      "types": "./dist/role-tiers.d.ts",
+      "import": "./dist/role-tiers.js"
+    },
+    "./role-actions": {
+      "types": "./dist/role-actions.d.ts",
+      "import": "./dist/role-actions.js"
+    },
+    "./receiver-action": {
+      "types": "./dist/receiver-action.d.ts",
+      "import": "./dist/receiver-action.js"
+    },
     "./generated/fn-map": {
       "types": "./dist/generated/fn-map.d.ts",
       "import": "./dist/generated/fn-map.js"
@@ -106,7 +122,7 @@
     "generate:openapi": "bun run scripts/generate-openapi.ts",
     "generate:base": "bun run scripts/generate-base-manifest.ts",
     "typecheck": "tsc --noEmit",
-    "test": "vitest run",
+    "test": "bash ../../.claude/scripts/gate-run.sh test-sdk -- vitest run",
     "test:watch": "vitest",
     "prepublishOnly": "bun run build"
   },