@t2000/id 10.32.0 → 10.32.2

package/README.md

@@ -31,7 +31,17 @@ const tx = buildRegisterTx({
 | `buildUpdateTx(reg?)` | `update` (full-replace) | the agent |
 | `buildSetActiveTx(agent, active)` | `set_active` | the agent |
 
-Package + Registry object ids are baked in (mainnet) and overridable via `AGENT_ID_PACKAGE_ID` / `AGENT_ID_REGISTRY_ID` env vars for testnet/dev.
+Two tiers of ids (S.1049):
+
+- **`MAINNET_AGENT_ID_PACKAGE_ID` / `MAINNET_AGENT_ID_REGISTRY_ID`** — literal
+  mainnet trust anchors, never influenced by the environment. Anything that
+  *verifies* a transaction before signing (allowlists, intent guards) must
+  use these.
+- **`AGENT_ID_PACKAGE_ID` / `AGENT_ID_REGISTRY_ID`** — builder ids, overridable
+  via the same-named env vars for testnet/dev. These are conveniences for
+  *constructing* transactions, **not** a security boundary: a guard that read
+  them would let whoever controls the environment supply both the transaction
+  and the yardstick it is checked against.
 
 ## License
 

package/dist/index.cjs

@@ -6,8 +6,10 @@ var transactions = require('@mysten/sui/transactions');
 var utils = require('@mysten/sui/utils');
 
 // src/index.ts
-var AGENT_ID_PACKAGE_ID = process.env.AGENT_ID_PACKAGE_ID ?? "0xe94a8b8f14104b75ee4c7e359289da78698fbfffdd0e5e3e9cb7d250887df7a7";
-var AGENT_ID_REGISTRY_ID = process.env.AGENT_ID_REGISTRY_ID ?? "0xf41683aa9f4c121f34e4082c35180b0efdbd6d5293e3c88b1bcfa45ddf5c4119";
+var MAINNET_AGENT_ID_PACKAGE_ID = "0xe94a8b8f14104b75ee4c7e359289da78698fbfffdd0e5e3e9cb7d250887df7a7";
+var MAINNET_AGENT_ID_REGISTRY_ID = "0xf41683aa9f4c121f34e4082c35180b0efdbd6d5293e3c88b1bcfa45ddf5c4119";
+var AGENT_ID_PACKAGE_ID = process.env.AGENT_ID_PACKAGE_ID ?? MAINNET_AGENT_ID_PACKAGE_ID;
+var AGENT_ID_REGISTRY_ID = process.env.AGENT_ID_REGISTRY_ID ?? MAINNET_AGENT_ID_REGISTRY_ID;
 var CLOCK_ID = "0x6";
 var MODULE = "registry";
 function registrationArgs(tx, reg) {
@@ -80,9 +82,9 @@ function buildSetActiveTx(agent, active) {
 
 exports.AGENT_ID_PACKAGE_ID = AGENT_ID_PACKAGE_ID;
 exports.AGENT_ID_REGISTRY_ID = AGENT_ID_REGISTRY_ID;
+exports.MAINNET_AGENT_ID_PACKAGE_ID = MAINNET_AGENT_ID_PACKAGE_ID;
+exports.MAINNET_AGENT_ID_REGISTRY_ID = MAINNET_AGENT_ID_REGISTRY_ID;
 exports.buildRegisterTx = buildRegisterTx;
 exports.buildSetActiveTx = buildSetActiveTx;
 exports.buildUpdateTx = buildUpdateTx;
 exports.getAgentRecord = getAgentRecord;
-//# sourceMappingURL=index.cjs.map
-//# sourceMappingURL=index.cjs.map

package/dist/index.d.cts

@@ -15,15 +15,28 @@ import { Transaction } from '@mysten/sui/transactions';
  *
  * Deployed on Sui mainnet 2026-06-29. Override via env for testnet/dev.
  */
-/** The published `agent_id` package id — pin the LATEST upgrade id ONLY
- *  (the S.1019 rule; event/type anchors stay on the original package
- *  `0x7669be20…be9a45e9`, which remains callable for its own functions).
- *  LATEST = the S.1032 v2 upgrade (2026-08-13, ownership deprecated;
- *  Registry migrated to version 2 — upgrade digest 7ZUiRi48…, migrate
- *  digest 97sNqgt9…). The previous id `0x78d36506…d15451` now aborts
+/** MAINNET trust anchor (S.1049 — the S.930 escrow pattern): the published
+ *  `agent_id` package id as a LITERAL, never `process.env`. Signature-time
+ *  verification (the CLI intent guard's allowlist) imports THIS — reading
+ *  the env-aware constant below would let an attacker who controls the
+ *  environment supply both the transaction and the yardstick.
+ *
+ *  Pin the LATEST upgrade id ONLY (the S.1019 rule; event/type anchors stay
+ *  on the original package `0x7669be20…be9a45e9`, which remains callable for
+ *  its own functions). LATEST = the S.1032 v2 upgrade (2026-08-13, ownership
+ *  deprecated; Registry migrated to version 2 — upgrade digest 7ZUiRi48…,
+ *  migrate digest 97sNqgt9…). The previous id `0x78d36506…d15451` now aborts
  *  EWrongVersion on every mutator. */
+declare const MAINNET_AGENT_ID_PACKAGE_ID = "0xe94a8b8f14104b75ee4c7e359289da78698fbfffdd0e5e3e9cb7d250887df7a7";
+/** MAINNET trust anchor: the shared `Registry` object id (same rule —
+ *  literal, never env). */
+declare const MAINNET_AGENT_ID_REGISTRY_ID = "0xf41683aa9f4c121f34e4082c35180b0efdbd6d5293e3c88b1bcfa45ddf5c4119";
+/** BUILDER id — env-overridable for testnet/dev. NOT a trust anchor:
+ *  transaction BUILDERS may read it so a dev chain works, but guards and
+ *  allowlists must use MAINNET_AGENT_ID_PACKAGE_ID (S.1049). */
 declare const AGENT_ID_PACKAGE_ID: string;
-/** The shared `Registry` object id. */
+/** BUILDER id — env-overridable for testnet/dev; same not-a-trust-anchor
+ *  rule as AGENT_ID_PACKAGE_ID. */
 declare const AGENT_ID_REGISTRY_ID: string;
 /** The mutable registration payload. `update` is full-replace — supply the
  *  complete desired state (omitted fields clear on-chain). */
@@ -61,4 +74,4 @@ declare function getAgentRecord(address: string, opts?: {
  *  agent-only since registry v2 / S.1032). */
 declare function buildSetActiveTx(agent: string, active: boolean): Transaction;
 
-export { AGENT_ID_PACKAGE_ID, AGENT_ID_REGISTRY_ID, type AgentRegistration, type OnChainAgentRecord, buildRegisterTx, buildSetActiveTx, buildUpdateTx, getAgentRecord };
+export { AGENT_ID_PACKAGE_ID, AGENT_ID_REGISTRY_ID, type AgentRegistration, MAINNET_AGENT_ID_PACKAGE_ID, MAINNET_AGENT_ID_REGISTRY_ID, type OnChainAgentRecord, buildRegisterTx, buildSetActiveTx, buildUpdateTx, getAgentRecord };

package/dist/index.d.ts

@@ -15,15 +15,28 @@ import { Transaction } from '@mysten/sui/transactions';
  *
  * Deployed on Sui mainnet 2026-06-29. Override via env for testnet/dev.
  */
-/** The published `agent_id` package id — pin the LATEST upgrade id ONLY
- *  (the S.1019 rule; event/type anchors stay on the original package
- *  `0x7669be20…be9a45e9`, which remains callable for its own functions).
- *  LATEST = the S.1032 v2 upgrade (2026-08-13, ownership deprecated;
- *  Registry migrated to version 2 — upgrade digest 7ZUiRi48…, migrate
- *  digest 97sNqgt9…). The previous id `0x78d36506…d15451` now aborts
+/** MAINNET trust anchor (S.1049 — the S.930 escrow pattern): the published
+ *  `agent_id` package id as a LITERAL, never `process.env`. Signature-time
+ *  verification (the CLI intent guard's allowlist) imports THIS — reading
+ *  the env-aware constant below would let an attacker who controls the
+ *  environment supply both the transaction and the yardstick.
+ *
+ *  Pin the LATEST upgrade id ONLY (the S.1019 rule; event/type anchors stay
+ *  on the original package `0x7669be20…be9a45e9`, which remains callable for
+ *  its own functions). LATEST = the S.1032 v2 upgrade (2026-08-13, ownership
+ *  deprecated; Registry migrated to version 2 — upgrade digest 7ZUiRi48…,
+ *  migrate digest 97sNqgt9…). The previous id `0x78d36506…d15451` now aborts
  *  EWrongVersion on every mutator. */
+declare const MAINNET_AGENT_ID_PACKAGE_ID = "0xe94a8b8f14104b75ee4c7e359289da78698fbfffdd0e5e3e9cb7d250887df7a7";
+/** MAINNET trust anchor: the shared `Registry` object id (same rule —
+ *  literal, never env). */
+declare const MAINNET_AGENT_ID_REGISTRY_ID = "0xf41683aa9f4c121f34e4082c35180b0efdbd6d5293e3c88b1bcfa45ddf5c4119";
+/** BUILDER id — env-overridable for testnet/dev. NOT a trust anchor:
+ *  transaction BUILDERS may read it so a dev chain works, but guards and
+ *  allowlists must use MAINNET_AGENT_ID_PACKAGE_ID (S.1049). */
 declare const AGENT_ID_PACKAGE_ID: string;
-/** The shared `Registry` object id. */
+/** BUILDER id — env-overridable for testnet/dev; same not-a-trust-anchor
+ *  rule as AGENT_ID_PACKAGE_ID. */
 declare const AGENT_ID_REGISTRY_ID: string;
 /** The mutable registration payload. `update` is full-replace — supply the
  *  complete desired state (omitted fields clear on-chain). */
@@ -61,4 +74,4 @@ declare function getAgentRecord(address: string, opts?: {
  *  agent-only since registry v2 / S.1032). */
 declare function buildSetActiveTx(agent: string, active: boolean): Transaction;
 
-export { AGENT_ID_PACKAGE_ID, AGENT_ID_REGISTRY_ID, type AgentRegistration, type OnChainAgentRecord, buildRegisterTx, buildSetActiveTx, buildUpdateTx, getAgentRecord };
+export { AGENT_ID_PACKAGE_ID, AGENT_ID_REGISTRY_ID, type AgentRegistration, MAINNET_AGENT_ID_PACKAGE_ID, MAINNET_AGENT_ID_REGISTRY_ID, type OnChainAgentRecord, buildRegisterTx, buildSetActiveTx, buildUpdateTx, getAgentRecord };

package/dist/index.js

@@ -4,8 +4,10 @@ import { Transaction } from '@mysten/sui/transactions';
 import { deriveDynamicFieldID } from '@mysten/sui/utils';
 
 // src/index.ts
-var AGENT_ID_PACKAGE_ID = process.env.AGENT_ID_PACKAGE_ID ?? "0xe94a8b8f14104b75ee4c7e359289da78698fbfffdd0e5e3e9cb7d250887df7a7";
-var AGENT_ID_REGISTRY_ID = process.env.AGENT_ID_REGISTRY_ID ?? "0xf41683aa9f4c121f34e4082c35180b0efdbd6d5293e3c88b1bcfa45ddf5c4119";
+var MAINNET_AGENT_ID_PACKAGE_ID = "0xe94a8b8f14104b75ee4c7e359289da78698fbfffdd0e5e3e9cb7d250887df7a7";
+var MAINNET_AGENT_ID_REGISTRY_ID = "0xf41683aa9f4c121f34e4082c35180b0efdbd6d5293e3c88b1bcfa45ddf5c4119";
+var AGENT_ID_PACKAGE_ID = process.env.AGENT_ID_PACKAGE_ID ?? MAINNET_AGENT_ID_PACKAGE_ID;
+var AGENT_ID_REGISTRY_ID = process.env.AGENT_ID_REGISTRY_ID ?? MAINNET_AGENT_ID_REGISTRY_ID;
 var CLOCK_ID = "0x6";
 var MODULE = "registry";
 function registrationArgs(tx, reg) {
@@ -76,6 +78,4 @@ function buildSetActiveTx(agent, active) {
   return tx;
 }
 
-export { AGENT_ID_PACKAGE_ID, AGENT_ID_REGISTRY_ID, buildRegisterTx, buildSetActiveTx, buildUpdateTx, getAgentRecord };
-//# sourceMappingURL=index.js.map
-//# sourceMappingURL=index.js.map
+export { AGENT_ID_PACKAGE_ID, AGENT_ID_REGISTRY_ID, MAINNET_AGENT_ID_PACKAGE_ID, MAINNET_AGENT_ID_REGISTRY_ID, buildRegisterTx, buildSetActiveTx, buildUpdateTx, getAgentRecord };

package/package.json

@@ -1,6 +1,9 @@
 {
   "name": "@t2000/id",
-  "version": "10.32.0",
+  "version": "10.32.2",
+  "engines": {
+    "node": ">=20"
+  },
   "description": "Agent ID — on-chain agent identity registry client for the t2000 stack (Sui). Build register/update/ownership/active transactions against the agent_id::registry Move package.",
   "type": "module",
   "main": "./dist/index.cjs",

package/dist/index.cjs.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/index.ts"],"names":["Transaction","SuiGrpcClient","deriveDynamicFieldID","bcs"],"mappings":";;;;;;;;AA2BO,IAAM,mBAAA,GACX,OAAA,CAAQ,GAAA,CAAI,mBAAA,IACZ;AAGK,IAAM,oBAAA,GACX,OAAA,CAAQ,GAAA,CAAI,oBAAA,IACZ;AAEF,IAAM,QAAA,GAAW,KAAA;AACjB,IAAM,MAAA,GAAS,UAAA;AAWf,SAAS,gBAAA,CAAiB,IAAiB,GAAA,EAAwB;AACjE,EAAA,OAAO;AAAA,IACL,EAAA,CAAG,OAAO,oBAAoB,CAAA;AAAA,IAC9B,GAAG,IAAA,CAAK,MAAA,CAAO,QAAA,EAAU,GAAA,CAAI,eAAe,IAAI,CAAA;AAAA,IAChD,GAAG,IAAA,CAAK,MAAA,CAAO,UAAU,GAAA,CAAI,cAAA,IAAkB,EAAE,CAAA;AAAA,IACjD,GAAG,IAAA,CAAK,MAAA,CAAO,QAAA,EAAU,GAAA,CAAI,OAAO,IAAI,CAAA;AAAA,IACxC,GAAG,IAAA,CAAK,MAAA,CAAO,QAAA,EAAU,GAAA,CAAI,eAAe,IAAI,CAAA;AAAA,IAChD,EAAA,CAAG,OAAO,QAAQ;AAAA,GACpB;AACF;AAGO,SAAS,eAAA,CAAgB,GAAA,GAAyB,EAAC,EAAgB;AACxE,EAAA,MAAM,EAAA,GAAK,IAAIA,wBAAA,EAAY;AAC3B,EAAA,EAAA,CAAG,QAAA,CAAS;AAAA,IACV,MAAA,EAAQ,CAAA,EAAG,mBAAmB,CAAA,EAAA,EAAK,MAAM,CAAA,UAAA,CAAA;AAAA,IACzC,SAAA,EAAW,gBAAA,CAAiB,EAAA,EAAI,GAAG;AAAA,GACpC,CAAA;AACD,EAAA,OAAO,EAAA;AACT;AAGO,SAAS,aAAA,CAAc,GAAA,GAAyB,EAAC,EAAgB;AACtE,EAAA,MAAM,EAAA,GAAK,IAAIA,wBAAA,EAAY;AAC3B,EAAA,EAAA,CAAG,QAAA,CAAS;AAAA,IACV,MAAA,EAAQ,CAAA,EAAG,mBAAmB,CAAA,EAAA,EAAK,MAAM,CAAA,QAAA,CAAA;AAAA,IACzC,SAAA,EAAW,gBAAA,CAAiB,EAAA,EAAI,GAAG;AAAA,GACpC,CAAA;AACD,EAAA,OAAO,EAAA;AACT;AAuBA,eAAsB,cAAA,CACpB,OAAA,EACA,IAAA,GAAoE,EAAC,EACjC;AACpC,EAAA,MAAM,OAAA,GAAU,KAAK,OAAA,IAAW,SAAA;AAChC,EAAA,MAAM,MAAA,GACJ,IAAA,CAAK,MAAA,IACL,IAAIC,kBAAA,CAAc;AAAA,IAChB,OAAA,EACE,OAAA,KAAY,SAAA,GACR,iCAAA,GACA,iCAAA;AAAA,IACN;AAAA,GACD,CAAA;AACH,EAAA,MAAM,GAAA,GAAM,MAAM,MAAA,CAAO,IAAA,CAAK,SAAA,CAAU;AAAA,IACtC,QAAA,EAAU,oBAAA;AAAA,IACV,OAAA,EAAS,EAAE,IAAA,EAAM,IAAA;AAAK,GACvB,CAAA;AACD,EAAA,MAAM,OAAA,GAAW,GAAA,CAAI,MAAA,EAAQ,IAAA,EACzB,MAAA,EAAQ,EAAA;AACZ,EAAA,IAAI,CAAC,SAAS,OAAO,IAAA;AACrB,EAAA,MAAM,OAAA,GAAUC,0BAAA;AAAA,IACd,OAAA;AAAA,IACA,SAAA;AAAA,IACAC,OAAA,CAAI,OAAA,CAAQ,SAAA,CAAU,OAAO,EAAE,OAAA;AAAQ,GACzC;AACA,EAAA,IAAI;AACF,IAAA,MAAM,GAAA,GAAM,MAAM,MAAA,CAAO,IAAA,CAAK,SAAA,CAAU;AAAA,MACtC,QAAA,EAAU,OAAA;AAAA,MACV,OAAA,EAAS,EAAE,IAAA,EAAM,IAAA;AAAK,KACvB,CAAA;AACD,IAAA,MAAM,GAAA,GAAO,GAAA,CAAI,MAAA,EAAQ,IAAA,EACrB,KAAA;AACJ,IAAA,OAAO,GAAA,EAAK,QAAQ,GAAA,GAAM,IAAA;AAAA,EAC5B,CAAA,CAAA,MAAQ;AAEN,IAAA,OAAO,IAAA;AAAA,EACT;AACF;AAIO,SAAS,gBAAA,CAAiB,OAAe,MAAA,EAA8B;AAC5E,EAAA,MAAM,EAAA,GAAK,IAAIH,wBAAA,EAAY;AAC3B,EAAA,EAAA,CAAG,QAAA,CAAS;AAAA,IACV,MAAA,EAAQ,CAAA,EAAG,mBAAmB,CAAA,EAAA,EAAK,MAAM,CAAA,YAAA,CAAA;AAAA,IACzC,SAAA,EAAW;AAAA,MACT,EAAA,CAAG,OAAO,oBAAoB,CAAA;AAAA,MAC9B,EAAA,CAAG,IAAA,CAAK,OAAA,CAAQ,KAAK,CAAA;AAAA,MACrB,EAAA,CAAG,IAAA,CAAK,IAAA,CAAK,MAAM,CAAA;AAAA,MACnB,EAAA,CAAG,OAAO,QAAQ;AAAA;AACpB,GACD,CAAA;AACD,EAAA,OAAO,EAAA;AACT","file":"index.cjs","sourcesContent":["import { bcs } from '@mysten/sui/bcs';\nimport { SuiGrpcClient } from '@mysten/sui/grpc';\nimport { Transaction } from '@mysten/sui/transactions';\nimport { deriveDynamicFieldID } from '@mysten/sui/utils';\n\n/**\n * @t2000/id — client for the `agent_id::registry` Move package (Agent ID\n * Phase B). These builders construct UNSIGNED transactions calling the on-chain\n * registry; the caller signs (always the AGENT's keypair — every mutator is\n * agent-signed since S.1032) and may sponsor gas (the agent is the sender,\n * so `sender == agent` auth holds; a SUI-funded t2000 account co-signs gas).\n *\n * Passport↔agent OWNERSHIP left the product (S.1032, 2026-08-13): the\n * link/confirm/renounce builders are gone, and the on-chain mutators\n * always abort (`EOwnershipDeprecated`) once the Registry is migrated.\n * Historical `owner`/`pending_owner` record fields remain on-chain, inert.\n *\n * Deployed on Sui mainnet 2026-06-29. Override via env for testnet/dev.\n */\n\n/** The published `agent_id` package id — pin the LATEST upgrade id ONLY\n *  (the S.1019 rule; event/type anchors stay on the original package\n *  `0x7669be20…be9a45e9`, which remains callable for its own functions).\n *  LATEST = the S.1032 v2 upgrade (2026-08-13, ownership deprecated;\n *  Registry migrated to version 2 — upgrade digest 7ZUiRi48…, migrate\n *  digest 97sNqgt9…). The previous id `0x78d36506…d15451` now aborts\n *  EWrongVersion on every mutator. */\nexport const AGENT_ID_PACKAGE_ID =\n  process.env.AGENT_ID_PACKAGE_ID ??\n  '0xe94a8b8f14104b75ee4c7e359289da78698fbfffdd0e5e3e9cb7d250887df7a7';\n\n/** The shared `Registry` object id. */\nexport const AGENT_ID_REGISTRY_ID =\n  process.env.AGENT_ID_REGISTRY_ID ??\n  '0xf41683aa9f4c121f34e4082c35180b0efdbd6d5293e3c88b1bcfa45ddf5c4119';\n\nconst CLOCK_ID = '0x6';\nconst MODULE = 'registry';\n\n/** The mutable registration payload. `update` is full-replace — supply the\n *  complete desired state (omitted fields clear on-chain). */\nexport interface AgentRegistration {\n  mcpEndpoint?: string | null;\n  paymentMethods?: string[];\n  did?: string | null;\n  metadataUri?: string | null;\n}\n\nfunction registrationArgs(tx: Transaction, reg: AgentRegistration) {\n  return [\n    tx.object(AGENT_ID_REGISTRY_ID),\n    tx.pure.option('string', reg.mcpEndpoint ?? null),\n    tx.pure.vector('string', reg.paymentMethods ?? []),\n    tx.pure.option('string', reg.did ?? null),\n    tx.pure.option('string', reg.metadataUri ?? null),\n    tx.object(CLOCK_ID),\n  ];\n}\n\n/** Register the SIGNER as an agent (self-sovereign: `sender == agent`). */\nexport function buildRegisterTx(reg: AgentRegistration = {}): Transaction {\n  const tx = new Transaction();\n  tx.moveCall({\n    target: `${AGENT_ID_PACKAGE_ID}::${MODULE}::register`,\n    arguments: registrationArgs(tx, reg),\n  });\n  return tx;\n}\n\n/** Update the signer's record (full-replace). */\nexport function buildUpdateTx(reg: AgentRegistration = {}): Transaction {\n  const tx = new Transaction();\n  tx.moveCall({\n    target: `${AGENT_ID_PACKAGE_ID}::${MODULE}::update`,\n    arguments: registrationArgs(tx, reg),\n  });\n  return tx;\n}\n\n// Ownership builders (buildSetPendingOwnerTx / buildConfirmOwnershipTx /\n// buildRenounceOwnershipTx) were REMOVED in S.1032 — the on-chain mutators\n// always abort since registry v2. There is no ownership surface to build for.\n\n/** An agent's on-chain registry record (registry Table dynamic field),\n *  field names as stored by the Move package. */\nexport interface OnChainAgentRecord {\n  agent: string;\n  mcp_endpoint?: string | null;\n  payment_methods?: string[] | null;\n  did?: string | null;\n  metadata_uri?: string | null;\n}\n\n/**\n * Read one agent's registry record. Returns `null` when the address is not\n * registered. gRPC only (JSON-RPC is deactivated July 31, 2026).\n *\n * Callers that already hold a `SuiGrpcClient` should pass it; otherwise a\n * mainnet client is constructed per call.\n */\nexport async function getAgentRecord(\n  address: string,\n  opts: { client?: SuiGrpcClient; network?: 'mainnet' | 'testnet' } = {},\n): Promise<OnChainAgentRecord | null> {\n  const network = opts.network ?? 'mainnet';\n  const client =\n    opts.client ??\n    new SuiGrpcClient({\n      baseUrl:\n        network === 'testnet'\n          ? 'https://fullnode.testnet.sui.io'\n          : 'https://fullnode.mainnet.sui.io',\n      network,\n    });\n  const reg = await client.core.getObject({\n    objectId: AGENT_ID_REGISTRY_ID,\n    include: { json: true },\n  });\n  const tableId = (reg.object?.json as { agents?: { id?: string } } | undefined)\n    ?.agents?.id;\n  if (!tableId) return null;\n  const fieldId = deriveDynamicFieldID(\n    tableId,\n    'address',\n    bcs.Address.serialize(address).toBytes(),\n  );\n  try {\n    const obj = await client.core.getObject({\n      objectId: fieldId,\n      include: { json: true },\n    });\n    const rec = (obj.object?.json as { value?: OnChainAgentRecord } | undefined)\n      ?.value;\n    return rec?.agent ? rec : null;\n  } catch {\n    // Field object absent → not registered.\n    return null;\n  }\n}\n\n/** Toggle an agent's active flag (signer must be the agent itself —\n *  agent-only since registry v2 / S.1032). */\nexport function buildSetActiveTx(agent: string, active: boolean): Transaction {\n  const tx = new Transaction();\n  tx.moveCall({\n    target: `${AGENT_ID_PACKAGE_ID}::${MODULE}::set_active`,\n    arguments: [\n      tx.object(AGENT_ID_REGISTRY_ID),\n      tx.pure.address(agent),\n      tx.pure.bool(active),\n      tx.object(CLOCK_ID),\n    ],\n  });\n  return tx;\n}\n"]}

package/dist/index.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/index.ts"],"names":[],"mappings":";;;;;;AA2BO,IAAM,mBAAA,GACX,OAAA,CAAQ,GAAA,CAAI,mBAAA,IACZ;AAGK,IAAM,oBAAA,GACX,OAAA,CAAQ,GAAA,CAAI,oBAAA,IACZ;AAEF,IAAM,QAAA,GAAW,KAAA;AACjB,IAAM,MAAA,GAAS,UAAA;AAWf,SAAS,gBAAA,CAAiB,IAAiB,GAAA,EAAwB;AACjE,EAAA,OAAO;AAAA,IACL,EAAA,CAAG,OAAO,oBAAoB,CAAA;AAAA,IAC9B,GAAG,IAAA,CAAK,MAAA,CAAO,QAAA,EAAU,GAAA,CAAI,eAAe,IAAI,CAAA;AAAA,IAChD,GAAG,IAAA,CAAK,MAAA,CAAO,UAAU,GAAA,CAAI,cAAA,IAAkB,EAAE,CAAA;AAAA,IACjD,GAAG,IAAA,CAAK,MAAA,CAAO,QAAA,EAAU,GAAA,CAAI,OAAO,IAAI,CAAA;AAAA,IACxC,GAAG,IAAA,CAAK,MAAA,CAAO,QAAA,EAAU,GAAA,CAAI,eAAe,IAAI,CAAA;AAAA,IAChD,EAAA,CAAG,OAAO,QAAQ;AAAA,GACpB;AACF;AAGO,SAAS,eAAA,CAAgB,GAAA,GAAyB,EAAC,EAAgB;AACxE,EAAA,MAAM,EAAA,GAAK,IAAI,WAAA,EAAY;AAC3B,EAAA,EAAA,CAAG,QAAA,CAAS;AAAA,IACV,MAAA,EAAQ,CAAA,EAAG,mBAAmB,CAAA,EAAA,EAAK,MAAM,CAAA,UAAA,CAAA;AAAA,IACzC,SAAA,EAAW,gBAAA,CAAiB,EAAA,EAAI,GAAG;AAAA,GACpC,CAAA;AACD,EAAA,OAAO,EAAA;AACT;AAGO,SAAS,aAAA,CAAc,GAAA,GAAyB,EAAC,EAAgB;AACtE,EAAA,MAAM,EAAA,GAAK,IAAI,WAAA,EAAY;AAC3B,EAAA,EAAA,CAAG,QAAA,CAAS;AAAA,IACV,MAAA,EAAQ,CAAA,EAAG,mBAAmB,CAAA,EAAA,EAAK,MAAM,CAAA,QAAA,CAAA;AAAA,IACzC,SAAA,EAAW,gBAAA,CAAiB,EAAA,EAAI,GAAG;AAAA,GACpC,CAAA;AACD,EAAA,OAAO,EAAA;AACT;AAuBA,eAAsB,cAAA,CACpB,OAAA,EACA,IAAA,GAAoE,EAAC,EACjC;AACpC,EAAA,MAAM,OAAA,GAAU,KAAK,OAAA,IAAW,SAAA;AAChC,EAAA,MAAM,MAAA,GACJ,IAAA,CAAK,MAAA,IACL,IAAI,aAAA,CAAc;AAAA,IAChB,OAAA,EACE,OAAA,KAAY,SAAA,GACR,iCAAA,GACA,iCAAA;AAAA,IACN;AAAA,GACD,CAAA;AACH,EAAA,MAAM,GAAA,GAAM,MAAM,MAAA,CAAO,IAAA,CAAK,SAAA,CAAU;AAAA,IACtC,QAAA,EAAU,oBAAA;AAAA,IACV,OAAA,EAAS,EAAE,IAAA,EAAM,IAAA;AAAK,GACvB,CAAA;AACD,EAAA,MAAM,OAAA,GAAW,GAAA,CAAI,MAAA,EAAQ,IAAA,EACzB,MAAA,EAAQ,EAAA;AACZ,EAAA,IAAI,CAAC,SAAS,OAAO,IAAA;AACrB,EAAA,MAAM,OAAA,GAAU,oBAAA;AAAA,IACd,OAAA;AAAA,IACA,SAAA;AAAA,IACA,GAAA,CAAI,OAAA,CAAQ,SAAA,CAAU,OAAO,EAAE,OAAA;AAAQ,GACzC;AACA,EAAA,IAAI;AACF,IAAA,MAAM,GAAA,GAAM,MAAM,MAAA,CAAO,IAAA,CAAK,SAAA,CAAU;AAAA,MACtC,QAAA,EAAU,OAAA;AAAA,MACV,OAAA,EAAS,EAAE,IAAA,EAAM,IAAA;AAAK,KACvB,CAAA;AACD,IAAA,MAAM,GAAA,GAAO,GAAA,CAAI,MAAA,EAAQ,IAAA,EACrB,KAAA;AACJ,IAAA,OAAO,GAAA,EAAK,QAAQ,GAAA,GAAM,IAAA;AAAA,EAC5B,CAAA,CAAA,MAAQ;AAEN,IAAA,OAAO,IAAA;AAAA,EACT;AACF;AAIO,SAAS,gBAAA,CAAiB,OAAe,MAAA,EAA8B;AAC5E,EAAA,MAAM,EAAA,GAAK,IAAI,WAAA,EAAY;AAC3B,EAAA,EAAA,CAAG,QAAA,CAAS;AAAA,IACV,MAAA,EAAQ,CAAA,EAAG,mBAAmB,CAAA,EAAA,EAAK,MAAM,CAAA,YAAA,CAAA;AAAA,IACzC,SAAA,EAAW;AAAA,MACT,EAAA,CAAG,OAAO,oBAAoB,CAAA;AAAA,MAC9B,EAAA,CAAG,IAAA,CAAK,OAAA,CAAQ,KAAK,CAAA;AAAA,MACrB,EAAA,CAAG,IAAA,CAAK,IAAA,CAAK,MAAM,CAAA;AAAA,MACnB,EAAA,CAAG,OAAO,QAAQ;AAAA;AACpB,GACD,CAAA;AACD,EAAA,OAAO,EAAA;AACT","file":"index.js","sourcesContent":["import { bcs } from '@mysten/sui/bcs';\nimport { SuiGrpcClient } from '@mysten/sui/grpc';\nimport { Transaction } from '@mysten/sui/transactions';\nimport { deriveDynamicFieldID } from '@mysten/sui/utils';\n\n/**\n * @t2000/id — client for the `agent_id::registry` Move package (Agent ID\n * Phase B). These builders construct UNSIGNED transactions calling the on-chain\n * registry; the caller signs (always the AGENT's keypair — every mutator is\n * agent-signed since S.1032) and may sponsor gas (the agent is the sender,\n * so `sender == agent` auth holds; a SUI-funded t2000 account co-signs gas).\n *\n * Passport↔agent OWNERSHIP left the product (S.1032, 2026-08-13): the\n * link/confirm/renounce builders are gone, and the on-chain mutators\n * always abort (`EOwnershipDeprecated`) once the Registry is migrated.\n * Historical `owner`/`pending_owner` record fields remain on-chain, inert.\n *\n * Deployed on Sui mainnet 2026-06-29. Override via env for testnet/dev.\n */\n\n/** The published `agent_id` package id — pin the LATEST upgrade id ONLY\n *  (the S.1019 rule; event/type anchors stay on the original package\n *  `0x7669be20…be9a45e9`, which remains callable for its own functions).\n *  LATEST = the S.1032 v2 upgrade (2026-08-13, ownership deprecated;\n *  Registry migrated to version 2 — upgrade digest 7ZUiRi48…, migrate\n *  digest 97sNqgt9…). The previous id `0x78d36506…d15451` now aborts\n *  EWrongVersion on every mutator. */\nexport const AGENT_ID_PACKAGE_ID =\n  process.env.AGENT_ID_PACKAGE_ID ??\n  '0xe94a8b8f14104b75ee4c7e359289da78698fbfffdd0e5e3e9cb7d250887df7a7';\n\n/** The shared `Registry` object id. */\nexport const AGENT_ID_REGISTRY_ID =\n  process.env.AGENT_ID_REGISTRY_ID ??\n  '0xf41683aa9f4c121f34e4082c35180b0efdbd6d5293e3c88b1bcfa45ddf5c4119';\n\nconst CLOCK_ID = '0x6';\nconst MODULE = 'registry';\n\n/** The mutable registration payload. `update` is full-replace — supply the\n *  complete desired state (omitted fields clear on-chain). */\nexport interface AgentRegistration {\n  mcpEndpoint?: string | null;\n  paymentMethods?: string[];\n  did?: string | null;\n  metadataUri?: string | null;\n}\n\nfunction registrationArgs(tx: Transaction, reg: AgentRegistration) {\n  return [\n    tx.object(AGENT_ID_REGISTRY_ID),\n    tx.pure.option('string', reg.mcpEndpoint ?? null),\n    tx.pure.vector('string', reg.paymentMethods ?? []),\n    tx.pure.option('string', reg.did ?? null),\n    tx.pure.option('string', reg.metadataUri ?? null),\n    tx.object(CLOCK_ID),\n  ];\n}\n\n/** Register the SIGNER as an agent (self-sovereign: `sender == agent`). */\nexport function buildRegisterTx(reg: AgentRegistration = {}): Transaction {\n  const tx = new Transaction();\n  tx.moveCall({\n    target: `${AGENT_ID_PACKAGE_ID}::${MODULE}::register`,\n    arguments: registrationArgs(tx, reg),\n  });\n  return tx;\n}\n\n/** Update the signer's record (full-replace). */\nexport function buildUpdateTx(reg: AgentRegistration = {}): Transaction {\n  const tx = new Transaction();\n  tx.moveCall({\n    target: `${AGENT_ID_PACKAGE_ID}::${MODULE}::update`,\n    arguments: registrationArgs(tx, reg),\n  });\n  return tx;\n}\n\n// Ownership builders (buildSetPendingOwnerTx / buildConfirmOwnershipTx /\n// buildRenounceOwnershipTx) were REMOVED in S.1032 — the on-chain mutators\n// always abort since registry v2. There is no ownership surface to build for.\n\n/** An agent's on-chain registry record (registry Table dynamic field),\n *  field names as stored by the Move package. */\nexport interface OnChainAgentRecord {\n  agent: string;\n  mcp_endpoint?: string | null;\n  payment_methods?: string[] | null;\n  did?: string | null;\n  metadata_uri?: string | null;\n}\n\n/**\n * Read one agent's registry record. Returns `null` when the address is not\n * registered. gRPC only (JSON-RPC is deactivated July 31, 2026).\n *\n * Callers that already hold a `SuiGrpcClient` should pass it; otherwise a\n * mainnet client is constructed per call.\n */\nexport async function getAgentRecord(\n  address: string,\n  opts: { client?: SuiGrpcClient; network?: 'mainnet' | 'testnet' } = {},\n): Promise<OnChainAgentRecord | null> {\n  const network = opts.network ?? 'mainnet';\n  const client =\n    opts.client ??\n    new SuiGrpcClient({\n      baseUrl:\n        network === 'testnet'\n          ? 'https://fullnode.testnet.sui.io'\n          : 'https://fullnode.mainnet.sui.io',\n      network,\n    });\n  const reg = await client.core.getObject({\n    objectId: AGENT_ID_REGISTRY_ID,\n    include: { json: true },\n  });\n  const tableId = (reg.object?.json as { agents?: { id?: string } } | undefined)\n    ?.agents?.id;\n  if (!tableId) return null;\n  const fieldId = deriveDynamicFieldID(\n    tableId,\n    'address',\n    bcs.Address.serialize(address).toBytes(),\n  );\n  try {\n    const obj = await client.core.getObject({\n      objectId: fieldId,\n      include: { json: true },\n    });\n    const rec = (obj.object?.json as { value?: OnChainAgentRecord } | undefined)\n      ?.value;\n    return rec?.agent ? rec : null;\n  } catch {\n    // Field object absent → not registered.\n    return null;\n  }\n}\n\n/** Toggle an agent's active flag (signer must be the agent itself —\n *  agent-only since registry v2 / S.1032). */\nexport function buildSetActiveTx(agent: string, active: boolean): Transaction {\n  const tx = new Transaction();\n  tx.moveCall({\n    target: `${AGENT_ID_PACKAGE_ID}::${MODULE}::set_active`,\n    arguments: [\n      tx.object(AGENT_ID_REGISTRY_ID),\n      tx.pure.address(agent),\n      tx.pure.bool(active),\n      tx.object(CLOCK_ID),\n    ],\n  });\n  return tx;\n}\n"]}