{"_id":"@agenticprimitives/admission","_rev":"8-543c38935ac0d1c8d323b139afe9a7f4","name":"@agenticprimitives/admission","dist-tags":{"latest":"0.0.0-alpha.7"},"versions":{"0.0.0-alpha.2":{"name":"@agenticprimitives/admission","version":"0.0.0-alpha.2","keywords":["agentic","primitives","admission","a2a","edge","authorization"],"license":"MIT","_id":"@agenticprimitives/admission@0.0.0-alpha.2","maintainers":[{"name":"richcanvas","email":"richardpedersen3@gmail.com"}],"homepage":"https://github.com/agentictrustlabs/agenticprimitives/tree/master/packages/admission","bugs":{"url":"https://github.com/agentictrustlabs/agenticprimitives/issues"},"dist":{"shasum":"b6d2900cccf74ccec22f209030e3794f15637ff3","tarball":"https://registry.npmjs.org/@agenticprimitives/admission/-/admission-0.0.0-alpha.2.tgz","fileCount":39,"integrity":"sha512-/G56pkzOf2Se99mDnIhG+ROAWtb68FAzXFCgf7iQE5LisimMgPyM4Kvb33xlUQEg1xU14OwNPhKzKYQwM7Rekg==","signatures":[{"sig":"MEYCIQDnuKja5Cnmky0F9C0uD3n9tuy6FJLSZZ1EgpejCIL3LQIhAOEaJ3hsuiKr3pYsZyqT2rcCABLAz9r++9Oc/J9Uchm+","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":161769},"main":"./dist/index.js","type":"module","_from":"file:agenticprimitives-admission-0.0.0-alpha.2.tgz","types":"./dist/index.d.ts","exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"}},"scripts":{"test":"vitest run","build":"tsc -p tsconfig.build.json","clean":"rm -rf dist","test:unit":"vitest run test/unit --passWithNoTests","typecheck":"tsc -p tsconfig.json --noEmit"},"_npmUser":{"name":"richcanvas","email":"richardpedersen3@gmail.com"},"_resolved":"/tmp/dd972ea2964548f196ae2a41f4182211/agenticprimitives-admission-0.0.0-alpha.2.tgz","_integrity":"sha512-/G56pkzOf2Se99mDnIhG+ROAWtb68FAzXFCgf7iQE5LisimMgPyM4Kvb33xlUQEg1xU14OwNPhKzKYQwM7Rekg==","repository":{"url":"git+https://github.com/agentictrustlabs/agenticprimitives.git","type":"git","directory":"packages/admission"},"_npmVersion":"11.16.0","description":"Agentic Primitives Edge admission contracts: transport evidence, application authentication, canonical actor resolution, admission grants, and exact MCP invocation authorization. Zero runtime dependencies; admission is never authority.","directories":{},"_nodeVersion":"24.12.0","publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"vitest":"^4.1.8","@agenticprimitives/types":"1.0.0-alpha.21"},"peerDependencies":{"@agenticprimitives/types":"1.0.0-alpha.21"},"_npmOperationalInternal":{"tmp":"tmp/admission_0.0.0-alpha.2_1785725587763_0.8369550349825681","host":"s3://npm-registry-packages-npm-production"}},"0.0.0-alpha.1":{"name":"@agenticprimitives/admission","version":"0.0.0-alpha.1","keywords":["agentic","primitives","admission","a2a","edge","authorization"],"license":"MIT","_id":"@agenticprimitives/admission@0.0.0-alpha.1","maintainers":[{"name":"richcanvas","email":"richardpedersen3@gmail.com"}],"homepage":"https://github.com/agentictrustlabs/agenticprimitives/tree/master/packages/admission","bugs":{"url":"https://github.com/agentictrustlabs/agenticprimitives/issues"},"dist":{"shasum":"8180e3c5418db4b8913f95fbd0cd9a7eb1780284","tarball":"https://registry.npmjs.org/@agenticprimitives/admission/-/admission-0.0.0-alpha.1.tgz","fileCount":39,"integrity":"sha512-6lrfEAs99byJGauAanKc2XxEuHmbdzBMz23rAke8uYLrTIKQqYGlYiJqLToLfnU2xKsuzLTqvCPnqFwzmiXB1A==","signatures":[{"sig":"MEUCIQD+gsE7orkiQ5mtzVjEO6axisraKgD02GPjBoxcHWJB3QIgFtAsBmp0LGrY6pyn2qu650GGAyf4c8ipckVDUYeFC3I=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":161769},"main":"./dist/index.js","type":"module","_from":"file:agenticprimitives-admission-0.0.0-alpha.1.tgz","types":"./dist/index.d.ts","exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"}},"scripts":{"test":"vitest run","build":"tsc -p tsconfig.build.json","clean":"rm -rf dist","test:unit":"vitest run test/unit --passWithNoTests","typecheck":"tsc -p tsconfig.json --noEmit"},"_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:8e315a17-820d-41f7-8e67-945c5606d4e6"}},"_resolved":"/tmp/e871246263646ac91729c78642115572/agenticprimitives-admission-0.0.0-alpha.1.tgz","_integrity":"sha512-6lrfEAs99byJGauAanKc2XxEuHmbdzBMz23rAke8uYLrTIKQqYGlYiJqLToLfnU2xKsuzLTqvCPnqFwzmiXB1A==","repository":{"url":"git+https://github.com/agentictrustlabs/agenticprimitives.git","type":"git","directory":"packages/admission"},"_npmVersion":"11.16.0","description":"Agentic Primitives Edge admission contracts: transport evidence, application authentication, canonical actor resolution, admission grants, and exact MCP invocation authorization. Zero runtime dependencies; admission is never authority.","directories":{},"_nodeVersion":"24.18.0","publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"vitest":"^4.1.8","@agenticprimitives/types":"1.0.0-alpha.20"},"peerDependencies":{"@agenticprimitives/types":"1.0.0-alpha.20"},"_npmOperationalInternal":{"tmp":"tmp/admission_0.0.0-alpha.1_1785726215009_0.7243142507082072","host":"s3://npm-registry-packages-npm-production"}},"0.0.0-alpha.3":{"name":"@agenticprimitives/admission","version":"0.0.0-alpha.3","keywords":["agentic","primitives","admission","a2a","edge","authorization"],"license":"MIT","_id":"@agenticprimitives/admission@0.0.0-alpha.3","maintainers":[{"name":"richcanvas","email":"richardpedersen3@gmail.com"}],"homepage":"https://github.com/agentictrustlabs/agenticprimitives/tree/master/packages/admission","bugs":{"url":"https://github.com/agentictrustlabs/agenticprimitives/issues"},"dist":{"shasum":"b2c4162f511d867b8a61661b23cbbd1fb848336c","tarball":"https://registry.npmjs.org/@agenticprimitives/admission/-/admission-0.0.0-alpha.3.tgz","fileCount":39,"integrity":"sha512-fhdM6T6b3AWDrPQ1LH18XzpwUA60AaCR5RZg4a+kVzubHqD7V6RyKtK3IuDY+rgyfYoSqukxD7t0Gq6RZ3s7Hw==","signatures":[{"sig":"MEYCIQCdhFXFAg+y2js2nKl1Lqs1NGWjjQWCweH5/dX12T0VwQIhAOd/9w4HnOMTO42wEGNiL6+VQfxVrnp7XRvTc9Qk9mNl","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":161769},"main":"./dist/index.js","type":"module","_from":"file:agenticprimitives-admission-0.0.0-alpha.3.tgz","types":"./dist/index.d.ts","exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"}},"scripts":{"test":"vitest run","build":"tsc -p tsconfig.build.json","clean":"rm -rf dist","test:unit":"vitest run test/unit --passWithNoTests","typecheck":"tsc -p tsconfig.json --noEmit"},"_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:8e315a17-820d-41f7-8e67-945c5606d4e6"}},"_resolved":"/tmp/29e73255bb6cd07e9fce514b4b292471/agenticprimitives-admission-0.0.0-alpha.3.tgz","_integrity":"sha512-fhdM6T6b3AWDrPQ1LH18XzpwUA60AaCR5RZg4a+kVzubHqD7V6RyKtK3IuDY+rgyfYoSqukxD7t0Gq6RZ3s7Hw==","repository":{"url":"git+https://github.com/agentictrustlabs/agenticprimitives.git","type":"git","directory":"packages/admission"},"_npmVersion":"11.17.0","description":"Agentic Primitives Edge admission contracts: transport evidence, application authentication, canonical actor resolution, admission grants, and exact MCP invocation authorization. Zero runtime dependencies; admission is never authority.","directories":{},"_nodeVersion":"24.19.0","publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"vitest":"^4.1.8","@agenticprimitives/types":"1.0.0-alpha.22"},"peerDependencies":{"@agenticprimitives/types":"1.0.0-alpha.22"},"_npmOperationalInternal":{"tmp":"tmp/admission_0.0.0-alpha.3_1787775675877_0.935066147834019","host":"s3://npm-registry-packages-npm-production"}},"0.0.0-alpha.4":{"name":"@agenticprimitives/admission","version":"0.0.0-alpha.4","keywords":["agentic","primitives","admission","a2a","edge","authorization"],"license":"MIT","_id":"@agenticprimitives/admission@0.0.0-alpha.4","maintainers":[{"name":"richcanvas","email":"richardpedersen3@gmail.com"}],"homepage":"https://github.com/agentictrustlabs/agenticprimitives/tree/master/packages/admission","bugs":{"url":"https://github.com/agentictrustlabs/agenticprimitives/issues"},"dist":{"shasum":"d376739c83c2fc5866c80796b779c86fe50a1961","tarball":"https://registry.npmjs.org/@agenticprimitives/admission/-/admission-0.0.0-alpha.4.tgz","fileCount":39,"integrity":"sha512-XRQ1qz/nHmIUafvaJEmyBf+OZjn9VIvxvdJ0qzZtof2Prtdli5Ayh3NjjylYbffnYV2QV7yEHaB7sPAh5iJrgw==","signatures":[{"sig":"MEYCIQCJMfPGtJbrP53Ou59m0c1mu+wA7ZyT4q/uu+5zJqAZigIhAPa+gu+qply01lGto0IZbVcJWMBO9P0K+2u7hItEqNUV","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":161769},"main":"./dist/index.js","type":"module","_from":"file:agenticprimitives-admission-0.0.0-alpha.4.tgz","types":"./dist/index.d.ts","exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"}},"scripts":{"test":"vitest run","build":"tsc -p tsconfig.build.json","clean":"rm -rf dist","test:unit":"vitest run test/unit --passWithNoTests","typecheck":"tsc -p tsconfig.json --noEmit"},"_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:8e315a17-820d-41f7-8e67-945c5606d4e6"}},"_resolved":"/tmp/99a8d882157bd6594e520ca370bcb768/agenticprimitives-admission-0.0.0-alpha.4.tgz","_integrity":"sha512-XRQ1qz/nHmIUafvaJEmyBf+OZjn9VIvxvdJ0qzZtof2Prtdli5Ayh3NjjylYbffnYV2QV7yEHaB7sPAh5iJrgw==","repository":{"url":"git+https://github.com/agentictrustlabs/agenticprimitives.git","type":"git","directory":"packages/admission"},"_npmVersion":"11.19.0","description":"Agentic Primitives Edge admission contracts: transport evidence, application authentication, canonical actor resolution, admission grants, and exact MCP invocation authorization. Zero runtime dependencies; admission is never authority.","directories":{},"_nodeVersion":"24.20.0","publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"vitest":"^4.1.8","@agenticprimitives/types":"1.0.0-alpha.23"},"peerDependencies":{"@agenticprimitives/types":"1.0.0-alpha.23"},"_npmOperationalInternal":{"tmp":"tmp/admission_0.0.0-alpha.4_1789164073082_0.8931016281100346","host":"s3://npm-registry-packages-npm-production"}},"0.0.0-alpha.5":{"name":"@agenticprimitives/admission","version":"0.0.0-alpha.5","keywords":["agentic","primitives","admission","a2a","edge","authorization"],"license":"MIT","_id":"@agenticprimitives/admission@0.0.0-alpha.5","maintainers":[{"name":"richcanvas","email":"richardpedersen3@gmail.com"}],"homepage":"https://github.com/agentictrustlabs/agenticprimitives/tree/master/packages/admission","bugs":{"url":"https://github.com/agentictrustlabs/agenticprimitives/issues"},"dist":{"shasum":"9f4c0703ae8a022b19b733c4d70563457477a4d9","tarball":"https://registry.npmjs.org/@agenticprimitives/admission/-/admission-0.0.0-alpha.5.tgz","fileCount":39,"integrity":"sha512-VclGAH/Z67tApCsoZONsv+zyYPHq1m5BO7D94tqn3PT1jCofXp+y377Dn3Yf6RhmgyoNpaz3ozxmMqcunZb/tg==","signatures":[{"sig":"MEQCIBek7n9FKV+nyKKNpoULzQwjNzLn5StJVVFl/BcKAA8uAiA8NGgqd/uxzcZHaiNlLVWQy3bAulleGhn4Fj5PTCNe8w==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":161769},"main":"./dist/index.js","type":"module","_from":"file:agenticprimitives-admission-0.0.0-alpha.5.tgz","types":"./dist/index.d.ts","exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"}},"scripts":{"test":"vitest run","build":"tsc -p tsconfig.build.json","clean":"rm -rf dist","test:unit":"vitest run test/unit --passWithNoTests","typecheck":"tsc -p tsconfig.json --noEmit"},"_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:8e315a17-820d-41f7-8e67-945c5606d4e6"}},"_resolved":"/tmp/d0ce1608b7dbe90d93633a7996609063/agenticprimitives-admission-0.0.0-alpha.5.tgz","_integrity":"sha512-VclGAH/Z67tApCsoZONsv+zyYPHq1m5BO7D94tqn3PT1jCofXp+y377Dn3Yf6RhmgyoNpaz3ozxmMqcunZb/tg==","repository":{"url":"git+https://github.com/agentictrustlabs/agenticprimitives.git","type":"git","directory":"packages/admission"},"_npmVersion":"11.19.0","description":"Agentic Primitives Edge admission contracts: transport evidence, application authentication, canonical actor resolution, admission grants, and exact MCP invocation authorization. Zero runtime dependencies; admission is never authority.","directories":{},"_nodeVersion":"24.20.0","publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"vitest":"^4.1.8","@agenticprimitives/types":"1.0.0-alpha.24"},"peerDependencies":{"@agenticprimitives/types":"1.0.0-alpha.24"},"_npmOperationalInternal":{"tmp":"tmp/admission_0.0.0-alpha.5_1789230496167_0.15482878468377947","host":"s3://npm-registry-packages-npm-production"}},"0.0.0-alpha.6":{"name":"@agenticprimitives/admission","version":"0.0.0-alpha.6","keywords":["agentic","primitives","admission","a2a","edge","authorization"],"license":"MIT","_id":"@agenticprimitives/admission@0.0.0-alpha.6","maintainers":[{"name":"richcanvas","email":"richardpedersen3@gmail.com"}],"homepage":"https://github.com/agentictrustlabs/agenticprimitives/tree/master/packages/admission","bugs":{"url":"https://github.com/agentictrustlabs/agenticprimitives/issues"},"dist":{"shasum":"b5884c202d904e85e093182545debeffcaf59e0b","tarball":"https://registry.npmjs.org/@agenticprimitives/admission/-/admission-0.0.0-alpha.6.tgz","fileCount":39,"integrity":"sha512-C41RYSADCf8zCRIptw2NX3Xf33co5ZWjvNciZAIC+rIOBRzoaVGiKkpGvp4SpnbXXm5Eqv6bxFTceqet/KGm3A==","signatures":[{"sig":"MEQCIGKxDxhEdXTCFwsjCio3PwRBpSDEs0AlJJq6vVf4qZaaAiAHigQIqMERRMWvsyDgjR8RBSzlP/iza4i5AoCXxFjgpg==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"},{"sig":"MEQCICAvsWRTDQ2L6TMEXtPGU3nq5OE8cQdmpGGuBjUJfdTmAiADoRaDitbBJQ37iy7/C2VozP1wvp5E//o3asL2ztM+yw==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":161769},"main":"./dist/index.js","type":"module","_from":"file:agenticprimitives-admission-0.0.0-alpha.6.tgz","types":"./dist/index.d.ts","exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"}},"scripts":{"test":"vitest run","build":"tsc -p tsconfig.build.json","clean":"rm -rf dist","test:unit":"vitest run test/unit --passWithNoTests","typecheck":"tsc -p tsconfig.json --noEmit"},"_npmUser":{"name":"richcanvas","email":"richardpedersen3@gmail.com"},"_resolved":"/tmp/6b2aa493ddc13adb081b7fc76a3b4f95/agenticprimitives-admission-0.0.0-alpha.6.tgz","_integrity":"sha512-C41RYSADCf8zCRIptw2NX3Xf33co5ZWjvNciZAIC+rIOBRzoaVGiKkpGvp4SpnbXXm5Eqv6bxFTceqet/KGm3A==","repository":{"url":"git+https://github.com/agentictrustlabs/agenticprimitives.git","type":"git","directory":"packages/admission"},"_npmVersion":"11.16.0","description":"Agentic Primitives Edge admission contracts: transport evidence, application authentication, canonical actor resolution, admission grants, and exact MCP invocation authorization. Zero runtime dependencies; admission is never authority.","directories":{},"_nodeVersion":"24.12.0","publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"vitest":"^4.1.8","@agenticprimitives/types":"1.0.0-alpha.25"},"peerDependencies":{"@agenticprimitives/types":"1.0.0-alpha.25"},"_npmOperationalInternal":{"tmp":"tmp/admission_0.0.0-alpha.6_1789503726272_0.14676026183652469","host":"s3://npm-registry-packages-npm-production"}},"0.0.0-alpha.7":{"_id":"@agenticprimitives/admission@0.0.0-alpha.7","bugs":{"url":"https://github.com/agentictrustlabs/agenticprimitives/issues"},"dist":{"shasum":"044d373d8e46e7e5d32bee13f9611612bdd2e239","tarball":"https://registry.npmjs.org/@agenticprimitives/admission/-/admission-0.0.0-alpha.7.tgz","fileCount":39,"integrity":"sha512-uLHrMZjwaYn8TLoFs8jnPF6GogSECdHfnc5Iy/NPtlyyPdgWCh4pX8B0ra0e7FBLNKb/fJ4K6ZtDJsnrhaQUow==","signatures":[{"sig":"MEYCIQCrj/MlgxdQ1kHeBdwwFxSg7zUggkXGzorsdfqaIAXz4QIhAJUpWrmzX8zHCPKs1WdV8v/qxJQp4ErzbRrhPIIwEdh5","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"},{"keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U","sig":"MEUCIH8NrXKrHqFHQLiG2dRIA0nWooj5ZRWQpCzmkhPuV528AiEAzQ73Me2fvWuVpeYcOACPhK81mUmnymOI44s+E7NRK9w="}],"unpackedSize":162266},"main":"./dist/index.js","name":"@agenticprimitives/admission","type":"module","_from":"file:agenticprimitives-admission-0.0.0-alpha.7.tgz","types":"./dist/index.d.ts","author":{"url":"https://agenticprimitives.dev","name":"Agentic Trust Labs"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"}},"license":"MIT","scripts":{"test":"vitest run","build":"tsc -p tsconfig.build.json","clean":"rm -rf dist","test:unit":"vitest run test/unit --passWithNoTests","typecheck":"tsc -p tsconfig.json --noEmit"},"version":"0.0.0-alpha.7","_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:8e315a17-820d-41f7-8e67-945c5606d4e6"}},"homepage":"https://agenticprimitives.dev","keywords":["agentic","primitives","admission","a2a","edge","authorization","agentic-primitives","agenticprimitives","ai-agents","agent-authority","agentic-trust"],"_resolved":"/tmp/607eb2007a07540d9d7372d2f1d2b133/agenticprimitives-admission-0.0.0-alpha.7.tgz","_integrity":"sha512-uLHrMZjwaYn8TLoFs8jnPF6GogSECdHfnc5Iy/NPtlyyPdgWCh4pX8B0ra0e7FBLNKb/fJ4K6ZtDJsnrhaQUow==","repository":{"url":"git+https://github.com/agentictrustlabs/agenticprimitives.git","type":"git","directory":"packages/admission"},"_npmVersion":"11.19.0","description":"Agentic Primitives Edge admission contracts: transport evidence, application authentication, canonical actor resolution, admission grants, and exact MCP invocation authorization. Zero runtime dependencies; admission is never authority.","directories":{},"maintainers":[{"name":"richcanvas","email":"richardpedersen3@gmail.com"}],"_nodeVersion":"24.20.0","publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"vitest":"^4.1.8","@agenticprimitives/types":"1.0.0-alpha.26"},"peerDependencies":{"@agenticprimitives/types":"1.0.0-alpha.26"},"_npmOperationalInternal":{"host":"s3://npm-registry-packages-npm-production","tmp":"tmp/admission_0.0.0-alpha.7_1789814908789_0.9954095909163445"}}},"time":{"created":"2026-08-03T02:53:07.589Z","modified":"2026-09-19T10:48:29.054Z","0.0.0-alpha.2":"2026-08-03T02:53:07.896Z","0.0.0-alpha.1":"2026-08-03T03:03:35.153Z","0.0.0-alpha.3":"2026-08-26T20:21:16.017Z","0.0.0-alpha.4":"2026-09-11T22:01:13.249Z","0.0.0-alpha.5":"2026-09-12T16:28:16.326Z","0.0.0-alpha.6":"2026-09-15T20:22:06.362Z","0.0.0-alpha.7":"2026-09-19T10:48:28.875Z"},"bugs":{"url":"https://github.com/agentictrustlabs/agenticprimitives/issues"},"license":"MIT","homepage":"https://agenticprimitives.dev","keywords":["agentic","primitives","admission","a2a","edge","authorization","agentic-primitives","agenticprimitives","ai-agents","agent-authority","agentic-trust"],"repository":{"url":"git+https://github.com/agentictrustlabs/agenticprimitives.git","type":"git","directory":"packages/admission"},"description":"Agentic Primitives Edge admission contracts: transport evidence, application authentication, canonical actor resolution, admission grants, and exact MCP invocation authorization. Zero runtime dependencies; admission is never authority.","maintainers":[{"name":"richcanvas","email":"richardpedersen3@gmail.com"}],"readme":"# @agenticprimitives/admission\n\n> Part of **[Agentic Primitives](https://agenticprimitives.dev)** — the open-source trust substrate for agentic applications: identity that can sign, authority checked at act time, evidence the owner carries. [Developer kit](https://github.com/agentictrustlabs/agentic-primitives) · [All packages](https://agenticprimitives.dev/developers)\n\nAdmission contracts for the Agentic Primitives Edge — the boundary between external agent intentions\nand internal agent capabilities.\n\n**Architect-of-record:** [spec 339](https://github.com/agentictrustlabs/agenticprimitives/blob/master/specs/339-agentic-primitives-edge-https-admission.md) ·\n[ADR-0057](https://github.com/agentictrustlabs/agenticprimitives/blob/master/docs/architecture/decisions/0057-a2a-over-https-admission-mtls-optional.md)\n\n```text\nHTTPS is required.\nmTLS is optional.\nApplication-level identity resolution and Admission are always required.\n```\n\n## What it is\n\nFour questions that must stay separate, in four shapes that cannot substitute for one another:\n\n| Question | Shape |\n| --- | --- |\n| What did the transport prove? | `OptionalTransportEvidence` — never sufficient alone |\n| What authenticated the caller? | `OAuthEvidence` / `RequestProofEvidence` |\n| Who is the caller, canonically? | `CanonicalActorContext` — resolved, never claimed |\n| What may they do? | `AdmissionRequest` → `AdmissionDecision` → `AdmissionGrant` |\n\nPlus `ExactMcpInvocationRequest` for the private gateway, where a grant is re-checked against exact\narguments and live delegation.\n\n## Why the invariants are code\n\nThe architecture's claims are all \"X is not Y\" — a certificate is not an owner, a SPIFFE ID is not an\nagent, a grant is not a tool permission. Those survive review and then die in implementation, because\nthe mistake never looks like one:\n\n```ts\nif (req.transport.mtls) { /* trusted peer */ }   // a real handshake; a wrong conclusion\n```\n\nA type cannot catch that — `mtls: true` is a perfectly good boolean. So:\n\n```ts\nimport { checkAdmissionInvariants } from '@agenticprimitives/admission';\n\nconst violations = checkAdmissionInvariants(request);\n// mTLS-only, no token → OAUTH_TOKEN_REQUIRED\n//   \"a TLS connection, mutual or not, authenticates no principal\"\n```\n\n`[]` means the request is coherent enough to evaluate. It does **not** mean admit — relationship,\ndelegation, capability, entitlement and policy are all still ahead of it, and none of them live here.\n\n## Zero runtime dependencies\n\nNo viem, no provider SDK, no SPIFFE, no transport. Anything needing I/O is a port, not an import.\nEnforced by `pnpm check:optional-package-boundaries`.\n\n## Install\n\n```bash\npnpm add @agenticprimitives/admission\n```\n\nMIT.\n","readmeFilename":"README.md","author":{"url":"https://agenticprimitives.dev","name":"Agentic Trust Labs"}}