{"_id":"@agenticprimitives/vault-authority","_rev":"6-8e87a2ed8ad38b45a7dc38d3b396dab1","name":"@agenticprimitives/vault-authority","dist-tags":{"latest":"0.0.0-alpha.6"},"versions":{"0.0.0-alpha.1":{"name":"@agenticprimitives/vault-authority","version":"0.0.0-alpha.1","keywords":["agentic","vault","authority","roles","delegation"],"license":"MIT","_id":"@agenticprimitives/vault-authority@0.0.0-alpha.1","maintainers":[{"name":"richcanvas","email":"richardpedersen3@gmail.com"}],"homepage":"https://github.com/agentictrustlabs/agenticprimitives/tree/master/packages/vault-authority","bugs":{"url":"https://github.com/agentictrustlabs/agenticprimitives/issues"},"dist":{"shasum":"625889ee556768dbe91b2c30a40a39e504c78657","tarball":"https://registry.npmjs.org/@agenticprimitives/vault-authority/-/vault-authority-0.0.0-alpha.1.tgz","fileCount":20,"integrity":"sha512-A9YvoeTlsaZbq1P4vfx5TbrPUNrPE9ehg5Ri3hIu1nWohyex0kN/B4vVbWSerx7uxQpRV/4CaCxILbXFtH6qQQ==","signatures":[{"sig":"MEQCIHKA72rqjnUmFGVjeixnACVNbg1/9VLrajVT0U1Vk8vQAiA0sUpEADpaSqxiNylh8wDziLHv8X73fa7ezdvMvN/OlA==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":27087},"main":"./dist/index.js","type":"module","_from":"file:agenticprimitives-vault-authority-0.0.0-alpha.1.tgz","types":"./dist/index.d.ts","exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"}},"scripts":{"test":"vitest run","build":"tsc -p tsconfig.build.json","clean":"rm -rf dist","test:unit":"vitest run test/unit --passWithNoTests","typecheck":"tsc -p tsconfig.json --noEmit"},"_npmUser":{"name":"richcanvas","email":"richardpedersen3@gmail.com"},"_resolved":"/tmp/d8b9a79dbf2b43a1c4f7178bfa2d1306/agenticprimitives-vault-authority-0.0.0-alpha.1.tgz","_integrity":"sha512-A9YvoeTlsaZbq1P4vfx5TbrPUNrPE9ehg5Ri3hIu1nWohyex0kN/B4vVbWSerx7uxQpRV/4CaCxILbXFtH6qQQ==","repository":{"url":"git+https://github.com/agentictrustlabs/agenticprimitives.git","type":"git","directory":"packages/vault-authority"},"_npmVersion":"11.16.0","description":"Vault subject authority primitives: role assignments scoped to vault-resident subjects, vault-record-scope grant compilation, and pure runtime decisions.","directories":{},"_nodeVersion":"24.12.0","dependencies":{"@agenticprimitives/types":"1.0.0-alpha.21","@agenticprimitives/delegation":"1.0.0-alpha.21","@agenticprimitives/organization":"0.0.0-alpha.5"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"vitest":"^4.1.8"},"_npmOperationalInternal":{"tmp":"tmp/vault-authority_0.0.0-alpha.1_1787771554863_0.3499207648517857","host":"s3://npm-registry-packages-npm-production"}},"0.0.0-alpha.2":{"name":"@agenticprimitives/vault-authority","version":"0.0.0-alpha.2","keywords":["agentic","vault","authority","roles","delegation"],"license":"MIT","_id":"@agenticprimitives/vault-authority@0.0.0-alpha.2","maintainers":[{"name":"richcanvas","email":"richardpedersen3@gmail.com"}],"homepage":"https://github.com/agentictrustlabs/agenticprimitives/tree/master/packages/vault-authority","bugs":{"url":"https://github.com/agentictrustlabs/agenticprimitives/issues"},"dist":{"shasum":"32598bad3f2daf0bf6a1f03879e84de23f130f45","tarball":"https://registry.npmjs.org/@agenticprimitives/vault-authority/-/vault-authority-0.0.0-alpha.2.tgz","fileCount":20,"integrity":"sha512-NQf8bplIzVZH/NNEoZvpjOPmbyxyB4gi1lzmf7AwwTc3T719XDDaPxvhdnEXd3+LAw1WWzgLCZu/59azCXUcMw==","signatures":[{"sig":"MEQCIHOKqrW6JOGu7w5kd+0Spngx23WUzqzweDFngSPt3+lDAiAjnRM/sC+GwAgyT/id1Ji6RuM8iNLOh+WpcX73Lq9xrw==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":27087},"main":"./dist/index.js","type":"module","_from":"file:agenticprimitives-vault-authority-0.0.0-alpha.2.tgz","types":"./dist/index.d.ts","exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"}},"scripts":{"test":"vitest run","build":"tsc -p tsconfig.build.json","clean":"rm -rf dist","test:unit":"vitest run test/unit --passWithNoTests","typecheck":"tsc -p tsconfig.json --noEmit"},"_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:57d74424-2fdd-4ed6-b241-f05f3f763d78"}},"_resolved":"/tmp/cb279b5920893410c472ba9df3e4a638/agenticprimitives-vault-authority-0.0.0-alpha.2.tgz","_integrity":"sha512-NQf8bplIzVZH/NNEoZvpjOPmbyxyB4gi1lzmf7AwwTc3T719XDDaPxvhdnEXd3+LAw1WWzgLCZu/59azCXUcMw==","repository":{"url":"git+https://github.com/agentictrustlabs/agenticprimitives.git","type":"git","directory":"packages/vault-authority"},"_npmVersion":"11.17.0","description":"Vault subject authority primitives: role assignments scoped to vault-resident subjects, vault-record-scope grant compilation, and pure runtime decisions.","directories":{},"_nodeVersion":"24.19.0","dependencies":{"@agenticprimitives/types":"1.0.0-alpha.22","@agenticprimitives/delegation":"1.0.0-alpha.22","@agenticprimitives/organization":"0.0.0-alpha.6"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"vitest":"^4.1.8"},"_npmOperationalInternal":{"tmp":"tmp/vault-authority_0.0.0-alpha.2_1787778740023_0.8441226266181598","host":"s3://npm-registry-packages-npm-production"}},"0.0.0-alpha.3":{"name":"@agenticprimitives/vault-authority","version":"0.0.0-alpha.3","keywords":["agentic","vault","authority","roles","delegation"],"license":"MIT","_id":"@agenticprimitives/vault-authority@0.0.0-alpha.3","maintainers":[{"name":"richcanvas","email":"richardpedersen3@gmail.com"}],"homepage":"https://github.com/agentictrustlabs/agenticprimitives/tree/master/packages/vault-authority","bugs":{"url":"https://github.com/agentictrustlabs/agenticprimitives/issues"},"dist":{"shasum":"05e040495d2f022e445e87c7c9edb0d6f66e2166","tarball":"https://registry.npmjs.org/@agenticprimitives/vault-authority/-/vault-authority-0.0.0-alpha.3.tgz","fileCount":20,"integrity":"sha512-D+oMI96pmH7R0xy8MG05uqLj7Rmr749cx4PCM88zaPDyRcdg8UBz7oelOv1iqo2lhtUeodUI4DjViHeeF6hv6g==","signatures":[{"sig":"MEUCIFmSsGi0mW3EsJK2jSltzzfVLqKWgsa+LDRW9sN5cM+FAiEAuAcsurbdEjnL8M+pa9w7nAfuQw7hjCFS0N8dRzvyteA=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"},{"sig":"MEYCIQDKZg184emQLoId1J4HwIBDMGXcthmi5jz6BgnrsSj+PQIhANQ62WdC/YHwtS1bt4Q3pvX9T8A7jYl3SHbrKnOfzUa+","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":27087},"main":"./dist/index.js","type":"module","_from":"file:agenticprimitives-vault-authority-0.0.0-alpha.3.tgz","types":"./dist/index.d.ts","exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"}},"scripts":{"test":"vitest run","build":"tsc -p tsconfig.build.json","clean":"rm -rf dist","test:unit":"vitest run test/unit --passWithNoTests","typecheck":"tsc -p tsconfig.json --noEmit"},"_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:57d74424-2fdd-4ed6-b241-f05f3f763d78"}},"_resolved":"/tmp/a30047fa99a2bc9c6cfadc22052826a6/agenticprimitives-vault-authority-0.0.0-alpha.3.tgz","_integrity":"sha512-D+oMI96pmH7R0xy8MG05uqLj7Rmr749cx4PCM88zaPDyRcdg8UBz7oelOv1iqo2lhtUeodUI4DjViHeeF6hv6g==","repository":{"url":"git+https://github.com/agentictrustlabs/agenticprimitives.git","type":"git","directory":"packages/vault-authority"},"_npmVersion":"11.19.0","description":"Vault subject authority primitives: role assignments scoped to vault-resident subjects, vault-record-scope grant compilation, and pure runtime decisions.","directories":{},"_nodeVersion":"24.20.0","dependencies":{"@agenticprimitives/types":"1.0.0-alpha.23","@agenticprimitives/delegation":"1.0.0-alpha.23","@agenticprimitives/organization":"0.0.0-alpha.7"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"vitest":"^4.1.8"},"_npmOperationalInternal":{"tmp":"tmp/vault-authority_0.0.0-alpha.3_1789164186707_0.0860825311479485","host":"s3://npm-registry-packages-npm-production"}},"0.0.0-alpha.4":{"name":"@agenticprimitives/vault-authority","version":"0.0.0-alpha.4","keywords":["agentic","vault","authority","roles","delegation"],"license":"MIT","_id":"@agenticprimitives/vault-authority@0.0.0-alpha.4","maintainers":[{"name":"richcanvas","email":"richardpedersen3@gmail.com"}],"homepage":"https://github.com/agentictrustlabs/agenticprimitives/tree/master/packages/vault-authority","bugs":{"url":"https://github.com/agentictrustlabs/agenticprimitives/issues"},"dist":{"shasum":"cd31649e5a9704e77448bfccc9bac5d8a4d98195","tarball":"https://registry.npmjs.org/@agenticprimitives/vault-authority/-/vault-authority-0.0.0-alpha.4.tgz","fileCount":20,"integrity":"sha512-OWyvCCHpgCGu/D5d5w79GT88tnVDacVCnB1ZDx5NjTyMriBNrqZwzkH04X6ACvdL/eMu6rB87A6besRdQ3pEwQ==","signatures":[{"sig":"MEYCIQC5ToL0wx9J4GJjJ3HfB8ZcAgdvgsLxathf5bcaN1x48gIhAOrNESEu7PONErFqslo7m/NlzXJmL0Cg2+O0607S1xpO","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"},{"sig":"MEYCIQC4OBL4QEWmzgn7Wxpc5OBPZuyRKsE9yzbDkX7tKy8ICwIhAOP48ldy56vp7lHAmsstZpW/bkxopHDnTNmW32Mb6cD/","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":27087},"main":"./dist/index.js","type":"module","_from":"file:agenticprimitives-vault-authority-0.0.0-alpha.4.tgz","types":"./dist/index.d.ts","exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"}},"scripts":{"test":"vitest run","build":"tsc -p tsconfig.build.json","clean":"rm -rf dist","test:unit":"vitest run test/unit --passWithNoTests","typecheck":"tsc -p tsconfig.json --noEmit"},"_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:57d74424-2fdd-4ed6-b241-f05f3f763d78"}},"_resolved":"/tmp/69674f9a252ce62c09de9126d394198a/agenticprimitives-vault-authority-0.0.0-alpha.4.tgz","_integrity":"sha512-OWyvCCHpgCGu/D5d5w79GT88tnVDacVCnB1ZDx5NjTyMriBNrqZwzkH04X6ACvdL/eMu6rB87A6besRdQ3pEwQ==","repository":{"url":"git+https://github.com/agentictrustlabs/agenticprimitives.git","type":"git","directory":"packages/vault-authority"},"_npmVersion":"11.19.0","description":"Vault subject authority primitives: role assignments scoped to vault-resident subjects, vault-record-scope grant compilation, and pure runtime decisions.","directories":{},"_nodeVersion":"24.20.0","dependencies":{"@agenticprimitives/types":"1.0.0-alpha.24","@agenticprimitives/delegation":"1.0.0-alpha.24","@agenticprimitives/organization":"0.0.0-alpha.8"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"vitest":"^4.1.8"},"_npmOperationalInternal":{"tmp":"tmp/vault-authority_0.0.0-alpha.4_1789230624050_0.3743021891624938","host":"s3://npm-registry-packages-npm-production"}},"0.0.0-alpha.5":{"name":"@agenticprimitives/vault-authority","version":"0.0.0-alpha.5","keywords":["agentic","vault","authority","roles","delegation"],"license":"MIT","_id":"@agenticprimitives/vault-authority@0.0.0-alpha.5","maintainers":[{"name":"richcanvas","email":"richardpedersen3@gmail.com"}],"homepage":"https://github.com/agentictrustlabs/agenticprimitives/tree/master/packages/vault-authority","bugs":{"url":"https://github.com/agentictrustlabs/agenticprimitives/issues"},"dist":{"shasum":"9d8f3b75f3bea9d7dc14b47e41ac72b5cac0e153","tarball":"https://registry.npmjs.org/@agenticprimitives/vault-authority/-/vault-authority-0.0.0-alpha.5.tgz","fileCount":20,"integrity":"sha512-Lva1qDmyt9GIzHvy8jFVbb1+/nBPNyqPGMuJIyOEn4F/RPAOp6Km9w5LxW8Edk7ljP/UgQcFcfMM2D9ezcKgxg==","signatures":[{"sig":"MEUCIHJMUsevhJQFgA2+9H1y4aFCRAYorslzpdx2viAn6FsWAiEA7EVuxmfmF66/5YW7k7zJE7JgCm2JbvPf7d6vDzsaGdk=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"},{"sig":"MEQCIG5AUM+elHTyyFReVEWMIvYRT8sbRqiwX4hT79DON257AiBK+BJapTOzBCmPAWrrpMutcuc2FMqFFh97RO4I+k02TA==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":27087},"main":"./dist/index.js","type":"module","_from":"file:agenticprimitives-vault-authority-0.0.0-alpha.5.tgz","types":"./dist/index.d.ts","exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"}},"scripts":{"test":"vitest run","build":"tsc -p tsconfig.build.json","clean":"rm -rf dist","test:unit":"vitest run test/unit --passWithNoTests","typecheck":"tsc -p tsconfig.json --noEmit"},"_npmUser":{"name":"richcanvas","email":"richardpedersen3@gmail.com"},"_resolved":"/tmp/5090aa4e2ff8a7f12d597ada5b79ae5d/agenticprimitives-vault-authority-0.0.0-alpha.5.tgz","_integrity":"sha512-Lva1qDmyt9GIzHvy8jFVbb1+/nBPNyqPGMuJIyOEn4F/RPAOp6Km9w5LxW8Edk7ljP/UgQcFcfMM2D9ezcKgxg==","repository":{"url":"git+https://github.com/agentictrustlabs/agenticprimitives.git","type":"git","directory":"packages/vault-authority"},"_npmVersion":"11.16.0","description":"Vault subject authority primitives: role assignments scoped to vault-resident subjects, vault-record-scope grant compilation, and pure runtime decisions.","directories":{},"_nodeVersion":"24.12.0","dependencies":{"@agenticprimitives/types":"1.0.0-alpha.25","@agenticprimitives/delegation":"1.0.0-alpha.25","@agenticprimitives/organization":"0.0.0-alpha.9"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"vitest":"^4.1.8"},"_npmOperationalInternal":{"tmp":"tmp/vault-authority_0.0.0-alpha.5_1789502589601_0.38588956176835976","host":"s3://npm-registry-packages-npm-production"}},"0.0.0-alpha.6":{"_id":"@agenticprimitives/vault-authority@0.0.0-alpha.6","bugs":{"url":"https://github.com/agentictrustlabs/agenticprimitives/issues"},"dist":{"shasum":"0a85c2ece62026d82117cd4d8f2542ed7fbabdb1","tarball":"https://registry.npmjs.org/@agenticprimitives/vault-authority/-/vault-authority-0.0.0-alpha.6.tgz","fileCount":20,"integrity":"sha512-G8/9mPkZdgeKz0W990hvS2mufUeo2lTFvanRzx2rnTMJxrGTPbPb83mqBnhPasO+uLFL/vTjZvijzg/psAFpKA==","signatures":[{"sig":"MEUCIQD5aR4Lvrkv6zrrP3OXy/lMlHrf6sLxaQVvQQYAp0M0RwIgKPJmYgXxxU8lTIcM5kLGKTrqNkhuO8qV2VFMGw1L7Qw=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"},{"keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U","sig":"MEUCIC9jwEZWq+K30sbOQAEXrPrGyjpFk8eGCNxBsFD1OcMnAiEAmP0y0V9pQGAyq6DJFXnQaj0hyXvCV4LoPocs7m9Wi/s="}],"unpackedSize":27579},"main":"./dist/index.js","name":"@agenticprimitives/vault-authority","type":"module","_from":"file:agenticprimitives-vault-authority-0.0.0-alpha.6.tgz","types":"./dist/index.d.ts","author":{"url":"https://agenticprimitives.dev","name":"Agentic Trust Labs"},"exports":{".":{"types":"./dist/index.d.ts","import":"./dist/index.js"}},"license":"MIT","scripts":{"test":"vitest run","build":"tsc -p tsconfig.build.json","clean":"rm -rf dist","test:unit":"vitest run test/unit --passWithNoTests","typecheck":"tsc -p tsconfig.json --noEmit"},"version":"0.0.0-alpha.6","_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:57d74424-2fdd-4ed6-b241-f05f3f763d78"}},"homepage":"https://agenticprimitives.dev","keywords":["agentic","vault","authority","roles","delegation","agentic-primitives","agenticprimitives","ai-agents","agent-authority","agentic-trust"],"_resolved":"/tmp/7792c9f5736c4bf597891517ff13c698/agenticprimitives-vault-authority-0.0.0-alpha.6.tgz","_integrity":"sha512-G8/9mPkZdgeKz0W990hvS2mufUeo2lTFvanRzx2rnTMJxrGTPbPb83mqBnhPasO+uLFL/vTjZvijzg/psAFpKA==","repository":{"url":"git+https://github.com/agentictrustlabs/agenticprimitives.git","type":"git","directory":"packages/vault-authority"},"_npmVersion":"11.19.0","description":"Vault subject authority primitives: role assignments scoped to vault-resident subjects, vault-record-scope grant compilation, and pure runtime decisions.","directories":{},"maintainers":[{"name":"richcanvas","email":"richardpedersen3@gmail.com"}],"_nodeVersion":"24.20.0","dependencies":{"@agenticprimitives/types":"1.0.0-alpha.26","@agenticprimitives/delegation":"1.0.0-alpha.26","@agenticprimitives/organization":"0.0.0-alpha.10"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"devDependencies":{"vitest":"^4.1.8"},"_npmOperationalInternal":{"host":"s3://npm-registry-packages-npm-production","tmp":"tmp/vault-authority_0.0.0-alpha.6_1789814990797_0.8533103451545905"}}},"time":{"created":"2026-08-26T19:12:34.691Z","modified":"2026-09-19T10:49:51.059Z","0.0.0-alpha.1":"2026-08-26T19:12:35.013Z","0.0.0-alpha.2":"2026-08-26T21:12:20.164Z","0.0.0-alpha.3":"2026-09-11T22:03:06.815Z","0.0.0-alpha.4":"2026-09-12T16:30:24.128Z","0.0.0-alpha.5":"2026-09-15T20:03:09.679Z","0.0.0-alpha.6":"2026-09-19T10:49:50.882Z"},"bugs":{"url":"https://github.com/agentictrustlabs/agenticprimitives/issues"},"license":"MIT","homepage":"https://agenticprimitives.dev","keywords":["agentic","vault","authority","roles","delegation","agentic-primitives","agenticprimitives","ai-agents","agent-authority","agentic-trust"],"repository":{"url":"git+https://github.com/agentictrustlabs/agenticprimitives.git","type":"git","directory":"packages/vault-authority"},"description":"Vault subject authority primitives: role assignments scoped to vault-resident subjects, vault-record-scope grant compilation, and pure runtime decisions.","maintainers":[{"name":"richcanvas","email":"richardpedersen3@gmail.com"}],"readme":"# @agenticprimitives/vault-authority\n\n> Part of **[Agentic Primitives](https://agenticprimitives.dev)** — the open-source trust substrate for agentic applications: identity that can sign, authority checked at act time, evidence the owner carries. [Developer kit](https://github.com/agentictrustlabs/agentic-primitives) · [All packages](https://agenticprimitives.dev/developers)\n\nPure helpers for authority over vault-resident subjects.\n\nThis package bridges three existing primitives:\n\n- `RoleAssignment` from `@agenticprimitives/organization`\n- `VaultRecordScopeGrant` from `@agenticprimitives/delegation`\n- owner-vault resource naming from `@agenticprimitives/vault`\n\nIt does not persist, sign, read chain state, call MCP/A2A, or verify entitlements. Callers pass already\nverified facts into deterministic helpers.\n\n## What It Owns\n\n- subject refs: the thing a vault role is about\n- role definitions: capabilities plus vault-record-scope grant templates\n- grant compilation: role definition + subject -> `VaultRecordScopeGrant[]`\n- projection: role assignment + definition -> app-readable grant view\n- authorization: active assignment + materializing authority + record scope -> allow/deny\n\n## Core Rule\n\nRoleAssignment manages domain-subject responsibility. Delegation/caveats execute authority. Entitlements\nprove access.\n\nA role with no valid materializing authority authorizes nothing.\n\n## Minimal Example\n\n```ts\nimport {\n  authorizeVaultSubjectOperation,\n  compileVaultRecordScopeGrants,\n  type VaultAuthorityRoleDefinition,\n} from '@agenticprimitives/vault-authority';\n\nconst definition: VaultAuthorityRoleDefinition = {\n  roleDefinitionId: 'roledef:example.manager@1',\n  name: 'manager',\n  version: '1',\n  allowedScopes: ['resource'],\n  capabilities: ['example.manage'],\n  grantTemplates: [\n    {\n      server: 'example-vault',\n      resources: ['vault:example.subject:{scopeRef}:*'],\n      ops: ['read', 'write'],\n    },\n  ],\n};\n\nconst subject = {\n  vaultOwner: '0x0000000000000000000000000000000000000001',\n  scope: 'resource' as const,\n  scopeRef: 'subject:123',\n};\n\nconst recordScopes = compileVaultRecordScopeGrants({ definition, subject });\n\nconst decision = authorizeVaultSubjectOperation({\n  assignment,\n  definition,\n  subject,\n  hasMaterializingAuthority: true,\n  recordScopes,\n  request: {\n    server: 'example-vault',\n    resource: 'vault:example.subject:subject:123:title',\n    op: 'write',\n  },\n});\n```\n\n## Privacy\n\nThe package never creates a public registry of who manages which subject. Assignments, wires, and\nentitlements live off-chain in vault/Home/runtime stores. Chain state remains hash/signature/revocation\nverification.\n\n","readmeFilename":"README.md","author":{"url":"https://agenticprimitives.dev","name":"Agentic Trust Labs"}}