@aikdna/kdna-core 0.18.0 → 0.19.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (44) hide show
  1. package/CHANGELOG.md +128 -94
  2. package/README.md +109 -215
  3. package/package.json +7 -2
  4. package/schema/agent-host-capabilities.schema.json +62 -0
  5. package/schema/agent-host-receipt.schema.json +371 -0
  6. package/schema/agent-host-request.schema.json +223 -0
  7. package/schema/{bundle-profile-v1.schema.json → bundle-profile.schema.json} +9 -5
  8. package/schema/checksums.schema.json +8 -8
  9. package/schema/consumption-plan.schema.json +428 -0
  10. package/schema/digest-evidence.schema.json +115 -26
  11. package/schema/{kdna-envelope-external-grant-v1.schema.json → external-grant-envelope.schema.json} +17 -4
  12. package/schema/{kdna-key-grant-v1.schema.json → external-key-grant.schema.json} +39 -7
  13. package/schema/judgment-trace.schema.json +1251 -0
  14. package/schema/load-plan.schema.json +5 -3
  15. package/schema/manifest.schema.json +70 -10
  16. package/schema/{payload-profile-v1.schema.json → payload-profile.schema.json} +30 -6
  17. package/schema/{runtime-capsule-2.schema.json → runtime-capsule.schema.json} +7 -31
  18. package/src/asset-reader.js +8 -2
  19. package/src/{v1 → container}/index.js +385 -198
  20. package/src/container/index.mjs +20 -0
  21. package/src/container-dispatcher.js +6 -6
  22. package/src/crypto-profile.js +37 -107
  23. package/src/external-key-grant.js +41 -15
  24. package/src/index.js +11 -8
  25. package/src/index.mjs +49 -45
  26. package/src/loader-compatibility.js +59 -0
  27. package/src/loader.js +1 -1
  28. package/src/public-api.js +5 -5
  29. package/src/remote-runtime.d.ts +13 -0
  30. package/src/remote-runtime.js +27 -0
  31. package/src/remote-runtime.mjs +3 -0
  32. package/src/runtime-api.js +5 -5
  33. package/src/{capsule-v2.js → runtime-capsule.js} +96 -254
  34. package/src/{execution-contract-v1.js → runtime-contract.js} +184 -152
  35. package/src/types.d.ts +200 -277
  36. package/src/workpack-pure.js +1 -1
  37. package/schema/agent-host-2-receipt.schema.json +0 -206
  38. package/schema/agent-host-2-request.schema.json +0 -135
  39. package/schema/agent-host-capabilities-1.schema.json +0 -40
  40. package/schema/consumption-plan-1.schema.json +0 -280
  41. package/schema/judgment-trace-1.schema.json +0 -748
  42. package/schema/runtime-capsule-1.schema.json +0 -68
  43. package/src/lint-pure.js +0 -433
  44. package/src/v1/index.mjs +0 -21
package/schema/{kdna-key-grant-v1.schema.json → external-key-grant.schema.json} RENAMED
@@ -1,12 +1,33 @@
1
1
  {
2
2
  "$schema": "https://json-schema.org/draft/2020-12/schema",
3
- "$id": "https://kdna.ai/specs/kdna-key-grant-v1.schema.json",
4
- "title": "KDNA account/device external key grant v1",
3
+ "$id": "https://kdna.ai/specs/external-key-grant.schema.json",
4
+ "title": "KDNA Account/Device External Key Grant",
5
5
  "type": "object",
6
6
  "additionalProperties": false,
7
- "required": ["profile", "grant_id", "issuer", "signing_key_id", "entitlement_id", "account_id", "device_id", "device_public_key", "device_signing_public_key", "asset", "issued_at", "refresh_after", "offline_grace_until", "expires_at", "status", "status_version", "wrap", "signature"],
7
+ "required": [
8
+ "profile",
9
+ "contract_version",
10
+ "grant_id",
11
+ "issuer",
12
+ "signing_key_id",
13
+ "entitlement_id",
14
+ "account_id",
15
+ "device_id",
16
+ "device_public_key",
17
+ "device_signing_public_key",
18
+ "asset",
19
+ "issued_at",
20
+ "refresh_after",
21
+ "offline_grace_until",
22
+ "expires_at",
23
+ "status",
24
+ "status_version",
25
+ "wrap",
26
+ "signature"
27
+ ],
8
28
  "properties": {
9
- "profile": { "const": "kdna-key-grant-v1" },
29
+ "profile": { "const": "kdna.grant.external-key" },
30
+ "contract_version": { "const": "0.1.0" },
10
31
  "grant_id": { "$ref": "#/$defs/id" },
11
32
  "issuer": { "type": "string", "format": "uri", "maxLength": 256 },
12
33
  "signing_key_id": { "$ref": "#/$defs/id" },
@@ -16,8 +37,18 @@
16
37
  "device_public_key": { "type": "string", "pattern": "^x25519:[A-Za-z0-9_-]{43}$" },
17
38
  "device_signing_public_key": { "type": "string", "pattern": "^ed25519:[A-Za-z0-9_-]{43}$" },
18
39
  "asset": {
19
- "type": "object", "additionalProperties": false,
20
- "required": ["asset_id", "asset_uid", "version", "digest", "entry_path", "ciphertext_digest", "key_ref", "issuer_key_id"],
40
+ "type": "object",
41
+ "additionalProperties": false,
42
+ "required": [
43
+ "asset_id",
44
+ "asset_uid",
45
+ "version",
46
+ "digest",
47
+ "entry_path",
48
+ "ciphertext_digest",
49
+ "key_ref",
50
+ "issuer_key_id"
51
+ ],
21
52
  "properties": {
22
53
  "asset_id": { "type": "string", "minLength": 1, "maxLength": 256 },
23
54
  "asset_uid": { "type": "string", "minLength": 1, "maxLength": 512 },
@@ -36,7 +67,8 @@
36
67
  "status": { "enum": ["active", "revoked", "expired"] },
37
68
  "status_version": { "type": "integer", "minimum": 1 },
38
69
  "wrap": {
39
- "type": "object", "additionalProperties": false,
70
+ "type": "object",
71
+ "additionalProperties": false,
40
72
  "required": ["alg", "ephemeral_public_key", "salt", "wrapped_cek"],
41
73
  "properties": {
42
74
  "alg": { "const": "X25519-HKDF-SHA256+A256KW" },