@peac/cli 0.12.14 → 0.13.1

package/dist/lib/conformance/validators.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"validators.d.ts","sourceRoot":"","sources":["../../../src/lib/conformance/validators.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAiBH,OAAO,KAAK,EAAoB,wBAAwB,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAqBhG;;GAEG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,OAAO,GAAG,wBAAwB,CAgCjF;AAED;;;;;;GAMG;AACH,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,OAAO,GAAG,wBAAwB,CAUrF;AA6XD;;GAEG;AACH,eAAO,MAAM,mBAAmB,EAAE,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAyCjE,CAAC;AAEF;;GAEG;AACH,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,iBAAiB,CAoBhE"}
+{"version":3,"file":"validators.d.ts","sourceRoot":"","sources":["../../../src/lib/conformance/validators.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAiBH,OAAO,KAAK,EAAoB,wBAAwB,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAqBhG;;GAEG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,OAAO,GAAG,wBAAwB,CAgCjF;AAED;;;;;;GAMG;AACH,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,OAAO,GAAG,wBAAwB,CAUrF;AA8XD;;GAEG;AACH,eAAO,MAAM,mBAAmB,EAAE,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAyCjE,CAAC;AAEF;;GAEG;AACH,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,iBAAiB,CAoBhE"}

package/dist/lib/conformance-runner.d.ts

@@ -3,7 +3,8 @@
  *
  * Category-aware validation using the same validators as tests/conformance/*.spec.ts:
  * - Receipt validation via @peac/schema (ReceiptClaimsSchema)
- * - Discovery validation via @peac/disc (parse, validate)
+ * - Discovery validation via @peac/policy-kit (parsePolicyDocument), wrapped in a
+ *   CLI-internal compat helper that preserves v0.13.0 legacy-line tolerance
  * - Bundle verification via @peac/audit (verifyBundleIntegrity)
  * - Attestation validation via @peac/schema validators
  * - Interaction/Workflow validation via ordered validators

package/dist/lib/conformance-runner.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"conformance-runner.d.ts","sourceRoot":"","sources":["../../src/lib/conformance-runner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAOH,YAAY,EACV,gBAAgB,EAChB,UAAU,EACV,eAAe,EACf,UAAU,EACV,YAAY,EACZ,aAAa,EACb,iBAAiB,EACjB,aAAa,EACb,eAAe,EACf,WAAW,EACX,aAAa,GACd,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAG/D,OAAO,KAAK,EACV,iBAAiB,EACjB,aAAa,EACb,eAAe,EAMhB,MAAM,wBAAwB,CAAC;AAmBhC;;;GAGG;AACH,wBAAgB,cAAc,CAC5B,OAAO,EAAE,aAAa,EACtB,SAAS,CAAC,EAAE,eAAe,GAC1B,iBAAiB,CAgVnB;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,iBAAiB,GAAG,MAAM,CAmClE;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,iBAAiB,GAAG,MAAM,CAwCtE"}
+{"version":3,"file":"conformance-runner.d.ts","sourceRoot":"","sources":["../../src/lib/conformance-runner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAOH,YAAY,EACV,gBAAgB,EAChB,UAAU,EACV,eAAe,EACf,UAAU,EACV,YAAY,EACZ,aAAa,EACb,iBAAiB,EACjB,aAAa,EACb,eAAe,EACf,WAAW,EACX,aAAa,GACd,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAG/D,OAAO,KAAK,EACV,iBAAiB,EACjB,aAAa,EACb,eAAe,EAMhB,MAAM,wBAAwB,CAAC;AAmBhC;;;GAGG;AACH,wBAAgB,cAAc,CAC5B,OAAO,EAAE,aAAa,EACtB,SAAS,CAAC,EAAE,eAAe,GAC1B,iBAAiB,CAgVnB;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,iBAAiB,GAAG,MAAM,CAmClE;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,iBAAiB,GAAG,MAAM,CAwCtE"}

package/dist/lib/policy-document-discovery.d.ts

@@ -0,0 +1,68 @@
+/**
+ * CLI-internal helper. Preserves the v0.13.0 @peac/disc behavior contract
+ * (tolerant two-pass parse + SSRF-aware remote fetch) using public
+ * @peac/policy-kit and @peac/net-node primitives, plus PUBLIC @peac/kernel
+ * constants where the fields exist.
+ *
+ * NOT exported from @peac/cli's public surface. Used by:
+ *   - packages/cli/src/commands/discover.ts
+ *   - packages/cli/src/lib/conformance/validators.ts (validateDiscoveryInput)
+ *
+ * External consumers needing the same compatibility behavior should copy
+ * this pattern; a packaged public helper may land in a later release if
+ * external demand surfaces.
+ */
+import { type PolicyDocument } from '@peac/policy-kit';
+export declare const DISCOVER_TIMEOUT_MS = 5000;
+export declare const DISCOVER_MAX_BYTES: 262144;
+export declare const PEAC_TXT_PATH: "/.well-known/peac.txt";
+/** @internal - tests only; resets the one-shot legacy-warning flag. */
+export declare function __resetLegacyWarningForTests(): void;
+export interface CompatParseResult {
+    valid: boolean;
+    data?: PolicyDocument;
+    errors?: string[];
+    warnings?: string[];
+}
+/**
+ * Tolerant two-pass parser preserving v0.13.0 @peac/disc.parse semantics.
+ *
+ * Pass 1: hand the raw text to parsePolicyDocument unmodified. Legacy-looking
+ * substrings inside YAML comments / block scalars / rule text remain intact.
+ *
+ * Pass 2 (only if Pass 1 throws AND legacy `verify:` / `public_keys:` /
+ * `jwks:` lines are present at top level): strip those lines and retry.
+ * Detected legacy lines surface as warnings + a once-per-process structured
+ * DeprecationWarning with code PEAC_LEGACY_PEAC_TXT_KEY_FIELD.
+ *
+ * Returns a structured ParseResult; never throws on policy validation /
+ * load failure (those become `errors`). Throws only on programming errors.
+ */
+export declare function parsePolicyDocumentCompat(text: string): CompatParseResult;
+export interface FetchPolicyDocumentSuccess {
+    ok: true;
+    text: string;
+    warnings?: string[];
+}
+export interface FetchPolicyDocumentFailure {
+    ok: false;
+    error: string;
+    code?: string;
+}
+export type FetchPolicyDocumentResult = FetchPolicyDocumentSuccess | FetchPolicyDocumentFailure;
+export interface FetchPolicyDocumentOptions {
+    /** Override the v0.13.0-equivalent 5_000 ms total timeout. */
+    timeoutMs?: number;
+    /** Override the v0.13.0-equivalent 256 KiB body cap. */
+    maxBytes?: number;
+    /** Override the User-Agent header. Defaults to `peac-cli`. */
+    userAgent?: string;
+}
+/**
+ * Fetch a peac.txt policy document via SSRF-aware HTTP with a body cap and
+ * timeout. Returns the raw response text on success. Caller is responsible
+ * for parsing via `parsePolicyDocumentCompat`. Always closes the underlying
+ * raw response in a `finally` block (no socket leak).
+ */
+export declare function fetchPolicyDocumentText(origin: string, options?: FetchPolicyDocumentOptions): Promise<FetchPolicyDocumentResult>;
+//# sourceMappingURL=policy-document-discovery.d.ts.map

package/dist/lib/policy-document-discovery.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-document-discovery.d.ts","sourceRoot":"","sources":["../../src/lib/policy-document-discovery.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAWH,OAAO,EAIL,KAAK,cAAc,EACpB,MAAM,kBAAkB,CAAC;AAS1B,eAAO,MAAM,mBAAmB,OAAQ,CAAC;AACzC,eAAO,MAAM,kBAAkB,QAAkB,CAAC;AAClD,eAAO,MAAM,aAAa,yBAAsB,CAAC;AAqBjD,uEAAuE;AACvE,wBAAgB,4BAA4B,IAAI,IAAI,CAEnD;AAED,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,OAAO,CAAC;IACf,IAAI,CAAC,EAAE,cAAc,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;CACrB;AAmCD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,MAAM,GAAG,iBAAiB,CA8BzE;AAED,MAAM,WAAW,0BAA0B;IACzC,EAAE,EAAE,IAAI,CAAC;IACT,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;CACrB;AAED,MAAM,WAAW,0BAA0B;IACzC,EAAE,EAAE,KAAK,CAAC;IACV,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,MAAM,yBAAyB,GAAG,0BAA0B,GAAG,0BAA0B,CAAC;AAEhG,MAAM,WAAW,0BAA0B;IACzC,8DAA8D;IAC9D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,wDAAwD;IACxD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,8DAA8D;IAC9D,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;;;GAKG;AACH,wBAAsB,uBAAuB,CAC3C,MAAM,EAAE,MAAM,EACd,OAAO,GAAE,0BAA+B,GACvC,OAAO,CAAC,yBAAyB,CAAC,CA6CpC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@peac/cli",
-  "version": "0.12.14",
+  "version": "0.13.1",
   "description": "PEAC protocol command-line tools",
   "main": "dist/index.cjs",
   "types": "dist/index.d.ts",
@@ -38,12 +38,13 @@
   "dependencies": {
     "chalk": "^4.1.2",
     "commander": "^11.0.0",
-    "@peac/audit": "0.12.14",
-    "@peac/crypto": "0.12.14",
-    "@peac/disc": "0.12.14",
-    "@peac/protocol": "0.12.14",
-    "@peac/policy-kit": "0.12.14",
-    "@peac/schema": "0.12.14"
+    "@peac/audit": "0.13.1",
+    "@peac/crypto": "0.13.1",
+    "@peac/kernel": "0.13.1",
+    "@peac/policy-kit": "0.13.1",
+    "@peac/protocol": "0.13.1",
+    "@peac/schema": "0.13.1",
+    "@peac/net-node": "0.13.1"
   },
   "devDependencies": {
     "@types/node": "^22.19.11",