@peac/kernel 0.10.14 → 0.11.1

package/dist/index.mjs

@@ -277,6 +277,7 @@ var ERROR_CODES = {
   E_UCP_SIGNATURE_MISSING: "E_UCP_SIGNATURE_MISSING",
   E_UCP_VERIFICATION_FAILED: "E_UCP_VERIFICATION_FAILED",
   // Validation error codes
+  E_CONSTRAINT_VIOLATION: "E_CONSTRAINT_VIOLATION",
   E_EVIDENCE_NOT_JSON: "E_EVIDENCE_NOT_JSON",
   E_EXPIRED: "E_EXPIRED",
   E_INVALID_AMOUNT: "E_INVALID_AMOUNT",
@@ -298,10 +299,16 @@ var ERROR_CODES = {
   E_KEY_NOT_FOUND: "E_KEY_NOT_FOUND",
   // Verifier error codes
   E_VERIFY_EXTENSION_TOO_LARGE: "E_VERIFY_EXTENSION_TOO_LARGE",
+  E_VERIFY_INSECURE_SCHEME_BLOCKED: "E_VERIFY_INSECURE_SCHEME_BLOCKED",
   E_VERIFY_INVALID_TRANSPORT: "E_VERIFY_INVALID_TRANSPORT",
+  E_VERIFY_ISSUER_CONFIG_INVALID: "E_VERIFY_ISSUER_CONFIG_INVALID",
+  E_VERIFY_ISSUER_CONFIG_MISSING: "E_VERIFY_ISSUER_CONFIG_MISSING",
+  E_VERIFY_ISSUER_MISMATCH: "E_VERIFY_ISSUER_MISMATCH",
   E_VERIFY_ISSUER_NOT_ALLOWED: "E_VERIFY_ISSUER_NOT_ALLOWED",
+  E_VERIFY_JWKS_INVALID: "E_VERIFY_JWKS_INVALID",
   E_VERIFY_JWKS_TOO_LARGE: "E_VERIFY_JWKS_TOO_LARGE",
   E_VERIFY_JWKS_TOO_MANY_KEYS: "E_VERIFY_JWKS_TOO_MANY_KEYS",
+  E_VERIFY_JWKS_URI_INVALID: "E_VERIFY_JWKS_URI_INVALID",
   E_VERIFY_KEY_FETCH_BLOCKED: "E_VERIFY_KEY_FETCH_BLOCKED",
   E_VERIFY_KEY_FETCH_FAILED: "E_VERIFY_KEY_FETCH_FAILED",
   E_VERIFY_KEY_FETCH_TIMEOUT: "E_VERIFY_KEY_FETCH_TIMEOUT",
@@ -1102,6 +1109,14 @@ var ERRORS = {
     category: "ucp"
   },
   // Validation error codes
+  E_CONSTRAINT_VIOLATION: {
+    code: "E_CONSTRAINT_VIOLATION",
+    http_status: 400,
+    title: "Kernel Constraint Violation",
+    description: "Receipt claims exceed a kernel constraint (max keys, max depth, max string length, max evidence bytes, or similar structural limit)",
+    retriable: false,
+    category: "validation"
+  },
   E_EVIDENCE_NOT_JSON: {
     code: "E_EVIDENCE_NOT_JSON",
     http_status: 400,
@@ -1256,6 +1271,14 @@ var ERRORS = {
     retriable: false,
     category: "verifier"
   },
+  E_VERIFY_INSECURE_SCHEME_BLOCKED: {
+    code: "E_VERIFY_INSECURE_SCHEME_BLOCKED",
+    http_status: 403,
+    title: "Insecure Scheme Blocked",
+    description: "Non-HTTPS URL encountered during issuer discovery (issuer URL or jwks_uri)",
+    retriable: false,
+    category: "verifier"
+  },
   E_VERIFY_INVALID_TRANSPORT: {
     code: "E_VERIFY_INVALID_TRANSPORT",
     http_status: 400,
@@ -1264,6 +1287,30 @@ var ERRORS = {
     retriable: false,
     category: "verifier"
   },
+  E_VERIFY_ISSUER_CONFIG_INVALID: {
+    code: "E_VERIFY_ISSUER_CONFIG_INVALID",
+    http_status: 502,
+    title: "Issuer Config Invalid",
+    description: "peac-issuer.json is not valid JSON or does not conform to issuer config schema",
+    retriable: false,
+    category: "verifier"
+  },
+  E_VERIFY_ISSUER_CONFIG_MISSING: {
+    code: "E_VERIFY_ISSUER_CONFIG_MISSING",
+    http_status: 502,
+    title: "Issuer Config Missing",
+    description: "peac-issuer.json not found or not fetchable at issuer origin",
+    retriable: true,
+    category: "verifier"
+  },
+  E_VERIFY_ISSUER_MISMATCH: {
+    code: "E_VERIFY_ISSUER_MISMATCH",
+    http_status: 403,
+    title: "Issuer Mismatch",
+    description: "issuer field in peac-issuer.json does not match the expected issuer origin",
+    retriable: false,
+    category: "verifier"
+  },
   E_VERIFY_ISSUER_NOT_ALLOWED: {
     code: "E_VERIFY_ISSUER_NOT_ALLOWED",
     http_status: 403,
@@ -1272,6 +1319,14 @@ var ERRORS = {
     retriable: false,
     category: "verifier"
   },
+  E_VERIFY_JWKS_INVALID: {
+    code: "E_VERIFY_JWKS_INVALID",
+    http_status: 502,
+    title: "JWKS Invalid",
+    description: "JWKS response is not valid JSON or missing required keys array",
+    retriable: false,
+    category: "verifier"
+  },
   E_VERIFY_JWKS_TOO_LARGE: {
     code: "E_VERIFY_JWKS_TOO_LARGE",
     http_status: 400,
@@ -1288,6 +1343,14 @@ var ERRORS = {
     retriable: false,
     category: "verifier"
   },
+  E_VERIFY_JWKS_URI_INVALID: {
+    code: "E_VERIFY_JWKS_URI_INVALID",
+    http_status: 502,
+    title: "JWKS URI Invalid",
+    description: "jwks_uri in peac-issuer.json is not a valid HTTPS URL",
+    retriable: false,
+    category: "verifier"
+  },
   E_VERIFY_KEY_FETCH_BLOCKED: {
     code: "E_VERIFY_KEY_FETCH_BLOCKED",
     http_status: 403,
@@ -1642,6 +1705,9 @@ function needsPurposeVary(purposeEnforced) {
   return purposeEnforced;
 }
 
-export { AGENT_PROTOCOLS, ALGORITHMS, BUNDLE_ERRORS, BUNDLE_VERSION, CONSTANTS, CONTROL_ENGINES, DISCOVERY, DISPUTE_ERRORS, ERRORS, ERROR_CATEGORIES, ERROR_CODES, HASH, HEADERS, ISSUER_CONFIG, JWKS, LIMITS, PAYMENT_RAILS, POLICY, PRIVATE_IP_RANGES, RECEIPT, REGISTRIES, TRANSPORT_METHODS, VARY_HEADERS, VERIFICATION_MODES, VERIFICATION_REPORT_VERSION, VERIFIER_LIMITS, VERIFIER_NETWORK, VERIFIER_POLICY_VERSION, WIRE_TYPE, WIRE_VERSION, applyPurposeVary, findAgentProtocol, findControlEngine, findPaymentRail, findTransportMethod, formatHash, getError, getPeacVaryHeaders, isRetriable, isValidHash, needsPurposeVary, parseHash };
+// src/carrier.ts
+var PEAC_RECEIPT_HEADER = "PEAC-Receipt";
+
+export { AGENT_PROTOCOLS, ALGORITHMS, BUNDLE_ERRORS, BUNDLE_VERSION, CONSTANTS, CONTROL_ENGINES, DISCOVERY, DISPUTE_ERRORS, ERRORS, ERROR_CATEGORIES, ERROR_CODES, HASH, HEADERS, ISSUER_CONFIG, JWKS, LIMITS, PAYMENT_RAILS, PEAC_RECEIPT_HEADER, POLICY, PRIVATE_IP_RANGES, RECEIPT, REGISTRIES, TRANSPORT_METHODS, VARY_HEADERS, VERIFICATION_MODES, VERIFICATION_REPORT_VERSION, VERIFIER_LIMITS, VERIFIER_NETWORK, VERIFIER_POLICY_VERSION, WIRE_TYPE, WIRE_VERSION, applyPurposeVary, findAgentProtocol, findControlEngine, findPaymentRail, findTransportMethod, formatHash, getError, getPeacVaryHeaders, isRetriable, isValidHash, needsPurposeVary, parseHash };
 //# sourceMappingURL=index.mjs.map
 //# sourceMappingURL=index.mjs.map