@peac/kernel 0.11.0 → 0.11.1

package/dist/index.cjs

@@ -301,10 +301,16 @@ var ERROR_CODES = {
   E_KEY_NOT_FOUND: "E_KEY_NOT_FOUND",
   // Verifier error codes
   E_VERIFY_EXTENSION_TOO_LARGE: "E_VERIFY_EXTENSION_TOO_LARGE",
+  E_VERIFY_INSECURE_SCHEME_BLOCKED: "E_VERIFY_INSECURE_SCHEME_BLOCKED",
   E_VERIFY_INVALID_TRANSPORT: "E_VERIFY_INVALID_TRANSPORT",
+  E_VERIFY_ISSUER_CONFIG_INVALID: "E_VERIFY_ISSUER_CONFIG_INVALID",
+  E_VERIFY_ISSUER_CONFIG_MISSING: "E_VERIFY_ISSUER_CONFIG_MISSING",
+  E_VERIFY_ISSUER_MISMATCH: "E_VERIFY_ISSUER_MISMATCH",
   E_VERIFY_ISSUER_NOT_ALLOWED: "E_VERIFY_ISSUER_NOT_ALLOWED",
+  E_VERIFY_JWKS_INVALID: "E_VERIFY_JWKS_INVALID",
   E_VERIFY_JWKS_TOO_LARGE: "E_VERIFY_JWKS_TOO_LARGE",
   E_VERIFY_JWKS_TOO_MANY_KEYS: "E_VERIFY_JWKS_TOO_MANY_KEYS",
+  E_VERIFY_JWKS_URI_INVALID: "E_VERIFY_JWKS_URI_INVALID",
   E_VERIFY_KEY_FETCH_BLOCKED: "E_VERIFY_KEY_FETCH_BLOCKED",
   E_VERIFY_KEY_FETCH_FAILED: "E_VERIFY_KEY_FETCH_FAILED",
   E_VERIFY_KEY_FETCH_TIMEOUT: "E_VERIFY_KEY_FETCH_TIMEOUT",
@@ -1267,6 +1273,14 @@ var ERRORS = {
     retriable: false,
     category: "verifier"
   },
+  E_VERIFY_INSECURE_SCHEME_BLOCKED: {
+    code: "E_VERIFY_INSECURE_SCHEME_BLOCKED",
+    http_status: 403,
+    title: "Insecure Scheme Blocked",
+    description: "Non-HTTPS URL encountered during issuer discovery (issuer URL or jwks_uri)",
+    retriable: false,
+    category: "verifier"
+  },
   E_VERIFY_INVALID_TRANSPORT: {
     code: "E_VERIFY_INVALID_TRANSPORT",
     http_status: 400,
@@ -1275,6 +1289,30 @@ var ERRORS = {
     retriable: false,
     category: "verifier"
   },
+  E_VERIFY_ISSUER_CONFIG_INVALID: {
+    code: "E_VERIFY_ISSUER_CONFIG_INVALID",
+    http_status: 502,
+    title: "Issuer Config Invalid",
+    description: "peac-issuer.json is not valid JSON or does not conform to issuer config schema",
+    retriable: false,
+    category: "verifier"
+  },
+  E_VERIFY_ISSUER_CONFIG_MISSING: {
+    code: "E_VERIFY_ISSUER_CONFIG_MISSING",
+    http_status: 502,
+    title: "Issuer Config Missing",
+    description: "peac-issuer.json not found or not fetchable at issuer origin",
+    retriable: true,
+    category: "verifier"
+  },
+  E_VERIFY_ISSUER_MISMATCH: {
+    code: "E_VERIFY_ISSUER_MISMATCH",
+    http_status: 403,
+    title: "Issuer Mismatch",
+    description: "issuer field in peac-issuer.json does not match the expected issuer origin",
+    retriable: false,
+    category: "verifier"
+  },
   E_VERIFY_ISSUER_NOT_ALLOWED: {
     code: "E_VERIFY_ISSUER_NOT_ALLOWED",
     http_status: 403,
@@ -1283,6 +1321,14 @@ var ERRORS = {
     retriable: false,
     category: "verifier"
   },
+  E_VERIFY_JWKS_INVALID: {
+    code: "E_VERIFY_JWKS_INVALID",
+    http_status: 502,
+    title: "JWKS Invalid",
+    description: "JWKS response is not valid JSON or missing required keys array",
+    retriable: false,
+    category: "verifier"
+  },
   E_VERIFY_JWKS_TOO_LARGE: {
     code: "E_VERIFY_JWKS_TOO_LARGE",
     http_status: 400,
@@ -1299,6 +1345,14 @@ var ERRORS = {
     retriable: false,
     category: "verifier"
   },
+  E_VERIFY_JWKS_URI_INVALID: {
+    code: "E_VERIFY_JWKS_URI_INVALID",
+    http_status: 502,
+    title: "JWKS URI Invalid",
+    description: "jwks_uri in peac-issuer.json is not a valid HTTPS URL",
+    retriable: false,
+    category: "verifier"
+  },
   E_VERIFY_KEY_FETCH_BLOCKED: {
     code: "E_VERIFY_KEY_FETCH_BLOCKED",
     http_status: 403,
@@ -1653,6 +1707,9 @@ function needsPurposeVary(purposeEnforced) {
   return purposeEnforced;
 }
 
+// src/carrier.ts
+var PEAC_RECEIPT_HEADER = "PEAC-Receipt";
+
 exports.AGENT_PROTOCOLS = AGENT_PROTOCOLS;
 exports.ALGORITHMS = ALGORITHMS;
 exports.BUNDLE_ERRORS = BUNDLE_ERRORS;
@@ -1670,6 +1727,7 @@ exports.ISSUER_CONFIG = ISSUER_CONFIG;
 exports.JWKS = JWKS;
 exports.LIMITS = LIMITS;
 exports.PAYMENT_RAILS = PAYMENT_RAILS;
+exports.PEAC_RECEIPT_HEADER = PEAC_RECEIPT_HEADER;
 exports.POLICY = POLICY;
 exports.PRIVATE_IP_RANGES = PRIVATE_IP_RANGES;
 exports.RECEIPT = RECEIPT;