@peac/kernel 0.11.1 → 0.11.3

package/dist/errors.cjs

@@ -65,6 +65,7 @@ var ERROR_CODES = {
   E_IDENTITY_NOT_YET_VALID: "E_IDENTITY_NOT_YET_VALID",
   E_IDENTITY_PROOF_UNSUPPORTED: "E_IDENTITY_PROOF_UNSUPPORTED",
   E_IDENTITY_SIG_INVALID: "E_IDENTITY_SIG_INVALID",
+  E_MVIS_INCOMPLETE: "E_MVIS_INCOMPLETE",
   // Infrastructure error codes
   E_CIRCUIT_BREAKER_OPEN: "E_CIRCUIT_BREAKER_OPEN",
   E_INTERNAL: "E_INTERNAL",
@@ -127,6 +128,8 @@ var ERROR_CODES = {
   // Verification error codes
   E_INVALID_SIGNATURE: "E_INVALID_SIGNATURE",
   E_KEY_NOT_FOUND: "E_KEY_NOT_FOUND",
+  E_KID_REUSE_DETECTED: "E_KID_REUSE_DETECTED",
+  E_REVOKED_KEY_USED: "E_REVOKED_KEY_USED",
   // Verifier error codes
   E_VERIFY_EXTENSION_TOO_LARGE: "E_VERIFY_EXTENSION_TOO_LARGE",
   E_VERIFY_INSECURE_SCHEME_BLOCKED: "E_VERIFY_INSECURE_SCHEME_BLOCKED",
@@ -168,7 +171,8 @@ var ERRORS = {
     http_status: 400,
     title: "Attribution Chain Too Deep",
     description: "Attribution chain exceeds maximum allowed depth (8)",
-    retriable: false,
+    retryable: false,
+    next_action: "retry_with_different_input",
     category: "attribution"
   },
   E_ATTRIBUTION_CIRCULAR_CHAIN: {
@@ -176,7 +180,8 @@ var ERRORS = {
     http_status: 400,
     title: "Attribution Circular Chain",
     description: "Circular reference detected in attribution chain",
-    retriable: false,
+    retryable: false,
+    next_action: "retry_with_different_input",
     category: "attribution"
   },
   E_ATTRIBUTION_EXPIRED: {
@@ -184,7 +189,8 @@ var ERRORS = {
     http_status: 401,
     title: "Attribution Expired",
     description: "Attribution attestation has exceeded its expiration time",
-    retriable: false,
+    retryable: false,
+    next_action: "retry_with_different_input",
     category: "attribution"
   },
   E_ATTRIBUTION_HASH_INVALID: {
@@ -192,7 +198,8 @@ var ERRORS = {
     http_status: 400,
     title: "Attribution Hash Invalid",
     description: "Content hash structure is invalid (wrong algorithm, encoding, or value length)",
-    retriable: false,
+    retryable: false,
+    next_action: "retry_with_different_input",
     category: "attribution"
   },
   E_ATTRIBUTION_INVALID_FORMAT: {
@@ -200,7 +207,8 @@ var ERRORS = {
     http_status: 400,
     title: "Attribution Invalid Format",
     description: "Attribution attestation does not conform to schema",
-    retriable: false,
+    retryable: false,
+    next_action: "retry_with_different_input",
     category: "attribution"
   },
   E_ATTRIBUTION_INVALID_REF: {
@@ -208,7 +216,8 @@ var ERRORS = {
     http_status: 400,
     title: "Attribution Invalid Reference",
     description: "Receipt reference format is invalid (must be jti:{id}, URL, or URN)",
-    retriable: false,
+    retryable: false,
+    next_action: "retry_with_different_input",
     category: "attribution"
   },
   E_ATTRIBUTION_INVALID_WEIGHT: {
@@ -216,7 +225,8 @@ var ERRORS = {
     http_status: 400,
     title: "Attribution Invalid Weight",
     description: "Attribution weight is out of valid range (must be 0.0-1.0)",
-    retriable: false,
+    retryable: false,
+    next_action: "retry_with_different_input",
     category: "attribution"
   },
   E_ATTRIBUTION_MISSING_SOURCES: {
@@ -224,7 +234,8 @@ var ERRORS = {
     http_status: 400,
     title: "Attribution Missing Sources",
     description: "Attribution attestation has empty sources array",
-    retriable: false,
+    retryable: false,
+    next_action: "retry_with_different_input",
     category: "attribution"
   },
   E_ATTRIBUTION_NOT_YET_VALID: {
@@ -232,7 +243,8 @@ var ERRORS = {
     http_status: 401,
     title: "Attribution Not Yet Valid",
     description: "Attribution attestation issued_at time is in the future",
-    retriable: true,
+    retryable: true,
+    next_action: "retry_after_delay",
     category: "attribution"
   },
   E_ATTRIBUTION_RESOLUTION_FAILED: {
@@ -240,7 +252,8 @@ var ERRORS = {
     http_status: 502,
     title: "Attribution Resolution Failed",
     description: "Failed to resolve receipt reference in attribution chain",
-    retriable: true,
+    retryable: true,
+    next_action: "retry_after_delay",
     category: "attribution"
   },
   E_ATTRIBUTION_RESOLUTION_TIMEOUT: {
@@ -248,7 +261,8 @@ var ERRORS = {
     http_status: 504,
     title: "Attribution Resolution Timeout",
     description: "Timeout while resolving receipt reference in attribution chain",
-    retriable: true,
+    retryable: true,
+    next_action: "retry_after_delay",
     category: "attribution"
   },
   E_ATTRIBUTION_SIZE_EXCEEDED: {
@@ -256,7 +270,8 @@ var ERRORS = {
     http_status: 400,
     title: "Attribution Size Exceeded",
     description: "Attribution attestation exceeds maximum size (64KB)",
-    retriable: false,
+    retryable: false,
+    next_action: "retry_with_different_input",
     category: "attribution"
   },
   E_ATTRIBUTION_TOO_MANY_SOURCES: {
@@ -264,7 +279,8 @@ var ERRORS = {
     http_status: 400,
     title: "Attribution Too Many Sources",
     description: "Attribution has too many sources (maximum 100)",
-    retriable: false,
+    retryable: false,
+    next_action: "retry_with_different_input",
     category: "attribution"
   },
   E_ATTRIBUTION_UNKNOWN_USAGE: {
@@ -272,7 +288,8 @@ var ERRORS = {
     http_status: 400,
     title: "Attribution Unknown Usage",
     description: "Attribution usage type is not recognized",
-    retriable: false,
+    retryable: false,
+    next_action: "retry_with_different_input",
     category: "attribution"
   },
   // Bundle error codes
@@ -281,7 +298,8 @@ var ERRORS = {
     http_status: 400,
     title: "Bundle Duplicate Receipt",
     description: "Bundle contains multiple receipts with the same ID",
-    retriable: false,
+    retryable: false,
+    next_action: "retry_with_different_input",
     category: "bundle"
   },
   E_BUNDLE_HASH_MISMATCH: {
@@ -289,7 +307,8 @@ var ERRORS = {
     http_status: 400,
     title: "Bundle Hash Mismatch",
     description: "File hash does not match value declared in manifest.json",
-    retriable: false,
+    retryable: false,
+    next_action: "retry_with_different_input",
     category: "bundle"
   },
   E_BUNDLE_INVALID_FORMAT: {
@@ -297,7 +316,8 @@ var ERRORS = {
     http_status: 400,
     title: "Bundle Invalid Format",
     description: "Bundle archive structure is invalid (not a valid ZIP or missing required files)",
-    retriable: false,
+    retryable: false,
+    next_action: "retry_with_different_input",
     category: "bundle"
   },
   E_BUNDLE_KEY_MISSING: {
@@ -305,7 +325,8 @@ var ERRORS = {
     http_status: 400,
     title: "Bundle Key Missing",
     description: "Required signing key not found in bundle (offline verification mode)",
-    retriable: false,
+    retryable: false,
+    next_action: "retry_with_different_input",
     category: "bundle"
   },
   E_BUNDLE_MANIFEST_INVALID: {
@@ -313,7 +334,8 @@ var ERRORS = {
     http_status: 400,
     title: "Bundle Manifest Invalid",
     description: "manifest.json does not conform to schema or contains invalid values",
-    retriable: false,
+    retryable: false,
+    next_action: "retry_with_different_input",
     category: "bundle"
   },
   E_BUNDLE_MANIFEST_MISSING: {
@@ -321,7 +343,8 @@ var ERRORS = {
     http_status: 400,
     title: "Bundle Manifest Missing",
     description: "manifest.json not found at bundle archive root",
-    retriable: false,
+    retryable: false,
+    next_action: "retry_with_different_input",
     category: "bundle"
   },
   E_BUNDLE_MISSING_KEYS: {
@@ -329,7 +352,8 @@ var ERRORS = {
     http_status: 400,
     title: "Bundle Missing Keys",
     description: "No verification keys provided in bundle JWKS",
-    retriable: false,
+    retryable: false,
+    next_action: "retry_with_different_input",
     category: "bundle"
   },
   E_BUNDLE_MISSING_RECEIPTS: {
@@ -337,7 +361,8 @@ var ERRORS = {
     http_status: 400,
     title: "Bundle Missing Receipts",
     description: "No receipts provided when creating bundle",
-    retriable: false,
+    retryable: false,
+    next_action: "retry_with_different_input",
     category: "bundle"
   },
   E_BUNDLE_PATH_TRAVERSAL: {
@@ -345,7 +370,8 @@ var ERRORS = {
     http_status: 400,
     title: "Bundle Path Traversal",
     description: "Bundle contains path traversal attack (zip-slip vulnerability)",
-    retriable: false,
+    retryable: false,
+    next_action: "retry_with_different_input",
     category: "bundle"
   },
   E_BUNDLE_POLICY_HASH_MISMATCH: {
@@ -353,7 +379,8 @@ var ERRORS = {
     http_status: 400,
     title: "Bundle Policy Hash Mismatch",
     description: "Policy snapshot hash does not match policy used to evaluate receipts",
-    retriable: false,
+    retryable: false,
+    next_action: "retry_with_different_input",
     category: "bundle"
   },
   E_BUNDLE_RECEIPTS_UNORDERED: {
@@ -361,7 +388,8 @@ var ERRORS = {
     http_status: 400,
     title: "Bundle Receipts Unordered",
     description: "receipts.ndjson is not in deterministic order (issued_at, receipt_id, receipt_hash)",
-    retriable: false,
+    retryable: false,
+    next_action: "retry_with_different_input",
     category: "bundle"
   },
   E_BUNDLE_RECEIPT_INVALID: {
@@ -369,7 +397,8 @@ var ERRORS = {
     http_status: 400,
     title: "Bundle Receipt Invalid",
     description: "Receipt JWS in bundle is malformed or missing required claims",
-    retriable: false,
+    retryable: false,
+    next_action: "retry_with_different_input",
     category: "bundle"
   },
   E_BUNDLE_SIGNATURE_INVALID: {
@@ -377,7 +406,8 @@ var ERRORS = {
     http_status: 400,
     title: "Bundle Signature Invalid",
     description: "bundle.sig JWS verification failed over manifest hash",
-    retriable: false,
+    retryable: false,
+    next_action: "retry_with_different_input",
     category: "bundle"
   },
   E_BUNDLE_SIZE_EXCEEDED: {
@@ -385,7 +415,8 @@ var ERRORS = {
     http_status: 400,
     title: "Bundle Size Exceeded",
     description: "Bundle exceeds size limits (entry count, entry size, or total size)",
-    retriable: false,
+    retryable: false,
+    next_action: "retry_with_different_input",
     category: "bundle"
   },
   E_BUNDLE_TIME_RANGE_INVALID: {
@@ -393,7 +424,8 @@ var ERRORS = {
     http_status: 400,
     title: "Bundle Time Range Invalid",
     description: "Receipt issued_at is outside the bundle declared time_range",
-    retriable: false,
+    retryable: false,
+    next_action: "retry_with_different_input",
     category: "bundle"
   },
   // Control error codes
@@ -402,7 +434,8 @@ var ERRORS = {
     http_status: 403,
     title: "Control Decision Denied",
     description: "Control engine denied authorization",
-    retriable: false,
+    retryable: false,
+    next_action: "contact_issuer",
     category: "control"
   },
   E_CONTROL_REVIEW_REQUIRED: {
@@ -410,7 +443,8 @@ var ERRORS = {
     http_status: 202,
     title: "Review Required",
     description: "Control engine requires manual review",
-    retriable: true,
+    retryable: true,
+    next_action: "contact_issuer",
     category: "control"
   },
   // Dispute error codes
@@ -419,7 +453,8 @@ var ERRORS = {
     http_status: 409,
     title: "Dispute Duplicate",
     description: "A dispute with this ID already exists",
-    retriable: false,
+    retryable: false,
+    next_action: "retry_with_different_input",
     category: "dispute"
   },
   E_DISPUTE_EXPIRED: {
@@ -427,7 +462,8 @@ var ERRORS = {
     http_status: 401,
     title: "Dispute Expired",
     description: "Dispute attestation has exceeded its expiration time",
-    retriable: false,
+    retryable: false,
+    next_action: "retry_with_different_input",
     category: "dispute"
   },
   E_DISPUTE_INVALID_FORMAT: {
@@ -435,7 +471,8 @@ var ERRORS = {
     http_status: 400,
     title: "Dispute Invalid Format",
     description: "Dispute attestation does not conform to schema",
-    retriable: false,
+    retryable: false,
+    next_action: "retry_with_different_input",
     category: "dispute"
   },
   E_DISPUTE_INVALID_GROUNDS: {
@@ -443,7 +480,8 @@ var ERRORS = {
     http_status: 400,
     title: "Dispute Invalid Grounds",
     description: "Dispute grounds code is not recognized",
-    retriable: false,
+    retryable: false,
+    next_action: "retry_with_different_input",
     category: "dispute"
   },
   E_DISPUTE_INVALID_ID: {
@@ -451,7 +489,8 @@ var ERRORS = {
     http_status: 400,
     title: "Dispute Invalid ID",
     description: "Dispute ID is not a valid ULID format (26 uppercase alphanumeric characters)",
-    retriable: false,
+    retryable: false,
+    next_action: "retry_with_different_input",
     category: "dispute"
   },
   E_DISPUTE_INVALID_STATE: {
@@ -459,7 +498,8 @@ var ERRORS = {
     http_status: 400,
     title: "Dispute Invalid State",
     description: "Dispute state is not recognized",
-    retriable: false,
+    retryable: false,
+    next_action: "retry_with_different_input",
     category: "dispute"
   },
   E_DISPUTE_INVALID_TARGET_TYPE: {
@@ -467,7 +507,8 @@ var ERRORS = {
     http_status: 400,
     title: "Dispute Invalid Target Type",
     description: "Dispute target type is not recognized (must be receipt, attribution, identity, or policy)",
-    retriable: false,
+    retryable: false,
+    next_action: "retry_with_different_input",
     category: "dispute"
   },
   E_DISPUTE_INVALID_TRANSITION: {
@@ -475,7 +516,8 @@ var ERRORS = {
     http_status: 400,
     title: "Dispute Invalid Transition",
     description: "Invalid state transition for dispute lifecycle",
-    retriable: false,
+    retryable: false,
+    next_action: "retry_with_different_input",
     category: "dispute"
   },
   E_DISPUTE_INVALID_TYPE: {
@@ -483,7 +525,8 @@ var ERRORS = {
     http_status: 400,
     title: "Dispute Invalid Type",
     description: "Dispute type is not recognized",
-    retriable: false,
+    retryable: false,
+    next_action: "retry_with_different_input",
     category: "dispute"
   },
   E_DISPUTE_MISSING_RESOLUTION: {
@@ -491,7 +534,8 @@ var ERRORS = {
     http_status: 400,
     title: "Dispute Missing Resolution",
     description: "Resolution is required for terminal states (resolved, rejected, final)",
-    retriable: false,
+    retryable: false,
+    next_action: "retry_with_different_input",
     category: "dispute"
   },
   E_DISPUTE_NOT_YET_VALID: {
@@ -499,7 +543,8 @@ var ERRORS = {
     http_status: 401,
     title: "Dispute Not Yet Valid",
     description: "Dispute attestation issued_at time is in the future",
-    retriable: true,
+    retryable: true,
+    next_action: "retry_after_delay",
     category: "dispute"
   },
   E_DISPUTE_OTHER_REQUIRES_DESCRIPTION: {
@@ -507,7 +552,8 @@ var ERRORS = {
     http_status: 400,
     title: "Dispute Other Requires Description",
     description: "Dispute type 'other' requires description of at least 50 characters",
-    retriable: false,
+    retryable: false,
+    next_action: "retry_with_different_input",
     category: "dispute"
   },
   E_DISPUTE_RESOLUTION_NOT_ALLOWED: {
@@ -515,7 +561,8 @@ var ERRORS = {
     http_status: 400,
     title: "Dispute Resolution Not Allowed",
     description: "Resolution is only valid for terminal states",
-    retriable: false,
+    retryable: false,
+    next_action: "retry_with_different_input",
     category: "dispute"
   },
   E_DISPUTE_TARGET_NOT_FOUND: {
@@ -523,7 +570,8 @@ var ERRORS = {
     http_status: 404,
     title: "Dispute Target Not Found",
     description: "The target receipt, attribution, or identity being disputed was not found",
-    retriable: true,
+    retryable: true,
+    next_action: "retry_after_delay",
     category: "dispute"
   },
   // Identity error codes
@@ -532,7 +580,8 @@ var ERRORS = {
     http_status: 400,
     title: "Identity Binding Future",
     description: "Identity binding signed_at timestamp is in the future",
-    retriable: false,
+    retryable: false,
+    next_action: "retry_with_different_input",
     category: "identity"
   },
   E_IDENTITY_BINDING_MISMATCH: {
@@ -540,7 +589,8 @@ var ERRORS = {
     http_status: 400,
     title: "Identity Binding Mismatch",
     description: "Identity binding does not match the request being verified",
-    retriable: false,
+    retryable: false,
+    next_action: "retry_with_different_input",
     category: "identity"
   },
   E_IDENTITY_BINDING_STALE: {
@@ -548,7 +598,8 @@ var ERRORS = {
     http_status: 401,
     title: "Identity Binding Stale",
     description: "Identity binding is too old and requires fresh binding",
-    retriable: true,
+    retryable: true,
+    next_action: "retry_after_delay",
     category: "identity"
   },
   E_IDENTITY_DIRECTORY_UNAVAILABLE: {
@@ -556,7 +607,8 @@ var ERRORS = {
     http_status: 503,
     title: "Identity Directory Unavailable",
     description: "Failed to fetch agent key directory",
-    retriable: true,
+    retryable: true,
+    next_action: "retry_after_delay",
     category: "identity"
   },
   E_IDENTITY_EXPIRED: {
@@ -564,7 +616,8 @@ var ERRORS = {
     http_status: 401,
     title: "Identity Expired",
     description: "Agent identity attestation has exceeded its expiration time",
-    retriable: false,
+    retryable: false,
+    next_action: "refresh_attestation",
     category: "identity"
   },
   E_IDENTITY_INVALID_FORMAT: {
@@ -572,7 +625,8 @@ var ERRORS = {
     http_status: 400,
     title: "Identity Invalid Format",
     description: "Agent identity attestation does not conform to schema",
-    retriable: false,
+    retryable: false,
+    next_action: "retry_with_different_input",
     category: "identity"
   },
   E_IDENTITY_KEY_EXPIRED: {
@@ -580,7 +634,8 @@ var ERRORS = {
     http_status: 401,
     title: "Identity Key Expired",
     description: "Agent signing key has expired per directory metadata",
-    retriable: false,
+    retryable: false,
+    next_action: "refresh_attestation",
     category: "identity"
   },
   E_IDENTITY_KEY_REVOKED: {
@@ -588,7 +643,8 @@ var ERRORS = {
     http_status: 401,
     title: "Identity Key Revoked",
     description: "Agent signing key has been explicitly revoked",
-    retriable: false,
+    retryable: false,
+    next_action: "refresh_attestation",
     category: "identity"
   },
   E_IDENTITY_KEY_UNKNOWN: {
@@ -596,7 +652,8 @@ var ERRORS = {
     http_status: 401,
     title: "Identity Key Unknown",
     description: "Key ID not found in agent key directory",
-    retriable: true,
+    retryable: true,
+    next_action: "retry_after_delay",
     category: "identity"
   },
   E_IDENTITY_MISSING: {
@@ -604,7 +661,8 @@ var ERRORS = {
     http_status: 401,
     title: "Identity Missing",
     description: "No agent identity attestation provided in request",
-    retriable: false,
+    retryable: false,
+    next_action: "retry_with_different_input",
     category: "identity"
   },
   E_IDENTITY_NOT_YET_VALID: {
@@ -612,7 +670,8 @@ var ERRORS = {
     http_status: 401,
     title: "Identity Not Yet Valid",
     description: "Agent identity attestation issued_at time is in the future",
-    retriable: true,
+    retryable: true,
+    next_action: "retry_after_delay",
     category: "identity"
   },
   E_IDENTITY_PROOF_UNSUPPORTED: {
@@ -620,7 +679,8 @@ var ERRORS = {
     http_status: 400,
     title: "Identity Proof Unsupported",
     description: "Agent identity proof method is not supported",
-    retriable: false,
+    retryable: false,
+    next_action: "retry_with_different_input",
     category: "identity"
   },
   E_IDENTITY_SIG_INVALID: {
@@ -628,7 +688,17 @@ var ERRORS = {
     http_status: 401,
     title: "Identity Signature Invalid",
     description: "Agent identity proof signature verification failed",
-    retriable: false,
+    retryable: false,
+    next_action: "retry_with_different_input",
+    category: "identity"
+  },
+  E_MVIS_INCOMPLETE: {
+    code: "E_MVIS_INCOMPLETE",
+    http_status: 400,
+    title: "MVIS Incomplete",
+    description: "Identity receipt missing one or more Minimum Viable Identity Set required fields (issuer, subject, key_binding, time_bounds, replay_protection)",
+    retryable: false,
+    next_action: "retry_with_different_input",
     category: "identity"
   },
   // Infrastructure error codes
@@ -637,7 +707,8 @@ var ERRORS = {
     http_status: 503,
     title: "Circuit Breaker Open",
     description: "Service temporarily unavailable due to circuit breaker",
-    retriable: true,
+    retryable: true,
+    next_action: "retry_after_delay",
     category: "infrastructure"
   },
   E_INTERNAL: {
@@ -645,7 +716,8 @@ var ERRORS = {
     http_status: 500,
     title: "Internal Error",
     description: "An unexpected internal error occurred during verification",
-    retriable: true,
+    retryable: true,
+    next_action: "retry_after_delay",
     category: "infrastructure"
   },
   E_JWKS_FETCH_FAILED: {
@@ -653,7 +725,8 @@ var ERRORS = {
     http_status: 503,
     title: "JWKS Fetch Failed",
     description: "Failed to fetch public keys from JWKS endpoint",
-    retriable: true,
+    retryable: true,
+    next_action: "retry_after_delay",
     category: "infrastructure"
   },
   E_RATE_LIMITED: {
@@ -661,7 +734,8 @@ var ERRORS = {
     http_status: 429,
     title: "Rate Limited",
     description: "Too many requests, please retry later",
-    retriable: true,
+    retryable: true,
+    next_action: "retry_after_delay",
     category: "infrastructure"
   },
   // Interaction error codes
@@ -670,7 +744,8 @@ var ERRORS = {
     http_status: 400,
     title: "Interaction Invalid Digest",
     description: "Digest structure is invalid (wrong value format or missing bytes)",
-    retriable: false,
+    retryable: false,
+    next_action: "retry_with_different_input",
     category: "interaction"
   },
   E_INTERACTION_INVALID_DIGEST_ALG: {
@@ -678,7 +753,8 @@ var ERRORS = {
     http_status: 400,
     title: "Interaction Invalid Digest Algorithm",
     description: "Digest algorithm is not in the canonical set (sha-256, sha-256:trunc-64k, sha-256:trunc-1m)",
-    retriable: false,
+    retryable: false,
+    next_action: "retry_with_different_input",
     category: "interaction"
   },
   E_INTERACTION_INVALID_EXTENSION_KEY: {
@@ -686,7 +762,8 @@ var ERRORS = {
     http_status: 400,
     title: "Interaction Invalid Extension Key",
     description: "Extension key does not match required format (reverse-DNS/name[@version])",
-    retriable: false,
+    retryable: false,
+    next_action: "retry_with_different_input",
     category: "interaction"
   },
   E_INTERACTION_INVALID_FORMAT: {
@@ -694,7 +771,8 @@ var ERRORS = {
     http_status: 400,
     title: "Interaction Invalid Format",
     description: "Interaction evidence does not conform to InteractionEvidenceV01 schema",
-    retriable: false,
+    retryable: false,
+    next_action: "retry_with_different_input",
     category: "interaction"
   },
   E_INTERACTION_INVALID_KIND_FORMAT: {
@@ -702,7 +780,8 @@ var ERRORS = {
     http_status: 400,
     title: "Interaction Invalid Kind Format",
     description: "Interaction kind does not match required format (lowercase, 2-128 chars, starts with letter)",
-    retriable: false,
+    retryable: false,
+    next_action: "retry_with_different_input",
     category: "interaction"
   },
   E_INTERACTION_INVALID_TIMING: {
@@ -710,7 +789,8 @@ var ERRORS = {
     http_status: 400,
     title: "Interaction Invalid Timing",
     description: "Timing constraint violated (completed_at < started_at or invalid datetime format)",
-    retriable: false,
+    retryable: false,
+    next_action: "retry_with_different_input",
     category: "interaction"
   },
   E_INTERACTION_KIND_RESERVED: {
@@ -718,7 +798,8 @@ var ERRORS = {
     http_status: 400,
     title: "Interaction Kind Reserved",
     description: "Interaction kind uses reserved prefix (peac.*, org.peacprotocol.*) but is not in the well-known registry",
-    retriable: false,
+    retryable: false,
+    next_action: "retry_with_different_input",
     category: "interaction"
   },
   E_INTERACTION_MISSING_ERROR_DETAIL: {
@@ -726,7 +807,8 @@ var ERRORS = {
     http_status: 400,
     title: "Interaction Missing Error Detail",
     description: "error_code or extensions required when result.status is error",
-    retriable: false,
+    retryable: false,
+    next_action: "retry_with_different_input",
     category: "interaction"
   },
   E_INTERACTION_MISSING_EXECUTOR: {
@@ -734,7 +816,8 @@ var ERRORS = {
     http_status: 400,
     title: "Interaction Missing Executor",
     description: "Interaction evidence is missing required executor or executor.platform field",
-    retriable: false,
+    retryable: false,
+    next_action: "retry_with_different_input",
     category: "interaction"
   },
   E_INTERACTION_MISSING_ID: {
@@ -742,7 +825,8 @@ var ERRORS = {
     http_status: 400,
     title: "Interaction Missing ID",
     description: "Interaction evidence is missing required interaction_id field",
-    retriable: false,
+    retryable: false,
+    next_action: "retry_with_different_input",
     category: "interaction"
   },
   E_INTERACTION_MISSING_KIND: {
@@ -750,7 +834,8 @@ var ERRORS = {
     http_status: 400,
     title: "Interaction Missing Kind",
     description: "Interaction evidence is missing required kind field",
-    retriable: false,
+    retryable: false,
+    next_action: "retry_with_different_input",
     category: "interaction"
   },
   E_INTERACTION_MISSING_RESULT: {
@@ -758,7 +843,8 @@ var ERRORS = {
     http_status: 400,
     title: "Interaction Missing Result",
     description: "result.status is required when output is present",
-    retriable: false,
+    retryable: false,
+    next_action: "retry_with_different_input",
     category: "interaction"
   },
   E_INTERACTION_MISSING_STARTED_AT: {
@@ -766,7 +852,8 @@ var ERRORS = {
     http_status: 400,
     title: "Interaction Missing Started At",
     description: "Interaction evidence is missing required started_at field",
-    retriable: false,
+    retryable: false,
+    next_action: "retry_with_different_input",
     category: "interaction"
   },
   E_INTERACTION_MISSING_TARGET: {
@@ -774,7 +861,8 @@ var ERRORS = {
     http_status: 400,
     title: "Interaction Missing Target",
     description: "Kind prefix requires matching target field (tool.* needs tool, http.*/fs.* need resource)",
-    retriable: false,
+    retryable: false,
+    next_action: "retry_with_different_input",
     category: "interaction"
   },
   // Ucp error codes
@@ -783,7 +871,8 @@ var ERRORS = {
     http_status: 500,
     title: "UCP Evidence Serialization Failed",
     description: "Failed to serialize UCP evidence to YAML format",
-    retriable: false,
+    retryable: false,
+    next_action: "retry_with_different_input",
     category: "ucp"
   },
   E_UCP_KEY_ALGORITHM_MISMATCH: {
@@ -791,7 +880,8 @@ var ERRORS = {
     http_status: 401,
     title: "UCP Key Algorithm Mismatch",
     description: "Key type is not EC as required for ECDSA signatures",
-    retriable: false,
+    retryable: false,
+    next_action: "retry_with_different_input",
     category: "ucp"
   },
   E_UCP_KEY_CURVE_MISMATCH: {
@@ -799,7 +889,8 @@ var ERRORS = {
     http_status: 401,
     title: "UCP Key Curve Mismatch",
     description: "Key curve does not match signature algorithm (ES256=P-256, ES384=P-384, ES512=P-521)",
-    retriable: false,
+    retryable: false,
+    next_action: "retry_with_different_input",
     category: "ucp"
   },
   E_UCP_KEY_NOT_FOUND: {
@@ -807,7 +898,8 @@ var ERRORS = {
     http_status: 401,
     title: "UCP Key Not Found",
     description: "Key ID from signature not found in business UCP profile",
-    retriable: true,
+    retryable: true,
+    next_action: "retry_after_delay",
     category: "ucp"
   },
   E_UCP_ORDER_INVALID: {
@@ -815,7 +907,8 @@ var ERRORS = {
     http_status: 400,
     title: "UCP Order Invalid",
     description: "UCP order object does not conform to expected schema",
-    retriable: false,
+    retryable: false,
+    next_action: "retry_with_different_input",
     category: "ucp"
   },
   E_UCP_ORDER_MISSING_ID: {
@@ -823,7 +916,8 @@ var ERRORS = {
     http_status: 400,
     title: "UCP Order Missing ID",
     description: "UCP order is missing required id field",
-    retriable: false,
+    retryable: false,
+    next_action: "retry_with_different_input",
     category: "ucp"
   },
   E_UCP_ORDER_MISSING_LINE_ITEMS: {
@@ -831,7 +925,8 @@ var ERRORS = {
     http_status: 400,
     title: "UCP Order Missing Line Items",
     description: "UCP order is missing required line_items array",
-    retriable: false,
+    retryable: false,
+    next_action: "retry_with_different_input",
     category: "ucp"
   },
   E_UCP_ORDER_MISSING_TOTALS: {
@@ -839,7 +934,8 @@ var ERRORS = {
     http_status: 400,
     title: "UCP Order Missing Totals",
     description: "UCP order is missing required totals array or total entry",
-    retriable: false,
+    retryable: false,
+    next_action: "retry_with_different_input",
     category: "ucp"
   },
   E_UCP_PAYLOAD_EMPTY: {
@@ -847,7 +943,8 @@ var ERRORS = {
     http_status: 400,
     title: "UCP Payload Empty",
     description: "Webhook request body is empty",
-    retriable: false,
+    retryable: false,
+    next_action: "retry_with_different_input",
     category: "ucp"
   },
   E_UCP_PAYLOAD_NOT_JSON: {
@@ -855,7 +952,8 @@ var ERRORS = {
     http_status: 400,
     title: "UCP Payload Not JSON",
     description: "Webhook request body is not valid JSON",
-    retriable: false,
+    retryable: false,
+    next_action: "retry_with_different_input",
     category: "ucp"
   },
   E_UCP_PAYLOAD_TOO_LARGE: {
@@ -863,7 +961,8 @@ var ERRORS = {
     http_status: 400,
     title: "UCP Payload Too Large",
     description: "Webhook request body exceeds maximum allowed size",
-    retriable: false,
+    retryable: false,
+    next_action: "retry_with_different_input",
     category: "ucp"
   },
   E_UCP_PROFILE_FETCH_FAILED: {
@@ -871,7 +970,8 @@ var ERRORS = {
     http_status: 502,
     title: "UCP Profile Fetch Failed",
     description: "Failed to fetch business UCP profile from /.well-known/ucp",
-    retriable: true,
+    retryable: true,
+    next_action: "retry_after_delay",
     category: "ucp"
   },
   E_UCP_PROFILE_INVALID: {
@@ -879,7 +979,8 @@ var ERRORS = {
     http_status: 502,
     title: "UCP Profile Invalid",
     description: "Business UCP profile does not conform to expected schema",
-    retriable: false,
+    retryable: false,
+    next_action: "retry_with_different_input",
     category: "ucp"
   },
   E_UCP_PROFILE_NO_SIGNING_KEYS: {
@@ -887,7 +988,8 @@ var ERRORS = {
     http_status: 502,
     title: "UCP Profile No Signing Keys",
     description: "Business UCP profile has empty or missing signing_keys array",
-    retriable: false,
+    retryable: false,
+    next_action: "retry_with_different_input",
     category: "ucp"
   },
   E_UCP_SIGNATURE_ALGORITHM_UNSUPPORTED: {
@@ -895,7 +997,8 @@ var ERRORS = {
     http_status: 400,
     title: "UCP Signature Algorithm Unsupported",
     description: "Signature algorithm is not ES256, ES384, or ES512",
-    retriable: false,
+    retryable: false,
+    next_action: "retry_with_different_input",
     category: "ucp"
   },
   E_UCP_SIGNATURE_B64_INVALID: {
@@ -903,7 +1006,8 @@ var ERRORS = {
     http_status: 400,
     title: "UCP Signature b64 Invalid",
     description: "b64=false requires 'b64' in 'crit' array per RFC 7797",
-    retriable: false,
+    retryable: false,
+    next_action: "retry_with_different_input",
     category: "ucp"
   },
   E_UCP_SIGNATURE_INVALID: {
@@ -911,7 +1015,8 @@ var ERRORS = {
     http_status: 401,
     title: "UCP Signature Invalid",
     description: "Webhook signature verification failed against payload",
-    retriable: false,
+    retryable: false,
+    next_action: "retry_with_different_input",
     category: "ucp"
   },
   E_UCP_SIGNATURE_MALFORMED: {
@@ -919,7 +1024,8 @@ var ERRORS = {
     http_status: 400,
     title: "UCP Signature Malformed",
     description: "Request-Signature header is not a valid detached JWS (RFC 7797)",
-    retriable: false,
+    retryable: false,
+    next_action: "retry_with_different_input",
     category: "ucp"
   },
   E_UCP_SIGNATURE_MISSING: {
@@ -927,7 +1033,8 @@ var ERRORS = {
     http_status: 400,
     title: "UCP Signature Missing",
     description: "Request-Signature header is missing from UCP webhook request",
-    retriable: false,
+    retryable: false,
+    next_action: "retry_with_different_input",
     category: "ucp"
   },
   E_UCP_VERIFICATION_FAILED: {
@@ -935,7 +1042,8 @@ var ERRORS = {
     http_status: 401,
     title: "UCP Verification Failed",
     description: "All verification attempts failed (raw and JCS canonicalized)",
-    retriable: false,
+    retryable: false,
+    next_action: "retry_with_different_input",
     category: "ucp"
   },
   // Validation error codes
@@ -944,7 +1052,8 @@ var ERRORS = {
     http_status: 400,
     title: "Kernel Constraint Violation",
     description: "Receipt claims exceed a kernel constraint (max keys, max depth, max string length, max evidence bytes, or similar structural limit)",
-    retriable: false,
+    retryable: false,
+    next_action: "retry_with_different_input",
     category: "validation"
   },
   E_EVIDENCE_NOT_JSON: {
@@ -952,7 +1061,8 @@ var ERRORS = {
     http_status: 400,
     title: "Evidence Not JSON-Safe",
     description: "Evidence contains non-JSON-safe values (NaN, Infinity, undefined, BigInt, Date, Map, Set, functions, symbols, class instances, or cycles)",
-    retriable: false,
+    retryable: false,
+    next_action: "retry_with_different_input",
     category: "validation"
   },
   E_EXPIRED: {
@@ -960,7 +1070,8 @@ var ERRORS = {
     http_status: 400,
     title: "Receipt Expired",
     description: "Receipt has exceeded its expiration time",
-    retriable: false,
+    retryable: false,
+    next_action: "retry_with_different_input",
     category: "validation"
   },
   E_INVALID_AMOUNT: {
@@ -968,7 +1079,8 @@ var ERRORS = {
     http_status: 400,
     title: "Invalid Amount",
     description: "Payment amount is invalid or out of allowed range",
-    retriable: false,
+    retryable: false,
+    next_action: "retry_with_different_input",
     category: "validation"
   },
   E_INVALID_AUDIENCE: {
@@ -976,7 +1088,8 @@ var ERRORS = {
     http_status: 400,
     title: "Invalid Audience",
     description: "Receipt audience claim does not match expected value",
-    retriable: false,
+    retryable: false,
+    next_action: "retry_with_different_input",
     category: "validation"
   },
   E_INVALID_CURRENCY: {
@@ -984,7 +1097,8 @@ var ERRORS = {
     http_status: 400,
     title: "Invalid Currency",
     description: "Currency code is not a valid ISO 4217 code",
-    retriable: false,
+    retryable: false,
+    next_action: "retry_with_different_input",
     category: "validation"
   },
   E_INVALID_FORMAT: {
@@ -992,7 +1106,8 @@ var ERRORS = {
     http_status: 400,
     title: "Invalid Format",
     description: "Receipt does not conform to JWS format",
-    retriable: false,
+    retryable: false,
+    next_action: "retry_with_different_input",
     category: "validation"
   },
   E_INVALID_ISSUER: {
@@ -1000,7 +1115,8 @@ var ERRORS = {
     http_status: 400,
     title: "Invalid Issuer",
     description: "Receipt issuer claim is invalid or untrusted",
-    retriable: false,
+    retryable: false,
+    next_action: "retry_with_different_input",
     category: "validation"
   },
   E_INVALID_RAIL: {
@@ -1008,7 +1124,8 @@ var ERRORS = {
     http_status: 400,
     title: "Invalid Payment Rail",
     description: "Payment rail identifier is not recognized",
-    retriable: false,
+    retryable: false,
+    next_action: "retry_with_different_input",
     category: "validation"
   },
   E_INVALID_RECEIPT_ID: {
@@ -1016,7 +1133,8 @@ var ERRORS = {
     http_status: 400,
     title: "Invalid Receipt ID",
     description: "Receipt ID (rid) does not match expected value",
-    retriable: false,
+    retryable: false,
+    next_action: "retry_with_different_input",
     category: "validation"
   },
   E_INVALID_SUBJECT: {
@@ -1024,7 +1142,8 @@ var ERRORS = {
     http_status: 400,
     title: "Invalid Subject",
     description: "Receipt subject claim does not match expected value",
-    retriable: false,
+    retryable: false,
+    next_action: "retry_with_different_input",
     category: "validation"
   },
   E_MISSING_EXP: {
@@ -1032,7 +1151,8 @@ var ERRORS = {
     http_status: 400,
     title: "Missing Expiration",
     description: "Receipt is missing required exp claim",
-    retriable: false,
+    retryable: false,
+    next_action: "retry_with_different_input",
     category: "validation"
   },
   E_MISSING_REQUIRED_CLAIM: {
@@ -1040,7 +1160,8 @@ var ERRORS = {
     http_status: 400,
     title: "Missing Required Claim",
     description: "Receipt is missing a required JWT claim",
-    retriable: false,
+    retryable: false,
+    next_action: "retry_with_different_input",
     category: "validation"
   },
   E_NOT_YET_VALID: {
@@ -1048,7 +1169,8 @@ var ERRORS = {
     http_status: 400,
     title: "Not Yet Valid",
     description: "Receipt nbf (not before) time is in the future",
-    retriable: true,
+    retryable: true,
+    next_action: "retry_after_delay",
     category: "validation"
   },
   E_PARSE_ATTESTATION_INVALID: {
@@ -1056,7 +1178,8 @@ var ERRORS = {
     http_status: 400,
     title: "Attestation Receipt Invalid",
     description: "Receipt classified as attestation but fails attestation schema validation",
-    retriable: false,
+    retryable: false,
+    next_action: "retry_with_different_input",
     category: "validation"
   },
   E_PARSE_COMMERCE_INVALID: {
@@ -1064,7 +1187,8 @@ var ERRORS = {
     http_status: 400,
     title: "Commerce Receipt Invalid",
     description: "Receipt has commerce fields (amt/cur/payment) but fails commerce schema validation",
-    retriable: false,
+    retryable: false,
+    next_action: "retry_with_different_input",
     category: "validation"
   },
   E_PARSE_INVALID_INPUT: {
@@ -1072,7 +1196,8 @@ var ERRORS = {
     http_status: 400,
     title: "Parse Invalid Input",
     description: "Input to receipt parser is not a non-null object",
-    retriable: false,
+    retryable: false,
+    next_action: "retry_with_different_input",
     category: "validation"
   },
   // Verification error codes
@@ -1081,7 +1206,8 @@ var ERRORS = {
     http_status: 400,
     title: "Invalid Signature",
     description: "Receipt signature verification failed",
-    retriable: false,
+    retryable: false,
+    next_action: "abort",
     category: "verification"
   },
   E_KEY_NOT_FOUND: {
@@ -1089,7 +1215,26 @@ var ERRORS = {
     http_status: 400,
     title: "Key Not Found",
     description: "Public key with specified kid not found in JWKS",
-    retriable: false,
+    retryable: false,
+    next_action: "retry_with_different_key",
+    category: "verification"
+  },
+  E_KID_REUSE_DETECTED: {
+    code: "E_KID_REUSE_DETECTED",
+    http_status: 400,
+    title: "Kid Reuse Detected",
+    description: "Same kid value used with different key material within the retention window",
+    retryable: false,
+    next_action: "abort",
+    category: "verification"
+  },
+  E_REVOKED_KEY_USED: {
+    code: "E_REVOKED_KEY_USED",
+    http_status: 400,
+    title: "Revoked Key Used",
+    description: "Receipt signed with a key listed in the issuer revoked_keys set",
+    retryable: false,
+    next_action: "retry_with_different_key",
     category: "verification"
   },
   // Verifier error codes
@@ -1098,7 +1243,8 @@ var ERRORS = {
     http_status: 400,
     title: "Extension Too Large",
     description: "Receipt extension data exceeds maximum size limit (64 KB)",
-    retriable: false,
+    retryable: false,
+    next_action: "abort",
     category: "verifier"
   },
   E_VERIFY_INSECURE_SCHEME_BLOCKED: {
@@ -1106,7 +1252,8 @@ var ERRORS = {
     http_status: 403,
     title: "Insecure Scheme Blocked",
     description: "Non-HTTPS URL encountered during issuer discovery (issuer URL or jwks_uri)",
-    retriable: false,
+    retryable: false,
+    next_action: "abort",
     category: "verifier"
   },
   E_VERIFY_INVALID_TRANSPORT: {
@@ -1114,7 +1261,8 @@ var ERRORS = {
     http_status: 400,
     title: "Invalid Transport",
     description: "Multiple PEAC-Receipt or PEAC-Receipt-Pointer headers detected (ambiguous transport)",
-    retriable: false,
+    retryable: false,
+    next_action: "abort",
     category: "verifier"
   },
   E_VERIFY_ISSUER_CONFIG_INVALID: {
@@ -1122,7 +1270,8 @@ var ERRORS = {
     http_status: 502,
     title: "Issuer Config Invalid",
     description: "peac-issuer.json is not valid JSON or does not conform to issuer config schema",
-    retriable: false,
+    retryable: false,
+    next_action: "abort",
     category: "verifier"
   },
   E_VERIFY_ISSUER_CONFIG_MISSING: {
@@ -1130,7 +1279,8 @@ var ERRORS = {
     http_status: 502,
     title: "Issuer Config Missing",
     description: "peac-issuer.json not found or not fetchable at issuer origin",
-    retriable: true,
+    retryable: true,
+    next_action: "retry_after_delay",
     category: "verifier"
   },
   E_VERIFY_ISSUER_MISMATCH: {
@@ -1138,7 +1288,8 @@ var ERRORS = {
     http_status: 403,
     title: "Issuer Mismatch",
     description: "issuer field in peac-issuer.json does not match the expected issuer origin",
-    retriable: false,
+    retryable: false,
+    next_action: "abort",
     category: "verifier"
   },
   E_VERIFY_ISSUER_NOT_ALLOWED: {
@@ -1146,7 +1297,8 @@ var ERRORS = {
     http_status: 403,
     title: "Issuer Not Allowed",
     description: "Receipt issuer is not in the verifier policy allowlist",
-    retriable: false,
+    retryable: false,
+    next_action: "abort",
     category: "verifier"
   },
   E_VERIFY_JWKS_INVALID: {
@@ -1154,7 +1306,8 @@ var ERRORS = {
     http_status: 502,
     title: "JWKS Invalid",
     description: "JWKS response is not valid JSON or missing required keys array",
-    retriable: false,
+    retryable: false,
+    next_action: "abort",
     category: "verifier"
   },
   E_VERIFY_JWKS_TOO_LARGE: {
@@ -1162,7 +1315,8 @@ var ERRORS = {
     http_status: 400,
     title: "JWKS Too Large",
     description: "JWKS response exceeds maximum size limit (64 KB)",
-    retriable: false,
+    retryable: false,
+    next_action: "abort",
     category: "verifier"
   },
   E_VERIFY_JWKS_TOO_MANY_KEYS: {
@@ -1170,7 +1324,8 @@ var ERRORS = {
     http_status: 400,
     title: "JWKS Too Many Keys",
     description: "JWKS contains more than maximum allowed keys (20)",
-    retriable: false,
+    retryable: false,
+    next_action: "abort",
     category: "verifier"
   },
   E_VERIFY_JWKS_URI_INVALID: {
@@ -1178,7 +1333,8 @@ var ERRORS = {
     http_status: 502,
     title: "JWKS URI Invalid",
     description: "jwks_uri in peac-issuer.json is not a valid HTTPS URL",
-    retriable: false,
+    retryable: false,
+    next_action: "abort",
     category: "verifier"
   },
   E_VERIFY_KEY_FETCH_BLOCKED: {
@@ -1186,7 +1342,8 @@ var ERRORS = {
     http_status: 403,
     title: "Key Fetch Blocked",
     description: "JWKS discovery blocked by SSRF protection (private IP, non-HTTPS, or blocked redirect)",
-    retriable: false,
+    retryable: false,
+    next_action: "abort",
     category: "verifier"
   },
   E_VERIFY_KEY_FETCH_FAILED: {
@@ -1194,7 +1351,8 @@ var ERRORS = {
     http_status: 502,
     title: "Key Fetch Failed",
     description: "Network error while fetching JWKS from issuer",
-    retriable: true,
+    retryable: true,
+    next_action: "retry_after_delay",
     category: "verifier"
   },
   E_VERIFY_KEY_FETCH_TIMEOUT: {
@@ -1202,7 +1360,8 @@ var ERRORS = {
     http_status: 504,
     title: "Key Fetch Timeout",
     description: "JWKS discovery timed out (5 second limit)",
-    retriable: true,
+    retryable: true,
+    next_action: "retry_after_delay",
     category: "verifier"
   },
   E_VERIFY_MALFORMED_RECEIPT: {
@@ -1210,7 +1369,8 @@ var ERRORS = {
     http_status: 400,
     title: "Malformed Receipt",
     description: "Cannot parse receipt as JWS Compact Serialization",
-    retriable: false,
+    retryable: false,
+    next_action: "abort",
     category: "verifier"
   },
   E_VERIFY_POINTER_DIGEST_MISMATCH: {
@@ -1218,7 +1378,8 @@ var ERRORS = {
     http_status: 400,
     title: "Pointer Digest Mismatch",
     description: "Fetched receipt SHA-256 digest does not match pointer declaration",
-    retriable: false,
+    retryable: false,
+    next_action: "abort",
     category: "verifier"
   },
   E_VERIFY_POINTER_FETCH_BLOCKED: {
@@ -1226,7 +1387,8 @@ var ERRORS = {
     http_status: 403,
     title: "Pointer Fetch Blocked",
     description: "Pointer URL fetch blocked by SSRF protection (private IP, non-HTTPS, or blocked redirect)",
-    retriable: false,
+    retryable: false,
+    next_action: "abort",
     category: "verifier"
   },
   E_VERIFY_POINTER_FETCH_FAILED: {
@@ -1234,7 +1396,8 @@ var ERRORS = {
     http_status: 502,
     title: "Pointer Fetch Failed",
     description: "Network error while fetching receipt from pointer URL",
-    retriable: true,
+    retryable: true,
+    next_action: "retry_after_delay",
     category: "verifier"
   },
   E_VERIFY_POINTER_FETCH_TIMEOUT: {
@@ -1242,7 +1405,8 @@ var ERRORS = {
     http_status: 504,
     title: "Pointer Fetch Timeout",
     description: "Pointer URL fetch timed out (5 second limit)",
-    retriable: true,
+    retryable: true,
+    next_action: "retry_after_delay",
     category: "verifier"
   },
   E_VERIFY_POINTER_FETCH_TOO_LARGE: {
@@ -1250,7 +1414,8 @@ var ERRORS = {
     http_status: 413,
     title: "Pointer Fetch Too Large",
     description: "Pointer URL response exceeds maximum size limit (256 KB)",
-    retriable: false,
+    retryable: false,
+    next_action: "abort",
     category: "verifier"
   },
   E_VERIFY_POLICY_VIOLATION: {
@@ -1258,7 +1423,8 @@ var ERRORS = {
     http_status: 403,
     title: "Policy Violation",
     description: "Receipt violates verifier trust policy",
-    retriable: false,
+    retryable: false,
+    next_action: "abort",
     category: "verifier"
   },
   E_VERIFY_RECEIPT_TOO_LARGE: {
@@ -1266,7 +1432,8 @@ var ERRORS = {
     http_status: 413,
     title: "Receipt Too Large",
     description: "Receipt exceeds maximum size limit (256 KB)",
-    retriable: false,
+    retryable: false,
+    next_action: "abort",
     category: "verifier"
   },
   E_VERIFY_SCHEMA_INVALID: {
@@ -1274,7 +1441,8 @@ var ERRORS = {
     http_status: 400,
     title: "Schema Invalid",
     description: "Receipt claims do not conform to expected schema",
-    retriable: false,
+    retryable: false,
+    next_action: "abort",
     category: "verifier"
   },
   // Workflow error codes
@@ -1283,7 +1451,8 @@ var ERRORS = {
     http_status: 400,
     title: "Invalid Workflow Context",
     description: "Workflow context does not conform to WorkflowContextSchema",
-    retriable: false,
+    retryable: false,
+    next_action: "retry_with_different_input",
     category: "workflow"
   },
   E_WORKFLOW_CYCLE_DETECTED: {
@@ -1291,7 +1460,8 @@ var ERRORS = {
     http_status: 400,
     title: "Workflow Cycle Detected",
     description: "Workflow DAG contains a cycle (not acyclic)",
-    retriable: false,
+    retryable: false,
+    next_action: "retry_with_different_input",
     category: "workflow"
   },
   E_WORKFLOW_DAG_INVALID: {
@@ -1299,7 +1469,8 @@ var ERRORS = {
     http_status: 400,
     title: "Invalid Workflow DAG",
     description: "Workflow DAG semantics violated (self-parent, duplicate parents, or cycle detected)",
-    retriable: false,
+    retryable: false,
+    next_action: "retry_with_different_input",
     category: "workflow"
   },
   E_WORKFLOW_ID_INVALID: {
@@ -1307,7 +1478,8 @@ var ERRORS = {
     http_status: 400,
     title: "Invalid Workflow ID",
     description: "Workflow ID does not match required format (wf_{ulid|uuid})",
-    retriable: false,
+    retryable: false,
+    next_action: "retry_with_different_input",
     category: "workflow"
   },
   E_WORKFLOW_LIMIT_EXCEEDED: {
@@ -1315,7 +1487,8 @@ var ERRORS = {
     http_status: 400,
     title: "Workflow Limit Exceeded",
     description: "Workflow exceeds defined limits (parent count, ID length, etc.)",
-    retriable: false,
+    retryable: false,
+    next_action: "retry_with_different_input",
     category: "workflow"
   },
   E_WORKFLOW_PARENT_NOT_FOUND: {
@@ -1323,7 +1496,8 @@ var ERRORS = {
     http_status: 400,
     title: "Parent Step Not Found",
     description: "Referenced parent step ID does not exist in the workflow",
-    retriable: false,
+    retryable: false,
+    next_action: "retry_with_different_input",
     category: "workflow"
   },
   E_WORKFLOW_STEP_ID_INVALID: {
@@ -1331,7 +1505,8 @@ var ERRORS = {
     http_status: 400,
     title: "Invalid Step ID",
     description: "Step ID does not match required format (step_{ulid|uuid})",
-    retriable: false,
+    retryable: false,
+    next_action: "retry_with_different_input",
     category: "workflow"
   },
   E_WORKFLOW_SUMMARY_INVALID: {
@@ -1339,15 +1514,16 @@ var ERRORS = {
     http_status: 400,
     title: "Invalid Workflow Summary",
     description: "Workflow summary attestation does not conform to schema",
-    retriable: false,
+    retryable: false,
+    next_action: "retry_with_different_input",
     category: "workflow"
   }
 };
 function getError(code) {
   return ERRORS[code];
 }
-function isRetriable(code) {
-  return ERRORS[code]?.retriable ?? false;
+function isRetryable(code) {
+  return ERRORS[code]?.retryable ?? false;
 }
 var BUNDLE_ERRORS = {
   DUPLICATE_RECEIPT: "E_BUNDLE_DUPLICATE_RECEIPT",
@@ -1388,6 +1564,6 @@ exports.DISPUTE_ERRORS = DISPUTE_ERRORS;
 exports.ERRORS = ERRORS;
 exports.ERROR_CODES = ERROR_CODES;
 exports.getError = getError;
-exports.isRetriable = isRetriable;
+exports.isRetryable = isRetryable;
 //# sourceMappingURL=errors.cjs.map
 //# sourceMappingURL=errors.cjs.map