@peac/kernel 0.11.2 → 0.11.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (23) hide show
  1. package/README.md +45 -5
  2. package/dist/__tests__/registries.test.d.ts +2 -0
  3. package/dist/__tests__/registries.test.d.ts.map +1 -0
  4. package/dist/constants.cjs +2 -1
  5. package/dist/constants.cjs.map +1 -1
  6. package/dist/constants.d.ts +4 -2
  7. package/dist/constants.d.ts.map +1 -1
  8. package/dist/constants.mjs +2 -1
  9. package/dist/constants.mjs.map +1 -1
  10. package/dist/error-categories.generated.d.ts +1 -1
  11. package/dist/errors.cjs +30 -0
  12. package/dist/errors.cjs.map +1 -1
  13. package/dist/errors.generated.d.ts +4 -1
  14. package/dist/errors.generated.d.ts.map +1 -1
  15. package/dist/errors.mjs +30 -0
  16. package/dist/errors.mjs.map +1 -1
  17. package/dist/index.cjs +32 -1
  18. package/dist/index.cjs.map +1 -1
  19. package/dist/index.mjs +32 -1
  20. package/dist/index.mjs.map +1 -1
  21. package/dist/types.cjs.map +1 -1
  22. package/dist/types.mjs.map +1 -1
  23. package/package.json +1 -1
package/dist/index.mjs CHANGED
@@ -55,7 +55,8 @@ var DISCOVERY = {
55
55
  };
56
56
  var JWKS = {
57
57
  rotationDays: 90,
58
- overlapDays: 7,
58
+ /** Normative minimum overlap period (DD-148, v0.11.3+) */
59
+ overlapDays: 30,
59
60
  emergencyRevocationHours: 24
60
61
  };
61
62
  var RECEIPT = {
@@ -235,6 +236,7 @@ var ERROR_CODES = {
235
236
  E_IDENTITY_NOT_YET_VALID: "E_IDENTITY_NOT_YET_VALID",
236
237
  E_IDENTITY_PROOF_UNSUPPORTED: "E_IDENTITY_PROOF_UNSUPPORTED",
237
238
  E_IDENTITY_SIG_INVALID: "E_IDENTITY_SIG_INVALID",
239
+ E_MVIS_INCOMPLETE: "E_MVIS_INCOMPLETE",
238
240
  // Infrastructure error codes
239
241
  E_CIRCUIT_BREAKER_OPEN: "E_CIRCUIT_BREAKER_OPEN",
240
242
  E_INTERNAL: "E_INTERNAL",
@@ -297,6 +299,8 @@ var ERROR_CODES = {
297
299
  // Verification error codes
298
300
  E_INVALID_SIGNATURE: "E_INVALID_SIGNATURE",
299
301
  E_KEY_NOT_FOUND: "E_KEY_NOT_FOUND",
302
+ E_KID_REUSE_DETECTED: "E_KID_REUSE_DETECTED",
303
+ E_REVOKED_KEY_USED: "E_REVOKED_KEY_USED",
300
304
  // Verifier error codes
301
305
  E_VERIFY_EXTENSION_TOO_LARGE: "E_VERIFY_EXTENSION_TOO_LARGE",
302
306
  E_VERIFY_INSECURE_SCHEME_BLOCKED: "E_VERIFY_INSECURE_SCHEME_BLOCKED",
@@ -859,6 +863,15 @@ var ERRORS = {
859
863
  next_action: "retry_with_different_input",
860
864
  category: "identity"
861
865
  },
866
+ E_MVIS_INCOMPLETE: {
867
+ code: "E_MVIS_INCOMPLETE",
868
+ http_status: 400,
869
+ title: "MVIS Incomplete",
870
+ description: "Identity receipt missing one or more Minimum Viable Identity Set required fields (issuer, subject, key_binding, time_bounds, replay_protection)",
871
+ retryable: false,
872
+ next_action: "retry_with_different_input",
873
+ category: "identity"
874
+ },
862
875
  // Infrastructure error codes
863
876
  E_CIRCUIT_BREAKER_OPEN: {
864
877
  code: "E_CIRCUIT_BREAKER_OPEN",
@@ -1377,6 +1390,24 @@ var ERRORS = {
1377
1390
  next_action: "retry_with_different_key",
1378
1391
  category: "verification"
1379
1392
  },
1393
+ E_KID_REUSE_DETECTED: {
1394
+ code: "E_KID_REUSE_DETECTED",
1395
+ http_status: 400,
1396
+ title: "Kid Reuse Detected",
1397
+ description: "Same kid value used with different key material within the retention window",
1398
+ retryable: false,
1399
+ next_action: "abort",
1400
+ category: "verification"
1401
+ },
1402
+ E_REVOKED_KEY_USED: {
1403
+ code: "E_REVOKED_KEY_USED",
1404
+ http_status: 400,
1405
+ title: "Revoked Key Used",
1406
+ description: "Receipt signed with a key listed in the issuer revoked_keys set",
1407
+ retryable: false,
1408
+ next_action: "retry_with_different_key",
1409
+ category: "verification"
1410
+ },
1380
1411
  // Verifier error codes
1381
1412
  E_VERIFY_EXTENSION_TOO_LARGE: {
1382
1413
  code: "E_VERIFY_EXTENSION_TOO_LARGE",