@peac/kernel 0.12.1 → 0.12.2

package/dist/index.d.ts

@@ -7,11 +7,12 @@
 export type { JsonPrimitive, JsonValue, JsonArray, JsonObject, NextAction, ErrorDefinition, ErrorCategory, PaymentRailEntry, ControlEngineEntry, TransportMethodEntry, AgentProtocolEntry, Wire02Kind, EvidencePillar, } from './types.js';
 export { ERROR_CATEGORIES } from './types.js';
 export { WIRE_TYPE, WIRE_VERSION, ALGORITHMS, HEADERS, POLICY, ISSUER_CONFIG, DISCOVERY, // @deprecated - use POLICY instead
-JWKS, RECEIPT, LIMITS, BUNDLE_VERSION, VERIFICATION_REPORT_VERSION, HASH, parseHash, formatHash, isValidHash, VERIFIER_LIMITS, VERIFIER_NETWORK, PRIVATE_IP_RANGES, VERIFIER_POLICY_VERSION, VERIFICATION_MODES, CONSTANTS, WIRE_01_JWS_TYP, WIRE_02_JWS_TYP, WIRE_02_JWS_TYP_ACCEPT, WIRE_02_VERSION, WIRE_VERSIONS, ISS_CANONICAL, TYPE_GRAMMAR, POLICY_BLOCK, OCCURRED_AT_TOLERANCE_SECONDS, PEAC_ALG, } from './constants.js';
+JWKS, RECEIPT, LIMITS, BUNDLE_VERSION, VERIFICATION_REPORT_VERSION, HASH, parseHash, formatHash, isValidHash, VERIFIER_LIMITS, VERIFIER_NETWORK, PRIVATE_IP_RANGES, VERIFIER_POLICY_VERSION, VERIFICATION_MODES, CONSTANTS, WIRE_01_JWS_TYP, WIRE_02_JWS_TYP, WIRE_02_JWS_TYP_ACCEPT, WIRE_02_VERSION, WIRE_VERSIONS, ISS_CANONICAL, TYPE_GRAMMAR, POLICY_BLOCK, OCCURRED_AT_TOLERANCE_SECONDS, PEAC_ALG, EXTENSION_BUDGET, } from './constants.js';
 export type { WireVersion, VerificationStrictness } from './constants.js';
 export type { PolicyBlock, RepresentationFields, VerificationWarning } from './wire-02-types.js';
 export { ERROR_CODES, ERRORS, BUNDLE_ERRORS, DISPUTE_ERRORS, getError, isRetryable, type ErrorCode, } from './errors.js';
-export { PAYMENT_RAILS, CONTROL_ENGINES, TRANSPORT_METHODS, AGENT_PROTOCOLS, REGISTRIES, findPaymentRail, findControlEngine, findTransportMethod, findAgentProtocol, } from './registries.js';
+export { PAYMENT_RAILS, CONTROL_ENGINES, TRANSPORT_METHODS, AGENT_PROTOCOLS, PROOF_TYPES, RECEIPT_TYPES, EXTENSION_GROUPS, PILLAR_VALUES, TYPE_TO_EXTENSION_MAP, REGISTRIES, findPaymentRail, findControlEngine, findTransportMethod, findAgentProtocol, findProofType, findReceiptType, findExtensionGroup, } from './registries.generated.js';
+export type { ProofTypeEntry, ReceiptTypeEntry, ExtensionGroupEntry, } from './registries.generated.js';
 export { VARY_HEADERS, applyPurposeVary, getPeacVaryHeaders, needsPurposeVary } from './http.js';
 export { PEAC_RECEIPT_HEADER, PEAC_RECEIPT_URL_HEADER } from './carrier.js';
 export type { ReceiptRef, CarrierFormat, PeacEvidenceCarrier, CarrierMeta, CarrierValidationResult, CarrierAdapter, } from './carrier.js';

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,YAAY,EAEV,aAAa,EACb,SAAS,EACT,SAAS,EACT,UAAU,EAEV,UAAU,EACV,eAAe,EACf,aAAa,EACb,gBAAgB,EAChB,kBAAkB,EAClB,oBAAoB,EACpB,kBAAkB,EAElB,UAAU,EACV,cAAc,GACf,MAAM,YAAY,CAAC;AAGpB,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAG9C,OAAO,EACL,SAAS,EACT,YAAY,EACZ,UAAU,EACV,OAAO,EACP,MAAM,EACN,aAAa,EACb,SAAS,EAAE,mCAAmC;AAC9C,IAAI,EACJ,OAAO,EACP,MAAM,EACN,cAAc,EACd,2BAA2B,EAC3B,IAAI,EACJ,SAAS,EACT,UAAU,EACV,WAAW,EAEX,eAAe,EACf,gBAAgB,EAChB,iBAAiB,EACjB,uBAAuB,EACvB,kBAAkB,EAClB,SAAS,EAET,eAAe,EACf,eAAe,EACf,sBAAsB,EACtB,eAAe,EACf,aAAa,EACb,aAAa,EACb,YAAY,EACZ,YAAY,EACZ,6BAA6B,EAC7B,QAAQ,GACT,MAAM,gBAAgB,CAAC;AAGxB,YAAY,EAAE,WAAW,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AAG1E,YAAY,EAAE,WAAW,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAGjG,OAAO,EACL,WAAW,EACX,MAAM,EACN,aAAa,EACb,cAAc,EACd,QAAQ,EACR,WAAW,EACX,KAAK,SAAS,GACf,MAAM,aAAa,CAAC;AAGrB,OAAO,EACL,aAAa,EACb,eAAe,EACf,iBAAiB,EACjB,eAAe,EACf,UAAU,EACV,eAAe,EACf,iBAAiB,EACjB,mBAAmB,EACnB,iBAAiB,GAClB,MAAM,iBAAiB,CAAC;AAGzB,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAGjG,OAAO,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAC;AAC5E,YAAY,EACV,UAAU,EACV,aAAa,EACb,mBAAmB,EACnB,WAAW,EACX,uBAAuB,EACvB,cAAc,GACf,MAAM,cAAc,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,YAAY,EAEV,aAAa,EACb,SAAS,EACT,SAAS,EACT,UAAU,EAEV,UAAU,EACV,eAAe,EACf,aAAa,EACb,gBAAgB,EAChB,kBAAkB,EAClB,oBAAoB,EACpB,kBAAkB,EAElB,UAAU,EACV,cAAc,GACf,MAAM,YAAY,CAAC;AAGpB,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAG9C,OAAO,EACL,SAAS,EACT,YAAY,EACZ,UAAU,EACV,OAAO,EACP,MAAM,EACN,aAAa,EACb,SAAS,EAAE,mCAAmC;AAC9C,IAAI,EACJ,OAAO,EACP,MAAM,EACN,cAAc,EACd,2BAA2B,EAC3B,IAAI,EACJ,SAAS,EACT,UAAU,EACV,WAAW,EAEX,eAAe,EACf,gBAAgB,EAChB,iBAAiB,EACjB,uBAAuB,EACvB,kBAAkB,EAClB,SAAS,EAET,eAAe,EACf,eAAe,EACf,sBAAsB,EACtB,eAAe,EACf,aAAa,EACb,aAAa,EACb,YAAY,EACZ,YAAY,EACZ,6BAA6B,EAC7B,QAAQ,EAER,gBAAgB,GACjB,MAAM,gBAAgB,CAAC;AAGxB,YAAY,EAAE,WAAW,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AAG1E,YAAY,EAAE,WAAW,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAGjG,OAAO,EACL,WAAW,EACX,MAAM,EACN,aAAa,EACb,cAAc,EACd,QAAQ,EACR,WAAW,EACX,KAAK,SAAS,GACf,MAAM,aAAa,CAAC;AAKrB,OAAO,EACL,aAAa,EACb,eAAe,EACf,iBAAiB,EACjB,eAAe,EACf,WAAW,EACX,aAAa,EACb,gBAAgB,EAChB,aAAa,EACb,qBAAqB,EACrB,UAAU,EACV,eAAe,EACf,iBAAiB,EACjB,mBAAmB,EACnB,iBAAiB,EACjB,aAAa,EACb,eAAe,EACf,kBAAkB,GACnB,MAAM,2BAA2B,CAAC;AACnC,YAAY,EACV,cAAc,EACd,gBAAgB,EAChB,mBAAmB,GACpB,MAAM,2BAA2B,CAAC;AAGnC,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAGjG,OAAO,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAC;AAC5E,YAAY,EACV,UAAU,EACV,aAAa,EACb,mBAAmB,EACnB,WAAW,EACX,uBAAuB,EACvB,cAAc,GACf,MAAM,cAAc,CAAC"}

package/dist/index.mjs

@@ -56,7 +56,7 @@ var DISCOVERY = {
 };
 var JWKS = {
   rotationDays: 90,
-  /** Normative minimum overlap period (DD-148, v0.11.3+) */
+  /** Normative minimum overlap period (v0.11.3+) */
   overlapDays: 30,
   emergencyRevocationHours: 24
 };
@@ -177,6 +177,14 @@ var POLICY_BLOCK = {
 };
 var OCCURRED_AT_TOLERANCE_SECONDS = 300;
 var PEAC_ALG = ALGORITHMS.default;
+var EXTENSION_BUDGET = {
+  /** Max UTF-8 bytes per extension group after JSON.stringify (64 KB) */
+  maxGroupBytes: 65536,
+  /** Max total UTF-8 bytes across all extensions after JSON.stringify (256 KB) */
+  maxTotalBytes: 262144,
+  /** Max UTF-8 bytes for any single string array field (32 KB) */
+  maxArrayPayloadBytes: 32768
+};
 var CONSTANTS = {
   WIRE_TYPE,
   WIRE_VERSION,
@@ -316,6 +324,8 @@ var ERROR_CODES = {
   E_EAT_UNSUPPORTED_ALG: "E_EAT_UNSUPPORTED_ALG",
   E_EVIDENCE_NOT_JSON: "E_EVIDENCE_NOT_JSON",
   E_EXPIRED: "E_EXPIRED",
+  E_EXTENSION_NON_JSON_VALUE: "E_EXTENSION_NON_JSON_VALUE",
+  E_EXTENSION_SIZE_EXCEEDED: "E_EXTENSION_SIZE_EXCEEDED",
   E_INVALID_AMOUNT: "E_INVALID_AMOUNT",
   E_INVALID_AUDIENCE: "E_INVALID_AUDIENCE",
   E_INVALID_CURRENCY: "E_INVALID_CURRENCY",
@@ -342,6 +352,8 @@ var ERROR_CODES = {
   E_WIRE_VERSION_MISMATCH: "E_WIRE_VERSION_MISMATCH",
   // Verification error codes
   E_EAT_SIGNATURE_FAILED: "E_EAT_SIGNATURE_FAILED",
+  E_EXTENSION_GROUP_MISMATCH: "E_EXTENSION_GROUP_MISMATCH",
+  E_EXTENSION_GROUP_REQUIRED: "E_EXTENSION_GROUP_REQUIRED",
   E_INVALID_SIGNATURE: "E_INVALID_SIGNATURE",
   E_KEY_NOT_FOUND: "E_KEY_NOT_FOUND",
   E_KID_REUSE_DETECTED: "E_KID_REUSE_DETECTED",
@@ -1372,6 +1384,24 @@ var ERRORS = {
     next_action: "retry_with_different_input",
     category: "validation"
   },
+  E_EXTENSION_NON_JSON_VALUE: {
+    code: "E_EXTENSION_NON_JSON_VALUE",
+    http_status: 400,
+    title: "Extension Non-JSON Value",
+    description: "Extension group value is not a plain JSON value; functions, Symbols, BigInt, Date, RegExp, Map, Set, objects with toJSON(), and other non-JSON types are rejected",
+    retryable: false,
+    next_action: "retry_with_different_input",
+    category: "validation"
+  },
+  E_EXTENSION_SIZE_EXCEEDED: {
+    code: "E_EXTENSION_SIZE_EXCEEDED",
+    http_status: 400,
+    title: "Extension Size Exceeded",
+    description: "Extension group or total extensions record exceeds the normative byte-budget limit (EXTENSION_BUDGET)",
+    retryable: false,
+    next_action: "retry_with_different_input",
+    category: "validation"
+  },
   E_INVALID_AMOUNT: {
     code: "E_INVALID_AMOUNT",
     http_status: 400,
@@ -1598,6 +1628,24 @@ var ERRORS = {
     next_action: "retry_with_different_key",
     category: "verification"
   },
+  E_EXTENSION_GROUP_MISMATCH: {
+    code: "E_EXTENSION_GROUP_MISMATCH",
+    http_status: 400,
+    title: "Extension Group Mismatch",
+    description: "Registered receipt type has a mapped extension group, but a different registered first-party extension group is present while the expected one is absent",
+    retryable: false,
+    next_action: "retry_with_different_input",
+    category: "verification"
+  },
+  E_EXTENSION_GROUP_REQUIRED: {
+    code: "E_EXTENSION_GROUP_REQUIRED",
+    http_status: 400,
+    title: "Extension Group Required",
+    description: "Registered receipt type has a mapped extension group, but that group is absent from the extensions record",
+    retryable: false,
+    next_action: "retry_with_different_input",
+    category: "verification"
+  },
   E_INVALID_SIGNATURE: {
     code: "E_INVALID_SIGNATURE",
     http_status: 400,
@@ -1956,13 +2004,13 @@ var DISPUTE_ERRORS = {
   TARGET_NOT_FOUND: "E_DISPUTE_TARGET_NOT_FOUND"
 };
 
-// src/registries.ts
+// src/registries.generated.ts
 var PAYMENT_RAILS = [
   {
-    id: "x402",
-    category: "agentic-payment",
-    description: "HTTP 402-based paid call receipts",
-    reference: "https://www.x402.org/",
+    id: "card-network",
+    category: "card",
+    description: "Generic card network authorizations/clearing",
+    reference: null,
     status: "informational"
   },
   {
@@ -1973,10 +2021,17 @@ var PAYMENT_RAILS = [
     status: "informational"
   },
   {
-    id: "card-network",
-    category: "card",
-    description: "Generic card network authorizations/clearing",
-    reference: null,
+    id: "razorpay",
+    category: "payment-gateway",
+    description: "Razorpay payment gateway (UPI, cards, netbanking, wallets)",
+    reference: "https://razorpay.com/docs/",
+    status: "informational"
+  },
+  {
+    id: "stripe",
+    category: "payment-gateway",
+    description: "Stripe payment processing",
+    reference: "https://stripe.com/docs",
     status: "informational"
   },
   {
@@ -1985,13 +2040,20 @@ var PAYMENT_RAILS = [
     description: "Unified Payments Interface",
     reference: "https://www.npci.org.in/",
     status: "informational"
+  },
+  {
+    id: "x402",
+    category: "agentic-payment",
+    description: "HTTP 402-based paid call receipts",
+    reference: "https://www.x402.org/",
+    status: "informational"
   }
 ];
 var CONTROL_ENGINES = [
   {
-    id: "spend-control-service",
-    category: "limits",
-    description: "Generic spend control decisions (per-tx, daily, monthly limits)",
+    id: "mandate-service",
+    category: "mandate",
+    description: "Generic enterprise mandate/approval chain evaluator",
     reference: null,
     status: "informational"
   },
@@ -2003,11 +2065,25 @@ var CONTROL_ENGINES = [
     status: "informational"
   },
   {
-    id: "mandate-service",
-    category: "mandate",
-    description: "Generic enterprise mandate/approval chain evaluator",
+    id: "rsl",
+    category: "access-policy",
+    description: "Robots Specification Layer usage token evaluation",
     reference: null,
     status: "informational"
+  },
+  {
+    id: "spend-control-service",
+    category: "limits",
+    description: "Generic spend control decisions (per-tx, daily, monthly limits)",
+    reference: null,
+    status: "informational"
+  },
+  {
+    id: "tap",
+    category: "agent-verification",
+    description: "Trusted Agent Protocol control decisions (HTTP signature verification)",
+    reference: "https://developer.visa.com/",
+    status: "informational"
   }
 ];
 var TRANSPORT_METHODS = [
@@ -2035,10 +2111,10 @@ var TRANSPORT_METHODS = [
 ];
 var AGENT_PROTOCOLS = [
   {
-    id: "mcp",
-    category: "tool-protocol",
-    description: "Model Context Protocol (MCP)",
-    reference: "https://modelcontextprotocol.io/",
+    id: "a2a",
+    category: "agent-protocol",
+    description: "Agent-to-Agent Protocol (A2A, Linux Foundation)",
+    reference: "https://a2a-protocol.org/",
     status: "informational"
   },
   {
@@ -2055,31 +2131,274 @@ var AGENT_PROTOCOLS = [
     reference: null,
     status: "informational"
   },
+  {
+    id: "mcp",
+    category: "tool-protocol",
+    description: "Model Context Protocol (MCP)",
+    reference: "https://modelcontextprotocol.io/",
+    status: "informational"
+  },
   {
     id: "tap",
     category: "card-protocol",
     description: "Trusted Agent Protocol (Visa TAP)",
     reference: "https://developer.visa.com/",
     status: "informational"
+  },
+  {
+    id: "ucp",
+    category: "commerce-protocol",
+    description: "Universal Commerce Protocol (UCP)",
+    reference: null,
+    status: "informational"
   }
 ];
+var PROOF_TYPES = [
+  {
+    id: "custom",
+    category: "vendor-defined",
+    description: "Vendor-defined proof type; registered per-issuer in extension metadata",
+    reference: null,
+    status: "informational"
+  },
+  {
+    id: "did",
+    category: "decentralized-identity",
+    description: "W3C Decentralized Identifier (DID) resolution and verification",
+    reference: "https://www.w3.org/TR/did-core/",
+    status: "informational"
+  },
+  {
+    id: "eat-background-check",
+    category: "rats",
+    description: "Verifier fetches attestation result from registry in RATS Background-Check model (RFC 9711)",
+    reference: "https://www.rfc-editor.org/rfc/rfc9711",
+    status: "informational"
+  },
+  {
+    id: "eat-passport",
+    category: "rats",
+    description: "Agent carries Entity Attestation Token in RATS Passport model (RFC 9711)",
+    reference: "https://www.rfc-editor.org/rfc/rfc9711",
+    status: "informational"
+  },
+  {
+    id: "ed25519-cert-chain",
+    category: "attestation-chain",
+    description: "Ed25519 issuer-to-holder attestation chain (RFC 8032)",
+    reference: "https://www.rfc-editor.org/rfc/rfc8032",
+    status: "informational"
+  },
+  {
+    id: "sigstore-oidc",
+    category: "keyless-signing",
+    description: "OIDC-bound keyless signing via Sigstore (Fulcio + Rekor transparency log)",
+    reference: "https://docs.sigstore.dev/",
+    status: "informational"
+  },
+  {
+    id: "spiffe",
+    category: "workload-identity",
+    description: "CNCF SPIFFE workload identity (spiffe:// URI scheme)",
+    reference: "https://spiffe.io/docs/latest/spiffe-about/overview/",
+    status: "informational"
+  },
+  {
+    id: "x509-pki",
+    category: "pki",
+    description: "Traditional X.509 PKI certificate chain verification (RFC 5280)",
+    reference: "https://www.rfc-editor.org/rfc/rfc5280",
+    status: "informational"
+  }
+];
+var RECEIPT_TYPES = [
+  {
+    id: "org.peacprotocol/access-decision",
+    pillar: "access",
+    description: "Access control decision evidence (allow, deny, review)",
+    extension_group: "org.peacprotocol/access",
+    status: "informational"
+  },
+  {
+    id: "org.peacprotocol/attribution-event",
+    pillar: "attribution",
+    description: "Content or action attribution evidence",
+    extension_group: "org.peacprotocol/attribution",
+    status: "informational"
+  },
+  {
+    id: "org.peacprotocol/compliance-check",
+    pillar: "compliance",
+    description: "Regulatory compliance check evidence",
+    extension_group: "org.peacprotocol/compliance",
+    status: "informational"
+  },
+  {
+    id: "org.peacprotocol/consent-record",
+    pillar: "consent",
+    description: "Consent collection or withdrawal evidence",
+    extension_group: "org.peacprotocol/consent",
+    status: "informational"
+  },
+  {
+    id: "org.peacprotocol/identity-attestation",
+    pillar: "identity",
+    description: "Identity verification or attestation evidence",
+    extension_group: "org.peacprotocol/identity",
+    status: "informational"
+  },
+  {
+    id: "org.peacprotocol/payment",
+    pillar: "commerce",
+    description: "Commerce transaction evidence (payment, authorization, settlement)",
+    extension_group: "org.peacprotocol/commerce",
+    status: "informational"
+  },
+  {
+    id: "org.peacprotocol/privacy-signal",
+    pillar: "privacy",
+    description: "Privacy signal observation or enforcement evidence",
+    extension_group: "org.peacprotocol/privacy",
+    status: "informational"
+  },
+  {
+    id: "org.peacprotocol/provenance-record",
+    pillar: "provenance",
+    description: "Data or content provenance tracking evidence",
+    extension_group: "org.peacprotocol/provenance",
+    status: "informational"
+  },
+  {
+    id: "org.peacprotocol/purpose-declaration",
+    pillar: "purpose",
+    description: "Purpose declaration or limitation evidence",
+    extension_group: "org.peacprotocol/purpose",
+    status: "informational"
+  },
+  {
+    id: "org.peacprotocol/safety-review",
+    pillar: "safety",
+    description: "Content or agent safety review evidence",
+    extension_group: "org.peacprotocol/safety",
+    status: "informational"
+  }
+];
+var EXTENSION_GROUPS = [
+  {
+    id: "org.peacprotocol/access",
+    description: "Access extension: resource, action, decision (allow/deny/review)",
+    status: "informational"
+  },
+  {
+    id: "org.peacprotocol/attribution",
+    description: "Attribution extension: creator_ref, license_spdx, obligation_type, attribution_text, content_signal_source, content_digest",
+    status: "informational"
+  },
+  {
+    id: "org.peacprotocol/challenge",
+    description: "Challenge extension: challenge_type, problem (RFC 9457), requirements",
+    status: "informational"
+  },
+  {
+    id: "org.peacprotocol/commerce",
+    description: "Commerce extension: payment_rail, amount_minor, currency, reference, asset, env",
+    status: "informational"
+  },
+  {
+    id: "org.peacprotocol/compliance",
+    description: "Compliance extension: framework, compliance_status, audit_ref, auditor, audit_date, scope, validity_period, evidence_ref",
+    status: "informational"
+  },
+  {
+    id: "org.peacprotocol/consent",
+    description: "Consent extension: consent_basis, consent_status, data_categories, retention_period, consent_method, withdrawal_uri, scope, jurisdiction",
+    status: "informational"
+  },
+  {
+    id: "org.peacprotocol/correlation",
+    description: "Correlation extension: trace_id, span_id, workflow_id, parent_jti, depends_on",
+    status: "informational"
+  },
+  {
+    id: "org.peacprotocol/identity",
+    description: "Identity extension: proof_ref",
+    status: "informational"
+  },
+  {
+    id: "org.peacprotocol/privacy",
+    description: "Privacy extension: data_classification, processing_basis, retention_period, retention_mode, recipient_scope, anonymization_method, data_subject_category, transfer_mechanism",
+    status: "informational"
+  },
+  {
+    id: "org.peacprotocol/provenance",
+    description: "Provenance extension: source_type, source_ref, source_uri, build_provenance_uri, verification_method, custody_chain, slsa",
+    status: "informational"
+  },
+  {
+    id: "org.peacprotocol/purpose",
+    description: "Purpose extension: external_purposes, purpose_basis, purpose_limitation, data_minimization, compatible_purposes, peac_purpose_mapping",
+    status: "informational"
+  },
+  {
+    id: "org.peacprotocol/safety",
+    description: "Safety extension: review_status, risk_level, assessment_method, safety_measures, incident_ref, model_ref, category",
+    status: "informational"
+  }
+];
+var TYPE_TO_EXTENSION_MAP = /* @__PURE__ */ new Map([
+  ["org.peacprotocol/access-decision", "org.peacprotocol/access"],
+  ["org.peacprotocol/attribution-event", "org.peacprotocol/attribution"],
+  ["org.peacprotocol/compliance-check", "org.peacprotocol/compliance"],
+  ["org.peacprotocol/consent-record", "org.peacprotocol/consent"],
+  ["org.peacprotocol/identity-attestation", "org.peacprotocol/identity"],
+  ["org.peacprotocol/payment", "org.peacprotocol/commerce"],
+  ["org.peacprotocol/privacy-signal", "org.peacprotocol/privacy"],
+  ["org.peacprotocol/provenance-record", "org.peacprotocol/provenance"],
+  ["org.peacprotocol/purpose-declaration", "org.peacprotocol/purpose"],
+  ["org.peacprotocol/safety-review", "org.peacprotocol/safety"]
+]);
+var PILLAR_VALUES = [
+  "access",
+  "attribution",
+  "commerce",
+  "compliance",
+  "consent",
+  "identity",
+  "privacy",
+  "provenance",
+  "purpose",
+  "safety"
+];
 var REGISTRIES = {
   payment_rails: PAYMENT_RAILS,
   control_engines: CONTROL_ENGINES,
   transport_methods: TRANSPORT_METHODS,
-  agent_protocols: AGENT_PROTOCOLS
+  agent_protocols: AGENT_PROTOCOLS,
+  proof_types: PROOF_TYPES,
+  receipt_types: RECEIPT_TYPES,
+  extension_groups: EXTENSION_GROUPS,
+  pillar_values: PILLAR_VALUES
 };
 function findPaymentRail(id) {
-  return PAYMENT_RAILS.find((rail) => rail.id === id);
+  return PAYMENT_RAILS.find((entry) => entry.id === id);
 }
 function findControlEngine(id) {
-  return CONTROL_ENGINES.find((engine) => engine.id === id);
+  return CONTROL_ENGINES.find((entry) => entry.id === id);
 }
 function findTransportMethod(id) {
-  return TRANSPORT_METHODS.find((method) => method.id === id);
+  return TRANSPORT_METHODS.find((entry) => entry.id === id);
 }
 function findAgentProtocol(id) {
-  return AGENT_PROTOCOLS.find((protocol) => protocol.id === id);
+  return AGENT_PROTOCOLS.find((entry) => entry.id === id);
+}
+function findProofType(id) {
+  return PROOF_TYPES.find((entry) => entry.id === id);
+}
+function findReceiptType(id) {
+  return RECEIPT_TYPES.find((entry) => entry.id === id);
+}
+function findExtensionGroup(id) {
+  return EXTENSION_GROUPS.find((entry) => entry.id === id);
 }
 
 // src/http.ts
@@ -2112,6 +2431,6 @@ function needsPurposeVary(purposeEnforced) {
 var PEAC_RECEIPT_HEADER = "PEAC-Receipt";
 var PEAC_RECEIPT_URL_HEADER = "PEAC-Receipt-URL";
 
-export { AGENT_PROTOCOLS, ALGORITHMS, BUNDLE_ERRORS, BUNDLE_VERSION, CONSTANTS, CONTROL_ENGINES, DISCOVERY, DISPUTE_ERRORS, ERRORS, ERROR_CATEGORIES, ERROR_CODES, HASH, HEADERS, ISSUER_CONFIG, ISS_CANONICAL, JWKS, LIMITS, OCCURRED_AT_TOLERANCE_SECONDS, PAYMENT_RAILS, PEAC_ALG, PEAC_RECEIPT_HEADER, PEAC_RECEIPT_URL_HEADER, POLICY, POLICY_BLOCK, PRIVATE_IP_RANGES, RECEIPT, REGISTRIES, TRANSPORT_METHODS, TYPE_GRAMMAR, VARY_HEADERS, VERIFICATION_MODES, VERIFICATION_REPORT_VERSION, VERIFIER_LIMITS, VERIFIER_NETWORK, VERIFIER_POLICY_VERSION, WIRE_01_JWS_TYP, WIRE_02_JWS_TYP, WIRE_02_JWS_TYP_ACCEPT, WIRE_02_VERSION, WIRE_TYPE, WIRE_VERSION, WIRE_VERSIONS, applyPurposeVary, findAgentProtocol, findControlEngine, findPaymentRail, findTransportMethod, formatHash, getError, getPeacVaryHeaders, isRetryable, isValidHash, needsPurposeVary, parseHash };
+export { AGENT_PROTOCOLS, ALGORITHMS, BUNDLE_ERRORS, BUNDLE_VERSION, CONSTANTS, CONTROL_ENGINES, DISCOVERY, DISPUTE_ERRORS, ERRORS, ERROR_CATEGORIES, ERROR_CODES, EXTENSION_BUDGET, EXTENSION_GROUPS, HASH, HEADERS, ISSUER_CONFIG, ISS_CANONICAL, JWKS, LIMITS, OCCURRED_AT_TOLERANCE_SECONDS, PAYMENT_RAILS, PEAC_ALG, PEAC_RECEIPT_HEADER, PEAC_RECEIPT_URL_HEADER, PILLAR_VALUES, POLICY, POLICY_BLOCK, PRIVATE_IP_RANGES, PROOF_TYPES, RECEIPT, RECEIPT_TYPES, REGISTRIES, TRANSPORT_METHODS, TYPE_GRAMMAR, TYPE_TO_EXTENSION_MAP, VARY_HEADERS, VERIFICATION_MODES, VERIFICATION_REPORT_VERSION, VERIFIER_LIMITS, VERIFIER_NETWORK, VERIFIER_POLICY_VERSION, WIRE_01_JWS_TYP, WIRE_02_JWS_TYP, WIRE_02_JWS_TYP_ACCEPT, WIRE_02_VERSION, WIRE_TYPE, WIRE_VERSION, WIRE_VERSIONS, applyPurposeVary, findAgentProtocol, findControlEngine, findExtensionGroup, findPaymentRail, findProofType, findReceiptType, findTransportMethod, formatHash, getError, getPeacVaryHeaders, isRetryable, isValidHash, needsPurposeVary, parseHash };
 //# sourceMappingURL=index.mjs.map
 //# sourceMappingURL=index.mjs.map