@peac/protocol 0.13.2 → 0.13.4

package/dist/issue.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"issue.d.ts","sourceRoot":"","sources":["../src/issue.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAYH,OAAO,KAAK,EAAE,SAAS,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAE3E,OAAO,EACL,iBAAiB,EAEjB,sBAAsB,EAOtB,KAAK,SAAS,EACd,KAAK,YAAY,EACjB,KAAK,gBAAgB,EACrB,KAAK,aAAa,EAKlB,KAAK,eAAe,EAQrB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAkC,KAAK,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAEpF;;;;;GAKG;AACH,MAAM,WAAW,kBAAkB;IACjC,4BAA4B;IAC5B,GAAG,EAAE,MAAM,CAAC;IAEZ,yCAAyC;IACzC,GAAG,EAAE,MAAM,CAAC;IAEZ,uCAAuC;IACvC,GAAG,EAAE,MAAM,CAAC;IAEZ,yCAAyC;IACzC,GAAG,EAAE,MAAM,CAAC;IAEZ,8BAA8B;IAC9B,IAAI,EAAE,MAAM,CAAC;IAEb,sCAAsC;IACtC,SAAS,EAAE,MAAM,CAAC;IAElB,4FAA4F;IAC5F,KAAK,CAAC,EAAE,MAAM,CAAC;IAEf,0DAA0D;IAC1D,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAEtB,4DAA4D;IAC5D,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,uCAAuC;IACvC,eAAe,CAAC,EAAE,MAAM,CAAC;IAEzB,oFAAoF;IACpF,QAAQ,CAAC,EAAE,SAAS,CAAC;IAErB,iCAAiC;IACjC,eAAe,CAAC,EAAE,MAAM,CAAC;IAEzB,wCAAwC;IACxC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAEnC,6BAA6B;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,4BAA4B;IAC5B,GAAG,CAAC,EAAE,iBAAiB,CAAC,KAAK,CAAC,CAAC;IAE/B,gDAAgD;IAChD,GAAG,CAAC,EAAE,MAAM,CAAC;IAEb,iEAAiE;IACjE,gBAAgB,CAAC,EAAE,sBAAsB,CAAC;IAE1C;;;;;OAKG;IACH,OAAO,CAAC,EAAE,YAAY,GAAG,YAAY,EAAE,CAAC;IAExC;;;;;OAKG;IACH,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IAEpC;;;;OAIG;IACH,cAAc,CAAC,EAAE,aAAa,CAAC;IAE/B;;;;;OAKG;IACH,gBAAgB,CAAC,EAAE,eAAe,CAAC;IAEnC,qCAAqC;IACrC,UAAU,EAAE,UAAU,CAAC;IAEvB,kCAAkC;IAClC,GAAG,EAAE,MAAM,CAAC;IAEZ,iDAAiD;IACjD,SAAS,CAAC,EAAE,aAAa,CAAC;CAC3B;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,gCAAgC;IAChC,GAAG,EAAE,MAAM,CAAC;IAEZ,+CAA+C;IAC/C,gBAAgB,CAAC,EAAE,sBAAsB,CAAC;CAC3C;AAED;;;;GAIG;AACH,qBAAa,UAAW,SAAQ,KAAK;IACnC,+BAA+B;IAC/B,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;gBAElB,SAAS,EAAE,SAAS;CAMjC;AAED;;;;;;;;;GASG;AACH,wBAAsB,WAAW,CAAC,OAAO,EAAE,kBAAkB,GAAG,OAAO,CAAC,WAAW,CAAC,CAmLnF;AAED;;;;;;;GAOG;AACH,wBAAsB,QAAQ,CAAC,OAAO,EAAE,kBAAkB,GAAG,OAAO,CAAC,MAAM,CAAC,CAG3E;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,KAAK,CAAC,OAAO,EAAE,kBAAkB,GAAG,OAAO,CAAC,WAAW,CAAC,CAE7E;AAMD;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC;;;;OAIG;IACH,GAAG,EAAE,MAAM,CAAC;IAEZ,iDAAiD;IACjD,IAAI,EAAE,UAAU,GAAG,WAAW,CAAC;IAE/B;;;OAGG;IACH,IAAI,EAAE,MAAM,CAAC;IAEb,qCAAqC;IACrC,UAAU,EAAE,UAAU,CAAC;IAEvB,sDAAsD;IACtD,GAAG,EAAE,MAAM,CAAC;IAEZ;;;OAGG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC;IAEb,oDAAoD;IACpD,GAAG,CAAC,EAAE,MAAM,CAAC;IAEb;;;OAGG;IACH,OAAO,CAAC,EAAE,cAAc,EAAE,CAAC;IAE3B;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB,wDAAwD;IACxD,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAE1B;;;OAGG;IACH,MAAM,CAAC,EAAE,WAAW,CAAC;IAErB,mEAAmE;IACnE,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACtC;AAED;;;;GAIG;AACH,MAAM,MAAM,YAAY,GAAG,kBAAkB,CAAC;AAE9C;;;;;;;;;;;;;GAaG;AACH,wBAAsB,WAAW,CAAC,OAAO,EAAE,kBAAkB,GAAG,OAAO,CAAC,WAAW,CAAC,CAmFnF"}
+{"version":3,"file":"issue.d.ts","sourceRoot":"","sources":["../src/issue.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAaH,OAAO,KAAK,EAAE,SAAS,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAE3E,OAAO,EACL,iBAAiB,EAEjB,sBAAsB,EAOtB,KAAK,SAAS,EACd,KAAK,YAAY,EACjB,KAAK,gBAAgB,EACrB,KAAK,aAAa,EAKlB,KAAK,eAAe,EAQrB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAkC,KAAK,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAEpF;;;;;GAKG;AACH,MAAM,WAAW,kBAAkB;IACjC,4BAA4B;IAC5B,GAAG,EAAE,MAAM,CAAC;IAEZ,yCAAyC;IACzC,GAAG,EAAE,MAAM,CAAC;IAEZ,uCAAuC;IACvC,GAAG,EAAE,MAAM,CAAC;IAEZ,yCAAyC;IACzC,GAAG,EAAE,MAAM,CAAC;IAEZ,8BAA8B;IAC9B,IAAI,EAAE,MAAM,CAAC;IAEb,sCAAsC;IACtC,SAAS,EAAE,MAAM,CAAC;IAElB,4FAA4F;IAC5F,KAAK,CAAC,EAAE,MAAM,CAAC;IAEf,0DAA0D;IAC1D,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAEtB,4DAA4D;IAC5D,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,uCAAuC;IACvC,eAAe,CAAC,EAAE,MAAM,CAAC;IAEzB,oFAAoF;IACpF,QAAQ,CAAC,EAAE,SAAS,CAAC;IAErB,iCAAiC;IACjC,eAAe,CAAC,EAAE,MAAM,CAAC;IAEzB,wCAAwC;IACxC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAEnC,6BAA6B;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,4BAA4B;IAC5B,GAAG,CAAC,EAAE,iBAAiB,CAAC,KAAK,CAAC,CAAC;IAE/B,gDAAgD;IAChD,GAAG,CAAC,EAAE,MAAM,CAAC;IAEb,iEAAiE;IACjE,gBAAgB,CAAC,EAAE,sBAAsB,CAAC;IAE1C;;;;;OAKG;IACH,OAAO,CAAC,EAAE,YAAY,GAAG,YAAY,EAAE,CAAC;IAExC;;;;;OAKG;IACH,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IAEpC;;;;OAIG;IACH,cAAc,CAAC,EAAE,aAAa,CAAC;IAE/B;;;;;OAKG;IACH,gBAAgB,CAAC,EAAE,eAAe,CAAC;IAEnC,qCAAqC;IACrC,UAAU,EAAE,UAAU,CAAC;IAEvB,kCAAkC;IAClC,GAAG,EAAE,MAAM,CAAC;IAEZ,iDAAiD;IACjD,SAAS,CAAC,EAAE,aAAa,CAAC;CAC3B;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,gCAAgC;IAChC,GAAG,EAAE,MAAM,CAAC;IAEZ,+CAA+C;IAC/C,gBAAgB,CAAC,EAAE,sBAAsB,CAAC;CAC3C;AAED;;;;GAIG;AACH,qBAAa,UAAW,SAAQ,KAAK;IACnC,+BAA+B;IAC/B,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;gBAElB,SAAS,EAAE,SAAS;CAMjC;AAED;;;;;;;;;GASG;AACH,wBAAsB,WAAW,CAAC,OAAO,EAAE,kBAAkB,GAAG,OAAO,CAAC,WAAW,CAAC,CAmLnF;AAED;;;;;;;GAOG;AACH,wBAAsB,QAAQ,CAAC,OAAO,EAAE,kBAAkB,GAAG,OAAO,CAAC,MAAM,CAAC,CAG3E;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,KAAK,CAAC,OAAO,EAAE,kBAAkB,GAAG,OAAO,CAAC,WAAW,CAAC,CAE7E;AAMD;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC;;;;OAIG;IACH,GAAG,EAAE,MAAM,CAAC;IAEZ,iDAAiD;IACjD,IAAI,EAAE,UAAU,GAAG,WAAW,CAAC;IAE/B;;;OAGG;IACH,IAAI,EAAE,MAAM,CAAC;IAEb,qCAAqC;IACrC,UAAU,EAAE,UAAU,CAAC;IAEvB,sDAAsD;IACtD,GAAG,EAAE,MAAM,CAAC;IAEZ;;;OAGG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC;IAEb,oDAAoD;IACpD,GAAG,CAAC,EAAE,MAAM,CAAC;IAEb;;;OAGG;IACH,OAAO,CAAC,EAAE,cAAc,EAAE,CAAC;IAE3B;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB,wDAAwD;IACxD,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAE1B;;;OAGG;IACH,MAAM,CAAC,EAAE,WAAW,CAAC;IAErB,mEAAmE;IACnE,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACtC;AAED;;;;GAIG;AACH,MAAM,MAAM,YAAY,GAAG,kBAAkB,CAAC;AAE9C;;;;;;;;;;;;;GAaG;AACH,wBAAsB,WAAW,CAAC,OAAO,EAAE,kBAAkB,GAAG,OAAO,CAAC,WAAW,CAAC,CAwFnF"}

package/dist/verify-local.cjs

@@ -340,6 +340,98 @@ function validateExtensionBudgetInternal(extensions) {
   if (violations.length === 0) return ACCEPTED4;
   return { accepted: false, violations };
 }
+function validateSchemaParseInternal(payload) {
+  const pr = schema.parseReceiptClaims(payload);
+  if (!pr.ok) {
+    return { accepted: false, errorCode: pr.error.code };
+  }
+  if (pr.wireVersion !== "0.2") {
+    return { accepted: false, errorCode: "E_UNSUPPORTED_WIRE_VERSION" };
+  }
+  return { accepted: true, claims: pr.claims };
+}
+
+// src/_internal/record-core/validators/jose-typ-strictness.ts
+var ACCEPTED_NO_WARN = { accepted: true };
+var ACCEPTED_TYP_MISSING = {
+  accepted: true,
+  warnings: [{ code: "typ_missing" }]
+};
+var REJECTED_INVALID_FORMAT = {
+  accepted: false,
+  errorCode: "E_INVALID_FORMAT"
+};
+function validateJoseTypStrictnessInternal(typ, strictness) {
+  const present = typeof typ === "string" && typ.length > 0;
+  if (present) return ACCEPTED_NO_WARN;
+  if (strictness === "strict") return REJECTED_INVALID_FORMAT;
+  return ACCEPTED_TYP_MISSING;
+}
+
+// src/_internal/record-core/validators/iat-not-yet-valid.ts
+var ACCEPTED5 = { accepted: true };
+var REJECTED2 = {
+  accepted: false,
+  errorCode: "E_NOT_YET_VALID"
+};
+function validateIatNotYetValidInternal(iat, now, maxClockSkew) {
+  if (iat > now + maxClockSkew) return REJECTED2;
+  return ACCEPTED5;
+}
+function validatePolicyBindingInternal(receiptPolicyDigest, localPolicyDigest) {
+  if (receiptPolicyDigest === void 0 || localPolicyDigest === void 0) {
+    return { accepted: true, status: "unavailable" };
+  }
+  const status = schema.verifyPolicyBinding(receiptPolicyDigest, localPolicyDigest);
+  if (status === "failed") {
+    return { accepted: false, errorCode: "E_POLICY_BINDING_FAILED", status };
+  }
+  return { accepted: true, status };
+}
+var ACCEPTED_EMPTY = {
+  accepted: true,
+  warnings: []
+};
+function escapeJsonPointer(token) {
+  return token.replace(/~/g, "~0").replace(/\//g, "~1");
+}
+function validateUnknownExtensionGrammarInternal(extensions) {
+  if (extensions === void 0) return ACCEPTED_EMPTY;
+  const keys = Object.keys(extensions);
+  if (keys.length === 0) return ACCEPTED_EMPTY;
+  const warnings = [];
+  for (const key of keys) {
+    if (!schema.REGISTERED_EXTENSION_GROUP_KEYS.has(key) && schema.isValidExtensionKey(key)) {
+      warnings.push({
+        code: "unknown_extension_preserved",
+        pointer: `/extensions/${escapeJsonPointer(key)}`
+      });
+    }
+  }
+  return { accepted: true, warnings };
+}
+var ACCEPTED_NO_WARN2 = { accepted: true };
+function validateTypeExtensionEnforcementInternal(kind, type, extensions, strictness) {
+  const result = checkTypeExtensionMapping(
+    kind,
+    type,
+    extensions,
+    kernel.TYPE_TO_EXTENSION_MAP,
+    schema.REGISTERED_EXTENSION_GROUP_KEYS
+  );
+  if (result.status === "ok" || result.status === "skip") {
+    return ACCEPTED_NO_WARN2;
+  }
+  if (strictness === "strict") {
+    const errorCode = result.status === "missing" ? "E_EXTENSION_GROUP_REQUIRED" : "E_EXTENSION_GROUP_MISMATCH";
+    return { accepted: false, errorCode, pointer: "/type" };
+  }
+  const warningCode = result.status === "missing" ? "extension_group_missing" : "extension_group_mismatch";
+  return {
+    accepted: true,
+    warnings: [{ code: warningCode, pointer: "/type" }]
+  };
+}
 
 // src/_internal/record-core/bounded-validator.ts
 function runBoundedValidatorShadow(input) {
@@ -399,6 +491,68 @@ function runBoundedValidatorShadow(input) {
       violations.push({ layer: "extension-budget", code: v.code, path: v.path });
     }
   }
+  if (input.fullClaims !== void 0) {
+    const schemaRes = validateSchemaParseInternal(input.fullClaims);
+    if (!schemaRes.accepted && schemaRes.errorCode !== void 0) {
+      violations.push({ layer: "schema-parse", code: schemaRes.errorCode });
+    }
+  }
+  if (input.header !== void 0 && input.strictness !== void 0) {
+    const typRes = validateJoseTypStrictnessInternal(input.header.typ, input.strictness);
+    if (!typRes.accepted) {
+      violations.push({ layer: "jose-typ-strictness", code: typRes.errorCode });
+    } else if (typRes.warnings) {
+      for (const w of typRes.warnings) {
+        warnings.push({ layer: "jose-typ-strictness", code: w.code });
+      }
+    }
+  }
+  if (input.maxClockSkew !== void 0) {
+    const iatRes = validateIatNotYetValidInternal(input.claims.iat, input.now, input.maxClockSkew);
+    if (!iatRes.accepted && iatRes.errorCode !== void 0) {
+      violations.push({ layer: "iat-not-yet-valid", code: iatRes.errorCode });
+    }
+  }
+  if (input.receiptPolicyDigest !== void 0 && input.localPolicyDigest !== void 0) {
+    const policyRes = validatePolicyBindingInternal(
+      input.receiptPolicyDigest,
+      input.localPolicyDigest
+    );
+    if (!policyRes.accepted && policyRes.errorCode !== void 0) {
+      violations.push({ layer: "policy-binding", code: policyRes.errorCode });
+    }
+  }
+  const unknownExtRes = validateUnknownExtensionGrammarInternal(input.claims.extensions);
+  for (const w of unknownExtRes.warnings) {
+    warnings.push({
+      layer: "unknown-extension-grammar",
+      code: w.code,
+      path: w.pointer
+    });
+  }
+  if (input.strictness !== void 0) {
+    const enforceRes = validateTypeExtensionEnforcementInternal(
+      input.claims.kind,
+      input.claims.type,
+      input.claims.extensions,
+      input.strictness
+    );
+    if (!enforceRes.accepted) {
+      violations.push({
+        layer: "type-extension-enforcement",
+        code: enforceRes.errorCode,
+        path: enforceRes.pointer
+      });
+    } else if (enforceRes.warnings) {
+      for (const w of enforceRes.warnings) {
+        warnings.push({
+          layer: "type-extension-enforcement",
+          code: w.code,
+          path: w.pointer
+        });
+      }
+    }
+  }
   return {
     accepted: violations.length === 0,
     violations,
@@ -624,6 +778,14 @@ function pruneStale() {
   while (SHADOW_LOG.length > 0 && SHADOW_LOG[0].timestamp < cutoffIso) SHADOW_LOG.shift();
 }
 
+// src/_internal/legacy-path.ts
+function readLegacyPathFlag(options) {
+  if (options?._internal?.legacyPath === true) return true;
+  if (typeof process === "undefined" || process === null) return false;
+  const env = process.env;
+  return env?.PEAC_INTERNAL_LEGACY_PATH === "1";
+}
+
 // src/_internal/shadow-observe.ts
 function realObservationForVerifyLocalSuccess(warnings) {
   if (!warnings || warnings.length === 0) return EMPTY_ACCEPTED;
@@ -676,6 +838,7 @@ function sanitizeParseIssues(issues) {
   }));
 }
 async function verifyLocal(jws, publicKey, options = {}) {
+  void readLegacyPathFlag(options);
   const {
     issuer,
     subjectUri,