@peac/schema 0.10.9 → 0.10.10

package/dist/receipt-parser.js

@@ -1,89 +0,0 @@
-"use strict";
-/**
- * Unified Receipt Parser
- *
- * Single entry point for classifying and validating receipt claims.
- * Supports both commerce (payment) and attestation receipt profiles.
- *
- * Classification uses key presence ('amt' in obj), NOT truthy values.
- * If any of amt|cur|payment are present, the receipt is classified as commerce.
- * If commerce validation fails, it returns a commerce error -- never falls
- * through to attestation.
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.parseReceiptClaims = parseReceiptClaims;
-const validators_js_1 = require("./validators.js");
-const attestation_receipt_js_1 = require("./attestation-receipt.js");
-/**
- * Classify a claims object as commerce or attestation.
- *
- * Uses key presence (not truthiness). If ANY of amt, cur, payment
- * are present as keys, the receipt is classified as commerce.
- */
-function classifyReceipt(obj) {
-    if ('amt' in obj || 'cur' in obj || 'payment' in obj) {
-        return 'commerce';
-    }
-    return 'attestation';
-}
-/**
- * Parse and validate receipt claims.
- *
- * Unified entry point for both commerce and attestation receipt validation.
- * Classification is strict: if any commerce key (amt, cur, payment) is present,
- * the receipt MUST validate as commerce. There is no fallback to attestation.
- *
- * @param input - Raw claims object (typically decoded from JWS payload)
- * @param _opts - Reserved for future use
- * @returns Parse result with variant discrimination and validated claims, or error
- */
-function parseReceiptClaims(input, _opts) {
-    // Guard: input must be a non-null object
-    if (input === null || input === undefined || typeof input !== 'object' || Array.isArray(input)) {
-        return {
-            ok: false,
-            error: {
-                code: 'E_PARSE_INVALID_INPUT',
-                message: 'Input must be a non-null object',
-            },
-        };
-    }
-    const obj = input;
-    const variant = classifyReceipt(obj);
-    if (variant === 'commerce') {
-        const result = validators_js_1.ReceiptClaimsSchema.safeParse(obj);
-        if (!result.success) {
-            return {
-                ok: false,
-                error: {
-                    code: 'E_PARSE_COMMERCE_INVALID',
-                    message: `Commerce receipt validation failed: ${result.error.issues.map((i) => i.message).join('; ')}`,
-                    issues: result.error.issues,
-                },
-            };
-        }
-        return {
-            ok: true,
-            variant: 'commerce',
-            claims: result.data,
-        };
-    }
-    // Attestation path
-    const result = attestation_receipt_js_1.AttestationReceiptClaimsSchema.safeParse(obj);
-    if (!result.success) {
-        return {
-            ok: false,
-            error: {
-                code: 'E_PARSE_ATTESTATION_INVALID',
-                message: `Attestation receipt validation failed: ${result.error.issues.map((i) => i.message).join('; ')}`,
-                issues: result.error.issues,
-            },
-        };
-    }
-    return {
-        ok: true,
-        variant: 'attestation',
-        claims: result.data,
-    };
-}
-//# sourceMappingURL=receipt-parser.js.map

package/dist/receipt-parser.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"receipt-parser.js","sourceRoot":"","sources":["../src/receipt-parser.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;GAUG;;AAgFH,gDAsDC;AAnID,mDAA8E;AAC9E,qEAGkC;AAiDlC;;;;;GAKG;AACH,SAAS,eAAe,CAAC,GAA4B;IACnD,IAAI,KAAK,IAAI,GAAG,IAAI,KAAK,IAAI,GAAG,IAAI,SAAS,IAAI,GAAG,EAAE,CAAC;QACrD,OAAO,UAAU,CAAC;IACpB,CAAC;IACD,OAAO,aAAa,CAAC;AACvB,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAgB,kBAAkB,CAChC,KAAc,EACd,KAA2B;IAE3B,yCAAyC;IACzC,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/F,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE;gBACL,IAAI,EAAE,uBAAuB;gBAC7B,OAAO,EAAE,iCAAiC;aAC3C;SACF,CAAC;IACJ,CAAC;IAED,MAAM,GAAG,GAAG,KAAgC,CAAC;IAC7C,MAAM,OAAO,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IAErC,IAAI,OAAO,KAAK,UAAU,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,mCAAmB,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QAClD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE;oBACL,IAAI,EAAE,0BAA0B;oBAChC,OAAO,EAAE,uCAAuC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;oBACtG,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM;iBAC5B;aACF,CAAC;QACJ,CAAC;QACD,OAAO;YACL,EAAE,EAAE,IAAI;YACR,OAAO,EAAE,UAAU;YACnB,MAAM,EAAE,MAAM,CAAC,IAAI;SACpB,CAAC;IACJ,CAAC;IAED,mBAAmB;IACnB,MAAM,MAAM,GAAG,uDAA8B,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAC7D,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE;gBACL,IAAI,EAAE,6BAA6B;gBACnC,OAAO,EAAE,0CAA0C,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;gBACzG,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM;aAC5B;SACF,CAAC;IACJ,CAAC;IACD,OAAO;QACL,EAAE,EAAE,IAAI;QACR,OAAO,EAAE,aAAa;QACtB,MAAM,EAAE,MAAM,CAAC,IAAI;KACpB,CAAC;AACJ,CAAC"}

package/dist/schemas.js

@@ -1,7 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.SCHEMA_VERSION = exports.PEAC_VERSION = void 0;
-const version_1 = require("./version");
-exports.PEAC_VERSION = version_1.WIRE_VERSION;
-exports.SCHEMA_VERSION = version_1.WIRE_VERSION;
-//# sourceMappingURL=schemas.js.map

package/dist/schemas.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"schemas.js","sourceRoot":"","sources":["../src/schemas.ts"],"names":[],"mappings":";;;AAAA,uCAAyC;AAE5B,QAAA,YAAY,GAAG,sBAAY,CAAC;AAC5B,QAAA,cAAc,GAAG,sBAAY,CAAC"}

package/dist/subject.js

@@ -1,9 +0,0 @@
-"use strict";
-/**
- * PEAC Subject Profile Types
- *
- * Subject profiles for identity and authorization context.
- * Used in conjunction with receipts and control decisions.
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-//# sourceMappingURL=subject.js.map

package/dist/subject.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"subject.js","sourceRoot":"","sources":["../src/subject.ts"],"names":[],"mappings":";AAAA;;;;;GAKG"}

package/dist/types.js

@@ -1,6 +0,0 @@
-"use strict";
-/**
- * PEAC Protocol TypeScript types
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":";AAAA;;GAEG"}

package/dist/validators.js

@@ -1,421 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.AttestationSchema = exports.ExtensionsSchema = exports.SubjectProfileSnapshotSchema = exports.SubjectProfileSchema = exports.SubjectTypeSchema = exports.PaymentEvidenceSchema = exports.PaymentRoutingSchema = exports.PaymentSplitSchema = exports.PurposeReasonSchema = exports.CanonicalPurposeSchema = exports.PurposeTokenSchema = exports.ControlBlockSchema = exports.ControlStepSchema = exports.ControlDecisionSchema = exports.ControlLicensingModeSchema = exports.ControlPurposeSchema = exports.VerifyRequest = exports.ReceiptClaims = exports.ReceiptClaimsSchema = exports.JWSHeader = exports.Extensions = exports.AIPREFSnapshot = exports.Subject = exports.NormalizedPayment = void 0;
-exports.validateSubjectSnapshot = validateSubjectSnapshot;
-exports.validateEvidence = validateEvidence;
-/**
- * Zod validators for PEAC protocol types
- */
-const zod_1 = require("zod");
-const constants_1 = require("./constants");
-const json_1 = require("./json");
-const errors_1 = require("./errors");
-const purpose_1 = require("./purpose");
-const httpsUrl = zod_1.z
-    .string()
-    .url()
-    .refine((u) => u.startsWith('https://'), 'must be https://');
-const iso4217 = zod_1.z.string().regex(/^[A-Z]{3}$/);
-const uuidv7 = zod_1.z
-    .string()
-    .regex(/^[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i);
-exports.NormalizedPayment = zod_1.z
-    .object({
-    rail: zod_1.z.string().min(1),
-    reference: zod_1.z.string().min(1),
-    amount: zod_1.z.number().int().nonnegative(),
-    currency: iso4217,
-    asset: zod_1.z.string().optional(),
-    env: zod_1.z.string().optional(),
-    evidence: json_1.JsonValueSchema.optional(),
-    metadata: json_1.JsonObjectSchema.optional(),
-})
-    .strict();
-exports.Subject = zod_1.z.object({ uri: httpsUrl }).strict();
-exports.AIPREFSnapshot = zod_1.z
-    .object({
-    url: httpsUrl,
-    hash: zod_1.z.string().min(8),
-})
-    .strict();
-// Note: Extensions uses a forward reference pattern since ControlBlockSchema
-// is defined after this. We use catchall for now and validate control separately.
-exports.Extensions = zod_1.z
-    .object({
-    aipref_snapshot: exports.AIPREFSnapshot.optional(),
-    // control block validated via ControlBlockSchema when present
-})
-    .catchall(zod_1.z.unknown());
-exports.JWSHeader = zod_1.z
-    .object({
-    typ: zod_1.z.literal(constants_1.PEAC_WIRE_TYP),
-    alg: zod_1.z.literal(constants_1.PEAC_ALG),
-    kid: zod_1.z.string().min(8),
-})
-    .strict();
-// Forward-declare purpose validators used in ReceiptClaims
-// Full definitions are below
-const CanonicalPurposeValues = ['train', 'search', 'user_action', 'inference', 'index'];
-const PurposeReasonValues = [
-    'allowed',
-    'constrained',
-    'denied',
-    'downgraded',
-    'undeclared_default',
-    'unknown_preserved',
-];
-exports.ReceiptClaimsSchema = zod_1.z
-    .object({
-    iss: httpsUrl,
-    aud: httpsUrl,
-    iat: zod_1.z.number().int().nonnegative(),
-    exp: zod_1.z.number().int().optional(),
-    rid: uuidv7,
-    amt: zod_1.z.number().int().nonnegative(),
-    cur: iso4217,
-    payment: exports.NormalizedPayment,
-    subject: exports.Subject.optional(),
-    ext: exports.Extensions.optional(),
-    // Purpose claims (v0.9.24+)
-    // purpose_declared: string[] - preserves unknown tokens for forward-compat
-    purpose_declared: zod_1.z.array(zod_1.z.string()).optional(),
-    // purpose_enforced: CanonicalPurpose - must be one with enforcement semantics
-    purpose_enforced: zod_1.z.enum(CanonicalPurposeValues).optional(),
-    // purpose_reason: PurposeReason - audit spine for enforcement decisions
-    purpose_reason: zod_1.z.enum(PurposeReasonValues).optional(),
-})
-    .strict();
-/**
- * @deprecated Use ReceiptClaimsSchema instead. Renamed in v0.9.30.
- */
-exports.ReceiptClaims = exports.ReceiptClaimsSchema;
-exports.VerifyRequest = zod_1.z
-    .object({
-    receipt_jws: zod_1.z.string().min(16),
-})
-    .strict();
-// -----------------------------------------------------------------------------
-// Control Abstraction Layer (CAL) Validators (v0.9.16+)
-// -----------------------------------------------------------------------------
-/**
- * Control purpose - what the access is for
- *
- * v0.9.17+: Added ai_input, search for RSL alignment
- * v0.9.18+: Added ai_index (RSL 1.0 canonical token). Removed ai_search.
- * v0.9.24+: Added user_action for agent-on-behalf-of-user scenarios.
- *
- * @see https://rslstandard.org/rsl for RSL 1.0 specification
- */
-exports.ControlPurposeSchema = zod_1.z.enum([
-    'crawl',
-    'index',
-    'train',
-    'inference',
-    'user_action',
-    'ai_input',
-    'ai_index',
-    'search',
-]);
-/**
- * Control licensing mode - how access is licensed
- */
-exports.ControlLicensingModeSchema = zod_1.z.enum([
-    'subscription',
-    'pay_per_crawl',
-    'pay_per_inference',
-]);
-/**
- * Control decision type
- */
-exports.ControlDecisionSchema = zod_1.z.enum(['allow', 'deny', 'review']);
-/**
- * Single control step in governance chain
- */
-exports.ControlStepSchema = zod_1.z.object({
-    engine: zod_1.z.string().min(1),
-    version: zod_1.z.string().optional(),
-    policy_id: zod_1.z.string().optional(),
-    result: exports.ControlDecisionSchema,
-    reason: zod_1.z.string().optional(),
-    purpose: exports.ControlPurposeSchema.optional(),
-    licensing_mode: exports.ControlLicensingModeSchema.optional(),
-    scope: zod_1.z.union([zod_1.z.string(), zod_1.z.array(zod_1.z.string())]).optional(),
-    limits_snapshot: zod_1.z.unknown().optional(),
-    evidence_ref: zod_1.z.string().optional(),
-});
-/**
- * Composable control block - multi-party governance
- */
-exports.ControlBlockSchema = zod_1.z
-    .object({
-    chain: zod_1.z.array(exports.ControlStepSchema).min(1),
-    decision: exports.ControlDecisionSchema,
-    combinator: zod_1.z.literal('any_can_veto').optional(),
-})
-    .refine((data) => {
-    // Validate decision consistency with chain
-    const hasAnyDeny = data.chain.some((step) => step.result === 'deny');
-    const allAllow = data.chain.every((step) => step.result === 'allow');
-    const hasReview = data.chain.some((step) => step.result === 'review');
-    if (hasAnyDeny && data.decision !== 'deny') {
-        return false;
-    }
-    if (allAllow && data.decision !== 'allow') {
-        return false;
-    }
-    // If has review but no deny, decision can be review or allow
-    if (hasReview && !hasAnyDeny && data.decision === 'deny') {
-        return false;
-    }
-    return true;
-}, {
-    message: 'Control block decision must be consistent with chain results',
-});
-// -----------------------------------------------------------------------------
-// Purpose Type Validators (v0.9.24+)
-// -----------------------------------------------------------------------------
-/**
- * Purpose token validator
- *
- * PurposeToken is a string that matches the purpose grammar:
- * - Lowercase letters, digits, underscores
- * - Optional vendor prefix with colon (e.g., "cf:ai_crawler")
- * - Max 64 characters
- *
- * Uses string type (not enum) to preserve unknown tokens for forward-compat.
- */
-exports.PurposeTokenSchema = zod_1.z
-    .string()
-    .min(1)
-    .max(purpose_1.MAX_PURPOSE_TOKEN_LENGTH)
-    .refine((token) => purpose_1.PURPOSE_TOKEN_REGEX.test(token), {
-    message: 'Invalid purpose token format. Must be lowercase, alphanumeric with underscores, optional vendor prefix.',
-});
-/**
- * Canonical purpose validator
- *
- * CanonicalPurpose is one of PEAC's normative purpose tokens.
- * Only these tokens have enforcement semantics.
- */
-exports.CanonicalPurposeSchema = zod_1.z.enum([
-    'train',
-    'search',
-    'user_action',
-    'inference',
-    'index',
-]);
-/**
- * Purpose reason validator
- *
- * PurposeReason is the audit spine explaining enforcement decisions.
- */
-exports.PurposeReasonSchema = zod_1.z.enum([
-    'allowed',
-    'constrained',
-    'denied',
-    'downgraded',
-    'undeclared_default',
-    'unknown_preserved',
-]);
-// -----------------------------------------------------------------------------
-// Payment Evidence Validators (v0.9.16+)
-// -----------------------------------------------------------------------------
-/**
- * Payment split schema
- *
- * Invariants:
- * - party is required (non-empty string)
- * - amount if present must be >= 0
- * - share if present must be in [0,1]
- * - At least one of amount or share must be specified
- */
-exports.PaymentSplitSchema = zod_1.z
-    .object({
-    party: zod_1.z.string().min(1),
-    amount: zod_1.z.number().int().nonnegative().optional(),
-    currency: iso4217.optional(),
-    share: zod_1.z.number().min(0).max(1).optional(),
-    rail: zod_1.z.string().min(1).optional(),
-    account_ref: zod_1.z.string().min(1).optional(),
-    metadata: json_1.JsonObjectSchema.optional(),
-})
-    .strict()
-    .refine((data) => data.amount !== undefined || data.share !== undefined, {
-    message: 'At least one of amount or share must be specified',
-});
-/**
- * Payment routing mode schema (rail-agnostic)
- *
- * Describes how the payment is routed between payer, aggregator, and merchant.
- * This is a generic hint - specific rails populate it from their native formats.
- *
- * Values:
- * - "direct": Direct payment to merchant (no intermediary)
- * - "callback": Routed via callback URL / payment service
- * - "role": Role-based routing (e.g., "publisher", "platform")
- *
- * Examples of producers:
- * - x402 v2 `payTo.mode` -> routing
- * - Stripe Connect `destination` -> routing = 'direct' or 'callback'
- * - UPI `pa` (payee address) -> routing = 'direct'
- */
-exports.PaymentRoutingSchema = zod_1.z.enum(['direct', 'callback', 'role']);
-/**
- * Payment evidence schema
- *
- * Full schema for PaymentEvidence including aggregator/splits support.
- */
-exports.PaymentEvidenceSchema = zod_1.z
-    .object({
-    rail: zod_1.z.string().min(1),
-    reference: zod_1.z.string().min(1),
-    amount: zod_1.z.number().int().nonnegative(),
-    currency: iso4217,
-    asset: zod_1.z.string().min(1),
-    env: zod_1.z.enum(['live', 'test']),
-    network: zod_1.z.string().min(1).optional(),
-    facilitator_ref: zod_1.z.string().min(1).optional(),
-    evidence: json_1.JsonValueSchema,
-    aggregator: zod_1.z.string().min(1).optional(),
-    splits: zod_1.z.array(exports.PaymentSplitSchema).optional(),
-    routing: exports.PaymentRoutingSchema.optional(),
-})
-    .strict();
-// -----------------------------------------------------------------------------
-// Subject Profile Validators (v0.9.16+)
-// -----------------------------------------------------------------------------
-/**
- * Subject type schema
- */
-exports.SubjectTypeSchema = zod_1.z.enum(['human', 'org', 'agent']);
-/**
- * Subject profile schema
- *
- * Invariants:
- * - id is required (non-empty string)
- * - type is required (human, org, or agent)
- * - labels if present must be non-empty strings
- */
-exports.SubjectProfileSchema = zod_1.z
-    .object({
-    id: zod_1.z.string().min(1),
-    type: exports.SubjectTypeSchema,
-    labels: zod_1.z.array(zod_1.z.string().min(1)).optional(),
-    metadata: json_1.JsonObjectSchema.optional(),
-})
-    .strict();
-/**
- * Subject profile snapshot schema
- *
- * Invariants:
- * - subject is required (valid SubjectProfile)
- * - captured_at is required (non-empty string)
- *   MUST be RFC 3339 / ISO 8601 UTC; format not enforced in schema for v0.9.16
- */
-exports.SubjectProfileSnapshotSchema = zod_1.z
-    .object({
-    subject: exports.SubjectProfileSchema,
-    captured_at: zod_1.z.string().min(1),
-    source: zod_1.z.string().min(1).optional(),
-    version: zod_1.z.string().min(1).optional(),
-})
-    .strict();
-// -----------------------------------------------------------------------------
-// Attestation Validators (v0.9.21+)
-// -----------------------------------------------------------------------------
-/**
- * Namespaced extensions schema
- *
- * Keys must be namespaced (e.g., "com.example/field", "io.vendor/data").
- * This provides a forward-compatible extension mechanism.
- */
-exports.ExtensionsSchema = zod_1.z.record(zod_1.z.string().regex(/^[a-z0-9_.-]+\/[a-z0-9_.-]+$/), json_1.JsonValueSchema);
-/**
- * Generic attestation schema
- *
- * Invariants:
- * - issuer, type, issued_at, evidence are required
- * - issued_at and expires_at must be RFC 3339 date-time
- * - ref if present must be a valid URI
- */
-exports.AttestationSchema = zod_1.z
-    .object({
-    issuer: zod_1.z.string().min(1),
-    type: zod_1.z.string().min(1),
-    issued_at: zod_1.z.string().datetime(),
-    expires_at: zod_1.z.string().datetime().optional(),
-    ref: zod_1.z.string().url().optional(),
-    evidence: json_1.JsonValueSchema,
-})
-    .strict();
-// -----------------------------------------------------------------------------
-// Subject Snapshot Validation Helper (v0.9.17+)
-// -----------------------------------------------------------------------------
-// Module-level set for PII warning deduplication
-const warnedSubjectIds = new Set();
-/**
- * Heuristic check if a subject ID looks like PII (email/phone)
- */
-function looksLikePII(id) {
-    // Email pattern
-    if (/^[^@\s]+@[^@\s]+\.[^@\s]+$/.test(id)) {
-        return true;
-    }
-    // Phone pattern (starts with + followed by digits)
-    if (/^\+?\d{10,15}$/.test(id.replace(/[\s\-()]/g, ''))) {
-        return true;
-    }
-    return false;
-}
-/**
- * Validate a subject snapshot (if present)
- *
- * - Returns validated snapshot or null if absent
- * - Throws ZodError for malformed data
- * - Logs advisory warning if id looks like PII (deduplicated)
- */
-function validateSubjectSnapshot(snapshot) {
-    if (snapshot === undefined || snapshot === null) {
-        return null;
-    }
-    // Validate against schema (throws on malformed data)
-    const validated = exports.SubjectProfileSnapshotSchema.parse(snapshot);
-    // Advisory PII warning (deduplicated)
-    const subjectId = validated.subject.id;
-    if (looksLikePII(subjectId) && !warnedSubjectIds.has(subjectId)) {
-        warnedSubjectIds.add(subjectId);
-        console.warn(`[peac:subject] Advisory: subject.id "${subjectId}" looks like PII. ` +
-            'Prefer opaque identifiers (e.g., "user:abc123").');
-    }
-    return validated;
-}
-/**
- * Validate payment evidence for JSON safety
- *
- * Uses iterative validation (no recursion) to prevent stack overflow on
- * deeply nested structures. Enforces limits on depth, array length,
- * object keys, and string length.
- *
- * @param evidence - Evidence value to validate
- * @param limits - Optional limits (internal, not part of public API)
- * @returns Result indicating success with validated value, or failure with PEACError
- *
- * @example
- * ```ts
- * const result = validateEvidence({ txId: '123', amount: 100 });
- * if (!result.ok) {
- *   console.error(result.error.code, result.error.remediation);
- * }
- * ```
- */
-function validateEvidence(evidence, limits) {
-    const result = (0, json_1.assertJsonSafeIterative)(evidence, limits);
-    if (!result.ok) {
-        return {
-            ok: false,
-            error: (0, errors_1.createEvidenceNotJsonError)(result.error, result.path),
-        };
-    }
-    return { ok: true, value: evidence };
-}
-//# sourceMappingURL=validators.js.map

package/dist/validators.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"validators.js","sourceRoot":"","sources":["../src/validators.ts"],"names":[],"mappings":";;;AA2aA,0DAqBC;AAgCD,4CAcC;AA9eD;;GAEG;AACH,6BAAwB;AACxB,2CAAsD;AACtD,iCAKgB;AAChB,qCAAsE;AACtE,uCAA0E;AAE1E,MAAM,QAAQ,GAAG,OAAC;KACf,MAAM,EAAE;KACR,GAAG,EAAE;KACL,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,kBAAkB,CAAC,CAAC;AAC/D,MAAM,OAAO,GAAG,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;AAC/C,MAAM,MAAM,GAAG,OAAC;KACb,MAAM,EAAE;KACR,KAAK,CAAC,wEAAwE,CAAC,CAAC;AAEtE,QAAA,iBAAiB,GAAG,OAAC;KAC/B,MAAM,CAAC;IACN,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACtC,QAAQ,EAAE,OAAO;IACjB,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1B,QAAQ,EAAE,sBAAe,CAAC,QAAQ,EAAE;IACpC,QAAQ,EAAE,uBAAgB,CAAC,QAAQ,EAAE;CACtC,CAAC;KACD,MAAM,EAAE,CAAC;AAEC,QAAA,OAAO,GAAG,OAAC,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AAE/C,QAAA,cAAc,GAAG,OAAC;KAC5B,MAAM,CAAC;IACN,GAAG,EAAE,QAAQ;IACb,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CACxB,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,6EAA6E;AAC7E,kFAAkF;AACrE,QAAA,UAAU,GAAG,OAAC;KACxB,MAAM,CAAC;IACN,eAAe,EAAE,sBAAc,CAAC,QAAQ,EAAE;IAC1C,8DAA8D;CAC/D,CAAC;KACD,QAAQ,CAAC,OAAC,CAAC,OAAO,EAAE,CAAC,CAAC;AAEZ,QAAA,SAAS,GAAG,OAAC;KACvB,MAAM,CAAC;IACN,GAAG,EAAE,OAAC,CAAC,OAAO,CAAC,yBAAa,CAAC;IAC7B,GAAG,EAAE,OAAC,CAAC,OAAO,CAAC,oBAAQ,CAAC;IACxB,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CACvB,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,2DAA2D;AAC3D,6BAA6B;AAC7B,MAAM,sBAAsB,GAAG,CAAC,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,WAAW,EAAE,OAAO,CAAU,CAAC;AACjG,MAAM,mBAAmB,GAAG;IAC1B,SAAS;IACT,aAAa;IACb,QAAQ;IACR,YAAY;IACZ,oBAAoB;IACpB,mBAAmB;CACX,CAAC;AAEE,QAAA,mBAAmB,GAAG,OAAC;KACjC,MAAM,CAAC;IACN,GAAG,EAAE,QAAQ;IACb,GAAG,EAAE,QAAQ;IACb,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACnC,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAChC,GAAG,EAAE,MAAM;IACX,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACnC,GAAG,EAAE,OAAO;IACZ,OAAO,EAAE,yBAAiB;IAC1B,OAAO,EAAE,eAAO,CAAC,QAAQ,EAAE;IAC3B,GAAG,EAAE,kBAAU,CAAC,QAAQ,EAAE;IAC1B,4BAA4B;IAC5B,2EAA2E;IAC3E,gBAAgB,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAChD,8EAA8E;IAC9E,gBAAgB,EAAE,OAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC,QAAQ,EAAE;IAC3D,wEAAwE;IACxE,cAAc,EAAE,OAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,QAAQ,EAAE;CACvD,CAAC;KACD,MAAM,EAAE,CAAC;AAUZ;;GAEG;AACU,QAAA,aAAa,GAAG,2BAAmB,CAAC;AAEpC,QAAA,aAAa,GAAG,OAAC;KAC3B,MAAM,CAAC;IACN,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;CAChC,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,gFAAgF;AAChF,wDAAwD;AACxD,gFAAgF;AAEhF;;;;;;;;GAQG;AACU,QAAA,oBAAoB,GAAG,OAAC,CAAC,IAAI,CAAC;IACzC,OAAO;IACP,OAAO;IACP,OAAO;IACP,WAAW;IACX,aAAa;IACb,UAAU;IACV,UAAU;IACV,QAAQ;CACT,CAAC,CAAC;AAEH;;GAEG;AACU,QAAA,0BAA0B,GAAG,OAAC,CAAC,IAAI,CAAC;IAC/C,cAAc;IACd,eAAe;IACf,mBAAmB;CACpB,CAAC,CAAC;AAEH;;GAEG;AACU,QAAA,qBAAqB,GAAG,OAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;AAEzE;;GAEG;AACU,QAAA,iBAAiB,GAAG,OAAC,CAAC,MAAM,CAAC;IACxC,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,MAAM,EAAE,6BAAqB;IAC7B,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,OAAO,EAAE,4BAAoB,CAAC,QAAQ,EAAE;IACxC,cAAc,EAAE,kCAA0B,CAAC,QAAQ,EAAE;IACrD,KAAK,EAAE,OAAC,CAAC,KAAK,CAAC,CAAC,OAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC5D,eAAe,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACvC,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACpC,CAAC,CAAC;AAEH;;GAEG;AACU,QAAA,kBAAkB,GAAG,OAAC;KAChC,MAAM,CAAC;IACN,KAAK,EAAE,OAAC,CAAC,KAAK,CAAC,yBAAiB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACxC,QAAQ,EAAE,6BAAqB;IAC/B,UAAU,EAAE,OAAC,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,QAAQ,EAAE;CACjD,CAAC;KACD,MAAM,CACL,CAAC,IAAI,EAAE,EAAE;IACP,2CAA2C;IAC3C,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;IACrE,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC;IACrE,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC;IAEtE,IAAI,UAAU,IAAI,IAAI,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;QAC3C,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,QAAQ,IAAI,IAAI,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QAC1C,OAAO,KAAK,CAAC;IACf,CAAC;IACD,6DAA6D;IAC7D,IAAI,SAAS,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;QACzD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC,EACD;IACE,OAAO,EAAE,8DAA8D;CACxE,CACF,CAAC;AAEJ,gFAAgF;AAChF,qCAAqC;AACrC,gFAAgF;AAEhF;;;;;;;;;GASG;AACU,QAAA,kBAAkB,GAAG,OAAC;KAChC,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,GAAG,CAAC,kCAAwB,CAAC;KAC7B,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,6BAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE;IAClD,OAAO,EACL,yGAAyG;CAC5G,CAAC,CAAC;AAEL;;;;;GAKG;AACU,QAAA,sBAAsB,GAAG,OAAC,CAAC,IAAI,CAAC;IAC3C,OAAO;IACP,QAAQ;IACR,aAAa;IACb,WAAW;IACX,OAAO;CACR,CAAC,CAAC;AAEH;;;;GAIG;AACU,QAAA,mBAAmB,GAAG,OAAC,CAAC,IAAI,CAAC;IACxC,SAAS;IACT,aAAa;IACb,QAAQ;IACR,YAAY;IACZ,oBAAoB;IACpB,mBAAmB;CACpB,CAAC,CAAC;AAEH,gFAAgF;AAChF,yCAAyC;AACzC,gFAAgF;AAEhF;;;;;;;;GAQG;AACU,QAAA,kBAAkB,GAAG,OAAC;KAChC,MAAM,CAAC;IACN,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACxB,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;IACjD,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE;IAC5B,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC1C,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAClC,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACzC,QAAQ,EAAE,uBAAgB,CAAC,QAAQ,EAAE;CACtC,CAAC;KACD,MAAM,EAAE;KACR,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE;IACvE,OAAO,EAAE,mDAAmD;CAC7D,CAAC,CAAC;AAEL;;;;;;;;;;;;;;;GAeG;AACU,QAAA,oBAAoB,GAAG,OAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC;AAE3E;;;;GAIG;AACU,QAAA,qBAAqB,GAAG,OAAC;KACnC,MAAM,CAAC;IACN,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACtC,QAAQ,EAAE,OAAO;IACjB,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACxB,GAAG,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACrC,eAAe,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC7C,QAAQ,EAAE,sBAAe;IACzB,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACxC,MAAM,EAAE,OAAC,CAAC,KAAK,CAAC,0BAAkB,CAAC,CAAC,QAAQ,EAAE;IAC9C,OAAO,EAAE,4BAAoB,CAAC,QAAQ,EAAE;CACzC,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,gFAAgF;AAChF,wCAAwC;AACxC,gFAAgF;AAEhF;;GAEG;AACU,QAAA,iBAAiB,GAAG,OAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;AAEnE;;;;;;;GAOG;AACU,QAAA,oBAAoB,GAAG,OAAC;KAClC,MAAM,CAAC;IACN,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,IAAI,EAAE,yBAAiB;IACvB,MAAM,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC7C,QAAQ,EAAE,uBAAgB,CAAC,QAAQ,EAAE;CACtC,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ;;;;;;;GAOG;AACU,QAAA,4BAA4B,GAAG,OAAC;KAC1C,MAAM,CAAC;IACN,OAAO,EAAE,4BAAoB;IAC7B,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACpC,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACtC,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,gFAAgF;AAChF,oCAAoC;AACpC,gFAAgF;AAEhF;;;;;GAKG;AACU,QAAA,gBAAgB,GAAG,OAAC,CAAC,MAAM,CACtC,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,8BAA8B,CAAC,EAChD,sBAAe,CAChB,CAAC;AAEF;;;;;;;GAOG;AACU,QAAA,iBAAiB,GAAG,OAAC;KAC/B,MAAM,CAAC;IACN,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC5C,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAChC,QAAQ,EAAE,sBAAe;CAC1B,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,gFAAgF;AAChF,gDAAgD;AAChD,gFAAgF;AAEhF,iDAAiD;AACjD,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAU,CAAC;AAE3C;;GAEG;AACH,SAAS,YAAY,CAAC,EAAU;IAC9B,gBAAgB;IAChB,IAAI,4BAA4B,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;QAC1C,OAAO,IAAI,CAAC;IACd,CAAC;IACD,mDAAmD;IACnD,IAAI,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC;QACvD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,uBAAuB,CACrC,QAAiB;IAEjB,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QAChD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,qDAAqD;IACrD,MAAM,SAAS,GAAG,oCAA4B,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAE/D,sCAAsC;IACtC,MAAM,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;IACvC,IAAI,YAAY,CAAC,SAAS,CAAC,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;QAChE,gBAAgB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAChC,OAAO,CAAC,IAAI,CACV,wCAAwC,SAAS,oBAAoB;YACnE,kDAAkD,CACrD,CAAC;IACJ,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAaD;;;;;;;;;;;;;;;;;;GAkBG;AACH,SAAgB,gBAAgB,CAC9B,QAAiB,EACjB,MAA2B;IAE3B,MAAM,MAAM,GAAG,IAAA,8BAAuB,EAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAEzD,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,IAAA,mCAA0B,EAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC;SAC7D,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;AACvC,CAAC"}

package/dist/version.js

@@ -1,7 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.POLICY_VERSION = exports.DOCS_TRAIN = exports.WIRE_VERSION = void 0;
-exports.WIRE_VERSION = '0.9.11';
-exports.DOCS_TRAIN = '0.9.11';
-exports.POLICY_VERSION = '0.9.11';
-//# sourceMappingURL=version.js.map

package/dist/version.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"version.js","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":";;;AAAa,QAAA,YAAY,GAAG,QAAQ,CAAC;AACxB,QAAA,UAAU,GAAG,QAAQ,CAAC;AACtB,QAAA,cAAc,GAAG,QAAQ,CAAC"}