@peac/schema 0.12.1 → 0.12.3
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/actor-binding.d.ts +10 -10
- package/dist/agent-identity.d.ts +8 -6
- package/dist/agent-identity.d.ts.map +1 -1
- package/dist/carrier.d.ts +7 -7
- package/dist/carrier.d.ts.map +1 -1
- package/dist/constraints.d.ts +4 -4
- package/dist/constraints.d.ts.map +1 -1
- package/dist/extensions/control-action.d.ts +1 -1
- package/dist/extensions/credential-event.d.ts +4 -4
- package/dist/extensions/fingerprint-ref.d.ts +1 -1
- package/dist/extensions/index.d.ts +1 -1
- package/dist/extensions/tool-registry.d.ts +1 -1
- package/dist/extensions/treaty.d.ts +2 -2
- package/dist/index.cjs +733 -44
- package/dist/index.cjs.map +1 -1
- package/dist/index.d.ts +3 -3
- package/dist/index.d.ts.map +1 -1
- package/dist/index.mjs +684 -46
- package/dist/index.mjs.map +1 -1
- package/dist/issuer-config.d.ts +1 -1
- package/dist/policy-binding.d.ts +2 -2
- package/dist/receipt-parser.cjs +626 -14
- package/dist/receipt-parser.cjs.map +1 -1
- package/dist/receipt-parser.mjs +627 -15
- package/dist/receipt-parser.mjs.map +1 -1
- package/dist/subject.d.ts +33 -12
- package/dist/subject.d.ts.map +1 -1
- package/dist/types.d.ts +1 -1
- package/dist/types.d.ts.map +1 -1
- package/dist/wire-02-envelope.d.ts +2 -2
- package/dist/wire-02-extensions/access.d.ts +19 -0
- package/dist/wire-02-extensions/access.d.ts.map +1 -0
- package/dist/wire-02-extensions/accessors.d.ts +44 -0
- package/dist/wire-02-extensions/accessors.d.ts.map +1 -0
- package/dist/wire-02-extensions/attribution.d.ts +44 -0
- package/dist/wire-02-extensions/attribution.d.ts.map +1 -0
- package/dist/wire-02-extensions/challenge.d.ts +60 -0
- package/dist/wire-02-extensions/challenge.d.ts.map +1 -0
- package/dist/wire-02-extensions/commerce.d.ts +29 -0
- package/dist/wire-02-extensions/commerce.d.ts.map +1 -0
- package/dist/wire-02-extensions/compliance.d.ts +49 -0
- package/dist/wire-02-extensions/compliance.d.ts.map +1 -0
- package/dist/wire-02-extensions/consent.d.ts +48 -0
- package/dist/wire-02-extensions/consent.d.ts.map +1 -0
- package/dist/wire-02-extensions/correlation.d.ts +18 -0
- package/dist/wire-02-extensions/correlation.d.ts.map +1 -0
- package/dist/wire-02-extensions/grammar.d.ts +40 -0
- package/dist/wire-02-extensions/grammar.d.ts.map +1 -0
- package/dist/wire-02-extensions/identity.d.ts +13 -0
- package/dist/wire-02-extensions/identity.d.ts.map +1 -0
- package/dist/wire-02-extensions/index.d.ts +40 -0
- package/dist/wire-02-extensions/index.d.ts.map +1 -0
- package/dist/wire-02-extensions/limits.d.ts +80 -0
- package/dist/wire-02-extensions/limits.d.ts.map +1 -0
- package/dist/wire-02-extensions/privacy.d.ts +64 -0
- package/dist/wire-02-extensions/privacy.d.ts.map +1 -0
- package/dist/wire-02-extensions/provenance.d.ts +58 -0
- package/dist/wire-02-extensions/provenance.d.ts.map +1 -0
- package/dist/wire-02-extensions/purpose-extension.d.ts +26 -0
- package/dist/wire-02-extensions/purpose-extension.d.ts.map +1 -0
- package/dist/wire-02-extensions/safety.d.ts +65 -0
- package/dist/wire-02-extensions/safety.d.ts.map +1 -0
- package/dist/wire-02-extensions/schema-map.d.ts +13 -0
- package/dist/wire-02-extensions/schema-map.d.ts.map +1 -0
- package/dist/wire-02-extensions/shared-validators.d.ts +192 -0
- package/dist/wire-02-extensions/shared-validators.d.ts.map +1 -0
- package/dist/wire-02-extensions/validation.d.ts +57 -0
- package/dist/wire-02-extensions/validation.d.ts.map +1 -0
- package/dist/wire-02-extensions.d.ts +7 -211
- package/dist/wire-02-extensions.d.ts.map +1 -1
- package/dist/wire-02-registries.d.ts +5 -2
- package/dist/wire-02-registries.d.ts.map +1 -1
- package/dist/wire-02-representation.d.ts +3 -3
- package/dist/wire-02-warnings.d.ts +5 -1
- package/dist/wire-02-warnings.d.ts.map +1 -1
- package/package.json +2 -2
package/dist/actor-binding.d.ts
CHANGED
|
@@ -1,8 +1,8 @@
|
|
|
1
1
|
/**
|
|
2
2
|
* ActorBinding and MVIS (Minimum Viable Identity Set) Schemas (v0.11.3+)
|
|
3
3
|
*
|
|
4
|
-
* Implements
|
|
5
|
-
* and
|
|
4
|
+
* Implements (ActorBinding) (Multi-Root Proof Types),
|
|
5
|
+
* and (MVIS) for the Agent Identity Profile.
|
|
6
6
|
*
|
|
7
7
|
* ActorBinding lives in ext["org.peacprotocol/actor_binding"] in Wire 0.1.
|
|
8
8
|
* ProofTypeSchema is SEPARATE from ProofMethodSchema (agent-identity.ts)
|
|
@@ -12,7 +12,7 @@
|
|
|
12
12
|
*/
|
|
13
13
|
import { z } from 'zod';
|
|
14
14
|
/**
|
|
15
|
-
* Proof types for ActorBinding
|
|
15
|
+
* Proof types for ActorBinding.
|
|
16
16
|
*
|
|
17
17
|
* 8 methods covering attestation chains, RATS, keyless signing,
|
|
18
18
|
* decentralized identity, workload identity, PKI, and vendor-defined.
|
|
@@ -50,16 +50,16 @@ export declare function isOriginOnly(value: string): boolean;
|
|
|
50
50
|
*/
|
|
51
51
|
export declare const ACTOR_BINDING_EXTENSION_KEY: "org.peacprotocol/actor_binding";
|
|
52
52
|
/**
|
|
53
|
-
* ActorBinding schema
|
|
53
|
+
* ActorBinding schema.
|
|
54
54
|
*
|
|
55
55
|
* Binds an actor identity to a receipt via ext["org.peacprotocol/actor_binding"].
|
|
56
56
|
* Wire 0.2 moves this to a kernel field.
|
|
57
57
|
*
|
|
58
58
|
* - id: Stable actor identifier (opaque, no PII)
|
|
59
|
-
* - proof_type: Trust root model from
|
|
59
|
+
* - proof_type: Trust root model from vocabulary
|
|
60
60
|
* - proof_ref: Optional URI or hash of external proof artifact
|
|
61
61
|
* - origin: Origin-only URL (scheme + host + optional port; no path/query/fragment)
|
|
62
|
-
* - intent_hash: Optional SHA-256 hash of the intent (hash-first per
|
|
62
|
+
* - intent_hash: Optional SHA-256 hash of the intent (hash-first per )
|
|
63
63
|
*/
|
|
64
64
|
export declare const ActorBindingSchema: z.ZodObject<{
|
|
65
65
|
id: z.ZodString;
|
|
@@ -79,10 +79,10 @@ export declare const ActorBindingSchema: z.ZodObject<{
|
|
|
79
79
|
}, z.core.$strict>;
|
|
80
80
|
export type ActorBinding = z.infer<typeof ActorBindingSchema>;
|
|
81
81
|
/**
|
|
82
|
-
* MVIS (Minimum Viable Identity Set) fields
|
|
82
|
+
* MVIS (Minimum Viable Identity Set) fields.
|
|
83
83
|
*
|
|
84
84
|
* 5 required fields for any identity receipt to be considered complete.
|
|
85
|
-
* validateMVIS() is a pure validation function with zero I/O
|
|
85
|
+
* validateMVIS() is a pure validation function with zero I/O.
|
|
86
86
|
*
|
|
87
87
|
* Fields:
|
|
88
88
|
* - issuer: Who issued the identity assertion
|
|
@@ -129,9 +129,9 @@ export declare function validateActorBinding(data: unknown): {
|
|
|
129
129
|
error: string;
|
|
130
130
|
};
|
|
131
131
|
/**
|
|
132
|
-
* Validate MVIS fields
|
|
132
|
+
* Validate MVIS fields.
|
|
133
133
|
*
|
|
134
|
-
* Pure validation function with zero I/O
|
|
134
|
+
* Pure validation function with zero I/O.
|
|
135
135
|
* Checks that all 5 required fields are present and valid.
|
|
136
136
|
* Also validates that time_bounds.not_before < time_bounds.not_after.
|
|
137
137
|
*
|
package/dist/agent-identity.d.ts
CHANGED
|
@@ -24,12 +24,14 @@ export type ControlType = z.infer<typeof ControlTypeSchema>;
|
|
|
24
24
|
*/
|
|
25
25
|
export declare const CONTROL_TYPES: readonly ["operator", "user-delegated"];
|
|
26
26
|
/**
|
|
27
|
-
*
|
|
27
|
+
* @deprecated ProofMethodSchema is deprecated as of v0.12.2.
|
|
28
|
+
* Transport-level binding methods (HTTP signatures, DPoP, mTLS, JWK thumbprint)
|
|
29
|
+
* are semantically distinct from trust-root models (ProofTypeSchema).
|
|
30
|
+
* This alias remains functional through v0.12.x. No consumer action required now.
|
|
31
|
+
* In v0.13.0, AgentProofSchema.method will migrate to either an inline enum
|
|
32
|
+
* or a dedicated TransportBindingMethodSchema. Remove-not-before: v0.13.0.
|
|
28
33
|
*
|
|
29
|
-
*
|
|
30
|
-
* - 'dpop': RFC 9449 DPoP token binding
|
|
31
|
-
* - 'mtls': Mutual TLS client certificate
|
|
32
|
-
* - 'jwk-thumbprint': JWK Thumbprint confirmation (RFC 7638)
|
|
34
|
+
* @see ProofTypeSchema for the canonical trust-root model schema
|
|
33
35
|
*/
|
|
34
36
|
export declare const ProofMethodSchema: z.ZodEnum<{
|
|
35
37
|
"http-message-signature": "http-message-signature";
|
|
@@ -39,7 +41,7 @@ export declare const ProofMethodSchema: z.ZodEnum<{
|
|
|
39
41
|
}>;
|
|
40
42
|
export type ProofMethod = z.infer<typeof ProofMethodSchema>;
|
|
41
43
|
/**
|
|
42
|
-
*
|
|
44
|
+
* @deprecated See ProofMethodSchema deprecation note.
|
|
43
45
|
*/
|
|
44
46
|
export declare const PROOF_METHODS: readonly ["http-message-signature", "dpop", "mtls", "jwk-thumbprint"];
|
|
45
47
|
/**
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"agent-identity.d.ts","sourceRoot":"","sources":["../src/agent-identity.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAO9C;;;;;GAKG;AACH,eAAO,MAAM,iBAAiB;;;EAAyC,CAAC;AACxE,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE5D;;GAEG;AACH,eAAO,MAAM,aAAa,yCAA0C,CAAC;AAMrE
|
|
1
|
+
{"version":3,"file":"agent-identity.d.ts","sourceRoot":"","sources":["../src/agent-identity.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAO9C;;;;;GAKG;AACH,eAAO,MAAM,iBAAiB;;;EAAyC,CAAC;AACxE,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE5D;;GAEG;AACH,eAAO,MAAM,aAAa,yCAA0C,CAAC;AAMrE;;;;;;;;;GASG;AACH,eAAO,MAAM,iBAAiB;;;;;EAK5B,CAAC;AACH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE5D;;GAEG;AACH,eAAO,MAAM,aAAa,uEAAwE,CAAC;AAMnG;;;;GAIG;AACH,eAAO,MAAM,oBAAoB;;;;;;kBAiBtB,CAAC;AACZ,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAMlE;;GAEG;AACH,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;kBA0BlB,CAAC;AACZ,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAM1D;;;;;GAKG;AACH,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBA6B7B,CAAC;AACZ,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAMhF;;GAEG;AACH,eAAO,MAAM,mBAAmB,EAAG,qBAA8B,CAAC;AAElE;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,eAAO,MAAM,8BAA8B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAoBhC,CAAC;AACZ,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AAMtF;;;;GAIG;AACH,eAAO,MAAM,qBAAqB;;;;;kBAcvB,CAAC;AACZ,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAMpE;;;;;GAKG;AACH,eAAO,MAAM,2BAA2B;;;;;;;;;kBAiB7B,CAAC;AACZ,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAMhF;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,gCAAgC,CAC9C,IAAI,EAAE,OAAO,GACZ;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,wBAAwB,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAM9E;AAED;;;;;GAKG;AACH,wBAAgB,0BAA0B,CAAC,WAAW,EAAE;IACtD,IAAI,EAAE,MAAM,CAAC;CACd,GAAG,WAAW,IAAI,wBAAwB,CAE1C;AAED;;GAEG;AACH,MAAM,WAAW,oCAAoC;IACnD,gCAAgC;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,8BAA8B;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,+CAA+C;IAC/C,YAAY,EAAE,WAAW,CAAC;IAC1B,qCAAqC;IACrC,KAAK,CAAC,EAAE,UAAU,CAAC;IACnB,oCAAoC;IACpC,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,qDAAqD;IACrD,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,mCAAmC;IACnC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,wDAAwD;IACxD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,kDAAkD;IAClD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,8CAA8C;IAC9C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,gDAAgD;IAChD,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,wDAAwD;IACxD,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;CACtC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,8BAA8B,CAC5C,MAAM,EAAE,oCAAoC,GAC3C,wBAAwB,CA4C1B;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,OAAO,GACZ;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,eAAe,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAMrE;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAClC,WAAW,EAAE,wBAAwB,EACrC,SAAS,GAAE,MAAc,GACxB,OAAO,CAOT;AAED;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CACtC,WAAW,EAAE,wBAAwB,EACrC,SAAS,GAAE,MAAc,GACxB,OAAO,CAIT"}
|
package/dist/carrier.d.ts
CHANGED
|
@@ -1,5 +1,5 @@
|
|
|
1
1
|
/**
|
|
2
|
-
* Evidence Carrier Contract schemas and helpers
|
|
2
|
+
* Evidence Carrier Contract schemas and helpers
|
|
3
3
|
*
|
|
4
4
|
* Zod validation schemas for PeacEvidenceCarrier and CarrierMeta,
|
|
5
5
|
* plus the canonical computeReceiptRef() and validateCarrierConstraints()
|
|
@@ -7,7 +7,7 @@
|
|
|
7
7
|
*/
|
|
8
8
|
import { z } from 'zod';
|
|
9
9
|
import type { CarrierMeta, CarrierValidationResult, PeacEvidenceCarrier, ReceiptRef } from '@peac/kernel';
|
|
10
|
-
/** Maximum carrier size per transport
|
|
10
|
+
/** Maximum carrier size per transport */
|
|
11
11
|
export declare const CARRIER_TRANSPORT_LIMITS: {
|
|
12
12
|
/** MCP _meta: 64 KB */
|
|
13
13
|
readonly mcp: 65536;
|
|
@@ -34,8 +34,8 @@ export declare const CarrierFormatSchema: z.ZodEnum<{
|
|
|
34
34
|
reference: "reference";
|
|
35
35
|
}>;
|
|
36
36
|
/**
|
|
37
|
-
* Validates receipt_url: HTTPS-only, max 2048 chars, no credentials
|
|
38
|
-
* Validation only
|
|
37
|
+
* Validates receipt_url: HTTPS-only, max 2048 chars, no credentials.
|
|
38
|
+
* Validation only: no I/O, no fetch. Resolution lives in Layer 4.
|
|
39
39
|
*/
|
|
40
40
|
export declare const ReceiptUrlSchema: z.ZodString;
|
|
41
41
|
/** Schema for PeacEvidenceCarrier */
|
|
@@ -70,7 +70,7 @@ export declare const CarrierMetaSchema: z.ZodObject<{
|
|
|
70
70
|
*/
|
|
71
71
|
export declare function computeReceiptRef(jws: string): Promise<ReceiptRef>;
|
|
72
72
|
/**
|
|
73
|
-
* Canonical carrier constraint validator
|
|
73
|
+
* Canonical carrier constraint validator.
|
|
74
74
|
*
|
|
75
75
|
* Validates a carrier against transport-specific constraints using
|
|
76
76
|
* the provided CarrierMeta. This is the single validation function
|
|
@@ -80,12 +80,12 @@ export declare function computeReceiptRef(jws: string): Promise<ReceiptRef>;
|
|
|
80
80
|
* 1. receipt_ref format (sha256:<hex64>)
|
|
81
81
|
* 2. receipt_jws format (if present): valid compact JWS
|
|
82
82
|
* 3. Total serialized size within meta.max_size
|
|
83
|
-
* 4. If receipt_jws present: receipt_ref consistency
|
|
83
|
+
* 4. If receipt_jws present: receipt_ref consistency
|
|
84
84
|
* 5. All string fields within MAX_STRING_LENGTH
|
|
85
85
|
*/
|
|
86
86
|
export declare function validateCarrierConstraints(carrier: PeacEvidenceCarrier, meta: CarrierMeta): CarrierValidationResult;
|
|
87
87
|
/**
|
|
88
|
-
* Verify receipt_ref consistency with receipt_jws
|
|
88
|
+
* Verify receipt_ref consistency with receipt_jws.
|
|
89
89
|
*
|
|
90
90
|
* If both receipt_ref and receipt_jws are present, verifies that
|
|
91
91
|
* sha256(receipt_jws) equals receipt_ref. This prevents carrier
|
package/dist/carrier.d.ts.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"carrier.d.ts","sourceRoot":"","sources":["../src/carrier.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,KAAK,EAEV,WAAW,EACX,uBAAuB,EACvB,mBAAmB,EACnB,UAAU,EACX,MAAM,cAAc,CAAC;AAQtB,
|
|
1
|
+
{"version":3,"file":"carrier.d.ts","sourceRoot":"","sources":["../src/carrier.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,KAAK,EAEV,WAAW,EACX,uBAAuB,EACvB,mBAAmB,EACnB,UAAU,EACX,MAAM,cAAc,CAAC;AAQtB,yCAAyC;AACzC,eAAO,MAAM,wBAAwB;IACnC,uBAAuB;;IAEvB,0BAA0B;;IAE1B,mDAAmD;;;IAGnD,8BAA8B;;IAE9B,oDAAoD;;;IAGpD,8BAA8B;;CAEtB,CAAC;AAMX,6EAA6E;AAC7E,eAAO,MAAM,gBAAgB,aAEiD,CAAC;AAE/E,0EAA0E;AAC1E,eAAO,MAAM,gBAAgB,aAK1B,CAAC;AAEJ,4BAA4B;AAC5B,eAAO,MAAM,mBAAmB;;;EAAiC,CAAC;AAElE;;;GAGG;AACH,eAAO,MAAM,gBAAgB,aAmB1B,CAAC;AAEJ,qCAAqC;AACrC,eAAO,MAAM,yBAAyB;;;;;;;;;;;iBAWpC,CAAC;AAEH,6BAA6B;AAC7B,eAAO,MAAM,iBAAiB;;;;;;;;iBAK5B,CAAC;AAMH;;;;;;GAMG;AACH,wBAAsB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAaxE;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,mBAAmB,EAC5B,IAAI,EAAE,WAAW,GAChB,uBAAuB,CAwDzB;AAED;;;;;;;;;GASG;AACH,wBAAsB,2BAA2B,CAC/C,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CASxB;AAMD,YAAY,EACV,aAAa,EACb,WAAW,EACX,uBAAuB,EACvB,mBAAmB,EACnB,UAAU,EACV,cAAc,GACf,MAAM,cAAc,CAAC"}
|
package/dist/constraints.d.ts
CHANGED
|
@@ -4,13 +4,13 @@
|
|
|
4
4
|
* These limits are formalized from existing ad-hoc limits already
|
|
5
5
|
* enforced in the codebase:
|
|
6
6
|
* - JSON_EVIDENCE_LIMITS (json.ts): depth, array, keys, string, nodes
|
|
7
|
-
* - CLOCK_SKEW_SECONDS
|
|
7
|
+
* - CLOCK_SKEW_SECONDS: temporal validity tolerance
|
|
8
8
|
*
|
|
9
9
|
* String length is measured in code units (.length), matching the semantics
|
|
10
10
|
* of assertJsonSafeIterative(). UTF-8 byte-length caps may be introduced
|
|
11
11
|
* as an explicit tightening in a future version.
|
|
12
12
|
*
|
|
13
|
-
* Payment/rail-specific limits (
|
|
13
|
+
* Payment/rail-specific limits (x402 DoS guards) are intentionally
|
|
14
14
|
* NOT included here -- they belong in the rail/adapter layer.
|
|
15
15
|
*/
|
|
16
16
|
/**
|
|
@@ -19,7 +19,7 @@
|
|
|
19
19
|
*
|
|
20
20
|
* Provenance:
|
|
21
21
|
* - MAX_NESTED_DEPTH..MAX_TOTAL_NODES: from JSON_EVIDENCE_LIMITS (json.ts)
|
|
22
|
-
* - CLOCK_SKEW_SECONDS: from
|
|
22
|
+
* - CLOCK_SKEW_SECONDS: from temporal validity
|
|
23
23
|
*/
|
|
24
24
|
export declare const KERNEL_CONSTRAINTS: {
|
|
25
25
|
/** Maximum nesting depth for JSON evidence */
|
|
@@ -32,7 +32,7 @@ export declare const KERNEL_CONSTRAINTS: {
|
|
|
32
32
|
readonly MAX_STRING_LENGTH: 65536;
|
|
33
33
|
/** Maximum total nodes to visit during traversal */
|
|
34
34
|
readonly MAX_TOTAL_NODES: 100000;
|
|
35
|
-
/** Temporal validity clock skew tolerance in seconds
|
|
35
|
+
/** Temporal validity clock skew tolerance in seconds */
|
|
36
36
|
readonly CLOCK_SKEW_SECONDS: 60;
|
|
37
37
|
};
|
|
38
38
|
export type KernelConstraintKey = keyof typeof KERNEL_CONSTRAINTS;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"constraints.d.ts","sourceRoot":"","sources":["../src/constraints.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAMH;;;;;;;GAOG;AACH,eAAO,MAAM,kBAAkB;IAC7B,8CAA8C;;IAE9C,uCAAuC;;IAEvC,6CAA6C;;IAE7C,yFAAyF;;IAEzF,oDAAoD;;IAEpD
|
|
1
|
+
{"version":3,"file":"constraints.d.ts","sourceRoot":"","sources":["../src/constraints.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAMH;;;;;;;GAOG;AACH,eAAO,MAAM,kBAAkB;IAC7B,8CAA8C;;IAE9C,uCAAuC;;IAEvC,6CAA6C;;IAE7C,yFAAyF;;IAEzF,oDAAoD;;IAEpD,wDAAwD;;CAEhD,CAAC;AAEX,MAAM,MAAM,mBAAmB,GAAG,MAAM,OAAO,kBAAkB,CAAC;AAMlE,MAAM,WAAW,mBAAmB;IAClC,UAAU,EAAE,mBAAmB,CAAC;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,0BAA0B;IACzC,KAAK,EAAE,OAAO,CAAC;IACf,UAAU,EAAE,mBAAmB,EAAE,CAAC;CACnC;AAMD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,OAAO,GAAG,0BAA0B,CAwGrF"}
|
|
@@ -1,10 +1,10 @@
|
|
|
1
1
|
/**
|
|
2
|
-
* Credential Event Extension Schema (v0.11.3
|
|
2
|
+
* Credential Event Extension Schema (v0.11.3+ ZT Pack)
|
|
3
3
|
*
|
|
4
4
|
* Records credential lifecycle events in ext["org.peacprotocol/credential_event"].
|
|
5
5
|
* Events: issued, leased, rotated, revoked, expired.
|
|
6
6
|
*
|
|
7
|
-
* credential_ref is an opaque fingerprint reference
|
|
7
|
+
* credential_ref is an opaque fingerprint reference: schema validates
|
|
8
8
|
* format only (prefix + hex). Issuers compute values externally; verifiers
|
|
9
9
|
* MUST NOT assume they can recompute the reference.
|
|
10
10
|
*/
|
|
@@ -15,11 +15,11 @@ export declare const CREDENTIAL_EVENT_EXTENSION_KEY: "org.peacprotocol/credentia
|
|
|
15
15
|
*/
|
|
16
16
|
export declare const CREDENTIAL_EVENTS: readonly ["issued", "leased", "rotated", "revoked", "expired"];
|
|
17
17
|
export declare const CredentialEventTypeSchema: z.ZodEnum<{
|
|
18
|
+
expired: "expired";
|
|
18
19
|
issued: "issued";
|
|
19
20
|
leased: "leased";
|
|
20
21
|
rotated: "rotated";
|
|
21
22
|
revoked: "revoked";
|
|
22
|
-
expired: "expired";
|
|
23
23
|
}>;
|
|
24
24
|
export type CredentialEventType = z.infer<typeof CredentialEventTypeSchema>;
|
|
25
25
|
export declare const CredentialRefSchema: z.ZodString;
|
|
@@ -28,11 +28,11 @@ export declare const CredentialRefSchema: z.ZodString;
|
|
|
28
28
|
*/
|
|
29
29
|
export declare const CredentialEventSchema: z.ZodObject<{
|
|
30
30
|
event: z.ZodEnum<{
|
|
31
|
+
expired: "expired";
|
|
31
32
|
issued: "issued";
|
|
32
33
|
leased: "leased";
|
|
33
34
|
rotated: "rotated";
|
|
34
35
|
revoked: "revoked";
|
|
35
|
-
expired: "expired";
|
|
36
36
|
}>;
|
|
37
37
|
credential_ref: z.ZodString;
|
|
38
38
|
authority: z.ZodString;
|
|
@@ -1,5 +1,5 @@
|
|
|
1
1
|
/**
|
|
2
|
-
* Fingerprint Reference Conversion Functions (v0.11.3
|
|
2
|
+
* Fingerprint Reference Conversion Functions (v0.11.3+)
|
|
3
3
|
*
|
|
4
4
|
* Pure string manipulation functions for converting between Wire 0.1
|
|
5
5
|
* string form ("alg:hex64") and Wire 0.2 object form ({ alg, value, key_id? }).
|
|
@@ -1,5 +1,5 @@
|
|
|
1
1
|
/**
|
|
2
|
-
* Treaty Extension Schema (v0.11.3
|
|
2
|
+
* Treaty Extension Schema (v0.11.3+)
|
|
3
3
|
*
|
|
4
4
|
* Records agreement commitment levels in ext["org.peacprotocol/treaty"].
|
|
5
5
|
* 4-level commitment_class vocabulary: informational, operational, financial, legal.
|
|
@@ -14,7 +14,7 @@
|
|
|
14
14
|
import { z } from 'zod';
|
|
15
15
|
export declare const TREATY_EXTENSION_KEY: "org.peacprotocol/treaty";
|
|
16
16
|
/**
|
|
17
|
-
* Commitment class vocabulary
|
|
17
|
+
* Commitment class vocabulary.
|
|
18
18
|
* Ascending levels of binding commitment.
|
|
19
19
|
*/
|
|
20
20
|
export declare const COMMITMENT_CLASSES: readonly ["informational", "operational", "financial", "legal"];
|