@peac/schema 0.12.1 → 0.12.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (76) hide show
  1. package/dist/actor-binding.d.ts +10 -10
  2. package/dist/agent-identity.d.ts +8 -6
  3. package/dist/agent-identity.d.ts.map +1 -1
  4. package/dist/carrier.d.ts +7 -7
  5. package/dist/carrier.d.ts.map +1 -1
  6. package/dist/constraints.d.ts +4 -4
  7. package/dist/constraints.d.ts.map +1 -1
  8. package/dist/extensions/control-action.d.ts +1 -1
  9. package/dist/extensions/credential-event.d.ts +4 -4
  10. package/dist/extensions/fingerprint-ref.d.ts +1 -1
  11. package/dist/extensions/index.d.ts +1 -1
  12. package/dist/extensions/tool-registry.d.ts +1 -1
  13. package/dist/extensions/treaty.d.ts +2 -2
  14. package/dist/index.cjs +733 -44
  15. package/dist/index.cjs.map +1 -1
  16. package/dist/index.d.ts +3 -3
  17. package/dist/index.d.ts.map +1 -1
  18. package/dist/index.mjs +684 -46
  19. package/dist/index.mjs.map +1 -1
  20. package/dist/issuer-config.d.ts +1 -1
  21. package/dist/policy-binding.d.ts +2 -2
  22. package/dist/receipt-parser.cjs +626 -14
  23. package/dist/receipt-parser.cjs.map +1 -1
  24. package/dist/receipt-parser.mjs +627 -15
  25. package/dist/receipt-parser.mjs.map +1 -1
  26. package/dist/subject.d.ts +33 -12
  27. package/dist/subject.d.ts.map +1 -1
  28. package/dist/types.d.ts +1 -1
  29. package/dist/types.d.ts.map +1 -1
  30. package/dist/wire-02-envelope.d.ts +2 -2
  31. package/dist/wire-02-extensions/access.d.ts +19 -0
  32. package/dist/wire-02-extensions/access.d.ts.map +1 -0
  33. package/dist/wire-02-extensions/accessors.d.ts +44 -0
  34. package/dist/wire-02-extensions/accessors.d.ts.map +1 -0
  35. package/dist/wire-02-extensions/attribution.d.ts +44 -0
  36. package/dist/wire-02-extensions/attribution.d.ts.map +1 -0
  37. package/dist/wire-02-extensions/challenge.d.ts +60 -0
  38. package/dist/wire-02-extensions/challenge.d.ts.map +1 -0
  39. package/dist/wire-02-extensions/commerce.d.ts +29 -0
  40. package/dist/wire-02-extensions/commerce.d.ts.map +1 -0
  41. package/dist/wire-02-extensions/compliance.d.ts +49 -0
  42. package/dist/wire-02-extensions/compliance.d.ts.map +1 -0
  43. package/dist/wire-02-extensions/consent.d.ts +48 -0
  44. package/dist/wire-02-extensions/consent.d.ts.map +1 -0
  45. package/dist/wire-02-extensions/correlation.d.ts +18 -0
  46. package/dist/wire-02-extensions/correlation.d.ts.map +1 -0
  47. package/dist/wire-02-extensions/grammar.d.ts +40 -0
  48. package/dist/wire-02-extensions/grammar.d.ts.map +1 -0
  49. package/dist/wire-02-extensions/identity.d.ts +13 -0
  50. package/dist/wire-02-extensions/identity.d.ts.map +1 -0
  51. package/dist/wire-02-extensions/index.d.ts +40 -0
  52. package/dist/wire-02-extensions/index.d.ts.map +1 -0
  53. package/dist/wire-02-extensions/limits.d.ts +80 -0
  54. package/dist/wire-02-extensions/limits.d.ts.map +1 -0
  55. package/dist/wire-02-extensions/privacy.d.ts +64 -0
  56. package/dist/wire-02-extensions/privacy.d.ts.map +1 -0
  57. package/dist/wire-02-extensions/provenance.d.ts +58 -0
  58. package/dist/wire-02-extensions/provenance.d.ts.map +1 -0
  59. package/dist/wire-02-extensions/purpose-extension.d.ts +26 -0
  60. package/dist/wire-02-extensions/purpose-extension.d.ts.map +1 -0
  61. package/dist/wire-02-extensions/safety.d.ts +65 -0
  62. package/dist/wire-02-extensions/safety.d.ts.map +1 -0
  63. package/dist/wire-02-extensions/schema-map.d.ts +13 -0
  64. package/dist/wire-02-extensions/schema-map.d.ts.map +1 -0
  65. package/dist/wire-02-extensions/shared-validators.d.ts +192 -0
  66. package/dist/wire-02-extensions/shared-validators.d.ts.map +1 -0
  67. package/dist/wire-02-extensions/validation.d.ts +57 -0
  68. package/dist/wire-02-extensions/validation.d.ts.map +1 -0
  69. package/dist/wire-02-extensions.d.ts +7 -211
  70. package/dist/wire-02-extensions.d.ts.map +1 -1
  71. package/dist/wire-02-registries.d.ts +5 -2
  72. package/dist/wire-02-registries.d.ts.map +1 -1
  73. package/dist/wire-02-representation.d.ts +3 -3
  74. package/dist/wire-02-warnings.d.ts +5 -1
  75. package/dist/wire-02-warnings.d.ts.map +1 -1
  76. package/package.json +2 -2
@@ -1,8 +1,8 @@
1
1
  /**
2
2
  * ActorBinding and MVIS (Minimum Viable Identity Set) Schemas (v0.11.3+)
3
3
  *
4
- * Implements DD-142 (ActorBinding), DD-143 (Multi-Root Proof Types),
5
- * and DD-144 (MVIS) for the Agent Identity Profile.
4
+ * Implements (ActorBinding) (Multi-Root Proof Types),
5
+ * and (MVIS) for the Agent Identity Profile.
6
6
  *
7
7
  * ActorBinding lives in ext["org.peacprotocol/actor_binding"] in Wire 0.1.
8
8
  * ProofTypeSchema is SEPARATE from ProofMethodSchema (agent-identity.ts)
@@ -12,7 +12,7 @@
12
12
  */
13
13
  import { z } from 'zod';
14
14
  /**
15
- * Proof types for ActorBinding (DD-143).
15
+ * Proof types for ActorBinding.
16
16
  *
17
17
  * 8 methods covering attestation chains, RATS, keyless signing,
18
18
  * decentralized identity, workload identity, PKI, and vendor-defined.
@@ -50,16 +50,16 @@ export declare function isOriginOnly(value: string): boolean;
50
50
  */
51
51
  export declare const ACTOR_BINDING_EXTENSION_KEY: "org.peacprotocol/actor_binding";
52
52
  /**
53
- * ActorBinding schema (DD-142).
53
+ * ActorBinding schema.
54
54
  *
55
55
  * Binds an actor identity to a receipt via ext["org.peacprotocol/actor_binding"].
56
56
  * Wire 0.2 moves this to a kernel field.
57
57
  *
58
58
  * - id: Stable actor identifier (opaque, no PII)
59
- * - proof_type: Trust root model from DD-143 vocabulary
59
+ * - proof_type: Trust root model from vocabulary
60
60
  * - proof_ref: Optional URI or hash of external proof artifact
61
61
  * - origin: Origin-only URL (scheme + host + optional port; no path/query/fragment)
62
- * - intent_hash: Optional SHA-256 hash of the intent (hash-first per DD-138)
62
+ * - intent_hash: Optional SHA-256 hash of the intent (hash-first per )
63
63
  */
64
64
  export declare const ActorBindingSchema: z.ZodObject<{
65
65
  id: z.ZodString;
@@ -79,10 +79,10 @@ export declare const ActorBindingSchema: z.ZodObject<{
79
79
  }, z.core.$strict>;
80
80
  export type ActorBinding = z.infer<typeof ActorBindingSchema>;
81
81
  /**
82
- * MVIS (Minimum Viable Identity Set) fields (DD-144).
82
+ * MVIS (Minimum Viable Identity Set) fields.
83
83
  *
84
84
  * 5 required fields for any identity receipt to be considered complete.
85
- * validateMVIS() is a pure validation function with zero I/O (DD-141).
85
+ * validateMVIS() is a pure validation function with zero I/O.
86
86
  *
87
87
  * Fields:
88
88
  * - issuer: Who issued the identity assertion
@@ -129,9 +129,9 @@ export declare function validateActorBinding(data: unknown): {
129
129
  error: string;
130
130
  };
131
131
  /**
132
- * Validate MVIS fields (DD-144).
132
+ * Validate MVIS fields.
133
133
  *
134
- * Pure validation function with zero I/O (DD-141).
134
+ * Pure validation function with zero I/O.
135
135
  * Checks that all 5 required fields are present and valid.
136
136
  * Also validates that time_bounds.not_before < time_bounds.not_after.
137
137
  *
@@ -24,12 +24,14 @@ export type ControlType = z.infer<typeof ControlTypeSchema>;
24
24
  */
25
25
  export declare const CONTROL_TYPES: readonly ["operator", "user-delegated"];
26
26
  /**
27
- * Proof method used to establish agent identity.
27
+ * @deprecated ProofMethodSchema is deprecated as of v0.12.2.
28
+ * Transport-level binding methods (HTTP signatures, DPoP, mTLS, JWK thumbprint)
29
+ * are semantically distinct from trust-root models (ProofTypeSchema).
30
+ * This alias remains functional through v0.12.x. No consumer action required now.
31
+ * In v0.13.0, AgentProofSchema.method will migrate to either an inline enum
32
+ * or a dedicated TransportBindingMethodSchema. Remove-not-before: v0.13.0.
28
33
  *
29
- * - 'http-message-signature': RFC 9421 HTTP Message Signatures
30
- * - 'dpop': RFC 9449 DPoP token binding
31
- * - 'mtls': Mutual TLS client certificate
32
- * - 'jwk-thumbprint': JWK Thumbprint confirmation (RFC 7638)
34
+ * @see ProofTypeSchema for the canonical trust-root model schema
33
35
  */
34
36
  export declare const ProofMethodSchema: z.ZodEnum<{
35
37
  "http-message-signature": "http-message-signature";
@@ -39,7 +41,7 @@ export declare const ProofMethodSchema: z.ZodEnum<{
39
41
  }>;
40
42
  export type ProofMethod = z.infer<typeof ProofMethodSchema>;
41
43
  /**
42
- * Array of valid proof methods for runtime checks
44
+ * @deprecated See ProofMethodSchema deprecation note.
43
45
  */
44
46
  export declare const PROOF_METHODS: readonly ["http-message-signature", "dpop", "mtls", "jwk-thumbprint"];
45
47
  /**
@@ -1 +1 @@
1
- {"version":3,"file":"agent-identity.d.ts","sourceRoot":"","sources":["../src/agent-identity.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAO9C;;;;;GAKG;AACH,eAAO,MAAM,iBAAiB;;;EAAyC,CAAC;AACxE,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE5D;;GAEG;AACH,eAAO,MAAM,aAAa,yCAA0C,CAAC;AAMrE;;;;;;;GAOG;AACH,eAAO,MAAM,iBAAiB;;;;;EAK5B,CAAC;AACH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE5D;;GAEG;AACH,eAAO,MAAM,aAAa,uEAAwE,CAAC;AAMnG;;;;GAIG;AACH,eAAO,MAAM,oBAAoB;;;;;;kBAiBtB,CAAC;AACZ,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAMlE;;GAEG;AACH,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;kBAuBlB,CAAC;AACZ,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAM1D;;;;;GAKG;AACH,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBA6B7B,CAAC;AACZ,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAMhF;;GAEG;AACH,eAAO,MAAM,mBAAmB,EAAG,qBAA8B,CAAC;AAElE;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,eAAO,MAAM,8BAA8B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAoBhC,CAAC;AACZ,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AAMtF;;;;GAIG;AACH,eAAO,MAAM,qBAAqB;;;;;kBAcvB,CAAC;AACZ,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAMpE;;;;;GAKG;AACH,eAAO,MAAM,2BAA2B;;;;;;;;;kBAiB7B,CAAC;AACZ,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAMhF;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,gCAAgC,CAC9C,IAAI,EAAE,OAAO,GACZ;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,wBAAwB,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAM9E;AAED;;;;;GAKG;AACH,wBAAgB,0BAA0B,CAAC,WAAW,EAAE;IACtD,IAAI,EAAE,MAAM,CAAC;CACd,GAAG,WAAW,IAAI,wBAAwB,CAE1C;AAED;;GAEG;AACH,MAAM,WAAW,oCAAoC;IACnD,gCAAgC;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,8BAA8B;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,+CAA+C;IAC/C,YAAY,EAAE,WAAW,CAAC;IAC1B,qCAAqC;IACrC,KAAK,CAAC,EAAE,UAAU,CAAC;IACnB,oCAAoC;IACpC,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,qDAAqD;IACrD,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,mCAAmC;IACnC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,wDAAwD;IACxD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,kDAAkD;IAClD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,8CAA8C;IAC9C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,gDAAgD;IAChD,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,wDAAwD;IACxD,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;CACtC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,8BAA8B,CAC5C,MAAM,EAAE,oCAAoC,GAC3C,wBAAwB,CA4C1B;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,OAAO,GACZ;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,eAAe,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAMrE;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAClC,WAAW,EAAE,wBAAwB,EACrC,SAAS,GAAE,MAAc,GACxB,OAAO,CAOT;AAED;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CACtC,WAAW,EAAE,wBAAwB,EACrC,SAAS,GAAE,MAAc,GACxB,OAAO,CAIT"}
1
+ {"version":3,"file":"agent-identity.d.ts","sourceRoot":"","sources":["../src/agent-identity.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAO9C;;;;;GAKG;AACH,eAAO,MAAM,iBAAiB;;;EAAyC,CAAC;AACxE,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE5D;;GAEG;AACH,eAAO,MAAM,aAAa,yCAA0C,CAAC;AAMrE;;;;;;;;;GASG;AACH,eAAO,MAAM,iBAAiB;;;;;EAK5B,CAAC;AACH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE5D;;GAEG;AACH,eAAO,MAAM,aAAa,uEAAwE,CAAC;AAMnG;;;;GAIG;AACH,eAAO,MAAM,oBAAoB;;;;;;kBAiBtB,CAAC;AACZ,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAMlE;;GAEG;AACH,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;kBA0BlB,CAAC;AACZ,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAM1D;;;;;GAKG;AACH,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBA6B7B,CAAC;AACZ,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAMhF;;GAEG;AACH,eAAO,MAAM,mBAAmB,EAAG,qBAA8B,CAAC;AAElE;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,eAAO,MAAM,8BAA8B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAoBhC,CAAC;AACZ,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AAMtF;;;;GAIG;AACH,eAAO,MAAM,qBAAqB;;;;;kBAcvB,CAAC;AACZ,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAMpE;;;;;GAKG;AACH,eAAO,MAAM,2BAA2B;;;;;;;;;kBAiB7B,CAAC;AACZ,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAMhF;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,gCAAgC,CAC9C,IAAI,EAAE,OAAO,GACZ;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,wBAAwB,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAM9E;AAED;;;;;GAKG;AACH,wBAAgB,0BAA0B,CAAC,WAAW,EAAE;IACtD,IAAI,EAAE,MAAM,CAAC;CACd,GAAG,WAAW,IAAI,wBAAwB,CAE1C;AAED;;GAEG;AACH,MAAM,WAAW,oCAAoC;IACnD,gCAAgC;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,8BAA8B;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,+CAA+C;IAC/C,YAAY,EAAE,WAAW,CAAC;IAC1B,qCAAqC;IACrC,KAAK,CAAC,EAAE,UAAU,CAAC;IACnB,oCAAoC;IACpC,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,qDAAqD;IACrD,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,mCAAmC;IACnC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,wDAAwD;IACxD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,kDAAkD;IAClD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,8CAA8C;IAC9C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,gDAAgD;IAChD,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,wDAAwD;IACxD,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;CACtC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,8BAA8B,CAC5C,MAAM,EAAE,oCAAoC,GAC3C,wBAAwB,CA4C1B;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,OAAO,GACZ;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,eAAe,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAMrE;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAClC,WAAW,EAAE,wBAAwB,EACrC,SAAS,GAAE,MAAc,GACxB,OAAO,CAOT;AAED;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CACtC,WAAW,EAAE,wBAAwB,EACrC,SAAS,GAAE,MAAc,GACxB,OAAO,CAIT"}
package/dist/carrier.d.ts CHANGED
@@ -1,5 +1,5 @@
1
1
  /**
2
- * Evidence Carrier Contract schemas and helpers (DD-124)
2
+ * Evidence Carrier Contract schemas and helpers
3
3
  *
4
4
  * Zod validation schemas for PeacEvidenceCarrier and CarrierMeta,
5
5
  * plus the canonical computeReceiptRef() and validateCarrierConstraints()
@@ -7,7 +7,7 @@
7
7
  */
8
8
  import { z } from 'zod';
9
9
  import type { CarrierMeta, CarrierValidationResult, PeacEvidenceCarrier, ReceiptRef } from '@peac/kernel';
10
- /** Maximum carrier size per transport (DD-127) */
10
+ /** Maximum carrier size per transport */
11
11
  export declare const CARRIER_TRANSPORT_LIMITS: {
12
12
  /** MCP _meta: 64 KB */
13
13
  readonly mcp: 65536;
@@ -34,8 +34,8 @@ export declare const CarrierFormatSchema: z.ZodEnum<{
34
34
  reference: "reference";
35
35
  }>;
36
36
  /**
37
- * Validates receipt_url: HTTPS-only, max 2048 chars, no credentials (DD-135).
38
- * Validation only (DD-141): no I/O, no fetch. Resolution lives in Layer 4.
37
+ * Validates receipt_url: HTTPS-only, max 2048 chars, no credentials.
38
+ * Validation only: no I/O, no fetch. Resolution lives in Layer 4.
39
39
  */
40
40
  export declare const ReceiptUrlSchema: z.ZodString;
41
41
  /** Schema for PeacEvidenceCarrier */
@@ -70,7 +70,7 @@ export declare const CarrierMetaSchema: z.ZodObject<{
70
70
  */
71
71
  export declare function computeReceiptRef(jws: string): Promise<ReceiptRef>;
72
72
  /**
73
- * Canonical carrier constraint validator (DD-127, DD-129, DD-131).
73
+ * Canonical carrier constraint validator.
74
74
  *
75
75
  * Validates a carrier against transport-specific constraints using
76
76
  * the provided CarrierMeta. This is the single validation function
@@ -80,12 +80,12 @@ export declare function computeReceiptRef(jws: string): Promise<ReceiptRef>;
80
80
  * 1. receipt_ref format (sha256:<hex64>)
81
81
  * 2. receipt_jws format (if present): valid compact JWS
82
82
  * 3. Total serialized size within meta.max_size
83
- * 4. If receipt_jws present: receipt_ref consistency (DD-129)
83
+ * 4. If receipt_jws present: receipt_ref consistency
84
84
  * 5. All string fields within MAX_STRING_LENGTH
85
85
  */
86
86
  export declare function validateCarrierConstraints(carrier: PeacEvidenceCarrier, meta: CarrierMeta): CarrierValidationResult;
87
87
  /**
88
- * Verify receipt_ref consistency with receipt_jws (DD-129).
88
+ * Verify receipt_ref consistency with receipt_jws.
89
89
  *
90
90
  * If both receipt_ref and receipt_jws are present, verifies that
91
91
  * sha256(receipt_jws) equals receipt_ref. This prevents carrier
@@ -1 +1 @@
1
- {"version":3,"file":"carrier.d.ts","sourceRoot":"","sources":["../src/carrier.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,KAAK,EAEV,WAAW,EACX,uBAAuB,EACvB,mBAAmB,EACnB,UAAU,EACX,MAAM,cAAc,CAAC;AAQtB,kDAAkD;AAClD,eAAO,MAAM,wBAAwB;IACnC,uBAAuB;;IAEvB,0BAA0B;;IAE1B,mDAAmD;;;IAGnD,8BAA8B;;IAE9B,oDAAoD;;;IAGpD,8BAA8B;;CAEtB,CAAC;AAMX,6EAA6E;AAC7E,eAAO,MAAM,gBAAgB,aAEiD,CAAC;AAE/E,0EAA0E;AAC1E,eAAO,MAAM,gBAAgB,aAK1B,CAAC;AAEJ,4BAA4B;AAC5B,eAAO,MAAM,mBAAmB;;;EAAiC,CAAC;AAElE;;;GAGG;AACH,eAAO,MAAM,gBAAgB,aAmB1B,CAAC;AAEJ,qCAAqC;AACrC,eAAO,MAAM,yBAAyB;;;;;;;;;;;iBAWpC,CAAC;AAEH,6BAA6B;AAC7B,eAAO,MAAM,iBAAiB;;;;;;;;iBAK5B,CAAC;AAMH;;;;;;GAMG;AACH,wBAAsB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAaxE;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,mBAAmB,EAC5B,IAAI,EAAE,WAAW,GAChB,uBAAuB,CAwDzB;AAED;;;;;;;;;GASG;AACH,wBAAsB,2BAA2B,CAC/C,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CASxB;AAMD,YAAY,EACV,aAAa,EACb,WAAW,EACX,uBAAuB,EACvB,mBAAmB,EACnB,UAAU,EACV,cAAc,GACf,MAAM,cAAc,CAAC"}
1
+ {"version":3,"file":"carrier.d.ts","sourceRoot":"","sources":["../src/carrier.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,KAAK,EAEV,WAAW,EACX,uBAAuB,EACvB,mBAAmB,EACnB,UAAU,EACX,MAAM,cAAc,CAAC;AAQtB,yCAAyC;AACzC,eAAO,MAAM,wBAAwB;IACnC,uBAAuB;;IAEvB,0BAA0B;;IAE1B,mDAAmD;;;IAGnD,8BAA8B;;IAE9B,oDAAoD;;;IAGpD,8BAA8B;;CAEtB,CAAC;AAMX,6EAA6E;AAC7E,eAAO,MAAM,gBAAgB,aAEiD,CAAC;AAE/E,0EAA0E;AAC1E,eAAO,MAAM,gBAAgB,aAK1B,CAAC;AAEJ,4BAA4B;AAC5B,eAAO,MAAM,mBAAmB;;;EAAiC,CAAC;AAElE;;;GAGG;AACH,eAAO,MAAM,gBAAgB,aAmB1B,CAAC;AAEJ,qCAAqC;AACrC,eAAO,MAAM,yBAAyB;;;;;;;;;;;iBAWpC,CAAC;AAEH,6BAA6B;AAC7B,eAAO,MAAM,iBAAiB;;;;;;;;iBAK5B,CAAC;AAMH;;;;;;GAMG;AACH,wBAAsB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAaxE;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,mBAAmB,EAC5B,IAAI,EAAE,WAAW,GAChB,uBAAuB,CAwDzB;AAED;;;;;;;;;GASG;AACH,wBAAsB,2BAA2B,CAC/C,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CASxB;AAMD,YAAY,EACV,aAAa,EACb,WAAW,EACX,uBAAuB,EACvB,mBAAmB,EACnB,UAAU,EACV,cAAc,GACf,MAAM,cAAc,CAAC"}
@@ -4,13 +4,13 @@
4
4
  * These limits are formalized from existing ad-hoc limits already
5
5
  * enforced in the codebase:
6
6
  * - JSON_EVIDENCE_LIMITS (json.ts): depth, array, keys, string, nodes
7
- * - CLOCK_SKEW_SECONDS (DD-8): temporal validity tolerance
7
+ * - CLOCK_SKEW_SECONDS: temporal validity tolerance
8
8
  *
9
9
  * String length is measured in code units (.length), matching the semantics
10
10
  * of assertJsonSafeIterative(). UTF-8 byte-length caps may be introduced
11
11
  * as an explicit tightening in a future version.
12
12
  *
13
- * Payment/rail-specific limits (DD-16 x402 DoS guards) are intentionally
13
+ * Payment/rail-specific limits (x402 DoS guards) are intentionally
14
14
  * NOT included here -- they belong in the rail/adapter layer.
15
15
  */
16
16
  /**
@@ -19,7 +19,7 @@
19
19
  *
20
20
  * Provenance:
21
21
  * - MAX_NESTED_DEPTH..MAX_TOTAL_NODES: from JSON_EVIDENCE_LIMITS (json.ts)
22
- * - CLOCK_SKEW_SECONDS: from DD-8 temporal validity
22
+ * - CLOCK_SKEW_SECONDS: from temporal validity
23
23
  */
24
24
  export declare const KERNEL_CONSTRAINTS: {
25
25
  /** Maximum nesting depth for JSON evidence */
@@ -32,7 +32,7 @@ export declare const KERNEL_CONSTRAINTS: {
32
32
  readonly MAX_STRING_LENGTH: 65536;
33
33
  /** Maximum total nodes to visit during traversal */
34
34
  readonly MAX_TOTAL_NODES: 100000;
35
- /** Temporal validity clock skew tolerance in seconds (DD-8) */
35
+ /** Temporal validity clock skew tolerance in seconds */
36
36
  readonly CLOCK_SKEW_SECONDS: 60;
37
37
  };
38
38
  export type KernelConstraintKey = keyof typeof KERNEL_CONSTRAINTS;
@@ -1 +1 @@
1
- {"version":3,"file":"constraints.d.ts","sourceRoot":"","sources":["../src/constraints.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAMH;;;;;;;GAOG;AACH,eAAO,MAAM,kBAAkB;IAC7B,8CAA8C;;IAE9C,uCAAuC;;IAEvC,6CAA6C;;IAE7C,yFAAyF;;IAEzF,oDAAoD;;IAEpD,+DAA+D;;CAEvD,CAAC;AAEX,MAAM,MAAM,mBAAmB,GAAG,MAAM,OAAO,kBAAkB,CAAC;AAMlE,MAAM,WAAW,mBAAmB;IAClC,UAAU,EAAE,mBAAmB,CAAC;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,0BAA0B;IACzC,KAAK,EAAE,OAAO,CAAC;IACf,UAAU,EAAE,mBAAmB,EAAE,CAAC;CACnC;AAMD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,OAAO,GAAG,0BAA0B,CAwGrF"}
1
+ {"version":3,"file":"constraints.d.ts","sourceRoot":"","sources":["../src/constraints.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAMH;;;;;;;GAOG;AACH,eAAO,MAAM,kBAAkB;IAC7B,8CAA8C;;IAE9C,uCAAuC;;IAEvC,6CAA6C;;IAE7C,yFAAyF;;IAEzF,oDAAoD;;IAEpD,wDAAwD;;CAEhD,CAAC;AAEX,MAAM,MAAM,mBAAmB,GAAG,MAAM,OAAO,kBAAkB,CAAC;AAMlE,MAAM,WAAW,mBAAmB;IAClC,UAAU,EAAE,mBAAmB,CAAC;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,0BAA0B;IACzC,KAAK,EAAE,OAAO,CAAC;IACf,UAAU,EAAE,mBAAmB,EAAE,CAAC;CACnC;AAMD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,OAAO,GAAG,0BAA0B,CAwGrF"}
@@ -1,5 +1,5 @@
1
1
  /**
2
- * Control Action Extension Schema (v0.11.3+, DD-145 ZT Pack)
2
+ * Control Action Extension Schema (v0.11.3+ ZT Pack)
3
3
  *
4
4
  * Records access control decisions in ext["org.peacprotocol/control_action"].
5
5
  * Actions: grant, deny, escalate, delegate, audit.
@@ -1,10 +1,10 @@
1
1
  /**
2
- * Credential Event Extension Schema (v0.11.3+, DD-145 ZT Pack)
2
+ * Credential Event Extension Schema (v0.11.3+ ZT Pack)
3
3
  *
4
4
  * Records credential lifecycle events in ext["org.peacprotocol/credential_event"].
5
5
  * Events: issued, leased, rotated, revoked, expired.
6
6
  *
7
- * credential_ref is an opaque fingerprint reference (DD-146): schema validates
7
+ * credential_ref is an opaque fingerprint reference: schema validates
8
8
  * format only (prefix + hex). Issuers compute values externally; verifiers
9
9
  * MUST NOT assume they can recompute the reference.
10
10
  */
@@ -15,11 +15,11 @@ export declare const CREDENTIAL_EVENT_EXTENSION_KEY: "org.peacprotocol/credentia
15
15
  */
16
16
  export declare const CREDENTIAL_EVENTS: readonly ["issued", "leased", "rotated", "revoked", "expired"];
17
17
  export declare const CredentialEventTypeSchema: z.ZodEnum<{
18
+ expired: "expired";
18
19
  issued: "issued";
19
20
  leased: "leased";
20
21
  rotated: "rotated";
21
22
  revoked: "revoked";
22
- expired: "expired";
23
23
  }>;
24
24
  export type CredentialEventType = z.infer<typeof CredentialEventTypeSchema>;
25
25
  export declare const CredentialRefSchema: z.ZodString;
@@ -28,11 +28,11 @@ export declare const CredentialRefSchema: z.ZodString;
28
28
  */
29
29
  export declare const CredentialEventSchema: z.ZodObject<{
30
30
  event: z.ZodEnum<{
31
+ expired: "expired";
31
32
  issued: "issued";
32
33
  leased: "leased";
33
34
  rotated: "rotated";
34
35
  revoked: "revoked";
35
- expired: "expired";
36
36
  }>;
37
37
  credential_ref: z.ZodString;
38
38
  authority: z.ZodString;
@@ -1,5 +1,5 @@
1
1
  /**
2
- * Fingerprint Reference Conversion Functions (v0.11.3+, DD-146)
2
+ * Fingerprint Reference Conversion Functions (v0.11.3+)
3
3
  *
4
4
  * Pure string manipulation functions for converting between Wire 0.1
5
5
  * string form ("alg:hex64") and Wire 0.2 object form ({ alg, value, key_id? }).
@@ -1,5 +1,5 @@
1
1
  /**
2
- * PEAC Protocol Extension Schemas (v0.11.3+, DD-145 ZT Pack)
2
+ * PEAC Protocol Extension Schemas (v0.11.3+ ZT Pack)
3
3
  *
4
4
  * Zero Trust extension schemas for use in ext[] with reverse-DNS keys.
5
5
  */
@@ -1,5 +1,5 @@
1
1
  /**
2
- * Tool Registry Extension Schema (v0.11.3+, DD-145 ZT Pack)
2
+ * Tool Registry Extension Schema (v0.11.3+ ZT Pack)
3
3
  *
4
4
  * Records tool registration and capability declarations in
5
5
  * ext["org.peacprotocol/tool_registry"].
@@ -1,5 +1,5 @@
1
1
  /**
2
- * Treaty Extension Schema (v0.11.3+, DD-147)
2
+ * Treaty Extension Schema (v0.11.3+)
3
3
  *
4
4
  * Records agreement commitment levels in ext["org.peacprotocol/treaty"].
5
5
  * 4-level commitment_class vocabulary: informational, operational, financial, legal.
@@ -14,7 +14,7 @@
14
14
  import { z } from 'zod';
15
15
  export declare const TREATY_EXTENSION_KEY: "org.peacprotocol/treaty";
16
16
  /**
17
- * Commitment class vocabulary (DD-147).
17
+ * Commitment class vocabulary.
18
18
  * Ascending levels of binding commitment.
19
19
  */
20
20
  export declare const COMMITMENT_CLASSES: readonly ["informational", "operational", "financial", "legal"];