@sealkeeper/schema 0.4.6 → 0.4.8

package/dist/conformance.d.ts

@@ -0,0 +1,4 @@
+export * from './fingerprint-conformance.js';
+export * from './handshake-conformance.js';
+export * from './seal-conformance.js';
+export * from './template-conformance.js';

package/dist/conformance.js

@@ -0,0 +1,7 @@
+// The ./conformance entry. Fixtures other verifiers and solvers are held
+// to, kept out of the root entry so the CLI bundle and the public API stay
+// free of them.
+export * from './fingerprint-conformance.js';
+export * from './handshake-conformance.js';
+export * from './seal-conformance.js';
+export * from './template-conformance.js';

package/dist/credential.d.ts

@@ -7,15 +7,13 @@ export declare function acceptedIssuer(iss: unknown, nowSeconds: number): boolea
 export declare const WELL_KNOWN_PATH = "/.well-known/seal.json";
 export declare const LEGACY_WELL_KNOWN_PATH = "/.well-known/vouched.json";
 export declare const WELL_KNOWN_URL = "https://sealkeeper.run/.well-known/seal.json";
-export declare const LEGACY_WELL_KNOWN_URL = "https://vouched.run/.well-known/vouched.json";
 export declare const SEAL_EXTENSION_URI = "https://sealkeeper.run/ext/seal/v1";
 export declare const LEGACY_SEAL_EXTENSION_URI = "https://vouched.run/ext/seal/v1";
 export declare const CREDENTIAL_EXTENSION_URI = "https://vouched.run/ext/credential/v1";
 export declare const LEGACY_SEAL_EXTENSION_URIS: readonly string[];
 export declare const SEAL_EXTENSION_URIS: readonly string[];
 export declare const SEAL_VERSION = 1;
-export declare const SEAL_VERSIONS: readonly [1, 2];
-export declare const LEGACY_UNTIL: number;
+export declare const SEAL_VERSIONS: readonly [1, 2, 3];
 export declare const IdentityKind: z.ZodUnion<readonly [z.ZodEnum<{
     kya: "kya";
     oidc: "oidc";
@@ -43,6 +41,17 @@ export type IdentityReference = z.infer<typeof IdentityReference>;
 export declare const operatorVerified: (identity: readonly IdentityReference[]) => boolean;
 export declare const SEAL_MAX_TTL_SECONDS: number;
 export declare const SEAL_CLOCK_SKEW_SECONDS = 300;
+export declare const SealState: z.ZodEnum<{
+    changed: "changed";
+    matches: "matches";
+    provisional: "provisional";
+}>;
+export type SealState = z.infer<typeof SealState>;
+export declare const SealFingerprint: z.ZodNullable<z.ZodObject<{
+    hash: z.ZodString;
+    at: z.ZodInt;
+}, z.core.$strict>>;
+export type SealFingerprint = z.infer<typeof SealFingerprint>;
 export declare const CredentialPayload: z.ZodObject<{
     iss: z.ZodLiteral<"sealkeeper.run">;
     sub: z.ZodString;
@@ -62,7 +71,7 @@ export declare const CredentialPayload: z.ZodObject<{
         provenance: "provenance";
         reliability: "reliability";
         safety: "safety";
-    }>, z.ZodTemplateLiteral<`competence:${string}`>]> & z.core.$partial, z.ZodNullable<z.ZodNumber>>;
+    }>, z.ZodTemplateLiteral<"competence:code" | "competence:conversation" | "competence:data" | "competence:operations" | "competence:other" | "competence:research" | "competence:writing">]> & z.core.$partial, z.ZodNullable<z.ZodNumber>>;
     counts: z.ZodObject<{
         events: z.ZodInt;
         history_days: z.ZodInt;
@@ -115,7 +124,7 @@ export declare const CredentialPayloadV2: z.ZodObject<{
         provenance: "provenance";
         reliability: "reliability";
         safety: "safety";
-    }>, z.ZodTemplateLiteral<`competence:${string}`>]> & z.core.$partial, z.ZodNullable<z.ZodNumber>>;
+    }>, z.ZodTemplateLiteral<"competence:code" | "competence:conversation" | "competence:data" | "competence:operations" | "competence:other" | "competence:research" | "competence:writing">]> & z.core.$partial, z.ZodNullable<z.ZodNumber>>;
     counts: z.ZodObject<{
         events: z.ZodInt;
         history_days: z.ZodInt;
@@ -155,25 +164,78 @@ export declare const CredentialPayloadV2: z.ZodObject<{
     dormant_days: z.ZodNullable<z.ZodInt>;
 }, z.core.$strict>;
 export type CredentialPayloadV2 = z.infer<typeof CredentialPayloadV2>;
-export declare const LegacyCredentialPayload: z.ZodObject<{
+export declare const CredentialPayloadV3: z.ZodObject<{
     iss: z.ZodLiteral<"sealkeeper.run">;
     sub: z.ZodString;
+    ver: z.ZodLiteral<3>;
     iat: z.ZodInt;
     exp: z.ZodInt;
-    version: z.ZodString;
+    agent_version: z.ZodString;
+    level: z.ZodEnum<{
+        bronze: "bronze";
+        gold: "gold";
+        none: "none";
+        silver: "silver";
+    }>;
     scores: z.ZodRecord<z.ZodUnion<readonly [z.ZodEnum<{
         cost_latency: "cost_latency";
         provenance: "provenance";
         reliability: "reliability";
         safety: "safety";
-    }>, z.ZodTemplateLiteral<`competence:${string}`>]> & z.core.$partial, z.ZodNullable<z.ZodNumber>>;
+    }>, z.ZodTemplateLiteral<"competence:code" | "competence:conversation" | "competence:data" | "competence:operations" | "competence:other" | "competence:research" | "competence:writing">]> & z.core.$partial, z.ZodNullable<z.ZodNumber>>;
     counts: z.ZodObject<{
         events: z.ZodInt;
+        history_days: z.ZodInt;
         verified_tasks: z.ZodInt;
-        seed_tasks: z.ZodOptional<z.ZodInt>;
+        seed_tasks: z.ZodInt;
+        server_checked_tasks: z.ZodInt;
+        confirmed_tasks: z.ZodInt;
+        distinct_operators: z.ZodInt;
+        safety_incidents_90d: z.ZodInt;
+        posted_tasks: z.ZodInt;
+        posted_distinct_operators: z.ZodInt;
+        posted_confirmed_tasks: z.ZodInt;
     }, z.core.$strict>;
+    counted: z.ZodObject<{
+        verified_tasks: z.ZodInt;
+        seed_tasks: z.ZodInt;
+        server_checked_tasks: z.ZodInt;
+        confirmed_tasks: z.ZodInt;
+        posted_tasks: z.ZodInt;
+        posted_confirmed_tasks: z.ZodInt;
+    }, z.core.$strict>;
+    fingerprint: z.ZodNullable<z.ZodObject<{
+        hash: z.ZodString;
+        at: z.ZodInt;
+    }, z.core.$strict>>;
+    state: z.ZodEnum<{
+        changed: "changed";
+        matches: "matches";
+        provisional: "provisional";
+    }>;
+    operator: z.ZodObject<{
+        verified: z.ZodBoolean;
+    }, z.core.$strict>;
+    identity: z.ZodArray<z.ZodObject<{
+        provider: z.ZodURL;
+        kind: z.ZodUnion<readonly [z.ZodEnum<{
+            kya: "kya";
+            oidc: "oidc";
+            saml: "saml";
+            verifiable_credential: "verifiable_credential";
+        }>, z.ZodURL]>;
+        ref: z.ZodString;
+        subject_hash: z.ZodString;
+        attested_at: z.ZodInt;
+        scope: z.ZodEnum<{
+            agent: "agent";
+            operator: "operator";
+        }>;
+    }, z.core.$strict>>;
+    last_active: z.ZodNullable<z.ZodInt>;
+    dormant_days: z.ZodNullable<z.ZodInt>;
 }, z.core.$strict>;
-export type LegacyCredentialPayload = z.infer<typeof LegacyCredentialPayload>;
+export type CredentialPayloadV3 = z.infer<typeof CredentialPayloadV3>;
 export declare const VerifiedCredentialPayload: z.ZodObject<{
     iss: z.ZodEnum<{
         "sealkeeper.run": "sealkeeper.run";
@@ -196,7 +258,7 @@ export declare const VerifiedCredentialPayload: z.ZodObject<{
         provenance: "provenance";
         reliability: "reliability";
         safety: "safety";
-    }>, z.ZodTemplateLiteral<`competence:${string}`>]> & z.core.$partial, z.ZodNullable<z.ZodNumber>>;
+    }>, z.ZodTemplateLiteral<"competence:code" | "competence:conversation" | "competence:data" | "competence:operations" | "competence:other" | "competence:research" | "competence:writing">, z.ZodTemplateLiteral<`competence:${string}`>]> & z.core.$partial, z.ZodNullable<z.ZodNumber>>;
     counts: z.ZodObject<{
         events: z.ZodInt;
         history_days: z.ZodInt;
@@ -252,7 +314,7 @@ export declare const VerifiedCredentialPayloadV2: z.ZodObject<{
         provenance: "provenance";
         reliability: "reliability";
         safety: "safety";
-    }>, z.ZodTemplateLiteral<`competence:${string}`>]> & z.core.$partial, z.ZodNullable<z.ZodNumber>>;
+    }>, z.ZodTemplateLiteral<"competence:code" | "competence:conversation" | "competence:data" | "competence:operations" | "competence:other" | "competence:research" | "competence:writing">, z.ZodTemplateLiteral<`competence:${string}`>]> & z.core.$partial, z.ZodNullable<z.ZodNumber>>;
     counts: z.ZodObject<{
         events: z.ZodInt;
         history_days: z.ZodInt;
@@ -292,28 +354,81 @@ export declare const VerifiedCredentialPayloadV2: z.ZodObject<{
     dormant_days: z.ZodNullable<z.ZodInt>;
 }, z.core.$strict>;
 export type VerifiedCredentialPayloadV2 = z.infer<typeof VerifiedCredentialPayloadV2>;
-export declare const VerifiedLegacyCredentialPayload: z.ZodObject<{
+export declare const VerifiedCredentialPayloadV3: z.ZodObject<{
     iss: z.ZodEnum<{
         "sealkeeper.run": "sealkeeper.run";
         "vouched.run": "vouched.run";
     }>;
     sub: z.ZodString;
+    ver: z.ZodLiteral<3>;
     iat: z.ZodInt;
     exp: z.ZodInt;
-    version: z.ZodString;
+    agent_version: z.ZodString;
+    level: z.ZodEnum<{
+        bronze: "bronze";
+        gold: "gold";
+        none: "none";
+        silver: "silver";
+    }>;
     scores: z.ZodRecord<z.ZodUnion<readonly [z.ZodEnum<{
         cost_latency: "cost_latency";
         provenance: "provenance";
         reliability: "reliability";
         safety: "safety";
-    }>, z.ZodTemplateLiteral<`competence:${string}`>]> & z.core.$partial, z.ZodNullable<z.ZodNumber>>;
+    }>, z.ZodTemplateLiteral<"competence:code" | "competence:conversation" | "competence:data" | "competence:operations" | "competence:other" | "competence:research" | "competence:writing">, z.ZodTemplateLiteral<`competence:${string}`>]> & z.core.$partial, z.ZodNullable<z.ZodNumber>>;
     counts: z.ZodObject<{
         events: z.ZodInt;
+        history_days: z.ZodInt;
+        verified_tasks: z.ZodInt;
+        seed_tasks: z.ZodInt;
+        server_checked_tasks: z.ZodInt;
+        confirmed_tasks: z.ZodInt;
+        distinct_operators: z.ZodInt;
+        safety_incidents_90d: z.ZodInt;
+        posted_tasks: z.ZodInt;
+        posted_distinct_operators: z.ZodInt;
+        posted_confirmed_tasks: z.ZodInt;
+    }, z.core.$strict>;
+    counted: z.ZodObject<{
         verified_tasks: z.ZodInt;
-        seed_tasks: z.ZodOptional<z.ZodInt>;
+        seed_tasks: z.ZodInt;
+        server_checked_tasks: z.ZodInt;
+        confirmed_tasks: z.ZodInt;
+        posted_tasks: z.ZodInt;
+        posted_confirmed_tasks: z.ZodInt;
     }, z.core.$strict>;
+    fingerprint: z.ZodNullable<z.ZodObject<{
+        hash: z.ZodString;
+        at: z.ZodInt;
+    }, z.core.$strict>>;
+    state: z.ZodEnum<{
+        changed: "changed";
+        matches: "matches";
+        provisional: "provisional";
+    }>;
+    operator: z.ZodObject<{
+        verified: z.ZodBoolean;
+    }, z.core.$strict>;
+    identity: z.ZodArray<z.ZodObject<{
+        provider: z.ZodURL;
+        kind: z.ZodUnion<readonly [z.ZodEnum<{
+            kya: "kya";
+            oidc: "oidc";
+            saml: "saml";
+            verifiable_credential: "verifiable_credential";
+        }>, z.ZodURL]>;
+        ref: z.ZodString;
+        subject_hash: z.ZodString;
+        attested_at: z.ZodInt;
+        scope: z.ZodEnum<{
+            agent: "agent";
+            operator: "operator";
+        }>;
+    }, z.core.$strict>>;
+    last_active: z.ZodNullable<z.ZodInt>;
+    dormant_days: z.ZodNullable<z.ZodInt>;
 }, z.core.$strict>;
-export type VerifiedLegacyCredentialPayload = z.infer<typeof VerifiedLegacyCredentialPayload>;
+export type VerifiedCredentialPayloadV3 = z.infer<typeof VerifiedCredentialPayloadV3>;
 export declare const SealPayload: z.ZodUnion<readonly [z.ZodObject<{
     iss: z.ZodEnum<{
         "sealkeeper.run": "sealkeeper.run";
@@ -336,7 +451,7 @@ export declare const SealPayload: z.ZodUnion<readonly [z.ZodObject<{
         provenance: "provenance";
         reliability: "reliability";
         safety: "safety";
-    }>, z.ZodTemplateLiteral<`competence:${string}`>]> & z.core.$partial, z.ZodNullable<z.ZodNumber>>;
+    }>, z.ZodTemplateLiteral<"competence:code" | "competence:conversation" | "competence:data" | "competence:operations" | "competence:other" | "competence:research" | "competence:writing">, z.ZodTemplateLiteral<`competence:${string}`>]> & z.core.$partial, z.ZodNullable<z.ZodNumber>>;
     counts: z.ZodObject<{
         events: z.ZodInt;
         history_days: z.ZodInt;
@@ -390,7 +505,7 @@ export declare const SealPayload: z.ZodUnion<readonly [z.ZodObject<{
         provenance: "provenance";
         reliability: "reliability";
         safety: "safety";
-    }>, z.ZodTemplateLiteral<`competence:${string}`>]> & z.core.$partial, z.ZodNullable<z.ZodNumber>>;
+    }>, z.ZodTemplateLiteral<"competence:code" | "competence:conversation" | "competence:data" | "competence:operations" | "competence:other" | "competence:research" | "competence:writing">, z.ZodTemplateLiteral<`competence:${string}`>]> & z.core.$partial, z.ZodNullable<z.ZodNumber>>;
     counts: z.ZodObject<{
         events: z.ZodInt;
         history_days: z.ZodInt;
@@ -434,26 +549,77 @@ export declare const SealPayload: z.ZodUnion<readonly [z.ZodObject<{
         "vouched.run": "vouched.run";
     }>;
     sub: z.ZodString;
+    ver: z.ZodLiteral<3>;
     iat: z.ZodInt;
     exp: z.ZodInt;
-    version: z.ZodString;
+    agent_version: z.ZodString;
+    level: z.ZodEnum<{
+        bronze: "bronze";
+        gold: "gold";
+        none: "none";
+        silver: "silver";
+    }>;
     scores: z.ZodRecord<z.ZodUnion<readonly [z.ZodEnum<{
         cost_latency: "cost_latency";
         provenance: "provenance";
         reliability: "reliability";
         safety: "safety";
-    }>, z.ZodTemplateLiteral<`competence:${string}`>]> & z.core.$partial, z.ZodNullable<z.ZodNumber>>;
+    }>, z.ZodTemplateLiteral<"competence:code" | "competence:conversation" | "competence:data" | "competence:operations" | "competence:other" | "competence:research" | "competence:writing">, z.ZodTemplateLiteral<`competence:${string}`>]> & z.core.$partial, z.ZodNullable<z.ZodNumber>>;
     counts: z.ZodObject<{
         events: z.ZodInt;
+        history_days: z.ZodInt;
+        verified_tasks: z.ZodInt;
+        seed_tasks: z.ZodInt;
+        server_checked_tasks: z.ZodInt;
+        confirmed_tasks: z.ZodInt;
+        distinct_operators: z.ZodInt;
+        safety_incidents_90d: z.ZodInt;
+        posted_tasks: z.ZodInt;
+        posted_distinct_operators: z.ZodInt;
+        posted_confirmed_tasks: z.ZodInt;
+    }, z.core.$strict>;
+    counted: z.ZodObject<{
         verified_tasks: z.ZodInt;
-        seed_tasks: z.ZodOptional<z.ZodInt>;
+        seed_tasks: z.ZodInt;
+        server_checked_tasks: z.ZodInt;
+        confirmed_tasks: z.ZodInt;
+        posted_tasks: z.ZodInt;
+        posted_confirmed_tasks: z.ZodInt;
+    }, z.core.$strict>;
+    fingerprint: z.ZodNullable<z.ZodObject<{
+        hash: z.ZodString;
+        at: z.ZodInt;
+    }, z.core.$strict>>;
+    state: z.ZodEnum<{
+        changed: "changed";
+        matches: "matches";
+        provisional: "provisional";
+    }>;
+    operator: z.ZodObject<{
+        verified: z.ZodBoolean;
     }, z.core.$strict>;
+    identity: z.ZodArray<z.ZodObject<{
+        provider: z.ZodURL;
+        kind: z.ZodUnion<readonly [z.ZodEnum<{
+            kya: "kya";
+            oidc: "oidc";
+            saml: "saml";
+            verifiable_credential: "verifiable_credential";
+        }>, z.ZodURL]>;
+        ref: z.ZodString;
+        subject_hash: z.ZodString;
+        attested_at: z.ZodInt;
+        scope: z.ZodEnum<{
+            agent: "agent";
+            operator: "operator";
+        }>;
+    }, z.core.$strict>>;
+    last_active: z.ZodNullable<z.ZodInt>;
+    dormant_days: z.ZodNullable<z.ZodInt>;
 }, z.core.$strict>]>;
 export type SealPayload = z.infer<typeof SealPayload>;
-export type VersionedSealPayload = VerifiedCredentialPayload | VerifiedCredentialPayloadV2;
-export declare const isSealV1: (p: SealPayload) => p is VersionedSealPayload;
 export declare const sealCounted: (p: SealPayload) => CountedCounts | null;
-export declare function sealVersionProblem(raw: unknown, nowSeconds: number): 'unsupported_version' | null;
+export declare function sealVersionProblem(raw: unknown): 'unsupported_version' | null;
 export declare function sealIatProblem(iat: number, nowSeconds: number): 'not_yet_valid' | null;
 export type SealPayloadResult = {
     ok: true;
@@ -502,13 +668,14 @@ export declare const SealExtension: z.ZodObject<{
     description: z.ZodString;
     params: z.ZodObject<{
         credential: z.ZodString;
+        handshake: z.ZodOptional<z.ZodString>;
     }, z.core.$strict>;
 }, z.core.$strict>;
 export type SealExtension = z.infer<typeof SealExtension>;
 export declare const credentialExtension: (jws: string) => CredentialExtension;
 export declare const legacySealExtension: (jws: string) => LegacySealExtension;
-export declare const sealExtension: (jws: string) => SealExtension;
-export declare const sealExtensions: (jws: string) => ({
+export declare const sealExtension: (jws: string, handshake?: string) => SealExtension;
+export declare const sealExtensions: (jws: string, handshake?: string) => ({
     uri: "https://vouched.run/ext/credential/v1";
     description: string;
     params: {
@@ -525,6 +692,7 @@ export declare const sealExtensions: (jws: string) => ({
     description: string;
     params: {
         credential: string;
+        handshake?: string | undefined;
     };
 })[];
 export declare const A2A_PROTOCOL_VERSION = "0.3.0";
@@ -548,6 +716,7 @@ export declare const AgentCard: z.ZodObject<{
             description: z.ZodString;
             params: z.ZodObject<{
                 credential: z.ZodString;
+                handshake: z.ZodOptional<z.ZodString>;
             }, z.core.$strict>;
         }, z.core.$strict>, z.ZodObject<{
             uri: z.ZodLiteral<"https://vouched.run/ext/seal/v1">;