@vorionsys/contracts 0.1.1 → 0.1.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +44 -0
- package/LICENSE +190 -0
- package/README.md +373 -84
- package/dist/aci/index.d.ts +3 -69
- package/dist/aci/index.d.ts.map +1 -1
- package/dist/aci/index.js +17 -372
- package/dist/aci/index.js.map +1 -1
- package/dist/canonical/agent.d.ts +1 -1
- package/dist/canonical/agent.d.ts.map +1 -1
- package/dist/car/car-string.d.ts +6 -6
- package/dist/car/effective-permission.d.ts +2 -2
- package/dist/car/identity.d.ts +34 -34
- package/dist/car/jwt-claims.d.ts +126 -126
- package/dist/car/tiers.js +6 -6
- package/dist/db/agents.d.ts +545 -5
- package/dist/db/agents.d.ts.map +1 -1
- package/dist/db/api-keys.d.ts +144 -3
- package/dist/db/api-keys.d.ts.map +1 -1
- package/dist/db/escalations.d.ts +156 -2
- package/dist/db/escalations.d.ts.map +1 -1
- package/dist/db/intents.d.ts +154 -3
- package/dist/db/intents.d.ts.map +1 -1
- package/dist/db/merkle.d.ts +134 -3
- package/dist/db/merkle.d.ts.map +1 -1
- package/dist/db/operations.d.ts +71 -2
- package/dist/db/operations.d.ts.map +1 -1
- package/dist/db/policy-versions.d.ts +38 -1
- package/dist/db/policy-versions.d.ts.map +1 -1
- package/dist/db/proofs.d.ts +119 -3
- package/dist/db/proofs.d.ts.map +1 -1
- package/dist/db/rbac.d.ts +233 -6
- package/dist/db/rbac.d.ts.map +1 -1
- package/dist/db/service-accounts.d.ts +218 -6
- package/dist/db/service-accounts.d.ts.map +1 -1
- package/dist/db/trust.d.ts +168 -2
- package/dist/db/trust.d.ts.map +1 -1
- package/dist/db/webhooks.d.ts +103 -1
- package/dist/db/webhooks.d.ts.map +1 -1
- package/dist/v2/proof-event.d.ts +3 -1
- package/dist/v2/proof-event.d.ts.map +1 -1
- package/dist/validators/proof-event.d.ts +3 -0
- package/dist/validators/proof-event.d.ts.map +1 -1
- package/dist/validators/proof-event.js +2 -1
- package/dist/validators/proof-event.js.map +1 -1
- package/package.json +24 -10
- package/dist/aci/aci-string.d.ts +0 -539
- package/dist/aci/aci-string.d.ts.map +0 -1
- package/dist/aci/aci-string.js +0 -581
- package/dist/aci/aci-string.js.map +0 -1
- package/dist/aci/attestation.d.ts +0 -648
- package/dist/aci/attestation.d.ts.map +0 -1
- package/dist/aci/attestation.js +0 -299
- package/dist/aci/attestation.js.map +0 -1
- package/dist/aci/domains.d.ts +0 -260
- package/dist/aci/domains.d.ts.map +0 -1
- package/dist/aci/domains.js +0 -340
- package/dist/aci/domains.js.map +0 -1
- package/dist/aci/effective-permission.d.ts +0 -371
- package/dist/aci/effective-permission.d.ts.map +0 -1
- package/dist/aci/effective-permission.js +0 -364
- package/dist/aci/effective-permission.js.map +0 -1
- package/dist/aci/identity.d.ts +0 -1100
- package/dist/aci/identity.d.ts.map +0 -1
- package/dist/aci/identity.js +0 -338
- package/dist/aci/identity.js.map +0 -1
- package/dist/aci/jwt-claims.d.ts +0 -756
- package/dist/aci/jwt-claims.d.ts.map +0 -1
- package/dist/aci/jwt-claims.js +0 -345
- package/dist/aci/jwt-claims.js.map +0 -1
- package/dist/aci/levels.d.ts +0 -279
- package/dist/aci/levels.d.ts.map +0 -1
- package/dist/aci/levels.js +0 -486
- package/dist/aci/levels.js.map +0 -1
- package/dist/aci/mapping.d.ts +0 -291
- package/dist/aci/mapping.d.ts.map +0 -1
- package/dist/aci/mapping.js +0 -447
- package/dist/aci/mapping.js.map +0 -1
- package/dist/aci/skills.d.ts +0 -314
- package/dist/aci/skills.d.ts.map +0 -1
- package/dist/aci/skills.js +0 -426
- package/dist/aci/skills.js.map +0 -1
- package/dist/aci/tiers.d.ts +0 -403
- package/dist/aci/tiers.d.ts.map +0 -1
- package/dist/aci/tiers.js +0 -686
- package/dist/aci/tiers.js.map +0 -1
package/dist/car/jwt-claims.d.ts
CHANGED
|
@@ -401,8 +401,8 @@ export declare const carJWTClaimsSchema: z.ZodObject<{
|
|
|
401
401
|
car_org: string;
|
|
402
402
|
car_class: string;
|
|
403
403
|
car_version: string;
|
|
404
|
-
aci?: string | undefined;
|
|
405
404
|
sub?: string | undefined;
|
|
405
|
+
aci?: string | undefined;
|
|
406
406
|
jti?: string | undefined;
|
|
407
407
|
iss?: string | undefined;
|
|
408
408
|
aud?: string | string[] | undefined;
|
|
@@ -412,14 +412,17 @@ export declare const carJWTClaimsSchema: z.ZodObject<{
|
|
|
412
412
|
aci_domains?: number | undefined;
|
|
413
413
|
aci_domains_list?: ("A" | "B" | "C" | "D" | "E" | "F" | "G" | "H" | "I" | "S")[] | undefined;
|
|
414
414
|
aci_level?: CapabilityLevel | undefined;
|
|
415
|
+
car_trust?: CertificationTier | undefined;
|
|
415
416
|
aci_trust?: CertificationTier | undefined;
|
|
416
417
|
aci_registry?: string | undefined;
|
|
417
418
|
aci_org?: string | undefined;
|
|
418
419
|
aci_class?: string | undefined;
|
|
419
420
|
aci_version?: string | undefined;
|
|
421
|
+
car_did?: string | undefined;
|
|
420
422
|
aci_did?: string | undefined;
|
|
423
|
+
car_runtime_tier?: RuntimeTier | undefined;
|
|
421
424
|
aci_runtime_tier?: RuntimeTier | undefined;
|
|
422
|
-
|
|
425
|
+
car_attestations?: {
|
|
423
426
|
scope: string;
|
|
424
427
|
tier: CertificationTier;
|
|
425
428
|
iss: string;
|
|
@@ -427,19 +430,7 @@ export declare const carJWTClaimsSchema: z.ZodObject<{
|
|
|
427
430
|
iat: number;
|
|
428
431
|
evidence?: string | undefined;
|
|
429
432
|
}[] | undefined;
|
|
430
|
-
|
|
431
|
-
aci_constraints?: {
|
|
432
|
-
custom?: Record<string, unknown> | undefined;
|
|
433
|
-
requires_approval?: boolean | undefined;
|
|
434
|
-
max_operations?: number | undefined;
|
|
435
|
-
allowed_resources?: string[] | undefined;
|
|
436
|
-
blocked_resources?: string[] | undefined;
|
|
437
|
-
valid_until?: number | undefined;
|
|
438
|
-
} | undefined;
|
|
439
|
-
car_trust?: CertificationTier | undefined;
|
|
440
|
-
car_did?: string | undefined;
|
|
441
|
-
car_runtime_tier?: RuntimeTier | undefined;
|
|
442
|
-
car_attestations?: {
|
|
433
|
+
aci_attestations?: {
|
|
443
434
|
scope: string;
|
|
444
435
|
tier: CertificationTier;
|
|
445
436
|
iss: string;
|
|
@@ -448,6 +439,7 @@ export declare const carJWTClaimsSchema: z.ZodObject<{
|
|
|
448
439
|
evidence?: string | undefined;
|
|
449
440
|
}[] | undefined;
|
|
450
441
|
car_permission_ceiling?: number | undefined;
|
|
442
|
+
aci_permission_ceiling?: number | undefined;
|
|
451
443
|
car_constraints?: {
|
|
452
444
|
custom?: Record<string, unknown> | undefined;
|
|
453
445
|
requires_approval?: boolean | undefined;
|
|
@@ -456,6 +448,14 @@ export declare const carJWTClaimsSchema: z.ZodObject<{
|
|
|
456
448
|
blocked_resources?: string[] | undefined;
|
|
457
449
|
valid_until?: number | undefined;
|
|
458
450
|
} | undefined;
|
|
451
|
+
aci_constraints?: {
|
|
452
|
+
custom?: Record<string, unknown> | undefined;
|
|
453
|
+
requires_approval?: boolean | undefined;
|
|
454
|
+
max_operations?: number | undefined;
|
|
455
|
+
allowed_resources?: string[] | undefined;
|
|
456
|
+
blocked_resources?: string[] | undefined;
|
|
457
|
+
valid_until?: number | undefined;
|
|
458
|
+
} | undefined;
|
|
459
459
|
}, {
|
|
460
460
|
car: string;
|
|
461
461
|
car_domains: number;
|
|
@@ -465,8 +465,8 @@ export declare const carJWTClaimsSchema: z.ZodObject<{
|
|
|
465
465
|
car_org: string;
|
|
466
466
|
car_class: string;
|
|
467
467
|
car_version: string;
|
|
468
|
-
aci?: string | undefined;
|
|
469
468
|
sub?: string | undefined;
|
|
469
|
+
aci?: string | undefined;
|
|
470
470
|
jti?: string | undefined;
|
|
471
471
|
iss?: string | undefined;
|
|
472
472
|
aud?: string | string[] | undefined;
|
|
@@ -476,14 +476,17 @@ export declare const carJWTClaimsSchema: z.ZodObject<{
|
|
|
476
476
|
aci_domains?: number | undefined;
|
|
477
477
|
aci_domains_list?: ("A" | "B" | "C" | "D" | "E" | "F" | "G" | "H" | "I" | "S")[] | undefined;
|
|
478
478
|
aci_level?: CapabilityLevel | undefined;
|
|
479
|
+
car_trust?: CertificationTier | undefined;
|
|
479
480
|
aci_trust?: CertificationTier | undefined;
|
|
480
481
|
aci_registry?: string | undefined;
|
|
481
482
|
aci_org?: string | undefined;
|
|
482
483
|
aci_class?: string | undefined;
|
|
483
484
|
aci_version?: string | undefined;
|
|
485
|
+
car_did?: string | undefined;
|
|
484
486
|
aci_did?: string | undefined;
|
|
487
|
+
car_runtime_tier?: RuntimeTier | undefined;
|
|
485
488
|
aci_runtime_tier?: RuntimeTier | undefined;
|
|
486
|
-
|
|
489
|
+
car_attestations?: {
|
|
487
490
|
scope: string;
|
|
488
491
|
tier: CertificationTier;
|
|
489
492
|
iss: string;
|
|
@@ -491,19 +494,7 @@ export declare const carJWTClaimsSchema: z.ZodObject<{
|
|
|
491
494
|
iat: number;
|
|
492
495
|
evidence?: string | undefined;
|
|
493
496
|
}[] | undefined;
|
|
494
|
-
|
|
495
|
-
aci_constraints?: {
|
|
496
|
-
custom?: Record<string, unknown> | undefined;
|
|
497
|
-
requires_approval?: boolean | undefined;
|
|
498
|
-
max_operations?: number | undefined;
|
|
499
|
-
allowed_resources?: string[] | undefined;
|
|
500
|
-
blocked_resources?: string[] | undefined;
|
|
501
|
-
valid_until?: number | undefined;
|
|
502
|
-
} | undefined;
|
|
503
|
-
car_trust?: CertificationTier | undefined;
|
|
504
|
-
car_did?: string | undefined;
|
|
505
|
-
car_runtime_tier?: RuntimeTier | undefined;
|
|
506
|
-
car_attestations?: {
|
|
497
|
+
aci_attestations?: {
|
|
507
498
|
scope: string;
|
|
508
499
|
tier: CertificationTier;
|
|
509
500
|
iss: string;
|
|
@@ -512,6 +503,7 @@ export declare const carJWTClaimsSchema: z.ZodObject<{
|
|
|
512
503
|
evidence?: string | undefined;
|
|
513
504
|
}[] | undefined;
|
|
514
505
|
car_permission_ceiling?: number | undefined;
|
|
506
|
+
aci_permission_ceiling?: number | undefined;
|
|
515
507
|
car_constraints?: {
|
|
516
508
|
custom?: Record<string, unknown> | undefined;
|
|
517
509
|
requires_approval?: boolean | undefined;
|
|
@@ -520,6 +512,14 @@ export declare const carJWTClaimsSchema: z.ZodObject<{
|
|
|
520
512
|
blocked_resources?: string[] | undefined;
|
|
521
513
|
valid_until?: number | undefined;
|
|
522
514
|
} | undefined;
|
|
515
|
+
aci_constraints?: {
|
|
516
|
+
custom?: Record<string, unknown> | undefined;
|
|
517
|
+
requires_approval?: boolean | undefined;
|
|
518
|
+
max_operations?: number | undefined;
|
|
519
|
+
allowed_resources?: string[] | undefined;
|
|
520
|
+
blocked_resources?: string[] | undefined;
|
|
521
|
+
valid_until?: number | undefined;
|
|
522
|
+
} | undefined;
|
|
523
523
|
}>;
|
|
524
524
|
/** @deprecated Use carJWTClaimsSchema instead */
|
|
525
525
|
export declare const aciJWTClaimsSchema: z.ZodObject<{
|
|
@@ -652,8 +652,8 @@ export declare const aciJWTClaimsSchema: z.ZodObject<{
|
|
|
652
652
|
car_org: string;
|
|
653
653
|
car_class: string;
|
|
654
654
|
car_version: string;
|
|
655
|
-
aci?: string | undefined;
|
|
656
655
|
sub?: string | undefined;
|
|
656
|
+
aci?: string | undefined;
|
|
657
657
|
jti?: string | undefined;
|
|
658
658
|
iss?: string | undefined;
|
|
659
659
|
aud?: string | string[] | undefined;
|
|
@@ -663,14 +663,17 @@ export declare const aciJWTClaimsSchema: z.ZodObject<{
|
|
|
663
663
|
aci_domains?: number | undefined;
|
|
664
664
|
aci_domains_list?: ("A" | "B" | "C" | "D" | "E" | "F" | "G" | "H" | "I" | "S")[] | undefined;
|
|
665
665
|
aci_level?: CapabilityLevel | undefined;
|
|
666
|
+
car_trust?: CertificationTier | undefined;
|
|
666
667
|
aci_trust?: CertificationTier | undefined;
|
|
667
668
|
aci_registry?: string | undefined;
|
|
668
669
|
aci_org?: string | undefined;
|
|
669
670
|
aci_class?: string | undefined;
|
|
670
671
|
aci_version?: string | undefined;
|
|
672
|
+
car_did?: string | undefined;
|
|
671
673
|
aci_did?: string | undefined;
|
|
674
|
+
car_runtime_tier?: RuntimeTier | undefined;
|
|
672
675
|
aci_runtime_tier?: RuntimeTier | undefined;
|
|
673
|
-
|
|
676
|
+
car_attestations?: {
|
|
674
677
|
scope: string;
|
|
675
678
|
tier: CertificationTier;
|
|
676
679
|
iss: string;
|
|
@@ -678,19 +681,7 @@ export declare const aciJWTClaimsSchema: z.ZodObject<{
|
|
|
678
681
|
iat: number;
|
|
679
682
|
evidence?: string | undefined;
|
|
680
683
|
}[] | undefined;
|
|
681
|
-
|
|
682
|
-
aci_constraints?: {
|
|
683
|
-
custom?: Record<string, unknown> | undefined;
|
|
684
|
-
requires_approval?: boolean | undefined;
|
|
685
|
-
max_operations?: number | undefined;
|
|
686
|
-
allowed_resources?: string[] | undefined;
|
|
687
|
-
blocked_resources?: string[] | undefined;
|
|
688
|
-
valid_until?: number | undefined;
|
|
689
|
-
} | undefined;
|
|
690
|
-
car_trust?: CertificationTier | undefined;
|
|
691
|
-
car_did?: string | undefined;
|
|
692
|
-
car_runtime_tier?: RuntimeTier | undefined;
|
|
693
|
-
car_attestations?: {
|
|
684
|
+
aci_attestations?: {
|
|
694
685
|
scope: string;
|
|
695
686
|
tier: CertificationTier;
|
|
696
687
|
iss: string;
|
|
@@ -699,6 +690,7 @@ export declare const aciJWTClaimsSchema: z.ZodObject<{
|
|
|
699
690
|
evidence?: string | undefined;
|
|
700
691
|
}[] | undefined;
|
|
701
692
|
car_permission_ceiling?: number | undefined;
|
|
693
|
+
aci_permission_ceiling?: number | undefined;
|
|
702
694
|
car_constraints?: {
|
|
703
695
|
custom?: Record<string, unknown> | undefined;
|
|
704
696
|
requires_approval?: boolean | undefined;
|
|
@@ -707,6 +699,14 @@ export declare const aciJWTClaimsSchema: z.ZodObject<{
|
|
|
707
699
|
blocked_resources?: string[] | undefined;
|
|
708
700
|
valid_until?: number | undefined;
|
|
709
701
|
} | undefined;
|
|
702
|
+
aci_constraints?: {
|
|
703
|
+
custom?: Record<string, unknown> | undefined;
|
|
704
|
+
requires_approval?: boolean | undefined;
|
|
705
|
+
max_operations?: number | undefined;
|
|
706
|
+
allowed_resources?: string[] | undefined;
|
|
707
|
+
blocked_resources?: string[] | undefined;
|
|
708
|
+
valid_until?: number | undefined;
|
|
709
|
+
} | undefined;
|
|
710
710
|
}, {
|
|
711
711
|
car: string;
|
|
712
712
|
car_domains: number;
|
|
@@ -716,8 +716,8 @@ export declare const aciJWTClaimsSchema: z.ZodObject<{
|
|
|
716
716
|
car_org: string;
|
|
717
717
|
car_class: string;
|
|
718
718
|
car_version: string;
|
|
719
|
-
aci?: string | undefined;
|
|
720
719
|
sub?: string | undefined;
|
|
720
|
+
aci?: string | undefined;
|
|
721
721
|
jti?: string | undefined;
|
|
722
722
|
iss?: string | undefined;
|
|
723
723
|
aud?: string | string[] | undefined;
|
|
@@ -727,14 +727,17 @@ export declare const aciJWTClaimsSchema: z.ZodObject<{
|
|
|
727
727
|
aci_domains?: number | undefined;
|
|
728
728
|
aci_domains_list?: ("A" | "B" | "C" | "D" | "E" | "F" | "G" | "H" | "I" | "S")[] | undefined;
|
|
729
729
|
aci_level?: CapabilityLevel | undefined;
|
|
730
|
+
car_trust?: CertificationTier | undefined;
|
|
730
731
|
aci_trust?: CertificationTier | undefined;
|
|
731
732
|
aci_registry?: string | undefined;
|
|
732
733
|
aci_org?: string | undefined;
|
|
733
734
|
aci_class?: string | undefined;
|
|
734
735
|
aci_version?: string | undefined;
|
|
736
|
+
car_did?: string | undefined;
|
|
735
737
|
aci_did?: string | undefined;
|
|
738
|
+
car_runtime_tier?: RuntimeTier | undefined;
|
|
736
739
|
aci_runtime_tier?: RuntimeTier | undefined;
|
|
737
|
-
|
|
740
|
+
car_attestations?: {
|
|
738
741
|
scope: string;
|
|
739
742
|
tier: CertificationTier;
|
|
740
743
|
iss: string;
|
|
@@ -742,19 +745,7 @@ export declare const aciJWTClaimsSchema: z.ZodObject<{
|
|
|
742
745
|
iat: number;
|
|
743
746
|
evidence?: string | undefined;
|
|
744
747
|
}[] | undefined;
|
|
745
|
-
|
|
746
|
-
aci_constraints?: {
|
|
747
|
-
custom?: Record<string, unknown> | undefined;
|
|
748
|
-
requires_approval?: boolean | undefined;
|
|
749
|
-
max_operations?: number | undefined;
|
|
750
|
-
allowed_resources?: string[] | undefined;
|
|
751
|
-
blocked_resources?: string[] | undefined;
|
|
752
|
-
valid_until?: number | undefined;
|
|
753
|
-
} | undefined;
|
|
754
|
-
car_trust?: CertificationTier | undefined;
|
|
755
|
-
car_did?: string | undefined;
|
|
756
|
-
car_runtime_tier?: RuntimeTier | undefined;
|
|
757
|
-
car_attestations?: {
|
|
748
|
+
aci_attestations?: {
|
|
758
749
|
scope: string;
|
|
759
750
|
tier: CertificationTier;
|
|
760
751
|
iss: string;
|
|
@@ -763,6 +754,7 @@ export declare const aciJWTClaimsSchema: z.ZodObject<{
|
|
|
763
754
|
evidence?: string | undefined;
|
|
764
755
|
}[] | undefined;
|
|
765
756
|
car_permission_ceiling?: number | undefined;
|
|
757
|
+
aci_permission_ceiling?: number | undefined;
|
|
766
758
|
car_constraints?: {
|
|
767
759
|
custom?: Record<string, unknown> | undefined;
|
|
768
760
|
requires_approval?: boolean | undefined;
|
|
@@ -771,6 +763,14 @@ export declare const aciJWTClaimsSchema: z.ZodObject<{
|
|
|
771
763
|
blocked_resources?: string[] | undefined;
|
|
772
764
|
valid_until?: number | undefined;
|
|
773
765
|
} | undefined;
|
|
766
|
+
aci_constraints?: {
|
|
767
|
+
custom?: Record<string, unknown> | undefined;
|
|
768
|
+
requires_approval?: boolean | undefined;
|
|
769
|
+
max_operations?: number | undefined;
|
|
770
|
+
allowed_resources?: string[] | undefined;
|
|
771
|
+
blocked_resources?: string[] | undefined;
|
|
772
|
+
valid_until?: number | undefined;
|
|
773
|
+
} | undefined;
|
|
774
774
|
}>;
|
|
775
775
|
/**
|
|
776
776
|
* Options for generating JWT claims.
|
|
@@ -940,11 +940,11 @@ export declare const jwtClaimsValidationErrorSchema: z.ZodObject<{
|
|
|
940
940
|
message: z.ZodString;
|
|
941
941
|
path: z.ZodOptional<z.ZodString>;
|
|
942
942
|
}, "strip", z.ZodTypeAny, {
|
|
943
|
-
code: "EXPIRED" | "INVALID_FORMAT" | "INVALID_DOMAINS" | "INVALID_LEVEL" | "
|
|
943
|
+
code: "EXPIRED" | "INVALID_FORMAT" | "INVALID_DOMAINS" | "INVALID_LEVEL" | "MISSING_CAR" | "INVALID_CAR" | "NOT_YET_VALID" | "INVALID_TIER" | "DOMAINS_MISMATCH";
|
|
944
944
|
message: string;
|
|
945
945
|
path?: string | undefined;
|
|
946
946
|
}, {
|
|
947
|
-
code: "EXPIRED" | "INVALID_FORMAT" | "INVALID_DOMAINS" | "INVALID_LEVEL" | "
|
|
947
|
+
code: "EXPIRED" | "INVALID_FORMAT" | "INVALID_DOMAINS" | "INVALID_LEVEL" | "MISSING_CAR" | "INVALID_CAR" | "NOT_YET_VALID" | "INVALID_TIER" | "DOMAINS_MISMATCH";
|
|
948
948
|
message: string;
|
|
949
949
|
path?: string | undefined;
|
|
950
950
|
}>;
|
|
@@ -958,11 +958,11 @@ export declare const jwtClaimsValidationResultSchema: z.ZodObject<{
|
|
|
958
958
|
message: z.ZodString;
|
|
959
959
|
path: z.ZodOptional<z.ZodString>;
|
|
960
960
|
}, "strip", z.ZodTypeAny, {
|
|
961
|
-
code: "EXPIRED" | "INVALID_FORMAT" | "INVALID_DOMAINS" | "INVALID_LEVEL" | "
|
|
961
|
+
code: "EXPIRED" | "INVALID_FORMAT" | "INVALID_DOMAINS" | "INVALID_LEVEL" | "MISSING_CAR" | "INVALID_CAR" | "NOT_YET_VALID" | "INVALID_TIER" | "DOMAINS_MISMATCH";
|
|
962
962
|
message: string;
|
|
963
963
|
path?: string | undefined;
|
|
964
964
|
}, {
|
|
965
|
-
code: "EXPIRED" | "INVALID_FORMAT" | "INVALID_DOMAINS" | "INVALID_LEVEL" | "
|
|
965
|
+
code: "EXPIRED" | "INVALID_FORMAT" | "INVALID_DOMAINS" | "INVALID_LEVEL" | "MISSING_CAR" | "INVALID_CAR" | "NOT_YET_VALID" | "INVALID_TIER" | "DOMAINS_MISMATCH";
|
|
966
966
|
message: string;
|
|
967
967
|
path?: string | undefined;
|
|
968
968
|
}>, "many">;
|
|
@@ -1096,8 +1096,8 @@ export declare const jwtClaimsValidationResultSchema: z.ZodObject<{
|
|
|
1096
1096
|
car_org: string;
|
|
1097
1097
|
car_class: string;
|
|
1098
1098
|
car_version: string;
|
|
1099
|
-
aci?: string | undefined;
|
|
1100
1099
|
sub?: string | undefined;
|
|
1100
|
+
aci?: string | undefined;
|
|
1101
1101
|
jti?: string | undefined;
|
|
1102
1102
|
iss?: string | undefined;
|
|
1103
1103
|
aud?: string | string[] | undefined;
|
|
@@ -1107,14 +1107,17 @@ export declare const jwtClaimsValidationResultSchema: z.ZodObject<{
|
|
|
1107
1107
|
aci_domains?: number | undefined;
|
|
1108
1108
|
aci_domains_list?: ("A" | "B" | "C" | "D" | "E" | "F" | "G" | "H" | "I" | "S")[] | undefined;
|
|
1109
1109
|
aci_level?: CapabilityLevel | undefined;
|
|
1110
|
+
car_trust?: CertificationTier | undefined;
|
|
1110
1111
|
aci_trust?: CertificationTier | undefined;
|
|
1111
1112
|
aci_registry?: string | undefined;
|
|
1112
1113
|
aci_org?: string | undefined;
|
|
1113
1114
|
aci_class?: string | undefined;
|
|
1114
1115
|
aci_version?: string | undefined;
|
|
1116
|
+
car_did?: string | undefined;
|
|
1115
1117
|
aci_did?: string | undefined;
|
|
1118
|
+
car_runtime_tier?: RuntimeTier | undefined;
|
|
1116
1119
|
aci_runtime_tier?: RuntimeTier | undefined;
|
|
1117
|
-
|
|
1120
|
+
car_attestations?: {
|
|
1118
1121
|
scope: string;
|
|
1119
1122
|
tier: CertificationTier;
|
|
1120
1123
|
iss: string;
|
|
@@ -1122,19 +1125,7 @@ export declare const jwtClaimsValidationResultSchema: z.ZodObject<{
|
|
|
1122
1125
|
iat: number;
|
|
1123
1126
|
evidence?: string | undefined;
|
|
1124
1127
|
}[] | undefined;
|
|
1125
|
-
|
|
1126
|
-
aci_constraints?: {
|
|
1127
|
-
custom?: Record<string, unknown> | undefined;
|
|
1128
|
-
requires_approval?: boolean | undefined;
|
|
1129
|
-
max_operations?: number | undefined;
|
|
1130
|
-
allowed_resources?: string[] | undefined;
|
|
1131
|
-
blocked_resources?: string[] | undefined;
|
|
1132
|
-
valid_until?: number | undefined;
|
|
1133
|
-
} | undefined;
|
|
1134
|
-
car_trust?: CertificationTier | undefined;
|
|
1135
|
-
car_did?: string | undefined;
|
|
1136
|
-
car_runtime_tier?: RuntimeTier | undefined;
|
|
1137
|
-
car_attestations?: {
|
|
1128
|
+
aci_attestations?: {
|
|
1138
1129
|
scope: string;
|
|
1139
1130
|
tier: CertificationTier;
|
|
1140
1131
|
iss: string;
|
|
@@ -1143,6 +1134,7 @@ export declare const jwtClaimsValidationResultSchema: z.ZodObject<{
|
|
|
1143
1134
|
evidence?: string | undefined;
|
|
1144
1135
|
}[] | undefined;
|
|
1145
1136
|
car_permission_ceiling?: number | undefined;
|
|
1137
|
+
aci_permission_ceiling?: number | undefined;
|
|
1146
1138
|
car_constraints?: {
|
|
1147
1139
|
custom?: Record<string, unknown> | undefined;
|
|
1148
1140
|
requires_approval?: boolean | undefined;
|
|
@@ -1151,6 +1143,14 @@ export declare const jwtClaimsValidationResultSchema: z.ZodObject<{
|
|
|
1151
1143
|
blocked_resources?: string[] | undefined;
|
|
1152
1144
|
valid_until?: number | undefined;
|
|
1153
1145
|
} | undefined;
|
|
1146
|
+
aci_constraints?: {
|
|
1147
|
+
custom?: Record<string, unknown> | undefined;
|
|
1148
|
+
requires_approval?: boolean | undefined;
|
|
1149
|
+
max_operations?: number | undefined;
|
|
1150
|
+
allowed_resources?: string[] | undefined;
|
|
1151
|
+
blocked_resources?: string[] | undefined;
|
|
1152
|
+
valid_until?: number | undefined;
|
|
1153
|
+
} | undefined;
|
|
1154
1154
|
}, {
|
|
1155
1155
|
car: string;
|
|
1156
1156
|
car_domains: number;
|
|
@@ -1160,8 +1160,8 @@ export declare const jwtClaimsValidationResultSchema: z.ZodObject<{
|
|
|
1160
1160
|
car_org: string;
|
|
1161
1161
|
car_class: string;
|
|
1162
1162
|
car_version: string;
|
|
1163
|
-
aci?: string | undefined;
|
|
1164
1163
|
sub?: string | undefined;
|
|
1164
|
+
aci?: string | undefined;
|
|
1165
1165
|
jti?: string | undefined;
|
|
1166
1166
|
iss?: string | undefined;
|
|
1167
1167
|
aud?: string | string[] | undefined;
|
|
@@ -1171,14 +1171,17 @@ export declare const jwtClaimsValidationResultSchema: z.ZodObject<{
|
|
|
1171
1171
|
aci_domains?: number | undefined;
|
|
1172
1172
|
aci_domains_list?: ("A" | "B" | "C" | "D" | "E" | "F" | "G" | "H" | "I" | "S")[] | undefined;
|
|
1173
1173
|
aci_level?: CapabilityLevel | undefined;
|
|
1174
|
+
car_trust?: CertificationTier | undefined;
|
|
1174
1175
|
aci_trust?: CertificationTier | undefined;
|
|
1175
1176
|
aci_registry?: string | undefined;
|
|
1176
1177
|
aci_org?: string | undefined;
|
|
1177
1178
|
aci_class?: string | undefined;
|
|
1178
1179
|
aci_version?: string | undefined;
|
|
1180
|
+
car_did?: string | undefined;
|
|
1179
1181
|
aci_did?: string | undefined;
|
|
1182
|
+
car_runtime_tier?: RuntimeTier | undefined;
|
|
1180
1183
|
aci_runtime_tier?: RuntimeTier | undefined;
|
|
1181
|
-
|
|
1184
|
+
car_attestations?: {
|
|
1182
1185
|
scope: string;
|
|
1183
1186
|
tier: CertificationTier;
|
|
1184
1187
|
iss: string;
|
|
@@ -1186,19 +1189,7 @@ export declare const jwtClaimsValidationResultSchema: z.ZodObject<{
|
|
|
1186
1189
|
iat: number;
|
|
1187
1190
|
evidence?: string | undefined;
|
|
1188
1191
|
}[] | undefined;
|
|
1189
|
-
|
|
1190
|
-
aci_constraints?: {
|
|
1191
|
-
custom?: Record<string, unknown> | undefined;
|
|
1192
|
-
requires_approval?: boolean | undefined;
|
|
1193
|
-
max_operations?: number | undefined;
|
|
1194
|
-
allowed_resources?: string[] | undefined;
|
|
1195
|
-
blocked_resources?: string[] | undefined;
|
|
1196
|
-
valid_until?: number | undefined;
|
|
1197
|
-
} | undefined;
|
|
1198
|
-
car_trust?: CertificationTier | undefined;
|
|
1199
|
-
car_did?: string | undefined;
|
|
1200
|
-
car_runtime_tier?: RuntimeTier | undefined;
|
|
1201
|
-
car_attestations?: {
|
|
1192
|
+
aci_attestations?: {
|
|
1202
1193
|
scope: string;
|
|
1203
1194
|
tier: CertificationTier;
|
|
1204
1195
|
iss: string;
|
|
@@ -1207,6 +1198,7 @@ export declare const jwtClaimsValidationResultSchema: z.ZodObject<{
|
|
|
1207
1198
|
evidence?: string | undefined;
|
|
1208
1199
|
}[] | undefined;
|
|
1209
1200
|
car_permission_ceiling?: number | undefined;
|
|
1201
|
+
aci_permission_ceiling?: number | undefined;
|
|
1210
1202
|
car_constraints?: {
|
|
1211
1203
|
custom?: Record<string, unknown> | undefined;
|
|
1212
1204
|
requires_approval?: boolean | undefined;
|
|
@@ -1215,11 +1207,19 @@ export declare const jwtClaimsValidationResultSchema: z.ZodObject<{
|
|
|
1215
1207
|
blocked_resources?: string[] | undefined;
|
|
1216
1208
|
valid_until?: number | undefined;
|
|
1217
1209
|
} | undefined;
|
|
1210
|
+
aci_constraints?: {
|
|
1211
|
+
custom?: Record<string, unknown> | undefined;
|
|
1212
|
+
requires_approval?: boolean | undefined;
|
|
1213
|
+
max_operations?: number | undefined;
|
|
1214
|
+
allowed_resources?: string[] | undefined;
|
|
1215
|
+
blocked_resources?: string[] | undefined;
|
|
1216
|
+
valid_until?: number | undefined;
|
|
1217
|
+
} | undefined;
|
|
1218
1218
|
}>>;
|
|
1219
1219
|
}, "strip", z.ZodTypeAny, {
|
|
1220
1220
|
valid: boolean;
|
|
1221
1221
|
errors: {
|
|
1222
|
-
code: "EXPIRED" | "INVALID_FORMAT" | "INVALID_DOMAINS" | "INVALID_LEVEL" | "
|
|
1222
|
+
code: "EXPIRED" | "INVALID_FORMAT" | "INVALID_DOMAINS" | "INVALID_LEVEL" | "MISSING_CAR" | "INVALID_CAR" | "NOT_YET_VALID" | "INVALID_TIER" | "DOMAINS_MISMATCH";
|
|
1223
1223
|
message: string;
|
|
1224
1224
|
path?: string | undefined;
|
|
1225
1225
|
}[];
|
|
@@ -1232,8 +1232,8 @@ export declare const jwtClaimsValidationResultSchema: z.ZodObject<{
|
|
|
1232
1232
|
car_org: string;
|
|
1233
1233
|
car_class: string;
|
|
1234
1234
|
car_version: string;
|
|
1235
|
-
aci?: string | undefined;
|
|
1236
1235
|
sub?: string | undefined;
|
|
1236
|
+
aci?: string | undefined;
|
|
1237
1237
|
jti?: string | undefined;
|
|
1238
1238
|
iss?: string | undefined;
|
|
1239
1239
|
aud?: string | string[] | undefined;
|
|
@@ -1243,14 +1243,17 @@ export declare const jwtClaimsValidationResultSchema: z.ZodObject<{
|
|
|
1243
1243
|
aci_domains?: number | undefined;
|
|
1244
1244
|
aci_domains_list?: ("A" | "B" | "C" | "D" | "E" | "F" | "G" | "H" | "I" | "S")[] | undefined;
|
|
1245
1245
|
aci_level?: CapabilityLevel | undefined;
|
|
1246
|
+
car_trust?: CertificationTier | undefined;
|
|
1246
1247
|
aci_trust?: CertificationTier | undefined;
|
|
1247
1248
|
aci_registry?: string | undefined;
|
|
1248
1249
|
aci_org?: string | undefined;
|
|
1249
1250
|
aci_class?: string | undefined;
|
|
1250
1251
|
aci_version?: string | undefined;
|
|
1252
|
+
car_did?: string | undefined;
|
|
1251
1253
|
aci_did?: string | undefined;
|
|
1254
|
+
car_runtime_tier?: RuntimeTier | undefined;
|
|
1252
1255
|
aci_runtime_tier?: RuntimeTier | undefined;
|
|
1253
|
-
|
|
1256
|
+
car_attestations?: {
|
|
1254
1257
|
scope: string;
|
|
1255
1258
|
tier: CertificationTier;
|
|
1256
1259
|
iss: string;
|
|
@@ -1258,19 +1261,7 @@ export declare const jwtClaimsValidationResultSchema: z.ZodObject<{
|
|
|
1258
1261
|
iat: number;
|
|
1259
1262
|
evidence?: string | undefined;
|
|
1260
1263
|
}[] | undefined;
|
|
1261
|
-
|
|
1262
|
-
aci_constraints?: {
|
|
1263
|
-
custom?: Record<string, unknown> | undefined;
|
|
1264
|
-
requires_approval?: boolean | undefined;
|
|
1265
|
-
max_operations?: number | undefined;
|
|
1266
|
-
allowed_resources?: string[] | undefined;
|
|
1267
|
-
blocked_resources?: string[] | undefined;
|
|
1268
|
-
valid_until?: number | undefined;
|
|
1269
|
-
} | undefined;
|
|
1270
|
-
car_trust?: CertificationTier | undefined;
|
|
1271
|
-
car_did?: string | undefined;
|
|
1272
|
-
car_runtime_tier?: RuntimeTier | undefined;
|
|
1273
|
-
car_attestations?: {
|
|
1264
|
+
aci_attestations?: {
|
|
1274
1265
|
scope: string;
|
|
1275
1266
|
tier: CertificationTier;
|
|
1276
1267
|
iss: string;
|
|
@@ -1279,6 +1270,7 @@ export declare const jwtClaimsValidationResultSchema: z.ZodObject<{
|
|
|
1279
1270
|
evidence?: string | undefined;
|
|
1280
1271
|
}[] | undefined;
|
|
1281
1272
|
car_permission_ceiling?: number | undefined;
|
|
1273
|
+
aci_permission_ceiling?: number | undefined;
|
|
1282
1274
|
car_constraints?: {
|
|
1283
1275
|
custom?: Record<string, unknown> | undefined;
|
|
1284
1276
|
requires_approval?: boolean | undefined;
|
|
@@ -1287,11 +1279,19 @@ export declare const jwtClaimsValidationResultSchema: z.ZodObject<{
|
|
|
1287
1279
|
blocked_resources?: string[] | undefined;
|
|
1288
1280
|
valid_until?: number | undefined;
|
|
1289
1281
|
} | undefined;
|
|
1282
|
+
aci_constraints?: {
|
|
1283
|
+
custom?: Record<string, unknown> | undefined;
|
|
1284
|
+
requires_approval?: boolean | undefined;
|
|
1285
|
+
max_operations?: number | undefined;
|
|
1286
|
+
allowed_resources?: string[] | undefined;
|
|
1287
|
+
blocked_resources?: string[] | undefined;
|
|
1288
|
+
valid_until?: number | undefined;
|
|
1289
|
+
} | undefined;
|
|
1290
1290
|
} | undefined;
|
|
1291
1291
|
}, {
|
|
1292
1292
|
valid: boolean;
|
|
1293
1293
|
errors: {
|
|
1294
|
-
code: "EXPIRED" | "INVALID_FORMAT" | "INVALID_DOMAINS" | "INVALID_LEVEL" | "
|
|
1294
|
+
code: "EXPIRED" | "INVALID_FORMAT" | "INVALID_DOMAINS" | "INVALID_LEVEL" | "MISSING_CAR" | "INVALID_CAR" | "NOT_YET_VALID" | "INVALID_TIER" | "DOMAINS_MISMATCH";
|
|
1295
1295
|
message: string;
|
|
1296
1296
|
path?: string | undefined;
|
|
1297
1297
|
}[];
|
|
@@ -1304,8 +1304,8 @@ export declare const jwtClaimsValidationResultSchema: z.ZodObject<{
|
|
|
1304
1304
|
car_org: string;
|
|
1305
1305
|
car_class: string;
|
|
1306
1306
|
car_version: string;
|
|
1307
|
-
aci?: string | undefined;
|
|
1308
1307
|
sub?: string | undefined;
|
|
1308
|
+
aci?: string | undefined;
|
|
1309
1309
|
jti?: string | undefined;
|
|
1310
1310
|
iss?: string | undefined;
|
|
1311
1311
|
aud?: string | string[] | undefined;
|
|
@@ -1315,14 +1315,17 @@ export declare const jwtClaimsValidationResultSchema: z.ZodObject<{
|
|
|
1315
1315
|
aci_domains?: number | undefined;
|
|
1316
1316
|
aci_domains_list?: ("A" | "B" | "C" | "D" | "E" | "F" | "G" | "H" | "I" | "S")[] | undefined;
|
|
1317
1317
|
aci_level?: CapabilityLevel | undefined;
|
|
1318
|
+
car_trust?: CertificationTier | undefined;
|
|
1318
1319
|
aci_trust?: CertificationTier | undefined;
|
|
1319
1320
|
aci_registry?: string | undefined;
|
|
1320
1321
|
aci_org?: string | undefined;
|
|
1321
1322
|
aci_class?: string | undefined;
|
|
1322
1323
|
aci_version?: string | undefined;
|
|
1324
|
+
car_did?: string | undefined;
|
|
1323
1325
|
aci_did?: string | undefined;
|
|
1326
|
+
car_runtime_tier?: RuntimeTier | undefined;
|
|
1324
1327
|
aci_runtime_tier?: RuntimeTier | undefined;
|
|
1325
|
-
|
|
1328
|
+
car_attestations?: {
|
|
1326
1329
|
scope: string;
|
|
1327
1330
|
tier: CertificationTier;
|
|
1328
1331
|
iss: string;
|
|
@@ -1330,19 +1333,7 @@ export declare const jwtClaimsValidationResultSchema: z.ZodObject<{
|
|
|
1330
1333
|
iat: number;
|
|
1331
1334
|
evidence?: string | undefined;
|
|
1332
1335
|
}[] | undefined;
|
|
1333
|
-
|
|
1334
|
-
aci_constraints?: {
|
|
1335
|
-
custom?: Record<string, unknown> | undefined;
|
|
1336
|
-
requires_approval?: boolean | undefined;
|
|
1337
|
-
max_operations?: number | undefined;
|
|
1338
|
-
allowed_resources?: string[] | undefined;
|
|
1339
|
-
blocked_resources?: string[] | undefined;
|
|
1340
|
-
valid_until?: number | undefined;
|
|
1341
|
-
} | undefined;
|
|
1342
|
-
car_trust?: CertificationTier | undefined;
|
|
1343
|
-
car_did?: string | undefined;
|
|
1344
|
-
car_runtime_tier?: RuntimeTier | undefined;
|
|
1345
|
-
car_attestations?: {
|
|
1336
|
+
aci_attestations?: {
|
|
1346
1337
|
scope: string;
|
|
1347
1338
|
tier: CertificationTier;
|
|
1348
1339
|
iss: string;
|
|
@@ -1351,6 +1342,7 @@ export declare const jwtClaimsValidationResultSchema: z.ZodObject<{
|
|
|
1351
1342
|
evidence?: string | undefined;
|
|
1352
1343
|
}[] | undefined;
|
|
1353
1344
|
car_permission_ceiling?: number | undefined;
|
|
1345
|
+
aci_permission_ceiling?: number | undefined;
|
|
1354
1346
|
car_constraints?: {
|
|
1355
1347
|
custom?: Record<string, unknown> | undefined;
|
|
1356
1348
|
requires_approval?: boolean | undefined;
|
|
@@ -1359,6 +1351,14 @@ export declare const jwtClaimsValidationResultSchema: z.ZodObject<{
|
|
|
1359
1351
|
blocked_resources?: string[] | undefined;
|
|
1360
1352
|
valid_until?: number | undefined;
|
|
1361
1353
|
} | undefined;
|
|
1354
|
+
aci_constraints?: {
|
|
1355
|
+
custom?: Record<string, unknown> | undefined;
|
|
1356
|
+
requires_approval?: boolean | undefined;
|
|
1357
|
+
max_operations?: number | undefined;
|
|
1358
|
+
allowed_resources?: string[] | undefined;
|
|
1359
|
+
blocked_resources?: string[] | undefined;
|
|
1360
|
+
valid_until?: number | undefined;
|
|
1361
|
+
} | undefined;
|
|
1362
1362
|
} | undefined;
|
|
1363
1363
|
}>;
|
|
1364
1364
|
//# sourceMappingURL=jwt-claims.d.ts.map
|
package/dist/car/tiers.js
CHANGED
|
@@ -132,8 +132,8 @@ exports.CERTIFICATION_TIER_DESCRIPTIONS = {
|
|
|
132
132
|
exports.CERTIFICATION_TIER_SCORES = {
|
|
133
133
|
[CertificationTier.T0_SANDBOX]: { min: 0, max: 199 },
|
|
134
134
|
[CertificationTier.T1_OBSERVED]: { min: 200, max: 349 },
|
|
135
|
-
[CertificationTier.T2_PROVISIONAL]: { min: 350, max:
|
|
136
|
-
[CertificationTier.T3_MONITORED]: { min:
|
|
135
|
+
[CertificationTier.T2_PROVISIONAL]: { min: 350, max: 499 },
|
|
136
|
+
[CertificationTier.T3_MONITORED]: { min: 500, max: 649 },
|
|
137
137
|
[CertificationTier.T4_STANDARD]: { min: 650, max: 799 },
|
|
138
138
|
[CertificationTier.T5_TRUSTED]: { min: 800, max: 875 },
|
|
139
139
|
[CertificationTier.T6_CERTIFIED]: { min: 876, max: 950 },
|
|
@@ -227,8 +227,8 @@ exports.RUNTIME_TIER_DESCRIPTIONS = {
|
|
|
227
227
|
exports.RUNTIME_TIER_SCORES = {
|
|
228
228
|
[RuntimeTier.T0_SANDBOX]: { min: 0, max: 199 },
|
|
229
229
|
[RuntimeTier.T1_OBSERVED]: { min: 200, max: 349 },
|
|
230
|
-
[RuntimeTier.T2_PROVISIONAL]: { min: 350, max:
|
|
231
|
-
[RuntimeTier.T3_MONITORED]: { min:
|
|
230
|
+
[RuntimeTier.T2_PROVISIONAL]: { min: 350, max: 499 },
|
|
231
|
+
[RuntimeTier.T3_MONITORED]: { min: 500, max: 649 },
|
|
232
232
|
[RuntimeTier.T4_STANDARD]: { min: 650, max: 799 },
|
|
233
233
|
[RuntimeTier.T5_TRUSTED]: { min: 800, max: 875 },
|
|
234
234
|
[RuntimeTier.T6_CERTIFIED]: { min: 876, max: 950 },
|
|
@@ -460,7 +460,7 @@ function scoreToCertificationTier(score) {
|
|
|
460
460
|
return CertificationTier.T0_SANDBOX;
|
|
461
461
|
if (score < 350)
|
|
462
462
|
return CertificationTier.T1_OBSERVED;
|
|
463
|
-
if (score <
|
|
463
|
+
if (score < 500)
|
|
464
464
|
return CertificationTier.T2_PROVISIONAL;
|
|
465
465
|
if (score < 650)
|
|
466
466
|
return CertificationTier.T3_MONITORED;
|
|
@@ -486,7 +486,7 @@ function scoreToRuntimeTier(score) {
|
|
|
486
486
|
return RuntimeTier.T0_SANDBOX;
|
|
487
487
|
if (score < 350)
|
|
488
488
|
return RuntimeTier.T1_OBSERVED;
|
|
489
|
-
if (score <
|
|
489
|
+
if (score < 500)
|
|
490
490
|
return RuntimeTier.T2_PROVISIONAL;
|
|
491
491
|
if (score < 650)
|
|
492
492
|
return RuntimeTier.T3_MONITORED;
|