@vorionsys/contracts 0.1.1 → 0.1.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (151) hide show
  1. package/CHANGELOG.md +44 -0
  2. package/LICENSE +190 -0
  3. package/README.md +373 -84
  4. package/dist/aci/index.d.ts +4 -70
  5. package/dist/aci/index.d.ts.map +1 -1
  6. package/dist/aci/index.js +18 -373
  7. package/dist/aci/index.js.map +1 -1
  8. package/dist/canonical/agent.d.ts +15 -15
  9. package/dist/canonical/agent.d.ts.map +1 -1
  10. package/dist/canonical/governance.d.ts +8 -8
  11. package/dist/canonical/intent.d.ts +18 -18
  12. package/dist/canonical/middleware.d.ts +4 -4
  13. package/dist/canonical/trust-signal.d.ts +48 -45
  14. package/dist/canonical/trust-signal.d.ts.map +1 -1
  15. package/dist/canonical/trust-signal.js +7 -2
  16. package/dist/canonical/trust-signal.js.map +1 -1
  17. package/dist/canonical/validation.d.ts +11 -26
  18. package/dist/canonical/validation.d.ts.map +1 -1
  19. package/dist/canonical/validation.js +30 -101
  20. package/dist/canonical/validation.js.map +1 -1
  21. package/dist/car/attestation.d.ts +30 -30
  22. package/dist/car/attestation.d.ts.map +1 -1
  23. package/dist/car/attestation.js +3 -1
  24. package/dist/car/attestation.js.map +1 -1
  25. package/dist/car/car-string.d.ts +47 -47
  26. package/dist/car/car-string.d.ts.map +1 -1
  27. package/dist/car/car-string.js +36 -36
  28. package/dist/car/car-string.js.map +1 -1
  29. package/dist/car/domains.d.ts +34 -18
  30. package/dist/car/domains.d.ts.map +1 -1
  31. package/dist/car/domains.js +53 -15
  32. package/dist/car/domains.js.map +1 -1
  33. package/dist/car/effective-permission.d.ts +61 -13
  34. package/dist/car/effective-permission.d.ts.map +1 -1
  35. package/dist/car/effective-permission.js +30 -2
  36. package/dist/car/effective-permission.js.map +1 -1
  37. package/dist/car/identity.d.ts +327 -108
  38. package/dist/car/identity.d.ts.map +1 -1
  39. package/dist/car/identity.js +112 -10
  40. package/dist/car/identity.js.map +1 -1
  41. package/dist/car/index.d.ts +3 -3
  42. package/dist/car/index.d.ts.map +1 -1
  43. package/dist/car/index.js +15 -7
  44. package/dist/car/index.js.map +1 -1
  45. package/dist/car/jwt-claims.d.ts +273 -273
  46. package/dist/car/jwt-claims.d.ts.map +1 -1
  47. package/dist/car/jwt-claims.js +39 -46
  48. package/dist/car/jwt-claims.js.map +1 -1
  49. package/dist/car/levels.d.ts +2 -2
  50. package/dist/car/mapping.d.ts +36 -36
  51. package/dist/car/mapping.d.ts.map +1 -1
  52. package/dist/car/mapping.js +107 -43
  53. package/dist/car/mapping.js.map +1 -1
  54. package/dist/car/skills.d.ts +4 -4
  55. package/dist/car/tiers.d.ts +7 -7
  56. package/dist/car/tiers.js +10 -10
  57. package/dist/car/tiers.js.map +1 -1
  58. package/dist/common/primitives.d.ts +2 -2
  59. package/dist/db/agents.d.ts +549 -9
  60. package/dist/db/agents.d.ts.map +1 -1
  61. package/dist/db/agents.js +4 -4
  62. package/dist/db/agents.js.map +1 -1
  63. package/dist/db/api-keys.d.ts +144 -3
  64. package/dist/db/api-keys.d.ts.map +1 -1
  65. package/dist/db/escalations.d.ts +156 -2
  66. package/dist/db/escalations.d.ts.map +1 -1
  67. package/dist/db/intents.d.ts +154 -3
  68. package/dist/db/intents.d.ts.map +1 -1
  69. package/dist/db/merkle.d.ts +134 -3
  70. package/dist/db/merkle.d.ts.map +1 -1
  71. package/dist/db/operations.d.ts +71 -2
  72. package/dist/db/operations.d.ts.map +1 -1
  73. package/dist/db/policy-versions.d.ts +38 -1
  74. package/dist/db/policy-versions.d.ts.map +1 -1
  75. package/dist/db/proofs.d.ts +119 -3
  76. package/dist/db/proofs.d.ts.map +1 -1
  77. package/dist/db/rbac.d.ts +233 -6
  78. package/dist/db/rbac.d.ts.map +1 -1
  79. package/dist/db/service-accounts.d.ts +218 -6
  80. package/dist/db/service-accounts.d.ts.map +1 -1
  81. package/dist/db/trust.d.ts +168 -2
  82. package/dist/db/trust.d.ts.map +1 -1
  83. package/dist/db/webhooks.d.ts +103 -1
  84. package/dist/db/webhooks.d.ts.map +1 -1
  85. package/dist/v2/enums.d.ts +5 -0
  86. package/dist/v2/enums.d.ts.map +1 -1
  87. package/dist/v2/enums.js +5 -0
  88. package/dist/v2/enums.js.map +1 -1
  89. package/dist/v2/evidence.d.ts +20 -20
  90. package/dist/v2/pre-action-gate.js +5 -5
  91. package/dist/v2/pre-action-gate.js.map +1 -1
  92. package/dist/v2/proof-event.d.ts +3 -1
  93. package/dist/v2/proof-event.d.ts.map +1 -1
  94. package/dist/v2/retention.d.ts +14 -14
  95. package/dist/v2/trust-delta.d.ts +6 -6
  96. package/dist/v2/trust-delta.d.ts.map +1 -1
  97. package/dist/v2/trust-profile.d.ts +116 -54
  98. package/dist/v2/trust-profile.d.ts.map +1 -1
  99. package/dist/v2/trust-profile.js +22 -17
  100. package/dist/v2/trust-profile.js.map +1 -1
  101. package/dist/validators/decision.d.ts +6 -6
  102. package/dist/validators/intent.d.ts +8 -8
  103. package/dist/validators/proof-event.d.ts +57 -54
  104. package/dist/validators/proof-event.d.ts.map +1 -1
  105. package/dist/validators/proof-event.js +2 -1
  106. package/dist/validators/proof-event.js.map +1 -1
  107. package/dist/validators/trust-profile.d.ts +76 -244
  108. package/dist/validators/trust-profile.d.ts.map +1 -1
  109. package/dist/validators/trust-profile.js +21 -35
  110. package/dist/validators/trust-profile.js.map +1 -1
  111. package/package.json +26 -11
  112. package/dist/aci/aci-string.d.ts +0 -539
  113. package/dist/aci/aci-string.d.ts.map +0 -1
  114. package/dist/aci/aci-string.js +0 -581
  115. package/dist/aci/aci-string.js.map +0 -1
  116. package/dist/aci/attestation.d.ts +0 -648
  117. package/dist/aci/attestation.d.ts.map +0 -1
  118. package/dist/aci/attestation.js +0 -299
  119. package/dist/aci/attestation.js.map +0 -1
  120. package/dist/aci/domains.d.ts +0 -260
  121. package/dist/aci/domains.d.ts.map +0 -1
  122. package/dist/aci/domains.js +0 -340
  123. package/dist/aci/domains.js.map +0 -1
  124. package/dist/aci/effective-permission.d.ts +0 -371
  125. package/dist/aci/effective-permission.d.ts.map +0 -1
  126. package/dist/aci/effective-permission.js +0 -364
  127. package/dist/aci/effective-permission.js.map +0 -1
  128. package/dist/aci/identity.d.ts +0 -1100
  129. package/dist/aci/identity.d.ts.map +0 -1
  130. package/dist/aci/identity.js +0 -338
  131. package/dist/aci/identity.js.map +0 -1
  132. package/dist/aci/jwt-claims.d.ts +0 -756
  133. package/dist/aci/jwt-claims.d.ts.map +0 -1
  134. package/dist/aci/jwt-claims.js +0 -345
  135. package/dist/aci/jwt-claims.js.map +0 -1
  136. package/dist/aci/levels.d.ts +0 -279
  137. package/dist/aci/levels.d.ts.map +0 -1
  138. package/dist/aci/levels.js +0 -486
  139. package/dist/aci/levels.js.map +0 -1
  140. package/dist/aci/mapping.d.ts +0 -291
  141. package/dist/aci/mapping.d.ts.map +0 -1
  142. package/dist/aci/mapping.js +0 -447
  143. package/dist/aci/mapping.js.map +0 -1
  144. package/dist/aci/skills.d.ts +0 -314
  145. package/dist/aci/skills.d.ts.map +0 -1
  146. package/dist/aci/skills.js +0 -426
  147. package/dist/aci/skills.js.map +0 -1
  148. package/dist/aci/tiers.d.ts +0 -403
  149. package/dist/aci/tiers.d.ts.map +0 -1
  150. package/dist/aci/tiers.js +0 -686
  151. package/dist/aci/tiers.js.map +0 -1
@@ -73,19 +73,19 @@ export interface CARJWTClaims extends StandardJWTClaims {
73
73
  /** Full CAR string (immutable identifier, no trust info) */
74
74
  car: string;
75
75
  /** @deprecated Use car instead */
76
- aci?: string;
76
+ carId?: string;
77
77
  /** Domain bitmask for efficient validation */
78
78
  car_domains: number;
79
79
  /** @deprecated Use car_domains instead */
80
- aci_domains?: number;
80
+ carId_domains?: number;
81
81
  /** Domain codes array for readability */
82
82
  car_domains_list: DomainCode[];
83
83
  /** @deprecated Use car_domains_list instead */
84
- aci_domains_list?: DomainCode[];
84
+ carId_domains_list?: DomainCode[];
85
85
  /** Capability level */
86
86
  car_level: CapabilityLevel;
87
87
  /** @deprecated Use car_level instead */
88
- aci_level?: CapabilityLevel;
88
+ carId_level?: CapabilityLevel;
89
89
  /**
90
90
  * Certification tier from attestations (OPTIONAL).
91
91
  * This is NOT from the CAR itself - it comes from valid attestations.
@@ -93,43 +93,43 @@ export interface CARJWTClaims extends StandardJWTClaims {
93
93
  */
94
94
  car_trust?: CertificationTier;
95
95
  /** @deprecated Use car_trust instead */
96
- aci_trust?: CertificationTier;
96
+ carId_trust?: CertificationTier;
97
97
  /** Registry */
98
98
  car_registry: string;
99
99
  /** @deprecated Use car_registry instead */
100
- aci_registry?: string;
100
+ carId_registry?: string;
101
101
  /** Organization */
102
102
  car_org: string;
103
103
  /** @deprecated Use car_org instead */
104
- aci_org?: string;
104
+ carId_org?: string;
105
105
  /** Agent class */
106
106
  car_class: string;
107
107
  /** @deprecated Use car_class instead */
108
- aci_class?: string;
108
+ carId_class?: string;
109
109
  /** CAR version */
110
110
  car_version: string;
111
111
  /** @deprecated Use car_version instead */
112
- aci_version?: string;
112
+ carId_version?: string;
113
113
  /** Agent DID (optional) */
114
114
  car_did?: string;
115
115
  /** @deprecated Use car_did instead */
116
- aci_did?: string;
116
+ carId_did?: string;
117
117
  /** Runtime tier in current context (optional) */
118
118
  car_runtime_tier?: RuntimeTier;
119
119
  /** @deprecated Use car_runtime_tier instead */
120
- aci_runtime_tier?: RuntimeTier;
120
+ carId_runtime_tier?: RuntimeTier;
121
121
  /** Attestation summaries - source of car_trust value */
122
122
  car_attestations?: CARAttestationClaim[];
123
123
  /** @deprecated Use car_attestations instead */
124
- aci_attestations?: CARAttestationClaim[];
124
+ carId_attestations?: CARAttestationClaim[];
125
125
  /** Effective permission ceiling (optional) */
126
126
  car_permission_ceiling?: number;
127
127
  /** @deprecated Use car_permission_ceiling instead */
128
- aci_permission_ceiling?: number;
128
+ carId_permission_ceiling?: number;
129
129
  /** Session-specific constraints (optional) */
130
130
  car_constraints?: CARConstraintsClaim;
131
131
  /** @deprecated Use car_constraints instead */
132
- aci_constraints?: CARConstraintsClaim;
132
+ carId_constraints?: CARConstraintsClaim;
133
133
  }
134
134
  /** @deprecated Use CARJWTClaims instead */
135
135
  export type ACIJWTClaims = CARJWTClaims;
@@ -281,27 +281,27 @@ export declare const carJWTClaimsSchema: z.ZodObject<{
281
281
  jti: z.ZodOptional<z.ZodString>;
282
282
  } & {
283
283
  car: z.ZodString;
284
- aci: z.ZodOptional<z.ZodString>;
284
+ carId: z.ZodOptional<z.ZodString>;
285
285
  car_domains: z.ZodNumber;
286
- aci_domains: z.ZodOptional<z.ZodNumber>;
287
- car_domains_list: z.ZodArray<z.ZodEnum<["A", "B", "C", "D", "E", "F", "G", "H", "I", "S"]>, "many">;
288
- aci_domains_list: z.ZodOptional<z.ZodArray<z.ZodEnum<["A", "B", "C", "D", "E", "F", "G", "H", "I", "S"]>, "many">>;
286
+ carId_domains: z.ZodOptional<z.ZodNumber>;
287
+ car_domains_list: z.ZodArray<z.ZodEnum<["A", "B", "C", "D", "E", "F", "G", "H", "I", "J", "K", "L", "M", "N", "O", "P", "Q", "R", "S", "T", "U", "V", "W", "X", "Y", "Z"]>, "many">;
288
+ carId_domains_list: z.ZodOptional<z.ZodArray<z.ZodEnum<["A", "B", "C", "D", "E", "F", "G", "H", "I", "J", "K", "L", "M", "N", "O", "P", "Q", "R", "S", "T", "U", "V", "W", "X", "Y", "Z"]>, "many">>;
289
289
  car_level: z.ZodNativeEnum<typeof CapabilityLevel>;
290
- aci_level: z.ZodOptional<z.ZodNativeEnum<typeof CapabilityLevel>>;
290
+ carId_level: z.ZodOptional<z.ZodNativeEnum<typeof CapabilityLevel>>;
291
291
  car_trust: z.ZodOptional<z.ZodNativeEnum<typeof CertificationTier>>;
292
- aci_trust: z.ZodOptional<z.ZodNativeEnum<typeof CertificationTier>>;
292
+ carId_trust: z.ZodOptional<z.ZodNativeEnum<typeof CertificationTier>>;
293
293
  car_registry: z.ZodString;
294
- aci_registry: z.ZodOptional<z.ZodString>;
294
+ carId_registry: z.ZodOptional<z.ZodString>;
295
295
  car_org: z.ZodString;
296
- aci_org: z.ZodOptional<z.ZodString>;
296
+ carId_org: z.ZodOptional<z.ZodString>;
297
297
  car_class: z.ZodString;
298
- aci_class: z.ZodOptional<z.ZodString>;
298
+ carId_class: z.ZodOptional<z.ZodString>;
299
299
  car_version: z.ZodString;
300
- aci_version: z.ZodOptional<z.ZodString>;
300
+ carId_version: z.ZodOptional<z.ZodString>;
301
301
  car_did: z.ZodOptional<z.ZodString>;
302
- aci_did: z.ZodOptional<z.ZodString>;
302
+ carId_did: z.ZodOptional<z.ZodString>;
303
303
  car_runtime_tier: z.ZodOptional<z.ZodNativeEnum<typeof RuntimeTier>>;
304
- aci_runtime_tier: z.ZodOptional<z.ZodNativeEnum<typeof RuntimeTier>>;
304
+ carId_runtime_tier: z.ZodOptional<z.ZodNativeEnum<typeof RuntimeTier>>;
305
305
  car_attestations: z.ZodOptional<z.ZodArray<z.ZodObject<{
306
306
  iss: z.ZodString;
307
307
  tier: z.ZodNativeEnum<typeof CertificationTier>;
@@ -324,7 +324,7 @@ export declare const carJWTClaimsSchema: z.ZodObject<{
324
324
  iat: number;
325
325
  evidence?: string | undefined;
326
326
  }>, "many">>;
327
- aci_attestations: z.ZodOptional<z.ZodArray<z.ZodObject<{
327
+ carId_attestations: z.ZodOptional<z.ZodArray<z.ZodObject<{
328
328
  iss: z.ZodString;
329
329
  tier: z.ZodNativeEnum<typeof CertificationTier>;
330
330
  scope: z.ZodString;
@@ -347,7 +347,7 @@ export declare const carJWTClaimsSchema: z.ZodObject<{
347
347
  evidence?: string | undefined;
348
348
  }>, "many">>;
349
349
  car_permission_ceiling: z.ZodOptional<z.ZodNumber>;
350
- aci_permission_ceiling: z.ZodOptional<z.ZodNumber>;
350
+ carId_permission_ceiling: z.ZodOptional<z.ZodNumber>;
351
351
  car_constraints: z.ZodOptional<z.ZodObject<{
352
352
  max_operations: z.ZodOptional<z.ZodNumber>;
353
353
  allowed_resources: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
@@ -370,7 +370,7 @@ export declare const carJWTClaimsSchema: z.ZodObject<{
370
370
  blocked_resources?: string[] | undefined;
371
371
  valid_until?: number | undefined;
372
372
  }>>;
373
- aci_constraints: z.ZodOptional<z.ZodObject<{
373
+ carId_constraints: z.ZodOptional<z.ZodObject<{
374
374
  max_operations: z.ZodOptional<z.ZodNumber>;
375
375
  allowed_resources: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
376
376
  blocked_resources: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
@@ -395,31 +395,34 @@ export declare const carJWTClaimsSchema: z.ZodObject<{
395
395
  }, "strip", z.ZodTypeAny, {
396
396
  car: string;
397
397
  car_domains: number;
398
- car_domains_list: ("A" | "B" | "C" | "D" | "E" | "F" | "G" | "H" | "I" | "S")[];
398
+ car_domains_list: ("A" | "B" | "C" | "D" | "E" | "F" | "G" | "H" | "I" | "J" | "K" | "L" | "M" | "N" | "O" | "P" | "Q" | "R" | "S" | "T" | "U" | "V" | "W" | "X" | "Y" | "Z")[];
399
399
  car_level: CapabilityLevel;
400
400
  car_registry: string;
401
401
  car_org: string;
402
402
  car_class: string;
403
403
  car_version: string;
404
- aci?: string | undefined;
405
404
  sub?: string | undefined;
405
+ carId?: string | undefined;
406
406
  jti?: string | undefined;
407
407
  iss?: string | undefined;
408
408
  aud?: string | string[] | undefined;
409
409
  exp?: number | undefined;
410
410
  nbf?: number | undefined;
411
411
  iat?: number | undefined;
412
- aci_domains?: number | undefined;
413
- aci_domains_list?: ("A" | "B" | "C" | "D" | "E" | "F" | "G" | "H" | "I" | "S")[] | undefined;
414
- aci_level?: CapabilityLevel | undefined;
415
- aci_trust?: CertificationTier | undefined;
416
- aci_registry?: string | undefined;
417
- aci_org?: string | undefined;
418
- aci_class?: string | undefined;
419
- aci_version?: string | undefined;
420
- aci_did?: string | undefined;
421
- aci_runtime_tier?: RuntimeTier | undefined;
422
- aci_attestations?: {
412
+ carId_domains?: number | undefined;
413
+ carId_domains_list?: ("A" | "B" | "C" | "D" | "E" | "F" | "G" | "H" | "I" | "J" | "K" | "L" | "M" | "N" | "O" | "P" | "Q" | "R" | "S" | "T" | "U" | "V" | "W" | "X" | "Y" | "Z")[] | undefined;
414
+ carId_level?: CapabilityLevel | undefined;
415
+ car_trust?: CertificationTier | undefined;
416
+ carId_trust?: CertificationTier | undefined;
417
+ carId_registry?: string | undefined;
418
+ carId_org?: string | undefined;
419
+ carId_class?: string | undefined;
420
+ carId_version?: string | undefined;
421
+ car_did?: string | undefined;
422
+ carId_did?: string | undefined;
423
+ car_runtime_tier?: RuntimeTier | undefined;
424
+ carId_runtime_tier?: RuntimeTier | undefined;
425
+ car_attestations?: {
423
426
  scope: string;
424
427
  tier: CertificationTier;
425
428
  iss: string;
@@ -427,19 +430,7 @@ export declare const carJWTClaimsSchema: z.ZodObject<{
427
430
  iat: number;
428
431
  evidence?: string | undefined;
429
432
  }[] | undefined;
430
- aci_permission_ceiling?: number | undefined;
431
- aci_constraints?: {
432
- custom?: Record<string, unknown> | undefined;
433
- requires_approval?: boolean | undefined;
434
- max_operations?: number | undefined;
435
- allowed_resources?: string[] | undefined;
436
- blocked_resources?: string[] | undefined;
437
- valid_until?: number | undefined;
438
- } | undefined;
439
- car_trust?: CertificationTier | undefined;
440
- car_did?: string | undefined;
441
- car_runtime_tier?: RuntimeTier | undefined;
442
- car_attestations?: {
433
+ carId_attestations?: {
443
434
  scope: string;
444
435
  tier: CertificationTier;
445
436
  iss: string;
@@ -448,6 +439,7 @@ export declare const carJWTClaimsSchema: z.ZodObject<{
448
439
  evidence?: string | undefined;
449
440
  }[] | undefined;
450
441
  car_permission_ceiling?: number | undefined;
442
+ carId_permission_ceiling?: number | undefined;
451
443
  car_constraints?: {
452
444
  custom?: Record<string, unknown> | undefined;
453
445
  requires_approval?: boolean | undefined;
@@ -456,34 +448,45 @@ export declare const carJWTClaimsSchema: z.ZodObject<{
456
448
  blocked_resources?: string[] | undefined;
457
449
  valid_until?: number | undefined;
458
450
  } | undefined;
451
+ carId_constraints?: {
452
+ custom?: Record<string, unknown> | undefined;
453
+ requires_approval?: boolean | undefined;
454
+ max_operations?: number | undefined;
455
+ allowed_resources?: string[] | undefined;
456
+ blocked_resources?: string[] | undefined;
457
+ valid_until?: number | undefined;
458
+ } | undefined;
459
459
  }, {
460
460
  car: string;
461
461
  car_domains: number;
462
- car_domains_list: ("A" | "B" | "C" | "D" | "E" | "F" | "G" | "H" | "I" | "S")[];
462
+ car_domains_list: ("A" | "B" | "C" | "D" | "E" | "F" | "G" | "H" | "I" | "J" | "K" | "L" | "M" | "N" | "O" | "P" | "Q" | "R" | "S" | "T" | "U" | "V" | "W" | "X" | "Y" | "Z")[];
463
463
  car_level: CapabilityLevel;
464
464
  car_registry: string;
465
465
  car_org: string;
466
466
  car_class: string;
467
467
  car_version: string;
468
- aci?: string | undefined;
469
468
  sub?: string | undefined;
469
+ carId?: string | undefined;
470
470
  jti?: string | undefined;
471
471
  iss?: string | undefined;
472
472
  aud?: string | string[] | undefined;
473
473
  exp?: number | undefined;
474
474
  nbf?: number | undefined;
475
475
  iat?: number | undefined;
476
- aci_domains?: number | undefined;
477
- aci_domains_list?: ("A" | "B" | "C" | "D" | "E" | "F" | "G" | "H" | "I" | "S")[] | undefined;
478
- aci_level?: CapabilityLevel | undefined;
479
- aci_trust?: CertificationTier | undefined;
480
- aci_registry?: string | undefined;
481
- aci_org?: string | undefined;
482
- aci_class?: string | undefined;
483
- aci_version?: string | undefined;
484
- aci_did?: string | undefined;
485
- aci_runtime_tier?: RuntimeTier | undefined;
486
- aci_attestations?: {
476
+ carId_domains?: number | undefined;
477
+ carId_domains_list?: ("A" | "B" | "C" | "D" | "E" | "F" | "G" | "H" | "I" | "J" | "K" | "L" | "M" | "N" | "O" | "P" | "Q" | "R" | "S" | "T" | "U" | "V" | "W" | "X" | "Y" | "Z")[] | undefined;
478
+ carId_level?: CapabilityLevel | undefined;
479
+ car_trust?: CertificationTier | undefined;
480
+ carId_trust?: CertificationTier | undefined;
481
+ carId_registry?: string | undefined;
482
+ carId_org?: string | undefined;
483
+ carId_class?: string | undefined;
484
+ carId_version?: string | undefined;
485
+ car_did?: string | undefined;
486
+ carId_did?: string | undefined;
487
+ car_runtime_tier?: RuntimeTier | undefined;
488
+ carId_runtime_tier?: RuntimeTier | undefined;
489
+ car_attestations?: {
487
490
  scope: string;
488
491
  tier: CertificationTier;
489
492
  iss: string;
@@ -491,19 +494,7 @@ export declare const carJWTClaimsSchema: z.ZodObject<{
491
494
  iat: number;
492
495
  evidence?: string | undefined;
493
496
  }[] | undefined;
494
- aci_permission_ceiling?: number | undefined;
495
- aci_constraints?: {
496
- custom?: Record<string, unknown> | undefined;
497
- requires_approval?: boolean | undefined;
498
- max_operations?: number | undefined;
499
- allowed_resources?: string[] | undefined;
500
- blocked_resources?: string[] | undefined;
501
- valid_until?: number | undefined;
502
- } | undefined;
503
- car_trust?: CertificationTier | undefined;
504
- car_did?: string | undefined;
505
- car_runtime_tier?: RuntimeTier | undefined;
506
- car_attestations?: {
497
+ carId_attestations?: {
507
498
  scope: string;
508
499
  tier: CertificationTier;
509
500
  iss: string;
@@ -512,6 +503,7 @@ export declare const carJWTClaimsSchema: z.ZodObject<{
512
503
  evidence?: string | undefined;
513
504
  }[] | undefined;
514
505
  car_permission_ceiling?: number | undefined;
506
+ carId_permission_ceiling?: number | undefined;
515
507
  car_constraints?: {
516
508
  custom?: Record<string, unknown> | undefined;
517
509
  requires_approval?: boolean | undefined;
@@ -520,6 +512,14 @@ export declare const carJWTClaimsSchema: z.ZodObject<{
520
512
  blocked_resources?: string[] | undefined;
521
513
  valid_until?: number | undefined;
522
514
  } | undefined;
515
+ carId_constraints?: {
516
+ custom?: Record<string, unknown> | undefined;
517
+ requires_approval?: boolean | undefined;
518
+ max_operations?: number | undefined;
519
+ allowed_resources?: string[] | undefined;
520
+ blocked_resources?: string[] | undefined;
521
+ valid_until?: number | undefined;
522
+ } | undefined;
523
523
  }>;
524
524
  /** @deprecated Use carJWTClaimsSchema instead */
525
525
  export declare const aciJWTClaimsSchema: z.ZodObject<{
@@ -532,27 +532,27 @@ export declare const aciJWTClaimsSchema: z.ZodObject<{
532
532
  jti: z.ZodOptional<z.ZodString>;
533
533
  } & {
534
534
  car: z.ZodString;
535
- aci: z.ZodOptional<z.ZodString>;
535
+ carId: z.ZodOptional<z.ZodString>;
536
536
  car_domains: z.ZodNumber;
537
- aci_domains: z.ZodOptional<z.ZodNumber>;
538
- car_domains_list: z.ZodArray<z.ZodEnum<["A", "B", "C", "D", "E", "F", "G", "H", "I", "S"]>, "many">;
539
- aci_domains_list: z.ZodOptional<z.ZodArray<z.ZodEnum<["A", "B", "C", "D", "E", "F", "G", "H", "I", "S"]>, "many">>;
537
+ carId_domains: z.ZodOptional<z.ZodNumber>;
538
+ car_domains_list: z.ZodArray<z.ZodEnum<["A", "B", "C", "D", "E", "F", "G", "H", "I", "J", "K", "L", "M", "N", "O", "P", "Q", "R", "S", "T", "U", "V", "W", "X", "Y", "Z"]>, "many">;
539
+ carId_domains_list: z.ZodOptional<z.ZodArray<z.ZodEnum<["A", "B", "C", "D", "E", "F", "G", "H", "I", "J", "K", "L", "M", "N", "O", "P", "Q", "R", "S", "T", "U", "V", "W", "X", "Y", "Z"]>, "many">>;
540
540
  car_level: z.ZodNativeEnum<typeof CapabilityLevel>;
541
- aci_level: z.ZodOptional<z.ZodNativeEnum<typeof CapabilityLevel>>;
541
+ carId_level: z.ZodOptional<z.ZodNativeEnum<typeof CapabilityLevel>>;
542
542
  car_trust: z.ZodOptional<z.ZodNativeEnum<typeof CertificationTier>>;
543
- aci_trust: z.ZodOptional<z.ZodNativeEnum<typeof CertificationTier>>;
543
+ carId_trust: z.ZodOptional<z.ZodNativeEnum<typeof CertificationTier>>;
544
544
  car_registry: z.ZodString;
545
- aci_registry: z.ZodOptional<z.ZodString>;
545
+ carId_registry: z.ZodOptional<z.ZodString>;
546
546
  car_org: z.ZodString;
547
- aci_org: z.ZodOptional<z.ZodString>;
547
+ carId_org: z.ZodOptional<z.ZodString>;
548
548
  car_class: z.ZodString;
549
- aci_class: z.ZodOptional<z.ZodString>;
549
+ carId_class: z.ZodOptional<z.ZodString>;
550
550
  car_version: z.ZodString;
551
- aci_version: z.ZodOptional<z.ZodString>;
551
+ carId_version: z.ZodOptional<z.ZodString>;
552
552
  car_did: z.ZodOptional<z.ZodString>;
553
- aci_did: z.ZodOptional<z.ZodString>;
553
+ carId_did: z.ZodOptional<z.ZodString>;
554
554
  car_runtime_tier: z.ZodOptional<z.ZodNativeEnum<typeof RuntimeTier>>;
555
- aci_runtime_tier: z.ZodOptional<z.ZodNativeEnum<typeof RuntimeTier>>;
555
+ carId_runtime_tier: z.ZodOptional<z.ZodNativeEnum<typeof RuntimeTier>>;
556
556
  car_attestations: z.ZodOptional<z.ZodArray<z.ZodObject<{
557
557
  iss: z.ZodString;
558
558
  tier: z.ZodNativeEnum<typeof CertificationTier>;
@@ -575,7 +575,7 @@ export declare const aciJWTClaimsSchema: z.ZodObject<{
575
575
  iat: number;
576
576
  evidence?: string | undefined;
577
577
  }>, "many">>;
578
- aci_attestations: z.ZodOptional<z.ZodArray<z.ZodObject<{
578
+ carId_attestations: z.ZodOptional<z.ZodArray<z.ZodObject<{
579
579
  iss: z.ZodString;
580
580
  tier: z.ZodNativeEnum<typeof CertificationTier>;
581
581
  scope: z.ZodString;
@@ -598,7 +598,7 @@ export declare const aciJWTClaimsSchema: z.ZodObject<{
598
598
  evidence?: string | undefined;
599
599
  }>, "many">>;
600
600
  car_permission_ceiling: z.ZodOptional<z.ZodNumber>;
601
- aci_permission_ceiling: z.ZodOptional<z.ZodNumber>;
601
+ carId_permission_ceiling: z.ZodOptional<z.ZodNumber>;
602
602
  car_constraints: z.ZodOptional<z.ZodObject<{
603
603
  max_operations: z.ZodOptional<z.ZodNumber>;
604
604
  allowed_resources: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
@@ -621,7 +621,7 @@ export declare const aciJWTClaimsSchema: z.ZodObject<{
621
621
  blocked_resources?: string[] | undefined;
622
622
  valid_until?: number | undefined;
623
623
  }>>;
624
- aci_constraints: z.ZodOptional<z.ZodObject<{
624
+ carId_constraints: z.ZodOptional<z.ZodObject<{
625
625
  max_operations: z.ZodOptional<z.ZodNumber>;
626
626
  allowed_resources: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
627
627
  blocked_resources: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
@@ -646,31 +646,34 @@ export declare const aciJWTClaimsSchema: z.ZodObject<{
646
646
  }, "strip", z.ZodTypeAny, {
647
647
  car: string;
648
648
  car_domains: number;
649
- car_domains_list: ("A" | "B" | "C" | "D" | "E" | "F" | "G" | "H" | "I" | "S")[];
649
+ car_domains_list: ("A" | "B" | "C" | "D" | "E" | "F" | "G" | "H" | "I" | "J" | "K" | "L" | "M" | "N" | "O" | "P" | "Q" | "R" | "S" | "T" | "U" | "V" | "W" | "X" | "Y" | "Z")[];
650
650
  car_level: CapabilityLevel;
651
651
  car_registry: string;
652
652
  car_org: string;
653
653
  car_class: string;
654
654
  car_version: string;
655
- aci?: string | undefined;
656
655
  sub?: string | undefined;
656
+ carId?: string | undefined;
657
657
  jti?: string | undefined;
658
658
  iss?: string | undefined;
659
659
  aud?: string | string[] | undefined;
660
660
  exp?: number | undefined;
661
661
  nbf?: number | undefined;
662
662
  iat?: number | undefined;
663
- aci_domains?: number | undefined;
664
- aci_domains_list?: ("A" | "B" | "C" | "D" | "E" | "F" | "G" | "H" | "I" | "S")[] | undefined;
665
- aci_level?: CapabilityLevel | undefined;
666
- aci_trust?: CertificationTier | undefined;
667
- aci_registry?: string | undefined;
668
- aci_org?: string | undefined;
669
- aci_class?: string | undefined;
670
- aci_version?: string | undefined;
671
- aci_did?: string | undefined;
672
- aci_runtime_tier?: RuntimeTier | undefined;
673
- aci_attestations?: {
663
+ carId_domains?: number | undefined;
664
+ carId_domains_list?: ("A" | "B" | "C" | "D" | "E" | "F" | "G" | "H" | "I" | "J" | "K" | "L" | "M" | "N" | "O" | "P" | "Q" | "R" | "S" | "T" | "U" | "V" | "W" | "X" | "Y" | "Z")[] | undefined;
665
+ carId_level?: CapabilityLevel | undefined;
666
+ car_trust?: CertificationTier | undefined;
667
+ carId_trust?: CertificationTier | undefined;
668
+ carId_registry?: string | undefined;
669
+ carId_org?: string | undefined;
670
+ carId_class?: string | undefined;
671
+ carId_version?: string | undefined;
672
+ car_did?: string | undefined;
673
+ carId_did?: string | undefined;
674
+ car_runtime_tier?: RuntimeTier | undefined;
675
+ carId_runtime_tier?: RuntimeTier | undefined;
676
+ car_attestations?: {
674
677
  scope: string;
675
678
  tier: CertificationTier;
676
679
  iss: string;
@@ -678,19 +681,7 @@ export declare const aciJWTClaimsSchema: z.ZodObject<{
678
681
  iat: number;
679
682
  evidence?: string | undefined;
680
683
  }[] | undefined;
681
- aci_permission_ceiling?: number | undefined;
682
- aci_constraints?: {
683
- custom?: Record<string, unknown> | undefined;
684
- requires_approval?: boolean | undefined;
685
- max_operations?: number | undefined;
686
- allowed_resources?: string[] | undefined;
687
- blocked_resources?: string[] | undefined;
688
- valid_until?: number | undefined;
689
- } | undefined;
690
- car_trust?: CertificationTier | undefined;
691
- car_did?: string | undefined;
692
- car_runtime_tier?: RuntimeTier | undefined;
693
- car_attestations?: {
684
+ carId_attestations?: {
694
685
  scope: string;
695
686
  tier: CertificationTier;
696
687
  iss: string;
@@ -699,6 +690,7 @@ export declare const aciJWTClaimsSchema: z.ZodObject<{
699
690
  evidence?: string | undefined;
700
691
  }[] | undefined;
701
692
  car_permission_ceiling?: number | undefined;
693
+ carId_permission_ceiling?: number | undefined;
702
694
  car_constraints?: {
703
695
  custom?: Record<string, unknown> | undefined;
704
696
  requires_approval?: boolean | undefined;
@@ -707,34 +699,45 @@ export declare const aciJWTClaimsSchema: z.ZodObject<{
707
699
  blocked_resources?: string[] | undefined;
708
700
  valid_until?: number | undefined;
709
701
  } | undefined;
702
+ carId_constraints?: {
703
+ custom?: Record<string, unknown> | undefined;
704
+ requires_approval?: boolean | undefined;
705
+ max_operations?: number | undefined;
706
+ allowed_resources?: string[] | undefined;
707
+ blocked_resources?: string[] | undefined;
708
+ valid_until?: number | undefined;
709
+ } | undefined;
710
710
  }, {
711
711
  car: string;
712
712
  car_domains: number;
713
- car_domains_list: ("A" | "B" | "C" | "D" | "E" | "F" | "G" | "H" | "I" | "S")[];
713
+ car_domains_list: ("A" | "B" | "C" | "D" | "E" | "F" | "G" | "H" | "I" | "J" | "K" | "L" | "M" | "N" | "O" | "P" | "Q" | "R" | "S" | "T" | "U" | "V" | "W" | "X" | "Y" | "Z")[];
714
714
  car_level: CapabilityLevel;
715
715
  car_registry: string;
716
716
  car_org: string;
717
717
  car_class: string;
718
718
  car_version: string;
719
- aci?: string | undefined;
720
719
  sub?: string | undefined;
720
+ carId?: string | undefined;
721
721
  jti?: string | undefined;
722
722
  iss?: string | undefined;
723
723
  aud?: string | string[] | undefined;
724
724
  exp?: number | undefined;
725
725
  nbf?: number | undefined;
726
726
  iat?: number | undefined;
727
- aci_domains?: number | undefined;
728
- aci_domains_list?: ("A" | "B" | "C" | "D" | "E" | "F" | "G" | "H" | "I" | "S")[] | undefined;
729
- aci_level?: CapabilityLevel | undefined;
730
- aci_trust?: CertificationTier | undefined;
731
- aci_registry?: string | undefined;
732
- aci_org?: string | undefined;
733
- aci_class?: string | undefined;
734
- aci_version?: string | undefined;
735
- aci_did?: string | undefined;
736
- aci_runtime_tier?: RuntimeTier | undefined;
737
- aci_attestations?: {
727
+ carId_domains?: number | undefined;
728
+ carId_domains_list?: ("A" | "B" | "C" | "D" | "E" | "F" | "G" | "H" | "I" | "J" | "K" | "L" | "M" | "N" | "O" | "P" | "Q" | "R" | "S" | "T" | "U" | "V" | "W" | "X" | "Y" | "Z")[] | undefined;
729
+ carId_level?: CapabilityLevel | undefined;
730
+ car_trust?: CertificationTier | undefined;
731
+ carId_trust?: CertificationTier | undefined;
732
+ carId_registry?: string | undefined;
733
+ carId_org?: string | undefined;
734
+ carId_class?: string | undefined;
735
+ carId_version?: string | undefined;
736
+ car_did?: string | undefined;
737
+ carId_did?: string | undefined;
738
+ car_runtime_tier?: RuntimeTier | undefined;
739
+ carId_runtime_tier?: RuntimeTier | undefined;
740
+ car_attestations?: {
738
741
  scope: string;
739
742
  tier: CertificationTier;
740
743
  iss: string;
@@ -742,19 +745,7 @@ export declare const aciJWTClaimsSchema: z.ZodObject<{
742
745
  iat: number;
743
746
  evidence?: string | undefined;
744
747
  }[] | undefined;
745
- aci_permission_ceiling?: number | undefined;
746
- aci_constraints?: {
747
- custom?: Record<string, unknown> | undefined;
748
- requires_approval?: boolean | undefined;
749
- max_operations?: number | undefined;
750
- allowed_resources?: string[] | undefined;
751
- blocked_resources?: string[] | undefined;
752
- valid_until?: number | undefined;
753
- } | undefined;
754
- car_trust?: CertificationTier | undefined;
755
- car_did?: string | undefined;
756
- car_runtime_tier?: RuntimeTier | undefined;
757
- car_attestations?: {
748
+ carId_attestations?: {
758
749
  scope: string;
759
750
  tier: CertificationTier;
760
751
  iss: string;
@@ -763,6 +754,7 @@ export declare const aciJWTClaimsSchema: z.ZodObject<{
763
754
  evidence?: string | undefined;
764
755
  }[] | undefined;
765
756
  car_permission_ceiling?: number | undefined;
757
+ carId_permission_ceiling?: number | undefined;
766
758
  car_constraints?: {
767
759
  custom?: Record<string, unknown> | undefined;
768
760
  requires_approval?: boolean | undefined;
@@ -771,6 +763,14 @@ export declare const aciJWTClaimsSchema: z.ZodObject<{
771
763
  blocked_resources?: string[] | undefined;
772
764
  valid_until?: number | undefined;
773
765
  } | undefined;
766
+ carId_constraints?: {
767
+ custom?: Record<string, unknown> | undefined;
768
+ requires_approval?: boolean | undefined;
769
+ max_operations?: number | undefined;
770
+ allowed_resources?: string[] | undefined;
771
+ blocked_resources?: string[] | undefined;
772
+ valid_until?: number | undefined;
773
+ } | undefined;
774
774
  }>;
775
775
  /**
776
776
  * Options for generating JWT claims.
@@ -940,11 +940,11 @@ export declare const jwtClaimsValidationErrorSchema: z.ZodObject<{
940
940
  message: z.ZodString;
941
941
  path: z.ZodOptional<z.ZodString>;
942
942
  }, "strip", z.ZodTypeAny, {
943
- code: "EXPIRED" | "INVALID_FORMAT" | "INVALID_DOMAINS" | "INVALID_LEVEL" | "NOT_YET_VALID" | "INVALID_TIER" | "DOMAINS_MISMATCH" | "MISSING_CAR" | "INVALID_CAR";
943
+ code: "EXPIRED" | "INVALID_FORMAT" | "INVALID_DOMAINS" | "INVALID_LEVEL" | "MISSING_CAR" | "INVALID_CAR" | "NOT_YET_VALID" | "INVALID_TIER" | "DOMAINS_MISMATCH";
944
944
  message: string;
945
945
  path?: string | undefined;
946
946
  }, {
947
- code: "EXPIRED" | "INVALID_FORMAT" | "INVALID_DOMAINS" | "INVALID_LEVEL" | "NOT_YET_VALID" | "INVALID_TIER" | "DOMAINS_MISMATCH" | "MISSING_CAR" | "INVALID_CAR";
947
+ code: "EXPIRED" | "INVALID_FORMAT" | "INVALID_DOMAINS" | "INVALID_LEVEL" | "MISSING_CAR" | "INVALID_CAR" | "NOT_YET_VALID" | "INVALID_TIER" | "DOMAINS_MISMATCH";
948
948
  message: string;
949
949
  path?: string | undefined;
950
950
  }>;
@@ -958,11 +958,11 @@ export declare const jwtClaimsValidationResultSchema: z.ZodObject<{
958
958
  message: z.ZodString;
959
959
  path: z.ZodOptional<z.ZodString>;
960
960
  }, "strip", z.ZodTypeAny, {
961
- code: "EXPIRED" | "INVALID_FORMAT" | "INVALID_DOMAINS" | "INVALID_LEVEL" | "NOT_YET_VALID" | "INVALID_TIER" | "DOMAINS_MISMATCH" | "MISSING_CAR" | "INVALID_CAR";
961
+ code: "EXPIRED" | "INVALID_FORMAT" | "INVALID_DOMAINS" | "INVALID_LEVEL" | "MISSING_CAR" | "INVALID_CAR" | "NOT_YET_VALID" | "INVALID_TIER" | "DOMAINS_MISMATCH";
962
962
  message: string;
963
963
  path?: string | undefined;
964
964
  }, {
965
- code: "EXPIRED" | "INVALID_FORMAT" | "INVALID_DOMAINS" | "INVALID_LEVEL" | "NOT_YET_VALID" | "INVALID_TIER" | "DOMAINS_MISMATCH" | "MISSING_CAR" | "INVALID_CAR";
965
+ code: "EXPIRED" | "INVALID_FORMAT" | "INVALID_DOMAINS" | "INVALID_LEVEL" | "MISSING_CAR" | "INVALID_CAR" | "NOT_YET_VALID" | "INVALID_TIER" | "DOMAINS_MISMATCH";
966
966
  message: string;
967
967
  path?: string | undefined;
968
968
  }>, "many">;
@@ -976,27 +976,27 @@ export declare const jwtClaimsValidationResultSchema: z.ZodObject<{
976
976
  jti: z.ZodOptional<z.ZodString>;
977
977
  } & {
978
978
  car: z.ZodString;
979
- aci: z.ZodOptional<z.ZodString>;
979
+ carId: z.ZodOptional<z.ZodString>;
980
980
  car_domains: z.ZodNumber;
981
- aci_domains: z.ZodOptional<z.ZodNumber>;
982
- car_domains_list: z.ZodArray<z.ZodEnum<["A", "B", "C", "D", "E", "F", "G", "H", "I", "S"]>, "many">;
983
- aci_domains_list: z.ZodOptional<z.ZodArray<z.ZodEnum<["A", "B", "C", "D", "E", "F", "G", "H", "I", "S"]>, "many">>;
981
+ carId_domains: z.ZodOptional<z.ZodNumber>;
982
+ car_domains_list: z.ZodArray<z.ZodEnum<["A", "B", "C", "D", "E", "F", "G", "H", "I", "J", "K", "L", "M", "N", "O", "P", "Q", "R", "S", "T", "U", "V", "W", "X", "Y", "Z"]>, "many">;
983
+ carId_domains_list: z.ZodOptional<z.ZodArray<z.ZodEnum<["A", "B", "C", "D", "E", "F", "G", "H", "I", "J", "K", "L", "M", "N", "O", "P", "Q", "R", "S", "T", "U", "V", "W", "X", "Y", "Z"]>, "many">>;
984
984
  car_level: z.ZodNativeEnum<typeof CapabilityLevel>;
985
- aci_level: z.ZodOptional<z.ZodNativeEnum<typeof CapabilityLevel>>;
985
+ carId_level: z.ZodOptional<z.ZodNativeEnum<typeof CapabilityLevel>>;
986
986
  car_trust: z.ZodOptional<z.ZodNativeEnum<typeof CertificationTier>>;
987
- aci_trust: z.ZodOptional<z.ZodNativeEnum<typeof CertificationTier>>;
987
+ carId_trust: z.ZodOptional<z.ZodNativeEnum<typeof CertificationTier>>;
988
988
  car_registry: z.ZodString;
989
- aci_registry: z.ZodOptional<z.ZodString>;
989
+ carId_registry: z.ZodOptional<z.ZodString>;
990
990
  car_org: z.ZodString;
991
- aci_org: z.ZodOptional<z.ZodString>;
991
+ carId_org: z.ZodOptional<z.ZodString>;
992
992
  car_class: z.ZodString;
993
- aci_class: z.ZodOptional<z.ZodString>;
993
+ carId_class: z.ZodOptional<z.ZodString>;
994
994
  car_version: z.ZodString;
995
- aci_version: z.ZodOptional<z.ZodString>;
995
+ carId_version: z.ZodOptional<z.ZodString>;
996
996
  car_did: z.ZodOptional<z.ZodString>;
997
- aci_did: z.ZodOptional<z.ZodString>;
997
+ carId_did: z.ZodOptional<z.ZodString>;
998
998
  car_runtime_tier: z.ZodOptional<z.ZodNativeEnum<typeof RuntimeTier>>;
999
- aci_runtime_tier: z.ZodOptional<z.ZodNativeEnum<typeof RuntimeTier>>;
999
+ carId_runtime_tier: z.ZodOptional<z.ZodNativeEnum<typeof RuntimeTier>>;
1000
1000
  car_attestations: z.ZodOptional<z.ZodArray<z.ZodObject<{
1001
1001
  iss: z.ZodString;
1002
1002
  tier: z.ZodNativeEnum<typeof CertificationTier>;
@@ -1019,7 +1019,7 @@ export declare const jwtClaimsValidationResultSchema: z.ZodObject<{
1019
1019
  iat: number;
1020
1020
  evidence?: string | undefined;
1021
1021
  }>, "many">>;
1022
- aci_attestations: z.ZodOptional<z.ZodArray<z.ZodObject<{
1022
+ carId_attestations: z.ZodOptional<z.ZodArray<z.ZodObject<{
1023
1023
  iss: z.ZodString;
1024
1024
  tier: z.ZodNativeEnum<typeof CertificationTier>;
1025
1025
  scope: z.ZodString;
@@ -1042,7 +1042,7 @@ export declare const jwtClaimsValidationResultSchema: z.ZodObject<{
1042
1042
  evidence?: string | undefined;
1043
1043
  }>, "many">>;
1044
1044
  car_permission_ceiling: z.ZodOptional<z.ZodNumber>;
1045
- aci_permission_ceiling: z.ZodOptional<z.ZodNumber>;
1045
+ carId_permission_ceiling: z.ZodOptional<z.ZodNumber>;
1046
1046
  car_constraints: z.ZodOptional<z.ZodObject<{
1047
1047
  max_operations: z.ZodOptional<z.ZodNumber>;
1048
1048
  allowed_resources: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
@@ -1065,7 +1065,7 @@ export declare const jwtClaimsValidationResultSchema: z.ZodObject<{
1065
1065
  blocked_resources?: string[] | undefined;
1066
1066
  valid_until?: number | undefined;
1067
1067
  }>>;
1068
- aci_constraints: z.ZodOptional<z.ZodObject<{
1068
+ carId_constraints: z.ZodOptional<z.ZodObject<{
1069
1069
  max_operations: z.ZodOptional<z.ZodNumber>;
1070
1070
  allowed_resources: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
1071
1071
  blocked_resources: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
@@ -1090,31 +1090,34 @@ export declare const jwtClaimsValidationResultSchema: z.ZodObject<{
1090
1090
  }, "strip", z.ZodTypeAny, {
1091
1091
  car: string;
1092
1092
  car_domains: number;
1093
- car_domains_list: ("A" | "B" | "C" | "D" | "E" | "F" | "G" | "H" | "I" | "S")[];
1093
+ car_domains_list: ("A" | "B" | "C" | "D" | "E" | "F" | "G" | "H" | "I" | "J" | "K" | "L" | "M" | "N" | "O" | "P" | "Q" | "R" | "S" | "T" | "U" | "V" | "W" | "X" | "Y" | "Z")[];
1094
1094
  car_level: CapabilityLevel;
1095
1095
  car_registry: string;
1096
1096
  car_org: string;
1097
1097
  car_class: string;
1098
1098
  car_version: string;
1099
- aci?: string | undefined;
1100
1099
  sub?: string | undefined;
1100
+ carId?: string | undefined;
1101
1101
  jti?: string | undefined;
1102
1102
  iss?: string | undefined;
1103
1103
  aud?: string | string[] | undefined;
1104
1104
  exp?: number | undefined;
1105
1105
  nbf?: number | undefined;
1106
1106
  iat?: number | undefined;
1107
- aci_domains?: number | undefined;
1108
- aci_domains_list?: ("A" | "B" | "C" | "D" | "E" | "F" | "G" | "H" | "I" | "S")[] | undefined;
1109
- aci_level?: CapabilityLevel | undefined;
1110
- aci_trust?: CertificationTier | undefined;
1111
- aci_registry?: string | undefined;
1112
- aci_org?: string | undefined;
1113
- aci_class?: string | undefined;
1114
- aci_version?: string | undefined;
1115
- aci_did?: string | undefined;
1116
- aci_runtime_tier?: RuntimeTier | undefined;
1117
- aci_attestations?: {
1107
+ carId_domains?: number | undefined;
1108
+ carId_domains_list?: ("A" | "B" | "C" | "D" | "E" | "F" | "G" | "H" | "I" | "J" | "K" | "L" | "M" | "N" | "O" | "P" | "Q" | "R" | "S" | "T" | "U" | "V" | "W" | "X" | "Y" | "Z")[] | undefined;
1109
+ carId_level?: CapabilityLevel | undefined;
1110
+ car_trust?: CertificationTier | undefined;
1111
+ carId_trust?: CertificationTier | undefined;
1112
+ carId_registry?: string | undefined;
1113
+ carId_org?: string | undefined;
1114
+ carId_class?: string | undefined;
1115
+ carId_version?: string | undefined;
1116
+ car_did?: string | undefined;
1117
+ carId_did?: string | undefined;
1118
+ car_runtime_tier?: RuntimeTier | undefined;
1119
+ carId_runtime_tier?: RuntimeTier | undefined;
1120
+ car_attestations?: {
1118
1121
  scope: string;
1119
1122
  tier: CertificationTier;
1120
1123
  iss: string;
@@ -1122,19 +1125,7 @@ export declare const jwtClaimsValidationResultSchema: z.ZodObject<{
1122
1125
  iat: number;
1123
1126
  evidence?: string | undefined;
1124
1127
  }[] | undefined;
1125
- aci_permission_ceiling?: number | undefined;
1126
- aci_constraints?: {
1127
- custom?: Record<string, unknown> | undefined;
1128
- requires_approval?: boolean | undefined;
1129
- max_operations?: number | undefined;
1130
- allowed_resources?: string[] | undefined;
1131
- blocked_resources?: string[] | undefined;
1132
- valid_until?: number | undefined;
1133
- } | undefined;
1134
- car_trust?: CertificationTier | undefined;
1135
- car_did?: string | undefined;
1136
- car_runtime_tier?: RuntimeTier | undefined;
1137
- car_attestations?: {
1128
+ carId_attestations?: {
1138
1129
  scope: string;
1139
1130
  tier: CertificationTier;
1140
1131
  iss: string;
@@ -1143,6 +1134,7 @@ export declare const jwtClaimsValidationResultSchema: z.ZodObject<{
1143
1134
  evidence?: string | undefined;
1144
1135
  }[] | undefined;
1145
1136
  car_permission_ceiling?: number | undefined;
1137
+ carId_permission_ceiling?: number | undefined;
1146
1138
  car_constraints?: {
1147
1139
  custom?: Record<string, unknown> | undefined;
1148
1140
  requires_approval?: boolean | undefined;
@@ -1151,34 +1143,45 @@ export declare const jwtClaimsValidationResultSchema: z.ZodObject<{
1151
1143
  blocked_resources?: string[] | undefined;
1152
1144
  valid_until?: number | undefined;
1153
1145
  } | undefined;
1146
+ carId_constraints?: {
1147
+ custom?: Record<string, unknown> | undefined;
1148
+ requires_approval?: boolean | undefined;
1149
+ max_operations?: number | undefined;
1150
+ allowed_resources?: string[] | undefined;
1151
+ blocked_resources?: string[] | undefined;
1152
+ valid_until?: number | undefined;
1153
+ } | undefined;
1154
1154
  }, {
1155
1155
  car: string;
1156
1156
  car_domains: number;
1157
- car_domains_list: ("A" | "B" | "C" | "D" | "E" | "F" | "G" | "H" | "I" | "S")[];
1157
+ car_domains_list: ("A" | "B" | "C" | "D" | "E" | "F" | "G" | "H" | "I" | "J" | "K" | "L" | "M" | "N" | "O" | "P" | "Q" | "R" | "S" | "T" | "U" | "V" | "W" | "X" | "Y" | "Z")[];
1158
1158
  car_level: CapabilityLevel;
1159
1159
  car_registry: string;
1160
1160
  car_org: string;
1161
1161
  car_class: string;
1162
1162
  car_version: string;
1163
- aci?: string | undefined;
1164
1163
  sub?: string | undefined;
1164
+ carId?: string | undefined;
1165
1165
  jti?: string | undefined;
1166
1166
  iss?: string | undefined;
1167
1167
  aud?: string | string[] | undefined;
1168
1168
  exp?: number | undefined;
1169
1169
  nbf?: number | undefined;
1170
1170
  iat?: number | undefined;
1171
- aci_domains?: number | undefined;
1172
- aci_domains_list?: ("A" | "B" | "C" | "D" | "E" | "F" | "G" | "H" | "I" | "S")[] | undefined;
1173
- aci_level?: CapabilityLevel | undefined;
1174
- aci_trust?: CertificationTier | undefined;
1175
- aci_registry?: string | undefined;
1176
- aci_org?: string | undefined;
1177
- aci_class?: string | undefined;
1178
- aci_version?: string | undefined;
1179
- aci_did?: string | undefined;
1180
- aci_runtime_tier?: RuntimeTier | undefined;
1181
- aci_attestations?: {
1171
+ carId_domains?: number | undefined;
1172
+ carId_domains_list?: ("A" | "B" | "C" | "D" | "E" | "F" | "G" | "H" | "I" | "J" | "K" | "L" | "M" | "N" | "O" | "P" | "Q" | "R" | "S" | "T" | "U" | "V" | "W" | "X" | "Y" | "Z")[] | undefined;
1173
+ carId_level?: CapabilityLevel | undefined;
1174
+ car_trust?: CertificationTier | undefined;
1175
+ carId_trust?: CertificationTier | undefined;
1176
+ carId_registry?: string | undefined;
1177
+ carId_org?: string | undefined;
1178
+ carId_class?: string | undefined;
1179
+ carId_version?: string | undefined;
1180
+ car_did?: string | undefined;
1181
+ carId_did?: string | undefined;
1182
+ car_runtime_tier?: RuntimeTier | undefined;
1183
+ carId_runtime_tier?: RuntimeTier | undefined;
1184
+ car_attestations?: {
1182
1185
  scope: string;
1183
1186
  tier: CertificationTier;
1184
1187
  iss: string;
@@ -1186,19 +1189,7 @@ export declare const jwtClaimsValidationResultSchema: z.ZodObject<{
1186
1189
  iat: number;
1187
1190
  evidence?: string | undefined;
1188
1191
  }[] | undefined;
1189
- aci_permission_ceiling?: number | undefined;
1190
- aci_constraints?: {
1191
- custom?: Record<string, unknown> | undefined;
1192
- requires_approval?: boolean | undefined;
1193
- max_operations?: number | undefined;
1194
- allowed_resources?: string[] | undefined;
1195
- blocked_resources?: string[] | undefined;
1196
- valid_until?: number | undefined;
1197
- } | undefined;
1198
- car_trust?: CertificationTier | undefined;
1199
- car_did?: string | undefined;
1200
- car_runtime_tier?: RuntimeTier | undefined;
1201
- car_attestations?: {
1192
+ carId_attestations?: {
1202
1193
  scope: string;
1203
1194
  tier: CertificationTier;
1204
1195
  iss: string;
@@ -1207,6 +1198,7 @@ export declare const jwtClaimsValidationResultSchema: z.ZodObject<{
1207
1198
  evidence?: string | undefined;
1208
1199
  }[] | undefined;
1209
1200
  car_permission_ceiling?: number | undefined;
1201
+ carId_permission_ceiling?: number | undefined;
1210
1202
  car_constraints?: {
1211
1203
  custom?: Record<string, unknown> | undefined;
1212
1204
  requires_approval?: boolean | undefined;
@@ -1215,42 +1207,53 @@ export declare const jwtClaimsValidationResultSchema: z.ZodObject<{
1215
1207
  blocked_resources?: string[] | undefined;
1216
1208
  valid_until?: number | undefined;
1217
1209
  } | undefined;
1210
+ carId_constraints?: {
1211
+ custom?: Record<string, unknown> | undefined;
1212
+ requires_approval?: boolean | undefined;
1213
+ max_operations?: number | undefined;
1214
+ allowed_resources?: string[] | undefined;
1215
+ blocked_resources?: string[] | undefined;
1216
+ valid_until?: number | undefined;
1217
+ } | undefined;
1218
1218
  }>>;
1219
1219
  }, "strip", z.ZodTypeAny, {
1220
1220
  valid: boolean;
1221
1221
  errors: {
1222
- code: "EXPIRED" | "INVALID_FORMAT" | "INVALID_DOMAINS" | "INVALID_LEVEL" | "NOT_YET_VALID" | "INVALID_TIER" | "DOMAINS_MISMATCH" | "MISSING_CAR" | "INVALID_CAR";
1222
+ code: "EXPIRED" | "INVALID_FORMAT" | "INVALID_DOMAINS" | "INVALID_LEVEL" | "MISSING_CAR" | "INVALID_CAR" | "NOT_YET_VALID" | "INVALID_TIER" | "DOMAINS_MISMATCH";
1223
1223
  message: string;
1224
1224
  path?: string | undefined;
1225
1225
  }[];
1226
1226
  claims?: {
1227
1227
  car: string;
1228
1228
  car_domains: number;
1229
- car_domains_list: ("A" | "B" | "C" | "D" | "E" | "F" | "G" | "H" | "I" | "S")[];
1229
+ car_domains_list: ("A" | "B" | "C" | "D" | "E" | "F" | "G" | "H" | "I" | "J" | "K" | "L" | "M" | "N" | "O" | "P" | "Q" | "R" | "S" | "T" | "U" | "V" | "W" | "X" | "Y" | "Z")[];
1230
1230
  car_level: CapabilityLevel;
1231
1231
  car_registry: string;
1232
1232
  car_org: string;
1233
1233
  car_class: string;
1234
1234
  car_version: string;
1235
- aci?: string | undefined;
1236
1235
  sub?: string | undefined;
1236
+ carId?: string | undefined;
1237
1237
  jti?: string | undefined;
1238
1238
  iss?: string | undefined;
1239
1239
  aud?: string | string[] | undefined;
1240
1240
  exp?: number | undefined;
1241
1241
  nbf?: number | undefined;
1242
1242
  iat?: number | undefined;
1243
- aci_domains?: number | undefined;
1244
- aci_domains_list?: ("A" | "B" | "C" | "D" | "E" | "F" | "G" | "H" | "I" | "S")[] | undefined;
1245
- aci_level?: CapabilityLevel | undefined;
1246
- aci_trust?: CertificationTier | undefined;
1247
- aci_registry?: string | undefined;
1248
- aci_org?: string | undefined;
1249
- aci_class?: string | undefined;
1250
- aci_version?: string | undefined;
1251
- aci_did?: string | undefined;
1252
- aci_runtime_tier?: RuntimeTier | undefined;
1253
- aci_attestations?: {
1243
+ carId_domains?: number | undefined;
1244
+ carId_domains_list?: ("A" | "B" | "C" | "D" | "E" | "F" | "G" | "H" | "I" | "J" | "K" | "L" | "M" | "N" | "O" | "P" | "Q" | "R" | "S" | "T" | "U" | "V" | "W" | "X" | "Y" | "Z")[] | undefined;
1245
+ carId_level?: CapabilityLevel | undefined;
1246
+ car_trust?: CertificationTier | undefined;
1247
+ carId_trust?: CertificationTier | undefined;
1248
+ carId_registry?: string | undefined;
1249
+ carId_org?: string | undefined;
1250
+ carId_class?: string | undefined;
1251
+ carId_version?: string | undefined;
1252
+ car_did?: string | undefined;
1253
+ carId_did?: string | undefined;
1254
+ car_runtime_tier?: RuntimeTier | undefined;
1255
+ carId_runtime_tier?: RuntimeTier | undefined;
1256
+ car_attestations?: {
1254
1257
  scope: string;
1255
1258
  tier: CertificationTier;
1256
1259
  iss: string;
@@ -1258,19 +1261,7 @@ export declare const jwtClaimsValidationResultSchema: z.ZodObject<{
1258
1261
  iat: number;
1259
1262
  evidence?: string | undefined;
1260
1263
  }[] | undefined;
1261
- aci_permission_ceiling?: number | undefined;
1262
- aci_constraints?: {
1263
- custom?: Record<string, unknown> | undefined;
1264
- requires_approval?: boolean | undefined;
1265
- max_operations?: number | undefined;
1266
- allowed_resources?: string[] | undefined;
1267
- blocked_resources?: string[] | undefined;
1268
- valid_until?: number | undefined;
1269
- } | undefined;
1270
- car_trust?: CertificationTier | undefined;
1271
- car_did?: string | undefined;
1272
- car_runtime_tier?: RuntimeTier | undefined;
1273
- car_attestations?: {
1264
+ carId_attestations?: {
1274
1265
  scope: string;
1275
1266
  tier: CertificationTier;
1276
1267
  iss: string;
@@ -1279,6 +1270,7 @@ export declare const jwtClaimsValidationResultSchema: z.ZodObject<{
1279
1270
  evidence?: string | undefined;
1280
1271
  }[] | undefined;
1281
1272
  car_permission_ceiling?: number | undefined;
1273
+ carId_permission_ceiling?: number | undefined;
1282
1274
  car_constraints?: {
1283
1275
  custom?: Record<string, unknown> | undefined;
1284
1276
  requires_approval?: boolean | undefined;
@@ -1287,42 +1279,53 @@ export declare const jwtClaimsValidationResultSchema: z.ZodObject<{
1287
1279
  blocked_resources?: string[] | undefined;
1288
1280
  valid_until?: number | undefined;
1289
1281
  } | undefined;
1282
+ carId_constraints?: {
1283
+ custom?: Record<string, unknown> | undefined;
1284
+ requires_approval?: boolean | undefined;
1285
+ max_operations?: number | undefined;
1286
+ allowed_resources?: string[] | undefined;
1287
+ blocked_resources?: string[] | undefined;
1288
+ valid_until?: number | undefined;
1289
+ } | undefined;
1290
1290
  } | undefined;
1291
1291
  }, {
1292
1292
  valid: boolean;
1293
1293
  errors: {
1294
- code: "EXPIRED" | "INVALID_FORMAT" | "INVALID_DOMAINS" | "INVALID_LEVEL" | "NOT_YET_VALID" | "INVALID_TIER" | "DOMAINS_MISMATCH" | "MISSING_CAR" | "INVALID_CAR";
1294
+ code: "EXPIRED" | "INVALID_FORMAT" | "INVALID_DOMAINS" | "INVALID_LEVEL" | "MISSING_CAR" | "INVALID_CAR" | "NOT_YET_VALID" | "INVALID_TIER" | "DOMAINS_MISMATCH";
1295
1295
  message: string;
1296
1296
  path?: string | undefined;
1297
1297
  }[];
1298
1298
  claims?: {
1299
1299
  car: string;
1300
1300
  car_domains: number;
1301
- car_domains_list: ("A" | "B" | "C" | "D" | "E" | "F" | "G" | "H" | "I" | "S")[];
1301
+ car_domains_list: ("A" | "B" | "C" | "D" | "E" | "F" | "G" | "H" | "I" | "J" | "K" | "L" | "M" | "N" | "O" | "P" | "Q" | "R" | "S" | "T" | "U" | "V" | "W" | "X" | "Y" | "Z")[];
1302
1302
  car_level: CapabilityLevel;
1303
1303
  car_registry: string;
1304
1304
  car_org: string;
1305
1305
  car_class: string;
1306
1306
  car_version: string;
1307
- aci?: string | undefined;
1308
1307
  sub?: string | undefined;
1308
+ carId?: string | undefined;
1309
1309
  jti?: string | undefined;
1310
1310
  iss?: string | undefined;
1311
1311
  aud?: string | string[] | undefined;
1312
1312
  exp?: number | undefined;
1313
1313
  nbf?: number | undefined;
1314
1314
  iat?: number | undefined;
1315
- aci_domains?: number | undefined;
1316
- aci_domains_list?: ("A" | "B" | "C" | "D" | "E" | "F" | "G" | "H" | "I" | "S")[] | undefined;
1317
- aci_level?: CapabilityLevel | undefined;
1318
- aci_trust?: CertificationTier | undefined;
1319
- aci_registry?: string | undefined;
1320
- aci_org?: string | undefined;
1321
- aci_class?: string | undefined;
1322
- aci_version?: string | undefined;
1323
- aci_did?: string | undefined;
1324
- aci_runtime_tier?: RuntimeTier | undefined;
1325
- aci_attestations?: {
1315
+ carId_domains?: number | undefined;
1316
+ carId_domains_list?: ("A" | "B" | "C" | "D" | "E" | "F" | "G" | "H" | "I" | "J" | "K" | "L" | "M" | "N" | "O" | "P" | "Q" | "R" | "S" | "T" | "U" | "V" | "W" | "X" | "Y" | "Z")[] | undefined;
1317
+ carId_level?: CapabilityLevel | undefined;
1318
+ car_trust?: CertificationTier | undefined;
1319
+ carId_trust?: CertificationTier | undefined;
1320
+ carId_registry?: string | undefined;
1321
+ carId_org?: string | undefined;
1322
+ carId_class?: string | undefined;
1323
+ carId_version?: string | undefined;
1324
+ car_did?: string | undefined;
1325
+ carId_did?: string | undefined;
1326
+ car_runtime_tier?: RuntimeTier | undefined;
1327
+ carId_runtime_tier?: RuntimeTier | undefined;
1328
+ car_attestations?: {
1326
1329
  scope: string;
1327
1330
  tier: CertificationTier;
1328
1331
  iss: string;
@@ -1330,19 +1333,7 @@ export declare const jwtClaimsValidationResultSchema: z.ZodObject<{
1330
1333
  iat: number;
1331
1334
  evidence?: string | undefined;
1332
1335
  }[] | undefined;
1333
- aci_permission_ceiling?: number | undefined;
1334
- aci_constraints?: {
1335
- custom?: Record<string, unknown> | undefined;
1336
- requires_approval?: boolean | undefined;
1337
- max_operations?: number | undefined;
1338
- allowed_resources?: string[] | undefined;
1339
- blocked_resources?: string[] | undefined;
1340
- valid_until?: number | undefined;
1341
- } | undefined;
1342
- car_trust?: CertificationTier | undefined;
1343
- car_did?: string | undefined;
1344
- car_runtime_tier?: RuntimeTier | undefined;
1345
- car_attestations?: {
1336
+ carId_attestations?: {
1346
1337
  scope: string;
1347
1338
  tier: CertificationTier;
1348
1339
  iss: string;
@@ -1351,6 +1342,7 @@ export declare const jwtClaimsValidationResultSchema: z.ZodObject<{
1351
1342
  evidence?: string | undefined;
1352
1343
  }[] | undefined;
1353
1344
  car_permission_ceiling?: number | undefined;
1345
+ carId_permission_ceiling?: number | undefined;
1354
1346
  car_constraints?: {
1355
1347
  custom?: Record<string, unknown> | undefined;
1356
1348
  requires_approval?: boolean | undefined;
@@ -1359,6 +1351,14 @@ export declare const jwtClaimsValidationResultSchema: z.ZodObject<{
1359
1351
  blocked_resources?: string[] | undefined;
1360
1352
  valid_until?: number | undefined;
1361
1353
  } | undefined;
1354
+ carId_constraints?: {
1355
+ custom?: Record<string, unknown> | undefined;
1356
+ requires_approval?: boolean | undefined;
1357
+ max_operations?: number | undefined;
1358
+ allowed_resources?: string[] | undefined;
1359
+ blocked_resources?: string[] | undefined;
1360
+ valid_until?: number | undefined;
1361
+ } | undefined;
1362
1362
  } | undefined;
1363
1363
  }>;
1364
1364
  //# sourceMappingURL=jwt-claims.d.ts.map