@vorionsys/contracts 0.1.1 → 0.1.3
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +44 -0
- package/LICENSE +190 -0
- package/README.md +373 -84
- package/dist/aci/index.d.ts +4 -70
- package/dist/aci/index.d.ts.map +1 -1
- package/dist/aci/index.js +18 -373
- package/dist/aci/index.js.map +1 -1
- package/dist/canonical/agent.d.ts +15 -15
- package/dist/canonical/agent.d.ts.map +1 -1
- package/dist/canonical/governance.d.ts +8 -8
- package/dist/canonical/intent.d.ts +18 -18
- package/dist/canonical/middleware.d.ts +4 -4
- package/dist/canonical/trust-signal.d.ts +48 -45
- package/dist/canonical/trust-signal.d.ts.map +1 -1
- package/dist/canonical/trust-signal.js +7 -2
- package/dist/canonical/trust-signal.js.map +1 -1
- package/dist/canonical/validation.d.ts +11 -26
- package/dist/canonical/validation.d.ts.map +1 -1
- package/dist/canonical/validation.js +30 -101
- package/dist/canonical/validation.js.map +1 -1
- package/dist/car/attestation.d.ts +30 -30
- package/dist/car/attestation.d.ts.map +1 -1
- package/dist/car/attestation.js +3 -1
- package/dist/car/attestation.js.map +1 -1
- package/dist/car/car-string.d.ts +47 -47
- package/dist/car/car-string.d.ts.map +1 -1
- package/dist/car/car-string.js +36 -36
- package/dist/car/car-string.js.map +1 -1
- package/dist/car/domains.d.ts +34 -18
- package/dist/car/domains.d.ts.map +1 -1
- package/dist/car/domains.js +53 -15
- package/dist/car/domains.js.map +1 -1
- package/dist/car/effective-permission.d.ts +61 -13
- package/dist/car/effective-permission.d.ts.map +1 -1
- package/dist/car/effective-permission.js +30 -2
- package/dist/car/effective-permission.js.map +1 -1
- package/dist/car/identity.d.ts +327 -108
- package/dist/car/identity.d.ts.map +1 -1
- package/dist/car/identity.js +112 -10
- package/dist/car/identity.js.map +1 -1
- package/dist/car/index.d.ts +3 -3
- package/dist/car/index.d.ts.map +1 -1
- package/dist/car/index.js +15 -7
- package/dist/car/index.js.map +1 -1
- package/dist/car/jwt-claims.d.ts +273 -273
- package/dist/car/jwt-claims.d.ts.map +1 -1
- package/dist/car/jwt-claims.js +39 -46
- package/dist/car/jwt-claims.js.map +1 -1
- package/dist/car/levels.d.ts +2 -2
- package/dist/car/mapping.d.ts +36 -36
- package/dist/car/mapping.d.ts.map +1 -1
- package/dist/car/mapping.js +107 -43
- package/dist/car/mapping.js.map +1 -1
- package/dist/car/skills.d.ts +4 -4
- package/dist/car/tiers.d.ts +7 -7
- package/dist/car/tiers.js +10 -10
- package/dist/car/tiers.js.map +1 -1
- package/dist/common/primitives.d.ts +2 -2
- package/dist/db/agents.d.ts +549 -9
- package/dist/db/agents.d.ts.map +1 -1
- package/dist/db/agents.js +4 -4
- package/dist/db/agents.js.map +1 -1
- package/dist/db/api-keys.d.ts +144 -3
- package/dist/db/api-keys.d.ts.map +1 -1
- package/dist/db/escalations.d.ts +156 -2
- package/dist/db/escalations.d.ts.map +1 -1
- package/dist/db/intents.d.ts +154 -3
- package/dist/db/intents.d.ts.map +1 -1
- package/dist/db/merkle.d.ts +134 -3
- package/dist/db/merkle.d.ts.map +1 -1
- package/dist/db/operations.d.ts +71 -2
- package/dist/db/operations.d.ts.map +1 -1
- package/dist/db/policy-versions.d.ts +38 -1
- package/dist/db/policy-versions.d.ts.map +1 -1
- package/dist/db/proofs.d.ts +119 -3
- package/dist/db/proofs.d.ts.map +1 -1
- package/dist/db/rbac.d.ts +233 -6
- package/dist/db/rbac.d.ts.map +1 -1
- package/dist/db/service-accounts.d.ts +218 -6
- package/dist/db/service-accounts.d.ts.map +1 -1
- package/dist/db/trust.d.ts +168 -2
- package/dist/db/trust.d.ts.map +1 -1
- package/dist/db/webhooks.d.ts +103 -1
- package/dist/db/webhooks.d.ts.map +1 -1
- package/dist/v2/enums.d.ts +5 -0
- package/dist/v2/enums.d.ts.map +1 -1
- package/dist/v2/enums.js +5 -0
- package/dist/v2/enums.js.map +1 -1
- package/dist/v2/evidence.d.ts +20 -20
- package/dist/v2/pre-action-gate.js +5 -5
- package/dist/v2/pre-action-gate.js.map +1 -1
- package/dist/v2/proof-event.d.ts +3 -1
- package/dist/v2/proof-event.d.ts.map +1 -1
- package/dist/v2/retention.d.ts +14 -14
- package/dist/v2/trust-delta.d.ts +6 -6
- package/dist/v2/trust-delta.d.ts.map +1 -1
- package/dist/v2/trust-profile.d.ts +116 -54
- package/dist/v2/trust-profile.d.ts.map +1 -1
- package/dist/v2/trust-profile.js +22 -17
- package/dist/v2/trust-profile.js.map +1 -1
- package/dist/validators/decision.d.ts +6 -6
- package/dist/validators/intent.d.ts +8 -8
- package/dist/validators/proof-event.d.ts +57 -54
- package/dist/validators/proof-event.d.ts.map +1 -1
- package/dist/validators/proof-event.js +2 -1
- package/dist/validators/proof-event.js.map +1 -1
- package/dist/validators/trust-profile.d.ts +76 -244
- package/dist/validators/trust-profile.d.ts.map +1 -1
- package/dist/validators/trust-profile.js +21 -35
- package/dist/validators/trust-profile.js.map +1 -1
- package/package.json +26 -11
- package/dist/aci/aci-string.d.ts +0 -539
- package/dist/aci/aci-string.d.ts.map +0 -1
- package/dist/aci/aci-string.js +0 -581
- package/dist/aci/aci-string.js.map +0 -1
- package/dist/aci/attestation.d.ts +0 -648
- package/dist/aci/attestation.d.ts.map +0 -1
- package/dist/aci/attestation.js +0 -299
- package/dist/aci/attestation.js.map +0 -1
- package/dist/aci/domains.d.ts +0 -260
- package/dist/aci/domains.d.ts.map +0 -1
- package/dist/aci/domains.js +0 -340
- package/dist/aci/domains.js.map +0 -1
- package/dist/aci/effective-permission.d.ts +0 -371
- package/dist/aci/effective-permission.d.ts.map +0 -1
- package/dist/aci/effective-permission.js +0 -364
- package/dist/aci/effective-permission.js.map +0 -1
- package/dist/aci/identity.d.ts +0 -1100
- package/dist/aci/identity.d.ts.map +0 -1
- package/dist/aci/identity.js +0 -338
- package/dist/aci/identity.js.map +0 -1
- package/dist/aci/jwt-claims.d.ts +0 -756
- package/dist/aci/jwt-claims.d.ts.map +0 -1
- package/dist/aci/jwt-claims.js +0 -345
- package/dist/aci/jwt-claims.js.map +0 -1
- package/dist/aci/levels.d.ts +0 -279
- package/dist/aci/levels.d.ts.map +0 -1
- package/dist/aci/levels.js +0 -486
- package/dist/aci/levels.js.map +0 -1
- package/dist/aci/mapping.d.ts +0 -291
- package/dist/aci/mapping.d.ts.map +0 -1
- package/dist/aci/mapping.js +0 -447
- package/dist/aci/mapping.js.map +0 -1
- package/dist/aci/skills.d.ts +0 -314
- package/dist/aci/skills.d.ts.map +0 -1
- package/dist/aci/skills.js +0 -426
- package/dist/aci/skills.js.map +0 -1
- package/dist/aci/tiers.d.ts +0 -403
- package/dist/aci/tiers.d.ts.map +0 -1
- package/dist/aci/tiers.js +0 -686
- package/dist/aci/tiers.js.map +0 -1
package/dist/car/jwt-claims.d.ts
CHANGED
|
@@ -73,19 +73,19 @@ export interface CARJWTClaims extends StandardJWTClaims {
|
|
|
73
73
|
/** Full CAR string (immutable identifier, no trust info) */
|
|
74
74
|
car: string;
|
|
75
75
|
/** @deprecated Use car instead */
|
|
76
|
-
|
|
76
|
+
carId?: string;
|
|
77
77
|
/** Domain bitmask for efficient validation */
|
|
78
78
|
car_domains: number;
|
|
79
79
|
/** @deprecated Use car_domains instead */
|
|
80
|
-
|
|
80
|
+
carId_domains?: number;
|
|
81
81
|
/** Domain codes array for readability */
|
|
82
82
|
car_domains_list: DomainCode[];
|
|
83
83
|
/** @deprecated Use car_domains_list instead */
|
|
84
|
-
|
|
84
|
+
carId_domains_list?: DomainCode[];
|
|
85
85
|
/** Capability level */
|
|
86
86
|
car_level: CapabilityLevel;
|
|
87
87
|
/** @deprecated Use car_level instead */
|
|
88
|
-
|
|
88
|
+
carId_level?: CapabilityLevel;
|
|
89
89
|
/**
|
|
90
90
|
* Certification tier from attestations (OPTIONAL).
|
|
91
91
|
* This is NOT from the CAR itself - it comes from valid attestations.
|
|
@@ -93,43 +93,43 @@ export interface CARJWTClaims extends StandardJWTClaims {
|
|
|
93
93
|
*/
|
|
94
94
|
car_trust?: CertificationTier;
|
|
95
95
|
/** @deprecated Use car_trust instead */
|
|
96
|
-
|
|
96
|
+
carId_trust?: CertificationTier;
|
|
97
97
|
/** Registry */
|
|
98
98
|
car_registry: string;
|
|
99
99
|
/** @deprecated Use car_registry instead */
|
|
100
|
-
|
|
100
|
+
carId_registry?: string;
|
|
101
101
|
/** Organization */
|
|
102
102
|
car_org: string;
|
|
103
103
|
/** @deprecated Use car_org instead */
|
|
104
|
-
|
|
104
|
+
carId_org?: string;
|
|
105
105
|
/** Agent class */
|
|
106
106
|
car_class: string;
|
|
107
107
|
/** @deprecated Use car_class instead */
|
|
108
|
-
|
|
108
|
+
carId_class?: string;
|
|
109
109
|
/** CAR version */
|
|
110
110
|
car_version: string;
|
|
111
111
|
/** @deprecated Use car_version instead */
|
|
112
|
-
|
|
112
|
+
carId_version?: string;
|
|
113
113
|
/** Agent DID (optional) */
|
|
114
114
|
car_did?: string;
|
|
115
115
|
/** @deprecated Use car_did instead */
|
|
116
|
-
|
|
116
|
+
carId_did?: string;
|
|
117
117
|
/** Runtime tier in current context (optional) */
|
|
118
118
|
car_runtime_tier?: RuntimeTier;
|
|
119
119
|
/** @deprecated Use car_runtime_tier instead */
|
|
120
|
-
|
|
120
|
+
carId_runtime_tier?: RuntimeTier;
|
|
121
121
|
/** Attestation summaries - source of car_trust value */
|
|
122
122
|
car_attestations?: CARAttestationClaim[];
|
|
123
123
|
/** @deprecated Use car_attestations instead */
|
|
124
|
-
|
|
124
|
+
carId_attestations?: CARAttestationClaim[];
|
|
125
125
|
/** Effective permission ceiling (optional) */
|
|
126
126
|
car_permission_ceiling?: number;
|
|
127
127
|
/** @deprecated Use car_permission_ceiling instead */
|
|
128
|
-
|
|
128
|
+
carId_permission_ceiling?: number;
|
|
129
129
|
/** Session-specific constraints (optional) */
|
|
130
130
|
car_constraints?: CARConstraintsClaim;
|
|
131
131
|
/** @deprecated Use car_constraints instead */
|
|
132
|
-
|
|
132
|
+
carId_constraints?: CARConstraintsClaim;
|
|
133
133
|
}
|
|
134
134
|
/** @deprecated Use CARJWTClaims instead */
|
|
135
135
|
export type ACIJWTClaims = CARJWTClaims;
|
|
@@ -281,27 +281,27 @@ export declare const carJWTClaimsSchema: z.ZodObject<{
|
|
|
281
281
|
jti: z.ZodOptional<z.ZodString>;
|
|
282
282
|
} & {
|
|
283
283
|
car: z.ZodString;
|
|
284
|
-
|
|
284
|
+
carId: z.ZodOptional<z.ZodString>;
|
|
285
285
|
car_domains: z.ZodNumber;
|
|
286
|
-
|
|
287
|
-
car_domains_list: z.ZodArray<z.ZodEnum<["A", "B", "C", "D", "E", "F", "G", "H", "I", "S"]>, "many">;
|
|
288
|
-
|
|
286
|
+
carId_domains: z.ZodOptional<z.ZodNumber>;
|
|
287
|
+
car_domains_list: z.ZodArray<z.ZodEnum<["A", "B", "C", "D", "E", "F", "G", "H", "I", "J", "K", "L", "M", "N", "O", "P", "Q", "R", "S", "T", "U", "V", "W", "X", "Y", "Z"]>, "many">;
|
|
288
|
+
carId_domains_list: z.ZodOptional<z.ZodArray<z.ZodEnum<["A", "B", "C", "D", "E", "F", "G", "H", "I", "J", "K", "L", "M", "N", "O", "P", "Q", "R", "S", "T", "U", "V", "W", "X", "Y", "Z"]>, "many">>;
|
|
289
289
|
car_level: z.ZodNativeEnum<typeof CapabilityLevel>;
|
|
290
|
-
|
|
290
|
+
carId_level: z.ZodOptional<z.ZodNativeEnum<typeof CapabilityLevel>>;
|
|
291
291
|
car_trust: z.ZodOptional<z.ZodNativeEnum<typeof CertificationTier>>;
|
|
292
|
-
|
|
292
|
+
carId_trust: z.ZodOptional<z.ZodNativeEnum<typeof CertificationTier>>;
|
|
293
293
|
car_registry: z.ZodString;
|
|
294
|
-
|
|
294
|
+
carId_registry: z.ZodOptional<z.ZodString>;
|
|
295
295
|
car_org: z.ZodString;
|
|
296
|
-
|
|
296
|
+
carId_org: z.ZodOptional<z.ZodString>;
|
|
297
297
|
car_class: z.ZodString;
|
|
298
|
-
|
|
298
|
+
carId_class: z.ZodOptional<z.ZodString>;
|
|
299
299
|
car_version: z.ZodString;
|
|
300
|
-
|
|
300
|
+
carId_version: z.ZodOptional<z.ZodString>;
|
|
301
301
|
car_did: z.ZodOptional<z.ZodString>;
|
|
302
|
-
|
|
302
|
+
carId_did: z.ZodOptional<z.ZodString>;
|
|
303
303
|
car_runtime_tier: z.ZodOptional<z.ZodNativeEnum<typeof RuntimeTier>>;
|
|
304
|
-
|
|
304
|
+
carId_runtime_tier: z.ZodOptional<z.ZodNativeEnum<typeof RuntimeTier>>;
|
|
305
305
|
car_attestations: z.ZodOptional<z.ZodArray<z.ZodObject<{
|
|
306
306
|
iss: z.ZodString;
|
|
307
307
|
tier: z.ZodNativeEnum<typeof CertificationTier>;
|
|
@@ -324,7 +324,7 @@ export declare const carJWTClaimsSchema: z.ZodObject<{
|
|
|
324
324
|
iat: number;
|
|
325
325
|
evidence?: string | undefined;
|
|
326
326
|
}>, "many">>;
|
|
327
|
-
|
|
327
|
+
carId_attestations: z.ZodOptional<z.ZodArray<z.ZodObject<{
|
|
328
328
|
iss: z.ZodString;
|
|
329
329
|
tier: z.ZodNativeEnum<typeof CertificationTier>;
|
|
330
330
|
scope: z.ZodString;
|
|
@@ -347,7 +347,7 @@ export declare const carJWTClaimsSchema: z.ZodObject<{
|
|
|
347
347
|
evidence?: string | undefined;
|
|
348
348
|
}>, "many">>;
|
|
349
349
|
car_permission_ceiling: z.ZodOptional<z.ZodNumber>;
|
|
350
|
-
|
|
350
|
+
carId_permission_ceiling: z.ZodOptional<z.ZodNumber>;
|
|
351
351
|
car_constraints: z.ZodOptional<z.ZodObject<{
|
|
352
352
|
max_operations: z.ZodOptional<z.ZodNumber>;
|
|
353
353
|
allowed_resources: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
|
|
@@ -370,7 +370,7 @@ export declare const carJWTClaimsSchema: z.ZodObject<{
|
|
|
370
370
|
blocked_resources?: string[] | undefined;
|
|
371
371
|
valid_until?: number | undefined;
|
|
372
372
|
}>>;
|
|
373
|
-
|
|
373
|
+
carId_constraints: z.ZodOptional<z.ZodObject<{
|
|
374
374
|
max_operations: z.ZodOptional<z.ZodNumber>;
|
|
375
375
|
allowed_resources: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
|
|
376
376
|
blocked_resources: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
|
|
@@ -395,31 +395,34 @@ export declare const carJWTClaimsSchema: z.ZodObject<{
|
|
|
395
395
|
}, "strip", z.ZodTypeAny, {
|
|
396
396
|
car: string;
|
|
397
397
|
car_domains: number;
|
|
398
|
-
car_domains_list: ("A" | "B" | "C" | "D" | "E" | "F" | "G" | "H" | "I" | "S")[];
|
|
398
|
+
car_domains_list: ("A" | "B" | "C" | "D" | "E" | "F" | "G" | "H" | "I" | "J" | "K" | "L" | "M" | "N" | "O" | "P" | "Q" | "R" | "S" | "T" | "U" | "V" | "W" | "X" | "Y" | "Z")[];
|
|
399
399
|
car_level: CapabilityLevel;
|
|
400
400
|
car_registry: string;
|
|
401
401
|
car_org: string;
|
|
402
402
|
car_class: string;
|
|
403
403
|
car_version: string;
|
|
404
|
-
aci?: string | undefined;
|
|
405
404
|
sub?: string | undefined;
|
|
405
|
+
carId?: string | undefined;
|
|
406
406
|
jti?: string | undefined;
|
|
407
407
|
iss?: string | undefined;
|
|
408
408
|
aud?: string | string[] | undefined;
|
|
409
409
|
exp?: number | undefined;
|
|
410
410
|
nbf?: number | undefined;
|
|
411
411
|
iat?: number | undefined;
|
|
412
|
-
|
|
413
|
-
|
|
414
|
-
|
|
415
|
-
|
|
416
|
-
|
|
417
|
-
|
|
418
|
-
|
|
419
|
-
|
|
420
|
-
|
|
421
|
-
|
|
422
|
-
|
|
412
|
+
carId_domains?: number | undefined;
|
|
413
|
+
carId_domains_list?: ("A" | "B" | "C" | "D" | "E" | "F" | "G" | "H" | "I" | "J" | "K" | "L" | "M" | "N" | "O" | "P" | "Q" | "R" | "S" | "T" | "U" | "V" | "W" | "X" | "Y" | "Z")[] | undefined;
|
|
414
|
+
carId_level?: CapabilityLevel | undefined;
|
|
415
|
+
car_trust?: CertificationTier | undefined;
|
|
416
|
+
carId_trust?: CertificationTier | undefined;
|
|
417
|
+
carId_registry?: string | undefined;
|
|
418
|
+
carId_org?: string | undefined;
|
|
419
|
+
carId_class?: string | undefined;
|
|
420
|
+
carId_version?: string | undefined;
|
|
421
|
+
car_did?: string | undefined;
|
|
422
|
+
carId_did?: string | undefined;
|
|
423
|
+
car_runtime_tier?: RuntimeTier | undefined;
|
|
424
|
+
carId_runtime_tier?: RuntimeTier | undefined;
|
|
425
|
+
car_attestations?: {
|
|
423
426
|
scope: string;
|
|
424
427
|
tier: CertificationTier;
|
|
425
428
|
iss: string;
|
|
@@ -427,19 +430,7 @@ export declare const carJWTClaimsSchema: z.ZodObject<{
|
|
|
427
430
|
iat: number;
|
|
428
431
|
evidence?: string | undefined;
|
|
429
432
|
}[] | undefined;
|
|
430
|
-
|
|
431
|
-
aci_constraints?: {
|
|
432
|
-
custom?: Record<string, unknown> | undefined;
|
|
433
|
-
requires_approval?: boolean | undefined;
|
|
434
|
-
max_operations?: number | undefined;
|
|
435
|
-
allowed_resources?: string[] | undefined;
|
|
436
|
-
blocked_resources?: string[] | undefined;
|
|
437
|
-
valid_until?: number | undefined;
|
|
438
|
-
} | undefined;
|
|
439
|
-
car_trust?: CertificationTier | undefined;
|
|
440
|
-
car_did?: string | undefined;
|
|
441
|
-
car_runtime_tier?: RuntimeTier | undefined;
|
|
442
|
-
car_attestations?: {
|
|
433
|
+
carId_attestations?: {
|
|
443
434
|
scope: string;
|
|
444
435
|
tier: CertificationTier;
|
|
445
436
|
iss: string;
|
|
@@ -448,6 +439,7 @@ export declare const carJWTClaimsSchema: z.ZodObject<{
|
|
|
448
439
|
evidence?: string | undefined;
|
|
449
440
|
}[] | undefined;
|
|
450
441
|
car_permission_ceiling?: number | undefined;
|
|
442
|
+
carId_permission_ceiling?: number | undefined;
|
|
451
443
|
car_constraints?: {
|
|
452
444
|
custom?: Record<string, unknown> | undefined;
|
|
453
445
|
requires_approval?: boolean | undefined;
|
|
@@ -456,34 +448,45 @@ export declare const carJWTClaimsSchema: z.ZodObject<{
|
|
|
456
448
|
blocked_resources?: string[] | undefined;
|
|
457
449
|
valid_until?: number | undefined;
|
|
458
450
|
} | undefined;
|
|
451
|
+
carId_constraints?: {
|
|
452
|
+
custom?: Record<string, unknown> | undefined;
|
|
453
|
+
requires_approval?: boolean | undefined;
|
|
454
|
+
max_operations?: number | undefined;
|
|
455
|
+
allowed_resources?: string[] | undefined;
|
|
456
|
+
blocked_resources?: string[] | undefined;
|
|
457
|
+
valid_until?: number | undefined;
|
|
458
|
+
} | undefined;
|
|
459
459
|
}, {
|
|
460
460
|
car: string;
|
|
461
461
|
car_domains: number;
|
|
462
|
-
car_domains_list: ("A" | "B" | "C" | "D" | "E" | "F" | "G" | "H" | "I" | "S")[];
|
|
462
|
+
car_domains_list: ("A" | "B" | "C" | "D" | "E" | "F" | "G" | "H" | "I" | "J" | "K" | "L" | "M" | "N" | "O" | "P" | "Q" | "R" | "S" | "T" | "U" | "V" | "W" | "X" | "Y" | "Z")[];
|
|
463
463
|
car_level: CapabilityLevel;
|
|
464
464
|
car_registry: string;
|
|
465
465
|
car_org: string;
|
|
466
466
|
car_class: string;
|
|
467
467
|
car_version: string;
|
|
468
|
-
aci?: string | undefined;
|
|
469
468
|
sub?: string | undefined;
|
|
469
|
+
carId?: string | undefined;
|
|
470
470
|
jti?: string | undefined;
|
|
471
471
|
iss?: string | undefined;
|
|
472
472
|
aud?: string | string[] | undefined;
|
|
473
473
|
exp?: number | undefined;
|
|
474
474
|
nbf?: number | undefined;
|
|
475
475
|
iat?: number | undefined;
|
|
476
|
-
|
|
477
|
-
|
|
478
|
-
|
|
479
|
-
|
|
480
|
-
|
|
481
|
-
|
|
482
|
-
|
|
483
|
-
|
|
484
|
-
|
|
485
|
-
|
|
486
|
-
|
|
476
|
+
carId_domains?: number | undefined;
|
|
477
|
+
carId_domains_list?: ("A" | "B" | "C" | "D" | "E" | "F" | "G" | "H" | "I" | "J" | "K" | "L" | "M" | "N" | "O" | "P" | "Q" | "R" | "S" | "T" | "U" | "V" | "W" | "X" | "Y" | "Z")[] | undefined;
|
|
478
|
+
carId_level?: CapabilityLevel | undefined;
|
|
479
|
+
car_trust?: CertificationTier | undefined;
|
|
480
|
+
carId_trust?: CertificationTier | undefined;
|
|
481
|
+
carId_registry?: string | undefined;
|
|
482
|
+
carId_org?: string | undefined;
|
|
483
|
+
carId_class?: string | undefined;
|
|
484
|
+
carId_version?: string | undefined;
|
|
485
|
+
car_did?: string | undefined;
|
|
486
|
+
carId_did?: string | undefined;
|
|
487
|
+
car_runtime_tier?: RuntimeTier | undefined;
|
|
488
|
+
carId_runtime_tier?: RuntimeTier | undefined;
|
|
489
|
+
car_attestations?: {
|
|
487
490
|
scope: string;
|
|
488
491
|
tier: CertificationTier;
|
|
489
492
|
iss: string;
|
|
@@ -491,19 +494,7 @@ export declare const carJWTClaimsSchema: z.ZodObject<{
|
|
|
491
494
|
iat: number;
|
|
492
495
|
evidence?: string | undefined;
|
|
493
496
|
}[] | undefined;
|
|
494
|
-
|
|
495
|
-
aci_constraints?: {
|
|
496
|
-
custom?: Record<string, unknown> | undefined;
|
|
497
|
-
requires_approval?: boolean | undefined;
|
|
498
|
-
max_operations?: number | undefined;
|
|
499
|
-
allowed_resources?: string[] | undefined;
|
|
500
|
-
blocked_resources?: string[] | undefined;
|
|
501
|
-
valid_until?: number | undefined;
|
|
502
|
-
} | undefined;
|
|
503
|
-
car_trust?: CertificationTier | undefined;
|
|
504
|
-
car_did?: string | undefined;
|
|
505
|
-
car_runtime_tier?: RuntimeTier | undefined;
|
|
506
|
-
car_attestations?: {
|
|
497
|
+
carId_attestations?: {
|
|
507
498
|
scope: string;
|
|
508
499
|
tier: CertificationTier;
|
|
509
500
|
iss: string;
|
|
@@ -512,6 +503,7 @@ export declare const carJWTClaimsSchema: z.ZodObject<{
|
|
|
512
503
|
evidence?: string | undefined;
|
|
513
504
|
}[] | undefined;
|
|
514
505
|
car_permission_ceiling?: number | undefined;
|
|
506
|
+
carId_permission_ceiling?: number | undefined;
|
|
515
507
|
car_constraints?: {
|
|
516
508
|
custom?: Record<string, unknown> | undefined;
|
|
517
509
|
requires_approval?: boolean | undefined;
|
|
@@ -520,6 +512,14 @@ export declare const carJWTClaimsSchema: z.ZodObject<{
|
|
|
520
512
|
blocked_resources?: string[] | undefined;
|
|
521
513
|
valid_until?: number | undefined;
|
|
522
514
|
} | undefined;
|
|
515
|
+
carId_constraints?: {
|
|
516
|
+
custom?: Record<string, unknown> | undefined;
|
|
517
|
+
requires_approval?: boolean | undefined;
|
|
518
|
+
max_operations?: number | undefined;
|
|
519
|
+
allowed_resources?: string[] | undefined;
|
|
520
|
+
blocked_resources?: string[] | undefined;
|
|
521
|
+
valid_until?: number | undefined;
|
|
522
|
+
} | undefined;
|
|
523
523
|
}>;
|
|
524
524
|
/** @deprecated Use carJWTClaimsSchema instead */
|
|
525
525
|
export declare const aciJWTClaimsSchema: z.ZodObject<{
|
|
@@ -532,27 +532,27 @@ export declare const aciJWTClaimsSchema: z.ZodObject<{
|
|
|
532
532
|
jti: z.ZodOptional<z.ZodString>;
|
|
533
533
|
} & {
|
|
534
534
|
car: z.ZodString;
|
|
535
|
-
|
|
535
|
+
carId: z.ZodOptional<z.ZodString>;
|
|
536
536
|
car_domains: z.ZodNumber;
|
|
537
|
-
|
|
538
|
-
car_domains_list: z.ZodArray<z.ZodEnum<["A", "B", "C", "D", "E", "F", "G", "H", "I", "S"]>, "many">;
|
|
539
|
-
|
|
537
|
+
carId_domains: z.ZodOptional<z.ZodNumber>;
|
|
538
|
+
car_domains_list: z.ZodArray<z.ZodEnum<["A", "B", "C", "D", "E", "F", "G", "H", "I", "J", "K", "L", "M", "N", "O", "P", "Q", "R", "S", "T", "U", "V", "W", "X", "Y", "Z"]>, "many">;
|
|
539
|
+
carId_domains_list: z.ZodOptional<z.ZodArray<z.ZodEnum<["A", "B", "C", "D", "E", "F", "G", "H", "I", "J", "K", "L", "M", "N", "O", "P", "Q", "R", "S", "T", "U", "V", "W", "X", "Y", "Z"]>, "many">>;
|
|
540
540
|
car_level: z.ZodNativeEnum<typeof CapabilityLevel>;
|
|
541
|
-
|
|
541
|
+
carId_level: z.ZodOptional<z.ZodNativeEnum<typeof CapabilityLevel>>;
|
|
542
542
|
car_trust: z.ZodOptional<z.ZodNativeEnum<typeof CertificationTier>>;
|
|
543
|
-
|
|
543
|
+
carId_trust: z.ZodOptional<z.ZodNativeEnum<typeof CertificationTier>>;
|
|
544
544
|
car_registry: z.ZodString;
|
|
545
|
-
|
|
545
|
+
carId_registry: z.ZodOptional<z.ZodString>;
|
|
546
546
|
car_org: z.ZodString;
|
|
547
|
-
|
|
547
|
+
carId_org: z.ZodOptional<z.ZodString>;
|
|
548
548
|
car_class: z.ZodString;
|
|
549
|
-
|
|
549
|
+
carId_class: z.ZodOptional<z.ZodString>;
|
|
550
550
|
car_version: z.ZodString;
|
|
551
|
-
|
|
551
|
+
carId_version: z.ZodOptional<z.ZodString>;
|
|
552
552
|
car_did: z.ZodOptional<z.ZodString>;
|
|
553
|
-
|
|
553
|
+
carId_did: z.ZodOptional<z.ZodString>;
|
|
554
554
|
car_runtime_tier: z.ZodOptional<z.ZodNativeEnum<typeof RuntimeTier>>;
|
|
555
|
-
|
|
555
|
+
carId_runtime_tier: z.ZodOptional<z.ZodNativeEnum<typeof RuntimeTier>>;
|
|
556
556
|
car_attestations: z.ZodOptional<z.ZodArray<z.ZodObject<{
|
|
557
557
|
iss: z.ZodString;
|
|
558
558
|
tier: z.ZodNativeEnum<typeof CertificationTier>;
|
|
@@ -575,7 +575,7 @@ export declare const aciJWTClaimsSchema: z.ZodObject<{
|
|
|
575
575
|
iat: number;
|
|
576
576
|
evidence?: string | undefined;
|
|
577
577
|
}>, "many">>;
|
|
578
|
-
|
|
578
|
+
carId_attestations: z.ZodOptional<z.ZodArray<z.ZodObject<{
|
|
579
579
|
iss: z.ZodString;
|
|
580
580
|
tier: z.ZodNativeEnum<typeof CertificationTier>;
|
|
581
581
|
scope: z.ZodString;
|
|
@@ -598,7 +598,7 @@ export declare const aciJWTClaimsSchema: z.ZodObject<{
|
|
|
598
598
|
evidence?: string | undefined;
|
|
599
599
|
}>, "many">>;
|
|
600
600
|
car_permission_ceiling: z.ZodOptional<z.ZodNumber>;
|
|
601
|
-
|
|
601
|
+
carId_permission_ceiling: z.ZodOptional<z.ZodNumber>;
|
|
602
602
|
car_constraints: z.ZodOptional<z.ZodObject<{
|
|
603
603
|
max_operations: z.ZodOptional<z.ZodNumber>;
|
|
604
604
|
allowed_resources: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
|
|
@@ -621,7 +621,7 @@ export declare const aciJWTClaimsSchema: z.ZodObject<{
|
|
|
621
621
|
blocked_resources?: string[] | undefined;
|
|
622
622
|
valid_until?: number | undefined;
|
|
623
623
|
}>>;
|
|
624
|
-
|
|
624
|
+
carId_constraints: z.ZodOptional<z.ZodObject<{
|
|
625
625
|
max_operations: z.ZodOptional<z.ZodNumber>;
|
|
626
626
|
allowed_resources: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
|
|
627
627
|
blocked_resources: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
|
|
@@ -646,31 +646,34 @@ export declare const aciJWTClaimsSchema: z.ZodObject<{
|
|
|
646
646
|
}, "strip", z.ZodTypeAny, {
|
|
647
647
|
car: string;
|
|
648
648
|
car_domains: number;
|
|
649
|
-
car_domains_list: ("A" | "B" | "C" | "D" | "E" | "F" | "G" | "H" | "I" | "S")[];
|
|
649
|
+
car_domains_list: ("A" | "B" | "C" | "D" | "E" | "F" | "G" | "H" | "I" | "J" | "K" | "L" | "M" | "N" | "O" | "P" | "Q" | "R" | "S" | "T" | "U" | "V" | "W" | "X" | "Y" | "Z")[];
|
|
650
650
|
car_level: CapabilityLevel;
|
|
651
651
|
car_registry: string;
|
|
652
652
|
car_org: string;
|
|
653
653
|
car_class: string;
|
|
654
654
|
car_version: string;
|
|
655
|
-
aci?: string | undefined;
|
|
656
655
|
sub?: string | undefined;
|
|
656
|
+
carId?: string | undefined;
|
|
657
657
|
jti?: string | undefined;
|
|
658
658
|
iss?: string | undefined;
|
|
659
659
|
aud?: string | string[] | undefined;
|
|
660
660
|
exp?: number | undefined;
|
|
661
661
|
nbf?: number | undefined;
|
|
662
662
|
iat?: number | undefined;
|
|
663
|
-
|
|
664
|
-
|
|
665
|
-
|
|
666
|
-
|
|
667
|
-
|
|
668
|
-
|
|
669
|
-
|
|
670
|
-
|
|
671
|
-
|
|
672
|
-
|
|
673
|
-
|
|
663
|
+
carId_domains?: number | undefined;
|
|
664
|
+
carId_domains_list?: ("A" | "B" | "C" | "D" | "E" | "F" | "G" | "H" | "I" | "J" | "K" | "L" | "M" | "N" | "O" | "P" | "Q" | "R" | "S" | "T" | "U" | "V" | "W" | "X" | "Y" | "Z")[] | undefined;
|
|
665
|
+
carId_level?: CapabilityLevel | undefined;
|
|
666
|
+
car_trust?: CertificationTier | undefined;
|
|
667
|
+
carId_trust?: CertificationTier | undefined;
|
|
668
|
+
carId_registry?: string | undefined;
|
|
669
|
+
carId_org?: string | undefined;
|
|
670
|
+
carId_class?: string | undefined;
|
|
671
|
+
carId_version?: string | undefined;
|
|
672
|
+
car_did?: string | undefined;
|
|
673
|
+
carId_did?: string | undefined;
|
|
674
|
+
car_runtime_tier?: RuntimeTier | undefined;
|
|
675
|
+
carId_runtime_tier?: RuntimeTier | undefined;
|
|
676
|
+
car_attestations?: {
|
|
674
677
|
scope: string;
|
|
675
678
|
tier: CertificationTier;
|
|
676
679
|
iss: string;
|
|
@@ -678,19 +681,7 @@ export declare const aciJWTClaimsSchema: z.ZodObject<{
|
|
|
678
681
|
iat: number;
|
|
679
682
|
evidence?: string | undefined;
|
|
680
683
|
}[] | undefined;
|
|
681
|
-
|
|
682
|
-
aci_constraints?: {
|
|
683
|
-
custom?: Record<string, unknown> | undefined;
|
|
684
|
-
requires_approval?: boolean | undefined;
|
|
685
|
-
max_operations?: number | undefined;
|
|
686
|
-
allowed_resources?: string[] | undefined;
|
|
687
|
-
blocked_resources?: string[] | undefined;
|
|
688
|
-
valid_until?: number | undefined;
|
|
689
|
-
} | undefined;
|
|
690
|
-
car_trust?: CertificationTier | undefined;
|
|
691
|
-
car_did?: string | undefined;
|
|
692
|
-
car_runtime_tier?: RuntimeTier | undefined;
|
|
693
|
-
car_attestations?: {
|
|
684
|
+
carId_attestations?: {
|
|
694
685
|
scope: string;
|
|
695
686
|
tier: CertificationTier;
|
|
696
687
|
iss: string;
|
|
@@ -699,6 +690,7 @@ export declare const aciJWTClaimsSchema: z.ZodObject<{
|
|
|
699
690
|
evidence?: string | undefined;
|
|
700
691
|
}[] | undefined;
|
|
701
692
|
car_permission_ceiling?: number | undefined;
|
|
693
|
+
carId_permission_ceiling?: number | undefined;
|
|
702
694
|
car_constraints?: {
|
|
703
695
|
custom?: Record<string, unknown> | undefined;
|
|
704
696
|
requires_approval?: boolean | undefined;
|
|
@@ -707,34 +699,45 @@ export declare const aciJWTClaimsSchema: z.ZodObject<{
|
|
|
707
699
|
blocked_resources?: string[] | undefined;
|
|
708
700
|
valid_until?: number | undefined;
|
|
709
701
|
} | undefined;
|
|
702
|
+
carId_constraints?: {
|
|
703
|
+
custom?: Record<string, unknown> | undefined;
|
|
704
|
+
requires_approval?: boolean | undefined;
|
|
705
|
+
max_operations?: number | undefined;
|
|
706
|
+
allowed_resources?: string[] | undefined;
|
|
707
|
+
blocked_resources?: string[] | undefined;
|
|
708
|
+
valid_until?: number | undefined;
|
|
709
|
+
} | undefined;
|
|
710
710
|
}, {
|
|
711
711
|
car: string;
|
|
712
712
|
car_domains: number;
|
|
713
|
-
car_domains_list: ("A" | "B" | "C" | "D" | "E" | "F" | "G" | "H" | "I" | "S")[];
|
|
713
|
+
car_domains_list: ("A" | "B" | "C" | "D" | "E" | "F" | "G" | "H" | "I" | "J" | "K" | "L" | "M" | "N" | "O" | "P" | "Q" | "R" | "S" | "T" | "U" | "V" | "W" | "X" | "Y" | "Z")[];
|
|
714
714
|
car_level: CapabilityLevel;
|
|
715
715
|
car_registry: string;
|
|
716
716
|
car_org: string;
|
|
717
717
|
car_class: string;
|
|
718
718
|
car_version: string;
|
|
719
|
-
aci?: string | undefined;
|
|
720
719
|
sub?: string | undefined;
|
|
720
|
+
carId?: string | undefined;
|
|
721
721
|
jti?: string | undefined;
|
|
722
722
|
iss?: string | undefined;
|
|
723
723
|
aud?: string | string[] | undefined;
|
|
724
724
|
exp?: number | undefined;
|
|
725
725
|
nbf?: number | undefined;
|
|
726
726
|
iat?: number | undefined;
|
|
727
|
-
|
|
728
|
-
|
|
729
|
-
|
|
730
|
-
|
|
731
|
-
|
|
732
|
-
|
|
733
|
-
|
|
734
|
-
|
|
735
|
-
|
|
736
|
-
|
|
737
|
-
|
|
727
|
+
carId_domains?: number | undefined;
|
|
728
|
+
carId_domains_list?: ("A" | "B" | "C" | "D" | "E" | "F" | "G" | "H" | "I" | "J" | "K" | "L" | "M" | "N" | "O" | "P" | "Q" | "R" | "S" | "T" | "U" | "V" | "W" | "X" | "Y" | "Z")[] | undefined;
|
|
729
|
+
carId_level?: CapabilityLevel | undefined;
|
|
730
|
+
car_trust?: CertificationTier | undefined;
|
|
731
|
+
carId_trust?: CertificationTier | undefined;
|
|
732
|
+
carId_registry?: string | undefined;
|
|
733
|
+
carId_org?: string | undefined;
|
|
734
|
+
carId_class?: string | undefined;
|
|
735
|
+
carId_version?: string | undefined;
|
|
736
|
+
car_did?: string | undefined;
|
|
737
|
+
carId_did?: string | undefined;
|
|
738
|
+
car_runtime_tier?: RuntimeTier | undefined;
|
|
739
|
+
carId_runtime_tier?: RuntimeTier | undefined;
|
|
740
|
+
car_attestations?: {
|
|
738
741
|
scope: string;
|
|
739
742
|
tier: CertificationTier;
|
|
740
743
|
iss: string;
|
|
@@ -742,19 +745,7 @@ export declare const aciJWTClaimsSchema: z.ZodObject<{
|
|
|
742
745
|
iat: number;
|
|
743
746
|
evidence?: string | undefined;
|
|
744
747
|
}[] | undefined;
|
|
745
|
-
|
|
746
|
-
aci_constraints?: {
|
|
747
|
-
custom?: Record<string, unknown> | undefined;
|
|
748
|
-
requires_approval?: boolean | undefined;
|
|
749
|
-
max_operations?: number | undefined;
|
|
750
|
-
allowed_resources?: string[] | undefined;
|
|
751
|
-
blocked_resources?: string[] | undefined;
|
|
752
|
-
valid_until?: number | undefined;
|
|
753
|
-
} | undefined;
|
|
754
|
-
car_trust?: CertificationTier | undefined;
|
|
755
|
-
car_did?: string | undefined;
|
|
756
|
-
car_runtime_tier?: RuntimeTier | undefined;
|
|
757
|
-
car_attestations?: {
|
|
748
|
+
carId_attestations?: {
|
|
758
749
|
scope: string;
|
|
759
750
|
tier: CertificationTier;
|
|
760
751
|
iss: string;
|
|
@@ -763,6 +754,7 @@ export declare const aciJWTClaimsSchema: z.ZodObject<{
|
|
|
763
754
|
evidence?: string | undefined;
|
|
764
755
|
}[] | undefined;
|
|
765
756
|
car_permission_ceiling?: number | undefined;
|
|
757
|
+
carId_permission_ceiling?: number | undefined;
|
|
766
758
|
car_constraints?: {
|
|
767
759
|
custom?: Record<string, unknown> | undefined;
|
|
768
760
|
requires_approval?: boolean | undefined;
|
|
@@ -771,6 +763,14 @@ export declare const aciJWTClaimsSchema: z.ZodObject<{
|
|
|
771
763
|
blocked_resources?: string[] | undefined;
|
|
772
764
|
valid_until?: number | undefined;
|
|
773
765
|
} | undefined;
|
|
766
|
+
carId_constraints?: {
|
|
767
|
+
custom?: Record<string, unknown> | undefined;
|
|
768
|
+
requires_approval?: boolean | undefined;
|
|
769
|
+
max_operations?: number | undefined;
|
|
770
|
+
allowed_resources?: string[] | undefined;
|
|
771
|
+
blocked_resources?: string[] | undefined;
|
|
772
|
+
valid_until?: number | undefined;
|
|
773
|
+
} | undefined;
|
|
774
774
|
}>;
|
|
775
775
|
/**
|
|
776
776
|
* Options for generating JWT claims.
|
|
@@ -940,11 +940,11 @@ export declare const jwtClaimsValidationErrorSchema: z.ZodObject<{
|
|
|
940
940
|
message: z.ZodString;
|
|
941
941
|
path: z.ZodOptional<z.ZodString>;
|
|
942
942
|
}, "strip", z.ZodTypeAny, {
|
|
943
|
-
code: "EXPIRED" | "INVALID_FORMAT" | "INVALID_DOMAINS" | "INVALID_LEVEL" | "
|
|
943
|
+
code: "EXPIRED" | "INVALID_FORMAT" | "INVALID_DOMAINS" | "INVALID_LEVEL" | "MISSING_CAR" | "INVALID_CAR" | "NOT_YET_VALID" | "INVALID_TIER" | "DOMAINS_MISMATCH";
|
|
944
944
|
message: string;
|
|
945
945
|
path?: string | undefined;
|
|
946
946
|
}, {
|
|
947
|
-
code: "EXPIRED" | "INVALID_FORMAT" | "INVALID_DOMAINS" | "INVALID_LEVEL" | "
|
|
947
|
+
code: "EXPIRED" | "INVALID_FORMAT" | "INVALID_DOMAINS" | "INVALID_LEVEL" | "MISSING_CAR" | "INVALID_CAR" | "NOT_YET_VALID" | "INVALID_TIER" | "DOMAINS_MISMATCH";
|
|
948
948
|
message: string;
|
|
949
949
|
path?: string | undefined;
|
|
950
950
|
}>;
|
|
@@ -958,11 +958,11 @@ export declare const jwtClaimsValidationResultSchema: z.ZodObject<{
|
|
|
958
958
|
message: z.ZodString;
|
|
959
959
|
path: z.ZodOptional<z.ZodString>;
|
|
960
960
|
}, "strip", z.ZodTypeAny, {
|
|
961
|
-
code: "EXPIRED" | "INVALID_FORMAT" | "INVALID_DOMAINS" | "INVALID_LEVEL" | "
|
|
961
|
+
code: "EXPIRED" | "INVALID_FORMAT" | "INVALID_DOMAINS" | "INVALID_LEVEL" | "MISSING_CAR" | "INVALID_CAR" | "NOT_YET_VALID" | "INVALID_TIER" | "DOMAINS_MISMATCH";
|
|
962
962
|
message: string;
|
|
963
963
|
path?: string | undefined;
|
|
964
964
|
}, {
|
|
965
|
-
code: "EXPIRED" | "INVALID_FORMAT" | "INVALID_DOMAINS" | "INVALID_LEVEL" | "
|
|
965
|
+
code: "EXPIRED" | "INVALID_FORMAT" | "INVALID_DOMAINS" | "INVALID_LEVEL" | "MISSING_CAR" | "INVALID_CAR" | "NOT_YET_VALID" | "INVALID_TIER" | "DOMAINS_MISMATCH";
|
|
966
966
|
message: string;
|
|
967
967
|
path?: string | undefined;
|
|
968
968
|
}>, "many">;
|
|
@@ -976,27 +976,27 @@ export declare const jwtClaimsValidationResultSchema: z.ZodObject<{
|
|
|
976
976
|
jti: z.ZodOptional<z.ZodString>;
|
|
977
977
|
} & {
|
|
978
978
|
car: z.ZodString;
|
|
979
|
-
|
|
979
|
+
carId: z.ZodOptional<z.ZodString>;
|
|
980
980
|
car_domains: z.ZodNumber;
|
|
981
|
-
|
|
982
|
-
car_domains_list: z.ZodArray<z.ZodEnum<["A", "B", "C", "D", "E", "F", "G", "H", "I", "S"]>, "many">;
|
|
983
|
-
|
|
981
|
+
carId_domains: z.ZodOptional<z.ZodNumber>;
|
|
982
|
+
car_domains_list: z.ZodArray<z.ZodEnum<["A", "B", "C", "D", "E", "F", "G", "H", "I", "J", "K", "L", "M", "N", "O", "P", "Q", "R", "S", "T", "U", "V", "W", "X", "Y", "Z"]>, "many">;
|
|
983
|
+
carId_domains_list: z.ZodOptional<z.ZodArray<z.ZodEnum<["A", "B", "C", "D", "E", "F", "G", "H", "I", "J", "K", "L", "M", "N", "O", "P", "Q", "R", "S", "T", "U", "V", "W", "X", "Y", "Z"]>, "many">>;
|
|
984
984
|
car_level: z.ZodNativeEnum<typeof CapabilityLevel>;
|
|
985
|
-
|
|
985
|
+
carId_level: z.ZodOptional<z.ZodNativeEnum<typeof CapabilityLevel>>;
|
|
986
986
|
car_trust: z.ZodOptional<z.ZodNativeEnum<typeof CertificationTier>>;
|
|
987
|
-
|
|
987
|
+
carId_trust: z.ZodOptional<z.ZodNativeEnum<typeof CertificationTier>>;
|
|
988
988
|
car_registry: z.ZodString;
|
|
989
|
-
|
|
989
|
+
carId_registry: z.ZodOptional<z.ZodString>;
|
|
990
990
|
car_org: z.ZodString;
|
|
991
|
-
|
|
991
|
+
carId_org: z.ZodOptional<z.ZodString>;
|
|
992
992
|
car_class: z.ZodString;
|
|
993
|
-
|
|
993
|
+
carId_class: z.ZodOptional<z.ZodString>;
|
|
994
994
|
car_version: z.ZodString;
|
|
995
|
-
|
|
995
|
+
carId_version: z.ZodOptional<z.ZodString>;
|
|
996
996
|
car_did: z.ZodOptional<z.ZodString>;
|
|
997
|
-
|
|
997
|
+
carId_did: z.ZodOptional<z.ZodString>;
|
|
998
998
|
car_runtime_tier: z.ZodOptional<z.ZodNativeEnum<typeof RuntimeTier>>;
|
|
999
|
-
|
|
999
|
+
carId_runtime_tier: z.ZodOptional<z.ZodNativeEnum<typeof RuntimeTier>>;
|
|
1000
1000
|
car_attestations: z.ZodOptional<z.ZodArray<z.ZodObject<{
|
|
1001
1001
|
iss: z.ZodString;
|
|
1002
1002
|
tier: z.ZodNativeEnum<typeof CertificationTier>;
|
|
@@ -1019,7 +1019,7 @@ export declare const jwtClaimsValidationResultSchema: z.ZodObject<{
|
|
|
1019
1019
|
iat: number;
|
|
1020
1020
|
evidence?: string | undefined;
|
|
1021
1021
|
}>, "many">>;
|
|
1022
|
-
|
|
1022
|
+
carId_attestations: z.ZodOptional<z.ZodArray<z.ZodObject<{
|
|
1023
1023
|
iss: z.ZodString;
|
|
1024
1024
|
tier: z.ZodNativeEnum<typeof CertificationTier>;
|
|
1025
1025
|
scope: z.ZodString;
|
|
@@ -1042,7 +1042,7 @@ export declare const jwtClaimsValidationResultSchema: z.ZodObject<{
|
|
|
1042
1042
|
evidence?: string | undefined;
|
|
1043
1043
|
}>, "many">>;
|
|
1044
1044
|
car_permission_ceiling: z.ZodOptional<z.ZodNumber>;
|
|
1045
|
-
|
|
1045
|
+
carId_permission_ceiling: z.ZodOptional<z.ZodNumber>;
|
|
1046
1046
|
car_constraints: z.ZodOptional<z.ZodObject<{
|
|
1047
1047
|
max_operations: z.ZodOptional<z.ZodNumber>;
|
|
1048
1048
|
allowed_resources: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
|
|
@@ -1065,7 +1065,7 @@ export declare const jwtClaimsValidationResultSchema: z.ZodObject<{
|
|
|
1065
1065
|
blocked_resources?: string[] | undefined;
|
|
1066
1066
|
valid_until?: number | undefined;
|
|
1067
1067
|
}>>;
|
|
1068
|
-
|
|
1068
|
+
carId_constraints: z.ZodOptional<z.ZodObject<{
|
|
1069
1069
|
max_operations: z.ZodOptional<z.ZodNumber>;
|
|
1070
1070
|
allowed_resources: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
|
|
1071
1071
|
blocked_resources: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
|
|
@@ -1090,31 +1090,34 @@ export declare const jwtClaimsValidationResultSchema: z.ZodObject<{
|
|
|
1090
1090
|
}, "strip", z.ZodTypeAny, {
|
|
1091
1091
|
car: string;
|
|
1092
1092
|
car_domains: number;
|
|
1093
|
-
car_domains_list: ("A" | "B" | "C" | "D" | "E" | "F" | "G" | "H" | "I" | "S")[];
|
|
1093
|
+
car_domains_list: ("A" | "B" | "C" | "D" | "E" | "F" | "G" | "H" | "I" | "J" | "K" | "L" | "M" | "N" | "O" | "P" | "Q" | "R" | "S" | "T" | "U" | "V" | "W" | "X" | "Y" | "Z")[];
|
|
1094
1094
|
car_level: CapabilityLevel;
|
|
1095
1095
|
car_registry: string;
|
|
1096
1096
|
car_org: string;
|
|
1097
1097
|
car_class: string;
|
|
1098
1098
|
car_version: string;
|
|
1099
|
-
aci?: string | undefined;
|
|
1100
1099
|
sub?: string | undefined;
|
|
1100
|
+
carId?: string | undefined;
|
|
1101
1101
|
jti?: string | undefined;
|
|
1102
1102
|
iss?: string | undefined;
|
|
1103
1103
|
aud?: string | string[] | undefined;
|
|
1104
1104
|
exp?: number | undefined;
|
|
1105
1105
|
nbf?: number | undefined;
|
|
1106
1106
|
iat?: number | undefined;
|
|
1107
|
-
|
|
1108
|
-
|
|
1109
|
-
|
|
1110
|
-
|
|
1111
|
-
|
|
1112
|
-
|
|
1113
|
-
|
|
1114
|
-
|
|
1115
|
-
|
|
1116
|
-
|
|
1117
|
-
|
|
1107
|
+
carId_domains?: number | undefined;
|
|
1108
|
+
carId_domains_list?: ("A" | "B" | "C" | "D" | "E" | "F" | "G" | "H" | "I" | "J" | "K" | "L" | "M" | "N" | "O" | "P" | "Q" | "R" | "S" | "T" | "U" | "V" | "W" | "X" | "Y" | "Z")[] | undefined;
|
|
1109
|
+
carId_level?: CapabilityLevel | undefined;
|
|
1110
|
+
car_trust?: CertificationTier | undefined;
|
|
1111
|
+
carId_trust?: CertificationTier | undefined;
|
|
1112
|
+
carId_registry?: string | undefined;
|
|
1113
|
+
carId_org?: string | undefined;
|
|
1114
|
+
carId_class?: string | undefined;
|
|
1115
|
+
carId_version?: string | undefined;
|
|
1116
|
+
car_did?: string | undefined;
|
|
1117
|
+
carId_did?: string | undefined;
|
|
1118
|
+
car_runtime_tier?: RuntimeTier | undefined;
|
|
1119
|
+
carId_runtime_tier?: RuntimeTier | undefined;
|
|
1120
|
+
car_attestations?: {
|
|
1118
1121
|
scope: string;
|
|
1119
1122
|
tier: CertificationTier;
|
|
1120
1123
|
iss: string;
|
|
@@ -1122,19 +1125,7 @@ export declare const jwtClaimsValidationResultSchema: z.ZodObject<{
|
|
|
1122
1125
|
iat: number;
|
|
1123
1126
|
evidence?: string | undefined;
|
|
1124
1127
|
}[] | undefined;
|
|
1125
|
-
|
|
1126
|
-
aci_constraints?: {
|
|
1127
|
-
custom?: Record<string, unknown> | undefined;
|
|
1128
|
-
requires_approval?: boolean | undefined;
|
|
1129
|
-
max_operations?: number | undefined;
|
|
1130
|
-
allowed_resources?: string[] | undefined;
|
|
1131
|
-
blocked_resources?: string[] | undefined;
|
|
1132
|
-
valid_until?: number | undefined;
|
|
1133
|
-
} | undefined;
|
|
1134
|
-
car_trust?: CertificationTier | undefined;
|
|
1135
|
-
car_did?: string | undefined;
|
|
1136
|
-
car_runtime_tier?: RuntimeTier | undefined;
|
|
1137
|
-
car_attestations?: {
|
|
1128
|
+
carId_attestations?: {
|
|
1138
1129
|
scope: string;
|
|
1139
1130
|
tier: CertificationTier;
|
|
1140
1131
|
iss: string;
|
|
@@ -1143,6 +1134,7 @@ export declare const jwtClaimsValidationResultSchema: z.ZodObject<{
|
|
|
1143
1134
|
evidence?: string | undefined;
|
|
1144
1135
|
}[] | undefined;
|
|
1145
1136
|
car_permission_ceiling?: number | undefined;
|
|
1137
|
+
carId_permission_ceiling?: number | undefined;
|
|
1146
1138
|
car_constraints?: {
|
|
1147
1139
|
custom?: Record<string, unknown> | undefined;
|
|
1148
1140
|
requires_approval?: boolean | undefined;
|
|
@@ -1151,34 +1143,45 @@ export declare const jwtClaimsValidationResultSchema: z.ZodObject<{
|
|
|
1151
1143
|
blocked_resources?: string[] | undefined;
|
|
1152
1144
|
valid_until?: number | undefined;
|
|
1153
1145
|
} | undefined;
|
|
1146
|
+
carId_constraints?: {
|
|
1147
|
+
custom?: Record<string, unknown> | undefined;
|
|
1148
|
+
requires_approval?: boolean | undefined;
|
|
1149
|
+
max_operations?: number | undefined;
|
|
1150
|
+
allowed_resources?: string[] | undefined;
|
|
1151
|
+
blocked_resources?: string[] | undefined;
|
|
1152
|
+
valid_until?: number | undefined;
|
|
1153
|
+
} | undefined;
|
|
1154
1154
|
}, {
|
|
1155
1155
|
car: string;
|
|
1156
1156
|
car_domains: number;
|
|
1157
|
-
car_domains_list: ("A" | "B" | "C" | "D" | "E" | "F" | "G" | "H" | "I" | "S")[];
|
|
1157
|
+
car_domains_list: ("A" | "B" | "C" | "D" | "E" | "F" | "G" | "H" | "I" | "J" | "K" | "L" | "M" | "N" | "O" | "P" | "Q" | "R" | "S" | "T" | "U" | "V" | "W" | "X" | "Y" | "Z")[];
|
|
1158
1158
|
car_level: CapabilityLevel;
|
|
1159
1159
|
car_registry: string;
|
|
1160
1160
|
car_org: string;
|
|
1161
1161
|
car_class: string;
|
|
1162
1162
|
car_version: string;
|
|
1163
|
-
aci?: string | undefined;
|
|
1164
1163
|
sub?: string | undefined;
|
|
1164
|
+
carId?: string | undefined;
|
|
1165
1165
|
jti?: string | undefined;
|
|
1166
1166
|
iss?: string | undefined;
|
|
1167
1167
|
aud?: string | string[] | undefined;
|
|
1168
1168
|
exp?: number | undefined;
|
|
1169
1169
|
nbf?: number | undefined;
|
|
1170
1170
|
iat?: number | undefined;
|
|
1171
|
-
|
|
1172
|
-
|
|
1173
|
-
|
|
1174
|
-
|
|
1175
|
-
|
|
1176
|
-
|
|
1177
|
-
|
|
1178
|
-
|
|
1179
|
-
|
|
1180
|
-
|
|
1181
|
-
|
|
1171
|
+
carId_domains?: number | undefined;
|
|
1172
|
+
carId_domains_list?: ("A" | "B" | "C" | "D" | "E" | "F" | "G" | "H" | "I" | "J" | "K" | "L" | "M" | "N" | "O" | "P" | "Q" | "R" | "S" | "T" | "U" | "V" | "W" | "X" | "Y" | "Z")[] | undefined;
|
|
1173
|
+
carId_level?: CapabilityLevel | undefined;
|
|
1174
|
+
car_trust?: CertificationTier | undefined;
|
|
1175
|
+
carId_trust?: CertificationTier | undefined;
|
|
1176
|
+
carId_registry?: string | undefined;
|
|
1177
|
+
carId_org?: string | undefined;
|
|
1178
|
+
carId_class?: string | undefined;
|
|
1179
|
+
carId_version?: string | undefined;
|
|
1180
|
+
car_did?: string | undefined;
|
|
1181
|
+
carId_did?: string | undefined;
|
|
1182
|
+
car_runtime_tier?: RuntimeTier | undefined;
|
|
1183
|
+
carId_runtime_tier?: RuntimeTier | undefined;
|
|
1184
|
+
car_attestations?: {
|
|
1182
1185
|
scope: string;
|
|
1183
1186
|
tier: CertificationTier;
|
|
1184
1187
|
iss: string;
|
|
@@ -1186,19 +1189,7 @@ export declare const jwtClaimsValidationResultSchema: z.ZodObject<{
|
|
|
1186
1189
|
iat: number;
|
|
1187
1190
|
evidence?: string | undefined;
|
|
1188
1191
|
}[] | undefined;
|
|
1189
|
-
|
|
1190
|
-
aci_constraints?: {
|
|
1191
|
-
custom?: Record<string, unknown> | undefined;
|
|
1192
|
-
requires_approval?: boolean | undefined;
|
|
1193
|
-
max_operations?: number | undefined;
|
|
1194
|
-
allowed_resources?: string[] | undefined;
|
|
1195
|
-
blocked_resources?: string[] | undefined;
|
|
1196
|
-
valid_until?: number | undefined;
|
|
1197
|
-
} | undefined;
|
|
1198
|
-
car_trust?: CertificationTier | undefined;
|
|
1199
|
-
car_did?: string | undefined;
|
|
1200
|
-
car_runtime_tier?: RuntimeTier | undefined;
|
|
1201
|
-
car_attestations?: {
|
|
1192
|
+
carId_attestations?: {
|
|
1202
1193
|
scope: string;
|
|
1203
1194
|
tier: CertificationTier;
|
|
1204
1195
|
iss: string;
|
|
@@ -1207,6 +1198,7 @@ export declare const jwtClaimsValidationResultSchema: z.ZodObject<{
|
|
|
1207
1198
|
evidence?: string | undefined;
|
|
1208
1199
|
}[] | undefined;
|
|
1209
1200
|
car_permission_ceiling?: number | undefined;
|
|
1201
|
+
carId_permission_ceiling?: number | undefined;
|
|
1210
1202
|
car_constraints?: {
|
|
1211
1203
|
custom?: Record<string, unknown> | undefined;
|
|
1212
1204
|
requires_approval?: boolean | undefined;
|
|
@@ -1215,42 +1207,53 @@ export declare const jwtClaimsValidationResultSchema: z.ZodObject<{
|
|
|
1215
1207
|
blocked_resources?: string[] | undefined;
|
|
1216
1208
|
valid_until?: number | undefined;
|
|
1217
1209
|
} | undefined;
|
|
1210
|
+
carId_constraints?: {
|
|
1211
|
+
custom?: Record<string, unknown> | undefined;
|
|
1212
|
+
requires_approval?: boolean | undefined;
|
|
1213
|
+
max_operations?: number | undefined;
|
|
1214
|
+
allowed_resources?: string[] | undefined;
|
|
1215
|
+
blocked_resources?: string[] | undefined;
|
|
1216
|
+
valid_until?: number | undefined;
|
|
1217
|
+
} | undefined;
|
|
1218
1218
|
}>>;
|
|
1219
1219
|
}, "strip", z.ZodTypeAny, {
|
|
1220
1220
|
valid: boolean;
|
|
1221
1221
|
errors: {
|
|
1222
|
-
code: "EXPIRED" | "INVALID_FORMAT" | "INVALID_DOMAINS" | "INVALID_LEVEL" | "
|
|
1222
|
+
code: "EXPIRED" | "INVALID_FORMAT" | "INVALID_DOMAINS" | "INVALID_LEVEL" | "MISSING_CAR" | "INVALID_CAR" | "NOT_YET_VALID" | "INVALID_TIER" | "DOMAINS_MISMATCH";
|
|
1223
1223
|
message: string;
|
|
1224
1224
|
path?: string | undefined;
|
|
1225
1225
|
}[];
|
|
1226
1226
|
claims?: {
|
|
1227
1227
|
car: string;
|
|
1228
1228
|
car_domains: number;
|
|
1229
|
-
car_domains_list: ("A" | "B" | "C" | "D" | "E" | "F" | "G" | "H" | "I" | "S")[];
|
|
1229
|
+
car_domains_list: ("A" | "B" | "C" | "D" | "E" | "F" | "G" | "H" | "I" | "J" | "K" | "L" | "M" | "N" | "O" | "P" | "Q" | "R" | "S" | "T" | "U" | "V" | "W" | "X" | "Y" | "Z")[];
|
|
1230
1230
|
car_level: CapabilityLevel;
|
|
1231
1231
|
car_registry: string;
|
|
1232
1232
|
car_org: string;
|
|
1233
1233
|
car_class: string;
|
|
1234
1234
|
car_version: string;
|
|
1235
|
-
aci?: string | undefined;
|
|
1236
1235
|
sub?: string | undefined;
|
|
1236
|
+
carId?: string | undefined;
|
|
1237
1237
|
jti?: string | undefined;
|
|
1238
1238
|
iss?: string | undefined;
|
|
1239
1239
|
aud?: string | string[] | undefined;
|
|
1240
1240
|
exp?: number | undefined;
|
|
1241
1241
|
nbf?: number | undefined;
|
|
1242
1242
|
iat?: number | undefined;
|
|
1243
|
-
|
|
1244
|
-
|
|
1245
|
-
|
|
1246
|
-
|
|
1247
|
-
|
|
1248
|
-
|
|
1249
|
-
|
|
1250
|
-
|
|
1251
|
-
|
|
1252
|
-
|
|
1253
|
-
|
|
1243
|
+
carId_domains?: number | undefined;
|
|
1244
|
+
carId_domains_list?: ("A" | "B" | "C" | "D" | "E" | "F" | "G" | "H" | "I" | "J" | "K" | "L" | "M" | "N" | "O" | "P" | "Q" | "R" | "S" | "T" | "U" | "V" | "W" | "X" | "Y" | "Z")[] | undefined;
|
|
1245
|
+
carId_level?: CapabilityLevel | undefined;
|
|
1246
|
+
car_trust?: CertificationTier | undefined;
|
|
1247
|
+
carId_trust?: CertificationTier | undefined;
|
|
1248
|
+
carId_registry?: string | undefined;
|
|
1249
|
+
carId_org?: string | undefined;
|
|
1250
|
+
carId_class?: string | undefined;
|
|
1251
|
+
carId_version?: string | undefined;
|
|
1252
|
+
car_did?: string | undefined;
|
|
1253
|
+
carId_did?: string | undefined;
|
|
1254
|
+
car_runtime_tier?: RuntimeTier | undefined;
|
|
1255
|
+
carId_runtime_tier?: RuntimeTier | undefined;
|
|
1256
|
+
car_attestations?: {
|
|
1254
1257
|
scope: string;
|
|
1255
1258
|
tier: CertificationTier;
|
|
1256
1259
|
iss: string;
|
|
@@ -1258,19 +1261,7 @@ export declare const jwtClaimsValidationResultSchema: z.ZodObject<{
|
|
|
1258
1261
|
iat: number;
|
|
1259
1262
|
evidence?: string | undefined;
|
|
1260
1263
|
}[] | undefined;
|
|
1261
|
-
|
|
1262
|
-
aci_constraints?: {
|
|
1263
|
-
custom?: Record<string, unknown> | undefined;
|
|
1264
|
-
requires_approval?: boolean | undefined;
|
|
1265
|
-
max_operations?: number | undefined;
|
|
1266
|
-
allowed_resources?: string[] | undefined;
|
|
1267
|
-
blocked_resources?: string[] | undefined;
|
|
1268
|
-
valid_until?: number | undefined;
|
|
1269
|
-
} | undefined;
|
|
1270
|
-
car_trust?: CertificationTier | undefined;
|
|
1271
|
-
car_did?: string | undefined;
|
|
1272
|
-
car_runtime_tier?: RuntimeTier | undefined;
|
|
1273
|
-
car_attestations?: {
|
|
1264
|
+
carId_attestations?: {
|
|
1274
1265
|
scope: string;
|
|
1275
1266
|
tier: CertificationTier;
|
|
1276
1267
|
iss: string;
|
|
@@ -1279,6 +1270,7 @@ export declare const jwtClaimsValidationResultSchema: z.ZodObject<{
|
|
|
1279
1270
|
evidence?: string | undefined;
|
|
1280
1271
|
}[] | undefined;
|
|
1281
1272
|
car_permission_ceiling?: number | undefined;
|
|
1273
|
+
carId_permission_ceiling?: number | undefined;
|
|
1282
1274
|
car_constraints?: {
|
|
1283
1275
|
custom?: Record<string, unknown> | undefined;
|
|
1284
1276
|
requires_approval?: boolean | undefined;
|
|
@@ -1287,42 +1279,53 @@ export declare const jwtClaimsValidationResultSchema: z.ZodObject<{
|
|
|
1287
1279
|
blocked_resources?: string[] | undefined;
|
|
1288
1280
|
valid_until?: number | undefined;
|
|
1289
1281
|
} | undefined;
|
|
1282
|
+
carId_constraints?: {
|
|
1283
|
+
custom?: Record<string, unknown> | undefined;
|
|
1284
|
+
requires_approval?: boolean | undefined;
|
|
1285
|
+
max_operations?: number | undefined;
|
|
1286
|
+
allowed_resources?: string[] | undefined;
|
|
1287
|
+
blocked_resources?: string[] | undefined;
|
|
1288
|
+
valid_until?: number | undefined;
|
|
1289
|
+
} | undefined;
|
|
1290
1290
|
} | undefined;
|
|
1291
1291
|
}, {
|
|
1292
1292
|
valid: boolean;
|
|
1293
1293
|
errors: {
|
|
1294
|
-
code: "EXPIRED" | "INVALID_FORMAT" | "INVALID_DOMAINS" | "INVALID_LEVEL" | "
|
|
1294
|
+
code: "EXPIRED" | "INVALID_FORMAT" | "INVALID_DOMAINS" | "INVALID_LEVEL" | "MISSING_CAR" | "INVALID_CAR" | "NOT_YET_VALID" | "INVALID_TIER" | "DOMAINS_MISMATCH";
|
|
1295
1295
|
message: string;
|
|
1296
1296
|
path?: string | undefined;
|
|
1297
1297
|
}[];
|
|
1298
1298
|
claims?: {
|
|
1299
1299
|
car: string;
|
|
1300
1300
|
car_domains: number;
|
|
1301
|
-
car_domains_list: ("A" | "B" | "C" | "D" | "E" | "F" | "G" | "H" | "I" | "S")[];
|
|
1301
|
+
car_domains_list: ("A" | "B" | "C" | "D" | "E" | "F" | "G" | "H" | "I" | "J" | "K" | "L" | "M" | "N" | "O" | "P" | "Q" | "R" | "S" | "T" | "U" | "V" | "W" | "X" | "Y" | "Z")[];
|
|
1302
1302
|
car_level: CapabilityLevel;
|
|
1303
1303
|
car_registry: string;
|
|
1304
1304
|
car_org: string;
|
|
1305
1305
|
car_class: string;
|
|
1306
1306
|
car_version: string;
|
|
1307
|
-
aci?: string | undefined;
|
|
1308
1307
|
sub?: string | undefined;
|
|
1308
|
+
carId?: string | undefined;
|
|
1309
1309
|
jti?: string | undefined;
|
|
1310
1310
|
iss?: string | undefined;
|
|
1311
1311
|
aud?: string | string[] | undefined;
|
|
1312
1312
|
exp?: number | undefined;
|
|
1313
1313
|
nbf?: number | undefined;
|
|
1314
1314
|
iat?: number | undefined;
|
|
1315
|
-
|
|
1316
|
-
|
|
1317
|
-
|
|
1318
|
-
|
|
1319
|
-
|
|
1320
|
-
|
|
1321
|
-
|
|
1322
|
-
|
|
1323
|
-
|
|
1324
|
-
|
|
1325
|
-
|
|
1315
|
+
carId_domains?: number | undefined;
|
|
1316
|
+
carId_domains_list?: ("A" | "B" | "C" | "D" | "E" | "F" | "G" | "H" | "I" | "J" | "K" | "L" | "M" | "N" | "O" | "P" | "Q" | "R" | "S" | "T" | "U" | "V" | "W" | "X" | "Y" | "Z")[] | undefined;
|
|
1317
|
+
carId_level?: CapabilityLevel | undefined;
|
|
1318
|
+
car_trust?: CertificationTier | undefined;
|
|
1319
|
+
carId_trust?: CertificationTier | undefined;
|
|
1320
|
+
carId_registry?: string | undefined;
|
|
1321
|
+
carId_org?: string | undefined;
|
|
1322
|
+
carId_class?: string | undefined;
|
|
1323
|
+
carId_version?: string | undefined;
|
|
1324
|
+
car_did?: string | undefined;
|
|
1325
|
+
carId_did?: string | undefined;
|
|
1326
|
+
car_runtime_tier?: RuntimeTier | undefined;
|
|
1327
|
+
carId_runtime_tier?: RuntimeTier | undefined;
|
|
1328
|
+
car_attestations?: {
|
|
1326
1329
|
scope: string;
|
|
1327
1330
|
tier: CertificationTier;
|
|
1328
1331
|
iss: string;
|
|
@@ -1330,19 +1333,7 @@ export declare const jwtClaimsValidationResultSchema: z.ZodObject<{
|
|
|
1330
1333
|
iat: number;
|
|
1331
1334
|
evidence?: string | undefined;
|
|
1332
1335
|
}[] | undefined;
|
|
1333
|
-
|
|
1334
|
-
aci_constraints?: {
|
|
1335
|
-
custom?: Record<string, unknown> | undefined;
|
|
1336
|
-
requires_approval?: boolean | undefined;
|
|
1337
|
-
max_operations?: number | undefined;
|
|
1338
|
-
allowed_resources?: string[] | undefined;
|
|
1339
|
-
blocked_resources?: string[] | undefined;
|
|
1340
|
-
valid_until?: number | undefined;
|
|
1341
|
-
} | undefined;
|
|
1342
|
-
car_trust?: CertificationTier | undefined;
|
|
1343
|
-
car_did?: string | undefined;
|
|
1344
|
-
car_runtime_tier?: RuntimeTier | undefined;
|
|
1345
|
-
car_attestations?: {
|
|
1336
|
+
carId_attestations?: {
|
|
1346
1337
|
scope: string;
|
|
1347
1338
|
tier: CertificationTier;
|
|
1348
1339
|
iss: string;
|
|
@@ -1351,6 +1342,7 @@ export declare const jwtClaimsValidationResultSchema: z.ZodObject<{
|
|
|
1351
1342
|
evidence?: string | undefined;
|
|
1352
1343
|
}[] | undefined;
|
|
1353
1344
|
car_permission_ceiling?: number | undefined;
|
|
1345
|
+
carId_permission_ceiling?: number | undefined;
|
|
1354
1346
|
car_constraints?: {
|
|
1355
1347
|
custom?: Record<string, unknown> | undefined;
|
|
1356
1348
|
requires_approval?: boolean | undefined;
|
|
@@ -1359,6 +1351,14 @@ export declare const jwtClaimsValidationResultSchema: z.ZodObject<{
|
|
|
1359
1351
|
blocked_resources?: string[] | undefined;
|
|
1360
1352
|
valid_until?: number | undefined;
|
|
1361
1353
|
} | undefined;
|
|
1354
|
+
carId_constraints?: {
|
|
1355
|
+
custom?: Record<string, unknown> | undefined;
|
|
1356
|
+
requires_approval?: boolean | undefined;
|
|
1357
|
+
max_operations?: number | undefined;
|
|
1358
|
+
allowed_resources?: string[] | undefined;
|
|
1359
|
+
blocked_resources?: string[] | undefined;
|
|
1360
|
+
valid_until?: number | undefined;
|
|
1361
|
+
} | undefined;
|
|
1362
1362
|
} | undefined;
|
|
1363
1363
|
}>;
|
|
1364
1364
|
//# sourceMappingURL=jwt-claims.d.ts.map
|