agent-passport-system 3.1.0 → 3.3.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/LICENSE +1 -1
- package/README.md +8 -5
- package/dist/src/adapters/a2a.d.ts.map +1 -1
- package/dist/src/adapters/a2a.js +2 -1
- package/dist/src/adapters/a2a.js.map +1 -1
- package/dist/src/adapters/adk.d.ts.map +1 -1
- package/dist/src/adapters/adk.js +2 -1
- package/dist/src/adapters/adk.js.map +1 -1
- package/dist/src/adapters/crewai.d.ts.map +1 -1
- package/dist/src/adapters/crewai.js +2 -1
- package/dist/src/adapters/crewai.js.map +1 -1
- package/dist/src/adapters/gateway-reporter.d.ts.map +1 -1
- package/dist/src/adapters/gateway-reporter.js +2 -1
- package/dist/src/adapters/gateway-reporter.js.map +1 -1
- package/dist/src/adapters/gonka.d.ts.map +1 -1
- package/dist/src/adapters/gonka.js +2 -1
- package/dist/src/adapters/gonka.js.map +1 -1
- package/dist/src/adapters/governance-hook.d.ts.map +1 -1
- package/dist/src/adapters/governance-hook.js +2 -1
- package/dist/src/adapters/governance-hook.js.map +1 -1
- package/dist/src/adapters/ibac-cedar.d.ts.map +1 -1
- package/dist/src/adapters/ibac-cedar.js +24 -5
- package/dist/src/adapters/ibac-cedar.js.map +1 -1
- package/dist/src/adapters/ibac.d.ts.map +1 -1
- package/dist/src/adapters/ibac.js +2 -1
- package/dist/src/adapters/ibac.js.map +1 -1
- package/dist/src/adapters/langchain.d.ts +1 -1
- package/dist/src/adapters/langchain.d.ts.map +1 -1
- package/dist/src/adapters/langchain.js +2 -1
- package/dist/src/adapters/langchain.js.map +1 -1
- package/dist/src/adapters/mcp.d.ts.map +1 -1
- package/dist/src/adapters/mcp.js +2 -1
- package/dist/src/adapters/mcp.js.map +1 -1
- package/dist/src/adapters/mutual-auth-a2a.d.ts.map +1 -1
- package/dist/src/adapters/mutual-auth-a2a.js +2 -1
- package/dist/src/adapters/mutual-auth-a2a.js.map +1 -1
- package/dist/src/adapters/mutual-auth-mcp.d.ts.map +1 -1
- package/dist/src/adapters/mutual-auth-mcp.js +2 -1
- package/dist/src/adapters/mutual-auth-mcp.js.map +1 -1
- package/dist/src/adapters/oauth-id-jag/index.d.ts.map +1 -1
- package/dist/src/adapters/oauth-id-jag/index.js +2 -1
- package/dist/src/adapters/oauth-id-jag/index.js.map +1 -1
- package/dist/src/adapters/oauth-id-jag/types.d.ts.map +1 -1
- package/dist/src/adapters/oauth-id-jag/types.js +2 -1
- package/dist/src/adapters/oauth-id-jag/types.js.map +1 -1
- package/dist/src/adapters/oauth-id-jag/verify.d.ts.map +1 -1
- package/dist/src/adapters/oauth-id-jag/verify.js +2 -1
- package/dist/src/adapters/oauth-id-jag/verify.js.map +1 -1
- package/dist/src/adapters/oauth-rfc8693/index.d.ts.map +1 -1
- package/dist/src/adapters/oauth-rfc8693/index.js +2 -1
- package/dist/src/adapters/oauth-rfc8693/index.js.map +1 -1
- package/dist/src/adapters/oauth-rfc8693/types.d.ts +7 -7
- package/dist/src/adapters/oauth-rfc8693/types.d.ts.map +1 -1
- package/dist/src/adapters/oauth-rfc8693/types.js +2 -1
- package/dist/src/adapters/oauth-rfc8693/types.js.map +1 -1
- package/dist/src/adapters/openshell.d.ts.map +1 -1
- package/dist/src/adapters/openshell.js +2 -1
- package/dist/src/adapters/openshell.js.map +1 -1
- package/dist/src/adapters/remote-signer/handle-signer.d.ts.map +1 -1
- package/dist/src/adapters/remote-signer/handle-signer.js +2 -1
- package/dist/src/adapters/remote-signer/handle-signer.js.map +1 -1
- package/dist/src/adapters/remote-signer/index.d.ts.map +1 -1
- package/dist/src/adapters/remote-signer/index.js +2 -1
- package/dist/src/adapters/remote-signer/index.js.map +1 -1
- package/dist/src/adapters/remote-signer/local-signer.d.ts.map +1 -1
- package/dist/src/adapters/remote-signer/local-signer.js +2 -1
- package/dist/src/adapters/remote-signer/local-signer.js.map +1 -1
- package/dist/src/adapters/remote-signer/types.d.ts.map +1 -1
- package/dist/src/adapters/remote-signer/types.js +2 -1
- package/dist/src/adapters/remote-signer/types.js.map +1 -1
- package/dist/src/adapters/remote-signer/verify.d.ts.map +1 -1
- package/dist/src/adapters/remote-signer/verify.js +2 -1
- package/dist/src/adapters/remote-signer/verify.js.map +1 -1
- package/dist/src/cli/index.js +138 -5
- package/dist/src/cli/index.js.map +1 -1
- package/dist/src/conformance/suite.d.ts.map +1 -1
- package/dist/src/conformance/suite.js +2 -1
- package/dist/src/conformance/suite.js.map +1 -1
- package/dist/src/contract.d.ts.map +1 -1
- package/dist/src/contract.js +2 -0
- package/dist/src/contract.js.map +1 -1
- package/dist/src/core/a2a.d.ts.map +1 -1
- package/dist/src/core/a2a.js +2 -0
- package/dist/src/core/a2a.js.map +1 -1
- package/dist/src/core/action-ref.d.ts +18 -1
- package/dist/src/core/action-ref.d.ts.map +1 -1
- package/dist/src/core/action-ref.js +45 -2
- package/dist/src/core/action-ref.js.map +1 -1
- package/dist/src/core/agora.d.ts.map +1 -1
- package/dist/src/core/agora.js +2 -1
- package/dist/src/core/agora.js.map +1 -1
- package/dist/src/core/anchor-state.d.ts.map +1 -1
- package/dist/src/core/anchor-state.js +2 -0
- package/dist/src/core/anchor-state.js.map +1 -1
- package/dist/src/core/aps-txt.d.ts.map +1 -1
- package/dist/src/core/aps-txt.js +2 -1
- package/dist/src/core/aps-txt.js.map +1 -1
- package/dist/src/core/attestation.d.ts.map +1 -1
- package/dist/src/core/attestation.js +2 -1
- package/dist/src/core/attestation.js.map +1 -1
- package/dist/src/core/attribution.d.ts.map +1 -1
- package/dist/src/core/attribution.js +2 -1
- package/dist/src/core/attribution.js.map +1 -1
- package/dist/src/core/behavioral-fingerprint.d.ts.map +1 -1
- package/dist/src/core/behavioral-fingerprint.js +2 -0
- package/dist/src/core/behavioral-fingerprint.js.map +1 -1
- package/dist/src/core/behavioral-memory-receipt.d.ts.map +1 -1
- package/dist/src/core/behavioral-memory-receipt.js +2 -1
- package/dist/src/core/behavioral-memory-receipt.js.map +1 -1
- package/dist/src/core/behavioral-memory.d.ts.map +1 -1
- package/dist/src/core/behavioral-memory.js +2 -1
- package/dist/src/core/behavioral-memory.js.map +1 -1
- package/dist/src/core/bilateral-receipt.d.ts +7 -0
- package/dist/src/core/bilateral-receipt.d.ts.map +1 -1
- package/dist/src/core/bilateral-receipt.js +3 -1
- package/dist/src/core/bilateral-receipt.js.map +1 -1
- package/dist/src/core/canonical-jcs.d.ts.map +1 -1
- package/dist/src/core/canonical-jcs.js +2 -0
- package/dist/src/core/canonical-jcs.js.map +1 -1
- package/dist/src/core/canonical.d.ts.map +1 -1
- package/dist/src/core/canonical.js +2 -0
- package/dist/src/core/canonical.js.map +1 -1
- package/dist/src/core/charter.d.ts.map +1 -1
- package/dist/src/core/charter.js +2 -1
- package/dist/src/core/charter.js.map +1 -1
- package/dist/src/core/commerce.d.ts +1 -1
- package/dist/src/core/commerce.d.ts.map +1 -1
- package/dist/src/core/commerce.js +2 -1
- package/dist/src/core/commerce.js.map +1 -1
- package/dist/src/core/completion.d.ts.map +1 -1
- package/dist/src/core/completion.js +2 -1
- package/dist/src/core/completion.js.map +1 -1
- package/dist/src/core/context.d.ts.map +1 -1
- package/dist/src/core/context.js +2 -1
- package/dist/src/core/context.js.map +1 -1
- package/dist/src/core/coordination.d.ts.map +1 -1
- package/dist/src/core/coordination.js +2 -1
- package/dist/src/core/coordination.js.map +1 -1
- package/dist/src/core/credential-request.d.ts.map +1 -1
- package/dist/src/core/credential-request.js +2 -0
- package/dist/src/core/credential-request.js.map +1 -1
- package/dist/src/core/cross-chain.d.ts.map +1 -1
- package/dist/src/core/cross-chain.js +2 -0
- package/dist/src/core/cross-chain.js.map +1 -1
- package/dist/src/core/data-contribution.d.ts.map +1 -1
- package/dist/src/core/data-contribution.js +2 -1
- package/dist/src/core/data-contribution.js.map +1 -1
- package/dist/src/core/data-enforcement.d.ts.map +1 -1
- package/dist/src/core/data-enforcement.js +2 -1
- package/dist/src/core/data-enforcement.js.map +1 -1
- package/dist/src/core/data-gateway.d.ts.map +1 -1
- package/dist/src/core/data-gateway.js +2 -1
- package/dist/src/core/data-gateway.js.map +1 -1
- package/dist/src/core/data-lifecycle.d.ts.map +1 -1
- package/dist/src/core/data-lifecycle.js +2 -1
- package/dist/src/core/data-lifecycle.js.map +1 -1
- package/dist/src/core/data-narrowing.d.ts.map +1 -1
- package/dist/src/core/data-narrowing.js +2 -0
- package/dist/src/core/data-narrowing.js.map +1 -1
- package/dist/src/core/data-settlement.d.ts.map +1 -1
- package/dist/src/core/data-settlement.js +2 -1
- package/dist/src/core/data-settlement.js.map +1 -1
- package/dist/src/core/data-source-attribution.d.ts.map +1 -1
- package/dist/src/core/data-source-attribution.js +2 -1
- package/dist/src/core/data-source-attribution.js.map +1 -1
- package/dist/src/core/data-source.d.ts.map +1 -1
- package/dist/src/core/data-source.js +2 -0
- package/dist/src/core/data-source.js.map +1 -1
- package/dist/src/core/decision-equivalence.d.ts.map +1 -1
- package/dist/src/core/decision-equivalence.js +2 -1
- package/dist/src/core/decision-equivalence.js.map +1 -1
- package/dist/src/core/decision-semantics.d.ts.map +1 -1
- package/dist/src/core/decision-semantics.js +2 -0
- package/dist/src/core/decision-semantics.js.map +1 -1
- package/dist/src/core/delegation.d.ts.map +1 -1
- package/dist/src/core/delegation.js +2 -1
- package/dist/src/core/delegation.js.map +1 -1
- package/dist/src/core/denial-domains.d.ts.map +1 -1
- package/dist/src/core/denial-domains.js +2 -0
- package/dist/src/core/denial-domains.js.map +1 -1
- package/dist/src/core/did-interop.d.ts.map +1 -1
- package/dist/src/core/did-interop.js +65 -0
- package/dist/src/core/did-interop.js.map +1 -1
- package/dist/src/core/did-uri.d.ts.map +1 -1
- package/dist/src/core/did-uri.js +2 -1
- package/dist/src/core/did-uri.js.map +1 -1
- package/dist/src/core/did.d.ts.map +1 -1
- package/dist/src/core/did.js +2 -1
- package/dist/src/core/did.js.map +1 -1
- package/dist/src/core/encrypted-messaging.d.ts.map +1 -1
- package/dist/src/core/encrypted-messaging.js +2 -0
- package/dist/src/core/encrypted-messaging.js.map +1 -1
- package/dist/src/core/entity-verification.d.ts.map +1 -1
- package/dist/src/core/entity-verification.js +2 -1
- package/dist/src/core/entity-verification.js.map +1 -1
- package/dist/src/core/escalation.d.ts.map +1 -1
- package/dist/src/core/escalation.js +2 -0
- package/dist/src/core/escalation.js.map +1 -1
- package/dist/src/core/euaiact.d.ts.map +1 -1
- package/dist/src/core/euaiact.js +2 -1
- package/dist/src/core/euaiact.js.map +1 -1
- package/dist/src/core/evaluation-context.d.ts.map +1 -1
- package/dist/src/core/evaluation-context.js +2 -1
- package/dist/src/core/evaluation-context.js.map +1 -1
- package/dist/src/core/evidence-bundle.d.ts +63 -0
- package/dist/src/core/evidence-bundle.d.ts.map +1 -0
- package/dist/src/core/evidence-bundle.js +374 -0
- package/dist/src/core/evidence-bundle.js.map +1 -0
- package/dist/src/core/execution-attestation.d.ts.map +1 -1
- package/dist/src/core/execution-attestation.js +2 -1
- package/dist/src/core/execution-attestation.js.map +1 -1
- package/dist/src/core/execution-envelope.d.ts.map +1 -1
- package/dist/src/core/execution-envelope.js +2 -1
- package/dist/src/core/execution-envelope.js.map +1 -1
- package/dist/src/core/external-action-ref.d.ts.map +1 -1
- package/dist/src/core/external-action-ref.js +2 -1
- package/dist/src/core/external-action-ref.js.map +1 -1
- package/dist/src/core/feasibility.d.ts.map +1 -1
- package/dist/src/core/feasibility.js +2 -0
- package/dist/src/core/feasibility.js.map +1 -1
- package/dist/src/core/federation.d.ts.map +1 -1
- package/dist/src/core/federation.js +2 -1
- package/dist/src/core/federation.js.map +1 -1
- package/dist/src/core/fidelity-probe.d.ts.map +1 -1
- package/dist/src/core/fidelity-probe.js +2 -0
- package/dist/src/core/fidelity-probe.js.map +1 -1
- package/dist/src/core/freshness.d.ts.map +1 -1
- package/dist/src/core/freshness.js +2 -1
- package/dist/src/core/freshness.js.map +1 -1
- package/dist/src/core/gateway-identity.d.ts.map +1 -1
- package/dist/src/core/gateway-identity.js +2 -0
- package/dist/src/core/gateway-identity.js.map +1 -1
- package/dist/src/core/gateway-wiring.d.ts.map +1 -1
- package/dist/src/core/gateway-wiring.js +2 -0
- package/dist/src/core/gateway-wiring.js.map +1 -1
- package/dist/src/core/gateway.d.ts.map +1 -1
- package/dist/src/core/gateway.js +2 -1
- package/dist/src/core/gateway.js.map +1 -1
- package/dist/src/core/governance-block.d.ts.map +1 -1
- package/dist/src/core/governance-block.js +2 -1
- package/dist/src/core/governance-block.js.map +1 -1
- package/dist/src/core/governance-consumer.d.ts.map +1 -1
- package/dist/src/core/governance-consumer.js +2 -1
- package/dist/src/core/governance-consumer.js.map +1 -1
- package/dist/src/core/governance-posture.d.ts.map +1 -1
- package/dist/src/core/governance-posture.js +2 -0
- package/dist/src/core/governance-posture.js.map +1 -1
- package/dist/src/core/governance.d.ts.map +1 -1
- package/dist/src/core/governance.js +2 -0
- package/dist/src/core/governance.js.map +1 -1
- package/dist/src/core/idempotency.d.ts.map +1 -1
- package/dist/src/core/idempotency.js +2 -1
- package/dist/src/core/idempotency.js.map +1 -1
- package/dist/src/core/identity-bridge.d.ts.map +1 -1
- package/dist/src/core/identity-bridge.js +2 -0
- package/dist/src/core/identity-bridge.js.map +1 -1
- package/dist/src/core/identity.d.ts.map +1 -1
- package/dist/src/core/identity.js +2 -0
- package/dist/src/core/identity.js.map +1 -1
- package/dist/src/core/integration.d.ts.map +1 -1
- package/dist/src/core/integration.js +2 -1
- package/dist/src/core/integration.js.map +1 -1
- package/dist/src/core/intent-network.d.ts.map +1 -1
- package/dist/src/core/intent-network.js +2 -1
- package/dist/src/core/intent-network.js.map +1 -1
- package/dist/src/core/intent.d.ts.map +1 -1
- package/dist/src/core/intent.js +2 -1
- package/dist/src/core/intent.js.map +1 -1
- package/dist/src/core/jurisdiction-selection.d.ts +23 -0
- package/dist/src/core/jurisdiction-selection.d.ts.map +1 -0
- package/dist/src/core/jurisdiction-selection.js +96 -0
- package/dist/src/core/jurisdiction-selection.js.map +1 -0
- package/dist/src/core/key-rotation.d.ts.map +1 -1
- package/dist/src/core/key-rotation.js +2 -1
- package/dist/src/core/key-rotation.js.map +1 -1
- package/dist/src/core/messaging-audit.d.ts.map +1 -1
- package/dist/src/core/messaging-audit.js +2 -0
- package/dist/src/core/messaging-audit.js.map +1 -1
- package/dist/src/core/obligations.d.ts.map +1 -1
- package/dist/src/core/obligations.js +2 -0
- package/dist/src/core/obligations.js.map +1 -1
- package/dist/src/core/oracle-witness.d.ts.map +1 -1
- package/dist/src/core/oracle-witness.js +2 -0
- package/dist/src/core/oracle-witness.js.map +1 -1
- package/dist/src/core/passport.d.ts.map +1 -1
- package/dist/src/core/passport.js +2 -1
- package/dist/src/core/passport.js.map +1 -1
- package/dist/src/core/policy-conflict.d.ts.map +1 -1
- package/dist/src/core/policy-conflict.js +2 -0
- package/dist/src/core/policy-conflict.js.map +1 -1
- package/dist/src/core/policy.d.ts.map +1 -1
- package/dist/src/core/policy.js +2 -1
- package/dist/src/core/policy.js.map +1 -1
- package/dist/src/core/precedent.d.ts.map +1 -1
- package/dist/src/core/precedent.js +2 -0
- package/dist/src/core/precedent.js.map +1 -1
- package/dist/src/core/principal.d.ts.map +1 -1
- package/dist/src/core/principal.js +2 -1
- package/dist/src/core/principal.js.map +1 -1
- package/dist/src/core/probe-identity.d.ts.map +1 -1
- package/dist/src/core/probe-identity.js +2 -1
- package/dist/src/core/probe-identity.js.map +1 -1
- package/dist/src/core/proof-namespace.d.ts.map +1 -1
- package/dist/src/core/proof-namespace.js +2 -0
- package/dist/src/core/proof-namespace.js.map +1 -1
- package/dist/src/core/reanchor.d.ts.map +1 -1
- package/dist/src/core/reanchor.js +2 -0
- package/dist/src/core/reanchor.js.map +1 -1
- package/dist/src/core/receipt-ledger.d.ts.map +1 -1
- package/dist/src/core/receipt-ledger.js +2 -0
- package/dist/src/core/receipt-ledger.js.map +1 -1
- package/dist/src/core/recovery.d.ts.map +1 -1
- package/dist/src/core/recovery.js +2 -0
- package/dist/src/core/recovery.js.map +1 -1
- package/dist/src/core/reputation-authority.d.ts.map +1 -1
- package/dist/src/core/reputation-authority.js +2 -0
- package/dist/src/core/reputation-authority.js.map +1 -1
- package/dist/src/core/reserve.d.ts.map +1 -1
- package/dist/src/core/reserve.js +2 -1
- package/dist/src/core/reserve.js.map +1 -1
- package/dist/src/core/routing.d.ts.map +1 -1
- package/dist/src/core/routing.js +2 -0
- package/dist/src/core/routing.js.map +1 -1
- package/dist/src/core/scope-version.d.ts.map +1 -1
- package/dist/src/core/scope-version.js +2 -1
- package/dist/src/core/scope-version.js.map +1 -1
- package/dist/src/core/time.d.ts.map +1 -1
- package/dist/src/core/time.js +2 -1
- package/dist/src/core/time.js.map +1 -1
- package/dist/src/core/tool-integrity.d.ts.map +1 -1
- package/dist/src/core/tool-integrity.js +2 -0
- package/dist/src/core/tool-integrity.js.map +1 -1
- package/dist/src/core/training-attribution.d.ts.map +1 -1
- package/dist/src/core/training-attribution.js +2 -1
- package/dist/src/core/training-attribution.js.map +1 -1
- package/dist/src/core/transactional.d.ts.map +1 -1
- package/dist/src/core/transactional.js +2 -1
- package/dist/src/core/transactional.js.map +1 -1
- package/dist/src/core/trust-adapters.d.ts.map +1 -1
- package/dist/src/core/trust-adapters.js +2 -1
- package/dist/src/core/trust-adapters.js.map +1 -1
- package/dist/src/core/values.d.ts.map +1 -1
- package/dist/src/core/values.js +2 -1
- package/dist/src/core/values.js.map +1 -1
- package/dist/src/core/vc-wrapper.d.ts.map +1 -1
- package/dist/src/core/vc-wrapper.js +2 -0
- package/dist/src/core/vc-wrapper.js.map +1 -1
- package/dist/src/core/vc.d.ts.map +1 -1
- package/dist/src/core/vc.js +2 -0
- package/dist/src/core/vc.js.map +1 -1
- package/dist/src/core-exports.d.ts.map +1 -1
- package/dist/src/core-exports.js +2 -1
- package/dist/src/core-exports.js.map +1 -1
- package/dist/src/crypto/key-storage.d.ts.map +1 -1
- package/dist/src/crypto/key-storage.js +2 -0
- package/dist/src/crypto/key-storage.js.map +1 -1
- package/dist/src/crypto/keys.d.ts.map +1 -1
- package/dist/src/crypto/keys.js +3 -1
- package/dist/src/crypto/keys.js.map +1 -1
- package/dist/src/decisionReceipt.d.ts +3 -3
- package/dist/src/decisionReceipt.d.ts.map +1 -1
- package/dist/src/decisionReceipt.js +2 -1
- package/dist/src/decisionReceipt.js.map +1 -1
- package/dist/src/errors/identity-composition-error.d.ts.map +1 -1
- package/dist/src/errors/identity-composition-error.js +2 -1
- package/dist/src/errors/identity-composition-error.js.map +1 -1
- package/dist/src/index.d.ts +13 -0
- package/dist/src/index.d.ts.map +1 -1
- package/dist/src/index.js +23 -1
- package/dist/src/index.js.map +1 -1
- package/dist/src/interop/agent-json-bridge.d.ts.map +1 -1
- package/dist/src/interop/agent-json-bridge.js +2 -1
- package/dist/src/interop/agent-json-bridge.js.map +1 -1
- package/dist/src/interop/qntm-bridge.d.ts.map +1 -1
- package/dist/src/interop/qntm-bridge.js +38 -5
- package/dist/src/interop/qntm-bridge.js.map +1 -1
- package/dist/src/storage/index.d.ts.map +1 -1
- package/dist/src/storage/index.js +2 -0
- package/dist/src/storage/index.js.map +1 -1
- package/dist/src/storage/receipt-bundle.d.ts.map +1 -1
- package/dist/src/storage/receipt-bundle.js +2 -0
- package/dist/src/storage/receipt-bundle.js.map +1 -1
- package/dist/src/storage/types.d.ts.map +1 -1
- package/dist/src/storage/types.js +2 -0
- package/dist/src/storage/types.js.map +1 -1
- package/dist/src/storage/volatile-backend.d.ts.map +1 -1
- package/dist/src/storage/volatile-backend.js +2 -0
- package/dist/src/storage/volatile-backend.js.map +1 -1
- package/dist/src/types/a2a.d.ts.map +1 -1
- package/dist/src/types/a2a.js +2 -0
- package/dist/src/types/a2a.js.map +1 -1
- package/dist/src/types/agora.d.ts.map +1 -1
- package/dist/src/types/agora.js +2 -0
- package/dist/src/types/agora.js.map +1 -1
- package/dist/src/types/approval.d.ts.map +1 -1
- package/dist/src/types/approval.js +2 -1
- package/dist/src/types/approval.js.map +1 -1
- package/dist/src/types/attestation.d.ts.map +1 -1
- package/dist/src/types/attestation.js +2 -1
- package/dist/src/types/attestation.js.map +1 -1
- package/dist/src/types/behavioral-memory.d.ts.map +1 -1
- package/dist/src/types/behavioral-memory.js +2 -1
- package/dist/src/types/behavioral-memory.js.map +1 -1
- package/dist/src/types/bilateral-receipt.d.ts +11 -0
- package/dist/src/types/bilateral-receipt.d.ts.map +1 -1
- package/dist/src/types/bilateral-receipt.js +2 -1
- package/dist/src/types/bilateral-receipt.js.map +1 -1
- package/dist/src/types/charter.d.ts.map +1 -1
- package/dist/src/types/charter.js +2 -1
- package/dist/src/types/charter.js.map +1 -1
- package/dist/src/types/commerce.d.ts.map +1 -1
- package/dist/src/types/commerce.js +2 -0
- package/dist/src/types/commerce.js.map +1 -1
- package/dist/src/types/context.d.ts.map +1 -1
- package/dist/src/types/context.js +2 -0
- package/dist/src/types/context.js.map +1 -1
- package/dist/src/types/coordination.d.ts.map +1 -1
- package/dist/src/types/coordination.js +2 -0
- package/dist/src/types/coordination.js.map +1 -1
- package/dist/src/types/cross-chain.d.ts.map +1 -1
- package/dist/src/types/cross-chain.js +2 -0
- package/dist/src/types/cross-chain.js.map +1 -1
- package/dist/src/types/data-contribution.d.ts.map +1 -1
- package/dist/src/types/data-contribution.js +2 -0
- package/dist/src/types/data-contribution.js.map +1 -1
- package/dist/src/types/data-lifecycle.d.ts.map +1 -1
- package/dist/src/types/data-lifecycle.js +2 -1
- package/dist/src/types/data-lifecycle.js.map +1 -1
- package/dist/src/types/data-source.d.ts.map +1 -1
- package/dist/src/types/data-source.js +2 -0
- package/dist/src/types/data-source.js.map +1 -1
- package/dist/src/types/decision-equivalence.d.ts.map +1 -1
- package/dist/src/types/decision-equivalence.js +2 -1
- package/dist/src/types/decision-equivalence.js.map +1 -1
- package/dist/src/types/decision-semantics.d.ts.map +1 -1
- package/dist/src/types/decision-semantics.js +2 -0
- package/dist/src/types/decision-semantics.js.map +1 -1
- package/dist/src/types/did.d.ts.map +1 -1
- package/dist/src/types/did.js +2 -0
- package/dist/src/types/did.js.map +1 -1
- package/dist/src/types/dispute.d.ts.map +1 -1
- package/dist/src/types/dispute.js +2 -1
- package/dist/src/types/dispute.js.map +1 -1
- package/dist/src/types/encrypted-messaging.d.ts.map +1 -1
- package/dist/src/types/encrypted-messaging.js +2 -0
- package/dist/src/types/encrypted-messaging.js.map +1 -1
- package/dist/src/types/escrow.d.ts.map +1 -1
- package/dist/src/types/escrow.js +2 -1
- package/dist/src/types/escrow.js.map +1 -1
- package/dist/src/types/euaiact.d.ts.map +1 -1
- package/dist/src/types/euaiact.js +2 -0
- package/dist/src/types/euaiact.js.map +1 -1
- package/dist/src/types/evidence-bundle.d.ts +98 -0
- package/dist/src/types/evidence-bundle.d.ts.map +1 -0
- package/dist/src/types/evidence-bundle.js +15 -0
- package/dist/src/types/evidence-bundle.js.map +1 -0
- package/dist/src/types/evidence.d.ts.map +1 -1
- package/dist/src/types/evidence.js +2 -1
- package/dist/src/types/evidence.js.map +1 -1
- package/dist/src/types/execution-attestation.d.ts.map +1 -1
- package/dist/src/types/execution-attestation.js +2 -1
- package/dist/src/types/execution-attestation.js.map +1 -1
- package/dist/src/types/execution-envelope.d.ts.map +1 -1
- package/dist/src/types/execution-envelope.js +2 -0
- package/dist/src/types/execution-envelope.js.map +1 -1
- package/dist/src/types/feasibility.d.ts.map +1 -1
- package/dist/src/types/feasibility.js +2 -0
- package/dist/src/types/feasibility.js.map +1 -1
- package/dist/src/types/federation.d.ts.map +1 -1
- package/dist/src/types/federation.js +2 -1
- package/dist/src/types/federation.js.map +1 -1
- package/dist/src/types/finality.d.ts.map +1 -1
- package/dist/src/types/finality.js +2 -1
- package/dist/src/types/finality.js.map +1 -1
- package/dist/src/types/foreign.d.ts.map +1 -1
- package/dist/src/types/foreign.js +2 -1
- package/dist/src/types/foreign.js.map +1 -1
- package/dist/src/types/gateway.d.ts.map +1 -1
- package/dist/src/types/gateway.js +2 -0
- package/dist/src/types/gateway.js.map +1 -1
- package/dist/src/types/governance.d.ts.map +1 -1
- package/dist/src/types/governance.js +2 -0
- package/dist/src/types/governance.js.map +1 -1
- package/dist/src/types/health.d.ts.map +1 -1
- package/dist/src/types/health.js +2 -1
- package/dist/src/types/health.js.map +1 -1
- package/dist/src/types/identity.d.ts.map +1 -1
- package/dist/src/types/identity.js +2 -0
- package/dist/src/types/identity.js.map +1 -1
- package/dist/src/types/intent-network.d.ts.map +1 -1
- package/dist/src/types/intent-network.js +2 -0
- package/dist/src/types/intent-network.js.map +1 -1
- package/dist/src/types/intent.d.ts.map +1 -1
- package/dist/src/types/intent.js +2 -0
- package/dist/src/types/intent.js.map +1 -1
- package/dist/src/types/jurisdiction-selection.d.ts +79 -0
- package/dist/src/types/jurisdiction-selection.d.ts.map +1 -0
- package/dist/src/types/jurisdiction-selection.js +12 -0
- package/dist/src/types/jurisdiction-selection.js.map +1 -0
- package/dist/src/types/obligations.d.ts.map +1 -1
- package/dist/src/types/obligations.js +2 -0
- package/dist/src/types/obligations.js.map +1 -1
- package/dist/src/types/oracle-witness.d.ts.map +1 -1
- package/dist/src/types/oracle-witness.js +2 -0
- package/dist/src/types/oracle-witness.js.map +1 -1
- package/dist/src/types/passport.d.ts.map +1 -1
- package/dist/src/types/passport.js +2 -0
- package/dist/src/types/passport.js.map +1 -1
- package/dist/src/types/policy.d.ts.map +1 -1
- package/dist/src/types/policy.js +2 -0
- package/dist/src/types/policy.js.map +1 -1
- package/dist/src/types/principal.d.ts.map +1 -1
- package/dist/src/types/principal.js +2 -0
- package/dist/src/types/principal.js.map +1 -1
- package/dist/src/types/recovery.d.ts.map +1 -1
- package/dist/src/types/recovery.js +2 -0
- package/dist/src/types/recovery.js.map +1 -1
- package/dist/src/types/reputation-authority.d.ts.map +1 -1
- package/dist/src/types/reputation-authority.js +2 -0
- package/dist/src/types/reputation-authority.js.map +1 -1
- package/dist/src/types/reserve.d.ts.map +1 -1
- package/dist/src/types/reserve.js +2 -1
- package/dist/src/types/reserve.js.map +1 -1
- package/dist/src/types/routing.d.ts.map +1 -1
- package/dist/src/types/routing.js +2 -0
- package/dist/src/types/routing.js.map +1 -1
- package/dist/src/types/time.d.ts.map +1 -1
- package/dist/src/types/time.js +2 -1
- package/dist/src/types/time.js.map +1 -1
- package/dist/src/v2/accountability/__tests__/action.test.js +2 -1
- package/dist/src/v2/accountability/__tests__/action.test.js.map +1 -1
- package/dist/src/v2/accountability/__tests__/authority-boundary.test.js +2 -1
- package/dist/src/v2/accountability/__tests__/authority-boundary.test.js.map +1 -1
- package/dist/src/v2/accountability/__tests__/bundle.test.js +2 -1
- package/dist/src/v2/accountability/__tests__/bundle.test.js.map +1 -1
- package/dist/src/v2/accountability/__tests__/contestability.test.js +2 -1
- package/dist/src/v2/accountability/__tests__/contestability.test.js.map +1 -1
- package/dist/src/v2/accountability/__tests__/custody.test.js +2 -1
- package/dist/src/v2/accountability/__tests__/custody.test.js.map +1 -1
- package/dist/src/v2/accountability/__tests__/fixtures.test.js +2 -1
- package/dist/src/v2/accountability/__tests__/fixtures.test.js.map +1 -1
- package/dist/src/v2/accountability/construct/action.d.ts.map +1 -1
- package/dist/src/v2/accountability/construct/action.js +2 -1
- package/dist/src/v2/accountability/construct/action.js.map +1 -1
- package/dist/src/v2/accountability/construct/authority-boundary.d.ts.map +1 -1
- package/dist/src/v2/accountability/construct/authority-boundary.js +2 -1
- package/dist/src/v2/accountability/construct/authority-boundary.js.map +1 -1
- package/dist/src/v2/accountability/construct/bundle.d.ts.map +1 -1
- package/dist/src/v2/accountability/construct/bundle.js +2 -1
- package/dist/src/v2/accountability/construct/bundle.js.map +1 -1
- package/dist/src/v2/accountability/construct/contestability.d.ts.map +1 -1
- package/dist/src/v2/accountability/construct/contestability.js +2 -1
- package/dist/src/v2/accountability/construct/contestability.js.map +1 -1
- package/dist/src/v2/accountability/construct/custody.d.ts.map +1 -1
- package/dist/src/v2/accountability/construct/custody.js +2 -1
- package/dist/src/v2/accountability/construct/custody.js.map +1 -1
- package/dist/src/v2/accountability/index.d.ts.map +1 -1
- package/dist/src/v2/accountability/index.js +2 -1
- package/dist/src/v2/accountability/index.js.map +1 -1
- package/dist/src/v2/accountability/types/action.d.ts.map +1 -1
- package/dist/src/v2/accountability/types/action.js +2 -1
- package/dist/src/v2/accountability/types/action.js.map +1 -1
- package/dist/src/v2/accountability/types/authority-boundary.d.ts.map +1 -1
- package/dist/src/v2/accountability/types/authority-boundary.js +2 -1
- package/dist/src/v2/accountability/types/authority-boundary.js.map +1 -1
- package/dist/src/v2/accountability/types/base.d.ts.map +1 -1
- package/dist/src/v2/accountability/types/base.js +2 -1
- package/dist/src/v2/accountability/types/base.js.map +1 -1
- package/dist/src/v2/accountability/types/bundle.d.ts.map +1 -1
- package/dist/src/v2/accountability/types/bundle.js +2 -1
- package/dist/src/v2/accountability/types/bundle.js.map +1 -1
- package/dist/src/v2/accountability/types/contestability.d.ts.map +1 -1
- package/dist/src/v2/accountability/types/contestability.js +2 -1
- package/dist/src/v2/accountability/types/contestability.js.map +1 -1
- package/dist/src/v2/accountability/types/custody.d.ts.map +1 -1
- package/dist/src/v2/accountability/types/custody.js +2 -1
- package/dist/src/v2/accountability/types/custody.js.map +1 -1
- package/dist/src/v2/accountability/types/index.d.ts.map +1 -1
- package/dist/src/v2/accountability/types/index.js +2 -0
- package/dist/src/v2/accountability/types/index.js.map +1 -1
- package/dist/src/v2/accountability/verify/action.d.ts.map +1 -1
- package/dist/src/v2/accountability/verify/action.js +2 -1
- package/dist/src/v2/accountability/verify/action.js.map +1 -1
- package/dist/src/v2/accountability/verify/authority-boundary.d.ts.map +1 -1
- package/dist/src/v2/accountability/verify/authority-boundary.js +2 -1
- package/dist/src/v2/accountability/verify/authority-boundary.js.map +1 -1
- package/dist/src/v2/accountability/verify/bundle.d.ts.map +1 -1
- package/dist/src/v2/accountability/verify/bundle.js +2 -1
- package/dist/src/v2/accountability/verify/bundle.js.map +1 -1
- package/dist/src/v2/accountability/verify/contestability.d.ts.map +1 -1
- package/dist/src/v2/accountability/verify/contestability.js +2 -1
- package/dist/src/v2/accountability/verify/contestability.js.map +1 -1
- package/dist/src/v2/accountability/verify/custody.d.ts.map +1 -1
- package/dist/src/v2/accountability/verify/custody.js +2 -1
- package/dist/src/v2/accountability/verify/custody.js.map +1 -1
- package/dist/src/v2/affected-party.d.ts.map +1 -1
- package/dist/src/v2/affected-party.js +2 -1
- package/dist/src/v2/affected-party.js.map +1 -1
- package/dist/src/v2/amendment.d.ts.map +1 -1
- package/dist/src/v2/amendment.js +2 -1
- package/dist/src/v2/amendment.js.map +1 -1
- package/dist/src/v2/anomaly-v2.d.ts.map +1 -1
- package/dist/src/v2/anomaly-v2.js +2 -1
- package/dist/src/v2/anomaly-v2.js.map +1 -1
- package/dist/src/v2/approval-fatigue.d.ts.map +1 -1
- package/dist/src/v2/approval-fatigue.js +2 -1
- package/dist/src/v2/approval-fatigue.js.map +1 -1
- package/dist/src/v2/assurance/descriptor.d.ts.map +1 -1
- package/dist/src/v2/assurance/descriptor.js +2 -1
- package/dist/src/v2/assurance/descriptor.js.map +1 -1
- package/dist/src/v2/assurance/shares-root.d.ts.map +1 -1
- package/dist/src/v2/assurance/shares-root.js +2 -1
- package/dist/src/v2/assurance/shares-root.js.map +1 -1
- package/dist/src/v2/attestation-v2.d.ts.map +1 -1
- package/dist/src/v2/attestation-v2.js +2 -1
- package/dist/src/v2/attestation-v2.js.map +1 -1
- package/dist/src/v2/attribution-consent/create.d.ts.map +1 -1
- package/dist/src/v2/attribution-consent/create.js +2 -1
- package/dist/src/v2/attribution-consent/create.js.map +1 -1
- package/dist/src/v2/attribution-consent/index.d.ts.map +1 -1
- package/dist/src/v2/attribution-consent/index.js +2 -1
- package/dist/src/v2/attribution-consent/index.js.map +1 -1
- package/dist/src/v2/attribution-consent/sign.d.ts.map +1 -1
- package/dist/src/v2/attribution-consent/sign.js +2 -1
- package/dist/src/v2/attribution-consent/sign.js.map +1 -1
- package/dist/src/v2/attribution-consent/types.d.ts.map +1 -1
- package/dist/src/v2/attribution-consent/types.js +2 -1
- package/dist/src/v2/attribution-consent/types.js.map +1 -1
- package/dist/src/v2/attribution-consent/verify.d.ts.map +1 -1
- package/dist/src/v2/attribution-consent/verify.js +2 -1
- package/dist/src/v2/attribution-consent/verify.js.map +1 -1
- package/dist/src/v2/attribution-primitive/canonical.d.ts.map +1 -1
- package/dist/src/v2/attribution-primitive/canonical.js +2 -1
- package/dist/src/v2/attribution-primitive/canonical.js.map +1 -1
- package/dist/src/v2/attribution-primitive/construct.d.ts.map +1 -1
- package/dist/src/v2/attribution-primitive/construct.js +2 -1
- package/dist/src/v2/attribution-primitive/construct.js.map +1 -1
- package/dist/src/v2/attribution-primitive/index.d.ts.map +1 -1
- package/dist/src/v2/attribution-primitive/index.js +2 -1
- package/dist/src/v2/attribution-primitive/index.js.map +1 -1
- package/dist/src/v2/attribution-primitive/merkle.d.ts.map +1 -1
- package/dist/src/v2/attribution-primitive/merkle.js +2 -1
- package/dist/src/v2/attribution-primitive/merkle.js.map +1 -1
- package/dist/src/v2/attribution-primitive/project.d.ts.map +1 -1
- package/dist/src/v2/attribution-primitive/project.js +2 -1
- package/dist/src/v2/attribution-primitive/project.js.map +1 -1
- package/dist/src/v2/attribution-primitive/residual.d.ts.map +1 -1
- package/dist/src/v2/attribution-primitive/residual.js +2 -1
- package/dist/src/v2/attribution-primitive/residual.js.map +1 -1
- package/dist/src/v2/attribution-primitive/types.d.ts.map +1 -1
- package/dist/src/v2/attribution-primitive/types.js +2 -1
- package/dist/src/v2/attribution-primitive/types.js.map +1 -1
- package/dist/src/v2/attribution-primitive/verify.d.ts.map +1 -1
- package/dist/src/v2/attribution-primitive/verify.js +2 -1
- package/dist/src/v2/attribution-primitive/verify.js.map +1 -1
- package/dist/src/v2/attribution-settlement/aggregate.d.ts.map +1 -1
- package/dist/src/v2/attribution-settlement/aggregate.js +2 -1
- package/dist/src/v2/attribution-settlement/aggregate.js.map +1 -1
- package/dist/src/v2/attribution-settlement/contributor-query.d.ts.map +1 -1
- package/dist/src/v2/attribution-settlement/contributor-query.js +2 -1
- package/dist/src/v2/attribution-settlement/contributor-query.js.map +1 -1
- package/dist/src/v2/attribution-settlement/index.d.ts.map +1 -1
- package/dist/src/v2/attribution-settlement/index.js +2 -1
- package/dist/src/v2/attribution-settlement/index.js.map +1 -1
- package/dist/src/v2/attribution-settlement/merkle.d.ts.map +1 -1
- package/dist/src/v2/attribution-settlement/merkle.js +2 -1
- package/dist/src/v2/attribution-settlement/merkle.js.map +1 -1
- package/dist/src/v2/attribution-settlement/sign.d.ts.map +1 -1
- package/dist/src/v2/attribution-settlement/sign.js +2 -1
- package/dist/src/v2/attribution-settlement/sign.js.map +1 -1
- package/dist/src/v2/attribution-settlement/types.d.ts.map +1 -1
- package/dist/src/v2/attribution-settlement/types.js +2 -1
- package/dist/src/v2/attribution-settlement/types.js.map +1 -1
- package/dist/src/v2/attribution-settlement/verify.d.ts.map +1 -1
- package/dist/src/v2/attribution-settlement/verify.js +2 -1
- package/dist/src/v2/attribution-settlement/verify.js.map +1 -1
- package/dist/src/v2/attribution-weights/compute-axis.d.ts.map +1 -1
- package/dist/src/v2/attribution-weights/compute-axis.js +2 -1
- package/dist/src/v2/attribution-weights/compute-axis.js.map +1 -1
- package/dist/src/v2/attribution-weights/data-axis.d.ts.map +1 -1
- package/dist/src/v2/attribution-weights/data-axis.js +2 -1
- package/dist/src/v2/attribution-weights/data-axis.js.map +1 -1
- package/dist/src/v2/attribution-weights/index.d.ts.map +1 -1
- package/dist/src/v2/attribution-weights/index.js +2 -1
- package/dist/src/v2/attribution-weights/index.js.map +1 -1
- package/dist/src/v2/attribution-weights/length.d.ts.map +1 -1
- package/dist/src/v2/attribution-weights/length.js +2 -1
- package/dist/src/v2/attribution-weights/length.js.map +1 -1
- package/dist/src/v2/attribution-weights/profile.d.ts.map +1 -1
- package/dist/src/v2/attribution-weights/profile.js +2 -1
- package/dist/src/v2/attribution-weights/profile.js.map +1 -1
- package/dist/src/v2/attribution-weights/recency.d.ts.map +1 -1
- package/dist/src/v2/attribution-weights/recency.js +2 -1
- package/dist/src/v2/attribution-weights/recency.js.map +1 -1
- package/dist/src/v2/attribution-weights/roles.d.ts.map +1 -1
- package/dist/src/v2/attribution-weights/roles.js +2 -1
- package/dist/src/v2/attribution-weights/roles.js.map +1 -1
- package/dist/src/v2/attribution-weights/types.d.ts.map +1 -1
- package/dist/src/v2/attribution-weights/types.js +2 -1
- package/dist/src/v2/attribution-weights/types.js.map +1 -1
- package/dist/src/v2/audience-binding/index.d.ts.map +1 -1
- package/dist/src/v2/audience-binding/index.js +2 -1
- package/dist/src/v2/audience-binding/index.js.map +1 -1
- package/dist/src/v2/audience-binding/reconcile.d.ts.map +1 -1
- package/dist/src/v2/audience-binding/reconcile.js +2 -1
- package/dist/src/v2/audience-binding/reconcile.js.map +1 -1
- package/dist/src/v2/audience-binding/request-binding.d.ts.map +1 -1
- package/dist/src/v2/audience-binding/request-binding.js +2 -1
- package/dist/src/v2/audience-binding/request-binding.js.map +1 -1
- package/dist/src/v2/audience-binding/types.d.ts +1 -1
- package/dist/src/v2/audience-binding/types.d.ts.map +1 -1
- package/dist/src/v2/audience-binding/types.js +2 -1
- package/dist/src/v2/audience-binding/types.js.map +1 -1
- package/dist/src/v2/audience-binding/verify.d.ts.map +1 -1
- package/dist/src/v2/audience-binding/verify.js +2 -1
- package/dist/src/v2/audience-binding/verify.js.map +1 -1
- package/dist/src/v2/behavioral_drift_window/__tests__/behavioral_drift_window.test.js +2 -1
- package/dist/src/v2/behavioral_drift_window/__tests__/behavioral_drift_window.test.js.map +1 -1
- package/dist/src/v2/behavioral_drift_window/envelope.d.ts.map +1 -1
- package/dist/src/v2/behavioral_drift_window/envelope.js +2 -1
- package/dist/src/v2/behavioral_drift_window/envelope.js.map +1 -1
- package/dist/src/v2/behavioral_drift_window/index.d.ts.map +1 -1
- package/dist/src/v2/behavioral_drift_window/index.js +2 -1
- package/dist/src/v2/behavioral_drift_window/index.js.map +1 -1
- package/dist/src/v2/behavioral_drift_window/types.d.ts.map +1 -1
- package/dist/src/v2/behavioral_drift_window/types.js +2 -1
- package/dist/src/v2/behavioral_drift_window/types.js.map +1 -1
- package/dist/src/v2/behavioral_drift_window/verify.d.ts.map +1 -1
- package/dist/src/v2/behavioral_drift_window/verify.js +2 -1
- package/dist/src/v2/behavioral_drift_window/verify.js.map +1 -1
- package/dist/src/v2/bilateral-pair/reconcile.d.ts +34 -0
- package/dist/src/v2/bilateral-pair/reconcile.d.ts.map +1 -0
- package/dist/src/v2/bilateral-pair/reconcile.js +133 -0
- package/dist/src/v2/bilateral-pair/reconcile.js.map +1 -0
- package/dist/src/v2/bilateral-pair/types.d.ts +88 -0
- package/dist/src/v2/bilateral-pair/types.d.ts.map +1 -0
- package/dist/src/v2/bilateral-pair/types.js +23 -0
- package/dist/src/v2/bilateral-pair/types.js.map +1 -0
- package/dist/src/v2/blind-evaluation.d.ts.map +1 -1
- package/dist/src/v2/blind-evaluation.js +2 -1
- package/dist/src/v2/blind-evaluation.js.map +1 -1
- package/dist/src/v2/bridge.d.ts.map +1 -1
- package/dist/src/v2/bridge.js +2 -1
- package/dist/src/v2/bridge.js.map +1 -1
- package/dist/src/v2/cascade-correlation.d.ts.map +1 -1
- package/dist/src/v2/cascade-correlation.js +2 -1
- package/dist/src/v2/cascade-correlation.js.map +1 -1
- package/dist/src/v2/circuit-breakers.d.ts.map +1 -1
- package/dist/src/v2/circuit-breakers.js +2 -1
- package/dist/src/v2/circuit-breakers.js.map +1 -1
- package/dist/src/v2/claim-evidence-types.d.ts +5 -5
- package/dist/src/v2/claim-evidence-types.d.ts.map +1 -1
- package/dist/src/v2/claim-evidence-types.js +2 -1
- package/dist/src/v2/claim-evidence-types.js.map +1 -1
- package/dist/src/v2/claim-verifier.d.ts.map +1 -1
- package/dist/src/v2/claim-verifier.js +2 -1
- package/dist/src/v2/claim-verifier.js.map +1 -1
- package/dist/src/v2/cognitive-attestation/disputes.d.ts.map +1 -1
- package/dist/src/v2/cognitive-attestation/disputes.js +2 -1
- package/dist/src/v2/cognitive-attestation/disputes.js.map +1 -1
- package/dist/src/v2/cognitive-attestation/envelope.d.ts.map +1 -1
- package/dist/src/v2/cognitive-attestation/envelope.js +2 -1
- package/dist/src/v2/cognitive-attestation/envelope.js.map +1 -1
- package/dist/src/v2/cognitive-attestation/index.d.ts.map +1 -1
- package/dist/src/v2/cognitive-attestation/index.js +2 -1
- package/dist/src/v2/cognitive-attestation/index.js.map +1 -1
- package/dist/src/v2/cognitive-attestation/types.d.ts.map +1 -1
- package/dist/src/v2/cognitive-attestation/types.js +2 -1
- package/dist/src/v2/cognitive-attestation/types.js.map +1 -1
- package/dist/src/v2/cognitive-attestation/verify.d.ts.map +1 -1
- package/dist/src/v2/cognitive-attestation/verify.js +2 -1
- package/dist/src/v2/cognitive-attestation/verify.js.map +1 -1
- package/dist/src/v2/cognitive_attestation/__tests__/cognitive_attestation.test.js +2 -1
- package/dist/src/v2/cognitive_attestation/__tests__/cognitive_attestation.test.js.map +1 -1
- package/dist/src/v2/cognitive_attestation/envelope.d.ts.map +1 -1
- package/dist/src/v2/cognitive_attestation/envelope.js +2 -1
- package/dist/src/v2/cognitive_attestation/envelope.js.map +1 -1
- package/dist/src/v2/cognitive_attestation/index.d.ts.map +1 -1
- package/dist/src/v2/cognitive_attestation/index.js +2 -1
- package/dist/src/v2/cognitive_attestation/index.js.map +1 -1
- package/dist/src/v2/cognitive_attestation/types.d.ts.map +1 -1
- package/dist/src/v2/cognitive_attestation/types.js +2 -1
- package/dist/src/v2/cognitive_attestation/types.js.map +1 -1
- package/dist/src/v2/cognitive_attestation/verify.d.ts.map +1 -1
- package/dist/src/v2/cognitive_attestation/verify.js +2 -1
- package/dist/src/v2/cognitive_attestation/verify.js.map +1 -1
- package/dist/src/v2/composite-audit.d.ts.map +1 -1
- package/dist/src/v2/composite-audit.js +2 -1
- package/dist/src/v2/composite-audit.js.map +1 -1
- package/dist/src/v2/composition-check/index.d.ts.map +1 -1
- package/dist/src/v2/composition-check/index.js +2 -1
- package/dist/src/v2/composition-check/index.js.map +1 -1
- package/dist/src/v2/composition-check/types.d.ts +2 -2
- package/dist/src/v2/composition-check/types.d.ts.map +1 -1
- package/dist/src/v2/composition-check/types.js +2 -1
- package/dist/src/v2/composition-check/types.js.map +1 -1
- package/dist/src/v2/composition-check/verify.d.ts.map +1 -1
- package/dist/src/v2/composition-check/verify.js +2 -1
- package/dist/src/v2/composition-check/verify.js.map +1 -1
- package/dist/src/v2/context-provenance/__tests__/adversarial.test.js +2 -1
- package/dist/src/v2/context-provenance/__tests__/adversarial.test.js.map +1 -1
- package/dist/src/v2/context-provenance/__tests__/conformance.test.js +2 -1
- package/dist/src/v2/context-provenance/__tests__/conformance.test.js.map +1 -1
- package/dist/src/v2/context-provenance/__tests__/cross-lang-parity.test.js +2 -1
- package/dist/src/v2/context-provenance/__tests__/cross-lang-parity.test.js.map +1 -1
- package/dist/src/v2/context-provenance/__tests__/disclosure.test.js +2 -1
- package/dist/src/v2/context-provenance/__tests__/disclosure.test.js.map +1 -1
- package/dist/src/v2/context-provenance/__tests__/known-answer.test.js +2 -1
- package/dist/src/v2/context-provenance/__tests__/known-answer.test.js.map +1 -1
- package/dist/src/v2/context-provenance/__tests__/parity.test.js +2 -1
- package/dist/src/v2/context-provenance/__tests__/parity.test.js.map +1 -1
- package/dist/src/v2/context-provenance/__tests__/roundtrip.test.js +2 -1
- package/dist/src/v2/context-provenance/__tests__/roundtrip.test.js.map +1 -1
- package/dist/src/v2/context-provenance/cpa.d.ts.map +1 -1
- package/dist/src/v2/context-provenance/cpa.js +2 -1
- package/dist/src/v2/context-provenance/cpa.js.map +1 -1
- package/dist/src/v2/context-provenance/index.d.ts.map +1 -1
- package/dist/src/v2/context-provenance/index.js +2 -1
- package/dist/src/v2/context-provenance/index.js.map +1 -1
- package/dist/src/v2/context-provenance/merkle.d.ts.map +1 -1
- package/dist/src/v2/context-provenance/merkle.js +2 -1
- package/dist/src/v2/context-provenance/merkle.js.map +1 -1
- package/dist/src/v2/context-provenance/types.d.ts.map +1 -1
- package/dist/src/v2/context-provenance/types.js +2 -1
- package/dist/src/v2/context-provenance/types.js.map +1 -1
- package/dist/src/v2/context-provenance/vectors/generate-vectors.js +2 -1
- package/dist/src/v2/context-provenance/vectors/generate-vectors.js.map +1 -1
- package/dist/src/v2/context-provenance/verify.d.ts.map +1 -1
- package/dist/src/v2/context-provenance/verify.js +2 -1
- package/dist/src/v2/context-provenance/verify.js.map +1 -1
- package/dist/src/v2/credential-check-policy/check.d.ts.map +1 -1
- package/dist/src/v2/credential-check-policy/check.js +2 -1
- package/dist/src/v2/credential-check-policy/check.js.map +1 -1
- package/dist/src/v2/credential-check-policy/index.d.ts.map +1 -1
- package/dist/src/v2/credential-check-policy/index.js +2 -1
- package/dist/src/v2/credential-check-policy/index.js.map +1 -1
- package/dist/src/v2/credential-check-policy/types.d.ts.map +1 -1
- package/dist/src/v2/credential-check-policy/types.js +2 -1
- package/dist/src/v2/credential-check-policy/types.js.map +1 -1
- package/dist/src/v2/cross-chain-audit.d.ts.map +1 -1
- package/dist/src/v2/cross-chain-audit.js +2 -1
- package/dist/src/v2/cross-chain-audit.js.map +1 -1
- package/dist/src/v2/cross_issuer_attestation/__tests__/cross_issuer_attestation.test.js +2 -1
- package/dist/src/v2/cross_issuer_attestation/__tests__/cross_issuer_attestation.test.js.map +1 -1
- package/dist/src/v2/cross_issuer_attestation/envelope.d.ts.map +1 -1
- package/dist/src/v2/cross_issuer_attestation/envelope.js +2 -1
- package/dist/src/v2/cross_issuer_attestation/envelope.js.map +1 -1
- package/dist/src/v2/cross_issuer_attestation/index.d.ts.map +1 -1
- package/dist/src/v2/cross_issuer_attestation/index.js +2 -1
- package/dist/src/v2/cross_issuer_attestation/index.js.map +1 -1
- package/dist/src/v2/cross_issuer_attestation/types.d.ts.map +1 -1
- package/dist/src/v2/cross_issuer_attestation/types.js +2 -1
- package/dist/src/v2/cross_issuer_attestation/types.js.map +1 -1
- package/dist/src/v2/cross_issuer_attestation/verify.d.ts.map +1 -1
- package/dist/src/v2/cross_issuer_attestation/verify.js +2 -1
- package/dist/src/v2/cross_issuer_attestation/verify.js.map +1 -1
- package/dist/src/v2/delegation/__tests__/responsibility_anchor.test.js +2 -1
- package/dist/src/v2/delegation/__tests__/responsibility_anchor.test.js.map +1 -1
- package/dist/src/v2/delegation/responsibility.d.ts.map +1 -1
- package/dist/src/v2/delegation/responsibility.js +2 -1
- package/dist/src/v2/delegation/responsibility.js.map +1 -1
- package/dist/src/v2/delegation/validateChainComposition.d.ts.map +1 -1
- package/dist/src/v2/delegation/validateChainComposition.js +2 -1
- package/dist/src/v2/delegation/validateChainComposition.js.map +1 -1
- package/dist/src/v2/delegation-v2.d.ts.map +1 -1
- package/dist/src/v2/delegation-v2.js +2 -1
- package/dist/src/v2/delegation-v2.js.map +1 -1
- package/dist/src/v2/downstream-taint.d.ts.map +1 -1
- package/dist/src/v2/downstream-taint.js +2 -1
- package/dist/src/v2/downstream-taint.js.map +1 -1
- package/dist/src/v2/effect-enforcement.d.ts.map +1 -1
- package/dist/src/v2/effect-enforcement.js +2 -1
- package/dist/src/v2/effect-enforcement.js.map +1 -1
- package/dist/src/v2/effect-sampling.d.ts.map +1 -1
- package/dist/src/v2/effect-sampling.js +2 -1
- package/dist/src/v2/effect-sampling.js.map +1 -1
- package/dist/src/v2/emergence.d.ts.map +1 -1
- package/dist/src/v2/emergence.js +2 -1
- package/dist/src/v2/emergence.js.map +1 -1
- package/dist/src/v2/emergency-v2.d.ts.map +1 -1
- package/dist/src/v2/emergency-v2.js +2 -1
- package/dist/src/v2/emergency-v2.js.map +1 -1
- package/dist/src/v2/epistemic-isolation.d.ts.map +1 -1
- package/dist/src/v2/epistemic-isolation.js +2 -1
- package/dist/src/v2/epistemic-isolation.js.map +1 -1
- package/dist/src/v2/externality.d.ts.map +1 -1
- package/dist/src/v2/externality.js +2 -1
- package/dist/src/v2/externality.js.map +1 -1
- package/dist/src/v2/feasibility/__tests__/feasibility.test.js +2 -1
- package/dist/src/v2/feasibility/__tests__/feasibility.test.js.map +1 -1
- package/dist/src/v2/feasibility/compiler.d.ts.map +1 -1
- package/dist/src/v2/feasibility/compiler.js +2 -1
- package/dist/src/v2/feasibility/compiler.js.map +1 -1
- package/dist/src/v2/feasibility/index.d.ts.map +1 -1
- package/dist/src/v2/feasibility/index.js +2 -1
- package/dist/src/v2/feasibility/index.js.map +1 -1
- package/dist/src/v2/feasibility/ir.d.ts.map +1 -1
- package/dist/src/v2/feasibility/ir.js +2 -1
- package/dist/src/v2/feasibility/ir.js.map +1 -1
- package/dist/src/v2/feasibility/proof-ref.d.ts.map +1 -1
- package/dist/src/v2/feasibility/proof-ref.js +2 -1
- package/dist/src/v2/feasibility/proof-ref.js.map +1 -1
- package/dist/src/v2/governance-drift.d.ts.map +1 -1
- package/dist/src/v2/governance-drift.js +2 -1
- package/dist/src/v2/governance-drift.js.map +1 -1
- package/dist/src/v2/hash-pointer/bbs-bridge.d.ts.map +1 -1
- package/dist/src/v2/hash-pointer/bbs-bridge.js +2 -1
- package/dist/src/v2/hash-pointer/bbs-bridge.js.map +1 -1
- package/dist/src/v2/hash-pointer/index.d.ts.map +1 -1
- package/dist/src/v2/hash-pointer/index.js +2 -1
- package/dist/src/v2/hash-pointer/index.js.map +1 -1
- package/dist/src/v2/hash-pointer/profile.d.ts.map +1 -1
- package/dist/src/v2/hash-pointer/profile.js +2 -1
- package/dist/src/v2/hash-pointer/profile.js.map +1 -1
- package/dist/src/v2/hash-pointer/types.d.ts +1 -1
- package/dist/src/v2/hash-pointer/types.d.ts.map +1 -1
- package/dist/src/v2/hash-pointer/types.js +2 -1
- package/dist/src/v2/hash-pointer/types.js.map +1 -1
- package/dist/src/v2/human-escalation.d.ts.map +1 -1
- package/dist/src/v2/human-escalation.js +2 -1
- package/dist/src/v2/human-escalation.js.map +1 -1
- package/dist/src/v2/human-oversight/descriptor.d.ts.map +1 -1
- package/dist/src/v2/human-oversight/descriptor.js +2 -1
- package/dist/src/v2/human-oversight/descriptor.js.map +1 -1
- package/dist/src/v2/human-oversight/index.d.ts.map +1 -1
- package/dist/src/v2/human-oversight/index.js +2 -1
- package/dist/src/v2/human-oversight/index.js.map +1 -1
- package/dist/src/v2/human-oversight/types.d.ts.map +1 -1
- package/dist/src/v2/human-oversight/types.js +2 -1
- package/dist/src/v2/human-oversight/types.js.map +1 -1
- package/dist/src/v2/inaction-audit.d.ts.map +1 -1
- package/dist/src/v2/inaction-audit.js +2 -1
- package/dist/src/v2/inaction-audit.js.map +1 -1
- package/dist/src/v2/index.d.ts.map +1 -1
- package/dist/src/v2/index.js +2 -1
- package/dist/src/v2/index.js.map +1 -1
- package/dist/src/v2/instruction-provenance/canonicalize.d.ts.map +1 -1
- package/dist/src/v2/instruction-provenance/canonicalize.js +2 -1
- package/dist/src/v2/instruction-provenance/canonicalize.js.map +1 -1
- package/dist/src/v2/instruction-provenance/envelope.d.ts.map +1 -1
- package/dist/src/v2/instruction-provenance/envelope.js +2 -1
- package/dist/src/v2/instruction-provenance/envelope.js.map +1 -1
- package/dist/src/v2/instruction-provenance/index.d.ts.map +1 -1
- package/dist/src/v2/instruction-provenance/index.js +2 -1
- package/dist/src/v2/instruction-provenance/index.js.map +1 -1
- package/dist/src/v2/instruction-provenance/types.d.ts.map +1 -1
- package/dist/src/v2/instruction-provenance/types.js +2 -1
- package/dist/src/v2/instruction-provenance/types.js.map +1 -1
- package/dist/src/v2/instruction-provenance/verify.d.ts.map +1 -1
- package/dist/src/v2/instruction-provenance/verify.js +2 -1
- package/dist/src/v2/instruction-provenance/verify.js.map +1 -1
- package/dist/src/v2/intent-binding.d.ts.map +1 -1
- package/dist/src/v2/intent-binding.js +2 -1
- package/dist/src/v2/intent-binding.js.map +1 -1
- package/dist/src/v2/key-resolution/base64url.d.ts.map +1 -1
- package/dist/src/v2/key-resolution/base64url.js +2 -1
- package/dist/src/v2/key-resolution/base64url.js.map +1 -1
- package/dist/src/v2/key-resolution/did-cycles.d.ts.map +1 -1
- package/dist/src/v2/key-resolution/did-cycles.js +2 -1
- package/dist/src/v2/key-resolution/did-cycles.js.map +1 -1
- package/dist/src/v2/key-resolution/index.d.ts.map +1 -1
- package/dist/src/v2/key-resolution/index.js +2 -1
- package/dist/src/v2/key-resolution/index.js.map +1 -1
- package/dist/src/v2/key-resolution/resolver.d.ts.map +1 -1
- package/dist/src/v2/key-resolution/resolver.js +2 -1
- package/dist/src/v2/key-resolution/resolver.js.map +1 -1
- package/dist/src/v2/key-resolution/types.d.ts.map +1 -1
- package/dist/src/v2/key-resolution/types.js +2 -1
- package/dist/src/v2/key-resolution/types.js.map +1 -1
- package/dist/src/v2/memory_provenance/__tests__/memory_provenance.test.js +2 -1
- package/dist/src/v2/memory_provenance/__tests__/memory_provenance.test.js.map +1 -1
- package/dist/src/v2/memory_provenance/envelope.d.ts.map +1 -1
- package/dist/src/v2/memory_provenance/envelope.js +2 -1
- package/dist/src/v2/memory_provenance/envelope.js.map +1 -1
- package/dist/src/v2/memory_provenance/index.d.ts.map +1 -1
- package/dist/src/v2/memory_provenance/index.js +2 -1
- package/dist/src/v2/memory_provenance/index.js.map +1 -1
- package/dist/src/v2/memory_provenance/types.d.ts.map +1 -1
- package/dist/src/v2/memory_provenance/types.js +2 -1
- package/dist/src/v2/memory_provenance/types.js.map +1 -1
- package/dist/src/v2/memory_provenance/verify.d.ts.map +1 -1
- package/dist/src/v2/memory_provenance/verify.js +2 -1
- package/dist/src/v2/memory_provenance/verify.js.map +1 -1
- package/dist/src/v2/migration-v2.d.ts.map +1 -1
- package/dist/src/v2/migration-v2.js +2 -1
- package/dist/src/v2/migration-v2.js.map +1 -1
- package/dist/src/v2/mutual-auth/certificate.d.ts.map +1 -1
- package/dist/src/v2/mutual-auth/certificate.js +2 -1
- package/dist/src/v2/mutual-auth/certificate.js.map +1 -1
- package/dist/src/v2/mutual-auth/handshake.d.ts.map +1 -1
- package/dist/src/v2/mutual-auth/handshake.js +2 -1
- package/dist/src/v2/mutual-auth/handshake.js.map +1 -1
- package/dist/src/v2/mutual-auth/index.d.ts.map +1 -1
- package/dist/src/v2/mutual-auth/index.js +2 -1
- package/dist/src/v2/mutual-auth/index.js.map +1 -1
- package/dist/src/v2/mutual-auth/trust-bundle.d.ts.map +1 -1
- package/dist/src/v2/mutual-auth/trust-bundle.js +2 -1
- package/dist/src/v2/mutual-auth/trust-bundle.js.map +1 -1
- package/dist/src/v2/mutual-auth/types.d.ts.map +1 -1
- package/dist/src/v2/mutual-auth/types.js +2 -1
- package/dist/src/v2/mutual-auth/types.js.map +1 -1
- package/dist/src/v2/offline-verifier/conformance-runner.d.ts.map +1 -1
- package/dist/src/v2/offline-verifier/conformance-runner.js +2 -1
- package/dist/src/v2/offline-verifier/conformance-runner.js.map +1 -1
- package/dist/src/v2/offline-verifier/context.d.ts.map +1 -1
- package/dist/src/v2/offline-verifier/context.js +2 -1
- package/dist/src/v2/offline-verifier/context.js.map +1 -1
- package/dist/src/v2/offline-verifier/descriptor-interface.d.ts.map +1 -1
- package/dist/src/v2/offline-verifier/descriptor-interface.js +2 -1
- package/dist/src/v2/offline-verifier/descriptor-interface.js.map +1 -1
- package/dist/src/v2/offline-verifier/descriptor.d.ts.map +1 -1
- package/dist/src/v2/offline-verifier/descriptor.js +2 -1
- package/dist/src/v2/offline-verifier/descriptor.js.map +1 -1
- package/dist/src/v2/offline-verifier/index.d.ts.map +1 -1
- package/dist/src/v2/offline-verifier/index.js +2 -1
- package/dist/src/v2/offline-verifier/index.js.map +1 -1
- package/dist/src/v2/offline-verifier/middleware.d.ts.map +1 -1
- package/dist/src/v2/offline-verifier/middleware.js +2 -1
- package/dist/src/v2/offline-verifier/middleware.js.map +1 -1
- package/dist/src/v2/offline-verifier/verify.d.ts.map +1 -1
- package/dist/src/v2/offline-verifier/verify.js +2 -1
- package/dist/src/v2/offline-verifier/verify.js.map +1 -1
- package/dist/src/v2/outcome-v2.d.ts.map +1 -1
- package/dist/src/v2/outcome-v2.js +2 -1
- package/dist/src/v2/outcome-v2.js.map +1 -1
- package/dist/src/v2/output-proportionality.d.ts.map +1 -1
- package/dist/src/v2/output-proportionality.js +2 -1
- package/dist/src/v2/output-proportionality.js.map +1 -1
- package/dist/src/v2/payment-rails/acp/index.d.ts.map +1 -1
- package/dist/src/v2/payment-rails/acp/index.js +2 -1
- package/dist/src/v2/payment-rails/acp/index.js.map +1 -1
- package/dist/src/v2/payment-rails/acp/types.d.ts +1 -1
- package/dist/src/v2/payment-rails/acp/types.d.ts.map +1 -1
- package/dist/src/v2/payment-rails/acp/types.js +2 -1
- package/dist/src/v2/payment-rails/acp/types.js.map +1 -1
- package/dist/src/v2/payment-rails/ap2/fixtures/_generate.js +1 -1
- package/dist/src/v2/payment-rails/ap2/fixtures/_generate.js.map +1 -1
- package/dist/src/v2/payment-rails/ap2/index.d.ts.map +1 -1
- package/dist/src/v2/payment-rails/ap2/index.js +2 -1
- package/dist/src/v2/payment-rails/ap2/index.js.map +1 -1
- package/dist/src/v2/payment-rails/ap2/types.d.ts.map +1 -1
- package/dist/src/v2/payment-rails/ap2/types.js +2 -1
- package/dist/src/v2/payment-rails/ap2/types.js.map +1 -1
- package/dist/src/v2/payment-rails/canonicalize.d.ts.map +1 -1
- package/dist/src/v2/payment-rails/canonicalize.js +2 -1
- package/dist/src/v2/payment-rails/canonicalize.js.map +1 -1
- package/dist/src/v2/payment-rails/conformance/binding-harness.d.ts.map +1 -1
- package/dist/src/v2/payment-rails/conformance/binding-harness.js +2 -1
- package/dist/src/v2/payment-rails/conformance/binding-harness.js.map +1 -1
- package/dist/src/v2/payment-rails/conformance/fixtures/_generate.js +1 -1
- package/dist/src/v2/payment-rails/conformance/fixtures/_generate.js.map +1 -1
- package/dist/src/v2/payment-rails/conformance/harness.d.ts.map +1 -1
- package/dist/src/v2/payment-rails/conformance/harness.js +2 -1
- package/dist/src/v2/payment-rails/conformance/harness.js.map +1 -1
- package/dist/src/v2/payment-rails/conformance/index.d.ts.map +1 -1
- package/dist/src/v2/payment-rails/conformance/index.js +2 -1
- package/dist/src/v2/payment-rails/conformance/index.js.map +1 -1
- package/dist/src/v2/payment-rails/csv.d.ts.map +1 -1
- package/dist/src/v2/payment-rails/csv.js +2 -1
- package/dist/src/v2/payment-rails/csv.js.map +1 -1
- package/dist/src/v2/payment-rails/cycles/evidence-resolution.d.ts.map +1 -1
- package/dist/src/v2/payment-rails/cycles/evidence-resolution.js +2 -1
- package/dist/src/v2/payment-rails/cycles/evidence-resolution.js.map +1 -1
- package/dist/src/v2/payment-rails/cycles/index.d.ts.map +1 -1
- package/dist/src/v2/payment-rails/cycles/index.js +2 -1
- package/dist/src/v2/payment-rails/cycles/index.js.map +1 -1
- package/dist/src/v2/payment-rails/cycles/types.d.ts +5 -5
- package/dist/src/v2/payment-rails/cycles/types.d.ts.map +1 -1
- package/dist/src/v2/payment-rails/cycles/types.js +2 -1
- package/dist/src/v2/payment-rails/cycles/types.js.map +1 -1
- package/dist/src/v2/payment-rails/fixtures/_generate.js +1 -1
- package/dist/src/v2/payment-rails/fixtures/_generate.js.map +1 -1
- package/dist/src/v2/payment-rails/hooks.d.ts.map +1 -1
- package/dist/src/v2/payment-rails/hooks.js +2 -1
- package/dist/src/v2/payment-rails/hooks.js.map +1 -1
- package/dist/src/v2/payment-rails/index.d.ts.map +1 -1
- package/dist/src/v2/payment-rails/index.js +2 -1
- package/dist/src/v2/payment-rails/index.js.map +1 -1
- package/dist/src/v2/payment-rails/mpp/index.d.ts.map +1 -1
- package/dist/src/v2/payment-rails/mpp/index.js +2 -1
- package/dist/src/v2/payment-rails/mpp/index.js.map +1 -1
- package/dist/src/v2/payment-rails/mpp/types.d.ts +1 -1
- package/dist/src/v2/payment-rails/mpp/types.d.ts.map +1 -1
- package/dist/src/v2/payment-rails/mpp/types.js +2 -1
- package/dist/src/v2/payment-rails/mpp/types.js.map +1 -1
- package/dist/src/v2/payment-rails/nano.d.ts.map +1 -1
- package/dist/src/v2/payment-rails/nano.js +2 -1
- package/dist/src/v2/payment-rails/nano.js.map +1 -1
- package/dist/src/v2/payment-rails/scope-resolution.d.ts.map +1 -1
- package/dist/src/v2/payment-rails/scope-resolution.js +2 -1
- package/dist/src/v2/payment-rails/scope-resolution.js.map +1 -1
- package/dist/src/v2/payment-rails/stripe-issuing/fixtures/_generate-cross-rail.js +1 -1
- package/dist/src/v2/payment-rails/stripe-issuing/fixtures/_generate-cross-rail.js.map +1 -1
- package/dist/src/v2/payment-rails/stripe-issuing/fixtures/_generate.js +1 -1
- package/dist/src/v2/payment-rails/stripe-issuing/fixtures/_generate.js.map +1 -1
- package/dist/src/v2/payment-rails/stripe-issuing/index.d.ts.map +1 -1
- package/dist/src/v2/payment-rails/stripe-issuing/index.js +2 -1
- package/dist/src/v2/payment-rails/stripe-issuing/index.js.map +1 -1
- package/dist/src/v2/payment-rails/stripe-issuing/primitives.d.ts.map +1 -1
- package/dist/src/v2/payment-rails/stripe-issuing/primitives.js +2 -1
- package/dist/src/v2/payment-rails/stripe-issuing/primitives.js.map +1 -1
- package/dist/src/v2/payment-rails/stripe-issuing/types.d.ts.map +1 -1
- package/dist/src/v2/payment-rails/stripe-issuing/types.js +2 -1
- package/dist/src/v2/payment-rails/stripe-issuing/types.js.map +1 -1
- package/dist/src/v2/payment-rails/types.d.ts.map +1 -1
- package/dist/src/v2/payment-rails/types.js +2 -1
- package/dist/src/v2/payment-rails/types.js.map +1 -1
- package/dist/src/v2/payment-rails/x402/fixtures/_generate.js +1 -1
- package/dist/src/v2/payment-rails/x402/fixtures/_generate.js.map +1 -1
- package/dist/src/v2/payment-rails/x402/index.d.ts.map +1 -1
- package/dist/src/v2/payment-rails/x402/index.js +2 -1
- package/dist/src/v2/payment-rails/x402/index.js.map +1 -1
- package/dist/src/v2/payment-rails/x402/types.d.ts.map +1 -1
- package/dist/src/v2/payment-rails/x402/types.js +2 -1
- package/dist/src/v2/payment-rails/x402/types.js.map +1 -1
- package/dist/src/v2/policy-bundle/bundle.d.ts.map +1 -1
- package/dist/src/v2/policy-bundle/bundle.js +2 -1
- package/dist/src/v2/policy-bundle/bundle.js.map +1 -1
- package/dist/src/v2/policy-bundle/index.d.ts.map +1 -1
- package/dist/src/v2/policy-bundle/index.js +2 -1
- package/dist/src/v2/policy-bundle/index.js.map +1 -1
- package/dist/src/v2/policy-bundle/tar.d.ts.map +1 -1
- package/dist/src/v2/policy-bundle/tar.js +2 -1
- package/dist/src/v2/policy-bundle/tar.js.map +1 -1
- package/dist/src/v2/policy-bundle/types.d.ts.map +1 -1
- package/dist/src/v2/policy-bundle/types.js +2 -1
- package/dist/src/v2/policy-bundle/types.js.map +1 -1
- package/dist/src/v2/policy-profiles.d.ts.map +1 -1
- package/dist/src/v2/policy-profiles.js +2 -1
- package/dist/src/v2/policy-profiles.js.map +1 -1
- package/dist/src/v2/producer-attestation/index.d.ts.map +1 -1
- package/dist/src/v2/producer-attestation/index.js +2 -1
- package/dist/src/v2/producer-attestation/index.js.map +1 -1
- package/dist/src/v2/producer-attestation/types.d.ts.map +1 -1
- package/dist/src/v2/producer-attestation/types.js +2 -1
- package/dist/src/v2/producer-attestation/types.js.map +1 -1
- package/dist/src/v2/provisional-statement/create.d.ts.map +1 -1
- package/dist/src/v2/provisional-statement/create.js +2 -1
- package/dist/src/v2/provisional-statement/create.js.map +1 -1
- package/dist/src/v2/provisional-statement/index.d.ts.map +1 -1
- package/dist/src/v2/provisional-statement/index.js +2 -1
- package/dist/src/v2/provisional-statement/index.js.map +1 -1
- package/dist/src/v2/provisional-statement/promote.d.ts.map +1 -1
- package/dist/src/v2/provisional-statement/promote.js +2 -1
- package/dist/src/v2/provisional-statement/promote.js.map +1 -1
- package/dist/src/v2/provisional-statement/types.d.ts.map +1 -1
- package/dist/src/v2/provisional-statement/types.js +2 -1
- package/dist/src/v2/provisional-statement/types.js.map +1 -1
- package/dist/src/v2/provisional-statement/verify.d.ts.map +1 -1
- package/dist/src/v2/provisional-statement/verify.js +2 -1
- package/dist/src/v2/provisional-statement/verify.js.map +1 -1
- package/dist/src/v2/read_fidelity_receipt/__tests__/read_fidelity_receipt.test.js +2 -1
- package/dist/src/v2/read_fidelity_receipt/__tests__/read_fidelity_receipt.test.js.map +1 -1
- package/dist/src/v2/read_fidelity_receipt/index.d.ts.map +1 -1
- package/dist/src/v2/read_fidelity_receipt/index.js +2 -1
- package/dist/src/v2/read_fidelity_receipt/index.js.map +1 -1
- package/dist/src/v2/read_fidelity_receipt/receipt.d.ts.map +1 -1
- package/dist/src/v2/read_fidelity_receipt/receipt.js +2 -1
- package/dist/src/v2/read_fidelity_receipt/receipt.js.map +1 -1
- package/dist/src/v2/read_fidelity_receipt/sampler.d.ts.map +1 -1
- package/dist/src/v2/read_fidelity_receipt/sampler.js +2 -1
- package/dist/src/v2/read_fidelity_receipt/sampler.js.map +1 -1
- package/dist/src/v2/read_fidelity_receipt/types.d.ts.map +1 -1
- package/dist/src/v2/read_fidelity_receipt/types.js +2 -1
- package/dist/src/v2/read_fidelity_receipt/types.js.map +1 -1
- package/dist/src/v2/read_fidelity_receipt/vectors/generate.js +2 -1
- package/dist/src/v2/read_fidelity_receipt/vectors/generate.js.map +1 -1
- package/dist/src/v2/regulated-action/index.d.ts.map +1 -1
- package/dist/src/v2/regulated-action/index.js +2 -1
- package/dist/src/v2/regulated-action/index.js.map +1 -1
- package/dist/src/v2/regulated-action/types.d.ts +7 -7
- package/dist/src/v2/regulated-action/types.d.ts.map +1 -1
- package/dist/src/v2/regulated-action/types.js +2 -1
- package/dist/src/v2/regulated-action/types.js.map +1 -1
- package/dist/src/v2/regulated-action/verify.d.ts.map +1 -1
- package/dist/src/v2/regulated-action/verify.js +2 -1
- package/dist/src/v2/regulated-action/verify.js.map +1 -1
- package/dist/src/v2/revocation-enforcement/index.d.ts +1 -0
- package/dist/src/v2/revocation-enforcement/index.d.ts.map +1 -1
- package/dist/src/v2/revocation-enforcement/index.js +3 -1
- package/dist/src/v2/revocation-enforcement/index.js.map +1 -1
- package/dist/src/v2/revocation-enforcement/observation.d.ts +108 -0
- package/dist/src/v2/revocation-enforcement/observation.d.ts.map +1 -0
- package/dist/src/v2/revocation-enforcement/observation.js +253 -0
- package/dist/src/v2/revocation-enforcement/observation.js.map +1 -0
- package/dist/src/v2/revocation-enforcement/types.d.ts +86 -1
- package/dist/src/v2/revocation-enforcement/types.d.ts.map +1 -1
- package/dist/src/v2/revocation-enforcement/types.js +2 -1
- package/dist/src/v2/revocation-enforcement/types.js.map +1 -1
- package/dist/src/v2/root-transition.d.ts.map +1 -1
- package/dist/src/v2/root-transition.js +2 -1
- package/dist/src/v2/root-transition.js.map +1 -1
- package/dist/src/v2/scope-registry/__tests__/scope-registry.test.js +2 -1
- package/dist/src/v2/scope-registry/__tests__/scope-registry.test.js.map +1 -1
- package/dist/src/v2/scope-registry/index.d.ts.map +1 -1
- package/dist/src/v2/scope-registry/index.js +2 -1
- package/dist/src/v2/scope-registry/index.js.map +1 -1
- package/dist/src/v2/scope-registry/registry.d.ts.map +1 -1
- package/dist/src/v2/scope-registry/registry.js +2 -1
- package/dist/src/v2/scope-registry/registry.js.map +1 -1
- package/dist/src/v2/scope-registry/types.d.ts.map +1 -1
- package/dist/src/v2/scope-registry/types.js +2 -1
- package/dist/src/v2/scope-registry/types.js.map +1 -1
- package/dist/src/v2/semantic-drift.d.ts.map +1 -1
- package/dist/src/v2/semantic-drift.js +2 -1
- package/dist/src/v2/semantic-drift.js.map +1 -1
- package/dist/src/v2/semantic-scoping.d.ts.map +1 -1
- package/dist/src/v2/semantic-scoping.js +2 -1
- package/dist/src/v2/semantic-scoping.js.map +1 -1
- package/dist/src/v2/separation-of-powers.d.ts.map +1 -1
- package/dist/src/v2/separation-of-powers.js +2 -1
- package/dist/src/v2/separation-of-powers.js.map +1 -1
- package/dist/src/v2/sub-delegate-advisor.d.ts.map +1 -1
- package/dist/src/v2/sub-delegate-advisor.js +2 -1
- package/dist/src/v2/sub-delegate-advisor.js.map +1 -1
- package/dist/src/v2/transport/rfc9421/index.d.ts.map +1 -1
- package/dist/src/v2/transport/rfc9421/index.js +2 -1
- package/dist/src/v2/transport/rfc9421/index.js.map +1 -1
- package/dist/src/v2/transport/rfc9421/profile.d.ts +1 -1
- package/dist/src/v2/transport/rfc9421/profile.d.ts.map +1 -1
- package/dist/src/v2/transport/rfc9421/profile.js +2 -1
- package/dist/src/v2/transport/rfc9421/profile.js.map +1 -1
- package/dist/src/v2/transport/rfc9421/signature-base.d.ts.map +1 -1
- package/dist/src/v2/transport/rfc9421/signature-base.js +2 -1
- package/dist/src/v2/transport/rfc9421/signature-base.js.map +1 -1
- package/dist/src/v2/transport/rfc9421/types.d.ts.map +1 -1
- package/dist/src/v2/transport/rfc9421/types.js +2 -1
- package/dist/src/v2/transport/rfc9421/types.js.map +1 -1
- package/dist/src/v2/trust-policy/index.d.ts.map +1 -1
- package/dist/src/v2/trust-policy/index.js +2 -1
- package/dist/src/v2/trust-policy/index.js.map +1 -1
- package/dist/src/v2/trust-policy/policy.d.ts.map +1 -1
- package/dist/src/v2/trust-policy/policy.js +2 -1
- package/dist/src/v2/trust-policy/policy.js.map +1 -1
- package/dist/src/v2/trust-policy/types.d.ts +1 -1
- package/dist/src/v2/trust-policy/types.d.ts.map +1 -1
- package/dist/src/v2/trust-policy/types.js +2 -1
- package/dist/src/v2/trust-policy/types.js.map +1 -1
- package/dist/src/v2/trust-policy/verdict.d.ts.map +1 -1
- package/dist/src/v2/trust-policy/verdict.js +2 -1
- package/dist/src/v2/trust-policy/verdict.js.map +1 -1
- package/dist/src/v2/trust-policy/well-known.d.ts +2 -2
- package/dist/src/v2/trust-policy/well-known.d.ts.map +1 -1
- package/dist/src/v2/trust-policy/well-known.js +2 -1
- package/dist/src/v2/trust-policy/well-known.js.map +1 -1
- package/dist/src/v2/types.d.ts.map +1 -1
- package/dist/src/v2/types.js +2 -1
- package/dist/src/v2/types.js.map +1 -1
- package/dist/src/v2/values-override.d.ts.map +1 -1
- package/dist/src/v2/values-override.js +2 -1
- package/dist/src/v2/values-override.js.map +1 -1
- package/dist/src/v2/verification-source/index.d.ts.map +1 -1
- package/dist/src/v2/verification-source/index.js +2 -1
- package/dist/src/v2/verification-source/index.js.map +1 -1
- package/dist/src/v2/verification-source/types.d.ts.map +1 -1
- package/dist/src/v2/verification-source/types.js +2 -1
- package/dist/src/v2/verification-source/types.js.map +1 -1
- package/dist/src/v2/verifier-hardening/index.d.ts.map +1 -1
- package/dist/src/v2/verifier-hardening/index.js +2 -1
- package/dist/src/v2/verifier-hardening/index.js.map +1 -1
- package/dist/src/v2/wallet-binding/bind.d.ts.map +1 -1
- package/dist/src/v2/wallet-binding/bind.js +2 -1
- package/dist/src/v2/wallet-binding/bind.js.map +1 -1
- package/dist/src/v2/wallet-binding/index.d.ts.map +1 -1
- package/dist/src/v2/wallet-binding/index.js +2 -1
- package/dist/src/v2/wallet-binding/index.js.map +1 -1
- package/dist/src/v2/wallet-binding/types.d.ts.map +1 -1
- package/dist/src/v2/wallet-binding/types.js +2 -1
- package/dist/src/v2/wallet-binding/types.js.map +1 -1
- package/dist/src/v2/word_handles/__tests__/word_handles.test.js +2 -1
- package/dist/src/v2/word_handles/__tests__/word_handles.test.js.map +1 -1
- package/dist/src/v2/word_handles/codec.d.ts.map +1 -1
- package/dist/src/v2/word_handles/codec.js +2 -1
- package/dist/src/v2/word_handles/codec.js.map +1 -1
- package/dist/src/v2/word_handles/index.d.ts.map +1 -1
- package/dist/src/v2/word_handles/index.js +2 -1
- package/dist/src/v2/word_handles/index.js.map +1 -1
- package/dist/src/v2/word_handles/lexicon.d.ts.map +1 -1
- package/dist/src/v2/word_handles/lexicon.js +2 -1
- package/dist/src/v2/word_handles/lexicon.js.map +1 -1
- package/dist/src/v2/word_handles/types.d.ts.map +1 -1
- package/dist/src/v2/word_handles/types.js +2 -1
- package/dist/src/v2/word_handles/types.js.map +1 -1
- package/dist/src/verification/reputation.d.ts.map +1 -1
- package/dist/src/verification/reputation.js +2 -0
- package/dist/src/verification/reputation.js.map +1 -1
- package/dist/src/verification/verify.d.ts.map +1 -1
- package/dist/src/verification/verify.js +8 -1
- package/dist/src/verification/verify.js.map +1 -1
- package/package.json +11 -12
- package/src/v2/payment-rails/stripe-issuing/fixtures/_generate-cross-rail.ts +1 -1
- package/src/v2/payment-rails/stripe-issuing/fixtures/_generate.ts +1 -1
|
@@ -0,0 +1,108 @@
|
|
|
1
|
+
import type { Signer } from '../../adapters/remote-signer/types.js';
|
|
2
|
+
import type { RevocationFreshnessResult } from '../../types/policy.js';
|
|
3
|
+
import type { RevocationObservation, RevocationObservationDecision, RevocationOutcomeLabel, RevocationStatusSource, SignedRevocationObservation, ObservationVerifyResult, SecurityEventTokenClaims, RefreshOutcome } from './types.js';
|
|
4
|
+
/** Input to buildRevocationObservation. Field semantics are those of
|
|
5
|
+
* {@link RevocationObservation}; timestamps accept Date for convenience and
|
|
6
|
+
* are stored ISO 8601. */
|
|
7
|
+
export interface BuildObservationParams {
|
|
8
|
+
authority_ref: string;
|
|
9
|
+
status_source: RevocationStatusSource;
|
|
10
|
+
revoked_at?: Date | string;
|
|
11
|
+
/** Defaults to now. */
|
|
12
|
+
observed_at?: Date | string;
|
|
13
|
+
maximum_staleness_ms: number;
|
|
14
|
+
affected_scope?: string;
|
|
15
|
+
/** The decision reached under the relying party's freshness policy. A full
|
|
16
|
+
* FreshnessDecision may be passed; only effect and downgraded are stored
|
|
17
|
+
* (the frozen field shape), the rest stays verifier-local. */
|
|
18
|
+
decision: RevocationObservationDecision & {
|
|
19
|
+
[extra: string]: unknown;
|
|
20
|
+
};
|
|
21
|
+
workflow_response?: RefreshOutcome;
|
|
22
|
+
}
|
|
23
|
+
/**
|
|
24
|
+
* Build and sign a RevocationObservation.
|
|
25
|
+
*
|
|
26
|
+
* Signing follows the module's Signer discipline: like buildRevocationSET,
|
|
27
|
+
* this builder does not introduce its own key handling; the caller supplies
|
|
28
|
+
* the SDK {@link Signer} (local or remote custody) and the signature is that
|
|
29
|
+
* signer's Ed25519 signature over the canonical form of the record with the
|
|
30
|
+
* `signature` field absent. observer_key and observer_key_id are taken from
|
|
31
|
+
* the signer and are covered by the signature, so the record binds its own
|
|
32
|
+
* verification key material.
|
|
33
|
+
*
|
|
34
|
+
* The record asserts an observation under a stated freshness contract. It
|
|
35
|
+
* does not assert instant or universal revocation.
|
|
36
|
+
*/
|
|
37
|
+
export declare function buildRevocationObservation(params: BuildObservationParams, signer: Signer): Promise<SignedRevocationObservation>;
|
|
38
|
+
/**
|
|
39
|
+
* Verify a signed observation: structural well-formedness, then the Ed25519
|
|
40
|
+
* signature over the canonical record with `signature` absent, against the
|
|
41
|
+
* record's own observer_key (or a caller-pinned expected key).
|
|
42
|
+
*
|
|
43
|
+
* Verifying proves the named observer signed this observation. It does not
|
|
44
|
+
* prove the observed revocation is true or current beyond the freshness
|
|
45
|
+
* contract the record states, and it does not prove any other relying party
|
|
46
|
+
* observed the same signal.
|
|
47
|
+
*/
|
|
48
|
+
export declare function verifyRevocationObservation(record: SignedRevocationObservation, opts?: {
|
|
49
|
+
expectedObserverKey?: string;
|
|
50
|
+
}): ObservationVerifyResult;
|
|
51
|
+
/**
|
|
52
|
+
* Derive the outcome label for an observation. The label is verifier-report
|
|
53
|
+
* vocabulary: it is computed on demand and never stored in the signed record.
|
|
54
|
+
*
|
|
55
|
+
* Derivation:
|
|
56
|
+
* - a revocation was observed (revoked_at present):
|
|
57
|
+
* - workflow_response refused a refresh because the original was revoked
|
|
58
|
+
* (reissued false, reason 'revoked'): 'running_terminated', the in
|
|
59
|
+
* flight workflow was cut short by the observed revocation;
|
|
60
|
+
* - decision deny: 'revoked_blocked'.
|
|
61
|
+
* - no revocation signal (revoked_at absent): the record's frozen decision
|
|
62
|
+
* slot carries effect and downgraded only, which cannot distinguish a
|
|
63
|
+
* fresh source from a stale or unreachable one. The caller supplies the
|
|
64
|
+
* freshness result it recorded (RevocationFreshnessRecord.result) as
|
|
65
|
+
* classification CONTEXT; it is consumed here and never stored:
|
|
66
|
+
* - 'fresh': 'fresh_valid';
|
|
67
|
+
* - 'stale': 'stale_denied' or 'stale_permitted' by decision effect;
|
|
68
|
+
* - 'unavailable' or 'skipped' (no signal obtained either way):
|
|
69
|
+
* 'unavailable_fail_closed' or 'unavailable_fail_open' by effect.
|
|
70
|
+
*
|
|
71
|
+
* Throws on combinations outside the seven labels (an observed revocation
|
|
72
|
+
* that was allowed without a terminating workflow response, a fresh deny, or
|
|
73
|
+
* a missing freshness context when no revocation was observed): those states
|
|
74
|
+
* are not representable outcomes of decideFreshness and indicate a
|
|
75
|
+
* malformed observation rather than an eighth category.
|
|
76
|
+
*/
|
|
77
|
+
export declare function classifyObservation(observation: RevocationObservation, freshness?: {
|
|
78
|
+
result: RevocationFreshnessResult;
|
|
79
|
+
}): RevocationOutcomeLabel;
|
|
80
|
+
/**
|
|
81
|
+
* Map a received Security Event Token claim set into builder params for a
|
|
82
|
+
* RevocationObservation.
|
|
83
|
+
*
|
|
84
|
+
* Wiring per the freeze: status_source becomes {kind: 'set', jti} carrying
|
|
85
|
+
* the SET's replay key, and the CAEP event_timestamp (seconds since the Unix
|
|
86
|
+
* epoch) is converted to ISO 8601 for revoked_at, keeping the SDK-wide
|
|
87
|
+
* timestamp convention; milliseconds and epoch seconds are never mixed in
|
|
88
|
+
* one field.
|
|
89
|
+
*
|
|
90
|
+
* Audience note: a SET's `aud` is the RFC 8417 JWT audience claim, a
|
|
91
|
+
* receiver hint on the event token. It is not the APS AudienceBinding shape
|
|
92
|
+
* (the in-body receipt binding checked by checkAudience), and this helper
|
|
93
|
+
* does not read it: whether the SET was addressed to this receiver is the
|
|
94
|
+
* transport layer's check, made before ingestion.
|
|
95
|
+
*
|
|
96
|
+
* Callers SHOULD validate the claim set with isWellFormedSET first; this
|
|
97
|
+
* helper re-asserts only the fields it dereferences. Receiving a SET is an
|
|
98
|
+
* observation of one emitter's signal under this receiver's freshness
|
|
99
|
+
* contract; it is not proof of instant or universal revocation.
|
|
100
|
+
*/
|
|
101
|
+
export declare function observationParamsFromSET(set: SecurityEventTokenClaims, params: {
|
|
102
|
+
decision: BuildObservationParams['decision'];
|
|
103
|
+
maximum_staleness_ms: number;
|
|
104
|
+
observed_at?: Date | string;
|
|
105
|
+
affected_scope?: string;
|
|
106
|
+
workflow_response?: RefreshOutcome;
|
|
107
|
+
}): BuildObservationParams;
|
|
108
|
+
//# sourceMappingURL=observation.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"observation.d.ts","sourceRoot":"","sources":["../../../../src/v2/revocation-enforcement/observation.ts"],"names":[],"mappings":"AA8BA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,uCAAuC,CAAA;AACnE,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,uBAAuB,CAAA;AACtE,OAAO,KAAK,EACV,qBAAqB,EACrB,6BAA6B,EAC7B,sBAAsB,EACtB,sBAAsB,EACtB,2BAA2B,EAC3B,uBAAuB,EACvB,wBAAwB,EAExB,cAAc,EACf,MAAM,YAAY,CAAA;AASnB;;2BAE2B;AAC3B,MAAM,WAAW,sBAAsB;IACrC,aAAa,EAAE,MAAM,CAAA;IACrB,aAAa,EAAE,sBAAsB,CAAA;IACrC,UAAU,CAAC,EAAE,IAAI,GAAG,MAAM,CAAA;IAC1B,uBAAuB;IACvB,WAAW,CAAC,EAAE,IAAI,GAAG,MAAM,CAAA;IAC3B,oBAAoB,EAAE,MAAM,CAAA;IAC5B,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB;;mEAE+D;IAC/D,QAAQ,EAAE,6BAA6B,GAAG;QAAE,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,CAAA;IACtE,iBAAiB,CAAC,EAAE,cAAc,CAAA;CACnC;AAUD;;;;;;;;;;;;;GAaG;AACH,wBAAsB,0BAA0B,CAC9C,MAAM,EAAE,sBAAsB,EAC9B,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,2BAA2B,CAAC,CAiCtC;AAMD;;;;;;;;;GASG;AACH,wBAAgB,2BAA2B,CACzC,MAAM,EAAE,2BAA2B,EACnC,IAAI,CAAC,EAAE;IAAE,mBAAmB,CAAC,EAAE,MAAM,CAAA;CAAE,GACtC,uBAAuB,CA4CzB;AAMD;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAgB,mBAAmB,CACjC,WAAW,EAAE,qBAAqB,EAClC,SAAS,CAAC,EAAE;IAAE,MAAM,EAAE,yBAAyB,CAAA;CAAE,GAChD,sBAAsB,CAmCxB;AAMD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,wBAAwB,CACtC,GAAG,EAAE,wBAAwB,EAC7B,MAAM,EAAE;IACN,QAAQ,EAAE,sBAAsB,CAAC,UAAU,CAAC,CAAA;IAC5C,oBAAoB,EAAE,MAAM,CAAA;IAC5B,WAAW,CAAC,EAAE,IAAI,GAAG,MAAM,CAAA;IAC3B,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,iBAAiB,CAAC,EAAE,cAAc,CAAA;CACnC,GACA,sBAAsB,CAuBxB"}
|
|
@@ -0,0 +1,253 @@
|
|
|
1
|
+
// Copyright (c) 2026 Tymofii Pidlisnyi
|
|
2
|
+
// SPDX-License-Identifier: Apache-2.0
|
|
3
|
+
// ══════════════════════════════════════════════════════════════════
|
|
4
|
+
// T7 / FREEZE-VWE F4. RevocationObservation - build, verify, classify, ingest
|
|
5
|
+
// ══════════════════════════════════════════════════════════════════
|
|
6
|
+
// The module's emitter side (buildRevocationSET) and decision side
|
|
7
|
+
// (decideFreshness) existed; this file adds the verifier-side OBSERVATION
|
|
8
|
+
// record: that a specific revocation signal was observed, from which source,
|
|
9
|
+
// for which authority, covering which scope, and what the relying party then
|
|
10
|
+
// did under its stated freshness contract.
|
|
11
|
+
//
|
|
12
|
+
// Claims language: an observation is evidence of what one verifier saw and
|
|
13
|
+
// decided within its freshness contract (maximum_staleness_ms). Nothing here
|
|
14
|
+
// claims instant or universal revocation: a revocation takes effect for a
|
|
15
|
+
// relying party when that party observes it within the contract, and a signal
|
|
16
|
+
// the source has not yet propagated is, by construction, not yet observable.
|
|
17
|
+
//
|
|
18
|
+
// ──────────────────────────── PROOF BOX ────────────────────────────
|
|
19
|
+
// Proves: the observing verifier signed this record of a revocation signal
|
|
20
|
+
// (or of the failure to obtain one) and of the decision it reached under
|
|
21
|
+
// its freshness policy at observed_at.
|
|
22
|
+
// Does NOT prove: that the revocation is true, globally current, or visible
|
|
23
|
+
// to any other relying party; that no revocation occurred after
|
|
24
|
+
// observed_at; or that the decision was the right one. Outcome labels are
|
|
25
|
+
// derived reporting vocabulary and are never part of the signed bytes.
|
|
26
|
+
// ════════════════════════════════════════════════════════════════════
|
|
27
|
+
import { canonicalize } from '../../core/canonical.js';
|
|
28
|
+
import { verify } from '../../crypto/keys.js';
|
|
29
|
+
import { defaultKeyId } from '../../adapters/remote-signer/types.js';
|
|
30
|
+
const CAEP_SESSION_REVOKED = 'https://schemas.openid.net/secevent/caep/event-type/session-revoked';
|
|
31
|
+
function toISO(value) {
|
|
32
|
+
const d = value instanceof Date ? value : new Date(value);
|
|
33
|
+
if (Number.isNaN(d.getTime())) {
|
|
34
|
+
throw new Error(`revocation-observation: invalid timestamp '${String(value)}'`);
|
|
35
|
+
}
|
|
36
|
+
return d.toISOString();
|
|
37
|
+
}
|
|
38
|
+
/**
|
|
39
|
+
* Build and sign a RevocationObservation.
|
|
40
|
+
*
|
|
41
|
+
* Signing follows the module's Signer discipline: like buildRevocationSET,
|
|
42
|
+
* this builder does not introduce its own key handling; the caller supplies
|
|
43
|
+
* the SDK {@link Signer} (local or remote custody) and the signature is that
|
|
44
|
+
* signer's Ed25519 signature over the canonical form of the record with the
|
|
45
|
+
* `signature` field absent. observer_key and observer_key_id are taken from
|
|
46
|
+
* the signer and are covered by the signature, so the record binds its own
|
|
47
|
+
* verification key material.
|
|
48
|
+
*
|
|
49
|
+
* The record asserts an observation under a stated freshness contract. It
|
|
50
|
+
* does not assert instant or universal revocation.
|
|
51
|
+
*/
|
|
52
|
+
export async function buildRevocationObservation(params, signer) {
|
|
53
|
+
if (!params.authority_ref) {
|
|
54
|
+
throw new Error('revocation-observation: authority_ref is required');
|
|
55
|
+
}
|
|
56
|
+
if (!Number.isFinite(params.maximum_staleness_ms) || params.maximum_staleness_ms < 0) {
|
|
57
|
+
throw new Error('revocation-observation: maximum_staleness_ms must be a non-negative number');
|
|
58
|
+
}
|
|
59
|
+
if (params.decision.effect !== 'allow' && params.decision.effect !== 'deny') {
|
|
60
|
+
throw new Error("revocation-observation: decision.effect must be 'allow' or 'deny'");
|
|
61
|
+
}
|
|
62
|
+
const observation = {
|
|
63
|
+
authority_ref: params.authority_ref,
|
|
64
|
+
status_source: params.status_source,
|
|
65
|
+
observed_at: toISO(params.observed_at ?? new Date()),
|
|
66
|
+
maximum_staleness_ms: params.maximum_staleness_ms,
|
|
67
|
+
decision: params.decision.downgraded === undefined
|
|
68
|
+
? { effect: params.decision.effect }
|
|
69
|
+
: { effect: params.decision.effect, downgraded: params.decision.downgraded },
|
|
70
|
+
};
|
|
71
|
+
if (params.revoked_at !== undefined)
|
|
72
|
+
observation.revoked_at = toISO(params.revoked_at);
|
|
73
|
+
if (params.affected_scope !== undefined)
|
|
74
|
+
observation.affected_scope = params.affected_scope;
|
|
75
|
+
if (params.workflow_response !== undefined)
|
|
76
|
+
observation.workflow_response = params.workflow_response;
|
|
77
|
+
const observer_key = await signer.publicKeyHex();
|
|
78
|
+
const observer_key_id = (await signer.keyId()) || defaultKeyId(observer_key);
|
|
79
|
+
const signable = {
|
|
80
|
+
...observation,
|
|
81
|
+
observer_key,
|
|
82
|
+
observer_key_id,
|
|
83
|
+
};
|
|
84
|
+
const signature = await signer.sign(canonicalize(signable));
|
|
85
|
+
return { ...signable, signature };
|
|
86
|
+
}
|
|
87
|
+
// ══════════════════════════════════════════════════════════════════
|
|
88
|
+
// Verify
|
|
89
|
+
// ══════════════════════════════════════════════════════════════════
|
|
90
|
+
/**
|
|
91
|
+
* Verify a signed observation: structural well-formedness, then the Ed25519
|
|
92
|
+
* signature over the canonical record with `signature` absent, against the
|
|
93
|
+
* record's own observer_key (or a caller-pinned expected key).
|
|
94
|
+
*
|
|
95
|
+
* Verifying proves the named observer signed this observation. It does not
|
|
96
|
+
* prove the observed revocation is true or current beyond the freshness
|
|
97
|
+
* contract the record states, and it does not prove any other relying party
|
|
98
|
+
* observed the same signal.
|
|
99
|
+
*/
|
|
100
|
+
export function verifyRevocationObservation(record, opts) {
|
|
101
|
+
if (typeof record !== 'object' || record === null) {
|
|
102
|
+
return { valid: false, reason: 'not an object' };
|
|
103
|
+
}
|
|
104
|
+
if (typeof record.authority_ref !== 'string' || record.authority_ref.length === 0) {
|
|
105
|
+
return { valid: false, reason: 'authority_ref missing or empty' };
|
|
106
|
+
}
|
|
107
|
+
const src = record.status_source;
|
|
108
|
+
const srcOk = typeof src === 'object' && src !== null &&
|
|
109
|
+
((src.kind === 'source' && typeof src.id === 'string') ||
|
|
110
|
+
(src.kind === 'set' && typeof src.jti === 'string'));
|
|
111
|
+
if (!srcOk) {
|
|
112
|
+
return { valid: false, reason: "status_source must be {kind:'source',id} or {kind:'set',jti}" };
|
|
113
|
+
}
|
|
114
|
+
if (typeof record.observed_at !== 'string' || Number.isNaN(new Date(record.observed_at).getTime())) {
|
|
115
|
+
return { valid: false, reason: 'observed_at missing or not a parseable timestamp' };
|
|
116
|
+
}
|
|
117
|
+
if (record.revoked_at !== undefined &&
|
|
118
|
+
(typeof record.revoked_at !== 'string' || Number.isNaN(new Date(record.revoked_at).getTime()))) {
|
|
119
|
+
return { valid: false, reason: 'revoked_at present but not a parseable timestamp' };
|
|
120
|
+
}
|
|
121
|
+
if (typeof record.maximum_staleness_ms !== 'number' || !Number.isFinite(record.maximum_staleness_ms) || record.maximum_staleness_ms < 0) {
|
|
122
|
+
return { valid: false, reason: 'maximum_staleness_ms missing or negative' };
|
|
123
|
+
}
|
|
124
|
+
if (typeof record.decision !== 'object' || record.decision === null ||
|
|
125
|
+
(record.decision.effect !== 'allow' && record.decision.effect !== 'deny')) {
|
|
126
|
+
return { valid: false, reason: "decision.effect must be 'allow' or 'deny'" };
|
|
127
|
+
}
|
|
128
|
+
if (typeof record.observer_key !== 'string' || record.observer_key.length !== 64) {
|
|
129
|
+
return { valid: false, reason: 'observer_key missing or not 32-byte hex' };
|
|
130
|
+
}
|
|
131
|
+
if (typeof record.signature !== 'string' || record.signature.length !== 128) {
|
|
132
|
+
return { valid: false, reason: 'signature missing or not 64-byte hex' };
|
|
133
|
+
}
|
|
134
|
+
if (opts?.expectedObserverKey !== undefined && opts.expectedObserverKey !== record.observer_key) {
|
|
135
|
+
return { valid: false, reason: 'observer_key does not match the pinned expected key' };
|
|
136
|
+
}
|
|
137
|
+
const { signature, ...signable } = record;
|
|
138
|
+
const ok = verify(canonicalize(signable), signature, record.observer_key);
|
|
139
|
+
return ok
|
|
140
|
+
? { valid: true, reason: 'signature valid over canonical record (signature field absent)' }
|
|
141
|
+
: { valid: false, reason: 'signature verification failed' };
|
|
142
|
+
}
|
|
143
|
+
// ══════════════════════════════════════════════════════════════════
|
|
144
|
+
// Classify (labels are derived, never stored)
|
|
145
|
+
// ══════════════════════════════════════════════════════════════════
|
|
146
|
+
/**
|
|
147
|
+
* Derive the outcome label for an observation. The label is verifier-report
|
|
148
|
+
* vocabulary: it is computed on demand and never stored in the signed record.
|
|
149
|
+
*
|
|
150
|
+
* Derivation:
|
|
151
|
+
* - a revocation was observed (revoked_at present):
|
|
152
|
+
* - workflow_response refused a refresh because the original was revoked
|
|
153
|
+
* (reissued false, reason 'revoked'): 'running_terminated', the in
|
|
154
|
+
* flight workflow was cut short by the observed revocation;
|
|
155
|
+
* - decision deny: 'revoked_blocked'.
|
|
156
|
+
* - no revocation signal (revoked_at absent): the record's frozen decision
|
|
157
|
+
* slot carries effect and downgraded only, which cannot distinguish a
|
|
158
|
+
* fresh source from a stale or unreachable one. The caller supplies the
|
|
159
|
+
* freshness result it recorded (RevocationFreshnessRecord.result) as
|
|
160
|
+
* classification CONTEXT; it is consumed here and never stored:
|
|
161
|
+
* - 'fresh': 'fresh_valid';
|
|
162
|
+
* - 'stale': 'stale_denied' or 'stale_permitted' by decision effect;
|
|
163
|
+
* - 'unavailable' or 'skipped' (no signal obtained either way):
|
|
164
|
+
* 'unavailable_fail_closed' or 'unavailable_fail_open' by effect.
|
|
165
|
+
*
|
|
166
|
+
* Throws on combinations outside the seven labels (an observed revocation
|
|
167
|
+
* that was allowed without a terminating workflow response, a fresh deny, or
|
|
168
|
+
* a missing freshness context when no revocation was observed): those states
|
|
169
|
+
* are not representable outcomes of decideFreshness and indicate a
|
|
170
|
+
* malformed observation rather than an eighth category.
|
|
171
|
+
*/
|
|
172
|
+
export function classifyObservation(observation, freshness) {
|
|
173
|
+
if (observation.revoked_at !== undefined) {
|
|
174
|
+
const wf = observation.workflow_response;
|
|
175
|
+
if (wf !== undefined && wf.reissued === false && wf.reason === 'revoked') {
|
|
176
|
+
return 'running_terminated';
|
|
177
|
+
}
|
|
178
|
+
if (observation.decision.effect === 'deny') {
|
|
179
|
+
return 'revoked_blocked';
|
|
180
|
+
}
|
|
181
|
+
throw new Error('classifyObservation: an observed revocation with an allow decision and no ' +
|
|
182
|
+
'terminating workflow response is not one of the seven outcome labels');
|
|
183
|
+
}
|
|
184
|
+
if (!freshness) {
|
|
185
|
+
throw new Error('classifyObservation: no revocation was observed, so the freshness result ' +
|
|
186
|
+
"(RevocationFreshnessRecord.result) is required as context to distinguish " +
|
|
187
|
+
'fresh, stale, and unavailable outcomes; the frozen record shape does not carry it');
|
|
188
|
+
}
|
|
189
|
+
switch (freshness.result) {
|
|
190
|
+
case 'fresh':
|
|
191
|
+
if (observation.decision.effect === 'allow')
|
|
192
|
+
return 'fresh_valid';
|
|
193
|
+
throw new Error('classifyObservation: a fresh result with a deny decision is not a defined outcome');
|
|
194
|
+
case 'stale':
|
|
195
|
+
return observation.decision.effect === 'deny' ? 'stale_denied' : 'stale_permitted';
|
|
196
|
+
case 'unavailable':
|
|
197
|
+
case 'skipped':
|
|
198
|
+
return observation.decision.effect === 'deny'
|
|
199
|
+
? 'unavailable_fail_closed'
|
|
200
|
+
: 'unavailable_fail_open';
|
|
201
|
+
}
|
|
202
|
+
}
|
|
203
|
+
// ══════════════════════════════════════════════════════════════════
|
|
204
|
+
// SET ingestion
|
|
205
|
+
// ══════════════════════════════════════════════════════════════════
|
|
206
|
+
/**
|
|
207
|
+
* Map a received Security Event Token claim set into builder params for a
|
|
208
|
+
* RevocationObservation.
|
|
209
|
+
*
|
|
210
|
+
* Wiring per the freeze: status_source becomes {kind: 'set', jti} carrying
|
|
211
|
+
* the SET's replay key, and the CAEP event_timestamp (seconds since the Unix
|
|
212
|
+
* epoch) is converted to ISO 8601 for revoked_at, keeping the SDK-wide
|
|
213
|
+
* timestamp convention; milliseconds and epoch seconds are never mixed in
|
|
214
|
+
* one field.
|
|
215
|
+
*
|
|
216
|
+
* Audience note: a SET's `aud` is the RFC 8417 JWT audience claim, a
|
|
217
|
+
* receiver hint on the event token. It is not the APS AudienceBinding shape
|
|
218
|
+
* (the in-body receipt binding checked by checkAudience), and this helper
|
|
219
|
+
* does not read it: whether the SET was addressed to this receiver is the
|
|
220
|
+
* transport layer's check, made before ingestion.
|
|
221
|
+
*
|
|
222
|
+
* Callers SHOULD validate the claim set with isWellFormedSET first; this
|
|
223
|
+
* helper re-asserts only the fields it dereferences. Receiving a SET is an
|
|
224
|
+
* observation of one emitter's signal under this receiver's freshness
|
|
225
|
+
* contract; it is not proof of instant or universal revocation.
|
|
226
|
+
*/
|
|
227
|
+
export function observationParamsFromSET(set, params) {
|
|
228
|
+
const event = set?.events?.[CAEP_SESSION_REVOKED];
|
|
229
|
+
if (!event || typeof event.event_timestamp !== 'number' || !Number.isFinite(event.event_timestamp)) {
|
|
230
|
+
throw new Error('observationParamsFromSET: claim set carries no well-formed CAEP session-revoked event');
|
|
231
|
+
}
|
|
232
|
+
if (typeof set.jti !== 'string' || set.jti.length === 0) {
|
|
233
|
+
throw new Error('observationParamsFromSET: claim set has no jti');
|
|
234
|
+
}
|
|
235
|
+
if (typeof event.subject?.id !== 'string' || event.subject.id.length === 0) {
|
|
236
|
+
throw new Error('observationParamsFromSET: event subject has no id');
|
|
237
|
+
}
|
|
238
|
+
const out = {
|
|
239
|
+
authority_ref: event.subject.id,
|
|
240
|
+
status_source: { kind: 'set', jti: set.jti },
|
|
241
|
+
revoked_at: new Date(event.event_timestamp * 1000).toISOString(),
|
|
242
|
+
maximum_staleness_ms: params.maximum_staleness_ms,
|
|
243
|
+
decision: params.decision,
|
|
244
|
+
};
|
|
245
|
+
if (params.observed_at !== undefined)
|
|
246
|
+
out.observed_at = params.observed_at;
|
|
247
|
+
if (params.affected_scope !== undefined)
|
|
248
|
+
out.affected_scope = params.affected_scope;
|
|
249
|
+
if (params.workflow_response !== undefined)
|
|
250
|
+
out.workflow_response = params.workflow_response;
|
|
251
|
+
return out;
|
|
252
|
+
}
|
|
253
|
+
//# sourceMappingURL=observation.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"observation.js","sourceRoot":"","sources":["../../../../src/v2/revocation-enforcement/observation.ts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,sCAAsC;AACtC,qEAAqE;AACrE,8EAA8E;AAC9E,qEAAqE;AACrE,mEAAmE;AACnE,0EAA0E;AAC1E,6EAA6E;AAC7E,6EAA6E;AAC7E,2CAA2C;AAC3C,EAAE;AACF,2EAA2E;AAC3E,6EAA6E;AAC7E,0EAA0E;AAC1E,8EAA8E;AAC9E,6EAA6E;AAC7E,EAAE;AACF,sEAAsE;AACtE,2EAA2E;AAC3E,2EAA2E;AAC3E,yCAAyC;AACzC,4EAA4E;AAC5E,kEAAkE;AAClE,4EAA4E;AAC5E,yEAAyE;AACzE,uEAAuE;AAEvE,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAA;AACtD,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAA;AAC7C,OAAO,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAA;AAepE,MAAM,oBAAoB,GACxB,qEAA8E,CAAA;AAwBhF,SAAS,KAAK,CAAC,KAAoB;IACjC,MAAM,CAAC,GAAG,KAAK,YAAY,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAA;IACzD,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,8CAA8C,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IACjF,CAAC;IACD,OAAO,CAAC,CAAC,WAAW,EAAE,CAAA;AACxB,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,MAA8B,EAC9B,MAAc;IAEd,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAA;IACtE,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,oBAAoB,CAAC,IAAI,MAAM,CAAC,oBAAoB,GAAG,CAAC,EAAE,CAAC;QACrF,MAAM,IAAI,KAAK,CAAC,4EAA4E,CAAC,CAAA;IAC/F,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAC5E,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAA;IACtF,CAAC;IAED,MAAM,WAAW,GAA0B;QACzC,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,WAAW,IAAI,IAAI,IAAI,EAAE,CAAC;QACpD,oBAAoB,EAAE,MAAM,CAAC,oBAAoB;QACjD,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,UAAU,KAAK,SAAS;YAChD,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE;YACpC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE;KAC/E,CAAA;IACD,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS;QAAE,WAAW,CAAC,UAAU,GAAG,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,CAAA;IACtF,IAAI,MAAM,CAAC,cAAc,KAAK,SAAS;QAAE,WAAW,CAAC,cAAc,GAAG,MAAM,CAAC,cAAc,CAAA;IAC3F,IAAI,MAAM,CAAC,iBAAiB,KAAK,SAAS;QAAE,WAAW,CAAC,iBAAiB,GAAG,MAAM,CAAC,iBAAiB,CAAA;IAEpG,MAAM,YAAY,GAAG,MAAM,MAAM,CAAC,YAAY,EAAE,CAAA;IAChD,MAAM,eAAe,GAAG,CAAC,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC,IAAI,YAAY,CAAC,YAAY,CAAC,CAAA;IAC5E,MAAM,QAAQ,GAAmD;QAC/D,GAAG,WAAW;QACd,YAAY;QACZ,eAAe;KAChB,CAAA;IACD,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAA;IAC3D,OAAO,EAAE,GAAG,QAAQ,EAAE,SAAS,EAAE,CAAA;AACnC,CAAC;AAED,qEAAqE;AACrE,SAAS;AACT,qEAAqE;AAErE;;;;;;;;;GASG;AACH,MAAM,UAAU,2BAA2B,CACzC,MAAmC,EACnC,IAAuC;IAEvC,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QAClD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,CAAA;IAClD,CAAC;IACD,IAAI,OAAO,MAAM,CAAC,aAAa,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClF,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,gCAAgC,EAAE,CAAA;IACnE,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,CAAC,aAAa,CAAA;IAChC,MAAM,KAAK,GACT,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI;QACvC,CAAC,CAAC,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAQ,GAAwB,CAAC,EAAE,KAAK,QAAQ,CAAC;YAC1E,CAAC,GAAG,CAAC,IAAI,KAAK,KAAK,IAAI,OAAQ,GAAyB,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAA;IAC/E,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,8DAA8D,EAAE,CAAA;IACjG,CAAC;IACD,IAAI,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;QACnG,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,kDAAkD,EAAE,CAAA;IACrF,CAAC;IACD,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS;QAC/B,CAAC,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,CAAC;QACnG,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,kDAAkD,EAAE,CAAA;IACrF,CAAC;IACD,IAAI,OAAO,MAAM,CAAC,oBAAoB,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,oBAAoB,CAAC,IAAI,MAAM,CAAC,oBAAoB,GAAG,CAAC,EAAE,CAAC;QACxI,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,0CAA0C,EAAE,CAAA;IAC7E,CAAC;IACD,IAAI,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,KAAK,IAAI;QAC/D,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,MAAM,CAAC,EAAE,CAAC;QAC9E,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,2CAA2C,EAAE,CAAA;IAC9E,CAAC;IACD,IAAI,OAAO,MAAM,CAAC,YAAY,KAAK,QAAQ,IAAI,MAAM,CAAC,YAAY,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QACjF,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,yCAAyC,EAAE,CAAA;IAC5E,CAAC;IACD,IAAI,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC5E,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,sCAAsC,EAAE,CAAA;IACzE,CAAC;IACD,IAAI,IAAI,EAAE,mBAAmB,KAAK,SAAS,IAAI,IAAI,CAAC,mBAAmB,KAAK,MAAM,CAAC,YAAY,EAAE,CAAC;QAChG,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,qDAAqD,EAAE,CAAA;IACxF,CAAC;IAED,MAAM,EAAE,SAAS,EAAE,GAAG,QAAQ,EAAE,GAAG,MAAM,CAAA;IACzC,MAAM,EAAE,GAAG,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,YAAY,CAAC,CAAA;IACzE,OAAO,EAAE;QACP,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,gEAAgE,EAAE;QAC3F,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,+BAA+B,EAAE,CAAA;AAC/D,CAAC;AAED,qEAAqE;AACrE,8CAA8C;AAC9C,qEAAqE;AAErE;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,UAAU,mBAAmB,CACjC,WAAkC,EAClC,SAAiD;IAEjD,IAAI,WAAW,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACzC,MAAM,EAAE,GAAG,WAAW,CAAC,iBAAiB,CAAA;QACxC,IAAI,EAAE,KAAK,SAAS,IAAI,EAAE,CAAC,QAAQ,KAAK,KAAK,IAAI,EAAE,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACzE,OAAO,oBAAoB,CAAA;QAC7B,CAAC;QACD,IAAI,WAAW,CAAC,QAAQ,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC3C,OAAO,iBAAiB,CAAA;QAC1B,CAAC;QACD,MAAM,IAAI,KAAK,CACb,4EAA4E;YAC5E,sEAAsE,CACvE,CAAA;IACH,CAAC;IAED,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CACb,2EAA2E;YAC3E,2EAA2E;YAC3E,mFAAmF,CACpF,CAAA;IACH,CAAC;IAED,QAAQ,SAAS,CAAC,MAAM,EAAE,CAAC;QACzB,KAAK,OAAO;YACV,IAAI,WAAW,CAAC,QAAQ,CAAC,MAAM,KAAK,OAAO;gBAAE,OAAO,aAAa,CAAA;YACjE,MAAM,IAAI,KAAK,CAAC,mFAAmF,CAAC,CAAA;QACtG,KAAK,OAAO;YACV,OAAO,WAAW,CAAC,QAAQ,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,iBAAiB,CAAA;QACpF,KAAK,aAAa,CAAC;QACnB,KAAK,SAAS;YACZ,OAAO,WAAW,CAAC,QAAQ,CAAC,MAAM,KAAK,MAAM;gBAC3C,CAAC,CAAC,yBAAyB;gBAC3B,CAAC,CAAC,uBAAuB,CAAA;IAC/B,CAAC;AACH,CAAC;AAED,qEAAqE;AACrE,gBAAgB;AAChB,qEAAqE;AAErE;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,wBAAwB,CACtC,GAA6B,EAC7B,MAMC;IAED,MAAM,KAAK,GAAoC,GAAG,EAAE,MAAM,EAAE,CAAC,oBAAoB,CAAC,CAAA;IAClF,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,CAAC,eAAe,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,CAAC;QACnG,MAAM,IAAI,KAAK,CAAC,uFAAuF,CAAC,CAAA;IAC1G,CAAC;IACD,IAAI,OAAO,GAAG,CAAC,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxD,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAA;IACnE,CAAC;IACD,IAAI,OAAO,KAAK,CAAC,OAAO,EAAE,EAAE,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3E,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAA;IACtE,CAAC;IAED,MAAM,GAAG,GAA2B;QAClC,aAAa,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE;QAC/B,aAAa,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE;QAC5C,UAAU,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,eAAe,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE;QAChE,oBAAoB,EAAE,MAAM,CAAC,oBAAoB;QACjD,QAAQ,EAAE,MAAM,CAAC,QAAQ;KAC1B,CAAA;IACD,IAAI,MAAM,CAAC,WAAW,KAAK,SAAS;QAAE,GAAG,CAAC,WAAW,GAAG,MAAM,CAAC,WAAW,CAAA;IAC1E,IAAI,MAAM,CAAC,cAAc,KAAK,SAAS;QAAE,GAAG,CAAC,cAAc,GAAG,MAAM,CAAC,cAAc,CAAA;IACnF,IAAI,MAAM,CAAC,iBAAiB,KAAK,SAAS;QAAE,GAAG,CAAC,iBAAiB,GAAG,MAAM,CAAC,iBAAiB,CAAA;IAC5F,OAAO,GAAG,CAAA;AACZ,CAAC"}
|
|
@@ -137,11 +137,96 @@ export interface SecurityEventTokenClaims {
|
|
|
137
137
|
/** RFC 8417 'jti' - unique SET id (replay key for receivers). */
|
|
138
138
|
jti: string;
|
|
139
139
|
/** RFC 8417 'aud' - intended audience(s). Optional per spec; populated when
|
|
140
|
-
* the emitter knows the receiver.
|
|
140
|
+
* the emitter knows the receiver. This is the RFC 8417 SET audience claim,
|
|
141
|
+
* a JWT-level receiver hint. It is NOT the APS AudienceBinding shape (the
|
|
142
|
+
* in-body receipt binding verified by checkAudience); the two live at
|
|
143
|
+
* different layers and are never interchangeable. */
|
|
141
144
|
aud?: string | string[];
|
|
142
145
|
/** RFC 8417 'sub' - optional subject of the SET as a whole. */
|
|
143
146
|
sub?: string;
|
|
144
147
|
/** RFC 8417 'events' - map from event-type URI to the event object. */
|
|
145
148
|
events: Record<CAEPEventType, CAEPRevocationEvent>;
|
|
146
149
|
}
|
|
150
|
+
/** Which revocation signal an observation is based on.
|
|
151
|
+
* - kind 'source': the verifier consulted a revocation source directly
|
|
152
|
+
* (a CRL URL, a registry id; the RevocationFreshnessRecord.source value).
|
|
153
|
+
* - kind 'set': the verifier received an RFC 8417 Security Event Token and
|
|
154
|
+
* the jti is that SET's replay key (SecurityEventTokenClaims.jti). */
|
|
155
|
+
export type RevocationStatusSource = {
|
|
156
|
+
kind: 'source';
|
|
157
|
+
id: string;
|
|
158
|
+
} | {
|
|
159
|
+
kind: 'set';
|
|
160
|
+
jti: string;
|
|
161
|
+
};
|
|
162
|
+
/** The decision slot of an observation. Reuses the FreshnessDecision
|
|
163
|
+
* vocabulary: effect is 'allow' | 'deny' and a downgrade resolves to an
|
|
164
|
+
* allow with `downgraded: true`. No third verdict value exists. */
|
|
165
|
+
export interface RevocationObservationDecision {
|
|
166
|
+
effect: 'allow' | 'deny';
|
|
167
|
+
downgraded?: boolean;
|
|
168
|
+
}
|
|
169
|
+
/** A verifier-side record that a specific revocation signal was OBSERVED,
|
|
170
|
+
* from which source, for which authority, covering which scope, and what
|
|
171
|
+
* the relying party then did.
|
|
172
|
+
*
|
|
173
|
+
* This is an observation under a stated freshness contract: it records that
|
|
174
|
+
* the verifier saw a signal (or failed to obtain one) at observed_at, with
|
|
175
|
+
* maximum_staleness_ms naming the staleness the relying party was willing to
|
|
176
|
+
* tolerate. It does not assert instant or universal revocation: a revocation
|
|
177
|
+
* becomes effective for a relying party when that party observes it within
|
|
178
|
+
* its freshness contract, and nothing here claims the signal reached every
|
|
179
|
+
* relying party or reached this one immediately. */
|
|
180
|
+
export interface RevocationObservation {
|
|
181
|
+
/** The revoked (or checked) delegation / agent id. Opaque string, the same
|
|
182
|
+
* convention SETSubjectId.id uses. */
|
|
183
|
+
authority_ref: string;
|
|
184
|
+
/** Where the revocation status came from. */
|
|
185
|
+
status_source: RevocationStatusSource;
|
|
186
|
+
/** When the revocation took effect, ISO 8601, when a revocation was
|
|
187
|
+
* observed. A SET carries epoch seconds (CAEPRevocationEvent
|
|
188
|
+
* .event_timestamp); ingestion converts to ISO 8601 so the SDK-wide
|
|
189
|
+
* timestamp convention holds. Absent when no revocation signal was
|
|
190
|
+
* obtained (fresh, stale, or unavailable consults). */
|
|
191
|
+
revoked_at?: string;
|
|
192
|
+
/** When the verifier made this observation, ISO 8601. */
|
|
193
|
+
observed_at: string;
|
|
194
|
+
/** The maximum staleness, in milliseconds, the relying party's freshness
|
|
195
|
+
* contract tolerated for this observation. Milliseconds everywhere: SET
|
|
196
|
+
* epoch seconds are converted at ingestion, never stored as a third
|
|
197
|
+
* convention. */
|
|
198
|
+
maximum_staleness_ms: number;
|
|
199
|
+
/** The scope subtree the revocation covers, when the signal carried one.
|
|
200
|
+
* Uses the cascade reference language of draft-pidlisnyi-aps-03 revocation
|
|
201
|
+
* evidence: an opaque reference to the originating revocation and its
|
|
202
|
+
* cascade transaction identity, so a verifier can reconstruct from the
|
|
203
|
+
* records why a descendant died. */
|
|
204
|
+
affected_scope?: string;
|
|
205
|
+
/** What the relying party decided under its freshness policy. */
|
|
206
|
+
decision: RevocationObservationDecision;
|
|
207
|
+
/** What the relying party did next, when it did something recordable:
|
|
208
|
+
* a refresh attempt outcome (reissued, or refused with a reason). */
|
|
209
|
+
workflow_response?: RefreshOutcome;
|
|
210
|
+
}
|
|
211
|
+
/** A RevocationObservation signed by the observing verifier. The signature
|
|
212
|
+
* covers the canonical form of every field except `signature` itself,
|
|
213
|
+
* following the module-wide signable-subset discipline. observer_key is the
|
|
214
|
+
* raw Ed25519 public key hex the signature verifies against; observer_key_id
|
|
215
|
+
* follows the ed25519:<first-16-hex> convention. */
|
|
216
|
+
export interface SignedRevocationObservation extends RevocationObservation {
|
|
217
|
+
observer_key: string;
|
|
218
|
+
observer_key_id: string;
|
|
219
|
+
signature: string;
|
|
220
|
+
}
|
|
221
|
+
/** The seven derived outcome labels for an observation. DERIVED by
|
|
222
|
+
* classifyObservation, never stored in the signed object: a label is a
|
|
223
|
+
* verifier-report word, not wire surface. */
|
|
224
|
+
export type RevocationOutcomeLabel = 'revoked_blocked' | 'fresh_valid' | 'stale_denied' | 'stale_permitted' | 'running_terminated' | 'unavailable_fail_closed' | 'unavailable_fail_open';
|
|
225
|
+
/** Verdict from verifyRevocationObservation. Mechanical: structural
|
|
226
|
+
* well-formedness plus signature validity against observer_key. It does not
|
|
227
|
+
* assert the observed revocation is true, current, or universally visible. */
|
|
228
|
+
export interface ObservationVerifyResult {
|
|
229
|
+
valid: boolean;
|
|
230
|
+
reason: string;
|
|
231
|
+
}
|
|
147
232
|
//# sourceMappingURL=types.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/v2/revocation-enforcement/types.ts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/v2/revocation-enforcement/types.ts"],"names":[],"mappings":"AAoBA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,uBAAuB,CAAA;AACtE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AAC5C,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAA;AAMnE;;;;;;;;;;;;6EAY6E;AAC7E,MAAM,MAAM,mBAAmB,GAAG,WAAW,GAAG,aAAa,GAAG,mBAAmB,CAAA;AAEnF;;;;;+EAK+E;AAC/E,MAAM,MAAM,WAAW,GAAG,OAAO,GAAG,MAAM,GAAG,WAAW,CAAA;AAExD;yCACyC;AACzC,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,mBAAmB,CAAA;IACzB;;;iDAG6C;IAC7C,eAAe,CAAC,EAAE,WAAW,CAAA;IAC7B;;;;2CAIuC;IACvC,kBAAkB,CAAC,EAAE,MAAM,CAAA;CAC5B;AAED;;kDAEkD;AAClD,MAAM,WAAW,iBAAiB;IAChC,wEAAwE;IACxE,MAAM,EAAE,OAAO,GAAG,MAAM,CAAA;IACxB;oFACgF;IAChF,UAAU,EAAE,OAAO,CAAA;IACnB,mDAAmD;IACnD,IAAI,EAAE,mBAAmB,CAAA;IACzB,0DAA0D;IAC1D,MAAM,EAAE,yBAAyB,CAAC,QAAQ,CAAC,CAAA;IAC3C,sDAAsD;IACtD,MAAM,EAAE,MAAM,CAAA;IACd,+EAA+E;IAC/E,MAAM,EAAE,yBAAyB,CAAA;CAClC;AAMD;;;;oDAIoD;AACpD,MAAM,WAAW,wBAAwB;IACvC,oEAAoE;IACpE,OAAO,EAAE,iBAAiB,CAAA;IAC1B;sBACkB;IAClB,GAAG,EAAE,MAAM,CAAA;IACX,sDAAsD;IACtD,aAAa,EAAE,MAAM,CAAA;IACrB,2EAA2E;IAC3E,QAAQ,EAAE,MAAM,CAAA;IAChB;2DACuD;IACvD,YAAY,EAAE,MAAM,CAAA;IACpB,UAAU,EAAE,SAAS,CAAA;IACrB;;kEAE8D;IAC9D,QAAQ,EAAE,oBAAoB,CAAA;CAC/B;AAED,0EAA0E;AAC1E,MAAM,WAAW,qBAAqB;IACpC,iEAAiE;IACjE,OAAO,EAAE,OAAO,GAAG,SAAS,GAAG,UAAU,GAAG,WAAW,CAAA;IACvD,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,MAAM,CAAA;CACf;AAMD;;;mEAGmE;AACnE,MAAM,WAAW,cAAc;IAC7B,4EAA4E;IAC5E,QAAQ,EAAE,OAAO,CAAA;IACjB,gEAAgE;IAChE,MAAM,CAAC,EAAE,SAAS,GAAG,gBAAgB,GAAG,WAAW,GAAG,YAAY,GAAG,SAAS,CAAA;IAC9E,sEAAsE;IACtE,iBAAiB,CAAC,EAAE,MAAM,CAAA;CAC3B;AAMD;;;;+EAI+E;AAC/E,MAAM,WAAW,YAAY;IAC3B;6DACyD;IACzD,MAAM,EAAE,QAAQ,CAAA;IAChB,EAAE,EAAE,MAAM,CAAA;CACX;AAED;;sEAEsE;AACtE,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,YAAY,CAAA;IACrB;gFAC4E;IAC5E,MAAM,CAAC,EAAE,MAAM,CAAA;IACf;8BAC0B;IAC1B,eAAe,EAAE,MAAM,CAAA;CACxB;AAED;wEACwE;AACxE,MAAM,MAAM,aAAa,GACrB,qEAAqE,CAAA;AAEzE;;;8BAG8B;AAC9B,MAAM,WAAW,wBAAwB;IACvC,8CAA8C;IAC9C,GAAG,EAAE,MAAM,CAAA;IACX,gEAAgE;IAChE,GAAG,EAAE,MAAM,CAAA;IACX,iEAAiE;IACjE,GAAG,EAAE,MAAM,CAAA;IACX;;;;0DAIsD;IACtD,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAA;IACvB,+DAA+D;IAC/D,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,uEAAuE;IACvE,MAAM,EAAE,MAAM,CAAC,aAAa,EAAE,mBAAmB,CAAC,CAAA;CACnD;AAMD;;;;yEAIyE;AACzE,MAAM,MAAM,sBAAsB,GAC9B;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GAC9B;IAAE,IAAI,EAAE,KAAK,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAA;AAEhC;;oEAEoE;AACpE,MAAM,WAAW,6BAA6B;IAC5C,MAAM,EAAE,OAAO,GAAG,MAAM,CAAA;IACxB,UAAU,CAAC,EAAE,OAAO,CAAA;CACrB;AAED;;;;;;;;;;qDAUqD;AACrD,MAAM,WAAW,qBAAqB;IACpC;2CACuC;IACvC,aAAa,EAAE,MAAM,CAAA;IACrB,6CAA6C;IAC7C,aAAa,EAAE,sBAAsB,CAAA;IACrC;;;;4DAIwD;IACxD,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,yDAAyD;IACzD,WAAW,EAAE,MAAM,CAAA;IACnB;;;sBAGkB;IAClB,oBAAoB,EAAE,MAAM,CAAA;IAC5B;;;;yCAIqC;IACrC,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,iEAAiE;IACjE,QAAQ,EAAE,6BAA6B,CAAA;IACvC;0EACsE;IACtE,iBAAiB,CAAC,EAAE,cAAc,CAAA;CACnC;AAED;;;;qDAIqD;AACrD,MAAM,WAAW,2BAA4B,SAAQ,qBAAqB;IACxE,YAAY,EAAE,MAAM,CAAA;IACpB,eAAe,EAAE,MAAM,CAAA;IACvB,SAAS,EAAE,MAAM,CAAA;CAClB;AAED;;8CAE8C;AAC9C,MAAM,MAAM,sBAAsB,GAC9B,iBAAiB,GACjB,aAAa,GACb,cAAc,GACd,iBAAiB,GACjB,oBAAoB,GACpB,yBAAyB,GACzB,uBAAuB,CAAA;AAE3B;;+EAE+E;AAC/E,MAAM,WAAW,uBAAuB;IACtC,KAAK,EAAE,OAAO,CAAA;IACd,MAAM,EAAE,MAAM,CAAA;CACf"}
|
|
@@ -1,4 +1,5 @@
|
|
|
1
|
-
// Copyright
|
|
1
|
+
// Copyright (c) 2026 Tymofii Pidlisnyi
|
|
2
|
+
// SPDX-License-Identifier: Apache-2.0
|
|
2
3
|
// ══════════════════════════════════════════════════════════════════
|
|
3
4
|
// W2-B3. Revocation enforcement - type surface (additive, optional)
|
|
4
5
|
// ══════════════════════════════════════════════════════════════════
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../src/v2/revocation-enforcement/types.ts"],"names":[],"mappings":"AAAA,
|
|
1
|
+
{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../src/v2/revocation-enforcement/types.ts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,sCAAsC;AACtC,qEAAqE;AACrE,oEAAoE;AACpE,qEAAqE;AACrE,+DAA+D;AAC/D,qEAAqE;AACrE,qEAAqE;AACrE,qEAAqE;AACrE,EAAE;AACF,sEAAsE;AACtE,qEAAqE;AACrE,qEAAqE;AACrE,iEAAiE;AACjE,EAAE;AACF,0EAA0E;AAC1E,uEAAuE;AACvE,oEAAoE;AACpE,yEAAyE"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"root-transition.d.ts","sourceRoot":"","sources":["../../../src/v2/root-transition.ts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"root-transition.d.ts","sourceRoot":"","sources":["../../../src/v2/root-transition.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,CAAA"}
|
|
@@ -1,4 +1,5 @@
|
|
|
1
|
-
// Copyright
|
|
1
|
+
// Copyright (c) 2026 Tymofii Pidlisnyi
|
|
2
|
+
// SPDX-License-Identifier: Apache-2.0
|
|
2
3
|
// Moved to @aeoess/gateway on 2026-04-17. See MIGRATION.md.
|
|
3
4
|
// This module was reclassified as product intelligence and relocated out
|
|
4
5
|
// of the public SDK under the AAIF boundary refactor.
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"root-transition.js","sourceRoot":"","sources":["../../../src/v2/root-transition.ts"],"names":[],"mappings":"AAAA,
|
|
1
|
+
{"version":3,"file":"root-transition.js","sourceRoot":"","sources":["../../../src/v2/root-transition.ts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,sCAAsC;AACtC,4DAA4D;AAC5D,yEAAyE;AACzE,sDAAsD;AAEtD,MAAM,IAAI,KAAK,CACb,0EAA0E;IAC1E,kEAAkE,CACnE,CAAA"}
|
|
@@ -1,4 +1,5 @@
|
|
|
1
|
-
// Copyright
|
|
1
|
+
// Copyright (c) 2026 Tymofii Pidlisnyi
|
|
2
|
+
// SPDX-License-Identifier: Apache-2.0
|
|
2
3
|
import { describe, it } from 'node:test';
|
|
3
4
|
import assert from 'node:assert/strict';
|
|
4
5
|
import { SCOPE_REGISTRY_VERSION, CANONICAL_DIMENSIONS, buildRegistry, classifyDimensions, compileStrictDimensions, checkSetNarrowing, canHardDeny, } from '../index.js';
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"scope-registry.test.js","sourceRoot":"","sources":["../../../../../src/v2/scope-registry/__tests__/scope-registry.test.ts"],"names":[],"mappings":"AAAA,
|
|
1
|
+
{"version":3,"file":"scope-registry.test.js","sourceRoot":"","sources":["../../../../../src/v2/scope-registry/__tests__/scope-registry.test.ts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,sCAAsC;AACtC,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,WAAW,CAAA;AACxC,OAAO,MAAM,MAAM,oBAAoB,CAAA;AAEvC,OAAO,EACL,sBAAsB,EACtB,oBAAoB,EACpB,aAAa,EACb,kBAAkB,EAClB,uBAAuB,EACvB,iBAAiB,EACjB,WAAW,GAGZ,MAAM,aAAa,CAAA;AAGpB,0EAA0E;AAE1E,QAAQ,CAAC,wCAAwC,EAAE,GAAG,EAAE;IACtD,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QACzD,MAAM,CAAC,GAAG,aAAa,EAAE,CAAA;QACzB,MAAM,CAAC,GAAG,aAAa,EAAE,CAAA;QACzB,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,sBAAsB,CAAC,CAAA;QAC/C,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,YAAY,CAAC,CAAA;QAC5C,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,EAAE,gBAAgB,CAAC,CAAA;IAChD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,+BAA+B,EAAE,GAAG,EAAE;QACvC,MAAM,GAAG,GAAG,aAAa,EAAE,CAAA;QAC3B,MAAM,GAAG,GAAG,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;QAC3C,MAAM,MAAM,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC,IAAI,EAAE,CAAA;QAC9B,MAAM,CAAC,SAAS,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;IAC/B,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,iEAAiE,EAAE,GAAG,EAAE;QACzE,MAAM,GAAG,GAAG,aAAa,EAAE,CAAA;QAC3B,MAAM,SAAS,GAAG,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,YAAY,CAAC,CAAA;QACnE,MAAM,WAAW,GAAG,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,aAAa,CAAC,CAAA;QACtE,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,uBAAuB,CAAC,CAAA;QAC7C,MAAM,CAAC,EAAE,CAAC,WAAW,EAAE,wBAAwB,CAAC,CAAA;QAChD,MAAM,CAAC,KAAK,CAAC,SAAU,CAAC,SAAS,EAAE,IAAI,CAAC,CAAA;QACxC,MAAM,CAAC,KAAK,CAAC,SAAU,CAAC,oBAAoB,EAAE,QAAQ,CAAC,CAAA;QACvD,MAAM,CAAC,KAAK,CAAC,SAAU,CAAC,eAAe,EAAE,0BAA0B,CAAC,CAAA;QACpE,MAAM,CAAC,KAAK,CAAC,WAAY,CAAC,SAAS,EAAE,IAAI,CAAC,CAAA;QAC1C,MAAM,CAAC,KAAK,CAAC,WAAY,CAAC,oBAAoB,EAAE,QAAQ,CAAC,CAAA;QACzD,qEAAqE;QACrE,sDAAsD;QACtD,MAAM,CAAC,KAAK,CAAC,SAAU,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;QACtC,MAAM,CAAC,KAAK,CAAC,WAAY,CAAC,KAAK,EAAE,aAAa,CAAC,CAAA;IACjD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC1C,MAAM,GAAG,GAAG,CAAC,GAAG,oBAAoB,EAAE,oBAAoB,CAAC,CAAC,CAAC,CAAC,CAAA;QAC9D,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,wBAAwB,CAAC,CAAA;IACnE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QACzD,MAAM,GAAG,GAAyB;YAChC,EAAE,EAAE,OAAO;YACX,KAAK,EAAE,OAAO;YACd,SAAS,EAAE,MAAM;YACjB,SAAS,EAAE,KAAK;YAChB,oBAAoB,EAAE,QAAQ,EAAE,gCAAgC;YAChE,eAAe,EAAE,sBAAsB;YACvC,OAAO,EAAE,yBAAyB;SACnC,CAAA;QACD,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,oBAAoB,CAAC,CAAA;IACjE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QACzD,MAAM,GAAG,GAAyB;YAChC,EAAE,EAAE,OAAO;YACX,KAAK,EAAE,OAAO;YACd,SAAS,EAAE,MAAM;YACjB,SAAS,EAAE,IAAI,EAAE,mCAAmC;YACpD,oBAAoB,EAAE,UAAU;YAChC,eAAe,EAAE,wBAAwB;YACzC,OAAO,EAAE,4BAA4B;SACtC,CAAA;QACD,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,4BAA4B,CAAC,CAAA;IACzE,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,2EAA2E;AAE3E,QAAQ,CAAC,0CAA0C,EAAE,GAAG,EAAE;IACxD,MAAM,GAAG,GAAG,aAAa,EAAE,CAAA;IAC3B,MAAM,GAAG,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAA;IAEnC,EAAE,CAAC,yEAAyE,EAAE,GAAG,EAAE;QACjF,KAAK,MAAM,EAAE,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,CAAC,EAAE,CAAC;YACtF,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,gBAAgB,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,GAAG,EAAE,sBAAsB,CAAC,CAAA;QAC3E,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,+EAA+E,EAAE,GAAG,EAAE;QACvF,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,iBAAiB,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAA;QACpD,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC,CAAA;QAC1C,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,gBAAgB,CAAC,SAAS,CAAC,EAAE,eAAe,CAAC,CAAA;IAChE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC5D,MAAM,GAAG,GAAG,CAAC,GAAG,GAAG,CAAC,gBAAgB,EAAE,GAAG,GAAG,CAAC,iBAAiB,CAAC,CAAC,IAAI,EAAE,CAAA;QACtE,MAAM,GAAG,GAAG,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;QAClD,MAAM,CAAC,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;IAC5B,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,0EAA0E,EAAE,GAAG,EAAE;QAClF,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,eAAe,CAAC,MAAM,IAAI,CAAC,CAAC,CAAA;QACpD,MAAM,CAAC,EAAE,CACP,GAAG,CAAC,SAAS,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CACrF,CAAA;IACH,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,2EAA2E;AAE3E,QAAQ,CAAC,+DAA+D,EAAE,GAAG,EAAE;IAC7E,MAAM,GAAG,GAAG,aAAa,EAAE,CAAA;IAE3B,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,MAAM,KAAK,GAAG,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,OAAO,CAAE,CAAA;QAC3D,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,CAAA;IACxC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;QACjD,MAAM,OAAO,GAAG,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,SAAS,CAAE,CAAA;QAC/D,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,CAAA;IAC3C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,0EAA0E,EAAE,GAAG,EAAE;QAClF,MAAM,OAAO,GAAG,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,SAAS,CAAE,CAAA;QAC/D,yEAAyE;QACzE,mEAAmE;QACnE,MAAM,GAAG,GAAG,iBAAiB,CAAC,OAAO,EAAE,CAAC,WAAW,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC,CAAA;QACrE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAA;QAC1C,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;QAChC,MAAM,CAAC,EAAE,CAAC,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAA;IACjD,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,2EAA2E;AAE3E,QAAQ,CAAC,qEAAqE,EAAE,GAAG,EAAE;IACnF,MAAM,GAAG,GAAG,aAAa,EAAE,CAAA;IAC3B,MAAM,WAAW,GAAG,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,aAAa,CAAE,CAAA;IAEvE,EAAE,CAAC,+BAA+B,EAAE,GAAG,EAAE;QACvC,MAAM,GAAG,GAAG,iBAAiB,CAC3B,WAAW,EACX,CAAC,iBAAiB,EAAE,gBAAgB,EAAE,iBAAiB,CAAC,EACxD,CAAC,iBAAiB,EAAE,gBAAgB,CAAC,CACtC,CAAA;QACD,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;QAC/B,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;QAChC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC,CAAA;IACnC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,6BAA6B,EAAE,GAAG,EAAE;QACrC,MAAM,GAAG,GAAG,iBAAiB,CAAC,WAAW,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAA;QAClE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;QAC/B,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAClC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,qFAAqF,EAAE,GAAG,EAAE;QAC7F,MAAM,GAAG,GAAG,iBAAiB,CAC3B,WAAW,EACX,CAAC,iBAAiB,CAAC,EACnB,CAAC,iBAAiB,EAAE,kBAAkB,CAAC,CACxC,CAAA;QACD,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;QAChC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;QAChC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAA;IACrD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,kEAAkE,EAAE,GAAG,EAAE;QAC1E,MAAM,GAAG,GAAG,iBAAiB,CAAC,WAAW,EAAE,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAA;QAC5D,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;QAChC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,UAAU,CAAC,CAAC,CAAA;IAC7C,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,+DAA+D,EAAE,GAAG,EAAE;IAC7E,MAAM,GAAG,GAAG,aAAa,EAAE,CAAA;IAC3B,MAAM,SAAS,GAAG,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,YAAY,CAAE,CAAA;IAEpE,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;QAClE,MAAM,GAAG,GAAG,iBAAiB,CAC3B,SAAS,EACT,CAAC,QAAQ,EAAE,UAAU,EAAE,cAAc,CAAC,EACtC,CAAC,QAAQ,EAAE,UAAU,CAAC,CACvB,CAAA;QACD,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;QAC/B,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;QAChC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC,CAAA;IACnC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,yEAAyE,EAAE,GAAG,EAAE;QACjF,MAAM,GAAG,GAAG,iBAAiB,CAAC,SAAS,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAA;QACvE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;QAChC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;QAChC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC,CAAA;IACxC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;QACrE,MAAM,GAAG,GAAG,iBAAiB,CAAC,SAAS,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC,CAAA;QAC9E,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;QAChC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;QAChC,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAA;QAC7C,MAAM,CAAC,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAA;IAClD,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,2EAA2E;AAE3E,QAAQ,CAAC,2DAA2D,EAAE,GAAG,EAAE;IACzE,MAAM,KAAK,GAA4B;QACrC,MAAM,EAAE,EAAE,aAAa,EAAE,WAAW,EAAE,KAAK,EAAE,EAAE,EAAE,WAAW,EAAE,sBAAsB,EAAE;QACtF,UAAU,EAAE;YACV,KAAK,EAAE,CAAC,WAAW,EAAE,YAAY,CAAC;YAClC,UAAU,EAAE,GAAG;YACf,WAAW,EAAE,CAAC;YACd,QAAQ,EAAE,CAAC;YACX,YAAY,EAAE,CAAC;YACf,SAAS,EAAE,sBAAsB;YACjC,SAAS,EAAE,sBAAsB;YACjC,OAAO,EAAE,KAAK;SACf;KACF,CAAA;IAED,EAAE,CAAC,8DAA8D,EAAE,GAAG,EAAE;QACtE,MAAM,EAAE,GAAG,uBAAuB,CAAC,KAAK,CAAC,CAAA;QACzC,uEAAuE;QACvE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,SAAS,CAAC,CAAA;QACjC,MAAM,aAAa,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;QAC5D,MAAM,CAAC,EAAE,CAAC,aAAa,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC,CAAA;QAClD,MAAM,CAAC,EAAE,CAAC,aAAa,CAAC,QAAQ,CAAC,oBAAoB,CAAC,CAAC,CAAA;QACvD,MAAM,CAAC,EAAE,CAAC,aAAa,CAAC,QAAQ,CAAC,oBAAoB,CAAC,CAAC,CAAA;QACvD,MAAM,CAAC,EAAE,CAAC,aAAa,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC,CAAA;IACxD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;QAC9D,MAAM,CAAC,GAAG,uBAAuB,CAAC,KAAK,CAAC,CAAA;QACxC,MAAM,CAAC,GAAG,uBAAuB,CAAC,KAAK,CAAC,CAAA;QACxC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,UAAU,CAAC,CAAA;IAC1C,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,2EAA2E;AAE3E,QAAQ,CAAC,uCAAuC,EAAE,GAAG,EAAE;IACrD,EAAE,CAAC,yEAAyE,EAAE,GAAG,EAAE;QACjF,MAAM,CAAC,GAA2B,aAAa,EAAE,CAAA;QACjD,MAAM,CAAC,GAA2B,aAAa,EAAE,CAAA;QACjD,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,YAAY,CAAC,CAAA;QAC5C,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,UAAU,CAAC,CAAA;IAC9C,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/v2/scope-registry/index.ts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/v2/scope-registry/index.ts"],"names":[],"mappings":"AAoBA,YAAY,EACV,kBAAkB,EAClB,mBAAmB,EACnB,oBAAoB,EACpB,mBAAmB,EACnB,uBAAuB,EACvB,wBAAwB,GACzB,MAAM,YAAY,CAAA;AAEnB,OAAO,EACL,sBAAsB,EACtB,oBAAoB,EACpB,aAAa,EACb,kBAAkB,EAClB,uBAAuB,EACvB,iBAAiB,EACjB,WAAW,GACZ,MAAM,eAAe,CAAA;AACtB,YAAY,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAA"}
|
|
@@ -1,4 +1,5 @@
|
|
|
1
|
-
// Copyright
|
|
1
|
+
// Copyright (c) 2026 Tymofii Pidlisnyi
|
|
2
|
+
// SPDX-License-Identifier: Apache-2.0
|
|
2
3
|
// ══════════════════════════════════════════════════════════════════════
|
|
3
4
|
// Scope Dimension Registry. Public barrel.
|
|
4
5
|
// ══════════════════════════════════════════════════════════════════════
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/v2/scope-registry/index.ts"],"names":[],"mappings":"AAAA,
|
|
1
|
+
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/v2/scope-registry/index.ts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,sCAAsC;AACtC,yEAAyE;AACzE,2CAA2C;AAC3C,yEAAyE;AACzE,EAAE;AACF,uEAAuE;AACvE,qEAAqE;AACrE,qEAAqE;AACrE,uEAAuE;AACvE,2EAA2E;AAC3E,4BAA4B;AAC5B,EAAE;AACF,sEAAsE;AACtE,wEAAwE;AACxE,iDAAiD;AACjD,EAAE;AACF,0DAA0D;AAC1D,yEAAyE;AAWzE,OAAO,EACL,sBAAsB,EACtB,oBAAoB,EACpB,aAAa,EACb,kBAAkB,EAClB,uBAAuB,EACvB,iBAAiB,EACjB,WAAW,GACZ,MAAM,eAAe,CAAA"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../../../src/v2/scope-registry/registry.ts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../../../src/v2/scope-registry/registry.ts"],"names":[],"mappings":"AA2BA,OAAO,EAEL,KAAK,uBAAuB,EAC5B,KAAK,aAAa,EACnB,MAAM,yBAAyB,CAAA;AAEhC,OAAO,KAAK,EACV,oBAAoB,EACpB,uBAAuB,EACvB,wBAAwB,EACzB,MAAM,YAAY,CAAA;AAEnB,gFAAgF;AAChF,eAAO,MAAM,sBAAsB,UAAU,CAAA;AA4G7C,qEAAqE;AACrE,eAAO,MAAM,oBAAoB,EAAE,SAAS,oBAAoB,EAQE,CAAA;AAIlE,+EAA+E;AAC/E,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,MAAM,CAAA;IACf,kCAAkC;IAClC,UAAU,EAAE,oBAAoB,EAAE,CAAA;IAClC,gFAAgF;IAChF,YAAY,EAAE,MAAM,CAAA;CACrB;AAED;;2EAE2E;AAC3E,wBAAgB,aAAa,CAC3B,UAAU,GAAE,SAAS,oBAAoB,EAAyB,GACjE,sBAAsB,CA0BxB;AAWD;;6EAE6E;AAC7E,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,sBAAsB,GAC/B,uBAAuB,CAgCzB;AAID;;;sEAGsE;AACtE,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,uBAAuB,GAC7B,aAAa,CAEf;AASD;;;;;;mEAMmE;AACnE,wBAAgB,iBAAiB,CAC/B,WAAW,EAAE,oBAAoB,EACjC,WAAW,EAAE,MAAM,EAAE,EACrB,UAAU,EAAE,MAAM,EAAE,GACnB,wBAAwB,CAqD1B;AAED;;;iDAGiD;AACjD,wBAAgB,WAAW,CAAC,WAAW,EAAE,oBAAoB,GAAG,OAAO,CAEtE"}
|
|
@@ -1,4 +1,5 @@
|
|
|
1
|
-
// Copyright
|
|
1
|
+
// Copyright (c) 2026 Tymofii Pidlisnyi
|
|
2
|
+
// SPDX-License-Identifier: Apache-2.0
|
|
2
3
|
// ══════════════════════════════════════════════════════════════════════
|
|
3
4
|
// Scope Dimension Registry. Classification, narrowing, and M6 routing.
|
|
4
5
|
// ══════════════════════════════════════════════════════════════════════
|