@openvtc/trust-tasks 0.1.0

package/README.md

@@ -0,0 +1,110 @@
+# @openvtc/trust-tasks
+
+Generated TypeScript bindings for the [Trust Tasks
+framework](https://trusttasks.org) registry.
+
+Every spec under [`dtgwg-trust-tasks-tf/specs/`](https://github.com/trustoverip/dtgwg-trust-tasks-tf/tree/main/specs)
+that defines a `payload.schema.json` is compiled — via
+`scripts/build-ts-bindings.mjs` (json-schema-to-typescript) — to a
+TypeScript module under
+[`src/<slug>/<version>/payload.ts`](https://github.com/trustoverip/dtgwg-trust-tasks-tf/tree/main/trust-tasks-ts/src),
+giving you a typed `Payload` and (where the spec defines one)
+`Response` interface for each Trust Task. The package's root
+`index.ts` re-exports every module under a stable name keyed by the
+spec slug.
+
+The Rust counterpart is [`trust-tasks-rs`](https://crates.io/crates/trust-tasks-rs);
+both crates are regenerated together so the Rust and TypeScript wire
+shapes stay byte-identical.
+
+## Install
+
+```sh
+npm install @openvtc/trust-tasks
+```
+
+## Usage
+
+```ts
+import { AclGrant_v0_1, DidManagementDidRegister_v0_1 } from "@openvtc/trust-tasks";
+
+// Compose a request payload, type-checked against the spec's
+// payload.schema.json.
+const grant: AclGrant_v0_1.Payload = {
+  subject: "did:key:z6MkAlice",
+  role: "admin",
+  after: { /* … */ },
+};
+
+// Each module exports the Response sub-schema too when the spec
+// defines one — the framework's #response fragment convention.
+const reply: AclGrant_v0_1.Response = {
+  entry: { /* … */ },
+};
+
+// did-management example.
+const register: DidManagementDidRegister_v0_1.Payload = {
+  path: "alice",
+  method: "webvh",
+  didData: "{\"versionId\":\"1-…\",…}",
+};
+```
+
+For the full list of generated modules, see [`src/index.ts`](https://github.com/trustoverip/dtgwg-trust-tasks-tf/blob/main/trust-tasks-ts/src/index.ts)
+or the [website index](https://trusttasks.org/).
+
+## Module layout
+
+Each spec lands at a stable path:
+
+```
+src/
+├── acl/grant/0.1/payload.ts           // AclGrant_v0_1
+├── auth/authenticate/0.1/payload.ts   // AuthAuthenticate_v0_1
+├── did-management/did/register/0.1/
+│   └── payload.ts                     // DidManagementDidRegister_v0_1
+├── vault/proxy-login/0.1/payload.ts   // VaultProxyLogin_v0_1
+└── …
+```
+
+Slug `/` separators in the URI map to directory boundaries; the
+exported name is generated by Pascal-casing the slug segments and
+appending `_v<MAJOR>_<MINOR>`. Multiple versions of the same spec
+land in sibling directories (`0.1/`, `1.0/`, …) and export
+distinct names — there is no "latest" alias by design.
+
+## Validating payloads at runtime
+
+This package ships TypeScript types only — it does not bundle a
+JSON-Schema validator. If you need runtime validation, fetch the
+`payload.schema.json` from
+`https://trusttasks.org/spec/<slug>/<version>` and feed it to
+[`ajv`](https://www.npmjs.com/package/ajv) or any other Draft 2020-12
+validator.
+
+## Versioning
+
+The package version (`MAJOR.MINOR.PATCH`) tracks the framework
+spec's [`SPEC.md` revision](https://trusttasks.org/SPEC) `MAJOR.MINOR`
+with the patch component bumped per published binding revision. A
+bump in any individual spec's `MAJOR.MINOR` ships as a new exported
+module name (e.g. `AclGrant_v1_0` alongside `AclGrant_v0_1`); the
+package version itself only bumps when the binding-generation or
+re-exported surface changes.
+
+The Rust crate `trust-tasks-rs` follows the same release cadence.
+
+## License
+
+Apache-2.0. See [LICENSE.md](https://github.com/trustoverip/dtgwg-trust-tasks-tf/blob/main/LICENSE.md)
+at the repo root.
+
+## Contributing
+
+This package is generated, not authored by hand. To change the
+exported surface, add or modify a spec under `specs/` in the
+[dtgwg-trust-tasks-tf](https://github.com/trustoverip/dtgwg-trust-tasks-tf)
+repo and run `npm run build-ts-bindings` from the repo root. The
+generator updates this package's `src/` tree atomically. See
+[`CONTRIBUTING-SPECS.md`](https://github.com/trustoverip/dtgwg-trust-tasks-tf/blob/main/CONTRIBUTING-SPECS.md)
+for the spec authoring guide.

package/dist/_framework/0.1/framework.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
+ * Source: specs/_framework/0.1/framework.schema.json
+ */
+/**
+ * Reusable $defs cross-referenced by individual Trust Task specifications. Not itself a Trust Task specification — the `_framework` directory is skipped by the registry build (folders starting with `_` are not discovered) and by the codegen (which only triggers on payload.schema.json). See SPEC.md §4.5.1 for the normative description of `ext`.
+ */
+export interface TrustTasksFrameworkReusableJSONSchemaDefinitions {
+    [k: string]: unknown | undefined;
+}
+//# sourceMappingURL=framework.d.ts.map

package/dist/_framework/0.1/framework.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"framework.d.ts","sourceRoot":"","sources":["../../../src/_framework/0.1/framework.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;GAEG;AACH,MAAM,WAAW,gDAAgD;IAC/D,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC;CAClC"}

package/dist/_framework/0.1/framework.js

@@ -0,0 +1,6 @@
+/**
+ * Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
+ * Source: specs/_framework/0.1/framework.schema.json
+ */
+export {};
+//# sourceMappingURL=framework.js.map

package/dist/_framework/0.1/framework.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"framework.js","sourceRoot":"","sources":["../../../src/_framework/0.1/framework.ts"],"names":[],"mappings":"AAAA;;;GAGG"}

package/dist/acl/_shared/0.1/acl-entry.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
+ * Source: specs/acl/_shared/0.1/acl-entry.schema.json
+ */
+/**
+ * Canonical AclEntry $def referenced by every acl/* specification. Not itself a Trust Task specification (the `_shared` folder is skipped by the registry build and the codegen). Producers and consumers comparing entries across acl/* tasks rely on a single shape; this file is the single source of truth.
+ *
+ * Timestamp invariants (SHOULD-level, prose — not expressible in JSON Schema): when both `createdAt` and `updatedAt` are present, `updatedAt >= createdAt`; when both `createdAt` and `expiresAt` are present, `expiresAt > createdAt`. Consumers SHOULD reject documents that violate either.
+ */
+export interface AclEntrySharedDefinitionForTheAclSpecFamily {
+    [k: string]: unknown | undefined;
+}
+//# sourceMappingURL=acl-entry.d.ts.map

package/dist/acl/_shared/0.1/acl-entry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"acl-entry.d.ts","sourceRoot":"","sources":["../../../../src/acl/_shared/0.1/acl-entry.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;;;GAIG;AACH,MAAM,WAAW,2CAA2C;IAC1D,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC;CAClC"}

package/dist/acl/_shared/0.1/acl-entry.js

@@ -0,0 +1,6 @@
+/**
+ * Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
+ * Source: specs/acl/_shared/0.1/acl-entry.schema.json
+ */
+export {};
+//# sourceMappingURL=acl-entry.js.map

package/dist/acl/_shared/0.1/acl-entry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"acl-entry.js","sourceRoot":"","sources":["../../../../src/acl/_shared/0.1/acl-entry.ts"],"names":[],"mappings":"AAAA;;;GAGG"}

package/dist/acl/change-role/0.1/payload.d.ts

@@ -0,0 +1,34 @@
+/**
+ * Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
+ * Source: specs/acl/change-role/0.1/payload.schema.json
+ */
+export interface ACLChangeRolePayload {
+    /**
+     * VID of the party whose role is changing.
+     */
+    subject: string;
+    /**
+     * The subject's prior role. Used by the maintainer for the optimistic concurrency check.
+     */
+    fromRole: string;
+    /**
+     * The role to transition the subject to.
+     */
+    toRole: string;
+    /**
+     * Optional human-readable rationale.
+     */
+    reason?: string;
+    ext?: Ext;
+}
+/**
+ * Ecosystem-defined extension members per SPEC.md §4.5.1.
+ */
+export interface Ext {
+    [k: string]: unknown | undefined;
+}
+/** Trust Task type URI. */
+export declare const TYPE_URI: "https://trusttasks.org/spec/acl/change-role/0.1";
+/** Trust Task response type URI (request type URI + "#response"). */
+export declare const RESPONSE_TYPE_URI: "https://trusttasks.org/spec/acl/change-role/0.1#response";
+//# sourceMappingURL=payload.d.ts.map

package/dist/acl/change-role/0.1/payload.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"payload.d.ts","sourceRoot":"","sources":["../../../../src/acl/change-role/0.1/payload.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,MAAM,WAAW,oBAAoB;IACnC;;OAEG;IACH,OAAO,EAAE,MAAM,CAAC;IAChB;;OAEG;IACH,QAAQ,EAAE,MAAM,CAAC;IACjB;;OAEG;IACH,MAAM,EAAE,MAAM,CAAC;IACf;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,GAAG,CAAC,EAAE,GAAG,CAAC;CACX;AACD;;GAEG;AACH,MAAM,WAAW,GAAG;IAClB,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC;CAClC;AAED,2BAA2B;AAC3B,eAAO,MAAM,QAAQ,EAAG,iDAA0D,CAAC;AAEnF,qEAAqE;AACrE,eAAO,MAAM,iBAAiB,EAAG,0DAAmE,CAAC"}

package/dist/acl/change-role/0.1/payload.js

@@ -0,0 +1,9 @@
+/**
+ * Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
+ * Source: specs/acl/change-role/0.1/payload.schema.json
+ */
+/** Trust Task type URI. */
+export const TYPE_URI = "https://trusttasks.org/spec/acl/change-role/0.1";
+/** Trust Task response type URI (request type URI + "#response"). */
+export const RESPONSE_TYPE_URI = "https://trusttasks.org/spec/acl/change-role/0.1#response";
+//# sourceMappingURL=payload.js.map

package/dist/acl/change-role/0.1/payload.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"payload.js","sourceRoot":"","sources":["../../../../src/acl/change-role/0.1/payload.ts"],"names":[],"mappings":"AAAA;;;GAGG;AA4BH,2BAA2B;AAC3B,MAAM,CAAC,MAAM,QAAQ,GAAG,iDAA0D,CAAC;AAEnF,qEAAqE;AACrE,MAAM,CAAC,MAAM,iBAAiB,GAAG,0DAAmE,CAAC"}

package/dist/acl/grant/0.1/payload.d.ts

@@ -0,0 +1,65 @@
+/**
+ * Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
+ * Source: specs/acl/grant/0.1/payload.schema.json
+ */
+export interface ACLGrantPayload {
+    entry: AclEntry;
+    /**
+     * Optional human-readable rationale.
+     */
+    reason?: string;
+    ext?: Ext1;
+}
+/**
+ * The AclEntry the producer wants the maintainer to hold for the subject (intent). The maintainer's response carries the realized AclEntry it now holds.
+ */
+export interface AclEntry {
+    /**
+     * VID of the party in the ACL. Compared by exact string equality (SPEC.md §4.8); producers SHOULD emit canonical form.
+     */
+    subject: string;
+    /**
+     * Opaque role identifier interpreted by the ACL maintainer.
+     */
+    role: string;
+    /**
+     * Opaque scope identifiers (e.g. contexts, domains, resource prefixes).
+     */
+    scopes?: string[];
+    /**
+     * Optional human-readable label.
+     */
+    label?: string;
+    createdAt?: string;
+    /**
+     * VID of the party that originally added this entry.
+     */
+    createdBy?: string;
+    updatedAt?: string;
+    /**
+     * VID of the party that last modified this entry.
+     */
+    updatedBy?: string;
+    /**
+     * Optional time after which the entry is no longer effective.
+     */
+    expiresAt?: string;
+    ext?: Ext;
+}
+/**
+ * Ecosystem-defined extension members per SPEC.md §4.5.1. Reverse-DNS-namespaced; consumers MUST ignore unrecognized namespaces.
+ */
+export interface Ext {
+    [k: string]: unknown | undefined;
+}
+/**
+ * Ecosystem-defined extension members per SPEC.md §4.5.1.
+ */
+export interface Ext1 {
+    [k: string]: unknown | undefined;
+}
+/** Trust Task type URI. */
+export declare const TYPE_URI: "https://trusttasks.org/spec/acl/grant/0.1";
+/** Trust Task response type URI (request type URI + "#response"). */
+export declare const RESPONSE_TYPE_URI: "https://trusttasks.org/spec/acl/grant/0.1#response";
+//# sourceMappingURL=payload.d.ts.map

package/dist/acl/grant/0.1/payload.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"payload.d.ts","sourceRoot":"","sources":["../../../../src/acl/grant/0.1/payload.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,QAAQ,CAAC;IAChB;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,GAAG,CAAC,EAAE,IAAI,CAAC;CACZ;AACD;;GAEG;AACH,MAAM,WAAW,QAAQ;IACvB;;OAEG;IACH,OAAO,EAAE,MAAM,CAAC;IAChB;;OAEG;IACH,IAAI,EAAE,MAAM,CAAC;IACb;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,GAAG,CAAC,EAAE,GAAG,CAAC;CACX;AACD;;GAEG;AACH,MAAM,WAAW,GAAG;IAClB,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC;CAClC;AACD;;GAEG;AACH,MAAM,WAAW,IAAI;IACnB,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC;CAClC;AAED,2BAA2B;AAC3B,eAAO,MAAM,QAAQ,EAAG,2CAAoD,CAAC;AAE7E,qEAAqE;AACrE,eAAO,MAAM,iBAAiB,EAAG,oDAA6D,CAAC"}

package/dist/acl/grant/0.1/payload.js

@@ -0,0 +1,9 @@
+/**
+ * Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
+ * Source: specs/acl/grant/0.1/payload.schema.json
+ */
+/** Trust Task type URI. */
+export const TYPE_URI = "https://trusttasks.org/spec/acl/grant/0.1";
+/** Trust Task response type URI (request type URI + "#response"). */
+export const RESPONSE_TYPE_URI = "https://trusttasks.org/spec/acl/grant/0.1#response";
+//# sourceMappingURL=payload.js.map

package/dist/acl/grant/0.1/payload.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"payload.js","sourceRoot":"","sources":["../../../../src/acl/grant/0.1/payload.ts"],"names":[],"mappings":"AAAA;;;GAGG;AA2DH,2BAA2B;AAC3B,MAAM,CAAC,MAAM,QAAQ,GAAG,2CAAoD,CAAC;AAE7E,qEAAqE;AACrE,MAAM,CAAC,MAAM,iBAAiB,GAAG,oDAA6D,CAAC"}

package/dist/acl/list/0.1/payload.d.ts

@@ -0,0 +1,38 @@
+/**
+ * Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
+ * Source: specs/acl/list/0.1/payload.schema.json
+ */
+export interface ACLListPayload {
+    /**
+     * Optional filter — only entries with this role are returned.
+     */
+    role?: string;
+    /**
+     * Optional filter — only entries whose scopes include this string are returned.
+     */
+    scope?: string;
+    /**
+     * Optional filter — only entries whose subject VID starts with this prefix are returned.
+     */
+    subjectPrefix?: string;
+    /**
+     * Maximum number of entries to return. Maintainer-defined default and ceiling.
+     */
+    pageSize?: number;
+    /**
+     * Opaque continuation token returned by the maintainer in a previous response.
+     */
+    cursor?: string;
+    ext?: Ext;
+}
+/**
+ * Ecosystem-defined extension members per SPEC.md §4.5.1.
+ */
+export interface Ext {
+    [k: string]: unknown | undefined;
+}
+/** Trust Task type URI. */
+export declare const TYPE_URI: "https://trusttasks.org/spec/acl/list/0.1";
+/** Trust Task response type URI (request type URI + "#response"). */
+export declare const RESPONSE_TYPE_URI: "https://trusttasks.org/spec/acl/list/0.1#response";
+//# sourceMappingURL=payload.d.ts.map

package/dist/acl/list/0.1/payload.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"payload.d.ts","sourceRoot":"","sources":["../../../../src/acl/list/0.1/payload.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,MAAM,WAAW,cAAc;IAC7B;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;OAEG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,GAAG,CAAC,EAAE,GAAG,CAAC;CACX;AACD;;GAEG;AACH,MAAM,WAAW,GAAG;IAClB,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC;CAClC;AAED,2BAA2B;AAC3B,eAAO,MAAM,QAAQ,EAAG,0CAAmD,CAAC;AAE5E,qEAAqE;AACrE,eAAO,MAAM,iBAAiB,EAAG,mDAA4D,CAAC"}

package/dist/acl/list/0.1/payload.js

@@ -0,0 +1,9 @@
+/**
+ * Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
+ * Source: specs/acl/list/0.1/payload.schema.json
+ */
+/** Trust Task type URI. */
+export const TYPE_URI = "https://trusttasks.org/spec/acl/list/0.1";
+/** Trust Task response type URI (request type URI + "#response"). */
+export const RESPONSE_TYPE_URI = "https://trusttasks.org/spec/acl/list/0.1#response";
+//# sourceMappingURL=payload.js.map

package/dist/acl/list/0.1/payload.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"payload.js","sourceRoot":"","sources":["../../../../src/acl/list/0.1/payload.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAgCH,2BAA2B;AAC3B,MAAM,CAAC,MAAM,QAAQ,GAAG,0CAAmD,CAAC;AAE5E,qEAAqE;AACrE,MAAM,CAAC,MAAM,iBAAiB,GAAG,mDAA4D,CAAC"}

package/dist/acl/revoke/0.1/payload.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
+ * Source: specs/acl/revoke/0.1/payload.schema.json
+ */
+export interface ACLRevokePayload {
+    /**
+     * VID of the party being revoked (or scope-reduced).
+     */
+    subject: string;
+    /**
+     * If present, the specific scopes to remove from the subject's entry. If absent, the entire entry is removed.
+     *
+     * @minItems 1
+     */
+    scopes?: [string, ...string[]];
+    /**
+     * Optional human-readable rationale for the revocation.
+     */
+    reason?: string;
+    ext?: Ext;
+}
+/**
+ * Ecosystem-defined extension members per SPEC.md §4.5.1.
+ */
+export interface Ext {
+    [k: string]: unknown | undefined;
+}
+/** Trust Task type URI. */
+export declare const TYPE_URI: "https://trusttasks.org/spec/acl/revoke/0.1";
+/** Trust Task response type URI (request type URI + "#response"). */
+export declare const RESPONSE_TYPE_URI: "https://trusttasks.org/spec/acl/revoke/0.1#response";
+//# sourceMappingURL=payload.d.ts.map

package/dist/acl/revoke/0.1/payload.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"payload.d.ts","sourceRoot":"","sources":["../../../../src/acl/revoke/0.1/payload.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,MAAM,WAAW,gBAAgB;IAC/B;;OAEG;IACH,OAAO,EAAE,MAAM,CAAC;IAChB;;;;OAIG;IACH,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;IAC/B;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,GAAG,CAAC,EAAE,GAAG,CAAC;CACX;AACD;;GAEG;AACH,MAAM,WAAW,GAAG;IAClB,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC;CAClC;AAED,2BAA2B;AAC3B,eAAO,MAAM,QAAQ,EAAG,4CAAqD,CAAC;AAE9E,qEAAqE;AACrE,eAAO,MAAM,iBAAiB,EAAG,qDAA8D,CAAC"}

package/dist/acl/revoke/0.1/payload.js

@@ -0,0 +1,9 @@
+/**
+ * Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
+ * Source: specs/acl/revoke/0.1/payload.schema.json
+ */
+/** Trust Task type URI. */
+export const TYPE_URI = "https://trusttasks.org/spec/acl/revoke/0.1";
+/** Trust Task response type URI (request type URI + "#response"). */
+export const RESPONSE_TYPE_URI = "https://trusttasks.org/spec/acl/revoke/0.1#response";
+//# sourceMappingURL=payload.js.map

package/dist/acl/revoke/0.1/payload.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"payload.js","sourceRoot":"","sources":["../../../../src/acl/revoke/0.1/payload.ts"],"names":[],"mappings":"AAAA;;;GAGG;AA0BH,2BAA2B;AAC3B,MAAM,CAAC,MAAM,QAAQ,GAAG,4CAAqD,CAAC;AAE9E,qEAAqE;AACrE,MAAM,CAAC,MAAM,iBAAiB,GAAG,qDAA8D,CAAC"}

package/dist/acl/show/0.1/payload.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
+ * Source: specs/acl/show/0.1/payload.schema.json
+ */
+export interface ACLShowPayload {
+    /**
+     * VID of the party whose entry is being looked up.
+     */
+    subject: string;
+    ext?: Ext;
+}
+/**
+ * Ecosystem-defined extension members per SPEC.md §4.5.1.
+ */
+export interface Ext {
+    [k: string]: unknown | undefined;
+}
+/** Trust Task type URI. */
+export declare const TYPE_URI: "https://trusttasks.org/spec/acl/show/0.1";
+/** Trust Task response type URI (request type URI + "#response"). */
+export declare const RESPONSE_TYPE_URI: "https://trusttasks.org/spec/acl/show/0.1#response";
+//# sourceMappingURL=payload.d.ts.map

package/dist/acl/show/0.1/payload.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"payload.d.ts","sourceRoot":"","sources":["../../../../src/acl/show/0.1/payload.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,MAAM,WAAW,cAAc;IAC7B;;OAEG;IACH,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,CAAC,EAAE,GAAG,CAAC;CACX;AACD;;GAEG;AACH,MAAM,WAAW,GAAG;IAClB,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC;CAClC;AAED,2BAA2B;AAC3B,eAAO,MAAM,QAAQ,EAAG,0CAAmD,CAAC;AAE5E,qEAAqE;AACrE,eAAO,MAAM,iBAAiB,EAAG,mDAA4D,CAAC"}

package/dist/acl/show/0.1/payload.js

@@ -0,0 +1,9 @@
+/**
+ * Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
+ * Source: specs/acl/show/0.1/payload.schema.json
+ */
+/** Trust Task type URI. */
+export const TYPE_URI = "https://trusttasks.org/spec/acl/show/0.1";
+/** Trust Task response type URI (request type URI + "#response"). */
+export const RESPONSE_TYPE_URI = "https://trusttasks.org/spec/acl/show/0.1#response";
+//# sourceMappingURL=payload.js.map

package/dist/acl/show/0.1/payload.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"payload.js","sourceRoot":"","sources":["../../../../src/acl/show/0.1/payload.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAgBH,2BAA2B;AAC3B,MAAM,CAAC,MAAM,QAAQ,GAAG,0CAAmD,CAAC;AAE5E,qEAAqE;AACrE,MAAM,CAAC,MAAM,iBAAiB,GAAG,mDAA4D,CAAC"}

package/dist/acl/swap-key/0.1/payload.d.ts

@@ -0,0 +1,37 @@
+/**
+ * Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
+ * Source: specs/acl/swap-key/0.1/payload.schema.json
+ */
+/**
+ * An ACL holder atomically replaces the VID bound to one of their own AclEntries with a new VID — typically a different DID under their control. The maintainer applies the swap as a single transaction: there is no window where both VIDs have access or neither does.
+ */
+export interface ACLSwapKey {
+    /**
+     * The VID currently bound in the ACL. MUST equal the document's `issuer` (per the conformance section: the holder swaps THEIR OWN entry).
+     */
+    currentSubject: string;
+    /**
+     * The VID to bind in place of `currentSubject`. The maintainer's policy decides admissibility (e.g. acceptable DID method, required attestations); the wire spec only requires `newSubject !== currentSubject`.
+     */
+    newSubject: string;
+    /**
+     * Cryptographic evidence — required by some maintainers — that the new VID consents to taking over. Format is consumer-defined; a typical shape is a Trust Task or VP/VC signed by `newSubject` carrying a fresh nonce from the maintainer or the holder. Producers omit this when the consumer's policy doesn't require it. Format described in the spec body.
+     */
+    linkProof?: {} | string;
+    /**
+     * Optional human-readable rationale (e.g. "key-rotation", "hardware-token-replacement", "account-recovery").
+     */
+    reason?: string;
+    ext?: Ext;
+}
+/**
+ * Ecosystem-defined extension members per SPEC.md §4.5.1.
+ */
+export interface Ext {
+    [k: string]: unknown | undefined;
+}
+/** Trust Task type URI. */
+export declare const TYPE_URI: "https://trusttasks.org/spec/acl/swap-key/0.1";
+/** Trust Task response type URI (request type URI + "#response"). */
+export declare const RESPONSE_TYPE_URI: "https://trusttasks.org/spec/acl/swap-key/0.1#response";
+//# sourceMappingURL=payload.d.ts.map

package/dist/acl/swap-key/0.1/payload.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"payload.d.ts","sourceRoot":"","sources":["../../../../src/acl/swap-key/0.1/payload.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB;;OAEG;IACH,cAAc,EAAE,MAAM,CAAC;IACvB;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC;IACnB;;OAEG;IACH,SAAS,CAAC,EAAE,EAAE,GAAG,MAAM,CAAC;IACxB;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,GAAG,CAAC,EAAE,GAAG,CAAC;CACX;AACD;;GAEG;AACH,MAAM,WAAW,GAAG;IAClB,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC;CAClC;AAED,2BAA2B;AAC3B,eAAO,MAAM,QAAQ,EAAG,8CAAuD,CAAC;AAEhF,qEAAqE;AACrE,eAAO,MAAM,iBAAiB,EAAG,uDAAgE,CAAC"}

package/dist/acl/swap-key/0.1/payload.js

@@ -0,0 +1,9 @@
+/**
+ * Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
+ * Source: specs/acl/swap-key/0.1/payload.schema.json
+ */
+/** Trust Task type URI. */
+export const TYPE_URI = "https://trusttasks.org/spec/acl/swap-key/0.1";
+/** Trust Task response type URI (request type URI + "#response"). */
+export const RESPONSE_TYPE_URI = "https://trusttasks.org/spec/acl/swap-key/0.1#response";
+//# sourceMappingURL=payload.js.map

package/dist/acl/swap-key/0.1/payload.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"payload.js","sourceRoot":"","sources":["../../../../src/acl/swap-key/0.1/payload.ts"],"names":[],"mappings":"AAAA;;;GAGG;AA+BH,2BAA2B;AAC3B,MAAM,CAAC,MAAM,QAAQ,GAAG,8CAAuD,CAAC;AAEhF,qEAAqE;AACrE,MAAM,CAAC,MAAM,iBAAiB,GAAG,uDAAgE,CAAC"}

package/dist/auth/_shared/0.1/session.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
+ * Source: specs/auth/_shared/0.1/session.schema.json
+ */
+/**
+ * Reusable JSON Schema fragments that describe an authenticated session, referenced by the auth/* Trust Task specifications.
+ */
+export interface AuthSharedSessionDefinitions {
+    [k: string]: unknown | undefined;
+}
+//# sourceMappingURL=session.d.ts.map

package/dist/auth/_shared/0.1/session.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../../../../src/auth/_shared/0.1/session.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;GAEG;AACH,MAAM,WAAW,4BAA4B;IAC3C,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC;CAClC"}

package/dist/auth/_shared/0.1/session.js

@@ -0,0 +1,6 @@
+/**
+ * Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
+ * Source: specs/auth/_shared/0.1/session.schema.json
+ */
+export {};
+//# sourceMappingURL=session.js.map

package/dist/auth/_shared/0.1/session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.js","sourceRoot":"","sources":["../../../../src/auth/_shared/0.1/session.ts"],"names":[],"mappings":"AAAA;;;GAGG"}

package/dist/auth/_shared/0.1/tokens.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
+ * Source: specs/auth/_shared/0.1/tokens.schema.json
+ */
+/**
+ * Reusable JSON Schema fragments for the access + refresh token bundle returned by authentication and refresh flows.
+ */
+export interface AuthSharedTokenDefinitions {
+    [k: string]: unknown | undefined;
+}
+//# sourceMappingURL=tokens.d.ts.map

package/dist/auth/_shared/0.1/tokens.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tokens.d.ts","sourceRoot":"","sources":["../../../../src/auth/_shared/0.1/tokens.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;GAEG;AACH,MAAM,WAAW,0BAA0B;IACzC,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC;CAClC"}

package/dist/auth/_shared/0.1/tokens.js

@@ -0,0 +1,6 @@
+/**
+ * Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
+ * Source: specs/auth/_shared/0.1/tokens.schema.json
+ */
+export {};
+//# sourceMappingURL=tokens.js.map

package/dist/auth/_shared/0.1/tokens.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tokens.js","sourceRoot":"","sources":["../../../../src/auth/_shared/0.1/tokens.ts"],"names":[],"mappings":"AAAA;;;GAGG"}

package/dist/auth/_shared/0.1/webauthn.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
+ * Source: specs/auth/_shared/0.1/webauthn.schema.json
+ */
+/**
+ * Reusable JSON Schema fragments for the WebAuthn (Level 2) options and credential responses exchanged during passkey enrollment and login. Field names follow the WebAuthn / WHATWG dictionaries verbatim so existing client-side libraries (`@simplewebauthn/browser`, `navigator.credentials.*`) can pass-through their inputs and outputs.
+ */
+export interface AuthSharedWebAuthnDefinitions {
+    [k: string]: unknown | undefined;
+}
+//# sourceMappingURL=webauthn.d.ts.map

package/dist/auth/_shared/0.1/webauthn.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webauthn.d.ts","sourceRoot":"","sources":["../../../../src/auth/_shared/0.1/webauthn.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;GAEG;AACH,MAAM,WAAW,6BAA6B;IAC5C,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC;CAClC"}

package/dist/auth/_shared/0.1/webauthn.js

@@ -0,0 +1,6 @@
+/**
+ * Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
+ * Source: specs/auth/_shared/0.1/webauthn.schema.json
+ */
+export {};
+//# sourceMappingURL=webauthn.js.map

package/dist/auth/_shared/0.1/webauthn.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webauthn.js","sourceRoot":"","sources":["../../../../src/auth/_shared/0.1/webauthn.ts"],"names":[],"mappings":"AAAA;;;GAGG"}

package/dist/auth/authenticate/0.1/payload.d.ts

@@ -0,0 +1,33 @@
+/**
+ * Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
+ * Source: specs/auth/authenticate/0.1/payload.schema.json
+ */
+/**
+ * The subject presents a previously-issued challenge along with the framework `proof` that binds the document to their VID. The proof IS the authentication.
+ */
+export interface AuthAuthenticate {
+    /**
+     * The exact challenge value returned by a prior auth/challenge call. Consumers MUST reject mismatch, expired, or re-used challenges.
+     */
+    challenge: string;
+    /**
+     * The sessionId returned alongside the challenge. Consumers use it to look up the server-side challenge binding.
+     */
+    sessionId: string;
+    /**
+     * Optional capability tags the subject is requesting on the issued tokens. The consumer's authorization layer decides which are granted; the issued TokenBundle's `scope` MAY be a subset.
+     */
+    scope?: string[];
+    ext?: Ext;
+}
+/**
+ * Ecosystem-defined extension members per SPEC.md §4.5.1.
+ */
+export interface Ext {
+    [k: string]: unknown | undefined;
+}
+/** Trust Task type URI. */
+export declare const TYPE_URI: "https://trusttasks.org/spec/auth/authenticate/0.1";
+/** Trust Task response type URI (request type URI + "#response"). */
+export declare const RESPONSE_TYPE_URI: "https://trusttasks.org/spec/auth/authenticate/0.1#response";
+//# sourceMappingURL=payload.d.ts.map