@openvtc/trust-tasks 0.12.7 → 0.12.8

package/src/vtc/endorsement-types/list/0.1/payload.ts

@@ -30,6 +30,10 @@ export interface EndorsementType {
    */
   claimSchema?: {};
   createdAt?: string;
+  /**
+   * The member who registered this endorsement type. An endorsement vocabulary is community-defined and shapes what every later endorsement can claim, so who introduced a type is audit-relevant in a way its creation time alone is not.
+   */
+  createdByDid?: string;
 }
 
 /** Trust Task type URI. */
@@ -135,6 +139,10 @@ export const PAYLOAD_SCHEMA = {
         "createdAt": {
           "type": "string",
           "format": "date-time"
+        },
+        "createdByDid": {
+          "type": "string",
+          "description": "The member who registered this endorsement type. An endorsement vocabulary is community-defined and shapes what every later endorsement can claim, so who introduced a type is audit-relevant in a way its creation time alone is not."
         }
       }
     }
@@ -208,6 +216,10 @@ export const RESPONSE_PAYLOAD_SCHEMA = {
         "createdAt": {
           "type": "string",
           "format": "date-time"
+        },
+        "createdByDid": {
+          "type": "string",
+          "description": "The member who registered this endorsement type. An endorsement vocabulary is community-defined and shapes what every later endorsement can claim, so who introduced a type is audit-relevant in a way its creation time alone is not."
         }
       }
     }

package/src/vtc/endorsement-types/register/0.1/payload.ts

@@ -33,6 +33,10 @@ export interface EndorsementType {
    */
   claimSchema?: {};
   createdAt?: string;
+  /**
+   * The member who registered this endorsement type. An endorsement vocabulary is community-defined and shapes what every later endorsement can claim, so who introduced a type is audit-relevant in a way its creation time alone is not.
+   */
+  createdByDid?: string;
 }
 
 /** Trust Task type URI. */
@@ -137,6 +141,10 @@ export const PAYLOAD_SCHEMA = {
         "createdAt": {
           "type": "string",
           "format": "date-time"
+        },
+        "createdByDid": {
+          "type": "string",
+          "description": "The member who registered this endorsement type. An endorsement vocabulary is community-defined and shapes what every later endorsement can claim, so who introduced a type is audit-relevant in a way its creation time alone is not."
         }
       }
     }
@@ -201,6 +209,10 @@ export const RESPONSE_PAYLOAD_SCHEMA = {
         "createdAt": {
           "type": "string",
           "format": "date-time"
+        },
+        "createdByDid": {
+          "type": "string",
+          "description": "The member who registered this endorsement type. An endorsement vocabulary is community-defined and shapes what every later endorsement can claim, so who introduced a type is audit-relevant in a way its creation time alone is not."
         }
       }
     }

package/src/vtc/join-requests/decide/0.1/payload.ts

@@ -33,6 +33,16 @@ export interface VTCJoinRequestsDecideResponsePayload {
    * The request's post-decision state; echoes the decision.
    */
   status: "approved" | "rejected";
+  /**
+   * The membership credential issued by this decision, delivered inline. Present only where the decision admitted the applicant.
+   *
+   * Inline because the alternative is worse: the applicant would poll for a status, learn they were admitted, and then fetch the credential separately — a second round trip whose only purpose is to collect something the community already had in hand when it decided.
+   */
+  vmc?: {} | null;
+  /**
+   * The endorsement credential carrying the role this decision granted, delivered inline alongside `vmc` and on the same reasoning. Present only where the decision admitted the applicant and granted a role.
+   */
+  roleVec?: {} | null;
   ext?: Ext;
 }
 
@@ -114,6 +124,20 @@ export const PAYLOAD_SCHEMA = {
           ],
           "description": "The request's post-decision state; echoes the decision."
         },
+        "vmc": {
+          "type": [
+            "object",
+            "null"
+          ],
+          "description": "The membership credential issued by this decision, delivered inline. Present only where the decision admitted the applicant.\n\nInline because the alternative is worse: the applicant would poll for a status, learn they were admitted, and then fetch the credential separately — a second round trip whose only purpose is to collect something the community already had in hand when it decided."
+        },
+        "roleVec": {
+          "type": [
+            "object",
+            "null"
+          ],
+          "description": "The endorsement credential carrying the role this decision granted, delivered inline alongside `vmc` and on the same reasoning. Present only where the decision admitted the applicant and granted a role."
+        },
         "ext": {
           "$ref": "#/$defs/Ext"
         }
@@ -160,6 +184,20 @@ export const RESPONSE_PAYLOAD_SCHEMA = {
           ],
           "description": "The request's post-decision state; echoes the decision."
         },
+        "vmc": {
+          "type": [
+            "object",
+            "null"
+          ],
+          "description": "The membership credential issued by this decision, delivered inline. Present only where the decision admitted the applicant.\n\nInline because the alternative is worse: the applicant would poll for a status, learn they were admitted, and then fetch the credential separately — a second round trip whose only purpose is to collect something the community already had in hand when it decided."
+        },
+        "roleVec": {
+          "type": [
+            "object",
+            "null"
+          ],
+          "description": "The endorsement credential carrying the role this decision granted, delivered inline alongside `vmc` and on the same reasoning. Present only where the decision admitted the applicant and granted a role."
+        },
         "ext": {
           "$ref": "#/$defs/Ext"
         }

package/src/vtc/members/list/0.1/payload.ts

@@ -73,6 +73,26 @@ export interface MemberResponse {
    * Id of the member's current role Verifiable Endorsement Credential, if issued.
    */
   currentRoleVecId?: string | null;
+  /**
+   * Whether the community has asserted that this member is a distinct real person. Read-only here: it is set and cleared by the personhood verbs, and cleared by a renewal-policy downgrade. Load-bearing rather than informational — a community that recognises members of another community may gate on it, so a consumer that cannot read it cannot make that decision.
+   */
+  personhood?: boolean;
+  /**
+   * When personhood was most recently asserted. Absent where it never has been. Operator-facing: it belongs on admin-gated reads, and a member's own view of themselves need carry only the flag.
+   */
+  personhoodAssertedAt?: string | null;
+  /**
+   * Whether this member joined by presenting an invitation credential rather than by an admin's decision on an open request. The two routes to membership carry different evidence, and an operator reviewing a roster can otherwise not tell them apart.
+   */
+  joinedViaInvitation?: boolean;
+  /**
+   * `id` of the member-issued reciprocal membership credential — the member half of the pair — once the member has sent it. Absent until then, which is the useful signal: it distinguishes a membership the community has asserted from one the member has acknowledged. The credential body is not echoed here.
+   */
+  memberVmcId?: string | null;
+  /**
+   * When that reciprocal credential was received. Paired with `memberVmcId`.
+   */
+  memberVmcReceivedAt?: string | null;
   /**
    * Opaque community-defined extension bag. Keys are maintainer-defined; the maintainer caps its size (16 KiB in the reference implementation).
    */
@@ -242,6 +262,37 @@ export const PAYLOAD_SCHEMA = {
           ],
           "description": "Id of the member's current role Verifiable Endorsement Credential, if issued."
         },
+        "personhood": {
+          "type": "boolean",
+          "description": "Whether the community has asserted that this member is a distinct real person. Read-only here: it is set and cleared by the personhood verbs, and cleared by a renewal-policy downgrade. Load-bearing rather than informational — a community that recognises members of another community may gate on it, so a consumer that cannot read it cannot make that decision."
+        },
+        "personhoodAssertedAt": {
+          "type": [
+            "string",
+            "null"
+          ],
+          "format": "date-time",
+          "description": "When personhood was most recently asserted. Absent where it never has been. Operator-facing: it belongs on admin-gated reads, and a member's own view of themselves need carry only the flag."
+        },
+        "joinedViaInvitation": {
+          "type": "boolean",
+          "description": "Whether this member joined by presenting an invitation credential rather than by an admin's decision on an open request. The two routes to membership carry different evidence, and an operator reviewing a roster can otherwise not tell them apart."
+        },
+        "memberVmcId": {
+          "type": [
+            "string",
+            "null"
+          ],
+          "description": "`id` of the member-issued reciprocal membership credential — the member half of the pair — once the member has sent it. Absent until then, which is the useful signal: it distinguishes a membership the community has asserted from one the member has acknowledged. The credential body is not echoed here."
+        },
+        "memberVmcReceivedAt": {
+          "type": [
+            "string",
+            "null"
+          ],
+          "format": "date-time",
+          "description": "When that reciprocal credential was received. Paired with `memberVmcId`."
+        },
         "extensions": {
           "type": "object",
           "description": "Opaque community-defined extension bag. Keys are maintainer-defined; the maintainer caps its size (16 KiB in the reference implementation)."
@@ -371,6 +422,37 @@ export const RESPONSE_PAYLOAD_SCHEMA = {
           ],
           "description": "Id of the member's current role Verifiable Endorsement Credential, if issued."
         },
+        "personhood": {
+          "type": "boolean",
+          "description": "Whether the community has asserted that this member is a distinct real person. Read-only here: it is set and cleared by the personhood verbs, and cleared by a renewal-policy downgrade. Load-bearing rather than informational — a community that recognises members of another community may gate on it, so a consumer that cannot read it cannot make that decision."
+        },
+        "personhoodAssertedAt": {
+          "type": [
+            "string",
+            "null"
+          ],
+          "format": "date-time",
+          "description": "When personhood was most recently asserted. Absent where it never has been. Operator-facing: it belongs on admin-gated reads, and a member's own view of themselves need carry only the flag."
+        },
+        "joinedViaInvitation": {
+          "type": "boolean",
+          "description": "Whether this member joined by presenting an invitation credential rather than by an admin's decision on an open request. The two routes to membership carry different evidence, and an operator reviewing a roster can otherwise not tell them apart."
+        },
+        "memberVmcId": {
+          "type": [
+            "string",
+            "null"
+          ],
+          "description": "`id` of the member-issued reciprocal membership credential — the member half of the pair — once the member has sent it. Absent until then, which is the useful signal: it distinguishes a membership the community has asserted from one the member has acknowledged. The credential body is not echoed here."
+        },
+        "memberVmcReceivedAt": {
+          "type": [
+            "string",
+            "null"
+          ],
+          "format": "date-time",
+          "description": "When that reciprocal credential was received. Paired with `memberVmcId`."
+        },
         "extensions": {
           "type": "object",
           "description": "Opaque community-defined extension bag. Keys are maintainer-defined; the maintainer caps its size (16 KiB in the reference implementation)."

package/src/vtc/members/show/0.1/payload.ts

@@ -57,6 +57,26 @@ export interface MemberResponse {
    * Id of the member's current role Verifiable Endorsement Credential, if issued.
    */
   currentRoleVecId?: string | null;
+  /**
+   * Whether the community has asserted that this member is a distinct real person. Read-only here: it is set and cleared by the personhood verbs, and cleared by a renewal-policy downgrade. Load-bearing rather than informational — a community that recognises members of another community may gate on it, so a consumer that cannot read it cannot make that decision.
+   */
+  personhood?: boolean;
+  /**
+   * When personhood was most recently asserted. Absent where it never has been. Operator-facing: it belongs on admin-gated reads, and a member's own view of themselves need carry only the flag.
+   */
+  personhoodAssertedAt?: string | null;
+  /**
+   * Whether this member joined by presenting an invitation credential rather than by an admin's decision on an open request. The two routes to membership carry different evidence, and an operator reviewing a roster can otherwise not tell them apart.
+   */
+  joinedViaInvitation?: boolean;
+  /**
+   * `id` of the member-issued reciprocal membership credential — the member half of the pair — once the member has sent it. Absent until then, which is the useful signal: it distinguishes a membership the community has asserted from one the member has acknowledged. The credential body is not echoed here.
+   */
+  memberVmcId?: string | null;
+  /**
+   * When that reciprocal credential was received. Paired with `memberVmcId`.
+   */
+  memberVmcReceivedAt?: string | null;
   /**
    * Opaque community-defined extension bag. Keys are maintainer-defined; the maintainer caps its size (16 KiB in the reference implementation).
    */
@@ -202,6 +222,37 @@ export const PAYLOAD_SCHEMA = {
           ],
           "description": "Id of the member's current role Verifiable Endorsement Credential, if issued."
         },
+        "personhood": {
+          "type": "boolean",
+          "description": "Whether the community has asserted that this member is a distinct real person. Read-only here: it is set and cleared by the personhood verbs, and cleared by a renewal-policy downgrade. Load-bearing rather than informational — a community that recognises members of another community may gate on it, so a consumer that cannot read it cannot make that decision."
+        },
+        "personhoodAssertedAt": {
+          "type": [
+            "string",
+            "null"
+          ],
+          "format": "date-time",
+          "description": "When personhood was most recently asserted. Absent where it never has been. Operator-facing: it belongs on admin-gated reads, and a member's own view of themselves need carry only the flag."
+        },
+        "joinedViaInvitation": {
+          "type": "boolean",
+          "description": "Whether this member joined by presenting an invitation credential rather than by an admin's decision on an open request. The two routes to membership carry different evidence, and an operator reviewing a roster can otherwise not tell them apart."
+        },
+        "memberVmcId": {
+          "type": [
+            "string",
+            "null"
+          ],
+          "description": "`id` of the member-issued reciprocal membership credential — the member half of the pair — once the member has sent it. Absent until then, which is the useful signal: it distinguishes a membership the community has asserted from one the member has acknowledged. The credential body is not echoed here."
+        },
+        "memberVmcReceivedAt": {
+          "type": [
+            "string",
+            "null"
+          ],
+          "format": "date-time",
+          "description": "When that reciprocal credential was received. Paired with `memberVmcId`."
+        },
         "extensions": {
           "type": "object",
           "description": "Opaque community-defined extension bag. Keys are maintainer-defined; the maintainer caps its size (16 KiB in the reference implementation)."
@@ -314,6 +365,37 @@ export const RESPONSE_PAYLOAD_SCHEMA = {
           ],
           "description": "Id of the member's current role Verifiable Endorsement Credential, if issued."
         },
+        "personhood": {
+          "type": "boolean",
+          "description": "Whether the community has asserted that this member is a distinct real person. Read-only here: it is set and cleared by the personhood verbs, and cleared by a renewal-policy downgrade. Load-bearing rather than informational — a community that recognises members of another community may gate on it, so a consumer that cannot read it cannot make that decision."
+        },
+        "personhoodAssertedAt": {
+          "type": [
+            "string",
+            "null"
+          ],
+          "format": "date-time",
+          "description": "When personhood was most recently asserted. Absent where it never has been. Operator-facing: it belongs on admin-gated reads, and a member's own view of themselves need carry only the flag."
+        },
+        "joinedViaInvitation": {
+          "type": "boolean",
+          "description": "Whether this member joined by presenting an invitation credential rather than by an admin's decision on an open request. The two routes to membership carry different evidence, and an operator reviewing a roster can otherwise not tell them apart."
+        },
+        "memberVmcId": {
+          "type": [
+            "string",
+            "null"
+          ],
+          "description": "`id` of the member-issued reciprocal membership credential — the member half of the pair — once the member has sent it. Absent until then, which is the useful signal: it distinguishes a membership the community has asserted from one the member has acknowledged. The credential body is not echoed here."
+        },
+        "memberVmcReceivedAt": {
+          "type": [
+            "string",
+            "null"
+          ],
+          "format": "date-time",
+          "description": "When that reciprocal credential was received. Paired with `memberVmcId`."
+        },
         "extensions": {
           "type": "object",
           "description": "Opaque community-defined extension bag. Keys are maintainer-defined; the maintainer caps its size (16 KiB in the reference implementation)."

package/src/vtc/members/update/0.1/payload.ts

@@ -12,6 +12,10 @@ export interface VTCMembersUpdatePayload {
    * New role (wire form). MUST NOT be `admin` — promotion to admin is a separate, gated flow, not a metadata patch.
    */
   role?: string;
+  /**
+   * Operator-facing display label for this member. Editable, unlike the DID it labels — which is the point: an operator needs a name they can read on a roster of identifiers they cannot. `null` clears it; omit to leave it unchanged.
+   */
+  label?: string | null;
   /**
    * New directory-publish consent.
    */
@@ -70,6 +74,26 @@ export interface MemberResponse {
    * Id of the member's current role Verifiable Endorsement Credential, if issued.
    */
   currentRoleVecId?: string | null;
+  /**
+   * Whether the community has asserted that this member is a distinct real person. Read-only here: it is set and cleared by the personhood verbs, and cleared by a renewal-policy downgrade. Load-bearing rather than informational — a community that recognises members of another community may gate on it, so a consumer that cannot read it cannot make that decision.
+   */
+  personhood?: boolean;
+  /**
+   * When personhood was most recently asserted. Absent where it never has been. Operator-facing: it belongs on admin-gated reads, and a member's own view of themselves need carry only the flag.
+   */
+  personhoodAssertedAt?: string | null;
+  /**
+   * Whether this member joined by presenting an invitation credential rather than by an admin's decision on an open request. The two routes to membership carry different evidence, and an operator reviewing a roster can otherwise not tell them apart.
+   */
+  joinedViaInvitation?: boolean;
+  /**
+   * `id` of the member-issued reciprocal membership credential — the member half of the pair — once the member has sent it. Absent until then, which is the useful signal: it distinguishes a membership the community has asserted from one the member has acknowledged. The credential body is not echoed here.
+   */
+  memberVmcId?: string | null;
+  /**
+   * When that reciprocal credential was received. Paired with `memberVmcId`.
+   */
+  memberVmcReceivedAt?: string | null;
   /**
    * Opaque community-defined extension bag. Keys are maintainer-defined; the maintainer caps its size (16 KiB in the reference implementation).
    */
@@ -117,6 +141,13 @@ export const PAYLOAD_SCHEMA = {
       "minLength": 1,
       "description": "New role (wire form). MUST NOT be `admin` — promotion to admin is a separate, gated flow, not a metadata patch."
     },
+    "label": {
+      "type": [
+        "string",
+        "null"
+      ],
+      "description": "Operator-facing display label for this member. Editable, unlike the DID it labels — which is the point: an operator needs a name they can read on a roster of identifiers they cannot. `null` clears it; omit to leave it unchanged."
+    },
     "publishConsent": {
       "type": "boolean",
       "description": "New directory-publish consent."
@@ -237,6 +268,37 @@ export const PAYLOAD_SCHEMA = {
           ],
           "description": "Id of the member's current role Verifiable Endorsement Credential, if issued."
         },
+        "personhood": {
+          "type": "boolean",
+          "description": "Whether the community has asserted that this member is a distinct real person. Read-only here: it is set and cleared by the personhood verbs, and cleared by a renewal-policy downgrade. Load-bearing rather than informational — a community that recognises members of another community may gate on it, so a consumer that cannot read it cannot make that decision."
+        },
+        "personhoodAssertedAt": {
+          "type": [
+            "string",
+            "null"
+          ],
+          "format": "date-time",
+          "description": "When personhood was most recently asserted. Absent where it never has been. Operator-facing: it belongs on admin-gated reads, and a member's own view of themselves need carry only the flag."
+        },
+        "joinedViaInvitation": {
+          "type": "boolean",
+          "description": "Whether this member joined by presenting an invitation credential rather than by an admin's decision on an open request. The two routes to membership carry different evidence, and an operator reviewing a roster can otherwise not tell them apart."
+        },
+        "memberVmcId": {
+          "type": [
+            "string",
+            "null"
+          ],
+          "description": "`id` of the member-issued reciprocal membership credential — the member half of the pair — once the member has sent it. Absent until then, which is the useful signal: it distinguishes a membership the community has asserted from one the member has acknowledged. The credential body is not echoed here."
+        },
+        "memberVmcReceivedAt": {
+          "type": [
+            "string",
+            "null"
+          ],
+          "format": "date-time",
+          "description": "When that reciprocal credential was received. Paired with `memberVmcId`."
+        },
         "extensions": {
           "type": "object",
           "description": "Opaque community-defined extension bag. Keys are maintainer-defined; the maintainer caps its size (16 KiB in the reference implementation)."
@@ -349,6 +411,37 @@ export const RESPONSE_PAYLOAD_SCHEMA = {
           ],
           "description": "Id of the member's current role Verifiable Endorsement Credential, if issued."
         },
+        "personhood": {
+          "type": "boolean",
+          "description": "Whether the community has asserted that this member is a distinct real person. Read-only here: it is set and cleared by the personhood verbs, and cleared by a renewal-policy downgrade. Load-bearing rather than informational — a community that recognises members of another community may gate on it, so a consumer that cannot read it cannot make that decision."
+        },
+        "personhoodAssertedAt": {
+          "type": [
+            "string",
+            "null"
+          ],
+          "format": "date-time",
+          "description": "When personhood was most recently asserted. Absent where it never has been. Operator-facing: it belongs on admin-gated reads, and a member's own view of themselves need carry only the flag."
+        },
+        "joinedViaInvitation": {
+          "type": "boolean",
+          "description": "Whether this member joined by presenting an invitation credential rather than by an admin's decision on an open request. The two routes to membership carry different evidence, and an operator reviewing a roster can otherwise not tell them apart."
+        },
+        "memberVmcId": {
+          "type": [
+            "string",
+            "null"
+          ],
+          "description": "`id` of the member-issued reciprocal membership credential — the member half of the pair — once the member has sent it. Absent until then, which is the useful signal: it distinguishes a membership the community has asserted from one the member has acknowledged. The credential body is not echoed here."
+        },
+        "memberVmcReceivedAt": {
+          "type": [
+            "string",
+            "null"
+          ],
+          "format": "date-time",
+          "description": "When that reciprocal credential was received. Paired with `memberVmcId`."
+        },
         "extensions": {
           "type": "object",
           "description": "Opaque community-defined extension bag. Keys are maintainer-defined; the maintainer caps its size (16 KiB in the reference implementation)."