@openvtc/trust-tasks 0.13.1 → 0.14.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/auth/step-up/approve-request/0.1/payload.d.ts +3 -3
- package/dist/auth/step-up/approve-request/0.1/payload.js +1 -1
- package/dist/auth/step-up/approve-request/0.1/payload.js.map +1 -1
- package/dist/auth/step-up/approve-request/0.2/payload.d.ts +3 -3
- package/dist/auth/step-up/approve-request/0.2/payload.js +1 -1
- package/dist/auth/step-up/approve-request/0.2/payload.js.map +1 -1
- package/dist/did-management/did/info/0.1/payload.d.ts +3 -3
- package/dist/did-management/did/info/0.1/payload.js +1 -1
- package/dist/did-management/did/info/0.1/payload.js.map +1 -1
- package/dist/governance/capability/enable/0.1/payload.d.ts +3 -3
- package/dist/governance/capability/enable/0.1/payload.js +1 -1
- package/dist/governance/capability/enable/0.1/payload.js.map +1 -1
- package/dist/provision/integration/0.1/payload.d.ts +13 -13
- package/dist/provision/integration/0.1/payload.js +4 -4
- package/dist/provision/integration/0.1/payload.js.map +1 -1
- package/dist/provision/integration/0.2/payload.d.ts +13 -13
- package/dist/provision/integration/0.2/payload.js +4 -4
- package/dist/provision/integration/0.2/payload.js.map +1 -1
- package/dist/provision/integration/0.3/payload.d.ts +13 -13
- package/dist/provision/integration/0.3/payload.js +4 -4
- package/dist/provision/integration/0.3/payload.js.map +1 -1
- package/dist/trust-task-discovery/0.1/payload.d.ts +41 -4
- package/dist/trust-task-discovery/0.1/payload.d.ts.map +1 -1
- package/dist/trust-task-discovery/0.1/payload.js +2 -1
- package/dist/trust-task-discovery/0.1/payload.js.map +1 -1
- package/dist/trust-task-error/0.1/payload.d.ts +3 -3
- package/dist/trust-task-error/0.1/payload.js +1 -1
- package/dist/trust-task-error/0.1/payload.js.map +1 -1
- package/dist/trust-task-error/0.2/payload.d.ts +3 -3
- package/dist/trust-task-error/0.2/payload.js +1 -1
- package/dist/trust-task-error/0.2/payload.js.map +1 -1
- package/dist/trust-task-error/0.3/payload.d.ts +3 -3
- package/dist/trust-task-error/0.3/payload.js +1 -1
- package/dist/trust-task-error/0.3/payload.js.map +1 -1
- package/dist/trust-task-error/0.4/payload.d.ts +3 -3
- package/dist/trust-task-error/0.4/payload.js +1 -1
- package/dist/trust-task-error/0.4/payload.js.map +1 -1
- package/dist/trust-task-error/0.5/payload.d.ts +3 -3
- package/dist/trust-task-error/0.5/payload.js +1 -1
- package/dist/trust-task-error/0.5/payload.js.map +1 -1
- package/dist/vault/proxy-login/0.1/payload.d.ts +13 -13
- package/dist/vault/proxy-login/0.1/payload.js +5 -5
- package/dist/vault/proxy-login/0.1/payload.js.map +1 -1
- package/dist/vault/proxy-login/0.2/payload.d.ts +10 -10
- package/dist/vault/proxy-login/0.2/payload.js +4 -4
- package/dist/vault/proxy-login/0.2/payload.js.map +1 -1
- package/dist/vault/release/0.1/payload.d.ts +13 -13
- package/dist/vault/release/0.1/payload.js +5 -5
- package/dist/vault/release/0.1/payload.js.map +1 -1
- package/dist/vault/release/0.2/payload.d.ts +13 -13
- package/dist/vault/release/0.2/payload.js +5 -5
- package/dist/vault/release/0.2/payload.js.map +1 -1
- package/dist/vault/sign-trust-task/0.1/payload.d.ts +19 -19
- package/dist/vault/sign-trust-task/0.1/payload.js +7 -7
- package/dist/vault/sign-trust-task/0.1/payload.js.map +1 -1
- package/dist/vault/sign-trust-task/0.2/payload.d.ts +16 -16
- package/dist/vault/sign-trust-task/0.2/payload.js +6 -6
- package/dist/vault/sign-trust-task/0.2/payload.js.map +1 -1
- package/dist/vault/upsert/0.1/payload.d.ts +11 -11
- package/dist/vault/upsert/0.1/payload.js +4 -4
- package/dist/vault/upsert/0.1/payload.js.map +1 -1
- package/dist/vault/upsert/0.2/payload.d.ts +11 -11
- package/dist/vault/upsert/0.2/payload.js +4 -4
- package/dist/vault/upsert/0.2/payload.js.map +1 -1
- package/dist/vault/upsert/0.3/payload.d.ts +11 -11
- package/dist/vault/upsert/0.3/payload.js +4 -4
- package/dist/vault/upsert/0.3/payload.js.map +1 -1
- package/dist/vta/memory/list/0.1/payload.d.ts +1 -1
- package/dist/vta/memory/list/0.1/payload.js +1 -1
- package/dist/vta/memory/list/0.1/payload.js.map +1 -1
- package/package.json +1 -1
- package/src/auth/step-up/approve-request/0.1/payload.ts +2 -2
- package/src/auth/step-up/approve-request/0.2/payload.ts +2 -2
- package/src/did-management/did/info/0.1/payload.ts +2 -2
- package/src/governance/capability/enable/0.1/payload.ts +2 -2
- package/src/provision/integration/0.1/payload.ts +9 -9
- package/src/provision/integration/0.2/payload.ts +9 -9
- package/src/provision/integration/0.3/payload.ts +9 -9
- package/src/trust-task-discovery/0.1/payload.ts +56 -3
- package/src/trust-task-error/0.1/payload.ts +2 -2
- package/src/trust-task-error/0.2/payload.ts +2 -2
- package/src/trust-task-error/0.3/payload.ts +2 -2
- package/src/trust-task-error/0.4/payload.ts +2 -2
- package/src/trust-task-error/0.5/payload.ts +2 -2
- package/src/vault/proxy-login/0.1/payload.ts +8 -8
- package/src/vault/proxy-login/0.2/payload.ts +6 -6
- package/src/vault/release/0.1/payload.ts +8 -8
- package/src/vault/release/0.2/payload.ts +8 -8
- package/src/vault/sign-trust-task/0.1/payload.ts +12 -12
- package/src/vault/sign-trust-task/0.2/payload.ts +10 -10
- package/src/vault/upsert/0.1/payload.ts +7 -7
- package/src/vault/upsert/0.2/payload.ts +7 -7
- package/src/vault/upsert/0.3/payload.ts +7 -7
- package/src/vta/memory/list/0.1/payload.ts +1 -1
|
@@ -7,7 +7,7 @@
|
|
|
7
7
|
*/
|
|
8
8
|
export interface VaultSignTrustTaskPayload {
|
|
9
9
|
/**
|
|
10
|
-
* Identifier of the vault entry whose principal will sign. The maintainer rejects with `
|
|
10
|
+
* Identifier of the vault entry whose principal will sign. The maintainer rejects with `notSignable` when `entry.secretKind` is not `did-self-issued` or `didcomm-peer` (other kinds have no DID-based signing identity).
|
|
11
11
|
*/
|
|
12
12
|
entryId: string;
|
|
13
13
|
unsignedEnvelope: UnsignedTrustTaskEnvelope;
|
|
@@ -16,7 +16,7 @@ export interface VaultSignTrustTaskPayload {
|
|
|
16
16
|
ext?: Ext;
|
|
17
17
|
}
|
|
18
18
|
/**
|
|
19
|
-
* The Trust Task document to sign. MUST satisfy the framework's structural requirements (id/type/issuer/recipient/issuedAt/payload). MUST NOT carry a `proof`. `issuer` MUST equal the referenced entry's principalDid — the maintainer refuses to silently rewrite `issuer` (see `
|
|
19
|
+
* The Trust Task document to sign. MUST satisfy the framework's structural requirements (id/type/issuer/recipient/issuedAt/payload). MUST NOT carry a `proof`. `issuer` MUST equal the referenced entry's principalDid — the maintainer refuses to silently rewrite `issuer` (see `envelopeIssuerMismatch`).
|
|
20
20
|
*/
|
|
21
21
|
export interface UnsignedTrustTaskEnvelope {
|
|
22
22
|
/**
|
|
@@ -32,7 +32,7 @@ export interface UnsignedTrustTaskEnvelope {
|
|
|
32
32
|
*/
|
|
33
33
|
type: string;
|
|
34
34
|
/**
|
|
35
|
-
* Issuer DID of the inner task. MUST equal the vault entry's principalDid — the maintainer rejects mismatches with `
|
|
35
|
+
* Issuer DID of the inner task. MUST equal the vault entry's principalDid — the maintainer rejects mismatches with `envelopeIssuerMismatch` rather than overwriting.
|
|
36
36
|
*/
|
|
37
37
|
issuer: string;
|
|
38
38
|
/**
|
|
@@ -44,7 +44,7 @@ export interface UnsignedTrustTaskEnvelope {
|
|
|
44
44
|
*/
|
|
45
45
|
issuedAt: string;
|
|
46
46
|
/**
|
|
47
|
-
* Optional inner-task expiry. The maintainer rejects with `
|
|
47
|
+
* Optional inner-task expiry. The maintainer rejects with `envelopeExpired` when this is in the past at sign time.
|
|
48
48
|
*/
|
|
49
49
|
expiresAt?: string;
|
|
50
50
|
/**
|
|
@@ -79,7 +79,7 @@ export interface ConsumerContext {
|
|
|
79
79
|
networkClass?: "unknown" | "home" | "corp" | "public" | "vpn";
|
|
80
80
|
}
|
|
81
81
|
/**
|
|
82
|
-
* Step-up proof on retry after `
|
|
82
|
+
* Step-up proof on retry after `stepUpRequired`.
|
|
83
83
|
*/
|
|
84
84
|
export interface StepUpProof {
|
|
85
85
|
kind: "webauthn-uv" | "push-approval" | "totp";
|
|
@@ -128,11 +128,11 @@ export declare const PAYLOAD_SCHEMA: {
|
|
|
128
128
|
readonly entryId: {
|
|
129
129
|
readonly type: "string";
|
|
130
130
|
readonly minLength: 1;
|
|
131
|
-
readonly description: "Identifier of the vault entry whose principal will sign. The maintainer rejects with `
|
|
131
|
+
readonly description: "Identifier of the vault entry whose principal will sign. The maintainer rejects with `notSignable` when `entry.secretKind` is not `did-self-issued` or `didcomm-peer` (other kinds have no DID-based signing identity).";
|
|
132
132
|
};
|
|
133
133
|
readonly unsignedEnvelope: {
|
|
134
134
|
readonly $ref: "#/$defs/UnsignedTrustTaskEnvelope";
|
|
135
|
-
readonly description: "The Trust Task document to sign. MUST satisfy the framework's structural requirements (id/type/issuer/recipient/issuedAt/payload). MUST NOT carry a `proof`. `issuer` MUST equal the referenced entry's principalDid — the maintainer refuses to silently rewrite `issuer` (see `
|
|
135
|
+
readonly description: "The Trust Task document to sign. MUST satisfy the framework's structural requirements (id/type/issuer/recipient/issuedAt/payload). MUST NOT carry a `proof`. `issuer` MUST equal the referenced entry's principalDid — the maintainer refuses to silently rewrite `issuer` (see `envelopeIssuerMismatch`).";
|
|
136
136
|
};
|
|
137
137
|
readonly consumerContext: {
|
|
138
138
|
readonly $ref: "#/$defs/ConsumerContext";
|
|
@@ -140,7 +140,7 @@ export declare const PAYLOAD_SCHEMA: {
|
|
|
140
140
|
};
|
|
141
141
|
readonly stepUpProof: {
|
|
142
142
|
readonly $ref: "#/$defs/StepUpProof";
|
|
143
|
-
readonly description: "Step-up proof on retry after `
|
|
143
|
+
readonly description: "Step-up proof on retry after `stepUpRequired`.";
|
|
144
144
|
};
|
|
145
145
|
readonly ext: {
|
|
146
146
|
readonly $ref: "#/$defs/Ext";
|
|
@@ -173,7 +173,7 @@ export declare const PAYLOAD_SCHEMA: {
|
|
|
173
173
|
readonly issuer: {
|
|
174
174
|
readonly type: "string";
|
|
175
175
|
readonly minLength: 1;
|
|
176
|
-
readonly description: "Issuer DID of the inner task. MUST equal the vault entry's principalDid — the maintainer rejects mismatches with `
|
|
176
|
+
readonly description: "Issuer DID of the inner task. MUST equal the vault entry's principalDid — the maintainer rejects mismatches with `envelopeIssuerMismatch` rather than overwriting.";
|
|
177
177
|
};
|
|
178
178
|
readonly recipient: {
|
|
179
179
|
readonly type: "string";
|
|
@@ -188,7 +188,7 @@ export declare const PAYLOAD_SCHEMA: {
|
|
|
188
188
|
readonly expiresAt: {
|
|
189
189
|
readonly type: "string";
|
|
190
190
|
readonly format: "date-time";
|
|
191
|
-
readonly description: "Optional inner-task expiry. The maintainer rejects with `
|
|
191
|
+
readonly description: "Optional inner-task expiry. The maintainer rejects with `envelopeExpired` when this is in the past at sign time.";
|
|
192
192
|
};
|
|
193
193
|
readonly payload: {
|
|
194
194
|
readonly description: "Inner task's payload object. Opaque to the maintainer — passed through unchanged into the signed envelope.";
|
|
@@ -304,7 +304,7 @@ export declare const RESPONSE_PAYLOAD_SCHEMA: {
|
|
|
304
304
|
readonly issuer: {
|
|
305
305
|
readonly type: "string";
|
|
306
306
|
readonly minLength: 1;
|
|
307
|
-
readonly description: "Issuer DID of the inner task. MUST equal the vault entry's principalDid — the maintainer rejects mismatches with `
|
|
307
|
+
readonly description: "Issuer DID of the inner task. MUST equal the vault entry's principalDid — the maintainer rejects mismatches with `envelopeIssuerMismatch` rather than overwriting.";
|
|
308
308
|
};
|
|
309
309
|
readonly recipient: {
|
|
310
310
|
readonly type: "string";
|
|
@@ -319,7 +319,7 @@ export declare const RESPONSE_PAYLOAD_SCHEMA: {
|
|
|
319
319
|
readonly expiresAt: {
|
|
320
320
|
readonly type: "string";
|
|
321
321
|
readonly format: "date-time";
|
|
322
|
-
readonly description: "Optional inner-task expiry. The maintainer rejects with `
|
|
322
|
+
readonly description: "Optional inner-task expiry. The maintainer rejects with `envelopeExpired` when this is in the past at sign time.";
|
|
323
323
|
};
|
|
324
324
|
readonly payload: {
|
|
325
325
|
readonly description: "Inner task's payload object. Opaque to the maintainer — passed through unchanged into the signed envelope.";
|
|
@@ -427,11 +427,11 @@ export declare const SPEC: {
|
|
|
427
427
|
readonly entryId: {
|
|
428
428
|
readonly type: "string";
|
|
429
429
|
readonly minLength: 1;
|
|
430
|
-
readonly description: "Identifier of the vault entry whose principal will sign. The maintainer rejects with `
|
|
430
|
+
readonly description: "Identifier of the vault entry whose principal will sign. The maintainer rejects with `notSignable` when `entry.secretKind` is not `did-self-issued` or `didcomm-peer` (other kinds have no DID-based signing identity).";
|
|
431
431
|
};
|
|
432
432
|
readonly unsignedEnvelope: {
|
|
433
433
|
readonly $ref: "#/$defs/UnsignedTrustTaskEnvelope";
|
|
434
|
-
readonly description: "The Trust Task document to sign. MUST satisfy the framework's structural requirements (id/type/issuer/recipient/issuedAt/payload). MUST NOT carry a `proof`. `issuer` MUST equal the referenced entry's principalDid — the maintainer refuses to silently rewrite `issuer` (see `
|
|
434
|
+
readonly description: "The Trust Task document to sign. MUST satisfy the framework's structural requirements (id/type/issuer/recipient/issuedAt/payload). MUST NOT carry a `proof`. `issuer` MUST equal the referenced entry's principalDid — the maintainer refuses to silently rewrite `issuer` (see `envelopeIssuerMismatch`).";
|
|
435
435
|
};
|
|
436
436
|
readonly consumerContext: {
|
|
437
437
|
readonly $ref: "#/$defs/ConsumerContext";
|
|
@@ -439,7 +439,7 @@ export declare const SPEC: {
|
|
|
439
439
|
};
|
|
440
440
|
readonly stepUpProof: {
|
|
441
441
|
readonly $ref: "#/$defs/StepUpProof";
|
|
442
|
-
readonly description: "Step-up proof on retry after `
|
|
442
|
+
readonly description: "Step-up proof on retry after `stepUpRequired`.";
|
|
443
443
|
};
|
|
444
444
|
readonly ext: {
|
|
445
445
|
readonly $ref: "#/$defs/Ext";
|
|
@@ -472,7 +472,7 @@ export declare const SPEC: {
|
|
|
472
472
|
readonly issuer: {
|
|
473
473
|
readonly type: "string";
|
|
474
474
|
readonly minLength: 1;
|
|
475
|
-
readonly description: "Issuer DID of the inner task. MUST equal the vault entry's principalDid — the maintainer rejects mismatches with `
|
|
475
|
+
readonly description: "Issuer DID of the inner task. MUST equal the vault entry's principalDid — the maintainer rejects mismatches with `envelopeIssuerMismatch` rather than overwriting.";
|
|
476
476
|
};
|
|
477
477
|
readonly recipient: {
|
|
478
478
|
readonly type: "string";
|
|
@@ -487,7 +487,7 @@ export declare const SPEC: {
|
|
|
487
487
|
readonly expiresAt: {
|
|
488
488
|
readonly type: "string";
|
|
489
489
|
readonly format: "date-time";
|
|
490
|
-
readonly description: "Optional inner-task expiry. The maintainer rejects with `
|
|
490
|
+
readonly description: "Optional inner-task expiry. The maintainer rejects with `envelopeExpired` when this is in the past at sign time.";
|
|
491
491
|
};
|
|
492
492
|
readonly payload: {
|
|
493
493
|
readonly description: "Inner task's payload object. Opaque to the maintainer — passed through unchanged into the signed envelope.";
|
|
@@ -613,7 +613,7 @@ export declare const RESPONSE_SPEC: {
|
|
|
613
613
|
readonly issuer: {
|
|
614
614
|
readonly type: "string";
|
|
615
615
|
readonly minLength: 1;
|
|
616
|
-
readonly description: "Issuer DID of the inner task. MUST equal the vault entry's principalDid — the maintainer rejects mismatches with `
|
|
616
|
+
readonly description: "Issuer DID of the inner task. MUST equal the vault entry's principalDid — the maintainer rejects mismatches with `envelopeIssuerMismatch` rather than overwriting.";
|
|
617
617
|
};
|
|
618
618
|
readonly recipient: {
|
|
619
619
|
readonly type: "string";
|
|
@@ -628,7 +628,7 @@ export declare const RESPONSE_SPEC: {
|
|
|
628
628
|
readonly expiresAt: {
|
|
629
629
|
readonly type: "string";
|
|
630
630
|
readonly format: "date-time";
|
|
631
|
-
readonly description: "Optional inner-task expiry. The maintainer rejects with `
|
|
631
|
+
readonly description: "Optional inner-task expiry. The maintainer rejects with `envelopeExpired` when this is in the past at sign time.";
|
|
632
632
|
};
|
|
633
633
|
readonly payload: {
|
|
634
634
|
readonly description: "Inner task's payload object. Opaque to the maintainer — passed through unchanged into the signed envelope.";
|
|
@@ -30,11 +30,11 @@ export const PAYLOAD_SCHEMA = {
|
|
|
30
30
|
"entryId": {
|
|
31
31
|
"type": "string",
|
|
32
32
|
"minLength": 1,
|
|
33
|
-
"description": "Identifier of the vault entry whose principal will sign. The maintainer rejects with `
|
|
33
|
+
"description": "Identifier of the vault entry whose principal will sign. The maintainer rejects with `notSignable` when `entry.secretKind` is not `did-self-issued` or `didcomm-peer` (other kinds have no DID-based signing identity)."
|
|
34
34
|
},
|
|
35
35
|
"unsignedEnvelope": {
|
|
36
36
|
"$ref": "#/$defs/UnsignedTrustTaskEnvelope",
|
|
37
|
-
"description": "The Trust Task document to sign. MUST satisfy the framework's structural requirements (id/type/issuer/recipient/issuedAt/payload). MUST NOT carry a `proof`. `issuer` MUST equal the referenced entry's principalDid — the maintainer refuses to silently rewrite `issuer` (see `
|
|
37
|
+
"description": "The Trust Task document to sign. MUST satisfy the framework's structural requirements (id/type/issuer/recipient/issuedAt/payload). MUST NOT carry a `proof`. `issuer` MUST equal the referenced entry's principalDid — the maintainer refuses to silently rewrite `issuer` (see `envelopeIssuerMismatch`)."
|
|
38
38
|
},
|
|
39
39
|
"consumerContext": {
|
|
40
40
|
"$ref": "#/$defs/ConsumerContext",
|
|
@@ -42,7 +42,7 @@ export const PAYLOAD_SCHEMA = {
|
|
|
42
42
|
},
|
|
43
43
|
"stepUpProof": {
|
|
44
44
|
"$ref": "#/$defs/StepUpProof",
|
|
45
|
-
"description": "Step-up proof on retry after `
|
|
45
|
+
"description": "Step-up proof on retry after `stepUpRequired`."
|
|
46
46
|
},
|
|
47
47
|
"ext": {
|
|
48
48
|
"$ref": "#/$defs/Ext"
|
|
@@ -82,7 +82,7 @@ export const PAYLOAD_SCHEMA = {
|
|
|
82
82
|
"issuer": {
|
|
83
83
|
"type": "string",
|
|
84
84
|
"minLength": 1,
|
|
85
|
-
"description": "Issuer DID of the inner task. MUST equal the vault entry's principalDid — the maintainer rejects mismatches with `
|
|
85
|
+
"description": "Issuer DID of the inner task. MUST equal the vault entry's principalDid — the maintainer rejects mismatches with `envelopeIssuerMismatch` rather than overwriting."
|
|
86
86
|
},
|
|
87
87
|
"recipient": {
|
|
88
88
|
"type": "string",
|
|
@@ -97,7 +97,7 @@ export const PAYLOAD_SCHEMA = {
|
|
|
97
97
|
"expiresAt": {
|
|
98
98
|
"type": "string",
|
|
99
99
|
"format": "date-time",
|
|
100
|
-
"description": "Optional inner-task expiry. The maintainer rejects with `
|
|
100
|
+
"description": "Optional inner-task expiry. The maintainer rejects with `envelopeExpired` when this is in the past at sign time."
|
|
101
101
|
},
|
|
102
102
|
"payload": {
|
|
103
103
|
"description": "Inner task's payload object. Opaque to the maintainer — passed through unchanged into the signed envelope."
|
|
@@ -246,7 +246,7 @@ export const RESPONSE_PAYLOAD_SCHEMA = {
|
|
|
246
246
|
"issuer": {
|
|
247
247
|
"type": "string",
|
|
248
248
|
"minLength": 1,
|
|
249
|
-
"description": "Issuer DID of the inner task. MUST equal the vault entry's principalDid — the maintainer rejects mismatches with `
|
|
249
|
+
"description": "Issuer DID of the inner task. MUST equal the vault entry's principalDid — the maintainer rejects mismatches with `envelopeIssuerMismatch` rather than overwriting."
|
|
250
250
|
},
|
|
251
251
|
"recipient": {
|
|
252
252
|
"type": "string",
|
|
@@ -261,7 +261,7 @@ export const RESPONSE_PAYLOAD_SCHEMA = {
|
|
|
261
261
|
"expiresAt": {
|
|
262
262
|
"type": "string",
|
|
263
263
|
"format": "date-time",
|
|
264
|
-
"description": "Optional inner-task expiry. The maintainer rejects with `
|
|
264
|
+
"description": "Optional inner-task expiry. The maintainer rejects with `envelopeExpired` when this is in the past at sign time."
|
|
265
265
|
},
|
|
266
266
|
"payload": {
|
|
267
267
|
"description": "Inner task's payload object. Opaque to the maintainer — passed through unchanged into the signed envelope."
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"payload.js","sourceRoot":"","sources":["../../../../src/vault/sign-trust-task/0.1/payload.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAoGH,2BAA2B;AAC3B,MAAM,CAAC,MAAM,QAAQ,GAAG,uDAAgE,CAAC;AAKzF,qEAAqE;AACrE,MAAM,CAAC,MAAM,iBAAiB,GAAG,gEAAyE,CAAC;AAK3G;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,SAAS,EAAE,8CAA8C;IACzD,KAAK,EAAE,uDAAuD;IAC9D,OAAO,EAAE,iCAAiC;IAC1C,aAAa,EAAE,4cAA4c;IAC3d,MAAM,EAAE,QAAQ;IAChB,sBAAsB,EAAE,KAAK;IAC7B,UAAU,EAAE;QACV,SAAS;QACT,kBAAkB;KACnB;IACD,YAAY,EAAE;QACZ,SAAS,EAAE;YACT,MAAM,EAAE,QAAQ;YAChB,WAAW,EAAE,CAAC;YACd,aAAa,EAAE,
|
|
1
|
+
{"version":3,"file":"payload.js","sourceRoot":"","sources":["../../../../src/vault/sign-trust-task/0.1/payload.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAoGH,2BAA2B;AAC3B,MAAM,CAAC,MAAM,QAAQ,GAAG,uDAAgE,CAAC;AAKzF,qEAAqE;AACrE,MAAM,CAAC,MAAM,iBAAiB,GAAG,gEAAyE,CAAC;AAK3G;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,SAAS,EAAE,8CAA8C;IACzD,KAAK,EAAE,uDAAuD;IAC9D,OAAO,EAAE,iCAAiC;IAC1C,aAAa,EAAE,4cAA4c;IAC3d,MAAM,EAAE,QAAQ;IAChB,sBAAsB,EAAE,KAAK;IAC7B,UAAU,EAAE;QACV,SAAS;QACT,kBAAkB;KACnB;IACD,YAAY,EAAE;QACZ,SAAS,EAAE;YACT,MAAM,EAAE,QAAQ;YAChB,WAAW,EAAE,CAAC;YACd,aAAa,EAAE,yNAAyN;SACzO;QACD,kBAAkB,EAAE;YAClB,MAAM,EAAE,mCAAmC;YAC3C,aAAa,EAAE,4SAA4S;SAC5T;QACD,iBAAiB,EAAE;YACjB,MAAM,EAAE,yBAAyB;YACjC,aAAa,EAAE,0DAA0D;SAC1E;QACD,aAAa,EAAE;YACb,MAAM,EAAE,qBAAqB;YAC7B,aAAa,EAAE,gDAAgD;SAChE;QACD,KAAK,EAAE;YACL,MAAM,EAAE,aAAa;SACtB;KACF;IACD,OAAO,EAAE;QACP,2BAA2B,EAAE;YAC3B,SAAS,EAAE,mBAAmB;YAC9B,OAAO,EAAE,8BAA8B;YACvC,aAAa,EAAE,+QAA+Q;YAC9R,MAAM,EAAE,QAAQ;YAChB,UAAU,EAAE;gBACV,IAAI;gBACJ,MAAM;gBACN,QAAQ;gBACR,WAAW;gBACX,UAAU;gBACV,SAAS;aACV;YACD,YAAY,EAAE;gBACZ,IAAI,EAAE;oBACJ,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,6DAA6D;iBAC7E;gBACD,UAAU,EAAE;oBACV,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,qDAAqD;iBACrE;gBACD,MAAM,EAAE;oBACN,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,KAAK;oBACf,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,sFAAsF;iBACtG;gBACD,QAAQ,EAAE;oBACR,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,oKAAoK;iBACpL;gBACD,WAAW,EAAE;oBACX,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,wFAAwF;iBACxG;gBACD,UAAU,EAAE;oBACV,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,WAAW;oBACrB,aAAa,EAAE,wJAAwJ;iBACxK;gBACD,WAAW,EAAE;oBACX,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,WAAW;oBACrB,aAAa,EAAE,kHAAkH;iBAClI;gBACD,SAAS,EAAE;oBACT,aAAa,EAAE,4GAA4G;iBAC5H;gBACD,KAAK,EAAE;oBACL,MAAM,EAAE,aAAa;iBACtB;aACF;YACD,KAAK,EAAE;gBACL,UAAU,EAAE;oBACV,OAAO;iBACR;aACF;SACF;QACD,UAAU,EAAE;YACV,SAAS,EAAE,UAAU;YACrB,OAAO,EAAE,0CAA0C;YACnD,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,gBAAgB;aACjB;YACD,YAAY,EAAE;gBACZ,gBAAgB,EAAE;oBAChB,MAAM,EAAE,QAAQ;oBAChB,aAAa,EAAE,+WAA+W;oBAC9X,UAAU,EAAE;wBACV,IAAI;wBACJ,MAAM;wBACN,QAAQ;wBACR,WAAW;wBACX,UAAU;wBACV,SAAS;wBACT,OAAO;qBACR;iBACF;gBACD,KAAK,EAAE;oBACL,MAAM,EAAE,aAAa;iBACtB;aACF;SACF;QACD,KAAK,EAAE;YACL,OAAO,EAAE,KAAK;YACd,aAAa,EAAE,uKAAuK;YACtL,MAAM,EAAE,QAAQ;YAChB,eAAe,EAAE,CAAC;YAClB,sBAAsB,EAAE,IAAI;YAC5B,eAAe,EAAE;gBACf,SAAS,EAAE,mCAAmC;aAC/C;SACF;QACD,aAAa,EAAE;YACb,OAAO,EAAE,aAAa;YACtB,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,MAAM;gBACN,OAAO;gBACP,aAAa;aACd;YACD,YAAY,EAAE;gBACZ,MAAM,EAAE;oBACN,MAAM,EAAE,QAAQ;oBAChB,MAAM,EAAE;wBACN,aAAa;wBACb,eAAe;wBACf,MAAM;qBACP;iBACF;gBACD,OAAO,EAAE;oBACP,MAAM,EAAE,QAAQ;oBAChB,aAAa,EAAE,uHAAuH;iBACvI;gBACD,aAAa,EAAE;oBACb,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,uDAAuD;iBACvE;aACF;SACF;QACD,iBAAiB,EAAE;YACjB,OAAO,EAAE,iBAAiB;YAC1B,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,YAAY,EAAE;gBACZ,UAAU,EAAE;oBACV,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,4HAA4H;iBAC5I;gBACD,wBAAwB,EAAE;oBACxB,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,WAAW;oBACrB,aAAa,EAAE,8JAA8J;iBAC9K;gBACD,cAAc,EAAE;oBACd,MAAM,EAAE,QAAQ;oBAChB,MAAM,EAAE;wBACN,SAAS;wBACT,MAAM;wBACN,MAAM;wBACN,QAAQ;wBACR,KAAK;qBACN;oBACD,aAAa,EAAE,qDAAqD;iBACrE;aACF;SACF;KACF;CACO,CAAC;AAEX,mEAAmE;AACnE,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,SAAS,EAAE,8CAA8C;IACzD,MAAM,EAAE,kBAAkB;IAC1B,OAAO,EAAE;QACP,2BAA2B,EAAE;YAC3B,SAAS,EAAE,mBAAmB;YAC9B,OAAO,EAAE,8BAA8B;YACvC,aAAa,EAAE,+QAA+Q;YAC9R,MAAM,EAAE,QAAQ;YAChB,UAAU,EAAE;gBACV,IAAI;gBACJ,MAAM;gBACN,QAAQ;gBACR,WAAW;gBACX,UAAU;gBACV,SAAS;aACV;YACD,YAAY,EAAE;gBACZ,IAAI,EAAE;oBACJ,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,6DAA6D;iBAC7E;gBACD,UAAU,EAAE;oBACV,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,qDAAqD;iBACrE;gBACD,MAAM,EAAE;oBACN,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,KAAK;oBACf,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,sFAAsF;iBACtG;gBACD,QAAQ,EAAE;oBACR,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,oKAAoK;iBACpL;gBACD,WAAW,EAAE;oBACX,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,wFAAwF;iBACxG;gBACD,UAAU,EAAE;oBACV,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,WAAW;oBACrB,aAAa,EAAE,wJAAwJ;iBACxK;gBACD,WAAW,EAAE;oBACX,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,WAAW;oBACrB,aAAa,EAAE,kHAAkH;iBAClI;gBACD,SAAS,EAAE;oBACT,aAAa,EAAE,4GAA4G;iBAC5H;gBACD,KAAK,EAAE;oBACL,MAAM,EAAE,aAAa;iBACtB;aACF;YACD,KAAK,EAAE;gBACL,UAAU,EAAE;oBACV,OAAO;iBACR;aACF;SACF;QACD,UAAU,EAAE;YACV,SAAS,EAAE,UAAU;YACrB,OAAO,EAAE,0CAA0C;YACnD,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,gBAAgB;aACjB;YACD,YAAY,EAAE;gBACZ,gBAAgB,EAAE;oBAChB,MAAM,EAAE,QAAQ;oBAChB,aAAa,EAAE,+WAA+W;oBAC9X,UAAU,EAAE;wBACV,IAAI;wBACJ,MAAM;wBACN,QAAQ;wBACR,WAAW;wBACX,UAAU;wBACV,SAAS;wBACT,OAAO;qBACR;iBACF;gBACD,KAAK,EAAE;oBACL,MAAM,EAAE,aAAa;iBACtB;aACF;SACF;QACD,KAAK,EAAE;YACL,OAAO,EAAE,KAAK;YACd,aAAa,EAAE,uKAAuK;YACtL,MAAM,EAAE,QAAQ;YAChB,eAAe,EAAE,CAAC;YAClB,sBAAsB,EAAE,IAAI;YAC5B,eAAe,EAAE;gBACf,SAAS,EAAE,mCAAmC;aAC/C;SACF;QACD,aAAa,EAAE;YACb,OAAO,EAAE,aAAa;YACtB,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,MAAM;gBACN,OAAO;gBACP,aAAa;aACd;YACD,YAAY,EAAE;gBACZ,MAAM,EAAE;oBACN,MAAM,EAAE,QAAQ;oBAChB,MAAM,EAAE;wBACN,aAAa;wBACb,eAAe;wBACf,MAAM;qBACP;iBACF;gBACD,OAAO,EAAE;oBACP,MAAM,EAAE,QAAQ;oBAChB,aAAa,EAAE,uHAAuH;iBACvI;gBACD,aAAa,EAAE;oBACb,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,uDAAuD;iBACvE;aACF;SACF;QACD,iBAAiB,EAAE;YACjB,OAAO,EAAE,iBAAiB;YAC1B,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,YAAY,EAAE;gBACZ,UAAU,EAAE;oBACV,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,4HAA4H;iBAC5I;gBACD,wBAAwB,EAAE;oBACxB,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,WAAW;oBACrB,aAAa,EAAE,8JAA8J;iBAC9K;gBACD,cAAc,EAAE;oBACd,MAAM,EAAE,QAAQ;oBAChB,MAAM,EAAE;wBACN,SAAS;wBACT,MAAM;wBACN,MAAM;wBACN,QAAQ;wBACR,KAAK;qBACN;oBACD,aAAa,EAAE,qDAAqD;iBACrE;aACF;SACF;KACF;CACO,CAAC;AAEX;;;;;GAKG;AACH,MAAM,CAAC,MAAM,IAAI,GAAG;IAClB,OAAO,EAAE,QAAQ;IACjB,QAAQ,EAAE,KAAK;IACf,eAAe,EAAE,IAAI;IACrB,mBAAmB,EAAE,IAAI;IACzB,aAAa,EAAE,cAAc;CACrB,CAAC;AAEX;;;;GAIG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,OAAO,EAAE,iBAAiB;IAC1B,QAAQ,EAAE,KAAK;IACf,eAAe,EAAE,IAAI;IACrB,mBAAmB,EAAE,IAAI;IACzB,aAAa,EAAE,uBAAuB;CAC9B,CAAC"}
|
|
@@ -7,7 +7,7 @@
|
|
|
7
7
|
*/
|
|
8
8
|
export interface VaultSignTrustTaskPayload {
|
|
9
9
|
/**
|
|
10
|
-
* Identifier of the vault entry whose principal will sign. The maintainer rejects with `
|
|
10
|
+
* Identifier of the vault entry whose principal will sign. The maintainer rejects with `notSignable` when `entry.secretKind` is not `didSelfIssued` or `didcommPeer` (other kinds have no DID-based signing identity).
|
|
11
11
|
*/
|
|
12
12
|
entryId: string;
|
|
13
13
|
unsignedEnvelope: UnsignedTrustTaskEnvelope;
|
|
@@ -16,7 +16,7 @@ export interface VaultSignTrustTaskPayload {
|
|
|
16
16
|
ext?: Ext;
|
|
17
17
|
}
|
|
18
18
|
/**
|
|
19
|
-
* The Trust Task document to sign. MUST satisfy the framework's structural requirements (id/type/issuer/recipient/issuedAt/payload). MUST NOT carry a `proof`. `issuer` MUST equal the referenced entry's principalDid — the maintainer refuses to silently rewrite `issuer` (see `
|
|
19
|
+
* The Trust Task document to sign. MUST satisfy the framework's structural requirements (id/type/issuer/recipient/issuedAt/payload). MUST NOT carry a `proof`. `issuer` MUST equal the referenced entry's principalDid — the maintainer refuses to silently rewrite `issuer` (see `envelopeIssuerMismatch`).
|
|
20
20
|
*/
|
|
21
21
|
export interface UnsignedTrustTaskEnvelope {
|
|
22
22
|
/**
|
|
@@ -32,7 +32,7 @@ export interface UnsignedTrustTaskEnvelope {
|
|
|
32
32
|
*/
|
|
33
33
|
type: string;
|
|
34
34
|
/**
|
|
35
|
-
* Issuer DID of the inner task. MUST equal the vault entry's principalDid — the maintainer rejects mismatches with `
|
|
35
|
+
* Issuer DID of the inner task. MUST equal the vault entry's principalDid — the maintainer rejects mismatches with `envelopeIssuerMismatch` rather than overwriting.
|
|
36
36
|
*/
|
|
37
37
|
issuer: string;
|
|
38
38
|
/**
|
|
@@ -44,7 +44,7 @@ export interface UnsignedTrustTaskEnvelope {
|
|
|
44
44
|
*/
|
|
45
45
|
issuedAt: string;
|
|
46
46
|
/**
|
|
47
|
-
* Optional inner-task expiry. The maintainer rejects with `
|
|
47
|
+
* Optional inner-task expiry. The maintainer rejects with `envelopeExpired` when this is in the past at sign time.
|
|
48
48
|
*/
|
|
49
49
|
expiresAt?: string;
|
|
50
50
|
/**
|
|
@@ -128,11 +128,11 @@ export declare const PAYLOAD_SCHEMA: {
|
|
|
128
128
|
readonly entryId: {
|
|
129
129
|
readonly type: "string";
|
|
130
130
|
readonly minLength: 1;
|
|
131
|
-
readonly description: "Identifier of the vault entry whose principal will sign. The maintainer rejects with `
|
|
131
|
+
readonly description: "Identifier of the vault entry whose principal will sign. The maintainer rejects with `notSignable` when `entry.secretKind` is not `didSelfIssued` or `didcommPeer` (other kinds have no DID-based signing identity).";
|
|
132
132
|
};
|
|
133
133
|
readonly unsignedEnvelope: {
|
|
134
134
|
readonly $ref: "#/$defs/UnsignedTrustTaskEnvelope";
|
|
135
|
-
readonly description: "The Trust Task document to sign. MUST satisfy the framework's structural requirements (id/type/issuer/recipient/issuedAt/payload). MUST NOT carry a `proof`. `issuer` MUST equal the referenced entry's principalDid — the maintainer refuses to silently rewrite `issuer` (see `
|
|
135
|
+
readonly description: "The Trust Task document to sign. MUST satisfy the framework's structural requirements (id/type/issuer/recipient/issuedAt/payload). MUST NOT carry a `proof`. `issuer` MUST equal the referenced entry's principalDid — the maintainer refuses to silently rewrite `issuer` (see `envelopeIssuerMismatch`).";
|
|
136
136
|
};
|
|
137
137
|
readonly consumerContext: {
|
|
138
138
|
readonly $ref: "#/$defs/ConsumerContext";
|
|
@@ -173,7 +173,7 @@ export declare const PAYLOAD_SCHEMA: {
|
|
|
173
173
|
readonly issuer: {
|
|
174
174
|
readonly type: "string";
|
|
175
175
|
readonly minLength: 1;
|
|
176
|
-
readonly description: "Issuer DID of the inner task. MUST equal the vault entry's principalDid — the maintainer rejects mismatches with `
|
|
176
|
+
readonly description: "Issuer DID of the inner task. MUST equal the vault entry's principalDid — the maintainer rejects mismatches with `envelopeIssuerMismatch` rather than overwriting.";
|
|
177
177
|
};
|
|
178
178
|
readonly recipient: {
|
|
179
179
|
readonly type: "string";
|
|
@@ -188,7 +188,7 @@ export declare const PAYLOAD_SCHEMA: {
|
|
|
188
188
|
readonly expiresAt: {
|
|
189
189
|
readonly type: "string";
|
|
190
190
|
readonly format: "date-time";
|
|
191
|
-
readonly description: "Optional inner-task expiry. The maintainer rejects with `
|
|
191
|
+
readonly description: "Optional inner-task expiry. The maintainer rejects with `envelopeExpired` when this is in the past at sign time.";
|
|
192
192
|
};
|
|
193
193
|
readonly payload: {
|
|
194
194
|
readonly description: "Inner task's payload object. Opaque to the maintainer — passed through unchanged into the signed envelope.";
|
|
@@ -304,7 +304,7 @@ export declare const RESPONSE_PAYLOAD_SCHEMA: {
|
|
|
304
304
|
readonly issuer: {
|
|
305
305
|
readonly type: "string";
|
|
306
306
|
readonly minLength: 1;
|
|
307
|
-
readonly description: "Issuer DID of the inner task. MUST equal the vault entry's principalDid — the maintainer rejects mismatches with `
|
|
307
|
+
readonly description: "Issuer DID of the inner task. MUST equal the vault entry's principalDid — the maintainer rejects mismatches with `envelopeIssuerMismatch` rather than overwriting.";
|
|
308
308
|
};
|
|
309
309
|
readonly recipient: {
|
|
310
310
|
readonly type: "string";
|
|
@@ -319,7 +319,7 @@ export declare const RESPONSE_PAYLOAD_SCHEMA: {
|
|
|
319
319
|
readonly expiresAt: {
|
|
320
320
|
readonly type: "string";
|
|
321
321
|
readonly format: "date-time";
|
|
322
|
-
readonly description: "Optional inner-task expiry. The maintainer rejects with `
|
|
322
|
+
readonly description: "Optional inner-task expiry. The maintainer rejects with `envelopeExpired` when this is in the past at sign time.";
|
|
323
323
|
};
|
|
324
324
|
readonly payload: {
|
|
325
325
|
readonly description: "Inner task's payload object. Opaque to the maintainer — passed through unchanged into the signed envelope.";
|
|
@@ -427,11 +427,11 @@ export declare const SPEC: {
|
|
|
427
427
|
readonly entryId: {
|
|
428
428
|
readonly type: "string";
|
|
429
429
|
readonly minLength: 1;
|
|
430
|
-
readonly description: "Identifier of the vault entry whose principal will sign. The maintainer rejects with `
|
|
430
|
+
readonly description: "Identifier of the vault entry whose principal will sign. The maintainer rejects with `notSignable` when `entry.secretKind` is not `didSelfIssued` or `didcommPeer` (other kinds have no DID-based signing identity).";
|
|
431
431
|
};
|
|
432
432
|
readonly unsignedEnvelope: {
|
|
433
433
|
readonly $ref: "#/$defs/UnsignedTrustTaskEnvelope";
|
|
434
|
-
readonly description: "The Trust Task document to sign. MUST satisfy the framework's structural requirements (id/type/issuer/recipient/issuedAt/payload). MUST NOT carry a `proof`. `issuer` MUST equal the referenced entry's principalDid — the maintainer refuses to silently rewrite `issuer` (see `
|
|
434
|
+
readonly description: "The Trust Task document to sign. MUST satisfy the framework's structural requirements (id/type/issuer/recipient/issuedAt/payload). MUST NOT carry a `proof`. `issuer` MUST equal the referenced entry's principalDid — the maintainer refuses to silently rewrite `issuer` (see `envelopeIssuerMismatch`).";
|
|
435
435
|
};
|
|
436
436
|
readonly consumerContext: {
|
|
437
437
|
readonly $ref: "#/$defs/ConsumerContext";
|
|
@@ -472,7 +472,7 @@ export declare const SPEC: {
|
|
|
472
472
|
readonly issuer: {
|
|
473
473
|
readonly type: "string";
|
|
474
474
|
readonly minLength: 1;
|
|
475
|
-
readonly description: "Issuer DID of the inner task. MUST equal the vault entry's principalDid — the maintainer rejects mismatches with `
|
|
475
|
+
readonly description: "Issuer DID of the inner task. MUST equal the vault entry's principalDid — the maintainer rejects mismatches with `envelopeIssuerMismatch` rather than overwriting.";
|
|
476
476
|
};
|
|
477
477
|
readonly recipient: {
|
|
478
478
|
readonly type: "string";
|
|
@@ -487,7 +487,7 @@ export declare const SPEC: {
|
|
|
487
487
|
readonly expiresAt: {
|
|
488
488
|
readonly type: "string";
|
|
489
489
|
readonly format: "date-time";
|
|
490
|
-
readonly description: "Optional inner-task expiry. The maintainer rejects with `
|
|
490
|
+
readonly description: "Optional inner-task expiry. The maintainer rejects with `envelopeExpired` when this is in the past at sign time.";
|
|
491
491
|
};
|
|
492
492
|
readonly payload: {
|
|
493
493
|
readonly description: "Inner task's payload object. Opaque to the maintainer — passed through unchanged into the signed envelope.";
|
|
@@ -613,7 +613,7 @@ export declare const RESPONSE_SPEC: {
|
|
|
613
613
|
readonly issuer: {
|
|
614
614
|
readonly type: "string";
|
|
615
615
|
readonly minLength: 1;
|
|
616
|
-
readonly description: "Issuer DID of the inner task. MUST equal the vault entry's principalDid — the maintainer rejects mismatches with `
|
|
616
|
+
readonly description: "Issuer DID of the inner task. MUST equal the vault entry's principalDid — the maintainer rejects mismatches with `envelopeIssuerMismatch` rather than overwriting.";
|
|
617
617
|
};
|
|
618
618
|
readonly recipient: {
|
|
619
619
|
readonly type: "string";
|
|
@@ -628,7 +628,7 @@ export declare const RESPONSE_SPEC: {
|
|
|
628
628
|
readonly expiresAt: {
|
|
629
629
|
readonly type: "string";
|
|
630
630
|
readonly format: "date-time";
|
|
631
|
-
readonly description: "Optional inner-task expiry. The maintainer rejects with `
|
|
631
|
+
readonly description: "Optional inner-task expiry. The maintainer rejects with `envelopeExpired` when this is in the past at sign time.";
|
|
632
632
|
};
|
|
633
633
|
readonly payload: {
|
|
634
634
|
readonly description: "Inner task's payload object. Opaque to the maintainer — passed through unchanged into the signed envelope.";
|
|
@@ -30,11 +30,11 @@ export const PAYLOAD_SCHEMA = {
|
|
|
30
30
|
"entryId": {
|
|
31
31
|
"type": "string",
|
|
32
32
|
"minLength": 1,
|
|
33
|
-
"description": "Identifier of the vault entry whose principal will sign. The maintainer rejects with `
|
|
33
|
+
"description": "Identifier of the vault entry whose principal will sign. The maintainer rejects with `notSignable` when `entry.secretKind` is not `didSelfIssued` or `didcommPeer` (other kinds have no DID-based signing identity)."
|
|
34
34
|
},
|
|
35
35
|
"unsignedEnvelope": {
|
|
36
36
|
"$ref": "#/$defs/UnsignedTrustTaskEnvelope",
|
|
37
|
-
"description": "The Trust Task document to sign. MUST satisfy the framework's structural requirements (id/type/issuer/recipient/issuedAt/payload). MUST NOT carry a `proof`. `issuer` MUST equal the referenced entry's principalDid — the maintainer refuses to silently rewrite `issuer` (see `
|
|
37
|
+
"description": "The Trust Task document to sign. MUST satisfy the framework's structural requirements (id/type/issuer/recipient/issuedAt/payload). MUST NOT carry a `proof`. `issuer` MUST equal the referenced entry's principalDid — the maintainer refuses to silently rewrite `issuer` (see `envelopeIssuerMismatch`)."
|
|
38
38
|
},
|
|
39
39
|
"consumerContext": {
|
|
40
40
|
"$ref": "#/$defs/ConsumerContext",
|
|
@@ -82,7 +82,7 @@ export const PAYLOAD_SCHEMA = {
|
|
|
82
82
|
"issuer": {
|
|
83
83
|
"type": "string",
|
|
84
84
|
"minLength": 1,
|
|
85
|
-
"description": "Issuer DID of the inner task. MUST equal the vault entry's principalDid — the maintainer rejects mismatches with `
|
|
85
|
+
"description": "Issuer DID of the inner task. MUST equal the vault entry's principalDid — the maintainer rejects mismatches with `envelopeIssuerMismatch` rather than overwriting."
|
|
86
86
|
},
|
|
87
87
|
"recipient": {
|
|
88
88
|
"type": "string",
|
|
@@ -97,7 +97,7 @@ export const PAYLOAD_SCHEMA = {
|
|
|
97
97
|
"expiresAt": {
|
|
98
98
|
"type": "string",
|
|
99
99
|
"format": "date-time",
|
|
100
|
-
"description": "Optional inner-task expiry. The maintainer rejects with `
|
|
100
|
+
"description": "Optional inner-task expiry. The maintainer rejects with `envelopeExpired` when this is in the past at sign time."
|
|
101
101
|
},
|
|
102
102
|
"payload": {
|
|
103
103
|
"description": "Inner task's payload object. Opaque to the maintainer — passed through unchanged into the signed envelope."
|
|
@@ -246,7 +246,7 @@ export const RESPONSE_PAYLOAD_SCHEMA = {
|
|
|
246
246
|
"issuer": {
|
|
247
247
|
"type": "string",
|
|
248
248
|
"minLength": 1,
|
|
249
|
-
"description": "Issuer DID of the inner task. MUST equal the vault entry's principalDid — the maintainer rejects mismatches with `
|
|
249
|
+
"description": "Issuer DID of the inner task. MUST equal the vault entry's principalDid — the maintainer rejects mismatches with `envelopeIssuerMismatch` rather than overwriting."
|
|
250
250
|
},
|
|
251
251
|
"recipient": {
|
|
252
252
|
"type": "string",
|
|
@@ -261,7 +261,7 @@ export const RESPONSE_PAYLOAD_SCHEMA = {
|
|
|
261
261
|
"expiresAt": {
|
|
262
262
|
"type": "string",
|
|
263
263
|
"format": "date-time",
|
|
264
|
-
"description": "Optional inner-task expiry. The maintainer rejects with `
|
|
264
|
+
"description": "Optional inner-task expiry. The maintainer rejects with `envelopeExpired` when this is in the past at sign time."
|
|
265
265
|
},
|
|
266
266
|
"payload": {
|
|
267
267
|
"description": "Inner task's payload object. Opaque to the maintainer — passed through unchanged into the signed envelope."
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"payload.js","sourceRoot":"","sources":["../../../../src/vault/sign-trust-task/0.2/payload.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAoGH,2BAA2B;AAC3B,MAAM,CAAC,MAAM,QAAQ,GAAG,uDAAgE,CAAC;AAKzF,qEAAqE;AACrE,MAAM,CAAC,MAAM,iBAAiB,GAAG,gEAAyE,CAAC;AAK3G;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,SAAS,EAAE,8CAA8C;IACzD,KAAK,EAAE,uDAAuD;IAC9D,OAAO,EAAE,iCAAiC;IAC1C,aAAa,EAAE,ycAAyc;IACxd,MAAM,EAAE,QAAQ;IAChB,sBAAsB,EAAE,KAAK;IAC7B,UAAU,EAAE;QACV,SAAS;QACT,kBAAkB;KACnB;IACD,YAAY,EAAE;QACZ,SAAS,EAAE;YACT,MAAM,EAAE,QAAQ;YAChB,WAAW,EAAE,CAAC;YACd,aAAa,EAAE,
|
|
1
|
+
{"version":3,"file":"payload.js","sourceRoot":"","sources":["../../../../src/vault/sign-trust-task/0.2/payload.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAoGH,2BAA2B;AAC3B,MAAM,CAAC,MAAM,QAAQ,GAAG,uDAAgE,CAAC;AAKzF,qEAAqE;AACrE,MAAM,CAAC,MAAM,iBAAiB,GAAG,gEAAyE,CAAC;AAK3G;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,SAAS,EAAE,8CAA8C;IACzD,KAAK,EAAE,uDAAuD;IAC9D,OAAO,EAAE,iCAAiC;IAC1C,aAAa,EAAE,ycAAyc;IACxd,MAAM,EAAE,QAAQ;IAChB,sBAAsB,EAAE,KAAK;IAC7B,UAAU,EAAE;QACV,SAAS;QACT,kBAAkB;KACnB;IACD,YAAY,EAAE;QACZ,SAAS,EAAE;YACT,MAAM,EAAE,QAAQ;YAChB,WAAW,EAAE,CAAC;YACd,aAAa,EAAE,sNAAsN;SACtO;QACD,kBAAkB,EAAE;YAClB,MAAM,EAAE,mCAAmC;YAC3C,aAAa,EAAE,4SAA4S;SAC5T;QACD,iBAAiB,EAAE;YACjB,MAAM,EAAE,yBAAyB;YACjC,aAAa,EAAE,0DAA0D;SAC1E;QACD,aAAa,EAAE;YACb,MAAM,EAAE,qBAAqB;YAC7B,aAAa,EAAE,gDAAgD;SAChE;QACD,KAAK,EAAE;YACL,MAAM,EAAE,aAAa;SACtB;KACF;IACD,OAAO,EAAE;QACP,2BAA2B,EAAE;YAC3B,SAAS,EAAE,mBAAmB;YAC9B,OAAO,EAAE,8BAA8B;YACvC,aAAa,EAAE,+QAA+Q;YAC9R,MAAM,EAAE,QAAQ;YAChB,UAAU,EAAE;gBACV,IAAI;gBACJ,MAAM;gBACN,QAAQ;gBACR,WAAW;gBACX,UAAU;gBACV,SAAS;aACV;YACD,YAAY,EAAE;gBACZ,IAAI,EAAE;oBACJ,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,6DAA6D;iBAC7E;gBACD,UAAU,EAAE;oBACV,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,qDAAqD;iBACrE;gBACD,MAAM,EAAE;oBACN,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,KAAK;oBACf,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,sFAAsF;iBACtG;gBACD,QAAQ,EAAE;oBACR,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,oKAAoK;iBACpL;gBACD,WAAW,EAAE;oBACX,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,wFAAwF;iBACxG;gBACD,UAAU,EAAE;oBACV,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,WAAW;oBACrB,aAAa,EAAE,wJAAwJ;iBACxK;gBACD,WAAW,EAAE;oBACX,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,WAAW;oBACrB,aAAa,EAAE,kHAAkH;iBAClI;gBACD,SAAS,EAAE;oBACT,aAAa,EAAE,4GAA4G;iBAC5H;gBACD,KAAK,EAAE;oBACL,MAAM,EAAE,aAAa;iBACtB;aACF;YACD,KAAK,EAAE;gBACL,UAAU,EAAE;oBACV,OAAO;iBACR;aACF;SACF;QACD,UAAU,EAAE;YACV,SAAS,EAAE,UAAU;YACrB,OAAO,EAAE,0CAA0C;YACnD,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,gBAAgB;aACjB;YACD,YAAY,EAAE;gBACZ,gBAAgB,EAAE;oBAChB,MAAM,EAAE,QAAQ;oBAChB,aAAa,EAAE,+WAA+W;oBAC9X,UAAU,EAAE;wBACV,IAAI;wBACJ,MAAM;wBACN,QAAQ;wBACR,WAAW;wBACX,UAAU;wBACV,SAAS;wBACT,OAAO;qBACR;iBACF;gBACD,KAAK,EAAE;oBACL,MAAM,EAAE,aAAa;iBACtB;aACF;SACF;QACD,KAAK,EAAE;YACL,OAAO,EAAE,KAAK;YACd,aAAa,EAAE,uKAAuK;YACtL,MAAM,EAAE,QAAQ;YAChB,eAAe,EAAE,CAAC;YAClB,sBAAsB,EAAE,IAAI;YAC5B,eAAe,EAAE;gBACf,SAAS,EAAE,mCAAmC;aAC/C;SACF;QACD,aAAa,EAAE;YACb,OAAO,EAAE,aAAa;YACtB,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,MAAM;gBACN,OAAO;gBACP,aAAa;aACd;YACD,YAAY,EAAE;gBACZ,MAAM,EAAE;oBACN,MAAM,EAAE,QAAQ;oBAChB,MAAM,EAAE;wBACN,YAAY;wBACZ,cAAc;wBACd,MAAM;qBACP;iBACF;gBACD,OAAO,EAAE;oBACP,MAAM,EAAE,QAAQ;oBAChB,aAAa,EAAE,uHAAuH;iBACvI;gBACD,aAAa,EAAE;oBACb,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,uDAAuD;iBACvE;aACF;SACF;QACD,iBAAiB,EAAE;YACjB,OAAO,EAAE,iBAAiB;YAC1B,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,YAAY,EAAE;gBACZ,UAAU,EAAE;oBACV,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,4HAA4H;iBAC5I;gBACD,wBAAwB,EAAE;oBACxB,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,WAAW;oBACrB,aAAa,EAAE,8JAA8J;iBAC9K;gBACD,cAAc,EAAE;oBACd,MAAM,EAAE,QAAQ;oBAChB,MAAM,EAAE;wBACN,SAAS;wBACT,MAAM;wBACN,MAAM;wBACN,QAAQ;wBACR,KAAK;qBACN;oBACD,aAAa,EAAE,qDAAqD;iBACrE;aACF;SACF;KACF;CACO,CAAC;AAEX,mEAAmE;AACnE,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,SAAS,EAAE,8CAA8C;IACzD,MAAM,EAAE,kBAAkB;IAC1B,OAAO,EAAE;QACP,2BAA2B,EAAE;YAC3B,SAAS,EAAE,mBAAmB;YAC9B,OAAO,EAAE,8BAA8B;YACvC,aAAa,EAAE,+QAA+Q;YAC9R,MAAM,EAAE,QAAQ;YAChB,UAAU,EAAE;gBACV,IAAI;gBACJ,MAAM;gBACN,QAAQ;gBACR,WAAW;gBACX,UAAU;gBACV,SAAS;aACV;YACD,YAAY,EAAE;gBACZ,IAAI,EAAE;oBACJ,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,6DAA6D;iBAC7E;gBACD,UAAU,EAAE;oBACV,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,qDAAqD;iBACrE;gBACD,MAAM,EAAE;oBACN,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,KAAK;oBACf,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,sFAAsF;iBACtG;gBACD,QAAQ,EAAE;oBACR,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,oKAAoK;iBACpL;gBACD,WAAW,EAAE;oBACX,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,wFAAwF;iBACxG;gBACD,UAAU,EAAE;oBACV,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,WAAW;oBACrB,aAAa,EAAE,wJAAwJ;iBACxK;gBACD,WAAW,EAAE;oBACX,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,WAAW;oBACrB,aAAa,EAAE,kHAAkH;iBAClI;gBACD,SAAS,EAAE;oBACT,aAAa,EAAE,4GAA4G;iBAC5H;gBACD,KAAK,EAAE;oBACL,MAAM,EAAE,aAAa;iBACtB;aACF;YACD,KAAK,EAAE;gBACL,UAAU,EAAE;oBACV,OAAO;iBACR;aACF;SACF;QACD,UAAU,EAAE;YACV,SAAS,EAAE,UAAU;YACrB,OAAO,EAAE,0CAA0C;YACnD,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,gBAAgB;aACjB;YACD,YAAY,EAAE;gBACZ,gBAAgB,EAAE;oBAChB,MAAM,EAAE,QAAQ;oBAChB,aAAa,EAAE,+WAA+W;oBAC9X,UAAU,EAAE;wBACV,IAAI;wBACJ,MAAM;wBACN,QAAQ;wBACR,WAAW;wBACX,UAAU;wBACV,SAAS;wBACT,OAAO;qBACR;iBACF;gBACD,KAAK,EAAE;oBACL,MAAM,EAAE,aAAa;iBACtB;aACF;SACF;QACD,KAAK,EAAE;YACL,OAAO,EAAE,KAAK;YACd,aAAa,EAAE,uKAAuK;YACtL,MAAM,EAAE,QAAQ;YAChB,eAAe,EAAE,CAAC;YAClB,sBAAsB,EAAE,IAAI;YAC5B,eAAe,EAAE;gBACf,SAAS,EAAE,mCAAmC;aAC/C;SACF;QACD,aAAa,EAAE;YACb,OAAO,EAAE,aAAa;YACtB,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,MAAM;gBACN,OAAO;gBACP,aAAa;aACd;YACD,YAAY,EAAE;gBACZ,MAAM,EAAE;oBACN,MAAM,EAAE,QAAQ;oBAChB,MAAM,EAAE;wBACN,YAAY;wBACZ,cAAc;wBACd,MAAM;qBACP;iBACF;gBACD,OAAO,EAAE;oBACP,MAAM,EAAE,QAAQ;oBAChB,aAAa,EAAE,uHAAuH;iBACvI;gBACD,aAAa,EAAE;oBACb,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,uDAAuD;iBACvE;aACF;SACF;QACD,iBAAiB,EAAE;YACjB,OAAO,EAAE,iBAAiB;YAC1B,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,YAAY,EAAE;gBACZ,UAAU,EAAE;oBACV,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,4HAA4H;iBAC5I;gBACD,wBAAwB,EAAE;oBACxB,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,WAAW;oBACrB,aAAa,EAAE,8JAA8J;iBAC9K;gBACD,cAAc,EAAE;oBACd,MAAM,EAAE,QAAQ;oBAChB,MAAM,EAAE;wBACN,SAAS;wBACT,MAAM;wBACN,MAAM;wBACN,QAAQ;wBACR,KAAK;qBACN;oBACD,aAAa,EAAE,qDAAqD;iBACrE;aACF;SACF;KACF;CACO,CAAC;AAEX;;;;;GAKG;AACH,MAAM,CAAC,MAAM,IAAI,GAAG;IAClB,OAAO,EAAE,QAAQ;IACjB,QAAQ,EAAE,KAAK;IACf,eAAe,EAAE,IAAI;IACrB,mBAAmB,EAAE,IAAI;IACzB,aAAa,EAAE,cAAc;CACrB,CAAC;AAEX;;;;GAIG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,OAAO,EAAE,iBAAiB;IAC1B,QAAQ,EAAE,KAAK;IACf,eAAe,EAAE,IAAI;IACrB,mBAAmB,EAAE,IAAI;IACzB,aAAa,EAAE,uBAAuB;CAC9B,CAAC"}
|
|
@@ -19,7 +19,7 @@ export type SiteTarget = WebOrigin | Did | IosApp | AndroidApp;
|
|
|
19
19
|
*/
|
|
20
20
|
export type SecretKind = "password" | "passkey" | "oauth-tokens" | "did-self-issued" | "didcomm-peer" | "bearer-token" | "ssh-key" | "custom";
|
|
21
21
|
/**
|
|
22
|
-
* Pluggable cipher envelope (discriminated by `envelope`) whose cleartext is a JCS-canonical JSON conforming to `vault/_shared/0.1/vault-secret#/$defs/VaultSecret`. The supported envelope kinds are listed in the SealedEnvelope shared schema; M2A consumers reject any kind they don't implement with `vault/upsert:
|
|
22
|
+
* Pluggable cipher envelope (discriminated by `envelope`) whose cleartext is a JCS-canonical JSON conforming to `vault/_shared/0.1/vault-secret#/$defs/VaultSecret`. The supported envelope kinds are listed in the SealedEnvelope shared schema; M2A consumers reject any kind they don't implement with `vault/upsert:envelopeUnsupported`. REQUIRED on create unless `secretKind` is `did-self-issued` or `didcomm-peer` (those carry only references to maintainer-internal key ids and have no extra secret bytes). On update, omit if the secret material is unchanged; populate if the secret is being rotated.
|
|
23
23
|
*/
|
|
24
24
|
export type SealedEnvelope = DidcommAuthcryptEnvelope | HpkeArmoredEnvelope | TspMessageEnvelope;
|
|
25
25
|
/**
|
|
@@ -43,7 +43,7 @@ export interface VaultUpsertPayload {
|
|
|
43
43
|
*/
|
|
44
44
|
id?: string;
|
|
45
45
|
/**
|
|
46
|
-
* When updating, the consumer's last-observed `version` for the entry. The maintainer rejects with `vault/upsert:
|
|
46
|
+
* When updating, the consumer's last-observed `version` for the entry. The maintainer rejects with `vault/upsert:versionConflict` if the current version differs. Omit on create.
|
|
47
47
|
*/
|
|
48
48
|
expectedVersion?: number;
|
|
49
49
|
/**
|
|
@@ -140,7 +140,7 @@ export interface HpkeArmoredEnvelope {
|
|
|
140
140
|
producerAssertion?: "did-signed" | "attested" | "pinned-only";
|
|
141
141
|
}
|
|
142
142
|
/**
|
|
143
|
-
* Trust Spanning Protocol message (https://trustoverip.github.io/tswg-tsp-specification/). Reserved variant; no OpenVTC component reads or emits this today. Listed in the union so implementations can declare intent to use TSP in discovery and so consumers reject `tsp-message` envelopes explicitly (`
|
|
143
|
+
* Trust Spanning Protocol message (https://trustoverip.github.io/tswg-tsp-specification/). Reserved variant; no OpenVTC component reads or emits this today. Listed in the union so implementations can declare intent to use TSP in discovery and so consumers reject `tsp-message` envelopes explicitly (`envelopeUnsupported`) until they're wired up — rather than silently failing in DIDComm parsing.
|
|
144
144
|
*/
|
|
145
145
|
export interface TspMessageEnvelope {
|
|
146
146
|
envelope: "tsp-message";
|
|
@@ -321,7 +321,7 @@ export declare const PAYLOAD_SCHEMA: {
|
|
|
321
321
|
readonly expectedVersion: {
|
|
322
322
|
readonly type: "integer";
|
|
323
323
|
readonly minimum: 0;
|
|
324
|
-
readonly description: "When updating, the consumer's last-observed `version` for the entry. The maintainer rejects with `vault/upsert:
|
|
324
|
+
readonly description: "When updating, the consumer's last-observed `version` for the entry. The maintainer rejects with `vault/upsert:versionConflict` if the current version differs. Omit on create.";
|
|
325
325
|
};
|
|
326
326
|
readonly contextId: {
|
|
327
327
|
readonly type: "string";
|
|
@@ -382,7 +382,7 @@ export declare const PAYLOAD_SCHEMA: {
|
|
|
382
382
|
};
|
|
383
383
|
readonly sealedSecret: {
|
|
384
384
|
readonly $ref: "#/$defs/SealedEnvelope";
|
|
385
|
-
readonly description: "Pluggable cipher envelope (discriminated by `envelope`) whose cleartext is a JCS-canonical JSON conforming to `vault/_shared/0.1/vault-secret#/$defs/VaultSecret`. The supported envelope kinds are listed in the SealedEnvelope shared schema; M2A consumers reject any kind they don't implement with `vault/upsert:
|
|
385
|
+
readonly description: "Pluggable cipher envelope (discriminated by `envelope`) whose cleartext is a JCS-canonical JSON conforming to `vault/_shared/0.1/vault-secret#/$defs/VaultSecret`. The supported envelope kinds are listed in the SealedEnvelope shared schema; M2A consumers reject any kind they don't implement with `vault/upsert:envelopeUnsupported`. REQUIRED on create unless `secretKind` is `did-self-issued` or `didcomm-peer` (those carry only references to maintainer-internal key ids and have no extra secret bytes). On update, omit if the secret material is unchanged; populate if the secret is being rotated.";
|
|
386
386
|
};
|
|
387
387
|
readonly clearFields: {
|
|
388
388
|
readonly type: "array";
|
|
@@ -713,7 +713,7 @@ export declare const PAYLOAD_SCHEMA: {
|
|
|
713
713
|
};
|
|
714
714
|
readonly TspMessageEnvelope: {
|
|
715
715
|
readonly title: "TspMessageEnvelope";
|
|
716
|
-
readonly description: "Trust Spanning Protocol message (https://trustoverip.github.io/tswg-tsp-specification/). Reserved variant; no OpenVTC component reads or emits this today. Listed in the union so implementations can declare intent to use TSP in discovery and so consumers reject `tsp-message` envelopes explicitly (`
|
|
716
|
+
readonly description: "Trust Spanning Protocol message (https://trustoverip.github.io/tswg-tsp-specification/). Reserved variant; no OpenVTC component reads or emits this today. Listed in the union so implementations can declare intent to use TSP in discovery and so consumers reject `tsp-message` envelopes explicitly (`envelopeUnsupported`) until they're wired up — rather than silently failing in DIDComm parsing.";
|
|
717
717
|
readonly type: "object";
|
|
718
718
|
readonly additionalProperties: false;
|
|
719
719
|
readonly required: readonly ["envelope", "message"];
|
|
@@ -1095,7 +1095,7 @@ export declare const RESPONSE_PAYLOAD_SCHEMA: {
|
|
|
1095
1095
|
};
|
|
1096
1096
|
readonly TspMessageEnvelope: {
|
|
1097
1097
|
readonly title: "TspMessageEnvelope";
|
|
1098
|
-
readonly description: "Trust Spanning Protocol message (https://trustoverip.github.io/tswg-tsp-specification/). Reserved variant; no OpenVTC component reads or emits this today. Listed in the union so implementations can declare intent to use TSP in discovery and so consumers reject `tsp-message` envelopes explicitly (`
|
|
1098
|
+
readonly description: "Trust Spanning Protocol message (https://trustoverip.github.io/tswg-tsp-specification/). Reserved variant; no OpenVTC component reads or emits this today. Listed in the union so implementations can declare intent to use TSP in discovery and so consumers reject `tsp-message` envelopes explicitly (`envelopeUnsupported`) until they're wired up — rather than silently failing in DIDComm parsing.";
|
|
1099
1099
|
readonly type: "object";
|
|
1100
1100
|
readonly additionalProperties: false;
|
|
1101
1101
|
readonly required: readonly ["envelope", "message"];
|
|
@@ -1185,7 +1185,7 @@ export declare const SPEC: {
|
|
|
1185
1185
|
readonly expectedVersion: {
|
|
1186
1186
|
readonly type: "integer";
|
|
1187
1187
|
readonly minimum: 0;
|
|
1188
|
-
readonly description: "When updating, the consumer's last-observed `version` for the entry. The maintainer rejects with `vault/upsert:
|
|
1188
|
+
readonly description: "When updating, the consumer's last-observed `version` for the entry. The maintainer rejects with `vault/upsert:versionConflict` if the current version differs. Omit on create.";
|
|
1189
1189
|
};
|
|
1190
1190
|
readonly contextId: {
|
|
1191
1191
|
readonly type: "string";
|
|
@@ -1246,7 +1246,7 @@ export declare const SPEC: {
|
|
|
1246
1246
|
};
|
|
1247
1247
|
readonly sealedSecret: {
|
|
1248
1248
|
readonly $ref: "#/$defs/SealedEnvelope";
|
|
1249
|
-
readonly description: "Pluggable cipher envelope (discriminated by `envelope`) whose cleartext is a JCS-canonical JSON conforming to `vault/_shared/0.1/vault-secret#/$defs/VaultSecret`. The supported envelope kinds are listed in the SealedEnvelope shared schema; M2A consumers reject any kind they don't implement with `vault/upsert:
|
|
1249
|
+
readonly description: "Pluggable cipher envelope (discriminated by `envelope`) whose cleartext is a JCS-canonical JSON conforming to `vault/_shared/0.1/vault-secret#/$defs/VaultSecret`. The supported envelope kinds are listed in the SealedEnvelope shared schema; M2A consumers reject any kind they don't implement with `vault/upsert:envelopeUnsupported`. REQUIRED on create unless `secretKind` is `did-self-issued` or `didcomm-peer` (those carry only references to maintainer-internal key ids and have no extra secret bytes). On update, omit if the secret material is unchanged; populate if the secret is being rotated.";
|
|
1250
1250
|
};
|
|
1251
1251
|
readonly clearFields: {
|
|
1252
1252
|
readonly type: "array";
|
|
@@ -1577,7 +1577,7 @@ export declare const SPEC: {
|
|
|
1577
1577
|
};
|
|
1578
1578
|
readonly TspMessageEnvelope: {
|
|
1579
1579
|
readonly title: "TspMessageEnvelope";
|
|
1580
|
-
readonly description: "Trust Spanning Protocol message (https://trustoverip.github.io/tswg-tsp-specification/). Reserved variant; no OpenVTC component reads or emits this today. Listed in the union so implementations can declare intent to use TSP in discovery and so consumers reject `tsp-message` envelopes explicitly (`
|
|
1580
|
+
readonly description: "Trust Spanning Protocol message (https://trustoverip.github.io/tswg-tsp-specification/). Reserved variant; no OpenVTC component reads or emits this today. Listed in the union so implementations can declare intent to use TSP in discovery and so consumers reject `tsp-message` envelopes explicitly (`envelopeUnsupported`) until they're wired up — rather than silently failing in DIDComm parsing.";
|
|
1581
1581
|
readonly type: "object";
|
|
1582
1582
|
readonly additionalProperties: false;
|
|
1583
1583
|
readonly required: readonly ["envelope", "message"];
|
|
@@ -1969,7 +1969,7 @@ export declare const RESPONSE_SPEC: {
|
|
|
1969
1969
|
};
|
|
1970
1970
|
readonly TspMessageEnvelope: {
|
|
1971
1971
|
readonly title: "TspMessageEnvelope";
|
|
1972
|
-
readonly description: "Trust Spanning Protocol message (https://trustoverip.github.io/tswg-tsp-specification/). Reserved variant; no OpenVTC component reads or emits this today. Listed in the union so implementations can declare intent to use TSP in discovery and so consumers reject `tsp-message` envelopes explicitly (`
|
|
1972
|
+
readonly description: "Trust Spanning Protocol message (https://trustoverip.github.io/tswg-tsp-specification/). Reserved variant; no OpenVTC component reads or emits this today. Listed in the union so implementations can declare intent to use TSP in discovery and so consumers reject `tsp-message` envelopes explicitly (`envelopeUnsupported`) until they're wired up — rather than silently failing in DIDComm parsing.";
|
|
1973
1973
|
readonly type: "object";
|
|
1974
1974
|
readonly additionalProperties: false;
|
|
1975
1975
|
readonly required: readonly ["envelope", "message"];
|