@openvtc/trust-tasks 0.14.1 → 0.15.0

package/src/vta/contexts/did-templates/create/1.0/payload.ts

@@ -3,6 +3,9 @@
  * Source: specs/vta/contexts/did-templates/create/1.0/payload.schema.json
  */
 
+import type { Ext } from "../../../../../_shared/components.js";
+
+
 /**
  * Resolved scope of the stored template.
  */
@@ -17,6 +20,9 @@ export interface VTAContextDIDTemplateCreatePayload {
    */
   contextId: string;
   template: DidTemplate;
+  /**
+   * Ecosystem-defined extension members per SPEC.md §4.5.1.
+   */
   ext?: Ext;
 }
 /**
@@ -64,12 +70,6 @@ export interface DidTemplate {
    */
   document: {};
 }
-/**
- * Ecosystem-defined extension members per SPEC.md §4.5.1.
- */
-export interface Ext {
-  [k: string]: unknown | undefined;
-}
 /**
  * The persisted DidTemplateRecord. The DidTemplate fields are flattened at the top level alongside the resolved scope and provenance metadata. Same shape returned by get/update.
  */
@@ -112,6 +112,9 @@ export interface Context {
   contextId: string;
 }
 
+/** Shared definitions this specification references, re-exported under the names it used to declare them with. */
+export type { Ext };
+
 /** Trust Task type URI. */
 export const TYPE_URI = "https://trusttasks.org/spec/vta/contexts/did-templates/create/1.0" as const;
 

package/src/vta/contexts/did-templates/delete/1.0/payload.ts

@@ -3,6 +3,9 @@
  * Source: specs/vta/contexts/did-templates/delete/1.0/payload.schema.json
  */
 
+import type { Ext } from "../../../../../_shared/components.js";
+
+
 /**
  * Remove a DID template scoped to a context on a VTA by name. Gated on the context's admin (or super-admin). The success response echoes the name and confirms deletion.
  */
@@ -15,14 +18,11 @@ export interface VTAContextDIDTemplateDeletePayload {
    * Resource id of the template to remove within the context scope.
    */
   name: string;
+  /**
+   * Ecosystem-defined extension members per SPEC.md §4.5.1.
+   */
   ext?: Ext;
 }
-/**
- * Ecosystem-defined extension members per SPEC.md §4.5.1.
- */
-export interface Ext {
-  [k: string]: unknown | undefined;
-}
 /**
  * Confirmation that the named context-scoped template was removed.
  */
@@ -35,15 +35,15 @@ export interface VTAContextDIDTemplateDeleteResponsePayload {
    * True on successful removal.
    */
   deleted: boolean;
-  ext?: Ext1;
-}
-/**
- * Ecosystem-defined extension members per SPEC.md §4.5.1.
- */
-export interface Ext1 {
-  [k: string]: unknown | undefined;
+  /**
+   * Ecosystem-defined extension members per SPEC.md §4.5.1.
+   */
+  ext?: Ext;
 }
 
+/** Shared definitions this specification references, re-exported under the names it used to declare them with. */
+export type { Ext };
+
 /** Trust Task type URI. */
 export const TYPE_URI = "https://trusttasks.org/spec/vta/contexts/did-templates/delete/1.0" as const;
 

package/src/vta/contexts/did-templates/get/1.0/payload.ts

@@ -3,6 +3,9 @@
  * Source: specs/vta/contexts/did-templates/get/1.0/payload.schema.json
  */
 
+import type { Ext } from "../../../../../_shared/components.js";
+
+
 /**
  * Resolved scope of the stored template.
  */
@@ -20,14 +23,11 @@ export interface VTAContextDIDTemplateGetPayload {
    * Template id within the context scope.
    */
   name: string;
+  /**
+   * Ecosystem-defined extension members per SPEC.md §4.5.1.
+   */
   ext?: Ext;
 }
-/**
- * Ecosystem-defined extension members per SPEC.md §4.5.1.
- */
-export interface Ext {
-  [k: string]: unknown | undefined;
-}
 /**
  * The persisted DidTemplateRecord. The DidTemplate fields are flattened at the top level alongside the resolved scope and provenance metadata. Same shape returned by create/update.
  */
@@ -70,6 +70,9 @@ export interface Context {
   contextId: string;
 }
 
+/** Shared definitions this specification references, re-exported under the names it used to declare them with. */
+export type { Ext };
+
 /** Trust Task type URI. */
 export const TYPE_URI = "https://trusttasks.org/spec/vta/contexts/did-templates/get/1.0" as const;
 

package/src/vta/contexts/did-templates/list/1.0/payload.ts

@@ -3,6 +3,9 @@
  * Source: specs/vta/contexts/did-templates/list/1.0/payload.schema.json
  */
 
+import type { Ext } from "../../../../../_shared/components.js";
+
+
 /**
  * Resolved scope of the stored template.
  */
@@ -16,14 +19,11 @@ export interface VTAContextDIDTemplateListPayload {
    * The context the templates are scoped to.
    */
   contextId: string;
+  /**
+   * Ecosystem-defined extension members per SPEC.md §4.5.1.
+   */
   ext?: Ext;
 }
-/**
- * Ecosystem-defined extension members per SPEC.md §4.5.1.
- */
-export interface Ext {
-  [k: string]: unknown | undefined;
-}
 /**
  * The templates scoped to the context.
  */
@@ -32,7 +32,10 @@ export interface VTAContextDIDTemplateListResponsePayload {
    * Templates scoped to the context, sorted by name; empty when none exist.
    */
   templates: DidTemplateRecord[];
-  ext?: Ext1;
+  /**
+   * Ecosystem-defined extension members per SPEC.md §4.5.1.
+   */
+  ext?: Ext;
 }
 /**
  * A persisted template plus provenance. The DidTemplate fields are flattened at the top level alongside the resolved scope and provenance metadata.
@@ -75,12 +78,9 @@ export interface Context {
   type: "context";
   contextId: string;
 }
-/**
- * Ecosystem-defined extension members per SPEC.md §4.5.1.
- */
-export interface Ext1 {
-  [k: string]: unknown | undefined;
-}
+
+/** Shared definitions this specification references, re-exported under the names it used to declare them with. */
+export type { Ext };
 
 /** Trust Task type URI. */
 export const TYPE_URI = "https://trusttasks.org/spec/vta/contexts/did-templates/list/1.0" as const;

package/src/vta/contexts/did-templates/render/1.0/payload.ts

@@ -3,6 +3,9 @@
  * Source: specs/vta/contexts/did-templates/render/1.0/payload.schema.json
  */
 
+import type { Ext } from "../../../../../_shared/components.js";
+
+
 /**
  * Render a context-scoped DID template to a DID document on a VTA. Gated on context access. The VTA fills `{TOKEN}` placeholders with caller-supplied variables plus ambient values it injects server-side. The success response is the rendered DID document.
  */
@@ -21,14 +24,11 @@ export interface VTAContextDIDTemplateRenderPayload {
   vars?: {
     [k: string]: unknown | undefined;
   };
+  /**
+   * Ecosystem-defined extension members per SPEC.md §4.5.1.
+   */
   ext?: Ext;
 }
-/**
- * Ecosystem-defined extension members per SPEC.md §4.5.1.
- */
-export interface Ext {
-  [k: string]: unknown | undefined;
-}
 /**
  * The rendered DID document with all placeholders filled.
  */
@@ -37,15 +37,15 @@ export interface VTAContextDIDTemplateRenderResponsePayload {
    * The rendered DID document.
    */
   document: {};
-  ext?: Ext1;
-}
-/**
- * Ecosystem-defined extension members per SPEC.md §4.5.1.
- */
-export interface Ext1 {
-  [k: string]: unknown | undefined;
+  /**
+   * Ecosystem-defined extension members per SPEC.md §4.5.1.
+   */
+  ext?: Ext;
 }
 
+/** Shared definitions this specification references, re-exported under the names it used to declare them with. */
+export type { Ext };
+
 /** Trust Task type URI. */
 export const TYPE_URI = "https://trusttasks.org/spec/vta/contexts/did-templates/render/1.0" as const;
 

package/src/vta/contexts/did-templates/update/1.0/payload.ts

@@ -3,6 +3,9 @@
  * Source: specs/vta/contexts/did-templates/update/1.0/payload.schema.json
  */
 
+import type { Ext } from "../../../../../_shared/components.js";
+
+
 /**
  * Resolved scope of the stored template.
  */
@@ -21,6 +24,9 @@ export interface VTAContextDIDTemplateUpdatePayload {
    */
   name: string;
   template: DidTemplate;
+  /**
+   * Ecosystem-defined extension members per SPEC.md §4.5.1.
+   */
   ext?: Ext;
 }
 /**
@@ -68,12 +74,6 @@ export interface DidTemplate {
    */
   document: {};
 }
-/**
- * Ecosystem-defined extension members per SPEC.md §4.5.1.
- */
-export interface Ext {
-  [k: string]: unknown | undefined;
-}
 /**
  * The persisted DidTemplateRecord after replacement. The DidTemplate fields are flattened at the top level alongside the resolved scope and provenance metadata. Same shape returned by create/get.
  */
@@ -116,6 +116,9 @@ export interface Context {
   contextId: string;
 }
 
+/** Shared definitions this specification references, re-exported under the names it used to declare them with. */
+export type { Ext };
+
 /** Trust Task type URI. */
 export const TYPE_URI = "https://trusttasks.org/spec/vta/contexts/did-templates/update/1.0" as const;
 

package/src/vta/contexts/get/1.0/payload.ts

@@ -3,6 +3,9 @@
  * Source: specs/vta/contexts/get/1.0/payload.schema.json
  */
 
+import type { ContextRecord, Ext } from "../../../../_shared/components.js";
+
+
 export interface VTAContextsGetPayload {
   /**
    * Context id. For a nested context this is the full path (`parent/leaf`).
@@ -10,50 +13,9 @@ export interface VTAContextsGetPayload {
   id: string;
   ext?: Ext;
 }
-/**
- * Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.
- */
-export interface Ext {
-  [k: string]: unknown | undefined;
-}
-/**
- * A context as the VTA holds it.
- */
-export interface ContextRecord {
-  /**
-   * Context id. For a nested context this is the full path (`parent/leaf`), not the leaf alone — an ACL scope naming this context must use this value verbatim.
-   */
-  id: string;
-  /**
-   * Human-readable name. Operator-facing only; carries no authorization meaning, and two contexts may share a name.
-   */
-  name: string;
-  /**
-   * DID this context acts as, when one has been assigned. Absent means the context has no identity of its own yet — not that it has been denied one.
-   */
-  did?: string;
-  /**
-   * Free-form description.
-   */
-  description?: string;
-  /**
-   * Id of the context this one nests under. Absent for a top-level context. Authority granted at a parent reaches its children, so this member is load-bearing for anyone reasoning about scope.
-   */
-  parent?: string;
-  /**
-   * Resolved path from the root context, as the VTA derives it from the parent chain. Consumers MUST treat this as derived state: it is recomputed by the maintainer and is not independently settable.
-   */
-  basePath: string;
-  /**
-   * RFC 3339.
-   */
-  createdAt: string;
-  /**
-   * RFC 3339.
-   */
-  updatedAt: string;
-  ext?: Ext;
-}
+
+/** Shared definitions this specification references, re-exported under the names it used to declare them with. */
+export type { ContextRecord, Ext };
 
 /** Trust Task type URI. */
 export const TYPE_URI = "https://trusttasks.org/spec/vta/contexts/get/1.0" as const;

package/src/vta/contexts/list/1.0/payload.ts

@@ -3,18 +3,15 @@
  * Source: specs/vta/contexts/list/1.0/payload.schema.json
  */
 
+import type { ContextRecord, Ext } from "../../../../_shared/components.js";
+
+
 /**
  * Request payload for vta/contexts/list. Takes no filters: the result is already narrowed to what the caller may reach.
  */
 export interface VTAContextsListPayload {
   ext?: Ext;
 }
-/**
- * Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.
- */
-export interface Ext {
-  [k: string]: unknown | undefined;
-}
 /**
  * Success response to vta/contexts/list. Type https://trusttasks.org/spec/vta/contexts/list/1.0#response.
  */
@@ -25,44 +22,9 @@ export interface VTAContextsListResponsePayload {
   contexts: ContextRecord[];
   ext?: Ext;
 }
-/**
- * A context as the VTA holds it.
- */
-export interface ContextRecord {
-  /**
-   * Context id. For a nested context this is the full path (`parent/leaf`), not the leaf alone — an ACL scope naming this context must use this value verbatim.
-   */
-  id: string;
-  /**
-   * Human-readable name. Operator-facing only; carries no authorization meaning, and two contexts may share a name.
-   */
-  name: string;
-  /**
-   * DID this context acts as, when one has been assigned. Absent means the context has no identity of its own yet — not that it has been denied one.
-   */
-  did?: string;
-  /**
-   * Free-form description.
-   */
-  description?: string;
-  /**
-   * Id of the context this one nests under. Absent for a top-level context. Authority granted at a parent reaches its children, so this member is load-bearing for anyone reasoning about scope.
-   */
-  parent?: string;
-  /**
-   * Resolved path from the root context, as the VTA derives it from the parent chain. Consumers MUST treat this as derived state: it is recomputed by the maintainer and is not independently settable.
-   */
-  basePath: string;
-  /**
-   * RFC 3339.
-   */
-  createdAt: string;
-  /**
-   * RFC 3339.
-   */
-  updatedAt: string;
-  ext?: Ext;
-}
+
+/** Shared definitions this specification references, re-exported under the names it used to declare them with. */
+export type { ContextRecord, Ext };
 
 /** Trust Task type URI. */
 export const TYPE_URI = "https://trusttasks.org/spec/vta/contexts/list/1.0" as const;

package/src/vta/contexts/preview-delete/1.0/payload.ts

@@ -3,6 +3,9 @@
  * Source: specs/vta/contexts/preview-delete/1.0/payload.schema.json
  */
 
+import type { Ext } from "../../../../_shared/components.js";
+
+
 /**
  * Request payload for vta/contexts/preview-delete: what deleting this context would destroy, computed without destroying it.
  */
@@ -13,12 +16,6 @@ export interface VTAContextsPreviewDeletePayload {
   id: string;
   ext?: Ext;
 }
-/**
- * Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.
- */
-export interface Ext {
-  [k: string]: unknown | undefined;
-}
 /**
  * Success response to vta/contexts/preview-delete. Every array is what WOULD be affected; nothing has been. Type https://trusttasks.org/spec/vta/contexts/preview-delete/1.0#response.
  */
@@ -50,6 +47,9 @@ export interface VTAContextsPreviewDeleteResponsePayload {
   ext?: Ext;
 }
 
+/** Shared definitions this specification references, re-exported under the names it used to declare them with. */
+export type { Ext };
+
 /** Trust Task type URI. */
 export const TYPE_URI = "https://trusttasks.org/spec/vta/contexts/preview-delete/1.0" as const;
 

package/src/vta/contexts/update/1.0/payload.ts

@@ -3,6 +3,9 @@
  * Source: specs/vta/contexts/update/1.0/payload.schema.json
  */
 
+import type { ContextPolicy, ContextRecord, Ext } from "../../../../_shared/components.js";
+
+
 /**
  * Request payload for vta/contexts/update. Every member except `id` is optional and omitting one leaves that field unchanged — this is a patch, not a replacement.
  */
@@ -23,82 +26,16 @@ export interface VTAContextsUpdatePayload {
    * New description.
    */
   description?: string;
-  contextPolicy?: ContextPolicy;
-  ext?: Ext;
-}
-/**
- * Replacement policy for the context. Supplied whole: the members present in the new policy are the policy, and one omitted from it becomes unrestricted rather than retaining its previous value.
- */
-export interface ContextPolicy {
-  /**
-   * VIDs permitted to receive presentations from this context. Absent: any verifier. Present-but-empty: none.
-   */
-  trustedVerifiers?: string[];
-  /**
-   * Credential types that may be presented from this context. Absent: any type. Present-but-empty: none.
-   */
-  presentableTypes?: string[];
   /**
-   * Key ids the signing oracle may be invoked on within this context. Absent: every key the context holds. Present-but-empty: no keys.
+   * Replacement policy for the context. Supplied whole: the members present in the new policy are the policy, and one omitted from it becomes unrestricted rather than retaining its previous value.
    */
-  signableKeys?: string[];
-  /**
-   * Whether material in this context may leave it through an export. Defaults to true; set it to false for a context whose contents must not be extractable.
-   */
-  exportAllowed?: boolean;
-  /**
-   * Resource limits for the context. Shape is maintainer-defined.
-   */
-  quotas?: {
-    [k: string]: unknown | undefined;
-  };
-  ext?: Ext;
-}
-/**
- * Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.
- */
-export interface Ext {
-  [k: string]: unknown | undefined;
-}
-/**
- * A context as the VTA holds it.
- */
-export interface ContextRecord {
-  /**
-   * Context id. For a nested context this is the full path (`parent/leaf`), not the leaf alone — an ACL scope naming this context must use this value verbatim.
-   */
-  id: string;
-  /**
-   * Human-readable name. Operator-facing only; carries no authorization meaning, and two contexts may share a name.
-   */
-  name: string;
-  /**
-   * DID this context acts as, when one has been assigned. Absent means the context has no identity of its own yet — not that it has been denied one.
-   */
-  did?: string;
-  /**
-   * Free-form description.
-   */
-  description?: string;
-  /**
-   * Id of the context this one nests under. Absent for a top-level context. Authority granted at a parent reaches its children, so this member is load-bearing for anyone reasoning about scope.
-   */
-  parent?: string;
-  /**
-   * Resolved path from the root context, as the VTA derives it from the parent chain. Consumers MUST treat this as derived state: it is recomputed by the maintainer and is not independently settable.
-   */
-  basePath: string;
-  /**
-   * RFC 3339.
-   */
-  createdAt: string;
-  /**
-   * RFC 3339.
-   */
-  updatedAt: string;
+  contextPolicy?: ContextPolicy;
   ext?: Ext;
 }
 
+/** Shared definitions this specification references, re-exported under the names it used to declare them with. */
+export type { ContextPolicy, ContextRecord, Ext };
+
 /** Trust Task type URI. */
 export const TYPE_URI = "https://trusttasks.org/spec/vta/contexts/update/1.0" as const;
 

package/src/vta/contexts/update-did/1.0/payload.ts

@@ -3,6 +3,9 @@
  * Source: specs/vta/contexts/update-did/1.0/payload.schema.json
  */
 
+import type { ContextRecord, Ext } from "../../../../_shared/components.js";
+
+
 export interface VTAContextsUpdateDIDPayload {
   /**
    * Context whose DID is being set.
@@ -14,50 +17,9 @@ export interface VTAContextsUpdateDIDPayload {
   did: string;
   ext?: Ext;
 }
-/**
- * Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.
- */
-export interface Ext {
-  [k: string]: unknown | undefined;
-}
-/**
- * A context as the VTA holds it.
- */
-export interface ContextRecord {
-  /**
-   * Context id. For a nested context this is the full path (`parent/leaf`), not the leaf alone — an ACL scope naming this context must use this value verbatim.
-   */
-  id: string;
-  /**
-   * Human-readable name. Operator-facing only; carries no authorization meaning, and two contexts may share a name.
-   */
-  name: string;
-  /**
-   * DID this context acts as, when one has been assigned. Absent means the context has no identity of its own yet — not that it has been denied one.
-   */
-  did?: string;
-  /**
-   * Free-form description.
-   */
-  description?: string;
-  /**
-   * Id of the context this one nests under. Absent for a top-level context. Authority granted at a parent reaches its children, so this member is load-bearing for anyone reasoning about scope.
-   */
-  parent?: string;
-  /**
-   * Resolved path from the root context, as the VTA derives it from the parent chain. Consumers MUST treat this as derived state: it is recomputed by the maintainer and is not independently settable.
-   */
-  basePath: string;
-  /**
-   * RFC 3339.
-   */
-  createdAt: string;
-  /**
-   * RFC 3339.
-   */
-  updatedAt: string;
-  ext?: Ext;
-}
+
+/** Shared definitions this specification references, re-exported under the names it used to declare them with. */
+export type { ContextRecord, Ext };
 
 /** Trust Task type URI. */
 export const TYPE_URI = "https://trusttasks.org/spec/vta/contexts/update-did/1.0" as const;

package/src/vta/credentials/issue/0.1/payload.ts

@@ -3,10 +3,8 @@
  * Source: specs/vta/credentials/issue/0.1/payload.schema.json
  */
 
-/**
- * Stable identifier for an issued credential — the handle for revocation and audit. Opaque to the holder: it MUST be echoed verbatim when revoking and MUST NOT be parsed.
- */
-export type CredentialId = string;
+import type { CredentialId, Ext } from "../../../../_shared/components.js";
+
 
 export interface VTACredentialsIssuePayload {
   /**
@@ -29,14 +27,11 @@ export interface VTACredentialsIssuePayload {
    * Optional human-readable rationale, recorded for audit.
    */
   purpose?: string;
+  /**
+   * Ecosystem-defined extension members per SPEC.md §4.5.1.
+   */
   ext?: Ext;
 }
-/**
- * Ecosystem-defined extension members per SPEC.md §4.5.1.
- */
-export interface Ext {
-  [k: string]: unknown | undefined;
-}
 /**
  * The success response to a vta/credentials/issue request. Carried in a Trust Task document whose type is https://trusttasks.org/spec/vta/credentials/issue/0.1#response.
  *
@@ -56,15 +51,15 @@ export interface VTACredentialsIssueResponsePayload {
    * credentialId of the previously-active credential this issuance revoked, for claims profiles with a single-active rule (GovernancePolicyCredential). Mirrors policy/activate's previousPolicyId: it makes the rotation auditable and reversible. Absent when nothing was displaced.
    */
   supersedes?: string;
-  ext?: Ext1;
-}
-/**
- * Ecosystem-defined extension members per SPEC.md §4.5.1.
- */
-export interface Ext1 {
-  [k: string]: unknown | undefined;
+  /**
+   * Ecosystem-defined extension members per SPEC.md §4.5.1.
+   */
+  ext?: Ext;
 }
 
+/** Shared definitions this specification references, re-exported under the names it used to declare them with. */
+export type { CredentialId, Ext };
+
 /** Trust Task type URI. */
 export const TYPE_URI = "https://trusttasks.org/spec/vta/credentials/issue/0.1" as const;