@openvtc/trust-tasks 0.14.2 → 0.15.0

package/src/vta/did-templates/render/1.0/payload.ts

@@ -3,6 +3,9 @@
  * Source: specs/vta/did-templates/render/1.0/payload.schema.json
  */
 
+import type { Ext } from "../../../../_shared/components.js";
+
+
 /**
  * Render a global DID template to a DID document. Authenticated callers supply variables; the VTA injects ambient variables (VTA_DID, VTA_URL, NOW) server-side, merges the caller's on top, substitutes every placeholder, and returns the rendered document.
  */
@@ -17,14 +20,11 @@ export interface VTADIDTemplateRenderPayload {
   vars?: {
     [k: string]: unknown | undefined;
   };
+  /**
+   * Ecosystem-defined extension members per SPEC.md §4.5.1.
+   */
   ext?: Ext;
 }
-/**
- * Ecosystem-defined extension members per SPEC.md §4.5.1.
- */
-export interface Ext {
-  [k: string]: unknown | undefined;
-}
 /**
  * The rendered DID document.
  */
@@ -33,15 +33,15 @@ export interface VTADIDTemplateRenderResponsePayload {
    * The rendered DID document with all placeholders substituted.
    */
   document: {};
-  ext?: Ext1;
-}
-/**
- * Ecosystem-defined extension members per SPEC.md §4.5.1.
- */
-export interface Ext1 {
-  [k: string]: unknown | undefined;
+  /**
+   * Ecosystem-defined extension members per SPEC.md §4.5.1.
+   */
+  ext?: Ext;
 }
 
+/** Shared definitions this specification references, re-exported under the names it used to declare them with. */
+export type { Ext };
+
 /** Trust Task type URI. */
 export const TYPE_URI = "https://trusttasks.org/spec/vta/did-templates/render/1.0" as const;
 

package/src/vta/did-templates/render/2.0/payload.ts

@@ -3,6 +3,9 @@
  * Source: specs/vta/did-templates/render/2.0/payload.schema.json
  */
 
+import type { Ext } from "../../../../_shared/components.js";
+
+
 /**
  * Render a DID template to a DID document. Omit `contextId` to render a global template; set it to render a template scoped to that context (requires access to the context; the VTA MAY fall back to a global template of the same name). Callers supply variables; the VTA injects ambient variables (VTA_DID, VTA_URL, NOW — plus CONTEXT_ID and, if set on the context, CONTEXT_DID when contextId is present) server-side, merges the caller's on top, substitutes every placeholder, and returns the rendered document.
  */
@@ -21,14 +24,11 @@ export interface VTADIDTemplateRenderPayload {
   vars?: {
     [k: string]: unknown | undefined;
   };
+  /**
+   * Ecosystem-defined extension members per SPEC.md §4.5.1.
+   */
   ext?: Ext;
 }
-/**
- * Ecosystem-defined extension members per SPEC.md §4.5.1.
- */
-export interface Ext {
-  [k: string]: unknown | undefined;
-}
 /**
  * The rendered DID document.
  */
@@ -37,15 +37,15 @@ export interface VTADIDTemplateRenderResponsePayload {
    * The rendered DID document with all placeholders substituted.
    */
   document: {};
-  ext?: Ext1;
-}
-/**
- * Ecosystem-defined extension members per SPEC.md §4.5.1.
- */
-export interface Ext1 {
-  [k: string]: unknown | undefined;
+  /**
+   * Ecosystem-defined extension members per SPEC.md §4.5.1.
+   */
+  ext?: Ext;
 }
 
+/** Shared definitions this specification references, re-exported under the names it used to declare them with. */
+export type { Ext };
+
 /** Trust Task type URI. */
 export const TYPE_URI = "https://trusttasks.org/spec/vta/did-templates/render/2.0" as const;
 

package/src/vta/did-templates/update/1.0/payload.ts

@@ -3,6 +3,9 @@
  * Source: specs/vta/did-templates/update/1.0/payload.schema.json
  */
 
+import type { Ext } from "../../../../_shared/components.js";
+
+
 /**
  * Resolved scope of the stored template.
  */
@@ -17,6 +20,9 @@ export interface VTADIDTemplateUpdatePayload {
    */
   name: string;
   template: DidTemplate;
+  /**
+   * Ecosystem-defined extension members per SPEC.md §4.5.1.
+   */
   ext?: Ext;
 }
 /**
@@ -64,12 +70,6 @@ export interface DidTemplate {
    */
   document: {};
 }
-/**
- * Ecosystem-defined extension members per SPEC.md §4.5.1.
- */
-export interface Ext {
-  [k: string]: unknown | undefined;
-}
 /**
  * The persisted DidTemplateRecord. The DidTemplate fields are flattened at the top level alongside the resolved scope and provenance metadata. Same shape returned by create/get.
  */
@@ -112,6 +112,9 @@ export interface Context {
   contextId: string;
 }
 
+/** Shared definitions this specification references, re-exported under the names it used to declare them with. */
+export type { Ext };
+
 /** Trust Task type URI. */
 export const TYPE_URI = "https://trusttasks.org/spec/vta/did-templates/update/1.0" as const;
 

package/src/vta/did-templates/update/2.0/payload.ts

@@ -3,10 +3,8 @@
  * Source: specs/vta/did-templates/update/2.0/payload.schema.json
  */
 
-/**
- * Resolved scope of the stored template.
- */
-export type Scope = Builtin | Global | Context;
+import type { Builtin_VtaV0_1 as Builtin, Context_VtaV0_1 as Context, DidTemplate, DidTemplateRecord, Ext, Global_VtaV0_1 as Global, Scope_VtaV0_1 as Scope } from "../../../../_shared/components.js";
+
 
 /**
  * Replace an existing DID template on a VTA. Omit `contextId` to replace in the global scope (super-admin gated); set it to replace a template scoped to that context (gated on the context's admin, or a super-admin). The `name` is the resource id within the selected scope and MUST equal `template.name`; the VTA replaces the stored body, preserving createdAt/createdBy and advancing updatedAt. The success response is the persisted DidTemplateRecord.
@@ -20,102 +18,19 @@ export interface VTADIDTemplateUpdatePayload {
    * Resource id — the template's name within the selected scope. MUST equal `template.name` or the VTA rejects with the framework's `malformedRequest`.
    */
   name: string;
-  template: DidTemplate;
-  ext?: Ext;
-}
-/**
- * Full replacement template document. Validated against the v1 template schema before persistence; an invalid shape is rejected with the framework's `malformedRequest`.
- */
-export interface DidTemplate {
-  /**
-   * Template schema version. Currently always 1.
-   */
-  schemaVersion: 1;
-  /**
-   * Template id within its scope. Lowercase alphanumeric and hyphen only.
-   */
-  name: string;
-  /**
-   * Classification hint, e.g. `mediator`, `did-host-http`, `app`. Drives downstream provisioning behaviour.
-   */
-  kind: string;
-  /**
-   * Human-readable description of what the template provisions.
-   */
-  description?: string | null;
-  /**
-   * DID methods this template targets, e.g. ["webvh", "web"] for a hosted DID or ["key"] for a did:key.
-   */
-  methods?: string[];
-  /**
-   * Variables the caller MUST supply at render time. MUST NOT include reserved ambient names (DID, SIGNING_KEY_MB, KA_KEY_MB, VTA_DID, VTA_URL, CONTEXT_ID, CONTEXT_DID, NOW).
-   */
-  requiredVars?: string[];
-  /**
-   * Variables with default values, keyed by variable name.
-   */
-  optionalVars?: {
-    [k: string]: unknown | undefined;
-  };
-  /**
-   * Hints for CLI / setup wizards (e.g. preRotationCount, portable, addMediatorService).
-   */
-  defaults?: {
-    [k: string]: unknown | undefined;
-  };
-  /**
-   * The DID document body with `{TOKEN}` placeholders. `document.id` MUST contain the `{DID}` placeholder. Every `{TOKEN}` MUST be declared in requiredVars/optionalVars or be a reserved ambient name.
-   */
-  document: {};
-}
-/**
- * Ecosystem-defined extension members per SPEC.md §4.5.1.
- */
-export interface Ext {
-  [k: string]: unknown | undefined;
-}
-/**
- * A persisted template. The DidTemplate fields are flattened at the top level alongside the resolved scope and provenance metadata. Same shape returned by get/create/update and carried per-item by list.
- */
-export interface DidTemplateRecord {
-  schemaVersion: 1;
-  name: string;
-  kind: string;
-  description?: string | null;
-  methods?: string[];
-  requiredVars?: string[];
-  optionalVars?: {
-    [k: string]: unknown | undefined;
-  };
-  defaults?: {
-    [k: string]: unknown | undefined;
-  };
-  document: {};
-  scope: Scope;
   /**
-   * UTC unix-epoch seconds the template was first stored.
+   * Full replacement template document. Validated against the v1 template schema before persistence; an invalid shape is rejected with the framework's `malformedRequest`.
    */
-  createdAt: number;
-  /**
-   * UTC unix-epoch seconds of the last write.
-   */
-  updatedAt: number;
+  template: DidTemplate;
   /**
-   * DID of the admin who last wrote the template.
+   * Ecosystem-defined extension members per SPEC.md §4.5.1.
    */
-  createdBy: string;
-}
-export interface Builtin {
-  type: "builtin";
-}
-export interface Global {
-  type: "global";
-}
-export interface Context {
-  type: "context";
-  contextId: string;
+  ext?: Ext;
 }
 
+/** Shared definitions this specification references, re-exported under the names it used to declare them with. */
+export type { Builtin, Context, DidTemplate, DidTemplateRecord, Ext, Global, Scope };
+
 /** Trust Task type URI. */
 export const TYPE_URI = "https://trusttasks.org/spec/vta/did-templates/update/2.0" as const;
 

package/src/vta/memory/delete/0.1/payload.ts

@@ -3,6 +3,9 @@
  * Source: specs/vta/memory/delete/0.1/payload.schema.json
  */
 
+import type { Ext } from "../../../../_shared/components.js";
+
+
 export interface VTAMemoryDeletePayload {
   /**
    * The VTA context the item lives in.
@@ -14,12 +17,6 @@ export interface VTAMemoryDeletePayload {
   key: string;
   ext?: Ext;
 }
-/**
- * Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.
- */
-export interface Ext {
-  [k: string]: unknown | undefined;
-}
 /**
  * Success response to vta/memory/delete. Type https://trusttasks.org/spec/vta/memory/delete/0.1#response.
  */
@@ -31,6 +28,9 @@ export interface VTAMemoryDeleteResponsePayload {
   ext?: Ext;
 }
 
+/** Shared definitions this specification references, re-exported under the names it used to declare them with. */
+export type { Ext };
+
 /** Trust Task type URI. */
 export const TYPE_URI = "https://trusttasks.org/spec/vta/memory/delete/0.1" as const;
 

package/src/vta/memory/list/0.1/payload.ts

@@ -3,6 +3,9 @@
  * Source: specs/vta/memory/list/0.1/payload.schema.json
  */
 
+import type { Ext } from "../../../../_shared/components.js";
+
+
 export interface VTAMemoryListPayload {
   /**
    * The VTA context whose memory items to recall.
@@ -10,12 +13,6 @@ export interface VTAMemoryListPayload {
   contextId: string;
   ext?: Ext;
 }
-/**
- * Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.
- */
-export interface Ext {
-  [k: string]: unknown | undefined;
-}
 /**
  * Success response to vta/memory/list. Type https://trusttasks.org/spec/vta/memory/list/0.1#response.
  */
@@ -30,6 +27,9 @@ export interface VTAMemoryListResponsePayload {
   ext?: Ext;
 }
 
+/** Shared definitions this specification references, re-exported under the names it used to declare them with. */
+export type { Ext };
+
 /** Trust Task type URI. */
 export const TYPE_URI = "https://trusttasks.org/spec/vta/memory/list/0.1" as const;
 

package/src/vta/memory/put/0.1/payload.ts

@@ -3,6 +3,9 @@
  * Source: specs/vta/memory/put/0.1/payload.schema.json
  */
 
+import type { Ext } from "../../../../_shared/components.js";
+
+
 export interface VTAMemoryPutPayload {
   /**
    * The VTA context the memory item is scoped to (the isolation boundary).
@@ -16,14 +19,11 @@ export interface VTAMemoryPutPayload {
    * Opaque memory text (a fact, summary, or preference).
    */
   value: string;
+  /**
+   * Ecosystem-defined extension members per SPEC.md §4.5.1.
+   */
   ext?: Ext;
 }
-/**
- * Ecosystem-defined extension members per SPEC.md §4.5.1.
- */
-export interface Ext {
-  [k: string]: unknown | undefined;
-}
 /**
  * Success response to vta/memory/put. Type https://trusttasks.org/spec/vta/memory/put/0.1#response.
  */
@@ -32,15 +32,12 @@ export interface VTAMemoryPutResponsePayload {
    * The stored item's key.
    */
   key: string;
-  ext?: Ext1;
-}
-/**
- * Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.
- */
-export interface Ext1 {
-  [k: string]: unknown | undefined;
+  ext?: Ext;
 }
 
+/** Shared definitions this specification references, re-exported under the names it used to declare them with. */
+export type { Ext };
+
 /** Trust Task type URI. */
 export const TYPE_URI = "https://trusttasks.org/spec/vta/memory/put/0.1" as const;
 

package/src/vta/passkey-vms/enroll-challenge/0.1/payload.ts

@@ -3,6 +3,9 @@
  * Source: specs/vta/passkey-vms/enroll-challenge/0.1/payload.schema.json
  */
 
+import type { Ext } from "../../../../_shared/components.js";
+
+
 /**
  * Request a fresh WebAuthn registration challenge for adding a passkey verificationMethod to a VTA-managed DID. Step 1 of the two-step enrolment ceremony (challenge → submit). The producer must hold the admin role on the target DID's context.
  */
@@ -15,14 +18,11 @@ export interface VTAPasskeyVMEnrollChallengePayload {
    * Optional operator-supplied label for the new passkey (e.g. "MacBook Touch ID"). Carried through to the WebAuthn user name and, if the ceremony completes, to the published verificationMethod.
    */
   label?: string;
+  /**
+   * Ecosystem-defined extension members per SPEC.md §4.5.1.
+   */
   ext?: Ext;
 }
-/**
- * Ecosystem-defined extension members per SPEC.md §4.5.1.
- */
-export interface Ext {
-  [k: string]: unknown | undefined;
-}
 /**
  * The server-issued WebAuthn registration challenge. All byte-valued fields are base64url-encoded (no padding); the browser passes the decoded bytes to navigator.credentials.create.
  */
@@ -59,15 +59,15 @@ export interface VTAPasskeyVMEnrollChallengeResponsePayload {
    * Suggested ceremony timeout in milliseconds. Advisory; the authenticator and browser apply their own limits.
    */
   timeoutMs?: number;
-  ext?: Ext1;
-}
-/**
- * Ecosystem-defined extension members per SPEC.md §4.5.1.
- */
-export interface Ext1 {
-  [k: string]: unknown | undefined;
+  /**
+   * Ecosystem-defined extension members per SPEC.md §4.5.1.
+   */
+  ext?: Ext;
 }
 
+/** Shared definitions this specification references, re-exported under the names it used to declare them with. */
+export type { Ext };
+
 /** Trust Task type URI. */
 export const TYPE_URI = "https://trusttasks.org/spec/vta/passkey-vms/enroll-challenge/0.1" as const;
 

package/src/vta/passkey-vms/enroll-submit/0.1/payload.ts

@@ -3,6 +3,9 @@
  * Source: specs/vta/passkey-vms/enroll-submit/0.1/payload.schema.json
  */
 
+import type { Ext, PasskeyVerificationMethod } from "../../../../_shared/components.js";
+
+
 /**
  * Finalise passkey enrolment by submitting the WebAuthn registration result for a ceremony opened by vta/passkey-vms/enroll-challenge. The VTA re-derives the Multikey from attestationObject.authData and rejects on mismatch with the browser-claimed publicKeyMultibase — the browser's value is NOT trusted as authoritative. On success the VTA appends the verificationMethod to the DID document via a WebVH log entry. All byte-valued fields are base64url-encoded (no padding).
  */
@@ -47,65 +50,32 @@ export interface VTAPasskeyVMEnrollSubmitPayload {
    * Optional operator-supplied label (e.g. "MacBook Touch ID"), carried through to the published verificationMethod.
    */
   label?: string;
+  /**
+   * Ecosystem-defined extension members per SPEC.md §4.5.1.
+   */
   ext?: Ext;
 }
-/**
- * Ecosystem-defined extension members per SPEC.md §4.5.1.
- */
-export interface Ext {
-  [k: string]: unknown | undefined;
-}
 /**
  * Successful enrolment. The verificationMethod has already been appended to the DID document via a WebVH log entry at the returned version.
  */
 export interface VTAPasskeyVMEnrollSubmitResponsePayload {
+  /**
+   * The verificationMethod entry exactly as it now appears in the DID document. `publicKeyMultibase` here is the server-re-derived key, which is authoritative.
+   */
   verificationMethod: PasskeyVerificationMethod;
   /**
    * The WebVH log-entry version that recorded the change (e.g. "3-Qm…").
    */
   webvhVersion: string;
-  ext?: Ext1;
-}
-/**
- * The verificationMethod entry exactly as it now appears in the DID document. `publicKeyMultibase` here is the server-re-derived key, which is authoritative.
- */
-export interface PasskeyVerificationMethod {
-  /**
-   * The verificationMethod id as it appears in the DID document: `<did>#passkey-<base64url(sha256(credentialId))>`. The fragment is content-derived so a verifier can locate this VM by recomputing `sha256(credential.id)`.
-   */
-  id: string;
-  /**
-   * Always `Multikey`. The WebAuthn public key is published in W3C Multikey form so DID resolvers and verifiers need no WebAuthn-specific knowledge to consume it.
-   */
-  type: "Multikey";
   /**
-   * The DID this verificationMethod is published on (the DID being augmented).
+   * Ecosystem-defined extension members per SPEC.md §4.5.1.
    */
-  controller: string;
-  /**
-   * W3C Multikey (multibase) encoding of the WebAuthn credential public key. This is the value a verifier validates a WebAuthn assertion against. Re-derived server-side from the attestation at enrolment — never trusted from the browser (see vta/passkey-vms/enroll-submit).
-   */
-  publicKeyMultibase: string;
-  /**
-   * The WebAuthn `credential.id` (base64url, no padding). Lets a verifier recompute `sha256(credentialId)` and match the assertion to this VM's `id` fragment.
-   */
-  webauthnCredentialId: string;
-  /**
-   * Transport hints reported by the authenticator (e.g. `internal`, `hybrid`, `usb`, `nfc`, `ble`). Advisory only — verifiers MUST NOT make trust decisions based on transport hints.
-   */
-  webauthnTransports?: string[];
-  /**
-   * Optional operator-supplied human-readable label (e.g. "MacBook Touch ID"). Informational; not authoritative and not a security input.
-   */
-  label?: string;
-}
-/**
- * Ecosystem-defined extension members per SPEC.md §4.5.1.
- */
-export interface Ext1 {
-  [k: string]: unknown | undefined;
+  ext?: Ext;
 }
 
+/** Shared definitions this specification references, re-exported under the names it used to declare them with. */
+export type { Ext, PasskeyVerificationMethod };
+
 /** Trust Task type URI. */
 export const TYPE_URI = "https://trusttasks.org/spec/vta/passkey-vms/enroll-submit/0.1" as const;
 

package/src/vta/passkey-vms/list/0.1/payload.ts

@@ -3,6 +3,9 @@
  * Source: specs/vta/passkey-vms/list/0.1/payload.schema.json
  */
 
+import type { Ext, PasskeyVerificationMethod } from "../../../../_shared/components.js";
+
+
 /**
  * List every passkey verificationMethod currently published on a VTA-managed DID. Admin-gated read. The returned entries are the same Multikey verificationMethods that appear in the DID document.
  */
@@ -11,14 +14,11 @@ export interface VTAPasskeyVMListPayload {
    * The DID whose passkey verificationMethods to enumerate. The producer MUST hold the admin role on this DID's context.
    */
   did: string;
+  /**
+   * Ecosystem-defined extension members per SPEC.md §4.5.1.
+   */
   ext?: Ext;
 }
-/**
- * Ecosystem-defined extension members per SPEC.md §4.5.1.
- */
-export interface Ext {
-  [k: string]: unknown | undefined;
-}
 /**
  * The passkey verificationMethods currently on the DID.
  */
@@ -27,45 +27,15 @@ export interface VTAPasskeyVMListResponsePayload {
    * Every passkey verificationMethod published on the DID. Empty when none are enrolled.
    */
   verificationMethods: PasskeyVerificationMethod[];
-  ext?: Ext1;
-}
-export interface PasskeyVerificationMethod {
-  /**
-   * The verificationMethod id as it appears in the DID document: `<did>#passkey-<base64url(sha256(credentialId))>`. The fragment is content-derived so a verifier can locate this VM by recomputing `sha256(credential.id)`.
-   */
-  id: string;
   /**
-   * Always `Multikey`. The WebAuthn public key is published in W3C Multikey form so DID resolvers and verifiers need no WebAuthn-specific knowledge to consume it.
+   * Ecosystem-defined extension members per SPEC.md §4.5.1.
    */
-  type: "Multikey";
-  /**
-   * The DID this verificationMethod is published on (the DID being augmented).
-   */
-  controller: string;
-  /**
-   * W3C Multikey (multibase) encoding of the WebAuthn credential public key. This is the value a verifier validates a WebAuthn assertion against. Re-derived server-side from the attestation at enrolment — never trusted from the browser (see vta/passkey-vms/enroll-submit).
-   */
-  publicKeyMultibase: string;
-  /**
-   * The WebAuthn `credential.id` (base64url, no padding). Lets a verifier recompute `sha256(credentialId)` and match the assertion to this VM's `id` fragment.
-   */
-  webauthnCredentialId: string;
-  /**
-   * Transport hints reported by the authenticator (e.g. `internal`, `hybrid`, `usb`, `nfc`, `ble`). Advisory only — verifiers MUST NOT make trust decisions based on transport hints.
-   */
-  webauthnTransports?: string[];
-  /**
-   * Optional operator-supplied human-readable label (e.g. "MacBook Touch ID"). Informational; not authoritative and not a security input.
-   */
-  label?: string;
-}
-/**
- * Ecosystem-defined extension members per SPEC.md §4.5.1.
- */
-export interface Ext1 {
-  [k: string]: unknown | undefined;
+  ext?: Ext;
 }
 
+/** Shared definitions this specification references, re-exported under the names it used to declare them with. */
+export type { Ext, PasskeyVerificationMethod };
+
 /** Trust Task type URI. */
 export const TYPE_URI = "https://trusttasks.org/spec/vta/passkey-vms/list/0.1" as const;
 

package/src/vta/passkey-vms/revoke/0.1/payload.ts

@@ -3,6 +3,9 @@
  * Source: specs/vta/passkey-vms/revoke/0.1/payload.schema.json
  */
 
+import type { Ext } from "../../../../_shared/components.js";
+
+
 /**
  * Remove a passkey verificationMethod from a VTA-managed DID document via a WebVH log entry. Admin-gated. The VM is identified by its URL fragment (everything after `#` in the verificationMethod id). The success response is an empty object — modelled as an object so future additive fields do not bump the version.
  */
@@ -15,27 +18,24 @@ export interface VTAPasskeyVMRevokePayload {
    * The verificationMethod URL fragment — everything after `#` in the VM id (e.g. `passkey-3q2r1s0tUvWxYz`). MUST NOT include the leading `#`.
    */
   fragment: string;
+  /**
+   * Ecosystem-defined extension members per SPEC.md §4.5.1.
+   */
   ext?: Ext;
 }
-/**
- * Ecosystem-defined extension members per SPEC.md §4.5.1.
- */
-export interface Ext {
-  [k: string]: unknown | undefined;
-}
 /**
  * Empty success body. The verificationMethod has been removed via a WebVH log entry. Modelled as an object so future additive fields (e.g. the resulting WebVH version) do not require a version bump.
  */
 export interface VTAPasskeyVMRevokeResponsePayload {
-  ext?: Ext1;
-}
-/**
- * Ecosystem-defined extension members per SPEC.md §4.5.1.
- */
-export interface Ext1 {
-  [k: string]: unknown | undefined;
+  /**
+   * Ecosystem-defined extension members per SPEC.md §4.5.1.
+   */
+  ext?: Ext;
 }
 
+/** Shared definitions this specification references, re-exported under the names it used to declare them with. */
+export type { Ext };
+
 /** Trust Task type URI. */
 export const TYPE_URI = "https://trusttasks.org/spec/vta/passkey-vms/revoke/0.1" as const;