@openvtc/trust-tasks 0.14.2 → 0.16.0

package/src/git-trust/grant/0.1/payload.ts

@@ -3,6 +3,9 @@
  * Source: specs/git-trust/grant/0.1/payload.schema.json
  */
 
+import type { Ext } from "../../../_shared/components.js";
+
+
 /**
  * A community operator grants a member's DID the authority to sign git commits for a resource (an org or org/repo). The host records the grant as a TRQP authorization tuple {entity: subject, authority: the community's authority DID, action: git.commit.sign, resource} in the community's trust registry, where CI verifiers (e.g. did-git-sign verify-trust) query it anonymously.
  */
@@ -17,12 +20,6 @@ export interface GitTrustGrantPayload {
   resource: string;
   ext?: Ext;
 }
-/**
- * Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.
- */
-export interface Ext {
-  [k: string]: unknown | undefined;
-}
 export interface GitTrustGrantResponsePayload {
   subject: string;
   resource: string;
@@ -37,6 +34,9 @@ export interface GitTrustGrantResponsePayload {
   ext?: Ext;
 }
 
+/** Shared definitions this specification references, re-exported under the names it used to declare them with. */
+export type { Ext };
+
 /** Trust Task type URI. */
 export const TYPE_URI = "https://trusttasks.org/spec/git-trust/grant/0.1" as const;
 
@@ -108,6 +108,7 @@ export const PAYLOAD_SCHEMA = {
         },
         "message": {
           "type": "string",
+          "maxLength": 1024,
           "description": "Additional human-readable detail."
         },
         "ext": {
@@ -156,6 +157,7 @@ export const RESPONSE_PAYLOAD_SCHEMA = {
         },
         "message": {
           "type": "string",
+          "maxLength": 1024,
           "description": "Additional human-readable detail."
         },
         "ext": {
@@ -187,6 +189,7 @@ export const SPEC = {
   isBearer: false,
   isProofRequired: true,
   isRecipientRequired: true,
+  isIssuedAtRequired: true,
   payloadSchema: PAYLOAD_SCHEMA,
 } as const;
 
@@ -200,5 +203,6 @@ export const RESPONSE_SPEC = {
   isBearer: false,
   isProofRequired: true,
   isRecipientRequired: true,
+  isIssuedAtRequired: true,
   payloadSchema: RESPONSE_PAYLOAD_SCHEMA,
 } as const;

package/src/git-trust/revoke/0.1/payload.ts

@@ -3,6 +3,9 @@
  * Source: specs/git-trust/revoke/0.1/payload.schema.json
  */
 
+import type { Ext } from "../../../_shared/components.js";
+
+
 /**
  * A community operator revokes a member's commit-signing grant for a resource. The host marks the TRQP authorization tuple unauthorized (retaining it for audit), so CI verifiers observe the denial on their next query.
  */
@@ -21,12 +24,6 @@ export interface GitTrustRevokePayload {
   reason?: string;
   ext?: Ext;
 }
-/**
- * Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.
- */
-export interface Ext {
-  [k: string]: unknown | undefined;
-}
 export interface GitTrustRevokeResponsePayload {
   subject: string;
   resource: string;
@@ -41,6 +38,9 @@ export interface GitTrustRevokeResponsePayload {
   ext?: Ext;
 }
 
+/** Shared definitions this specification references, re-exported under the names it used to declare them with. */
+export type { Ext };
+
 /** Trust Task type URI. */
 export const TYPE_URI = "https://trusttasks.org/spec/git-trust/revoke/0.1" as const;
 
@@ -86,6 +86,7 @@ export const PAYLOAD_SCHEMA = {
     },
     "reason": {
       "type": "string",
+      "maxLength": 1024,
       "description": "Human-readable reason, recorded for audit."
     },
     "ext": {
@@ -116,6 +117,7 @@ export const PAYLOAD_SCHEMA = {
         },
         "message": {
           "type": "string",
+          "maxLength": 1024,
           "description": "Additional human-readable detail."
         },
         "ext": {
@@ -164,6 +166,7 @@ export const RESPONSE_PAYLOAD_SCHEMA = {
         },
         "message": {
           "type": "string",
+          "maxLength": 1024,
           "description": "Additional human-readable detail."
         },
         "ext": {
@@ -195,6 +198,7 @@ export const SPEC = {
   isBearer: false,
   isProofRequired: true,
   isRecipientRequired: true,
+  isIssuedAtRequired: true,
   payloadSchema: PAYLOAD_SCHEMA,
 } as const;
 
@@ -208,5 +212,6 @@ export const RESPONSE_SPEC = {
   isBearer: false,
   isProofRequired: true,
   isRecipientRequired: true,
+  isIssuedAtRequired: true,
   payloadSchema: RESPONSE_PAYLOAD_SCHEMA,
 } as const;

package/src/governance/_shared/0.1/governance.ts

@@ -9,3 +9,9 @@
 export interface GovernanceSharedDefinitions {
   [k: string]: unknown | undefined;
 }
+
+/**
+ * The definitions this shared schema publishes, hoisted to one declaration each.
+ * See "../../../_shared/components.js".
+ */
+export type { CapabilityManifest } from "../../../_shared/components.js";

package/src/governance/capability/disable/0.1/payload.ts

@@ -3,6 +3,9 @@
  * Source: specs/governance/capability/disable/0.1/payload.schema.json
  */
 
+import type { Ext } from "../../../../_shared/components.js";
+
+
 /**
  * A community operator disables a previously enabled capability. Disable is not delete: the capability's registry records are retained for audit, but its handlers stop executing, it disappears from discovery, and its lifecycle hooks stop firing.
  */
@@ -17,12 +20,6 @@ export interface GovernanceCapabilityDisablePayload {
   reason?: string;
   ext?: Ext;
 }
-/**
- * Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.
- */
-export interface Ext {
-  [k: string]: unknown | undefined;
-}
 export interface GovernanceCapabilityDisableResponsePayload {
   capability: string;
   /**
@@ -36,6 +33,9 @@ export interface GovernanceCapabilityDisableResponsePayload {
   ext?: Ext;
 }
 
+/** Shared definitions this specification references, re-exported under the names it used to declare them with. */
+export type { Ext };
+
 /** Trust Task type URI. */
 export const TYPE_URI = "https://trusttasks.org/spec/governance/capability/disable/0.1" as const;
 
@@ -75,6 +75,7 @@ export const PAYLOAD_SCHEMA = {
     },
     "reason": {
       "type": "string",
+      "maxLength": 1024,
       "description": "Human-readable reason, recorded for audit."
     },
     "ext": {
@@ -101,6 +102,7 @@ export const PAYLOAD_SCHEMA = {
         },
         "message": {
           "type": "string",
+          "maxLength": 1024,
           "description": "Additional human-readable detail."
         },
         "ext": {
@@ -145,6 +147,7 @@ export const RESPONSE_PAYLOAD_SCHEMA = {
         },
         "message": {
           "type": "string",
+          "maxLength": 1024,
           "description": "Additional human-readable detail."
         },
         "ext": {
@@ -176,6 +179,7 @@ export const SPEC = {
   isBearer: false,
   isProofRequired: true,
   isRecipientRequired: true,
+  isIssuedAtRequired: true,
   payloadSchema: PAYLOAD_SCHEMA,
 } as const;
 
@@ -189,5 +193,6 @@ export const RESPONSE_SPEC = {
   isBearer: false,
   isProofRequired: true,
   isRecipientRequired: true,
+  isIssuedAtRequired: true,
   payloadSchema: RESPONSE_PAYLOAD_SCHEMA,
 } as const;

package/src/governance/capability/enable/0.1/payload.ts

@@ -3,6 +3,9 @@
  * Source: specs/governance/capability/enable/0.1/payload.schema.json
  */
 
+import type { CapabilityManifest, Ext } from "../../../../_shared/components.js";
+
+
 /**
  * A community operator enables a pluggable capability for a community. Activation registers the capability's Trust Task handlers, advertises it in discovery, and starts its lifecycle hooks; a community with no enable record carries none of the capability's records, surfaces, or attack surface.
  */
@@ -23,91 +26,12 @@ export interface GovernanceCapabilityEnablePayload {
    * DID of the companion service that serves this capability, for capabilities not built into the host. When present, the host records a namespace delegation to this DID and `manifest` is REQUIRED (the host cannot know a companion's manifest a priori).
    */
   delegate?: string;
-  manifest?: CapabilityManifest;
-  ext?: Ext;
-}
-/**
- * The capability's manifest. OPTIONAL for built-in capabilities (the host knows it); REQUIRED when `delegate` is present.
- */
-export interface CapabilityManifest {
-  /**
-   * The capability's namespace slug, e.g. `git-trust`.
-   */
-  capability: string;
-  /**
-   * Manifest/capability version, `MAJOR.MINOR`.
-   */
-  version: string;
-  /**
-   * Human-readable capability name for management surfaces.
-   */
-  title?: string;
-  /**
-   * One-paragraph description for management surfaces.
-   */
-  description?: string;
   /**
-   * Trust Task spec slugs (or `<family>/*` globs) this capability serves when enabled.
-   *
-   * @minItems 1
+   * The capability's manifest. OPTIONAL for built-in capabilities (the host knows it); REQUIRED when `delegate` is present.
    */
-  specs: [string, ...string[]];
-  /**
-   * The trust-registry tuple vocabulary this capability may read and write. A conforming host MUST reject writes by this capability whose `action` is not listed.
-   */
-  vocabulary?: {
-    /**
-     * TRQP `action` values this capability owns, e.g. `git.commit.sign`.
-     *
-     * @minItems 1
-     */
-    actions: [string, ...string[]];
-    /**
-     * Human-readable pattern of the `resource` values used, e.g. `<org>[/<repo>]`.
-     */
-    resourcePattern?: string;
-  };
-  /**
-   * Map of capability operation (e.g. `grant`, `view`) to the community roles allowed to perform it.
-   */
-  roles?: {
-    [k: string]: string[] | undefined;
-  };
-  /**
-   * Membership lifecycle events the capability consumes, e.g. `member.enrolled`, `member.revoked`, `role.changed`.
-   */
-  lifecycleHooks?: string[];
-  /**
-   * Map of capability operation to the consent class its execution requires under the host's delegated-execution policy.
-   */
-  consentClass?: {
-    [k: string]: ("normal" | "elevated" | "destructive") | undefined;
-  };
-  /**
-   * Out-of-stack components that consume this capability's trust decisions.
-   */
-  externalAdapters?: {
-    /**
-     * Adapter type, e.g. `github-action`, `webhook`.
-     */
-    kind: string;
-    /**
-     * Where the adapter lives, e.g. a repository path or URL.
-     */
-    ref: string;
-  }[];
-  /**
-   * Spec slug of the JSON schema the per-community `config` document must validate against.
-   */
-  configSchema?: string;
+  manifest?: CapabilityManifest;
   ext?: Ext;
 }
-/**
- * Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.
- */
-export interface Ext {
-  [k: string]: unknown | undefined;
-}
 export interface GovernanceCapabilityEnableResponsePayload {
   capability: string;
   version?: string;
@@ -126,6 +50,9 @@ export interface GovernanceCapabilityEnableResponsePayload {
   ext?: Ext;
 }
 
+/** Shared definitions this specification references, re-exported under the names it used to declare them with. */
+export type { CapabilityManifest, Ext };
+
 /** Trust Task type URI. */
 export const TYPE_URI = "https://trusttasks.org/spec/governance/capability/enable/0.1" as const;
 
@@ -218,6 +145,7 @@ export const PAYLOAD_SCHEMA = {
         },
         "message": {
           "type": "string",
+          "maxLength": 1024,
           "description": "Additional human-readable detail."
         },
         "ext": {
@@ -258,10 +186,12 @@ export const PAYLOAD_SCHEMA = {
         },
         "title": {
           "type": "string",
+          "maxLength": 256,
           "description": "Human-readable capability name for management surfaces."
         },
         "description": {
           "type": "string",
+          "maxLength": 1024,
           "description": "One-paragraph description for management surfaces."
         },
         "specs": {
@@ -389,6 +319,7 @@ export const RESPONSE_PAYLOAD_SCHEMA = {
         },
         "message": {
           "type": "string",
+          "maxLength": 1024,
           "description": "Additional human-readable detail."
         },
         "ext": {
@@ -429,10 +360,12 @@ export const RESPONSE_PAYLOAD_SCHEMA = {
         },
         "title": {
           "type": "string",
+          "maxLength": 256,
           "description": "Human-readable capability name for management surfaces."
         },
         "description": {
           "type": "string",
+          "maxLength": 1024,
           "description": "One-paragraph description for management surfaces."
         },
         "specs": {
@@ -539,6 +472,7 @@ export const SPEC = {
   isBearer: false,
   isProofRequired: true,
   isRecipientRequired: true,
+  isIssuedAtRequired: true,
   payloadSchema: PAYLOAD_SCHEMA,
 } as const;
 
@@ -552,5 +486,6 @@ export const RESPONSE_SPEC = {
   isBearer: false,
   isProofRequired: true,
   isRecipientRequired: true,
+  isIssuedAtRequired: true,
   payloadSchema: RESPONSE_PAYLOAD_SCHEMA,
 } as const;

package/src/governance/capability/list/0.1/payload.ts

@@ -3,6 +3,9 @@
  * Source: specs/governance/capability/list/0.1/payload.schema.json
  */
 
+import type { CapabilityManifest, Ext } from "../../../../_shared/components.js";
+
+
 /**
  * List a community's capabilities and their manifests — the query behind a capability management surface. Defaults to enabled capabilities only.
  */
@@ -13,12 +16,6 @@ export interface GovernanceCapabilityListPayload {
   status?: "enabled" | "available" | "all";
   ext?: Ext;
 }
-/**
- * Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.
- */
-export interface Ext {
-  [k: string]: unknown | undefined;
-}
 export interface GovernanceCapabilityListResponsePayload {
   capabilities: {
     manifest: CapabilityManifest;
@@ -34,82 +31,9 @@ export interface GovernanceCapabilityListResponsePayload {
   }[];
   ext?: Ext;
 }
-/**
- * The self-description of a pluggable community capability: the Trust Task families it serves, the trust-registry vocabulary it reads and writes, the roles that may operate it, the membership lifecycle hooks it consumes, and the external adapters that act on its decisions. The manifest is what governance approves, what discovery advertises, and what a management UX renders.
- */
-export interface CapabilityManifest {
-  /**
-   * The capability's namespace slug, e.g. `git-trust`.
-   */
-  capability: string;
-  /**
-   * Manifest/capability version, `MAJOR.MINOR`.
-   */
-  version: string;
-  /**
-   * Human-readable capability name for management surfaces.
-   */
-  title?: string;
-  /**
-   * One-paragraph description for management surfaces.
-   */
-  description?: string;
-  /**
-   * Trust Task spec slugs (or `<family>/*` globs) this capability serves when enabled.
-   *
-   * @minItems 1
-   */
-  specs: [string, ...string[]];
-  /**
-   * The trust-registry tuple vocabulary this capability may read and write. A conforming host MUST reject writes by this capability whose `action` is not listed.
-   */
-  vocabulary?: {
-    /**
-     * TRQP `action` values this capability owns, e.g. `git.commit.sign`.
-     *
-     * @minItems 1
-     */
-    actions: [string, ...string[]];
-    /**
-     * Human-readable pattern of the `resource` values used, e.g. `<org>[/<repo>]`.
-     */
-    resourcePattern?: string;
-  };
-  /**
-   * Map of capability operation (e.g. `grant`, `view`) to the community roles allowed to perform it.
-   */
-  roles?: {
-    [k: string]: string[] | undefined;
-  };
-  /**
-   * Membership lifecycle events the capability consumes, e.g. `member.enrolled`, `member.revoked`, `role.changed`.
-   */
-  lifecycleHooks?: string[];
-  /**
-   * Map of capability operation to the consent class its execution requires under the host's delegated-execution policy.
-   */
-  consentClass?: {
-    [k: string]: ("normal" | "elevated" | "destructive") | undefined;
-  };
-  /**
-   * Out-of-stack components that consume this capability's trust decisions.
-   */
-  externalAdapters?: {
-    /**
-     * Adapter type, e.g. `github-action`, `webhook`.
-     */
-    kind: string;
-    /**
-     * Where the adapter lives, e.g. a repository path or URL.
-     */
-    ref: string;
-  }[];
-  /**
-   * Spec slug of the JSON schema the per-community `config` document must validate against.
-   */
-  configSchema?: string;
-  ext?: Ext;
-}
+
+/** Shared definitions this specification references, re-exported under the names it used to declare them with. */
+export type { CapabilityManifest, Ext };
 
 /** Trust Task type URI. */
 export const TYPE_URI = "https://trusttasks.org/spec/governance/capability/list/0.1" as const;
@@ -229,10 +153,12 @@ export const PAYLOAD_SCHEMA = {
         },
         "title": {
           "type": "string",
+          "maxLength": 256,
           "description": "Human-readable capability name for management surfaces."
         },
         "description": {
           "type": "string",
+          "maxLength": 1024,
           "description": "One-paragraph description for management surfaces."
         },
         "specs": {
@@ -408,10 +334,12 @@ export const RESPONSE_PAYLOAD_SCHEMA = {
         },
         "title": {
           "type": "string",
+          "maxLength": 256,
           "description": "Human-readable capability name for management surfaces."
         },
         "description": {
           "type": "string",
+          "maxLength": 1024,
           "description": "One-paragraph description for management surfaces."
         },
         "specs": {
@@ -518,6 +446,7 @@ export const SPEC = {
   isBearer: false,
   isProofRequired: false,
   isRecipientRequired: true,
+  isIssuedAtRequired: false,
   payloadSchema: PAYLOAD_SCHEMA,
 } as const;
 
@@ -531,5 +460,6 @@ export const RESPONSE_SPEC = {
   isBearer: false,
   isProofRequired: false,
   isRecipientRequired: true,
+  isIssuedAtRequired: false,
   payloadSchema: RESPONSE_PAYLOAD_SCHEMA,
 } as const;

package/src/index.ts

@@ -5,6 +5,11 @@
 // not one specification among many.
 export * from "./_runtime/index.js";
 
+// Every cross-file definition, declared once. Namespaced rather than flat:
+// 150-odd names in the root export would collide with the runtime's on the
+// first shared definition anyone calls `Transport` or `Session`.
+export * as SharedComponents from "./_shared/components.js";
+
 export * as FrameworkShared_v0_1 from "./_framework/0.1/framework.js";
 export * as FrameworkShared_v0_2 from "./_framework/0.2/framework.js";
 export * as FrameworkShared_v0_3 from "./_framework/0.3/framework.js";

package/src/keys/_shared/0.1/key-record.ts

@@ -9,3 +9,9 @@
 export interface KeyRecordSharedDefinitionForTheKeysSpecFamily {
   [k: string]: unknown | undefined;
 }
+
+/**
+ * The definitions this shared schema publishes, hoisted to one declaration each.
+ * See "../../../_shared/components.js".
+ */
+export type { KeyOrigin, KeyRecord, KeyStatus, KeyType } from "../../../_shared/components.js";

package/src/keys/_shared/0.1/sign-algorithm.ts

@@ -9,3 +9,9 @@
 export interface SignAlgorithmSharedDefinitionForTheKeysSpecFamily {
   [k: string]: unknown | undefined;
 }
+
+/**
+ * The definitions this shared schema publishes, hoisted to one declaration each.
+ * See "../../../_shared/components.js".
+ */
+export type { SignAlgorithm } from "../../../_shared/components.js";