@openvtc/trust-tasks 0.14.2 → 0.16.0

package/src/vta/webvh/dids/delete/1.0/payload.ts

@@ -3,16 +3,13 @@
  * Source: specs/vta/webvh/dids/delete/1.0/payload.schema.json
  */
 
+import type { Ext } from "../../../../../_shared/components.js";
+
+
 export interface VTAWebVHDIDsDeletePayload {
   did: string;
   ext?: Ext;
 }
-/**
- * Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.
- */
-export interface Ext {
-  [k: string]: unknown | undefined;
-}
 /**
  * Success response to vta/webvh/dids/delete. Type https://trusttasks.org/spec/vta/webvh/dids/delete/1.0#response.
  */
@@ -29,6 +26,9 @@ export interface VTAWebVHDIDsDeleteResponsePayload {
   ext?: Ext;
 }
 
+/** Shared definitions this specification references, re-exported under the names it used to declare them with. */
+export type { Ext };
+
 /** Trust Task type URI. */
 export const TYPE_URI = "https://trusttasks.org/spec/vta/webvh/dids/delete/1.0" as const;
 
@@ -165,6 +165,7 @@ export const SPEC = {
   isBearer: false,
   isProofRequired: true,
   isRecipientRequired: true,
+  isIssuedAtRequired: true,
   payloadSchema: PAYLOAD_SCHEMA,
 } as const;
 
@@ -178,5 +179,6 @@ export const RESPONSE_SPEC = {
   isBearer: false,
   isProofRequired: true,
   isRecipientRequired: true,
+  isIssuedAtRequired: true,
   payloadSchema: RESPONSE_PAYLOAD_SCHEMA,
 } as const;

package/src/vta/webvh/dids/get/1.0/payload.ts

@@ -3,6 +3,9 @@
  * Source: specs/vta/webvh/dids/get/1.0/payload.schema.json
  */
 
+import type { Ext, WebvhDidRecord } from "../../../../../_shared/components.js";
+
+
 export interface VTAWebVHDIDsGetPayload {
   did: string;
   /**
@@ -11,12 +14,6 @@ export interface VTAWebVHDIDsGetPayload {
   includeLog?: boolean;
   ext?: Ext;
 }
-/**
- * Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.
- */
-export interface Ext {
-  [k: string]: unknown | undefined;
-}
 /**
  * Success response to vta/webvh/dids/get. Type https://trusttasks.org/spec/vta/webvh/dids/get/1.0#response.
  */
@@ -28,50 +25,9 @@ export interface VTAWebVHDIDsGetResponsePayload {
   log?: string;
   ext?: Ext;
 }
-/**
- * A did:webvh DID as the VTA holds it. The DID document itself is not here — it lives in the log, which `vta/webvh/dids/get` returns on request.
- */
-export interface WebvhDidRecord {
-  /**
-   * The DID, e.g. `did:webvh:<scid>:example.com:alice`.
-   */
-  did: string;
-  /**
-   * Id of the hosting server serving this DID's log. Empty for a serverless DID, whose location comes from the URL it was created with.
-   */
-  serverId: string;
-  /**
-   * The hosting server's handle for the record. Unrelated to a BIP-39 phrase; the collision of terms is historical.
-   */
-  mnemonic: string;
-  /**
-   * Self-certifying identifier: the hash committing to the log's first entry. It is what makes the DID's history tamper-evident, and it changes only when the log is re-created — never in place.
-   */
-  scid: string;
-  /**
-   * Context this DID belongs to. Deleting that context destroys this DID.
-   */
-  contextId: string;
-  /**
-   * Whether the DID may be moved to another domain without losing its identity. Fixed at creation: a DID created non-portable cannot be made portable later, because portability is a commitment recorded in the log's first entry.
-   */
-  portable: boolean;
-  /**
-   * Number of entries in the log.
-   */
-  logEntryCount: number;
-  /**
-   * Pre-rotation keys committed by the most recent entry. `0` means pre-rotation is disabled — a compromise of the current key is then unrecoverable by rotation, because the successor was never committed in advance.
-   */
-  preRotationCount?: number;
-  /**
-   * Next `#key-{n}` fragment id to mint. Monotonic and never decremented, so a fragment is never reused for a different key.
-   */
-  nextFragmentId?: number;
-  createdAt: string;
-  updatedAt: string;
-  ext?: Ext;
-}
+
+/** Shared definitions this specification references, re-exported under the names it used to declare them with. */
+export type { Ext, WebvhDidRecord };
 
 /** Trust Task type URI. */
 export const TYPE_URI = "https://trusttasks.org/spec/vta/webvh/dids/get/1.0" as const;
@@ -346,6 +302,7 @@ export const SPEC = {
   isBearer: false,
   isProofRequired: false,
   isRecipientRequired: true,
+  isIssuedAtRequired: false,
   payloadSchema: PAYLOAD_SCHEMA,
 } as const;
 
@@ -359,5 +316,6 @@ export const RESPONSE_SPEC = {
   isBearer: false,
   isProofRequired: false,
   isRecipientRequired: true,
+  isIssuedAtRequired: false,
   payloadSchema: RESPONSE_PAYLOAD_SCHEMA,
 } as const;

package/src/vta/webvh/dids/list/1.0/payload.ts

@@ -3,6 +3,9 @@
  * Source: specs/vta/webvh/dids/list/1.0/payload.schema.json
  */
 
+import type { Ext, WebvhDidRecord } from "../../../../../_shared/components.js";
+
+
 export interface VTAWebVHDIDsListPayload {
   /**
    * Only DIDs in this context.
@@ -14,12 +17,6 @@ export interface VTAWebVHDIDsListPayload {
   serverId?: string;
   ext?: Ext;
 }
-/**
- * Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.
- */
-export interface Ext {
-  [k: string]: unknown | undefined;
-}
 /**
  * Success response to vta/webvh/dids/list. Type https://trusttasks.org/spec/vta/webvh/dids/list/1.0#response.
  */
@@ -30,50 +27,9 @@ export interface VTAWebVHDIDsListResponsePayload {
   dids: WebvhDidRecord[];
   ext?: Ext;
 }
-/**
- * A did:webvh DID as the VTA holds it. The DID document itself is not here — it lives in the log, which `vta/webvh/dids/get` returns on request.
- */
-export interface WebvhDidRecord {
-  /**
-   * The DID, e.g. `did:webvh:<scid>:example.com:alice`.
-   */
-  did: string;
-  /**
-   * Id of the hosting server serving this DID's log. Empty for a serverless DID, whose location comes from the URL it was created with.
-   */
-  serverId: string;
-  /**
-   * The hosting server's handle for the record. Unrelated to a BIP-39 phrase; the collision of terms is historical.
-   */
-  mnemonic: string;
-  /**
-   * Self-certifying identifier: the hash committing to the log's first entry. It is what makes the DID's history tamper-evident, and it changes only when the log is re-created — never in place.
-   */
-  scid: string;
-  /**
-   * Context this DID belongs to. Deleting that context destroys this DID.
-   */
-  contextId: string;
-  /**
-   * Whether the DID may be moved to another domain without losing its identity. Fixed at creation: a DID created non-portable cannot be made portable later, because portability is a commitment recorded in the log's first entry.
-   */
-  portable: boolean;
-  /**
-   * Number of entries in the log.
-   */
-  logEntryCount: number;
-  /**
-   * Pre-rotation keys committed by the most recent entry. `0` means pre-rotation is disabled — a compromise of the current key is then unrecoverable by rotation, because the successor was never committed in advance.
-   */
-  preRotationCount?: number;
-  /**
-   * Next `#key-{n}` fragment id to mint. Monotonic and never decremented, so a fragment is never reused for a different key.
-   */
-  nextFragmentId?: number;
-  createdAt: string;
-  updatedAt: string;
-  ext?: Ext;
-}
+
+/** Shared definitions this specification references, re-exported under the names it used to declare them with. */
+export type { Ext, WebvhDidRecord };
 
 /** Trust Task type URI. */
 export const TYPE_URI = "https://trusttasks.org/spec/vta/webvh/dids/list/1.0" as const;
@@ -344,6 +300,7 @@ export const SPEC = {
   isBearer: false,
   isProofRequired: false,
   isRecipientRequired: true,
+  isIssuedAtRequired: false,
   payloadSchema: PAYLOAD_SCHEMA,
 } as const;
 
@@ -357,5 +314,6 @@ export const RESPONSE_SPEC = {
   isBearer: false,
   isProofRequired: false,
   isRecipientRequired: true,
+  isIssuedAtRequired: false,
   payloadSchema: RESPONSE_PAYLOAD_SCHEMA,
 } as const;

package/src/vta/webvh/dids/register-with-server/1.0/payload.ts

@@ -3,6 +3,9 @@
  * Source: specs/vta/webvh/dids/register-with-server/1.0/payload.schema.json
  */
 
+import type { Ext } from "../../../../../_shared/components.js";
+
+
 /**
  * Hand an existing DID's log to a hosting server so it is served there.
  */
@@ -22,12 +25,6 @@ export interface VTAWebVHDIDsRegisterWithServerPayload {
   domain?: string;
   ext?: Ext;
 }
-/**
- * Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.
- */
-export interface Ext {
-  [k: string]: unknown | undefined;
-}
 /**
  * Success response to vta/webvh/dids/register-with-server. Type https://trusttasks.org/spec/vta/webvh/dids/register-with-server/1.0#response.
  */
@@ -41,6 +38,9 @@ export interface VTAWebVHDIDsRegisterWithServerResponsePayload {
   ext?: Ext;
 }
 
+/** Shared definitions this specification references, re-exported under the names it used to declare them with. */
+export type { Ext };
+
 /** Trust Task type URI. */
 export const TYPE_URI = "https://trusttasks.org/spec/vta/webvh/dids/register-with-server/1.0" as const;
 
@@ -195,6 +195,7 @@ export const SPEC = {
   isBearer: false,
   isProofRequired: true,
   isRecipientRequired: true,
+  isIssuedAtRequired: true,
   payloadSchema: PAYLOAD_SCHEMA,
 } as const;
 
@@ -208,5 +209,6 @@ export const RESPONSE_SPEC = {
   isBearer: false,
   isProofRequired: true,
   isRecipientRequired: true,
+  isIssuedAtRequired: true,
   payloadSchema: RESPONSE_PAYLOAD_SCHEMA,
 } as const;

package/src/vta/webvh/dids/rotate-keys/1.0/payload.ts

@@ -3,6 +3,9 @@
  * Source: specs/vta/webvh/dids/rotate-keys/1.0/payload.schema.json
  */
 
+import type { Ext } from "../../../../../_shared/components.js";
+
+
 /**
  * Rotate a did:webvh's signing keys by appending a log entry that moves to the pre-committed successor.
  */
@@ -15,12 +18,6 @@ export interface VTAWebVHDIDsRotateKeysPayload {
   label?: string;
   ext?: Ext;
 }
-/**
- * Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.
- */
-export interface Ext {
-  [k: string]: unknown | undefined;
-}
 /**
  * Success response to vta/webvh/dids/rotate-keys. Type https://trusttasks.org/spec/vta/webvh/dids/rotate-keys/1.0#response.
  */
@@ -47,6 +44,9 @@ export interface VTAWebVHDIDsRotateKeysResponsePayload {
   ext?: Ext;
 }
 
+/** Shared definitions this specification references, re-exported under the names it used to declare them with. */
+export type { Ext };
+
 /** Trust Task type URI. */
 export const TYPE_URI = "https://trusttasks.org/spec/vta/webvh/dids/rotate-keys/1.0" as const;
 
@@ -89,7 +89,8 @@ export const PAYLOAD_SCHEMA = {
       "description": "Successors to commit for the next rotation. Absent keeps the DID's current setting. Setting it to `0` disables pre-rotation from here on, which forfeits the ability to recover from a future key compromise."
     },
     "label": {
-      "type": "string"
+      "type": "string",
+      "maxLength": 256
     },
     "ext": {
       "$ref": "#/$defs/Ext"
@@ -234,6 +235,7 @@ export const SPEC = {
   isBearer: false,
   isProofRequired: true,
   isRecipientRequired: true,
+  isIssuedAtRequired: true,
   payloadSchema: PAYLOAD_SCHEMA,
 } as const;
 
@@ -247,5 +249,6 @@ export const RESPONSE_SPEC = {
   isBearer: false,
   isProofRequired: true,
   isRecipientRequired: true,
+  isIssuedAtRequired: true,
   payloadSchema: RESPONSE_PAYLOAD_SCHEMA,
 } as const;

package/src/vta/webvh/dids/update/1.0/payload.ts

@@ -3,6 +3,9 @@
  * Source: specs/vta/webvh/dids/update/1.0/payload.schema.json
  */
 
+import type { Ext } from "../../../../../_shared/components.js";
+
+
 /**
  * Ask a Verifiable Trust Agent to publish a new entry in a did:webvh log it holds the update key for. The agent decides whether to do so; the caller proposes.
  */
@@ -43,12 +46,6 @@ export interface WebVHDIDUpdatePayload {
   expectedVersionId?: string;
   ext?: Ext;
 }
-/**
- * Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.
- */
-export interface Ext {
-  [k: string]: unknown | undefined;
-}
 /**
  * The published entry. camelCase per the framework convention — note the counts are the state AFTER the update, including the rotation the caller did not ask for.
  */
@@ -78,6 +75,9 @@ export interface WebVHDIDUpdateResponsePayload {
   ext?: Ext;
 }
 
+/** Shared definitions this specification references, re-exported under the names it used to declare them with. */
+export type { Ext };
+
 /** Trust Task type URI. */
 export const TYPE_URI = "https://trusttasks.org/spec/vta/webvh/dids/update/1.0" as const;
 
@@ -141,6 +141,7 @@ export const PAYLOAD_SCHEMA = {
     },
     "label": {
       "type": "string",
+      "maxLength": 256,
       "description": "Operator-facing audit label."
     },
     "expectedVersionId": {
@@ -283,6 +284,7 @@ export const SPEC = {
   isBearer: false,
   isProofRequired: true,
   isRecipientRequired: true,
+  isIssuedAtRequired: true,
   payloadSchema: PAYLOAD_SCHEMA,
 } as const;
 
@@ -296,5 +298,6 @@ export const RESPONSE_SPEC = {
   isBearer: false,
   isProofRequired: true,
   isRecipientRequired: true,
+  isIssuedAtRequired: true,
   payloadSchema: RESPONSE_PAYLOAD_SCHEMA,
 } as const;

package/src/vta/webvh/servers/domains/0.1/payload.ts

@@ -3,6 +3,9 @@
  * Source: specs/vta/webvh/servers/domains/0.1/payload.schema.json
  */
 
+import type { DomainEntry, Ext } from "../../../../../_shared/components.js";
+
+
 /**
  * Ask an agent which hosting domains it may use on one of the hosting servers it has registered. The agent answers by relaying the server's own caller-scoped view; the response items are the same DomainEntry the did-management family defines.
  */
@@ -11,14 +14,11 @@ export interface WebVHServerDomainsPayload {
    * Identifier of the registered hosting server to ask. Required: an agent may know several, and they do not share a domain namespace — omitting it would make the answer ambiguous rather than general.
    */
   serverId: string;
+  /**
+   * Ecosystem-defined extension members per SPEC.md §4.5.1.
+   */
   ext?: Ext;
 }
-/**
- * Ecosystem-defined extension members per SPEC.md §4.5.1.
- */
-export interface Ext {
-  [k: string]: unknown | undefined;
-}
 /**
  * The success response. Carried in a Trust Task document whose type is https://trusttasks.org/spec/vta/webvh/servers/domains/0.1#response.
  */
@@ -31,49 +31,12 @@ export interface WebVHServerDomainsResponsePayload {
    * The domain used when a request names none — the caller's own default where the server records one, else the server's system default. Producers SHOULD omit it when there is neither; `null` is accepted as the same answer, and consumers MUST NOT read a difference between the two.
    */
   default?: string | null;
-  ext?: Ext2;
-}
-export interface DomainEntry {
-  /**
-   * Hosting domain name (e.g. `did.example.com`). Compared case-insensitively; producers SHOULD emit lowercase canonical form.
-   */
-  name: string;
-  /**
-   * Optional human-readable label.
-   */
-  label?: string;
-  /**
-   * Domain lifecycle state. A `disabled` domain still serves existing DIDs in read-only mode for the host's configured grace period before purge becomes eligible.
-   */
-  status: "active" | "disabled";
-  /**
-   * When `true`, this domain is the host's default — new DIDs created without an explicit domain are hosted here. Exactly one entry SHOULD carry `defaultDomain: true`.
-   */
-  defaultDomain?: boolean;
-  createdAt: string;
-  /**
-   * Present iff `status === "disabled"`.
-   */
-  disabledAt?: string;
-  /**
-   * Earliest RFC3339 timestamp at which the host's background sweep is allowed to purge content for a disabled domain. Operators with administrative authority MAY override the wait via `domain/purge`.
-   */
-  purgeAt?: string;
-  ext?: Ext1;
-}
-/**
- * Ecosystem-defined extension members per SPEC.md §4.5.1.
- */
-export interface Ext1 {
-  [k: string]: unknown | undefined;
-}
-/**
- * Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.
- */
-export interface Ext2 {
-  [k: string]: unknown | undefined;
+  ext?: Ext;
 }
 
+/** Shared definitions this specification references, re-exported under the names it used to declare them with. */
+export type { DomainEntry, Ext };
+
 /** Trust Task type URI. */
 export const TYPE_URI = "https://trusttasks.org/spec/vta/webvh/servers/domains/0.1" as const;
 
@@ -317,6 +280,7 @@ export const SPEC = {
   isBearer: false,
   isProofRequired: false,
   isRecipientRequired: true,
+  isIssuedAtRequired: false,
   payloadSchema: PAYLOAD_SCHEMA,
 } as const;
 
@@ -330,5 +294,6 @@ export const RESPONSE_SPEC = {
   isBearer: false,
   isProofRequired: false,
   isRecipientRequired: true,
+  isIssuedAtRequired: false,
   payloadSchema: RESPONSE_PAYLOAD_SCHEMA,
 } as const;

package/src/vta/webvh/servers/list/1.0/payload.ts

@@ -3,15 +3,12 @@
  * Source: specs/vta/webvh/servers/list/1.0/payload.schema.json
  */
 
+import type { Ext, WebvhServerRecord } from "../../../../../_shared/components.js";
+
+
 export interface VTAWebVHServersListPayload {
   ext?: Ext;
 }
-/**
- * Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.
- */
-export interface Ext {
-  [k: string]: unknown | undefined;
-}
 /**
  * Success response to vta/webvh/servers/list. Type https://trusttasks.org/spec/vta/webvh/servers/list/1.0#response.
  */
@@ -22,23 +19,9 @@ export interface VTAWebVHServersListResponsePayload {
   servers: WebvhServerRecord[];
   ext?: Ext;
 }
-/**
- * A hosting server the VTA is registered with. Carries no credential: what the VTA holds to authenticate against the server is never part of this record and never leaves it.
- */
-export interface WebvhServerRecord {
-  /**
-   * Local id for the server, chosen by the operator.
-   */
-  id: string;
-  /**
-   * The server's own DID, used to authenticate it.
-   */
-  did: string;
-  label?: string;
-  createdAt: string;
-  updatedAt: string;
-  ext?: Ext;
-}
+
+/** Shared definitions this specification references, re-exported under the names it used to declare them with. */
+export type { Ext, WebvhServerRecord };
 
 /** Trust Task type URI. */
 export const TYPE_URI = "https://trusttasks.org/spec/vta/webvh/servers/list/1.0" as const;
@@ -126,7 +109,8 @@ export const PAYLOAD_SCHEMA = {
           "description": "The server's own DID, used to authenticate it."
         },
         "label": {
-          "type": "string"
+          "type": "string",
+          "maxLength": 256
         },
         "createdAt": {
           "type": "string",
@@ -202,7 +186,8 @@ export const RESPONSE_PAYLOAD_SCHEMA = {
           "description": "The server's own DID, used to authenticate it."
         },
         "label": {
-          "type": "string"
+          "type": "string",
+          "maxLength": 256
         },
         "createdAt": {
           "type": "string",
@@ -231,6 +216,7 @@ export const SPEC = {
   isBearer: false,
   isProofRequired: false,
   isRecipientRequired: true,
+  isIssuedAtRequired: false,
   payloadSchema: PAYLOAD_SCHEMA,
 } as const;
 
@@ -244,5 +230,6 @@ export const RESPONSE_SPEC = {
   isBearer: false,
   isProofRequired: false,
   isRecipientRequired: true,
+  isIssuedAtRequired: false,
   payloadSchema: RESPONSE_PAYLOAD_SCHEMA,
 } as const;

package/src/vta/webvh/servers/reconcile/0.1/payload.ts

@@ -3,6 +3,9 @@
  * Source: specs/vta/webvh/servers/reconcile/0.1/payload.schema.json
  */
 
+import type { Ext } from "../../../../../_shared/components.js";
+
+
 /**
  * Ask an agent to compare the DIDs a hosting server holds for it against the DIDs it has records for, and report where the two disagree. Neither party can answer this alone: the producer holds no credentials for the hosting server, and the server has no view of the agent's records.
  */
@@ -11,14 +14,11 @@ export interface WebVHServersReconcilePayload {
    * Identifier of the registered hosting server to compare against. Required for the same reason as on `vta/webvh/servers/domains/0.1`: an agent may hold registrations with several servers, and a comparison that merged them would place every DID in a report without saying which host it was — or was not — on.
    */
   serverId: string;
+  /**
+   * Ecosystem-defined extension members per SPEC.md §4.5.1.
+   */
   ext?: Ext;
 }
-/**
- * Ecosystem-defined extension members per SPEC.md §4.5.1.
- */
-export interface Ext {
-  [k: string]: unknown | undefined;
-}
 /**
  * The comparison. Carried in a Trust Task document whose type is https://trusttasks.org/spec/vta/webvh/servers/reconcile/0.1#response.
  */
@@ -39,7 +39,7 @@ export interface WebVHServersReconcileResponsePayload {
    * How many the two agree on. Required, and required even when both arrays are empty: it is what distinguishes 'compared them, all matched' from 'compared nothing'. A consumer that rendered only the divergences would show an identical screen for a clean estate and for a listing that silently returned no rows.
    */
   inBoth: number;
-  ext?: Ext1;
+  ext?: Ext;
 }
 export interface ADIDTheHostingServerServesAndTheAgentHasNoRecordOf {
   /**
@@ -73,12 +73,9 @@ export interface ADIDTheAgentRecordsAsHostedOnThisServerWhichTheServerDoesNotHav
    */
   contextId?: string;
 }
-/**
- * Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.
- */
-export interface Ext1 {
-  [k: string]: unknown | undefined;
-}
+
+/** Shared definitions this specification references, re-exported under the names it used to declare them with. */
+export type { Ext };
 
 /** Trust Task type URI. */
 export const TYPE_URI = "https://trusttasks.org/spec/vta/webvh/servers/reconcile/0.1" as const;
@@ -361,6 +358,7 @@ export const SPEC = {
   isBearer: false,
   isProofRequired: false,
   isRecipientRequired: true,
+  isIssuedAtRequired: false,
   payloadSchema: PAYLOAD_SCHEMA,
 } as const;
 
@@ -374,5 +372,6 @@ export const RESPONSE_SPEC = {
   isBearer: false,
   isProofRequired: false,
   isRecipientRequired: true,
+  isIssuedAtRequired: false,
   payloadSchema: RESPONSE_PAYLOAD_SCHEMA,
 } as const;