@openvtc/trust-tasks 0.15.0 → 0.16.0

package/CHANGELOG.md

@@ -11,6 +11,266 @@ The package versions over **its own API** — what a consumer compiles against
 not over `SPEC.md`. Below 1.0 a breaking change bumps the leading non-zero
 component.
 
+## 0.16.0 — 2026-08-27
+
+
+### Added
+
+- **specs**: Re-target every live specification to framework 0.5 (#306)
+
+* feat(specs): target framework 0.5 in the framework-reserved specs
+
+  The five framework-reserved families -- trust-task-error,
+  trust-task-next-step, trust-task-discovery, trust-task-control and
+  trust-ceremony-receipt -- are always compiled and are the ones every
+  other spec composes with, so they move first.
+
+  SPEC 7.2 item 1 selects the envelope schema by the specification's
+  declared target framework version, so this is the member that decides
+  which envelope a consumer validates these documents against. Framework
+  0.5.0 has been published under specs/_framework/0.5/ since it merged
+  canonically, but nothing targeted it, so none of its requirements bound
+  anything.
+
+  The 0.5 envelope is byte-identical to 0.4's apart from $id, title and
+  descriptions, and is a strict superset of 0.1-0.3 (same required set,
+  additionalProperties true, adding only constraints on ceremony and
+  parentThreadId). No document that conformed before stops conforming.
+
+- **specs**: Require issuedAt on every live consequential spec, and make the §7.3 item 17 floor fatal (#302)
+
+* spec: make the §7.3 item 17 freshness floor a hard failure
+
+- **rs**: Make SPEC §7.3 item 17's issuedAt MUST expressible (#300)
+
+Framework 0.5.0's §7.3 item 17 says a Trust Task specification defining a
+  consequential Trust Task MUST require the `issuedAt` member, raising §4.2's
+  SHOULD to a MUST for documents conforming to it. There was no way to declare
+  that: the meta-schema had `proofRequirement` for the `proof` envelope member
+  and nothing equivalent for `issuedAt`, so the MUST was unexpressible and none
+  of the 209 consequential specs in the registry could comply.
+
+  Adds `issuedAtRequirement` to the front-matter meta-schema, modelled on
+  `proofRequirement` — same two forms (a single `requirement`, or a per-variant
+  `request`/`response` pair), same enum, same `rationale`. It governs an envelope
+  member, admits a per-variant reading because request and response are relied on
+  differently, and reading one declaration now teaches the other.
+
+  Declared rather than derived, with the derived floor checked and reported:
+
+    * `sideEffects` and `exposure` are DESCRIPTIVE (§7.3 items 13/14). Deriving
+      `issuedAt`-REQUIRED from them would mean that correcting `sideEffects.level`
+      from `none` to `mutating` for accuracy silently changed which documents
+      every consumer of that spec must reject.
+    * §2 makes the *handler* authoritative for consequentiality, not the front
+      matter — so a value computed from the front matter would enforce something
+      the front matter does not authoritatively state.
+    * A non-consequential spec may legitimately require `issuedAt` anyway; a
+      derived-only mechanism cannot express that.
+    * Deriving would flip 209 specs' wire behaviour in one commit, invisibly.
+
+  So the build derives the floor instead of substituting for the declaration.
+  `npm run validate` prints a `Freshness floor (§7.3 item 17)` line counting the
+  consequential specs that have not declared it (currently 0/209), *fails* on a
+  spec that declares something weaker than REQUIRED, and escalates the undeclared
+  case to a hard error under `TT_STRICT_ISSUED_AT=1` — the ratchet that becomes
+  the default once the registry has caught up.
+
+  Enforcement reaches consumers the same way `IS_PROOF_REQUIRED` does:
+
+    * `Payload::IS_ISSUED_AT_REQUIRED` (Rust) and `SpecPolicy.isIssuedAtRequired`
+      (TypeScript), emitted per variant by both generators from the front matter.
+    * `TrustTask::enforce_spec_policy` / `enforceSpecPolicy` reject a document
+      with no `issuedAt` as `malformedRequest`. Not `expired`: §8.3 defines no
+      dedicated code, `expired` names a document that was once acceptable, and
+      §7.2 item 13 already uses `malformedRequest` for the other freshness
+      rejections.
+    * The trait constant has a default of `false`, so hand-written impls — the
+      crate's own `trust-task-error`, hand-modelled in `error.rs` because it is
+      in the codegen's SKIP_SLUGS, and every downstream impl — keep compiling.
+    * `check-bindings` compares the new key across front matter, Rust and
+      TypeScript, so the two languages cannot drift on it.
+
+  Distinct from `FreshnessPolicy::require_issued_at`, which is a *consumer's*
+  own posture applied to every document it sees. This is the *specification's*
+  requirement, published in the registry and not the consumer's to relax.
+
+  No specification declares `issuedAtRequirement` yet — that is a follow-up,
+  spec by spec. The generated Rust tree is therefore byte-identical (the const is
+  emitted only on override) and the generated TypeScript gains one
+  `isIssuedAtRequired: false` line per policy object. Nothing that was accepted
+  before is rejected now.
+
+  Also documents the declaration in CONTRIBUTING-SPECS.md, and teaches
+  `npm run new-spec` to emit it on a scaffold whose declared classes make the
+  task consequential.
+
+
+
+### Specifications
+
+- Bound the remaining free-text payload members and state who reads them (#301)
+
+SPEC.md §7.3 (framework 0.5.0) item 19 has three parts. PR #296 closed most
+  of part 1 for eight member names (`reason`, `note`, `detail`, `description`,
+  `message`, `text`, `label`, `comment`), 92 members in all. Sweeping the whole
+  corpus rather than a name list finds **48 more** unbounded free-text members
+  across 27 draft specifications and 10 shared schemas, under names the earlier
+  sweep did not look for: `purpose`, `deviceLabel`, `displayName`, `explanation`,
+  `summary`, `title`, `name`, `blurb`, `filename`, `trace`, `error`, `lastError`,
+  `deniedReason`, `displayHint`, `consequences`, `rpName`, `userName`,
+  `userDisplayName`.
+
+  The one the earlier review named specifically is here: `task-consent`'s
+  `Effect.summary` — the member its own schema calls "the ONLY member a consent
+  surface is guaranteed to be able to render" — was unbounded on the surface a
+  human reads to approve an action. It is now 500, the same figure as the `note`
+  beside it.
+
+  Bounds are drawn from the vocabulary the corpus already uses and sized per
+  member, not applied uniformly:
+
+      64   WebAuthn entity names (`rp.name`, `user.name`, `user.displayName`,
+           `rpName`, `userName`, `userDisplayName`) — the length WebAuthn tells
+           authenticators to truncate to, so a longer value would be silently
+           cut on the device rather than carried.
+     128   `purpose` where it names a decision slot or a declared intent. This
+           is consistency repair, not a new judgement: policy/activate/0.1 and
+           policy/active/0.1 already declared `maxLength: 128` on the request
+           member while the response that echoes it declared none.
+     256   display labels and names — `deviceLabel`, `displayName`,
+           `displayHint`, `label`, `title`, `name`, `blurb`, `filename`;
+           matches #296's reasoning that a display name is not prose.
+     500   consent-surface prose a human reads while deciding — `Effect.summary`,
+           `consequences[]`, credential-exchange `purpose`, `deniedReason`;
+           matches task-consent/request/0.1 `note`.
+    1024   operator or service diagnostic prose — `explanation`, `trace[]`,
+           `error`, `lastError`, and vta/credentials/issue `purpose`.
+
+  **Part 3 of the MUST is the half nobody had done.** Item 19 also requires each
+  specification to state who reads a free-text value, whether the recipient is
+  expected to retain it, and whether it is trusted. Prose is added to the
+  `## Security & Privacy` section of all **37** draft specifications that reach a
+  newly bounded member — the 27 whose own payload schema moved, plus 10 that
+  reach one through a shared `$def`. `vta/credentials/issue/0.{1,2}` had no such
+  section at all and now carry one containing the item 19 statement; both remain
+  on the Security & Privacy debt allowlist, because neither yet has the four
+  sub-headings the repo lint wants. The other 35 sections were extended in place.
+
+  Deliberately untouched, matching #296's own carve-outs:
+
+    * `messaging/_shared/0.1` `AuditEntry.detail` and `did-management/_shared/0.1`
+      `DomainEntry.label` — shared `$defs` reachable from a retired specification,
+      so bounding them would move a frozen specification's wire contract. These
+      are the only two shared schemas in this change's blast radius that a
+      retired spec reaches; the ten this PR edits are draft-only.
+    * Members item 19's own last paragraph excludes: identifiers, opaque handles,
+      digests and references; and values carried verbatim from an external
+      vocabulary — DNS domains, did:webvh agent-name local parts, DID logs, Rego
+      source, RFC 6901 pointers, HTTP header and cookie names, APNs topics, IANA
+      media types, BCP 47 language tags, and maintainer- or community-defined
+      role and kind vocabularies.
+
+  Two members were bounded where the schema's own description calls the value an
+  undeclared closed set (`nature`, `wired` in vtc/ceremonies/list) — deliberately
+  left alone, because the right fix there is the closed enumeration item 19
+  prefers, not a length.
+
+  All 48 members sit in `status: draft` specifications and are amended in place
+  per SPEC §5.2. `npm run validate` re-checks all 533 fenced example documents
+  against the amended schemas; none is rejected by a new bound.
+
+  **Still open, and deliberately not in this PR:** item 19's "SHOULD be OPTIONAL"
+  half. 18 of the 48 members bounded here are REQUIRED — `CredentialCreationOptions`
+  `rp.name`/`user.name`/`user.displayName`, credential-exchange `purpose` (both
+  copies), `Effect.summary`, `ContextRecord.name` and vta/contexts/create `name`,
+  the three `enroll-challenge` WebAuthn names, `CommunityProfile.name`,
+  `CommunityProfileView.name`, `CommunityProfileSnapshot.name`, and the four
+  decision-slot `purpose` members. Added to the 13 #296 found, that is 31.
+  Making any of them optional is a wire-compatibility change and belongs in its
+  own PR; several (purpose binding, `Effect.summary`) are required by design and
+  the specification should say so rather than change.
+
+  This is **breaking**, on the same terms #296 judged itself so: typify emits a
+  bounded member as a validating newtype, so `Option<String>` becomes
+  `Option<PayloadDeviceLabel>`, `Option<PayloadDeniedReason>`,
+  `Option<AttachmentRefFilename>` and so on, and the newtype rejects in
+  `Deserialize` a document the library previously accepted. `@openvtc/trust-tasks`
+  generates unchanged *types* — TypeScript has no length refinement — but its
+  embedded schemas now reject over-long values at runtime. No version is bumped
+  and no changelog is written: release-plz computes both from this title.
+
+- **trust-task-ok**: Retire the registry entry, deprecated by framework 0.5.0 (#292)
+
+Framework 0.5.0 lets a fire-and-forget specification's consumer return that
+  task's own <type>#response with payload {} as a courtesy acknowledgement.
+  That removes the only reason this slug existed: the previous text forbade a
+  response-less specification from emitting a #response, so 'received and
+  performed' needed a document of its own.
+
+  - specs/trust-task-ok/0.1/spec.md: status draft -> retired (SPEC 5.3
+    permitted transition 3), a Deprecation and retirement section carrying the
+    three normative consequences from framework 0.5.0, and a rewritten Status
+    of this Document. No supersededBy: the replacement is a framework
+    mechanism, not another Trust Task specification, so there is no successor
+    slug and none is invented. SPEC 7.3 item 11 RECOMMENDS one rather than
+    requiring it, and the build warns rather than fails.
+  - SPEC.md 6.1 and 8.6: adopt the framework 0.5.0 wording for the
+    deprecation, including that the slug and its Type URI remain RESERVED
+    permanently, plus a clearly marked registry note recording the retirement.
+
+  Retirement is a status, not a deletion. The entry stays published, stays in
+  the codegen (it is not in SKIP_SLUGS), and stays on the website; the reserved
+  slug allowlists in specs/spec.meta.schema.json and trust-tasks-rs/src/type_uri.rs
+  are untouched, so the name is not freed for anyone else. Neither generator
+  reads front-matter status, so regenerating both bindings produced no diff and
+  no library version bump is needed.
+
+- Bound every free-text payload member with a maxLength (§7.3) (#296)
+
+* spec: bound every free-text payload member with a maxLength
+
+  SPEC.md §7.3 (framework 0.5.0) requires that any member holding free
+  text declare a `maxLength`. 92 free-text string members across 83 draft
+  schemas carried none, leaving the wire contract unbounded and every
+  consumer to invent its own ceiling — or none, which is what §10.3
+  (schema-validation DoS) exists to prevent.
+
+  Bounds are chosen per member from the vocabulary the registry already
+  uses rather than applied uniformly:
+
+    256   `label`, `comment` — a display name or an OpenSSH key comment;
+          matches the existing 256 on provision/integration `label` and
+          the `name` members alongside it.
+    500   requester-authored prose that a surface renders to a human who
+          is deciding something; matches task-consent/request/0.1 `note`,
+          the registry's considered consent-surface bound.
+    1024  `reason`, `description`, `message` — operator or service prose
+          recorded for audit or returned as a diagnostic; matches the six
+          existing `reason: 1024` and the `description: 1024` in policy/
+          and vtc/endorsement-type.
+    16384 chat/message `text` — the task's actual content rather than
+          metadata about it; matches the corpus's long-form bound on
+          vault `secureNotes`.
+
+  All amended specifications are `status: draft`, so the change is made in
+  place per SPEC §5.2. Deliberately untouched:
+
+    * 17 members in `retired` specifications, frozen by SPEC §6.4.
+    * messaging/_shared/0.1 `AuditEntry.detail` and did-management/
+      _shared/0.1 `DomainEntry.label` — shared $defs reachable from a
+      retired specification, so bounding them would change a frozen
+      specification's effective wire contract.
+    * vault/_shared/{0.1,0.2,0.3} `TspMessageEnvelope.message` — opaque
+      base64url TSP bytes, not free text.
+
+  The `label` description in vault/_shared/*/vault-entry.schema.json said
+  the wire spec enforced no maximum length. It now does, so the sentence
+  is corrected rather than left contradicting the schema it annotates.
+
+  `npm run validate` re-checks all 533 fenced example documents against
+  the amended schemas; none is rejected by a new bound.
+
 ## [0.15.0] - 2026-08-26
 
 ### Changed

package/dist/_runtime/document.d.ts

@@ -163,6 +163,18 @@ export interface SpecPolicy {
     readonly isProofRequired: boolean;
     /** §7.3 item 5 — the party filling `recipient` is REQUIRED. */
     readonly isRecipientRequired: boolean;
+    /**
+     * §7.3 item 17 — `issuedAtRequirement` is REQUIRED, raising §4.2's `issuedAt`
+     * SHOULD to a MUST for this specification's documents. A specification
+     * defining a *consequential Trust Task* (§2) must declare it, so that §7.2
+     * item 11's duplicate-execution record always has a window to sit in.
+     *
+     * Optional, defaulting to `false`, so a hand-written policy predating the
+     * declaration still type-checks. This is the *specification's* requirement,
+     * published in the registry — distinct from a consumer's own freshness
+     * posture, which is chosen at the call site and applied to every document.
+     */
+    readonly isIssuedAtRequired?: boolean;
     /**
      * §7.2 item 2 — this variant's payload schema, as a value.
      *
@@ -221,12 +233,13 @@ export declare function validateBasic<P>(doc: TrustTaskDocument<P>, now: number,
  */
 export declare function enforceAudienceBinding<P>(doc: TrustTaskDocument<P>, spec: SpecPolicy): RejectReason | null;
 /**
- * The policy-driven subset of SPEC §7.2 — items 5b, 7 clause A, and 8.
+ * The policy-driven subset of SPEC §7.2 — items 5b, 7 clause A, and 8, plus
+ * §7.3 item 17's `issuedAt` requirement.
  *
  * Single source of truth for the flag-driven checks, so a binding-specific
  * pipeline and {@link consumeInbound} cannot diverge on the check set. Ordering
  * matches trust-tasks-rs `enforce_spec_policy`: recipient, then proof, then
- * audience binding.
+ * issuedAt (§7.3 item 17), then audience binding.
  */
 export declare function enforceSpecPolicy<P>(doc: TrustTaskDocument<P>, spec: SpecPolicy): RejectReason | null;
 /**

package/dist/_runtime/document.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"document.d.ts","sourceRoot":"","sources":["../../src/_runtime/document.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAiB,KAAK,YAAY,EAAE,MAAM,YAAY,CAAC;AAE9D,iFAAiF;AACjF,MAAM,WAAW,KAAK;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACtB;AAED,yDAAyD;AACzD,MAAM,WAAW,YAAY;IAC3B,qGAAqG;IACrG,EAAE,EAAE,MAAM,CAAC;IACX;;;;;OAKG;IACH,eAAe,EAAE,MAAM,CAAC;CACzB;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,QAAQ;IACvB;;;;OAIG;IACH,SAAS,EAAE,MAAM,CAAC;IAClB;;;;OAIG;IACH,IAAI,EAAE,MAAM,CAAC;IACb,8FAA8F;IAC9F,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;;OAKG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,uHAAuH;IACvH,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,oFAAoF;IACpF,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,yGAAyG;IACzG,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,iFAAiF;IACjF,IAAI,CAAC,EAAE,YAAY,EAAE,CAAC;CACvB;AAED,sDAAsD;AACtD,MAAM,WAAW,iBAAiB,CAAC,CAAC;IAClC,+CAA+C;IAC/C,EAAE,EAAE,MAAM,CAAC;IACX,wEAAwE;IACxE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;;;;;;OASG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;;;;;OAMG;IACH,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,iEAAiE;IACjE,IAAI,EAAE,MAAM,CAAC;IACb,2DAA2D;IAC3D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,+DAA+D;IAC/D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,CAAC,CAAC;IACX,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,KAAK,CAAC,EAAE,KAAK,CAAC;IACd;;;;OAIG;IACH,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACtB;AAED,+EAA+E;AAC/E,MAAM,WAAW,YAAY;IAC3B;;;;OAIG;IACH,OAAO,EAAE,MAAM,CAAC;IAChB;;;;;;;OAOG;IACH,EAAE,CAAC,EAAE,MAAM,CAAC;CACb;AAED,yDAAyD;AACzD,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb;;;;;;;OAOG;IACH,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,OAAO,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAED,qCAAqC;AACrC,MAAM,MAAM,aAAa,GAAG,iBAAiB,CAAC,YAAY,CAAC,CAAC;AAE5D;;;;;;GAMG;AACH,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,6DAA6D;IAC7D,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,gEAAgE;IAChE,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC;IAClC,+DAA+D;IAC/D,QAAQ,CAAC,mBAAmB,EAAE,OAAO,CAAC;IACtC;;;;;;;OAOG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,CAAC;CAClC;AAED,wEAAwE;AACxE,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,YAAY,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,OAAO,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,eAAO,MAAM,yBAAyB,qDAAqD,CAAC;AAE5F;;;;;;;;;GASG;AACH,wBAAgB,aAAa,CAAC,CAAC,EAC7B,GAAG,EAAE,iBAAiB,CAAC,CAAC,CAAC,EACzB,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,MAAM,GACZ,YAAY,GAAG,IAAI,CA6BrB;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,CAAC,EACtC,GAAG,EAAE,iBAAiB,CAAC,CAAC,CAAC,EACzB,IAAI,EAAE,UAAU,GACf,YAAY,GAAG,IAAI,CAWrB;AAED;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,CAAC,EACjC,GAAG,EAAE,iBAAiB,CAAC,CAAC,CAAC,EACzB,IAAI,EAAE,UAAU,GACf,YAAY,GAAG,IAAI,CAiBrB;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,CAAC,EACnC,OAAO,EAAE,iBAAiB,CAAC,CAAC,CAAC,EAC7B,EAAE,EAAE,MAAM,EACV,OAAO,EAAE,YAAY,EACrB,SAAS,EAAE,MAAM,GAAG,SAAS,EAC7B,GAAG,GAAE,MAAM,MAAuC,GACjD,aAAa,CAkCf;AAED;;;;;;;GAOG;AACH,wBAAgB,UAAU,CAAC,CAAC,EAC1B,OAAO,EAAE,iBAAiB,CAAC,CAAC,CAAC,EAC7B,EAAE,EAAE,MAAM,EACV,OAAO,EAAE,YAAY,EACrB,GAAG,CAAC,EAAE,MAAM,MAAM,GACjB,aAAa,CAEf;AAED,oEAAoE;AACpE,wBAAgB,cAAc,CAAC,MAAM,EAAE,YAAY,GAAG,YAAY,CASjE;AAED;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,CAAC,EAAE,CAAC,EAC9B,OAAO,EAAE,iBAAiB,CAAC,CAAC,CAAC,EAC7B,EAAE,EAAE,MAAM,EACV,OAAO,EAAE,CAAC,EACV,GAAG,GAAE,MAAM,MAAuC,GACjD,iBAAiB,CAAC,CAAC,CAAC,CAgBtB"}
+{"version":3,"file":"document.d.ts","sourceRoot":"","sources":["../../src/_runtime/document.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAiB,KAAK,YAAY,EAAE,MAAM,YAAY,CAAC;AAE9D,iFAAiF;AACjF,MAAM,WAAW,KAAK;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACtB;AAED,yDAAyD;AACzD,MAAM,WAAW,YAAY;IAC3B,qGAAqG;IACrG,EAAE,EAAE,MAAM,CAAC;IACX;;;;;OAKG;IACH,eAAe,EAAE,MAAM,CAAC;CACzB;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,QAAQ;IACvB;;;;OAIG;IACH,SAAS,EAAE,MAAM,CAAC;IAClB;;;;OAIG;IACH,IAAI,EAAE,MAAM,CAAC;IACb,8FAA8F;IAC9F,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;;OAKG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,uHAAuH;IACvH,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,oFAAoF;IACpF,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,yGAAyG;IACzG,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,iFAAiF;IACjF,IAAI,CAAC,EAAE,YAAY,EAAE,CAAC;CACvB;AAED,sDAAsD;AACtD,MAAM,WAAW,iBAAiB,CAAC,CAAC;IAClC,+CAA+C;IAC/C,EAAE,EAAE,MAAM,CAAC;IACX,wEAAwE;IACxE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;;;;;;OASG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;;;;;OAMG;IACH,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,iEAAiE;IACjE,IAAI,EAAE,MAAM,CAAC;IACb,2DAA2D;IAC3D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,+DAA+D;IAC/D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,CAAC,CAAC;IACX,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,KAAK,CAAC,EAAE,KAAK,CAAC;IACd;;;;OAIG;IACH,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACtB;AAED,+EAA+E;AAC/E,MAAM,WAAW,YAAY;IAC3B;;;;OAIG;IACH,OAAO,EAAE,MAAM,CAAC;IAChB;;;;;;;OAOG;IACH,EAAE,CAAC,EAAE,MAAM,CAAC;CACb;AAED,yDAAyD;AACzD,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb;;;;;;;OAOG;IACH,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,OAAO,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAED,qCAAqC;AACrC,MAAM,MAAM,aAAa,GAAG,iBAAiB,CAAC,YAAY,CAAC,CAAC;AAE5D;;;;;;GAMG;AACH,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,6DAA6D;IAC7D,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,gEAAgE;IAChE,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC;IAClC,+DAA+D;IAC/D,QAAQ,CAAC,mBAAmB,EAAE,OAAO,CAAC;IACtC;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,kBAAkB,CAAC,EAAE,OAAO,CAAC;IACtC;;;;;;;OAOG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,CAAC;CAClC;AAED,wEAAwE;AACxE,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,YAAY,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,OAAO,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,eAAO,MAAM,yBAAyB,qDAAqD,CAAC;AAE5F;;;;;;;;;GASG;AACH,wBAAgB,aAAa,CAAC,CAAC,EAC7B,GAAG,EAAE,iBAAiB,CAAC,CAAC,CAAC,EACzB,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,MAAM,GACZ,YAAY,GAAG,IAAI,CA6BrB;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,CAAC,EACtC,GAAG,EAAE,iBAAiB,CAAC,CAAC,CAAC,EACzB,IAAI,EAAE,UAAU,GACf,YAAY,GAAG,IAAI,CAWrB;AAED;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAAC,CAAC,EACjC,GAAG,EAAE,iBAAiB,CAAC,CAAC,CAAC,EACzB,IAAI,EAAE,UAAU,GACf,YAAY,GAAG,IAAI,CAwBrB;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,CAAC,EACnC,OAAO,EAAE,iBAAiB,CAAC,CAAC,CAAC,EAC7B,EAAE,EAAE,MAAM,EACV,OAAO,EAAE,YAAY,EACrB,SAAS,EAAE,MAAM,GAAG,SAAS,EAC7B,GAAG,GAAE,MAAM,MAAuC,GACjD,aAAa,CAkCf;AAED;;;;;;;GAOG;AACH,wBAAgB,UAAU,CAAC,CAAC,EAC1B,OAAO,EAAE,iBAAiB,CAAC,CAAC,CAAC,EAC7B,EAAE,EAAE,MAAM,EACV,OAAO,EAAE,YAAY,EACrB,GAAG,CAAC,EAAE,MAAM,MAAM,GACjB,aAAa,CAEf;AAED,oEAAoE;AACpE,wBAAgB,cAAc,CAAC,MAAM,EAAE,YAAY,GAAG,YAAY,CASjE;AAED;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,CAAC,EAAE,CAAC,EAC9B,OAAO,EAAE,iBAAiB,CAAC,CAAC,CAAC,EAC7B,EAAE,EAAE,MAAM,EACV,OAAO,EAAE,CAAC,EACV,GAAG,GAAE,MAAM,MAAuC,GACjD,iBAAiB,CAAC,CAAC,CAAC,CAgBtB"}

package/dist/_runtime/document.js

@@ -82,12 +82,13 @@ export function enforceAudienceBinding(doc, spec) {
     return null;
 }
 /**
- * The policy-driven subset of SPEC §7.2 — items 5b, 7 clause A, and 8.
+ * The policy-driven subset of SPEC §7.2 — items 5b, 7 clause A, and 8, plus
+ * §7.3 item 17's `issuedAt` requirement.
  *
  * Single source of truth for the flag-driven checks, so a binding-specific
  * pipeline and {@link consumeInbound} cannot diverge on the check set. Ordering
  * matches trust-tasks-rs `enforce_spec_policy`: recipient, then proof, then
- * audience binding.
+ * issuedAt (§7.3 item 17), then audience binding.
  */
 export function enforceSpecPolicy(doc, spec) {
     if (doc.recipient === undefined && spec.isRecipientRequired) {
@@ -104,6 +105,13 @@ export function enforceSpecPolicy(doc, spec) {
             retryable: false,
         };
     }
+    if (doc.issuedAt === undefined && spec.isIssuedAtRequired === true) {
+        return {
+            code: "malformedRequest",
+            message: "issuedAt is required by this Trust Task specification (SPEC §7.3 item 17)",
+            retryable: false,
+        };
+    }
     return enforceAudienceBinding(doc, spec);
 }
 /**

package/dist/_runtime/document.js.map

@@ -1 +1 @@
-{"version":3,"file":"document.js","sourceRoot":"","sources":["../../src/_runtime/document.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,aAAa,EAAqB,MAAM,YAAY,CAAC;AA2L9D;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,kDAAkD,CAAC;AAE5F;;;;;;;;;GASG;AACH,MAAM,UAAU,aAAa,CAC3B,GAAyB,EACzB,GAAW,EACX,KAAa;IAEb,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QAChC,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC5C,IAAI,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;YAC5B,OAAO;gBACL,IAAI,EAAE,kBAAkB;gBACxB,OAAO,EAAE,6CAA6C;gBACtD,SAAS,EAAE,KAAK;aACjB,CAAC;QACJ,CAAC;QACD,uEAAuE;QACvE,IAAI,SAAS,IAAI,GAAG,EAAE,CAAC;YACrB,OAAO;gBACL,IAAI,EAAE,SAAS;gBACf,OAAO,EAAE,uBAAuB,GAAG,CAAC,SAAS,EAAE;gBAC/C,SAAS,EAAE,KAAK;aACjB,CAAC;QACJ,CAAC;IACH,CAAC;IAED,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS,IAAI,GAAG,CAAC,SAAS,KAAK,KAAK,EAAE,CAAC;QAC3D,OAAO;YACL,IAAI,EAAE,gBAAgB;YACtB,OAAO,EAAE,mDAAmD;YAC5D,SAAS,EAAE,KAAK;SACjB,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CACpC,GAAyB,EACzB,IAAgB;IAEhB,IAAI,GAAG,CAAC,KAAK,KAAK,SAAS,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC7E,OAAO;YACL,IAAI,EAAE,kBAAkB;YACxB,OAAO,EACL,wEAAwE;gBACxE,gCAAgC;YAClC,SAAS,EAAE,KAAK;SACjB,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,iBAAiB,CAC/B,GAAyB,EACzB,IAAgB;IAEhB,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS,IAAI,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAC5D,OAAO;YACL,IAAI,EAAE,kBAAkB;YACxB,OAAO,EACL,yFAAyF;YAC3F,SAAS,EAAE,KAAK;SACjB,CAAC;IACJ,CAAC;IACD,IAAI,GAAG,CAAC,KAAK,KAAK,SAAS,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;QACpD,OAAO;YACL,IAAI,EAAE,eAAe;YACrB,OAAO,EAAE,qEAAqE;YAC9E,SAAS,EAAE,KAAK;SACjB,CAAC;IACJ,CAAC;IACD,OAAO,sBAAsB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;AAC3C,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CACjC,OAA6B,EAC7B,EAAU,EACV,OAAqB,EACrB,SAA6B,EAC7B,MAAoB,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;IAElD,6EAA6E;IAC7E,0EAA0E;IAC1E,qEAAqE;IACrE,iEAAiE;IACjE,MAAM,UAAU,GAAiB,EAAE,GAAG,OAAO,EAAE,CAAC;IAChD,IAAI,UAAU,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QAC1C,MAAM,KAAK,GAAiB,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC;QACtD,sEAAsE;QACtE,yEAAyE;QACzE,sEAAsE;QACtE,IAAI,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,kBAAkB,EAAE,CAAC;YACvD,KAAK,CAAC,EAAE,GAAG,OAAO,CAAC,EAAE,CAAC;QACxB,CAAC;QACD,UAAU,CAAC,YAAY,GAAG,KAAK,CAAC;IAClC,CAAC;IAED,MAAM,QAAQ,GAAkB;QAC9B,EAAE;QACF,mEAAmE;QACnE,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,EAAE;QACxC,IAAI,EAAE,yBAAyB;QAC/B,MAAM,EAAE,OAAO,CAAC,SAAS;QACzB,SAAS;QACT,QAAQ,EAAE,GAAG,EAAE;QACf,OAAO,EAAE,UAAU;KACpB,CAAC;IACF,6EAA6E;IAC7E,0EAA0E;IAC1E,8DAA8D;IAC9D,IAAI,OAAO,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;QACzC,QAAQ,CAAC,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC;IACnD,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,UAAU,CACxB,OAA6B,EAC7B,EAAU,EACV,OAAqB,EACrB,GAAkB;IAElB,OAAO,mBAAmB,CAAC,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;AACxE,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,cAAc,CAAC,MAAoB;IACjD,MAAM,OAAO,GAAiB;QAC5B,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,SAAS,EAAE,MAAM,CAAC,SAAS;KAC5B,CAAC;IACF,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS;QAAE,OAAO,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;IAC5E,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS;QAAE,OAAO,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;IACnE,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,WAAW,CACzB,OAA6B,EAC7B,EAAU,EACV,OAAU,EACV,MAAoB,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;IAElD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC;IACzC,MAAM,QAAQ,GAAyB;QACrC,EAAE;QACF,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,EAAE;QACxC,IAAI,EAAE,GAAG,IAAI,WAAW;QACxB,MAAM,EAAE,OAAO,CAAC,SAAS;QACzB,SAAS,EAAE,OAAO,CAAC,MAAM;QACzB,QAAQ,EAAE,GAAG,EAAE;QACf,OAAO;KACR,CAAC;IACF,iDAAiD;IACjD,IAAI,OAAO,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;QACzC,QAAQ,CAAC,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC;IACnD,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC"}
+{"version":3,"file":"document.js","sourceRoot":"","sources":["../../src/_runtime/document.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,aAAa,EAAqB,MAAM,YAAY,CAAC;AAuM9D;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,kDAAkD,CAAC;AAE5F;;;;;;;;;GASG;AACH,MAAM,UAAU,aAAa,CAC3B,GAAyB,EACzB,GAAW,EACX,KAAa;IAEb,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QAChC,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC5C,IAAI,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;YAC5B,OAAO;gBACL,IAAI,EAAE,kBAAkB;gBACxB,OAAO,EAAE,6CAA6C;gBACtD,SAAS,EAAE,KAAK;aACjB,CAAC;QACJ,CAAC;QACD,uEAAuE;QACvE,IAAI,SAAS,IAAI,GAAG,EAAE,CAAC;YACrB,OAAO;gBACL,IAAI,EAAE,SAAS;gBACf,OAAO,EAAE,uBAAuB,GAAG,CAAC,SAAS,EAAE;gBAC/C,SAAS,EAAE,KAAK;aACjB,CAAC;QACJ,CAAC;IACH,CAAC;IAED,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS,IAAI,GAAG,CAAC,SAAS,KAAK,KAAK,EAAE,CAAC;QAC3D,OAAO;YACL,IAAI,EAAE,gBAAgB;YACtB,OAAO,EAAE,mDAAmD;YAC5D,SAAS,EAAE,KAAK;SACjB,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CACpC,GAAyB,EACzB,IAAgB;IAEhB,IAAI,GAAG,CAAC,KAAK,KAAK,SAAS,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC7E,OAAO;YACL,IAAI,EAAE,kBAAkB;YACxB,OAAO,EACL,wEAAwE;gBACxE,gCAAgC;YAClC,SAAS,EAAE,KAAK;SACjB,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB,CAC/B,GAAyB,EACzB,IAAgB;IAEhB,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS,IAAI,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAC5D,OAAO;YACL,IAAI,EAAE,kBAAkB;YACxB,OAAO,EACL,yFAAyF;YAC3F,SAAS,EAAE,KAAK;SACjB,CAAC;IACJ,CAAC;IACD,IAAI,GAAG,CAAC,KAAK,KAAK,SAAS,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;QACpD,OAAO;YACL,IAAI,EAAE,eAAe;YACrB,OAAO,EAAE,qEAAqE;YAC9E,SAAS,EAAE,KAAK;SACjB,CAAC;IACJ,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,SAAS,IAAI,IAAI,CAAC,kBAAkB,KAAK,IAAI,EAAE,CAAC;QACnE,OAAO;YACL,IAAI,EAAE,kBAAkB;YACxB,OAAO,EAAE,2EAA2E;YACpF,SAAS,EAAE,KAAK;SACjB,CAAC;IACJ,CAAC;IACD,OAAO,sBAAsB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;AAC3C,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CACjC,OAA6B,EAC7B,EAAU,EACV,OAAqB,EACrB,SAA6B,EAC7B,MAAoB,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;IAElD,6EAA6E;IAC7E,0EAA0E;IAC1E,qEAAqE;IACrE,iEAAiE;IACjE,MAAM,UAAU,GAAiB,EAAE,GAAG,OAAO,EAAE,CAAC;IAChD,IAAI,UAAU,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QAC1C,MAAM,KAAK,GAAiB,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC;QACtD,sEAAsE;QACtE,yEAAyE;QACzE,sEAAsE;QACtE,IAAI,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,kBAAkB,EAAE,CAAC;YACvD,KAAK,CAAC,EAAE,GAAG,OAAO,CAAC,EAAE,CAAC;QACxB,CAAC;QACD,UAAU,CAAC,YAAY,GAAG,KAAK,CAAC;IAClC,CAAC;IAED,MAAM,QAAQ,GAAkB;QAC9B,EAAE;QACF,mEAAmE;QACnE,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,EAAE;QACxC,IAAI,EAAE,yBAAyB;QAC/B,MAAM,EAAE,OAAO,CAAC,SAAS;QACzB,SAAS;QACT,QAAQ,EAAE,GAAG,EAAE;QACf,OAAO,EAAE,UAAU;KACpB,CAAC;IACF,6EAA6E;IAC7E,0EAA0E;IAC1E,8DAA8D;IAC9D,IAAI,OAAO,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;QACzC,QAAQ,CAAC,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC;IACnD,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,UAAU,CACxB,OAA6B,EAC7B,EAAU,EACV,OAAqB,EACrB,GAAkB;IAElB,OAAO,mBAAmB,CAAC,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;AACxE,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,cAAc,CAAC,MAAoB;IACjD,MAAM,OAAO,GAAiB;QAC5B,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,SAAS,EAAE,MAAM,CAAC,SAAS;KAC5B,CAAC;IACF,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS;QAAE,OAAO,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;IAC5E,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS;QAAE,OAAO,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;IACnE,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,WAAW,CACzB,OAA6B,EAC7B,EAAU,EACV,OAAU,EACV,MAAoB,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;IAElD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC;IACzC,MAAM,QAAQ,GAAyB;QACrC,EAAE;QACF,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,EAAE;QACxC,IAAI,EAAE,GAAG,IAAI,WAAW;QACxB,MAAM,EAAE,OAAO,CAAC,SAAS;QACzB,SAAS,EAAE,OAAO,CAAC,MAAM;QACzB,QAAQ,EAAE,GAAG,EAAE;QACf,OAAO;KACR,CAAC;IACF,iDAAiD;IACjD,IAAI,OAAO,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;QACzC,QAAQ,CAAC,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC;IACnD,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/_shared/components.d.ts

@@ -2680,7 +2680,7 @@ export interface VaultEntry_VaultV0_1 {
      */
     targets: [SiteTarget_VaultV0_1, ...SiteTarget_VaultV0_1[]];
     /**
-     * Human-readable display name (e.g. "Work GitHub", "Personal bank — checking"). Maintainers MAY enforce a maximum length; the wire spec does not.
+     * Human-readable display name (e.g. "Work GitHub", "Personal bank — checking"). Bounded on the wire at 256 characters; a maintainer MAY enforce a shorter limit.
      */
     label: string;
     /**
@@ -2782,7 +2782,7 @@ export interface VaultEntry_VaultV0_2 {
      */
     targets: [SiteTarget_VaultV0_2, ...SiteTarget_VaultV0_2[]];
     /**
-     * Human-readable display name (e.g. "Work GitHub", "Personal bank — checking"). Maintainers MAY enforce a maximum length; the wire spec does not.
+     * Human-readable display name (e.g. "Work GitHub", "Personal bank — checking"). Bounded on the wire at 256 characters; a maintainer MAY enforce a shorter limit.
      */
     label: string;
     /**
@@ -2868,7 +2868,7 @@ export interface VaultEntry_VaultV0_3 {
      */
     targets: [SiteTarget_VaultV0_2, ...SiteTarget_VaultV0_2[]];
     /**
-     * Human-readable display name (e.g. "Work GitHub", "Personal bank — checking"). Maintainers MAY enforce a maximum length; the wire spec does not.
+     * Human-readable display name (e.g. "Work GitHub", "Personal bank — checking"). Bounded on the wire at 256 characters; a maintainer MAY enforce a shorter limit.
      */
     label: string;
     /**

package/dist/acl/change-role/0.1/payload.d.ts

@@ -81,6 +81,7 @@ export declare const PAYLOAD_SCHEMA: {
         };
         readonly reason: {
             readonly type: "string";
+            readonly maxLength: 1024;
             readonly description: "Optional human-readable rationale.";
         };
         readonly ext: {
@@ -147,6 +148,7 @@ export declare const PAYLOAD_SCHEMA: {
                 };
                 readonly label: {
                     readonly type: "string";
+                    readonly maxLength: 256;
                     readonly description: "Optional human-readable label.";
                 };
                 readonly createdAt: {
@@ -276,6 +278,7 @@ export declare const RESPONSE_PAYLOAD_SCHEMA: {
                 };
                 readonly label: {
                     readonly type: "string";
+                    readonly maxLength: 256;
                     readonly description: "Optional human-readable label.";
                 };
                 readonly createdAt: {
@@ -353,6 +356,7 @@ export declare const SPEC: {
     readonly isBearer: false;
     readonly isProofRequired: true;
     readonly isRecipientRequired: true;
+    readonly isIssuedAtRequired: true;
     readonly payloadSchema: {
         readonly $schema: "https://json-schema.org/draft/2020-12/schema";
         readonly $id: "https://trusttasks.org/spec/acl/change-role/0.1";
@@ -377,6 +381,7 @@ export declare const SPEC: {
             };
             readonly reason: {
                 readonly type: "string";
+                readonly maxLength: 1024;
                 readonly description: "Optional human-readable rationale.";
             };
             readonly ext: {
@@ -443,6 +448,7 @@ export declare const SPEC: {
                     };
                     readonly label: {
                         readonly type: "string";
+                        readonly maxLength: 256;
                         readonly description: "Optional human-readable label.";
                     };
                     readonly createdAt: {
@@ -520,6 +526,7 @@ export declare const RESPONSE_SPEC: {
     readonly isBearer: false;
     readonly isProofRequired: true;
     readonly isRecipientRequired: true;
+    readonly isIssuedAtRequired: true;
     readonly payloadSchema: {
         readonly $schema: "https://json-schema.org/draft/2020-12/schema";
         readonly $ref: "#/$defs/Response";
@@ -582,6 +589,7 @@ export declare const RESPONSE_SPEC: {
                     };
                     readonly label: {
                         readonly type: "string";
+                        readonly maxLength: 256;
                         readonly description: "Optional human-readable label.";
                     };
                     readonly createdAt: {

package/dist/acl/change-role/0.1/payload.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"payload.d.ts","sourceRoot":"","sources":["../../../../src/acl/change-role/0.1/payload.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,gCAAgC,CAAC;AAGpE,MAAM,WAAW,oBAAoB;IACnC;;OAEG;IACH,OAAO,EAAE,MAAM,CAAC;IAChB;;OAEG;IACH,QAAQ,EAAE,MAAM,CAAC;IACjB;;OAEG;IACH,MAAM,EAAE,MAAM,CAAC;IACf;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;OAEG;IACH,GAAG,CAAC,EAAE,GAAG,CAAC;CACX;AACD;;GAEG;AACH,MAAM,WAAW,4BAA4B;IAC3C;;OAEG;IACH,KAAK,EAAE,QAAQ,CAAC;IAChB;;OAEG;IACH,GAAG,CAAC,EAAE,GAAG,CAAC;CACX;AAED,kHAAkH;AAClH,YAAY,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC;AAE9B,2BAA2B;AAC3B,eAAO,MAAM,QAAQ,EAAG,iDAA0D,CAAC;AAEnF,mEAAmE;AACnE,MAAM,MAAM,OAAO,GAAG,oBAAoB,CAAC;AAE3C,qEAAqE;AACrE,eAAO,MAAM,iBAAiB,EAAG,0DAAmE,CAAC;AAErG,4EAA4E;AAC5E,MAAM,MAAM,QAAQ,GAAG,4BAA4B,CAAC;AAEpD;;;;;;;;GAQG;AACH,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA0KjB,CAAC;AAEX,mEAAmE;AACnE,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA0I1B,CAAC;AAEX;;;;;GAKG;AACH,eAAO,MAAM,IAAI;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAMP,CAAC;AAEX;;;;GAIG;AACH,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAMhB,CAAC"}
+{"version":3,"file":"payload.d.ts","sourceRoot":"","sources":["../../../../src/acl/change-role/0.1/payload.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,gCAAgC,CAAC;AAGpE,MAAM,WAAW,oBAAoB;IACnC;;OAEG;IACH,OAAO,EAAE,MAAM,CAAC;IAChB;;OAEG;IACH,QAAQ,EAAE,MAAM,CAAC;IACjB;;OAEG;IACH,MAAM,EAAE,MAAM,CAAC;IACf;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;OAEG;IACH,GAAG,CAAC,EAAE,GAAG,CAAC;CACX;AACD;;GAEG;AACH,MAAM,WAAW,4BAA4B;IAC3C;;OAEG;IACH,KAAK,EAAE,QAAQ,CAAC;IAChB;;OAEG;IACH,GAAG,CAAC,EAAE,GAAG,CAAC;CACX;AAED,kHAAkH;AAClH,YAAY,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC;AAE9B,2BAA2B;AAC3B,eAAO,MAAM,QAAQ,EAAG,iDAA0D,CAAC;AAEnF,mEAAmE;AACnE,MAAM,MAAM,OAAO,GAAG,oBAAoB,CAAC;AAE3C,qEAAqE;AACrE,eAAO,MAAM,iBAAiB,EAAG,0DAAmE,CAAC;AAErG,4EAA4E;AAC5E,MAAM,MAAM,QAAQ,GAAG,4BAA4B,CAAC;AAEpD;;;;;;;;GAQG;AACH,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA4KjB,CAAC;AAEX,mEAAmE;AACnE,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA2I1B,CAAC;AAEX;;;;;GAKG;AACH,eAAO,MAAM,IAAI;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAOP,CAAC;AAEX;;;;GAIG;AACH,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAOhB,CAAC"}

package/dist/acl/change-role/0.1/payload.js

@@ -43,6 +43,7 @@ export const PAYLOAD_SCHEMA = {
         },
         "reason": {
             "type": "string",
+            "maxLength": 1024,
             "description": "Optional human-readable rationale."
         },
         "ext": {
@@ -117,6 +118,7 @@ export const PAYLOAD_SCHEMA = {
                 },
                 "label": {
                     "type": "string",
+                    "maxLength": 256,
                     "description": "Optional human-readable label."
                 },
                 "createdAt": {
@@ -257,6 +259,7 @@ export const RESPONSE_PAYLOAD_SCHEMA = {
                 },
                 "label": {
                     "type": "string",
+                    "maxLength": 256,
                     "description": "Optional human-readable label."
                 },
                 "createdAt": {
@@ -337,6 +340,7 @@ export const SPEC = {
     isBearer: false,
     isProofRequired: true,
     isRecipientRequired: true,
+    isIssuedAtRequired: true,
     payloadSchema: PAYLOAD_SCHEMA,
 };
 /**
@@ -349,6 +353,7 @@ export const RESPONSE_SPEC = {
     isBearer: false,
     isProofRequired: true,
     isRecipientRequired: true,
+    isIssuedAtRequired: true,
     payloadSchema: RESPONSE_PAYLOAD_SCHEMA,
 };
 //# sourceMappingURL=payload.js.map

package/dist/acl/change-role/0.1/payload.js.map

@@ -1 +1 @@
-{"version":3,"file":"payload.js","sourceRoot":"","sources":["../../../../src/acl/change-role/0.1/payload.ts"],"names":[],"mappings":"AAAA;;;GAGG;AA4CH,2BAA2B;AAC3B,MAAM,CAAC,MAAM,QAAQ,GAAG,iDAA0D,CAAC;AAKnF,qEAAqE;AACrE,MAAM,CAAC,MAAM,iBAAiB,GAAG,0DAAmE,CAAC;AAKrG;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,SAAS,EAAE,8CAA8C;IACzD,KAAK,EAAE,iDAAiD;IACxD,OAAO,EAAE,2BAA2B;IACpC,MAAM,EAAE,QAAQ;IAChB,sBAAsB,EAAE,KAAK;IAC7B,UAAU,EAAE;QACV,SAAS;QACT,UAAU;QACV,QAAQ;KACT;IACD,YAAY,EAAE;QACZ,SAAS,EAAE;YACT,MAAM,EAAE,QAAQ;YAChB,aAAa,EAAE,0CAA0C;SAC1D;QACD,UAAU,EAAE;YACV,MAAM,EAAE,QAAQ;YAChB,WAAW,EAAE,CAAC;YACd,aAAa,EAAE,wFAAwF;SACxG;QACD,QAAQ,EAAE;YACR,MAAM,EAAE,QAAQ;YAChB,WAAW,EAAE,CAAC;YACd,aAAa,EAAE,wCAAwC;SACxD;QACD,QAAQ,EAAE;YACR,MAAM,EAAE,QAAQ;YAChB,aAAa,EAAE,oCAAoC;SACpD;QACD,KAAK,EAAE;YACL,MAAM,EAAE,aAAa;YACrB,aAAa,EAAE,yDAAyD;SACzE;KACF;IACD,OAAO,EAAE;QACP,UAAU,EAAE;YACV,SAAS,EAAE,UAAU;YACrB,OAAO,EAAE,oCAAoC;YAC7C,aAAa,EAAE,8JAA8J;YAC7K,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,OAAO;aACR;YACD,YAAY,EAAE;gBACZ,OAAO,EAAE;oBACP,aAAa,EAAE,4GAA4G;oBAC3H,MAAM,EAAE,kBAAkB;iBAC3B;gBACD,KAAK,EAAE;oBACL,MAAM,EAAE,aAAa;oBACrB,aAAa,EAAE,yDAAyD;iBACzE;aACF;SACF;QACD,KAAK,EAAE;YACL,OAAO,EAAE,KAAK;YACd,aAAa,EAAE,uKAAuK;YACtL,MAAM,EAAE,QAAQ;YAChB,eAAe,EAAE,CAAC;YAClB,sBAAsB,EAAE,IAAI;YAC5B,eAAe,EAAE;gBACf,SAAS,EAAE,mCAAmC;aAC/C;SACF;QACD,UAAU,EAAE;YACV,OAAO,EAAE,UAAU;YACnB,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,SAAS;gBACT,MAAM;aACP;YACD,YAAY,EAAE;gBACZ,SAAS,EAAE;oBACT,MAAM,EAAE,QAAQ;oBAChB,aAAa,EAAE,sHAAsH;iBACtI;gBACD,MAAM,EAAE;oBACN,MAAM,EAAE,QAAQ;oBAChB,aAAa,EAAE,2DAA2D;iBAC3E;gBACD,QAAQ,EAAE;oBACR,MAAM,EAAE,OAAO;oBACf,OAAO,EAAE;wBACP,MAAM,EAAE,QAAQ;qBACjB;oBACD,aAAa,EAAE,uEAAuE;iBACvF;gBACD,aAAa,EAAE;oBACb,MAAM,EAAE;wBACN,OAAO;wBACP,MAAM;qBACP;oBACD,OAAO,EAAE;wBACP,MAAM,EAAE,QAAQ;qBACjB;oBACD,aAAa,EAAE,k0BAAk0B;iBACl1B;gBACD,OAAO,EAAE;oBACP,MAAM,EAAE,QAAQ;oBAChB,aAAa,EAAE,gCAAgC;iBAChD;gBACD,WAAW,EAAE;oBACX,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,WAAW;iBACtB;gBACD,WAAW,EAAE;oBACX,MAAM,EAAE,QAAQ;oBAChB,aAAa,EAAE,oDAAoD;iBACpE;gBACD,WAAW,EAAE;oBACX,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,WAAW;iBACtB;gBACD,WAAW,EAAE;oBACX,MAAM,EAAE,QAAQ;oBAChB,aAAa,EAAE,iDAAiD;iBACjE;gBACD,WAAW,EAAE;oBACX,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,WAAW;oBACrB,aAAa,EAAE,6DAA6D;iBAC7E;gBACD,QAAQ,EAAE;oBACR,MAAM,EAAE,QAAQ;oBAChB,sBAAsB,EAAE,KAAK;oBAC7B,aAAa,EAAE,kZAAkZ;oBACja,YAAY,EAAE;wBACZ,UAAU,EAAE;4BACV,MAAM,EAAE,QAAQ;4BAChB,aAAa,EAAE,sbAAsb;yBACtc;wBACD,SAAS,EAAE;4BACT,MAAM,EAAE,QAAQ;4BAChB,MAAM,EAAE;gCACN,MAAM;gCACN,WAAW;6BACZ;4BACD,aAAa,EAAE,yTAAyT;yBACzU;qBACF;iBACF;gBACD,SAAS,EAAE;oBACT,MAAM,EAAE,QAAQ;oBAChB,sBAAsB,EAAE,KAAK;oBAC7B,aAAa,EAAE,q/BAAq/B;oBACpgC,YAAY,EAAE;wBACZ,KAAK,EAAE;4BACL,MAAM,EAAE,SAAS;4BACjB,SAAS,EAAE,KAAK;4BAChB,aAAa,EAAE,2KAA2K;yBAC3L;wBACD,QAAQ,EAAE;4BACR,MAAM,EAAE,OAAO;4BACf,OAAO,EAAE;gCACP,MAAM,EAAE,QAAQ;6BACjB;4BACD,aAAa,EAAE,gYAAgY;yBAChZ;qBACF;iBACF;gBACD,KAAK,EAAE;oBACL,MAAM,EAAE,aAAa;oBACrB,aAAa,EAAE,gIAAgI;iBAChJ;aACF;SACF;KACF;CACO,CAAC;AAEX,mEAAmE;AACnE,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,SAAS,EAAE,8CAA8C;IACzD,MAAM,EAAE,kBAAkB;IAC1B,OAAO,EAAE;QACP,UAAU,EAAE;YACV,SAAS,EAAE,UAAU;YACrB,OAAO,EAAE,oCAAoC;YAC7C,aAAa,EAAE,8JAA8J;YAC7K,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,OAAO;aACR;YACD,YAAY,EAAE;gBACZ,OAAO,EAAE;oBACP,aAAa,EAAE,4GAA4G;oBAC3H,MAAM,EAAE,kBAAkB;iBAC3B;gBACD,KAAK,EAAE;oBACL,MAAM,EAAE,aAAa;oBACrB,aAAa,EAAE,yDAAyD;iBACzE;aACF;SACF;QACD,KAAK,EAAE;YACL,OAAO,EAAE,KAAK;YACd,aAAa,EAAE,uKAAuK;YACtL,MAAM,EAAE,QAAQ;YAChB,eAAe,EAAE,CAAC;YAClB,sBAAsB,EAAE,IAAI;YAC5B,eAAe,EAAE;gBACf,SAAS,EAAE,mCAAmC;aAC/C;SACF;QACD,UAAU,EAAE;YACV,OAAO,EAAE,UAAU;YACnB,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,SAAS;gBACT,MAAM;aACP;YACD,YAAY,EAAE;gBACZ,SAAS,EAAE;oBACT,MAAM,EAAE,QAAQ;oBAChB,aAAa,EAAE,sHAAsH;iBACtI;gBACD,MAAM,EAAE;oBACN,MAAM,EAAE,QAAQ;oBAChB,aAAa,EAAE,2DAA2D;iBAC3E;gBACD,QAAQ,EAAE;oBACR,MAAM,EAAE,OAAO;oBACf,OAAO,EAAE;wBACP,MAAM,EAAE,QAAQ;qBACjB;oBACD,aAAa,EAAE,uEAAuE;iBACvF;gBACD,aAAa,EAAE;oBACb,MAAM,EAAE;wBACN,OAAO;wBACP,MAAM;qBACP;oBACD,OAAO,EAAE;wBACP,MAAM,EAAE,QAAQ;qBACjB;oBACD,aAAa,EAAE,k0BAAk0B;iBACl1B;gBACD,OAAO,EAAE;oBACP,MAAM,EAAE,QAAQ;oBAChB,aAAa,EAAE,gCAAgC;iBAChD;gBACD,WAAW,EAAE;oBACX,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,WAAW;iBACtB;gBACD,WAAW,EAAE;oBACX,MAAM,EAAE,QAAQ;oBAChB,aAAa,EAAE,oDAAoD;iBACpE;gBACD,WAAW,EAAE;oBACX,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,WAAW;iBACtB;gBACD,WAAW,EAAE;oBACX,MAAM,EAAE,QAAQ;oBAChB,aAAa,EAAE,iDAAiD;iBACjE;gBACD,WAAW,EAAE;oBACX,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,WAAW;oBACrB,aAAa,EAAE,6DAA6D;iBAC7E;gBACD,QAAQ,EAAE;oBACR,MAAM,EAAE,QAAQ;oBAChB,sBAAsB,EAAE,KAAK;oBAC7B,aAAa,EAAE,kZAAkZ;oBACja,YAAY,EAAE;wBACZ,UAAU,EAAE;4BACV,MAAM,EAAE,QAAQ;4BAChB,aAAa,EAAE,sbAAsb;yBACtc;wBACD,SAAS,EAAE;4BACT,MAAM,EAAE,QAAQ;4BAChB,MAAM,EAAE;gCACN,MAAM;gCACN,WAAW;6BACZ;4BACD,aAAa,EAAE,yTAAyT;yBACzU;qBACF;iBACF;gBACD,SAAS,EAAE;oBACT,MAAM,EAAE,QAAQ;oBAChB,sBAAsB,EAAE,KAAK;oBAC7B,aAAa,EAAE,q/BAAq/B;oBACpgC,YAAY,EAAE;wBACZ,KAAK,EAAE;4BACL,MAAM,EAAE,SAAS;4BACjB,SAAS,EAAE,KAAK;4BAChB,aAAa,EAAE,2KAA2K;yBAC3L;wBACD,QAAQ,EAAE;4BACR,MAAM,EAAE,OAAO;4BACf,OAAO,EAAE;gCACP,MAAM,EAAE,QAAQ;6BACjB;4BACD,aAAa,EAAE,gYAAgY;yBAChZ;qBACF;iBACF;gBACD,KAAK,EAAE;oBACL,MAAM,EAAE,aAAa;oBACrB,aAAa,EAAE,gIAAgI;iBAChJ;aACF;SACF;KACF;CACO,CAAC;AAEX;;;;;GAKG;AACH,MAAM,CAAC,MAAM,IAAI,GAAG;IAClB,OAAO,EAAE,QAAQ;IACjB,QAAQ,EAAE,KAAK;IACf,eAAe,EAAE,IAAI;IACrB,mBAAmB,EAAE,IAAI;IACzB,aAAa,EAAE,cAAc;CACrB,CAAC;AAEX;;;;GAIG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,OAAO,EAAE,iBAAiB;IAC1B,QAAQ,EAAE,KAAK;IACf,eAAe,EAAE,IAAI;IACrB,mBAAmB,EAAE,IAAI;IACzB,aAAa,EAAE,uBAAuB;CAC9B,CAAC"}
+{"version":3,"file":"payload.js","sourceRoot":"","sources":["../../../../src/acl/change-role/0.1/payload.ts"],"names":[],"mappings":"AAAA;;;GAGG;AA4CH,2BAA2B;AAC3B,MAAM,CAAC,MAAM,QAAQ,GAAG,iDAA0D,CAAC;AAKnF,qEAAqE;AACrE,MAAM,CAAC,MAAM,iBAAiB,GAAG,0DAAmE,CAAC;AAKrG;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,SAAS,EAAE,8CAA8C;IACzD,KAAK,EAAE,iDAAiD;IACxD,OAAO,EAAE,2BAA2B;IACpC,MAAM,EAAE,QAAQ;IAChB,sBAAsB,EAAE,KAAK;IAC7B,UAAU,EAAE;QACV,SAAS;QACT,UAAU;QACV,QAAQ;KACT;IACD,YAAY,EAAE;QACZ,SAAS,EAAE;YACT,MAAM,EAAE,QAAQ;YAChB,aAAa,EAAE,0CAA0C;SAC1D;QACD,UAAU,EAAE;YACV,MAAM,EAAE,QAAQ;YAChB,WAAW,EAAE,CAAC;YACd,aAAa,EAAE,wFAAwF;SACxG;QACD,QAAQ,EAAE;YACR,MAAM,EAAE,QAAQ;YAChB,WAAW,EAAE,CAAC;YACd,aAAa,EAAE,wCAAwC;SACxD;QACD,QAAQ,EAAE;YACR,MAAM,EAAE,QAAQ;YAChB,WAAW,EAAE,IAAI;YACjB,aAAa,EAAE,oCAAoC;SACpD;QACD,KAAK,EAAE;YACL,MAAM,EAAE,aAAa;YACrB,aAAa,EAAE,yDAAyD;SACzE;KACF;IACD,OAAO,EAAE;QACP,UAAU,EAAE;YACV,SAAS,EAAE,UAAU;YACrB,OAAO,EAAE,oCAAoC;YAC7C,aAAa,EAAE,8JAA8J;YAC7K,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,OAAO;aACR;YACD,YAAY,EAAE;gBACZ,OAAO,EAAE;oBACP,aAAa,EAAE,4GAA4G;oBAC3H,MAAM,EAAE,kBAAkB;iBAC3B;gBACD,KAAK,EAAE;oBACL,MAAM,EAAE,aAAa;oBACrB,aAAa,EAAE,yDAAyD;iBACzE;aACF;SACF;QACD,KAAK,EAAE;YACL,OAAO,EAAE,KAAK;YACd,aAAa,EAAE,uKAAuK;YACtL,MAAM,EAAE,QAAQ;YAChB,eAAe,EAAE,CAAC;YAClB,sBAAsB,EAAE,IAAI;YAC5B,eAAe,EAAE;gBACf,SAAS,EAAE,mCAAmC;aAC/C;SACF;QACD,UAAU,EAAE;YACV,OAAO,EAAE,UAAU;YACnB,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,SAAS;gBACT,MAAM;aACP;YACD,YAAY,EAAE;gBACZ,SAAS,EAAE;oBACT,MAAM,EAAE,QAAQ;oBAChB,aAAa,EAAE,sHAAsH;iBACtI;gBACD,MAAM,EAAE;oBACN,MAAM,EAAE,QAAQ;oBAChB,aAAa,EAAE,2DAA2D;iBAC3E;gBACD,QAAQ,EAAE;oBACR,MAAM,EAAE,OAAO;oBACf,OAAO,EAAE;wBACP,MAAM,EAAE,QAAQ;qBACjB;oBACD,aAAa,EAAE,uEAAuE;iBACvF;gBACD,aAAa,EAAE;oBACb,MAAM,EAAE;wBACN,OAAO;wBACP,MAAM;qBACP;oBACD,OAAO,EAAE;wBACP,MAAM,EAAE,QAAQ;qBACjB;oBACD,aAAa,EAAE,k0BAAk0B;iBACl1B;gBACD,OAAO,EAAE;oBACP,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,GAAG;oBAChB,aAAa,EAAE,gCAAgC;iBAChD;gBACD,WAAW,EAAE;oBACX,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,WAAW;iBACtB;gBACD,WAAW,EAAE;oBACX,MAAM,EAAE,QAAQ;oBAChB,aAAa,EAAE,oDAAoD;iBACpE;gBACD,WAAW,EAAE;oBACX,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,WAAW;iBACtB;gBACD,WAAW,EAAE;oBACX,MAAM,EAAE,QAAQ;oBAChB,aAAa,EAAE,iDAAiD;iBACjE;gBACD,WAAW,EAAE;oBACX,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,WAAW;oBACrB,aAAa,EAAE,6DAA6D;iBAC7E;gBACD,QAAQ,EAAE;oBACR,MAAM,EAAE,QAAQ;oBAChB,sBAAsB,EAAE,KAAK;oBAC7B,aAAa,EAAE,kZAAkZ;oBACja,YAAY,EAAE;wBACZ,UAAU,EAAE;4BACV,MAAM,EAAE,QAAQ;4BAChB,aAAa,EAAE,sbAAsb;yBACtc;wBACD,SAAS,EAAE;4BACT,MAAM,EAAE,QAAQ;4BAChB,MAAM,EAAE;gCACN,MAAM;gCACN,WAAW;6BACZ;4BACD,aAAa,EAAE,yTAAyT;yBACzU;qBACF;iBACF;gBACD,SAAS,EAAE;oBACT,MAAM,EAAE,QAAQ;oBAChB,sBAAsB,EAAE,KAAK;oBAC7B,aAAa,EAAE,q/BAAq/B;oBACpgC,YAAY,EAAE;wBACZ,KAAK,EAAE;4BACL,MAAM,EAAE,SAAS;4BACjB,SAAS,EAAE,KAAK;4BAChB,aAAa,EAAE,2KAA2K;yBAC3L;wBACD,QAAQ,EAAE;4BACR,MAAM,EAAE,OAAO;4BACf,OAAO,EAAE;gCACP,MAAM,EAAE,QAAQ;6BACjB;4BACD,aAAa,EAAE,gYAAgY;yBAChZ;qBACF;iBACF;gBACD,KAAK,EAAE;oBACL,MAAM,EAAE,aAAa;oBACrB,aAAa,EAAE,gIAAgI;iBAChJ;aACF;SACF;KACF;CACO,CAAC;AAEX,mEAAmE;AACnE,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,SAAS,EAAE,8CAA8C;IACzD,MAAM,EAAE,kBAAkB;IAC1B,OAAO,EAAE;QACP,UAAU,EAAE;YACV,SAAS,EAAE,UAAU;YACrB,OAAO,EAAE,oCAAoC;YAC7C,aAAa,EAAE,8JAA8J;YAC7K,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,OAAO;aACR;YACD,YAAY,EAAE;gBACZ,OAAO,EAAE;oBACP,aAAa,EAAE,4GAA4G;oBAC3H,MAAM,EAAE,kBAAkB;iBAC3B;gBACD,KAAK,EAAE;oBACL,MAAM,EAAE,aAAa;oBACrB,aAAa,EAAE,yDAAyD;iBACzE;aACF;SACF;QACD,KAAK,EAAE;YACL,OAAO,EAAE,KAAK;YACd,aAAa,EAAE,uKAAuK;YACtL,MAAM,EAAE,QAAQ;YAChB,eAAe,EAAE,CAAC;YAClB,sBAAsB,EAAE,IAAI;YAC5B,eAAe,EAAE;gBACf,SAAS,EAAE,mCAAmC;aAC/C;SACF;QACD,UAAU,EAAE;YACV,OAAO,EAAE,UAAU;YACnB,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,SAAS;gBACT,MAAM;aACP;YACD,YAAY,EAAE;gBACZ,SAAS,EAAE;oBACT,MAAM,EAAE,QAAQ;oBAChB,aAAa,EAAE,sHAAsH;iBACtI;gBACD,MAAM,EAAE;oBACN,MAAM,EAAE,QAAQ;oBAChB,aAAa,EAAE,2DAA2D;iBAC3E;gBACD,QAAQ,EAAE;oBACR,MAAM,EAAE,OAAO;oBACf,OAAO,EAAE;wBACP,MAAM,EAAE,QAAQ;qBACjB;oBACD,aAAa,EAAE,uEAAuE;iBACvF;gBACD,aAAa,EAAE;oBACb,MAAM,EAAE;wBACN,OAAO;wBACP,MAAM;qBACP;oBACD,OAAO,EAAE;wBACP,MAAM,EAAE,QAAQ;qBACjB;oBACD,aAAa,EAAE,k0BAAk0B;iBACl1B;gBACD,OAAO,EAAE;oBACP,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,GAAG;oBAChB,aAAa,EAAE,gCAAgC;iBAChD;gBACD,WAAW,EAAE;oBACX,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,WAAW;iBACtB;gBACD,WAAW,EAAE;oBACX,MAAM,EAAE,QAAQ;oBAChB,aAAa,EAAE,oDAAoD;iBACpE;gBACD,WAAW,EAAE;oBACX,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,WAAW;iBACtB;gBACD,WAAW,EAAE;oBACX,MAAM,EAAE,QAAQ;oBAChB,aAAa,EAAE,iDAAiD;iBACjE;gBACD,WAAW,EAAE;oBACX,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,WAAW;oBACrB,aAAa,EAAE,6DAA6D;iBAC7E;gBACD,QAAQ,EAAE;oBACR,MAAM,EAAE,QAAQ;oBAChB,sBAAsB,EAAE,KAAK;oBAC7B,aAAa,EAAE,kZAAkZ;oBACja,YAAY,EAAE;wBACZ,UAAU,EAAE;4BACV,MAAM,EAAE,QAAQ;4BAChB,aAAa,EAAE,sbAAsb;yBACtc;wBACD,SAAS,EAAE;4BACT,MAAM,EAAE,QAAQ;4BAChB,MAAM,EAAE;gCACN,MAAM;gCACN,WAAW;6BACZ;4BACD,aAAa,EAAE,yTAAyT;yBACzU;qBACF;iBACF;gBACD,SAAS,EAAE;oBACT,MAAM,EAAE,QAAQ;oBAChB,sBAAsB,EAAE,KAAK;oBAC7B,aAAa,EAAE,q/BAAq/B;oBACpgC,YAAY,EAAE;wBACZ,KAAK,EAAE;4BACL,MAAM,EAAE,SAAS;4BACjB,SAAS,EAAE,KAAK;4BAChB,aAAa,EAAE,2KAA2K;yBAC3L;wBACD,QAAQ,EAAE;4BACR,MAAM,EAAE,OAAO;4BACf,OAAO,EAAE;gCACP,MAAM,EAAE,QAAQ;6BACjB;4BACD,aAAa,EAAE,gYAAgY;yBAChZ;qBACF;iBACF;gBACD,KAAK,EAAE;oBACL,MAAM,EAAE,aAAa;oBACrB,aAAa,EAAE,gIAAgI;iBAChJ;aACF;SACF;KACF;CACO,CAAC;AAEX;;;;;GAKG;AACH,MAAM,CAAC,MAAM,IAAI,GAAG;IAClB,OAAO,EAAE,QAAQ;IACjB,QAAQ,EAAE,KAAK;IACf,eAAe,EAAE,IAAI;IACrB,mBAAmB,EAAE,IAAI;IACzB,kBAAkB,EAAE,IAAI;IACxB,aAAa,EAAE,cAAc;CACrB,CAAC;AAEX;;;;GAIG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,OAAO,EAAE,iBAAiB;IAC1B,QAAQ,EAAE,KAAK;IACf,eAAe,EAAE,IAAI;IACrB,mBAAmB,EAAE,IAAI;IACzB,kBAAkB,EAAE,IAAI;IACxB,aAAa,EAAE,uBAAuB;CAC9B,CAAC"}

package/dist/acl/grant/0.1/payload.d.ts

@@ -63,6 +63,7 @@ export declare const PAYLOAD_SCHEMA: {
         };
         readonly reason: {
             readonly type: "string";
+            readonly maxLength: 1024;
             readonly description: "Optional human-readable rationale.";
         };
         readonly ext: {
@@ -129,6 +130,7 @@ export declare const PAYLOAD_SCHEMA: {
                 };
                 readonly label: {
                     readonly type: "string";
+                    readonly maxLength: 256;
                     readonly description: "Optional human-readable label.";
                 };
                 readonly createdAt: {
@@ -258,6 +260,7 @@ export declare const RESPONSE_PAYLOAD_SCHEMA: {
                 };
                 readonly label: {
                     readonly type: "string";
+                    readonly maxLength: 256;
                     readonly description: "Optional human-readable label.";
                 };
                 readonly createdAt: {
@@ -335,6 +338,7 @@ export declare const SPEC: {
     readonly isBearer: false;
     readonly isProofRequired: true;
     readonly isRecipientRequired: true;
+    readonly isIssuedAtRequired: true;
     readonly payloadSchema: {
         readonly $schema: "https://json-schema.org/draft/2020-12/schema";
         readonly $id: "https://trusttasks.org/spec/acl/grant/0.1";
@@ -349,6 +353,7 @@ export declare const SPEC: {
             };
             readonly reason: {
                 readonly type: "string";
+                readonly maxLength: 1024;
                 readonly description: "Optional human-readable rationale.";
             };
             readonly ext: {
@@ -415,6 +420,7 @@ export declare const SPEC: {
                     };
                     readonly label: {
                         readonly type: "string";
+                        readonly maxLength: 256;
                         readonly description: "Optional human-readable label.";
                     };
                     readonly createdAt: {
@@ -492,6 +498,7 @@ export declare const RESPONSE_SPEC: {
     readonly isBearer: false;
     readonly isProofRequired: true;
     readonly isRecipientRequired: true;
+    readonly isIssuedAtRequired: true;
     readonly payloadSchema: {
         readonly $schema: "https://json-schema.org/draft/2020-12/schema";
         readonly $ref: "#/$defs/Response";
@@ -554,6 +561,7 @@ export declare const RESPONSE_SPEC: {
                     };
                     readonly label: {
                         readonly type: "string";
+                        readonly maxLength: 256;
                         readonly description: "Optional human-readable label.";
                     };
                     readonly createdAt: {

package/dist/acl/grant/0.1/payload.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"payload.d.ts","sourceRoot":"","sources":["../../../../src/acl/grant/0.1/payload.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,gCAAgC,CAAC;AAGpE,MAAM,WAAW,eAAe;IAC9B;;OAEG;IACH,KAAK,EAAE,QAAQ,CAAC;IAChB;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;OAEG;IACH,GAAG,CAAC,EAAE,GAAG,CAAC;CACX;AACD;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC;;OAEG;IACH,KAAK,EAAE,QAAQ,CAAC;IAChB;;OAEG;IACH,GAAG,CAAC,EAAE,GAAG,CAAC;CACX;AAED,kHAAkH;AAClH,YAAY,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC;AAE9B,2BAA2B;AAC3B,eAAO,MAAM,QAAQ,EAAG,2CAAoD,CAAC;AAE7E,mEAAmE;AACnE,MAAM,MAAM,OAAO,GAAG,eAAe,CAAC;AAEtC,qEAAqE;AACrE,eAAO,MAAM,iBAAiB,EAAG,oDAA6D,CAAC;AAE/F,4EAA4E;AAC5E,MAAM,MAAM,QAAQ,GAAG,uBAAuB,CAAC;AAE/C;;;;;;;;GAQG;AACH,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA8JjB,CAAC;AAEX,mEAAmE;AACnE,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA0I1B,CAAC;AAEX;;;;;GAKG;AACH,eAAO,MAAM,IAAI;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAMP,CAAC;AAEX;;;;GAIG;AACH,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAMhB,CAAC"}
+{"version":3,"file":"payload.d.ts","sourceRoot":"","sources":["../../../../src/acl/grant/0.1/payload.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,gCAAgC,CAAC;AAGpE,MAAM,WAAW,eAAe;IAC9B;;OAEG;IACH,KAAK,EAAE,QAAQ,CAAC;IAChB;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;OAEG;IACH,GAAG,CAAC,EAAE,GAAG,CAAC;CACX;AACD;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC;;OAEG;IACH,KAAK,EAAE,QAAQ,CAAC;IAChB;;OAEG;IACH,GAAG,CAAC,EAAE,GAAG,CAAC;CACX;AAED,kHAAkH;AAClH,YAAY,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC;AAE9B,2BAA2B;AAC3B,eAAO,MAAM,QAAQ,EAAG,2CAAoD,CAAC;AAE7E,mEAAmE;AACnE,MAAM,MAAM,OAAO,GAAG,eAAe,CAAC;AAEtC,qEAAqE;AACrE,eAAO,MAAM,iBAAiB,EAAG,oDAA6D,CAAC;AAE/F,4EAA4E;AAC5E,MAAM,MAAM,QAAQ,GAAG,uBAAuB,CAAC;AAE/C;;;;;;;;GAQG;AACH,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAgKjB,CAAC;AAEX,mEAAmE;AACnE,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA2I1B,CAAC;AAEX;;;;;GAKG;AACH,eAAO,MAAM,IAAI;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAOP,CAAC;AAEX;;;;GAIG;AACH,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAOhB,CAAC"}