@openvtc/trust-tasks 0.16.2 → 0.16.4

package/dist/vault/credentials/query/0.1/payload.d.ts

@@ -0,0 +1,689 @@
+/**
+ * Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
+ * Source: specs/vault/credentials/query/0.1/payload.schema.json
+ */
+import type { Ext } from "../../../../_shared/components.js";
+export type Did = string;
+/**
+ * Semantic classification. `invite`, `membership`, `role`, `endorsement` and `personhood` are defined; a maintainer MAY use another token.
+ */
+export type CredentialPurpose = string;
+/**
+ * Validity, driven by the credential's own window and by status-list checks. Orthogonal to lifecycle.
+ */
+export type CredentialStatus = "valid" | "expired" | "revoked" | "unknown";
+/**
+ * A filtered, body-free search over stored credentials. At least one of `type`, `communityDid`, `issuerDid`, `purpose` or `status` MUST be present — see the specification; `includeArchived` and `includeDeleted` are modifiers and do not satisfy that requirement.
+ */
+export interface VaultCredentialsQuery {
+    /**
+     * Match credentials carrying this VC `type` tag.
+     */
+    type?: string;
+    /**
+     * Match credentials held for this community or context DID.
+     */
+    communityDid?: string;
+    /**
+     * Match credentials issued by this DID.
+     */
+    issuerDid?: string;
+    /**
+     * Match the maintainer's semantic classification of the credential.
+     */
+    purpose?: string;
+    /**
+     * Match the validity dimension.
+     */
+    status?: "valid" | "expired" | "revoked" | "unknown";
+    /**
+     * Modifier, not a filter: also return archived credentials matching the other constraints. Absent means false.
+     */
+    includeArchived?: boolean;
+    /**
+     * Modifier, not a filter: also return soft-deleted tombstones matching the other constraints. Absent means false.
+     */
+    includeDeleted?: boolean;
+    /**
+     * Ecosystem-defined extension members per SPEC.md §4.5.1.
+     */
+    ext?: Ext;
+}
+export interface VaultCredentialsQueryResponsePayload {
+    /**
+     * Matching descriptors. Empty when nothing matched — a successful answer, not an error.
+     */
+    credentials: CredentialDescriptor[];
+    /**
+     * Ecosystem-defined extension members per SPEC.md §4.5.1.
+     */
+    ext?: Ext;
+}
+/**
+ * A body-free projection of a stored credential. Carries no claim content by construction.
+ */
+export interface CredentialDescriptor {
+    /**
+     * Local handle. Opaque to the consumer; the id `get`, `archive`, `delete` and the rest are keyed on.
+     */
+    id: string;
+    /**
+     * VC `type` tags carried by the credential.
+     */
+    types: string[];
+    issuerDid?: Did;
+    purpose?: CredentialPurpose;
+    status: CredentialStatus;
+    /**
+     * Omitted for active credentials, so an active-only result is unchanged by this member's existence.
+     */
+    lifecycle?: "active" | "archived" | "deleted";
+    validFrom?: string;
+    validUntil?: string;
+    /**
+     * Present iff `lifecycle` is `archived`.
+     */
+    archivedAt?: string;
+    /**
+     * Present iff `lifecycle` is `deleted`.
+     */
+    deletedAt?: string;
+    /**
+     * Present iff `lifecycle` is `deleted`. Restorable while now < graceUntil.
+     */
+    graceUntil?: string;
+}
+/** Shared definitions this specification references, re-exported under the names it used to declare them with. */
+export type { Ext };
+/** Trust Task type URI. */
+export declare const TYPE_URI: "https://trusttasks.org/spec/vault/credentials/query/0.1";
+/** Stable alias for this specification's request payload shape. */
+export type Payload = VaultCredentialsQuery;
+/** Trust Task response type URI (request type URI + "#response"). */
+export declare const RESPONSE_TYPE_URI: "https://trusttasks.org/spec/vault/credentials/query/0.1#response";
+/** Stable alias for this specification's success-response payload shape. */
+export type Response = VaultCredentialsQueryResponsePayload;
+/**
+ * This specification's payload schema, as a value.
+ *
+ * SPEC.md §7.2 item 2 is performed against this. It is shipped as data
+ * rather than only as a `.json` file because TypeScript types are erased
+ * at runtime: without a schema a consumer has nothing to validate, and
+ * every REQUIRED payload member is optional in practice. Cross-file
+ * `$ref`s are already inlined, so it needs no resolver.
+ */
+export declare const PAYLOAD_SCHEMA: {
+    readonly $schema: "https://json-schema.org/draft/2020-12/schema";
+    readonly $id: "https://trusttasks.org/spec/vault/credentials/query/0.1";
+    readonly title: "Vault Credentials — Query";
+    readonly description: "A filtered, body-free search over stored credentials. At least one of `type`, `communityDid`, `issuerDid`, `purpose` or `status` MUST be present — see the specification; `includeArchived` and `includeDeleted` are modifiers and do not satisfy that requirement.";
+    readonly type: "object";
+    readonly additionalProperties: false;
+    readonly properties: {
+        readonly type: {
+            readonly type: "string";
+            readonly minLength: 1;
+            readonly maxLength: 256;
+            readonly description: "Match credentials carrying this VC `type` tag.";
+        };
+        readonly communityDid: {
+            readonly $ref: "#/$defs/Did";
+            readonly description: "Match credentials held for this community or context DID.";
+        };
+        readonly issuerDid: {
+            readonly $ref: "#/$defs/Did";
+            readonly description: "Match credentials issued by this DID.";
+        };
+        readonly purpose: {
+            readonly $ref: "#/$defs/CredentialPurpose";
+            readonly description: "Match the maintainer's semantic classification of the credential.";
+        };
+        readonly status: {
+            readonly $ref: "#/$defs/CredentialStatus";
+            readonly description: "Match the validity dimension.";
+        };
+        readonly includeArchived: {
+            readonly type: "boolean";
+            readonly description: "Modifier, not a filter: also return archived credentials matching the other constraints. Absent means false.";
+        };
+        readonly includeDeleted: {
+            readonly type: "boolean";
+            readonly description: "Modifier, not a filter: also return soft-deleted tombstones matching the other constraints. Absent means false.";
+        };
+        readonly ext: {
+            readonly $ref: "#/$defs/Ext";
+            readonly description: "Ecosystem-defined extension members per SPEC.md §4.5.1.";
+        };
+    };
+    readonly $defs: {
+        readonly Response: {
+            readonly $anchor: "response";
+            readonly title: "Vault Credentials Query — response payload";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["credentials"];
+            readonly properties: {
+                readonly credentials: {
+                    readonly type: "array";
+                    readonly items: {
+                        readonly $ref: "#/$defs/CredentialDescriptor";
+                    };
+                    readonly description: "Matching descriptors. Empty when nothing matched — a successful answer, not an error.";
+                };
+                readonly ext: {
+                    readonly $ref: "#/$defs/Ext";
+                    readonly description: "Ecosystem-defined extension members per SPEC.md §4.5.1.";
+                };
+            };
+        };
+        readonly CredentialDescriptor: {
+            readonly title: "Credential descriptor";
+            readonly description: "A body-free projection of a stored credential. Carries no claim content by construction.";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["id", "types", "status"];
+            readonly properties: {
+                readonly id: {
+                    readonly type: "string";
+                    readonly minLength: 1;
+                    readonly maxLength: 256;
+                    readonly description: "Local handle. Opaque to the consumer; the id `get`, `archive`, `delete` and the rest are keyed on.";
+                };
+                readonly types: {
+                    readonly type: "array";
+                    readonly items: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                        readonly maxLength: 256;
+                    };
+                    readonly description: "VC `type` tags carried by the credential.";
+                };
+                readonly issuerDid: {
+                    readonly $ref: "#/$defs/Did";
+                };
+                readonly purpose: {
+                    readonly $ref: "#/$defs/CredentialPurpose";
+                };
+                readonly status: {
+                    readonly $ref: "#/$defs/CredentialStatus";
+                };
+                readonly lifecycle: {
+                    readonly $ref: "#/$defs/VaultLifecycle";
+                    readonly description: "Omitted for active credentials, so an active-only result is unchanged by this member's existence.";
+                };
+                readonly validFrom: {
+                    readonly type: "string";
+                    readonly format: "date-time";
+                };
+                readonly validUntil: {
+                    readonly type: "string";
+                    readonly format: "date-time";
+                };
+                readonly archivedAt: {
+                    readonly type: "string";
+                    readonly format: "date-time";
+                    readonly description: "Present iff `lifecycle` is `archived`.";
+                };
+                readonly deletedAt: {
+                    readonly type: "string";
+                    readonly format: "date-time";
+                    readonly description: "Present iff `lifecycle` is `deleted`.";
+                };
+                readonly graceUntil: {
+                    readonly type: "string";
+                    readonly format: "date-time";
+                    readonly description: "Present iff `lifecycle` is `deleted`. Restorable while now < graceUntil.";
+                };
+            };
+        };
+        readonly CredentialStatus: {
+            readonly type: "string";
+            readonly enum: readonly ["valid", "expired", "revoked", "unknown"];
+            readonly description: "Validity, driven by the credential's own window and by status-list checks. Orthogonal to lifecycle.";
+        };
+        readonly CredentialPurpose: {
+            readonly type: "string";
+            readonly minLength: 1;
+            readonly maxLength: 128;
+            readonly description: "Semantic classification. `invite`, `membership`, `role`, `endorsement` and `personhood` are defined; a maintainer MAY use another token.";
+        };
+        readonly VaultLifecycle: {
+            readonly type: "string";
+            readonly enum: readonly ["active", "archived", "deleted"];
+            readonly description: "Archival state, chosen through this family. Orthogonal to validity.";
+        };
+        readonly Did: {
+            readonly type: "string";
+            readonly pattern: "^did:[a-z0-9]+:.+$";
+            readonly maxLength: 2048;
+        };
+        readonly Ext: {
+            readonly title: "Ext";
+            readonly description: "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.";
+            readonly type: "object";
+            readonly minProperties: 1;
+            readonly additionalProperties: true;
+            readonly propertyNames: {
+                readonly pattern: "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$";
+            };
+        };
+    };
+};
+/** As {@link PAYLOAD_SCHEMA}, for the success-response variant. */
+export declare const RESPONSE_PAYLOAD_SCHEMA: {
+    readonly $schema: "https://json-schema.org/draft/2020-12/schema";
+    readonly $ref: "#/$defs/Response";
+    readonly $defs: {
+        readonly Response: {
+            readonly $anchor: "response";
+            readonly title: "Vault Credentials Query — response payload";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["credentials"];
+            readonly properties: {
+                readonly credentials: {
+                    readonly type: "array";
+                    readonly items: {
+                        readonly $ref: "#/$defs/CredentialDescriptor";
+                    };
+                    readonly description: "Matching descriptors. Empty when nothing matched — a successful answer, not an error.";
+                };
+                readonly ext: {
+                    readonly $ref: "#/$defs/Ext";
+                    readonly description: "Ecosystem-defined extension members per SPEC.md §4.5.1.";
+                };
+            };
+        };
+        readonly CredentialDescriptor: {
+            readonly title: "Credential descriptor";
+            readonly description: "A body-free projection of a stored credential. Carries no claim content by construction.";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["id", "types", "status"];
+            readonly properties: {
+                readonly id: {
+                    readonly type: "string";
+                    readonly minLength: 1;
+                    readonly maxLength: 256;
+                    readonly description: "Local handle. Opaque to the consumer; the id `get`, `archive`, `delete` and the rest are keyed on.";
+                };
+                readonly types: {
+                    readonly type: "array";
+                    readonly items: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                        readonly maxLength: 256;
+                    };
+                    readonly description: "VC `type` tags carried by the credential.";
+                };
+                readonly issuerDid: {
+                    readonly $ref: "#/$defs/Did";
+                };
+                readonly purpose: {
+                    readonly $ref: "#/$defs/CredentialPurpose";
+                };
+                readonly status: {
+                    readonly $ref: "#/$defs/CredentialStatus";
+                };
+                readonly lifecycle: {
+                    readonly $ref: "#/$defs/VaultLifecycle";
+                    readonly description: "Omitted for active credentials, so an active-only result is unchanged by this member's existence.";
+                };
+                readonly validFrom: {
+                    readonly type: "string";
+                    readonly format: "date-time";
+                };
+                readonly validUntil: {
+                    readonly type: "string";
+                    readonly format: "date-time";
+                };
+                readonly archivedAt: {
+                    readonly type: "string";
+                    readonly format: "date-time";
+                    readonly description: "Present iff `lifecycle` is `archived`.";
+                };
+                readonly deletedAt: {
+                    readonly type: "string";
+                    readonly format: "date-time";
+                    readonly description: "Present iff `lifecycle` is `deleted`.";
+                };
+                readonly graceUntil: {
+                    readonly type: "string";
+                    readonly format: "date-time";
+                    readonly description: "Present iff `lifecycle` is `deleted`. Restorable while now < graceUntil.";
+                };
+            };
+        };
+        readonly CredentialStatus: {
+            readonly type: "string";
+            readonly enum: readonly ["valid", "expired", "revoked", "unknown"];
+            readonly description: "Validity, driven by the credential's own window and by status-list checks. Orthogonal to lifecycle.";
+        };
+        readonly CredentialPurpose: {
+            readonly type: "string";
+            readonly minLength: 1;
+            readonly maxLength: 128;
+            readonly description: "Semantic classification. `invite`, `membership`, `role`, `endorsement` and `personhood` are defined; a maintainer MAY use another token.";
+        };
+        readonly VaultLifecycle: {
+            readonly type: "string";
+            readonly enum: readonly ["active", "archived", "deleted"];
+            readonly description: "Archival state, chosen through this family. Orthogonal to validity.";
+        };
+        readonly Did: {
+            readonly type: "string";
+            readonly pattern: "^did:[a-z0-9]+:.+$";
+            readonly maxLength: 2048;
+        };
+        readonly Ext: {
+            readonly title: "Ext";
+            readonly description: "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.";
+            readonly type: "object";
+            readonly minProperties: 1;
+            readonly additionalProperties: true;
+            readonly propertyNames: {
+                readonly pattern: "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$";
+            };
+        };
+    };
+};
+/**
+ * SPEC.md §7.2 policy for the request variant, from this specification's
+ * front matter. Pass to `consumeInbound` — items 5b, 7 and 8 are
+ * per-specification and cannot be derived from the document alone, and
+ * item 2 needs the schema this carries.
+ */
+export declare const SPEC: {
+    readonly typeUri: "https://trusttasks.org/spec/vault/credentials/query/0.1";
+    readonly isBearer: false;
+    readonly isProofRequired: false;
+    readonly isRecipientRequired: true;
+    readonly isIssuedAtRequired: false;
+    readonly payloadSchema: {
+        readonly $schema: "https://json-schema.org/draft/2020-12/schema";
+        readonly $id: "https://trusttasks.org/spec/vault/credentials/query/0.1";
+        readonly title: "Vault Credentials — Query";
+        readonly description: "A filtered, body-free search over stored credentials. At least one of `type`, `communityDid`, `issuerDid`, `purpose` or `status` MUST be present — see the specification; `includeArchived` and `includeDeleted` are modifiers and do not satisfy that requirement.";
+        readonly type: "object";
+        readonly additionalProperties: false;
+        readonly properties: {
+            readonly type: {
+                readonly type: "string";
+                readonly minLength: 1;
+                readonly maxLength: 256;
+                readonly description: "Match credentials carrying this VC `type` tag.";
+            };
+            readonly communityDid: {
+                readonly $ref: "#/$defs/Did";
+                readonly description: "Match credentials held for this community or context DID.";
+            };
+            readonly issuerDid: {
+                readonly $ref: "#/$defs/Did";
+                readonly description: "Match credentials issued by this DID.";
+            };
+            readonly purpose: {
+                readonly $ref: "#/$defs/CredentialPurpose";
+                readonly description: "Match the maintainer's semantic classification of the credential.";
+            };
+            readonly status: {
+                readonly $ref: "#/$defs/CredentialStatus";
+                readonly description: "Match the validity dimension.";
+            };
+            readonly includeArchived: {
+                readonly type: "boolean";
+                readonly description: "Modifier, not a filter: also return archived credentials matching the other constraints. Absent means false.";
+            };
+            readonly includeDeleted: {
+                readonly type: "boolean";
+                readonly description: "Modifier, not a filter: also return soft-deleted tombstones matching the other constraints. Absent means false.";
+            };
+            readonly ext: {
+                readonly $ref: "#/$defs/Ext";
+                readonly description: "Ecosystem-defined extension members per SPEC.md §4.5.1.";
+            };
+        };
+        readonly $defs: {
+            readonly Response: {
+                readonly $anchor: "response";
+                readonly title: "Vault Credentials Query — response payload";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["credentials"];
+                readonly properties: {
+                    readonly credentials: {
+                        readonly type: "array";
+                        readonly items: {
+                            readonly $ref: "#/$defs/CredentialDescriptor";
+                        };
+                        readonly description: "Matching descriptors. Empty when nothing matched — a successful answer, not an error.";
+                    };
+                    readonly ext: {
+                        readonly $ref: "#/$defs/Ext";
+                        readonly description: "Ecosystem-defined extension members per SPEC.md §4.5.1.";
+                    };
+                };
+            };
+            readonly CredentialDescriptor: {
+                readonly title: "Credential descriptor";
+                readonly description: "A body-free projection of a stored credential. Carries no claim content by construction.";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["id", "types", "status"];
+                readonly properties: {
+                    readonly id: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                        readonly maxLength: 256;
+                        readonly description: "Local handle. Opaque to the consumer; the id `get`, `archive`, `delete` and the rest are keyed on.";
+                    };
+                    readonly types: {
+                        readonly type: "array";
+                        readonly items: {
+                            readonly type: "string";
+                            readonly minLength: 1;
+                            readonly maxLength: 256;
+                        };
+                        readonly description: "VC `type` tags carried by the credential.";
+                    };
+                    readonly issuerDid: {
+                        readonly $ref: "#/$defs/Did";
+                    };
+                    readonly purpose: {
+                        readonly $ref: "#/$defs/CredentialPurpose";
+                    };
+                    readonly status: {
+                        readonly $ref: "#/$defs/CredentialStatus";
+                    };
+                    readonly lifecycle: {
+                        readonly $ref: "#/$defs/VaultLifecycle";
+                        readonly description: "Omitted for active credentials, so an active-only result is unchanged by this member's existence.";
+                    };
+                    readonly validFrom: {
+                        readonly type: "string";
+                        readonly format: "date-time";
+                    };
+                    readonly validUntil: {
+                        readonly type: "string";
+                        readonly format: "date-time";
+                    };
+                    readonly archivedAt: {
+                        readonly type: "string";
+                        readonly format: "date-time";
+                        readonly description: "Present iff `lifecycle` is `archived`.";
+                    };
+                    readonly deletedAt: {
+                        readonly type: "string";
+                        readonly format: "date-time";
+                        readonly description: "Present iff `lifecycle` is `deleted`.";
+                    };
+                    readonly graceUntil: {
+                        readonly type: "string";
+                        readonly format: "date-time";
+                        readonly description: "Present iff `lifecycle` is `deleted`. Restorable while now < graceUntil.";
+                    };
+                };
+            };
+            readonly CredentialStatus: {
+                readonly type: "string";
+                readonly enum: readonly ["valid", "expired", "revoked", "unknown"];
+                readonly description: "Validity, driven by the credential's own window and by status-list checks. Orthogonal to lifecycle.";
+            };
+            readonly CredentialPurpose: {
+                readonly type: "string";
+                readonly minLength: 1;
+                readonly maxLength: 128;
+                readonly description: "Semantic classification. `invite`, `membership`, `role`, `endorsement` and `personhood` are defined; a maintainer MAY use another token.";
+            };
+            readonly VaultLifecycle: {
+                readonly type: "string";
+                readonly enum: readonly ["active", "archived", "deleted"];
+                readonly description: "Archival state, chosen through this family. Orthogonal to validity.";
+            };
+            readonly Did: {
+                readonly type: "string";
+                readonly pattern: "^did:[a-z0-9]+:.+$";
+                readonly maxLength: 2048;
+            };
+            readonly Ext: {
+                readonly title: "Ext";
+                readonly description: "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.";
+                readonly type: "object";
+                readonly minProperties: 1;
+                readonly additionalProperties: true;
+                readonly propertyNames: {
+                    readonly pattern: "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$";
+                };
+            };
+        };
+    };
+};
+/**
+ * SPEC.md §7.2 policy for the success-response variant. `isRecipientRequired`
+ * tracks the *issuer* party's requirement because a response swaps the
+ * parties (§7.3 item 5).
+ */
+export declare const RESPONSE_SPEC: {
+    readonly typeUri: "https://trusttasks.org/spec/vault/credentials/query/0.1#response";
+    readonly isBearer: false;
+    readonly isProofRequired: false;
+    readonly isRecipientRequired: true;
+    readonly isIssuedAtRequired: false;
+    readonly payloadSchema: {
+        readonly $schema: "https://json-schema.org/draft/2020-12/schema";
+        readonly $ref: "#/$defs/Response";
+        readonly $defs: {
+            readonly Response: {
+                readonly $anchor: "response";
+                readonly title: "Vault Credentials Query — response payload";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["credentials"];
+                readonly properties: {
+                    readonly credentials: {
+                        readonly type: "array";
+                        readonly items: {
+                            readonly $ref: "#/$defs/CredentialDescriptor";
+                        };
+                        readonly description: "Matching descriptors. Empty when nothing matched — a successful answer, not an error.";
+                    };
+                    readonly ext: {
+                        readonly $ref: "#/$defs/Ext";
+                        readonly description: "Ecosystem-defined extension members per SPEC.md §4.5.1.";
+                    };
+                };
+            };
+            readonly CredentialDescriptor: {
+                readonly title: "Credential descriptor";
+                readonly description: "A body-free projection of a stored credential. Carries no claim content by construction.";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["id", "types", "status"];
+                readonly properties: {
+                    readonly id: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                        readonly maxLength: 256;
+                        readonly description: "Local handle. Opaque to the consumer; the id `get`, `archive`, `delete` and the rest are keyed on.";
+                    };
+                    readonly types: {
+                        readonly type: "array";
+                        readonly items: {
+                            readonly type: "string";
+                            readonly minLength: 1;
+                            readonly maxLength: 256;
+                        };
+                        readonly description: "VC `type` tags carried by the credential.";
+                    };
+                    readonly issuerDid: {
+                        readonly $ref: "#/$defs/Did";
+                    };
+                    readonly purpose: {
+                        readonly $ref: "#/$defs/CredentialPurpose";
+                    };
+                    readonly status: {
+                        readonly $ref: "#/$defs/CredentialStatus";
+                    };
+                    readonly lifecycle: {
+                        readonly $ref: "#/$defs/VaultLifecycle";
+                        readonly description: "Omitted for active credentials, so an active-only result is unchanged by this member's existence.";
+                    };
+                    readonly validFrom: {
+                        readonly type: "string";
+                        readonly format: "date-time";
+                    };
+                    readonly validUntil: {
+                        readonly type: "string";
+                        readonly format: "date-time";
+                    };
+                    readonly archivedAt: {
+                        readonly type: "string";
+                        readonly format: "date-time";
+                        readonly description: "Present iff `lifecycle` is `archived`.";
+                    };
+                    readonly deletedAt: {
+                        readonly type: "string";
+                        readonly format: "date-time";
+                        readonly description: "Present iff `lifecycle` is `deleted`.";
+                    };
+                    readonly graceUntil: {
+                        readonly type: "string";
+                        readonly format: "date-time";
+                        readonly description: "Present iff `lifecycle` is `deleted`. Restorable while now < graceUntil.";
+                    };
+                };
+            };
+            readonly CredentialStatus: {
+                readonly type: "string";
+                readonly enum: readonly ["valid", "expired", "revoked", "unknown"];
+                readonly description: "Validity, driven by the credential's own window and by status-list checks. Orthogonal to lifecycle.";
+            };
+            readonly CredentialPurpose: {
+                readonly type: "string";
+                readonly minLength: 1;
+                readonly maxLength: 128;
+                readonly description: "Semantic classification. `invite`, `membership`, `role`, `endorsement` and `personhood` are defined; a maintainer MAY use another token.";
+            };
+            readonly VaultLifecycle: {
+                readonly type: "string";
+                readonly enum: readonly ["active", "archived", "deleted"];
+                readonly description: "Archival state, chosen through this family. Orthogonal to validity.";
+            };
+            readonly Did: {
+                readonly type: "string";
+                readonly pattern: "^did:[a-z0-9]+:.+$";
+                readonly maxLength: 2048;
+            };
+            readonly Ext: {
+                readonly title: "Ext";
+                readonly description: "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.";
+                readonly type: "object";
+                readonly minProperties: 1;
+                readonly additionalProperties: true;
+                readonly propertyNames: {
+                    readonly pattern: "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$";
+                };
+            };
+        };
+    };
+};
+//# sourceMappingURL=payload.d.ts.map