@openvtc/trust-tasks 0.17.5 → 0.17.6

package/dist/persona/claim-types/list/1.0/payload.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"payload.d.ts","sourceRoot":"","sources":["../../../../../src/persona/claim-types/list/1.0/payload.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,mCAAmC,CAAC;AAGzG;;GAEG;AACH,MAAM,WAAW,4BAA4B;IAC3C,GAAG,CAAC,EAAE,GAAG,CAAC;CACX;AACD;;GAEG;AACH,MAAM,WAAW,oCAAoC;IACnD;;OAEG;IACH,eAAe,EAAE,MAAM,CAAC;IACxB;;;;OAIG;IACH,OAAO,EAAE;QACP,IAAI,EAAE,SAAS,CAAC;QAChB,WAAW,EAAE,WAAW,CAAC;QACzB,OAAO,EAAE,kBAAkB,CAAC;QAC5B;;WAEG;QACH,IAAI,EAAE,MAAM,CAAC;QACb;;WAEG;QACH,UAAU,CAAC,EAAE,OAAO,CAAC;QACrB;;;;WAIG;QACH,IAAI,CAAC,EACD,EAAE,GACF,CAAC,MAAM,CAAC,GACR,CAAC,MAAM,EAAE,MAAM,CAAC,GAChB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,GACxB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,GAChC,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,GACxC,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,GAChD,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,GACxD,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,GAChE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,GACxE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,GAChF,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,GACxF,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,GAChG,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,GACxG,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,GAChH;YACE,MAAM;YACN,MAAM;YACN,MAAM;YACN,MAAM;YACN,MAAM;YACN,MAAM;YACN,MAAM;YACN,MAAM;YACN,MAAM;YACN,MAAM;YACN,MAAM;YACN,MAAM;YACN,MAAM;YACN,MAAM;YACN,MAAM;SACP,GACD;YACE,MAAM;YACN,MAAM;YACN,MAAM;YACN,MAAM;YACN,MAAM;YACN,MAAM;YACN,MAAM;YACN,MAAM;YACN,MAAM;YACN,MAAM;YACN,MAAM;YACN,MAAM;YACN,MAAM;YACN,MAAM;YACN,MAAM;YACN,MAAM;SACP,CAAC;KACP,EAAE,CAAC;IACJ;;OAEG;IACH,YAAY,EAAE;QACZ,WAAW,EAAE,WAAW,CAAC;QACzB,OAAO,EAAE,kBAAkB,CAAC;QAC5B,IAAI,EAAE,MAAM,CAAC;KACd,CAAC;IACF;;OAEG;IACH,UAAU,EAAE;QACV;;WAEG;QACH,WAAW,EACP,EAAE,GACF,CAAC,MAAM,CAAC,GACR,CAAC,MAAM,EAAE,MAAM,CAAC,GAChB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,GACxB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,GAChC,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,GACxC,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,GAChD,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,GACxD,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;QACrE;;WAEG;QACH,OAAO,EACH,EAAE,GACF,CAAC,MAAM,CAAC,GACR,CAAC,MAAM,EAAE,MAAM,CAAC,GAChB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,GACxB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,GAChC,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,GACxC,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,GAChD,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,GACxD,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;QACrE;;WAEG;QACH,IAAI,EACA,EAAE,GACF,CAAC,MAAM,CAAC,GACR,CAAC,MAAM,EAAE,MAAM,CAAC,GAChB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,GACxB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,GAChC,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,GACxC,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,GAChD,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,GACxD,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,GAChE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,GACxE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,GAChF,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,GACxF,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,GAChG,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,GACxG,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,GAChH;YACE,MAAM;YACN,MAAM;YACN,MAAM;YACN,MAAM;YACN,MAAM;YACN,MAAM;YACN,MAAM;YACN,MAAM;YACN,MAAM;YACN,MAAM;YACN,MAAM;YACN,MAAM;YACN,MAAM;YACN,MAAM;YACN,MAAM;SACP,GACD;YACE,MAAM;YACN,MAAM;YACN,MAAM;YACN,MAAM;YACN,MAAM;YACN,MAAM;YACN,MAAM;YACN,MAAM;YACN,MAAM;YACN,MAAM;YACN,MAAM;YACN,MAAM;YACN,MAAM;YACN,MAAM;YACN,MAAM;YACN,MAAM;SACP,CAAC;KACP,CAAC;IACF,GAAG,CAAC,EAAE,GAAG,CAAC;CACX;AAED,kHAAkH;AAClH,YAAY,EAAE,SAAS,EAAE,GAAG,EAAE,kBAAkB,EAAE,WAAW,EAAE,CAAC;AAEhE,2BAA2B;AAC3B,eAAO,MAAM,QAAQ,EAAG,0DAAmE,CAAC;AAE5F,mEAAmE;AACnE,MAAM,MAAM,OAAO,GAAG,4BAA4B,CAAC;AAEnD,qEAAqE;AACrE,eAAO,MAAM,iBAAiB,EAAG,mEAA4E,CAAC;AAE9G,4EAA4E;AAC5E,MAAM,MAAM,QAAQ,GAAG,oCAAoC,CAAC;AAE5D;;;;;;;;GAQG;AACH,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA+KjB,CAAC;AAEX,mEAAmE;AACnE,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAsK1B,CAAC;AAEX;;;;;GAKG;AACH,eAAO,MAAM,IAAI;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAOP,CAAC;AAEX;;;;GAIG;AACH,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAOhB,CAAC"}

package/dist/persona/claim-types/list/1.0/payload.js

@@ -0,0 +1,389 @@
+/**
+ * Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
+ * Source: specs/persona/claim-types/list/1.0/payload.schema.json
+ */
+/** Trust Task type URI. */
+export const TYPE_URI = "https://trusttasks.org/spec/persona/claim-types/list/1.0";
+/** Trust Task response type URI (request type URI + "#response"). */
+export const RESPONSE_TYPE_URI = "https://trusttasks.org/spec/persona/claim-types/list/1.0#response";
+/**
+ * This specification's payload schema, as a value.
+ *
+ * SPEC.md §7.2 item 2 is performed against this. It is shipped as data
+ * rather than only as a `.json` file because TypeScript types are erased
+ * at runtime: without a schema a consumer has nothing to validate, and
+ * every REQUIRED payload member is optional in practice. Cross-file
+ * `$ref`s are already inlined, so it needs no resolver.
+ */
+export const PAYLOAD_SCHEMA = {
+    "$schema": "https://json-schema.org/draft/2020-12/schema",
+    "$id": "https://trusttasks.org/spec/persona/claim-types/list/1.0",
+    "title": "Persona Claim Types List — payload",
+    "description": "Serve the claim-type registry this agent resolves against. A client that cannot read the table has to ship a copy of it, and a copy is a re-sync obligation on every change.",
+    "type": "object",
+    "additionalProperties": false,
+    "properties": {
+        "ext": {
+            "$ref": "#/$defs/Ext"
+        }
+    },
+    "$defs": {
+        "Response": {
+            "$anchor": "response",
+            "title": "Persona Claim Types List — response payload",
+            "description": "Success response to persona/claim-types/list. Type https://trusttasks.org/spec/persona/claim-types/list/1.0#response.",
+            "type": "object",
+            "additionalProperties": false,
+            "required": [
+                "registryVersion",
+                "entries",
+                "unregistered",
+                "strictness"
+            ],
+            "properties": {
+                "registryVersion": {
+                    "type": "string",
+                    "maxLength": 32,
+                    "description": "Version of the core registry this agent implements — the version of _shared/claim-types.json, not of this task. A client caching the table keys the cache on this."
+                },
+                "entries": {
+                    "type": "array",
+                    "maxItems": 512,
+                    "description": "The registered tokens. Both exact tokens and family prefixes appear here, undistinguished: which one an entry is follows from whether a given token equals it or descends from it, and marking them would invite a client to walk only one kind.",
+                    "items": {
+                        "type": "object",
+                        "additionalProperties": false,
+                        "required": [
+                            "type",
+                            "sensitivity",
+                            "release",
+                            "mask"
+                        ],
+                        "properties": {
+                            "type": {
+                                "$ref": "#/$defs/ClaimType"
+                            },
+                            "sensitivity": {
+                                "$ref": "#/$defs/Sensitivity"
+                            },
+                            "release": {
+                                "$ref": "#/$defs/ReleaseRequirement"
+                            },
+                            "mask": {
+                                "type": "string",
+                                "maxLength": 32,
+                                "description": "Mask style, independent of sensitivity: any style that is not `none` is masked on screen whatever the sensitivity. Named rather than enumerated inline so a maintainer may serve a style this version does not list; a client that does not recognise a style MUST treat it as `full` rather than as `none`."
+                            },
+                            "minimumSet": {
+                                "type": "boolean",
+                                "description": "Marks a type a community may ask for without it being remarkable. The minimum set contains only normal-sensitivity, consent-release types; that is a rule rather than a coincidence."
+                            },
+                            "oidc": {
+                                "type": "array",
+                                "maxItems": 16,
+                                "items": {
+                                    "type": "string",
+                                    "maxLength": 64
+                                },
+                                "description": "OIDC standard claims this type answers. A recorded mapping, applied at presentation — the token stays the maintainer's own and no external vocabulary is primary."
+                            }
+                        }
+                    }
+                },
+                "unregistered": {
+                    "type": "object",
+                    "additionalProperties": false,
+                    "required": [
+                        "sensitivity",
+                        "release",
+                        "mask"
+                    ],
+                    "description": "The floor: what a token with no entry and no registered prefix resolves to. Served rather than assumed, because a client that hard-codes it cannot be tightened by a maintainer that raises it.",
+                    "properties": {
+                        "sensitivity": {
+                            "$ref": "#/$defs/Sensitivity"
+                        },
+                        "release": {
+                            "$ref": "#/$defs/ReleaseRequirement"
+                        },
+                        "mask": {
+                            "type": "string",
+                            "maxLength": 32
+                        }
+                    }
+                },
+                "strictness": {
+                    "type": "object",
+                    "additionalProperties": false,
+                    "required": [
+                        "sensitivity",
+                        "release",
+                        "mask"
+                    ],
+                    "description": "Each axis ordered MOST PROTECTIVE FIRST. This is what makes rule 3 computable by a client: resolution takes the longest registered prefix and the unregistered floor and keeps whichever is more protective, which requires an ordering the client did not invent.",
+                    "properties": {
+                        "sensitivity": {
+                            "type": "array",
+                            "maxItems": 8,
+                            "items": {
+                                "type": "string",
+                                "maxLength": 32
+                            }
+                        },
+                        "release": {
+                            "type": "array",
+                            "maxItems": 8,
+                            "items": {
+                                "type": "string",
+                                "maxLength": 32
+                            }
+                        },
+                        "mask": {
+                            "type": "array",
+                            "maxItems": 16,
+                            "items": {
+                                "type": "string",
+                                "maxLength": 32
+                            }
+                        }
+                    }
+                },
+                "ext": {
+                    "$ref": "#/$defs/Ext"
+                }
+            }
+        },
+        "Ext": {
+            "title": "Ext",
+            "description": "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.",
+            "type": "object",
+            "minProperties": 1,
+            "additionalProperties": true,
+            "propertyNames": {
+                "pattern": "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$"
+            }
+        },
+        "ReleaseRequirement": {
+            "title": "ReleaseRequirement",
+            "description": "What it takes to let a value LEAVE. Distinct from `Sensitivity`, which governs showing it to the holder.\n\n`consent` is the ordinary gate: `persona/disclosure/preview` renders what would leave and `persona/disclosure/present` releases it, so a human sees it once.\n\n`stepUp` additionally requires a fresh authentication bound to THAT preview — not to the session. Without the binding, \"each time\" degrades into \"once per login\", which is the failure the requirement exists to prevent; the single-use `previewId` the preview already mints is what an implementation binds to. A maintainer MUST refuse `persona/disclosure/present` for a `stepUp` attribute when no such approval accompanies it.\n\nAbsent means *not decided by the holder* and resolves from the claim-type registry, which defaults `payment.*` and `gov.*` to `stepUp`.",
+            "type": "string",
+            "enum": [
+                "consent",
+                "stepUp"
+            ]
+        },
+        "Sensitivity": {
+            "title": "Sensitivity",
+            "description": "How carefully a value is shown TO ITS OWN HOLDER. `high` means a consumer masks it by default, reveals it one attribute at a time on a deliberate act, and — the half that is not cosmetic — omits it from a listing that did not ask for sensitive values.\n\nAbsent means *not decided by the holder*, not `normal`: a consumer resolves it from the claim-type registry (see CLAIM-TYPES.md §4), which is why this member is optional and why an unregistered token resolves conservatively rather than permissively.\n\nDistinct from how linkable the value is. A payment card is highly sensitive and barely linkable — every card number is unique, so knowing one tells a second verifier nothing about the first. Reading either as a proxy for the other produces a consumer that hides the wrong things.",
+            "type": "string",
+            "enum": [
+                "normal",
+                "high"
+            ]
+        },
+        "ClaimType": {
+            "title": "ClaimType",
+            "description": "The vocabulary token naming what a value IS — `name.legal`, `phone.mobile`, `address.postal`, `person.birthDate`. Dotted, most-general segment first, so that a consumer with no knowledge of the specific token can still group by its prefix.\n\nThe token is the maintainer's own; no external vocabulary is primary. External vocabularies (vCard/jCard, OIDC standard claims, schema.org) are mappings applied at PRESENTATION by a renderer, not at rest, so that a query written in any of them can be matched without the store having to live inside any one of them.\n\nThe `x:` prefix is an open extension namespace and is not decoration. The closest prior art — Windows CardSpace's self-issued card — supported exactly fifteen predefined claim types with no extensibility, and that is the specific way it failed the requirement a holder actually has. An `x:` attribute stores, composes, binds and discloses exactly like a known one; it renders generically and matches only an explicit query.",
+            "type": "string",
+            "minLength": 1,
+            "maxLength": 128,
+            "pattern": "^(x:)?[a-z][a-zA-Z0-9]*(\\.[a-z][a-zA-Z0-9]*)*$"
+        }
+    }
+};
+/** As {@link PAYLOAD_SCHEMA}, for the success-response variant. */
+export const RESPONSE_PAYLOAD_SCHEMA = {
+    "$schema": "https://json-schema.org/draft/2020-12/schema",
+    "$ref": "#/$defs/Response",
+    "$defs": {
+        "Response": {
+            "$anchor": "response",
+            "title": "Persona Claim Types List — response payload",
+            "description": "Success response to persona/claim-types/list. Type https://trusttasks.org/spec/persona/claim-types/list/1.0#response.",
+            "type": "object",
+            "additionalProperties": false,
+            "required": [
+                "registryVersion",
+                "entries",
+                "unregistered",
+                "strictness"
+            ],
+            "properties": {
+                "registryVersion": {
+                    "type": "string",
+                    "maxLength": 32,
+                    "description": "Version of the core registry this agent implements — the version of _shared/claim-types.json, not of this task. A client caching the table keys the cache on this."
+                },
+                "entries": {
+                    "type": "array",
+                    "maxItems": 512,
+                    "description": "The registered tokens. Both exact tokens and family prefixes appear here, undistinguished: which one an entry is follows from whether a given token equals it or descends from it, and marking them would invite a client to walk only one kind.",
+                    "items": {
+                        "type": "object",
+                        "additionalProperties": false,
+                        "required": [
+                            "type",
+                            "sensitivity",
+                            "release",
+                            "mask"
+                        ],
+                        "properties": {
+                            "type": {
+                                "$ref": "#/$defs/ClaimType"
+                            },
+                            "sensitivity": {
+                                "$ref": "#/$defs/Sensitivity"
+                            },
+                            "release": {
+                                "$ref": "#/$defs/ReleaseRequirement"
+                            },
+                            "mask": {
+                                "type": "string",
+                                "maxLength": 32,
+                                "description": "Mask style, independent of sensitivity: any style that is not `none` is masked on screen whatever the sensitivity. Named rather than enumerated inline so a maintainer may serve a style this version does not list; a client that does not recognise a style MUST treat it as `full` rather than as `none`."
+                            },
+                            "minimumSet": {
+                                "type": "boolean",
+                                "description": "Marks a type a community may ask for without it being remarkable. The minimum set contains only normal-sensitivity, consent-release types; that is a rule rather than a coincidence."
+                            },
+                            "oidc": {
+                                "type": "array",
+                                "maxItems": 16,
+                                "items": {
+                                    "type": "string",
+                                    "maxLength": 64
+                                },
+                                "description": "OIDC standard claims this type answers. A recorded mapping, applied at presentation — the token stays the maintainer's own and no external vocabulary is primary."
+                            }
+                        }
+                    }
+                },
+                "unregistered": {
+                    "type": "object",
+                    "additionalProperties": false,
+                    "required": [
+                        "sensitivity",
+                        "release",
+                        "mask"
+                    ],
+                    "description": "The floor: what a token with no entry and no registered prefix resolves to. Served rather than assumed, because a client that hard-codes it cannot be tightened by a maintainer that raises it.",
+                    "properties": {
+                        "sensitivity": {
+                            "$ref": "#/$defs/Sensitivity"
+                        },
+                        "release": {
+                            "$ref": "#/$defs/ReleaseRequirement"
+                        },
+                        "mask": {
+                            "type": "string",
+                            "maxLength": 32
+                        }
+                    }
+                },
+                "strictness": {
+                    "type": "object",
+                    "additionalProperties": false,
+                    "required": [
+                        "sensitivity",
+                        "release",
+                        "mask"
+                    ],
+                    "description": "Each axis ordered MOST PROTECTIVE FIRST. This is what makes rule 3 computable by a client: resolution takes the longest registered prefix and the unregistered floor and keeps whichever is more protective, which requires an ordering the client did not invent.",
+                    "properties": {
+                        "sensitivity": {
+                            "type": "array",
+                            "maxItems": 8,
+                            "items": {
+                                "type": "string",
+                                "maxLength": 32
+                            }
+                        },
+                        "release": {
+                            "type": "array",
+                            "maxItems": 8,
+                            "items": {
+                                "type": "string",
+                                "maxLength": 32
+                            }
+                        },
+                        "mask": {
+                            "type": "array",
+                            "maxItems": 16,
+                            "items": {
+                                "type": "string",
+                                "maxLength": 32
+                            }
+                        }
+                    }
+                },
+                "ext": {
+                    "$ref": "#/$defs/Ext"
+                }
+            }
+        },
+        "Ext": {
+            "title": "Ext",
+            "description": "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.",
+            "type": "object",
+            "minProperties": 1,
+            "additionalProperties": true,
+            "propertyNames": {
+                "pattern": "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$"
+            }
+        },
+        "ReleaseRequirement": {
+            "title": "ReleaseRequirement",
+            "description": "What it takes to let a value LEAVE. Distinct from `Sensitivity`, which governs showing it to the holder.\n\n`consent` is the ordinary gate: `persona/disclosure/preview` renders what would leave and `persona/disclosure/present` releases it, so a human sees it once.\n\n`stepUp` additionally requires a fresh authentication bound to THAT preview — not to the session. Without the binding, \"each time\" degrades into \"once per login\", which is the failure the requirement exists to prevent; the single-use `previewId` the preview already mints is what an implementation binds to. A maintainer MUST refuse `persona/disclosure/present` for a `stepUp` attribute when no such approval accompanies it.\n\nAbsent means *not decided by the holder* and resolves from the claim-type registry, which defaults `payment.*` and `gov.*` to `stepUp`.",
+            "type": "string",
+            "enum": [
+                "consent",
+                "stepUp"
+            ]
+        },
+        "Sensitivity": {
+            "title": "Sensitivity",
+            "description": "How carefully a value is shown TO ITS OWN HOLDER. `high` means a consumer masks it by default, reveals it one attribute at a time on a deliberate act, and — the half that is not cosmetic — omits it from a listing that did not ask for sensitive values.\n\nAbsent means *not decided by the holder*, not `normal`: a consumer resolves it from the claim-type registry (see CLAIM-TYPES.md §4), which is why this member is optional and why an unregistered token resolves conservatively rather than permissively.\n\nDistinct from how linkable the value is. A payment card is highly sensitive and barely linkable — every card number is unique, so knowing one tells a second verifier nothing about the first. Reading either as a proxy for the other produces a consumer that hides the wrong things.",
+            "type": "string",
+            "enum": [
+                "normal",
+                "high"
+            ]
+        },
+        "ClaimType": {
+            "title": "ClaimType",
+            "description": "The vocabulary token naming what a value IS — `name.legal`, `phone.mobile`, `address.postal`, `person.birthDate`. Dotted, most-general segment first, so that a consumer with no knowledge of the specific token can still group by its prefix.\n\nThe token is the maintainer's own; no external vocabulary is primary. External vocabularies (vCard/jCard, OIDC standard claims, schema.org) are mappings applied at PRESENTATION by a renderer, not at rest, so that a query written in any of them can be matched without the store having to live inside any one of them.\n\nThe `x:` prefix is an open extension namespace and is not decoration. The closest prior art — Windows CardSpace's self-issued card — supported exactly fifteen predefined claim types with no extensibility, and that is the specific way it failed the requirement a holder actually has. An `x:` attribute stores, composes, binds and discloses exactly like a known one; it renders generically and matches only an explicit query.",
+            "type": "string",
+            "minLength": 1,
+            "maxLength": 128,
+            "pattern": "^(x:)?[a-z][a-zA-Z0-9]*(\\.[a-z][a-zA-Z0-9]*)*$"
+        }
+    }
+};
+/**
+ * SPEC.md §7.2 policy for the request variant, from this specification's
+ * front matter. Pass to `consumeInbound` — items 5b, 7 and 8 are
+ * per-specification and cannot be derived from the document alone, and
+ * item 2 needs the schema this carries.
+ */
+export const SPEC = {
+    typeUri: TYPE_URI,
+    isBearer: false,
+    isProofRequired: true,
+    isRecipientRequired: true,
+    isIssuedAtRequired: false,
+    payloadSchema: PAYLOAD_SCHEMA,
+};
+/**
+ * SPEC.md §7.2 policy for the success-response variant. `isRecipientRequired`
+ * tracks the *issuer* party's requirement because a response swaps the
+ * parties (§7.3 item 5).
+ */
+export const RESPONSE_SPEC = {
+    typeUri: RESPONSE_TYPE_URI,
+    isBearer: false,
+    isProofRequired: true,
+    isRecipientRequired: true,
+    isIssuedAtRequired: false,
+    payloadSchema: RESPONSE_PAYLOAD_SCHEMA,
+};
+//# sourceMappingURL=payload.js.map

package/dist/persona/claim-types/list/1.0/payload.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"payload.js","sourceRoot":"","sources":["../../../../../src/persona/claim-types/list/1.0/payload.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAgMH,2BAA2B;AAC3B,MAAM,CAAC,MAAM,QAAQ,GAAG,0DAAmE,CAAC;AAK5F,qEAAqE;AACrE,MAAM,CAAC,MAAM,iBAAiB,GAAG,mEAA4E,CAAC;AAK9G;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,SAAS,EAAE,8CAA8C;IACzD,KAAK,EAAE,0DAA0D;IACjE,OAAO,EAAE,oCAAoC;IAC7C,aAAa,EAAE,8KAA8K;IAC7L,MAAM,EAAE,QAAQ;IAChB,sBAAsB,EAAE,KAAK;IAC7B,YAAY,EAAE;QACZ,KAAK,EAAE;YACL,MAAM,EAAE,aAAa;SACtB;KACF;IACD,OAAO,EAAE;QACP,UAAU,EAAE;YACV,SAAS,EAAE,UAAU;YACrB,OAAO,EAAE,6CAA6C;YACtD,aAAa,EAAE,uHAAuH;YACtI,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,iBAAiB;gBACjB,SAAS;gBACT,cAAc;gBACd,YAAY;aACb;YACD,YAAY,EAAE;gBACZ,iBAAiB,EAAE;oBACjB,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,EAAE;oBACf,aAAa,EAAE,oKAAoK;iBACpL;gBACD,SAAS,EAAE;oBACT,MAAM,EAAE,OAAO;oBACf,UAAU,EAAE,GAAG;oBACf,aAAa,EAAE,kPAAkP;oBACjQ,OAAO,EAAE;wBACP,MAAM,EAAE,QAAQ;wBAChB,sBAAsB,EAAE,KAAK;wBAC7B,UAAU,EAAE;4BACV,MAAM;4BACN,aAAa;4BACb,SAAS;4BACT,MAAM;yBACP;wBACD,YAAY,EAAE;4BACZ,MAAM,EAAE;gCACN,MAAM,EAAE,mBAAmB;6BAC5B;4BACD,aAAa,EAAE;gCACb,MAAM,EAAE,qBAAqB;6BAC9B;4BACD,SAAS,EAAE;gCACT,MAAM,EAAE,4BAA4B;6BACrC;4BACD,MAAM,EAAE;gCACN,MAAM,EAAE,QAAQ;gCAChB,WAAW,EAAE,EAAE;gCACf,aAAa,EAAE,8SAA8S;6BAC9T;4BACD,YAAY,EAAE;gCACZ,MAAM,EAAE,SAAS;gCACjB,aAAa,EAAE,sLAAsL;6BACtM;4BACD,MAAM,EAAE;gCACN,MAAM,EAAE,OAAO;gCACf,UAAU,EAAE,EAAE;gCACd,OAAO,EAAE;oCACP,MAAM,EAAE,QAAQ;oCAChB,WAAW,EAAE,EAAE;iCAChB;gCACD,aAAa,EAAE,mKAAmK;6BACnL;yBACF;qBACF;iBACF;gBACD,cAAc,EAAE;oBACd,MAAM,EAAE,QAAQ;oBAChB,sBAAsB,EAAE,KAAK;oBAC7B,UAAU,EAAE;wBACV,aAAa;wBACb,SAAS;wBACT,MAAM;qBACP;oBACD,aAAa,EAAE,iMAAiM;oBAChN,YAAY,EAAE;wBACZ,aAAa,EAAE;4BACb,MAAM,EAAE,qBAAqB;yBAC9B;wBACD,SAAS,EAAE;4BACT,MAAM,EAAE,4BAA4B;yBACrC;wBACD,MAAM,EAAE;4BACN,MAAM,EAAE,QAAQ;4BAChB,WAAW,EAAE,EAAE;yBAChB;qBACF;iBACF;gBACD,YAAY,EAAE;oBACZ,MAAM,EAAE,QAAQ;oBAChB,sBAAsB,EAAE,KAAK;oBAC7B,UAAU,EAAE;wBACV,aAAa;wBACb,SAAS;wBACT,MAAM;qBACP;oBACD,aAAa,EAAE,oQAAoQ;oBACnR,YAAY,EAAE;wBACZ,aAAa,EAAE;4BACb,MAAM,EAAE,OAAO;4BACf,UAAU,EAAE,CAAC;4BACb,OAAO,EAAE;gCACP,MAAM,EAAE,QAAQ;gCAChB,WAAW,EAAE,EAAE;6BAChB;yBACF;wBACD,SAAS,EAAE;4BACT,MAAM,EAAE,OAAO;4BACf,UAAU,EAAE,CAAC;4BACb,OAAO,EAAE;gCACP,MAAM,EAAE,QAAQ;gCAChB,WAAW,EAAE,EAAE;6BAChB;yBACF;wBACD,MAAM,EAAE;4BACN,MAAM,EAAE,OAAO;4BACf,UAAU,EAAE,EAAE;4BACd,OAAO,EAAE;gCACP,MAAM,EAAE,QAAQ;gCAChB,WAAW,EAAE,EAAE;6BAChB;yBACF;qBACF;iBACF;gBACD,KAAK,EAAE;oBACL,MAAM,EAAE,aAAa;iBACtB;aACF;SACF;QACD,KAAK,EAAE;YACL,OAAO,EAAE,KAAK;YACd,aAAa,EAAE,uKAAuK;YACtL,MAAM,EAAE,QAAQ;YAChB,eAAe,EAAE,CAAC;YAClB,sBAAsB,EAAE,IAAI;YAC5B,eAAe,EAAE;gBACf,SAAS,EAAE,mCAAmC;aAC/C;SACF;QACD,oBAAoB,EAAE;YACpB,OAAO,EAAE,oBAAoB;YAC7B,aAAa,EAAE,q0BAAq0B;YACp1B,MAAM,EAAE,QAAQ;YAChB,MAAM,EAAE;gBACN,SAAS;gBACT,QAAQ;aACT;SACF;QACD,aAAa,EAAE;YACb,OAAO,EAAE,aAAa;YACtB,aAAa,EAAE,qxBAAqxB;YACpyB,MAAM,EAAE,QAAQ;YAChB,MAAM,EAAE;gBACN,QAAQ;gBACR,MAAM;aACP;SACF;QACD,WAAW,EAAE;YACX,OAAO,EAAE,WAAW;YACpB,aAAa,EAAE,29BAA29B;YAC1+B,MAAM,EAAE,QAAQ;YAChB,WAAW,EAAE,CAAC;YACd,WAAW,EAAE,GAAG;YAChB,SAAS,EAAE,iDAAiD;SAC7D;KACF;CACO,CAAC;AAEX,mEAAmE;AACnE,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,SAAS,EAAE,8CAA8C;IACzD,MAAM,EAAE,kBAAkB;IAC1B,OAAO,EAAE;QACP,UAAU,EAAE;YACV,SAAS,EAAE,UAAU;YACrB,OAAO,EAAE,6CAA6C;YACtD,aAAa,EAAE,uHAAuH;YACtI,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,iBAAiB;gBACjB,SAAS;gBACT,cAAc;gBACd,YAAY;aACb;YACD,YAAY,EAAE;gBACZ,iBAAiB,EAAE;oBACjB,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,EAAE;oBACf,aAAa,EAAE,oKAAoK;iBACpL;gBACD,SAAS,EAAE;oBACT,MAAM,EAAE,OAAO;oBACf,UAAU,EAAE,GAAG;oBACf,aAAa,EAAE,kPAAkP;oBACjQ,OAAO,EAAE;wBACP,MAAM,EAAE,QAAQ;wBAChB,sBAAsB,EAAE,KAAK;wBAC7B,UAAU,EAAE;4BACV,MAAM;4BACN,aAAa;4BACb,SAAS;4BACT,MAAM;yBACP;wBACD,YAAY,EAAE;4BACZ,MAAM,EAAE;gCACN,MAAM,EAAE,mBAAmB;6BAC5B;4BACD,aAAa,EAAE;gCACb,MAAM,EAAE,qBAAqB;6BAC9B;4BACD,SAAS,EAAE;gCACT,MAAM,EAAE,4BAA4B;6BACrC;4BACD,MAAM,EAAE;gCACN,MAAM,EAAE,QAAQ;gCAChB,WAAW,EAAE,EAAE;gCACf,aAAa,EAAE,8SAA8S;6BAC9T;4BACD,YAAY,EAAE;gCACZ,MAAM,EAAE,SAAS;gCACjB,aAAa,EAAE,sLAAsL;6BACtM;4BACD,MAAM,EAAE;gCACN,MAAM,EAAE,OAAO;gCACf,UAAU,EAAE,EAAE;gCACd,OAAO,EAAE;oCACP,MAAM,EAAE,QAAQ;oCAChB,WAAW,EAAE,EAAE;iCAChB;gCACD,aAAa,EAAE,mKAAmK;6BACnL;yBACF;qBACF;iBACF;gBACD,cAAc,EAAE;oBACd,MAAM,EAAE,QAAQ;oBAChB,sBAAsB,EAAE,KAAK;oBAC7B,UAAU,EAAE;wBACV,aAAa;wBACb,SAAS;wBACT,MAAM;qBACP;oBACD,aAAa,EAAE,iMAAiM;oBAChN,YAAY,EAAE;wBACZ,aAAa,EAAE;4BACb,MAAM,EAAE,qBAAqB;yBAC9B;wBACD,SAAS,EAAE;4BACT,MAAM,EAAE,4BAA4B;yBACrC;wBACD,MAAM,EAAE;4BACN,MAAM,EAAE,QAAQ;4BAChB,WAAW,EAAE,EAAE;yBAChB;qBACF;iBACF;gBACD,YAAY,EAAE;oBACZ,MAAM,EAAE,QAAQ;oBAChB,sBAAsB,EAAE,KAAK;oBAC7B,UAAU,EAAE;wBACV,aAAa;wBACb,SAAS;wBACT,MAAM;qBACP;oBACD,aAAa,EAAE,oQAAoQ;oBACnR,YAAY,EAAE;wBACZ,aAAa,EAAE;4BACb,MAAM,EAAE,OAAO;4BACf,UAAU,EAAE,CAAC;4BACb,OAAO,EAAE;gCACP,MAAM,EAAE,QAAQ;gCAChB,WAAW,EAAE,EAAE;6BAChB;yBACF;wBACD,SAAS,EAAE;4BACT,MAAM,EAAE,OAAO;4BACf,UAAU,EAAE,CAAC;4BACb,OAAO,EAAE;gCACP,MAAM,EAAE,QAAQ;gCAChB,WAAW,EAAE,EAAE;6BAChB;yBACF;wBACD,MAAM,EAAE;4BACN,MAAM,EAAE,OAAO;4BACf,UAAU,EAAE,EAAE;4BACd,OAAO,EAAE;gCACP,MAAM,EAAE,QAAQ;gCAChB,WAAW,EAAE,EAAE;6BAChB;yBACF;qBACF;iBACF;gBACD,KAAK,EAAE;oBACL,MAAM,EAAE,aAAa;iBACtB;aACF;SACF;QACD,KAAK,EAAE;YACL,OAAO,EAAE,KAAK;YACd,aAAa,EAAE,uKAAuK;YACtL,MAAM,EAAE,QAAQ;YAChB,eAAe,EAAE,CAAC;YAClB,sBAAsB,EAAE,IAAI;YAC5B,eAAe,EAAE;gBACf,SAAS,EAAE,mCAAmC;aAC/C;SACF;QACD,oBAAoB,EAAE;YACpB,OAAO,EAAE,oBAAoB;YAC7B,aAAa,EAAE,q0BAAq0B;YACp1B,MAAM,EAAE,QAAQ;YAChB,MAAM,EAAE;gBACN,SAAS;gBACT,QAAQ;aACT;SACF;QACD,aAAa,EAAE;YACb,OAAO,EAAE,aAAa;YACtB,aAAa,EAAE,qxBAAqxB;YACpyB,MAAM,EAAE,QAAQ;YAChB,MAAM,EAAE;gBACN,QAAQ;gBACR,MAAM;aACP;SACF;QACD,WAAW,EAAE;YACX,OAAO,EAAE,WAAW;YACpB,aAAa,EAAE,29BAA29B;YAC1+B,MAAM,EAAE,QAAQ;YAChB,WAAW,EAAE,CAAC;YACd,WAAW,EAAE,GAAG;YAChB,SAAS,EAAE,iDAAiD;SAC7D;KACF;CACO,CAAC;AAEX;;;;;GAKG;AACH,MAAM,CAAC,MAAM,IAAI,GAAG;IAClB,OAAO,EAAE,QAAQ;IACjB,QAAQ,EAAE,KAAK;IACf,eAAe,EAAE,IAAI;IACrB,mBAAmB,EAAE,IAAI;IACzB,kBAAkB,EAAE,KAAK;IACzB,aAAa,EAAE,cAAc;CACrB,CAAC;AAEX;;;;GAIG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,OAAO,EAAE,iBAAiB;IAC1B,QAAQ,EAAE,KAAK;IACf,eAAe,EAAE,IAAI;IACrB,mBAAmB,EAAE,IAAI;IACzB,kBAAkB,EAAE,KAAK;IACzB,aAAa,EAAE,uBAAuB;CAC9B,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openvtc/trust-tasks",
-  "version": "0.17.5",
+  "version": "0.17.6",
   "description": "Generated TypeScript bindings for the Trust Tasks framework registry.",
   "type": "module",
   "main": "./dist/index.js",