@openvtc/trust-tasks 0.19.11 → 0.19.13

package/dist/vtc/join-requests/supplement/0.1/payload.js

@@ -0,0 +1,319 @@
+/**
+ * Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
+ * Source: specs/vtc/join-requests/supplement/0.1/payload.schema.json
+ */
+/** Trust Task type URI. */
+export const TYPE_URI = "https://trusttasks.org/spec/vtc/join-requests/supplement/0.1";
+/** Trust Task response type URI (request type URI + "#response"). */
+export const RESPONSE_TYPE_URI = "https://trusttasks.org/spec/vtc/join-requests/supplement/0.1#response";
+/**
+ * This specification's payload schema, as a value.
+ *
+ * SPEC.md §7.2 item 2 is performed against this. It is shipped as data
+ * rather than only as a `.json` file because TypeScript types are erased
+ * at runtime: without a schema a consumer has nothing to validate, and
+ * every REQUIRED payload member is optional in practice. Cross-file
+ * `$ref`s are already inlined, so it needs no resolver.
+ */
+export const PAYLOAD_SCHEMA = {
+    "$schema": "https://json-schema.org/draft/2020-12/schema",
+    "$id": "https://trusttasks.org/spec/vtc/join-requests/supplement/0.1",
+    "title": "VTC Join-Requests Supplement — payload",
+    "description": "The evidence an applicant offers in answer to a community's request for more, against the join request they already have open. The outer document members (id, type, issuer, recipient, issuedAt, expiresAt, proof) are owned by the framework — SPEC §6.3.",
+    "type": "object",
+    "additionalProperties": false,
+    "required": [
+        "vp"
+    ],
+    "properties": {
+        "vp": {
+            "type": "object",
+            "description": "The Verifiable Presentation satisfying the `presentationDefinition` the community returned when it deferred. It REPLACES the presentation on the request rather than adding to it, so it carries everything the community requires and not only the shortfall — see the spec's Definitions."
+        },
+        "requestId": {
+            "type": "string",
+            "minLength": 1,
+            "description": "The request to supplement. OPTIONAL: an applicant whose submit response was lost never received one, and the consumer then resolves the request from the authenticated applicant. A consumer given this value MUST prefer it over inferring the request from the caller."
+        },
+        "extensions": {
+            "type": "object",
+            "description": "An opaque bag the community stores verbatim and this task does not interpret. Replaces the bag on the request on the same terms as `vp`."
+        },
+        "ext": {
+            "$ref": "#/$defs/Ext"
+        }
+    },
+    "$defs": {
+        "Response": {
+            "$anchor": "response",
+            "title": "VTC Join-Requests Supplement — response payload",
+            "type": "object",
+            "additionalProperties": false,
+            "required": [
+                "requestId",
+                "verdict"
+            ],
+            "description": "The community's fresh decision on the re-presented evidence. Failures use trust-task-error, not this shape.",
+            "properties": {
+                "requestId": {
+                    "type": "string",
+                    "minLength": 1,
+                    "description": "The request that was re-decided (a UUID). Returned even when the request omitted it, so an applicant who used the id-less form learns which request they answered."
+                },
+                "verdict": {
+                    "$ref": "#/$defs/Verdict",
+                    "description": "What the community decided on the new evidence, in the same shape `vtc/join-requests/submit` returns. MAY be any outcome a submission can produce, including a further request for more evidence and including a refusal."
+                },
+                "ext": {
+                    "$ref": "#/$defs/Ext"
+                }
+            }
+        },
+        "Ext": {
+            "title": "Ext",
+            "description": "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.",
+            "type": "object",
+            "minProperties": 1,
+            "additionalProperties": true,
+            "propertyNames": {
+                "pattern": "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$"
+            }
+        },
+        "Verdict": {
+            "$anchor": "verdict",
+            "title": "Verdict",
+            "type": "object",
+            "additionalProperties": false,
+            "required": [
+                "effect",
+                "with"
+            ],
+            "description": "A ceremony decision: the effect, plus its effect-dependent detail.",
+            "properties": {
+                "effect": {
+                    "$ref": "#/$defs/VerdictEffect"
+                },
+                "with": {
+                    "$ref": "#/$defs/VerdictWith"
+                }
+            }
+        },
+        "VerdictWith": {
+            "$anchor": "verdictWith",
+            "title": "VerdictWith",
+            "type": "object",
+            "additionalProperties": false,
+            "description": "The effect-dependent detail of a verdict.\n\nEvery member is optional at the schema level and which ones are meaningful depends on `effect`: `role` / `obligations` / `bundleRef` on `allow`, `code` / `reason` on `deny`, `queue` / `reason` on `refer`, `needs` / `presentationDefinition` on `requestMore`. The dependency is stated here rather than enforced by `if`/`then` per effect, so that the shape stays a single flat object a generated type can carry without a discriminated union per family — a deliberate trade of schema strictness for implementability, and the reason a consumer MUST branch on `effect` rather than on which members happen to be present.",
+            "properties": {
+                "role": {
+                    "type": "string",
+                    "minLength": 1,
+                    "description": "The granted local role. `allow` only."
+                },
+                "obligations": {
+                    "type": "object",
+                    "description": "Conditions attached to the grant. `allow` only."
+                },
+                "bundleRef": {
+                    "type": "object",
+                    "description": "Pointer to a sealed credential bundle, added by the community where issuance occurred rather than emitted by the policy. `allow` only."
+                },
+                "code": {
+                    "type": "string",
+                    "minLength": 1,
+                    "description": "Stable refusal code, safe to branch on. `deny` only."
+                },
+                "reason": {
+                    "type": [
+                        "string",
+                        "null"
+                    ],
+                    "maxLength": 1024,
+                    "description": "Elaboration in prose, when the decider gave one. `deny` and `refer`."
+                },
+                "queue": {
+                    "type": "string",
+                    "minLength": 1,
+                    "description": "Which review queue the decision was parked in, so an applicant can be told who now holds it. `refer` only."
+                },
+                "needs": {
+                    "type": "array",
+                    "items": {
+                        "type": "string",
+                        "minLength": 1
+                    },
+                    "description": "What further evidence is required, named so the applicant can act without a support conversation. `requestMore` only."
+                },
+                "presentationDefinition": {
+                    "type": "object",
+                    "description": "A machine-readable statement of the same request, so a wallet can satisfy it without a human reading `needs`. `requestMore` only."
+                }
+            }
+        },
+        "VerdictEffect": {
+            "$anchor": "verdictEffect",
+            "title": "VerdictEffect",
+            "type": "string",
+            "enum": [
+                "allow",
+                "deny",
+                "refer",
+                "requestMore"
+            ],
+            "description": "What the policy decided.\n\n`allow` — admitted. `deny` — refused, terminally for this submission. `refer` — parked for a human or quorum decision; the applicant is neither in nor out. `requestMore` — the policy cannot decide yet and names what further evidence it needs.\n\nThe four are not reducible to a pending/decided pair. `refer` and `requestMore` are both 'not decided', but they place the next action with different parties: `refer` waits on the community, `requestMore` waits on the applicant. A consumer that cannot tell them apart cannot tell a user whether to wait or to act."
+        }
+    }
+};
+/** As {@link PAYLOAD_SCHEMA}, for the success-response variant. */
+export const RESPONSE_PAYLOAD_SCHEMA = {
+    "$schema": "https://json-schema.org/draft/2020-12/schema",
+    "$ref": "#/$defs/Response",
+    "$defs": {
+        "Response": {
+            "$anchor": "response",
+            "title": "VTC Join-Requests Supplement — response payload",
+            "type": "object",
+            "additionalProperties": false,
+            "required": [
+                "requestId",
+                "verdict"
+            ],
+            "description": "The community's fresh decision on the re-presented evidence. Failures use trust-task-error, not this shape.",
+            "properties": {
+                "requestId": {
+                    "type": "string",
+                    "minLength": 1,
+                    "description": "The request that was re-decided (a UUID). Returned even when the request omitted it, so an applicant who used the id-less form learns which request they answered."
+                },
+                "verdict": {
+                    "$ref": "#/$defs/Verdict",
+                    "description": "What the community decided on the new evidence, in the same shape `vtc/join-requests/submit` returns. MAY be any outcome a submission can produce, including a further request for more evidence and including a refusal."
+                },
+                "ext": {
+                    "$ref": "#/$defs/Ext"
+                }
+            }
+        },
+        "Ext": {
+            "title": "Ext",
+            "description": "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.",
+            "type": "object",
+            "minProperties": 1,
+            "additionalProperties": true,
+            "propertyNames": {
+                "pattern": "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$"
+            }
+        },
+        "Verdict": {
+            "$anchor": "verdict",
+            "title": "Verdict",
+            "type": "object",
+            "additionalProperties": false,
+            "required": [
+                "effect",
+                "with"
+            ],
+            "description": "A ceremony decision: the effect, plus its effect-dependent detail.",
+            "properties": {
+                "effect": {
+                    "$ref": "#/$defs/VerdictEffect"
+                },
+                "with": {
+                    "$ref": "#/$defs/VerdictWith"
+                }
+            }
+        },
+        "VerdictWith": {
+            "$anchor": "verdictWith",
+            "title": "VerdictWith",
+            "type": "object",
+            "additionalProperties": false,
+            "description": "The effect-dependent detail of a verdict.\n\nEvery member is optional at the schema level and which ones are meaningful depends on `effect`: `role` / `obligations` / `bundleRef` on `allow`, `code` / `reason` on `deny`, `queue` / `reason` on `refer`, `needs` / `presentationDefinition` on `requestMore`. The dependency is stated here rather than enforced by `if`/`then` per effect, so that the shape stays a single flat object a generated type can carry without a discriminated union per family — a deliberate trade of schema strictness for implementability, and the reason a consumer MUST branch on `effect` rather than on which members happen to be present.",
+            "properties": {
+                "role": {
+                    "type": "string",
+                    "minLength": 1,
+                    "description": "The granted local role. `allow` only."
+                },
+                "obligations": {
+                    "type": "object",
+                    "description": "Conditions attached to the grant. `allow` only."
+                },
+                "bundleRef": {
+                    "type": "object",
+                    "description": "Pointer to a sealed credential bundle, added by the community where issuance occurred rather than emitted by the policy. `allow` only."
+                },
+                "code": {
+                    "type": "string",
+                    "minLength": 1,
+                    "description": "Stable refusal code, safe to branch on. `deny` only."
+                },
+                "reason": {
+                    "type": [
+                        "string",
+                        "null"
+                    ],
+                    "maxLength": 1024,
+                    "description": "Elaboration in prose, when the decider gave one. `deny` and `refer`."
+                },
+                "queue": {
+                    "type": "string",
+                    "minLength": 1,
+                    "description": "Which review queue the decision was parked in, so an applicant can be told who now holds it. `refer` only."
+                },
+                "needs": {
+                    "type": "array",
+                    "items": {
+                        "type": "string",
+                        "minLength": 1
+                    },
+                    "description": "What further evidence is required, named so the applicant can act without a support conversation. `requestMore` only."
+                },
+                "presentationDefinition": {
+                    "type": "object",
+                    "description": "A machine-readable statement of the same request, so a wallet can satisfy it without a human reading `needs`. `requestMore` only."
+                }
+            }
+        },
+        "VerdictEffect": {
+            "$anchor": "verdictEffect",
+            "title": "VerdictEffect",
+            "type": "string",
+            "enum": [
+                "allow",
+                "deny",
+                "refer",
+                "requestMore"
+            ],
+            "description": "What the policy decided.\n\n`allow` — admitted. `deny` — refused, terminally for this submission. `refer` — parked for a human or quorum decision; the applicant is neither in nor out. `requestMore` — the policy cannot decide yet and names what further evidence it needs.\n\nThe four are not reducible to a pending/decided pair. `refer` and `requestMore` are both 'not decided', but they place the next action with different parties: `refer` waits on the community, `requestMore` waits on the applicant. A consumer that cannot tell them apart cannot tell a user whether to wait or to act."
+        }
+    }
+};
+/**
+ * SPEC.md §7.2 policy for the request variant, from this specification's
+ * front matter. Pass to `consumeInbound` — items 5b, 7 and 8 are
+ * per-specification and cannot be derived from the document alone, and
+ * item 2 needs the schema this carries.
+ */
+export const SPEC = {
+    typeUri: TYPE_URI,
+    isBearer: false,
+    isProofRequired: true,
+    isRecipientRequired: true,
+    isIssuedAtRequired: true,
+    payloadSchema: PAYLOAD_SCHEMA,
+};
+/**
+ * SPEC.md §7.2 policy for the success-response variant. `isRecipientRequired`
+ * tracks the *issuer* party's requirement because a response swaps the
+ * parties (§7.3 item 5).
+ */
+export const RESPONSE_SPEC = {
+    typeUri: RESPONSE_TYPE_URI,
+    isBearer: false,
+    isProofRequired: false,
+    isRecipientRequired: true,
+    isIssuedAtRequired: true,
+    payloadSchema: RESPONSE_PAYLOAD_SCHEMA,
+};
+//# sourceMappingURL=payload.js.map

package/dist/vtc/join-requests/supplement/0.1/payload.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"payload.js","sourceRoot":"","sources":["../../../../../src/vtc/join-requests/supplement/0.1/payload.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAyCH,2BAA2B;AAC3B,MAAM,CAAC,MAAM,QAAQ,GAAG,8DAAuE,CAAC;AAKhG,qEAAqE;AACrE,MAAM,CAAC,MAAM,iBAAiB,GAAG,uEAAgF,CAAC;AAKlH;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,SAAS,EAAE,8CAA8C;IACzD,KAAK,EAAE,8DAA8D;IACrE,OAAO,EAAE,wCAAwC;IACjD,aAAa,EAAE,6PAA6P;IAC5Q,MAAM,EAAE,QAAQ;IAChB,sBAAsB,EAAE,KAAK;IAC7B,UAAU,EAAE;QACV,IAAI;KACL;IACD,YAAY,EAAE;QACZ,IAAI,EAAE;YACJ,MAAM,EAAE,QAAQ;YAChB,aAAa,EAAE,6RAA6R;SAC7S;QACD,WAAW,EAAE;YACX,MAAM,EAAE,QAAQ;YAChB,WAAW,EAAE,CAAC;YACd,aAAa,EAAE,0QAA0Q;SAC1R;QACD,YAAY,EAAE;YACZ,MAAM,EAAE,QAAQ;YAChB,aAAa,EAAE,0IAA0I;SAC1J;QACD,KAAK,EAAE;YACL,MAAM,EAAE,aAAa;SACtB;KACF;IACD,OAAO,EAAE;QACP,UAAU,EAAE;YACV,SAAS,EAAE,UAAU;YACrB,OAAO,EAAE,iDAAiD;YAC1D,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,WAAW;gBACX,SAAS;aACV;YACD,aAAa,EAAE,6GAA6G;YAC5H,YAAY,EAAE;gBACZ,WAAW,EAAE;oBACX,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,oKAAoK;iBACpL;gBACD,SAAS,EAAE;oBACT,MAAM,EAAE,iBAAiB;oBACzB,aAAa,EAAE,2NAA2N;iBAC3O;gBACD,KAAK,EAAE;oBACL,MAAM,EAAE,aAAa;iBACtB;aACF;SACF;QACD,KAAK,EAAE;YACL,OAAO,EAAE,KAAK;YACd,aAAa,EAAE,uKAAuK;YACtL,MAAM,EAAE,QAAQ;YAChB,eAAe,EAAE,CAAC;YAClB,sBAAsB,EAAE,IAAI;YAC5B,eAAe,EAAE;gBACf,SAAS,EAAE,mCAAmC;aAC/C;SACF;QACD,SAAS,EAAE;YACT,SAAS,EAAE,SAAS;YACpB,OAAO,EAAE,SAAS;YAClB,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,QAAQ;gBACR,MAAM;aACP;YACD,aAAa,EAAE,oEAAoE;YACnF,YAAY,EAAE;gBACZ,QAAQ,EAAE;oBACR,MAAM,EAAE,uBAAuB;iBAChC;gBACD,MAAM,EAAE;oBACN,MAAM,EAAE,qBAAqB;iBAC9B;aACF;SACF;QACD,aAAa,EAAE;YACb,SAAS,EAAE,aAAa;YACxB,OAAO,EAAE,aAAa;YACtB,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,aAAa,EAAE,opBAAopB;YACnqB,YAAY,EAAE;gBACZ,MAAM,EAAE;oBACN,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,uCAAuC;iBACvD;gBACD,aAAa,EAAE;oBACb,MAAM,EAAE,QAAQ;oBAChB,aAAa,EAAE,iDAAiD;iBACjE;gBACD,WAAW,EAAE;oBACX,MAAM,EAAE,QAAQ;oBAChB,aAAa,EAAE,wIAAwI;iBACxJ;gBACD,MAAM,EAAE;oBACN,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,sDAAsD;iBACtE;gBACD,QAAQ,EAAE;oBACR,MAAM,EAAE;wBACN,QAAQ;wBACR,MAAM;qBACP;oBACD,WAAW,EAAE,IAAI;oBACjB,aAAa,EAAE,sEAAsE;iBACtF;gBACD,OAAO,EAAE;oBACP,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,4GAA4G;iBAC5H;gBACD,OAAO,EAAE;oBACP,MAAM,EAAE,OAAO;oBACf,OAAO,EAAE;wBACP,MAAM,EAAE,QAAQ;wBAChB,WAAW,EAAE,CAAC;qBACf;oBACD,aAAa,EAAE,uHAAuH;iBACvI;gBACD,wBAAwB,EAAE;oBACxB,MAAM,EAAE,QAAQ;oBAChB,aAAa,EAAE,mIAAmI;iBACnJ;aACF;SACF;QACD,eAAe,EAAE;YACf,SAAS,EAAE,eAAe;YAC1B,OAAO,EAAE,eAAe;YACxB,MAAM,EAAE,QAAQ;YAChB,MAAM,EAAE;gBACN,OAAO;gBACP,MAAM;gBACN,OAAO;gBACP,aAAa;aACd;YACD,aAAa,EAAE,6kBAA6kB;SAC7lB;KACF;CACO,CAAC;AAEX,mEAAmE;AACnE,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,SAAS,EAAE,8CAA8C;IACzD,MAAM,EAAE,kBAAkB;IAC1B,OAAO,EAAE;QACP,UAAU,EAAE;YACV,SAAS,EAAE,UAAU;YACrB,OAAO,EAAE,iDAAiD;YAC1D,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,WAAW;gBACX,SAAS;aACV;YACD,aAAa,EAAE,6GAA6G;YAC5H,YAAY,EAAE;gBACZ,WAAW,EAAE;oBACX,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,oKAAoK;iBACpL;gBACD,SAAS,EAAE;oBACT,MAAM,EAAE,iBAAiB;oBACzB,aAAa,EAAE,2NAA2N;iBAC3O;gBACD,KAAK,EAAE;oBACL,MAAM,EAAE,aAAa;iBACtB;aACF;SACF;QACD,KAAK,EAAE;YACL,OAAO,EAAE,KAAK;YACd,aAAa,EAAE,uKAAuK;YACtL,MAAM,EAAE,QAAQ;YAChB,eAAe,EAAE,CAAC;YAClB,sBAAsB,EAAE,IAAI;YAC5B,eAAe,EAAE;gBACf,SAAS,EAAE,mCAAmC;aAC/C;SACF;QACD,SAAS,EAAE;YACT,SAAS,EAAE,SAAS;YACpB,OAAO,EAAE,SAAS;YAClB,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,QAAQ;gBACR,MAAM;aACP;YACD,aAAa,EAAE,oEAAoE;YACnF,YAAY,EAAE;gBACZ,QAAQ,EAAE;oBACR,MAAM,EAAE,uBAAuB;iBAChC;gBACD,MAAM,EAAE;oBACN,MAAM,EAAE,qBAAqB;iBAC9B;aACF;SACF;QACD,aAAa,EAAE;YACb,SAAS,EAAE,aAAa;YACxB,OAAO,EAAE,aAAa;YACtB,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,aAAa,EAAE,opBAAopB;YACnqB,YAAY,EAAE;gBACZ,MAAM,EAAE;oBACN,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,uCAAuC;iBACvD;gBACD,aAAa,EAAE;oBACb,MAAM,EAAE,QAAQ;oBAChB,aAAa,EAAE,iDAAiD;iBACjE;gBACD,WAAW,EAAE;oBACX,MAAM,EAAE,QAAQ;oBAChB,aAAa,EAAE,wIAAwI;iBACxJ;gBACD,MAAM,EAAE;oBACN,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,sDAAsD;iBACtE;gBACD,QAAQ,EAAE;oBACR,MAAM,EAAE;wBACN,QAAQ;wBACR,MAAM;qBACP;oBACD,WAAW,EAAE,IAAI;oBACjB,aAAa,EAAE,sEAAsE;iBACtF;gBACD,OAAO,EAAE;oBACP,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,4GAA4G;iBAC5H;gBACD,OAAO,EAAE;oBACP,MAAM,EAAE,OAAO;oBACf,OAAO,EAAE;wBACP,MAAM,EAAE,QAAQ;wBAChB,WAAW,EAAE,CAAC;qBACf;oBACD,aAAa,EAAE,uHAAuH;iBACvI;gBACD,wBAAwB,EAAE;oBACxB,MAAM,EAAE,QAAQ;oBAChB,aAAa,EAAE,mIAAmI;iBACnJ;aACF;SACF;QACD,eAAe,EAAE;YACf,SAAS,EAAE,eAAe;YAC1B,OAAO,EAAE,eAAe;YACxB,MAAM,EAAE,QAAQ;YAChB,MAAM,EAAE;gBACN,OAAO;gBACP,MAAM;gBACN,OAAO;gBACP,aAAa;aACd;YACD,aAAa,EAAE,6kBAA6kB;SAC7lB;KACF;CACO,CAAC;AAEX;;;;;GAKG;AACH,MAAM,CAAC,MAAM,IAAI,GAAG;IAClB,OAAO,EAAE,QAAQ;IACjB,QAAQ,EAAE,KAAK;IACf,eAAe,EAAE,IAAI;IACrB,mBAAmB,EAAE,IAAI;IACzB,kBAAkB,EAAE,IAAI;IACxB,aAAa,EAAE,cAAc;CACrB,CAAC;AAEX;;;;GAIG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,OAAO,EAAE,iBAAiB;IAC1B,QAAQ,EAAE,KAAK;IACf,eAAe,EAAE,KAAK;IACtB,mBAAmB,EAAE,IAAI;IACzB,kBAAkB,EAAE,IAAI;IACxB,aAAa,EAAE,uBAAuB;CAC9B,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openvtc/trust-tasks",
-  "version": "0.19.11",
+  "version": "0.19.13",
   "description": "Generated TypeScript bindings for the Trust Tasks framework registry.",
   "type": "module",
   "main": "./dist/index.js",

package/src/index.ts

@@ -481,6 +481,7 @@ export * as VtcJoinRequestsStatus_v0_1 from "./vtc/join-requests/status/0.1/payl
 export * as VtcJoinRequestsSubmitReceipt_v0_1 from "./vtc/join-requests/submit-receipt/0.1/payload.js";
 export * as VtcJoinRequestsSubmit_v0_1 from "./vtc/join-requests/submit/0.1/payload.js";
 export * as VtcJoinRequestsSubmit_v0_2 from "./vtc/join-requests/submit/0.2/payload.js";
+export * as VtcJoinRequestsSupplement_v0_1 from "./vtc/join-requests/supplement/0.1/payload.js";
 export * as VtcJoinRequestsWithdraw_v0_1 from "./vtc/join-requests/withdraw/0.1/payload.js";
 export * as VtcMembersAdminRemove_v0_1 from "./vtc/members/admin-remove/0.1/payload.js";
 export * as VtcMembersCredentials_v0_1 from "./vtc/members/credentials/0.1/payload.js";

package/src/persona/attribute/put/1.0/payload.ts

@@ -64,6 +64,25 @@ export interface PersonaAttributePutResponsePayload {
      */
     sharedWithProfileCount?: number;
   };
+  /**
+   * Every place this write changed what a persona presents: each binding whose projection was re-pushed because a face wearing it shows this attribute live. An edit propagates by design, and a holder told only that it saved cannot tell whether it refreshed one face or nine. Holder-authorized, so identifiers are returned. Absent when nothing was bound to a face showing it.
+   *
+   * @maxItems 256
+   */
+  refreshed?: {
+    profileId: Ulid;
+    contextId: string;
+    personaDid: string;
+  }[];
+  /**
+   * Faces that pin this attribute to an earlier version and so did NOT follow the edit — the counterparties that must keep seeing the value they verified. Named so the holder can decide, per face, whether that is still what they want. Absent when no face pins it.
+   *
+   * @maxItems 256
+   */
+  heldByPin?: {
+    profileId: Ulid;
+    pinVersion: Version;
+  }[];
   createdAt?: string;
   updatedAt: string;
   ext?: Ext;
@@ -192,6 +211,54 @@ export const PAYLOAD_SCHEMA = {
             }
           }
         },
+        "refreshed": {
+          "type": "array",
+          "maxItems": 256,
+          "description": "Every place this write changed what a persona presents: each binding whose projection was re-pushed because a face wearing it shows this attribute live. An edit propagates by design, and a holder told only that it saved cannot tell whether it refreshed one face or nine. Holder-authorized, so identifiers are returned. Absent when nothing was bound to a face showing it.",
+          "items": {
+            "type": "object",
+            "additionalProperties": false,
+            "required": [
+              "profileId",
+              "contextId",
+              "personaDid"
+            ],
+            "properties": {
+              "profileId": {
+                "$ref": "#/$defs/Ulid"
+              },
+              "contextId": {
+                "type": "string",
+                "minLength": 1
+              },
+              "personaDid": {
+                "type": "string",
+                "minLength": 1
+              }
+            }
+          }
+        },
+        "heldByPin": {
+          "type": "array",
+          "maxItems": 256,
+          "description": "Faces that pin this attribute to an earlier version and so did NOT follow the edit — the counterparties that must keep seeing the value they verified. Named so the holder can decide, per face, whether that is still what they want. Absent when no face pins it.",
+          "items": {
+            "type": "object",
+            "additionalProperties": false,
+            "required": [
+              "profileId",
+              "pinVersion"
+            ],
+            "properties": {
+              "profileId": {
+                "$ref": "#/$defs/Ulid"
+              },
+              "pinVersion": {
+                "$ref": "#/$defs/Version"
+              }
+            }
+          }
+        },
         "createdAt": {
           "type": "string",
           "format": "date-time"
@@ -412,6 +479,54 @@ export const RESPONSE_PAYLOAD_SCHEMA = {
             }
           }
         },
+        "refreshed": {
+          "type": "array",
+          "maxItems": 256,
+          "description": "Every place this write changed what a persona presents: each binding whose projection was re-pushed because a face wearing it shows this attribute live. An edit propagates by design, and a holder told only that it saved cannot tell whether it refreshed one face or nine. Holder-authorized, so identifiers are returned. Absent when nothing was bound to a face showing it.",
+          "items": {
+            "type": "object",
+            "additionalProperties": false,
+            "required": [
+              "profileId",
+              "contextId",
+              "personaDid"
+            ],
+            "properties": {
+              "profileId": {
+                "$ref": "#/$defs/Ulid"
+              },
+              "contextId": {
+                "type": "string",
+                "minLength": 1
+              },
+              "personaDid": {
+                "type": "string",
+                "minLength": 1
+              }
+            }
+          }
+        },
+        "heldByPin": {
+          "type": "array",
+          "maxItems": 256,
+          "description": "Faces that pin this attribute to an earlier version and so did NOT follow the edit — the counterparties that must keep seeing the value they verified. Named so the holder can decide, per face, whether that is still what they want. Absent when no face pins it.",
+          "items": {
+            "type": "object",
+            "additionalProperties": false,
+            "required": [
+              "profileId",
+              "pinVersion"
+            ],
+            "properties": {
+              "profileId": {
+                "$ref": "#/$defs/Ulid"
+              },
+              "pinVersion": {
+                "$ref": "#/$defs/Version"
+              }
+            }
+          }
+        },
         "createdAt": {
           "type": "string",
           "format": "date-time"

package/src/persona/binding/get/1.0/payload.ts

@@ -29,7 +29,11 @@ export interface PersonaBindingGetResponsePayload {
    */
   profileId?: Ulid;
   /**
-   * The holder's label for the bound profile, so an application can show which identity is in use. Names a composition; reveals none of it.
+   * The name the holder chose for this context to call the face (persona/binding/set `label`). Absent when they chose none.
+   */
+  label?: string;
+  /**
+   * The holder's OWN name for the bound face. A maintainer MUST omit it unless the caller is holder-authorized: it is the holder's filing, not something they told this context, and it can say far more than the face shows. A context-scoped caller reads `label`.
    */
   profileName?: string;
   /**
@@ -118,10 +122,16 @@ export const PAYLOAD_SCHEMA = {
           "$ref": "#/$defs/Ulid",
           "description": "Present when bound. An identifier only; a context-scoped caller cannot resolve it, because profile reads are holder-authorized."
         },
+        "label": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 128,
+          "description": "The name the holder chose for this context to call the face (persona/binding/set `label`). Absent when they chose none."
+        },
         "profileName": {
           "type": "string",
           "maxLength": 128,
-          "description": "The holder's label for the bound profile, so an application can show which identity is in use. Names a composition; reveals none of it."
+          "description": "The holder's OWN name for the bound face. A maintainer MUST omit it unless the caller is holder-authorized: it is the holder's filing, not something they told this context, and it can say far more than the face shows. A context-scoped caller reads `label`."
         },
         "claimCount": {
           "type": "integer",
@@ -189,10 +199,16 @@ export const RESPONSE_PAYLOAD_SCHEMA = {
           "$ref": "#/$defs/Ulid",
           "description": "Present when bound. An identifier only; a context-scoped caller cannot resolve it, because profile reads are holder-authorized."
         },
+        "label": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 128,
+          "description": "The name the holder chose for this context to call the face (persona/binding/set `label`). Absent when they chose none."
+        },
         "profileName": {
           "type": "string",
           "maxLength": 128,
-          "description": "The holder's label for the bound profile, so an application can show which identity is in use. Names a composition; reveals none of it."
+          "description": "The holder's OWN name for the bound face. A maintainer MUST omit it unless the caller is holder-authorized: it is the holder's filing, not something they told this context, and it can say far more than the face shows. A context-scoped caller reads `label`."
         },
         "claimCount": {
           "type": "integer",

package/src/persona/binding/list/1.0/payload.ts

@@ -26,7 +26,11 @@ export interface PersonaBindingListResponsePayload {
     personaDid: string;
     bound: boolean;
     /**
-     * The holder's label for the bound profile. Names a composition; reveals none of it.
+     * The name the holder chose for this context to call the face. Absent when they chose none.
+     */
+    label?: string;
+    /**
+     * The holder's OWN name for the bound face. A maintainer MUST omit it unless the caller is holder-authorized; see persona/binding/get.
      */
     profileName?: string;
     claimCount?: number;
@@ -121,10 +125,16 @@ export const PAYLOAD_SCHEMA = {
               "bound": {
                 "type": "boolean"
               },
+              "label": {
+                "type": "string",
+                "minLength": 1,
+                "maxLength": 128,
+                "description": "The name the holder chose for this context to call the face. Absent when they chose none."
+              },
               "profileName": {
                 "type": "string",
                 "maxLength": 128,
-                "description": "The holder's label for the bound profile. Names a composition; reveals none of it."
+                "description": "The holder's OWN name for the bound face. A maintainer MUST omit it unless the caller is holder-authorized; see persona/binding/get."
               },
               "claimCount": {
                 "type": "integer",
@@ -192,10 +202,16 @@ export const RESPONSE_PAYLOAD_SCHEMA = {
               "bound": {
                 "type": "boolean"
               },
+              "label": {
+                "type": "string",
+                "minLength": 1,
+                "maxLength": 128,
+                "description": "The name the holder chose for this context to call the face. Absent when they chose none."
+              },
               "profileName": {
                 "type": "string",
                 "maxLength": 128,
-                "description": "The holder's label for the bound profile. Names a composition; reveals none of it."
+                "description": "The holder's OWN name for the bound face. A maintainer MUST omit it unless the caller is holder-authorized; see persona/binding/get."
               },
               "claimCount": {
                 "type": "integer",

package/src/persona/binding/set/1.0/payload.ts

@@ -28,6 +28,10 @@ export interface PersonaBindingSetPayload {
    * @maxItems 32
    */
   publicEntries?: Ulid[];
+  /**
+   * What this context may call the face the persona wears here, chosen by the holder for this context. Returned by persona/binding/get and persona/binding/list in place of the holder's own name for the face, which is theirs and may say far more than they would tell a context ('the divorce'). Omit to give the context no name at all.
+   */
+  label?: string;
   expectedVersion?: ExpectedVersion;
   ext?: Ext;
 }
@@ -123,6 +127,12 @@ export const PAYLOAD_SCHEMA = {
       },
       "description": "Attributes the holder opts into publishing on the persona's own DID document or equivalent public surface. Empty by default and MUST remain empty unless explicitly set: everything else is a per-verifier projection, and a published value is one document every relying party sees identically — a permanent correlation point the rest of this family exists to avoid."
     },
+    "label": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 128,
+      "description": "What this context may call the face the persona wears here, chosen by the holder for this context. Returned by persona/binding/get and persona/binding/list in place of the holder's own name for the face, which is theirs and may say far more than they would tell a context ('the divorce'). Omit to give the context no name at all."
+    },
     "expectedVersion": {
       "$ref": "#/$defs/ExpectedVersion"
     },