@openvtc/trust-tasks 0.19.12 → 0.19.13

package/src/persona/attribute/put/1.0/payload.ts

@@ -64,6 +64,25 @@ export interface PersonaAttributePutResponsePayload {
      */
     sharedWithProfileCount?: number;
   };
+  /**
+   * Every place this write changed what a persona presents: each binding whose projection was re-pushed because a face wearing it shows this attribute live. An edit propagates by design, and a holder told only that it saved cannot tell whether it refreshed one face or nine. Holder-authorized, so identifiers are returned. Absent when nothing was bound to a face showing it.
+   *
+   * @maxItems 256
+   */
+  refreshed?: {
+    profileId: Ulid;
+    contextId: string;
+    personaDid: string;
+  }[];
+  /**
+   * Faces that pin this attribute to an earlier version and so did NOT follow the edit — the counterparties that must keep seeing the value they verified. Named so the holder can decide, per face, whether that is still what they want. Absent when no face pins it.
+   *
+   * @maxItems 256
+   */
+  heldByPin?: {
+    profileId: Ulid;
+    pinVersion: Version;
+  }[];
   createdAt?: string;
   updatedAt: string;
   ext?: Ext;
@@ -192,6 +211,54 @@ export const PAYLOAD_SCHEMA = {
             }
           }
         },
+        "refreshed": {
+          "type": "array",
+          "maxItems": 256,
+          "description": "Every place this write changed what a persona presents: each binding whose projection was re-pushed because a face wearing it shows this attribute live. An edit propagates by design, and a holder told only that it saved cannot tell whether it refreshed one face or nine. Holder-authorized, so identifiers are returned. Absent when nothing was bound to a face showing it.",
+          "items": {
+            "type": "object",
+            "additionalProperties": false,
+            "required": [
+              "profileId",
+              "contextId",
+              "personaDid"
+            ],
+            "properties": {
+              "profileId": {
+                "$ref": "#/$defs/Ulid"
+              },
+              "contextId": {
+                "type": "string",
+                "minLength": 1
+              },
+              "personaDid": {
+                "type": "string",
+                "minLength": 1
+              }
+            }
+          }
+        },
+        "heldByPin": {
+          "type": "array",
+          "maxItems": 256,
+          "description": "Faces that pin this attribute to an earlier version and so did NOT follow the edit — the counterparties that must keep seeing the value they verified. Named so the holder can decide, per face, whether that is still what they want. Absent when no face pins it.",
+          "items": {
+            "type": "object",
+            "additionalProperties": false,
+            "required": [
+              "profileId",
+              "pinVersion"
+            ],
+            "properties": {
+              "profileId": {
+                "$ref": "#/$defs/Ulid"
+              },
+              "pinVersion": {
+                "$ref": "#/$defs/Version"
+              }
+            }
+          }
+        },
         "createdAt": {
           "type": "string",
           "format": "date-time"
@@ -412,6 +479,54 @@ export const RESPONSE_PAYLOAD_SCHEMA = {
             }
           }
         },
+        "refreshed": {
+          "type": "array",
+          "maxItems": 256,
+          "description": "Every place this write changed what a persona presents: each binding whose projection was re-pushed because a face wearing it shows this attribute live. An edit propagates by design, and a holder told only that it saved cannot tell whether it refreshed one face or nine. Holder-authorized, so identifiers are returned. Absent when nothing was bound to a face showing it.",
+          "items": {
+            "type": "object",
+            "additionalProperties": false,
+            "required": [
+              "profileId",
+              "contextId",
+              "personaDid"
+            ],
+            "properties": {
+              "profileId": {
+                "$ref": "#/$defs/Ulid"
+              },
+              "contextId": {
+                "type": "string",
+                "minLength": 1
+              },
+              "personaDid": {
+                "type": "string",
+                "minLength": 1
+              }
+            }
+          }
+        },
+        "heldByPin": {
+          "type": "array",
+          "maxItems": 256,
+          "description": "Faces that pin this attribute to an earlier version and so did NOT follow the edit — the counterparties that must keep seeing the value they verified. Named so the holder can decide, per face, whether that is still what they want. Absent when no face pins it.",
+          "items": {
+            "type": "object",
+            "additionalProperties": false,
+            "required": [
+              "profileId",
+              "pinVersion"
+            ],
+            "properties": {
+              "profileId": {
+                "$ref": "#/$defs/Ulid"
+              },
+              "pinVersion": {
+                "$ref": "#/$defs/Version"
+              }
+            }
+          }
+        },
         "createdAt": {
           "type": "string",
           "format": "date-time"

package/src/persona/binding/get/1.0/payload.ts

@@ -29,7 +29,11 @@ export interface PersonaBindingGetResponsePayload {
    */
   profileId?: Ulid;
   /**
-   * The holder's label for the bound profile, so an application can show which identity is in use. Names a composition; reveals none of it.
+   * The name the holder chose for this context to call the face (persona/binding/set `label`). Absent when they chose none.
+   */
+  label?: string;
+  /**
+   * The holder's OWN name for the bound face. A maintainer MUST omit it unless the caller is holder-authorized: it is the holder's filing, not something they told this context, and it can say far more than the face shows. A context-scoped caller reads `label`.
    */
   profileName?: string;
   /**
@@ -118,10 +122,16 @@ export const PAYLOAD_SCHEMA = {
           "$ref": "#/$defs/Ulid",
           "description": "Present when bound. An identifier only; a context-scoped caller cannot resolve it, because profile reads are holder-authorized."
         },
+        "label": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 128,
+          "description": "The name the holder chose for this context to call the face (persona/binding/set `label`). Absent when they chose none."
+        },
         "profileName": {
           "type": "string",
           "maxLength": 128,
-          "description": "The holder's label for the bound profile, so an application can show which identity is in use. Names a composition; reveals none of it."
+          "description": "The holder's OWN name for the bound face. A maintainer MUST omit it unless the caller is holder-authorized: it is the holder's filing, not something they told this context, and it can say far more than the face shows. A context-scoped caller reads `label`."
         },
         "claimCount": {
           "type": "integer",
@@ -189,10 +199,16 @@ export const RESPONSE_PAYLOAD_SCHEMA = {
           "$ref": "#/$defs/Ulid",
           "description": "Present when bound. An identifier only; a context-scoped caller cannot resolve it, because profile reads are holder-authorized."
         },
+        "label": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 128,
+          "description": "The name the holder chose for this context to call the face (persona/binding/set `label`). Absent when they chose none."
+        },
         "profileName": {
           "type": "string",
           "maxLength": 128,
-          "description": "The holder's label for the bound profile, so an application can show which identity is in use. Names a composition; reveals none of it."
+          "description": "The holder's OWN name for the bound face. A maintainer MUST omit it unless the caller is holder-authorized: it is the holder's filing, not something they told this context, and it can say far more than the face shows. A context-scoped caller reads `label`."
         },
         "claimCount": {
           "type": "integer",

package/src/persona/binding/list/1.0/payload.ts

@@ -26,7 +26,11 @@ export interface PersonaBindingListResponsePayload {
     personaDid: string;
     bound: boolean;
     /**
-     * The holder's label for the bound profile. Names a composition; reveals none of it.
+     * The name the holder chose for this context to call the face. Absent when they chose none.
+     */
+    label?: string;
+    /**
+     * The holder's OWN name for the bound face. A maintainer MUST omit it unless the caller is holder-authorized; see persona/binding/get.
      */
     profileName?: string;
     claimCount?: number;
@@ -121,10 +125,16 @@ export const PAYLOAD_SCHEMA = {
               "bound": {
                 "type": "boolean"
               },
+              "label": {
+                "type": "string",
+                "minLength": 1,
+                "maxLength": 128,
+                "description": "The name the holder chose for this context to call the face. Absent when they chose none."
+              },
               "profileName": {
                 "type": "string",
                 "maxLength": 128,
-                "description": "The holder's label for the bound profile. Names a composition; reveals none of it."
+                "description": "The holder's OWN name for the bound face. A maintainer MUST omit it unless the caller is holder-authorized; see persona/binding/get."
               },
               "claimCount": {
                 "type": "integer",
@@ -192,10 +202,16 @@ export const RESPONSE_PAYLOAD_SCHEMA = {
               "bound": {
                 "type": "boolean"
               },
+              "label": {
+                "type": "string",
+                "minLength": 1,
+                "maxLength": 128,
+                "description": "The name the holder chose for this context to call the face. Absent when they chose none."
+              },
               "profileName": {
                 "type": "string",
                 "maxLength": 128,
-                "description": "The holder's label for the bound profile. Names a composition; reveals none of it."
+                "description": "The holder's OWN name for the bound face. A maintainer MUST omit it unless the caller is holder-authorized; see persona/binding/get."
               },
               "claimCount": {
                 "type": "integer",

package/src/persona/binding/set/1.0/payload.ts

@@ -28,6 +28,10 @@ export interface PersonaBindingSetPayload {
    * @maxItems 32
    */
   publicEntries?: Ulid[];
+  /**
+   * What this context may call the face the persona wears here, chosen by the holder for this context. Returned by persona/binding/get and persona/binding/list in place of the holder's own name for the face, which is theirs and may say far more than they would tell a context ('the divorce'). Omit to give the context no name at all.
+   */
+  label?: string;
   expectedVersion?: ExpectedVersion;
   ext?: Ext;
 }
@@ -123,6 +127,12 @@ export const PAYLOAD_SCHEMA = {
       },
       "description": "Attributes the holder opts into publishing on the persona's own DID document or equivalent public surface. Empty by default and MUST remain empty unless explicitly set: everything else is a per-verifier projection, and a published value is one document every relying party sees identically — a permanent correlation point the rest of this family exists to avoid."
     },
+    "label": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 128,
+      "description": "What this context may call the face the persona wears here, chosen by the holder for this context. Returned by persona/binding/get and persona/binding/list in place of the holder's own name for the face, which is theirs and may say far more than they would tell a context ('the divorce'). Omit to give the context no name at all."
+    },
     "expectedVersion": {
       "$ref": "#/$defs/ExpectedVersion"
     },

package/src/persona/disclosure/history/1.0/payload.ts

@@ -53,6 +53,12 @@ export interface PersonaDisclosureHistoryResponsePayload {
      * @maxItems 128
      */
     rungs?: ProofRung[];
+    /**
+     * Positionally aligned with claimTypes: whether the value the verifier received is still what this persona presents in this context. `current` — it is. `changed` — the persona now presents a different value of that type, so the verifier holds an outdated copy; this is what a re-present list is built from. `removed` — the persona no longer presents that type at all; the verifier still holds what it received, because a disclosure cannot be recalled. `unknown` — the maintainer cannot tell, as for a record made before it began fingerprinting disclosed values. Computed at read time by comparing a keyed hash of the disclosed value with the persona's current projection in the same context: no value is stored and nothing above the context boundary is read.
+     *
+     * @maxItems 128
+     */
+    claimCurrency?: ("current" | "changed" | "removed" | "unknown")[];
     purpose?: string;
     renderer?: string;
     /**
@@ -189,6 +195,20 @@ export const PAYLOAD_SCHEMA = {
                 },
                 "description": "Positionally aligned with claimTypes. A holder reviewing history needs to know not only what went but how strongly it was hidden — the same claim type at two rungs is two very different disclosures."
               },
+              "claimCurrency": {
+                "type": "array",
+                "maxItems": 128,
+                "items": {
+                  "type": "string",
+                  "enum": [
+                    "current",
+                    "changed",
+                    "removed",
+                    "unknown"
+                  ]
+                },
+                "description": "Positionally aligned with claimTypes: whether the value the verifier received is still what this persona presents in this context. `current` — it is. `changed` — the persona now presents a different value of that type, so the verifier holds an outdated copy; this is what a re-present list is built from. `removed` — the persona no longer presents that type at all; the verifier still holds what it received, because a disclosure cannot be recalled. `unknown` — the maintainer cannot tell, as for a record made before it began fingerprinting disclosed values. Computed at read time by comparing a keyed hash of the disclosed value with the persona's current projection in the same context: no value is stored and nothing above the context boundary is read."
+              },
               "purpose": {
                 "type": "string",
                 "maxLength": 512
@@ -319,6 +339,20 @@ export const RESPONSE_PAYLOAD_SCHEMA = {
                 },
                 "description": "Positionally aligned with claimTypes. A holder reviewing history needs to know not only what went but how strongly it was hidden — the same claim type at two rungs is two very different disclosures."
               },
+              "claimCurrency": {
+                "type": "array",
+                "maxItems": 128,
+                "items": {
+                  "type": "string",
+                  "enum": [
+                    "current",
+                    "changed",
+                    "removed",
+                    "unknown"
+                  ]
+                },
+                "description": "Positionally aligned with claimTypes: whether the value the verifier received is still what this persona presents in this context. `current` — it is. `changed` — the persona now presents a different value of that type, so the verifier holds an outdated copy; this is what a re-present list is built from. `removed` — the persona no longer presents that type at all; the verifier still holds what it received, because a disclosure cannot be recalled. `unknown` — the maintainer cannot tell, as for a record made before it began fingerprinting disclosed values. Computed at read time by comparing a keyed hash of the disclosed value with the persona's current projection in the same context: no value is stored and nothing above the context boundary is read."
+              },
               "purpose": {
                 "type": "string",
                 "maxLength": 512

package/src/persona/local/binding/set/1.0/payload.ts

@@ -16,6 +16,10 @@ export interface PersonaLocalBindingSetPayload {
    * A LOCAL profile, or null to clear. A maintainer MUST refuse an identifier that names a pool profile: honouring it would let a context-scoped caller bind the holder's composition, which is the one escalation the whole boundary exists to prevent.
    */
   profileId?: Ulid | null;
+  /**
+   * What this context may call the face the persona wears here, chosen by the holder for this context. Returned by persona/binding/get and persona/binding/list in place of the holder's own name for the face, which is theirs and may say far more than they would tell a context ('the divorce'). Omit to give the context no name at all.
+   */
+  label?: string;
   expectedVersion?: ExpectedVersion;
   ext?: Ext;
 }
@@ -86,6 +90,12 @@ export const PAYLOAD_SCHEMA = {
       ],
       "description": "A LOCAL profile, or null to clear. A maintainer MUST refuse an identifier that names a pool profile: honouring it would let a context-scoped caller bind the holder's composition, which is the one escalation the whole boundary exists to prevent."
     },
+    "label": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 128,
+      "description": "What this context may call the face the persona wears here, chosen by the holder for this context. Returned by persona/binding/get and persona/binding/list in place of the holder's own name for the face, which is theirs and may say far more than they would tell a context ('the divorce'). Omit to give the context no name at all."
+    },
     "expectedVersion": {
       "$ref": "#/$defs/ExpectedVersion"
     },