@openvtc/trust-tasks 0.2.19 → 0.2.20

package/dist/registry/record/delete/0.1/payload.js

@@ -1,9 +0,0 @@
-/**
- * Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
- * Source: specs/registry/record/delete/0.1/payload.schema.json
- */
-/** Trust Task type URI. */
-export const TYPE_URI = "https://trusttasks.org/spec/registry/record/delete/0.1";
-/** Trust Task response type URI (request type URI + "#response"). */
-export const RESPONSE_TYPE_URI = "https://trusttasks.org/spec/registry/record/delete/0.1#response";
-//# sourceMappingURL=payload.js.map

package/dist/registry/record/delete/0.1/payload.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"payload.js","sourceRoot":"","sources":["../../../../../src/registry/record/delete/0.1/payload.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAmBH,2BAA2B;AAC3B,MAAM,CAAC,MAAM,QAAQ,GAAG,wDAAiE,CAAC;AAE1F,qEAAqE;AACrE,MAAM,CAAC,MAAM,iBAAiB,GAAG,iEAA0E,CAAC"}

package/dist/registry/record/list/0.1/payload.d.ts

@@ -1,21 +0,0 @@
-/**
- * Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
- * Source: specs/registry/record/list/0.1/payload.schema.json
- */
-/**
- * An administrator lists all trust records held by the registry.
- */
-export interface RegistryRecordListPayload {
-    ext?: Ext;
-}
-/**
- * Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.
- */
-export interface Ext {
-    [k: string]: unknown | undefined;
-}
-/** Trust Task type URI. */
-export declare const TYPE_URI: "https://trusttasks.org/spec/registry/record/list/0.1";
-/** Trust Task response type URI (request type URI + "#response"). */
-export declare const RESPONSE_TYPE_URI: "https://trusttasks.org/spec/registry/record/list/0.1#response";
-//# sourceMappingURL=payload.d.ts.map

package/dist/registry/record/list/0.1/payload.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"payload.d.ts","sourceRoot":"","sources":["../../../../../src/registry/record/list/0.1/payload.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;GAEG;AACH,MAAM,WAAW,yBAAyB;IACxC,GAAG,CAAC,EAAE,GAAG,CAAC;CACX;AACD;;GAEG;AACH,MAAM,WAAW,GAAG;IAClB,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC;CAClC;AAED,2BAA2B;AAC3B,eAAO,MAAM,QAAQ,EAAG,sDAA+D,CAAC;AAExF,qEAAqE;AACrE,eAAO,MAAM,iBAAiB,EAAG,+DAAwE,CAAC"}

package/dist/registry/record/list/0.1/payload.js

@@ -1,9 +0,0 @@
-/**
- * Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
- * Source: specs/registry/record/list/0.1/payload.schema.json
- */
-/** Trust Task type URI. */
-export const TYPE_URI = "https://trusttasks.org/spec/registry/record/list/0.1";
-/** Trust Task response type URI (request type URI + "#response"). */
-export const RESPONSE_TYPE_URI = "https://trusttasks.org/spec/registry/record/list/0.1#response";
-//# sourceMappingURL=payload.js.map

package/dist/registry/record/list/0.1/payload.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"payload.js","sourceRoot":"","sources":["../../../../../src/registry/record/list/0.1/payload.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAeH,2BAA2B;AAC3B,MAAM,CAAC,MAAM,QAAQ,GAAG,sDAA+D,CAAC;AAExF,qEAAqE;AACrE,MAAM,CAAC,MAAM,iBAAiB,GAAG,+DAAwE,CAAC"}

package/dist/registry/record/read/0.1/payload.d.ts

@@ -1,25 +0,0 @@
-/**
- * Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
- * Source: specs/registry/record/read/0.1/payload.schema.json
- */
-/**
- * An administrator reads the full trust record identified by the four TRQP identifiers (both the recognized and authorized facets, unlike the filtered TRQP query responses).
- */
-export interface RegistryRecordReadPayload {
-    entity_id: string;
-    authority_id: string;
-    action: string;
-    resource: string;
-    ext?: Ext;
-}
-/**
- * Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.
- */
-export interface Ext {
-    [k: string]: unknown | undefined;
-}
-/** Trust Task type URI. */
-export declare const TYPE_URI: "https://trusttasks.org/spec/registry/record/read/0.1";
-/** Trust Task response type URI (request type URI + "#response"). */
-export declare const RESPONSE_TYPE_URI: "https://trusttasks.org/spec/registry/record/read/0.1#response";
-//# sourceMappingURL=payload.d.ts.map

package/dist/registry/record/read/0.1/payload.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"payload.d.ts","sourceRoot":"","sources":["../../../../../src/registry/record/read/0.1/payload.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;GAEG;AACH,MAAM,WAAW,yBAAyB;IACxC,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,CAAC,EAAE,GAAG,CAAC;CACX;AACD;;GAEG;AACH,MAAM,WAAW,GAAG;IAClB,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC;CAClC;AAED,2BAA2B;AAC3B,eAAO,MAAM,QAAQ,EAAG,sDAA+D,CAAC;AAExF,qEAAqE;AACrE,eAAO,MAAM,iBAAiB,EAAG,+DAAwE,CAAC"}

package/dist/registry/record/read/0.1/payload.js

@@ -1,9 +0,0 @@
-/**
- * Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
- * Source: specs/registry/record/read/0.1/payload.schema.json
- */
-/** Trust Task type URI. */
-export const TYPE_URI = "https://trusttasks.org/spec/registry/record/read/0.1";
-/** Trust Task response type URI (request type URI + "#response"). */
-export const RESPONSE_TYPE_URI = "https://trusttasks.org/spec/registry/record/read/0.1#response";
-//# sourceMappingURL=payload.js.map

package/dist/registry/record/read/0.1/payload.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"payload.js","sourceRoot":"","sources":["../../../../../src/registry/record/read/0.1/payload.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAmBH,2BAA2B;AAC3B,MAAM,CAAC,MAAM,QAAQ,GAAG,sDAA+D,CAAC;AAExF,qEAAqE;AACrE,MAAM,CAAC,MAAM,iBAAiB,GAAG,+DAAwE,CAAC"}

package/dist/registry/record/update/0.1/payload.d.ts

@@ -1,47 +0,0 @@
-/**
- * Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
- * Source: specs/registry/record/update/0.1/payload.schema.json
- */
-/**
- * Whether the record asserts an authorization or a recognition relationship.
- */
-export type RecordType = "authorization" | "recognition";
-/**
- * An administrator asks a trust registry to update an existing trust record. The record key (entity+authority+action+resource) must already exist.
- */
-export interface RegistryRecordUpdatePayload {
-    record: TrustRecord;
-    ext?: Ext;
-}
-export interface TrustRecord {
-    entity_id: string;
-    authority_id: string;
-    action: string;
-    resource: string;
-    /**
-     * Present on recognition records: whether the action+resource is recognised.
-     */
-    recognized?: boolean;
-    /**
-     * Present on authorization records: whether the action+resource authorization is confirmed.
-     */
-    authorized?: boolean;
-    /**
-     * Opaque governance context attached to the record.
-     */
-    context?: {
-        [k: string]: unknown | undefined;
-    };
-    record_type: RecordType;
-}
-/**
- * Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.
- */
-export interface Ext {
-    [k: string]: unknown | undefined;
-}
-/** Trust Task type URI. */
-export declare const TYPE_URI: "https://trusttasks.org/spec/registry/record/update/0.1";
-/** Trust Task response type URI (request type URI + "#response"). */
-export declare const RESPONSE_TYPE_URI: "https://trusttasks.org/spec/registry/record/update/0.1#response";
-//# sourceMappingURL=payload.d.ts.map

package/dist/registry/record/update/0.1/payload.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"payload.d.ts","sourceRoot":"","sources":["../../../../../src/registry/record/update/0.1/payload.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;GAEG;AACH,MAAM,MAAM,UAAU,GAAG,eAAe,GAAG,aAAa,CAAC;AAEzD;;GAEG;AACH,MAAM,WAAW,2BAA2B;IAC1C,MAAM,EAAE,WAAW,CAAC;IACpB,GAAG,CAAC,EAAE,GAAG,CAAC;CACX;AACD,MAAM,WAAW,WAAW;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB;;OAEG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB;;OAEG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB;;OAEG;IACH,OAAO,CAAC,EAAE;QACR,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC;KAClC,CAAC;IACF,WAAW,EAAE,UAAU,CAAC;CACzB;AACD;;GAEG;AACH,MAAM,WAAW,GAAG;IAClB,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC;CAClC;AAED,2BAA2B;AAC3B,eAAO,MAAM,QAAQ,EAAG,wDAAiE,CAAC;AAE1F,qEAAqE;AACrE,eAAO,MAAM,iBAAiB,EAAG,iEAA0E,CAAC"}

package/dist/registry/record/update/0.1/payload.js

@@ -1,9 +0,0 @@
-/**
- * Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
- * Source: specs/registry/record/update/0.1/payload.schema.json
- */
-/** Trust Task type URI. */
-export const TYPE_URI = "https://trusttasks.org/spec/registry/record/update/0.1";
-/** Trust Task response type URI (request type URI + "#response"). */
-export const RESPONSE_TYPE_URI = "https://trusttasks.org/spec/registry/record/update/0.1#response";
-//# sourceMappingURL=payload.js.map

package/dist/registry/record/update/0.1/payload.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"payload.js","sourceRoot":"","sources":["../../../../../src/registry/record/update/0.1/payload.ts"],"names":[],"mappings":"AAAA;;;GAGG;AA0CH,2BAA2B;AAC3B,MAAM,CAAC,MAAM,QAAQ,GAAG,wDAAiE,CAAC;AAE1F,qEAAqE;AACrE,MAAM,CAAC,MAAM,iBAAiB,GAAG,iEAA0E,CAAC"}

package/dist/task-consent/_shared/0.1/task-consent.d.ts

@@ -1,11 +0,0 @@
-/**
- * Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
- * Source: specs/task-consent/_shared/0.1/task-consent.schema.json
- */
-/**
- * Shared shapes for delegated task-execution consent: the executor-authored effects list a consent surface renders, the prior-state pin the executor asserts at execution, and the approval constraint a policy's requireConsent names.
- */
-export interface TaskConsentSharedDefinitions {
-    [k: string]: unknown | undefined;
-}
-//# sourceMappingURL=task-consent.d.ts.map

package/dist/task-consent/_shared/0.1/task-consent.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"task-consent.d.ts","sourceRoot":"","sources":["../../../../src/task-consent/_shared/0.1/task-consent.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;GAEG;AACH,MAAM,WAAW,4BAA4B;IAC3C,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC;CAClC"}

package/dist/task-consent/_shared/0.1/task-consent.js

@@ -1,6 +0,0 @@
-/**
- * Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
- * Source: specs/task-consent/_shared/0.1/task-consent.schema.json
- */
-export {};
-//# sourceMappingURL=task-consent.js.map

package/dist/task-consent/_shared/0.1/task-consent.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"task-consent.js","sourceRoot":"","sources":["../../../../src/task-consent/_shared/0.1/task-consent.ts"],"names":[],"mappings":"AAAA;;;GAGG"}

package/dist/task-consent/decision/0.1/payload.d.ts

@@ -1,38 +0,0 @@
-/**
- * Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
- * Source: specs/task-consent/decision/0.1/payload.schema.json
- */
-/**
- * The approver's answer. `deny` aborts the pending request; a subsequent submit of the same task starts a fresh one.
- */
-export type Decision = "approve" | "deny";
-/**
- * An enrolled approver authorizes (or refuses) one pending privileged task, bound to the exact payload it was shown. The proof on this document — not the transport session that carried it — is the authorization.
- */
-export interface TaskConsentDecisionPayload {
-    /**
-     * Echoes the task-consent/request this decision answers, binding it to that one pending request. An executor MUST consume the challenge at execution rather than on receipt of this decision: a decision authorizes exactly one execution, and consuming it earlier lets an executor's own retry legitimately replay it.
-     */
-    challenge: string;
-    /**
-     * Echoes the digest of the task being authorized. The executor re-derives it from the payload it is about to execute and refuses on mismatch — this is what makes the approved payload the executed payload, cryptographically rather than by convention.
-     */
-    payloadDigest: string;
-    decision: Decision;
-    /**
-     * OPTIONAL human-facing note, most useful on a `deny`.
-     */
-    reason?: string;
-    ext?: Ext;
-}
-/**
- * Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.
- */
-export interface Ext {
-    [k: string]: unknown | undefined;
-}
-/** Trust Task type URI. */
-export declare const TYPE_URI: "https://trusttasks.org/spec/task-consent/decision/0.1";
-/** Trust Task response type URI (request type URI + "#response"). */
-export declare const RESPONSE_TYPE_URI: "https://trusttasks.org/spec/task-consent/decision/0.1#response";
-//# sourceMappingURL=payload.d.ts.map

package/dist/task-consent/decision/0.1/payload.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"payload.d.ts","sourceRoot":"","sources":["../../../../src/task-consent/decision/0.1/payload.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;GAEG;AACH,MAAM,MAAM,QAAQ,GAAG,SAAS,GAAG,MAAM,CAAC;AAE1C;;GAEG;AACH,MAAM,WAAW,0BAA0B;IACzC;;OAEG;IACH,SAAS,EAAE,MAAM,CAAC;IAClB;;OAEG;IACH,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,QAAQ,CAAC;IACnB;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,GAAG,CAAC,EAAE,GAAG,CAAC;CACX;AACD;;GAEG;AACH,MAAM,WAAW,GAAG;IAClB,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC;CAClC;AAED,2BAA2B;AAC3B,eAAO,MAAM,QAAQ,EAAG,uDAAgE,CAAC;AAEzF,qEAAqE;AACrE,eAAO,MAAM,iBAAiB,EAAG,gEAAyE,CAAC"}

package/dist/task-consent/decision/0.1/payload.js

@@ -1,9 +0,0 @@
-/**
- * Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
- * Source: specs/task-consent/decision/0.1/payload.schema.json
- */
-/** Trust Task type URI. */
-export const TYPE_URI = "https://trusttasks.org/spec/task-consent/decision/0.1";
-/** Trust Task response type URI (request type URI + "#response"). */
-export const RESPONSE_TYPE_URI = "https://trusttasks.org/spec/task-consent/decision/0.1#response";
-//# sourceMappingURL=payload.js.map

package/dist/task-consent/decision/0.1/payload.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"payload.js","sourceRoot":"","sources":["../../../../src/task-consent/decision/0.1/payload.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAiCH,2BAA2B;AAC3B,MAAM,CAAC,MAAM,QAAQ,GAAG,uDAAgE,CAAC;AAEzF,qEAAqE;AACrE,MAAM,CAAC,MAAM,iBAAiB,GAAG,gEAAyE,CAAC"}

package/dist/task-consent/request/0.1/payload.d.ts

@@ -1,140 +0,0 @@
-/**
- * Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
- * Source: specs/task-consent/request/0.1/payload.schema.json
- */
-/**
- * The executor asks an enrolled approver device to authorize one pending privileged task, presenting the effects it computed by dry-running the real handler against its own prior state. The executor signs this document; the approver renders only what it verifies under that signature.
- */
-export interface TaskConsentRequestPayload {
-    /**
-     * Per-request nonce (≥128 bits entropy) echoed and signed by the matching task-consent/decision. It is also the salt in `payloadDigest`, so a party that holds this request can re-derive the digest and a party that does not cannot invert it.
-     */
-    challenge: string;
-    /**
-     * Type URI of the task awaiting approval. It is bound into `payloadDigest`: without that binding, two tasks whose payloads canonicalize identically would share a digest, and an approval for a benign task would authorize a destructive one.
-     */
-    taskType: string;
-    /**
-     * The binding between what the approver sees and what executes. Digest of the canonical (RFC 8785 JCS) payload, the task type, and the `challenge` as salt. The decision echoes it; the executor re-derives it from the payload it is about to run and refuses on mismatch. Salted because an unsalted digest over a low-entropy payload is a confirmation oracle for anyone who observes it in transit.
-     */
-    payloadDigest: string;
-    /**
-     * Authoritative SPEC §7.3 item 13 side-effect class of the pending task, derived by the executor from the compiled handler it is about to invoke. NEVER taken from the registry: a registry that decided this would be a consent kill-switch, downgradeable by publishing a new version with a weaker class.
-     */
-    sideEffects: "none" | "mutating" | "destructive";
-    exposure: Exposure;
-    /**
-     * What executing this task will actually do, computed by dry-running the real handler against the executor's prior state. MAY be empty when the executor has no dry-run for this handler — in which case `consequences` carries the specification's static fallback text. When BOTH are empty the surface MUST tell the approver the consequences could not be determined, and MUST NOT present the task as though it had none.
-     */
-    effects: Effect[];
-    /**
-     * Static, human-facing second-order effects declared in the task's specification (SPEC §7.3 item 13). A fallback for handlers with no dry-run — per-task, not per-request, so it can say 'any document change rotates the update keys' but not which keys. Prefer `effects`.
-     */
-    consequences?: string[];
-    /**
-     * OPTIONAL identifier the task acts on — the value at the specification's `subjectPath`, usually a DID. Absent for subjectless tasks.
-     */
-    subject?: string;
-    /**
-     * DID that submitted the pending task. Shown to the approver, and compared against the approver when `excludeRequester` is set.
-     */
-    requester: string;
-    /**
-     * OPTIONAL enrolled device the task was submitted from.
-     */
-    requesterDeviceId?: string;
-    /**
-     * OPTIONAL web origin that proposed the task, when it arrived via a relying party. This MUST be the origin the consumer's own runtime attested (e.g. the browser-supplied sender origin) — never a value the proposing page supplied, and never one the relying party could author.
-     */
-    origin?: string;
-    statePin?: StatePin;
-    /**
-     * Name of the approver set the policy's `requireConsent` named.
-     */
-    approverSet: string;
-    /**
-     * Distinct approvals from the set required before the task may execute.
-     */
-    minApprovals: number;
-    /**
-     * When true, `requester` may not count toward the threshold — so a single compromised device cannot both propose and approve. A surface MUST NOT offer to approve a request whose `requester` is its own subject when this is set.
-     */
-    excludeRequester: boolean;
-    /**
-     * After this instant the pending request lapses and no decision is accepted for it.
-     */
-    expiresAt: string;
-    ext?: Ext;
-}
-/**
- * The authoritative SPEC §7.3 item 14 exposure class of the pending task, derived by the executor from the compiled handler it is about to invoke — never from the registry's declared value.
- */
-export interface Exposure {
-    /**
-     * Sensitivity of data the task returns to its caller.
-     */
-    discloses: "none" | "metadata" | "secret";
-    /**
-     * Whether execution exercises the subject's own authority to produce an attributable effect in the subject's name.
-     */
-    actsAsSubject: boolean;
-}
-/**
- * One consequence of executing the pending task, authored by the executor that is about to run it. An effect is produced by dry-running the real handler against the executor's own prior state — never by the requester, and never by re-implementing the handler's semantics elsewhere. A consent surface renders ONLY effects it received under the executor's signature.
- */
-export interface Effect {
-    /**
-     * Machine discriminator for rich rendering. Well-known kinds are registered in the prose (`documentChange`, `keyRotation`, `preRotationRefresh`, `resourceDelete`, `disclosure`), but the set is OPEN: handlers evolve faster than this schema, and an executor MUST be able to describe a consequence this version does not name. A surface that does not recognise a `kind` MUST still render `summary`.
-     */
-    kind: string;
-    /**
-     * REQUIRED human-facing sentence describing this consequence, authored by the executor. This is the ONLY member a consent surface is guaranteed to be able to render, and it is what makes an unrecognised `kind` degrade to something truthful rather than something invisible. A surface MUST render it verbatim; it MUST NOT substitute its own prose.
-     */
-    summary: string;
-    /**
-     * OPTIONAL RFC 6901 JSON Pointer locating the change within the subject resource (e.g. `/service/0`).
-     */
-    path?: string;
-    /**
-     * OPTIONAL prior value at `path`, from the executor's authoritative state. ABSENT means there was no prior value (a creation); an explicit `null` is treated identically, so an executor MUST NOT rely on the two being distinguishable. Structured members are for rich rendering only — `summary` is what a surface is obliged to show, and it is where an executor states a distinction this shape cannot carry.
-     */
-    before?: {
-        [k: string]: unknown | undefined;
-    };
-    /**
-     * OPTIONAL resulting value at `path` once the task executes. ABSENT means the value is removed (a deletion), under the same rule as `before`.
-     */
-    after?: {
-        [k: string]: unknown | undefined;
-    };
-    /**
-     * OPTIONAL kind-specific structured extras (e.g. `{ "commitments": 2 }` for `preRotationRefresh`).
-     */
-    detail?: {
-        [k: string]: unknown | undefined;
-    };
-}
-/**
- * The prior state the effects were computed against. A human in the loop makes the approval window minutes wide, so the state can move underneath a pending approval. The executor asserts this pin still holds at execution and refuses otherwise — without it, a lost update silently executes against state the approver never saw.
- */
-export interface StatePin {
-    /**
-     * Identifier of the pinned resource (usually the subject DID).
-     */
-    resource: string;
-    /**
-     * Opaque version identifier of the prior state (e.g. a did:webvh `versionId`). Compared for equality at execution; the executor MUST NOT attempt to order or interpret it.
-     */
-    version: string;
-}
-/**
- * Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.
- */
-export interface Ext {
-    [k: string]: unknown | undefined;
-}
-/** Trust Task type URI. */
-export declare const TYPE_URI: "https://trusttasks.org/spec/task-consent/request/0.1";
-/** Trust Task response type URI (request type URI + "#response"). */
-export declare const RESPONSE_TYPE_URI: "https://trusttasks.org/spec/task-consent/request/0.1#response";
-//# sourceMappingURL=payload.d.ts.map

package/dist/task-consent/request/0.1/payload.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"payload.d.ts","sourceRoot":"","sources":["../../../../src/task-consent/request/0.1/payload.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;GAEG;AACH,MAAM,WAAW,yBAAyB;IACxC;;OAEG;IACH,SAAS,EAAE,MAAM,CAAC;IAClB;;OAEG;IACH,QAAQ,EAAE,MAAM,CAAC;IACjB;;OAEG;IACH,aAAa,EAAE,MAAM,CAAC;IACtB;;OAEG;IACH,WAAW,EAAE,MAAM,GAAG,UAAU,GAAG,aAAa,CAAC;IACjD,QAAQ,EAAE,QAAQ,CAAC;IACnB;;OAEG;IACH,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB;;OAEG;IACH,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;OAEG;IACH,SAAS,EAAE,MAAM,CAAC;IAClB;;OAEG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB;;OAEG;IACH,WAAW,EAAE,MAAM,CAAC;IACpB;;OAEG;IACH,YAAY,EAAE,MAAM,CAAC;IACrB;;OAEG;IACH,gBAAgB,EAAE,OAAO,CAAC;IAC1B;;OAEG;IACH,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,CAAC,EAAE,GAAG,CAAC;CACX;AACD;;GAEG;AACH,MAAM,WAAW,QAAQ;IACvB;;OAEG;IACH,SAAS,EAAE,MAAM,GAAG,UAAU,GAAG,QAAQ,CAAC;IAC1C;;OAEG;IACH,aAAa,EAAE,OAAO,CAAC;CACxB;AACD;;GAEG;AACH,MAAM,WAAW,MAAM;IACrB;;OAEG;IACH,IAAI,EAAE,MAAM,CAAC;IACb;;OAEG;IACH,OAAO,EAAE,MAAM,CAAC;IAChB;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;OAEG;IACH,MAAM,CAAC,EAAE;QACP,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC;KAClC,CAAC;IACF;;OAEG;IACH,KAAK,CAAC,EAAE;QACN,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC;KAClC,CAAC;IACF;;OAEG;IACH,MAAM,CAAC,EAAE;QACP,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC;KAClC,CAAC;CACH;AACD;;GAEG;AACH,MAAM,WAAW,QAAQ;IACvB;;OAEG;IACH,QAAQ,EAAE,MAAM,CAAC;IACjB;;OAEG;IACH,OAAO,EAAE,MAAM,CAAC;CACjB;AACD;;GAEG;AACH,MAAM,WAAW,GAAG;IAClB,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC;CAClC;AAED,2BAA2B;AAC3B,eAAO,MAAM,QAAQ,EAAG,sDAA+D,CAAC;AAExF,qEAAqE;AACrE,eAAO,MAAM,iBAAiB,EAAG,+DAAwE,CAAC"}

package/dist/task-consent/request/0.1/payload.js

@@ -1,9 +0,0 @@
-/**
- * Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
- * Source: specs/task-consent/request/0.1/payload.schema.json
- */
-/** Trust Task type URI. */
-export const TYPE_URI = "https://trusttasks.org/spec/task-consent/request/0.1";
-/** Trust Task response type URI (request type URI + "#response"). */
-export const RESPONSE_TYPE_URI = "https://trusttasks.org/spec/task-consent/request/0.1#response";
-//# sourceMappingURL=payload.js.map

package/dist/task-consent/request/0.1/payload.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"payload.js","sourceRoot":"","sources":["../../../../src/task-consent/request/0.1/payload.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAsIH,2BAA2B;AAC3B,MAAM,CAAC,MAAM,QAAQ,GAAG,sDAA+D,CAAC;AAExF,qEAAqE;AACrE,MAAM,CAAC,MAAM,iBAAiB,GAAG,+DAAwE,CAAC"}

package/dist/vta/contexts/did-templates/create/1.0/payload.d.ts

@@ -1,71 +0,0 @@
-/**
- * Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
- * Source: specs/vta/contexts/did-templates/create/1.0/payload.schema.json
- */
-/**
- * Create a new DID template scoped to a context on a VTA. Gated on the context's admin (or super-admin). The template's own `name` is the resource id within the context scope; the VTA refuses duplicates (use update to replace). The success response is the persisted DidTemplateRecord.
- */
-export interface VTAContextDIDTemplateCreatePayload {
-    /**
-     * The context the template is scoped to.
-     */
-    contextId: string;
-    template: DidTemplate;
-    ext?: Ext;
-}
-/**
- * Full template document to store. Validated against the v1 template schema before persistence; an invalid shape is rejected with the framework's `malformedRequest`.
- */
-export interface DidTemplate {
-    /**
-     * Template schema version. Currently always 1.
-     */
-    schemaVersion: 1;
-    /**
-     * Template id within its scope. Lowercase alphanumeric and hyphen only.
-     */
-    name: string;
-    /**
-     * Classification hint, e.g. `mediator`, `did-host-http`, `app`. Drives downstream provisioning behaviour.
-     */
-    kind: string;
-    /**
-     * Human-readable description of what the template provisions.
-     */
-    description?: string | null;
-    /**
-     * DID methods this template targets, e.g. ["webvh", "web"] for a hosted DID or ["key"] for a did:key.
-     */
-    methods?: string[];
-    /**
-     * Variables the caller MUST supply at render time. MUST NOT include reserved ambient names (DID, SIGNING_KEY_MB, KA_KEY_MB, VTA_DID, VTA_URL, CONTEXT_ID, CONTEXT_DID, NOW).
-     */
-    requiredVars?: string[];
-    /**
-     * Variables with default values, keyed by variable name.
-     */
-    optionalVars?: {
-        [k: string]: unknown | undefined;
-    };
-    /**
-     * Hints for CLI / setup wizards (e.g. preRotationCount, portable, addMediatorService).
-     */
-    defaults?: {
-        [k: string]: unknown | undefined;
-    };
-    /**
-     * The DID document body with `{TOKEN}` placeholders. `document.id` MUST contain the `{DID}` placeholder. Every `{TOKEN}` MUST be declared in requiredVars/optionalVars or be a reserved ambient name.
-     */
-    document: {};
-}
-/**
- * Ecosystem-defined extension members per SPEC.md §4.5.1.
- */
-export interface Ext {
-    [k: string]: unknown | undefined;
-}
-/** Trust Task type URI. */
-export declare const TYPE_URI: "https://trusttasks.org/spec/vta/contexts/did-templates/create/1.0";
-/** Trust Task response type URI (request type URI + "#response"). */
-export declare const RESPONSE_TYPE_URI: "https://trusttasks.org/spec/vta/contexts/did-templates/create/1.0#response";
-//# sourceMappingURL=payload.d.ts.map

package/dist/vta/contexts/did-templates/create/1.0/payload.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"payload.d.ts","sourceRoot":"","sources":["../../../../../../src/vta/contexts/did-templates/create/1.0/payload.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;GAEG;AACH,MAAM,WAAW,kCAAkC;IACjD;;OAEG;IACH,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,WAAW,CAAC;IACtB,GAAG,CAAC,EAAE,GAAG,CAAC;CACX;AACD;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B;;OAEG;IACH,aAAa,EAAE,CAAC,CAAC;IACjB;;OAEG;IACH,IAAI,EAAE,MAAM,CAAC;IACb;;OAEG;IACH,IAAI,EAAE,MAAM,CAAC;IACb;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB;;OAEG;IACH,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB;;OAEG;IACH,YAAY,CAAC,EAAE;QACb,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC;KAClC,CAAC;IACF;;OAEG;IACH,QAAQ,CAAC,EAAE;QACT,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC;KAClC,CAAC;IACF;;OAEG;IACH,QAAQ,EAAE,EAAE,CAAC;CACd;AACD;;GAEG;AACH,MAAM,WAAW,GAAG;IAClB,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC;CAClC;AAED,2BAA2B;AAC3B,eAAO,MAAM,QAAQ,EAAG,mEAA4E,CAAC;AAErG,qEAAqE;AACrE,eAAO,MAAM,iBAAiB,EAAG,4EAAqF,CAAC"}

package/dist/vta/contexts/did-templates/create/1.0/payload.js

@@ -1,9 +0,0 @@
-/**
- * Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
- * Source: specs/vta/contexts/did-templates/create/1.0/payload.schema.json
- */
-/** Trust Task type URI. */
-export const TYPE_URI = "https://trusttasks.org/spec/vta/contexts/did-templates/create/1.0";
-/** Trust Task response type URI (request type URI + "#response"). */
-export const RESPONSE_TYPE_URI = "https://trusttasks.org/spec/vta/contexts/did-templates/create/1.0#response";
-//# sourceMappingURL=payload.js.map

package/dist/vta/contexts/did-templates/create/1.0/payload.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"payload.js","sourceRoot":"","sources":["../../../../../../src/vta/contexts/did-templates/create/1.0/payload.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAiEH,2BAA2B;AAC3B,MAAM,CAAC,MAAM,QAAQ,GAAG,mEAA4E,CAAC;AAErG,qEAAqE;AACrE,MAAM,CAAC,MAAM,iBAAiB,GAAG,4EAAqF,CAAC"}

package/dist/vta/contexts/did-templates/delete/1.0/payload.d.ts

@@ -1,29 +0,0 @@
-/**
- * Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
- * Source: specs/vta/contexts/did-templates/delete/1.0/payload.schema.json
- */
-/**
- * Remove a DID template scoped to a context on a VTA by name. Gated on the context's admin (or super-admin). The success response echoes the name and confirms deletion.
- */
-export interface VTAContextDIDTemplateDeletePayload {
-    /**
-     * The context the template is scoped to.
-     */
-    contextId: string;
-    /**
-     * Resource id of the template to remove within the context scope.
-     */
-    name: string;
-    ext?: Ext;
-}
-/**
- * Ecosystem-defined extension members per SPEC.md §4.5.1.
- */
-export interface Ext {
-    [k: string]: unknown | undefined;
-}
-/** Trust Task type URI. */
-export declare const TYPE_URI: "https://trusttasks.org/spec/vta/contexts/did-templates/delete/1.0";
-/** Trust Task response type URI (request type URI + "#response"). */
-export declare const RESPONSE_TYPE_URI: "https://trusttasks.org/spec/vta/contexts/did-templates/delete/1.0#response";
-//# sourceMappingURL=payload.d.ts.map

package/dist/vta/contexts/did-templates/delete/1.0/payload.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"payload.d.ts","sourceRoot":"","sources":["../../../../../../src/vta/contexts/did-templates/delete/1.0/payload.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;GAEG;AACH,MAAM,WAAW,kCAAkC;IACjD;;OAEG;IACH,SAAS,EAAE,MAAM,CAAC;IAClB;;OAEG;IACH,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,GAAG,CAAC;CACX;AACD;;GAEG;AACH,MAAM,WAAW,GAAG;IAClB,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC;CAClC;AAED,2BAA2B;AAC3B,eAAO,MAAM,QAAQ,EAAG,mEAA4E,CAAC;AAErG,qEAAqE;AACrE,eAAO,MAAM,iBAAiB,EAAG,4EAAqF,CAAC"}

package/dist/vta/contexts/did-templates/delete/1.0/payload.js

@@ -1,9 +0,0 @@
-/**
- * Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
- * Source: specs/vta/contexts/did-templates/delete/1.0/payload.schema.json
- */
-/** Trust Task type URI. */
-export const TYPE_URI = "https://trusttasks.org/spec/vta/contexts/did-templates/delete/1.0";
-/** Trust Task response type URI (request type URI + "#response"). */
-export const RESPONSE_TYPE_URI = "https://trusttasks.org/spec/vta/contexts/did-templates/delete/1.0#response";
-//# sourceMappingURL=payload.js.map

package/dist/vta/contexts/did-templates/delete/1.0/payload.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"payload.js","sourceRoot":"","sources":["../../../../../../src/vta/contexts/did-templates/delete/1.0/payload.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAuBH,2BAA2B;AAC3B,MAAM,CAAC,MAAM,QAAQ,GAAG,mEAA4E,CAAC;AAErG,qEAAqE;AACrE,MAAM,CAAC,MAAM,iBAAiB,GAAG,4EAAqF,CAAC"}

package/dist/vta/contexts/did-templates/get/1.0/payload.d.ts

@@ -1,29 +0,0 @@
-/**
- * Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
- * Source: specs/vta/contexts/did-templates/get/1.0/payload.schema.json
- */
-/**
- * Fetch one context-scoped DID template by name from a VTA. Gated on context access. The success response is the persisted DidTemplateRecord.
- */
-export interface VTAContextDIDTemplateGetPayload {
-    /**
-     * The context the template is scoped to.
-     */
-    contextId: string;
-    /**
-     * Template id within the context scope.
-     */
-    name: string;
-    ext?: Ext;
-}
-/**
- * Ecosystem-defined extension members per SPEC.md §4.5.1.
- */
-export interface Ext {
-    [k: string]: unknown | undefined;
-}
-/** Trust Task type URI. */
-export declare const TYPE_URI: "https://trusttasks.org/spec/vta/contexts/did-templates/get/1.0";
-/** Trust Task response type URI (request type URI + "#response"). */
-export declare const RESPONSE_TYPE_URI: "https://trusttasks.org/spec/vta/contexts/did-templates/get/1.0#response";
-//# sourceMappingURL=payload.d.ts.map

package/dist/vta/contexts/did-templates/get/1.0/payload.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"payload.d.ts","sourceRoot":"","sources":["../../../../../../src/vta/contexts/did-templates/get/1.0/payload.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;GAEG;AACH,MAAM,WAAW,+BAA+B;IAC9C;;OAEG;IACH,SAAS,EAAE,MAAM,CAAC;IAClB;;OAEG;IACH,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,GAAG,CAAC;CACX;AACD;;GAEG;AACH,MAAM,WAAW,GAAG;IAClB,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC;CAClC;AAED,2BAA2B;AAC3B,eAAO,MAAM,QAAQ,EAAG,gEAAyE,CAAC;AAElG,qEAAqE;AACrE,eAAO,MAAM,iBAAiB,EAAG,yEAAkF,CAAC"}

package/dist/vta/contexts/did-templates/get/1.0/payload.js

@@ -1,9 +0,0 @@
-/**
- * Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
- * Source: specs/vta/contexts/did-templates/get/1.0/payload.schema.json
- */
-/** Trust Task type URI. */
-export const TYPE_URI = "https://trusttasks.org/spec/vta/contexts/did-templates/get/1.0";
-/** Trust Task response type URI (request type URI + "#response"). */
-export const RESPONSE_TYPE_URI = "https://trusttasks.org/spec/vta/contexts/did-templates/get/1.0#response";
-//# sourceMappingURL=payload.js.map

package/dist/vta/contexts/did-templates/get/1.0/payload.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"payload.js","sourceRoot":"","sources":["../../../../../../src/vta/contexts/did-templates/get/1.0/payload.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAuBH,2BAA2B;AAC3B,MAAM,CAAC,MAAM,QAAQ,GAAG,gEAAyE,CAAC;AAElG,qEAAqE;AACrE,MAAM,CAAC,MAAM,iBAAiB,GAAG,yEAAkF,CAAC"}