@openvtc/trust-tasks 0.2.2 → 0.2.4

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openvtc/trust-tasks",
-  "version": "0.2.2",
+  "version": "0.2.4",
   "description": "Generated TypeScript bindings for the Trust Tasks framework registry.",
   "type": "module",
   "main": "./dist/index.js",

package/src/consent/_shared/0.1/consent.ts

@@ -0,0 +1,11 @@
+/**
+ * Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
+ * Source: specs/consent/_shared/0.1/consent.schema.json
+ */
+
+/**
+ * Platform-agnostic definitions shared across the consent/* tasks.
+ */
+export interface ConsentSharedDefinitions {
+  [k: string]: unknown | undefined;
+}

package/src/consent/decision/1.0/payload.ts

@@ -0,0 +1,61 @@
+/**
+ * Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
+ * Source: specs/consent/decision/1.0/payload.schema.json
+ */
+
+/**
+ * An approver allows or denies an AI agent's access to a messaging conversation.
+ */
+export interface ConsentDecisionPayload {
+  subject: ConsentSubject;
+  /**
+   * Whether the subject is permitted. The ABSENCE of any grant is treated as `deny` (default-deny).
+   */
+  effect: "allow" | "deny";
+  /**
+   * Granted scope. REQUIRED when `effect` is `allow`.
+   */
+  scope?: "receive" | "converse";
+  /**
+   * Echoes the consent/request challenge this decision answers. Omit only for an operator-initiated pre-authorization.
+   */
+  challenge?: string;
+  /**
+   * Optional grant TTL; after it the subject must be re-consented.
+   */
+  expiresAt?: string;
+  ext?: Ext;
+}
+/**
+ * The platform-agnostic identifier of WHAT is being consented to: one conversation, for one agent.
+ */
+export interface ConsentSubject {
+  /**
+   * Messaging-platform tag, e.g. "signal", "whatsapp", "slack".
+   */
+  platform: string;
+  /**
+   * The bridge's OPAQUE conversation handle (e.g. "sig-1a2b3c4d"). NEVER the raw platform address — the VTA never learns the phone number / chat id.
+   */
+  conversationRef: string;
+  /**
+   * The interaction kind: a 1:1 direct message, a multi-party group, or a broadcast channel.
+   */
+  kind: "dm" | "group" | "channel";
+  /**
+   * VID (DID) of the AI agent the conversation would reach.
+   */
+  agent: string;
+}
+/**
+ * Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.
+ */
+export interface Ext {
+  [k: string]: unknown | undefined;
+}
+
+/** Trust Task type URI. */
+export const TYPE_URI = "https://trusttasks.org/spec/consent/decision/1.0" as const;
+
+/** Trust Task response type URI (request type URI + "#response"). */
+export const RESPONSE_TYPE_URI = "https://trusttasks.org/spec/consent/decision/1.0#response" as const;

package/src/consent/list/1.0/payload.ts

@@ -0,0 +1,57 @@
+/**
+ * Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
+ * Source: specs/consent/list/1.0/payload.schema.json
+ */
+
+/**
+ * A bridge fetches the consent grants it should enforce.
+ */
+export interface ConsentListPayload {
+  /**
+   * Optional. Restrict to grants for this agent VID.
+   */
+  agent?: string;
+  /**
+   * Optional. Restrict to this platform tag.
+   */
+  platform?: string;
+  subject?: ConsentSubject;
+  /**
+   * Optional opaque cursor; return only grants changed after it.
+   */
+  since?: string;
+  ext?: Ext;
+}
+/**
+ * Optional. A full subject, to point-check a single conversation.
+ */
+export interface ConsentSubject {
+  /**
+   * Messaging-platform tag, e.g. "signal", "whatsapp", "slack".
+   */
+  platform: string;
+  /**
+   * The bridge's OPAQUE conversation handle (e.g. "sig-1a2b3c4d"). NEVER the raw platform address — the VTA never learns the phone number / chat id.
+   */
+  conversationRef: string;
+  /**
+   * The interaction kind: a 1:1 direct message, a multi-party group, or a broadcast channel.
+   */
+  kind: "dm" | "group" | "channel";
+  /**
+   * VID (DID) of the AI agent the conversation would reach.
+   */
+  agent: string;
+}
+/**
+ * Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.
+ */
+export interface Ext {
+  [k: string]: unknown | undefined;
+}
+
+/** Trust Task type URI. */
+export const TYPE_URI = "https://trusttasks.org/spec/consent/list/1.0" as const;
+
+/** Trust Task response type URI (request type URI + "#response"). */
+export const RESPONSE_TYPE_URI = "https://trusttasks.org/spec/consent/list/1.0#response" as const;

package/src/consent/request/1.0/payload.ts

@@ -0,0 +1,65 @@
+/**
+ * Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
+ * Source: specs/consent/request/1.0/payload.schema.json
+ */
+
+/**
+ * A bridge asks the VTA whether an inbound conversation may reach an AI agent, prompting operator consent on first contact.
+ */
+export interface ConsentRequestPayload {
+  subject: ConsentSubject;
+  /**
+   * The access the bridge seeks for the agent on this conversation.
+   */
+  scope: "receive" | "converse";
+  /**
+   * base64url-encoded nonce (≥128 bits entropy) echoed by the matching consent/decision, so the bridge can correlate the decision to this request.
+   */
+  challenge: string;
+  /**
+   * Optional operator-facing label (e.g. "Signal group 'Family'"). MUST NOT contain a raw platform address.
+   */
+  displayHint?: string;
+  /**
+   * Optional multihash digest of the held first message, binding the request to concrete content.
+   */
+  firstMessageDigest?: string;
+  /**
+   * Optional VTA context path the bridge runs under, to scope approver resolution.
+   */
+  contextHint?: string;
+  ext?: Ext;
+}
+/**
+ * The platform-agnostic identifier of WHAT is being consented to: one conversation, for one agent.
+ */
+export interface ConsentSubject {
+  /**
+   * Messaging-platform tag, e.g. "signal", "whatsapp", "slack".
+   */
+  platform: string;
+  /**
+   * The bridge's OPAQUE conversation handle (e.g. "sig-1a2b3c4d"). NEVER the raw platform address — the VTA never learns the phone number / chat id.
+   */
+  conversationRef: string;
+  /**
+   * The interaction kind: a 1:1 direct message, a multi-party group, or a broadcast channel.
+   */
+  kind: "dm" | "group" | "channel";
+  /**
+   * VID (DID) of the AI agent the conversation would reach.
+   */
+  agent: string;
+}
+/**
+ * Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.
+ */
+export interface Ext {
+  [k: string]: unknown | undefined;
+}
+
+/** Trust Task type URI. */
+export const TYPE_URI = "https://trusttasks.org/spec/consent/request/1.0" as const;
+
+/** Trust Task response type URI (request type URI + "#response"). */
+export const RESPONSE_TYPE_URI = "https://trusttasks.org/spec/consent/request/1.0#response" as const;

package/src/consent/revoke/1.0/payload.ts

@@ -0,0 +1,49 @@
+/**
+ * Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
+ * Source: specs/consent/revoke/1.0/payload.schema.json
+ */
+
+/**
+ * An operator revokes a standing consent grant.
+ */
+export interface ConsentRevokePayload {
+  subject: ConsentSubject;
+  /**
+   * Optional operator note recorded in the audit trail.
+   */
+  reason?: string;
+  ext?: Ext;
+}
+/**
+ * The platform-agnostic identifier of WHAT is being consented to: one conversation, for one agent.
+ */
+export interface ConsentSubject {
+  /**
+   * Messaging-platform tag, e.g. "signal", "whatsapp", "slack".
+   */
+  platform: string;
+  /**
+   * The bridge's OPAQUE conversation handle (e.g. "sig-1a2b3c4d"). NEVER the raw platform address — the VTA never learns the phone number / chat id.
+   */
+  conversationRef: string;
+  /**
+   * The interaction kind: a 1:1 direct message, a multi-party group, or a broadcast channel.
+   */
+  kind: "dm" | "group" | "channel";
+  /**
+   * VID (DID) of the AI agent the conversation would reach.
+   */
+  agent: string;
+}
+/**
+ * Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.
+ */
+export interface Ext {
+  [k: string]: unknown | undefined;
+}
+
+/** Trust Task type URI. */
+export const TYPE_URI = "https://trusttasks.org/spec/consent/revoke/1.0" as const;
+
+/** Trust Task response type URI (request type URI + "#response"). */
+export const RESPONSE_TYPE_URI = "https://trusttasks.org/spec/consent/revoke/1.0#response" as const;

package/src/index.ts

@@ -34,6 +34,11 @@ export * as AuthWhoami_v0_1 from "./auth/whoami/0.1/payload";
 export * as ChatMessage_v1_0 from "./chat/message/1.0/payload";
 export * as ConfirmRequest_v0_1 from "./confirm/request/0.1/payload";
 export * as ConfirmResponse_v0_1 from "./confirm/response/0.1/payload";
+export * as ConsentShared_v0_1 from "./consent/_shared/0.1/consent";
+export * as ConsentDecision_v1_0 from "./consent/decision/1.0/payload";
+export * as ConsentList_v1_0 from "./consent/list/1.0/payload";
+export * as ConsentRequest_v1_0 from "./consent/request/1.0/payload";
+export * as ConsentRevoke_v1_0 from "./consent/revoke/1.0/payload";
 export * as DeviceBindingShared_v0_1 from "./device/_shared/0.1/device-binding";
 export * as DeviceBindingShared_v0_2 from "./device/_shared/0.2/device-binding";
 export * as DeviceDisable_v0_1 from "./device/disable/0.1/payload";
@@ -128,6 +133,18 @@ export * as VaultUpsert_v0_2 from "./vault/upsert/0.2/payload";
 export * as VaultUsage_v0_1 from "./vault/usage/0.1/payload";
 export * as VaultUsage_v0_2 from "./vault/usage/0.2/payload";
 export * as PasskeyVmShared_v0_1 from "./vta/_shared/0.1/passkey-vm";
+export * as VtaContextsDidTemplatesCreate_v1_0 from "./vta/contexts/did-templates/create/1.0/payload";
+export * as VtaContextsDidTemplatesDelete_v1_0 from "./vta/contexts/did-templates/delete/1.0/payload";
+export * as VtaContextsDidTemplatesGet_v1_0 from "./vta/contexts/did-templates/get/1.0/payload";
+export * as VtaContextsDidTemplatesList_v1_0 from "./vta/contexts/did-templates/list/1.0/payload";
+export * as VtaContextsDidTemplatesRender_v1_0 from "./vta/contexts/did-templates/render/1.0/payload";
+export * as VtaContextsDidTemplatesUpdate_v1_0 from "./vta/contexts/did-templates/update/1.0/payload";
+export * as VtaDidTemplatesCreate_v1_0 from "./vta/did-templates/create/1.0/payload";
+export * as VtaDidTemplatesDelete_v1_0 from "./vta/did-templates/delete/1.0/payload";
+export * as VtaDidTemplatesGet_v1_0 from "./vta/did-templates/get/1.0/payload";
+export * as VtaDidTemplatesList_v1_0 from "./vta/did-templates/list/1.0/payload";
+export * as VtaDidTemplatesRender_v1_0 from "./vta/did-templates/render/1.0/payload";
+export * as VtaDidTemplatesUpdate_v1_0 from "./vta/did-templates/update/1.0/payload";
 export * as VtaPasskeyVmsEnrollChallenge_v0_1 from "./vta/passkey-vms/enroll-challenge/0.1/payload";
 export * as VtaPasskeyVmsEnrollSubmit_v0_1 from "./vta/passkey-vms/enroll-submit/0.1/payload";
 export * as VtaPasskeyVmsList_v0_1 from "./vta/passkey-vms/list/0.1/payload";

package/src/vta/contexts/did-templates/create/1.0/payload.ts

@@ -0,0 +1,73 @@
+/**
+ * Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
+ * Source: specs/vta/contexts/did-templates/create/1.0/payload.schema.json
+ */
+
+/**
+ * Create a new DID template scoped to a context on a VTA. Gated on the context's admin (or super-admin). The template's own `name` is the resource id within the context scope; the VTA refuses duplicates (use update to replace). The success response is the persisted DidTemplateRecord.
+ */
+export interface VTAContextDIDTemplateCreatePayload {
+  /**
+   * The context the template is scoped to.
+   */
+  contextId: string;
+  template: DidTemplate;
+  ext?: Ext;
+}
+/**
+ * Full template document to store. Validated against the v1 template schema before persistence; an invalid shape is rejected with the framework's `malformedRequest`.
+ */
+export interface DidTemplate {
+  /**
+   * Template schema version. Currently always 1.
+   */
+  schemaVersion: 1;
+  /**
+   * Template id within its scope. Lowercase alphanumeric and hyphen only.
+   */
+  name: string;
+  /**
+   * Classification hint, e.g. `mediator`, `did-host-http`, `app`. Drives downstream provisioning behaviour.
+   */
+  kind: string;
+  /**
+   * Human-readable description of what the template provisions.
+   */
+  description?: string | null;
+  /**
+   * DID methods this template targets, e.g. ["webvh", "web"] for a hosted DID or ["key"] for a did:key.
+   */
+  methods?: string[];
+  /**
+   * Variables the caller MUST supply at render time. MUST NOT include reserved ambient names (DID, SIGNING_KEY_MB, KA_KEY_MB, VTA_DID, VTA_URL, CONTEXT_ID, CONTEXT_DID, NOW).
+   */
+  requiredVars?: string[];
+  /**
+   * Variables with default values, keyed by variable name.
+   */
+  optionalVars?: {
+    [k: string]: unknown | undefined;
+  };
+  /**
+   * Hints for CLI / setup wizards (e.g. preRotationCount, portable, addMediatorService).
+   */
+  defaults?: {
+    [k: string]: unknown | undefined;
+  };
+  /**
+   * The DID document body with `{TOKEN}` placeholders. `document.id` MUST contain the `{DID}` placeholder. Every `{TOKEN}` MUST be declared in requiredVars/optionalVars or be a reserved ambient name.
+   */
+  document: {};
+}
+/**
+ * Ecosystem-defined extension members per SPEC.md §4.5.1.
+ */
+export interface Ext {
+  [k: string]: unknown | undefined;
+}
+
+/** Trust Task type URI. */
+export const TYPE_URI = "https://trusttasks.org/spec/vta/contexts/did-templates/create/1.0" as const;
+
+/** Trust Task response type URI (request type URI + "#response"). */
+export const RESPONSE_TYPE_URI = "https://trusttasks.org/spec/vta/contexts/did-templates/create/1.0#response" as const;

package/src/vta/contexts/did-templates/delete/1.0/payload.ts

@@ -0,0 +1,31 @@
+/**
+ * Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
+ * Source: specs/vta/contexts/did-templates/delete/1.0/payload.schema.json
+ */
+
+/**
+ * Remove a DID template scoped to a context on a VTA by name. Gated on the context's admin (or super-admin). The success response echoes the name and confirms deletion.
+ */
+export interface VTAContextDIDTemplateDeletePayload {
+  /**
+   * The context the template is scoped to.
+   */
+  contextId: string;
+  /**
+   * Resource id of the template to remove within the context scope.
+   */
+  name: string;
+  ext?: Ext;
+}
+/**
+ * Ecosystem-defined extension members per SPEC.md §4.5.1.
+ */
+export interface Ext {
+  [k: string]: unknown | undefined;
+}
+
+/** Trust Task type URI. */
+export const TYPE_URI = "https://trusttasks.org/spec/vta/contexts/did-templates/delete/1.0" as const;
+
+/** Trust Task response type URI (request type URI + "#response"). */
+export const RESPONSE_TYPE_URI = "https://trusttasks.org/spec/vta/contexts/did-templates/delete/1.0#response" as const;

package/src/vta/contexts/did-templates/get/1.0/payload.ts

@@ -0,0 +1,31 @@
+/**
+ * Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
+ * Source: specs/vta/contexts/did-templates/get/1.0/payload.schema.json
+ */
+
+/**
+ * Fetch one context-scoped DID template by name from a VTA. Gated on context access. The success response is the persisted DidTemplateRecord.
+ */
+export interface VTAContextDIDTemplateGetPayload {
+  /**
+   * The context the template is scoped to.
+   */
+  contextId: string;
+  /**
+   * Template id within the context scope.
+   */
+  name: string;
+  ext?: Ext;
+}
+/**
+ * Ecosystem-defined extension members per SPEC.md §4.5.1.
+ */
+export interface Ext {
+  [k: string]: unknown | undefined;
+}
+
+/** Trust Task type URI. */
+export const TYPE_URI = "https://trusttasks.org/spec/vta/contexts/did-templates/get/1.0" as const;
+
+/** Trust Task response type URI (request type URI + "#response"). */
+export const RESPONSE_TYPE_URI = "https://trusttasks.org/spec/vta/contexts/did-templates/get/1.0#response" as const;

package/src/vta/contexts/did-templates/list/1.0/payload.ts

@@ -0,0 +1,27 @@
+/**
+ * Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
+ * Source: specs/vta/contexts/did-templates/list/1.0/payload.schema.json
+ */
+
+/**
+ * List the DID templates scoped to a context on a VTA. Gated on context access. The success response is the set of persisted DidTemplateRecords for the context.
+ */
+export interface VTAContextDIDTemplateListPayload {
+  /**
+   * The context the templates are scoped to.
+   */
+  contextId: string;
+  ext?: Ext;
+}
+/**
+ * Ecosystem-defined extension members per SPEC.md §4.5.1.
+ */
+export interface Ext {
+  [k: string]: unknown | undefined;
+}
+
+/** Trust Task type URI. */
+export const TYPE_URI = "https://trusttasks.org/spec/vta/contexts/did-templates/list/1.0" as const;
+
+/** Trust Task response type URI (request type URI + "#response"). */
+export const RESPONSE_TYPE_URI = "https://trusttasks.org/spec/vta/contexts/did-templates/list/1.0#response" as const;

package/src/vta/contexts/did-templates/render/1.0/payload.ts

@@ -0,0 +1,37 @@
+/**
+ * Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
+ * Source: specs/vta/contexts/did-templates/render/1.0/payload.schema.json
+ */
+
+/**
+ * Render a context-scoped DID template to a DID document on a VTA. Gated on context access. The VTA fills `{TOKEN}` placeholders with caller-supplied variables plus ambient values it injects server-side. The success response is the rendered DID document.
+ */
+export interface VTAContextDIDTemplateRenderPayload {
+  /**
+   * The context the template is scoped to.
+   */
+  contextId: string;
+  /**
+   * Resource id of the template to render within the context scope.
+   */
+  name: string;
+  /**
+   * Caller-supplied variables; the VTA also injects ambient VTA_DID, VTA_URL, NOW, CONTEXT_ID, and CONTEXT_DID (if set on the context) server-side.
+   */
+  vars?: {
+    [k: string]: unknown | undefined;
+  };
+  ext?: Ext;
+}
+/**
+ * Ecosystem-defined extension members per SPEC.md §4.5.1.
+ */
+export interface Ext {
+  [k: string]: unknown | undefined;
+}
+
+/** Trust Task type URI. */
+export const TYPE_URI = "https://trusttasks.org/spec/vta/contexts/did-templates/render/1.0" as const;
+
+/** Trust Task response type URI (request type URI + "#response"). */
+export const RESPONSE_TYPE_URI = "https://trusttasks.org/spec/vta/contexts/did-templates/render/1.0#response" as const;

package/src/vta/contexts/did-templates/update/1.0/payload.ts

@@ -0,0 +1,77 @@
+/**
+ * Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
+ * Source: specs/vta/contexts/did-templates/update/1.0/payload.schema.json
+ */
+
+/**
+ * Replace an existing DID template scoped to a context on a VTA. Gated on the context's admin (or super-admin). `name` is the resource id within the context scope and MUST equal `template.name`. The VTA preserves the original createdAt/createdBy and advances updatedAt. The success response is the persisted DidTemplateRecord.
+ */
+export interface VTAContextDIDTemplateUpdatePayload {
+  /**
+   * The context the template is scoped to.
+   */
+  contextId: string;
+  /**
+   * Resource id of the template to replace; MUST equal `template.name`.
+   */
+  name: string;
+  template: DidTemplate;
+  ext?: Ext;
+}
+/**
+ * Full replacement template document. Validated against the v1 template schema before persistence; an invalid shape is rejected with the framework's `malformedRequest`.
+ */
+export interface DidTemplate {
+  /**
+   * Template schema version. Currently always 1.
+   */
+  schemaVersion: 1;
+  /**
+   * Template id within its scope. Lowercase alphanumeric and hyphen only.
+   */
+  name: string;
+  /**
+   * Classification hint, e.g. `mediator`, `did-host-http`, `app`. Drives downstream provisioning behaviour.
+   */
+  kind: string;
+  /**
+   * Human-readable description of what the template provisions.
+   */
+  description?: string | null;
+  /**
+   * DID methods this template targets, e.g. ["webvh", "web"] for a hosted DID or ["key"] for a did:key.
+   */
+  methods?: string[];
+  /**
+   * Variables the caller MUST supply at render time. MUST NOT include reserved ambient names (DID, SIGNING_KEY_MB, KA_KEY_MB, VTA_DID, VTA_URL, CONTEXT_ID, CONTEXT_DID, NOW).
+   */
+  requiredVars?: string[];
+  /**
+   * Variables with default values, keyed by variable name.
+   */
+  optionalVars?: {
+    [k: string]: unknown | undefined;
+  };
+  /**
+   * Hints for CLI / setup wizards (e.g. preRotationCount, portable, addMediatorService).
+   */
+  defaults?: {
+    [k: string]: unknown | undefined;
+  };
+  /**
+   * The DID document body with `{TOKEN}` placeholders. `document.id` MUST contain the `{DID}` placeholder. Every `{TOKEN}` MUST be declared in requiredVars/optionalVars or be a reserved ambient name.
+   */
+  document: {};
+}
+/**
+ * Ecosystem-defined extension members per SPEC.md §4.5.1.
+ */
+export interface Ext {
+  [k: string]: unknown | undefined;
+}
+
+/** Trust Task type URI. */
+export const TYPE_URI = "https://trusttasks.org/spec/vta/contexts/did-templates/update/1.0" as const;
+
+/** Trust Task response type URI (request type URI + "#response"). */
+export const RESPONSE_TYPE_URI = "https://trusttasks.org/spec/vta/contexts/did-templates/update/1.0#response" as const;

package/src/vta/did-templates/create/1.0/payload.ts

@@ -0,0 +1,69 @@
+/**
+ * Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
+ * Source: specs/vta/did-templates/create/1.0/payload.schema.json
+ */
+
+/**
+ * Create a new global DID template on a VTA. Super-admin gated. The template's own `name` is the resource id within the global scope; the VTA refuses duplicates (use update to replace). The success response is the persisted DidTemplateRecord.
+ */
+export interface VTADIDTemplateCreatePayload {
+  template: DidTemplate;
+  ext?: Ext;
+}
+/**
+ * Full template document to store. Validated against the v1 template schema before persistence; an invalid shape is rejected with the framework's `malformedRequest`.
+ */
+export interface DidTemplate {
+  /**
+   * Template schema version. Currently always 1.
+   */
+  schemaVersion: 1;
+  /**
+   * Template id within its scope. Lowercase alphanumeric and hyphen only.
+   */
+  name: string;
+  /**
+   * Classification hint, e.g. `mediator`, `did-host-http`, `app`. Drives downstream provisioning behaviour.
+   */
+  kind: string;
+  /**
+   * Human-readable description of what the template provisions.
+   */
+  description?: string | null;
+  /**
+   * DID methods this template targets, e.g. ["webvh", "web"] for a hosted DID or ["key"] for a did:key.
+   */
+  methods?: string[];
+  /**
+   * Variables the caller MUST supply at render time. MUST NOT include reserved ambient names (DID, SIGNING_KEY_MB, KA_KEY_MB, VTA_DID, VTA_URL, CONTEXT_ID, CONTEXT_DID, NOW).
+   */
+  requiredVars?: string[];
+  /**
+   * Variables with default values, keyed by variable name.
+   */
+  optionalVars?: {
+    [k: string]: unknown | undefined;
+  };
+  /**
+   * Hints for CLI / setup wizards (e.g. preRotationCount, portable, addMediatorService).
+   */
+  defaults?: {
+    [k: string]: unknown | undefined;
+  };
+  /**
+   * The DID document body with `{TOKEN}` placeholders. `document.id` MUST contain the `{DID}` placeholder. Every `{TOKEN}` MUST be declared in requiredVars/optionalVars or be a reserved ambient name.
+   */
+  document: {};
+}
+/**
+ * Ecosystem-defined extension members per SPEC.md §4.5.1.
+ */
+export interface Ext {
+  [k: string]: unknown | undefined;
+}
+
+/** Trust Task type URI. */
+export const TYPE_URI = "https://trusttasks.org/spec/vta/did-templates/create/1.0" as const;
+
+/** Trust Task response type URI (request type URI + "#response"). */
+export const RESPONSE_TYPE_URI = "https://trusttasks.org/spec/vta/did-templates/create/1.0#response" as const;

package/src/vta/did-templates/delete/1.0/payload.ts

@@ -0,0 +1,27 @@
+/**
+ * Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
+ * Source: specs/vta/did-templates/delete/1.0/payload.schema.json
+ */
+
+/**
+ * Remove a global DID template from a VTA by name. Super-admin gated. The success response echoes the deleted name for audit pipelines.
+ */
+export interface VTADIDTemplateDeletePayload {
+  /**
+   * Resource id — the name of the global template to remove.
+   */
+  name: string;
+  ext?: Ext;
+}
+/**
+ * Ecosystem-defined extension members per SPEC.md §4.5.1.
+ */
+export interface Ext {
+  [k: string]: unknown | undefined;
+}
+
+/** Trust Task type URI. */
+export const TYPE_URI = "https://trusttasks.org/spec/vta/did-templates/delete/1.0" as const;
+
+/** Trust Task response type URI (request type URI + "#response"). */
+export const RESPONSE_TYPE_URI = "https://trusttasks.org/spec/vta/did-templates/delete/1.0#response" as const;

package/src/vta/did-templates/get/1.0/payload.ts

@@ -0,0 +1,27 @@
+/**
+ * Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
+ * Source: specs/vta/did-templates/get/1.0/payload.schema.json
+ */
+
+/**
+ * Fetch one global DID template on a VTA by name. Open to any authenticated caller. The success response is the persisted DidTemplateRecord.
+ */
+export interface VTADIDTemplateGetPayload {
+  /**
+   * Template name to fetch.
+   */
+  name: string;
+  ext?: Ext;
+}
+/**
+ * Ecosystem-defined extension members per SPEC.md §4.5.1.
+ */
+export interface Ext {
+  [k: string]: unknown | undefined;
+}
+
+/** Trust Task type URI. */
+export const TYPE_URI = "https://trusttasks.org/spec/vta/did-templates/get/1.0" as const;
+
+/** Trust Task response type URI (request type URI + "#response"). */
+export const RESPONSE_TYPE_URI = "https://trusttasks.org/spec/vta/did-templates/get/1.0#response" as const;

package/src/vta/did-templates/list/1.0/payload.ts

@@ -0,0 +1,23 @@
+/**
+ * Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
+ * Source: specs/vta/did-templates/list/1.0/payload.schema.json
+ */
+
+/**
+ * List all global DID templates on a VTA. Open to any authenticated caller. The request takes no parameters. The success response is the array of persisted DidTemplateRecords.
+ */
+export interface VTADIDTemplateListPayload {
+  ext?: Ext;
+}
+/**
+ * Ecosystem-defined extension members per SPEC.md §4.5.1.
+ */
+export interface Ext {
+  [k: string]: unknown | undefined;
+}
+
+/** Trust Task type URI. */
+export const TYPE_URI = "https://trusttasks.org/spec/vta/did-templates/list/1.0" as const;
+
+/** Trust Task response type URI (request type URI + "#response"). */
+export const RESPONSE_TYPE_URI = "https://trusttasks.org/spec/vta/did-templates/list/1.0#response" as const;

package/src/vta/did-templates/render/1.0/payload.ts

@@ -0,0 +1,33 @@
+/**
+ * Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
+ * Source: specs/vta/did-templates/render/1.0/payload.schema.json
+ */
+
+/**
+ * Render a global DID template to a DID document. Authenticated callers supply variables; the VTA injects ambient variables (VTA_DID, VTA_URL, NOW) server-side, merges the caller's on top, substitutes every placeholder, and returns the rendered document.
+ */
+export interface VTADIDTemplateRenderPayload {
+  /**
+   * Resource id — the name of the global template to render.
+   */
+  name: string;
+  /**
+   * Caller-supplied template variables, keyed by name. The VTA injects ambient variables VTA_DID, VTA_URL, NOW server-side and merges these on top.
+   */
+  vars?: {
+    [k: string]: unknown | undefined;
+  };
+  ext?: Ext;
+}
+/**
+ * Ecosystem-defined extension members per SPEC.md §4.5.1.
+ */
+export interface Ext {
+  [k: string]: unknown | undefined;
+}
+
+/** Trust Task type URI. */
+export const TYPE_URI = "https://trusttasks.org/spec/vta/did-templates/render/1.0" as const;
+
+/** Trust Task response type URI (request type URI + "#response"). */
+export const RESPONSE_TYPE_URI = "https://trusttasks.org/spec/vta/did-templates/render/1.0#response" as const;

package/src/vta/did-templates/update/1.0/payload.ts

@@ -0,0 +1,73 @@
+/**
+ * Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
+ * Source: specs/vta/did-templates/update/1.0/payload.schema.json
+ */
+
+/**
+ * Replace an existing global DID template on a VTA. Super-admin gated. The `name` is the resource id within the global scope and MUST equal `template.name`; the VTA replaces the stored body, preserving createdAt/createdBy and advancing updatedAt. The success response is the persisted DidTemplateRecord.
+ */
+export interface VTADIDTemplateUpdatePayload {
+  /**
+   * Resource id — the template's name. MUST equal `template.name` or the VTA rejects with the framework's `malformedRequest`.
+   */
+  name: string;
+  template: DidTemplate;
+  ext?: Ext;
+}
+/**
+ * Full replacement template document. Validated against the v1 template schema before persistence; an invalid shape is rejected with the framework's `malformedRequest`.
+ */
+export interface DidTemplate {
+  /**
+   * Template schema version. Currently always 1.
+   */
+  schemaVersion: 1;
+  /**
+   * Template id within its scope. Lowercase alphanumeric and hyphen only.
+   */
+  name: string;
+  /**
+   * Classification hint, e.g. `mediator`, `did-host-http`, `app`. Drives downstream provisioning behaviour.
+   */
+  kind: string;
+  /**
+   * Human-readable description of what the template provisions.
+   */
+  description?: string | null;
+  /**
+   * DID methods this template targets, e.g. ["webvh", "web"] for a hosted DID or ["key"] for a did:key.
+   */
+  methods?: string[];
+  /**
+   * Variables the caller MUST supply at render time. MUST NOT include reserved ambient names (DID, SIGNING_KEY_MB, KA_KEY_MB, VTA_DID, VTA_URL, CONTEXT_ID, CONTEXT_DID, NOW).
+   */
+  requiredVars?: string[];
+  /**
+   * Variables with default values, keyed by variable name.
+   */
+  optionalVars?: {
+    [k: string]: unknown | undefined;
+  };
+  /**
+   * Hints for CLI / setup wizards (e.g. preRotationCount, portable, addMediatorService).
+   */
+  defaults?: {
+    [k: string]: unknown | undefined;
+  };
+  /**
+   * The DID document body with `{TOKEN}` placeholders. `document.id` MUST contain the `{DID}` placeholder. Every `{TOKEN}` MUST be declared in requiredVars/optionalVars or be a reserved ambient name.
+   */
+  document: {};
+}
+/**
+ * Ecosystem-defined extension members per SPEC.md §4.5.1.
+ */
+export interface Ext {
+  [k: string]: unknown | undefined;
+}
+
+/** Trust Task type URI. */
+export const TYPE_URI = "https://trusttasks.org/spec/vta/did-templates/update/1.0" as const;
+
+/** Trust Task response type URI (request type URI + "#response"). */
+export const RESPONSE_TYPE_URI = "https://trusttasks.org/spec/vta/did-templates/update/1.0#response" as const;