@openvtc/trust-tasks 0.2.54 → 0.2.56

package/src/vta/webvh/dids/update/1.0/payload.ts

@@ -49,9 +49,43 @@ export interface WebVHDIDUpdatePayload {
 export interface Ext {
   [k: string]: unknown | undefined;
 }
+/**
+ * The published entry. camelCase per the framework convention — note the counts are the state AFTER the update, including the rotation the caller did not ask for.
+ */
+export interface WebVHDIDUpdateResponsePayload {
+  did: string;
+  /**
+   * versionId of the entry just appended. A caller intending a further edit SHOULD pass this back as the next request's `expectedVersionId`.
+   */
+  newVersionId: string;
+  newScid?: string;
+  /**
+   * The appended log entry, as JSON text.
+   */
+  newLogEntry?: string;
+  /**
+   * Update keys authorized AFTER this entry. Where `document` was supplied these are new keys — the previous ones no longer authorize anything.
+   */
+  updateKeysCount?: number;
+  /**
+   * Pre-rotation commitments published by this entry.
+   */
+  preRotationKeyCount?: number;
+  /**
+   * True when the agent holds the log itself and no hosting server was published to — the operator must fetch and redeploy `did.jsonl`.
+   */
+  serverless?: boolean;
+  ext?: Ext;
+}
 
 /** Trust Task type URI. */
 export const TYPE_URI = "https://trusttasks.org/spec/vta/webvh/dids/update/1.0" as const;
 
+/** Stable alias for this specification's request payload shape. */
+export type Payload = WebVHDIDUpdatePayload;
+
 /** Trust Task response type URI (request type URI + "#response"). */
 export const RESPONSE_TYPE_URI = "https://trusttasks.org/spec/vta/webvh/dids/update/1.0#response" as const;
+
+/** Stable alias for this specification's success-response payload shape. */
+export type Response = WebVHDIDUpdateResponsePayload;

package/src/vta/webvh/servers/domains/0.1/payload.ts

@@ -0,0 +1,87 @@
+/**
+ * Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
+ * Source: specs/vta/webvh/servers/domains/0.1/payload.schema.json
+ */
+
+/**
+ * Ask an agent which hosting domains it may use on one of the hosting servers it has registered. The agent answers by relaying the server's own caller-scoped view; the response items are the same DomainEntry the did-management family defines.
+ */
+export interface WebVHServerDomainsPayload {
+  /**
+   * Identifier of the registered hosting server to ask. Required: an agent may know several, and they do not share a domain namespace — omitting it would make the answer ambiguous rather than general.
+   */
+  serverId: string;
+  ext?: Ext;
+}
+/**
+ * Ecosystem-defined extension members per SPEC.md §4.5.1.
+ */
+export interface Ext {
+  [k: string]: unknown | undefined;
+}
+/**
+ * The success response. Carried in a Trust Task document whose type is https://trusttasks.org/spec/vta/webvh/servers/domains/0.1#response.
+ */
+export interface WebVHServerDomainsResponsePayload {
+  /**
+   * The domains the agent may use on that server, as the server reported them. Empty is a legitimate answer — a server the agent can reach but holds no domain grant on.
+   */
+  domains: DomainEntry[];
+  /**
+   * The domain used when a request names none — the caller's own default where the server records one, else the server's system default. Producers SHOULD omit it when there is neither; `null` is accepted as the same answer, and consumers MUST NOT read a difference between the two.
+   */
+  default?: string | null;
+  ext?: Ext2;
+}
+export interface DomainEntry {
+  /**
+   * Hosting domain name (e.g. `did.example.com`). Compared case-insensitively; producers SHOULD emit lowercase canonical form.
+   */
+  name: string;
+  /**
+   * Optional human-readable label.
+   */
+  label?: string;
+  /**
+   * Domain lifecycle state. A `disabled` domain still serves existing DIDs in read-only mode for the host's configured grace period before purge becomes eligible.
+   */
+  status: "active" | "disabled";
+  /**
+   * When `true`, this domain is the host's default — new DIDs created without an explicit domain are hosted here. Exactly one entry SHOULD carry `defaultDomain: true`.
+   */
+  defaultDomain?: boolean;
+  createdAt: string;
+  /**
+   * Present iff `status === "disabled"`.
+   */
+  disabledAt?: string;
+  /**
+   * Earliest RFC3339 timestamp at which the host's background sweep is allowed to purge content for a disabled domain. Operators with administrative authority MAY override the wait via `domain/purge`.
+   */
+  purgeAt?: string;
+  ext?: Ext1;
+}
+/**
+ * Ecosystem-defined extension members per SPEC.md §4.5.1.
+ */
+export interface Ext1 {
+  [k: string]: unknown | undefined;
+}
+/**
+ * Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.
+ */
+export interface Ext2 {
+  [k: string]: unknown | undefined;
+}
+
+/** Trust Task type URI. */
+export const TYPE_URI = "https://trusttasks.org/spec/vta/webvh/servers/domains/0.1" as const;
+
+/** Stable alias for this specification's request payload shape. */
+export type Payload = WebVHServerDomainsPayload;
+
+/** Trust Task response type URI (request type URI + "#response"). */
+export const RESPONSE_TYPE_URI = "https://trusttasks.org/spec/vta/webvh/servers/domains/0.1#response" as const;
+
+/** Stable alias for this specification's success-response payload shape. */
+export type Response = WebVHServerDomainsResponsePayload;

package/src/vtc/admin/bootstrap/0.1/payload.ts

@@ -16,9 +16,26 @@ export interface VTCAdminBootstrapPayload {
 export interface Ext {
   [k: string]: unknown | undefined;
 }
+export interface VTCAdminBootstrapResponsePayload {
+  /**
+   * The admin DID just written to the ACL.
+   */
+  adminDid: string;
+  /**
+   * event_id of the persisted CommunityInstalled audit envelope (a UUID).
+   */
+  eventId: string;
+  ext?: Ext;
+}
 
 /** Trust Task type URI. */
 export const TYPE_URI = "https://trusttasks.org/spec/vtc/admin/bootstrap/0.1" as const;
 
+/** Stable alias for this specification's request payload shape. */
+export type Payload = VTCAdminBootstrapPayload;
+
 /** Trust Task response type URI (request type URI + "#response"). */
 export const RESPONSE_TYPE_URI = "https://trusttasks.org/spec/vtc/admin/bootstrap/0.1#response" as const;
+
+/** Stable alias for this specification's success-response payload shape. */
+export type Response = VTCAdminBootstrapResponsePayload;

package/src/vtc/admin/invites/create/0.1/payload.ts

@@ -24,9 +24,38 @@ export interface VTCAdminInvitesCreatePayload {
 export interface Ext {
   [k: string]: unknown | undefined;
 }
+export interface VTCAdminInvitesCreateResponsePayload {
+  /**
+   * Invite identifier; the revoke target.
+   */
+  jti: string;
+  /**
+   * One-shot enrolment URL. Returned once and never retrievable again.
+   */
+  installUrl: string;
+  /**
+   * Secret that authorises the enrolment. Returned once.
+   */
+  claimCode: string;
+  /**
+   * When the invite lapses.
+   */
+  expiresAt: string;
+  /**
+   * True when the target DID had no ACL entry and one was created.
+   */
+  aclEntryCreated: boolean;
+  ext?: Ext;
+}
 
 /** Trust Task type URI. */
 export const TYPE_URI = "https://trusttasks.org/spec/vtc/admin/invites/create/0.1" as const;
 
+/** Stable alias for this specification's request payload shape. */
+export type Payload = VTCAdminInvitesCreatePayload;
+
 /** Trust Task response type URI (request type URI + "#response"). */
 export const RESPONSE_TYPE_URI = "https://trusttasks.org/spec/vtc/admin/invites/create/0.1#response" as const;
+
+/** Stable alias for this specification's success-response payload shape. */
+export type Response = VTCAdminInvitesCreateResponsePayload;

package/src/vtc/admin/invites/list/0.1/payload.ts

@@ -3,6 +3,11 @@
  * Source: specs/vtc/admin/invites/list/0.1/payload.schema.json
  */
 
+/**
+ * `issued` is outstanding and revocable; `consumed` and `expired` are terminal.
+ */
+export type InviteStatus = "issued" | "consumed" | "expired";
+
 export interface VTCAdminInvitesListPayload {
   ext?: Ext;
 }
@@ -12,9 +17,44 @@ export interface VTCAdminInvitesListPayload {
 export interface Ext {
   [k: string]: unknown | undefined;
 }
+export interface VTCAdminInvitesListResponsePayload {
+  /**
+   * Every invite the community holds, outstanding and terminal.
+   */
+  invites: InviteSummary[];
+  ext?: Ext;
+}
+/**
+ * One outstanding or historical admin invite. Consumed rows are retained as audit history and cannot be revoked.
+ */
+export interface InviteSummary {
+  /**
+   * Unique invite identifier; the revoke target.
+   */
+  jti: string;
+  status: InviteStatus;
+  /**
+   * The admin DID this invite enrols a passkey for.
+   */
+  targetDid?: string;
+  /**
+   * When an `issued` invite lapses.
+   */
+  expiresAt?: string;
+  /**
+   * When the invite was redeemed, if it was.
+   */
+  consumedAt?: string;
+}
 
 /** Trust Task type URI. */
 export const TYPE_URI = "https://trusttasks.org/spec/vtc/admin/invites/list/0.1" as const;
 
+/** Stable alias for this specification's request payload shape. */
+export type Payload = InviteStatus;
+
 /** Trust Task response type URI (request type URI + "#response"). */
 export const RESPONSE_TYPE_URI = "https://trusttasks.org/spec/vtc/admin/invites/list/0.1#response" as const;
+
+/** Stable alias for this specification's success-response payload shape. */
+export type Response = VTCAdminInvitesListResponsePayload;

package/src/vtc/admin/invites/revoke/0.1/payload.ts

@@ -16,9 +16,22 @@ export interface VTCAdminInvitesRevokePayload {
 export interface Ext {
   [k: string]: unknown | undefined;
 }
+export interface VTCAdminInvitesRevokeResponsePayload {
+  /**
+   * The revoked invite's identifier, echoed.
+   */
+  jti: string;
+  ext?: Ext;
+}
 
 /** Trust Task type URI. */
 export const TYPE_URI = "https://trusttasks.org/spec/vtc/admin/invites/revoke/0.1" as const;
 
+/** Stable alias for this specification's request payload shape. */
+export type Payload = VTCAdminInvitesRevokePayload;
+
 /** Trust Task response type URI (request type URI + "#response"). */
 export const RESPONSE_TYPE_URI = "https://trusttasks.org/spec/vtc/admin/invites/revoke/0.1#response" as const;
+
+/** Stable alias for this specification's success-response payload shape. */
+export type Response = VTCAdminInvitesRevokeResponsePayload;

package/src/vtc/auth/admin-session/0.1/payload.ts

@@ -16,9 +16,26 @@ export interface VTCAuthAdminSessionPayload {
 export interface Ext {
   [k: string]: unknown | undefined;
 }
+export interface VTCAuthAdminSessionResponsePayload {
+  /**
+   * The cookie-backed session's identifier.
+   */
+  sessionId: string;
+  /**
+   * Session expiry as a Unix timestamp. Matches the presented token's — the exchange does not extend a session.
+   */
+  expiresAt: number;
+  ext?: Ext;
+}
 
 /** Trust Task type URI. */
 export const TYPE_URI = "https://trusttasks.org/spec/vtc/auth/admin-session/0.1" as const;
 
+/** Stable alias for this specification's request payload shape. */
+export type Payload = VTCAuthAdminSessionPayload;
+
 /** Trust Task response type URI (request type URI + "#response"). */
 export const RESPONSE_TYPE_URI = "https://trusttasks.org/spec/vtc/auth/admin-session/0.1#response" as const;
+
+/** Stable alias for this specification's success-response payload shape. */
+export type Response = VTCAuthAdminSessionResponsePayload;

package/src/vtc/auth/recognise/0.1/payload.ts

@@ -20,9 +20,34 @@ export interface VTCAuthRecognisePayload {
 export interface Ext {
   [k: string]: unknown | undefined;
 }
+export interface VTCAuthRecogniseResponsePayload {
+  /**
+   * A cross-community session id (xc-<uuid>), distinguishing it from local-member sessions.
+   */
+  sessionId: string;
+  data: {
+    accessToken: string;
+    /**
+     * Unix-seconds expiry, clamped to min(local default, earliest of the vec/vmc validUntil).
+     */
+    accessExpiresAt: number;
+    foreignIssuerDid: string;
+    /**
+     * The LOCAL role from cross_community_roles policy — not the foreign role.
+     */
+    mappedRole: string;
+  };
+  ext?: Ext;
+}
 
 /** Trust Task type URI. */
 export const TYPE_URI = "https://trusttasks.org/spec/vtc/auth/recognise/0.1" as const;
 
+/** Stable alias for this specification's request payload shape. */
+export type Payload = VTCAuthRecognisePayload;
+
 /** Trust Task response type URI (request type URI + "#response"). */
 export const RESPONSE_TYPE_URI = "https://trusttasks.org/spec/vtc/auth/recognise/0.1#response" as const;
+
+/** Stable alias for this specification's success-response payload shape. */
+export type Response = VTCAuthRecogniseResponsePayload;

package/src/vtc/auth/recognise/challenge/0.1/payload.ts

@@ -12,9 +12,26 @@ export interface VTCAuthRecogniseChallengePayload {
 export interface Ext {
   [k: string]: unknown | undefined;
 }
+export interface VTCAuthRecogniseChallengeResponsePayload {
+  /**
+   * Single-use, unpredictable value to bind into the presentation. Consumed on first use regardless of verdict.
+   */
+  nonce: string;
+  /**
+   * Unix timestamp after which the nonce is refused.
+   */
+  expiresAt: number;
+  ext?: Ext;
+}
 
 /** Trust Task type URI. */
 export const TYPE_URI = "https://trusttasks.org/spec/vtc/auth/recognise/challenge/0.1" as const;
 
+/** Stable alias for this specification's request payload shape. */
+export type Payload = VTCAuthRecogniseChallengePayload;
+
 /** Trust Task response type URI (request type URI + "#response"). */
 export const RESPONSE_TYPE_URI = "https://trusttasks.org/spec/vtc/auth/recognise/challenge/0.1#response" as const;
+
+/** Stable alias for this specification's success-response payload shape. */
+export type Response = VTCAuthRecogniseChallengeResponsePayload;

package/src/vtc/backup/export/0.1/payload.ts

@@ -20,9 +20,86 @@ export interface VTCBackupExportPayload {
 export interface Ext {
   [k: string]: unknown | undefined;
 }
+export interface VTCBackupExportResponsePayload {
+  envelope: BackupEnvelope;
+  ext?: Ext;
+}
+/**
+ * The encrypted full-state backup.
+ */
+export interface BackupEnvelope {
+  /**
+   * Envelope schema version.
+   */
+  version: number;
+  /**
+   * Envelope format tag, e.g. `vtc-backup-v1`.
+   */
+  format: string;
+  /**
+   * When the export was taken.
+   */
+  createdAt: string;
+  /**
+   * DID of the community exported from, when it has one. An import cross-checks this against the running community.
+   */
+  sourceDid?: string | null;
+  /**
+   * Version of the software that produced the envelope.
+   */
+  sourceVersion: string;
+  kdf: KdfParams;
+  encryption: EncryptionParams;
+  /**
+   * Whether the audit log and its signed checkpoints are inside `ciphertext`.
+   */
+  includesAudit: boolean;
+  /**
+   * base64url(AEAD(JSON(payload))).
+   */
+  ciphertext: string;
+}
+export interface KdfParams {
+  /**
+   * KDF identifier, e.g. `argon2id`.
+   */
+  algorithm: string;
+  /**
+   * base64url, 32 bytes.
+   */
+  salt: string;
+  /**
+   * Argon2id memory cost (KiB).
+   */
+  mCost: number;
+  /**
+   * Argon2id time cost (iterations).
+   */
+  tCost: number;
+  /**
+   * Argon2id parallelism.
+   */
+  pCost: number;
+}
+export interface EncryptionParams {
+  /**
+   * AEAD identifier, e.g. `aes-256-gcm`.
+   */
+  algorithm: string;
+  /**
+   * base64url, 12 bytes.
+   */
+  nonce: string;
+}
 
 /** Trust Task type URI. */
 export const TYPE_URI = "https://trusttasks.org/spec/vtc/backup/export/0.1" as const;
 
+/** Stable alias for this specification's request payload shape. */
+export type Payload = VTCBackupExportPayload;
+
 /** Trust Task response type URI (request type URI + "#response"). */
 export const RESPONSE_TYPE_URI = "https://trusttasks.org/spec/vtc/backup/export/0.1#response" as const;
+
+/** Stable alias for this specification's success-response payload shape. */
+export type Response = VTCBackupExportResponsePayload;

package/src/vtc/backup/import/0.1/payload.ts

@@ -88,9 +88,36 @@ export interface EncryptionParams {
 export interface Ext {
   [k: string]: unknown | undefined;
 }
+export interface VTCBackupImportResponsePayload {
+  /**
+   * `preview` when `confirm` was not set; `imported` after a restore.
+   */
+  status: "preview" | "imported";
+  /**
+   * The community DID the envelope was taken from.
+   */
+  sourceDid?: string | null;
+  /**
+   * Per-keyspace row counts written, or that would be written on a preview.
+   */
+  counts: {
+    [k: string]: number | undefined;
+  };
+  /**
+   * Human-readable summary for the operator.
+   */
+  message: string;
+  ext?: Ext;
+}
 
 /** Trust Task type URI. */
 export const TYPE_URI = "https://trusttasks.org/spec/vtc/backup/import/0.1" as const;
 
+/** Stable alias for this specification's request payload shape. */
+export type Payload = VTCBackupImportPayload;
+
 /** Trust Task response type URI (request type URI + "#response"). */
 export const RESPONSE_TYPE_URI = "https://trusttasks.org/spec/vtc/backup/import/0.1#response" as const;
+
+/** Stable alias for this specification's success-response payload shape. */
+export type Response = VTCBackupImportResponsePayload;

package/src/vtc/ceremonies/list/0.1/payload.ts

@@ -12,9 +12,52 @@ export interface VTCCeremoniesListPayload {
 export interface Ext {
   [k: string]: unknown | undefined;
 }
+export interface VTCCeremoniesListResponsePayload {
+  /**
+   * Every ceremony this maintainer implements.
+   */
+  ceremonies: CeremonyManifest[];
+  ext?: Ext;
+}
+export interface CeremonyManifest {
+  /**
+   * Governance purpose this ceremony decides, e.g. join, removal.
+   */
+  purpose: string;
+  /**
+   * Policy package backing the decision.
+   */
+  pkg?: string;
+  /**
+   * Whether the ceremony is automatic, operator-driven, or advisory.
+   */
+  nature: string;
+  /**
+   * Human-readable name for an operator UI.
+   */
+  label: string;
+  /**
+   * Whether the ceremony is actually reachable in this deployment.
+   */
+  wired?: string;
+  /**
+   * One-line explanation shown beside the label.
+   */
+  blurb?: string;
+  /**
+   * Field definitions the UI renders. An unrecognised field type MUST render generically, never be dropped.
+   */
+  fields?: {}[];
+}
 
 /** Trust Task type URI. */
 export const TYPE_URI = "https://trusttasks.org/spec/vtc/ceremonies/list/0.1" as const;
 
+/** Stable alias for this specification's request payload shape. */
+export type Payload = VTCCeremoniesListPayload;
+
 /** Trust Task response type URI (request type URI + "#response"). */
 export const RESPONSE_TYPE_URI = "https://trusttasks.org/spec/vtc/ceremonies/list/0.1#response" as const;
+
+/** Stable alias for this specification's success-response payload shape. */
+export type Response = VTCCeremoniesListResponsePayload;

package/src/vtc/community/profile/show/0.1/payload.ts

@@ -12,9 +12,35 @@ export interface VTCCommunityProfileShowPayload {
 export interface Ext {
   [k: string]: unknown | undefined;
 }
+export interface VTCCommunityProfileShowResponsePayload {
+  profile: CommunityProfile;
+  ext?: Ext;
+}
+export interface CommunityProfile {
+  name: string;
+  description?: string;
+  logoUrl?: string | null;
+  publicUrl?: string | null;
+  contactEmail?: string | null;
+  language: string;
+  /**
+   * Opaque community-defined extension bag.
+   */
+  extensions?: {};
+  /**
+   * Trust-registry reachability. Populated on reads; not settable.
+   */
+  registryStatus?: "active" | "degraded";
+}
 
 /** Trust Task type URI. */
 export const TYPE_URI = "https://trusttasks.org/spec/vtc/community/profile/show/0.1" as const;
 
+/** Stable alias for this specification's request payload shape. */
+export type Payload = VTCCommunityProfileShowPayload;
+
 /** Trust Task response type URI (request type URI + "#response"). */
 export const RESPONSE_TYPE_URI = "https://trusttasks.org/spec/vtc/community/profile/show/0.1#response" as const;
+
+/** Stable alias for this specification's success-response payload shape. */
+export type Response = VTCCommunityProfileShowResponsePayload;

package/src/vtc/community/profile/update/0.1/payload.ts

@@ -22,9 +22,35 @@ export interface VTCCommunityProfileUpdatePayload {
 export interface Ext {
   [k: string]: unknown | undefined;
 }
+export interface VTCCommunityProfileUpdateResponsePayload {
+  profile: CommunityProfile;
+  ext?: Ext;
+}
+export interface CommunityProfile {
+  name: string;
+  description?: string;
+  logoUrl?: string | null;
+  publicUrl?: string | null;
+  contactEmail?: string | null;
+  language: string;
+  /**
+   * Opaque community-defined extension bag.
+   */
+  extensions?: {};
+  /**
+   * Trust-registry reachability. Populated on reads; not settable.
+   */
+  registryStatus?: "active" | "degraded";
+}
 
 /** Trust Task type URI. */
 export const TYPE_URI = "https://trusttasks.org/spec/vtc/community/profile/update/0.1" as const;
 
+/** Stable alias for this specification's request payload shape. */
+export type Payload = VTCCommunityProfileUpdatePayload;
+
 /** Trust Task response type URI (request type URI + "#response"). */
 export const RESPONSE_TYPE_URI = "https://trusttasks.org/spec/vtc/community/profile/update/0.1#response" as const;
+
+/** Stable alias for this specification's success-response payload shape. */
+export type Response = VTCCommunityProfileUpdateResponsePayload;