@openvtc/trust-tasks 0.2.55 → 0.2.56

package/src/messaging/acl/get/0.1/payload.ts

@@ -7,6 +7,10 @@
  * A Verifiable Identifier (SPEC §4.8). For a mediator-served account this is the account's controlling DID, carried verbatim and compared by exact string equality. For privacy — and because some mediators key accounts by a one-way hash and never hold the full DID — a stable hash of the DID (e.g. its SHA-256 digest) is an equally valid value here: producer and consumer simply agree on the same opaque identifier and compare by exact string equality. The field carries whichever form the issuing mediator uses.
  */
 export type Vid = string;
+/**
+ * A Verifiable Identifier (SPEC §4.8). For a mediator-served account this is the account's controlling DID, carried verbatim and compared by exact string equality. For privacy — and because some mediators key accounts by a one-way hash and never hold the full DID — a stable hash of the DID (e.g. its SHA-256 digest) is an equally valid value here: producer and consumer simply agree on the same opaque identifier and compare by exact string equality. The field carries whichever form the issuing mediator uses.
+ */
+export type Vid1 = string;
 
 export interface MessagingGetACLPayload {
   /**
@@ -23,9 +27,103 @@ export interface MessagingGetACLPayload {
 export interface Ext {
   [k: string]: unknown | undefined;
 }
+/**
+ * The success response to a messaging/acl/get request. Carried in a Trust Task document whose type is https://trusttasks.org/spec/messaging/acl/get/0.1#response.
+ */
+export interface MessagingGetACLResponsePayload {
+  /**
+   * One entry per queried account that has an account at the mediator. Queried DIDs with no account are omitted.
+   */
+  entries: MessagingGetACLEntry[];
+  /**
+   * Queried DIDs that have no account at this mediator and were therefore omitted from `entries`.
+   */
+  unknown?: Vid[];
+  ext?: Ext1;
+}
+/**
+ * One queried account's realized ACL.
+ */
+export interface MessagingGetACLEntry {
+  did: Vid1;
+  acl: MediatorAcl;
+}
+/**
+ * The full realized capability set the mediator holds for the account.
+ */
+export interface MediatorAcl {
+  /**
+   * How the account's access list is interpreted. `explicitAllow` = an allowlist (empty denies everyone); `explicitDeny` = a denylist (empty allows everyone).
+   */
+  accessListMode?: "explicitAllow" | "explicitDeny";
+  /**
+   * The account is blocked from authenticating and transacting.
+   */
+  blocked?: boolean;
+  /**
+   * Messages for this account may be stored locally at this mediator for pickup.
+   */
+  local?: boolean;
+  /**
+   * May send direct messages through the mediator.
+   */
+  sendMessages?: boolean;
+  /**
+   * May receive direct messages.
+   */
+  receiveMessages?: boolean;
+  /**
+   * May send routing/forward (relay) messages.
+   */
+  sendForwarded?: boolean;
+  /**
+   * May be the next hop of a forwarded message.
+   */
+  receiveForwarded?: boolean;
+  /**
+   * May create out-of-band invitations.
+   */
+  createInvites?: boolean;
+  /**
+   * Accepts anonymous (no authenticated sender) messages.
+   */
+  anonReceive?: boolean;
+  /**
+   * May self-manage its own access list.
+   */
+  selfManageList?: boolean;
+  /**
+   * May self-manage its own send-queue limit.
+   */
+  selfManageSendQueueLimit?: boolean;
+  /**
+   * May self-manage its own receive-queue limit.
+   */
+  selfManageReceiveQueueLimit?: boolean;
+  /**
+   * The account accepts DIDComm-protocol delivery. Default true; set false for a TSP-only node.
+   */
+  didcommEnabled?: boolean;
+  /**
+   * The account accepts TSP-protocol delivery. Default true; set false for a DIDComm-only node.
+   */
+  tspEnabled?: boolean;
+}
+/**
+ * Ecosystem-defined extension members per SPEC.md §4.5.1.
+ */
+export interface Ext1 {
+  [k: string]: unknown | undefined;
+}
 
 /** Trust Task type URI. */
 export const TYPE_URI = "https://trusttasks.org/spec/messaging/acl/get/0.1" as const;
 
+/** Stable alias for this specification's request payload shape. */
+export type Payload = Vid;
+
 /** Trust Task response type URI (request type URI + "#response"). */
 export const RESPONSE_TYPE_URI = "https://trusttasks.org/spec/messaging/acl/get/0.1#response" as const;
+
+/** Stable alias for this specification's success-response payload shape. */
+export type Response = MessagingGetACLResponsePayload;

package/src/messaging/acl/set/0.1/payload.ts

@@ -7,6 +7,10 @@
  * The target account's DID whose capabilities are being set.
  */
 export type Vid = string;
+/**
+ * The account whose ACL was set.
+ */
+export type Vid1 = string;
 
 export interface MessagingSetACLPayload {
   did: Vid;
@@ -80,9 +84,90 @@ export interface MediatorAcl {
 export interface Ext {
   [k: string]: unknown | undefined;
 }
+/**
+ * The success response to a messaging/acl/set request. Carried in a Trust Task document whose type is https://trusttasks.org/spec/messaging/acl/set/0.1#response.
+ */
+export interface MessagingSetACLResponsePayload {
+  did: Vid1;
+  acl: MediatorAcl1;
+  ext?: Ext1;
+}
+/**
+ * The full realized capability set the mediator now holds for the account.
+ */
+export interface MediatorAcl1 {
+  /**
+   * How the account's access list is interpreted. `explicitAllow` = an allowlist (empty denies everyone); `explicitDeny` = a denylist (empty allows everyone).
+   */
+  accessListMode?: "explicitAllow" | "explicitDeny";
+  /**
+   * The account is blocked from authenticating and transacting.
+   */
+  blocked?: boolean;
+  /**
+   * Messages for this account may be stored locally at this mediator for pickup.
+   */
+  local?: boolean;
+  /**
+   * May send direct messages through the mediator.
+   */
+  sendMessages?: boolean;
+  /**
+   * May receive direct messages.
+   */
+  receiveMessages?: boolean;
+  /**
+   * May send routing/forward (relay) messages.
+   */
+  sendForwarded?: boolean;
+  /**
+   * May be the next hop of a forwarded message.
+   */
+  receiveForwarded?: boolean;
+  /**
+   * May create out-of-band invitations.
+   */
+  createInvites?: boolean;
+  /**
+   * Accepts anonymous (no authenticated sender) messages.
+   */
+  anonReceive?: boolean;
+  /**
+   * May self-manage its own access list.
+   */
+  selfManageList?: boolean;
+  /**
+   * May self-manage its own send-queue limit.
+   */
+  selfManageSendQueueLimit?: boolean;
+  /**
+   * May self-manage its own receive-queue limit.
+   */
+  selfManageReceiveQueueLimit?: boolean;
+  /**
+   * The account accepts DIDComm-protocol delivery. Default true; set false for a TSP-only node.
+   */
+  didcommEnabled?: boolean;
+  /**
+   * The account accepts TSP-protocol delivery. Default true; set false for a DIDComm-only node.
+   */
+  tspEnabled?: boolean;
+}
+/**
+ * Ecosystem-defined extension members per SPEC.md §4.5.1.
+ */
+export interface Ext1 {
+  [k: string]: unknown | undefined;
+}
 
 /** Trust Task type URI. */
 export const TYPE_URI = "https://trusttasks.org/spec/messaging/acl/set/0.1" as const;
 
+/** Stable alias for this specification's request payload shape. */
+export type Payload = Vid;
+
 /** Trust Task response type URI (request type URI + "#response"). */
 export const RESPONSE_TYPE_URI = "https://trusttasks.org/spec/messaging/acl/set/0.1#response" as const;
+
+/** Stable alias for this specification's success-response payload shape. */
+export type Response = MessagingSetACLResponsePayload;

package/src/messaging/admin/add/0.1/payload.ts

@@ -23,9 +23,31 @@ export interface MessagingAddAdminsPayload {
 export interface Ext {
   [k: string]: unknown | undefined;
 }
+/**
+ * The success response to a messaging/admin/add request. Carried in a Trust Task document whose type is https://trusttasks.org/spec/messaging/admin/add/0.1#response.
+ */
+export interface MessagingAddAdminsResponsePayload {
+  /**
+   * The accounts now holding admin rights (the requested set, post-change).
+   */
+  admins: Vid[];
+  ext?: Ext1;
+}
+/**
+ * Ecosystem-defined extension members per SPEC.md §4.5.1.
+ */
+export interface Ext1 {
+  [k: string]: unknown | undefined;
+}
 
 /** Trust Task type URI. */
 export const TYPE_URI = "https://trusttasks.org/spec/messaging/admin/add/0.1" as const;
 
+/** Stable alias for this specification's request payload shape. */
+export type Payload = Vid;
+
 /** Trust Task response type URI (request type URI + "#response"). */
 export const RESPONSE_TYPE_URI = "https://trusttasks.org/spec/messaging/admin/add/0.1#response" as const;
+
+/** Stable alias for this specification's success-response payload shape. */
+export type Response = MessagingAddAdminsResponsePayload;

package/src/messaging/admin/audit-log/0.1/payload.ts

@@ -3,6 +3,29 @@
  * Source: specs/messaging/admin/audit-log/0.1/payload.schema.json
  */
 
+/**
+ * The authenticated account that made the change (an admin, or the owner for a self-service change).
+ */
+export type Vid = string;
+/**
+ * The account whose record changed.
+ */
+export type Vid1 = string;
+/**
+ * The kind of privileged change recorded in the audit log.
+ */
+export type AuditAction =
+  | "setAcl"
+  | "accessListAdd"
+  | "accessListRemove"
+  | "accessListClear"
+  | "accountAdd"
+  | "accountRemove"
+  | "accountChangeType"
+  | "accountChangeQueueLimits"
+  | "adminAdd"
+  | "adminStrip";
+
 export interface MessagingAuditLogPayload {
   /**
    * Opaque continuation token from a prior page's nextCursor. Echoed verbatim; treated as unstructured by the requester.
@@ -20,9 +43,51 @@ export interface MessagingAuditLogPayload {
 export interface Ext {
   [k: string]: unknown | undefined;
 }
+/**
+ * The success response to a messaging/admin/audit-log request (newest-first). Carried in a Trust Task document whose type is https://trusttasks.org/spec/messaging/admin/audit-log/0.1#response.
+ */
+export interface MessagingAuditLogResponsePayload {
+  /**
+   * The page of audit-log records, newest first.
+   */
+  entries: AuditEntry[];
+  /**
+   * Opaque continuation token. Present only when further entries remain beyond this page; omitted on the final page.
+   */
+  nextCursor?: string;
+  ext?: Ext1;
+}
+/**
+ * One record in the mediator's privileged-change audit log: one change, by one actor, at one time.
+ */
+export interface AuditEntry {
+  /**
+   * Unix epoch seconds at which the change was recorded.
+   */
+  timestamp: number;
+  actor: Vid;
+  target: Vid1;
+  action: AuditAction;
+  /**
+   * Short human-readable summary of the change; not machine-parsed.
+   */
+  detail?: string;
+}
+/**
+ * Ecosystem-defined extension members per SPEC.md §4.5.1.
+ */
+export interface Ext1 {
+  [k: string]: unknown | undefined;
+}
 
 /** Trust Task type URI. */
 export const TYPE_URI = "https://trusttasks.org/spec/messaging/admin/audit-log/0.1" as const;
 
+/** Stable alias for this specification's request payload shape. */
+export type Payload = Vid;
+
 /** Trust Task response type URI (request type URI + "#response"). */
 export const RESPONSE_TYPE_URI = "https://trusttasks.org/spec/messaging/admin/audit-log/0.1#response" as const;
+
+/** Stable alias for this specification's success-response payload shape. */
+export type Response = MessagingAuditLogResponsePayload;

package/src/messaging/admin/config/0.1/payload.ts

@@ -12,9 +12,37 @@ export interface MessagingGetConfigurationPayload {
 export interface Ext {
   [k: string]: unknown | undefined;
 }
+/**
+ * The success response to a messaging/admin/config request. Carried in a Trust Task document whose type is https://trusttasks.org/spec/messaging/admin/config/0.1#response.
+ */
+export interface MessagingGetConfigurationResponsePayload {
+  /**
+   * The mediator software version.
+   */
+  version: string;
+  /**
+   * The mediator's current configuration as a JSON object. The exact members are mediator-implementation-specific and opaque to this specification.
+   */
+  config: {
+    [k: string]: unknown | undefined;
+  };
+  ext?: Ext1;
+}
+/**
+ * Ecosystem-defined extension members per SPEC.md §4.5.1.
+ */
+export interface Ext1 {
+  [k: string]: unknown | undefined;
+}
 
 /** Trust Task type URI. */
 export const TYPE_URI = "https://trusttasks.org/spec/messaging/admin/config/0.1" as const;
 
+/** Stable alias for this specification's request payload shape. */
+export type Payload = MessagingGetConfigurationPayload;
+
 /** Trust Task response type URI (request type URI + "#response"). */
 export const RESPONSE_TYPE_URI = "https://trusttasks.org/spec/messaging/admin/config/0.1#response" as const;
+
+/** Stable alias for this specification's success-response payload shape. */
+export type Response = MessagingGetConfigurationResponsePayload;

package/src/messaging/admin/list/0.1/payload.ts

@@ -3,6 +3,15 @@
  * Source: specs/messaging/admin/list/0.1/payload.schema.json
  */
 
+/**
+ * The admin account's identifier — its DID or, for privacy, a stable hash of that DID (see `Vid`).
+ */
+export type Vid = string;
+/**
+ * The admin role; one of `admin` or `rootAdmin`.
+ */
+export type AccountType = "standard" | "admin" | "rootAdmin" | "mediator";
+
 export interface MessagingListAdminsPayload {
   /**
    * Opaque continuation token from a prior page's nextCursor. Echoed verbatim; treated as unstructured by the requester.
@@ -20,9 +29,42 @@ export interface MessagingListAdminsPayload {
 export interface Ext {
   [k: string]: unknown | undefined;
 }
+/**
+ * The success response to a messaging/admin/list request. Carried in a Trust Task document whose type is https://trusttasks.org/spec/messaging/admin/list/0.1#response.
+ */
+export interface MessagingListAdminsResponsePayload {
+  /**
+   * The page of admin accounts.
+   */
+  admins: AdminAccount[];
+  /**
+   * Opaque continuation token. Present only when further admins remain beyond this page; omitted on the final page.
+   */
+  nextCursor?: string;
+  ext?: Ext1;
+}
+/**
+ * A privileged account at the mediator (an `admin` or `rootAdmin`).
+ */
+export interface AdminAccount {
+  did: Vid;
+  accountType: AccountType;
+}
+/**
+ * Ecosystem-defined extension members per SPEC.md §4.5.1.
+ */
+export interface Ext1 {
+  [k: string]: unknown | undefined;
+}
 
 /** Trust Task type URI. */
 export const TYPE_URI = "https://trusttasks.org/spec/messaging/admin/list/0.1" as const;
 
+/** Stable alias for this specification's request payload shape. */
+export type Payload = Vid;
+
 /** Trust Task response type URI (request type URI + "#response"). */
 export const RESPONSE_TYPE_URI = "https://trusttasks.org/spec/messaging/admin/list/0.1#response" as const;
+
+/** Stable alias for this specification's success-response payload shape. */
+export type Response = MessagingListAdminsResponsePayload;

package/src/messaging/admin/strip/0.1/payload.ts

@@ -23,9 +23,31 @@ export interface MessagingStripAdminsPayload {
 export interface Ext {
   [k: string]: unknown | undefined;
 }
+/**
+ * The success response to a messaging/admin/strip request. Carried in a Trust Task document whose type is https://trusttasks.org/spec/messaging/admin/strip/0.1#response.
+ */
+export interface MessagingStripAdminsResponsePayload {
+  /**
+   * The accounts whose admin rights were removed.
+   */
+  stripped: Vid[];
+  ext?: Ext1;
+}
+/**
+ * Ecosystem-defined extension members per SPEC.md §4.5.1.
+ */
+export interface Ext1 {
+  [k: string]: unknown | undefined;
+}
 
 /** Trust Task type URI. */
 export const TYPE_URI = "https://trusttasks.org/spec/messaging/admin/strip/0.1" as const;
 
+/** Stable alias for this specification's request payload shape. */
+export type Payload = Vid;
+
 /** Trust Task response type URI (request type URI + "#response"). */
 export const RESPONSE_TYPE_URI = "https://trusttasks.org/spec/messaging/admin/strip/0.1#response" as const;
+
+/** Stable alias for this specification's success-response payload shape. */
+export type Response = MessagingStripAdminsResponsePayload;

package/src/messaging/ping/0.1/payload.ts

@@ -16,9 +16,43 @@ export interface MessagingPingPayload {
 export interface Ext {
   [k: string]: unknown | undefined;
 }
+/**
+ * The success response to a messaging/ping request. Carried in a Trust Task document whose type is https://trusttasks.org/spec/messaging/ping/0.1#response.
+ */
+export interface MessagingPingResponsePayload {
+  /**
+   * The mediator's current time (RFC 3339). Advisory; not a trusted time source.
+   */
+  serverTime: string;
+  /**
+   * Coarse health. `ok` = able to accept and route messages; `degraded` = reachable but operating with reduced function. A mediator that cannot serve at all returns the framework `unavailable` error instead of a response.
+   */
+  status: "ok" | "degraded";
+  /**
+   * The transport protocols the mediator currently serves (e.g. `didcomm`, `tsp`). Open set; requesters ignore unrecognized tokens. MAY be omitted in a reduced response to an unauthenticated requester.
+   */
+  protocols?: string[];
+  /**
+   * Echoed verbatim from the request when one was supplied.
+   */
+  nonce?: string;
+  ext?: Ext1;
+}
+/**
+ * Ecosystem-defined extension members per SPEC.md §4.5.1.
+ */
+export interface Ext1 {
+  [k: string]: unknown | undefined;
+}
 
 /** Trust Task type URI. */
 export const TYPE_URI = "https://trusttasks.org/spec/messaging/ping/0.1" as const;
 
+/** Stable alias for this specification's request payload shape. */
+export type Payload = MessagingPingPayload;
+
 /** Trust Task response type URI (request type URI + "#response"). */
 export const RESPONSE_TYPE_URI = "https://trusttasks.org/spec/messaging/ping/0.1#response" as const;
+
+/** Stable alias for this specification's success-response payload shape. */
+export type Response = MessagingPingResponsePayload;

package/src/policy/activate/0.1/payload.ts

@@ -24,9 +24,34 @@ export interface PolicyActivatePayload {
 export interface Ext {
   [k: string]: unknown | undefined;
 }
+export interface PolicyActivateResponsePayload {
+  /**
+   * The id now active for `purpose` — equal to the request `id`.
+   */
+  activated: string;
+  /**
+   * Echoed from the request.
+   */
+  purpose: string;
+  /**
+   * The policy id that was active for this (contextId, purpose) immediately before, deactivated by this call. `null` when no policy was active — the first activation for the slot. Recorded so an operator can roll back to the prior policy and so the audit trail links the displacement.
+   */
+  previousPolicyId?: string | null;
+  /**
+   * Echoed from the request when it was supplied.
+   */
+  contextId?: string;
+  ext?: Ext;
+}
 
 /** Trust Task type URI. */
 export const TYPE_URI = "https://trusttasks.org/spec/policy/activate/0.1" as const;
 
+/** Stable alias for this specification's request payload shape. */
+export type Payload = PolicyActivatePayload;
+
 /** Trust Task response type URI (request type URI + "#response"). */
 export const RESPONSE_TYPE_URI = "https://trusttasks.org/spec/policy/activate/0.1#response" as const;
+
+/** Stable alias for this specification's success-response payload shape. */
+export type Response = PolicyActivateResponsePayload;

package/src/policy/active/0.1/payload.ts

@@ -20,9 +20,58 @@ export interface PolicyActivePayload {
 export interface Ext {
   [k: string]: unknown | undefined;
 }
+export interface PolicyActiveResponsePayload {
+  /**
+   * The active (contextId, purpose) -> policy bindings that matched the request. Zero entries when the requested purpose has no active policy; the full set when purpose is omitted. Unpaginated — the active set has one entry per purpose, which is small by construction.
+   */
+  bindings: ActiveBinding[];
+  ext?: Ext;
+}
+/**
+ * One active-policy binding: the policy currently authoritative for a (contextId, purpose) decision slot.
+ */
+export interface ActiveBinding {
+  purpose: string;
+  /**
+   * Present when the binding is context-scoped.
+   */
+  contextId?: string;
+  policy: PolicyModule;
+}
+export interface PolicyModule {
+  id: string;
+  /**
+   * Human-readable name (e.g. "default vault policy", "bank-site step-up").
+   */
+  name: string;
+  description?: string;
+  /**
+   * Rego source code. The maintainer's evaluator entry point is the package's `decision` rule, returning a PolicyDecision.
+   */
+  module: string;
+  /**
+   * List of trust contexts this policy applies to. Empty array = applies to all contexts (the default policy).
+   */
+  appliesTo?: string[];
+  /**
+   * When multiple policies match a request, evaluation order is by priority descending. The first to return a non-`null` decision wins.
+   */
+  priority?: number;
+  enabled?: boolean;
+  version: number;
+  createdAt: string;
+  updatedAt: string;
+  ext?: Ext;
+}
 
 /** Trust Task type URI. */
 export const TYPE_URI = "https://trusttasks.org/spec/policy/active/0.1" as const;
 
+/** Stable alias for this specification's request payload shape. */
+export type Payload = PolicyActivePayload;
+
 /** Trust Task response type URI (request type URI + "#response"). */
 export const RESPONSE_TYPE_URI = "https://trusttasks.org/spec/policy/active/0.1#response" as const;
+
+/** Stable alias for this specification's success-response payload shape. */
+export type Response = PolicyActiveResponsePayload;

package/src/policy/delete/0.1/payload.ts

@@ -15,9 +15,20 @@ export interface PolicyDeletePayload {
 export interface Ext {
   [k: string]: unknown | undefined;
 }
+export interface PolicyDeleteResponsePayload {
+  id: string;
+  deletedAt: string;
+  ext?: Ext;
+}
 
 /** Trust Task type URI. */
 export const TYPE_URI = "https://trusttasks.org/spec/policy/delete/0.1" as const;
 
+/** Stable alias for this specification's request payload shape. */
+export type Payload = PolicyDeletePayload;
+
 /** Trust Task response type URI (request type URI + "#response"). */
 export const RESPONSE_TYPE_URI = "https://trusttasks.org/spec/policy/delete/0.1#response" as const;
+
+/** Stable alias for this specification's success-response payload shape. */
+export type Response = PolicyDeleteResponsePayload;

package/src/policy/evaluate/0.1/payload.ts

@@ -94,9 +94,49 @@ export interface Service {
 export interface Ext {
   [k: string]: unknown | undefined;
 }
+export interface PolicyEvaluateResponsePayload {
+  decision: PolicyDecision;
+  /**
+   * Ids (or `candidate` for the dry-run module) of the policies that returned a non-null decision, in evaluation order. The first is the winning policy.
+   */
+  matchedPolicies?: string[];
+  /**
+   * Rego evaluator trace lines when `includeTrace: true`. Maintainer-defined format; primarily for human debugging.
+   */
+  trace?: string[];
+  ext?: Ext;
+}
+export interface PolicyDecision {
+  decision: "allow" | "deny" | "require_step_up";
+  /**
+   * When decision == "allow", whether the maintainer should proxy-login or release-for-fill. Default: proxy.
+   */
+  mode?: "proxy" | "fill";
+  /**
+   * When decision == "require_step_up", which method to demand.
+   */
+  stepUp?: {
+    method: "webauthn-uv" | "push-approval" | "totp";
+    ttlSeconds?: number;
+  };
+  /**
+   * When decision == "allow", maximum lifetime of the issued session blob / released secret.
+   */
+  ttlSecondsCap?: number;
+  /**
+   * Human-readable explanation for diagnostic display.
+   */
+  explanation?: string;
+}
 
 /** Trust Task type URI. */
 export const TYPE_URI = "https://trusttasks.org/spec/policy/evaluate/0.1" as const;
 
+/** Stable alias for this specification's request payload shape. */
+export type Payload = SiteTarget;
+
 /** Trust Task response type URI (request type URI + "#response"). */
 export const RESPONSE_TYPE_URI = "https://trusttasks.org/spec/policy/evaluate/0.1#response" as const;
+
+/** Stable alias for this specification's success-response payload shape. */
+export type Response = PolicyEvaluateResponsePayload;