@openvtc/trust-tasks 0.2.57 → 0.2.59

package/dist/_runtime/document.d.ts

@@ -0,0 +1,129 @@
+/**
+ * The Trust Task document envelope (SPEC.md §4) and the framework-level checks
+ * that operate on it.
+ *
+ * Hand-written. Mirrors `document.rs` in trust-tasks-rs.
+ */
+import type { StandardCode } from "./codes.js";
+/** A W3C Data Integrity Proof object (SPEC.md §4.7). Opaque to the framework. */
+export interface Proof {
+    type: string;
+    cryptosuite: string;
+    verificationMethod: string;
+    created: string;
+    proofPurpose: string;
+    proofValue: string;
+    [k: string]: unknown;
+}
+/** A single Trust Task document, per SPEC.md §4.2. */
+export interface TrustTaskDocument<P> {
+    /** Globally unique to this instance (§4.3). */
+    id: string;
+    /** Correlates this document with others in the same exchange (§4.9). */
+    threadId?: string;
+    /** The Type URI identifying specification and version (§4.4). */
+    type: string;
+    /** VID of the party responsible for the content (§4.8). */
+    issuer?: string;
+    /** VID of the party expected to act on the document (§4.8). */
+    recipient?: string;
+    issuedAt?: string;
+    expiresAt?: string;
+    payload: P;
+    "@context"?: unknown;
+    proof?: Proof;
+    /**
+     * Unrecognized top-level members. §7.2 says a consumer SHOULD preserve but
+     * MUST NOT act upon them, and §7.1 asks a forwarding producer to carry them
+     * through.
+     */
+    [k: string]: unknown;
+}
+/** The `payload` of an error response (SPEC.md §8.2). */
+export interface ErrorPayload {
+    code: string;
+    message?: string;
+    retryable: boolean;
+    retryAfter?: string;
+    details?: Record<string, unknown>;
+}
+/** A `trust-task-error` document. */
+export type ErrorResponse = TrustTaskDocument<ErrorPayload>;
+/**
+ * The per-specification declarations a consumer needs to apply SPEC §7.2 items
+ * 5b, 7 and 8. Generated modules export this as `SPEC` / `RESPONSE_SPEC`.
+ *
+ * Structurally typed on purpose, so the 285 generated modules need no import
+ * from this one.
+ */
+export interface SpecPolicy {
+    readonly typeUri: string;
+    /** §4.8.3 — opts out of the §4.8.2 audience-binding rule. */
+    readonly isBearer: boolean;
+    /** §7.3 item 8 — `proofRequirement.requirement` is REQUIRED. */
+    readonly isProofRequired: boolean;
+    /** §7.3 item 5 — the party filling `recipient` is REQUIRED. */
+    readonly isRecipientRequired: boolean;
+}
+/** Why a consumer rejected a document, and the §8.3 code it maps to. */
+export interface RejectReason {
+    code: StandardCode;
+    message: string;
+    retryable: boolean;
+    retryAfter?: string;
+    details?: Record<string, unknown>;
+}
+/** The Type URI a consumer emits error responses under. */
+export declare const TRUST_TASK_ERROR_TYPE_URI = "https://trusttasks.org/spec/trust-task-error/0.2";
+/**
+ * SPEC §7.2 items 4 and 5a — expiry and wrong-recipient.
+ *
+ * ⚠ This is *not* the full §7.2 check. Items 1–3 (framework schema, payload
+ * schema, unknown `type`) belong to the caller's parse and dispatch; items 5b,
+ * 7 and 8 need the specification's policy and live in
+ * {@link enforceSpecPolicy}. {@link consumeInbound} bundles 4–8.
+ *
+ * @param now Milliseconds since the epoch, as from `Date.now()`.
+ */
+export declare function validateBasic<P>(doc: TrustTaskDocument<P>, now: number, myVid: string): RejectReason | null;
+/**
+ * SPEC §7.2 item 8 — a proof-bearing document on a non-bearer specification
+ * must carry an in-band `recipient`, so the proof binds the audience as well as
+ * the content (§4.8.2).
+ */
+export declare function enforceAudienceBinding<P>(doc: TrustTaskDocument<P>, spec: SpecPolicy): RejectReason | null;
+/**
+ * The policy-driven subset of SPEC §7.2 — items 5b, 7 clause A, and 8.
+ *
+ * Single source of truth for the flag-driven checks, so a binding-specific
+ * pipeline and {@link consumeInbound} cannot diverge on the check set. Ordering
+ * matches trust-tasks-rs `enforce_spec_policy`: recipient, then proof, then
+ * audience binding.
+ */
+export declare function enforceSpecPolicy<P>(doc: TrustTaskDocument<P>, spec: SpecPolicy): RejectReason | null;
+/**
+ * Build the error response for `request`, addressed to an explicit `recipient`.
+ *
+ * ⚠ Prefer {@link rejectWith} for ordinary refusals. This form exists for
+ * `identityMismatch`, where §8.1 forbids addressing the contested in-band
+ * issuer — see `TransportHandler.reject` in ./transport.js, which applies that rule.
+ */
+export declare function rejectWithRecipient<P>(request: TrustTaskDocument<P>, id: string, payload: ErrorPayload, recipient: string | undefined, now?: () => string): ErrorResponse;
+/**
+ * Build the error response for `request`, addressed to its original producer.
+ *
+ * ⚠ Not safe under a rejection that contests the in-band identity: it copies
+ * `request.issuer` into `recipient`, which under `identityMismatch` is the
+ * contested value §8.1 says MUST NOT be addressed. Use
+ * `TransportHandler.reject` (./transport.js) for those.
+ */
+export declare function rejectWith<P>(request: TrustTaskDocument<P>, id: string, payload: ErrorPayload, now?: () => string): ErrorResponse;
+/** Turn a {@link RejectReason} into the §8.2 payload it maps to. */
+export declare function toErrorPayload(reason: RejectReason): ErrorPayload;
+/**
+ * Build the success-response document for `request`, per SPEC §4.4.1 — the
+ * request's Type URI with the `#response` fragment, the parties swapped, and
+ * the thread continued.
+ */
+export declare function respondWith<P, R>(request: TrustTaskDocument<P>, id: string, payload: R, now?: () => string): TrustTaskDocument<R>;
+//# sourceMappingURL=document.d.ts.map

package/dist/_runtime/document.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"document.d.ts","sourceRoot":"","sources":["../../src/_runtime/document.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE/C,iFAAiF;AACjF,MAAM,WAAW,KAAK;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACtB;AAED,sDAAsD;AACtD,MAAM,WAAW,iBAAiB,CAAC,CAAC;IAClC,+CAA+C;IAC/C,EAAE,EAAE,MAAM,CAAC;IACX,wEAAwE;IACxE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,iEAAiE;IACjE,IAAI,EAAE,MAAM,CAAC;IACb,2DAA2D;IAC3D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,+DAA+D;IAC/D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,CAAC,CAAC;IACX,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,KAAK,CAAC,EAAE,KAAK,CAAC;IACd;;;;OAIG;IACH,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACtB;AAED,yDAAyD;AACzD,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,OAAO,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAED,qCAAqC;AACrC,MAAM,MAAM,aAAa,GAAG,iBAAiB,CAAC,YAAY,CAAC,CAAC;AAE5D;;;;;;GAMG;AACH,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,6DAA6D;IAC7D,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,gEAAgE;IAChE,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC;IAClC,+DAA+D;IAC/D,QAAQ,CAAC,mBAAmB,EAAE,OAAO,CAAC;CACvC;AAED,wEAAwE;AACxE,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,YAAY,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,OAAO,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAED,2DAA2D;AAC3D,eAAO,MAAM,yBAAyB,qDAAqD,CAAC;AAE5F;;;;;;;;;GASG;AACH,wBAAgB,aAAa,CAAC,CAAC,EAC7B,GAAG,EAAE,iBAAiB,CAAC,CAAC,CAAC,EACzB,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,MAAM,GACZ,YAAY,GAAG,IAAI,CA6BrB;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,CAAC,EACtC,GAAG,EAAE,iBAAiB,CAAC,CAAC,CAAC,EACzB,IAAI,EAAE,UAAU,GACf,YAAY,GAAG,IAAI,CAWrB;AAED;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,CAAC,EACjC,GAAG,EAAE,iBAAiB,CAAC,CAAC,CAAC,EACzB,IAAI,EAAE,UAAU,GACf,YAAY,GAAG,IAAI,CAiBrB;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,CAAC,EACnC,OAAO,EAAE,iBAAiB,CAAC,CAAC,CAAC,EAC7B,EAAE,EAAE,MAAM,EACV,OAAO,EAAE,YAAY,EACrB,SAAS,EAAE,MAAM,GAAG,SAAS,EAC7B,GAAG,GAAE,MAAM,MAAuC,GACjD,aAAa,CAWf;AAED;;;;;;;GAOG;AACH,wBAAgB,UAAU,CAAC,CAAC,EAC1B,OAAO,EAAE,iBAAiB,CAAC,CAAC,CAAC,EAC7B,EAAE,EAAE,MAAM,EACV,OAAO,EAAE,YAAY,EACrB,GAAG,CAAC,EAAE,MAAM,MAAM,GACjB,aAAa,CAEf;AAED,oEAAoE;AACpE,wBAAgB,cAAc,CAAC,MAAM,EAAE,YAAY,GAAG,YAAY,CASjE;AAED;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,CAAC,EAAE,CAAC,EAC9B,OAAO,EAAE,iBAAiB,CAAC,CAAC,CAAC,EAC7B,EAAE,EAAE,MAAM,EACV,OAAO,EAAE,CAAC,EACV,GAAG,GAAE,MAAM,MAAuC,GACjD,iBAAiB,CAAC,CAAC,CAAC,CAWtB"}

package/dist/_runtime/document.js

@@ -0,0 +1,148 @@
+/**
+ * The Trust Task document envelope (SPEC.md §4) and the framework-level checks
+ * that operate on it.
+ *
+ * Hand-written. Mirrors `document.rs` in trust-tasks-rs.
+ */
+/** The Type URI a consumer emits error responses under. */
+export const TRUST_TASK_ERROR_TYPE_URI = "https://trusttasks.org/spec/trust-task-error/0.2";
+/**
+ * SPEC §7.2 items 4 and 5a — expiry and wrong-recipient.
+ *
+ * ⚠ This is *not* the full §7.2 check. Items 1–3 (framework schema, payload
+ * schema, unknown `type`) belong to the caller's parse and dispatch; items 5b,
+ * 7 and 8 need the specification's policy and live in
+ * {@link enforceSpecPolicy}. {@link consumeInbound} bundles 4–8.
+ *
+ * @param now Milliseconds since the epoch, as from `Date.now()`.
+ */
+export function validateBasic(doc, now, myVid) {
+    if (doc.expiresAt !== undefined) {
+        const expiresAt = Date.parse(doc.expiresAt);
+        if (Number.isNaN(expiresAt)) {
+            return {
+                code: "malformedRequest",
+                message: "expiresAt is not a valid RFC 3339 timestamp",
+                retryable: false,
+            };
+        }
+        // §4.2 / §7.2 item 4: inclusive bound — `now >= expiresAt` is expired.
+        if (expiresAt <= now) {
+            return {
+                code: "expired",
+                message: `document expired at ${doc.expiresAt}`,
+                retryable: false,
+            };
+        }
+    }
+    if (doc.recipient !== undefined && doc.recipient !== myVid) {
+        return {
+            code: "wrongRecipient",
+            message: "in-band recipient does not identify this consumer",
+            retryable: false,
+        };
+    }
+    return null;
+}
+/**
+ * SPEC §7.2 item 8 — a proof-bearing document on a non-bearer specification
+ * must carry an in-band `recipient`, so the proof binds the audience as well as
+ * the content (§4.8.2).
+ */
+export function enforceAudienceBinding(doc, spec) {
+    if (doc.proof !== undefined && doc.recipient === undefined && !spec.isBearer) {
+        return {
+            code: "malformedRequest",
+            message: "proof present with no in-band recipient on a non-bearer specification " +
+                "(SPEC §4.8.2 audience binding)",
+            retryable: false,
+        };
+    }
+    return null;
+}
+/**
+ * The policy-driven subset of SPEC §7.2 — items 5b, 7 clause A, and 8.
+ *
+ * Single source of truth for the flag-driven checks, so a binding-specific
+ * pipeline and {@link consumeInbound} cannot diverge on the check set. Ordering
+ * matches trust-tasks-rs `enforce_spec_policy`: recipient, then proof, then
+ * audience binding.
+ */
+export function enforceSpecPolicy(doc, spec) {
+    if (doc.recipient === undefined && spec.isRecipientRequired) {
+        return {
+            code: "malformedRequest",
+            message: "specification declares recipient REQUIRED but the document carries no in-band recipient",
+            retryable: false,
+        };
+    }
+    if (doc.proof === undefined && spec.isProofRequired) {
+        return {
+            code: "proofRequired",
+            message: "specification declares proof REQUIRED but the document carries none",
+            retryable: false,
+        };
+    }
+    return enforceAudienceBinding(doc, spec);
+}
+/**
+ * Build the error response for `request`, addressed to an explicit `recipient`.
+ *
+ * ⚠ Prefer {@link rejectWith} for ordinary refusals. This form exists for
+ * `identityMismatch`, where §8.1 forbids addressing the contested in-band
+ * issuer — see `TransportHandler.reject` in ./transport.js, which applies that rule.
+ */
+export function rejectWithRecipient(request, id, payload, recipient, now = () => new Date().toISOString()) {
+    return {
+        id,
+        // §4.9: continue the thread, falling back to the request's own id.
+        threadId: request.threadId ?? request.id,
+        type: TRUST_TASK_ERROR_TYPE_URI,
+        issuer: request.recipient,
+        recipient,
+        issuedAt: now(),
+        payload,
+    };
+}
+/**
+ * Build the error response for `request`, addressed to its original producer.
+ *
+ * ⚠ Not safe under a rejection that contests the in-band identity: it copies
+ * `request.issuer` into `recipient`, which under `identityMismatch` is the
+ * contested value §8.1 says MUST NOT be addressed. Use
+ * `TransportHandler.reject` (./transport.js) for those.
+ */
+export function rejectWith(request, id, payload, now) {
+    return rejectWithRecipient(request, id, payload, request.issuer, now);
+}
+/** Turn a {@link RejectReason} into the §8.2 payload it maps to. */
+export function toErrorPayload(reason) {
+    const payload = {
+        code: reason.code,
+        message: reason.message,
+        retryable: reason.retryable,
+    };
+    if (reason.retryAfter !== undefined)
+        payload.retryAfter = reason.retryAfter;
+    if (reason.details !== undefined)
+        payload.details = reason.details;
+    return payload;
+}
+/**
+ * Build the success-response document for `request`, per SPEC §4.4.1 — the
+ * request's Type URI with the `#response` fragment, the parties swapped, and
+ * the thread continued.
+ */
+export function respondWith(request, id, payload, now = () => new Date().toISOString()) {
+    const bare = request.type.split("#")[0];
+    return {
+        id,
+        threadId: request.threadId ?? request.id,
+        type: `${bare}#response`,
+        issuer: request.recipient,
+        recipient: request.issuer,
+        issuedAt: now(),
+        payload,
+    };
+}
+//# sourceMappingURL=document.js.map

package/dist/_runtime/document.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"document.js","sourceRoot":"","sources":["../../src/_runtime/document.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AA8EH,2DAA2D;AAC3D,MAAM,CAAC,MAAM,yBAAyB,GAAG,kDAAkD,CAAC;AAE5F;;;;;;;;;GASG;AACH,MAAM,UAAU,aAAa,CAC3B,GAAyB,EACzB,GAAW,EACX,KAAa;IAEb,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QAChC,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC5C,IAAI,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;YAC5B,OAAO;gBACL,IAAI,EAAE,kBAAkB;gBACxB,OAAO,EAAE,6CAA6C;gBACtD,SAAS,EAAE,KAAK;aACjB,CAAC;QACJ,CAAC;QACD,uEAAuE;QACvE,IAAI,SAAS,IAAI,GAAG,EAAE,CAAC;YACrB,OAAO;gBACL,IAAI,EAAE,SAAS;gBACf,OAAO,EAAE,uBAAuB,GAAG,CAAC,SAAS,EAAE;gBAC/C,SAAS,EAAE,KAAK;aACjB,CAAC;QACJ,CAAC;IACH,CAAC;IAED,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS,IAAI,GAAG,CAAC,SAAS,KAAK,KAAK,EAAE,CAAC;QAC3D,OAAO;YACL,IAAI,EAAE,gBAAgB;YACtB,OAAO,EAAE,mDAAmD;YAC5D,SAAS,EAAE,KAAK;SACjB,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CACpC,GAAyB,EACzB,IAAgB;IAEhB,IAAI,GAAG,CAAC,KAAK,KAAK,SAAS,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC7E,OAAO;YACL,IAAI,EAAE,kBAAkB;YACxB,OAAO,EACL,wEAAwE;gBACxE,gCAAgC;YAClC,SAAS,EAAE,KAAK;SACjB,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,iBAAiB,CAC/B,GAAyB,EACzB,IAAgB;IAEhB,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS,IAAI,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAC5D,OAAO;YACL,IAAI,EAAE,kBAAkB;YACxB,OAAO,EACL,yFAAyF;YAC3F,SAAS,EAAE,KAAK;SACjB,CAAC;IACJ,CAAC;IACD,IAAI,GAAG,CAAC,KAAK,KAAK,SAAS,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;QACpD,OAAO;YACL,IAAI,EAAE,eAAe;YACrB,OAAO,EAAE,qEAAqE;YAC9E,SAAS,EAAE,KAAK;SACjB,CAAC;IACJ,CAAC;IACD,OAAO,sBAAsB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;AAC3C,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CACjC,OAA6B,EAC7B,EAAU,EACV,OAAqB,EACrB,SAA6B,EAC7B,MAAoB,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;IAElD,OAAO;QACL,EAAE;QACF,mEAAmE;QACnE,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,EAAE;QACxC,IAAI,EAAE,yBAAyB;QAC/B,MAAM,EAAE,OAAO,CAAC,SAAS;QACzB,SAAS;QACT,QAAQ,EAAE,GAAG,EAAE;QACf,OAAO;KACR,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,UAAU,CACxB,OAA6B,EAC7B,EAAU,EACV,OAAqB,EACrB,GAAkB;IAElB,OAAO,mBAAmB,CAAC,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;AACxE,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,cAAc,CAAC,MAAoB;IACjD,MAAM,OAAO,GAAiB;QAC5B,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,SAAS,EAAE,MAAM,CAAC,SAAS;KAC5B,CAAC;IACF,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS;QAAE,OAAO,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;IAC5E,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS;QAAE,OAAO,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;IACnE,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,WAAW,CACzB,OAA6B,EAC7B,EAAU,EACV,OAAU,EACV,MAAoB,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;IAElD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC;IACzC,OAAO;QACL,EAAE;QACF,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,EAAE;QACxC,IAAI,EAAE,GAAG,IAAI,WAAW;QACxB,MAAM,EAAE,OAAO,CAAC,SAAS;QACzB,SAAS,EAAE,OAAO,CAAC,MAAM;QACzB,QAAQ,EAAE,GAAG,EAAE;QACf,OAAO;KACR,CAAC;AACJ,CAAC"}

package/dist/_runtime/index.d.ts

@@ -0,0 +1,16 @@
+/**
+ * The Trust Tasks framework runtime for TypeScript — the SPEC.md §7.2 consumer
+ * pipeline, the document envelope, and the transport seam.
+ *
+ * Hand-written, unlike everything else under `src/`, which is generated from
+ * the spec registry. Kept in the same package so a consumer gets the types and
+ * the checks that make them meaningful from one install, as trust-tasks-rs
+ * does.
+ *
+ * The entry point is {@link consumeInbound}.
+ */
+export { TRUST_TASK_ERROR_TYPE_URI, enforceAudienceBinding, enforceSpecPolicy, rejectWith, rejectWithRecipient, respondWith, toErrorPayload, validateBasic, type ErrorPayload, type ErrorResponse, type Proof, type RejectReason, type SpecPolicy, type TrustTaskDocument, } from "./document.js";
+export { STANDARD_CODES, extendedCode, familyCode, isStandardCode, normalizeCode, slugFromTypeUri, type StandardCode, } from "./codes.js";
+export { StaticTransport, UnauthenticatedTransport, identityMismatchReason, reject, resolveParties, type ConsistencyError, type ResolvedParties, type TransportContext, type TransportHandler, } from "./transport.js";
+export { PROOF_NOT_ACCEPTED_BY_POLICY, consumeInbound, refuse, type ConsumeOptions, type ConsumeOutcome, type ProofPolicy, type ProofVerifier, } from "./consume.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/_runtime/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/_runtime/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EACL,yBAAyB,EACzB,sBAAsB,EACtB,iBAAiB,EACjB,UAAU,EACV,mBAAmB,EACnB,WAAW,EACX,cAAc,EACd,aAAa,EACb,KAAK,YAAY,EACjB,KAAK,aAAa,EAClB,KAAK,KAAK,EACV,KAAK,YAAY,EACjB,KAAK,UAAU,EACf,KAAK,iBAAiB,GACvB,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,cAAc,EACd,YAAY,EACZ,UAAU,EACV,cAAc,EACd,aAAa,EACb,eAAe,EACf,KAAK,YAAY,GAClB,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,eAAe,EACf,wBAAwB,EACxB,sBAAsB,EACtB,MAAM,EACN,cAAc,EACd,KAAK,gBAAgB,EACrB,KAAK,eAAe,EACpB,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,GACtB,MAAM,gBAAgB,CAAC;AAExB,OAAO,EACL,4BAA4B,EAC5B,cAAc,EACd,MAAM,EACN,KAAK,cAAc,EACnB,KAAK,cAAc,EACnB,KAAK,WAAW,EAChB,KAAK,aAAa,GACnB,MAAM,cAAc,CAAC"}

package/dist/_runtime/index.js

@@ -0,0 +1,16 @@
+/**
+ * The Trust Tasks framework runtime for TypeScript — the SPEC.md §7.2 consumer
+ * pipeline, the document envelope, and the transport seam.
+ *
+ * Hand-written, unlike everything else under `src/`, which is generated from
+ * the spec registry. Kept in the same package so a consumer gets the types and
+ * the checks that make them meaningful from one install, as trust-tasks-rs
+ * does.
+ *
+ * The entry point is {@link consumeInbound}.
+ */
+export { TRUST_TASK_ERROR_TYPE_URI, enforceAudienceBinding, enforceSpecPolicy, rejectWith, rejectWithRecipient, respondWith, toErrorPayload, validateBasic, } from "./document.js";
+export { STANDARD_CODES, extendedCode, familyCode, isStandardCode, normalizeCode, slugFromTypeUri, } from "./codes.js";
+export { StaticTransport, UnauthenticatedTransport, identityMismatchReason, reject, resolveParties, } from "./transport.js";
+export { PROOF_NOT_ACCEPTED_BY_POLICY, consumeInbound, refuse, } from "./consume.js";
+//# sourceMappingURL=index.js.map

package/dist/_runtime/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/_runtime/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EACL,yBAAyB,EACzB,sBAAsB,EACtB,iBAAiB,EACjB,UAAU,EACV,mBAAmB,EACnB,WAAW,EACX,cAAc,EACd,aAAa,GAOd,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,cAAc,EACd,YAAY,EACZ,UAAU,EACV,cAAc,EACd,aAAa,EACb,eAAe,GAEhB,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,eAAe,EACf,wBAAwB,EACxB,sBAAsB,EACtB,MAAM,EACN,cAAc,GAKf,MAAM,gBAAgB,CAAC;AAExB,OAAO,EACL,4BAA4B,EAC5B,cAAc,EACd,MAAM,GAKP,MAAM,cAAc,CAAC"}

package/dist/_runtime/transport.d.ts

@@ -0,0 +1,104 @@
+/**
+ * The integration point between the transport-agnostic document model and a
+ * concrete transport binding (HTTPS + mTLS, DIDComm, TSP, an in-memory test
+ * loopback, …).
+ *
+ * Hand-written. Mirrors `transport.rs` in trust-tasks-rs. The contract encodes
+ * SPEC.md §4.8.1 and §9.2:
+ *
+ * - In-band `issuer` / `recipient` are authoritative when present.
+ * - Transport-derived identity fills in absent members.
+ * - When both are present they MUST agree; a mismatch is a validation failure
+ *   (`identityMismatch`, §8.3).
+ */
+import { type ErrorResponse, type RejectReason, type TrustTaskDocument } from "./document.js";
+/**
+ * Party identity after §4.8.1 precedence — the values a consumer applies for
+ * every subsequent framework rule referencing the issuer or recipient.
+ */
+export interface ResolvedParties {
+    issuer?: string;
+    recipient?: string;
+}
+/**
+ * What the transport authenticated about an inbound message.
+ *
+ * A field is absent when the transport does not authenticate that party — a
+ * plain HTTPS handler with no client certificate leaves `issuer` unset.
+ * Returning an entirely empty context is valid; the framework then relies on
+ * the in-band members and any `proof` they carry.
+ */
+export interface TransportContext {
+    issuer?: string;
+    recipient?: string;
+}
+/** Raised when in-band and transport-derived identity disagree (§7.2 item 6). */
+export interface ConsistencyError {
+    party: "issuer" | "recipient";
+    inBand: string;
+    transport: string;
+}
+/** A transport binding's plug-in for the framework. */
+export interface TransportHandler {
+    /**
+     * Stable identifier for this binding, for logs and audit (§9.1, §9.2).
+     */
+    bindingUri(): string;
+    /** Identities the transport authenticated for the message under consideration. */
+    deriveParties(): TransportContext;
+}
+/**
+ * Apply §4.8.1 precedence to produce the final {@link ResolvedParties}.
+ *
+ * Returns a {@link ConsistencyError} when an in-band member is present and
+ * disagrees with the transport-derived value for the same party. Callers
+ * translate that into an `identityMismatch` error response (§8.3) — or let
+ * {@link consumeInbound} do it.
+ */
+export declare function resolveParties<P>(handler: TransportHandler, doc: TrustTaskDocument<P>): {
+    parties: ResolvedParties;
+} | {
+    error: ConsistencyError;
+};
+/**
+ * Build the error response for `doc`, applying the §8.1 routing rules.
+ *
+ * Returns `undefined` when the rejection is `identityMismatch` and the
+ * transport authenticated no sender. §8.1 is explicit that the consumer SHOULD
+ * NOT emit a response in that case: the in-band `issuer` is by definition the
+ * contested identity, so addressing it would be an oracle, and on any transport
+ * that signs error responses it would compel the consumer to emit a signed
+ * document about a party that did not take part in the exchange.
+ */
+export declare function reject<P>(handler: TransportHandler, doc: TrustTaskDocument<P>, id: string, reason: RejectReason, now?: () => string): ErrorResponse | undefined;
+/**
+ * The `identityMismatch` reason for a {@link ConsistencyError}.
+ *
+ * §8.1 additionally requires the wire `message` to be sanitized: naming the
+ * consumer's expected transport-authenticated identity, or echoing the
+ * contested in-band value, leaks identity information to a possibly hostile
+ * sender. The standard wire form is the code alone with a non-identifying
+ * message — so the mismatched values are deliberately *not* included here.
+ * Log them locally instead.
+ */
+export declare function identityMismatchReason(_error: ConsistencyError): RejectReason;
+/**
+ * A handler for transports that authenticate nothing — an unauthenticated
+ * HTTP POST, a public queue, paper. Party identity comes entirely from the
+ * in-band members and whatever `proof` they carry.
+ */
+export declare class UnauthenticatedTransport implements TransportHandler {
+    private readonly uri;
+    constructor(uri?: string);
+    bindingUri(): string;
+    deriveParties(): TransportContext;
+}
+/** A fixed-identity handler, for tests and for transports resolved out-of-band. */
+export declare class StaticTransport implements TransportHandler {
+    private readonly ctx;
+    private readonly uri;
+    constructor(ctx: TransportContext, uri?: string);
+    bindingUri(): string;
+    deriveParties(): TransportContext;
+}
+//# sourceMappingURL=transport.d.ts.map

package/dist/_runtime/transport.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport.d.ts","sourceRoot":"","sources":["../../src/_runtime/transport.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAGL,KAAK,aAAa,EAClB,KAAK,YAAY,EACjB,KAAK,iBAAiB,EACvB,MAAM,eAAe,CAAC;AAEvB;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC9B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,gBAAgB;IAC/B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,iFAAiF;AACjF,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,QAAQ,GAAG,WAAW,CAAC;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,uDAAuD;AACvD,MAAM,WAAW,gBAAgB;IAC/B;;OAEG;IACH,UAAU,IAAI,MAAM,CAAC;IAErB,kFAAkF;IAClF,aAAa,IAAI,gBAAgB,CAAC;CACnC;AAED;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,CAAC,EAC9B,OAAO,EAAE,gBAAgB,EACzB,GAAG,EAAE,iBAAiB,CAAC,CAAC,CAAC,GACxB;IAAE,OAAO,EAAE,eAAe,CAAA;CAAE,GAAG;IAAE,KAAK,EAAE,gBAAgB,CAAA;CAAE,CAiB5D;AAED;;;;;;;;;GASG;AACH,wBAAgB,MAAM,CAAC,CAAC,EACtB,OAAO,EAAE,gBAAgB,EACzB,GAAG,EAAE,iBAAiB,CAAC,CAAC,CAAC,EACzB,EAAE,EAAE,MAAM,EACV,MAAM,EAAE,YAAY,EACpB,GAAG,CAAC,EAAE,MAAM,MAAM,GACjB,aAAa,GAAG,SAAS,CAS3B;AAED;;;;;;;;;GASG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,gBAAgB,GAAG,YAAY,CAM7E;AAED;;;;GAIG;AACH,qBAAa,wBAAyB,YAAW,gBAAgB;IACnD,OAAO,CAAC,QAAQ,CAAC,GAAG;gBAAH,GAAG,SAA8C;IAC9E,UAAU,IAAI,MAAM;IAGpB,aAAa,IAAI,gBAAgB;CAGlC;AAED,mFAAmF;AACnF,qBAAa,eAAgB,YAAW,gBAAgB;IAEpD,OAAO,CAAC,QAAQ,CAAC,GAAG;IACpB,OAAO,CAAC,QAAQ,CAAC,GAAG;gBADH,GAAG,EAAE,gBAAgB,EACrB,GAAG,SAAqC;IAE3D,UAAU,IAAI,MAAM;IAGpB,aAAa,IAAI,gBAAgB;CAGlC"}

package/dist/_runtime/transport.js

@@ -0,0 +1,112 @@
+/**
+ * The integration point between the transport-agnostic document model and a
+ * concrete transport binding (HTTPS + mTLS, DIDComm, TSP, an in-memory test
+ * loopback, …).
+ *
+ * Hand-written. Mirrors `transport.rs` in trust-tasks-rs. The contract encodes
+ * SPEC.md §4.8.1 and §9.2:
+ *
+ * - In-band `issuer` / `recipient` are authoritative when present.
+ * - Transport-derived identity fills in absent members.
+ * - When both are present they MUST agree; a mismatch is a validation failure
+ *   (`identityMismatch`, §8.3).
+ */
+import { rejectWithRecipient, toErrorPayload, } from "./document.js";
+/**
+ * Apply §4.8.1 precedence to produce the final {@link ResolvedParties}.
+ *
+ * Returns a {@link ConsistencyError} when an in-band member is present and
+ * disagrees with the transport-derived value for the same party. Callers
+ * translate that into an `identityMismatch` error response (§8.3) — or let
+ * {@link consumeInbound} do it.
+ */
+export function resolveParties(handler, doc) {
+    const ctx = handler.deriveParties();
+    for (const party of ["issuer", "recipient"]) {
+        const inBand = doc[party];
+        const transport = ctx[party];
+        if (inBand !== undefined && transport !== undefined && inBand !== transport) {
+            return { error: { party, inBand, transport } };
+        }
+    }
+    const parties = {};
+    const issuer = doc.issuer ?? ctx.issuer;
+    const recipient = doc.recipient ?? ctx.recipient;
+    if (issuer !== undefined)
+        parties.issuer = issuer;
+    if (recipient !== undefined)
+        parties.recipient = recipient;
+    return { parties };
+}
+/**
+ * Build the error response for `doc`, applying the §8.1 routing rules.
+ *
+ * Returns `undefined` when the rejection is `identityMismatch` and the
+ * transport authenticated no sender. §8.1 is explicit that the consumer SHOULD
+ * NOT emit a response in that case: the in-band `issuer` is by definition the
+ * contested identity, so addressing it would be an oracle, and on any transport
+ * that signs error responses it would compel the consumer to emit a signed
+ * document about a party that did not take part in the exchange.
+ */
+export function reject(handler, doc, id, reason, now) {
+    let recipient;
+    if (reason.code === "identityMismatch") {
+        recipient = handler.deriveParties().issuer;
+        if (recipient === undefined)
+            return undefined;
+    }
+    else {
+        recipient = doc.issuer;
+    }
+    return rejectWithRecipient(doc, id, toErrorPayload(reason), recipient, now);
+}
+/**
+ * The `identityMismatch` reason for a {@link ConsistencyError}.
+ *
+ * §8.1 additionally requires the wire `message` to be sanitized: naming the
+ * consumer's expected transport-authenticated identity, or echoing the
+ * contested in-band value, leaks identity information to a possibly hostile
+ * sender. The standard wire form is the code alone with a non-identifying
+ * message — so the mismatched values are deliberately *not* included here.
+ * Log them locally instead.
+ */
+export function identityMismatchReason(_error) {
+    return {
+        code: "identityMismatch",
+        message: "identityMismatch: in-band identity does not match transport-derived identity",
+        retryable: false,
+    };
+}
+/**
+ * A handler for transports that authenticate nothing — an unauthenticated
+ * HTTP POST, a public queue, paper. Party identity comes entirely from the
+ * in-band members and whatever `proof` they carry.
+ */
+export class UnauthenticatedTransport {
+    uri;
+    constructor(uri = "urn:trust-tasks:transport:unauthenticated") {
+        this.uri = uri;
+    }
+    bindingUri() {
+        return this.uri;
+    }
+    deriveParties() {
+        return {};
+    }
+}
+/** A fixed-identity handler, for tests and for transports resolved out-of-band. */
+export class StaticTransport {
+    ctx;
+    uri;
+    constructor(ctx, uri = "urn:trust-tasks:transport:static") {
+        this.ctx = ctx;
+        this.uri = uri;
+    }
+    bindingUri() {
+        return this.uri;
+    }
+    deriveParties() {
+        return { ...this.ctx };
+    }
+}
+//# sourceMappingURL=transport.js.map

package/dist/_runtime/transport.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport.js","sourceRoot":"","sources":["../../src/_runtime/transport.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EACL,mBAAmB,EACnB,cAAc,GAIf,MAAM,eAAe,CAAC;AA0CvB;;;;;;;GAOG;AACH,MAAM,UAAU,cAAc,CAC5B,OAAyB,EACzB,GAAyB;IAEzB,MAAM,GAAG,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC;IAEpC,KAAK,MAAM,KAAK,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAU,EAAE,CAAC;QACrD,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC;QAC1B,MAAM,SAAS,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC;QAC7B,IAAI,MAAM,KAAK,SAAS,IAAI,SAAS,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YAC5E,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,CAAC;QACjD,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAoB,EAAE,CAAC;IACpC,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC;IACxC,MAAM,SAAS,GAAG,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,SAAS,CAAC;IACjD,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC;IAClD,IAAI,SAAS,KAAK,SAAS;QAAE,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC;IAC3D,OAAO,EAAE,OAAO,EAAE,CAAC;AACrB,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,MAAM,CACpB,OAAyB,EACzB,GAAyB,EACzB,EAAU,EACV,MAAoB,EACpB,GAAkB;IAElB,IAAI,SAA6B,CAAC;IAClC,IAAI,MAAM,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;QACvC,SAAS,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC,MAAM,CAAC;QAC3C,IAAI,SAAS,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;IAChD,CAAC;SAAM,CAAC;QACN,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC;IACzB,CAAC;IACD,OAAO,mBAAmB,CAAC,GAAG,EAAE,EAAE,EAAE,cAAc,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;AAC9E,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAAwB;IAC7D,OAAO;QACL,IAAI,EAAE,kBAAkB;QACxB,OAAO,EAAE,8EAA8E;QACvF,SAAS,EAAE,KAAK;KACjB,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,OAAO,wBAAwB;IACN;IAA7B,YAA6B,MAAM,2CAA2C;QAAjD,QAAG,GAAH,GAAG,CAA8C;IAAG,CAAC;IAClF,UAAU;QACR,OAAO,IAAI,CAAC,GAAG,CAAC;IAClB,CAAC;IACD,aAAa;QACX,OAAO,EAAE,CAAC;IACZ,CAAC;CACF;AAED,mFAAmF;AACnF,MAAM,OAAO,eAAe;IAEP;IACA;IAFnB,YACmB,GAAqB,EACrB,MAAM,kCAAkC;QADxC,QAAG,GAAH,GAAG,CAAkB;QACrB,QAAG,GAAH,GAAG,CAAqC;IACxD,CAAC;IACJ,UAAU;QACR,OAAO,IAAI,CAAC,GAAG,CAAC;IAClB,CAAC;IACD,aAAa;QACX,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACzB,CAAC;CACF"}

package/dist/acl/change-role/0.1/payload.d.ts

@@ -124,4 +124,26 @@ export type Payload = ACLChangeRolePayload;
 export declare const RESPONSE_TYPE_URI: "https://trusttasks.org/spec/acl/change-role/0.1#response";
 /** Stable alias for this specification's success-response payload shape. */
 export type Response = ACLChangeRoleResponsePayload;
+/**
+ * SPEC.md §7.2 policy for the request variant, from this specification's
+ * front matter. Pass to `consumeInbound` — items 5b, 7 and 8 are
+ * per-specification and cannot be derived from the document alone.
+ */
+export declare const SPEC: {
+    readonly typeUri: "https://trusttasks.org/spec/acl/change-role/0.1";
+    readonly isBearer: false;
+    readonly isProofRequired: true;
+    readonly isRecipientRequired: true;
+};
+/**
+ * SPEC.md §7.2 policy for the success-response variant. `isRecipientRequired`
+ * tracks the *issuer* party's requirement because a response swaps the
+ * parties (§7.3 item 5).
+ */
+export declare const RESPONSE_SPEC: {
+    readonly typeUri: "https://trusttasks.org/spec/acl/change-role/0.1#response";
+    readonly isBearer: false;
+    readonly isProofRequired: true;
+    readonly isRecipientRequired: true;
+};
 //# sourceMappingURL=payload.d.ts.map

package/dist/acl/change-role/0.1/payload.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"payload.d.ts","sourceRoot":"","sources":["../../../../src/acl/change-role/0.1/payload.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,MAAM,WAAW,oBAAoB;IACnC;;OAEG;IACH,OAAO,EAAE,MAAM,CAAC;IAChB;;OAEG;IACH,QAAQ,EAAE,MAAM,CAAC;IACjB;;OAEG;IACH,MAAM,EAAE,MAAM,CAAC;IACf;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,GAAG,CAAC,EAAE,GAAG,CAAC;CACX;AACD;;GAEG;AACH,MAAM,WAAW,GAAG;IAClB,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC;CAClC;AACD;;GAEG;AACH,MAAM,WAAW,4BAA4B;IAC3C,KAAK,EAAE,QAAQ,CAAC;IAChB,GAAG,CAAC,EAAE,IAAI,CAAC;CACZ;AACD;;GAEG;AACH,MAAM,WAAW,QAAQ;IACvB;;OAEG;IACH,OAAO,EAAE,MAAM,CAAC;IAChB;;OAEG;IACH,IAAI,EAAE,MAAM,CAAC;IACb;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAC9B;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;OAEG;IACH,MAAM,CAAC,EAAE;QACP;;WAEG;QACH,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB;;WAEG;QACH,OAAO,CAAC,EAAE,MAAM,GAAG,WAAW,CAAC;KAChC,CAAC;IACF;;;;;;OAMG;IACH,OAAO,CAAC,EAAE;QACR;;WAEG;QACH,GAAG,CAAC,EAAE,OAAO,CAAC;QACd;;WAEG;QACH,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;KACnB,CAAC;IACF,GAAG,CAAC,EAAE,IAAI,CAAC;CACZ;AACD;;GAEG;AACH,MAAM,WAAW,IAAI;IACnB,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC;CAClC;AACD;;GAEG;AACH,MAAM,WAAW,IAAI;IACnB,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC;CAClC;AAED,2BAA2B;AAC3B,eAAO,MAAM,QAAQ,EAAG,iDAA0D,CAAC;AAEnF,mEAAmE;AACnE,MAAM,MAAM,OAAO,GAAG,oBAAoB,CAAC;AAE3C,qEAAqE;AACrE,eAAO,MAAM,iBAAiB,EAAG,0DAAmE,CAAC;AAErG,4EAA4E;AAC5E,MAAM,MAAM,QAAQ,GAAG,4BAA4B,CAAC"}
+{"version":3,"file":"payload.d.ts","sourceRoot":"","sources":["../../../../src/acl/change-role/0.1/payload.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,MAAM,WAAW,oBAAoB;IACnC;;OAEG;IACH,OAAO,EAAE,MAAM,CAAC;IAChB;;OAEG;IACH,QAAQ,EAAE,MAAM,CAAC;IACjB;;OAEG;IACH,MAAM,EAAE,MAAM,CAAC;IACf;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,GAAG,CAAC,EAAE,GAAG,CAAC;CACX;AACD;;GAEG;AACH,MAAM,WAAW,GAAG;IAClB,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC;CAClC;AACD;;GAEG;AACH,MAAM,WAAW,4BAA4B;IAC3C,KAAK,EAAE,QAAQ,CAAC;IAChB,GAAG,CAAC,EAAE,IAAI,CAAC;CACZ;AACD;;GAEG;AACH,MAAM,WAAW,QAAQ;IACvB;;OAEG;IACH,OAAO,EAAE,MAAM,CAAC;IAChB;;OAEG;IACH,IAAI,EAAE,MAAM,CAAC;IACb;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAC9B;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;OAEG;IACH,MAAM,CAAC,EAAE;QACP;;WAEG;QACH,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB;;WAEG;QACH,OAAO,CAAC,EAAE,MAAM,GAAG,WAAW,CAAC;KAChC,CAAC;IACF;;;;;;OAMG;IACH,OAAO,CAAC,EAAE;QACR;;WAEG;QACH,GAAG,CAAC,EAAE,OAAO,CAAC;QACd;;WAEG;QACH,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;KACnB,CAAC;IACF,GAAG,CAAC,EAAE,IAAI,CAAC;CACZ;AACD;;GAEG;AACH,MAAM,WAAW,IAAI;IACnB,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC;CAClC;AACD;;GAEG;AACH,MAAM,WAAW,IAAI;IACnB,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC;CAClC;AAED,2BAA2B;AAC3B,eAAO,MAAM,QAAQ,EAAG,iDAA0D,CAAC;AAEnF,mEAAmE;AACnE,MAAM,MAAM,OAAO,GAAG,oBAAoB,CAAC;AAE3C,qEAAqE;AACrE,eAAO,MAAM,iBAAiB,EAAG,0DAAmE,CAAC;AAErG,4EAA4E;AAC5E,MAAM,MAAM,QAAQ,GAAG,4BAA4B,CAAC;AAEpD;;;;GAIG;AACH,eAAO,MAAM,IAAI;;;;;CAKP,CAAC;AAEX;;;;GAIG;AACH,eAAO,MAAM,aAAa;;;;;CAKhB,CAAC"}

package/dist/acl/change-role/0.1/payload.js

@@ -6,4 +6,26 @@
 export const TYPE_URI = "https://trusttasks.org/spec/acl/change-role/0.1";
 /** Trust Task response type URI (request type URI + "#response"). */
 export const RESPONSE_TYPE_URI = "https://trusttasks.org/spec/acl/change-role/0.1#response";
+/**
+ * SPEC.md §7.2 policy for the request variant, from this specification's
+ * front matter. Pass to `consumeInbound` — items 5b, 7 and 8 are
+ * per-specification and cannot be derived from the document alone.
+ */
+export const SPEC = {
+    typeUri: TYPE_URI,
+    isBearer: false,
+    isProofRequired: true,
+    isRecipientRequired: true,
+};
+/**
+ * SPEC.md §7.2 policy for the success-response variant. `isRecipientRequired`
+ * tracks the *issuer* party's requirement because a response swaps the
+ * parties (§7.3 item 5).
+ */
+export const RESPONSE_SPEC = {
+    typeUri: RESPONSE_TYPE_URI,
+    isBearer: false,
+    isProofRequired: true,
+    isRecipientRequired: true,
+};
 //# sourceMappingURL=payload.js.map

package/dist/acl/change-role/0.1/payload.js.map

@@ -1 +1 @@
-{"version":3,"file":"payload.js","sourceRoot":"","sources":["../../../../src/acl/change-role/0.1/payload.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAqHH,2BAA2B;AAC3B,MAAM,CAAC,MAAM,QAAQ,GAAG,iDAA0D,CAAC;AAKnF,qEAAqE;AACrE,MAAM,CAAC,MAAM,iBAAiB,GAAG,0DAAmE,CAAC"}
+{"version":3,"file":"payload.js","sourceRoot":"","sources":["../../../../src/acl/change-role/0.1/payload.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAqHH,2BAA2B;AAC3B,MAAM,CAAC,MAAM,QAAQ,GAAG,iDAA0D,CAAC;AAKnF,qEAAqE;AACrE,MAAM,CAAC,MAAM,iBAAiB,GAAG,0DAAmE,CAAC;AAKrG;;;;GAIG;AACH,MAAM,CAAC,MAAM,IAAI,GAAG;IAClB,OAAO,EAAE,QAAQ;IACjB,QAAQ,EAAE,KAAK;IACf,eAAe,EAAE,IAAI;IACrB,mBAAmB,EAAE,IAAI;CACjB,CAAC;AAEX;;;;GAIG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,OAAO,EAAE,iBAAiB;IAC1B,QAAQ,EAAE,KAAK;IACf,eAAe,EAAE,IAAI;IACrB,mBAAmB,EAAE,IAAI;CACjB,CAAC"}