@openvtc/trust-tasks 0.20.2 → 0.20.3

package/dist/git-ns/namespace/bind/0.1/payload.js

@@ -0,0 +1,322 @@
+/**
+ * Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
+ * Source: specs/git-ns/namespace/bind/0.1/payload.schema.json
+ */
+/** Trust Task type URI. */
+export const TYPE_URI = "https://trusttasks.org/spec/git-ns/namespace/bind/0.1";
+/** Trust Task response type URI (request type URI + "#response"). */
+export const RESPONSE_TYPE_URI = "https://trusttasks.org/spec/git-ns/namespace/bind/0.1#response";
+/**
+ * This specification's payload schema, as a value.
+ *
+ * SPEC.md §7.2 item 2 is performed against this. It is shipped as data
+ * rather than only as a `.json` file because TypeScript types are erased
+ * at runtime: without a schema a consumer has nothing to validate, and
+ * every REQUIRED payload member is optional in practice. Cross-file
+ * `$ref`s are already inlined, so it needs no resolver.
+ */
+export const PAYLOAD_SCHEMA = {
+    "$schema": "https://json-schema.org/draft/2020-12/schema",
+    "$id": "https://trusttasks.org/spec/git-ns/namespace/bind/0.1",
+    "title": "Git Namespaces — Bind Namespace — payload",
+    "description": "A VTC administrator binds the VTC to one owner on one forge, so that the VTC governs who may create, own, maintain and commit to repositories under it. In bridge mode the response says where to send the forge owner to prove control; the namespace stays `pending` until that proof arrives.",
+    "type": "object",
+    "additionalProperties": false,
+    "required": [
+        "forge",
+        "owner",
+        "mode"
+    ],
+    "properties": {
+        "forge": {
+            "$ref": "#/$defs/ForgeHost",
+            "description": "The forge's host, lowercased."
+        },
+        "owner": {
+            "$ref": "#/$defs/Segment",
+            "description": "The organisation or user on that forge, lowercased."
+        },
+        "mode": {
+            "type": "string",
+            "enum": [
+                "bridge",
+                "manual"
+            ],
+            "description": "`bridge` — a bridge service serving this forge proves control and then acts on the forge. `manual` — no automation; the binding admin declares the namespace and people with forge access carry out the forge-side steps."
+        },
+        "ext": {
+            "$ref": "#/$defs/Ext"
+        }
+    },
+    "$defs": {
+        "Response": {
+            "$anchor": "response",
+            "title": "Git Namespaces — Bind Namespace — response payload",
+            "description": "The namespace as recorded, and where to go next if it is still pending.",
+            "type": "object",
+            "additionalProperties": false,
+            "required": [
+                "namespace"
+            ],
+            "properties": {
+                "namespace": {
+                    "$ref": "#/$defs/GitNamespace"
+                },
+                "next": {
+                    "type": "object",
+                    "additionalProperties": false,
+                    "required": [
+                        "url"
+                    ],
+                    "description": "Present when the namespace is `pending`: where the administrator goes to prove control of the forge owner (install the community's forge app, or sign in to the forge and authorise the bridge).",
+                    "properties": {
+                        "url": {
+                            "type": "string",
+                            "format": "uri",
+                            "maxLength": 2048,
+                            "pattern": "^https://",
+                            "description": "An https URL, single-use, carrying the bridge's binding nonce."
+                        }
+                    }
+                },
+                "ext": {
+                    "$ref": "#/$defs/Ext"
+                }
+            }
+        },
+        "Ext": {
+            "title": "Ext",
+            "description": "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.",
+            "type": "object",
+            "minProperties": 1,
+            "additionalProperties": true,
+            "propertyNames": {
+                "pattern": "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$"
+            }
+        },
+        "GitNamespace": {
+            "title": "GitNamespace",
+            "description": "The VTC's binding to one owner on one forge.",
+            "type": "object",
+            "additionalProperties": false,
+            "required": [
+                "id",
+                "forge",
+                "owner",
+                "mode",
+                "state"
+            ],
+            "properties": {
+                "id": {
+                    "$ref": "#/$defs/NamespaceId"
+                },
+                "forge": {
+                    "$ref": "#/$defs/ForgeHost"
+                },
+                "owner": {
+                    "$ref": "#/$defs/Segment",
+                    "description": "The organisation or user on the forge, lowercased."
+                },
+                "kind": {
+                    "type": "string",
+                    "enum": [
+                        "organization",
+                        "user"
+                    ],
+                    "description": "Whether the owner is an organisation or a personal account, as the forge reports it. Present once known: a bridge-mode namespace learns it when binding completes, and a manual-mode namespace MAY never learn it."
+                },
+                "mode": {
+                    "type": "string",
+                    "enum": [
+                        "bridge",
+                        "manual"
+                    ],
+                    "description": "`bridge` — a bridge service acts on the forge for this namespace (creates repositories, projects roles, reports drift). `manual` — no automation; people with forge access carry out the steps the VTC names, and the VTC governs the rights alone."
+                },
+                "state": {
+                    "type": "string",
+                    "enum": [
+                        "pending",
+                        "bound"
+                    ],
+                    "description": "`pending` — binding has started and the forge-side proof has not arrived yet. `bound` — the VTC governs rights under this namespace."
+                }
+            }
+        },
+        "Segment": {
+            "title": "Segment",
+            "description": "One lowercased owner or repository name. Forges compare these case-insensitively, so the wire form is always lowercase and a producer lowercases before sending. A leading `.` is refused, which rules out `.` and `..`.",
+            "type": "string",
+            "minLength": 1,
+            "maxLength": 100,
+            "pattern": "^[a-z0-9_-][a-z0-9._-]*$"
+        },
+        "ForgeHost": {
+            "title": "ForgeHost",
+            "description": "The lowercased DNS host of a forge: `github.com`, a GitHub Enterprise Server host, `codeberg.org`, or a self-hosted Forgejo instance such as `git.example.org`. No scheme, no port, no path. The host is a segment of every resource, so a right never crosses forges.",
+            "type": "string",
+            "minLength": 3,
+            "maxLength": 253,
+            "pattern": "^[a-z0-9](?:[a-z0-9-]*[a-z0-9])?(?:\\.[a-z0-9](?:[a-z0-9-]*[a-z0-9])?)+$"
+        },
+        "NamespaceId": {
+            "title": "NamespaceId",
+            "description": "The VTC's opaque identifier for a namespace, assigned when it is bound. Stable for the life of the binding; never reused for another binding.",
+            "type": "string",
+            "minLength": 1,
+            "maxLength": 128
+        }
+    }
+};
+/** As {@link PAYLOAD_SCHEMA}, for the success-response variant. */
+export const RESPONSE_PAYLOAD_SCHEMA = {
+    "$schema": "https://json-schema.org/draft/2020-12/schema",
+    "$ref": "#/$defs/Response",
+    "$defs": {
+        "Response": {
+            "$anchor": "response",
+            "title": "Git Namespaces — Bind Namespace — response payload",
+            "description": "The namespace as recorded, and where to go next if it is still pending.",
+            "type": "object",
+            "additionalProperties": false,
+            "required": [
+                "namespace"
+            ],
+            "properties": {
+                "namespace": {
+                    "$ref": "#/$defs/GitNamespace"
+                },
+                "next": {
+                    "type": "object",
+                    "additionalProperties": false,
+                    "required": [
+                        "url"
+                    ],
+                    "description": "Present when the namespace is `pending`: where the administrator goes to prove control of the forge owner (install the community's forge app, or sign in to the forge and authorise the bridge).",
+                    "properties": {
+                        "url": {
+                            "type": "string",
+                            "format": "uri",
+                            "maxLength": 2048,
+                            "pattern": "^https://",
+                            "description": "An https URL, single-use, carrying the bridge's binding nonce."
+                        }
+                    }
+                },
+                "ext": {
+                    "$ref": "#/$defs/Ext"
+                }
+            }
+        },
+        "Ext": {
+            "title": "Ext",
+            "description": "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.",
+            "type": "object",
+            "minProperties": 1,
+            "additionalProperties": true,
+            "propertyNames": {
+                "pattern": "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$"
+            }
+        },
+        "GitNamespace": {
+            "title": "GitNamespace",
+            "description": "The VTC's binding to one owner on one forge.",
+            "type": "object",
+            "additionalProperties": false,
+            "required": [
+                "id",
+                "forge",
+                "owner",
+                "mode",
+                "state"
+            ],
+            "properties": {
+                "id": {
+                    "$ref": "#/$defs/NamespaceId"
+                },
+                "forge": {
+                    "$ref": "#/$defs/ForgeHost"
+                },
+                "owner": {
+                    "$ref": "#/$defs/Segment",
+                    "description": "The organisation or user on the forge, lowercased."
+                },
+                "kind": {
+                    "type": "string",
+                    "enum": [
+                        "organization",
+                        "user"
+                    ],
+                    "description": "Whether the owner is an organisation or a personal account, as the forge reports it. Present once known: a bridge-mode namespace learns it when binding completes, and a manual-mode namespace MAY never learn it."
+                },
+                "mode": {
+                    "type": "string",
+                    "enum": [
+                        "bridge",
+                        "manual"
+                    ],
+                    "description": "`bridge` — a bridge service acts on the forge for this namespace (creates repositories, projects roles, reports drift). `manual` — no automation; people with forge access carry out the steps the VTC names, and the VTC governs the rights alone."
+                },
+                "state": {
+                    "type": "string",
+                    "enum": [
+                        "pending",
+                        "bound"
+                    ],
+                    "description": "`pending` — binding has started and the forge-side proof has not arrived yet. `bound` — the VTC governs rights under this namespace."
+                }
+            }
+        },
+        "Segment": {
+            "title": "Segment",
+            "description": "One lowercased owner or repository name. Forges compare these case-insensitively, so the wire form is always lowercase and a producer lowercases before sending. A leading `.` is refused, which rules out `.` and `..`.",
+            "type": "string",
+            "minLength": 1,
+            "maxLength": 100,
+            "pattern": "^[a-z0-9_-][a-z0-9._-]*$"
+        },
+        "ForgeHost": {
+            "title": "ForgeHost",
+            "description": "The lowercased DNS host of a forge: `github.com`, a GitHub Enterprise Server host, `codeberg.org`, or a self-hosted Forgejo instance such as `git.example.org`. No scheme, no port, no path. The host is a segment of every resource, so a right never crosses forges.",
+            "type": "string",
+            "minLength": 3,
+            "maxLength": 253,
+            "pattern": "^[a-z0-9](?:[a-z0-9-]*[a-z0-9])?(?:\\.[a-z0-9](?:[a-z0-9-]*[a-z0-9])?)+$"
+        },
+        "NamespaceId": {
+            "title": "NamespaceId",
+            "description": "The VTC's opaque identifier for a namespace, assigned when it is bound. Stable for the life of the binding; never reused for another binding.",
+            "type": "string",
+            "minLength": 1,
+            "maxLength": 128
+        }
+    }
+};
+/**
+ * SPEC.md §7.2 policy for the request variant, from this specification's
+ * front matter. Pass to `consumeInbound` — items 5b, 7 and 8 are
+ * per-specification and cannot be derived from the document alone, and
+ * item 2 needs the schema this carries.
+ */
+export const SPEC = {
+    typeUri: TYPE_URI,
+    isBearer: false,
+    isProofRequired: true,
+    isRecipientRequired: true,
+    isIssuedAtRequired: true,
+    payloadSchema: PAYLOAD_SCHEMA,
+};
+/**
+ * SPEC.md §7.2 policy for the success-response variant. `isRecipientRequired`
+ * tracks the *issuer* party's requirement because a response swaps the
+ * parties (§7.3 item 5).
+ */
+export const RESPONSE_SPEC = {
+    typeUri: RESPONSE_TYPE_URI,
+    isBearer: false,
+    isProofRequired: true,
+    isRecipientRequired: true,
+    isIssuedAtRequired: true,
+    payloadSchema: RESPONSE_PAYLOAD_SCHEMA,
+};
+//# sourceMappingURL=payload.js.map

package/dist/git-ns/namespace/bind/0.1/payload.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"payload.js","sourceRoot":"","sources":["../../../../../src/git-ns/namespace/bind/0.1/payload.ts"],"names":[],"mappings":"AAAA;;;GAGG;AA2CH,2BAA2B;AAC3B,MAAM,CAAC,MAAM,QAAQ,GAAG,uDAAgE,CAAC;AAKzF,qEAAqE;AACrE,MAAM,CAAC,MAAM,iBAAiB,GAAG,gEAAyE,CAAC;AAK3G;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,SAAS,EAAE,8CAA8C;IACzD,KAAK,EAAE,uDAAuD;IAC9D,OAAO,EAAE,2CAA2C;IACpD,aAAa,EAAE,kSAAkS;IACjT,MAAM,EAAE,QAAQ;IAChB,sBAAsB,EAAE,KAAK;IAC7B,UAAU,EAAE;QACV,OAAO;QACP,OAAO;QACP,MAAM;KACP;IACD,YAAY,EAAE;QACZ,OAAO,EAAE;YACP,MAAM,EAAE,mBAAmB;YAC3B,aAAa,EAAE,+BAA+B;SAC/C;QACD,OAAO,EAAE;YACP,MAAM,EAAE,iBAAiB;YACzB,aAAa,EAAE,qDAAqD;SACrE;QACD,MAAM,EAAE;YACN,MAAM,EAAE,QAAQ;YAChB,MAAM,EAAE;gBACN,QAAQ;gBACR,QAAQ;aACT;YACD,aAAa,EAAE,2NAA2N;SAC3O;QACD,KAAK,EAAE;YACL,MAAM,EAAE,aAAa;SACtB;KACF;IACD,OAAO,EAAE;QACP,UAAU,EAAE;YACV,SAAS,EAAE,UAAU;YACrB,OAAO,EAAE,oDAAoD;YAC7D,aAAa,EAAE,yEAAyE;YACxF,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,WAAW;aACZ;YACD,YAAY,EAAE;gBACZ,WAAW,EAAE;oBACX,MAAM,EAAE,sBAAsB;iBAC/B;gBACD,MAAM,EAAE;oBACN,MAAM,EAAE,QAAQ;oBAChB,sBAAsB,EAAE,KAAK;oBAC7B,UAAU,EAAE;wBACV,KAAK;qBACN;oBACD,aAAa,EAAE,kMAAkM;oBACjN,YAAY,EAAE;wBACZ,KAAK,EAAE;4BACL,MAAM,EAAE,QAAQ;4BAChB,QAAQ,EAAE,KAAK;4BACf,WAAW,EAAE,IAAI;4BACjB,SAAS,EAAE,WAAW;4BACtB,aAAa,EAAE,gEAAgE;yBAChF;qBACF;iBACF;gBACD,KAAK,EAAE;oBACL,MAAM,EAAE,aAAa;iBACtB;aACF;SACF;QACD,KAAK,EAAE;YACL,OAAO,EAAE,KAAK;YACd,aAAa,EAAE,uKAAuK;YACtL,MAAM,EAAE,QAAQ;YAChB,eAAe,EAAE,CAAC;YAClB,sBAAsB,EAAE,IAAI;YAC5B,eAAe,EAAE;gBACf,SAAS,EAAE,mCAAmC;aAC/C;SACF;QACD,cAAc,EAAE;YACd,OAAO,EAAE,cAAc;YACvB,aAAa,EAAE,8CAA8C;YAC7D,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,IAAI;gBACJ,OAAO;gBACP,OAAO;gBACP,MAAM;gBACN,OAAO;aACR;YACD,YAAY,EAAE;gBACZ,IAAI,EAAE;oBACJ,MAAM,EAAE,qBAAqB;iBAC9B;gBACD,OAAO,EAAE;oBACP,MAAM,EAAE,mBAAmB;iBAC5B;gBACD,OAAO,EAAE;oBACP,MAAM,EAAE,iBAAiB;oBACzB,aAAa,EAAE,oDAAoD;iBACpE;gBACD,MAAM,EAAE;oBACN,MAAM,EAAE,QAAQ;oBAChB,MAAM,EAAE;wBACN,cAAc;wBACd,MAAM;qBACP;oBACD,aAAa,EAAE,oNAAoN;iBACpO;gBACD,MAAM,EAAE;oBACN,MAAM,EAAE,QAAQ;oBAChB,MAAM,EAAE;wBACN,QAAQ;wBACR,QAAQ;qBACT;oBACD,aAAa,EAAE,qPAAqP;iBACrQ;gBACD,OAAO,EAAE;oBACP,MAAM,EAAE,QAAQ;oBAChB,MAAM,EAAE;wBACN,SAAS;wBACT,OAAO;qBACR;oBACD,aAAa,EAAE,sIAAsI;iBACtJ;aACF;SACF;QACD,SAAS,EAAE;YACT,OAAO,EAAE,SAAS;YAClB,aAAa,EAAE,0NAA0N;YACzO,MAAM,EAAE,QAAQ;YAChB,WAAW,EAAE,CAAC;YACd,WAAW,EAAE,GAAG;YAChB,SAAS,EAAE,0BAA0B;SACtC;QACD,WAAW,EAAE;YACX,OAAO,EAAE,WAAW;YACpB,aAAa,EAAE,wQAAwQ;YACvR,MAAM,EAAE,QAAQ;YAChB,WAAW,EAAE,CAAC;YACd,WAAW,EAAE,GAAG;YAChB,SAAS,EAAE,0EAA0E;SACtF;QACD,aAAa,EAAE;YACb,OAAO,EAAE,aAAa;YACtB,aAAa,EAAE,+IAA+I;YAC9J,MAAM,EAAE,QAAQ;YAChB,WAAW,EAAE,CAAC;YACd,WAAW,EAAE,GAAG;SACjB;KACF;CACO,CAAC;AAEX,mEAAmE;AACnE,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,SAAS,EAAE,8CAA8C;IACzD,MAAM,EAAE,kBAAkB;IAC1B,OAAO,EAAE;QACP,UAAU,EAAE;YACV,SAAS,EAAE,UAAU;YACrB,OAAO,EAAE,oDAAoD;YAC7D,aAAa,EAAE,yEAAyE;YACxF,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,WAAW;aACZ;YACD,YAAY,EAAE;gBACZ,WAAW,EAAE;oBACX,MAAM,EAAE,sBAAsB;iBAC/B;gBACD,MAAM,EAAE;oBACN,MAAM,EAAE,QAAQ;oBAChB,sBAAsB,EAAE,KAAK;oBAC7B,UAAU,EAAE;wBACV,KAAK;qBACN;oBACD,aAAa,EAAE,kMAAkM;oBACjN,YAAY,EAAE;wBACZ,KAAK,EAAE;4BACL,MAAM,EAAE,QAAQ;4BAChB,QAAQ,EAAE,KAAK;4BACf,WAAW,EAAE,IAAI;4BACjB,SAAS,EAAE,WAAW;4BACtB,aAAa,EAAE,gEAAgE;yBAChF;qBACF;iBACF;gBACD,KAAK,EAAE;oBACL,MAAM,EAAE,aAAa;iBACtB;aACF;SACF;QACD,KAAK,EAAE;YACL,OAAO,EAAE,KAAK;YACd,aAAa,EAAE,uKAAuK;YACtL,MAAM,EAAE,QAAQ;YAChB,eAAe,EAAE,CAAC;YAClB,sBAAsB,EAAE,IAAI;YAC5B,eAAe,EAAE;gBACf,SAAS,EAAE,mCAAmC;aAC/C;SACF;QACD,cAAc,EAAE;YACd,OAAO,EAAE,cAAc;YACvB,aAAa,EAAE,8CAA8C;YAC7D,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,IAAI;gBACJ,OAAO;gBACP,OAAO;gBACP,MAAM;gBACN,OAAO;aACR;YACD,YAAY,EAAE;gBACZ,IAAI,EAAE;oBACJ,MAAM,EAAE,qBAAqB;iBAC9B;gBACD,OAAO,EAAE;oBACP,MAAM,EAAE,mBAAmB;iBAC5B;gBACD,OAAO,EAAE;oBACP,MAAM,EAAE,iBAAiB;oBACzB,aAAa,EAAE,oDAAoD;iBACpE;gBACD,MAAM,EAAE;oBACN,MAAM,EAAE,QAAQ;oBAChB,MAAM,EAAE;wBACN,cAAc;wBACd,MAAM;qBACP;oBACD,aAAa,EAAE,oNAAoN;iBACpO;gBACD,MAAM,EAAE;oBACN,MAAM,EAAE,QAAQ;oBAChB,MAAM,EAAE;wBACN,QAAQ;wBACR,QAAQ;qBACT;oBACD,aAAa,EAAE,qPAAqP;iBACrQ;gBACD,OAAO,EAAE;oBACP,MAAM,EAAE,QAAQ;oBAChB,MAAM,EAAE;wBACN,SAAS;wBACT,OAAO;qBACR;oBACD,aAAa,EAAE,sIAAsI;iBACtJ;aACF;SACF;QACD,SAAS,EAAE;YACT,OAAO,EAAE,SAAS;YAClB,aAAa,EAAE,0NAA0N;YACzO,MAAM,EAAE,QAAQ;YAChB,WAAW,EAAE,CAAC;YACd,WAAW,EAAE,GAAG;YAChB,SAAS,EAAE,0BAA0B;SACtC;QACD,WAAW,EAAE;YACX,OAAO,EAAE,WAAW;YACpB,aAAa,EAAE,wQAAwQ;YACvR,MAAM,EAAE,QAAQ;YAChB,WAAW,EAAE,CAAC;YACd,WAAW,EAAE,GAAG;YAChB,SAAS,EAAE,0EAA0E;SACtF;QACD,aAAa,EAAE;YACb,OAAO,EAAE,aAAa;YACtB,aAAa,EAAE,+IAA+I;YAC9J,MAAM,EAAE,QAAQ;YAChB,WAAW,EAAE,CAAC;YACd,WAAW,EAAE,GAAG;SACjB;KACF;CACO,CAAC;AAEX;;;;;GAKG;AACH,MAAM,CAAC,MAAM,IAAI,GAAG;IAClB,OAAO,EAAE,QAAQ;IACjB,QAAQ,EAAE,KAAK;IACf,eAAe,EAAE,IAAI;IACrB,mBAAmB,EAAE,IAAI;IACzB,kBAAkB,EAAE,IAAI;IACxB,aAAa,EAAE,cAAc;CACrB,CAAC;AAEX;;;;GAIG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,OAAO,EAAE,iBAAiB;IAC1B,QAAQ,EAAE,KAAK;IACf,eAAe,EAAE,IAAI;IACrB,mBAAmB,EAAE,IAAI;IACzB,kBAAkB,EAAE,IAAI;IACxB,aAAa,EAAE,uBAAuB;CAC9B,CAAC"}

package/dist/git-ns/namespace/unbind/0.1/payload.d.ts

@@ -0,0 +1,300 @@
+/**
+ * Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
+ * Source: specs/git-ns/namespace/unbind/0.1/payload.schema.json
+ */
+import type { Ext, NamespaceId } from "../../../../_shared/components.js";
+/**
+ * A namespace admin ends the VTC's governance of a namespace. Every right recorded on a resource inside it is revoked and withdrawn from the Trust Registry, and every repository in it becomes `detached`.
+ */
+export interface GitNamespacesUnbindNamespacePayload {
+    /**
+     * The namespace to unbind.
+     */
+    namespace: NamespaceId;
+    ext?: Ext;
+}
+/**
+ * What unbinding removed.
+ */
+export interface GitNamespacesUnbindNamespaceResponsePayload {
+    namespace: NamespaceId;
+    /**
+     * How many recorded rights were revoked.
+     */
+    rightsRevoked: number;
+    /**
+     * How many repositories became `detached`.
+     */
+    reposDetached: number;
+    ext?: Ext;
+}
+/** Shared definitions this specification references, re-exported under the names it used to declare them with. */
+export type { Ext, NamespaceId };
+/** Trust Task type URI. */
+export declare const TYPE_URI: "https://trusttasks.org/spec/git-ns/namespace/unbind/0.1";
+/** Stable alias for this specification's request payload shape. */
+export type Payload = GitNamespacesUnbindNamespacePayload;
+/** Trust Task response type URI (request type URI + "#response"). */
+export declare const RESPONSE_TYPE_URI: "https://trusttasks.org/spec/git-ns/namespace/unbind/0.1#response";
+/** Stable alias for this specification's success-response payload shape. */
+export type Response = GitNamespacesUnbindNamespaceResponsePayload;
+/**
+ * This specification's payload schema, as a value.
+ *
+ * SPEC.md §7.2 item 2 is performed against this. It is shipped as data
+ * rather than only as a `.json` file because TypeScript types are erased
+ * at runtime: without a schema a consumer has nothing to validate, and
+ * every REQUIRED payload member is optional in practice. Cross-file
+ * `$ref`s are already inlined, so it needs no resolver.
+ */
+export declare const PAYLOAD_SCHEMA: {
+    readonly $schema: "https://json-schema.org/draft/2020-12/schema";
+    readonly $id: "https://trusttasks.org/spec/git-ns/namespace/unbind/0.1";
+    readonly title: "Git Namespaces — Unbind Namespace — payload";
+    readonly description: "A namespace admin ends the VTC's governance of a namespace. Every right recorded on a resource inside it is revoked and withdrawn from the Trust Registry, and every repository in it becomes `detached`.";
+    readonly type: "object";
+    readonly additionalProperties: false;
+    readonly required: readonly ["namespace"];
+    readonly properties: {
+        readonly namespace: {
+            readonly $ref: "#/$defs/NamespaceId";
+            readonly description: "The namespace to unbind.";
+        };
+        readonly ext: {
+            readonly $ref: "#/$defs/Ext";
+        };
+    };
+    readonly $defs: {
+        readonly Response: {
+            readonly $anchor: "response";
+            readonly title: "Git Namespaces — Unbind Namespace — response payload";
+            readonly description: "What unbinding removed.";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["namespace", "rightsRevoked", "reposDetached"];
+            readonly properties: {
+                readonly namespace: {
+                    readonly $ref: "#/$defs/NamespaceId";
+                };
+                readonly rightsRevoked: {
+                    readonly type: "integer";
+                    readonly minimum: 0;
+                    readonly description: "How many recorded rights were revoked.";
+                };
+                readonly reposDetached: {
+                    readonly type: "integer";
+                    readonly minimum: 0;
+                    readonly description: "How many repositories became `detached`.";
+                };
+                readonly ext: {
+                    readonly $ref: "#/$defs/Ext";
+                };
+            };
+        };
+        readonly Ext: {
+            readonly title: "Ext";
+            readonly description: "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.";
+            readonly type: "object";
+            readonly minProperties: 1;
+            readonly additionalProperties: true;
+            readonly propertyNames: {
+                readonly pattern: "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$";
+            };
+        };
+        readonly NamespaceId: {
+            readonly title: "NamespaceId";
+            readonly description: "The VTC's opaque identifier for a namespace, assigned when it is bound. Stable for the life of the binding; never reused for another binding.";
+            readonly type: "string";
+            readonly minLength: 1;
+            readonly maxLength: 128;
+        };
+    };
+};
+/** As {@link PAYLOAD_SCHEMA}, for the success-response variant. */
+export declare const RESPONSE_PAYLOAD_SCHEMA: {
+    readonly $schema: "https://json-schema.org/draft/2020-12/schema";
+    readonly $ref: "#/$defs/Response";
+    readonly $defs: {
+        readonly Response: {
+            readonly $anchor: "response";
+            readonly title: "Git Namespaces — Unbind Namespace — response payload";
+            readonly description: "What unbinding removed.";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["namespace", "rightsRevoked", "reposDetached"];
+            readonly properties: {
+                readonly namespace: {
+                    readonly $ref: "#/$defs/NamespaceId";
+                };
+                readonly rightsRevoked: {
+                    readonly type: "integer";
+                    readonly minimum: 0;
+                    readonly description: "How many recorded rights were revoked.";
+                };
+                readonly reposDetached: {
+                    readonly type: "integer";
+                    readonly minimum: 0;
+                    readonly description: "How many repositories became `detached`.";
+                };
+                readonly ext: {
+                    readonly $ref: "#/$defs/Ext";
+                };
+            };
+        };
+        readonly Ext: {
+            readonly title: "Ext";
+            readonly description: "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.";
+            readonly type: "object";
+            readonly minProperties: 1;
+            readonly additionalProperties: true;
+            readonly propertyNames: {
+                readonly pattern: "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$";
+            };
+        };
+        readonly NamespaceId: {
+            readonly title: "NamespaceId";
+            readonly description: "The VTC's opaque identifier for a namespace, assigned when it is bound. Stable for the life of the binding; never reused for another binding.";
+            readonly type: "string";
+            readonly minLength: 1;
+            readonly maxLength: 128;
+        };
+    };
+};
+/**
+ * SPEC.md §7.2 policy for the request variant, from this specification's
+ * front matter. Pass to `consumeInbound` — items 5b, 7 and 8 are
+ * per-specification and cannot be derived from the document alone, and
+ * item 2 needs the schema this carries.
+ */
+export declare const SPEC: {
+    readonly typeUri: "https://trusttasks.org/spec/git-ns/namespace/unbind/0.1";
+    readonly isBearer: false;
+    readonly isProofRequired: true;
+    readonly isRecipientRequired: true;
+    readonly isIssuedAtRequired: true;
+    readonly payloadSchema: {
+        readonly $schema: "https://json-schema.org/draft/2020-12/schema";
+        readonly $id: "https://trusttasks.org/spec/git-ns/namespace/unbind/0.1";
+        readonly title: "Git Namespaces — Unbind Namespace — payload";
+        readonly description: "A namespace admin ends the VTC's governance of a namespace. Every right recorded on a resource inside it is revoked and withdrawn from the Trust Registry, and every repository in it becomes `detached`.";
+        readonly type: "object";
+        readonly additionalProperties: false;
+        readonly required: readonly ["namespace"];
+        readonly properties: {
+            readonly namespace: {
+                readonly $ref: "#/$defs/NamespaceId";
+                readonly description: "The namespace to unbind.";
+            };
+            readonly ext: {
+                readonly $ref: "#/$defs/Ext";
+            };
+        };
+        readonly $defs: {
+            readonly Response: {
+                readonly $anchor: "response";
+                readonly title: "Git Namespaces — Unbind Namespace — response payload";
+                readonly description: "What unbinding removed.";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["namespace", "rightsRevoked", "reposDetached"];
+                readonly properties: {
+                    readonly namespace: {
+                        readonly $ref: "#/$defs/NamespaceId";
+                    };
+                    readonly rightsRevoked: {
+                        readonly type: "integer";
+                        readonly minimum: 0;
+                        readonly description: "How many recorded rights were revoked.";
+                    };
+                    readonly reposDetached: {
+                        readonly type: "integer";
+                        readonly minimum: 0;
+                        readonly description: "How many repositories became `detached`.";
+                    };
+                    readonly ext: {
+                        readonly $ref: "#/$defs/Ext";
+                    };
+                };
+            };
+            readonly Ext: {
+                readonly title: "Ext";
+                readonly description: "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.";
+                readonly type: "object";
+                readonly minProperties: 1;
+                readonly additionalProperties: true;
+                readonly propertyNames: {
+                    readonly pattern: "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$";
+                };
+            };
+            readonly NamespaceId: {
+                readonly title: "NamespaceId";
+                readonly description: "The VTC's opaque identifier for a namespace, assigned when it is bound. Stable for the life of the binding; never reused for another binding.";
+                readonly type: "string";
+                readonly minLength: 1;
+                readonly maxLength: 128;
+            };
+        };
+    };
+};
+/**
+ * SPEC.md §7.2 policy for the success-response variant. `isRecipientRequired`
+ * tracks the *issuer* party's requirement because a response swaps the
+ * parties (§7.3 item 5).
+ */
+export declare const RESPONSE_SPEC: {
+    readonly typeUri: "https://trusttasks.org/spec/git-ns/namespace/unbind/0.1#response";
+    readonly isBearer: false;
+    readonly isProofRequired: true;
+    readonly isRecipientRequired: true;
+    readonly isIssuedAtRequired: true;
+    readonly payloadSchema: {
+        readonly $schema: "https://json-schema.org/draft/2020-12/schema";
+        readonly $ref: "#/$defs/Response";
+        readonly $defs: {
+            readonly Response: {
+                readonly $anchor: "response";
+                readonly title: "Git Namespaces — Unbind Namespace — response payload";
+                readonly description: "What unbinding removed.";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["namespace", "rightsRevoked", "reposDetached"];
+                readonly properties: {
+                    readonly namespace: {
+                        readonly $ref: "#/$defs/NamespaceId";
+                    };
+                    readonly rightsRevoked: {
+                        readonly type: "integer";
+                        readonly minimum: 0;
+                        readonly description: "How many recorded rights were revoked.";
+                    };
+                    readonly reposDetached: {
+                        readonly type: "integer";
+                        readonly minimum: 0;
+                        readonly description: "How many repositories became `detached`.";
+                    };
+                    readonly ext: {
+                        readonly $ref: "#/$defs/Ext";
+                    };
+                };
+            };
+            readonly Ext: {
+                readonly title: "Ext";
+                readonly description: "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.";
+                readonly type: "object";
+                readonly minProperties: 1;
+                readonly additionalProperties: true;
+                readonly propertyNames: {
+                    readonly pattern: "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$";
+                };
+            };
+            readonly NamespaceId: {
+                readonly title: "NamespaceId";
+                readonly description: "The VTC's opaque identifier for a namespace, assigned when it is bound. Stable for the life of the binding; never reused for another binding.";
+                readonly type: "string";
+                readonly minLength: 1;
+                readonly maxLength: 128;
+            };
+        };
+    };
+};
+//# sourceMappingURL=payload.d.ts.map

package/dist/git-ns/namespace/unbind/0.1/payload.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"payload.d.ts","sourceRoot":"","sources":["../../../../../src/git-ns/namespace/unbind/0.1/payload.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,GAAG,EAAE,WAAW,EAAE,MAAM,mCAAmC,CAAC;AAG1E;;GAEG;AACH,MAAM,WAAW,mCAAmC;IAClD;;OAEG;IACH,SAAS,EAAE,WAAW,CAAC;IACvB,GAAG,CAAC,EAAE,GAAG,CAAC;CACX;AACD;;GAEG;AACH,MAAM,WAAW,2CAA2C;IAC1D,SAAS,EAAE,WAAW,CAAC;IACvB;;OAEG;IACH,aAAa,EAAE,MAAM,CAAC;IACtB;;OAEG;IACH,aAAa,EAAE,MAAM,CAAC;IACtB,GAAG,CAAC,EAAE,GAAG,CAAC;CACX;AAED,kHAAkH;AAClH,YAAY,EAAE,GAAG,EAAE,WAAW,EAAE,CAAC;AAEjC,2BAA2B;AAC3B,eAAO,MAAM,QAAQ,EAAG,yDAAkE,CAAC;AAE3F,mEAAmE;AACnE,MAAM,MAAM,OAAO,GAAG,mCAAmC,CAAC;AAE1D,qEAAqE;AACrE,eAAO,MAAM,iBAAiB,EAAG,kEAA2E,CAAC;AAE7G,4EAA4E;AAC5E,MAAM,MAAM,QAAQ,GAAG,2CAA2C,CAAC;AAEnE;;;;;;;;GAQG;AACH,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAoEjB,CAAC;AAEX,mEAAmE;AACnE,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAoD1B,CAAC;AAEX;;;;;GAKG;AACH,eAAO,MAAM,IAAI;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAOP,CAAC;AAEX;;;;GAIG;AACH,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAOhB,CAAC"}