@openvtc/trust-tasks 0.20.7 → 0.20.8

package/dist/backup/initiate-export/0.1/payload.d.ts

@@ -0,0 +1,896 @@
+/**
+ * Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
+ * Source: specs/backup/initiate-export/0.1/payload.schema.json
+ */
+import type { BundleDescriptor, BundleId, ChunkCount, ChunkedDescriptor, ChunkManifest, ChunkSize, DigestMultibase, ExpectedSha256, ExpectedSizeBytes, ExpiresAt, Ext, StreamDescriptor } from "../../../_shared/components.js";
+/**
+ * Asks the recipient to serialize its entire state into a password-encrypted bundle and return the descriptor that fetches it — by an HTTPS address (`stream`) or chunk by chunk over Trust Task documents (`chunkedTrustTask`). The outer document members (id, type, issuer, recipient, issuedAt, expiresAt, proof) are owned by the framework — SPEC §6.3.
+ */
+export interface BackupInitiateExportPayload {
+    /**
+     * Key-derivation input protecting the bundle. Chosen by the producer and never recoverable from the recipient. `writeOnly` is the machine-readable form of the rule in Data carried: this member goes in and never comes back, so a generated client must not surface it in a response type, and a recipient must never log, echo or persist it. The minLength floor is a shape check only — a recipient may require more, and refuses with weakPassword.
+     */
+    password: string;
+    /**
+     * Serialize the audit trail alongside the operational state. Absent means false — stated in prose rather than as a schema `default`, because a materialised default turns an omitted member into an asserted one in generated bindings, which is a different document.
+     */
+    includeAudit?: boolean;
+    /**
+     * Requested transport mechanism — how the bytes move, not how they are encrypted. This version defines `stream` (one HTTPS transfer; what an absent member means) and `chunkedTrustTask` (a sequence of get-chunk tasks over the transport already carrying this one). Deliberately not an enum: a recipient offering more must be askable for it without a specification revision, and one that does not implement the request refuses with unsupportedAlgorithm.
+     */
+    algorithm?: string;
+    /**
+     * For `chunkedTrustTask` only: the largest chunk the producer can receive, for a producer whose transport is tighter than the one the normative ceiling assumes. The recipient chooses a chunkSize no larger than this. Absent means the normative ceiling. Meaningless for any other algorithm, and a recipient ignores it there.
+     */
+    maxChunkSize?: ChunkSize;
+    /**
+     * Ecosystem-defined extension members per SPEC.md §4.5.1.
+     */
+    ext?: Ext;
+}
+export interface BackupInitiateExportResponsePayload {
+    /**
+     * Where the bytes are, or how they are divided, what they should be, and until when.
+     */
+    descriptor: BundleDescriptor;
+    /**
+     * Operator-facing text describing how to complete the download. Advisory: a producer must not parse it or derive behaviour from it, and a recipient must not put a secret in it.
+     */
+    completionHint?: string;
+    /**
+     * Ecosystem-defined extension members per SPEC.md §4.5.1.
+     */
+    ext?: Ext;
+}
+/** Shared definitions this specification references, re-exported under the names it used to declare them with. */
+export type { BundleDescriptor, BundleId, ChunkCount, ChunkedDescriptor, ChunkManifest, ChunkSize, DigestMultibase, ExpectedSha256, ExpectedSizeBytes, ExpiresAt, Ext, StreamDescriptor };
+/** Trust Task type URI. */
+export declare const TYPE_URI: "https://trusttasks.org/spec/backup/initiate-export/0.1";
+/** Stable alias for this specification's request payload shape. */
+export type Payload = BackupInitiateExportPayload;
+/** Trust Task response type URI (request type URI + "#response"). */
+export declare const RESPONSE_TYPE_URI: "https://trusttasks.org/spec/backup/initiate-export/0.1#response";
+/** Stable alias for this specification's success-response payload shape. */
+export type Response = BackupInitiateExportResponsePayload;
+/**
+ * This specification's payload schema, as a value.
+ *
+ * SPEC.md §7.2 item 2 is performed against this. It is shipped as data
+ * rather than only as a `.json` file because TypeScript types are erased
+ * at runtime: without a schema a consumer has nothing to validate, and
+ * every REQUIRED payload member is optional in practice. Cross-file
+ * `$ref`s are already inlined, so it needs no resolver.
+ */
+export declare const PAYLOAD_SCHEMA: {
+    readonly $schema: "https://json-schema.org/draft/2020-12/schema";
+    readonly $id: "https://trusttasks.org/spec/backup/initiate-export/0.1";
+    readonly title: "Backup — Initiate Export — payload";
+    readonly description: "Asks the recipient to serialize its entire state into a password-encrypted bundle and return the descriptor that fetches it — by an HTTPS address (`stream`) or chunk by chunk over Trust Task documents (`chunkedTrustTask`). The outer document members (id, type, issuer, recipient, issuedAt, expiresAt, proof) are owned by the framework — SPEC §6.3.";
+    readonly type: "object";
+    readonly additionalProperties: false;
+    readonly required: readonly ["password"];
+    readonly properties: {
+        readonly password: {
+            readonly type: "string";
+            readonly minLength: 15;
+            readonly maxLength: 1024;
+            readonly writeOnly: true;
+            readonly description: "Key-derivation input protecting the bundle. Chosen by the producer and never recoverable from the recipient. `writeOnly` is the machine-readable form of the rule in Data carried: this member goes in and never comes back, so a generated client must not surface it in a response type, and a recipient must never log, echo or persist it. The minLength floor is a shape check only — a recipient may require more, and refuses with weakPassword.";
+            readonly $comment: "No `format: password` — the annotation is advisory in 2020-12 and says less than writeOnly does. No example value anywhere in this directory: a specimen password is the one thing implementers copy.";
+        };
+        readonly includeAudit: {
+            readonly type: "boolean";
+            readonly description: "Serialize the audit trail alongside the operational state. Absent means false — stated in prose rather than as a schema `default`, because a materialised default turns an omitted member into an asserted one in generated bindings, which is a different document.";
+        };
+        readonly algorithm: {
+            readonly type: "string";
+            readonly minLength: 1;
+            readonly maxLength: 64;
+            readonly description: "Requested transport mechanism — how the bytes move, not how they are encrypted. This version defines `stream` (one HTTPS transfer; what an absent member means) and `chunkedTrustTask` (a sequence of get-chunk tasks over the transport already carrying this one). Deliberately not an enum: a recipient offering more must be askable for it without a specification revision, and one that does not implement the request refuses with unsupportedAlgorithm.";
+        };
+        readonly maxChunkSize: {
+            readonly $ref: "#/$defs/ChunkSize";
+            readonly description: "For `chunkedTrustTask` only: the largest chunk the producer can receive, for a producer whose transport is tighter than the one the normative ceiling assumes. The recipient chooses a chunkSize no larger than this. Absent means the normative ceiling. Meaningless for any other algorithm, and a recipient ignores it there.";
+        };
+        readonly ext: {
+            readonly $ref: "#/$defs/Ext";
+            readonly description: "Ecosystem-defined extension members per SPEC.md §4.5.1.";
+        };
+    };
+    readonly $defs: {
+        readonly Response: {
+            readonly $anchor: "response";
+            readonly title: "Backup — Initiate Export — response payload";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["descriptor"];
+            readonly properties: {
+                readonly descriptor: {
+                    readonly $ref: "#/$defs/BundleDescriptor";
+                    readonly description: "Where the bytes are, or how they are divided, what they should be, and until when.";
+                };
+                readonly completionHint: {
+                    readonly type: "string";
+                    readonly maxLength: 1024;
+                    readonly description: "Operator-facing text describing how to complete the download. Advisory: a producer must not parse it or derive behaviour from it, and a recipient must not put a secret in it.";
+                };
+                readonly ext: {
+                    readonly $ref: "#/$defs/Ext";
+                    readonly description: "Ecosystem-defined extension members per SPEC.md §4.5.1.";
+                };
+            };
+        };
+        readonly Ext: {
+            readonly title: "Ext";
+            readonly description: "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.";
+            readonly type: "object";
+            readonly minProperties: 1;
+            readonly additionalProperties: true;
+            readonly propertyNames: {
+                readonly pattern: "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$";
+            };
+        };
+        readonly BundleDescriptor: {
+            readonly title: "BundleDescriptor";
+            readonly description: "The control-plane account of a bundle transfer: which algorithm, on what terms, until when. Exactly one of the two shapes — they are mutually exclusive, since StreamDescriptor requires `transportUrl` and `transportToken` and forbids `chunks`, and ChunkedDescriptor requires `chunks` and forbids both.";
+            readonly oneOf: readonly [{
+                readonly $ref: "#/$defs/StreamDescriptor";
+            }, {
+                readonly $ref: "#/$defs/ChunkedDescriptor";
+            }];
+        };
+        readonly ChunkedDescriptor: {
+            readonly title: "ChunkedDescriptor";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly description: "A descriptor for the `chunkedTrustTask` algorithm. Carries no address and no bearer token: every chunk moves in a Trust Task document whose sender the transport authenticates, so possession of a token would add nothing and would be one more secret to leak.";
+            readonly required: readonly ["bundleId", "algorithm", "chunks", "expectedSha256", "expectedSizeBytes", "expiresAt"];
+            readonly properties: {
+                readonly bundleId: {
+                    readonly $ref: "#/$defs/BundleId";
+                };
+                readonly algorithm: {
+                    readonly type: "string";
+                    readonly enum: readonly ["chunkedTrustTask"];
+                    readonly description: "Discriminates this shape from StreamDescriptor.";
+                };
+                readonly chunks: {
+                    readonly $ref: "#/$defs/ChunkManifest";
+                };
+                readonly expectedSha256: {
+                    readonly $ref: "#/$defs/ExpectedSha256";
+                };
+                readonly expectedSizeBytes: {
+                    readonly $ref: "#/$defs/ExpectedSizeBytes";
+                };
+                readonly expiresAt: {
+                    readonly $ref: "#/$defs/ExpiresAt";
+                };
+            };
+        };
+        readonly ExpiresAt: {
+            readonly title: "ExpiresAt";
+            readonly description: "After which the bundle is collected: staged bytes discarded, tokens and chunk requests refused. Short by design. For a chunked transfer a recipient may move it later as chunks are exchanged, never past its own ceiling — each chunk response reports the current value.";
+            readonly type: "string";
+            readonly format: "date-time";
+        };
+        readonly ExpectedSizeBytes: {
+            readonly title: "ExpectedSizeBytes";
+            readonly description: "Total byte count of the bundle. A zero-length bundle is not a degenerate success — nothing was serialized — so the floor is 1.";
+            readonly type: "integer";
+            readonly minimum: 1;
+        };
+        readonly ExpectedSha256: {
+            readonly title: "ExpectedSha256";
+            readonly description: "Lowercase hex SHA-256 of the whole bundle's bytes. Kept in the hex form the 1.0 descriptor published rather than moved to DigestMultibase, because it is an unchanged member of an existing descriptor and re-encoding it would break every stream producer for no gain in what it checks. For a chunked transfer it is the check over the reassembled bundle, applied after every chunk has verified individually, so that a correct set of chunks assembled in the wrong order is still caught.";
+            readonly type: "string";
+            readonly pattern: "^[0-9a-f]{64}$";
+        };
+        readonly ChunkManifest: {
+            readonly title: "ChunkManifest";
+            readonly description: "The terms of a `chunkedTrustTask` transfer, committed before any chunk moves. On export the recipient states them in the descriptor; on import the producer pre-commits them in the request and the recipient echoes them. Either way the manifest arrives in a document whose proof is REQUIRED, so the per-chunk digests are authenticated by the party that computed them and each chunk can be verified — and a single bad chunk re-fetched or refused — on arrival rather than only after reassembly.\n\nConsistency rules JSON Schema cannot state: `chunkCount` MUST equal ceil(expectedSizeBytes / chunkSize) for the bundle the manifest describes, and `chunkDigests` MUST have exactly `chunkCount` items. A party receiving a manifest violating either MUST refuse it.";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["chunkSize", "chunkCount", "chunkDigests"];
+            readonly properties: {
+                readonly chunkSize: {
+                    readonly $ref: "#/$defs/ChunkSize";
+                };
+                readonly chunkCount: {
+                    readonly $ref: "#/$defs/ChunkCount";
+                };
+                readonly chunkDigests: {
+                    readonly type: "array";
+                    readonly minItems: 1;
+                    readonly maxItems: 4096;
+                    readonly description: "Digest of each chunk's raw bytes (not of its base64url encoding), in index order. Compared as decoded multihash bytes, never as encoded strings. sha2-256 is RECOMMENDED and MUST be implemented by every party; a party that does not implement the hash a digest names MUST treat the manifest as unverifiable rather than skip the check.";
+                    readonly items: {
+                        readonly $ref: "#/$defs/DigestMultibase";
+                    };
+                };
+            };
+        };
+        readonly ChunkCount: {
+            readonly title: "ChunkCount";
+            readonly description: "Number of chunks in the bundle, equal to ceil(expectedSizeBytes / chunkSize). Bounded at 4096 so that the manifest itself — one digest per chunk — fits in the single document that carries it under the same message-size reasoning as a chunk.";
+            readonly type: "integer";
+            readonly minimum: 1;
+            readonly maximum: 4096;
+        };
+        readonly ChunkSize: {
+            readonly title: "ChunkSize";
+            readonly description: "Size in bytes of every chunk except the last, which carries the remainder and is between 1 and this value inclusive. The ceiling of 262144 (256 KiB) is normative and is derived in `vta/backup/initiate-export/1.1` under Chunked transfer: it is the largest power of two whose `get-chunk` or `put-chunk` document still fits a 1 MiB mediator message after base64url encoding of `data`, DIDComm authcrypt encoding, and two nested forward wrappers. The floor of 16384 keeps a 1 GiB bundle within `ChunkCount`'s ceiling at sizes a constrained transport can still choose.";
+            readonly type: "integer";
+            readonly minimum: 16384;
+            readonly maximum: 262144;
+        };
+        readonly DigestMultibase: {
+            readonly title: "DigestMultibase";
+            readonly description: "A cryptographic digest as a multibase-encoded multihash — the encoding the W3C Verifiable Credentials Data Model 2.0 defines for `digestMultibase`, and the one `did:webvh` uses for its SCID and entry hashes.\n\nMultihash carries the hash algorithm in-band, so the value is self-describing and the wire format survives an algorithm change without a schema revision; multibase does the same for the base encoding, so a verifier never infers base58 from base64url by context. A bare hex string or a `sha-256:`-style prefix hard-codes one algorithm into the wire contract and is non-conforming here.\n\nThis definition constrains the *encoding only*. What the digest is computed over is stated by each referencing field, because it differs legitimately: a digest over a JSON document is taken over its RFC 8785 (JCS) canonicalization, while a digest over an opaque artifact is taken over its bytes. A field whose input is a JSON document and which does not name a canonicalization is not reproducible.\n\nRestricted to the two multibase headers W3C Controlled Identifiers 1.0 §2.4 normatively requires — `z` (base58btc) and `u` (base64url-no-pad). CID permits others but states that \"interoperability is not guaranteed between implementations using such values\", and a registry whose purpose is interoperability should not mint digests a conforming verifier may be unable to read. The alphabets are enforced rather than assumed: base58btc excludes 0, O, I and l, and an earlier permissive pattern let three published examples carry digests that were not valid base58 at all. base58btc is RECOMMENDED, for consistency with `did:key` and `did:webvh`.";
+            readonly type: "string";
+            readonly minLength: 16;
+            readonly pattern: "^(z[1-9A-HJ-NP-Za-km-z]+|u[A-Za-z0-9_-]+)$";
+            readonly examples: readonly ["zQmbWqxBEKC3P8tqsKc98xmWNzrzDtRLMiMPL8wBuTGsMnR"];
+        };
+        readonly BundleId: {
+            readonly title: "BundleId";
+            readonly description: "Handle for a bundle across its whole lifecycle. Recipient-generated and unguessable, which is what lets an unauthorized reference be answered as not-found without confirming existence. Opaque: a producer quotes what it was given and must not derive, guess or enumerate one.";
+            readonly type: "string";
+            readonly pattern: "^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$";
+        };
+        readonly StreamDescriptor: {
+            readonly title: "StreamDescriptor";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly description: "A descriptor for a transfer that happens outside Trust Task documents, at an address the recipient publishes — the `stream` algorithm, and any other algorithm a recipient offers that is shaped as an address plus a bearer credential. Identical in members to the `vta/backup/*/1.0` descriptor.";
+            readonly required: readonly ["bundleId", "algorithm", "transportUrl", "transportToken", "expectedSha256", "expectedSizeBytes", "expiresAt"];
+            readonly properties: {
+                readonly bundleId: {
+                    readonly $ref: "#/$defs/BundleId";
+                };
+                readonly algorithm: {
+                    readonly type: "string";
+                    readonly minLength: 1;
+                    readonly maxLength: 64;
+                    readonly description: "The mechanism in use. Never `chunkedTrustTask`, which has its own descriptor shape; a descriptor naming it with a transport address is malformed.";
+                };
+                readonly transportUrl: {
+                    readonly type: "string";
+                    readonly format: "uri";
+                    readonly maxLength: 2048;
+                    readonly description: "Where to fetch (export) or write (import) the bytes. A recipient with no address at which it is reachable cannot produce this and refuses with transportUnavailable rather than returning an unusable one. An import address is write-only: staged bytes are never served back from it.";
+                };
+                readonly transportToken: {
+                    readonly type: "string";
+                    readonly minLength: 1;
+                    readonly maxLength: 1024;
+                    readonly description: "Bearer credential for transportUrl, presented in the X-Backup-Token header. Minted per bundle and never reused. A recipient should store only a hash of it, and should accept an export token once.";
+                };
+                readonly expectedSha256: {
+                    readonly $ref: "#/$defs/ExpectedSha256";
+                };
+                readonly expectedSizeBytes: {
+                    readonly $ref: "#/$defs/ExpectedSizeBytes";
+                };
+                readonly expiresAt: {
+                    readonly $ref: "#/$defs/ExpiresAt";
+                };
+            };
+        };
+    };
+};
+/** As {@link PAYLOAD_SCHEMA}, for the success-response variant. */
+export declare const RESPONSE_PAYLOAD_SCHEMA: {
+    readonly $schema: "https://json-schema.org/draft/2020-12/schema";
+    readonly $ref: "#/$defs/Response";
+    readonly $defs: {
+        readonly Response: {
+            readonly $anchor: "response";
+            readonly title: "Backup — Initiate Export — response payload";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["descriptor"];
+            readonly properties: {
+                readonly descriptor: {
+                    readonly $ref: "#/$defs/BundleDescriptor";
+                    readonly description: "Where the bytes are, or how they are divided, what they should be, and until when.";
+                };
+                readonly completionHint: {
+                    readonly type: "string";
+                    readonly maxLength: 1024;
+                    readonly description: "Operator-facing text describing how to complete the download. Advisory: a producer must not parse it or derive behaviour from it, and a recipient must not put a secret in it.";
+                };
+                readonly ext: {
+                    readonly $ref: "#/$defs/Ext";
+                    readonly description: "Ecosystem-defined extension members per SPEC.md §4.5.1.";
+                };
+            };
+        };
+        readonly Ext: {
+            readonly title: "Ext";
+            readonly description: "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.";
+            readonly type: "object";
+            readonly minProperties: 1;
+            readonly additionalProperties: true;
+            readonly propertyNames: {
+                readonly pattern: "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$";
+            };
+        };
+        readonly BundleDescriptor: {
+            readonly title: "BundleDescriptor";
+            readonly description: "The control-plane account of a bundle transfer: which algorithm, on what terms, until when. Exactly one of the two shapes — they are mutually exclusive, since StreamDescriptor requires `transportUrl` and `transportToken` and forbids `chunks`, and ChunkedDescriptor requires `chunks` and forbids both.";
+            readonly oneOf: readonly [{
+                readonly $ref: "#/$defs/StreamDescriptor";
+            }, {
+                readonly $ref: "#/$defs/ChunkedDescriptor";
+            }];
+        };
+        readonly ChunkedDescriptor: {
+            readonly title: "ChunkedDescriptor";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly description: "A descriptor for the `chunkedTrustTask` algorithm. Carries no address and no bearer token: every chunk moves in a Trust Task document whose sender the transport authenticates, so possession of a token would add nothing and would be one more secret to leak.";
+            readonly required: readonly ["bundleId", "algorithm", "chunks", "expectedSha256", "expectedSizeBytes", "expiresAt"];
+            readonly properties: {
+                readonly bundleId: {
+                    readonly $ref: "#/$defs/BundleId";
+                };
+                readonly algorithm: {
+                    readonly type: "string";
+                    readonly enum: readonly ["chunkedTrustTask"];
+                    readonly description: "Discriminates this shape from StreamDescriptor.";
+                };
+                readonly chunks: {
+                    readonly $ref: "#/$defs/ChunkManifest";
+                };
+                readonly expectedSha256: {
+                    readonly $ref: "#/$defs/ExpectedSha256";
+                };
+                readonly expectedSizeBytes: {
+                    readonly $ref: "#/$defs/ExpectedSizeBytes";
+                };
+                readonly expiresAt: {
+                    readonly $ref: "#/$defs/ExpiresAt";
+                };
+            };
+        };
+        readonly ExpiresAt: {
+            readonly title: "ExpiresAt";
+            readonly description: "After which the bundle is collected: staged bytes discarded, tokens and chunk requests refused. Short by design. For a chunked transfer a recipient may move it later as chunks are exchanged, never past its own ceiling — each chunk response reports the current value.";
+            readonly type: "string";
+            readonly format: "date-time";
+        };
+        readonly ExpectedSizeBytes: {
+            readonly title: "ExpectedSizeBytes";
+            readonly description: "Total byte count of the bundle. A zero-length bundle is not a degenerate success — nothing was serialized — so the floor is 1.";
+            readonly type: "integer";
+            readonly minimum: 1;
+        };
+        readonly ExpectedSha256: {
+            readonly title: "ExpectedSha256";
+            readonly description: "Lowercase hex SHA-256 of the whole bundle's bytes. Kept in the hex form the 1.0 descriptor published rather than moved to DigestMultibase, because it is an unchanged member of an existing descriptor and re-encoding it would break every stream producer for no gain in what it checks. For a chunked transfer it is the check over the reassembled bundle, applied after every chunk has verified individually, so that a correct set of chunks assembled in the wrong order is still caught.";
+            readonly type: "string";
+            readonly pattern: "^[0-9a-f]{64}$";
+        };
+        readonly ChunkManifest: {
+            readonly title: "ChunkManifest";
+            readonly description: "The terms of a `chunkedTrustTask` transfer, committed before any chunk moves. On export the recipient states them in the descriptor; on import the producer pre-commits them in the request and the recipient echoes them. Either way the manifest arrives in a document whose proof is REQUIRED, so the per-chunk digests are authenticated by the party that computed them and each chunk can be verified — and a single bad chunk re-fetched or refused — on arrival rather than only after reassembly.\n\nConsistency rules JSON Schema cannot state: `chunkCount` MUST equal ceil(expectedSizeBytes / chunkSize) for the bundle the manifest describes, and `chunkDigests` MUST have exactly `chunkCount` items. A party receiving a manifest violating either MUST refuse it.";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["chunkSize", "chunkCount", "chunkDigests"];
+            readonly properties: {
+                readonly chunkSize: {
+                    readonly $ref: "#/$defs/ChunkSize";
+                };
+                readonly chunkCount: {
+                    readonly $ref: "#/$defs/ChunkCount";
+                };
+                readonly chunkDigests: {
+                    readonly type: "array";
+                    readonly minItems: 1;
+                    readonly maxItems: 4096;
+                    readonly description: "Digest of each chunk's raw bytes (not of its base64url encoding), in index order. Compared as decoded multihash bytes, never as encoded strings. sha2-256 is RECOMMENDED and MUST be implemented by every party; a party that does not implement the hash a digest names MUST treat the manifest as unverifiable rather than skip the check.";
+                    readonly items: {
+                        readonly $ref: "#/$defs/DigestMultibase";
+                    };
+                };
+            };
+        };
+        readonly ChunkCount: {
+            readonly title: "ChunkCount";
+            readonly description: "Number of chunks in the bundle, equal to ceil(expectedSizeBytes / chunkSize). Bounded at 4096 so that the manifest itself — one digest per chunk — fits in the single document that carries it under the same message-size reasoning as a chunk.";
+            readonly type: "integer";
+            readonly minimum: 1;
+            readonly maximum: 4096;
+        };
+        readonly ChunkSize: {
+            readonly title: "ChunkSize";
+            readonly description: "Size in bytes of every chunk except the last, which carries the remainder and is between 1 and this value inclusive. The ceiling of 262144 (256 KiB) is normative and is derived in `vta/backup/initiate-export/1.1` under Chunked transfer: it is the largest power of two whose `get-chunk` or `put-chunk` document still fits a 1 MiB mediator message after base64url encoding of `data`, DIDComm authcrypt encoding, and two nested forward wrappers. The floor of 16384 keeps a 1 GiB bundle within `ChunkCount`'s ceiling at sizes a constrained transport can still choose.";
+            readonly type: "integer";
+            readonly minimum: 16384;
+            readonly maximum: 262144;
+        };
+        readonly DigestMultibase: {
+            readonly title: "DigestMultibase";
+            readonly description: "A cryptographic digest as a multibase-encoded multihash — the encoding the W3C Verifiable Credentials Data Model 2.0 defines for `digestMultibase`, and the one `did:webvh` uses for its SCID and entry hashes.\n\nMultihash carries the hash algorithm in-band, so the value is self-describing and the wire format survives an algorithm change without a schema revision; multibase does the same for the base encoding, so a verifier never infers base58 from base64url by context. A bare hex string or a `sha-256:`-style prefix hard-codes one algorithm into the wire contract and is non-conforming here.\n\nThis definition constrains the *encoding only*. What the digest is computed over is stated by each referencing field, because it differs legitimately: a digest over a JSON document is taken over its RFC 8785 (JCS) canonicalization, while a digest over an opaque artifact is taken over its bytes. A field whose input is a JSON document and which does not name a canonicalization is not reproducible.\n\nRestricted to the two multibase headers W3C Controlled Identifiers 1.0 §2.4 normatively requires — `z` (base58btc) and `u` (base64url-no-pad). CID permits others but states that \"interoperability is not guaranteed between implementations using such values\", and a registry whose purpose is interoperability should not mint digests a conforming verifier may be unable to read. The alphabets are enforced rather than assumed: base58btc excludes 0, O, I and l, and an earlier permissive pattern let three published examples carry digests that were not valid base58 at all. base58btc is RECOMMENDED, for consistency with `did:key` and `did:webvh`.";
+            readonly type: "string";
+            readonly minLength: 16;
+            readonly pattern: "^(z[1-9A-HJ-NP-Za-km-z]+|u[A-Za-z0-9_-]+)$";
+            readonly examples: readonly ["zQmbWqxBEKC3P8tqsKc98xmWNzrzDtRLMiMPL8wBuTGsMnR"];
+        };
+        readonly BundleId: {
+            readonly title: "BundleId";
+            readonly description: "Handle for a bundle across its whole lifecycle. Recipient-generated and unguessable, which is what lets an unauthorized reference be answered as not-found without confirming existence. Opaque: a producer quotes what it was given and must not derive, guess or enumerate one.";
+            readonly type: "string";
+            readonly pattern: "^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$";
+        };
+        readonly StreamDescriptor: {
+            readonly title: "StreamDescriptor";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly description: "A descriptor for a transfer that happens outside Trust Task documents, at an address the recipient publishes — the `stream` algorithm, and any other algorithm a recipient offers that is shaped as an address plus a bearer credential. Identical in members to the `vta/backup/*/1.0` descriptor.";
+            readonly required: readonly ["bundleId", "algorithm", "transportUrl", "transportToken", "expectedSha256", "expectedSizeBytes", "expiresAt"];
+            readonly properties: {
+                readonly bundleId: {
+                    readonly $ref: "#/$defs/BundleId";
+                };
+                readonly algorithm: {
+                    readonly type: "string";
+                    readonly minLength: 1;
+                    readonly maxLength: 64;
+                    readonly description: "The mechanism in use. Never `chunkedTrustTask`, which has its own descriptor shape; a descriptor naming it with a transport address is malformed.";
+                };
+                readonly transportUrl: {
+                    readonly type: "string";
+                    readonly format: "uri";
+                    readonly maxLength: 2048;
+                    readonly description: "Where to fetch (export) or write (import) the bytes. A recipient with no address at which it is reachable cannot produce this and refuses with transportUnavailable rather than returning an unusable one. An import address is write-only: staged bytes are never served back from it.";
+                };
+                readonly transportToken: {
+                    readonly type: "string";
+                    readonly minLength: 1;
+                    readonly maxLength: 1024;
+                    readonly description: "Bearer credential for transportUrl, presented in the X-Backup-Token header. Minted per bundle and never reused. A recipient should store only a hash of it, and should accept an export token once.";
+                };
+                readonly expectedSha256: {
+                    readonly $ref: "#/$defs/ExpectedSha256";
+                };
+                readonly expectedSizeBytes: {
+                    readonly $ref: "#/$defs/ExpectedSizeBytes";
+                };
+                readonly expiresAt: {
+                    readonly $ref: "#/$defs/ExpiresAt";
+                };
+            };
+        };
+    };
+};
+/**
+ * SPEC.md §7.2 policy for the request variant, from this specification's
+ * front matter. Pass to `consumeInbound` — items 5b, 7 and 8 are
+ * per-specification and cannot be derived from the document alone, and
+ * item 2 needs the schema this carries.
+ */
+export declare const SPEC: {
+    readonly typeUri: "https://trusttasks.org/spec/backup/initiate-export/0.1";
+    readonly isBearer: false;
+    readonly isProofRequired: true;
+    readonly isRecipientRequired: true;
+    readonly isIssuedAtRequired: true;
+    readonly payloadSchema: {
+        readonly $schema: "https://json-schema.org/draft/2020-12/schema";
+        readonly $id: "https://trusttasks.org/spec/backup/initiate-export/0.1";
+        readonly title: "Backup — Initiate Export — payload";
+        readonly description: "Asks the recipient to serialize its entire state into a password-encrypted bundle and return the descriptor that fetches it — by an HTTPS address (`stream`) or chunk by chunk over Trust Task documents (`chunkedTrustTask`). The outer document members (id, type, issuer, recipient, issuedAt, expiresAt, proof) are owned by the framework — SPEC §6.3.";
+        readonly type: "object";
+        readonly additionalProperties: false;
+        readonly required: readonly ["password"];
+        readonly properties: {
+            readonly password: {
+                readonly type: "string";
+                readonly minLength: 15;
+                readonly maxLength: 1024;
+                readonly writeOnly: true;
+                readonly description: "Key-derivation input protecting the bundle. Chosen by the producer and never recoverable from the recipient. `writeOnly` is the machine-readable form of the rule in Data carried: this member goes in and never comes back, so a generated client must not surface it in a response type, and a recipient must never log, echo or persist it. The minLength floor is a shape check only — a recipient may require more, and refuses with weakPassword.";
+                readonly $comment: "No `format: password` — the annotation is advisory in 2020-12 and says less than writeOnly does. No example value anywhere in this directory: a specimen password is the one thing implementers copy.";
+            };
+            readonly includeAudit: {
+                readonly type: "boolean";
+                readonly description: "Serialize the audit trail alongside the operational state. Absent means false — stated in prose rather than as a schema `default`, because a materialised default turns an omitted member into an asserted one in generated bindings, which is a different document.";
+            };
+            readonly algorithm: {
+                readonly type: "string";
+                readonly minLength: 1;
+                readonly maxLength: 64;
+                readonly description: "Requested transport mechanism — how the bytes move, not how they are encrypted. This version defines `stream` (one HTTPS transfer; what an absent member means) and `chunkedTrustTask` (a sequence of get-chunk tasks over the transport already carrying this one). Deliberately not an enum: a recipient offering more must be askable for it without a specification revision, and one that does not implement the request refuses with unsupportedAlgorithm.";
+            };
+            readonly maxChunkSize: {
+                readonly $ref: "#/$defs/ChunkSize";
+                readonly description: "For `chunkedTrustTask` only: the largest chunk the producer can receive, for a producer whose transport is tighter than the one the normative ceiling assumes. The recipient chooses a chunkSize no larger than this. Absent means the normative ceiling. Meaningless for any other algorithm, and a recipient ignores it there.";
+            };
+            readonly ext: {
+                readonly $ref: "#/$defs/Ext";
+                readonly description: "Ecosystem-defined extension members per SPEC.md §4.5.1.";
+            };
+        };
+        readonly $defs: {
+            readonly Response: {
+                readonly $anchor: "response";
+                readonly title: "Backup — Initiate Export — response payload";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["descriptor"];
+                readonly properties: {
+                    readonly descriptor: {
+                        readonly $ref: "#/$defs/BundleDescriptor";
+                        readonly description: "Where the bytes are, or how they are divided, what they should be, and until when.";
+                    };
+                    readonly completionHint: {
+                        readonly type: "string";
+                        readonly maxLength: 1024;
+                        readonly description: "Operator-facing text describing how to complete the download. Advisory: a producer must not parse it or derive behaviour from it, and a recipient must not put a secret in it.";
+                    };
+                    readonly ext: {
+                        readonly $ref: "#/$defs/Ext";
+                        readonly description: "Ecosystem-defined extension members per SPEC.md §4.5.1.";
+                    };
+                };
+            };
+            readonly Ext: {
+                readonly title: "Ext";
+                readonly description: "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.";
+                readonly type: "object";
+                readonly minProperties: 1;
+                readonly additionalProperties: true;
+                readonly propertyNames: {
+                    readonly pattern: "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$";
+                };
+            };
+            readonly BundleDescriptor: {
+                readonly title: "BundleDescriptor";
+                readonly description: "The control-plane account of a bundle transfer: which algorithm, on what terms, until when. Exactly one of the two shapes — they are mutually exclusive, since StreamDescriptor requires `transportUrl` and `transportToken` and forbids `chunks`, and ChunkedDescriptor requires `chunks` and forbids both.";
+                readonly oneOf: readonly [{
+                    readonly $ref: "#/$defs/StreamDescriptor";
+                }, {
+                    readonly $ref: "#/$defs/ChunkedDescriptor";
+                }];
+            };
+            readonly ChunkedDescriptor: {
+                readonly title: "ChunkedDescriptor";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly description: "A descriptor for the `chunkedTrustTask` algorithm. Carries no address and no bearer token: every chunk moves in a Trust Task document whose sender the transport authenticates, so possession of a token would add nothing and would be one more secret to leak.";
+                readonly required: readonly ["bundleId", "algorithm", "chunks", "expectedSha256", "expectedSizeBytes", "expiresAt"];
+                readonly properties: {
+                    readonly bundleId: {
+                        readonly $ref: "#/$defs/BundleId";
+                    };
+                    readonly algorithm: {
+                        readonly type: "string";
+                        readonly enum: readonly ["chunkedTrustTask"];
+                        readonly description: "Discriminates this shape from StreamDescriptor.";
+                    };
+                    readonly chunks: {
+                        readonly $ref: "#/$defs/ChunkManifest";
+                    };
+                    readonly expectedSha256: {
+                        readonly $ref: "#/$defs/ExpectedSha256";
+                    };
+                    readonly expectedSizeBytes: {
+                        readonly $ref: "#/$defs/ExpectedSizeBytes";
+                    };
+                    readonly expiresAt: {
+                        readonly $ref: "#/$defs/ExpiresAt";
+                    };
+                };
+            };
+            readonly ExpiresAt: {
+                readonly title: "ExpiresAt";
+                readonly description: "After which the bundle is collected: staged bytes discarded, tokens and chunk requests refused. Short by design. For a chunked transfer a recipient may move it later as chunks are exchanged, never past its own ceiling — each chunk response reports the current value.";
+                readonly type: "string";
+                readonly format: "date-time";
+            };
+            readonly ExpectedSizeBytes: {
+                readonly title: "ExpectedSizeBytes";
+                readonly description: "Total byte count of the bundle. A zero-length bundle is not a degenerate success — nothing was serialized — so the floor is 1.";
+                readonly type: "integer";
+                readonly minimum: 1;
+            };
+            readonly ExpectedSha256: {
+                readonly title: "ExpectedSha256";
+                readonly description: "Lowercase hex SHA-256 of the whole bundle's bytes. Kept in the hex form the 1.0 descriptor published rather than moved to DigestMultibase, because it is an unchanged member of an existing descriptor and re-encoding it would break every stream producer for no gain in what it checks. For a chunked transfer it is the check over the reassembled bundle, applied after every chunk has verified individually, so that a correct set of chunks assembled in the wrong order is still caught.";
+                readonly type: "string";
+                readonly pattern: "^[0-9a-f]{64}$";
+            };
+            readonly ChunkManifest: {
+                readonly title: "ChunkManifest";
+                readonly description: "The terms of a `chunkedTrustTask` transfer, committed before any chunk moves. On export the recipient states them in the descriptor; on import the producer pre-commits them in the request and the recipient echoes them. Either way the manifest arrives in a document whose proof is REQUIRED, so the per-chunk digests are authenticated by the party that computed them and each chunk can be verified — and a single bad chunk re-fetched or refused — on arrival rather than only after reassembly.\n\nConsistency rules JSON Schema cannot state: `chunkCount` MUST equal ceil(expectedSizeBytes / chunkSize) for the bundle the manifest describes, and `chunkDigests` MUST have exactly `chunkCount` items. A party receiving a manifest violating either MUST refuse it.";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["chunkSize", "chunkCount", "chunkDigests"];
+                readonly properties: {
+                    readonly chunkSize: {
+                        readonly $ref: "#/$defs/ChunkSize";
+                    };
+                    readonly chunkCount: {
+                        readonly $ref: "#/$defs/ChunkCount";
+                    };
+                    readonly chunkDigests: {
+                        readonly type: "array";
+                        readonly minItems: 1;
+                        readonly maxItems: 4096;
+                        readonly description: "Digest of each chunk's raw bytes (not of its base64url encoding), in index order. Compared as decoded multihash bytes, never as encoded strings. sha2-256 is RECOMMENDED and MUST be implemented by every party; a party that does not implement the hash a digest names MUST treat the manifest as unverifiable rather than skip the check.";
+                        readonly items: {
+                            readonly $ref: "#/$defs/DigestMultibase";
+                        };
+                    };
+                };
+            };
+            readonly ChunkCount: {
+                readonly title: "ChunkCount";
+                readonly description: "Number of chunks in the bundle, equal to ceil(expectedSizeBytes / chunkSize). Bounded at 4096 so that the manifest itself — one digest per chunk — fits in the single document that carries it under the same message-size reasoning as a chunk.";
+                readonly type: "integer";
+                readonly minimum: 1;
+                readonly maximum: 4096;
+            };
+            readonly ChunkSize: {
+                readonly title: "ChunkSize";
+                readonly description: "Size in bytes of every chunk except the last, which carries the remainder and is between 1 and this value inclusive. The ceiling of 262144 (256 KiB) is normative and is derived in `vta/backup/initiate-export/1.1` under Chunked transfer: it is the largest power of two whose `get-chunk` or `put-chunk` document still fits a 1 MiB mediator message after base64url encoding of `data`, DIDComm authcrypt encoding, and two nested forward wrappers. The floor of 16384 keeps a 1 GiB bundle within `ChunkCount`'s ceiling at sizes a constrained transport can still choose.";
+                readonly type: "integer";
+                readonly minimum: 16384;
+                readonly maximum: 262144;
+            };
+            readonly DigestMultibase: {
+                readonly title: "DigestMultibase";
+                readonly description: "A cryptographic digest as a multibase-encoded multihash — the encoding the W3C Verifiable Credentials Data Model 2.0 defines for `digestMultibase`, and the one `did:webvh` uses for its SCID and entry hashes.\n\nMultihash carries the hash algorithm in-band, so the value is self-describing and the wire format survives an algorithm change without a schema revision; multibase does the same for the base encoding, so a verifier never infers base58 from base64url by context. A bare hex string or a `sha-256:`-style prefix hard-codes one algorithm into the wire contract and is non-conforming here.\n\nThis definition constrains the *encoding only*. What the digest is computed over is stated by each referencing field, because it differs legitimately: a digest over a JSON document is taken over its RFC 8785 (JCS) canonicalization, while a digest over an opaque artifact is taken over its bytes. A field whose input is a JSON document and which does not name a canonicalization is not reproducible.\n\nRestricted to the two multibase headers W3C Controlled Identifiers 1.0 §2.4 normatively requires — `z` (base58btc) and `u` (base64url-no-pad). CID permits others but states that \"interoperability is not guaranteed between implementations using such values\", and a registry whose purpose is interoperability should not mint digests a conforming verifier may be unable to read. The alphabets are enforced rather than assumed: base58btc excludes 0, O, I and l, and an earlier permissive pattern let three published examples carry digests that were not valid base58 at all. base58btc is RECOMMENDED, for consistency with `did:key` and `did:webvh`.";
+                readonly type: "string";
+                readonly minLength: 16;
+                readonly pattern: "^(z[1-9A-HJ-NP-Za-km-z]+|u[A-Za-z0-9_-]+)$";
+                readonly examples: readonly ["zQmbWqxBEKC3P8tqsKc98xmWNzrzDtRLMiMPL8wBuTGsMnR"];
+            };
+            readonly BundleId: {
+                readonly title: "BundleId";
+                readonly description: "Handle for a bundle across its whole lifecycle. Recipient-generated and unguessable, which is what lets an unauthorized reference be answered as not-found without confirming existence. Opaque: a producer quotes what it was given and must not derive, guess or enumerate one.";
+                readonly type: "string";
+                readonly pattern: "^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$";
+            };
+            readonly StreamDescriptor: {
+                readonly title: "StreamDescriptor";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly description: "A descriptor for a transfer that happens outside Trust Task documents, at an address the recipient publishes — the `stream` algorithm, and any other algorithm a recipient offers that is shaped as an address plus a bearer credential. Identical in members to the `vta/backup/*/1.0` descriptor.";
+                readonly required: readonly ["bundleId", "algorithm", "transportUrl", "transportToken", "expectedSha256", "expectedSizeBytes", "expiresAt"];
+                readonly properties: {
+                    readonly bundleId: {
+                        readonly $ref: "#/$defs/BundleId";
+                    };
+                    readonly algorithm: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                        readonly maxLength: 64;
+                        readonly description: "The mechanism in use. Never `chunkedTrustTask`, which has its own descriptor shape; a descriptor naming it with a transport address is malformed.";
+                    };
+                    readonly transportUrl: {
+                        readonly type: "string";
+                        readonly format: "uri";
+                        readonly maxLength: 2048;
+                        readonly description: "Where to fetch (export) or write (import) the bytes. A recipient with no address at which it is reachable cannot produce this and refuses with transportUnavailable rather than returning an unusable one. An import address is write-only: staged bytes are never served back from it.";
+                    };
+                    readonly transportToken: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                        readonly maxLength: 1024;
+                        readonly description: "Bearer credential for transportUrl, presented in the X-Backup-Token header. Minted per bundle and never reused. A recipient should store only a hash of it, and should accept an export token once.";
+                    };
+                    readonly expectedSha256: {
+                        readonly $ref: "#/$defs/ExpectedSha256";
+                    };
+                    readonly expectedSizeBytes: {
+                        readonly $ref: "#/$defs/ExpectedSizeBytes";
+                    };
+                    readonly expiresAt: {
+                        readonly $ref: "#/$defs/ExpiresAt";
+                    };
+                };
+            };
+        };
+    };
+};
+/**
+ * SPEC.md §7.2 policy for the success-response variant. `isRecipientRequired`
+ * tracks the *issuer* party's requirement because a response swaps the
+ * parties (§7.3 item 5).
+ */
+export declare const RESPONSE_SPEC: {
+    readonly typeUri: "https://trusttasks.org/spec/backup/initiate-export/0.1#response";
+    readonly isBearer: false;
+    readonly isProofRequired: true;
+    readonly isRecipientRequired: true;
+    readonly isIssuedAtRequired: true;
+    readonly payloadSchema: {
+        readonly $schema: "https://json-schema.org/draft/2020-12/schema";
+        readonly $ref: "#/$defs/Response";
+        readonly $defs: {
+            readonly Response: {
+                readonly $anchor: "response";
+                readonly title: "Backup — Initiate Export — response payload";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["descriptor"];
+                readonly properties: {
+                    readonly descriptor: {
+                        readonly $ref: "#/$defs/BundleDescriptor";
+                        readonly description: "Where the bytes are, or how they are divided, what they should be, and until when.";
+                    };
+                    readonly completionHint: {
+                        readonly type: "string";
+                        readonly maxLength: 1024;
+                        readonly description: "Operator-facing text describing how to complete the download. Advisory: a producer must not parse it or derive behaviour from it, and a recipient must not put a secret in it.";
+                    };
+                    readonly ext: {
+                        readonly $ref: "#/$defs/Ext";
+                        readonly description: "Ecosystem-defined extension members per SPEC.md §4.5.1.";
+                    };
+                };
+            };
+            readonly Ext: {
+                readonly title: "Ext";
+                readonly description: "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.";
+                readonly type: "object";
+                readonly minProperties: 1;
+                readonly additionalProperties: true;
+                readonly propertyNames: {
+                    readonly pattern: "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$";
+                };
+            };
+            readonly BundleDescriptor: {
+                readonly title: "BundleDescriptor";
+                readonly description: "The control-plane account of a bundle transfer: which algorithm, on what terms, until when. Exactly one of the two shapes — they are mutually exclusive, since StreamDescriptor requires `transportUrl` and `transportToken` and forbids `chunks`, and ChunkedDescriptor requires `chunks` and forbids both.";
+                readonly oneOf: readonly [{
+                    readonly $ref: "#/$defs/StreamDescriptor";
+                }, {
+                    readonly $ref: "#/$defs/ChunkedDescriptor";
+                }];
+            };
+            readonly ChunkedDescriptor: {
+                readonly title: "ChunkedDescriptor";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly description: "A descriptor for the `chunkedTrustTask` algorithm. Carries no address and no bearer token: every chunk moves in a Trust Task document whose sender the transport authenticates, so possession of a token would add nothing and would be one more secret to leak.";
+                readonly required: readonly ["bundleId", "algorithm", "chunks", "expectedSha256", "expectedSizeBytes", "expiresAt"];
+                readonly properties: {
+                    readonly bundleId: {
+                        readonly $ref: "#/$defs/BundleId";
+                    };
+                    readonly algorithm: {
+                        readonly type: "string";
+                        readonly enum: readonly ["chunkedTrustTask"];
+                        readonly description: "Discriminates this shape from StreamDescriptor.";
+                    };
+                    readonly chunks: {
+                        readonly $ref: "#/$defs/ChunkManifest";
+                    };
+                    readonly expectedSha256: {
+                        readonly $ref: "#/$defs/ExpectedSha256";
+                    };
+                    readonly expectedSizeBytes: {
+                        readonly $ref: "#/$defs/ExpectedSizeBytes";
+                    };
+                    readonly expiresAt: {
+                        readonly $ref: "#/$defs/ExpiresAt";
+                    };
+                };
+            };
+            readonly ExpiresAt: {
+                readonly title: "ExpiresAt";
+                readonly description: "After which the bundle is collected: staged bytes discarded, tokens and chunk requests refused. Short by design. For a chunked transfer a recipient may move it later as chunks are exchanged, never past its own ceiling — each chunk response reports the current value.";
+                readonly type: "string";
+                readonly format: "date-time";
+            };
+            readonly ExpectedSizeBytes: {
+                readonly title: "ExpectedSizeBytes";
+                readonly description: "Total byte count of the bundle. A zero-length bundle is not a degenerate success — nothing was serialized — so the floor is 1.";
+                readonly type: "integer";
+                readonly minimum: 1;
+            };
+            readonly ExpectedSha256: {
+                readonly title: "ExpectedSha256";
+                readonly description: "Lowercase hex SHA-256 of the whole bundle's bytes. Kept in the hex form the 1.0 descriptor published rather than moved to DigestMultibase, because it is an unchanged member of an existing descriptor and re-encoding it would break every stream producer for no gain in what it checks. For a chunked transfer it is the check over the reassembled bundle, applied after every chunk has verified individually, so that a correct set of chunks assembled in the wrong order is still caught.";
+                readonly type: "string";
+                readonly pattern: "^[0-9a-f]{64}$";
+            };
+            readonly ChunkManifest: {
+                readonly title: "ChunkManifest";
+                readonly description: "The terms of a `chunkedTrustTask` transfer, committed before any chunk moves. On export the recipient states them in the descriptor; on import the producer pre-commits them in the request and the recipient echoes them. Either way the manifest arrives in a document whose proof is REQUIRED, so the per-chunk digests are authenticated by the party that computed them and each chunk can be verified — and a single bad chunk re-fetched or refused — on arrival rather than only after reassembly.\n\nConsistency rules JSON Schema cannot state: `chunkCount` MUST equal ceil(expectedSizeBytes / chunkSize) for the bundle the manifest describes, and `chunkDigests` MUST have exactly `chunkCount` items. A party receiving a manifest violating either MUST refuse it.";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["chunkSize", "chunkCount", "chunkDigests"];
+                readonly properties: {
+                    readonly chunkSize: {
+                        readonly $ref: "#/$defs/ChunkSize";
+                    };
+                    readonly chunkCount: {
+                        readonly $ref: "#/$defs/ChunkCount";
+                    };
+                    readonly chunkDigests: {
+                        readonly type: "array";
+                        readonly minItems: 1;
+                        readonly maxItems: 4096;
+                        readonly description: "Digest of each chunk's raw bytes (not of its base64url encoding), in index order. Compared as decoded multihash bytes, never as encoded strings. sha2-256 is RECOMMENDED and MUST be implemented by every party; a party that does not implement the hash a digest names MUST treat the manifest as unverifiable rather than skip the check.";
+                        readonly items: {
+                            readonly $ref: "#/$defs/DigestMultibase";
+                        };
+                    };
+                };
+            };
+            readonly ChunkCount: {
+                readonly title: "ChunkCount";
+                readonly description: "Number of chunks in the bundle, equal to ceil(expectedSizeBytes / chunkSize). Bounded at 4096 so that the manifest itself — one digest per chunk — fits in the single document that carries it under the same message-size reasoning as a chunk.";
+                readonly type: "integer";
+                readonly minimum: 1;
+                readonly maximum: 4096;
+            };
+            readonly ChunkSize: {
+                readonly title: "ChunkSize";
+                readonly description: "Size in bytes of every chunk except the last, which carries the remainder and is between 1 and this value inclusive. The ceiling of 262144 (256 KiB) is normative and is derived in `vta/backup/initiate-export/1.1` under Chunked transfer: it is the largest power of two whose `get-chunk` or `put-chunk` document still fits a 1 MiB mediator message after base64url encoding of `data`, DIDComm authcrypt encoding, and two nested forward wrappers. The floor of 16384 keeps a 1 GiB bundle within `ChunkCount`'s ceiling at sizes a constrained transport can still choose.";
+                readonly type: "integer";
+                readonly minimum: 16384;
+                readonly maximum: 262144;
+            };
+            readonly DigestMultibase: {
+                readonly title: "DigestMultibase";
+                readonly description: "A cryptographic digest as a multibase-encoded multihash — the encoding the W3C Verifiable Credentials Data Model 2.0 defines for `digestMultibase`, and the one `did:webvh` uses for its SCID and entry hashes.\n\nMultihash carries the hash algorithm in-band, so the value is self-describing and the wire format survives an algorithm change without a schema revision; multibase does the same for the base encoding, so a verifier never infers base58 from base64url by context. A bare hex string or a `sha-256:`-style prefix hard-codes one algorithm into the wire contract and is non-conforming here.\n\nThis definition constrains the *encoding only*. What the digest is computed over is stated by each referencing field, because it differs legitimately: a digest over a JSON document is taken over its RFC 8785 (JCS) canonicalization, while a digest over an opaque artifact is taken over its bytes. A field whose input is a JSON document and which does not name a canonicalization is not reproducible.\n\nRestricted to the two multibase headers W3C Controlled Identifiers 1.0 §2.4 normatively requires — `z` (base58btc) and `u` (base64url-no-pad). CID permits others but states that \"interoperability is not guaranteed between implementations using such values\", and a registry whose purpose is interoperability should not mint digests a conforming verifier may be unable to read. The alphabets are enforced rather than assumed: base58btc excludes 0, O, I and l, and an earlier permissive pattern let three published examples carry digests that were not valid base58 at all. base58btc is RECOMMENDED, for consistency with `did:key` and `did:webvh`.";
+                readonly type: "string";
+                readonly minLength: 16;
+                readonly pattern: "^(z[1-9A-HJ-NP-Za-km-z]+|u[A-Za-z0-9_-]+)$";
+                readonly examples: readonly ["zQmbWqxBEKC3P8tqsKc98xmWNzrzDtRLMiMPL8wBuTGsMnR"];
+            };
+            readonly BundleId: {
+                readonly title: "BundleId";
+                readonly description: "Handle for a bundle across its whole lifecycle. Recipient-generated and unguessable, which is what lets an unauthorized reference be answered as not-found without confirming existence. Opaque: a producer quotes what it was given and must not derive, guess or enumerate one.";
+                readonly type: "string";
+                readonly pattern: "^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$";
+            };
+            readonly StreamDescriptor: {
+                readonly title: "StreamDescriptor";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly description: "A descriptor for a transfer that happens outside Trust Task documents, at an address the recipient publishes — the `stream` algorithm, and any other algorithm a recipient offers that is shaped as an address plus a bearer credential. Identical in members to the `vta/backup/*/1.0` descriptor.";
+                readonly required: readonly ["bundleId", "algorithm", "transportUrl", "transportToken", "expectedSha256", "expectedSizeBytes", "expiresAt"];
+                readonly properties: {
+                    readonly bundleId: {
+                        readonly $ref: "#/$defs/BundleId";
+                    };
+                    readonly algorithm: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                        readonly maxLength: 64;
+                        readonly description: "The mechanism in use. Never `chunkedTrustTask`, which has its own descriptor shape; a descriptor naming it with a transport address is malformed.";
+                    };
+                    readonly transportUrl: {
+                        readonly type: "string";
+                        readonly format: "uri";
+                        readonly maxLength: 2048;
+                        readonly description: "Where to fetch (export) or write (import) the bytes. A recipient with no address at which it is reachable cannot produce this and refuses with transportUnavailable rather than returning an unusable one. An import address is write-only: staged bytes are never served back from it.";
+                    };
+                    readonly transportToken: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                        readonly maxLength: 1024;
+                        readonly description: "Bearer credential for transportUrl, presented in the X-Backup-Token header. Minted per bundle and never reused. A recipient should store only a hash of it, and should accept an export token once.";
+                    };
+                    readonly expectedSha256: {
+                        readonly $ref: "#/$defs/ExpectedSha256";
+                    };
+                    readonly expectedSizeBytes: {
+                        readonly $ref: "#/$defs/ExpectedSizeBytes";
+                    };
+                    readonly expiresAt: {
+                        readonly $ref: "#/$defs/ExpiresAt";
+                    };
+                };
+            };
+        };
+    };
+};
+//# sourceMappingURL=payload.d.ts.map