@openvtc/trust-tasks 0.21.11 → 0.21.13

package/dist/vtc/website/deploy/0.1/payload.d.ts

@@ -0,0 +1,369 @@
+/**
+ * Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
+ * Source: specs/vtc/website/deploy/0.1/payload.schema.json
+ */
+import type { ExpectedSha256, ExpectedSizeBytes, Ext, UploadId } from "../../../../_shared/components.js";
+/**
+ * Publish a staged bundle upload. The outer document members are owned by the framework — SPEC §6.3.
+ */
+export interface VTCWebsiteDeployPayload {
+    uploadId: UploadId;
+    ext?: Ext;
+}
+export interface VTCWebsiteDeployResponsePayload {
+    /**
+     * How the site was replaced.
+     */
+    deployMode: "live" | "managed";
+    bundleSha256: ExpectedSha256;
+    bundleSizeBytes: ExpectedSizeBytes;
+    /**
+     * The generation created; 0 in live mode.
+     */
+    targetGeneration: number;
+    /**
+     * Old generations removed; 0 in live mode.
+     */
+    prunedGenerations: number;
+    ext?: Ext;
+}
+/** Shared definitions this specification references, re-exported under the names it used to declare them with. */
+export type { ExpectedSha256, ExpectedSizeBytes, Ext, UploadId };
+/** Trust Task type URI. */
+export declare const TYPE_URI: "https://trusttasks.org/spec/vtc/website/deploy/0.1";
+/** Stable alias for this specification's request payload shape. */
+export type Payload = VTCWebsiteDeployPayload;
+/** Trust Task response type URI (request type URI + "#response"). */
+export declare const RESPONSE_TYPE_URI: "https://trusttasks.org/spec/vtc/website/deploy/0.1#response";
+/** Stable alias for this specification's success-response payload shape. */
+export type Response = VTCWebsiteDeployResponsePayload;
+/**
+ * This specification's payload schema, as a value.
+ *
+ * SPEC.md §7.2 item 2 is performed against this. It is shipped as data
+ * rather than only as a `.json` file because TypeScript types are erased
+ * at runtime: without a schema a consumer has nothing to validate, and
+ * every REQUIRED payload member is optional in practice. Cross-file
+ * `$ref`s are already inlined, so it needs no resolver.
+ */
+export declare const PAYLOAD_SCHEMA: {
+    readonly $schema: "https://json-schema.org/draft/2020-12/schema";
+    readonly $id: "https://trusttasks.org/spec/vtc/website/deploy/0.1";
+    readonly title: "VTC Website — Deploy — payload";
+    readonly description: "Publish a staged bundle upload. The outer document members are owned by the framework — SPEC §6.3.";
+    readonly type: "object";
+    readonly additionalProperties: false;
+    readonly required: readonly ["uploadId"];
+    readonly properties: {
+        readonly uploadId: {
+            readonly $ref: "#/$defs/UploadId";
+        };
+        readonly ext: {
+            readonly $ref: "#/$defs/Ext";
+        };
+    };
+    readonly $defs: {
+        readonly Response: {
+            readonly $anchor: "response";
+            readonly title: "VTC Website — Deploy — response payload";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["deployMode", "bundleSha256", "bundleSizeBytes", "targetGeneration", "prunedGenerations"];
+            readonly properties: {
+                readonly deployMode: {
+                    readonly type: "string";
+                    readonly enum: readonly ["live", "managed"];
+                    readonly description: "How the site was replaced.";
+                };
+                readonly bundleSha256: {
+                    readonly $ref: "#/$defs/ExpectedSha256";
+                };
+                readonly bundleSizeBytes: {
+                    readonly $ref: "#/$defs/ExpectedSizeBytes";
+                };
+                readonly targetGeneration: {
+                    readonly type: "integer";
+                    readonly minimum: 0;
+                    readonly description: "The generation created; 0 in live mode.";
+                };
+                readonly prunedGenerations: {
+                    readonly type: "integer";
+                    readonly minimum: 0;
+                    readonly description: "Old generations removed; 0 in live mode.";
+                };
+                readonly ext: {
+                    readonly $ref: "#/$defs/Ext";
+                };
+            };
+        };
+        readonly Ext: {
+            readonly title: "Ext";
+            readonly description: "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.";
+            readonly type: "object";
+            readonly minProperties: 1;
+            readonly additionalProperties: true;
+            readonly propertyNames: {
+                readonly pattern: "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$";
+            };
+        };
+        readonly ExpectedSizeBytes: {
+            readonly title: "ExpectedSizeBytes";
+            readonly description: "Total byte count of the bundle. A zero-length bundle is not a degenerate success — nothing was serialized — so the floor is 1.";
+            readonly type: "integer";
+            readonly minimum: 1;
+        };
+        readonly ExpectedSha256: {
+            readonly title: "ExpectedSha256";
+            readonly description: "Lowercase hex SHA-256 of the whole bundle's bytes. Kept in the hex form the 1.0 descriptor published rather than moved to DigestMultibase, because it is an unchanged member of an existing descriptor and re-encoding it would break every stream producer for no gain in what it checks. For a chunked transfer it is the check over the reassembled bundle, applied after every chunk has verified individually, so that a correct set of chunks assembled in the wrong order is still caught.";
+            readonly type: "string";
+            readonly pattern: "^[0-9a-f]{64}$";
+        };
+        readonly UploadId: {
+            readonly title: "UploadId";
+            readonly type: "string";
+            readonly pattern: "^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$";
+            readonly description: "Handle for one upload across begin, chunk, commit and abort, and — for a bundle — deploy. Recipient-generated and unguessable, which is what lets a reference to somebody else's upload be answered as not-found without confirming it exists. Opaque: a producer quotes what it was given.";
+        };
+    };
+};
+/** As {@link PAYLOAD_SCHEMA}, for the success-response variant. */
+export declare const RESPONSE_PAYLOAD_SCHEMA: {
+    readonly $schema: "https://json-schema.org/draft/2020-12/schema";
+    readonly $ref: "#/$defs/Response";
+    readonly $defs: {
+        readonly Response: {
+            readonly $anchor: "response";
+            readonly title: "VTC Website — Deploy — response payload";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["deployMode", "bundleSha256", "bundleSizeBytes", "targetGeneration", "prunedGenerations"];
+            readonly properties: {
+                readonly deployMode: {
+                    readonly type: "string";
+                    readonly enum: readonly ["live", "managed"];
+                    readonly description: "How the site was replaced.";
+                };
+                readonly bundleSha256: {
+                    readonly $ref: "#/$defs/ExpectedSha256";
+                };
+                readonly bundleSizeBytes: {
+                    readonly $ref: "#/$defs/ExpectedSizeBytes";
+                };
+                readonly targetGeneration: {
+                    readonly type: "integer";
+                    readonly minimum: 0;
+                    readonly description: "The generation created; 0 in live mode.";
+                };
+                readonly prunedGenerations: {
+                    readonly type: "integer";
+                    readonly minimum: 0;
+                    readonly description: "Old generations removed; 0 in live mode.";
+                };
+                readonly ext: {
+                    readonly $ref: "#/$defs/Ext";
+                };
+            };
+        };
+        readonly Ext: {
+            readonly title: "Ext";
+            readonly description: "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.";
+            readonly type: "object";
+            readonly minProperties: 1;
+            readonly additionalProperties: true;
+            readonly propertyNames: {
+                readonly pattern: "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$";
+            };
+        };
+        readonly ExpectedSizeBytes: {
+            readonly title: "ExpectedSizeBytes";
+            readonly description: "Total byte count of the bundle. A zero-length bundle is not a degenerate success — nothing was serialized — so the floor is 1.";
+            readonly type: "integer";
+            readonly minimum: 1;
+        };
+        readonly ExpectedSha256: {
+            readonly title: "ExpectedSha256";
+            readonly description: "Lowercase hex SHA-256 of the whole bundle's bytes. Kept in the hex form the 1.0 descriptor published rather than moved to DigestMultibase, because it is an unchanged member of an existing descriptor and re-encoding it would break every stream producer for no gain in what it checks. For a chunked transfer it is the check over the reassembled bundle, applied after every chunk has verified individually, so that a correct set of chunks assembled in the wrong order is still caught.";
+            readonly type: "string";
+            readonly pattern: "^[0-9a-f]{64}$";
+        };
+        readonly UploadId: {
+            readonly title: "UploadId";
+            readonly type: "string";
+            readonly pattern: "^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$";
+            readonly description: "Handle for one upload across begin, chunk, commit and abort, and — for a bundle — deploy. Recipient-generated and unguessable, which is what lets a reference to somebody else's upload be answered as not-found without confirming it exists. Opaque: a producer quotes what it was given.";
+        };
+    };
+};
+/**
+ * SPEC.md §7.2 policy for the request variant, from this specification's
+ * front matter. Pass to `consumeInbound` — items 5b, 7 and 8 are
+ * per-specification and cannot be derived from the document alone, and
+ * item 2 needs the schema this carries.
+ */
+export declare const SPEC: {
+    readonly typeUri: "https://trusttasks.org/spec/vtc/website/deploy/0.1";
+    readonly isBearer: false;
+    readonly isProofRequired: true;
+    readonly isRecipientRequired: true;
+    readonly isIssuedAtRequired: true;
+    readonly payloadSchema: {
+        readonly $schema: "https://json-schema.org/draft/2020-12/schema";
+        readonly $id: "https://trusttasks.org/spec/vtc/website/deploy/0.1";
+        readonly title: "VTC Website — Deploy — payload";
+        readonly description: "Publish a staged bundle upload. The outer document members are owned by the framework — SPEC §6.3.";
+        readonly type: "object";
+        readonly additionalProperties: false;
+        readonly required: readonly ["uploadId"];
+        readonly properties: {
+            readonly uploadId: {
+                readonly $ref: "#/$defs/UploadId";
+            };
+            readonly ext: {
+                readonly $ref: "#/$defs/Ext";
+            };
+        };
+        readonly $defs: {
+            readonly Response: {
+                readonly $anchor: "response";
+                readonly title: "VTC Website — Deploy — response payload";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["deployMode", "bundleSha256", "bundleSizeBytes", "targetGeneration", "prunedGenerations"];
+                readonly properties: {
+                    readonly deployMode: {
+                        readonly type: "string";
+                        readonly enum: readonly ["live", "managed"];
+                        readonly description: "How the site was replaced.";
+                    };
+                    readonly bundleSha256: {
+                        readonly $ref: "#/$defs/ExpectedSha256";
+                    };
+                    readonly bundleSizeBytes: {
+                        readonly $ref: "#/$defs/ExpectedSizeBytes";
+                    };
+                    readonly targetGeneration: {
+                        readonly type: "integer";
+                        readonly minimum: 0;
+                        readonly description: "The generation created; 0 in live mode.";
+                    };
+                    readonly prunedGenerations: {
+                        readonly type: "integer";
+                        readonly minimum: 0;
+                        readonly description: "Old generations removed; 0 in live mode.";
+                    };
+                    readonly ext: {
+                        readonly $ref: "#/$defs/Ext";
+                    };
+                };
+            };
+            readonly Ext: {
+                readonly title: "Ext";
+                readonly description: "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.";
+                readonly type: "object";
+                readonly minProperties: 1;
+                readonly additionalProperties: true;
+                readonly propertyNames: {
+                    readonly pattern: "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$";
+                };
+            };
+            readonly ExpectedSizeBytes: {
+                readonly title: "ExpectedSizeBytes";
+                readonly description: "Total byte count of the bundle. A zero-length bundle is not a degenerate success — nothing was serialized — so the floor is 1.";
+                readonly type: "integer";
+                readonly minimum: 1;
+            };
+            readonly ExpectedSha256: {
+                readonly title: "ExpectedSha256";
+                readonly description: "Lowercase hex SHA-256 of the whole bundle's bytes. Kept in the hex form the 1.0 descriptor published rather than moved to DigestMultibase, because it is an unchanged member of an existing descriptor and re-encoding it would break every stream producer for no gain in what it checks. For a chunked transfer it is the check over the reassembled bundle, applied after every chunk has verified individually, so that a correct set of chunks assembled in the wrong order is still caught.";
+                readonly type: "string";
+                readonly pattern: "^[0-9a-f]{64}$";
+            };
+            readonly UploadId: {
+                readonly title: "UploadId";
+                readonly type: "string";
+                readonly pattern: "^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$";
+                readonly description: "Handle for one upload across begin, chunk, commit and abort, and — for a bundle — deploy. Recipient-generated and unguessable, which is what lets a reference to somebody else's upload be answered as not-found without confirming it exists. Opaque: a producer quotes what it was given.";
+            };
+        };
+    };
+};
+/**
+ * SPEC.md §7.2 policy for the success-response variant. `isRecipientRequired`
+ * tracks the *issuer* party's requirement because a response swaps the
+ * parties (§7.3 item 5).
+ */
+export declare const RESPONSE_SPEC: {
+    readonly typeUri: "https://trusttasks.org/spec/vtc/website/deploy/0.1#response";
+    readonly isBearer: false;
+    readonly isProofRequired: true;
+    readonly isRecipientRequired: true;
+    readonly isIssuedAtRequired: true;
+    readonly payloadSchema: {
+        readonly $schema: "https://json-schema.org/draft/2020-12/schema";
+        readonly $ref: "#/$defs/Response";
+        readonly $defs: {
+            readonly Response: {
+                readonly $anchor: "response";
+                readonly title: "VTC Website — Deploy — response payload";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["deployMode", "bundleSha256", "bundleSizeBytes", "targetGeneration", "prunedGenerations"];
+                readonly properties: {
+                    readonly deployMode: {
+                        readonly type: "string";
+                        readonly enum: readonly ["live", "managed"];
+                        readonly description: "How the site was replaced.";
+                    };
+                    readonly bundleSha256: {
+                        readonly $ref: "#/$defs/ExpectedSha256";
+                    };
+                    readonly bundleSizeBytes: {
+                        readonly $ref: "#/$defs/ExpectedSizeBytes";
+                    };
+                    readonly targetGeneration: {
+                        readonly type: "integer";
+                        readonly minimum: 0;
+                        readonly description: "The generation created; 0 in live mode.";
+                    };
+                    readonly prunedGenerations: {
+                        readonly type: "integer";
+                        readonly minimum: 0;
+                        readonly description: "Old generations removed; 0 in live mode.";
+                    };
+                    readonly ext: {
+                        readonly $ref: "#/$defs/Ext";
+                    };
+                };
+            };
+            readonly Ext: {
+                readonly title: "Ext";
+                readonly description: "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.";
+                readonly type: "object";
+                readonly minProperties: 1;
+                readonly additionalProperties: true;
+                readonly propertyNames: {
+                    readonly pattern: "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$";
+                };
+            };
+            readonly ExpectedSizeBytes: {
+                readonly title: "ExpectedSizeBytes";
+                readonly description: "Total byte count of the bundle. A zero-length bundle is not a degenerate success — nothing was serialized — so the floor is 1.";
+                readonly type: "integer";
+                readonly minimum: 1;
+            };
+            readonly ExpectedSha256: {
+                readonly title: "ExpectedSha256";
+                readonly description: "Lowercase hex SHA-256 of the whole bundle's bytes. Kept in the hex form the 1.0 descriptor published rather than moved to DigestMultibase, because it is an unchanged member of an existing descriptor and re-encoding it would break every stream producer for no gain in what it checks. For a chunked transfer it is the check over the reassembled bundle, applied after every chunk has verified individually, so that a correct set of chunks assembled in the wrong order is still caught.";
+                readonly type: "string";
+                readonly pattern: "^[0-9a-f]{64}$";
+            };
+            readonly UploadId: {
+                readonly title: "UploadId";
+                readonly type: "string";
+                readonly pattern: "^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$";
+                readonly description: "Handle for one upload across begin, chunk, commit and abort, and — for a bundle — deploy. Recipient-generated and unguessable, which is what lets a reference to somebody else's upload be answered as not-found without confirming it exists. Opaque: a producer quotes what it was given.";
+            };
+        };
+    };
+};
+//# sourceMappingURL=payload.d.ts.map

package/dist/vtc/website/deploy/0.1/payload.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"payload.d.ts","sourceRoot":"","sources":["../../../../../src/vtc/website/deploy/0.1/payload.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,iBAAiB,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,mCAAmC,CAAC;AAG1G;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,QAAQ,EAAE,QAAQ,CAAC;IACnB,GAAG,CAAC,EAAE,GAAG,CAAC;CACX;AACD,MAAM,WAAW,+BAA+B;IAC9C;;OAEG;IACH,UAAU,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,YAAY,EAAE,cAAc,CAAC;IAC7B,eAAe,EAAE,iBAAiB,CAAC;IACnC;;OAEG;IACH,gBAAgB,EAAE,MAAM,CAAC;IACzB;;OAEG;IACH,iBAAiB,EAAE,MAAM,CAAC;IAC1B,GAAG,CAAC,EAAE,GAAG,CAAC;CACX;AAED,kHAAkH;AAClH,YAAY,EAAE,cAAc,EAAE,iBAAiB,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC;AAEjE,2BAA2B;AAC3B,eAAO,MAAM,QAAQ,EAAG,oDAA6D,CAAC;AAEtF,mEAAmE;AACnE,MAAM,MAAM,OAAO,GAAG,uBAAuB,CAAC;AAE9C,qEAAqE;AACrE,eAAO,MAAM,iBAAiB,EAAG,6DAAsE,CAAC;AAExG,4EAA4E;AAC5E,MAAM,MAAM,QAAQ,GAAG,+BAA+B,CAAC;AAEvD;;;;;;;;GAQG;AACH,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA0FjB,CAAC;AAEX,mEAAmE;AACnE,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA2E1B,CAAC;AAEX;;;;;GAKG;AACH,eAAO,MAAM,IAAI;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAOP,CAAC;AAEX;;;;GAIG;AACH,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAOhB,CAAC"}

package/dist/vtc/website/deploy/0.1/payload.js

@@ -0,0 +1,213 @@
+/**
+ * Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
+ * Source: specs/vtc/website/deploy/0.1/payload.schema.json
+ */
+/** Trust Task type URI. */
+export const TYPE_URI = "https://trusttasks.org/spec/vtc/website/deploy/0.1";
+/** Trust Task response type URI (request type URI + "#response"). */
+export const RESPONSE_TYPE_URI = "https://trusttasks.org/spec/vtc/website/deploy/0.1#response";
+/**
+ * This specification's payload schema, as a value.
+ *
+ * SPEC.md §7.2 item 2 is performed against this. It is shipped as data
+ * rather than only as a `.json` file because TypeScript types are erased
+ * at runtime: without a schema a consumer has nothing to validate, and
+ * every REQUIRED payload member is optional in practice. Cross-file
+ * `$ref`s are already inlined, so it needs no resolver.
+ */
+export const PAYLOAD_SCHEMA = {
+    "$schema": "https://json-schema.org/draft/2020-12/schema",
+    "$id": "https://trusttasks.org/spec/vtc/website/deploy/0.1",
+    "title": "VTC Website — Deploy — payload",
+    "description": "Publish a staged bundle upload. The outer document members are owned by the framework — SPEC §6.3.",
+    "type": "object",
+    "additionalProperties": false,
+    "required": [
+        "uploadId"
+    ],
+    "properties": {
+        "uploadId": {
+            "$ref": "#/$defs/UploadId"
+        },
+        "ext": {
+            "$ref": "#/$defs/Ext"
+        }
+    },
+    "$defs": {
+        "Response": {
+            "$anchor": "response",
+            "title": "VTC Website — Deploy — response payload",
+            "type": "object",
+            "additionalProperties": false,
+            "required": [
+                "deployMode",
+                "bundleSha256",
+                "bundleSizeBytes",
+                "targetGeneration",
+                "prunedGenerations"
+            ],
+            "properties": {
+                "deployMode": {
+                    "type": "string",
+                    "enum": [
+                        "live",
+                        "managed"
+                    ],
+                    "description": "How the site was replaced."
+                },
+                "bundleSha256": {
+                    "$ref": "#/$defs/ExpectedSha256"
+                },
+                "bundleSizeBytes": {
+                    "$ref": "#/$defs/ExpectedSizeBytes"
+                },
+                "targetGeneration": {
+                    "type": "integer",
+                    "minimum": 0,
+                    "description": "The generation created; 0 in live mode."
+                },
+                "prunedGenerations": {
+                    "type": "integer",
+                    "minimum": 0,
+                    "description": "Old generations removed; 0 in live mode."
+                },
+                "ext": {
+                    "$ref": "#/$defs/Ext"
+                }
+            }
+        },
+        "Ext": {
+            "title": "Ext",
+            "description": "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.",
+            "type": "object",
+            "minProperties": 1,
+            "additionalProperties": true,
+            "propertyNames": {
+                "pattern": "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$"
+            }
+        },
+        "ExpectedSizeBytes": {
+            "title": "ExpectedSizeBytes",
+            "description": "Total byte count of the bundle. A zero-length bundle is not a degenerate success — nothing was serialized — so the floor is 1.",
+            "type": "integer",
+            "minimum": 1
+        },
+        "ExpectedSha256": {
+            "title": "ExpectedSha256",
+            "description": "Lowercase hex SHA-256 of the whole bundle's bytes. Kept in the hex form the 1.0 descriptor published rather than moved to DigestMultibase, because it is an unchanged member of an existing descriptor and re-encoding it would break every stream producer for no gain in what it checks. For a chunked transfer it is the check over the reassembled bundle, applied after every chunk has verified individually, so that a correct set of chunks assembled in the wrong order is still caught.",
+            "type": "string",
+            "pattern": "^[0-9a-f]{64}$"
+        },
+        "UploadId": {
+            "title": "UploadId",
+            "type": "string",
+            "pattern": "^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$",
+            "description": "Handle for one upload across begin, chunk, commit and abort, and — for a bundle — deploy. Recipient-generated and unguessable, which is what lets a reference to somebody else's upload be answered as not-found without confirming it exists. Opaque: a producer quotes what it was given."
+        }
+    }
+};
+/** As {@link PAYLOAD_SCHEMA}, for the success-response variant. */
+export const RESPONSE_PAYLOAD_SCHEMA = {
+    "$schema": "https://json-schema.org/draft/2020-12/schema",
+    "$ref": "#/$defs/Response",
+    "$defs": {
+        "Response": {
+            "$anchor": "response",
+            "title": "VTC Website — Deploy — response payload",
+            "type": "object",
+            "additionalProperties": false,
+            "required": [
+                "deployMode",
+                "bundleSha256",
+                "bundleSizeBytes",
+                "targetGeneration",
+                "prunedGenerations"
+            ],
+            "properties": {
+                "deployMode": {
+                    "type": "string",
+                    "enum": [
+                        "live",
+                        "managed"
+                    ],
+                    "description": "How the site was replaced."
+                },
+                "bundleSha256": {
+                    "$ref": "#/$defs/ExpectedSha256"
+                },
+                "bundleSizeBytes": {
+                    "$ref": "#/$defs/ExpectedSizeBytes"
+                },
+                "targetGeneration": {
+                    "type": "integer",
+                    "minimum": 0,
+                    "description": "The generation created; 0 in live mode."
+                },
+                "prunedGenerations": {
+                    "type": "integer",
+                    "minimum": 0,
+                    "description": "Old generations removed; 0 in live mode."
+                },
+                "ext": {
+                    "$ref": "#/$defs/Ext"
+                }
+            }
+        },
+        "Ext": {
+            "title": "Ext",
+            "description": "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.",
+            "type": "object",
+            "minProperties": 1,
+            "additionalProperties": true,
+            "propertyNames": {
+                "pattern": "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$"
+            }
+        },
+        "ExpectedSizeBytes": {
+            "title": "ExpectedSizeBytes",
+            "description": "Total byte count of the bundle. A zero-length bundle is not a degenerate success — nothing was serialized — so the floor is 1.",
+            "type": "integer",
+            "minimum": 1
+        },
+        "ExpectedSha256": {
+            "title": "ExpectedSha256",
+            "description": "Lowercase hex SHA-256 of the whole bundle's bytes. Kept in the hex form the 1.0 descriptor published rather than moved to DigestMultibase, because it is an unchanged member of an existing descriptor and re-encoding it would break every stream producer for no gain in what it checks. For a chunked transfer it is the check over the reassembled bundle, applied after every chunk has verified individually, so that a correct set of chunks assembled in the wrong order is still caught.",
+            "type": "string",
+            "pattern": "^[0-9a-f]{64}$"
+        },
+        "UploadId": {
+            "title": "UploadId",
+            "type": "string",
+            "pattern": "^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$",
+            "description": "Handle for one upload across begin, chunk, commit and abort, and — for a bundle — deploy. Recipient-generated and unguessable, which is what lets a reference to somebody else's upload be answered as not-found without confirming it exists. Opaque: a producer quotes what it was given."
+        }
+    }
+};
+/**
+ * SPEC.md §7.2 policy for the request variant, from this specification's
+ * front matter. Pass to `consumeInbound` — items 5b, 7 and 8 are
+ * per-specification and cannot be derived from the document alone, and
+ * item 2 needs the schema this carries.
+ */
+export const SPEC = {
+    typeUri: TYPE_URI,
+    isBearer: false,
+    isProofRequired: true,
+    isRecipientRequired: true,
+    isIssuedAtRequired: true,
+    payloadSchema: PAYLOAD_SCHEMA,
+};
+/**
+ * SPEC.md §7.2 policy for the success-response variant. `isRecipientRequired`
+ * tracks the *issuer* party's requirement because a response swaps the
+ * parties (§7.3 item 5).
+ */
+export const RESPONSE_SPEC = {
+    typeUri: RESPONSE_TYPE_URI,
+    isBearer: false,
+    isProofRequired: true,
+    isRecipientRequired: true,
+    isIssuedAtRequired: true,
+    payloadSchema: RESPONSE_PAYLOAD_SCHEMA,
+};
+//# sourceMappingURL=payload.js.map

package/dist/vtc/website/deploy/0.1/payload.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"payload.js","sourceRoot":"","sources":["../../../../../src/vtc/website/deploy/0.1/payload.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAiCH,2BAA2B;AAC3B,MAAM,CAAC,MAAM,QAAQ,GAAG,oDAA6D,CAAC;AAKtF,qEAAqE;AACrE,MAAM,CAAC,MAAM,iBAAiB,GAAG,6DAAsE,CAAC;AAKxG;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,SAAS,EAAE,8CAA8C;IACzD,KAAK,EAAE,oDAAoD;IAC3D,OAAO,EAAE,gCAAgC;IACzC,aAAa,EAAE,oGAAoG;IACnH,MAAM,EAAE,QAAQ;IAChB,sBAAsB,EAAE,KAAK;IAC7B,UAAU,EAAE;QACV,UAAU;KACX;IACD,YAAY,EAAE;QACZ,UAAU,EAAE;YACV,MAAM,EAAE,kBAAkB;SAC3B;QACD,KAAK,EAAE;YACL,MAAM,EAAE,aAAa;SACtB;KACF;IACD,OAAO,EAAE;QACP,UAAU,EAAE;YACV,SAAS,EAAE,UAAU;YACrB,OAAO,EAAE,yCAAyC;YAClD,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,YAAY;gBACZ,cAAc;gBACd,iBAAiB;gBACjB,kBAAkB;gBAClB,mBAAmB;aACpB;YACD,YAAY,EAAE;gBACZ,YAAY,EAAE;oBACZ,MAAM,EAAE,QAAQ;oBAChB,MAAM,EAAE;wBACN,MAAM;wBACN,SAAS;qBACV;oBACD,aAAa,EAAE,4BAA4B;iBAC5C;gBACD,cAAc,EAAE;oBACd,MAAM,EAAE,wBAAwB;iBACjC;gBACD,iBAAiB,EAAE;oBACjB,MAAM,EAAE,2BAA2B;iBACpC;gBACD,kBAAkB,EAAE;oBAClB,MAAM,EAAE,SAAS;oBACjB,SAAS,EAAE,CAAC;oBACZ,aAAa,EAAE,yCAAyC;iBACzD;gBACD,mBAAmB,EAAE;oBACnB,MAAM,EAAE,SAAS;oBACjB,SAAS,EAAE,CAAC;oBACZ,aAAa,EAAE,0CAA0C;iBAC1D;gBACD,KAAK,EAAE;oBACL,MAAM,EAAE,aAAa;iBACtB;aACF;SACF;QACD,KAAK,EAAE;YACL,OAAO,EAAE,KAAK;YACd,aAAa,EAAE,uKAAuK;YACtL,MAAM,EAAE,QAAQ;YAChB,eAAe,EAAE,CAAC;YAClB,sBAAsB,EAAE,IAAI;YAC5B,eAAe,EAAE;gBACf,SAAS,EAAE,mCAAmC;aAC/C;SACF;QACD,mBAAmB,EAAE;YACnB,OAAO,EAAE,mBAAmB;YAC5B,aAAa,EAAE,gIAAgI;YAC/I,MAAM,EAAE,SAAS;YACjB,SAAS,EAAE,CAAC;SACb;QACD,gBAAgB,EAAE;YAChB,OAAO,EAAE,gBAAgB;YACzB,aAAa,EAAE,meAAme;YAClf,MAAM,EAAE,QAAQ;YAChB,SAAS,EAAE,gBAAgB;SAC5B;QACD,UAAU,EAAE;YACV,OAAO,EAAE,UAAU;YACnB,MAAM,EAAE,QAAQ;YAChB,SAAS,EAAE,+EAA+E;YAC1F,aAAa,EAAE,6RAA6R;SAC7S;KACF;CACO,CAAC;AAEX,mEAAmE;AACnE,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,SAAS,EAAE,8CAA8C;IACzD,MAAM,EAAE,kBAAkB;IAC1B,OAAO,EAAE;QACP,UAAU,EAAE;YACV,SAAS,EAAE,UAAU;YACrB,OAAO,EAAE,yCAAyC;YAClD,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,YAAY;gBACZ,cAAc;gBACd,iBAAiB;gBACjB,kBAAkB;gBAClB,mBAAmB;aACpB;YACD,YAAY,EAAE;gBACZ,YAAY,EAAE;oBACZ,MAAM,EAAE,QAAQ;oBAChB,MAAM,EAAE;wBACN,MAAM;wBACN,SAAS;qBACV;oBACD,aAAa,EAAE,4BAA4B;iBAC5C;gBACD,cAAc,EAAE;oBACd,MAAM,EAAE,wBAAwB;iBACjC;gBACD,iBAAiB,EAAE;oBACjB,MAAM,EAAE,2BAA2B;iBACpC;gBACD,kBAAkB,EAAE;oBAClB,MAAM,EAAE,SAAS;oBACjB,SAAS,EAAE,CAAC;oBACZ,aAAa,EAAE,yCAAyC;iBACzD;gBACD,mBAAmB,EAAE;oBACnB,MAAM,EAAE,SAAS;oBACjB,SAAS,EAAE,CAAC;oBACZ,aAAa,EAAE,0CAA0C;iBAC1D;gBACD,KAAK,EAAE;oBACL,MAAM,EAAE,aAAa;iBACtB;aACF;SACF;QACD,KAAK,EAAE;YACL,OAAO,EAAE,KAAK;YACd,aAAa,EAAE,uKAAuK;YACtL,MAAM,EAAE,QAAQ;YAChB,eAAe,EAAE,CAAC;YAClB,sBAAsB,EAAE,IAAI;YAC5B,eAAe,EAAE;gBACf,SAAS,EAAE,mCAAmC;aAC/C;SACF;QACD,mBAAmB,EAAE;YACnB,OAAO,EAAE,mBAAmB;YAC5B,aAAa,EAAE,gIAAgI;YAC/I,MAAM,EAAE,SAAS;YACjB,SAAS,EAAE,CAAC;SACb;QACD,gBAAgB,EAAE;YAChB,OAAO,EAAE,gBAAgB;YACzB,aAAa,EAAE,meAAme;YAClf,MAAM,EAAE,QAAQ;YAChB,SAAS,EAAE,gBAAgB;SAC5B;QACD,UAAU,EAAE;YACV,OAAO,EAAE,UAAU;YACnB,MAAM,EAAE,QAAQ;YAChB,SAAS,EAAE,+EAA+E;YAC1F,aAAa,EAAE,6RAA6R;SAC7S;KACF;CACO,CAAC;AAEX;;;;;GAKG;AACH,MAAM,CAAC,MAAM,IAAI,GAAG;IAClB,OAAO,EAAE,QAAQ;IACjB,QAAQ,EAAE,KAAK;IACf,eAAe,EAAE,IAAI;IACrB,mBAAmB,EAAE,IAAI;IACzB,kBAAkB,EAAE,IAAI;IACxB,aAAa,EAAE,cAAc;CACrB,CAAC;AAEX;;;;GAIG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,OAAO,EAAE,iBAAiB;IAC1B,QAAQ,EAAE,KAAK;IACf,eAAe,EAAE,IAAI;IACrB,mBAAmB,EAAE,IAAI;IACzB,kBAAkB,EAAE,IAAI;IACxB,aAAa,EAAE,uBAAuB;CAC9B,CAAC"}