@openvtc/trust-tasks 0.21.11 → 0.21.13

package/src/auth/signing-key/revoke/0.1/payload.ts

@@ -0,0 +1,204 @@
+/**
+ * Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
+ * Source: specs/auth/signing-key/revoke/0.1/payload.schema.json
+ */
+
+import type { Ext, SigningKeyDid } from "../../../../_shared/components.js";
+
+
+/**
+ * Revoke one signing-key delegation, by its key. The next document the key signs is refused. The outer document members are owned by the framework — SPEC §6.3.
+ */
+export interface AuthSigningKeyRevokePayload {
+  signingKeyDid: SigningKeyDid;
+  ext?: Ext;
+}
+export interface AuthSigningKeyRevokeResponsePayload {
+  signingKeyDid: SigningKeyDid;
+  /**
+   * When the delegation was revoked. For a delegation that was already revoked, the original instant: a revoke of a revoked key succeeds and changes nothing.
+   */
+  revokedAt: string;
+  /**
+   * How many of the owning identity's delegations are still active. Zero is a legitimate state: losing every delegated key costs an identity the delegated signing path, not its own standing or its other credentials.
+   */
+  remainingActive: number;
+  ext?: Ext;
+}
+
+/** Shared definitions this specification references, re-exported under the names it used to declare them with. */
+export type { Ext, SigningKeyDid };
+
+/** Trust Task type URI. */
+export const TYPE_URI = "https://trusttasks.org/spec/auth/signing-key/revoke/0.1" as const;
+
+/** Stable alias for this specification's request payload shape. */
+export type Payload = AuthSigningKeyRevokePayload;
+
+/** Trust Task response type URI (request type URI + "#response"). */
+export const RESPONSE_TYPE_URI = "https://trusttasks.org/spec/auth/signing-key/revoke/0.1#response" as const;
+
+/** Stable alias for this specification's success-response payload shape. */
+export type Response = AuthSigningKeyRevokeResponsePayload;
+
+/**
+ * This specification's payload schema, as a value.
+ *
+ * SPEC.md §7.2 item 2 is performed against this. It is shipped as data
+ * rather than only as a `.json` file because TypeScript types are erased
+ * at runtime: without a schema a consumer has nothing to validate, and
+ * every REQUIRED payload member is optional in practice. Cross-file
+ * `$ref`s are already inlined, so it needs no resolver.
+ */
+export const PAYLOAD_SCHEMA = {
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://trusttasks.org/spec/auth/signing-key/revoke/0.1",
+  "title": "Auth — Signing Key Revoke — payload",
+  "description": "Revoke one signing-key delegation, by its key. The next document the key signs is refused. The outer document members are owned by the framework — SPEC §6.3.",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "signingKeyDid"
+  ],
+  "properties": {
+    "signingKeyDid": {
+      "$ref": "#/$defs/SigningKeyDid"
+    },
+    "ext": {
+      "$ref": "#/$defs/Ext"
+    }
+  },
+  "$defs": {
+    "Response": {
+      "$anchor": "response",
+      "title": "Auth — Signing Key Revoke — response payload",
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "signingKeyDid",
+        "revokedAt",
+        "remainingActive"
+      ],
+      "properties": {
+        "signingKeyDid": {
+          "$ref": "#/$defs/SigningKeyDid"
+        },
+        "revokedAt": {
+          "type": "string",
+          "format": "date-time",
+          "description": "When the delegation was revoked. For a delegation that was already revoked, the original instant: a revoke of a revoked key succeeds and changes nothing."
+        },
+        "remainingActive": {
+          "type": "integer",
+          "minimum": 0,
+          "description": "How many of the owning identity's delegations are still active. Zero is a legitimate state: losing every delegated key costs an identity the delegated signing path, not its own standing or its other credentials."
+        },
+        "ext": {
+          "$ref": "#/$defs/Ext"
+        }
+      }
+    },
+    "Ext": {
+      "title": "Ext",
+      "description": "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.",
+      "type": "object",
+      "minProperties": 1,
+      "additionalProperties": true,
+      "propertyNames": {
+        "pattern": "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$"
+      }
+    },
+    "SigningKeyDid": {
+      "title": "SigningKeyDid",
+      "type": "string",
+      "minLength": 9,
+      "maxLength": 256,
+      "pattern": "^did:key:z[1-9A-HJ-NP-Za-km-z]+$",
+      "description": "The delegated key, as a `did:key` — an Ed25519 multikey (`z6Mk…`) derived from the public half of a keypair the holder generated for itself, typically a non-extractable browser key. `did:key` only, because its document is a function of the key and resolves with no network: a key whose DID document could be rewritten after enrolment is not the key that was enrolled."
+    }
+  }
+} as const;
+
+/** As {@link PAYLOAD_SCHEMA}, for the success-response variant. */
+export const RESPONSE_PAYLOAD_SCHEMA = {
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$ref": "#/$defs/Response",
+  "$defs": {
+    "Response": {
+      "$anchor": "response",
+      "title": "Auth — Signing Key Revoke — response payload",
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "signingKeyDid",
+        "revokedAt",
+        "remainingActive"
+      ],
+      "properties": {
+        "signingKeyDid": {
+          "$ref": "#/$defs/SigningKeyDid"
+        },
+        "revokedAt": {
+          "type": "string",
+          "format": "date-time",
+          "description": "When the delegation was revoked. For a delegation that was already revoked, the original instant: a revoke of a revoked key succeeds and changes nothing."
+        },
+        "remainingActive": {
+          "type": "integer",
+          "minimum": 0,
+          "description": "How many of the owning identity's delegations are still active. Zero is a legitimate state: losing every delegated key costs an identity the delegated signing path, not its own standing or its other credentials."
+        },
+        "ext": {
+          "$ref": "#/$defs/Ext"
+        }
+      }
+    },
+    "Ext": {
+      "title": "Ext",
+      "description": "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.",
+      "type": "object",
+      "minProperties": 1,
+      "additionalProperties": true,
+      "propertyNames": {
+        "pattern": "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$"
+      }
+    },
+    "SigningKeyDid": {
+      "title": "SigningKeyDid",
+      "type": "string",
+      "minLength": 9,
+      "maxLength": 256,
+      "pattern": "^did:key:z[1-9A-HJ-NP-Za-km-z]+$",
+      "description": "The delegated key, as a `did:key` — an Ed25519 multikey (`z6Mk…`) derived from the public half of a keypair the holder generated for itself, typically a non-extractable browser key. `did:key` only, because its document is a function of the key and resolves with no network: a key whose DID document could be rewritten after enrolment is not the key that was enrolled."
+    }
+  }
+} as const;
+
+/**
+ * SPEC.md §7.2 policy for the request variant, from this specification's
+ * front matter. Pass to `consumeInbound` — items 5b, 7 and 8 are
+ * per-specification and cannot be derived from the document alone, and
+ * item 2 needs the schema this carries.
+ */
+export const SPEC = {
+  typeUri: TYPE_URI,
+  isBearer: false,
+  isProofRequired: true,
+  isRecipientRequired: true,
+  isIssuedAtRequired: true,
+  payloadSchema: PAYLOAD_SCHEMA,
+} as const;
+
+/**
+ * SPEC.md §7.2 policy for the success-response variant. `isRecipientRequired`
+ * tracks the *issuer* party's requirement because a response swaps the
+ * parties (§7.3 item 5).
+ */
+export const RESPONSE_SPEC = {
+  typeUri: RESPONSE_TYPE_URI,
+  isBearer: false,
+  isProofRequired: true,
+  isRecipientRequired: true,
+  isIssuedAtRequired: true,
+  payloadSchema: RESPONSE_PAYLOAD_SCHEMA,
+} as const;

package/src/index.ts

@@ -27,6 +27,7 @@ export * as AuditList_v0_1 from "./audit/list/0.1/payload.js";
 export * as AuditVerify_v0_1 from "./audit/verify/0.1/payload.js";
 export * as PasskeyInviteShared_v0_1 from "./auth/_shared/0.1/passkey-invite.js";
 export * as SessionShared_v0_1 from "./auth/_shared/0.1/session.js";
+export * as SigningKeyShared_v0_1 from "./auth/_shared/0.1/signing-key.js";
 export * as TokensShared_v0_1 from "./auth/_shared/0.1/tokens.js";
 export * as WebauthnShared_v0_1 from "./auth/_shared/0.1/webauthn.js";
 export * as SessionShared_v0_2 from "./auth/_shared/0.2/session.js";
@@ -58,6 +59,9 @@ export * as AuthRefresh_v0_1 from "./auth/refresh/0.1/payload.js";
 export * as AuthRevokeSession_v0_1 from "./auth/revoke-session/0.1/payload.js";
 export * as AuthRevokeSession_v0_2 from "./auth/revoke-session/0.2/payload.js";
 export * as AuthSessionsList_v0_1 from "./auth/sessions/list/0.1/payload.js";
+export * as AuthSigningKeyEnroll_v0_1 from "./auth/signing-key/enroll/0.1/payload.js";
+export * as AuthSigningKeyList_v0_1 from "./auth/signing-key/list/0.1/payload.js";
+export * as AuthSigningKeyRevoke_v0_1 from "./auth/signing-key/revoke/0.1/payload.js";
 export * as AuthStepUpApproveRequest_v0_1 from "./auth/step-up/approve-request/0.1/payload.js";
 export * as AuthStepUpApproveRequest_v0_2 from "./auth/step-up/approve-request/0.2/payload.js";
 export * as AuthStepUpApproveRequest_v0_3 from "./auth/step-up/approve-request/0.3/payload.js";
@@ -498,6 +502,7 @@ export * as VtaContextsList_v1_0 from "./vta/contexts/list/1.0/payload.js";
 export * as VtaContextsPreviewDelete_v1_0 from "./vta/contexts/preview-delete/1.0/payload.js";
 export * as VtaContextsSecrets_v1_0 from "./vta/contexts/secrets/1.0/payload.js";
 export * as VtaContextsUpdateDid_v1_0 from "./vta/contexts/update-did/1.0/payload.js";
+export * as VtaContextsUpdateDid_v1_1 from "./vta/contexts/update-did/1.1/payload.js";
 export * as VtaContextsUpdate_v1_0 from "./vta/contexts/update/1.0/payload.js";
 export * as VtaCredentialsIssue_v0_1 from "./vta/credentials/issue/0.1/payload.js";
 export * as VtaCredentialsIssue_v0_2 from "./vta/credentials/issue/0.2/payload.js";
@@ -568,6 +573,7 @@ export * as VtaWebvhServersRemove_v1_0 from "./vta/webvh/servers/remove/1.0/payl
 export * as VtaWebvhServersRetireOrphan_v0_1 from "./vta/webvh/servers/retire-orphan/0.1/payload.js";
 export * as BackupShared_v0_1 from "./vtc/_shared/0.1/backup.js";
 export * as CeremonyShared_v0_1 from "./vtc/_shared/0.1/ceremony.js";
+export * as CommunityPresentationShared_v0_1 from "./vtc/_shared/0.1/community-presentation.js";
 export * as CommunityShared_v0_1 from "./vtc/_shared/0.1/community.js";
 export * as ConfigPortabilityShared_v0_1 from "./vtc/_shared/0.1/config-portability.js";
 export * as EndorsementTypeShared_v0_1 from "./vtc/_shared/0.1/endorsement-type.js";
@@ -576,7 +582,11 @@ export * as InvitationShared_v0_1 from "./vtc/_shared/0.1/invitation.js";
 export * as InviteShared_v0_1 from "./vtc/_shared/0.1/invite.js";
 export * as JoinRequestShared_v0_1 from "./vtc/_shared/0.1/join-request.js";
 export * as MemberShared_v0_1 from "./vtc/_shared/0.1/member.js";
+export * as RelationshipLifecycleShared_v0_1 from "./vtc/_shared/0.1/relationship-lifecycle.js";
+export * as SchemaRegistryShared_v0_1 from "./vtc/_shared/0.1/schema-registry.js";
 export * as VetterProfileShared_v0_1 from "./vtc/_shared/0.1/vetter-profile.js";
+export * as VettingAutoGrantShared_v0_1 from "./vtc/_shared/0.1/vetting-auto-grant.js";
+export * as WebsiteTransferShared_v0_1 from "./vtc/_shared/0.1/website-transfer.js";
 export * as VtcAdminBootstrap_v0_1 from "./vtc/admin/bootstrap/0.1/payload.js";
 export * as VtcAdminInvitesCreate_v0_1 from "./vtc/admin/invites/create/0.1/payload.js";
 export * as VtcAdminInvitesList_v0_1 from "./vtc/admin/invites/list/0.1/payload.js";
@@ -588,8 +598,14 @@ export * as VtcAuthRecogniseChallenge_v0_1 from "./vtc/auth/recognise/challenge/
 export * as VtcBackupExport_v0_1 from "./vtc/backup/export/0.1/payload.js";
 export * as VtcBackupImport_v0_1 from "./vtc/backup/import/0.1/payload.js";
 export * as VtcCeremoniesList_v0_1 from "./vtc/ceremonies/list/0.1/payload.js";
+export * as VtcCommunityBrandingShow_v0_1 from "./vtc/community/branding/show/0.1/payload.js";
+export * as VtcCommunityBrandingUpdate_v0_1 from "./vtc/community/branding/update/0.1/payload.js";
+export * as VtcCommunityJoinDiscoveryShow_v0_1 from "./vtc/community/join-discovery/show/0.1/payload.js";
+export * as VtcCommunityJoinDiscoveryUpdate_v0_1 from "./vtc/community/join-discovery/update/0.1/payload.js";
 export * as VtcCommunityProfileShow_v0_1 from "./vtc/community/profile/show/0.1/payload.js";
 export * as VtcCommunityProfileUpdate_v0_1 from "./vtc/community/profile/update/0.1/payload.js";
+export * as VtcCommunityRequestedAttributesShow_v0_1 from "./vtc/community/requested-attributes/show/0.1/payload.js";
+export * as VtcCommunityRequestedAttributesUpdate_v0_1 from "./vtc/community/requested-attributes/update/0.1/payload.js";
 export * as VtcConfigExport_v0_1 from "./vtc/config/export/0.1/payload.js";
 export * as VtcConfigImport_v0_1 from "./vtc/config/import/0.1/payload.js";
 export * as VtcCredentialsReissue_v0_1 from "./vtc/credentials/reissue/0.1/payload.js";
@@ -615,6 +631,7 @@ export * as VtcJoinRequestsDecide_v0_1 from "./vtc/join-requests/decide/0.1/payl
 export * as VtcJoinRequestsList_v0_1 from "./vtc/join-requests/list/0.1/payload.js";
 export * as VtcJoinRequestsManifest_v0_1 from "./vtc/join-requests/manifest/0.1/payload.js";
 export * as VtcJoinRequestsManifest_v0_2 from "./vtc/join-requests/manifest/0.2/payload.js";
+export * as VtcJoinRequestsQuery_v0_1 from "./vtc/join-requests/query/0.1/payload.js";
 export * as VtcJoinRequestsReject_v0_1 from "./vtc/join-requests/reject/0.1/payload.js";
 export * as VtcJoinRequestsShow_v0_1 from "./vtc/join-requests/show/0.1/payload.js";
 export * as VtcJoinRequestsStatus_v0_1 from "./vtc/join-requests/status/0.1/payload.js";
@@ -622,6 +639,7 @@ export * as VtcJoinRequestsSubmitReceipt_v0_1 from "./vtc/join-requests/submit-r
 export * as VtcJoinRequestsSubmit_v0_1 from "./vtc/join-requests/submit/0.1/payload.js";
 export * as VtcJoinRequestsSubmit_v0_2 from "./vtc/join-requests/submit/0.2/payload.js";
 export * as VtcJoinRequestsSupplement_v0_1 from "./vtc/join-requests/supplement/0.1/payload.js";
+export * as VtcJoinRequestsVettingShow_v0_1 from "./vtc/join-requests/vetting/show/0.1/payload.js";
 export * as VtcJoinRequestsWithdraw_v0_1 from "./vtc/join-requests/withdraw/0.1/payload.js";
 export * as VtcMembersAdminRemove_v0_1 from "./vtc/members/admin-remove/0.1/payload.js";
 export * as VtcMembersCredentials_v0_1 from "./vtc/members/credentials/0.1/payload.js";
@@ -657,21 +675,42 @@ export * as VtcRelationshipsPublish_v0_1 from "./vtc/relationships/publish/0.1/p
 export * as VtcRelationshipsPublish_v0_2 from "./vtc/relationships/publish/0.2/payload.js";
 export * as VtcRelationshipsRequest_v0_1 from "./vtc/relationships/request/0.1/payload.js";
 export * as VtcRelationshipsRequest_v0_2 from "./vtc/relationships/request/0.2/payload.js";
+export * as VtcRelationshipsRestore_v0_1 from "./vtc/relationships/restore/0.1/payload.js";
 export * as VtcRelationshipsRevoke_v0_1 from "./vtc/relationships/revoke/0.1/payload.js";
+export * as VtcRelationshipsSuspend_v0_1 from "./vtc/relationships/suspend/0.1/payload.js";
+export * as VtcRoomsList_v0_1 from "./vtc/rooms/list/0.1/payload.js";
+export * as VtcSchemasAcceptsDelete_v0_1 from "./vtc/schemas/accepts/delete/0.1/payload.js";
+export * as VtcSchemasAcceptsList_v0_1 from "./vtc/schemas/accepts/list/0.1/payload.js";
+export * as VtcSchemasAcceptsRegister_v0_1 from "./vtc/schemas/accepts/register/0.1/payload.js";
+export * as VtcSchemasAcceptsShow_v0_1 from "./vtc/schemas/accepts/show/0.1/payload.js";
+export * as VtcSchemasDelete_v0_1 from "./vtc/schemas/delete/0.1/payload.js";
+export * as VtcSchemasList_v0_1 from "./vtc/schemas/list/0.1/payload.js";
+export * as VtcSchemasRegister_v0_1 from "./vtc/schemas/register/0.1/payload.js";
+export * as VtcSchemasShow_v0_1 from "./vtc/schemas/show/0.1/payload.js";
+export * as VtcVettingAutoGrantShow_v0_1 from "./vtc/vetting/auto-grant/show/0.1/payload.js";
+export * as VtcVettingAutoGrantUpdate_v0_1 from "./vtc/vetting/auto-grant/update/0.1/payload.js";
 export * as VtcVettingPcsChallenge_v0_1 from "./vtc/vetting/pcs-challenge/0.1/payload.js";
+export * as VtcVettingRevocationsList_v0_1 from "./vtc/vetting/revocations/list/0.1/payload.js";
 export * as VtcVettingRevokeStatement_v0_1 from "./vtc/vetting/revoke-statement/0.1/payload.js";
 export * as VtcVettingVettersEventMode_v0_1 from "./vtc/vetting/vetters/event-mode/0.1/payload.js";
 export * as VtcVettingVettersGrant_v0_1 from "./vtc/vetting/vetters/grant/0.1/payload.js";
+export * as VtcVettingVettersGrantsList_v0_1 from "./vtc/vetting/vetters/grants/list/0.1/payload.js";
 export * as VtcVettingVettersList_v0_1 from "./vtc/vetting/vetters/list/0.1/payload.js";
 export * as VtcVettingVettersPcsRoot_v0_1 from "./vtc/vetting/vetters/pcs-root/0.1/payload.js";
 export * as VtcVettingVettersPcsTokens_v0_1 from "./vtc/vetting/vetters/pcs-tokens/0.1/payload.js";
 export * as VtcVettingVettersProfile_v0_1 from "./vtc/vetting/vetters/profile/0.1/payload.js";
 export * as VtcVettingVettersResend_v0_1 from "./vtc/vetting/vetters/resend/0.1/payload.js";
 export * as VtcVettingVettersShow_v0_1 from "./vtc/vetting/vetters/show/0.1/payload.js";
+export * as VtcWebsiteDeploy_v0_1 from "./vtc/website/deploy/0.1/payload.js";
 export * as VtcWebsiteFilesDelete_v0_1 from "./vtc/website/files/delete/0.1/payload.js";
 export * as VtcWebsiteFilesList_v0_1 from "./vtc/website/files/list/0.1/payload.js";
+export * as VtcWebsiteFilesShow_v0_1 from "./vtc/website/files/show/0.1/payload.js";
 export * as VtcWebsiteGenerationsList_v0_1 from "./vtc/website/generations/list/0.1/payload.js";
 export * as VtcWebsiteRollback_v0_1 from "./vtc/website/rollback/0.1/payload.js";
+export * as VtcWebsiteUploadAbort_v0_1 from "./vtc/website/upload/abort/0.1/payload.js";
+export * as VtcWebsiteUploadBegin_v0_1 from "./vtc/website/upload/begin/0.1/payload.js";
+export * as VtcWebsiteUploadChunk_v0_1 from "./vtc/website/upload/chunk/0.1/payload.js";
+export * as VtcWebsiteUploadCommit_v0_1 from "./vtc/website/upload/commit/0.1/payload.js";
 export * as SyncUpdateShared_v0_1 from "./webvh/_shared/0.1/sync-update.js";
 export * as WitnessKeyShared_v0_1 from "./webvh/_shared/0.1/witness-key.js";
 export * as WebvhSyncBatch_v0_1 from "./webvh/sync/batch/0.1/payload.js";

package/src/vta/contexts/update-did/1.1/payload.ts

@@ -0,0 +1,256 @@
+/**
+ * Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
+ * Source: specs/vta/contexts/update-did/1.1/payload.schema.json
+ */
+
+import type { ContextRecord, Ext } from "../../../../_shared/components.js";
+
+
+export interface VTAContextsUpdateDIDPayload {
+  /**
+   * Context whose DID is being set.
+   */
+  id: string;
+  /**
+   * The DID this context acts as from now on, or `null` to leave the context with no DID of its own. A string MUST be a DID per DID Core §3.1 (`did:` method-name `:` method-specific-id); `pattern` applies to strings only, so `null` is not constrained by it. Anything that authenticated or signed as the previous DID keeps referring to it; this task does not migrate those references, and a consumer MUST NOT imply that it does.
+   */
+  did: string | null;
+  ext?: Ext;
+}
+
+/** Shared definitions this specification references, re-exported under the names it used to declare them with. */
+export type { ContextRecord, Ext };
+
+/** Trust Task type URI. */
+export const TYPE_URI = "https://trusttasks.org/spec/vta/contexts/update-did/1.1" as const;
+
+/** Stable alias for this specification's request payload shape. */
+export type Payload = VTAContextsUpdateDIDPayload;
+
+/** Trust Task response type URI (request type URI + "#response"). */
+export const RESPONSE_TYPE_URI = "https://trusttasks.org/spec/vta/contexts/update-did/1.1#response" as const;
+
+/** Stable alias for this specification's success-response payload shape. */
+export type Response = ContextRecord;
+
+/**
+ * This specification's payload schema, as a value.
+ *
+ * SPEC.md §7.2 item 2 is performed against this. It is shipped as data
+ * rather than only as a `.json` file because TypeScript types are erased
+ * at runtime: without a schema a consumer has nothing to validate, and
+ * every REQUIRED payload member is optional in practice. Cross-file
+ * `$ref`s are already inlined, so it needs no resolver.
+ */
+export const PAYLOAD_SCHEMA = {
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://trusttasks.org/spec/vta/contexts/update-did/1.1",
+  "title": "VTA Contexts Update-DID — payload",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "id",
+    "did"
+  ],
+  "properties": {
+    "id": {
+      "type": "string",
+      "minLength": 1,
+      "description": "Context whose DID is being set."
+    },
+    "did": {
+      "type": [
+        "string",
+        "null"
+      ],
+      "pattern": "^did:[a-z0-9]+:(?:(?:[A-Za-z0-9._-]|%[0-9A-Fa-f]{2})*:)*(?:[A-Za-z0-9._-]|%[0-9A-Fa-f]{2})+$",
+      "description": "The DID this context acts as from now on, or `null` to leave the context with no DID of its own. A string MUST be a DID per DID Core §3.1 (`did:` method-name `:` method-specific-id); `pattern` applies to strings only, so `null` is not constrained by it. Anything that authenticated or signed as the previous DID keeps referring to it; this task does not migrate those references, and a consumer MUST NOT imply that it does."
+    },
+    "ext": {
+      "$ref": "#/$defs/Ext"
+    }
+  },
+  "$defs": {
+    "Response": {
+      "$anchor": "response",
+      "title": "VTA Contexts Update-DID — response payload",
+      "description": "Success response to vta/contexts/update-did: the context as it now stands. Type https://trusttasks.org/spec/vta/contexts/update-did/1.1#response.",
+      "$ref": "#/$defs/ContextRecord"
+    },
+    "ContextRecord": {
+      "title": "ContextRecord",
+      "description": "A context as the VTA holds it.",
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "id",
+        "name",
+        "basePath",
+        "createdAt",
+        "updatedAt"
+      ],
+      "properties": {
+        "id": {
+          "type": "string",
+          "minLength": 1,
+          "description": "Context id. For a nested context this is the full path (`parent/leaf`), not the leaf alone — an ACL scope naming this context must use this value verbatim."
+        },
+        "name": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 256,
+          "description": "Human-readable name. Operator-facing only; carries no authorization meaning, and two contexts may share a name."
+        },
+        "did": {
+          "type": "string",
+          "description": "DID this context acts as, when one has been assigned. Absent means the context has no identity of its own yet — not that it has been denied one."
+        },
+        "description": {
+          "type": "string",
+          "maxLength": 1024,
+          "description": "Free-form description."
+        },
+        "parent": {
+          "type": "string",
+          "description": "Id of the context this one nests under. Absent for a top-level context. Authority granted at a parent reaches its children, so this member is load-bearing for anyone reasoning about scope."
+        },
+        "basePath": {
+          "type": "string",
+          "description": "Resolved path from the root context, as the VTA derives it from the parent chain. Consumers MUST treat this as derived state: it is recomputed by the maintainer and is not independently settable."
+        },
+        "createdAt": {
+          "type": "string",
+          "format": "date-time",
+          "description": "RFC 3339."
+        },
+        "updatedAt": {
+          "type": "string",
+          "format": "date-time",
+          "description": "RFC 3339."
+        },
+        "ext": {
+          "$ref": "#/$defs/Ext"
+        }
+      }
+    },
+    "Ext": {
+      "title": "Ext",
+      "description": "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.",
+      "type": "object",
+      "minProperties": 1,
+      "additionalProperties": true,
+      "propertyNames": {
+        "pattern": "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$"
+      }
+    }
+  }
+} as const;
+
+/** As {@link PAYLOAD_SCHEMA}, for the success-response variant. */
+export const RESPONSE_PAYLOAD_SCHEMA = {
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$ref": "#/$defs/Response",
+  "$defs": {
+    "Response": {
+      "$anchor": "response",
+      "title": "VTA Contexts Update-DID — response payload",
+      "description": "Success response to vta/contexts/update-did: the context as it now stands. Type https://trusttasks.org/spec/vta/contexts/update-did/1.1#response.",
+      "$ref": "#/$defs/ContextRecord"
+    },
+    "ContextRecord": {
+      "title": "ContextRecord",
+      "description": "A context as the VTA holds it.",
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "id",
+        "name",
+        "basePath",
+        "createdAt",
+        "updatedAt"
+      ],
+      "properties": {
+        "id": {
+          "type": "string",
+          "minLength": 1,
+          "description": "Context id. For a nested context this is the full path (`parent/leaf`), not the leaf alone — an ACL scope naming this context must use this value verbatim."
+        },
+        "name": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 256,
+          "description": "Human-readable name. Operator-facing only; carries no authorization meaning, and two contexts may share a name."
+        },
+        "did": {
+          "type": "string",
+          "description": "DID this context acts as, when one has been assigned. Absent means the context has no identity of its own yet — not that it has been denied one."
+        },
+        "description": {
+          "type": "string",
+          "maxLength": 1024,
+          "description": "Free-form description."
+        },
+        "parent": {
+          "type": "string",
+          "description": "Id of the context this one nests under. Absent for a top-level context. Authority granted at a parent reaches its children, so this member is load-bearing for anyone reasoning about scope."
+        },
+        "basePath": {
+          "type": "string",
+          "description": "Resolved path from the root context, as the VTA derives it from the parent chain. Consumers MUST treat this as derived state: it is recomputed by the maintainer and is not independently settable."
+        },
+        "createdAt": {
+          "type": "string",
+          "format": "date-time",
+          "description": "RFC 3339."
+        },
+        "updatedAt": {
+          "type": "string",
+          "format": "date-time",
+          "description": "RFC 3339."
+        },
+        "ext": {
+          "$ref": "#/$defs/Ext"
+        }
+      }
+    },
+    "Ext": {
+      "title": "Ext",
+      "description": "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.",
+      "type": "object",
+      "minProperties": 1,
+      "additionalProperties": true,
+      "propertyNames": {
+        "pattern": "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$"
+      }
+    }
+  }
+} as const;
+
+/**
+ * SPEC.md §7.2 policy for the request variant, from this specification's
+ * front matter. Pass to `consumeInbound` — items 5b, 7 and 8 are
+ * per-specification and cannot be derived from the document alone, and
+ * item 2 needs the schema this carries.
+ */
+export const SPEC = {
+  typeUri: TYPE_URI,
+  isBearer: false,
+  isProofRequired: true,
+  isRecipientRequired: true,
+  isIssuedAtRequired: true,
+  payloadSchema: PAYLOAD_SCHEMA,
+} as const;
+
+/**
+ * SPEC.md §7.2 policy for the success-response variant. `isRecipientRequired`
+ * tracks the *issuer* party's requirement because a response swaps the
+ * parties (§7.3 item 5).
+ */
+export const RESPONSE_SPEC = {
+  typeUri: RESPONSE_TYPE_URI,
+  isBearer: false,
+  isProofRequired: true,
+  isRecipientRequired: true,
+  isIssuedAtRequired: true,
+  payloadSchema: RESPONSE_PAYLOAD_SCHEMA,
+} as const;

package/src/vtc/_shared/0.1/community-presentation.ts

@@ -0,0 +1,17 @@
+/**
+ * Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
+ * Source: specs/vtc/_shared/0.1/community-presentation.schema.json
+ */
+
+/**
+ * Shared types for vtc/community/{branding,requested-attributes,join-discovery}/*: how a community asks to be shown to a prospective applicant, what it asks an applicant to tell it about themselves, and whether it answers its join manifest to a caller it cannot identify. `CommunityBranding` and `RequestedAttribute` are copied member for member from vtc/join-requests/manifest/0.2, which publishes both to applicants; the manifest's own copies are that task's local definitions and re-pinning them here is an editorial follow-up. Not itself a Trust Task specification (the `_shared` folder is skipped by the registry build and the codegen).
+ */
+export interface VTCSharedCommunityPresentationDefinitions {
+  [k: string]: unknown | undefined;
+}
+
+/**
+ * The definitions this shared schema publishes, hoisted to one declaration each.
+ * See "../../../_shared/components.js".
+ */
+export type { CommunityBranding, JoinDiscovery, RequestedAttribute, RequestedAttributes } from "../../../_shared/components.js";

package/src/vtc/_shared/0.1/relationship-lifecycle.ts

@@ -0,0 +1,17 @@
+/**
+ * Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
+ * Source: specs/vtc/_shared/0.1/relationship-lifecycle.schema.json
+ */
+
+/**
+ * Shared types for vtc/relationships/{suspend,restore}: an edge's resolved state after a lifecycle event. Not itself a Trust Task specification (the `_shared` folder is skipped by the registry build and the codegen).
+ */
+export interface VTCSharedRelationshipLifecycleDefinitions {
+  [k: string]: unknown | undefined;
+}
+
+/**
+ * The definitions this shared schema publishes, hoisted to one declaration each.
+ * See "../../../_shared/components.js".
+ */
+export type { InForce, LifecycleReason } from "../../../_shared/components.js";

package/src/vtc/_shared/0.1/schema-registry.ts

@@ -0,0 +1,17 @@
+/**
+ * Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
+ * Source: specs/vtc/_shared/0.1/schema-registry.schema.json
+ */
+
+/**
+ * Shared types for the vtc/schemas/* and vtc/schemas/accepts/* families: a community's credential-type registry (the types it issues or accepts, each optionally bound to a JSON Schema) and its Accepts criteria (named DCQL queries a ceremony runs over presented credentials). Defined once so register, list and show compare value for value. `VettingRequirements` and `Duration` are copied member for member from vtc/join-requests/manifest/0.2, which publishes an Accepts criterion's vetting to applicants; the manifest's own copies are local `$defs` of that task and re-pinning them here is an editorial follow-up. Not itself a Trust Task specification (the `_shared` folder is skipped by the registry build and the codegen).
+ */
+export interface VTCSharedSchemaRegistryDefinitions {
+  [k: string]: unknown | undefined;
+}
+
+/**
+ * The definitions this shared schema publishes, hoisted to one declaration each.
+ * See "../../../_shared/components.js".
+ */
+export type { AcceptsCriterion, AcceptsCriterionId, CredentialSchema, CredentialTypeUri, CriterionDescription, DcqlQuery, DtgType, Duration, SchemaDescription, SchemaEntry, SchemaKind, SchemaSummary, VettingRequirements } from "../../../_shared/components.js";

package/src/vtc/_shared/0.1/vetting-auto-grant.ts

@@ -0,0 +1,17 @@
+/**
+ * Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
+ * Source: specs/vtc/_shared/0.1/vetting-auto-grant.schema.json
+ */
+
+/**
+ * Shared types for vtc/vetting/auto-grant/*: the configuration of the community's automatic vetter-grant sweep and the outcome of its last run. Not itself a Trust Task specification (the `_shared` folder is skipped by the registry build and the codegen).
+ */
+export interface VTCSharedAutomaticVetterGrantDefinitions {
+  [k: string]: unknown | undefined;
+}
+
+/**
+ * The definitions this shared schema publishes, hoisted to one declaration each.
+ * See "../../../_shared/components.js".
+ */
+export type { AutoGrantStatus, AutoGrantSweep, GrantValiditySeconds, SweepMinutes } from "../../../_shared/components.js";