@openvtc/trust-tasks 0.21.13 → 0.21.14

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (60) hide show
  1. package/CHANGELOG.md +63 -0
  2. package/dist/_shared/components.d.ts +91 -0
  3. package/dist/_shared/components.d.ts.map +1 -1
  4. package/dist/auth/_shared/0.3/session.d.ts +16 -0
  5. package/dist/auth/_shared/0.3/session.d.ts.map +1 -0
  6. package/dist/auth/_shared/0.3/session.js +6 -0
  7. package/dist/auth/_shared/0.3/session.js.map +1 -0
  8. package/dist/auth/authenticate/0.3/payload.d.ts +852 -0
  9. package/dist/auth/authenticate/0.3/payload.d.ts.map +1 -0
  10. package/dist/auth/authenticate/0.3/payload.js +442 -0
  11. package/dist/auth/authenticate/0.3/payload.js.map +1 -0
  12. package/dist/auth/refresh/0.2/payload.d.ts +729 -0
  13. package/dist/auth/refresh/0.2/payload.d.ts.map +1 -0
  14. package/dist/auth/refresh/0.2/payload.js +392 -0
  15. package/dist/auth/refresh/0.2/payload.js.map +1 -0
  16. package/dist/git-ns/_shared/0.5/git-ns.d.ts +16 -0
  17. package/dist/git-ns/_shared/0.5/git-ns.d.ts.map +1 -0
  18. package/dist/git-ns/_shared/0.5/git-ns.js +6 -0
  19. package/dist/git-ns/_shared/0.5/git-ns.js.map +1 -0
  20. package/dist/git-ns/account/list/0.1/payload.d.ts +598 -0
  21. package/dist/git-ns/account/list/0.1/payload.d.ts.map +1 -0
  22. package/dist/git-ns/account/list/0.1/payload.js +317 -0
  23. package/dist/git-ns/account/list/0.1/payload.js.map +1 -0
  24. package/dist/git-ns/activity/list/0.1/payload.d.ts +642 -0
  25. package/dist/git-ns/activity/list/0.1/payload.d.ts.map +1 -0
  26. package/dist/git-ns/activity/list/0.1/payload.js +343 -0
  27. package/dist/git-ns/activity/list/0.1/payload.js.map +1 -0
  28. package/dist/git-ns/bridge/job/list/0.1/payload.d.ts +697 -0
  29. package/dist/git-ns/bridge/job/list/0.1/payload.d.ts.map +1 -0
  30. package/dist/git-ns/bridge/job/list/0.1/payload.js +386 -0
  31. package/dist/git-ns/bridge/job/list/0.1/payload.js.map +1 -0
  32. package/dist/git-ns/projection/show/0.1/payload.d.ts +705 -0
  33. package/dist/git-ns/projection/show/0.1/payload.d.ts.map +1 -0
  34. package/dist/git-ns/projection/show/0.1/payload.js +377 -0
  35. package/dist/git-ns/projection/show/0.1/payload.js.map +1 -0
  36. package/dist/git-ns/right/issued-by-departed/0.1/payload.d.ts +862 -0
  37. package/dist/git-ns/right/issued-by-departed/0.1/payload.d.ts.map +1 -0
  38. package/dist/git-ns/right/issued-by-departed/0.1/payload.js +487 -0
  39. package/dist/git-ns/right/issued-by-departed/0.1/payload.js.map +1 -0
  40. package/dist/git-ns/right/list/0.1/payload.d.ts +773 -0
  41. package/dist/git-ns/right/list/0.1/payload.d.ts.map +1 -0
  42. package/dist/git-ns/right/list/0.1/payload.js +439 -0
  43. package/dist/git-ns/right/list/0.1/payload.js.map +1 -0
  44. package/dist/index.d.ts +10 -0
  45. package/dist/index.d.ts.map +1 -1
  46. package/dist/index.js +10 -0
  47. package/dist/index.js.map +1 -1
  48. package/package.json +1 -1
  49. package/src/_shared/components.ts +91 -0
  50. package/src/auth/_shared/0.3/session.ts +17 -0
  51. package/src/auth/authenticate/0.3/payload.ts +527 -0
  52. package/src/auth/refresh/0.2/payload.ts +444 -0
  53. package/src/git-ns/_shared/0.5/git-ns.ts +17 -0
  54. package/src/git-ns/account/list/0.1/payload.ts +392 -0
  55. package/src/git-ns/activity/list/0.1/payload.ts +430 -0
  56. package/src/git-ns/bridge/job/list/0.1/payload.ts +490 -0
  57. package/src/git-ns/projection/show/0.1/payload.ts +479 -0
  58. package/src/git-ns/right/issued-by-departed/0.1/payload.ts +550 -0
  59. package/src/git-ns/right/list/0.1/payload.ts +493 -0
  60. package/src/index.ts +10 -0
@@ -0,0 +1,598 @@
1
+ /**
2
+ * Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
3
+ * Source: specs/git-ns/account/list/0.1/payload.schema.json
4
+ */
5
+ import type { Did_GitNsV0_3 as Did, Ext, ForgeAccount, ForgeHost, ForgeId } from "../../../../_shared/components.js";
6
+ /**
7
+ * A community administrator lists every member's linked forge accounts, community-wide. The outer document members (id, type, issuer, recipient, issuedAt, expiresAt, proof) are owned by the framework — SPEC §6.3.
8
+ */
9
+ export interface GitNamespacesListLinkedForgeAccountsPayload {
10
+ /**
11
+ * Only this member's linked accounts. Absent: every member.
12
+ */
13
+ member?: Did;
14
+ /**
15
+ * Only accounts linked on this forge. Absent: every forge.
16
+ */
17
+ forge?: ForgeHost;
18
+ /**
19
+ * Opaque continuation token from a previous response's `nextCursor`. A consumer supplying a `cursor` MUST NOT also change `member` or `forge` from the request that produced it — start a fresh query instead.
20
+ */
21
+ cursor?: string;
22
+ /**
23
+ * Maximum accounts to return in this page. A VTC clamps to 1..=500 (default 100).
24
+ */
25
+ limit?: number;
26
+ ext?: Ext;
27
+ }
28
+ /**
29
+ * The matching links, ordered by member then forge.
30
+ */
31
+ export interface GitNamespacesListLinkedForgeAccountsResponsePayload {
32
+ /**
33
+ * Links matching `member` and `forge`, ordered by `member` then `account.forge`. At most one per member per forge.
34
+ */
35
+ accounts: AccountRow[];
36
+ /**
37
+ * Continuation token for the next page, or `null` when this is the last.
38
+ */
39
+ nextCursor?: string | null;
40
+ ext?: Ext;
41
+ }
42
+ /**
43
+ * One member's account on one forge, as linked through git-ns/account/link.
44
+ */
45
+ export interface AccountRow {
46
+ /**
47
+ * The member the account is linked to.
48
+ */
49
+ member: Did;
50
+ /**
51
+ * The linked account. `id` is authoritative; `login` is as the forge last reported it — display only.
52
+ */
53
+ account: ForgeAccount;
54
+ /**
55
+ * When the VTC recorded the link. Absent for a link recorded before this member was tracked.
56
+ */
57
+ linkedAt?: string;
58
+ /**
59
+ * Whether `member` is still a current member. One whose access lapsed keeps the link — nobody else may link the account — but it projects no forge role, and a forge role it holds cannot be adopted as a right.
60
+ */
61
+ memberCurrent: boolean;
62
+ }
63
+ /** Shared definitions this specification references, re-exported under the names it used to declare them with. */
64
+ export type { Did, Ext, ForgeAccount, ForgeHost, ForgeId };
65
+ /** Trust Task type URI. */
66
+ export declare const TYPE_URI: "https://trusttasks.org/spec/git-ns/account/list/0.1";
67
+ /** Stable alias for this specification's request payload shape. */
68
+ export type Payload = GitNamespacesListLinkedForgeAccountsPayload;
69
+ /** Trust Task response type URI (request type URI + "#response"). */
70
+ export declare const RESPONSE_TYPE_URI: "https://trusttasks.org/spec/git-ns/account/list/0.1#response";
71
+ /** Stable alias for this specification's success-response payload shape. */
72
+ export type Response = GitNamespacesListLinkedForgeAccountsResponsePayload;
73
+ /**
74
+ * This specification's payload schema, as a value.
75
+ *
76
+ * SPEC.md §7.2 item 2 is performed against this. It is shipped as data
77
+ * rather than only as a `.json` file because TypeScript types are erased
78
+ * at runtime: without a schema a consumer has nothing to validate, and
79
+ * every REQUIRED payload member is optional in practice. Cross-file
80
+ * `$ref`s are already inlined, so it needs no resolver.
81
+ */
82
+ export declare const PAYLOAD_SCHEMA: {
83
+ readonly $schema: "https://json-schema.org/draft/2020-12/schema";
84
+ readonly $id: "https://trusttasks.org/spec/git-ns/account/list/0.1";
85
+ readonly title: "Git Namespaces — List Linked Forge Accounts — payload";
86
+ readonly description: "A community administrator lists every member's linked forge accounts, community-wide. The outer document members (id, type, issuer, recipient, issuedAt, expiresAt, proof) are owned by the framework — SPEC §6.3.";
87
+ readonly type: "object";
88
+ readonly additionalProperties: false;
89
+ readonly properties: {
90
+ readonly member: {
91
+ readonly $ref: "#/$defs/Did";
92
+ readonly description: "Only this member's linked accounts. Absent: every member.";
93
+ };
94
+ readonly forge: {
95
+ readonly $ref: "#/$defs/ForgeHost";
96
+ readonly description: "Only accounts linked on this forge. Absent: every forge.";
97
+ };
98
+ readonly cursor: {
99
+ readonly type: "string";
100
+ readonly description: "Opaque continuation token from a previous response's `nextCursor`. A consumer supplying a `cursor` MUST NOT also change `member` or `forge` from the request that produced it — start a fresh query instead.";
101
+ };
102
+ readonly limit: {
103
+ readonly type: "integer";
104
+ readonly minimum: 1;
105
+ readonly maximum: 500;
106
+ readonly description: "Maximum accounts to return in this page. A VTC clamps to 1..=500 (default 100).";
107
+ };
108
+ readonly ext: {
109
+ readonly $ref: "#/$defs/Ext";
110
+ };
111
+ };
112
+ readonly $defs: {
113
+ readonly AccountRow: {
114
+ readonly title: "AccountRow";
115
+ readonly description: "One member's account on one forge, as linked through git-ns/account/link.";
116
+ readonly type: "object";
117
+ readonly additionalProperties: false;
118
+ readonly required: readonly ["member", "account", "memberCurrent"];
119
+ readonly properties: {
120
+ readonly member: {
121
+ readonly $ref: "#/$defs/Did";
122
+ readonly description: "The member the account is linked to.";
123
+ };
124
+ readonly account: {
125
+ readonly $ref: "#/$defs/ForgeAccount";
126
+ readonly description: "The linked account. `id` is authoritative; `login` is as the forge last reported it — display only.";
127
+ };
128
+ readonly linkedAt: {
129
+ readonly type: "string";
130
+ readonly format: "date-time";
131
+ readonly description: "When the VTC recorded the link. Absent for a link recorded before this member was tracked.";
132
+ };
133
+ readonly memberCurrent: {
134
+ readonly type: "boolean";
135
+ readonly description: "Whether `member` is still a current member. One whose access lapsed keeps the link — nobody else may link the account — but it projects no forge role, and a forge role it holds cannot be adopted as a right.";
136
+ };
137
+ };
138
+ };
139
+ readonly Response: {
140
+ readonly $anchor: "response";
141
+ readonly title: "Git Namespaces — List Linked Forge Accounts — response payload";
142
+ readonly description: "The matching links, ordered by member then forge.";
143
+ readonly type: "object";
144
+ readonly additionalProperties: false;
145
+ readonly required: readonly ["accounts"];
146
+ readonly properties: {
147
+ readonly accounts: {
148
+ readonly type: "array";
149
+ readonly items: {
150
+ readonly $ref: "#/$defs/AccountRow";
151
+ };
152
+ readonly description: "Links matching `member` and `forge`, ordered by `member` then `account.forge`. At most one per member per forge.";
153
+ };
154
+ readonly nextCursor: {
155
+ readonly type: readonly ["string", "null"];
156
+ readonly description: "Continuation token for the next page, or `null` when this is the last.";
157
+ };
158
+ readonly ext: {
159
+ readonly $ref: "#/$defs/Ext";
160
+ };
161
+ };
162
+ };
163
+ readonly Ext: {
164
+ readonly title: "Ext";
165
+ readonly description: "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.";
166
+ readonly type: "object";
167
+ readonly minProperties: 1;
168
+ readonly additionalProperties: true;
169
+ readonly propertyNames: {
170
+ readonly pattern: "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$";
171
+ };
172
+ };
173
+ readonly ForgeAccount: {
174
+ readonly title: "ForgeAccount";
175
+ readonly description: "A person's account on one forge. `id` is authoritative; `login` is for display only, because logins can be renamed and re-registered.";
176
+ readonly type: "object";
177
+ readonly additionalProperties: false;
178
+ readonly required: readonly ["forge", "id", "login"];
179
+ readonly properties: {
180
+ readonly forge: {
181
+ readonly $ref: "#/$defs/ForgeHost";
182
+ };
183
+ readonly id: {
184
+ readonly $ref: "#/$defs/ForgeId";
185
+ };
186
+ readonly login: {
187
+ readonly type: "string";
188
+ readonly minLength: 1;
189
+ readonly maxLength: 100;
190
+ readonly description: "The account's current login, as the forge reported it when last seen. Display only.";
191
+ };
192
+ };
193
+ };
194
+ readonly ForgeId: {
195
+ readonly title: "ForgeId";
196
+ readonly description: "An identifier the forge itself assigns — a repository id, a user or organisation id — carried as a string so a forge whose ids are not numbers needs no new version. GitHub and Forgejo ids are decimal integers written as strings (`\"812736451\"`). Unlike a name, it survives renames and transfers, which is why rights and bindings are keyed by it.";
197
+ readonly type: "string";
198
+ readonly minLength: 1;
199
+ readonly maxLength: 64;
200
+ };
201
+ readonly ForgeHost: {
202
+ readonly title: "ForgeHost";
203
+ readonly description: "The lowercased DNS host of a forge: `github.com`, a GitHub Enterprise Server host, `codeberg.org`, or a self-hosted Forgejo instance such as `git.example.org`. No scheme, no port, no path. The host is a segment of every resource, so a right never crosses forges.";
204
+ readonly type: "string";
205
+ readonly minLength: 3;
206
+ readonly maxLength: 253;
207
+ readonly pattern: "^[a-z0-9](?:[a-z0-9-]*[a-z0-9])?(?:\\.[a-z0-9](?:[a-z0-9-]*[a-z0-9])?)+$";
208
+ };
209
+ readonly Did: {
210
+ readonly title: "Did";
211
+ readonly description: "A bare DID in the W3C DID Core syntax (§3.1): `did:`, a method name of lowercase letters and digits, `:`, and a method-specific id of colon-separated segments drawn from `A-Z a-z 0-9 . - _` and percent-encoded octets, the last segment non-empty. A DID URL is not a DID: no path, query or fragment (`/`, `?`, `#`), so a verification-method id such as `did:key:z6Mk…#z6Mk…` is refused. Compared by exact string equality — no case folding or percent-decoding. A consumer MUST still treat the value as data: the pattern keeps shell metacharacters, whitespace and quotes out of the wire form, but it does not make a DID safe to splice into a command or markup.";
212
+ readonly type: "string";
213
+ readonly maxLength: 2048;
214
+ readonly pattern: "^did:[a-z0-9]+:(?:(?:[A-Za-z0-9._-]|%[0-9A-Fa-f]{2})*:)*(?:[A-Za-z0-9._-]|%[0-9A-Fa-f]{2})+$";
215
+ };
216
+ };
217
+ };
218
+ /** As {@link PAYLOAD_SCHEMA}, for the success-response variant. */
219
+ export declare const RESPONSE_PAYLOAD_SCHEMA: {
220
+ readonly $schema: "https://json-schema.org/draft/2020-12/schema";
221
+ readonly $ref: "#/$defs/Response";
222
+ readonly $defs: {
223
+ readonly AccountRow: {
224
+ readonly title: "AccountRow";
225
+ readonly description: "One member's account on one forge, as linked through git-ns/account/link.";
226
+ readonly type: "object";
227
+ readonly additionalProperties: false;
228
+ readonly required: readonly ["member", "account", "memberCurrent"];
229
+ readonly properties: {
230
+ readonly member: {
231
+ readonly $ref: "#/$defs/Did";
232
+ readonly description: "The member the account is linked to.";
233
+ };
234
+ readonly account: {
235
+ readonly $ref: "#/$defs/ForgeAccount";
236
+ readonly description: "The linked account. `id` is authoritative; `login` is as the forge last reported it — display only.";
237
+ };
238
+ readonly linkedAt: {
239
+ readonly type: "string";
240
+ readonly format: "date-time";
241
+ readonly description: "When the VTC recorded the link. Absent for a link recorded before this member was tracked.";
242
+ };
243
+ readonly memberCurrent: {
244
+ readonly type: "boolean";
245
+ readonly description: "Whether `member` is still a current member. One whose access lapsed keeps the link — nobody else may link the account — but it projects no forge role, and a forge role it holds cannot be adopted as a right.";
246
+ };
247
+ };
248
+ };
249
+ readonly Response: {
250
+ readonly $anchor: "response";
251
+ readonly title: "Git Namespaces — List Linked Forge Accounts — response payload";
252
+ readonly description: "The matching links, ordered by member then forge.";
253
+ readonly type: "object";
254
+ readonly additionalProperties: false;
255
+ readonly required: readonly ["accounts"];
256
+ readonly properties: {
257
+ readonly accounts: {
258
+ readonly type: "array";
259
+ readonly items: {
260
+ readonly $ref: "#/$defs/AccountRow";
261
+ };
262
+ readonly description: "Links matching `member` and `forge`, ordered by `member` then `account.forge`. At most one per member per forge.";
263
+ };
264
+ readonly nextCursor: {
265
+ readonly type: readonly ["string", "null"];
266
+ readonly description: "Continuation token for the next page, or `null` when this is the last.";
267
+ };
268
+ readonly ext: {
269
+ readonly $ref: "#/$defs/Ext";
270
+ };
271
+ };
272
+ };
273
+ readonly Ext: {
274
+ readonly title: "Ext";
275
+ readonly description: "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.";
276
+ readonly type: "object";
277
+ readonly minProperties: 1;
278
+ readonly additionalProperties: true;
279
+ readonly propertyNames: {
280
+ readonly pattern: "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$";
281
+ };
282
+ };
283
+ readonly ForgeAccount: {
284
+ readonly title: "ForgeAccount";
285
+ readonly description: "A person's account on one forge. `id` is authoritative; `login` is for display only, because logins can be renamed and re-registered.";
286
+ readonly type: "object";
287
+ readonly additionalProperties: false;
288
+ readonly required: readonly ["forge", "id", "login"];
289
+ readonly properties: {
290
+ readonly forge: {
291
+ readonly $ref: "#/$defs/ForgeHost";
292
+ };
293
+ readonly id: {
294
+ readonly $ref: "#/$defs/ForgeId";
295
+ };
296
+ readonly login: {
297
+ readonly type: "string";
298
+ readonly minLength: 1;
299
+ readonly maxLength: 100;
300
+ readonly description: "The account's current login, as the forge reported it when last seen. Display only.";
301
+ };
302
+ };
303
+ };
304
+ readonly ForgeId: {
305
+ readonly title: "ForgeId";
306
+ readonly description: "An identifier the forge itself assigns — a repository id, a user or organisation id — carried as a string so a forge whose ids are not numbers needs no new version. GitHub and Forgejo ids are decimal integers written as strings (`\"812736451\"`). Unlike a name, it survives renames and transfers, which is why rights and bindings are keyed by it.";
307
+ readonly type: "string";
308
+ readonly minLength: 1;
309
+ readonly maxLength: 64;
310
+ };
311
+ readonly ForgeHost: {
312
+ readonly title: "ForgeHost";
313
+ readonly description: "The lowercased DNS host of a forge: `github.com`, a GitHub Enterprise Server host, `codeberg.org`, or a self-hosted Forgejo instance such as `git.example.org`. No scheme, no port, no path. The host is a segment of every resource, so a right never crosses forges.";
314
+ readonly type: "string";
315
+ readonly minLength: 3;
316
+ readonly maxLength: 253;
317
+ readonly pattern: "^[a-z0-9](?:[a-z0-9-]*[a-z0-9])?(?:\\.[a-z0-9](?:[a-z0-9-]*[a-z0-9])?)+$";
318
+ };
319
+ readonly Did: {
320
+ readonly title: "Did";
321
+ readonly description: "A bare DID in the W3C DID Core syntax (§3.1): `did:`, a method name of lowercase letters and digits, `:`, and a method-specific id of colon-separated segments drawn from `A-Z a-z 0-9 . - _` and percent-encoded octets, the last segment non-empty. A DID URL is not a DID: no path, query or fragment (`/`, `?`, `#`), so a verification-method id such as `did:key:z6Mk…#z6Mk…` is refused. Compared by exact string equality — no case folding or percent-decoding. A consumer MUST still treat the value as data: the pattern keeps shell metacharacters, whitespace and quotes out of the wire form, but it does not make a DID safe to splice into a command or markup.";
322
+ readonly type: "string";
323
+ readonly maxLength: 2048;
324
+ readonly pattern: "^did:[a-z0-9]+:(?:(?:[A-Za-z0-9._-]|%[0-9A-Fa-f]{2})*:)*(?:[A-Za-z0-9._-]|%[0-9A-Fa-f]{2})+$";
325
+ };
326
+ };
327
+ };
328
+ /**
329
+ * SPEC.md §7.2 policy for the request variant, from this specification's
330
+ * front matter. Pass to `consumeInbound` — items 5b, 7 and 8 are
331
+ * per-specification and cannot be derived from the document alone, and
332
+ * item 2 needs the schema this carries.
333
+ */
334
+ export declare const SPEC: {
335
+ readonly typeUri: "https://trusttasks.org/spec/git-ns/account/list/0.1";
336
+ readonly isBearer: false;
337
+ readonly isProofRequired: true;
338
+ readonly isRecipientRequired: true;
339
+ readonly isIssuedAtRequired: false;
340
+ readonly payloadSchema: {
341
+ readonly $schema: "https://json-schema.org/draft/2020-12/schema";
342
+ readonly $id: "https://trusttasks.org/spec/git-ns/account/list/0.1";
343
+ readonly title: "Git Namespaces — List Linked Forge Accounts — payload";
344
+ readonly description: "A community administrator lists every member's linked forge accounts, community-wide. The outer document members (id, type, issuer, recipient, issuedAt, expiresAt, proof) are owned by the framework — SPEC §6.3.";
345
+ readonly type: "object";
346
+ readonly additionalProperties: false;
347
+ readonly properties: {
348
+ readonly member: {
349
+ readonly $ref: "#/$defs/Did";
350
+ readonly description: "Only this member's linked accounts. Absent: every member.";
351
+ };
352
+ readonly forge: {
353
+ readonly $ref: "#/$defs/ForgeHost";
354
+ readonly description: "Only accounts linked on this forge. Absent: every forge.";
355
+ };
356
+ readonly cursor: {
357
+ readonly type: "string";
358
+ readonly description: "Opaque continuation token from a previous response's `nextCursor`. A consumer supplying a `cursor` MUST NOT also change `member` or `forge` from the request that produced it — start a fresh query instead.";
359
+ };
360
+ readonly limit: {
361
+ readonly type: "integer";
362
+ readonly minimum: 1;
363
+ readonly maximum: 500;
364
+ readonly description: "Maximum accounts to return in this page. A VTC clamps to 1..=500 (default 100).";
365
+ };
366
+ readonly ext: {
367
+ readonly $ref: "#/$defs/Ext";
368
+ };
369
+ };
370
+ readonly $defs: {
371
+ readonly AccountRow: {
372
+ readonly title: "AccountRow";
373
+ readonly description: "One member's account on one forge, as linked through git-ns/account/link.";
374
+ readonly type: "object";
375
+ readonly additionalProperties: false;
376
+ readonly required: readonly ["member", "account", "memberCurrent"];
377
+ readonly properties: {
378
+ readonly member: {
379
+ readonly $ref: "#/$defs/Did";
380
+ readonly description: "The member the account is linked to.";
381
+ };
382
+ readonly account: {
383
+ readonly $ref: "#/$defs/ForgeAccount";
384
+ readonly description: "The linked account. `id` is authoritative; `login` is as the forge last reported it — display only.";
385
+ };
386
+ readonly linkedAt: {
387
+ readonly type: "string";
388
+ readonly format: "date-time";
389
+ readonly description: "When the VTC recorded the link. Absent for a link recorded before this member was tracked.";
390
+ };
391
+ readonly memberCurrent: {
392
+ readonly type: "boolean";
393
+ readonly description: "Whether `member` is still a current member. One whose access lapsed keeps the link — nobody else may link the account — but it projects no forge role, and a forge role it holds cannot be adopted as a right.";
394
+ };
395
+ };
396
+ };
397
+ readonly Response: {
398
+ readonly $anchor: "response";
399
+ readonly title: "Git Namespaces — List Linked Forge Accounts — response payload";
400
+ readonly description: "The matching links, ordered by member then forge.";
401
+ readonly type: "object";
402
+ readonly additionalProperties: false;
403
+ readonly required: readonly ["accounts"];
404
+ readonly properties: {
405
+ readonly accounts: {
406
+ readonly type: "array";
407
+ readonly items: {
408
+ readonly $ref: "#/$defs/AccountRow";
409
+ };
410
+ readonly description: "Links matching `member` and `forge`, ordered by `member` then `account.forge`. At most one per member per forge.";
411
+ };
412
+ readonly nextCursor: {
413
+ readonly type: readonly ["string", "null"];
414
+ readonly description: "Continuation token for the next page, or `null` when this is the last.";
415
+ };
416
+ readonly ext: {
417
+ readonly $ref: "#/$defs/Ext";
418
+ };
419
+ };
420
+ };
421
+ readonly Ext: {
422
+ readonly title: "Ext";
423
+ readonly description: "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.";
424
+ readonly type: "object";
425
+ readonly minProperties: 1;
426
+ readonly additionalProperties: true;
427
+ readonly propertyNames: {
428
+ readonly pattern: "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$";
429
+ };
430
+ };
431
+ readonly ForgeAccount: {
432
+ readonly title: "ForgeAccount";
433
+ readonly description: "A person's account on one forge. `id` is authoritative; `login` is for display only, because logins can be renamed and re-registered.";
434
+ readonly type: "object";
435
+ readonly additionalProperties: false;
436
+ readonly required: readonly ["forge", "id", "login"];
437
+ readonly properties: {
438
+ readonly forge: {
439
+ readonly $ref: "#/$defs/ForgeHost";
440
+ };
441
+ readonly id: {
442
+ readonly $ref: "#/$defs/ForgeId";
443
+ };
444
+ readonly login: {
445
+ readonly type: "string";
446
+ readonly minLength: 1;
447
+ readonly maxLength: 100;
448
+ readonly description: "The account's current login, as the forge reported it when last seen. Display only.";
449
+ };
450
+ };
451
+ };
452
+ readonly ForgeId: {
453
+ readonly title: "ForgeId";
454
+ readonly description: "An identifier the forge itself assigns — a repository id, a user or organisation id — carried as a string so a forge whose ids are not numbers needs no new version. GitHub and Forgejo ids are decimal integers written as strings (`\"812736451\"`). Unlike a name, it survives renames and transfers, which is why rights and bindings are keyed by it.";
455
+ readonly type: "string";
456
+ readonly minLength: 1;
457
+ readonly maxLength: 64;
458
+ };
459
+ readonly ForgeHost: {
460
+ readonly title: "ForgeHost";
461
+ readonly description: "The lowercased DNS host of a forge: `github.com`, a GitHub Enterprise Server host, `codeberg.org`, or a self-hosted Forgejo instance such as `git.example.org`. No scheme, no port, no path. The host is a segment of every resource, so a right never crosses forges.";
462
+ readonly type: "string";
463
+ readonly minLength: 3;
464
+ readonly maxLength: 253;
465
+ readonly pattern: "^[a-z0-9](?:[a-z0-9-]*[a-z0-9])?(?:\\.[a-z0-9](?:[a-z0-9-]*[a-z0-9])?)+$";
466
+ };
467
+ readonly Did: {
468
+ readonly title: "Did";
469
+ readonly description: "A bare DID in the W3C DID Core syntax (§3.1): `did:`, a method name of lowercase letters and digits, `:`, and a method-specific id of colon-separated segments drawn from `A-Z a-z 0-9 . - _` and percent-encoded octets, the last segment non-empty. A DID URL is not a DID: no path, query or fragment (`/`, `?`, `#`), so a verification-method id such as `did:key:z6Mk…#z6Mk…` is refused. Compared by exact string equality — no case folding or percent-decoding. A consumer MUST still treat the value as data: the pattern keeps shell metacharacters, whitespace and quotes out of the wire form, but it does not make a DID safe to splice into a command or markup.";
470
+ readonly type: "string";
471
+ readonly maxLength: 2048;
472
+ readonly pattern: "^did:[a-z0-9]+:(?:(?:[A-Za-z0-9._-]|%[0-9A-Fa-f]{2})*:)*(?:[A-Za-z0-9._-]|%[0-9A-Fa-f]{2})+$";
473
+ };
474
+ };
475
+ };
476
+ };
477
+ /**
478
+ * SPEC.md §7.2 policy for the success-response variant. `isRecipientRequired`
479
+ * tracks the *issuer* party's requirement because a response swaps the
480
+ * parties (§7.3 item 5).
481
+ */
482
+ export declare const RESPONSE_SPEC: {
483
+ readonly typeUri: "https://trusttasks.org/spec/git-ns/account/list/0.1#response";
484
+ readonly isBearer: false;
485
+ readonly isProofRequired: true;
486
+ readonly isRecipientRequired: true;
487
+ readonly isIssuedAtRequired: false;
488
+ readonly payloadSchema: {
489
+ readonly $schema: "https://json-schema.org/draft/2020-12/schema";
490
+ readonly $ref: "#/$defs/Response";
491
+ readonly $defs: {
492
+ readonly AccountRow: {
493
+ readonly title: "AccountRow";
494
+ readonly description: "One member's account on one forge, as linked through git-ns/account/link.";
495
+ readonly type: "object";
496
+ readonly additionalProperties: false;
497
+ readonly required: readonly ["member", "account", "memberCurrent"];
498
+ readonly properties: {
499
+ readonly member: {
500
+ readonly $ref: "#/$defs/Did";
501
+ readonly description: "The member the account is linked to.";
502
+ };
503
+ readonly account: {
504
+ readonly $ref: "#/$defs/ForgeAccount";
505
+ readonly description: "The linked account. `id` is authoritative; `login` is as the forge last reported it — display only.";
506
+ };
507
+ readonly linkedAt: {
508
+ readonly type: "string";
509
+ readonly format: "date-time";
510
+ readonly description: "When the VTC recorded the link. Absent for a link recorded before this member was tracked.";
511
+ };
512
+ readonly memberCurrent: {
513
+ readonly type: "boolean";
514
+ readonly description: "Whether `member` is still a current member. One whose access lapsed keeps the link — nobody else may link the account — but it projects no forge role, and a forge role it holds cannot be adopted as a right.";
515
+ };
516
+ };
517
+ };
518
+ readonly Response: {
519
+ readonly $anchor: "response";
520
+ readonly title: "Git Namespaces — List Linked Forge Accounts — response payload";
521
+ readonly description: "The matching links, ordered by member then forge.";
522
+ readonly type: "object";
523
+ readonly additionalProperties: false;
524
+ readonly required: readonly ["accounts"];
525
+ readonly properties: {
526
+ readonly accounts: {
527
+ readonly type: "array";
528
+ readonly items: {
529
+ readonly $ref: "#/$defs/AccountRow";
530
+ };
531
+ readonly description: "Links matching `member` and `forge`, ordered by `member` then `account.forge`. At most one per member per forge.";
532
+ };
533
+ readonly nextCursor: {
534
+ readonly type: readonly ["string", "null"];
535
+ readonly description: "Continuation token for the next page, or `null` when this is the last.";
536
+ };
537
+ readonly ext: {
538
+ readonly $ref: "#/$defs/Ext";
539
+ };
540
+ };
541
+ };
542
+ readonly Ext: {
543
+ readonly title: "Ext";
544
+ readonly description: "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.";
545
+ readonly type: "object";
546
+ readonly minProperties: 1;
547
+ readonly additionalProperties: true;
548
+ readonly propertyNames: {
549
+ readonly pattern: "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$";
550
+ };
551
+ };
552
+ readonly ForgeAccount: {
553
+ readonly title: "ForgeAccount";
554
+ readonly description: "A person's account on one forge. `id` is authoritative; `login` is for display only, because logins can be renamed and re-registered.";
555
+ readonly type: "object";
556
+ readonly additionalProperties: false;
557
+ readonly required: readonly ["forge", "id", "login"];
558
+ readonly properties: {
559
+ readonly forge: {
560
+ readonly $ref: "#/$defs/ForgeHost";
561
+ };
562
+ readonly id: {
563
+ readonly $ref: "#/$defs/ForgeId";
564
+ };
565
+ readonly login: {
566
+ readonly type: "string";
567
+ readonly minLength: 1;
568
+ readonly maxLength: 100;
569
+ readonly description: "The account's current login, as the forge reported it when last seen. Display only.";
570
+ };
571
+ };
572
+ };
573
+ readonly ForgeId: {
574
+ readonly title: "ForgeId";
575
+ readonly description: "An identifier the forge itself assigns — a repository id, a user or organisation id — carried as a string so a forge whose ids are not numbers needs no new version. GitHub and Forgejo ids are decimal integers written as strings (`\"812736451\"`). Unlike a name, it survives renames and transfers, which is why rights and bindings are keyed by it.";
576
+ readonly type: "string";
577
+ readonly minLength: 1;
578
+ readonly maxLength: 64;
579
+ };
580
+ readonly ForgeHost: {
581
+ readonly title: "ForgeHost";
582
+ readonly description: "The lowercased DNS host of a forge: `github.com`, a GitHub Enterprise Server host, `codeberg.org`, or a self-hosted Forgejo instance such as `git.example.org`. No scheme, no port, no path. The host is a segment of every resource, so a right never crosses forges.";
583
+ readonly type: "string";
584
+ readonly minLength: 3;
585
+ readonly maxLength: 253;
586
+ readonly pattern: "^[a-z0-9](?:[a-z0-9-]*[a-z0-9])?(?:\\.[a-z0-9](?:[a-z0-9-]*[a-z0-9])?)+$";
587
+ };
588
+ readonly Did: {
589
+ readonly title: "Did";
590
+ readonly description: "A bare DID in the W3C DID Core syntax (§3.1): `did:`, a method name of lowercase letters and digits, `:`, and a method-specific id of colon-separated segments drawn from `A-Z a-z 0-9 . - _` and percent-encoded octets, the last segment non-empty. A DID URL is not a DID: no path, query or fragment (`/`, `?`, `#`), so a verification-method id such as `did:key:z6Mk…#z6Mk…` is refused. Compared by exact string equality — no case folding or percent-decoding. A consumer MUST still treat the value as data: the pattern keeps shell metacharacters, whitespace and quotes out of the wire form, but it does not make a DID safe to splice into a command or markup.";
591
+ readonly type: "string";
592
+ readonly maxLength: 2048;
593
+ readonly pattern: "^did:[a-z0-9]+:(?:(?:[A-Za-z0-9._-]|%[0-9A-Fa-f]{2})*:)*(?:[A-Za-z0-9._-]|%[0-9A-Fa-f]{2})+$";
594
+ };
595
+ };
596
+ };
597
+ };
598
+ //# sourceMappingURL=payload.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"payload.d.ts","sourceRoot":"","sources":["../../../../../src/git-ns/account/list/0.1/payload.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,aAAa,IAAI,GAAG,EAAE,GAAG,EAAE,YAAY,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,mCAAmC,CAAC;AAGrH;;GAEG;AACH,MAAM,WAAW,2CAA2C;IAC1D;;OAEG;IACH,MAAM,CAAC,EAAE,GAAG,CAAC;IACb;;OAEG;IACH,KAAK,CAAC,EAAE,SAAS,CAAC;IAClB;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,GAAG,CAAC;CACX;AACD;;GAEG;AACH,MAAM,WAAW,mDAAmD;IAClE;;OAEG;IACH,QAAQ,EAAE,UAAU,EAAE,CAAC;IACvB;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,GAAG,CAAC,EAAE,GAAG,CAAC;CACX;AACD;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB;;OAEG;IACH,MAAM,EAAE,GAAG,CAAC;IACZ;;OAEG;IACH,OAAO,EAAE,YAAY,CAAC;IACtB;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;OAEG;IACH,aAAa,EAAE,OAAO,CAAC;CACxB;AAED,kHAAkH;AAClH,YAAY,EAAE,GAAG,EAAE,GAAG,EAAE,YAAY,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;AAE3D,2BAA2B;AAC3B,eAAO,MAAM,QAAQ,EAAG,qDAA8D,CAAC;AAEvF,mEAAmE;AACnE,MAAM,MAAM,OAAO,GAAG,2CAA2C,CAAC;AAElE,qEAAqE;AACrE,eAAO,MAAM,iBAAiB,EAAG,8DAAuE,CAAC;AAEzG,4EAA4E;AAC5E,MAAM,MAAM,QAAQ,GAAG,mDAAmD,CAAC;AAE3E;;;;;;;;GAQG;AACH,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAoJjB,CAAC;AAEX,mEAAmE;AACnE,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAyH1B,CAAC;AAEX;;;;;GAKG;AACH,eAAO,MAAM,IAAI;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAOP,CAAC;AAEX;;;;GAIG;AACH,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAOhB,CAAC"}