@openvtc/trust-tasks 0.21.13 → 0.21.15

package/dist/git-ns/activity/list/0.1/payload.d.ts

@@ -0,0 +1,642 @@
+/**
+ * Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
+ * Source: specs/git-ns/activity/list/0.1/payload.schema.json
+ */
+import type { Did_GitNsV0_3 as Did, Ext, NamespaceId, Resource, Right } from "../../../../_shared/components.js";
+/**
+ * A namespace's administrators list recent rights changes, drift reports and bridge jobs in the namespaces they administer — every namespace, for a community administrator. The outer document members (id, type, issuer, recipient, issuedAt, expiresAt, proof) are owned by the framework — SPEC §6.3.
+ */
+export interface GitNamespacesListActivityPayload {
+    /**
+     * Only activity in this namespace. Absent: every administered namespace.
+     */
+    namespace?: NamespaceId;
+    /**
+     * Opaque continuation token from a previous response's `nextCursor`. A consumer supplying a `cursor` MUST NOT also change `namespace` from the request that produced it — start a fresh query instead.
+     */
+    cursor?: string;
+    /**
+     * Maximum items to return in this page. A VTC clamps to 1..=500 (default 100).
+     */
+    limit?: number;
+    ext?: Ext;
+}
+/**
+ * The matching items, newest first.
+ */
+export interface GitNamespacesListActivityResponsePayload {
+    /**
+     * Items in administered namespaces, newest (`at`) first.
+     */
+    items: ActivityItem[];
+    /**
+     * Continuation token for the next page, or `null` when this is the last.
+     */
+    nextCursor?: string | null;
+    ext?: Ext;
+}
+/**
+ * One thing that happened in a namespace.
+ */
+export interface ActivityItem {
+    /**
+     * When it happened: the audit row's timestamp, or the job's acceptance time (its creation time if never accepted).
+     */
+    at: string;
+    /**
+     * What happened: `gitNs.right.granted`, `gitNs.repo.renamed`, `gitNs.drift.reported`, `gitNs.job.createRepo`, and so on. Not a closed enumeration — a VTC MAY add its own dot-separated `gitNs.*` actions, and a consumer MUST treat one it does not recognise as an opaque activity item rather than failing to parse it.
+     */
+    action: string;
+    /**
+     * The namespace the item belongs to. Absent only for a community-wide audit row from before any namespace was unbound (visible to a community administrator with no `namespace` filter only).
+     */
+    namespace?: NamespaceId;
+    /**
+     * The resource the item concerns, where it names one.
+     */
+    resource?: Resource;
+    /**
+     * The right a rights-change item concerns. Absent for a drift report or a job item.
+     */
+    right?: Right;
+    /**
+     * Who acted, for an audit item. Absent when a right-to-be-forgotten erasure has removed it from the audit row, and always absent for a job item, which has no actor of its own.
+     */
+    actor?: Did;
+    /**
+     * Whose right it was, for a rights-change audit item. Absent likewise on erasure, and always absent for a job item.
+     */
+    subject?: Did;
+    /**
+     * A machine-readable qualifier: `departed` on a departure-triggered change, the old name on a rename, a job's queue state, a drift count. A producer MUST NOT put free-form or personal prose here beyond what the qualifier itself names.
+     */
+    detail?: string;
+}
+/** Shared definitions this specification references, re-exported under the names it used to declare them with. */
+export type { Did, Ext, NamespaceId, Resource, Right };
+/** Trust Task type URI. */
+export declare const TYPE_URI: "https://trusttasks.org/spec/git-ns/activity/list/0.1";
+/** Stable alias for this specification's request payload shape. */
+export type Payload = GitNamespacesListActivityPayload;
+/** Trust Task response type URI (request type URI + "#response"). */
+export declare const RESPONSE_TYPE_URI: "https://trusttasks.org/spec/git-ns/activity/list/0.1#response";
+/** Stable alias for this specification's success-response payload shape. */
+export type Response = GitNamespacesListActivityResponsePayload;
+/**
+ * This specification's payload schema, as a value.
+ *
+ * SPEC.md §7.2 item 2 is performed against this. It is shipped as data
+ * rather than only as a `.json` file because TypeScript types are erased
+ * at runtime: without a schema a consumer has nothing to validate, and
+ * every REQUIRED payload member is optional in practice. Cross-file
+ * `$ref`s are already inlined, so it needs no resolver.
+ */
+export declare const PAYLOAD_SCHEMA: {
+    readonly $schema: "https://json-schema.org/draft/2020-12/schema";
+    readonly $id: "https://trusttasks.org/spec/git-ns/activity/list/0.1";
+    readonly title: "Git Namespaces — List Activity — payload";
+    readonly description: "A namespace's administrators list recent rights changes, drift reports and bridge jobs in the namespaces they administer — every namespace, for a community administrator. The outer document members (id, type, issuer, recipient, issuedAt, expiresAt, proof) are owned by the framework — SPEC §6.3.";
+    readonly type: "object";
+    readonly additionalProperties: false;
+    readonly properties: {
+        readonly namespace: {
+            readonly $ref: "#/$defs/NamespaceId";
+            readonly description: "Only activity in this namespace. Absent: every administered namespace.";
+        };
+        readonly cursor: {
+            readonly type: "string";
+            readonly description: "Opaque continuation token from a previous response's `nextCursor`. A consumer supplying a `cursor` MUST NOT also change `namespace` from the request that produced it — start a fresh query instead.";
+        };
+        readonly limit: {
+            readonly type: "integer";
+            readonly minimum: 1;
+            readonly maximum: 500;
+            readonly description: "Maximum items to return in this page. A VTC clamps to 1..=500 (default 100).";
+        };
+        readonly ext: {
+            readonly $ref: "#/$defs/Ext";
+        };
+    };
+    readonly $defs: {
+        readonly Source: {
+            readonly title: "Source";
+            readonly type: "string";
+            readonly enum: readonly ["audit", "job"];
+            readonly description: "`audit` — a git-ns audit row: a rights change or a drift report. `job` — a bridge job's queue state, as git-ns/bridge/job/list also reports it.";
+        };
+        readonly ActivityItem: {
+            readonly title: "ActivityItem";
+            readonly description: "One thing that happened in a namespace.";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["at", "action", "source"];
+            readonly properties: {
+                readonly at: {
+                    readonly type: "string";
+                    readonly format: "date-time";
+                    readonly description: "When it happened: the audit row's timestamp, or the job's acceptance time (its creation time if never accepted).";
+                };
+                readonly action: {
+                    readonly type: "string";
+                    readonly minLength: 1;
+                    readonly maxLength: 128;
+                    readonly pattern: "^[a-zA-Z][a-zA-Z0-9]*(\\.[a-zA-Z][a-zA-Z0-9]*)*$";
+                    readonly description: "What happened: `gitNs.right.granted`, `gitNs.repo.renamed`, `gitNs.drift.reported`, `gitNs.job.createRepo`, and so on. Not a closed enumeration — a VTC MAY add its own dot-separated `gitNs.*` actions, and a consumer MUST treat one it does not recognise as an opaque activity item rather than failing to parse it.";
+                };
+                readonly namespace: {
+                    readonly $ref: "#/$defs/NamespaceId";
+                    readonly description: "The namespace the item belongs to. Absent only for a community-wide audit row from before any namespace was unbound (visible to a community administrator with no `namespace` filter only).";
+                };
+                readonly resource: {
+                    readonly $ref: "#/$defs/Resource";
+                    readonly description: "The resource the item concerns, where it names one.";
+                };
+                readonly right: {
+                    readonly $ref: "#/$defs/Right";
+                    readonly description: "The right a rights-change item concerns. Absent for a drift report or a job item.";
+                };
+                readonly actor: {
+                    readonly $ref: "#/$defs/Did";
+                    readonly description: "Who acted, for an audit item. Absent when a right-to-be-forgotten erasure has removed it from the audit row, and always absent for a job item, which has no actor of its own.";
+                };
+                readonly subject: {
+                    readonly $ref: "#/$defs/Did";
+                    readonly description: "Whose right it was, for a rights-change audit item. Absent likewise on erasure, and always absent for a job item.";
+                };
+                readonly detail: {
+                    readonly type: "string";
+                    readonly maxLength: 1024;
+                    readonly description: "A machine-readable qualifier: `departed` on a departure-triggered change, the old name on a rename, a job's queue state, a drift count. A producer MUST NOT put free-form or personal prose here beyond what the qualifier itself names.";
+                };
+            };
+        };
+        readonly Response: {
+            readonly $anchor: "response";
+            readonly title: "Git Namespaces — List Activity — response payload";
+            readonly description: "The matching items, newest first.";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["items"];
+            readonly properties: {
+                readonly items: {
+                    readonly type: "array";
+                    readonly items: {
+                        readonly $ref: "#/$defs/ActivityItem";
+                    };
+                    readonly description: "Items in administered namespaces, newest (`at`) first.";
+                };
+                readonly nextCursor: {
+                    readonly type: readonly ["string", "null"];
+                    readonly description: "Continuation token for the next page, or `null` when this is the last.";
+                };
+                readonly ext: {
+                    readonly $ref: "#/$defs/Ext";
+                };
+            };
+        };
+        readonly Ext: {
+            readonly title: "Ext";
+            readonly description: "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.";
+            readonly type: "object";
+            readonly minProperties: 1;
+            readonly additionalProperties: true;
+            readonly propertyNames: {
+                readonly pattern: "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$";
+            };
+        };
+        readonly Did: {
+            readonly title: "Did";
+            readonly description: "A bare DID in the W3C DID Core syntax (§3.1): `did:`, a method name of lowercase letters and digits, `:`, and a method-specific id of colon-separated segments drawn from `A-Z a-z 0-9 . - _` and percent-encoded octets, the last segment non-empty. A DID URL is not a DID: no path, query or fragment (`/`, `?`, `#`), so a verification-method id such as `did:key:z6Mk…#z6Mk…` is refused. Compared by exact string equality — no case folding or percent-decoding. A consumer MUST still treat the value as data: the pattern keeps shell metacharacters, whitespace and quotes out of the wire form, but it does not make a DID safe to splice into a command or markup.";
+            readonly type: "string";
+            readonly maxLength: 2048;
+            readonly pattern: "^did:[a-z0-9]+:(?:(?:[A-Za-z0-9._-]|%[0-9A-Fa-f]{2})*:)*(?:[A-Za-z0-9._-]|%[0-9A-Fa-f]{2})+$";
+        };
+        readonly Right: {
+            readonly title: "Right";
+            readonly description: "One of the five git rights. Each string is also the TRQP `action` the VTC publishes the right under in its Trust Registry, so it is carried verbatim. `git.ns.admin` and `git.repo.create` apply to a namespace resource; `git.repo.own` and `git.repo.maintain` to a repository resource; `git.commit.sign` to either.";
+            readonly type: "string";
+            readonly enum: readonly ["git.ns.admin", "git.repo.create", "git.repo.own", "git.repo.maintain", "git.commit.sign"];
+        };
+        readonly Resource: {
+            readonly title: "Resource";
+            readonly description: "A forge-qualified resource: `<forge-host>/<owner>` for a namespace, or `<forge-host>/<owner>/<repo>` for one repository, all lowercase — `github.com/acme`, `github.com/acme/widgets`, `codeberg.org/acme`. The forge is never implied: `acme/widgets` alone is not a resource. Containment is by whole segment: `github.com/acme` contains `github.com/acme/widgets` and does not contain `github.com/acme-labs/x` or `codeberg.org/acme/widgets`.";
+            readonly type: "string";
+            readonly maxLength: 455;
+            readonly pattern: "^[a-z0-9](?:[a-z0-9-]*[a-z0-9])?(?:\\.[a-z0-9](?:[a-z0-9-]*[a-z0-9])?)+(?:/[a-z0-9_-][a-z0-9._-]{0,99}){1,2}$";
+        };
+        readonly NamespaceId: {
+            readonly title: "NamespaceId";
+            readonly description: "The VTC's opaque identifier for a namespace, assigned when it is bound. Stable for the life of the binding; never reused for another binding.";
+            readonly type: "string";
+            readonly minLength: 1;
+            readonly maxLength: 128;
+        };
+    };
+};
+/** As {@link PAYLOAD_SCHEMA}, for the success-response variant. */
+export declare const RESPONSE_PAYLOAD_SCHEMA: {
+    readonly $schema: "https://json-schema.org/draft/2020-12/schema";
+    readonly $ref: "#/$defs/Response";
+    readonly $defs: {
+        readonly Source: {
+            readonly title: "Source";
+            readonly type: "string";
+            readonly enum: readonly ["audit", "job"];
+            readonly description: "`audit` — a git-ns audit row: a rights change or a drift report. `job` — a bridge job's queue state, as git-ns/bridge/job/list also reports it.";
+        };
+        readonly ActivityItem: {
+            readonly title: "ActivityItem";
+            readonly description: "One thing that happened in a namespace.";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["at", "action", "source"];
+            readonly properties: {
+                readonly at: {
+                    readonly type: "string";
+                    readonly format: "date-time";
+                    readonly description: "When it happened: the audit row's timestamp, or the job's acceptance time (its creation time if never accepted).";
+                };
+                readonly action: {
+                    readonly type: "string";
+                    readonly minLength: 1;
+                    readonly maxLength: 128;
+                    readonly pattern: "^[a-zA-Z][a-zA-Z0-9]*(\\.[a-zA-Z][a-zA-Z0-9]*)*$";
+                    readonly description: "What happened: `gitNs.right.granted`, `gitNs.repo.renamed`, `gitNs.drift.reported`, `gitNs.job.createRepo`, and so on. Not a closed enumeration — a VTC MAY add its own dot-separated `gitNs.*` actions, and a consumer MUST treat one it does not recognise as an opaque activity item rather than failing to parse it.";
+                };
+                readonly namespace: {
+                    readonly $ref: "#/$defs/NamespaceId";
+                    readonly description: "The namespace the item belongs to. Absent only for a community-wide audit row from before any namespace was unbound (visible to a community administrator with no `namespace` filter only).";
+                };
+                readonly resource: {
+                    readonly $ref: "#/$defs/Resource";
+                    readonly description: "The resource the item concerns, where it names one.";
+                };
+                readonly right: {
+                    readonly $ref: "#/$defs/Right";
+                    readonly description: "The right a rights-change item concerns. Absent for a drift report or a job item.";
+                };
+                readonly actor: {
+                    readonly $ref: "#/$defs/Did";
+                    readonly description: "Who acted, for an audit item. Absent when a right-to-be-forgotten erasure has removed it from the audit row, and always absent for a job item, which has no actor of its own.";
+                };
+                readonly subject: {
+                    readonly $ref: "#/$defs/Did";
+                    readonly description: "Whose right it was, for a rights-change audit item. Absent likewise on erasure, and always absent for a job item.";
+                };
+                readonly detail: {
+                    readonly type: "string";
+                    readonly maxLength: 1024;
+                    readonly description: "A machine-readable qualifier: `departed` on a departure-triggered change, the old name on a rename, a job's queue state, a drift count. A producer MUST NOT put free-form or personal prose here beyond what the qualifier itself names.";
+                };
+            };
+        };
+        readonly Response: {
+            readonly $anchor: "response";
+            readonly title: "Git Namespaces — List Activity — response payload";
+            readonly description: "The matching items, newest first.";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["items"];
+            readonly properties: {
+                readonly items: {
+                    readonly type: "array";
+                    readonly items: {
+                        readonly $ref: "#/$defs/ActivityItem";
+                    };
+                    readonly description: "Items in administered namespaces, newest (`at`) first.";
+                };
+                readonly nextCursor: {
+                    readonly type: readonly ["string", "null"];
+                    readonly description: "Continuation token for the next page, or `null` when this is the last.";
+                };
+                readonly ext: {
+                    readonly $ref: "#/$defs/Ext";
+                };
+            };
+        };
+        readonly Ext: {
+            readonly title: "Ext";
+            readonly description: "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.";
+            readonly type: "object";
+            readonly minProperties: 1;
+            readonly additionalProperties: true;
+            readonly propertyNames: {
+                readonly pattern: "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$";
+            };
+        };
+        readonly Did: {
+            readonly title: "Did";
+            readonly description: "A bare DID in the W3C DID Core syntax (§3.1): `did:`, a method name of lowercase letters and digits, `:`, and a method-specific id of colon-separated segments drawn from `A-Z a-z 0-9 . - _` and percent-encoded octets, the last segment non-empty. A DID URL is not a DID: no path, query or fragment (`/`, `?`, `#`), so a verification-method id such as `did:key:z6Mk…#z6Mk…` is refused. Compared by exact string equality — no case folding or percent-decoding. A consumer MUST still treat the value as data: the pattern keeps shell metacharacters, whitespace and quotes out of the wire form, but it does not make a DID safe to splice into a command or markup.";
+            readonly type: "string";
+            readonly maxLength: 2048;
+            readonly pattern: "^did:[a-z0-9]+:(?:(?:[A-Za-z0-9._-]|%[0-9A-Fa-f]{2})*:)*(?:[A-Za-z0-9._-]|%[0-9A-Fa-f]{2})+$";
+        };
+        readonly Right: {
+            readonly title: "Right";
+            readonly description: "One of the five git rights. Each string is also the TRQP `action` the VTC publishes the right under in its Trust Registry, so it is carried verbatim. `git.ns.admin` and `git.repo.create` apply to a namespace resource; `git.repo.own` and `git.repo.maintain` to a repository resource; `git.commit.sign` to either.";
+            readonly type: "string";
+            readonly enum: readonly ["git.ns.admin", "git.repo.create", "git.repo.own", "git.repo.maintain", "git.commit.sign"];
+        };
+        readonly Resource: {
+            readonly title: "Resource";
+            readonly description: "A forge-qualified resource: `<forge-host>/<owner>` for a namespace, or `<forge-host>/<owner>/<repo>` for one repository, all lowercase — `github.com/acme`, `github.com/acme/widgets`, `codeberg.org/acme`. The forge is never implied: `acme/widgets` alone is not a resource. Containment is by whole segment: `github.com/acme` contains `github.com/acme/widgets` and does not contain `github.com/acme-labs/x` or `codeberg.org/acme/widgets`.";
+            readonly type: "string";
+            readonly maxLength: 455;
+            readonly pattern: "^[a-z0-9](?:[a-z0-9-]*[a-z0-9])?(?:\\.[a-z0-9](?:[a-z0-9-]*[a-z0-9])?)+(?:/[a-z0-9_-][a-z0-9._-]{0,99}){1,2}$";
+        };
+        readonly NamespaceId: {
+            readonly title: "NamespaceId";
+            readonly description: "The VTC's opaque identifier for a namespace, assigned when it is bound. Stable for the life of the binding; never reused for another binding.";
+            readonly type: "string";
+            readonly minLength: 1;
+            readonly maxLength: 128;
+        };
+    };
+};
+/**
+ * SPEC.md §7.2 policy for the request variant, from this specification's
+ * front matter. Pass to `consumeInbound` — items 5b, 7 and 8 are
+ * per-specification and cannot be derived from the document alone, and
+ * item 2 needs the schema this carries.
+ */
+export declare const SPEC: {
+    readonly typeUri: "https://trusttasks.org/spec/git-ns/activity/list/0.1";
+    readonly isBearer: false;
+    readonly isProofRequired: true;
+    readonly isRecipientRequired: true;
+    readonly isIssuedAtRequired: false;
+    readonly payloadSchema: {
+        readonly $schema: "https://json-schema.org/draft/2020-12/schema";
+        readonly $id: "https://trusttasks.org/spec/git-ns/activity/list/0.1";
+        readonly title: "Git Namespaces — List Activity — payload";
+        readonly description: "A namespace's administrators list recent rights changes, drift reports and bridge jobs in the namespaces they administer — every namespace, for a community administrator. The outer document members (id, type, issuer, recipient, issuedAt, expiresAt, proof) are owned by the framework — SPEC §6.3.";
+        readonly type: "object";
+        readonly additionalProperties: false;
+        readonly properties: {
+            readonly namespace: {
+                readonly $ref: "#/$defs/NamespaceId";
+                readonly description: "Only activity in this namespace. Absent: every administered namespace.";
+            };
+            readonly cursor: {
+                readonly type: "string";
+                readonly description: "Opaque continuation token from a previous response's `nextCursor`. A consumer supplying a `cursor` MUST NOT also change `namespace` from the request that produced it — start a fresh query instead.";
+            };
+            readonly limit: {
+                readonly type: "integer";
+                readonly minimum: 1;
+                readonly maximum: 500;
+                readonly description: "Maximum items to return in this page. A VTC clamps to 1..=500 (default 100).";
+            };
+            readonly ext: {
+                readonly $ref: "#/$defs/Ext";
+            };
+        };
+        readonly $defs: {
+            readonly Source: {
+                readonly title: "Source";
+                readonly type: "string";
+                readonly enum: readonly ["audit", "job"];
+                readonly description: "`audit` — a git-ns audit row: a rights change or a drift report. `job` — a bridge job's queue state, as git-ns/bridge/job/list also reports it.";
+            };
+            readonly ActivityItem: {
+                readonly title: "ActivityItem";
+                readonly description: "One thing that happened in a namespace.";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["at", "action", "source"];
+                readonly properties: {
+                    readonly at: {
+                        readonly type: "string";
+                        readonly format: "date-time";
+                        readonly description: "When it happened: the audit row's timestamp, or the job's acceptance time (its creation time if never accepted).";
+                    };
+                    readonly action: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                        readonly maxLength: 128;
+                        readonly pattern: "^[a-zA-Z][a-zA-Z0-9]*(\\.[a-zA-Z][a-zA-Z0-9]*)*$";
+                        readonly description: "What happened: `gitNs.right.granted`, `gitNs.repo.renamed`, `gitNs.drift.reported`, `gitNs.job.createRepo`, and so on. Not a closed enumeration — a VTC MAY add its own dot-separated `gitNs.*` actions, and a consumer MUST treat one it does not recognise as an opaque activity item rather than failing to parse it.";
+                    };
+                    readonly namespace: {
+                        readonly $ref: "#/$defs/NamespaceId";
+                        readonly description: "The namespace the item belongs to. Absent only for a community-wide audit row from before any namespace was unbound (visible to a community administrator with no `namespace` filter only).";
+                    };
+                    readonly resource: {
+                        readonly $ref: "#/$defs/Resource";
+                        readonly description: "The resource the item concerns, where it names one.";
+                    };
+                    readonly right: {
+                        readonly $ref: "#/$defs/Right";
+                        readonly description: "The right a rights-change item concerns. Absent for a drift report or a job item.";
+                    };
+                    readonly actor: {
+                        readonly $ref: "#/$defs/Did";
+                        readonly description: "Who acted, for an audit item. Absent when a right-to-be-forgotten erasure has removed it from the audit row, and always absent for a job item, which has no actor of its own.";
+                    };
+                    readonly subject: {
+                        readonly $ref: "#/$defs/Did";
+                        readonly description: "Whose right it was, for a rights-change audit item. Absent likewise on erasure, and always absent for a job item.";
+                    };
+                    readonly detail: {
+                        readonly type: "string";
+                        readonly maxLength: 1024;
+                        readonly description: "A machine-readable qualifier: `departed` on a departure-triggered change, the old name on a rename, a job's queue state, a drift count. A producer MUST NOT put free-form or personal prose here beyond what the qualifier itself names.";
+                    };
+                };
+            };
+            readonly Response: {
+                readonly $anchor: "response";
+                readonly title: "Git Namespaces — List Activity — response payload";
+                readonly description: "The matching items, newest first.";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["items"];
+                readonly properties: {
+                    readonly items: {
+                        readonly type: "array";
+                        readonly items: {
+                            readonly $ref: "#/$defs/ActivityItem";
+                        };
+                        readonly description: "Items in administered namespaces, newest (`at`) first.";
+                    };
+                    readonly nextCursor: {
+                        readonly type: readonly ["string", "null"];
+                        readonly description: "Continuation token for the next page, or `null` when this is the last.";
+                    };
+                    readonly ext: {
+                        readonly $ref: "#/$defs/Ext";
+                    };
+                };
+            };
+            readonly Ext: {
+                readonly title: "Ext";
+                readonly description: "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.";
+                readonly type: "object";
+                readonly minProperties: 1;
+                readonly additionalProperties: true;
+                readonly propertyNames: {
+                    readonly pattern: "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$";
+                };
+            };
+            readonly Did: {
+                readonly title: "Did";
+                readonly description: "A bare DID in the W3C DID Core syntax (§3.1): `did:`, a method name of lowercase letters and digits, `:`, and a method-specific id of colon-separated segments drawn from `A-Z a-z 0-9 . - _` and percent-encoded octets, the last segment non-empty. A DID URL is not a DID: no path, query or fragment (`/`, `?`, `#`), so a verification-method id such as `did:key:z6Mk…#z6Mk…` is refused. Compared by exact string equality — no case folding or percent-decoding. A consumer MUST still treat the value as data: the pattern keeps shell metacharacters, whitespace and quotes out of the wire form, but it does not make a DID safe to splice into a command or markup.";
+                readonly type: "string";
+                readonly maxLength: 2048;
+                readonly pattern: "^did:[a-z0-9]+:(?:(?:[A-Za-z0-9._-]|%[0-9A-Fa-f]{2})*:)*(?:[A-Za-z0-9._-]|%[0-9A-Fa-f]{2})+$";
+            };
+            readonly Right: {
+                readonly title: "Right";
+                readonly description: "One of the five git rights. Each string is also the TRQP `action` the VTC publishes the right under in its Trust Registry, so it is carried verbatim. `git.ns.admin` and `git.repo.create` apply to a namespace resource; `git.repo.own` and `git.repo.maintain` to a repository resource; `git.commit.sign` to either.";
+                readonly type: "string";
+                readonly enum: readonly ["git.ns.admin", "git.repo.create", "git.repo.own", "git.repo.maintain", "git.commit.sign"];
+            };
+            readonly Resource: {
+                readonly title: "Resource";
+                readonly description: "A forge-qualified resource: `<forge-host>/<owner>` for a namespace, or `<forge-host>/<owner>/<repo>` for one repository, all lowercase — `github.com/acme`, `github.com/acme/widgets`, `codeberg.org/acme`. The forge is never implied: `acme/widgets` alone is not a resource. Containment is by whole segment: `github.com/acme` contains `github.com/acme/widgets` and does not contain `github.com/acme-labs/x` or `codeberg.org/acme/widgets`.";
+                readonly type: "string";
+                readonly maxLength: 455;
+                readonly pattern: "^[a-z0-9](?:[a-z0-9-]*[a-z0-9])?(?:\\.[a-z0-9](?:[a-z0-9-]*[a-z0-9])?)+(?:/[a-z0-9_-][a-z0-9._-]{0,99}){1,2}$";
+            };
+            readonly NamespaceId: {
+                readonly title: "NamespaceId";
+                readonly description: "The VTC's opaque identifier for a namespace, assigned when it is bound. Stable for the life of the binding; never reused for another binding.";
+                readonly type: "string";
+                readonly minLength: 1;
+                readonly maxLength: 128;
+            };
+        };
+    };
+};
+/**
+ * SPEC.md §7.2 policy for the success-response variant. `isRecipientRequired`
+ * tracks the *issuer* party's requirement because a response swaps the
+ * parties (§7.3 item 5).
+ */
+export declare const RESPONSE_SPEC: {
+    readonly typeUri: "https://trusttasks.org/spec/git-ns/activity/list/0.1#response";
+    readonly isBearer: false;
+    readonly isProofRequired: true;
+    readonly isRecipientRequired: true;
+    readonly isIssuedAtRequired: false;
+    readonly payloadSchema: {
+        readonly $schema: "https://json-schema.org/draft/2020-12/schema";
+        readonly $ref: "#/$defs/Response";
+        readonly $defs: {
+            readonly Source: {
+                readonly title: "Source";
+                readonly type: "string";
+                readonly enum: readonly ["audit", "job"];
+                readonly description: "`audit` — a git-ns audit row: a rights change or a drift report. `job` — a bridge job's queue state, as git-ns/bridge/job/list also reports it.";
+            };
+            readonly ActivityItem: {
+                readonly title: "ActivityItem";
+                readonly description: "One thing that happened in a namespace.";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["at", "action", "source"];
+                readonly properties: {
+                    readonly at: {
+                        readonly type: "string";
+                        readonly format: "date-time";
+                        readonly description: "When it happened: the audit row's timestamp, or the job's acceptance time (its creation time if never accepted).";
+                    };
+                    readonly action: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                        readonly maxLength: 128;
+                        readonly pattern: "^[a-zA-Z][a-zA-Z0-9]*(\\.[a-zA-Z][a-zA-Z0-9]*)*$";
+                        readonly description: "What happened: `gitNs.right.granted`, `gitNs.repo.renamed`, `gitNs.drift.reported`, `gitNs.job.createRepo`, and so on. Not a closed enumeration — a VTC MAY add its own dot-separated `gitNs.*` actions, and a consumer MUST treat one it does not recognise as an opaque activity item rather than failing to parse it.";
+                    };
+                    readonly namespace: {
+                        readonly $ref: "#/$defs/NamespaceId";
+                        readonly description: "The namespace the item belongs to. Absent only for a community-wide audit row from before any namespace was unbound (visible to a community administrator with no `namespace` filter only).";
+                    };
+                    readonly resource: {
+                        readonly $ref: "#/$defs/Resource";
+                        readonly description: "The resource the item concerns, where it names one.";
+                    };
+                    readonly right: {
+                        readonly $ref: "#/$defs/Right";
+                        readonly description: "The right a rights-change item concerns. Absent for a drift report or a job item.";
+                    };
+                    readonly actor: {
+                        readonly $ref: "#/$defs/Did";
+                        readonly description: "Who acted, for an audit item. Absent when a right-to-be-forgotten erasure has removed it from the audit row, and always absent for a job item, which has no actor of its own.";
+                    };
+                    readonly subject: {
+                        readonly $ref: "#/$defs/Did";
+                        readonly description: "Whose right it was, for a rights-change audit item. Absent likewise on erasure, and always absent for a job item.";
+                    };
+                    readonly detail: {
+                        readonly type: "string";
+                        readonly maxLength: 1024;
+                        readonly description: "A machine-readable qualifier: `departed` on a departure-triggered change, the old name on a rename, a job's queue state, a drift count. A producer MUST NOT put free-form or personal prose here beyond what the qualifier itself names.";
+                    };
+                };
+            };
+            readonly Response: {
+                readonly $anchor: "response";
+                readonly title: "Git Namespaces — List Activity — response payload";
+                readonly description: "The matching items, newest first.";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["items"];
+                readonly properties: {
+                    readonly items: {
+                        readonly type: "array";
+                        readonly items: {
+                            readonly $ref: "#/$defs/ActivityItem";
+                        };
+                        readonly description: "Items in administered namespaces, newest (`at`) first.";
+                    };
+                    readonly nextCursor: {
+                        readonly type: readonly ["string", "null"];
+                        readonly description: "Continuation token for the next page, or `null` when this is the last.";
+                    };
+                    readonly ext: {
+                        readonly $ref: "#/$defs/Ext";
+                    };
+                };
+            };
+            readonly Ext: {
+                readonly title: "Ext";
+                readonly description: "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.";
+                readonly type: "object";
+                readonly minProperties: 1;
+                readonly additionalProperties: true;
+                readonly propertyNames: {
+                    readonly pattern: "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$";
+                };
+            };
+            readonly Did: {
+                readonly title: "Did";
+                readonly description: "A bare DID in the W3C DID Core syntax (§3.1): `did:`, a method name of lowercase letters and digits, `:`, and a method-specific id of colon-separated segments drawn from `A-Z a-z 0-9 . - _` and percent-encoded octets, the last segment non-empty. A DID URL is not a DID: no path, query or fragment (`/`, `?`, `#`), so a verification-method id such as `did:key:z6Mk…#z6Mk…` is refused. Compared by exact string equality — no case folding or percent-decoding. A consumer MUST still treat the value as data: the pattern keeps shell metacharacters, whitespace and quotes out of the wire form, but it does not make a DID safe to splice into a command or markup.";
+                readonly type: "string";
+                readonly maxLength: 2048;
+                readonly pattern: "^did:[a-z0-9]+:(?:(?:[A-Za-z0-9._-]|%[0-9A-Fa-f]{2})*:)*(?:[A-Za-z0-9._-]|%[0-9A-Fa-f]{2})+$";
+            };
+            readonly Right: {
+                readonly title: "Right";
+                readonly description: "One of the five git rights. Each string is also the TRQP `action` the VTC publishes the right under in its Trust Registry, so it is carried verbatim. `git.ns.admin` and `git.repo.create` apply to a namespace resource; `git.repo.own` and `git.repo.maintain` to a repository resource; `git.commit.sign` to either.";
+                readonly type: "string";
+                readonly enum: readonly ["git.ns.admin", "git.repo.create", "git.repo.own", "git.repo.maintain", "git.commit.sign"];
+            };
+            readonly Resource: {
+                readonly title: "Resource";
+                readonly description: "A forge-qualified resource: `<forge-host>/<owner>` for a namespace, or `<forge-host>/<owner>/<repo>` for one repository, all lowercase — `github.com/acme`, `github.com/acme/widgets`, `codeberg.org/acme`. The forge is never implied: `acme/widgets` alone is not a resource. Containment is by whole segment: `github.com/acme` contains `github.com/acme/widgets` and does not contain `github.com/acme-labs/x` or `codeberg.org/acme/widgets`.";
+                readonly type: "string";
+                readonly maxLength: 455;
+                readonly pattern: "^[a-z0-9](?:[a-z0-9-]*[a-z0-9])?(?:\\.[a-z0-9](?:[a-z0-9-]*[a-z0-9])?)+(?:/[a-z0-9_-][a-z0-9._-]{0,99}){1,2}$";
+            };
+            readonly NamespaceId: {
+                readonly title: "NamespaceId";
+                readonly description: "The VTC's opaque identifier for a namespace, assigned when it is bound. Stable for the life of the binding; never reused for another binding.";
+                readonly type: "string";
+                readonly minLength: 1;
+                readonly maxLength: 128;
+            };
+        };
+    };
+};
+//# sourceMappingURL=payload.d.ts.map

package/dist/git-ns/activity/list/0.1/payload.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"payload.d.ts","sourceRoot":"","sources":["../../../../../src/git-ns/activity/list/0.1/payload.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,aAAa,IAAI,GAAG,EAAE,GAAG,EAAE,WAAW,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,mCAAmC,CAAC;AAGjH;;GAEG;AACH,MAAM,WAAW,gCAAgC;IAC/C;;OAEG;IACH,SAAS,CAAC,EAAE,WAAW,CAAC;IACxB;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,GAAG,CAAC;CACX;AACD;;GAEG;AACH,MAAM,WAAW,wCAAwC;IACvD;;OAEG;IACH,KAAK,EAAE,YAAY,EAAE,CAAC;IACtB;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,GAAG,CAAC,EAAE,GAAG,CAAC;CACX;AACD;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B;;OAEG;IACH,EAAE,EAAE,MAAM,CAAC;IACX;;OAEG;IACH,MAAM,EAAE,MAAM,CAAC;IACf;;OAEG;IACH,SAAS,CAAC,EAAE,WAAW,CAAC;IACxB;;OAEG;IACH,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB;;OAEG;IACH,KAAK,CAAC,EAAE,KAAK,CAAC;IACd;;OAEG;IACH,KAAK,CAAC,EAAE,GAAG,CAAC;IACZ;;OAEG;IACH,OAAO,CAAC,EAAE,GAAG,CAAC;IACd;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,kHAAkH;AAClH,YAAY,EAAE,GAAG,EAAE,GAAG,EAAE,WAAW,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;AAEvD,2BAA2B;AAC3B,eAAO,MAAM,QAAQ,EAAG,sDAA+D,CAAC;AAExF,mEAAmE;AACnE,MAAM,MAAM,OAAO,GAAG,gCAAgC,CAAC;AAEvD,qEAAqE;AACrE,eAAO,MAAM,iBAAiB,EAAG,+DAAwE,CAAC;AAE1G,4EAA4E;AAC5E,MAAM,MAAM,QAAQ,GAAG,wCAAwC,CAAC;AAEhE;;;;;;;;GAQG;AACH,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA+JjB,CAAC;AAEX,mEAAmE;AACnE,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAwI1B,CAAC;AAEX;;;;;GAKG;AACH,eAAO,MAAM,IAAI;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAOP,CAAC;AAEX;;;;GAIG;AACH,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAOhB,CAAC"}