@openvtc/trust-tasks 0.21.16 → 0.22.1

package/src/vtc/schemas/accepts/show/0.1/payload.ts

@@ -148,7 +148,7 @@ export const PAYLOAD_SCHEMA = {
           "format": "uri",
           "minLength": 1,
           "maxLength": 512,
-          "description": "The endorsement type URI a counted vetting statement carries as `credentialSubject.endorsement.type`, as registered with the community via vtc/endorsement-types/register."
+          "description": "The predicate IRI a counted vetting statement carries in `credentialSubject.predicate` — `https://registry.trustoverip.org/dtg/vsc/vetted/1`, the DTG VSC registry's identity-vetting predicate, or a predicate in a namespace the community controls — registered as one the community accepts via vtc/endorsement-types/register. A statement under any other predicate does not count."
         },
         "minStatements": {
           "type": "integer",
@@ -215,7 +215,7 @@ export const PAYLOAD_SCHEMA = {
               "minLength": 1,
               "maxLength": 128,
               "pattern": "^[a-zA-Z][a-zA-Z0-9_-]*$",
-              "description": "The role named in a community-issued `CommunityRole` endorsement credential (see `vtc/vetting/vetters/grant/0.1`). A statement counts only if its issuer holds that credential."
+              "description": "The role a statement's issuer must hold, matched as the action `role:<role>` in a Verifiable Authority Credential (`AuthorityCredential`) the community issued to that issuer, whose `authority.scope` is the community's DID (see `vtc/vetting/vetters/grant/0.1`). A statement counts only if its issuer holds such a credential."
             }
           },
           "description": "How a vetter's eligibility is established."
@@ -447,7 +447,7 @@ export const RESPONSE_PAYLOAD_SCHEMA = {
           "format": "uri",
           "minLength": 1,
           "maxLength": 512,
-          "description": "The endorsement type URI a counted vetting statement carries as `credentialSubject.endorsement.type`, as registered with the community via vtc/endorsement-types/register."
+          "description": "The predicate IRI a counted vetting statement carries in `credentialSubject.predicate` — `https://registry.trustoverip.org/dtg/vsc/vetted/1`, the DTG VSC registry's identity-vetting predicate, or a predicate in a namespace the community controls — registered as one the community accepts via vtc/endorsement-types/register. A statement under any other predicate does not count."
         },
         "minStatements": {
           "type": "integer",
@@ -514,7 +514,7 @@ export const RESPONSE_PAYLOAD_SCHEMA = {
               "minLength": 1,
               "maxLength": 128,
               "pattern": "^[a-zA-Z][a-zA-Z0-9_-]*$",
-              "description": "The role named in a community-issued `CommunityRole` endorsement credential (see `vtc/vetting/vetters/grant/0.1`). A statement counts only if its issuer holds that credential."
+              "description": "The role a statement's issuer must hold, matched as the action `role:<role>` in a Verifiable Authority Credential (`AuthorityCredential`) the community issued to that issuer, whose `authority.scope` is the community's DID (see `vtc/vetting/vetters/grant/0.1`). A statement counts only if its issuer holds such a credential."
             }
           },
           "description": "How a vetter's eligibility is established."

package/src/vtc/schemas/list/0.1/payload.ts

@@ -185,7 +185,7 @@ export const PAYLOAD_SCHEMA = {
       "minLength": 1,
       "maxLength": 128,
       "pattern": "^[A-Za-z][A-Za-z0-9]*$",
-      "description": "The DTG credential catalog type the entry binds to, e.g. `MembershipCredential`. Absent for a community-defined endorsement type that maps onto the generic `EndorsementCredential`."
+      "description": "The DTG credential catalog type the entry binds to, e.g. `MembershipCredential`, `AuthorityCredential` or `StatementCredential`. Absent for a community-defined type outside the DTG catalog. A statement type is identified by its predicate, not by a subtype: every DTG statement is a `StatementCredential`, and which statements a community accepts is the set of predicates it registers with vtc/endorsement-types/register."
     },
     "CredentialTypeUri": {
       "title": "CredentialTypeUri",
@@ -302,7 +302,7 @@ export const RESPONSE_PAYLOAD_SCHEMA = {
       "minLength": 1,
       "maxLength": 128,
       "pattern": "^[A-Za-z][A-Za-z0-9]*$",
-      "description": "The DTG credential catalog type the entry binds to, e.g. `MembershipCredential`. Absent for a community-defined endorsement type that maps onto the generic `EndorsementCredential`."
+      "description": "The DTG credential catalog type the entry binds to, e.g. `MembershipCredential`, `AuthorityCredential` or `StatementCredential`. Absent for a community-defined type outside the DTG catalog. A statement type is identified by its predicate, not by a subtype: every DTG statement is a `StatementCredential`, and which statements a community accepts is the set of predicates it registers with vtc/endorsement-types/register."
     },
     "CredentialTypeUri": {
       "title": "CredentialTypeUri",

package/src/vtc/schemas/register/0.1/payload.ts

@@ -172,7 +172,7 @@ export const PAYLOAD_SCHEMA = {
       "minLength": 1,
       "maxLength": 128,
       "pattern": "^[A-Za-z][A-Za-z0-9]*$",
-      "description": "The DTG credential catalog type the entry binds to, e.g. `MembershipCredential`. Absent for a community-defined endorsement type that maps onto the generic `EndorsementCredential`."
+      "description": "The DTG credential catalog type the entry binds to, e.g. `MembershipCredential`, `AuthorityCredential` or `StatementCredential`. Absent for a community-defined type outside the DTG catalog. A statement type is identified by its predicate, not by a subtype: every DTG statement is a `StatementCredential`, and which statements a community accepts is the set of predicates it registers with vtc/endorsement-types/register."
     },
     "CredentialTypeUri": {
       "title": "CredentialTypeUri",
@@ -283,7 +283,7 @@ export const RESPONSE_PAYLOAD_SCHEMA = {
       "minLength": 1,
       "maxLength": 128,
       "pattern": "^[A-Za-z][A-Za-z0-9]*$",
-      "description": "The DTG credential catalog type the entry binds to, e.g. `MembershipCredential`. Absent for a community-defined endorsement type that maps onto the generic `EndorsementCredential`."
+      "description": "The DTG credential catalog type the entry binds to, e.g. `MembershipCredential`, `AuthorityCredential` or `StatementCredential`. Absent for a community-defined type outside the DTG catalog. A statement type is identified by its predicate, not by a subtype: every DTG statement is a `StatementCredential`, and which statements a community accepts is the set of predicates it registers with vtc/endorsement-types/register."
     },
     "CredentialTypeUri": {
       "title": "CredentialTypeUri",

package/src/vtc/schemas/show/0.1/payload.ts

@@ -155,7 +155,7 @@ export const PAYLOAD_SCHEMA = {
       "minLength": 1,
       "maxLength": 128,
       "pattern": "^[A-Za-z][A-Za-z0-9]*$",
-      "description": "The DTG credential catalog type the entry binds to, e.g. `MembershipCredential`. Absent for a community-defined endorsement type that maps onto the generic `EndorsementCredential`."
+      "description": "The DTG credential catalog type the entry binds to, e.g. `MembershipCredential`, `AuthorityCredential` or `StatementCredential`. Absent for a community-defined type outside the DTG catalog. A statement type is identified by its predicate, not by a subtype: every DTG statement is a `StatementCredential`, and which statements a community accepts is the set of predicates it registers with vtc/endorsement-types/register."
     },
     "CredentialTypeUri": {
       "title": "CredentialTypeUri",
@@ -266,7 +266,7 @@ export const RESPONSE_PAYLOAD_SCHEMA = {
       "minLength": 1,
       "maxLength": 128,
       "pattern": "^[A-Za-z][A-Za-z0-9]*$",
-      "description": "The DTG credential catalog type the entry binds to, e.g. `MembershipCredential`. Absent for a community-defined endorsement type that maps onto the generic `EndorsementCredential`."
+      "description": "The DTG credential catalog type the entry binds to, e.g. `MembershipCredential`, `AuthorityCredential` or `StatementCredential`. Absent for a community-defined type outside the DTG catalog. A statement type is identified by its predicate, not by a subtype: every DTG statement is a `StatementCredential`, and which statements a community accepts is the set of predicates it registers with vtc/endorsement-types/register."
     },
     "CredentialTypeUri": {
       "title": "CredentialTypeUri",

package/src/vtc/vetting/vetters/grant/0.1/payload.ts

@@ -7,7 +7,7 @@ import type { Ext } from "../../../../../_shared/components.js";
 
 
 /**
- * A community administrator makes a member a vetter. The community issues the member a revocable `CommunityRole` endorsement credential for the `vetter` role, delivers it over credential-exchange/issue, and returns the identifiers and validity of the grant. A member who already holds a live grant gets that grant back unchanged.
+ * A community administrator makes a member a vetter. The community issues the member a revocable Verifiable Authority Credential (`AuthorityCredential`) whose `authority` is the action `role:vetter` at the community's DID, delivers it over credential-exchange/issue, and returns the identifiers and validity of the grant. A member who already holds a live grant gets that grant back unchanged.
  */
 export interface VTCVettingVettersGrantPayload {
   /**
@@ -25,11 +25,11 @@ export interface VTCVettingVettersGrantPayload {
  */
 export interface VTCVettingVettersGrantResponsePayload {
   /**
-   * The community's endorsement record for this grant — the identifier vtc/endorsements/revoke takes.
+   * The community's record of this grant's credential and its status-list slot — the identifier vtc/endorsements/revoke takes to revoke it. The name is kept from when the role credential was an endorsement; the credential is a Verifiable Authority Credential.
    */
   endorsementId: string;
   /**
-   * The `id` of the role credential, a URI.
+   * The `id` of the role credential (the Verifiable Authority Credential), a URI.
    */
   credentialId: string;
   /**
@@ -71,7 +71,7 @@ export const PAYLOAD_SCHEMA = {
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "$id": "https://trusttasks.org/spec/vtc/vetting/vetters/grant/0.1",
   "title": "VTC Vetting — Vetters Grant — payload",
-  "description": "A community administrator makes a member a vetter. The community issues the member a revocable `CommunityRole` endorsement credential for the `vetter` role, delivers it over credential-exchange/issue, and returns the identifiers and validity of the grant. A member who already holds a live grant gets that grant back unchanged.",
+  "description": "A community administrator makes a member a vetter. The community issues the member a revocable Verifiable Authority Credential (`AuthorityCredential`) whose `authority` is the action `role:vetter` at the community's DID, delivers it over credential-exchange/issue, and returns the identifiers and validity of the grant. A member who already holds a live grant gets that grant back unchanged.",
   "type": "object",
   "additionalProperties": false,
   "required": [
@@ -111,14 +111,14 @@ export const PAYLOAD_SCHEMA = {
           "type": "string",
           "minLength": 1,
           "maxLength": 128,
-          "description": "The community's endorsement record for this grant — the identifier vtc/endorsements/revoke takes."
+          "description": "The community's record of this grant's credential and its status-list slot — the identifier vtc/endorsements/revoke takes to revoke it. The name is kept from when the role credential was an endorsement; the credential is a Verifiable Authority Credential."
         },
         "credentialId": {
           "type": "string",
           "minLength": 1,
           "maxLength": 512,
           "pattern": "^[a-zA-Z][a-zA-Z0-9+.-]*:\\S+$",
-          "description": "The `id` of the role credential, a URI."
+          "description": "The `id` of the role credential (the Verifiable Authority Credential), a URI."
         },
         "validFrom": {
           "type": "string",
@@ -170,14 +170,14 @@ export const RESPONSE_PAYLOAD_SCHEMA = {
           "type": "string",
           "minLength": 1,
           "maxLength": 128,
-          "description": "The community's endorsement record for this grant — the identifier vtc/endorsements/revoke takes."
+          "description": "The community's record of this grant's credential and its status-list slot — the identifier vtc/endorsements/revoke takes to revoke it. The name is kept from when the role credential was an endorsement; the credential is a Verifiable Authority Credential."
         },
         "credentialId": {
           "type": "string",
           "minLength": 1,
           "maxLength": 512,
           "pattern": "^[a-zA-Z][a-zA-Z0-9+.-]*:\\S+$",
-          "description": "The `id` of the role credential, a URI."
+          "description": "The `id` of the role credential (the Verifiable Authority Credential), a URI."
         },
         "validFrom": {
           "type": "string",

package/src/witness/session/submit/0.1/payload.ts

@@ -21,7 +21,7 @@ export interface WitnessSessionSubmitPayload {
  */
 export interface WitnessSessionSubmitResponsePayload {
   /**
-   * A signed Verifiable Witness Credential (opaque here; its schema belongs to DTG Core Credentials). Its taskContext MUST equal the id of the witness/session document that opened this session — the innermost exchange that attests the witnessing (SPEC.md §4.9.1) — and its taskDigestMultibase MUST be that document's task digest (SPEC.md §4.9.3). The id locates the session document; the digest binds it, because an id is a name anyone can reuse on a counterfeit.
+   * A signed Verifiable Witness Credential: a DTG Verifiable Statement Credential (`type` including `StatementCredential`) under the predicate `https://registry.trustoverip.org/dtg/vsc/witnessed/1` (opaque here; its schema belongs to the DTG Credentials Core Specification). Its issuer is the witness, with `issuerScope` `directed` or `public`; its `credentialSubject.id` is the submitting party, the issuer of the relationship credential the witness observed; and its `credentialSubject.object.digestMultibase` is that credential's digest. Its taskContext MUST equal the id of the witness/session document that opened this session — the innermost exchange that attests the witnessing (SPEC.md §4.9.1) — and its taskDigestMultibase MUST be that document's task digest (SPEC.md §4.9.3). The id locates the session document; the digest binds it, because an id is a name anyone can reuse on a counterfeit.
    */
   vwc: {};
   /**
@@ -88,7 +88,7 @@ export const PAYLOAD_SCHEMA = {
       "properties": {
         "vwc": {
           "type": "object",
-          "description": "A signed Verifiable Witness Credential (opaque here; its schema belongs to DTG Core Credentials). Its taskContext MUST equal the id of the witness/session document that opened this session — the innermost exchange that attests the witnessing (SPEC.md §4.9.1) — and its taskDigestMultibase MUST be that document's task digest (SPEC.md §4.9.3). The id locates the session document; the digest binds it, because an id is a name anyone can reuse on a counterfeit."
+          "description": "A signed Verifiable Witness Credential: a DTG Verifiable Statement Credential (`type` including `StatementCredential`) under the predicate `https://registry.trustoverip.org/dtg/vsc/witnessed/1` (opaque here; its schema belongs to the DTG Credentials Core Specification). Its issuer is the witness, with `issuerScope` `directed` or `public`; its `credentialSubject.id` is the submitting party, the issuer of the relationship credential the witness observed; and its `credentialSubject.object.digestMultibase` is that credential's digest. Its taskContext MUST equal the id of the witness/session document that opened this session — the innermost exchange that attests the witnessing (SPEC.md §4.9.1) — and its taskDigestMultibase MUST be that document's task digest (SPEC.md §4.9.3). The id locates the session document; the digest binds it, because an id is a name anyone can reuse on a counterfeit."
         },
         "vwcDigestMultibase": {
           "$ref": "#/$defs/DigestMultibase",
@@ -140,7 +140,7 @@ export const RESPONSE_PAYLOAD_SCHEMA = {
       "properties": {
         "vwc": {
           "type": "object",
-          "description": "A signed Verifiable Witness Credential (opaque here; its schema belongs to DTG Core Credentials). Its taskContext MUST equal the id of the witness/session document that opened this session — the innermost exchange that attests the witnessing (SPEC.md §4.9.1) — and its taskDigestMultibase MUST be that document's task digest (SPEC.md §4.9.3). The id locates the session document; the digest binds it, because an id is a name anyone can reuse on a counterfeit."
+          "description": "A signed Verifiable Witness Credential: a DTG Verifiable Statement Credential (`type` including `StatementCredential`) under the predicate `https://registry.trustoverip.org/dtg/vsc/witnessed/1` (opaque here; its schema belongs to the DTG Credentials Core Specification). Its issuer is the witness, with `issuerScope` `directed` or `public`; its `credentialSubject.id` is the submitting party, the issuer of the relationship credential the witness observed; and its `credentialSubject.object.digestMultibase` is that credential's digest. Its taskContext MUST equal the id of the witness/session document that opened this session — the innermost exchange that attests the witnessing (SPEC.md §4.9.1) — and its taskDigestMultibase MUST be that document's task digest (SPEC.md §4.9.3). The id locates the session document; the digest binds it, because an id is a name anyone can reuse on a counterfeit."
         },
         "vwcDigestMultibase": {
           "$ref": "#/$defs/DigestMultibase",