@openvtc/trust-tasks 0.21.6 → 0.21.8
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +71 -0
- package/dist/vault/sign-trust-task/0.1/payload.d.ts +5 -5
- package/dist/vault/sign-trust-task/0.1/payload.js +2 -2
- package/dist/vault/sign-trust-task/0.1/payload.js.map +1 -1
- package/dist/vault/sign-trust-task/0.2/payload.d.ts +5 -5
- package/dist/vault/sign-trust-task/0.2/payload.js +2 -2
- package/dist/vault/sign-trust-task/0.2/payload.js.map +1 -1
- package/package.json +1 -1
- package/src/vault/sign-trust-task/0.1/payload.ts +3 -3
- package/src/vault/sign-trust-task/0.2/payload.ts +3 -3
package/CHANGELOG.md
CHANGED
|
@@ -11,6 +11,77 @@ The package versions over **its own API** — what a consumer compiles against
|
|
|
11
11
|
not over `SPEC.md`. Below 1.0 a breaking change bumps the leading non-zero
|
|
12
12
|
component.
|
|
13
13
|
|
|
14
|
+
## 0.21.8 — 2026-09-27
|
|
15
|
+
|
|
16
|
+
|
|
17
|
+
### Specifications
|
|
18
|
+
|
|
19
|
+
- **vault/sign-trust-task**: The proof purpose follows the document type (#667)
|
|
20
|
+
|
|
21
|
+
* spec(vault/sign-trust-task): the proof purpose follows the document type
|
|
22
|
+
|
|
23
|
+
An operational document is signed for authentication; assertionMethod only
|
|
24
|
+
for types whose specification defines them as the issuer's attestation
|
|
25
|
+
(approve-response, task-consent/decision, confirm/response). The maintainer
|
|
26
|
+
decides it from type, never the consumer. Aligns 0.1 and 0.2 with the
|
|
27
|
+
framework's proof-purpose rule.
|
|
28
|
+
|
|
29
|
+
## 0.21.7 — 2026-09-27
|
|
30
|
+
|
|
31
|
+
|
|
32
|
+
### Fixed
|
|
33
|
+
|
|
34
|
+
- **codegen**: Generate usable types for oneOf branches that use not (#665)
|
|
35
|
+
|
|
36
|
+
typify (0.6) merges a `oneOf` branch's own keywords into the untagged
|
|
37
|
+
enum variant it synthesizes for that branch. A bare `not: {"required":
|
|
38
|
+
["x"]}` is a shape it handles directly — property `x` is simply absent
|
|
39
|
+
from that variant. Wrap the same exclusion in `anyOf` (the shape a
|
|
40
|
+
3-way mutual-exclusion group needs, e.g.
|
|
41
|
+
auth/passkey/enroll/invite/update/0.1's role/expiresAt/extendBy) and
|
|
42
|
+
typify's merge instead produces an uninhabited `pub enum
|
|
43
|
+
PayloadVariant0 {}` for that branch, so a payload carrying only `role`
|
|
44
|
+
(plus `inviteId`) could never deserialize — and silently drops a
|
|
45
|
+
property required only by that branch from every *other* branch's
|
|
46
|
+
variant too, so `role` + `expiresAt` together also failed to
|
|
47
|
+
round-trip. auth/revoke-session/0.2 has the same three-way `not:
|
|
48
|
+
{anyOf: [...]}` shape and produced the same uninhabited nested type,
|
|
49
|
+
though there it never broke a valid document (no shared field to
|
|
50
|
+
drop).
|
|
51
|
+
|
|
52
|
+
Only conformance example exercised extendBy alone, which is why this
|
|
53
|
+
was never caught. Added role-only, expiresAt-only and role+expiresAt
|
|
54
|
+
examples to auth/passkey/enroll/invite/update/0.1's spec.md, one per
|
|
55
|
+
oneOf branch plus their combination.
|
|
56
|
+
|
|
57
|
+
Fixed with a new preprocessing pass in trust-tasks-codegen,
|
|
58
|
+
desugar_oneof_with_compound_not, which drops a oneOf combinator from
|
|
59
|
+
the copy of the schema handed to typify whenever any branch's not is
|
|
60
|
+
more than a single {"required": ["x"]} guard. Re-expressing the oneOf
|
|
61
|
+
as anyOf (at least one) plus a pairwise not (no two at once) -
|
|
62
|
+
oneOf's own JSON Schema definition - was tried first and does not
|
|
63
|
+
help: typify applies the identical broken merge to a not wrapping
|
|
64
|
+
anyOf/allOf regardless of which combinator carries it. The wire
|
|
65
|
+
schema (SCHEMA_JSON / ValidatedPayload::validate_value, and the
|
|
66
|
+
TypeScript/Go/Dart bindings, generated independently of typify) is
|
|
67
|
+
captured before this pass runs and is unaffected, so the actual
|
|
68
|
+
mutual-exclusion constraint is still enforced at runtime; only the
|
|
69
|
+
Rust type for the two affected specs becomes fully permissive, matching
|
|
70
|
+
what the other three languages already generate for this schema. A
|
|
71
|
+
plain discriminated oneOf (every branch's not, if any, a single
|
|
72
|
+
{"required": ["x"]}) is untouched and still renders as a clean Rust
|
|
73
|
+
enum.
|
|
74
|
+
|
|
75
|
+
Scanned every schema under specs/ for a oneOf/anyOf branch using not.
|
|
76
|
+
Only these two combine it with oneOf; the rest (auth/revoke-session/0.1,
|
|
77
|
+
vta/app-state/put/1.0, vta/app-state/put-many/1.0,
|
|
78
|
+
vtc/registry/sync-jobs/retry/0.1, credential-exchange/issue/0.1, and a
|
|
79
|
+
few uses of not outside any oneOf) were unaffected and are unchanged
|
|
80
|
+
after regenerating.
|
|
81
|
+
|
|
82
|
+
Regenerated all four bindings; only the two affected Rust modules
|
|
83
|
+
changed.
|
|
84
|
+
|
|
14
85
|
## 0.21.6 — 2026-09-27
|
|
15
86
|
|
|
16
87
|
|
|
@@ -64,7 +64,7 @@ export interface UnsignedTrustTaskEnvelope {
|
|
|
64
64
|
}
|
|
65
65
|
export interface VaultSignTrustTaskResponsePayload {
|
|
66
66
|
/**
|
|
67
|
-
* The supplied `unsignedEnvelope` with a Data Integrity `proof` attached. `proof.verificationMethod` is `<principalDid>#<signingKeyId>`; `proof.proofPurpose` is `assertionMethod
|
|
67
|
+
* The supplied `unsignedEnvelope` with a Data Integrity `proof` attached. `proof.verificationMethod` is `<principalDid>#<signingKeyId>`; `proof.proofPurpose` is `assertionMethod` only when the envelope's `type` is a `https://trusttasks.org` request of `auth/step-up/approve-response`, `task-consent/decision` or `confirm/response` (the closed list of attestations), and `authentication` for every other, operational, document — decided by the maintainer from `type`, never by the consumer; `proof.cryptosuite` is `eddsa-jcs-2022`. All other members of the envelope (`id`, `type`, `issuer`, `recipient`, `issuedAt`, `expiresAt`, `payload`, `ext`) are unchanged from the request.
|
|
68
68
|
*/
|
|
69
69
|
signedEnvelope: {};
|
|
70
70
|
ext?: Ext;
|
|
@@ -182,7 +182,7 @@ export declare const PAYLOAD_SCHEMA: {
|
|
|
182
182
|
readonly properties: {
|
|
183
183
|
readonly signedEnvelope: {
|
|
184
184
|
readonly type: "object";
|
|
185
|
-
readonly description: "The supplied `unsignedEnvelope` with a Data Integrity `proof` attached. `proof.verificationMethod` is `<principalDid>#<signingKeyId>`; `proof.proofPurpose` is `assertionMethod
|
|
185
|
+
readonly description: "The supplied `unsignedEnvelope` with a Data Integrity `proof` attached. `proof.verificationMethod` is `<principalDid>#<signingKeyId>`; `proof.proofPurpose` is `assertionMethod` only when the envelope's `type` is a `https://trusttasks.org` request of `auth/step-up/approve-response`, `task-consent/decision` or `confirm/response` (the closed list of attestations), and `authentication` for every other, operational, document — decided by the maintainer from `type`, never by the consumer; `proof.cryptosuite` is `eddsa-jcs-2022`. All other members of the envelope (`id`, `type`, `issuer`, `recipient`, `issuedAt`, `expiresAt`, `payload`, `ext`) are unchanged from the request.";
|
|
186
186
|
readonly required: readonly ["id", "type", "issuer", "recipient", "issuedAt", "payload", "proof"];
|
|
187
187
|
};
|
|
188
188
|
readonly ext: {
|
|
@@ -313,7 +313,7 @@ export declare const RESPONSE_PAYLOAD_SCHEMA: {
|
|
|
313
313
|
readonly properties: {
|
|
314
314
|
readonly signedEnvelope: {
|
|
315
315
|
readonly type: "object";
|
|
316
|
-
readonly description: "The supplied `unsignedEnvelope` with a Data Integrity `proof` attached. `proof.verificationMethod` is `<principalDid>#<signingKeyId>`; `proof.proofPurpose` is `assertionMethod
|
|
316
|
+
readonly description: "The supplied `unsignedEnvelope` with a Data Integrity `proof` attached. `proof.verificationMethod` is `<principalDid>#<signingKeyId>`; `proof.proofPurpose` is `assertionMethod` only when the envelope's `type` is a `https://trusttasks.org` request of `auth/step-up/approve-response`, `task-consent/decision` or `confirm/response` (the closed list of attestations), and `authentication` for every other, operational, document — decided by the maintainer from `type`, never by the consumer; `proof.cryptosuite` is `eddsa-jcs-2022`. All other members of the envelope (`id`, `type`, `issuer`, `recipient`, `issuedAt`, `expiresAt`, `payload`, `ext`) are unchanged from the request.";
|
|
317
317
|
readonly required: readonly ["id", "type", "issuer", "recipient", "issuedAt", "payload", "proof"];
|
|
318
318
|
};
|
|
319
319
|
readonly ext: {
|
|
@@ -482,7 +482,7 @@ export declare const SPEC: {
|
|
|
482
482
|
readonly properties: {
|
|
483
483
|
readonly signedEnvelope: {
|
|
484
484
|
readonly type: "object";
|
|
485
|
-
readonly description: "The supplied `unsignedEnvelope` with a Data Integrity `proof` attached. `proof.verificationMethod` is `<principalDid>#<signingKeyId>`; `proof.proofPurpose` is `assertionMethod
|
|
485
|
+
readonly description: "The supplied `unsignedEnvelope` with a Data Integrity `proof` attached. `proof.verificationMethod` is `<principalDid>#<signingKeyId>`; `proof.proofPurpose` is `assertionMethod` only when the envelope's `type` is a `https://trusttasks.org` request of `auth/step-up/approve-response`, `task-consent/decision` or `confirm/response` (the closed list of attestations), and `authentication` for every other, operational, document — decided by the maintainer from `type`, never by the consumer; `proof.cryptosuite` is `eddsa-jcs-2022`. All other members of the envelope (`id`, `type`, `issuer`, `recipient`, `issuedAt`, `expiresAt`, `payload`, `ext`) are unchanged from the request.";
|
|
486
486
|
readonly required: readonly ["id", "type", "issuer", "recipient", "issuedAt", "payload", "proof"];
|
|
487
487
|
};
|
|
488
488
|
readonly ext: {
|
|
@@ -624,7 +624,7 @@ export declare const RESPONSE_SPEC: {
|
|
|
624
624
|
readonly properties: {
|
|
625
625
|
readonly signedEnvelope: {
|
|
626
626
|
readonly type: "object";
|
|
627
|
-
readonly description: "The supplied `unsignedEnvelope` with a Data Integrity `proof` attached. `proof.verificationMethod` is `<principalDid>#<signingKeyId>`; `proof.proofPurpose` is `assertionMethod
|
|
627
|
+
readonly description: "The supplied `unsignedEnvelope` with a Data Integrity `proof` attached. `proof.verificationMethod` is `<principalDid>#<signingKeyId>`; `proof.proofPurpose` is `assertionMethod` only when the envelope's `type` is a `https://trusttasks.org` request of `auth/step-up/approve-response`, `task-consent/decision` or `confirm/response` (the closed list of attestations), and `authentication` for every other, operational, document — decided by the maintainer from `type`, never by the consumer; `proof.cryptosuite` is `eddsa-jcs-2022`. All other members of the envelope (`id`, `type`, `issuer`, `recipient`, `issuedAt`, `expiresAt`, `payload`, `ext`) are unchanged from the request.";
|
|
628
628
|
readonly required: readonly ["id", "type", "issuer", "recipient", "issuedAt", "payload", "proof"];
|
|
629
629
|
};
|
|
630
630
|
readonly ext: {
|
|
@@ -123,7 +123,7 @@ export const PAYLOAD_SCHEMA = {
|
|
|
123
123
|
"properties": {
|
|
124
124
|
"signedEnvelope": {
|
|
125
125
|
"type": "object",
|
|
126
|
-
"description": "The supplied `unsignedEnvelope` with a Data Integrity `proof` attached. `proof.verificationMethod` is `<principalDid>#<signingKeyId>`; `proof.proofPurpose` is `assertionMethod
|
|
126
|
+
"description": "The supplied `unsignedEnvelope` with a Data Integrity `proof` attached. `proof.verificationMethod` is `<principalDid>#<signingKeyId>`; `proof.proofPurpose` is `assertionMethod` only when the envelope's `type` is a `https://trusttasks.org` request of `auth/step-up/approve-response`, `task-consent/decision` or `confirm/response` (the closed list of attestations), and `authentication` for every other, operational, document — decided by the maintainer from `type`, never by the consumer; `proof.cryptosuite` is `eddsa-jcs-2022`. All other members of the envelope (`id`, `type`, `issuer`, `recipient`, `issuedAt`, `expiresAt`, `payload`, `ext`) are unchanged from the request.",
|
|
127
127
|
"required": [
|
|
128
128
|
"id",
|
|
129
129
|
"type",
|
|
@@ -287,7 +287,7 @@ export const RESPONSE_PAYLOAD_SCHEMA = {
|
|
|
287
287
|
"properties": {
|
|
288
288
|
"signedEnvelope": {
|
|
289
289
|
"type": "object",
|
|
290
|
-
"description": "The supplied `unsignedEnvelope` with a Data Integrity `proof` attached. `proof.verificationMethod` is `<principalDid>#<signingKeyId>`; `proof.proofPurpose` is `assertionMethod
|
|
290
|
+
"description": "The supplied `unsignedEnvelope` with a Data Integrity `proof` attached. `proof.verificationMethod` is `<principalDid>#<signingKeyId>`; `proof.proofPurpose` is `assertionMethod` only when the envelope's `type` is a `https://trusttasks.org` request of `auth/step-up/approve-response`, `task-consent/decision` or `confirm/response` (the closed list of attestations), and `authentication` for every other, operational, document — decided by the maintainer from `type`, never by the consumer; `proof.cryptosuite` is `eddsa-jcs-2022`. All other members of the envelope (`id`, `type`, `issuer`, `recipient`, `issuedAt`, `expiresAt`, `payload`, `ext`) are unchanged from the request.",
|
|
291
291
|
"required": [
|
|
292
292
|
"id",
|
|
293
293
|
"type",
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"payload.js","sourceRoot":"","sources":["../../../../src/vault/sign-trust-task/0.1/payload.ts"],"names":[],"mappings":"AAAA;;;GAGG;AA2EH,2BAA2B;AAC3B,MAAM,CAAC,MAAM,QAAQ,GAAG,uDAAgE,CAAC;AAKzF,qEAAqE;AACrE,MAAM,CAAC,MAAM,iBAAiB,GAAG,gEAAyE,CAAC;AAK3G;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,SAAS,EAAE,8CAA8C;IACzD,KAAK,EAAE,uDAAuD;IAC9D,OAAO,EAAE,iCAAiC;IAC1C,aAAa,EAAE,4cAA4c;IAC3d,MAAM,EAAE,QAAQ;IAChB,sBAAsB,EAAE,KAAK;IAC7B,UAAU,EAAE;QACV,SAAS;QACT,kBAAkB;KACnB;IACD,YAAY,EAAE;QACZ,SAAS,EAAE;YACT,MAAM,EAAE,QAAQ;YAChB,WAAW,EAAE,CAAC;YACd,aAAa,EAAE,yNAAyN;SACzO;QACD,kBAAkB,EAAE;YAClB,MAAM,EAAE,mCAAmC;YAC3C,aAAa,EAAE,4SAA4S;SAC5T;QACD,iBAAiB,EAAE;YACjB,MAAM,EAAE,yBAAyB;YACjC,aAAa,EAAE,0DAA0D;SAC1E;QACD,aAAa,EAAE;YACb,MAAM,EAAE,qBAAqB;YAC7B,aAAa,EAAE,gDAAgD;SAChE;QACD,KAAK,EAAE;YACL,MAAM,EAAE,aAAa;SACtB;KACF;IACD,OAAO,EAAE;QACP,2BAA2B,EAAE;YAC3B,SAAS,EAAE,mBAAmB;YAC9B,OAAO,EAAE,8BAA8B;YACvC,aAAa,EAAE,+QAA+Q;YAC9R,MAAM,EAAE,QAAQ;YAChB,UAAU,EAAE;gBACV,IAAI;gBACJ,MAAM;gBACN,QAAQ;gBACR,WAAW;gBACX,UAAU;gBACV,SAAS;aACV;YACD,YAAY,EAAE;gBACZ,IAAI,EAAE;oBACJ,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,6DAA6D;iBAC7E;gBACD,UAAU,EAAE;oBACV,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,qDAAqD;iBACrE;gBACD,MAAM,EAAE;oBACN,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,KAAK;oBACf,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,sFAAsF;iBACtG;gBACD,QAAQ,EAAE;oBACR,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,oKAAoK;iBACpL;gBACD,WAAW,EAAE;oBACX,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,wFAAwF;iBACxG;gBACD,UAAU,EAAE;oBACV,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,WAAW;oBACrB,aAAa,EAAE,wJAAwJ;iBACxK;gBACD,WAAW,EAAE;oBACX,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,WAAW;oBACrB,aAAa,EAAE,kHAAkH;iBAClI;gBACD,SAAS,EAAE;oBACT,aAAa,EAAE,4GAA4G;iBAC5H;gBACD,KAAK,EAAE;oBACL,MAAM,EAAE,aAAa;iBACtB;aACF;YACD,KAAK,EAAE;gBACL,UAAU,EAAE;oBACV,OAAO;iBACR;aACF;SACF;QACD,UAAU,EAAE;YACV,SAAS,EAAE,UAAU;YACrB,OAAO,EAAE,0CAA0C;YACnD,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,gBAAgB;aACjB;YACD,YAAY,EAAE;gBACZ,gBAAgB,EAAE;oBAChB,MAAM,EAAE,QAAQ;oBAChB,aAAa,EAAE
|
|
1
|
+
{"version":3,"file":"payload.js","sourceRoot":"","sources":["../../../../src/vault/sign-trust-task/0.1/payload.ts"],"names":[],"mappings":"AAAA;;;GAGG;AA2EH,2BAA2B;AAC3B,MAAM,CAAC,MAAM,QAAQ,GAAG,uDAAgE,CAAC;AAKzF,qEAAqE;AACrE,MAAM,CAAC,MAAM,iBAAiB,GAAG,gEAAyE,CAAC;AAK3G;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,SAAS,EAAE,8CAA8C;IACzD,KAAK,EAAE,uDAAuD;IAC9D,OAAO,EAAE,iCAAiC;IAC1C,aAAa,EAAE,4cAA4c;IAC3d,MAAM,EAAE,QAAQ;IAChB,sBAAsB,EAAE,KAAK;IAC7B,UAAU,EAAE;QACV,SAAS;QACT,kBAAkB;KACnB;IACD,YAAY,EAAE;QACZ,SAAS,EAAE;YACT,MAAM,EAAE,QAAQ;YAChB,WAAW,EAAE,CAAC;YACd,aAAa,EAAE,yNAAyN;SACzO;QACD,kBAAkB,EAAE;YAClB,MAAM,EAAE,mCAAmC;YAC3C,aAAa,EAAE,4SAA4S;SAC5T;QACD,iBAAiB,EAAE;YACjB,MAAM,EAAE,yBAAyB;YACjC,aAAa,EAAE,0DAA0D;SAC1E;QACD,aAAa,EAAE;YACb,MAAM,EAAE,qBAAqB;YAC7B,aAAa,EAAE,gDAAgD;SAChE;QACD,KAAK,EAAE;YACL,MAAM,EAAE,aAAa;SACtB;KACF;IACD,OAAO,EAAE;QACP,2BAA2B,EAAE;YAC3B,SAAS,EAAE,mBAAmB;YAC9B,OAAO,EAAE,8BAA8B;YACvC,aAAa,EAAE,+QAA+Q;YAC9R,MAAM,EAAE,QAAQ;YAChB,UAAU,EAAE;gBACV,IAAI;gBACJ,MAAM;gBACN,QAAQ;gBACR,WAAW;gBACX,UAAU;gBACV,SAAS;aACV;YACD,YAAY,EAAE;gBACZ,IAAI,EAAE;oBACJ,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,6DAA6D;iBAC7E;gBACD,UAAU,EAAE;oBACV,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,qDAAqD;iBACrE;gBACD,MAAM,EAAE;oBACN,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,KAAK;oBACf,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,sFAAsF;iBACtG;gBACD,QAAQ,EAAE;oBACR,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,oKAAoK;iBACpL;gBACD,WAAW,EAAE;oBACX,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,wFAAwF;iBACxG;gBACD,UAAU,EAAE;oBACV,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,WAAW;oBACrB,aAAa,EAAE,wJAAwJ;iBACxK;gBACD,WAAW,EAAE;oBACX,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,WAAW;oBACrB,aAAa,EAAE,kHAAkH;iBAClI;gBACD,SAAS,EAAE;oBACT,aAAa,EAAE,4GAA4G;iBAC5H;gBACD,KAAK,EAAE;oBACL,MAAM,EAAE,aAAa;iBACtB;aACF;YACD,KAAK,EAAE;gBACL,UAAU,EAAE;oBACV,OAAO;iBACR;aACF;SACF;QACD,UAAU,EAAE;YACV,SAAS,EAAE,UAAU;YACrB,OAAO,EAAE,0CAA0C;YACnD,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,gBAAgB;aACjB;YACD,YAAY,EAAE;gBACZ,gBAAgB,EAAE;oBAChB,MAAM,EAAE,QAAQ;oBAChB,aAAa,EAAE,qqBAAqqB;oBACprB,UAAU,EAAE;wBACV,IAAI;wBACJ,MAAM;wBACN,QAAQ;wBACR,WAAW;wBACX,UAAU;wBACV,SAAS;wBACT,OAAO;qBACR;iBACF;gBACD,KAAK,EAAE;oBACL,MAAM,EAAE,aAAa;iBACtB;aACF;SACF;QACD,KAAK,EAAE;YACL,OAAO,EAAE,KAAK;YACd,aAAa,EAAE,uKAAuK;YACtL,MAAM,EAAE,QAAQ;YAChB,eAAe,EAAE,CAAC;YAClB,sBAAsB,EAAE,IAAI;YAC5B,eAAe,EAAE;gBACf,SAAS,EAAE,mCAAmC;aAC/C;SACF;QACD,aAAa,EAAE;YACb,OAAO,EAAE,aAAa;YACtB,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,MAAM;gBACN,OAAO;gBACP,aAAa;aACd;YACD,YAAY,EAAE;gBACZ,MAAM,EAAE;oBACN,MAAM,EAAE,QAAQ;oBAChB,MAAM,EAAE;wBACN,aAAa;wBACb,eAAe;wBACf,MAAM;qBACP;iBACF;gBACD,OAAO,EAAE;oBACP,MAAM,EAAE,QAAQ;oBAChB,aAAa,EAAE,uHAAuH;iBACvI;gBACD,aAAa,EAAE;oBACb,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,uDAAuD;iBACvE;aACF;SACF;QACD,iBAAiB,EAAE;YACjB,OAAO,EAAE,iBAAiB;YAC1B,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,YAAY,EAAE;gBACZ,UAAU,EAAE;oBACV,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,4HAA4H;iBAC5I;gBACD,wBAAwB,EAAE;oBACxB,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,WAAW;oBACrB,aAAa,EAAE,8JAA8J;iBAC9K;gBACD,cAAc,EAAE;oBACd,MAAM,EAAE,QAAQ;oBAChB,MAAM,EAAE;wBACN,SAAS;wBACT,MAAM;wBACN,MAAM;wBACN,QAAQ;wBACR,KAAK;qBACN;oBACD,aAAa,EAAE,qDAAqD;iBACrE;aACF;SACF;KACF;CACO,CAAC;AAEX,mEAAmE;AACnE,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,SAAS,EAAE,8CAA8C;IACzD,MAAM,EAAE,kBAAkB;IAC1B,OAAO,EAAE;QACP,2BAA2B,EAAE;YAC3B,SAAS,EAAE,mBAAmB;YAC9B,OAAO,EAAE,8BAA8B;YACvC,aAAa,EAAE,+QAA+Q;YAC9R,MAAM,EAAE,QAAQ;YAChB,UAAU,EAAE;gBACV,IAAI;gBACJ,MAAM;gBACN,QAAQ;gBACR,WAAW;gBACX,UAAU;gBACV,SAAS;aACV;YACD,YAAY,EAAE;gBACZ,IAAI,EAAE;oBACJ,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,6DAA6D;iBAC7E;gBACD,UAAU,EAAE;oBACV,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,qDAAqD;iBACrE;gBACD,MAAM,EAAE;oBACN,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,KAAK;oBACf,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,sFAAsF;iBACtG;gBACD,QAAQ,EAAE;oBACR,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,oKAAoK;iBACpL;gBACD,WAAW,EAAE;oBACX,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,wFAAwF;iBACxG;gBACD,UAAU,EAAE;oBACV,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,WAAW;oBACrB,aAAa,EAAE,wJAAwJ;iBACxK;gBACD,WAAW,EAAE;oBACX,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,WAAW;oBACrB,aAAa,EAAE,kHAAkH;iBAClI;gBACD,SAAS,EAAE;oBACT,aAAa,EAAE,4GAA4G;iBAC5H;gBACD,KAAK,EAAE;oBACL,MAAM,EAAE,aAAa;iBACtB;aACF;YACD,KAAK,EAAE;gBACL,UAAU,EAAE;oBACV,OAAO;iBACR;aACF;SACF;QACD,UAAU,EAAE;YACV,SAAS,EAAE,UAAU;YACrB,OAAO,EAAE,0CAA0C;YACnD,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,gBAAgB;aACjB;YACD,YAAY,EAAE;gBACZ,gBAAgB,EAAE;oBAChB,MAAM,EAAE,QAAQ;oBAChB,aAAa,EAAE,qqBAAqqB;oBACprB,UAAU,EAAE;wBACV,IAAI;wBACJ,MAAM;wBACN,QAAQ;wBACR,WAAW;wBACX,UAAU;wBACV,SAAS;wBACT,OAAO;qBACR;iBACF;gBACD,KAAK,EAAE;oBACL,MAAM,EAAE,aAAa;iBACtB;aACF;SACF;QACD,KAAK,EAAE;YACL,OAAO,EAAE,KAAK;YACd,aAAa,EAAE,uKAAuK;YACtL,MAAM,EAAE,QAAQ;YAChB,eAAe,EAAE,CAAC;YAClB,sBAAsB,EAAE,IAAI;YAC5B,eAAe,EAAE;gBACf,SAAS,EAAE,mCAAmC;aAC/C;SACF;QACD,aAAa,EAAE;YACb,OAAO,EAAE,aAAa;YACtB,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,MAAM;gBACN,OAAO;gBACP,aAAa;aACd;YACD,YAAY,EAAE;gBACZ,MAAM,EAAE;oBACN,MAAM,EAAE,QAAQ;oBAChB,MAAM,EAAE;wBACN,aAAa;wBACb,eAAe;wBACf,MAAM;qBACP;iBACF;gBACD,OAAO,EAAE;oBACP,MAAM,EAAE,QAAQ;oBAChB,aAAa,EAAE,uHAAuH;iBACvI;gBACD,aAAa,EAAE;oBACb,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,uDAAuD;iBACvE;aACF;SACF;QACD,iBAAiB,EAAE;YACjB,OAAO,EAAE,iBAAiB;YAC1B,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,YAAY,EAAE;gBACZ,UAAU,EAAE;oBACV,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,4HAA4H;iBAC5I;gBACD,wBAAwB,EAAE;oBACxB,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,WAAW;oBACrB,aAAa,EAAE,8JAA8J;iBAC9K;gBACD,cAAc,EAAE;oBACd,MAAM,EAAE,QAAQ;oBAChB,MAAM,EAAE;wBACN,SAAS;wBACT,MAAM;wBACN,MAAM;wBACN,QAAQ;wBACR,KAAK;qBACN;oBACD,aAAa,EAAE,qDAAqD;iBACrE;aACF;SACF;KACF;CACO,CAAC;AAEX;;;;;GAKG;AACH,MAAM,CAAC,MAAM,IAAI,GAAG;IAClB,OAAO,EAAE,QAAQ;IACjB,QAAQ,EAAE,KAAK;IACf,eAAe,EAAE,IAAI;IACrB,mBAAmB,EAAE,IAAI;IACzB,kBAAkB,EAAE,IAAI;IACxB,aAAa,EAAE,cAAc;CACrB,CAAC;AAEX;;;;GAIG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,OAAO,EAAE,iBAAiB;IAC1B,QAAQ,EAAE,KAAK;IACf,eAAe,EAAE,IAAI;IACrB,mBAAmB,EAAE,IAAI;IACzB,kBAAkB,EAAE,IAAI;IACxB,aAAa,EAAE,uBAAuB;CAC9B,CAAC"}
|
|
@@ -64,7 +64,7 @@ export interface UnsignedTrustTaskEnvelope {
|
|
|
64
64
|
}
|
|
65
65
|
export interface VaultSignTrustTaskResponsePayload {
|
|
66
66
|
/**
|
|
67
|
-
* The supplied `unsignedEnvelope` with a Data Integrity `proof` attached. `proof.verificationMethod` is `<principalDid>#<signingKeyId>`; `proof.proofPurpose` is `assertionMethod
|
|
67
|
+
* The supplied `unsignedEnvelope` with a Data Integrity `proof` attached. `proof.verificationMethod` is `<principalDid>#<signingKeyId>`; `proof.proofPurpose` is `assertionMethod` only when the envelope's `type` is a `https://trusttasks.org` request of `auth/step-up/approve-response`, `task-consent/decision` or `confirm/response` (the closed list of attestations), and `authentication` for every other, operational, document — decided by the maintainer from `type`, never by the consumer; `proof.cryptosuite` is `eddsa-jcs-2022`. All other members of the envelope (`id`, `type`, `issuer`, `recipient`, `issuedAt`, `expiresAt`, `payload`, `ext`) are unchanged from the request.
|
|
68
68
|
*/
|
|
69
69
|
signedEnvelope: {};
|
|
70
70
|
ext?: Ext;
|
|
@@ -182,7 +182,7 @@ export declare const PAYLOAD_SCHEMA: {
|
|
|
182
182
|
readonly properties: {
|
|
183
183
|
readonly signedEnvelope: {
|
|
184
184
|
readonly type: "object";
|
|
185
|
-
readonly description: "The supplied `unsignedEnvelope` with a Data Integrity `proof` attached. `proof.verificationMethod` is `<principalDid>#<signingKeyId>`; `proof.proofPurpose` is `assertionMethod
|
|
185
|
+
readonly description: "The supplied `unsignedEnvelope` with a Data Integrity `proof` attached. `proof.verificationMethod` is `<principalDid>#<signingKeyId>`; `proof.proofPurpose` is `assertionMethod` only when the envelope's `type` is a `https://trusttasks.org` request of `auth/step-up/approve-response`, `task-consent/decision` or `confirm/response` (the closed list of attestations), and `authentication` for every other, operational, document — decided by the maintainer from `type`, never by the consumer; `proof.cryptosuite` is `eddsa-jcs-2022`. All other members of the envelope (`id`, `type`, `issuer`, `recipient`, `issuedAt`, `expiresAt`, `payload`, `ext`) are unchanged from the request.";
|
|
186
186
|
readonly required: readonly ["id", "type", "issuer", "recipient", "issuedAt", "payload", "proof"];
|
|
187
187
|
};
|
|
188
188
|
readonly ext: {
|
|
@@ -313,7 +313,7 @@ export declare const RESPONSE_PAYLOAD_SCHEMA: {
|
|
|
313
313
|
readonly properties: {
|
|
314
314
|
readonly signedEnvelope: {
|
|
315
315
|
readonly type: "object";
|
|
316
|
-
readonly description: "The supplied `unsignedEnvelope` with a Data Integrity `proof` attached. `proof.verificationMethod` is `<principalDid>#<signingKeyId>`; `proof.proofPurpose` is `assertionMethod
|
|
316
|
+
readonly description: "The supplied `unsignedEnvelope` with a Data Integrity `proof` attached. `proof.verificationMethod` is `<principalDid>#<signingKeyId>`; `proof.proofPurpose` is `assertionMethod` only when the envelope's `type` is a `https://trusttasks.org` request of `auth/step-up/approve-response`, `task-consent/decision` or `confirm/response` (the closed list of attestations), and `authentication` for every other, operational, document — decided by the maintainer from `type`, never by the consumer; `proof.cryptosuite` is `eddsa-jcs-2022`. All other members of the envelope (`id`, `type`, `issuer`, `recipient`, `issuedAt`, `expiresAt`, `payload`, `ext`) are unchanged from the request.";
|
|
317
317
|
readonly required: readonly ["id", "type", "issuer", "recipient", "issuedAt", "payload", "proof"];
|
|
318
318
|
};
|
|
319
319
|
readonly ext: {
|
|
@@ -482,7 +482,7 @@ export declare const SPEC: {
|
|
|
482
482
|
readonly properties: {
|
|
483
483
|
readonly signedEnvelope: {
|
|
484
484
|
readonly type: "object";
|
|
485
|
-
readonly description: "The supplied `unsignedEnvelope` with a Data Integrity `proof` attached. `proof.verificationMethod` is `<principalDid>#<signingKeyId>`; `proof.proofPurpose` is `assertionMethod
|
|
485
|
+
readonly description: "The supplied `unsignedEnvelope` with a Data Integrity `proof` attached. `proof.verificationMethod` is `<principalDid>#<signingKeyId>`; `proof.proofPurpose` is `assertionMethod` only when the envelope's `type` is a `https://trusttasks.org` request of `auth/step-up/approve-response`, `task-consent/decision` or `confirm/response` (the closed list of attestations), and `authentication` for every other, operational, document — decided by the maintainer from `type`, never by the consumer; `proof.cryptosuite` is `eddsa-jcs-2022`. All other members of the envelope (`id`, `type`, `issuer`, `recipient`, `issuedAt`, `expiresAt`, `payload`, `ext`) are unchanged from the request.";
|
|
486
486
|
readonly required: readonly ["id", "type", "issuer", "recipient", "issuedAt", "payload", "proof"];
|
|
487
487
|
};
|
|
488
488
|
readonly ext: {
|
|
@@ -624,7 +624,7 @@ export declare const RESPONSE_SPEC: {
|
|
|
624
624
|
readonly properties: {
|
|
625
625
|
readonly signedEnvelope: {
|
|
626
626
|
readonly type: "object";
|
|
627
|
-
readonly description: "The supplied `unsignedEnvelope` with a Data Integrity `proof` attached. `proof.verificationMethod` is `<principalDid>#<signingKeyId>`; `proof.proofPurpose` is `assertionMethod
|
|
627
|
+
readonly description: "The supplied `unsignedEnvelope` with a Data Integrity `proof` attached. `proof.verificationMethod` is `<principalDid>#<signingKeyId>`; `proof.proofPurpose` is `assertionMethod` only when the envelope's `type` is a `https://trusttasks.org` request of `auth/step-up/approve-response`, `task-consent/decision` or `confirm/response` (the closed list of attestations), and `authentication` for every other, operational, document — decided by the maintainer from `type`, never by the consumer; `proof.cryptosuite` is `eddsa-jcs-2022`. All other members of the envelope (`id`, `type`, `issuer`, `recipient`, `issuedAt`, `expiresAt`, `payload`, `ext`) are unchanged from the request.";
|
|
628
628
|
readonly required: readonly ["id", "type", "issuer", "recipient", "issuedAt", "payload", "proof"];
|
|
629
629
|
};
|
|
630
630
|
readonly ext: {
|
|
@@ -123,7 +123,7 @@ export const PAYLOAD_SCHEMA = {
|
|
|
123
123
|
"properties": {
|
|
124
124
|
"signedEnvelope": {
|
|
125
125
|
"type": "object",
|
|
126
|
-
"description": "The supplied `unsignedEnvelope` with a Data Integrity `proof` attached. `proof.verificationMethod` is `<principalDid>#<signingKeyId>`; `proof.proofPurpose` is `assertionMethod
|
|
126
|
+
"description": "The supplied `unsignedEnvelope` with a Data Integrity `proof` attached. `proof.verificationMethod` is `<principalDid>#<signingKeyId>`; `proof.proofPurpose` is `assertionMethod` only when the envelope's `type` is a `https://trusttasks.org` request of `auth/step-up/approve-response`, `task-consent/decision` or `confirm/response` (the closed list of attestations), and `authentication` for every other, operational, document — decided by the maintainer from `type`, never by the consumer; `proof.cryptosuite` is `eddsa-jcs-2022`. All other members of the envelope (`id`, `type`, `issuer`, `recipient`, `issuedAt`, `expiresAt`, `payload`, `ext`) are unchanged from the request.",
|
|
127
127
|
"required": [
|
|
128
128
|
"id",
|
|
129
129
|
"type",
|
|
@@ -287,7 +287,7 @@ export const RESPONSE_PAYLOAD_SCHEMA = {
|
|
|
287
287
|
"properties": {
|
|
288
288
|
"signedEnvelope": {
|
|
289
289
|
"type": "object",
|
|
290
|
-
"description": "The supplied `unsignedEnvelope` with a Data Integrity `proof` attached. `proof.verificationMethod` is `<principalDid>#<signingKeyId>`; `proof.proofPurpose` is `assertionMethod
|
|
290
|
+
"description": "The supplied `unsignedEnvelope` with a Data Integrity `proof` attached. `proof.verificationMethod` is `<principalDid>#<signingKeyId>`; `proof.proofPurpose` is `assertionMethod` only when the envelope's `type` is a `https://trusttasks.org` request of `auth/step-up/approve-response`, `task-consent/decision` or `confirm/response` (the closed list of attestations), and `authentication` for every other, operational, document — decided by the maintainer from `type`, never by the consumer; `proof.cryptosuite` is `eddsa-jcs-2022`. All other members of the envelope (`id`, `type`, `issuer`, `recipient`, `issuedAt`, `expiresAt`, `payload`, `ext`) are unchanged from the request.",
|
|
291
291
|
"required": [
|
|
292
292
|
"id",
|
|
293
293
|
"type",
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"payload.js","sourceRoot":"","sources":["../../../../src/vault/sign-trust-task/0.2/payload.ts"],"names":[],"mappings":"AAAA;;;GAGG;AA2EH,2BAA2B;AAC3B,MAAM,CAAC,MAAM,QAAQ,GAAG,uDAAgE,CAAC;AAKzF,qEAAqE;AACrE,MAAM,CAAC,MAAM,iBAAiB,GAAG,gEAAyE,CAAC;AAK3G;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,SAAS,EAAE,8CAA8C;IACzD,KAAK,EAAE,uDAAuD;IAC9D,OAAO,EAAE,iCAAiC;IAC1C,aAAa,EAAE,ycAAyc;IACxd,MAAM,EAAE,QAAQ;IAChB,sBAAsB,EAAE,KAAK;IAC7B,UAAU,EAAE;QACV,SAAS;QACT,kBAAkB;KACnB;IACD,YAAY,EAAE;QACZ,SAAS,EAAE;YACT,MAAM,EAAE,QAAQ;YAChB,WAAW,EAAE,CAAC;YACd,aAAa,EAAE,sNAAsN;SACtO;QACD,kBAAkB,EAAE;YAClB,MAAM,EAAE,mCAAmC;YAC3C,aAAa,EAAE,4SAA4S;SAC5T;QACD,iBAAiB,EAAE;YACjB,MAAM,EAAE,yBAAyB;YACjC,aAAa,EAAE,0DAA0D;SAC1E;QACD,aAAa,EAAE;YACb,MAAM,EAAE,qBAAqB;YAC7B,aAAa,EAAE,gDAAgD;SAChE;QACD,KAAK,EAAE;YACL,MAAM,EAAE,aAAa;SACtB;KACF;IACD,OAAO,EAAE;QACP,2BAA2B,EAAE;YAC3B,SAAS,EAAE,mBAAmB;YAC9B,OAAO,EAAE,8BAA8B;YACvC,aAAa,EAAE,+QAA+Q;YAC9R,MAAM,EAAE,QAAQ;YAChB,UAAU,EAAE;gBACV,IAAI;gBACJ,MAAM;gBACN,QAAQ;gBACR,WAAW;gBACX,UAAU;gBACV,SAAS;aACV;YACD,YAAY,EAAE;gBACZ,IAAI,EAAE;oBACJ,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,6DAA6D;iBAC7E;gBACD,UAAU,EAAE;oBACV,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,qDAAqD;iBACrE;gBACD,MAAM,EAAE;oBACN,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,KAAK;oBACf,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,sFAAsF;iBACtG;gBACD,QAAQ,EAAE;oBACR,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,oKAAoK;iBACpL;gBACD,WAAW,EAAE;oBACX,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,wFAAwF;iBACxG;gBACD,UAAU,EAAE;oBACV,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,WAAW;oBACrB,aAAa,EAAE,wJAAwJ;iBACxK;gBACD,WAAW,EAAE;oBACX,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,WAAW;oBACrB,aAAa,EAAE,kHAAkH;iBAClI;gBACD,SAAS,EAAE;oBACT,aAAa,EAAE,4GAA4G;iBAC5H;gBACD,KAAK,EAAE;oBACL,MAAM,EAAE,aAAa;iBACtB;aACF;YACD,KAAK,EAAE;gBACL,UAAU,EAAE;oBACV,OAAO;iBACR;aACF;SACF;QACD,UAAU,EAAE;YACV,SAAS,EAAE,UAAU;YACrB,OAAO,EAAE,0CAA0C;YACnD,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,gBAAgB;aACjB;YACD,YAAY,EAAE;gBACZ,gBAAgB,EAAE;oBAChB,MAAM,EAAE,QAAQ;oBAChB,aAAa,EAAE
|
|
1
|
+
{"version":3,"file":"payload.js","sourceRoot":"","sources":["../../../../src/vault/sign-trust-task/0.2/payload.ts"],"names":[],"mappings":"AAAA;;;GAGG;AA2EH,2BAA2B;AAC3B,MAAM,CAAC,MAAM,QAAQ,GAAG,uDAAgE,CAAC;AAKzF,qEAAqE;AACrE,MAAM,CAAC,MAAM,iBAAiB,GAAG,gEAAyE,CAAC;AAK3G;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,SAAS,EAAE,8CAA8C;IACzD,KAAK,EAAE,uDAAuD;IAC9D,OAAO,EAAE,iCAAiC;IAC1C,aAAa,EAAE,ycAAyc;IACxd,MAAM,EAAE,QAAQ;IAChB,sBAAsB,EAAE,KAAK;IAC7B,UAAU,EAAE;QACV,SAAS;QACT,kBAAkB;KACnB;IACD,YAAY,EAAE;QACZ,SAAS,EAAE;YACT,MAAM,EAAE,QAAQ;YAChB,WAAW,EAAE,CAAC;YACd,aAAa,EAAE,sNAAsN;SACtO;QACD,kBAAkB,EAAE;YAClB,MAAM,EAAE,mCAAmC;YAC3C,aAAa,EAAE,4SAA4S;SAC5T;QACD,iBAAiB,EAAE;YACjB,MAAM,EAAE,yBAAyB;YACjC,aAAa,EAAE,0DAA0D;SAC1E;QACD,aAAa,EAAE;YACb,MAAM,EAAE,qBAAqB;YAC7B,aAAa,EAAE,gDAAgD;SAChE;QACD,KAAK,EAAE;YACL,MAAM,EAAE,aAAa;SACtB;KACF;IACD,OAAO,EAAE;QACP,2BAA2B,EAAE;YAC3B,SAAS,EAAE,mBAAmB;YAC9B,OAAO,EAAE,8BAA8B;YACvC,aAAa,EAAE,+QAA+Q;YAC9R,MAAM,EAAE,QAAQ;YAChB,UAAU,EAAE;gBACV,IAAI;gBACJ,MAAM;gBACN,QAAQ;gBACR,WAAW;gBACX,UAAU;gBACV,SAAS;aACV;YACD,YAAY,EAAE;gBACZ,IAAI,EAAE;oBACJ,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,6DAA6D;iBAC7E;gBACD,UAAU,EAAE;oBACV,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,qDAAqD;iBACrE;gBACD,MAAM,EAAE;oBACN,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,KAAK;oBACf,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,sFAAsF;iBACtG;gBACD,QAAQ,EAAE;oBACR,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,oKAAoK;iBACpL;gBACD,WAAW,EAAE;oBACX,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,wFAAwF;iBACxG;gBACD,UAAU,EAAE;oBACV,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,WAAW;oBACrB,aAAa,EAAE,wJAAwJ;iBACxK;gBACD,WAAW,EAAE;oBACX,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,WAAW;oBACrB,aAAa,EAAE,kHAAkH;iBAClI;gBACD,SAAS,EAAE;oBACT,aAAa,EAAE,4GAA4G;iBAC5H;gBACD,KAAK,EAAE;oBACL,MAAM,EAAE,aAAa;iBACtB;aACF;YACD,KAAK,EAAE;gBACL,UAAU,EAAE;oBACV,OAAO;iBACR;aACF;SACF;QACD,UAAU,EAAE;YACV,SAAS,EAAE,UAAU;YACrB,OAAO,EAAE,0CAA0C;YACnD,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,gBAAgB;aACjB;YACD,YAAY,EAAE;gBACZ,gBAAgB,EAAE;oBAChB,MAAM,EAAE,QAAQ;oBAChB,aAAa,EAAE,qqBAAqqB;oBACprB,UAAU,EAAE;wBACV,IAAI;wBACJ,MAAM;wBACN,QAAQ;wBACR,WAAW;wBACX,UAAU;wBACV,SAAS;wBACT,OAAO;qBACR;iBACF;gBACD,KAAK,EAAE;oBACL,MAAM,EAAE,aAAa;iBACtB;aACF;SACF;QACD,KAAK,EAAE;YACL,OAAO,EAAE,KAAK;YACd,aAAa,EAAE,uKAAuK;YACtL,MAAM,EAAE,QAAQ;YAChB,eAAe,EAAE,CAAC;YAClB,sBAAsB,EAAE,IAAI;YAC5B,eAAe,EAAE;gBACf,SAAS,EAAE,mCAAmC;aAC/C;SACF;QACD,aAAa,EAAE;YACb,OAAO,EAAE,aAAa;YACtB,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,MAAM;gBACN,OAAO;gBACP,aAAa;aACd;YACD,YAAY,EAAE;gBACZ,MAAM,EAAE;oBACN,MAAM,EAAE,QAAQ;oBAChB,MAAM,EAAE;wBACN,YAAY;wBACZ,cAAc;wBACd,MAAM;qBACP;iBACF;gBACD,OAAO,EAAE;oBACP,MAAM,EAAE,QAAQ;oBAChB,aAAa,EAAE,uHAAuH;iBACvI;gBACD,aAAa,EAAE;oBACb,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,uDAAuD;iBACvE;aACF;SACF;QACD,iBAAiB,EAAE;YACjB,OAAO,EAAE,iBAAiB;YAC1B,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,YAAY,EAAE;gBACZ,UAAU,EAAE;oBACV,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,4HAA4H;iBAC5I;gBACD,wBAAwB,EAAE;oBACxB,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,WAAW;oBACrB,aAAa,EAAE,8JAA8J;iBAC9K;gBACD,cAAc,EAAE;oBACd,MAAM,EAAE,QAAQ;oBAChB,MAAM,EAAE;wBACN,SAAS;wBACT,MAAM;wBACN,MAAM;wBACN,QAAQ;wBACR,KAAK;qBACN;oBACD,aAAa,EAAE,qDAAqD;iBACrE;aACF;SACF;KACF;CACO,CAAC;AAEX,mEAAmE;AACnE,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,SAAS,EAAE,8CAA8C;IACzD,MAAM,EAAE,kBAAkB;IAC1B,OAAO,EAAE;QACP,2BAA2B,EAAE;YAC3B,SAAS,EAAE,mBAAmB;YAC9B,OAAO,EAAE,8BAA8B;YACvC,aAAa,EAAE,+QAA+Q;YAC9R,MAAM,EAAE,QAAQ;YAChB,UAAU,EAAE;gBACV,IAAI;gBACJ,MAAM;gBACN,QAAQ;gBACR,WAAW;gBACX,UAAU;gBACV,SAAS;aACV;YACD,YAAY,EAAE;gBACZ,IAAI,EAAE;oBACJ,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,6DAA6D;iBAC7E;gBACD,UAAU,EAAE;oBACV,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,qDAAqD;iBACrE;gBACD,MAAM,EAAE;oBACN,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,KAAK;oBACf,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,sFAAsF;iBACtG;gBACD,QAAQ,EAAE;oBACR,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,oKAAoK;iBACpL;gBACD,WAAW,EAAE;oBACX,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,wFAAwF;iBACxG;gBACD,UAAU,EAAE;oBACV,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,WAAW;oBACrB,aAAa,EAAE,wJAAwJ;iBACxK;gBACD,WAAW,EAAE;oBACX,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,WAAW;oBACrB,aAAa,EAAE,kHAAkH;iBAClI;gBACD,SAAS,EAAE;oBACT,aAAa,EAAE,4GAA4G;iBAC5H;gBACD,KAAK,EAAE;oBACL,MAAM,EAAE,aAAa;iBACtB;aACF;YACD,KAAK,EAAE;gBACL,UAAU,EAAE;oBACV,OAAO;iBACR;aACF;SACF;QACD,UAAU,EAAE;YACV,SAAS,EAAE,UAAU;YACrB,OAAO,EAAE,0CAA0C;YACnD,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,gBAAgB;aACjB;YACD,YAAY,EAAE;gBACZ,gBAAgB,EAAE;oBAChB,MAAM,EAAE,QAAQ;oBAChB,aAAa,EAAE,qqBAAqqB;oBACprB,UAAU,EAAE;wBACV,IAAI;wBACJ,MAAM;wBACN,QAAQ;wBACR,WAAW;wBACX,UAAU;wBACV,SAAS;wBACT,OAAO;qBACR;iBACF;gBACD,KAAK,EAAE;oBACL,MAAM,EAAE,aAAa;iBACtB;aACF;SACF;QACD,KAAK,EAAE;YACL,OAAO,EAAE,KAAK;YACd,aAAa,EAAE,uKAAuK;YACtL,MAAM,EAAE,QAAQ;YAChB,eAAe,EAAE,CAAC;YAClB,sBAAsB,EAAE,IAAI;YAC5B,eAAe,EAAE;gBACf,SAAS,EAAE,mCAAmC;aAC/C;SACF;QACD,aAAa,EAAE;YACb,OAAO,EAAE,aAAa;YACtB,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,MAAM;gBACN,OAAO;gBACP,aAAa;aACd;YACD,YAAY,EAAE;gBACZ,MAAM,EAAE;oBACN,MAAM,EAAE,QAAQ;oBAChB,MAAM,EAAE;wBACN,YAAY;wBACZ,cAAc;wBACd,MAAM;qBACP;iBACF;gBACD,OAAO,EAAE;oBACP,MAAM,EAAE,QAAQ;oBAChB,aAAa,EAAE,uHAAuH;iBACvI;gBACD,aAAa,EAAE;oBACb,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,uDAAuD;iBACvE;aACF;SACF;QACD,iBAAiB,EAAE;YACjB,OAAO,EAAE,iBAAiB;YAC1B,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,YAAY,EAAE;gBACZ,UAAU,EAAE;oBACV,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,4HAA4H;iBAC5I;gBACD,wBAAwB,EAAE;oBACxB,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,WAAW;oBACrB,aAAa,EAAE,8JAA8J;iBAC9K;gBACD,cAAc,EAAE;oBACd,MAAM,EAAE,QAAQ;oBAChB,MAAM,EAAE;wBACN,SAAS;wBACT,MAAM;wBACN,MAAM;wBACN,QAAQ;wBACR,KAAK;qBACN;oBACD,aAAa,EAAE,qDAAqD;iBACrE;aACF;SACF;KACF;CACO,CAAC;AAEX;;;;;GAKG;AACH,MAAM,CAAC,MAAM,IAAI,GAAG;IAClB,OAAO,EAAE,QAAQ;IACjB,QAAQ,EAAE,KAAK;IACf,eAAe,EAAE,IAAI;IACrB,mBAAmB,EAAE,IAAI;IACzB,kBAAkB,EAAE,IAAI;IACxB,aAAa,EAAE,cAAc;CACrB,CAAC;AAEX;;;;GAIG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,OAAO,EAAE,iBAAiB;IAC1B,QAAQ,EAAE,KAAK;IACf,eAAe,EAAE,IAAI;IACrB,mBAAmB,EAAE,IAAI;IACzB,kBAAkB,EAAE,IAAI;IACxB,aAAa,EAAE,uBAAuB;CAC9B,CAAC"}
|
package/package.json
CHANGED
|
@@ -67,7 +67,7 @@ export interface UnsignedTrustTaskEnvelope {
|
|
|
67
67
|
}
|
|
68
68
|
export interface VaultSignTrustTaskResponsePayload {
|
|
69
69
|
/**
|
|
70
|
-
* The supplied `unsignedEnvelope` with a Data Integrity `proof` attached. `proof.verificationMethod` is `<principalDid>#<signingKeyId>`; `proof.proofPurpose` is `assertionMethod
|
|
70
|
+
* The supplied `unsignedEnvelope` with a Data Integrity `proof` attached. `proof.verificationMethod` is `<principalDid>#<signingKeyId>`; `proof.proofPurpose` is `assertionMethod` only when the envelope's `type` is a `https://trusttasks.org` request of `auth/step-up/approve-response`, `task-consent/decision` or `confirm/response` (the closed list of attestations), and `authentication` for every other, operational, document — decided by the maintainer from `type`, never by the consumer; `proof.cryptosuite` is `eddsa-jcs-2022`. All other members of the envelope (`id`, `type`, `issuer`, `recipient`, `issuedAt`, `expiresAt`, `payload`, `ext`) are unchanged from the request.
|
|
71
71
|
*/
|
|
72
72
|
signedEnvelope: {};
|
|
73
73
|
ext?: Ext;
|
|
@@ -205,7 +205,7 @@ export const PAYLOAD_SCHEMA = {
|
|
|
205
205
|
"properties": {
|
|
206
206
|
"signedEnvelope": {
|
|
207
207
|
"type": "object",
|
|
208
|
-
"description": "The supplied `unsignedEnvelope` with a Data Integrity `proof` attached. `proof.verificationMethod` is `<principalDid>#<signingKeyId>`; `proof.proofPurpose` is `assertionMethod
|
|
208
|
+
"description": "The supplied `unsignedEnvelope` with a Data Integrity `proof` attached. `proof.verificationMethod` is `<principalDid>#<signingKeyId>`; `proof.proofPurpose` is `assertionMethod` only when the envelope's `type` is a `https://trusttasks.org` request of `auth/step-up/approve-response`, `task-consent/decision` or `confirm/response` (the closed list of attestations), and `authentication` for every other, operational, document — decided by the maintainer from `type`, never by the consumer; `proof.cryptosuite` is `eddsa-jcs-2022`. All other members of the envelope (`id`, `type`, `issuer`, `recipient`, `issuedAt`, `expiresAt`, `payload`, `ext`) are unchanged from the request.",
|
|
209
209
|
"required": [
|
|
210
210
|
"id",
|
|
211
211
|
"type",
|
|
@@ -370,7 +370,7 @@ export const RESPONSE_PAYLOAD_SCHEMA = {
|
|
|
370
370
|
"properties": {
|
|
371
371
|
"signedEnvelope": {
|
|
372
372
|
"type": "object",
|
|
373
|
-
"description": "The supplied `unsignedEnvelope` with a Data Integrity `proof` attached. `proof.verificationMethod` is `<principalDid>#<signingKeyId>`; `proof.proofPurpose` is `assertionMethod
|
|
373
|
+
"description": "The supplied `unsignedEnvelope` with a Data Integrity `proof` attached. `proof.verificationMethod` is `<principalDid>#<signingKeyId>`; `proof.proofPurpose` is `assertionMethod` only when the envelope's `type` is a `https://trusttasks.org` request of `auth/step-up/approve-response`, `task-consent/decision` or `confirm/response` (the closed list of attestations), and `authentication` for every other, operational, document — decided by the maintainer from `type`, never by the consumer; `proof.cryptosuite` is `eddsa-jcs-2022`. All other members of the envelope (`id`, `type`, `issuer`, `recipient`, `issuedAt`, `expiresAt`, `payload`, `ext`) are unchanged from the request.",
|
|
374
374
|
"required": [
|
|
375
375
|
"id",
|
|
376
376
|
"type",
|
|
@@ -67,7 +67,7 @@ export interface UnsignedTrustTaskEnvelope {
|
|
|
67
67
|
}
|
|
68
68
|
export interface VaultSignTrustTaskResponsePayload {
|
|
69
69
|
/**
|
|
70
|
-
* The supplied `unsignedEnvelope` with a Data Integrity `proof` attached. `proof.verificationMethod` is `<principalDid>#<signingKeyId>`; `proof.proofPurpose` is `assertionMethod
|
|
70
|
+
* The supplied `unsignedEnvelope` with a Data Integrity `proof` attached. `proof.verificationMethod` is `<principalDid>#<signingKeyId>`; `proof.proofPurpose` is `assertionMethod` only when the envelope's `type` is a `https://trusttasks.org` request of `auth/step-up/approve-response`, `task-consent/decision` or `confirm/response` (the closed list of attestations), and `authentication` for every other, operational, document — decided by the maintainer from `type`, never by the consumer; `proof.cryptosuite` is `eddsa-jcs-2022`. All other members of the envelope (`id`, `type`, `issuer`, `recipient`, `issuedAt`, `expiresAt`, `payload`, `ext`) are unchanged from the request.
|
|
71
71
|
*/
|
|
72
72
|
signedEnvelope: {};
|
|
73
73
|
ext?: Ext;
|
|
@@ -205,7 +205,7 @@ export const PAYLOAD_SCHEMA = {
|
|
|
205
205
|
"properties": {
|
|
206
206
|
"signedEnvelope": {
|
|
207
207
|
"type": "object",
|
|
208
|
-
"description": "The supplied `unsignedEnvelope` with a Data Integrity `proof` attached. `proof.verificationMethod` is `<principalDid>#<signingKeyId>`; `proof.proofPurpose` is `assertionMethod
|
|
208
|
+
"description": "The supplied `unsignedEnvelope` with a Data Integrity `proof` attached. `proof.verificationMethod` is `<principalDid>#<signingKeyId>`; `proof.proofPurpose` is `assertionMethod` only when the envelope's `type` is a `https://trusttasks.org` request of `auth/step-up/approve-response`, `task-consent/decision` or `confirm/response` (the closed list of attestations), and `authentication` for every other, operational, document — decided by the maintainer from `type`, never by the consumer; `proof.cryptosuite` is `eddsa-jcs-2022`. All other members of the envelope (`id`, `type`, `issuer`, `recipient`, `issuedAt`, `expiresAt`, `payload`, `ext`) are unchanged from the request.",
|
|
209
209
|
"required": [
|
|
210
210
|
"id",
|
|
211
211
|
"type",
|
|
@@ -370,7 +370,7 @@ export const RESPONSE_PAYLOAD_SCHEMA = {
|
|
|
370
370
|
"properties": {
|
|
371
371
|
"signedEnvelope": {
|
|
372
372
|
"type": "object",
|
|
373
|
-
"description": "The supplied `unsignedEnvelope` with a Data Integrity `proof` attached. `proof.verificationMethod` is `<principalDid>#<signingKeyId>`; `proof.proofPurpose` is `assertionMethod
|
|
373
|
+
"description": "The supplied `unsignedEnvelope` with a Data Integrity `proof` attached. `proof.verificationMethod` is `<principalDid>#<signingKeyId>`; `proof.proofPurpose` is `assertionMethod` only when the envelope's `type` is a `https://trusttasks.org` request of `auth/step-up/approve-response`, `task-consent/decision` or `confirm/response` (the closed list of attestations), and `authentication` for every other, operational, document — decided by the maintainer from `type`, never by the consumer; `proof.cryptosuite` is `eddsa-jcs-2022`. All other members of the envelope (`id`, `type`, `issuer`, `recipient`, `issuedAt`, `expiresAt`, `payload`, `ext`) are unchanged from the request.",
|
|
374
374
|
"required": [
|
|
375
375
|
"id",
|
|
376
376
|
"type",
|