@openvtc/trust-tasks 0.22.1 → 0.22.3

package/src/vtc/endorsements/issue/0.1/payload.ts

@@ -12,11 +12,11 @@ export interface VTCEndorsementsIssuePayload {
    */
   subjectDid: string;
   /**
-   * The predicate IRI the statement carries as `credentialSubject.predicate` — `https://registry.trustoverip.org/dtg/vsc/endorses/1` for a favourable claim with community-defined content, or another predicate the community registered. It MUST already be registered via vtc/endorsement-types/register; unregistered predicates are refused. The one non-IRI value accepted is the reserved `IdentityVerificationCredential`, which mints the community's identity-verification credential instead of a statement.
+   * The predicate IRI the statement carries as `credentialSubject.predicate` — `https://registry.trustoverip.org/dtg/vsc/endorses/1` for a favourable claim with community-defined content, or another predicate the community registered. It MUST already be registered via vtc/endorsement-types/register; unregistered predicates are refused. `https://registry.trustoverip.org/dtg/vsc/vetted/1` records an identity check the community's own operators carried out.
    */
   typeUri: string;
   /**
-   * The claim body to attest, issued as the statement's `credentialSubject.object.value` — or, for `IdentityVerificationCredential`, as members of `credentialSubject` beside `id`, in which case it MUST NOT itself carry `id`. Capped at 8 KiB serialised, and validated against the registered predicate's claimSchema when it declares one.
+   * The claim body to attest, issued as the statement's `credentialSubject.object.value`. Capped at 8 KiB serialised, and validated against the registered predicate's claimSchema when it declares one. Under `vetted/1` it MUST validate against the registry's vetting schema (`https://registry.trustoverip.org/dtg/vsc/vetted/1/vetting.schema.json`), its `community` MUST be this community's DID, and it MUST NOT carry the vetter-only members `identityCommitment`, `cardDigestMultibase` or `declaredRelationship`.
    */
   claim: {};
   /**
@@ -28,7 +28,7 @@ export interface VTCEndorsementsIssuePayload {
 export interface VTCEndorsementsIssueResponsePayload {
   endorsement: Endorsement;
   /**
-   * The signed credential just minted. For `IdentityVerificationCredential`, a plain W3C VC — `@context` [credentials/v2] only, `type` [VerifiableCredential, IdentityVerificationCredential], not a DTGCredential — issued by the community to `subjectDid` with a revocation `credentialStatus`. Otherwise a DTG Verifiable Statement Credential (`StatementCredential`) issued by the community with `issuerScope` public, `credentialSubject.predicate` = `typeUri` and `credentialSubject.object.value` = `claim`. Present only here: handing back the credential is the point of an issue call, and the issuer is the only party that can. Reads carry `endorsement.issued` — the reference — instead.
+   * The signed statement just minted: a DTG Verifiable Statement Credential (`StatementCredential`) issued by the community with `issuerScope` public, `credentialSubject.predicate` = `typeUri` and `credentialSubject.object.value` = `claim`. Under `vetted/1` it also carries `taskContext` = this request's `id` and `taskDigestMultibase` = this request's task digest (SPEC §4.9.3), which are this exchange's outcome evidence binding. Present only here: handing back the credential is the point of an issue call, and the issuer is the only party that can. Reads carry `endorsement.issued` — the reference — instead.
    */
   credential: {};
   ext?: Ext;
@@ -79,12 +79,12 @@ export const PAYLOAD_SCHEMA = {
       "type": "string",
       "minLength": 1,
       "maxLength": 512,
-      "description": "The predicate IRI the statement carries as `credentialSubject.predicate` — `https://registry.trustoverip.org/dtg/vsc/endorses/1` for a favourable claim with community-defined content, or another predicate the community registered. It MUST already be registered via vtc/endorsement-types/register; unregistered predicates are refused. The one non-IRI value accepted is the reserved `IdentityVerificationCredential`, which mints the community's identity-verification credential instead of a statement."
+      "description": "The predicate IRI the statement carries as `credentialSubject.predicate` — `https://registry.trustoverip.org/dtg/vsc/endorses/1` for a favourable claim with community-defined content, or another predicate the community registered. It MUST already be registered via vtc/endorsement-types/register; unregistered predicates are refused. `https://registry.trustoverip.org/dtg/vsc/vetted/1` records an identity check the community's own operators carried out."
     },
     "claim": {
       "type": "object",
       "minProperties": 1,
-      "description": "The claim body to attest, issued as the statement's `credentialSubject.object.value` — or, for `IdentityVerificationCredential`, as members of `credentialSubject` beside `id`, in which case it MUST NOT itself carry `id`. Capped at 8 KiB serialised, and validated against the registered predicate's claimSchema when it declares one."
+      "description": "The claim body to attest, issued as the statement's `credentialSubject.object.value`. Capped at 8 KiB serialised, and validated against the registered predicate's claimSchema when it declares one. Under `vetted/1` it MUST validate against the registry's vetting schema (`https://registry.trustoverip.org/dtg/vsc/vetted/1/vetting.schema.json`), its `community` MUST be this community's DID, and it MUST NOT carry the vetter-only members `identityCommitment`, `cardDigestMultibase` or `declaredRelationship`."
     },
     "validitySeconds": {
       "type": "integer",
@@ -111,7 +111,7 @@ export const PAYLOAD_SCHEMA = {
         },
         "credential": {
           "type": "object",
-          "description": "The signed credential just minted. For `IdentityVerificationCredential`, a plain W3C VC — `@context` [credentials/v2] only, `type` [VerifiableCredential, IdentityVerificationCredential], not a DTGCredential — issued by the community to `subjectDid` with a revocation `credentialStatus`. Otherwise a DTG Verifiable Statement Credential (`StatementCredential`) issued by the community with `issuerScope` public, `credentialSubject.predicate` = `typeUri` and `credentialSubject.object.value` = `claim`. Present only here: handing back the credential is the point of an issue call, and the issuer is the only party that can. Reads carry `endorsement.issued` — the reference — instead."
+          "description": "The signed statement just minted: a DTG Verifiable Statement Credential (`StatementCredential`) issued by the community with `issuerScope` public, `credentialSubject.predicate` = `typeUri` and `credentialSubject.object.value` = `claim`. Under `vetted/1` it also carries `taskContext` = this request's `id` and `taskDigestMultibase` = this request's task digest (SPEC §4.9.3), which are this exchange's outcome evidence binding. Present only here: handing back the credential is the point of an issue call, and the issuer is the only party that can. Reads carry `endorsement.issued` — the reference — instead."
         },
         "ext": {
           "$ref": "#/$defs/Ext"
@@ -150,7 +150,7 @@ export const PAYLOAD_SCHEMA = {
           "type": "string",
           "minLength": 1,
           "maxLength": 512,
-          "description": "What the row records. A registered predicate IRI: a statement (StatementCredential) whose `credentialSubject.predicate` it is — see vtc/endorsement-types/*. `role:vetter`: a vetter role credential (Verifiable Authority Credential) issued by vtc/vetting/vetters/grant. `IdentityVerificationCredential`: the community's identity-verification credential, a plain W3C VC (not a DTGCredential). The two reserved values are not IRIs, so they never collide with a registered predicate."
+          "description": "What the row records. A registered predicate IRI: a statement (StatementCredential) whose `credentialSubject.predicate` it is — see vtc/endorsement-types/*. `role:vetter`: a vetter role credential (Verifiable Authority Credential) issued by vtc/vetting/vetters/grant. The reserved value is not an IRI, so it never collides with a registered predicate. A community's own identity check is a statement like any other, under `https://registry.trustoverip.org/dtg/vsc/vetted/1`."
         },
         "subjectDid": {
           "type": "string",
@@ -238,7 +238,7 @@ export const RESPONSE_PAYLOAD_SCHEMA = {
         },
         "credential": {
           "type": "object",
-          "description": "The signed credential just minted. For `IdentityVerificationCredential`, a plain W3C VC — `@context` [credentials/v2] only, `type` [VerifiableCredential, IdentityVerificationCredential], not a DTGCredential — issued by the community to `subjectDid` with a revocation `credentialStatus`. Otherwise a DTG Verifiable Statement Credential (`StatementCredential`) issued by the community with `issuerScope` public, `credentialSubject.predicate` = `typeUri` and `credentialSubject.object.value` = `claim`. Present only here: handing back the credential is the point of an issue call, and the issuer is the only party that can. Reads carry `endorsement.issued` — the reference — instead."
+          "description": "The signed statement just minted: a DTG Verifiable Statement Credential (`StatementCredential`) issued by the community with `issuerScope` public, `credentialSubject.predicate` = `typeUri` and `credentialSubject.object.value` = `claim`. Under `vetted/1` it also carries `taskContext` = this request's `id` and `taskDigestMultibase` = this request's task digest (SPEC §4.9.3), which are this exchange's outcome evidence binding. Present only here: handing back the credential is the point of an issue call, and the issuer is the only party that can. Reads carry `endorsement.issued` — the reference — instead."
         },
         "ext": {
           "$ref": "#/$defs/Ext"
@@ -277,7 +277,7 @@ export const RESPONSE_PAYLOAD_SCHEMA = {
           "type": "string",
           "minLength": 1,
           "maxLength": 512,
-          "description": "What the row records. A registered predicate IRI: a statement (StatementCredential) whose `credentialSubject.predicate` it is — see vtc/endorsement-types/*. `role:vetter`: a vetter role credential (Verifiable Authority Credential) issued by vtc/vetting/vetters/grant. `IdentityVerificationCredential`: the community's identity-verification credential, a plain W3C VC (not a DTGCredential). The two reserved values are not IRIs, so they never collide with a registered predicate."
+          "description": "What the row records. A registered predicate IRI: a statement (StatementCredential) whose `credentialSubject.predicate` it is — see vtc/endorsement-types/*. `role:vetter`: a vetter role credential (Verifiable Authority Credential) issued by vtc/vetting/vetters/grant. The reserved value is not an IRI, so it never collides with a registered predicate. A community's own identity check is a statement like any other, under `https://registry.trustoverip.org/dtg/vsc/vetted/1`."
         },
         "subjectDid": {
           "type": "string",

package/src/vtc/endorsements/list/0.1/payload.ts

@@ -8,7 +8,7 @@ import type { CredentialId, CredentialReference, Endorsement, Ext } from "../../
 
 export interface VTCEndorsementsListPayload {
   /**
-   * Filter to rows of this kind: a registered predicate IRI (statements whose `credentialSubject.predicate` it is), `IdentityVerificationCredential`, or `role:vetter`.
+   * Filter to rows of this kind: a registered predicate IRI (statements whose `credentialSubject.predicate` it is), or `role:vetter`.
    */
   typeUri?: string;
   /**
@@ -77,7 +77,7 @@ export const PAYLOAD_SCHEMA = {
       "type": "string",
       "minLength": 1,
       "maxLength": 512,
-      "description": "Filter to rows of this kind: a registered predicate IRI (statements whose `credentialSubject.predicate` it is), `IdentityVerificationCredential`, or `role:vetter`."
+      "description": "Filter to rows of this kind: a registered predicate IRI (statements whose `credentialSubject.predicate` it is), or `role:vetter`."
     },
     "subjectDid": {
       "type": "string",
@@ -169,7 +169,7 @@ export const PAYLOAD_SCHEMA = {
           "type": "string",
           "minLength": 1,
           "maxLength": 512,
-          "description": "What the row records. A registered predicate IRI: a statement (StatementCredential) whose `credentialSubject.predicate` it is — see vtc/endorsement-types/*. `role:vetter`: a vetter role credential (Verifiable Authority Credential) issued by vtc/vetting/vetters/grant. `IdentityVerificationCredential`: the community's identity-verification credential, a plain W3C VC (not a DTGCredential). The two reserved values are not IRIs, so they never collide with a registered predicate."
+          "description": "What the row records. A registered predicate IRI: a statement (StatementCredential) whose `credentialSubject.predicate` it is — see vtc/endorsement-types/*. `role:vetter`: a vetter role credential (Verifiable Authority Credential) issued by vtc/vetting/vetters/grant. The reserved value is not an IRI, so it never collides with a registered predicate. A community's own identity check is a statement like any other, under `https://registry.trustoverip.org/dtg/vsc/vetted/1`."
         },
         "subjectDid": {
           "type": "string",
@@ -308,7 +308,7 @@ export const RESPONSE_PAYLOAD_SCHEMA = {
           "type": "string",
           "minLength": 1,
           "maxLength": 512,
-          "description": "What the row records. A registered predicate IRI: a statement (StatementCredential) whose `credentialSubject.predicate` it is — see vtc/endorsement-types/*. `role:vetter`: a vetter role credential (Verifiable Authority Credential) issued by vtc/vetting/vetters/grant. `IdentityVerificationCredential`: the community's identity-verification credential, a plain W3C VC (not a DTGCredential). The two reserved values are not IRIs, so they never collide with a registered predicate."
+          "description": "What the row records. A registered predicate IRI: a statement (StatementCredential) whose `credentialSubject.predicate` it is — see vtc/endorsement-types/*. `role:vetter`: a vetter role credential (Verifiable Authority Credential) issued by vtc/vetting/vetters/grant. The reserved value is not an IRI, so it never collides with a registered predicate. A community's own identity check is a statement like any other, under `https://registry.trustoverip.org/dtg/vsc/vetted/1`."
         },
         "subjectDid": {
           "type": "string",

package/src/vtc/endorsements/revoke/0.1/payload.ts

@@ -17,7 +17,7 @@ export interface VTCEndorsementsRevokePayload {
 export interface VTCEndorsementsRevokeResponsePayload {
   endorsementId: string;
   /**
-   * The registry-wide revocation receipt for the underlying credential — the statement credential, the identity-verification credential, or a vetter role credential (VAC).
+   * The registry-wide revocation receipt for the underlying credential — the statement credential, or a vetter role credential (VAC).
    */
   revocation: RevocationReceipt;
   /**
@@ -92,7 +92,7 @@ export const PAYLOAD_SCHEMA = {
         },
         "revocation": {
           "$ref": "#/$defs/RevocationReceipt",
-          "description": "The registry-wide revocation receipt for the underlying credential — the statement credential, the identity-verification credential, or a vetter role credential (VAC)."
+          "description": "The registry-wide revocation receipt for the underlying credential — the statement credential, or a vetter role credential (VAC)."
         },
         "statusListIndex": {
           "type": "integer",
@@ -167,7 +167,7 @@ export const RESPONSE_PAYLOAD_SCHEMA = {
         },
         "revocation": {
           "$ref": "#/$defs/RevocationReceipt",
-          "description": "The registry-wide revocation receipt for the underlying credential — the statement credential, the identity-verification credential, or a vetter role credential (VAC)."
+          "description": "The registry-wide revocation receipt for the underlying credential — the statement credential, or a vetter role credential (VAC)."
         },
         "statusListIndex": {
           "type": "integer",

package/src/vtc/endorsements/show/0.1/payload.ts

@@ -107,7 +107,7 @@ export const PAYLOAD_SCHEMA = {
           "type": "string",
           "minLength": 1,
           "maxLength": 512,
-          "description": "What the row records. A registered predicate IRI: a statement (StatementCredential) whose `credentialSubject.predicate` it is — see vtc/endorsement-types/*. `role:vetter`: a vetter role credential (Verifiable Authority Credential) issued by vtc/vetting/vetters/grant. `IdentityVerificationCredential`: the community's identity-verification credential, a plain W3C VC (not a DTGCredential). The two reserved values are not IRIs, so they never collide with a registered predicate."
+          "description": "What the row records. A registered predicate IRI: a statement (StatementCredential) whose `credentialSubject.predicate` it is — see vtc/endorsement-types/*. `role:vetter`: a vetter role credential (Verifiable Authority Credential) issued by vtc/vetting/vetters/grant. The reserved value is not an IRI, so it never collides with a registered predicate. A community's own identity check is a statement like any other, under `https://registry.trustoverip.org/dtg/vsc/vetted/1`."
         },
         "subjectDid": {
           "type": "string",
@@ -229,7 +229,7 @@ export const RESPONSE_PAYLOAD_SCHEMA = {
           "type": "string",
           "minLength": 1,
           "maxLength": 512,
-          "description": "What the row records. A registered predicate IRI: a statement (StatementCredential) whose `credentialSubject.predicate` it is — see vtc/endorsement-types/*. `role:vetter`: a vetter role credential (Verifiable Authority Credential) issued by vtc/vetting/vetters/grant. `IdentityVerificationCredential`: the community's identity-verification credential, a plain W3C VC (not a DTGCredential). The two reserved values are not IRIs, so they never collide with a registered predicate."
+          "description": "What the row records. A registered predicate IRI: a statement (StatementCredential) whose `credentialSubject.predicate` it is — see vtc/endorsement-types/*. `role:vetter`: a vetter role credential (Verifiable Authority Credential) issued by vtc/vetting/vetters/grant. The reserved value is not an IRI, so it never collides with a registered predicate. A community's own identity check is a statement like any other, under `https://registry.trustoverip.org/dtg/vsc/vetted/1`."
         },
         "subjectDid": {
           "type": "string",

package/src/vtc/members/step-up-passkey-notice/0.1/payload.ts

@@ -0,0 +1,137 @@
+/**
+ * Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
+ * Source: specs/vtc/members/step-up-passkey-notice/0.1/payload.schema.json
+ */
+
+import type { Ext } from "../../../../_shared/components.js";
+
+
+/**
+ * The VTC tells a member that a step-up passkey was enrolled for them or revoked from them, naming who acted and when. Unsolicited: the member did not ask, and may be offline.
+ */
+export interface VTCMembersStepUpPasskeyNoticePayload {
+  /**
+   * `enrolled` — a step-up passkey (auth/passkey/enroll/invite or auth/passkey/enroll/finish, purpose stepUp) is now bound to the member. `revoked` — one was unbound (auth/passkey/revoke/finish).
+   */
+  event: "enrolled" | "revoked";
+  /**
+   * The member's own DID — the notice's recipient. Carried in the payload as well as the envelope so that a forwarded notice, detached from its transport, still names its subject.
+   */
+  did: string;
+  /**
+   * Durable identifier of the step-up credential, as auth/passkey/revoke/start and auth/passkey/admin-list carry it: opaque, non-secret metadata, never key material. Lets the member recognise or distinguish a credential without disclosing anything that would help an attacker.
+   */
+  credentialId: string;
+  /**
+   * Who acted: the member themselves (equal to `did`) when they enrolled or revoked it on their own session, or an administrator's DID when they invited the enrollment or revoked for the member. A `by` other than `did` is the signal this task exists to carry — act on someone else's behalf is exactly the account-takeover shape a silent change would hide.
+   */
+  by: string;
+  /**
+   * When the event took effect at the VTC — not when the notice was sent, which differs whenever the member was offline.
+   */
+  at: string;
+  /**
+   * The acting administrator's stated reason, verbatim, when one was given. Absent rather than empty when none was: a community that chose not to explain is itself information. Never populated for a member acting on their own credential — they already know why.
+   */
+  reason?: string;
+  ext?: Ext;
+}
+
+/** Shared definitions this specification references, re-exported under the names it used to declare them with. */
+export type { Ext };
+
+/** Trust Task type URI. */
+export const TYPE_URI = "https://trusttasks.org/spec/vtc/members/step-up-passkey-notice/0.1" as const;
+
+/** Stable alias for this specification's request payload shape. */
+export type Payload = VTCMembersStepUpPasskeyNoticePayload;
+
+/**
+ * This specification's payload schema, as a value.
+ *
+ * SPEC.md §7.2 item 2 is performed against this. It is shipped as data
+ * rather than only as a `.json` file because TypeScript types are erased
+ * at runtime: without a schema a consumer has nothing to validate, and
+ * every REQUIRED payload member is optional in practice. Cross-file
+ * `$ref`s are already inlined, so it needs no resolver.
+ */
+export const PAYLOAD_SCHEMA = {
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://trusttasks.org/spec/vtc/members/step-up-passkey-notice/0.1",
+  "title": "VTC Members — Step-up Passkey Notice — payload",
+  "description": "The VTC tells a member that a step-up passkey was enrolled for them or revoked from them, naming who acted and when. Unsolicited: the member did not ask, and may be offline.",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "event",
+    "did",
+    "credentialId",
+    "by",
+    "at"
+  ],
+  "properties": {
+    "event": {
+      "type": "string",
+      "enum": [
+        "enrolled",
+        "revoked"
+      ],
+      "description": "`enrolled` — a step-up passkey (auth/passkey/enroll/invite or auth/passkey/enroll/finish, purpose stepUp) is now bound to the member. `revoked` — one was unbound (auth/passkey/revoke/finish)."
+    },
+    "did": {
+      "type": "string",
+      "minLength": 1,
+      "description": "The member's own DID — the notice's recipient. Carried in the payload as well as the envelope so that a forwarded notice, detached from its transport, still names its subject."
+    },
+    "credentialId": {
+      "type": "string",
+      "minLength": 1,
+      "description": "Durable identifier of the step-up credential, as auth/passkey/revoke/start and auth/passkey/admin-list carry it: opaque, non-secret metadata, never key material. Lets the member recognise or distinguish a credential without disclosing anything that would help an attacker."
+    },
+    "by": {
+      "type": "string",
+      "minLength": 1,
+      "description": "Who acted: the member themselves (equal to `did`) when they enrolled or revoked it on their own session, or an administrator's DID when they invited the enrollment or revoked for the member. A `by` other than `did` is the signal this task exists to carry — act on someone else's behalf is exactly the account-takeover shape a silent change would hide."
+    },
+    "at": {
+      "type": "string",
+      "format": "date-time",
+      "description": "When the event took effect at the VTC — not when the notice was sent, which differs whenever the member was offline."
+    },
+    "reason": {
+      "type": "string",
+      "maxLength": 1024,
+      "description": "The acting administrator's stated reason, verbatim, when one was given. Absent rather than empty when none was: a community that chose not to explain is itself information. Never populated for a member acting on their own credential — they already know why."
+    },
+    "ext": {
+      "$ref": "#/$defs/Ext"
+    }
+  },
+  "$defs": {
+    "Ext": {
+      "title": "Ext",
+      "description": "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.",
+      "type": "object",
+      "minProperties": 1,
+      "additionalProperties": true,
+      "propertyNames": {
+        "pattern": "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$"
+      }
+    }
+  }
+} as const;
+
+/**
+ * SPEC.md §7.2 policy for the request variant, from this specification's
+ * front matter. Pass to `consumeInbound` — items 5b, 7 and 8 are
+ * per-specification and cannot be derived from the document alone, and
+ * item 2 needs the schema this carries.
+ */
+export const SPEC = {
+  typeUri: TYPE_URI,
+  isBearer: false,
+  isProofRequired: true,
+  isRecipientRequired: true,
+  isIssuedAtRequired: true,
+  payloadSchema: PAYLOAD_SCHEMA,
+} as const;