@openvtc/trust-tasks 0.22.5 → 0.22.7

package/dist/vtc/admin/actions/show/0.1/payload.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"payload.js","sourceRoot":"","sources":["../../../../../../src/vtc/admin/actions/show/0.1/payload.ts"],"names":[],"mappings":"AAAA;;;GAGG;AA0BH,2BAA2B;AAC3B,MAAM,CAAC,MAAM,QAAQ,GAAG,wDAAiE,CAAC;AAK1F,qEAAqE;AACrE,MAAM,CAAC,MAAM,iBAAiB,GAAG,iEAA0E,CAAC;AAK5G;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,SAAS,EAAE,8CAA8C;IACzD,KAAK,EAAE,wDAAwD;IAC/D,OAAO,EAAE,oCAAoC;IAC7C,aAAa,EAAE,yXAAyX;IACxY,MAAM,EAAE,QAAQ;IAChB,sBAAsB,EAAE,KAAK;IAC7B,UAAU,EAAE;QACV,UAAU;KACX;IACD,YAAY,EAAE;QACZ,UAAU,EAAE;YACV,MAAM,EAAE,kBAAkB;YAC1B,aAAa,EAAE,+EAA+E;SAC/F;QACD,KAAK,EAAE;YACL,MAAM,EAAE,aAAa;SACtB;KACF;IACD,OAAO,EAAE;QACP,UAAU,EAAE;YACV,SAAS,EAAE,UAAU;YACrB,OAAO,EAAE,6CAA6C;YACtD,aAAa,EAAE,gGAAgG;YAC/G,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,QAAQ;aACT;YACD,YAAY,EAAE;gBACZ,QAAQ,EAAE;oBACR,MAAM,EAAE,gBAAgB;iBACzB;gBACD,KAAK,EAAE;oBACL,MAAM,EAAE,aAAa;iBACtB;aACF;SACF;QACD,KAAK,EAAE;YACL,OAAO,EAAE,KAAK;YACd,aAAa,EAAE,uKAAuK;YACtL,MAAM,EAAE,QAAQ;YAChB,eAAe,EAAE,CAAC;YAClB,sBAAsB,EAAE,IAAI;YAC5B,eAAe,EAAE;gBACf,SAAS,EAAE,mCAAmC;aAC/C;SACF;QACD,QAAQ,EAAE;YACR,OAAO,EAAE,QAAQ;YACjB,aAAa,EAAE,8LAA8L;YAC7M,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,UAAU;gBACV,UAAU;gBACV,MAAM;gBACN,SAAS;gBACT,WAAW;gBACX,QAAQ;gBACR,WAAW;gBACX,WAAW;gBACX,SAAS;gBACT,SAAS;gBACT,eAAe;gBACf,YAAY;aACb;YACD,YAAY,EAAE;gBACZ,UAAU,EAAE;oBACV,MAAM,EAAE,kBAAkB;iBAC3B;gBACD,UAAU,EAAE;oBACV,MAAM,EAAE,QAAQ;oBAChB,MAAM,EAAE;wBACN,UAAU;wBACV,aAAa;wBACb,OAAO;qBACR;oBACD,aAAa,EAAE,kaAAka;iBAClb;gBACD,MAAM,EAAE;oBACN,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,WAAW,EAAE,GAAG;oBAChB,SAAS,EAAE,sBAAsB;oBACjC,aAAa,EAAE,uQAAuQ;iBACvR;gBACD,SAAS,EAAE;oBACT,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,KAAK;oBACf,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,kKAAkK;iBAClL;gBACD,WAAW,EAAE;oBACX,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,WAAW,EAAE,IAAI;oBACjB,aAAa,EAAE,gKAAgK;iBAChL;gBACD,QAAQ,EAAE;oBACR,MAAM,EAAE,QAAQ;oBAChB,MAAM,EAAE;wBACN,MAAM;wBACN,WAAW;wBACX,UAAU;wBACV,SAAS;wBACT,WAAW;wBACX,QAAQ;qBACT;oBACD,aAAa,EAAE,odAAod;iBACpe;gBACD,WAAW,EAAE;oBACX,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,WAAW;oBACrB,aAAa,EAAE,gCAAgC;iBAChD;gBACD,WAAW,EAAE;oBACX,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,WAAW;oBACrB,aAAa,EAAE,8OAA8O;iBAC9P;gBACD,UAAU,EAAE;oBACV,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,WAAW;oBACrB,aAAa,EAAE,2EAA2E;iBAC3F;gBACD,cAAc,EAAE;oBACd,MAAM,EAAE,QAAQ;oBAChB,MAAM,EAAE;wBACN,cAAc;wBACd,UAAU;wBACV,SAAS;wBACT,sBAAsB;wBACtB,aAAa;wBACb,eAAe;wBACf,cAAc;qBACf;oBACD,aAAa,EAAE,0UAA0U;iBAC1V;gBACD,WAAW,EAAE;oBACX,MAAM,EAAE,SAAS;oBACjB,SAAS,EAAE,CAAC;oBACZ,aAAa,EAAE,6MAA6M;iBAC7N;gBACD,WAAW,EAAE;oBACX,MAAM,EAAE,OAAO;oBACf,aAAa,EAAE,0MAA0M;oBACzN,OAAO,EAAE;wBACP,MAAM,EAAE,QAAQ;wBAChB,sBAAsB,EAAE,KAAK;wBAC7B,UAAU,EAAE;4BACV,SAAS;4BACT,IAAI;yBACL;wBACD,YAAY,EAAE;4BACZ,SAAS,EAAE;gCACT,MAAM,EAAE,QAAQ;gCAChB,WAAW,EAAE,CAAC;gCACd,WAAW,EAAE,IAAI;gCACjB,aAAa,EAAE,6EAA6E;6BAC7F;4BACD,IAAI,EAAE;gCACJ,MAAM,EAAE,QAAQ;gCAChB,QAAQ,EAAE,WAAW;gCACrB,aAAa,EAAE,iCAAiC;6BACjD;yBACF;qBACF;iBACF;gBACD,oBAAoB,EAAE;oBACpB,MAAM,EAAE,SAAS;oBACjB,SAAS,EAAE,CAAC;oBACZ,aAAa,EAAE,sMAAsM;iBACtN;gBACD,SAAS,EAAE;oBACT,MAAM,EAAE,iBAAiB;iBAC1B;gBACD,SAAS,EAAE;oBACT,MAAM,EAAE,QAAQ;oBAChB,aAAa,EAAE,gaAAga;iBAChb;gBACD,eAAe,EAAE;oBACf,MAAM,EAAE,yBAAyB;oBACjC,aAAa,EAAE,iVAAiV;iBACjW;gBACD,WAAW,EAAE;oBACX,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,EAAE;oBACf,WAAW,EAAE,GAAG;oBAChB,aAAa,EAAE,qZAAqZ;iBACra;gBACD,YAAY,EAAE;oBACZ,MAAM,EAAE,QAAQ;oBAChB,MAAM,EAAE;wBACN,UAAU;wBACV,WAAW;wBACX,cAAc;wBACd,UAAU;qBACX;oBACD,aAAa,EAAE,mUAAmU;iBACnV;gBACD,sBAAsB,EAAE;oBACtB,MAAM,EAAE,SAAS;oBACjB,SAAS,EAAE,CAAC;oBACZ,aAAa,EAAE,sOAAsO;iBACtP;gBACD,KAAK,EAAE;oBACL,MAAM,EAAE,aAAa;iBACtB;aACF;SACF;QACD,SAAS,EAAE;YACT,OAAO,EAAE,SAAS;YAClB,aAAa,EAAE,+OAA+O;YAC9P,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,OAAO;gBACP,QAAQ;gBACR,gBAAgB;aACjB;YACD,YAAY,EAAE;gBACZ,OAAO,EAAE;oBACP,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,WAAW,EAAE,GAAG;oBAChB,aAAa,EAAE,2HAA2H;iBAC3I;gBACD,QAAQ,EAAE;oBACR,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,IAAI;oBACjB,aAAa,EAAE,qFAAqF;iBACrG;gBACD,QAAQ,EAAE;oBACR,MAAM,EAAE,QAAQ;oBAChB,aAAa,EAAE,gIAAgI;oBAC/I,eAAe,EAAE;wBACf,SAAS,EAAE,qBAAqB;wBAChC,WAAW,EAAE,EAAE;qBAChB;oBACD,sBAAsB,EAAE;wBACtB,MAAM,EAAE,eAAe;qBACxB;iBACF;gBACD,gBAAgB,EAAE;oBAChB,MAAM,EAAE,yBAAyB;oBACjC,aAAa,EAAE,8TAA8T;iBAC9U;aACF;SACF;QACD,OAAO,EAAE;YACP,OAAO,EAAE,OAAO;YAChB,aAAa,EAAE,qEAAqE;YACpF,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,SAAS;gBACT,QAAQ;gBACR,OAAO;aACR;YACD,YAAY,EAAE;gBACZ,SAAS,EAAE;oBACT,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,GAAG;oBAChB,SAAS,EAAE,sBAAsB;oBACjC,aAAa,EAAE,kGAAkG;iBAClH;gBACD,QAAQ,EAAE;oBACR,MAAM,EAAE,QAAQ;oBAChB,MAAM,EAAE;wBACN,KAAK;wBACL,gBAAgB;wBAChB,UAAU;wBACV,UAAU;wBACV,MAAM;qBACP;oBACD,aAAa,EAAE,mTAAmT;iBACnU;gBACD,OAAO,EAAE;oBACP,aAAa,EAAE,gPAAgP;iBAChQ;aACF;SACF;QACD,iBAAiB,EAAE;YACjB,OAAO,EAAE,iBAAiB;YAC1B,aAAa,EAAE,gnDAAgnD;YAC/nD,MAAM,EAAE,QAAQ;YAChB,WAAW,EAAE,EAAE;YACf,SAAS,EAAE,4CAA4C;YACvD,UAAU,EAAE;gBACV,iDAAiD;aAClD;SACF;QACD,UAAU,EAAE;YACV,OAAO,EAAE,UAAU;YACnB,aAAa,EAAE,8RAA8R;YAC7S,MAAM,EAAE,QAAQ;YAChB,WAAW,EAAE,EAAE;YACf,WAAW,EAAE,GAAG;YAChB,SAAS,EAAE,qBAAqB;SACjC;KACF;CACO,CAAC;AAEX,mEAAmE;AACnE,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,SAAS,EAAE,8CAA8C;IACzD,MAAM,EAAE,kBAAkB;IAC1B,OAAO,EAAE;QACP,UAAU,EAAE;YACV,SAAS,EAAE,UAAU;YACrB,OAAO,EAAE,6CAA6C;YACtD,aAAa,EAAE,gGAAgG;YAC/G,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,QAAQ;aACT;YACD,YAAY,EAAE;gBACZ,QAAQ,EAAE;oBACR,MAAM,EAAE,gBAAgB;iBACzB;gBACD,KAAK,EAAE;oBACL,MAAM,EAAE,aAAa;iBACtB;aACF;SACF;QACD,KAAK,EAAE;YACL,OAAO,EAAE,KAAK;YACd,aAAa,EAAE,uKAAuK;YACtL,MAAM,EAAE,QAAQ;YAChB,eAAe,EAAE,CAAC;YAClB,sBAAsB,EAAE,IAAI;YAC5B,eAAe,EAAE;gBACf,SAAS,EAAE,mCAAmC;aAC/C;SACF;QACD,QAAQ,EAAE;YACR,OAAO,EAAE,QAAQ;YACjB,aAAa,EAAE,8LAA8L;YAC7M,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,UAAU;gBACV,UAAU;gBACV,MAAM;gBACN,SAAS;gBACT,WAAW;gBACX,QAAQ;gBACR,WAAW;gBACX,WAAW;gBACX,SAAS;gBACT,SAAS;gBACT,eAAe;gBACf,YAAY;aACb;YACD,YAAY,EAAE;gBACZ,UAAU,EAAE;oBACV,MAAM,EAAE,kBAAkB;iBAC3B;gBACD,UAAU,EAAE;oBACV,MAAM,EAAE,QAAQ;oBAChB,MAAM,EAAE;wBACN,UAAU;wBACV,aAAa;wBACb,OAAO;qBACR;oBACD,aAAa,EAAE,kaAAka;iBAClb;gBACD,MAAM,EAAE;oBACN,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,WAAW,EAAE,GAAG;oBAChB,SAAS,EAAE,sBAAsB;oBACjC,aAAa,EAAE,uQAAuQ;iBACvR;gBACD,SAAS,EAAE;oBACT,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,KAAK;oBACf,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,kKAAkK;iBAClL;gBACD,WAAW,EAAE;oBACX,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,WAAW,EAAE,IAAI;oBACjB,aAAa,EAAE,gKAAgK;iBAChL;gBACD,QAAQ,EAAE;oBACR,MAAM,EAAE,QAAQ;oBAChB,MAAM,EAAE;wBACN,MAAM;wBACN,WAAW;wBACX,UAAU;wBACV,SAAS;wBACT,WAAW;wBACX,QAAQ;qBACT;oBACD,aAAa,EAAE,odAAod;iBACpe;gBACD,WAAW,EAAE;oBACX,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,WAAW;oBACrB,aAAa,EAAE,gCAAgC;iBAChD;gBACD,WAAW,EAAE;oBACX,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,WAAW;oBACrB,aAAa,EAAE,8OAA8O;iBAC9P;gBACD,UAAU,EAAE;oBACV,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,WAAW;oBACrB,aAAa,EAAE,2EAA2E;iBAC3F;gBACD,cAAc,EAAE;oBACd,MAAM,EAAE,QAAQ;oBAChB,MAAM,EAAE;wBACN,cAAc;wBACd,UAAU;wBACV,SAAS;wBACT,sBAAsB;wBACtB,aAAa;wBACb,eAAe;wBACf,cAAc;qBACf;oBACD,aAAa,EAAE,0UAA0U;iBAC1V;gBACD,WAAW,EAAE;oBACX,MAAM,EAAE,SAAS;oBACjB,SAAS,EAAE,CAAC;oBACZ,aAAa,EAAE,6MAA6M;iBAC7N;gBACD,WAAW,EAAE;oBACX,MAAM,EAAE,OAAO;oBACf,aAAa,EAAE,0MAA0M;oBACzN,OAAO,EAAE;wBACP,MAAM,EAAE,QAAQ;wBAChB,sBAAsB,EAAE,KAAK;wBAC7B,UAAU,EAAE;4BACV,SAAS;4BACT,IAAI;yBACL;wBACD,YAAY,EAAE;4BACZ,SAAS,EAAE;gCACT,MAAM,EAAE,QAAQ;gCAChB,WAAW,EAAE,CAAC;gCACd,WAAW,EAAE,IAAI;gCACjB,aAAa,EAAE,6EAA6E;6BAC7F;4BACD,IAAI,EAAE;gCACJ,MAAM,EAAE,QAAQ;gCAChB,QAAQ,EAAE,WAAW;gCACrB,aAAa,EAAE,iCAAiC;6BACjD;yBACF;qBACF;iBACF;gBACD,oBAAoB,EAAE;oBACpB,MAAM,EAAE,SAAS;oBACjB,SAAS,EAAE,CAAC;oBACZ,aAAa,EAAE,sMAAsM;iBACtN;gBACD,SAAS,EAAE;oBACT,MAAM,EAAE,iBAAiB;iBAC1B;gBACD,SAAS,EAAE;oBACT,MAAM,EAAE,QAAQ;oBAChB,aAAa,EAAE,gaAAga;iBAChb;gBACD,eAAe,EAAE;oBACf,MAAM,EAAE,yBAAyB;oBACjC,aAAa,EAAE,iVAAiV;iBACjW;gBACD,WAAW,EAAE;oBACX,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,EAAE;oBACf,WAAW,EAAE,GAAG;oBAChB,aAAa,EAAE,qZAAqZ;iBACra;gBACD,YAAY,EAAE;oBACZ,MAAM,EAAE,QAAQ;oBAChB,MAAM,EAAE;wBACN,UAAU;wBACV,WAAW;wBACX,cAAc;wBACd,UAAU;qBACX;oBACD,aAAa,EAAE,mUAAmU;iBACnV;gBACD,sBAAsB,EAAE;oBACtB,MAAM,EAAE,SAAS;oBACjB,SAAS,EAAE,CAAC;oBACZ,aAAa,EAAE,sOAAsO;iBACtP;gBACD,KAAK,EAAE;oBACL,MAAM,EAAE,aAAa;iBACtB;aACF;SACF;QACD,SAAS,EAAE;YACT,OAAO,EAAE,SAAS;YAClB,aAAa,EAAE,+OAA+O;YAC9P,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,OAAO;gBACP,QAAQ;gBACR,gBAAgB;aACjB;YACD,YAAY,EAAE;gBACZ,OAAO,EAAE;oBACP,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,WAAW,EAAE,GAAG;oBAChB,aAAa,EAAE,2HAA2H;iBAC3I;gBACD,QAAQ,EAAE;oBACR,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,IAAI;oBACjB,aAAa,EAAE,qFAAqF;iBACrG;gBACD,QAAQ,EAAE;oBACR,MAAM,EAAE,QAAQ;oBAChB,aAAa,EAAE,gIAAgI;oBAC/I,eAAe,EAAE;wBACf,SAAS,EAAE,qBAAqB;wBAChC,WAAW,EAAE,EAAE;qBAChB;oBACD,sBAAsB,EAAE;wBACtB,MAAM,EAAE,eAAe;qBACxB;iBACF;gBACD,gBAAgB,EAAE;oBAChB,MAAM,EAAE,yBAAyB;oBACjC,aAAa,EAAE,8TAA8T;iBAC9U;aACF;SACF;QACD,OAAO,EAAE;YACP,OAAO,EAAE,OAAO;YAChB,aAAa,EAAE,qEAAqE;YACpF,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,SAAS;gBACT,QAAQ;gBACR,OAAO;aACR;YACD,YAAY,EAAE;gBACZ,SAAS,EAAE;oBACT,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,GAAG;oBAChB,SAAS,EAAE,sBAAsB;oBACjC,aAAa,EAAE,kGAAkG;iBAClH;gBACD,QAAQ,EAAE;oBACR,MAAM,EAAE,QAAQ;oBAChB,MAAM,EAAE;wBACN,KAAK;wBACL,gBAAgB;wBAChB,UAAU;wBACV,UAAU;wBACV,MAAM;qBACP;oBACD,aAAa,EAAE,mTAAmT;iBACnU;gBACD,OAAO,EAAE;oBACP,aAAa,EAAE,gPAAgP;iBAChQ;aACF;SACF;QACD,iBAAiB,EAAE;YACjB,OAAO,EAAE,iBAAiB;YAC1B,aAAa,EAAE,gnDAAgnD;YAC/nD,MAAM,EAAE,QAAQ;YAChB,WAAW,EAAE,EAAE;YACf,SAAS,EAAE,4CAA4C;YACvD,UAAU,EAAE;gBACV,iDAAiD;aAClD;SACF;QACD,UAAU,EAAE;YACV,OAAO,EAAE,UAAU;YACnB,aAAa,EAAE,8RAA8R;YAC7S,MAAM,EAAE,QAAQ;YAChB,WAAW,EAAE,EAAE;YACf,WAAW,EAAE,GAAG;YAChB,SAAS,EAAE,qBAAqB;SACjC;KACF;CACO,CAAC;AAEX;;;;;GAKG;AACH,MAAM,CAAC,MAAM,IAAI,GAAG;IAClB,OAAO,EAAE,QAAQ;IACjB,QAAQ,EAAE,KAAK;IACf,eAAe,EAAE,IAAI;IACrB,mBAAmB,EAAE,IAAI;IACzB,kBAAkB,EAAE,KAAK;IACzB,aAAa,EAAE,cAAc;CACrB,CAAC;AAEX;;;;GAIG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,OAAO,EAAE,iBAAiB;IAC1B,QAAQ,EAAE,KAAK;IACf,eAAe,EAAE,IAAI;IACrB,mBAAmB,EAAE,IAAI;IACzB,kBAAkB,EAAE,KAAK;IACzB,aAAa,EAAE,uBAAuB;CAC9B,CAAC"}

package/dist/vtc/install/claim/finish/0.3/payload.d.ts

@@ -0,0 +1,379 @@
+/**
+ * Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
+ * Source: specs/vtc/install/claim/finish/0.3/payload.schema.json
+ */
+import type { ApproverDid, ApproverLabel, AttestStatement, Ext } from "../../../../../_shared/components.js";
+/**
+ * Complete first-administrator enrolment under a DID the founder already controls: the document is signed by the DID the install token names, verified against its live document, and carries the founder's step-up approver's enrolment statement over the claim's challenge. The outer document members (id, type, issuer, recipient, issuedAt, expiresAt, proof) are owned by the framework — SPEC §6.3.
+ */
+export interface VTCInstallClaimFinishPayload {
+    /**
+     * From claim/start 0.3, echoed verbatim. Also the `boundTo` of the statement.
+     */
+    claimId: string;
+    /**
+     * The founder's step-up approver. MUST equal the statement's issuer.
+     */
+    approverDid: ApproverDid;
+    label?: ApproverLabel;
+    /**
+     * The approver's complete, signed auth/step-up/approver/attest/0.1 document with `purpose: enrol`, `boundTo` equal to `claimId`, over the start's `challenge`. Verified as received.
+     */
+    statement: AttestStatement;
+    ext?: Ext;
+}
+export interface VTCInstallClaimFinishResponsePayload {
+    /**
+     * The founder's DID — the DID the install token named and the claim was signed by — which vtc/admin/bootstrap writes as the first administrator.
+     */
+    adminDid: string;
+    /**
+     * EdDSA JWT (aud=vtc-install-session, 5min TTL) consumed by vtc/admin/bootstrap. The approver binding takes effect when it is consumed.
+     */
+    setupSessionToken: string;
+    ext?: Ext;
+}
+/** Shared definitions this specification references, re-exported under the names it used to declare them with. */
+export type { ApproverDid, ApproverLabel, AttestStatement, Ext };
+/** Trust Task type URI. */
+export declare const TYPE_URI: "https://trusttasks.org/spec/vtc/install/claim/finish/0.3";
+/** Stable alias for this specification's request payload shape. */
+export type Payload = VTCInstallClaimFinishPayload;
+/** Trust Task response type URI (request type URI + "#response"). */
+export declare const RESPONSE_TYPE_URI: "https://trusttasks.org/spec/vtc/install/claim/finish/0.3#response";
+/** Stable alias for this specification's success-response payload shape. */
+export type Response = VTCInstallClaimFinishResponsePayload;
+/**
+ * This specification's payload schema, as a value.
+ *
+ * SPEC.md §7.2 item 2 is performed against this. It is shipped as data
+ * rather than only as a `.json` file because TypeScript types are erased
+ * at runtime: without a schema a consumer has nothing to validate, and
+ * every REQUIRED payload member is optional in practice. Cross-file
+ * `$ref`s are already inlined, so it needs no resolver.
+ */
+export declare const PAYLOAD_SCHEMA: {
+    readonly $schema: "https://json-schema.org/draft/2020-12/schema";
+    readonly $id: "https://trusttasks.org/spec/vtc/install/claim/finish/0.3";
+    readonly title: "VTC Install Claim Finish — payload";
+    readonly description: "Complete first-administrator enrolment under a DID the founder already controls: the document is signed by the DID the install token names, verified against its live document, and carries the founder's step-up approver's enrolment statement over the claim's challenge. The outer document members (id, type, issuer, recipient, issuedAt, expiresAt, proof) are owned by the framework — SPEC §6.3.";
+    readonly type: "object";
+    readonly additionalProperties: false;
+    readonly required: readonly ["claimId", "approverDid", "statement"];
+    readonly properties: {
+        readonly claimId: {
+            readonly type: "string";
+            readonly minLength: 1;
+            readonly maxLength: 256;
+            readonly description: "From claim/start 0.3, echoed verbatim. Also the `boundTo` of the statement.";
+        };
+        readonly approverDid: {
+            readonly $ref: "#/$defs/ApproverDid";
+            readonly description: "The founder's step-up approver. MUST equal the statement's issuer.";
+        };
+        readonly label: {
+            readonly $ref: "#/$defs/ApproverLabel";
+        };
+        readonly statement: {
+            readonly $ref: "#/$defs/AttestStatement";
+            readonly description: "The approver's complete, signed auth/step-up/approver/attest/0.1 document with `purpose: enrol`, `boundTo` equal to `claimId`, over the start's `challenge`. Verified as received.";
+        };
+        readonly ext: {
+            readonly $ref: "#/$defs/Ext";
+        };
+    };
+    readonly $defs: {
+        readonly Response: {
+            readonly $anchor: "response";
+            readonly title: "VTC Install Claim Finish — response payload";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["adminDid", "setupSessionToken"];
+            readonly properties: {
+                readonly adminDid: {
+                    readonly type: "string";
+                    readonly pattern: "^did:";
+                    readonly minLength: 5;
+                    readonly maxLength: 2048;
+                    readonly description: "The founder's DID — the DID the install token named and the claim was signed by — which vtc/admin/bootstrap writes as the first administrator.";
+                };
+                readonly setupSessionToken: {
+                    readonly type: "string";
+                    readonly minLength: 1;
+                    readonly description: "EdDSA JWT (aud=vtc-install-session, 5min TTL) consumed by vtc/admin/bootstrap. The approver binding takes effect when it is consumed.";
+                };
+                readonly ext: {
+                    readonly $ref: "#/$defs/Ext";
+                };
+            };
+        };
+        readonly Ext: {
+            readonly title: "Ext";
+            readonly description: "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.";
+            readonly type: "object";
+            readonly minProperties: 1;
+            readonly additionalProperties: true;
+            readonly propertyNames: {
+                readonly pattern: "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$";
+            };
+        };
+        readonly AttestStatement: {
+            readonly title: "AttestStatement";
+            readonly type: "object";
+            readonly minProperties: 1;
+            readonly description: "A complete, signed auth/step-up/approver/attest/0.1 Trust Task document — envelope, payload and proof — issued by the approver. Deliberately an open object here rather than a typed one: the consumer verifies it as a document in its own right (envelope, proof and payload against that specification's schemas), and verifies its proof over the members exactly as received, which a binding that narrowed it to a typed struct and re-serialised it could silently break.";
+        };
+        readonly ApproverLabel: {
+            readonly title: "ApproverLabel";
+            readonly type: "string";
+            readonly minLength: 1;
+            readonly maxLength: 64;
+            readonly description: "A human-readable name for where the approver lives — e.g. `Browser plugin — work laptop`. Chosen by the subject (or suggested by an inviter), untrusted, and attributed to its author wherever it is rendered. Absent rather than invented when none was chosen.";
+        };
+        readonly ApproverDid: {
+            readonly title: "ApproverDid";
+            readonly type: "string";
+            readonly minLength: 16;
+            readonly maxLength: 128;
+            readonly pattern: "^did:key:z6Mk[1-9A-HJ-NP-Za-km-z]+$";
+            readonly description: "A step-up approver, as an Ed25519 `did:key` (`z6Mk…`). `did:key` only, because its document is a function of the key and resolves with no network, so verifying an approver's statement never depends on a fetch, and a key whose DID document could be rewritten after enrolment would not be the key that was enrolled. Distinct from the subject's DID, from every verification method in the subject's DID document, and from every key the subject can sign operations with at the relying party.";
+        };
+    };
+};
+/** As {@link PAYLOAD_SCHEMA}, for the success-response variant. */
+export declare const RESPONSE_PAYLOAD_SCHEMA: {
+    readonly $schema: "https://json-schema.org/draft/2020-12/schema";
+    readonly $ref: "#/$defs/Response";
+    readonly $defs: {
+        readonly Response: {
+            readonly $anchor: "response";
+            readonly title: "VTC Install Claim Finish — response payload";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["adminDid", "setupSessionToken"];
+            readonly properties: {
+                readonly adminDid: {
+                    readonly type: "string";
+                    readonly pattern: "^did:";
+                    readonly minLength: 5;
+                    readonly maxLength: 2048;
+                    readonly description: "The founder's DID — the DID the install token named and the claim was signed by — which vtc/admin/bootstrap writes as the first administrator.";
+                };
+                readonly setupSessionToken: {
+                    readonly type: "string";
+                    readonly minLength: 1;
+                    readonly description: "EdDSA JWT (aud=vtc-install-session, 5min TTL) consumed by vtc/admin/bootstrap. The approver binding takes effect when it is consumed.";
+                };
+                readonly ext: {
+                    readonly $ref: "#/$defs/Ext";
+                };
+            };
+        };
+        readonly Ext: {
+            readonly title: "Ext";
+            readonly description: "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.";
+            readonly type: "object";
+            readonly minProperties: 1;
+            readonly additionalProperties: true;
+            readonly propertyNames: {
+                readonly pattern: "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$";
+            };
+        };
+        readonly AttestStatement: {
+            readonly title: "AttestStatement";
+            readonly type: "object";
+            readonly minProperties: 1;
+            readonly description: "A complete, signed auth/step-up/approver/attest/0.1 Trust Task document — envelope, payload and proof — issued by the approver. Deliberately an open object here rather than a typed one: the consumer verifies it as a document in its own right (envelope, proof and payload against that specification's schemas), and verifies its proof over the members exactly as received, which a binding that narrowed it to a typed struct and re-serialised it could silently break.";
+        };
+        readonly ApproverLabel: {
+            readonly title: "ApproverLabel";
+            readonly type: "string";
+            readonly minLength: 1;
+            readonly maxLength: 64;
+            readonly description: "A human-readable name for where the approver lives — e.g. `Browser plugin — work laptop`. Chosen by the subject (or suggested by an inviter), untrusted, and attributed to its author wherever it is rendered. Absent rather than invented when none was chosen.";
+        };
+        readonly ApproverDid: {
+            readonly title: "ApproverDid";
+            readonly type: "string";
+            readonly minLength: 16;
+            readonly maxLength: 128;
+            readonly pattern: "^did:key:z6Mk[1-9A-HJ-NP-Za-km-z]+$";
+            readonly description: "A step-up approver, as an Ed25519 `did:key` (`z6Mk…`). `did:key` only, because its document is a function of the key and resolves with no network, so verifying an approver's statement never depends on a fetch, and a key whose DID document could be rewritten after enrolment would not be the key that was enrolled. Distinct from the subject's DID, from every verification method in the subject's DID document, and from every key the subject can sign operations with at the relying party.";
+        };
+    };
+};
+/**
+ * SPEC.md §7.2 policy for the request variant, from this specification's
+ * front matter. Pass to `consumeInbound` — items 5b, 7 and 8 are
+ * per-specification and cannot be derived from the document alone, and
+ * item 2 needs the schema this carries.
+ */
+export declare const SPEC: {
+    readonly typeUri: "https://trusttasks.org/spec/vtc/install/claim/finish/0.3";
+    readonly isBearer: false;
+    readonly isProofRequired: true;
+    readonly isRecipientRequired: true;
+    readonly isIssuedAtRequired: true;
+    readonly payloadSchema: {
+        readonly $schema: "https://json-schema.org/draft/2020-12/schema";
+        readonly $id: "https://trusttasks.org/spec/vtc/install/claim/finish/0.3";
+        readonly title: "VTC Install Claim Finish — payload";
+        readonly description: "Complete first-administrator enrolment under a DID the founder already controls: the document is signed by the DID the install token names, verified against its live document, and carries the founder's step-up approver's enrolment statement over the claim's challenge. The outer document members (id, type, issuer, recipient, issuedAt, expiresAt, proof) are owned by the framework — SPEC §6.3.";
+        readonly type: "object";
+        readonly additionalProperties: false;
+        readonly required: readonly ["claimId", "approverDid", "statement"];
+        readonly properties: {
+            readonly claimId: {
+                readonly type: "string";
+                readonly minLength: 1;
+                readonly maxLength: 256;
+                readonly description: "From claim/start 0.3, echoed verbatim. Also the `boundTo` of the statement.";
+            };
+            readonly approverDid: {
+                readonly $ref: "#/$defs/ApproverDid";
+                readonly description: "The founder's step-up approver. MUST equal the statement's issuer.";
+            };
+            readonly label: {
+                readonly $ref: "#/$defs/ApproverLabel";
+            };
+            readonly statement: {
+                readonly $ref: "#/$defs/AttestStatement";
+                readonly description: "The approver's complete, signed auth/step-up/approver/attest/0.1 document with `purpose: enrol`, `boundTo` equal to `claimId`, over the start's `challenge`. Verified as received.";
+            };
+            readonly ext: {
+                readonly $ref: "#/$defs/Ext";
+            };
+        };
+        readonly $defs: {
+            readonly Response: {
+                readonly $anchor: "response";
+                readonly title: "VTC Install Claim Finish — response payload";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["adminDid", "setupSessionToken"];
+                readonly properties: {
+                    readonly adminDid: {
+                        readonly type: "string";
+                        readonly pattern: "^did:";
+                        readonly minLength: 5;
+                        readonly maxLength: 2048;
+                        readonly description: "The founder's DID — the DID the install token named and the claim was signed by — which vtc/admin/bootstrap writes as the first administrator.";
+                    };
+                    readonly setupSessionToken: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                        readonly description: "EdDSA JWT (aud=vtc-install-session, 5min TTL) consumed by vtc/admin/bootstrap. The approver binding takes effect when it is consumed.";
+                    };
+                    readonly ext: {
+                        readonly $ref: "#/$defs/Ext";
+                    };
+                };
+            };
+            readonly Ext: {
+                readonly title: "Ext";
+                readonly description: "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.";
+                readonly type: "object";
+                readonly minProperties: 1;
+                readonly additionalProperties: true;
+                readonly propertyNames: {
+                    readonly pattern: "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$";
+                };
+            };
+            readonly AttestStatement: {
+                readonly title: "AttestStatement";
+                readonly type: "object";
+                readonly minProperties: 1;
+                readonly description: "A complete, signed auth/step-up/approver/attest/0.1 Trust Task document — envelope, payload and proof — issued by the approver. Deliberately an open object here rather than a typed one: the consumer verifies it as a document in its own right (envelope, proof and payload against that specification's schemas), and verifies its proof over the members exactly as received, which a binding that narrowed it to a typed struct and re-serialised it could silently break.";
+            };
+            readonly ApproverLabel: {
+                readonly title: "ApproverLabel";
+                readonly type: "string";
+                readonly minLength: 1;
+                readonly maxLength: 64;
+                readonly description: "A human-readable name for where the approver lives — e.g. `Browser plugin — work laptop`. Chosen by the subject (or suggested by an inviter), untrusted, and attributed to its author wherever it is rendered. Absent rather than invented when none was chosen.";
+            };
+            readonly ApproverDid: {
+                readonly title: "ApproverDid";
+                readonly type: "string";
+                readonly minLength: 16;
+                readonly maxLength: 128;
+                readonly pattern: "^did:key:z6Mk[1-9A-HJ-NP-Za-km-z]+$";
+                readonly description: "A step-up approver, as an Ed25519 `did:key` (`z6Mk…`). `did:key` only, because its document is a function of the key and resolves with no network, so verifying an approver's statement never depends on a fetch, and a key whose DID document could be rewritten after enrolment would not be the key that was enrolled. Distinct from the subject's DID, from every verification method in the subject's DID document, and from every key the subject can sign operations with at the relying party.";
+            };
+        };
+    };
+};
+/**
+ * SPEC.md §7.2 policy for the success-response variant. `isRecipientRequired`
+ * tracks the *issuer* party's requirement because a response swaps the
+ * parties (§7.3 item 5).
+ */
+export declare const RESPONSE_SPEC: {
+    readonly typeUri: "https://trusttasks.org/spec/vtc/install/claim/finish/0.3#response";
+    readonly isBearer: false;
+    readonly isProofRequired: true;
+    readonly isRecipientRequired: true;
+    readonly isIssuedAtRequired: true;
+    readonly payloadSchema: {
+        readonly $schema: "https://json-schema.org/draft/2020-12/schema";
+        readonly $ref: "#/$defs/Response";
+        readonly $defs: {
+            readonly Response: {
+                readonly $anchor: "response";
+                readonly title: "VTC Install Claim Finish — response payload";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["adminDid", "setupSessionToken"];
+                readonly properties: {
+                    readonly adminDid: {
+                        readonly type: "string";
+                        readonly pattern: "^did:";
+                        readonly minLength: 5;
+                        readonly maxLength: 2048;
+                        readonly description: "The founder's DID — the DID the install token named and the claim was signed by — which vtc/admin/bootstrap writes as the first administrator.";
+                    };
+                    readonly setupSessionToken: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                        readonly description: "EdDSA JWT (aud=vtc-install-session, 5min TTL) consumed by vtc/admin/bootstrap. The approver binding takes effect when it is consumed.";
+                    };
+                    readonly ext: {
+                        readonly $ref: "#/$defs/Ext";
+                    };
+                };
+            };
+            readonly Ext: {
+                readonly title: "Ext";
+                readonly description: "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.";
+                readonly type: "object";
+                readonly minProperties: 1;
+                readonly additionalProperties: true;
+                readonly propertyNames: {
+                    readonly pattern: "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$";
+                };
+            };
+            readonly AttestStatement: {
+                readonly title: "AttestStatement";
+                readonly type: "object";
+                readonly minProperties: 1;
+                readonly description: "A complete, signed auth/step-up/approver/attest/0.1 Trust Task document — envelope, payload and proof — issued by the approver. Deliberately an open object here rather than a typed one: the consumer verifies it as a document in its own right (envelope, proof and payload against that specification's schemas), and verifies its proof over the members exactly as received, which a binding that narrowed it to a typed struct and re-serialised it could silently break.";
+            };
+            readonly ApproverLabel: {
+                readonly title: "ApproverLabel";
+                readonly type: "string";
+                readonly minLength: 1;
+                readonly maxLength: 64;
+                readonly description: "A human-readable name for where the approver lives — e.g. `Browser plugin — work laptop`. Chosen by the subject (or suggested by an inviter), untrusted, and attributed to its author wherever it is rendered. Absent rather than invented when none was chosen.";
+            };
+            readonly ApproverDid: {
+                readonly title: "ApproverDid";
+                readonly type: "string";
+                readonly minLength: 16;
+                readonly maxLength: 128;
+                readonly pattern: "^did:key:z6Mk[1-9A-HJ-NP-Za-km-z]+$";
+                readonly description: "A step-up approver, as an Ed25519 `did:key` (`z6Mk…`). `did:key` only, because its document is a function of the key and resolves with no network, so verifying an approver's statement never depends on a fetch, and a key whose DID document could be rewritten after enrolment would not be the key that was enrolled. Distinct from the subject's DID, from every verification method in the subject's DID document, and from every key the subject can sign operations with at the relying party.";
+            };
+        };
+    };
+};
+//# sourceMappingURL=payload.d.ts.map

package/dist/vtc/install/claim/finish/0.3/payload.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"payload.d.ts","sourceRoot":"","sources":["../../../../../../src/vtc/install/claim/finish/0.3/payload.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,aAAa,EAAE,eAAe,EAAE,GAAG,EAAE,MAAM,sCAAsC,CAAC;AAG7G;;GAEG;AACH,MAAM,WAAW,4BAA4B;IAC3C;;OAEG;IACH,OAAO,EAAE,MAAM,CAAC;IAChB;;OAEG;IACH,WAAW,EAAE,WAAW,CAAC;IACzB,KAAK,CAAC,EAAE,aAAa,CAAC;IACtB;;OAEG;IACH,SAAS,EAAE,eAAe,CAAC;IAC3B,GAAG,CAAC,EAAE,GAAG,CAAC;CACX;AACD,MAAM,WAAW,oCAAoC;IACnD;;OAEG;IACH,QAAQ,EAAE,MAAM,CAAC;IACjB;;OAEG;IACH,iBAAiB,EAAE,MAAM,CAAC;IAC1B,GAAG,CAAC,EAAE,GAAG,CAAC;CACX;AAED,kHAAkH;AAClH,YAAY,EAAE,WAAW,EAAE,aAAa,EAAE,eAAe,EAAE,GAAG,EAAE,CAAC;AAEjE,2BAA2B;AAC3B,eAAO,MAAM,QAAQ,EAAG,0DAAmE,CAAC;AAE5F,mEAAmE;AACnE,MAAM,MAAM,OAAO,GAAG,4BAA4B,CAAC;AAEnD,qEAAqE;AACrE,eAAO,MAAM,iBAAiB,EAAG,mEAA4E,CAAC;AAE9G,4EAA4E;AAC5E,MAAM,MAAM,QAAQ,GAAG,oCAAoC,CAAC;AAE5D;;;;;;;;GAQG;AACH,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA8FjB,CAAC;AAEX,mEAAmE;AACnE,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA+D1B,CAAC;AAEX;;;;;GAKG;AACH,eAAO,MAAM,IAAI;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAOP,CAAC;AAEX;;;;GAIG;AACH,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAOhB,CAAC"}

package/dist/vtc/install/claim/finish/0.3/payload.js

@@ -0,0 +1,205 @@
+/**
+ * Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
+ * Source: specs/vtc/install/claim/finish/0.3/payload.schema.json
+ */
+/** Trust Task type URI. */
+export const TYPE_URI = "https://trusttasks.org/spec/vtc/install/claim/finish/0.3";
+/** Trust Task response type URI (request type URI + "#response"). */
+export const RESPONSE_TYPE_URI = "https://trusttasks.org/spec/vtc/install/claim/finish/0.3#response";
+/**
+ * This specification's payload schema, as a value.
+ *
+ * SPEC.md §7.2 item 2 is performed against this. It is shipped as data
+ * rather than only as a `.json` file because TypeScript types are erased
+ * at runtime: without a schema a consumer has nothing to validate, and
+ * every REQUIRED payload member is optional in practice. Cross-file
+ * `$ref`s are already inlined, so it needs no resolver.
+ */
+export const PAYLOAD_SCHEMA = {
+    "$schema": "https://json-schema.org/draft/2020-12/schema",
+    "$id": "https://trusttasks.org/spec/vtc/install/claim/finish/0.3",
+    "title": "VTC Install Claim Finish — payload",
+    "description": "Complete first-administrator enrolment under a DID the founder already controls: the document is signed by the DID the install token names, verified against its live document, and carries the founder's step-up approver's enrolment statement over the claim's challenge. The outer document members (id, type, issuer, recipient, issuedAt, expiresAt, proof) are owned by the framework — SPEC §6.3.",
+    "type": "object",
+    "additionalProperties": false,
+    "required": [
+        "claimId",
+        "approverDid",
+        "statement"
+    ],
+    "properties": {
+        "claimId": {
+            "type": "string",
+            "minLength": 1,
+            "maxLength": 256,
+            "description": "From claim/start 0.3, echoed verbatim. Also the `boundTo` of the statement."
+        },
+        "approverDid": {
+            "$ref": "#/$defs/ApproverDid",
+            "description": "The founder's step-up approver. MUST equal the statement's issuer."
+        },
+        "label": {
+            "$ref": "#/$defs/ApproverLabel"
+        },
+        "statement": {
+            "$ref": "#/$defs/AttestStatement",
+            "description": "The approver's complete, signed auth/step-up/approver/attest/0.1 document with `purpose: enrol`, `boundTo` equal to `claimId`, over the start's `challenge`. Verified as received."
+        },
+        "ext": {
+            "$ref": "#/$defs/Ext"
+        }
+    },
+    "$defs": {
+        "Response": {
+            "$anchor": "response",
+            "title": "VTC Install Claim Finish — response payload",
+            "type": "object",
+            "additionalProperties": false,
+            "required": [
+                "adminDid",
+                "setupSessionToken"
+            ],
+            "properties": {
+                "adminDid": {
+                    "type": "string",
+                    "pattern": "^did:",
+                    "minLength": 5,
+                    "maxLength": 2048,
+                    "description": "The founder's DID — the DID the install token named and the claim was signed by — which vtc/admin/bootstrap writes as the first administrator."
+                },
+                "setupSessionToken": {
+                    "type": "string",
+                    "minLength": 1,
+                    "description": "EdDSA JWT (aud=vtc-install-session, 5min TTL) consumed by vtc/admin/bootstrap. The approver binding takes effect when it is consumed."
+                },
+                "ext": {
+                    "$ref": "#/$defs/Ext"
+                }
+            }
+        },
+        "Ext": {
+            "title": "Ext",
+            "description": "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.",
+            "type": "object",
+            "minProperties": 1,
+            "additionalProperties": true,
+            "propertyNames": {
+                "pattern": "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$"
+            }
+        },
+        "AttestStatement": {
+            "title": "AttestStatement",
+            "type": "object",
+            "minProperties": 1,
+            "description": "A complete, signed auth/step-up/approver/attest/0.1 Trust Task document — envelope, payload and proof — issued by the approver. Deliberately an open object here rather than a typed one: the consumer verifies it as a document in its own right (envelope, proof and payload against that specification's schemas), and verifies its proof over the members exactly as received, which a binding that narrowed it to a typed struct and re-serialised it could silently break."
+        },
+        "ApproverLabel": {
+            "title": "ApproverLabel",
+            "type": "string",
+            "minLength": 1,
+            "maxLength": 64,
+            "description": "A human-readable name for where the approver lives — e.g. `Browser plugin — work laptop`. Chosen by the subject (or suggested by an inviter), untrusted, and attributed to its author wherever it is rendered. Absent rather than invented when none was chosen."
+        },
+        "ApproverDid": {
+            "title": "ApproverDid",
+            "type": "string",
+            "minLength": 16,
+            "maxLength": 128,
+            "pattern": "^did:key:z6Mk[1-9A-HJ-NP-Za-km-z]+$",
+            "description": "A step-up approver, as an Ed25519 `did:key` (`z6Mk…`). `did:key` only, because its document is a function of the key and resolves with no network, so verifying an approver's statement never depends on a fetch, and a key whose DID document could be rewritten after enrolment would not be the key that was enrolled. Distinct from the subject's DID, from every verification method in the subject's DID document, and from every key the subject can sign operations with at the relying party."
+        }
+    }
+};
+/** As {@link PAYLOAD_SCHEMA}, for the success-response variant. */
+export const RESPONSE_PAYLOAD_SCHEMA = {
+    "$schema": "https://json-schema.org/draft/2020-12/schema",
+    "$ref": "#/$defs/Response",
+    "$defs": {
+        "Response": {
+            "$anchor": "response",
+            "title": "VTC Install Claim Finish — response payload",
+            "type": "object",
+            "additionalProperties": false,
+            "required": [
+                "adminDid",
+                "setupSessionToken"
+            ],
+            "properties": {
+                "adminDid": {
+                    "type": "string",
+                    "pattern": "^did:",
+                    "minLength": 5,
+                    "maxLength": 2048,
+                    "description": "The founder's DID — the DID the install token named and the claim was signed by — which vtc/admin/bootstrap writes as the first administrator."
+                },
+                "setupSessionToken": {
+                    "type": "string",
+                    "minLength": 1,
+                    "description": "EdDSA JWT (aud=vtc-install-session, 5min TTL) consumed by vtc/admin/bootstrap. The approver binding takes effect when it is consumed."
+                },
+                "ext": {
+                    "$ref": "#/$defs/Ext"
+                }
+            }
+        },
+        "Ext": {
+            "title": "Ext",
+            "description": "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.",
+            "type": "object",
+            "minProperties": 1,
+            "additionalProperties": true,
+            "propertyNames": {
+                "pattern": "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$"
+            }
+        },
+        "AttestStatement": {
+            "title": "AttestStatement",
+            "type": "object",
+            "minProperties": 1,
+            "description": "A complete, signed auth/step-up/approver/attest/0.1 Trust Task document — envelope, payload and proof — issued by the approver. Deliberately an open object here rather than a typed one: the consumer verifies it as a document in its own right (envelope, proof and payload against that specification's schemas), and verifies its proof over the members exactly as received, which a binding that narrowed it to a typed struct and re-serialised it could silently break."
+        },
+        "ApproverLabel": {
+            "title": "ApproverLabel",
+            "type": "string",
+            "minLength": 1,
+            "maxLength": 64,
+            "description": "A human-readable name for where the approver lives — e.g. `Browser plugin — work laptop`. Chosen by the subject (or suggested by an inviter), untrusted, and attributed to its author wherever it is rendered. Absent rather than invented when none was chosen."
+        },
+        "ApproverDid": {
+            "title": "ApproverDid",
+            "type": "string",
+            "minLength": 16,
+            "maxLength": 128,
+            "pattern": "^did:key:z6Mk[1-9A-HJ-NP-Za-km-z]+$",
+            "description": "A step-up approver, as an Ed25519 `did:key` (`z6Mk…`). `did:key` only, because its document is a function of the key and resolves with no network, so verifying an approver's statement never depends on a fetch, and a key whose DID document could be rewritten after enrolment would not be the key that was enrolled. Distinct from the subject's DID, from every verification method in the subject's DID document, and from every key the subject can sign operations with at the relying party."
+        }
+    }
+};
+/**
+ * SPEC.md §7.2 policy for the request variant, from this specification's
+ * front matter. Pass to `consumeInbound` — items 5b, 7 and 8 are
+ * per-specification and cannot be derived from the document alone, and
+ * item 2 needs the schema this carries.
+ */
+export const SPEC = {
+    typeUri: TYPE_URI,
+    isBearer: false,
+    isProofRequired: true,
+    isRecipientRequired: true,
+    isIssuedAtRequired: true,
+    payloadSchema: PAYLOAD_SCHEMA,
+};
+/**
+ * SPEC.md §7.2 policy for the success-response variant. `isRecipientRequired`
+ * tracks the *issuer* party's requirement because a response swaps the
+ * parties (§7.3 item 5).
+ */
+export const RESPONSE_SPEC = {
+    typeUri: RESPONSE_TYPE_URI,
+    isBearer: false,
+    isProofRequired: true,
+    isRecipientRequired: true,
+    isIssuedAtRequired: true,
+    payloadSchema: RESPONSE_PAYLOAD_SCHEMA,
+};
+//# sourceMappingURL=payload.js.map

package/dist/vtc/install/claim/finish/0.3/payload.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"payload.js","sourceRoot":"","sources":["../../../../../../src/vtc/install/claim/finish/0.3/payload.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAuCH,2BAA2B;AAC3B,MAAM,CAAC,MAAM,QAAQ,GAAG,0DAAmE,CAAC;AAK5F,qEAAqE;AACrE,MAAM,CAAC,MAAM,iBAAiB,GAAG,mEAA4E,CAAC;AAK9G;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,SAAS,EAAE,8CAA8C;IACzD,KAAK,EAAE,0DAA0D;IACjE,OAAO,EAAE,oCAAoC;IAC7C,aAAa,EAAE,2YAA2Y;IAC1Z,MAAM,EAAE,QAAQ;IAChB,sBAAsB,EAAE,KAAK;IAC7B,UAAU,EAAE;QACV,SAAS;QACT,aAAa;QACb,WAAW;KACZ;IACD,YAAY,EAAE;QACZ,SAAS,EAAE;YACT,MAAM,EAAE,QAAQ;YAChB,WAAW,EAAE,CAAC;YACd,WAAW,EAAE,GAAG;YAChB,aAAa,EAAE,6EAA6E;SAC7F;QACD,aAAa,EAAE;YACb,MAAM,EAAE,qBAAqB;YAC7B,aAAa,EAAE,oEAAoE;SACpF;QACD,OAAO,EAAE;YACP,MAAM,EAAE,uBAAuB;SAChC;QACD,WAAW,EAAE;YACX,MAAM,EAAE,yBAAyB;YACjC,aAAa,EAAE,oLAAoL;SACpM;QACD,KAAK,EAAE;YACL,MAAM,EAAE,aAAa;SACtB;KACF;IACD,OAAO,EAAE;QACP,UAAU,EAAE;YACV,SAAS,EAAE,UAAU;YACrB,OAAO,EAAE,6CAA6C;YACtD,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,UAAU;gBACV,mBAAmB;aACpB;YACD,YAAY,EAAE;gBACZ,UAAU,EAAE;oBACV,MAAM,EAAE,QAAQ;oBAChB,SAAS,EAAE,OAAO;oBAClB,WAAW,EAAE,CAAC;oBACd,WAAW,EAAE,IAAI;oBACjB,aAAa,EAAE,gJAAgJ;iBAChK;gBACD,mBAAmB,EAAE;oBACnB,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,uIAAuI;iBACvJ;gBACD,KAAK,EAAE;oBACL,MAAM,EAAE,aAAa;iBACtB;aACF;SACF;QACD,KAAK,EAAE;YACL,OAAO,EAAE,KAAK;YACd,aAAa,EAAE,uKAAuK;YACtL,MAAM,EAAE,QAAQ;YAChB,eAAe,EAAE,CAAC;YAClB,sBAAsB,EAAE,IAAI;YAC5B,eAAe,EAAE;gBACf,SAAS,EAAE,mCAAmC;aAC/C;SACF;QACD,iBAAiB,EAAE;YACjB,OAAO,EAAE,iBAAiB;YAC1B,MAAM,EAAE,QAAQ;YAChB,eAAe,EAAE,CAAC;YAClB,aAAa,EAAE,kdAAkd;SACle;QACD,eAAe,EAAE;YACf,OAAO,EAAE,eAAe;YACxB,MAAM,EAAE,QAAQ;YAChB,WAAW,EAAE,CAAC;YACd,WAAW,EAAE,EAAE;YACf,aAAa,EAAE,kQAAkQ;SAClR;QACD,aAAa,EAAE;YACb,OAAO,EAAE,aAAa;YACtB,MAAM,EAAE,QAAQ;YAChB,WAAW,EAAE,EAAE;YACf,WAAW,EAAE,GAAG;YAChB,SAAS,EAAE,qCAAqC;YAChD,aAAa,EAAE,weAAwe;SACxf;KACF;CACO,CAAC;AAEX,mEAAmE;AACnE,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,SAAS,EAAE,8CAA8C;IACzD,MAAM,EAAE,kBAAkB;IAC1B,OAAO,EAAE;QACP,UAAU,EAAE;YACV,SAAS,EAAE,UAAU;YACrB,OAAO,EAAE,6CAA6C;YACtD,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,UAAU;gBACV,mBAAmB;aACpB;YACD,YAAY,EAAE;gBACZ,UAAU,EAAE;oBACV,MAAM,EAAE,QAAQ;oBAChB,SAAS,EAAE,OAAO;oBAClB,WAAW,EAAE,CAAC;oBACd,WAAW,EAAE,IAAI;oBACjB,aAAa,EAAE,gJAAgJ;iBAChK;gBACD,mBAAmB,EAAE;oBACnB,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,uIAAuI;iBACvJ;gBACD,KAAK,EAAE;oBACL,MAAM,EAAE,aAAa;iBACtB;aACF;SACF;QACD,KAAK,EAAE;YACL,OAAO,EAAE,KAAK;YACd,aAAa,EAAE,uKAAuK;YACtL,MAAM,EAAE,QAAQ;YAChB,eAAe,EAAE,CAAC;YAClB,sBAAsB,EAAE,IAAI;YAC5B,eAAe,EAAE;gBACf,SAAS,EAAE,mCAAmC;aAC/C;SACF;QACD,iBAAiB,EAAE;YACjB,OAAO,EAAE,iBAAiB;YAC1B,MAAM,EAAE,QAAQ;YAChB,eAAe,EAAE,CAAC;YAClB,aAAa,EAAE,kdAAkd;SACle;QACD,eAAe,EAAE;YACf,OAAO,EAAE,eAAe;YACxB,MAAM,EAAE,QAAQ;YAChB,WAAW,EAAE,CAAC;YACd,WAAW,EAAE,EAAE;YACf,aAAa,EAAE,kQAAkQ;SAClR;QACD,aAAa,EAAE;YACb,OAAO,EAAE,aAAa;YACtB,MAAM,EAAE,QAAQ;YAChB,WAAW,EAAE,EAAE;YACf,WAAW,EAAE,GAAG;YAChB,SAAS,EAAE,qCAAqC;YAChD,aAAa,EAAE,weAAwe;SACxf;KACF;CACO,CAAC;AAEX;;;;;GAKG;AACH,MAAM,CAAC,MAAM,IAAI,GAAG;IAClB,OAAO,EAAE,QAAQ;IACjB,QAAQ,EAAE,KAAK;IACf,eAAe,EAAE,IAAI;IACrB,mBAAmB,EAAE,IAAI;IACzB,kBAAkB,EAAE,IAAI;IACxB,aAAa,EAAE,cAAc;CACrB,CAAC;AAEX;;;;GAIG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,OAAO,EAAE,iBAAiB;IAC1B,QAAQ,EAAE,KAAK;IACf,eAAe,EAAE,IAAI;IACrB,mBAAmB,EAAE,IAAI;IACzB,kBAAkB,EAAE,IAAI;IACxB,aAAa,EAAE,uBAAuB;CAC9B,CAAC"}