@openvtc/trust-tasks 0.22.6 → 0.23.0

package/dist/vtc/admin/actions/list/0.1/payload.d.ts

@@ -0,0 +1,1200 @@
+/**
+ * Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
+ * Source: specs/vtc/admin/actions/list/0.1/payload.schema.json
+ */
+import type { Action, ActionId, DigestMultibase, Ext, Field, Summary } from "../../../../../_shared/components.js";
+/**
+ * Enumerate the administrative actions a Verifiable Trust Community holds that the caller is entitled to see, one page at a time, from one of four views. The single-record sibling is vtc/admin/actions/show/0.1. The outer document members (id, type, issuer, recipient, issuedAt, expiresAt, proof) are owned by the framework — SPEC §6.3.
+ */
+export interface VTCAdminActionsListPayload {
+    /**
+     * `waitingForMe` — open actions on which the caller is an eligible approver or acknowledger and has not yet decided. `requestedByMe` — open actions the caller requested. `history` — closed actions the caller requested, decided, or (with the audit-read capability) any closed action, newest first. `all` — every action the caller may see, open and closed.
+     */
+    view: "waitingForMe" | "requestedByMe" | "history" | "all";
+    /**
+     * Only with `view: history`: return actions closed at or after this instant. Supplied with any other view it is refused with `invalidFilter` rather than ignored, so a caller never reads a silently unfiltered page as a filtered one.
+     */
+    since?: string;
+    /**
+     * Maximum number of actions in the page. The community MAY return fewer.
+     */
+    limit?: number;
+    /**
+     * Opaque continuation token from a previous page's `nextCursor`, valid only with the same `view` and `since` it was issued for.
+     */
+    cursor?: string;
+    ext?: Ext;
+}
+/**
+ * One page of actions and the caller's badge counts. Failures use trust-task-error, not this shape.
+ */
+export interface VTCAdminActionsListResponsePayload {
+    /**
+     * The page, in the view's order: open views by `expiresAt` soonest first (non-expiring last, then by `createdAt`), `history` by `closedAt` newest first, `all` open-before-closed in those orders. An empty array is a successful answer: nothing in this view.
+     *
+     * @maxItems 100
+     */
+    actions: Action[];
+    /**
+     * Present when more actions follow. Pass it back as `cursor` with the same `view` and `since`.
+     */
+    nextCursor?: string;
+    /**
+     * Totals across the whole collection, not the page — what a console badge shows. Computed for the caller regardless of which `view` was requested.
+     */
+    counts: {
+        /**
+         * Open actions awaiting the caller's decision or acknowledgement.
+         */
+        waitingForMe: number;
+        /**
+         * Open actions the caller requested.
+         */
+        requestedByMe: number;
+    };
+    ext?: Ext;
+}
+/** Shared definitions this specification references, re-exported under the names it used to declare them with. */
+export type { Action, ActionId, DigestMultibase, Ext, Field, Summary };
+/** Trust Task type URI. */
+export declare const TYPE_URI: "https://trusttasks.org/spec/vtc/admin/actions/list/0.1";
+/** Stable alias for this specification's request payload shape. */
+export type Payload = VTCAdminActionsListPayload;
+/** Trust Task response type URI (request type URI + "#response"). */
+export declare const RESPONSE_TYPE_URI: "https://trusttasks.org/spec/vtc/admin/actions/list/0.1#response";
+/** Stable alias for this specification's success-response payload shape. */
+export type Response = VTCAdminActionsListResponsePayload;
+/**
+ * This specification's payload schema, as a value.
+ *
+ * SPEC.md §7.2 item 2 is performed against this. It is shipped as data
+ * rather than only as a `.json` file because TypeScript types are erased
+ * at runtime: without a schema a consumer has nothing to validate, and
+ * every REQUIRED payload member is optional in practice. Cross-file
+ * `$ref`s are already inlined, so it needs no resolver.
+ */
+export declare const PAYLOAD_SCHEMA: {
+    readonly $schema: "https://json-schema.org/draft/2020-12/schema";
+    readonly $id: "https://trusttasks.org/spec/vtc/admin/actions/list/0.1";
+    readonly title: "VTC Admin Actions — List — payload";
+    readonly description: "Enumerate the administrative actions a Verifiable Trust Community holds that the caller is entitled to see, one page at a time, from one of four views. The single-record sibling is vtc/admin/actions/show/0.1. The outer document members (id, type, issuer, recipient, issuedAt, expiresAt, proof) are owned by the framework — SPEC §6.3.";
+    readonly type: "object";
+    readonly additionalProperties: false;
+    readonly required: readonly ["view"];
+    readonly properties: {
+        readonly view: {
+            readonly type: "string";
+            readonly enum: readonly ["waitingForMe", "requestedByMe", "history", "all"];
+            readonly description: "`waitingForMe` — open actions on which the caller is an eligible approver or acknowledger and has not yet decided. `requestedByMe` — open actions the caller requested. `history` — closed actions the caller requested, decided, or (with the audit-read capability) any closed action, newest first. `all` — every action the caller may see, open and closed.";
+        };
+        readonly since: {
+            readonly type: "string";
+            readonly format: "date-time";
+            readonly description: "Only with `view: history`: return actions closed at or after this instant. Supplied with any other view it is refused with `invalidFilter` rather than ignored, so a caller never reads a silently unfiltered page as a filtered one.";
+        };
+        readonly limit: {
+            readonly type: "integer";
+            readonly minimum: 1;
+            readonly maximum: 100;
+            readonly default: 25;
+            readonly description: "Maximum number of actions in the page. The community MAY return fewer.";
+        };
+        readonly cursor: {
+            readonly type: "string";
+            readonly minLength: 1;
+            readonly maxLength: 1024;
+            readonly description: "Opaque continuation token from a previous page's `nextCursor`, valid only with the same `view` and `since` it was issued for.";
+        };
+        readonly ext: {
+            readonly $ref: "#/$defs/Ext";
+        };
+    };
+    readonly $defs: {
+        readonly Response: {
+            readonly $anchor: "response";
+            readonly title: "VTC Admin Actions — List — response payload";
+            readonly description: "One page of actions and the caller's badge counts. Failures use trust-task-error, not this shape.";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["actions", "counts"];
+            readonly properties: {
+                readonly actions: {
+                    readonly type: "array";
+                    readonly maxItems: 100;
+                    readonly items: {
+                        readonly $ref: "#/$defs/Action";
+                    };
+                    readonly description: "The page, in the view's order: open views by `expiresAt` soonest first (non-expiring last, then by `createdAt`), `history` by `closedAt` newest first, `all` open-before-closed in those orders. An empty array is a successful answer: nothing in this view.";
+                };
+                readonly nextCursor: {
+                    readonly type: "string";
+                    readonly minLength: 1;
+                    readonly maxLength: 1024;
+                    readonly description: "Present when more actions follow. Pass it back as `cursor` with the same `view` and `since`.";
+                };
+                readonly counts: {
+                    readonly type: "object";
+                    readonly additionalProperties: false;
+                    readonly required: readonly ["waitingForMe", "requestedByMe"];
+                    readonly description: "Totals across the whole collection, not the page — what a console badge shows. Computed for the caller regardless of which `view` was requested.";
+                    readonly properties: {
+                        readonly waitingForMe: {
+                            readonly type: "integer";
+                            readonly minimum: 0;
+                            readonly description: "Open actions awaiting the caller's decision or acknowledgement.";
+                        };
+                        readonly requestedByMe: {
+                            readonly type: "integer";
+                            readonly minimum: 0;
+                            readonly description: "Open actions the caller requested.";
+                        };
+                    };
+                };
+                readonly ext: {
+                    readonly $ref: "#/$defs/Ext";
+                };
+            };
+        };
+        readonly Ext: {
+            readonly title: "Ext";
+            readonly description: "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.";
+            readonly type: "object";
+            readonly minProperties: 1;
+            readonly additionalProperties: true;
+            readonly propertyNames: {
+                readonly pattern: "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$";
+            };
+        };
+        readonly Action: {
+            readonly title: "Action";
+            readonly description: "One parked administrative operation, as the caller is entitled to see it. The same action reads differently to different callers only in `challenge` and `callerRole`, which are per-caller.";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["actionId", "category", "kind", "typeUri", "requester", "status", "createdAt", "approvals", "summary", "payload", "payloadDigest", "callerRole"];
+            readonly properties: {
+                readonly actionId: {
+                    readonly $ref: "#/$defs/ActionId";
+                };
+                readonly category: {
+                    readonly type: "string";
+                    readonly enum: readonly ["approval", "acknowledge", "queue"];
+                    readonly description: "`approval` — eligible approvers approve or decline, N-of-M; the operation executes when the threshold is met. `acknowledge` — an operation that already happened (an operator's offline or break-glass write) which every remaining administrator must acknowledge; there is nothing to approve or decline. `queue` — an existing human decision (for example a join review) surfaced in the same list, with a threshold of one.";
+                };
+                readonly kind: {
+                    readonly type: "string";
+                    readonly minLength: 1;
+                    readonly maxLength: 128;
+                    readonly pattern: "^[a-z][a-zA-Z0-9.]*$";
+                    readonly description: "The community's name for what kind of operation is parked, dotted and lowerCamelCase (`acl.grant.authority`, `member.join.review`). Selects the summary template. The set is OPEN: a renderer that does not recognise a kind still renders `summary` from its fields.";
+                };
+                readonly typeUri: {
+                    readonly type: "string";
+                    readonly format: "uri";
+                    readonly minLength: 1;
+                    readonly description: "The Type URI of the parked operation — the Trust Task the community will execute when the action completes. Together with `payload` it is exactly what will run.";
+                };
+                readonly requester: {
+                    readonly type: "string";
+                    readonly minLength: 1;
+                    readonly maxLength: 2048;
+                    readonly description: "VID of the party whose operation was parked. For `acknowledge`, the operator whose offline write is being acknowledged, where the community can attribute one.";
+                };
+                readonly status: {
+                    readonly type: "string";
+                    readonly enum: readonly ["open", "completed", "declined", "expired", "cancelled", "failed"];
+                    readonly description: "`open` — awaiting decisions. `completed` — the threshold was met and the operation executed (or, for `acknowledge`, every administrator acknowledged). `declined` — an eligible approver denied it. `expired` — it lapsed at `expiresAt`. `cancelled` — the requester withdrew it, or the community invalidated it (see `closedReason`). `failed` — the threshold was met but the re-check at execution refused it, or execution itself failed; the operation did not take effect.";
+                };
+                readonly createdAt: {
+                    readonly type: "string";
+                    readonly format: "date-time";
+                    readonly description: "When the operation was parked.";
+                };
+                readonly expiresAt: {
+                    readonly type: "string";
+                    readonly format: "date-time";
+                    readonly description: "When an open action lapses. Absent for an `acknowledge` or `queue` action that does not expire; ALWAYS present for `approval`, whose open life is bounded (72 hours by default; the community configures it between 15 minutes and 14 days).";
+                };
+                readonly closedAt: {
+                    readonly type: "string";
+                    readonly format: "date-time";
+                    readonly description: "When the action left `open`. Present exactly when `status` is not `open`.";
+                };
+                readonly closedReason: {
+                    readonly type: "string";
+                    readonly enum: readonly ["thresholdMet", "declined", "expired", "cancelledByRequester", "invalidated", "failedRecheck", "acknowledged"];
+                    readonly description: "Why the action closed. Present exactly when `status` is not `open`. `invalidated` — the community closed it because something it depended on stopped holding before the threshold (an approver or the requester lost standing, the target state moved); `failedRecheck` — the threshold was met but the execution-time re-check refused.";
+                };
+                readonly threshold: {
+                    readonly type: "integer";
+                    readonly minimum: 1;
+                    readonly description: "The number of distinct approvals the operation needs. Present for `approval`; absent otherwise (a `queue` decision is one decision by construction, and `acknowledge` needs every remaining administrator).";
+                };
+                readonly approvals: {
+                    readonly type: "array";
+                    readonly description: "The decisions in favour recorded so far — approvals for `approval` and `queue`, acknowledgements for `acknowledge` — one entry per distinct subject, in the order recorded. Empty while none has landed.";
+                    readonly items: {
+                        readonly type: "object";
+                        readonly additionalProperties: false;
+                        readonly required: readonly ["subject", "at"];
+                        readonly properties: {
+                            readonly subject: {
+                                readonly type: "string";
+                                readonly minLength: 1;
+                                readonly maxLength: 2048;
+                                readonly description: "VID of the approver or acknowledger, as proven by the decision's own proof.";
+                            };
+                            readonly at: {
+                                readonly type: "string";
+                                readonly format: "date-time";
+                                readonly description: "When the decision was recorded.";
+                            };
+                        };
+                    };
+                };
+                readonly approversRemaining: {
+                    readonly type: "integer";
+                    readonly minimum: 0;
+                    readonly description: "How many further distinct decisions the action needs while `open` — approvals for `approval`, acknowledgements for `acknowledge`. Lets a console say 'one more' without disclosing the eligible set.";
+                };
+                readonly summary: {
+                    readonly $ref: "#/$defs/Summary";
+                };
+                readonly payload: {
+                    readonly type: "object";
+                    readonly description: "The exact payload of the parked operation — the object `payloadDigest` is computed over and the one the community will execute. Carried so an approver can recompute the digest and re-derive every summary field from it rather than trusting the rendering (VTI-APV-013). Deliberately an open object: its shape is governed by the specification `typeUri` names, and a digest is checked over members exactly as received.";
+                };
+                readonly payloadDigest: {
+                    readonly $ref: "#/$defs/DigestMultibase";
+                    readonly description: "Digest of `payload`, taken over its RFC 8785 (JCS) canonicalization. The community re-derives it from the payload it is about to execute and refuses on mismatch. The digest an approver signs over is the challenge-salted one of `task-consent/decision`, not this value; this one lets the approver check that `payload` is what was parked.";
+                };
+                readonly challenge: {
+                    readonly type: "string";
+                    readonly minLength: 16;
+                    readonly maxLength: 256;
+                    readonly description: "Present ONLY on an action the CALLER may decide now — an `approval` or `queue` action on which the caller is an eligible approver who has not yet decided. Per-approver: two approvers are shown different challenges for the same action. Echoed verbatim in `task-consent/decision`'s `challenge`, which binds that decision to this approver and this action. Absent for everyone else, including the requester.";
+                };
+                readonly callerRole: {
+                    readonly type: "string";
+                    readonly enum: readonly ["approver", "requester", "acknowledger", "observer"];
+                    readonly description: "The caller's relation to this action. `approver` — an eligible approver (whether or not already decided). `requester` — the party whose operation was parked. `acknowledger` — an administrator expected to acknowledge it. `observer` — none of these; seen only through the audit-read capability on a `history` or `all` view.";
+                };
+                readonly requesterOpenActions: {
+                    readonly type: "integer";
+                    readonly minimum: 0;
+                    readonly description: "How many open actions the requester currently has at the community, this one included. For consent-fatigue display: an approver shown the twentieth request from one requester today should be able to see that it is the twentieth.";
+                };
+                readonly ext: {
+                    readonly $ref: "#/$defs/Ext";
+                };
+            };
+        };
+        readonly Summary: {
+            readonly title: "Summary";
+            readonly description: "What an approver is shown, rendered from the summary template for the action's `kind`. Title and effect are the template's prose; the fields are the payload values that prose is about, each located by pointer so a renderer can verify it.";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["title", "fields", "templateDigest"];
+            readonly properties: {
+                readonly title: {
+                    readonly type: "string";
+                    readonly minLength: 1;
+                    readonly maxLength: 256;
+                    readonly description: "One-line heading from the template. Prose only: a renderer MUST NOT present the action from this text without the fields.";
+                };
+                readonly effect: {
+                    readonly type: "string";
+                    readonly maxLength: 1024;
+                    readonly description: "One or two sentences from the template saying what executing the operation will do.";
+                };
+                readonly fields: {
+                    readonly type: "object";
+                    readonly description: "Named values the template displays, keyed by a lowerCamelCase field name. Each locates its value in `payload` by JSON Pointer.";
+                    readonly propertyNames: {
+                        readonly pattern: "^[a-z][a-zA-Z0-9]*$";
+                        readonly maxLength: 64;
+                    };
+                    readonly additionalProperties: {
+                        readonly $ref: "#/$defs/Field";
+                    };
+                };
+                readonly templateDigest: {
+                    readonly $ref: "#/$defs/DigestMultibase";
+                    readonly description: "Digest of the summary template this summary was rendered from, over its RFC 8785 (JCS) canonicalization. Pinned per `kind`: a renderer that holds the template for a kind refuses a summary naming a different digest, so the community cannot change what approvers are shown for a kind without that change being visible.";
+                };
+            };
+        };
+        readonly Field: {
+            readonly title: "Field";
+            readonly description: "One displayed value, with where it comes from and how to render it.";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["pointer", "format", "value"];
+            readonly properties: {
+                readonly pointer: {
+                    readonly type: "string";
+                    readonly maxLength: 512;
+                    readonly pattern: "^(/([^~/]|~[01])*)*$";
+                    readonly description: "RFC 6901 JSON Pointer into the action's `payload`. The empty string addresses the whole payload.";
+                };
+                readonly format: {
+                    readonly type: "string";
+                    readonly enum: readonly ["did", "capabilityList", "duration", "datetime", "text"];
+                    readonly description: "How to render the value. `did` — a DID, shown in full or with a verified display name, never truncated to a prefix that two DIDs share. `capabilityList` — an array of capability names. `duration` — an ISO 8601 duration. `datetime` — an RFC 3339 date-time. `text` — anything else, rendered as literal text.";
+                };
+                readonly value: {
+                    readonly description: "The value found at `pointer` when the community rendered the summary. A renderer re-derives it from `payload` and refuses to render the action on any mismatch; it is carried so that a mismatch is detectable, not so that it can be trusted.";
+                };
+            };
+        };
+        readonly DigestMultibase: {
+            readonly title: "DigestMultibase";
+            readonly description: "A cryptographic digest as a multibase-encoded multihash — the encoding the W3C Verifiable Credentials Data Model 2.0 defines for `digestMultibase`, and the one `did:webvh` uses for its SCID and entry hashes.\n\nMultihash carries the hash algorithm in-band, so the value is self-describing and the wire format survives an algorithm change without a schema revision; multibase does the same for the base encoding, so a verifier never infers base58 from base64url by context. A bare hex string or a `sha-256:`-style prefix hard-codes one algorithm into the wire contract and is non-conforming here.\n\nThis definition constrains the *encoding only*. What the digest is computed over is stated by each referencing field, because it differs legitimately: a digest over a JSON document is taken over its RFC 8785 (JCS) canonicalization, while a digest over an opaque artifact is taken over its bytes. A field whose input is a JSON document and which does not name a canonicalization is not reproducible.\n\nRestricted to the two multibase headers W3C Controlled Identifiers 1.0 §2.4 normatively requires — `z` (base58btc) and `u` (base64url-no-pad). CID permits others but states that \"interoperability is not guaranteed between implementations using such values\", and a registry whose purpose is interoperability should not mint digests a conforming verifier may be unable to read. The alphabets are enforced rather than assumed: base58btc excludes 0, O, I and l, and an earlier permissive pattern let three published examples carry digests that were not valid base58 at all. base58btc is RECOMMENDED, for consistency with `did:key` and `did:webvh`.";
+            readonly type: "string";
+            readonly minLength: 16;
+            readonly pattern: "^(z[1-9A-HJ-NP-Za-km-z]+|u[A-Za-z0-9_-]+)$";
+            readonly examples: readonly ["zQmbWqxBEKC3P8tqsKc98xmWNzrzDtRLMiMPL8wBuTGsMnR"];
+        };
+        readonly ActionId: {
+            readonly title: "ActionId";
+            readonly description: "Opaque, community-minted identifier of one action. A consumer MUST NOT parse or order it; it is compared for equality only. Long enough to be unguessable, because a show of an id the caller may not see is answered `notFound` and an enumerable id would turn that answer into an oracle.";
+            readonly type: "string";
+            readonly minLength: 16;
+            readonly maxLength: 128;
+            readonly pattern: "^[A-Za-z0-9._~:-]+$";
+        };
+    };
+};
+/** As {@link PAYLOAD_SCHEMA}, for the success-response variant. */
+export declare const RESPONSE_PAYLOAD_SCHEMA: {
+    readonly $schema: "https://json-schema.org/draft/2020-12/schema";
+    readonly $ref: "#/$defs/Response";
+    readonly $defs: {
+        readonly Response: {
+            readonly $anchor: "response";
+            readonly title: "VTC Admin Actions — List — response payload";
+            readonly description: "One page of actions and the caller's badge counts. Failures use trust-task-error, not this shape.";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["actions", "counts"];
+            readonly properties: {
+                readonly actions: {
+                    readonly type: "array";
+                    readonly maxItems: 100;
+                    readonly items: {
+                        readonly $ref: "#/$defs/Action";
+                    };
+                    readonly description: "The page, in the view's order: open views by `expiresAt` soonest first (non-expiring last, then by `createdAt`), `history` by `closedAt` newest first, `all` open-before-closed in those orders. An empty array is a successful answer: nothing in this view.";
+                };
+                readonly nextCursor: {
+                    readonly type: "string";
+                    readonly minLength: 1;
+                    readonly maxLength: 1024;
+                    readonly description: "Present when more actions follow. Pass it back as `cursor` with the same `view` and `since`.";
+                };
+                readonly counts: {
+                    readonly type: "object";
+                    readonly additionalProperties: false;
+                    readonly required: readonly ["waitingForMe", "requestedByMe"];
+                    readonly description: "Totals across the whole collection, not the page — what a console badge shows. Computed for the caller regardless of which `view` was requested.";
+                    readonly properties: {
+                        readonly waitingForMe: {
+                            readonly type: "integer";
+                            readonly minimum: 0;
+                            readonly description: "Open actions awaiting the caller's decision or acknowledgement.";
+                        };
+                        readonly requestedByMe: {
+                            readonly type: "integer";
+                            readonly minimum: 0;
+                            readonly description: "Open actions the caller requested.";
+                        };
+                    };
+                };
+                readonly ext: {
+                    readonly $ref: "#/$defs/Ext";
+                };
+            };
+        };
+        readonly Ext: {
+            readonly title: "Ext";
+            readonly description: "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.";
+            readonly type: "object";
+            readonly minProperties: 1;
+            readonly additionalProperties: true;
+            readonly propertyNames: {
+                readonly pattern: "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$";
+            };
+        };
+        readonly Action: {
+            readonly title: "Action";
+            readonly description: "One parked administrative operation, as the caller is entitled to see it. The same action reads differently to different callers only in `challenge` and `callerRole`, which are per-caller.";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["actionId", "category", "kind", "typeUri", "requester", "status", "createdAt", "approvals", "summary", "payload", "payloadDigest", "callerRole"];
+            readonly properties: {
+                readonly actionId: {
+                    readonly $ref: "#/$defs/ActionId";
+                };
+                readonly category: {
+                    readonly type: "string";
+                    readonly enum: readonly ["approval", "acknowledge", "queue"];
+                    readonly description: "`approval` — eligible approvers approve or decline, N-of-M; the operation executes when the threshold is met. `acknowledge` — an operation that already happened (an operator's offline or break-glass write) which every remaining administrator must acknowledge; there is nothing to approve or decline. `queue` — an existing human decision (for example a join review) surfaced in the same list, with a threshold of one.";
+                };
+                readonly kind: {
+                    readonly type: "string";
+                    readonly minLength: 1;
+                    readonly maxLength: 128;
+                    readonly pattern: "^[a-z][a-zA-Z0-9.]*$";
+                    readonly description: "The community's name for what kind of operation is parked, dotted and lowerCamelCase (`acl.grant.authority`, `member.join.review`). Selects the summary template. The set is OPEN: a renderer that does not recognise a kind still renders `summary` from its fields.";
+                };
+                readonly typeUri: {
+                    readonly type: "string";
+                    readonly format: "uri";
+                    readonly minLength: 1;
+                    readonly description: "The Type URI of the parked operation — the Trust Task the community will execute when the action completes. Together with `payload` it is exactly what will run.";
+                };
+                readonly requester: {
+                    readonly type: "string";
+                    readonly minLength: 1;
+                    readonly maxLength: 2048;
+                    readonly description: "VID of the party whose operation was parked. For `acknowledge`, the operator whose offline write is being acknowledged, where the community can attribute one.";
+                };
+                readonly status: {
+                    readonly type: "string";
+                    readonly enum: readonly ["open", "completed", "declined", "expired", "cancelled", "failed"];
+                    readonly description: "`open` — awaiting decisions. `completed` — the threshold was met and the operation executed (or, for `acknowledge`, every administrator acknowledged). `declined` — an eligible approver denied it. `expired` — it lapsed at `expiresAt`. `cancelled` — the requester withdrew it, or the community invalidated it (see `closedReason`). `failed` — the threshold was met but the re-check at execution refused it, or execution itself failed; the operation did not take effect.";
+                };
+                readonly createdAt: {
+                    readonly type: "string";
+                    readonly format: "date-time";
+                    readonly description: "When the operation was parked.";
+                };
+                readonly expiresAt: {
+                    readonly type: "string";
+                    readonly format: "date-time";
+                    readonly description: "When an open action lapses. Absent for an `acknowledge` or `queue` action that does not expire; ALWAYS present for `approval`, whose open life is bounded (72 hours by default; the community configures it between 15 minutes and 14 days).";
+                };
+                readonly closedAt: {
+                    readonly type: "string";
+                    readonly format: "date-time";
+                    readonly description: "When the action left `open`. Present exactly when `status` is not `open`.";
+                };
+                readonly closedReason: {
+                    readonly type: "string";
+                    readonly enum: readonly ["thresholdMet", "declined", "expired", "cancelledByRequester", "invalidated", "failedRecheck", "acknowledged"];
+                    readonly description: "Why the action closed. Present exactly when `status` is not `open`. `invalidated` — the community closed it because something it depended on stopped holding before the threshold (an approver or the requester lost standing, the target state moved); `failedRecheck` — the threshold was met but the execution-time re-check refused.";
+                };
+                readonly threshold: {
+                    readonly type: "integer";
+                    readonly minimum: 1;
+                    readonly description: "The number of distinct approvals the operation needs. Present for `approval`; absent otherwise (a `queue` decision is one decision by construction, and `acknowledge` needs every remaining administrator).";
+                };
+                readonly approvals: {
+                    readonly type: "array";
+                    readonly description: "The decisions in favour recorded so far — approvals for `approval` and `queue`, acknowledgements for `acknowledge` — one entry per distinct subject, in the order recorded. Empty while none has landed.";
+                    readonly items: {
+                        readonly type: "object";
+                        readonly additionalProperties: false;
+                        readonly required: readonly ["subject", "at"];
+                        readonly properties: {
+                            readonly subject: {
+                                readonly type: "string";
+                                readonly minLength: 1;
+                                readonly maxLength: 2048;
+                                readonly description: "VID of the approver or acknowledger, as proven by the decision's own proof.";
+                            };
+                            readonly at: {
+                                readonly type: "string";
+                                readonly format: "date-time";
+                                readonly description: "When the decision was recorded.";
+                            };
+                        };
+                    };
+                };
+                readonly approversRemaining: {
+                    readonly type: "integer";
+                    readonly minimum: 0;
+                    readonly description: "How many further distinct decisions the action needs while `open` — approvals for `approval`, acknowledgements for `acknowledge`. Lets a console say 'one more' without disclosing the eligible set.";
+                };
+                readonly summary: {
+                    readonly $ref: "#/$defs/Summary";
+                };
+                readonly payload: {
+                    readonly type: "object";
+                    readonly description: "The exact payload of the parked operation — the object `payloadDigest` is computed over and the one the community will execute. Carried so an approver can recompute the digest and re-derive every summary field from it rather than trusting the rendering (VTI-APV-013). Deliberately an open object: its shape is governed by the specification `typeUri` names, and a digest is checked over members exactly as received.";
+                };
+                readonly payloadDigest: {
+                    readonly $ref: "#/$defs/DigestMultibase";
+                    readonly description: "Digest of `payload`, taken over its RFC 8785 (JCS) canonicalization. The community re-derives it from the payload it is about to execute and refuses on mismatch. The digest an approver signs over is the challenge-salted one of `task-consent/decision`, not this value; this one lets the approver check that `payload` is what was parked.";
+                };
+                readonly challenge: {
+                    readonly type: "string";
+                    readonly minLength: 16;
+                    readonly maxLength: 256;
+                    readonly description: "Present ONLY on an action the CALLER may decide now — an `approval` or `queue` action on which the caller is an eligible approver who has not yet decided. Per-approver: two approvers are shown different challenges for the same action. Echoed verbatim in `task-consent/decision`'s `challenge`, which binds that decision to this approver and this action. Absent for everyone else, including the requester.";
+                };
+                readonly callerRole: {
+                    readonly type: "string";
+                    readonly enum: readonly ["approver", "requester", "acknowledger", "observer"];
+                    readonly description: "The caller's relation to this action. `approver` — an eligible approver (whether or not already decided). `requester` — the party whose operation was parked. `acknowledger` — an administrator expected to acknowledge it. `observer` — none of these; seen only through the audit-read capability on a `history` or `all` view.";
+                };
+                readonly requesterOpenActions: {
+                    readonly type: "integer";
+                    readonly minimum: 0;
+                    readonly description: "How many open actions the requester currently has at the community, this one included. For consent-fatigue display: an approver shown the twentieth request from one requester today should be able to see that it is the twentieth.";
+                };
+                readonly ext: {
+                    readonly $ref: "#/$defs/Ext";
+                };
+            };
+        };
+        readonly Summary: {
+            readonly title: "Summary";
+            readonly description: "What an approver is shown, rendered from the summary template for the action's `kind`. Title and effect are the template's prose; the fields are the payload values that prose is about, each located by pointer so a renderer can verify it.";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["title", "fields", "templateDigest"];
+            readonly properties: {
+                readonly title: {
+                    readonly type: "string";
+                    readonly minLength: 1;
+                    readonly maxLength: 256;
+                    readonly description: "One-line heading from the template. Prose only: a renderer MUST NOT present the action from this text without the fields.";
+                };
+                readonly effect: {
+                    readonly type: "string";
+                    readonly maxLength: 1024;
+                    readonly description: "One or two sentences from the template saying what executing the operation will do.";
+                };
+                readonly fields: {
+                    readonly type: "object";
+                    readonly description: "Named values the template displays, keyed by a lowerCamelCase field name. Each locates its value in `payload` by JSON Pointer.";
+                    readonly propertyNames: {
+                        readonly pattern: "^[a-z][a-zA-Z0-9]*$";
+                        readonly maxLength: 64;
+                    };
+                    readonly additionalProperties: {
+                        readonly $ref: "#/$defs/Field";
+                    };
+                };
+                readonly templateDigest: {
+                    readonly $ref: "#/$defs/DigestMultibase";
+                    readonly description: "Digest of the summary template this summary was rendered from, over its RFC 8785 (JCS) canonicalization. Pinned per `kind`: a renderer that holds the template for a kind refuses a summary naming a different digest, so the community cannot change what approvers are shown for a kind without that change being visible.";
+                };
+            };
+        };
+        readonly Field: {
+            readonly title: "Field";
+            readonly description: "One displayed value, with where it comes from and how to render it.";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["pointer", "format", "value"];
+            readonly properties: {
+                readonly pointer: {
+                    readonly type: "string";
+                    readonly maxLength: 512;
+                    readonly pattern: "^(/([^~/]|~[01])*)*$";
+                    readonly description: "RFC 6901 JSON Pointer into the action's `payload`. The empty string addresses the whole payload.";
+                };
+                readonly format: {
+                    readonly type: "string";
+                    readonly enum: readonly ["did", "capabilityList", "duration", "datetime", "text"];
+                    readonly description: "How to render the value. `did` — a DID, shown in full or with a verified display name, never truncated to a prefix that two DIDs share. `capabilityList` — an array of capability names. `duration` — an ISO 8601 duration. `datetime` — an RFC 3339 date-time. `text` — anything else, rendered as literal text.";
+                };
+                readonly value: {
+                    readonly description: "The value found at `pointer` when the community rendered the summary. A renderer re-derives it from `payload` and refuses to render the action on any mismatch; it is carried so that a mismatch is detectable, not so that it can be trusted.";
+                };
+            };
+        };
+        readonly DigestMultibase: {
+            readonly title: "DigestMultibase";
+            readonly description: "A cryptographic digest as a multibase-encoded multihash — the encoding the W3C Verifiable Credentials Data Model 2.0 defines for `digestMultibase`, and the one `did:webvh` uses for its SCID and entry hashes.\n\nMultihash carries the hash algorithm in-band, so the value is self-describing and the wire format survives an algorithm change without a schema revision; multibase does the same for the base encoding, so a verifier never infers base58 from base64url by context. A bare hex string or a `sha-256:`-style prefix hard-codes one algorithm into the wire contract and is non-conforming here.\n\nThis definition constrains the *encoding only*. What the digest is computed over is stated by each referencing field, because it differs legitimately: a digest over a JSON document is taken over its RFC 8785 (JCS) canonicalization, while a digest over an opaque artifact is taken over its bytes. A field whose input is a JSON document and which does not name a canonicalization is not reproducible.\n\nRestricted to the two multibase headers W3C Controlled Identifiers 1.0 §2.4 normatively requires — `z` (base58btc) and `u` (base64url-no-pad). CID permits others but states that \"interoperability is not guaranteed between implementations using such values\", and a registry whose purpose is interoperability should not mint digests a conforming verifier may be unable to read. The alphabets are enforced rather than assumed: base58btc excludes 0, O, I and l, and an earlier permissive pattern let three published examples carry digests that were not valid base58 at all. base58btc is RECOMMENDED, for consistency with `did:key` and `did:webvh`.";
+            readonly type: "string";
+            readonly minLength: 16;
+            readonly pattern: "^(z[1-9A-HJ-NP-Za-km-z]+|u[A-Za-z0-9_-]+)$";
+            readonly examples: readonly ["zQmbWqxBEKC3P8tqsKc98xmWNzrzDtRLMiMPL8wBuTGsMnR"];
+        };
+        readonly ActionId: {
+            readonly title: "ActionId";
+            readonly description: "Opaque, community-minted identifier of one action. A consumer MUST NOT parse or order it; it is compared for equality only. Long enough to be unguessable, because a show of an id the caller may not see is answered `notFound` and an enumerable id would turn that answer into an oracle.";
+            readonly type: "string";
+            readonly minLength: 16;
+            readonly maxLength: 128;
+            readonly pattern: "^[A-Za-z0-9._~:-]+$";
+        };
+    };
+};
+/**
+ * SPEC.md §7.2 policy for the request variant, from this specification's
+ * front matter. Pass to `consumeInbound` — items 5b, 7 and 8 are
+ * per-specification and cannot be derived from the document alone, and
+ * item 2 needs the schema this carries.
+ */
+export declare const SPEC: {
+    readonly typeUri: "https://trusttasks.org/spec/vtc/admin/actions/list/0.1";
+    readonly isBearer: false;
+    readonly isProofRequired: true;
+    readonly isRecipientRequired: true;
+    readonly isIssuedAtRequired: false;
+    readonly payloadSchema: {
+        readonly $schema: "https://json-schema.org/draft/2020-12/schema";
+        readonly $id: "https://trusttasks.org/spec/vtc/admin/actions/list/0.1";
+        readonly title: "VTC Admin Actions — List — payload";
+        readonly description: "Enumerate the administrative actions a Verifiable Trust Community holds that the caller is entitled to see, one page at a time, from one of four views. The single-record sibling is vtc/admin/actions/show/0.1. The outer document members (id, type, issuer, recipient, issuedAt, expiresAt, proof) are owned by the framework — SPEC §6.3.";
+        readonly type: "object";
+        readonly additionalProperties: false;
+        readonly required: readonly ["view"];
+        readonly properties: {
+            readonly view: {
+                readonly type: "string";
+                readonly enum: readonly ["waitingForMe", "requestedByMe", "history", "all"];
+                readonly description: "`waitingForMe` — open actions on which the caller is an eligible approver or acknowledger and has not yet decided. `requestedByMe` — open actions the caller requested. `history` — closed actions the caller requested, decided, or (with the audit-read capability) any closed action, newest first. `all` — every action the caller may see, open and closed.";
+            };
+            readonly since: {
+                readonly type: "string";
+                readonly format: "date-time";
+                readonly description: "Only with `view: history`: return actions closed at or after this instant. Supplied with any other view it is refused with `invalidFilter` rather than ignored, so a caller never reads a silently unfiltered page as a filtered one.";
+            };
+            readonly limit: {
+                readonly type: "integer";
+                readonly minimum: 1;
+                readonly maximum: 100;
+                readonly default: 25;
+                readonly description: "Maximum number of actions in the page. The community MAY return fewer.";
+            };
+            readonly cursor: {
+                readonly type: "string";
+                readonly minLength: 1;
+                readonly maxLength: 1024;
+                readonly description: "Opaque continuation token from a previous page's `nextCursor`, valid only with the same `view` and `since` it was issued for.";
+            };
+            readonly ext: {
+                readonly $ref: "#/$defs/Ext";
+            };
+        };
+        readonly $defs: {
+            readonly Response: {
+                readonly $anchor: "response";
+                readonly title: "VTC Admin Actions — List — response payload";
+                readonly description: "One page of actions and the caller's badge counts. Failures use trust-task-error, not this shape.";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["actions", "counts"];
+                readonly properties: {
+                    readonly actions: {
+                        readonly type: "array";
+                        readonly maxItems: 100;
+                        readonly items: {
+                            readonly $ref: "#/$defs/Action";
+                        };
+                        readonly description: "The page, in the view's order: open views by `expiresAt` soonest first (non-expiring last, then by `createdAt`), `history` by `closedAt` newest first, `all` open-before-closed in those orders. An empty array is a successful answer: nothing in this view.";
+                    };
+                    readonly nextCursor: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                        readonly maxLength: 1024;
+                        readonly description: "Present when more actions follow. Pass it back as `cursor` with the same `view` and `since`.";
+                    };
+                    readonly counts: {
+                        readonly type: "object";
+                        readonly additionalProperties: false;
+                        readonly required: readonly ["waitingForMe", "requestedByMe"];
+                        readonly description: "Totals across the whole collection, not the page — what a console badge shows. Computed for the caller regardless of which `view` was requested.";
+                        readonly properties: {
+                            readonly waitingForMe: {
+                                readonly type: "integer";
+                                readonly minimum: 0;
+                                readonly description: "Open actions awaiting the caller's decision or acknowledgement.";
+                            };
+                            readonly requestedByMe: {
+                                readonly type: "integer";
+                                readonly minimum: 0;
+                                readonly description: "Open actions the caller requested.";
+                            };
+                        };
+                    };
+                    readonly ext: {
+                        readonly $ref: "#/$defs/Ext";
+                    };
+                };
+            };
+            readonly Ext: {
+                readonly title: "Ext";
+                readonly description: "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.";
+                readonly type: "object";
+                readonly minProperties: 1;
+                readonly additionalProperties: true;
+                readonly propertyNames: {
+                    readonly pattern: "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$";
+                };
+            };
+            readonly Action: {
+                readonly title: "Action";
+                readonly description: "One parked administrative operation, as the caller is entitled to see it. The same action reads differently to different callers only in `challenge` and `callerRole`, which are per-caller.";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["actionId", "category", "kind", "typeUri", "requester", "status", "createdAt", "approvals", "summary", "payload", "payloadDigest", "callerRole"];
+                readonly properties: {
+                    readonly actionId: {
+                        readonly $ref: "#/$defs/ActionId";
+                    };
+                    readonly category: {
+                        readonly type: "string";
+                        readonly enum: readonly ["approval", "acknowledge", "queue"];
+                        readonly description: "`approval` — eligible approvers approve or decline, N-of-M; the operation executes when the threshold is met. `acknowledge` — an operation that already happened (an operator's offline or break-glass write) which every remaining administrator must acknowledge; there is nothing to approve or decline. `queue` — an existing human decision (for example a join review) surfaced in the same list, with a threshold of one.";
+                    };
+                    readonly kind: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                        readonly maxLength: 128;
+                        readonly pattern: "^[a-z][a-zA-Z0-9.]*$";
+                        readonly description: "The community's name for what kind of operation is parked, dotted and lowerCamelCase (`acl.grant.authority`, `member.join.review`). Selects the summary template. The set is OPEN: a renderer that does not recognise a kind still renders `summary` from its fields.";
+                    };
+                    readonly typeUri: {
+                        readonly type: "string";
+                        readonly format: "uri";
+                        readonly minLength: 1;
+                        readonly description: "The Type URI of the parked operation — the Trust Task the community will execute when the action completes. Together with `payload` it is exactly what will run.";
+                    };
+                    readonly requester: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                        readonly maxLength: 2048;
+                        readonly description: "VID of the party whose operation was parked. For `acknowledge`, the operator whose offline write is being acknowledged, where the community can attribute one.";
+                    };
+                    readonly status: {
+                        readonly type: "string";
+                        readonly enum: readonly ["open", "completed", "declined", "expired", "cancelled", "failed"];
+                        readonly description: "`open` — awaiting decisions. `completed` — the threshold was met and the operation executed (or, for `acknowledge`, every administrator acknowledged). `declined` — an eligible approver denied it. `expired` — it lapsed at `expiresAt`. `cancelled` — the requester withdrew it, or the community invalidated it (see `closedReason`). `failed` — the threshold was met but the re-check at execution refused it, or execution itself failed; the operation did not take effect.";
+                    };
+                    readonly createdAt: {
+                        readonly type: "string";
+                        readonly format: "date-time";
+                        readonly description: "When the operation was parked.";
+                    };
+                    readonly expiresAt: {
+                        readonly type: "string";
+                        readonly format: "date-time";
+                        readonly description: "When an open action lapses. Absent for an `acknowledge` or `queue` action that does not expire; ALWAYS present for `approval`, whose open life is bounded (72 hours by default; the community configures it between 15 minutes and 14 days).";
+                    };
+                    readonly closedAt: {
+                        readonly type: "string";
+                        readonly format: "date-time";
+                        readonly description: "When the action left `open`. Present exactly when `status` is not `open`.";
+                    };
+                    readonly closedReason: {
+                        readonly type: "string";
+                        readonly enum: readonly ["thresholdMet", "declined", "expired", "cancelledByRequester", "invalidated", "failedRecheck", "acknowledged"];
+                        readonly description: "Why the action closed. Present exactly when `status` is not `open`. `invalidated` — the community closed it because something it depended on stopped holding before the threshold (an approver or the requester lost standing, the target state moved); `failedRecheck` — the threshold was met but the execution-time re-check refused.";
+                    };
+                    readonly threshold: {
+                        readonly type: "integer";
+                        readonly minimum: 1;
+                        readonly description: "The number of distinct approvals the operation needs. Present for `approval`; absent otherwise (a `queue` decision is one decision by construction, and `acknowledge` needs every remaining administrator).";
+                    };
+                    readonly approvals: {
+                        readonly type: "array";
+                        readonly description: "The decisions in favour recorded so far — approvals for `approval` and `queue`, acknowledgements for `acknowledge` — one entry per distinct subject, in the order recorded. Empty while none has landed.";
+                        readonly items: {
+                            readonly type: "object";
+                            readonly additionalProperties: false;
+                            readonly required: readonly ["subject", "at"];
+                            readonly properties: {
+                                readonly subject: {
+                                    readonly type: "string";
+                                    readonly minLength: 1;
+                                    readonly maxLength: 2048;
+                                    readonly description: "VID of the approver or acknowledger, as proven by the decision's own proof.";
+                                };
+                                readonly at: {
+                                    readonly type: "string";
+                                    readonly format: "date-time";
+                                    readonly description: "When the decision was recorded.";
+                                };
+                            };
+                        };
+                    };
+                    readonly approversRemaining: {
+                        readonly type: "integer";
+                        readonly minimum: 0;
+                        readonly description: "How many further distinct decisions the action needs while `open` — approvals for `approval`, acknowledgements for `acknowledge`. Lets a console say 'one more' without disclosing the eligible set.";
+                    };
+                    readonly summary: {
+                        readonly $ref: "#/$defs/Summary";
+                    };
+                    readonly payload: {
+                        readonly type: "object";
+                        readonly description: "The exact payload of the parked operation — the object `payloadDigest` is computed over and the one the community will execute. Carried so an approver can recompute the digest and re-derive every summary field from it rather than trusting the rendering (VTI-APV-013). Deliberately an open object: its shape is governed by the specification `typeUri` names, and a digest is checked over members exactly as received.";
+                    };
+                    readonly payloadDigest: {
+                        readonly $ref: "#/$defs/DigestMultibase";
+                        readonly description: "Digest of `payload`, taken over its RFC 8785 (JCS) canonicalization. The community re-derives it from the payload it is about to execute and refuses on mismatch. The digest an approver signs over is the challenge-salted one of `task-consent/decision`, not this value; this one lets the approver check that `payload` is what was parked.";
+                    };
+                    readonly challenge: {
+                        readonly type: "string";
+                        readonly minLength: 16;
+                        readonly maxLength: 256;
+                        readonly description: "Present ONLY on an action the CALLER may decide now — an `approval` or `queue` action on which the caller is an eligible approver who has not yet decided. Per-approver: two approvers are shown different challenges for the same action. Echoed verbatim in `task-consent/decision`'s `challenge`, which binds that decision to this approver and this action. Absent for everyone else, including the requester.";
+                    };
+                    readonly callerRole: {
+                        readonly type: "string";
+                        readonly enum: readonly ["approver", "requester", "acknowledger", "observer"];
+                        readonly description: "The caller's relation to this action. `approver` — an eligible approver (whether or not already decided). `requester` — the party whose operation was parked. `acknowledger` — an administrator expected to acknowledge it. `observer` — none of these; seen only through the audit-read capability on a `history` or `all` view.";
+                    };
+                    readonly requesterOpenActions: {
+                        readonly type: "integer";
+                        readonly minimum: 0;
+                        readonly description: "How many open actions the requester currently has at the community, this one included. For consent-fatigue display: an approver shown the twentieth request from one requester today should be able to see that it is the twentieth.";
+                    };
+                    readonly ext: {
+                        readonly $ref: "#/$defs/Ext";
+                    };
+                };
+            };
+            readonly Summary: {
+                readonly title: "Summary";
+                readonly description: "What an approver is shown, rendered from the summary template for the action's `kind`. Title and effect are the template's prose; the fields are the payload values that prose is about, each located by pointer so a renderer can verify it.";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["title", "fields", "templateDigest"];
+                readonly properties: {
+                    readonly title: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                        readonly maxLength: 256;
+                        readonly description: "One-line heading from the template. Prose only: a renderer MUST NOT present the action from this text without the fields.";
+                    };
+                    readonly effect: {
+                        readonly type: "string";
+                        readonly maxLength: 1024;
+                        readonly description: "One or two sentences from the template saying what executing the operation will do.";
+                    };
+                    readonly fields: {
+                        readonly type: "object";
+                        readonly description: "Named values the template displays, keyed by a lowerCamelCase field name. Each locates its value in `payload` by JSON Pointer.";
+                        readonly propertyNames: {
+                            readonly pattern: "^[a-z][a-zA-Z0-9]*$";
+                            readonly maxLength: 64;
+                        };
+                        readonly additionalProperties: {
+                            readonly $ref: "#/$defs/Field";
+                        };
+                    };
+                    readonly templateDigest: {
+                        readonly $ref: "#/$defs/DigestMultibase";
+                        readonly description: "Digest of the summary template this summary was rendered from, over its RFC 8785 (JCS) canonicalization. Pinned per `kind`: a renderer that holds the template for a kind refuses a summary naming a different digest, so the community cannot change what approvers are shown for a kind without that change being visible.";
+                    };
+                };
+            };
+            readonly Field: {
+                readonly title: "Field";
+                readonly description: "One displayed value, with where it comes from and how to render it.";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["pointer", "format", "value"];
+                readonly properties: {
+                    readonly pointer: {
+                        readonly type: "string";
+                        readonly maxLength: 512;
+                        readonly pattern: "^(/([^~/]|~[01])*)*$";
+                        readonly description: "RFC 6901 JSON Pointer into the action's `payload`. The empty string addresses the whole payload.";
+                    };
+                    readonly format: {
+                        readonly type: "string";
+                        readonly enum: readonly ["did", "capabilityList", "duration", "datetime", "text"];
+                        readonly description: "How to render the value. `did` — a DID, shown in full or with a verified display name, never truncated to a prefix that two DIDs share. `capabilityList` — an array of capability names. `duration` — an ISO 8601 duration. `datetime` — an RFC 3339 date-time. `text` — anything else, rendered as literal text.";
+                    };
+                    readonly value: {
+                        readonly description: "The value found at `pointer` when the community rendered the summary. A renderer re-derives it from `payload` and refuses to render the action on any mismatch; it is carried so that a mismatch is detectable, not so that it can be trusted.";
+                    };
+                };
+            };
+            readonly DigestMultibase: {
+                readonly title: "DigestMultibase";
+                readonly description: "A cryptographic digest as a multibase-encoded multihash — the encoding the W3C Verifiable Credentials Data Model 2.0 defines for `digestMultibase`, and the one `did:webvh` uses for its SCID and entry hashes.\n\nMultihash carries the hash algorithm in-band, so the value is self-describing and the wire format survives an algorithm change without a schema revision; multibase does the same for the base encoding, so a verifier never infers base58 from base64url by context. A bare hex string or a `sha-256:`-style prefix hard-codes one algorithm into the wire contract and is non-conforming here.\n\nThis definition constrains the *encoding only*. What the digest is computed over is stated by each referencing field, because it differs legitimately: a digest over a JSON document is taken over its RFC 8785 (JCS) canonicalization, while a digest over an opaque artifact is taken over its bytes. A field whose input is a JSON document and which does not name a canonicalization is not reproducible.\n\nRestricted to the two multibase headers W3C Controlled Identifiers 1.0 §2.4 normatively requires — `z` (base58btc) and `u` (base64url-no-pad). CID permits others but states that \"interoperability is not guaranteed between implementations using such values\", and a registry whose purpose is interoperability should not mint digests a conforming verifier may be unable to read. The alphabets are enforced rather than assumed: base58btc excludes 0, O, I and l, and an earlier permissive pattern let three published examples carry digests that were not valid base58 at all. base58btc is RECOMMENDED, for consistency with `did:key` and `did:webvh`.";
+                readonly type: "string";
+                readonly minLength: 16;
+                readonly pattern: "^(z[1-9A-HJ-NP-Za-km-z]+|u[A-Za-z0-9_-]+)$";
+                readonly examples: readonly ["zQmbWqxBEKC3P8tqsKc98xmWNzrzDtRLMiMPL8wBuTGsMnR"];
+            };
+            readonly ActionId: {
+                readonly title: "ActionId";
+                readonly description: "Opaque, community-minted identifier of one action. A consumer MUST NOT parse or order it; it is compared for equality only. Long enough to be unguessable, because a show of an id the caller may not see is answered `notFound` and an enumerable id would turn that answer into an oracle.";
+                readonly type: "string";
+                readonly minLength: 16;
+                readonly maxLength: 128;
+                readonly pattern: "^[A-Za-z0-9._~:-]+$";
+            };
+        };
+    };
+};
+/**
+ * SPEC.md §7.2 policy for the success-response variant. `isRecipientRequired`
+ * tracks the *issuer* party's requirement because a response swaps the
+ * parties (§7.3 item 5).
+ */
+export declare const RESPONSE_SPEC: {
+    readonly typeUri: "https://trusttasks.org/spec/vtc/admin/actions/list/0.1#response";
+    readonly isBearer: false;
+    readonly isProofRequired: true;
+    readonly isRecipientRequired: true;
+    readonly isIssuedAtRequired: false;
+    readonly payloadSchema: {
+        readonly $schema: "https://json-schema.org/draft/2020-12/schema";
+        readonly $ref: "#/$defs/Response";
+        readonly $defs: {
+            readonly Response: {
+                readonly $anchor: "response";
+                readonly title: "VTC Admin Actions — List — response payload";
+                readonly description: "One page of actions and the caller's badge counts. Failures use trust-task-error, not this shape.";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["actions", "counts"];
+                readonly properties: {
+                    readonly actions: {
+                        readonly type: "array";
+                        readonly maxItems: 100;
+                        readonly items: {
+                            readonly $ref: "#/$defs/Action";
+                        };
+                        readonly description: "The page, in the view's order: open views by `expiresAt` soonest first (non-expiring last, then by `createdAt`), `history` by `closedAt` newest first, `all` open-before-closed in those orders. An empty array is a successful answer: nothing in this view.";
+                    };
+                    readonly nextCursor: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                        readonly maxLength: 1024;
+                        readonly description: "Present when more actions follow. Pass it back as `cursor` with the same `view` and `since`.";
+                    };
+                    readonly counts: {
+                        readonly type: "object";
+                        readonly additionalProperties: false;
+                        readonly required: readonly ["waitingForMe", "requestedByMe"];
+                        readonly description: "Totals across the whole collection, not the page — what a console badge shows. Computed for the caller regardless of which `view` was requested.";
+                        readonly properties: {
+                            readonly waitingForMe: {
+                                readonly type: "integer";
+                                readonly minimum: 0;
+                                readonly description: "Open actions awaiting the caller's decision or acknowledgement.";
+                            };
+                            readonly requestedByMe: {
+                                readonly type: "integer";
+                                readonly minimum: 0;
+                                readonly description: "Open actions the caller requested.";
+                            };
+                        };
+                    };
+                    readonly ext: {
+                        readonly $ref: "#/$defs/Ext";
+                    };
+                };
+            };
+            readonly Ext: {
+                readonly title: "Ext";
+                readonly description: "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.";
+                readonly type: "object";
+                readonly minProperties: 1;
+                readonly additionalProperties: true;
+                readonly propertyNames: {
+                    readonly pattern: "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$";
+                };
+            };
+            readonly Action: {
+                readonly title: "Action";
+                readonly description: "One parked administrative operation, as the caller is entitled to see it. The same action reads differently to different callers only in `challenge` and `callerRole`, which are per-caller.";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["actionId", "category", "kind", "typeUri", "requester", "status", "createdAt", "approvals", "summary", "payload", "payloadDigest", "callerRole"];
+                readonly properties: {
+                    readonly actionId: {
+                        readonly $ref: "#/$defs/ActionId";
+                    };
+                    readonly category: {
+                        readonly type: "string";
+                        readonly enum: readonly ["approval", "acknowledge", "queue"];
+                        readonly description: "`approval` — eligible approvers approve or decline, N-of-M; the operation executes when the threshold is met. `acknowledge` — an operation that already happened (an operator's offline or break-glass write) which every remaining administrator must acknowledge; there is nothing to approve or decline. `queue` — an existing human decision (for example a join review) surfaced in the same list, with a threshold of one.";
+                    };
+                    readonly kind: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                        readonly maxLength: 128;
+                        readonly pattern: "^[a-z][a-zA-Z0-9.]*$";
+                        readonly description: "The community's name for what kind of operation is parked, dotted and lowerCamelCase (`acl.grant.authority`, `member.join.review`). Selects the summary template. The set is OPEN: a renderer that does not recognise a kind still renders `summary` from its fields.";
+                    };
+                    readonly typeUri: {
+                        readonly type: "string";
+                        readonly format: "uri";
+                        readonly minLength: 1;
+                        readonly description: "The Type URI of the parked operation — the Trust Task the community will execute when the action completes. Together with `payload` it is exactly what will run.";
+                    };
+                    readonly requester: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                        readonly maxLength: 2048;
+                        readonly description: "VID of the party whose operation was parked. For `acknowledge`, the operator whose offline write is being acknowledged, where the community can attribute one.";
+                    };
+                    readonly status: {
+                        readonly type: "string";
+                        readonly enum: readonly ["open", "completed", "declined", "expired", "cancelled", "failed"];
+                        readonly description: "`open` — awaiting decisions. `completed` — the threshold was met and the operation executed (or, for `acknowledge`, every administrator acknowledged). `declined` — an eligible approver denied it. `expired` — it lapsed at `expiresAt`. `cancelled` — the requester withdrew it, or the community invalidated it (see `closedReason`). `failed` — the threshold was met but the re-check at execution refused it, or execution itself failed; the operation did not take effect.";
+                    };
+                    readonly createdAt: {
+                        readonly type: "string";
+                        readonly format: "date-time";
+                        readonly description: "When the operation was parked.";
+                    };
+                    readonly expiresAt: {
+                        readonly type: "string";
+                        readonly format: "date-time";
+                        readonly description: "When an open action lapses. Absent for an `acknowledge` or `queue` action that does not expire; ALWAYS present for `approval`, whose open life is bounded (72 hours by default; the community configures it between 15 minutes and 14 days).";
+                    };
+                    readonly closedAt: {
+                        readonly type: "string";
+                        readonly format: "date-time";
+                        readonly description: "When the action left `open`. Present exactly when `status` is not `open`.";
+                    };
+                    readonly closedReason: {
+                        readonly type: "string";
+                        readonly enum: readonly ["thresholdMet", "declined", "expired", "cancelledByRequester", "invalidated", "failedRecheck", "acknowledged"];
+                        readonly description: "Why the action closed. Present exactly when `status` is not `open`. `invalidated` — the community closed it because something it depended on stopped holding before the threshold (an approver or the requester lost standing, the target state moved); `failedRecheck` — the threshold was met but the execution-time re-check refused.";
+                    };
+                    readonly threshold: {
+                        readonly type: "integer";
+                        readonly minimum: 1;
+                        readonly description: "The number of distinct approvals the operation needs. Present for `approval`; absent otherwise (a `queue` decision is one decision by construction, and `acknowledge` needs every remaining administrator).";
+                    };
+                    readonly approvals: {
+                        readonly type: "array";
+                        readonly description: "The decisions in favour recorded so far — approvals for `approval` and `queue`, acknowledgements for `acknowledge` — one entry per distinct subject, in the order recorded. Empty while none has landed.";
+                        readonly items: {
+                            readonly type: "object";
+                            readonly additionalProperties: false;
+                            readonly required: readonly ["subject", "at"];
+                            readonly properties: {
+                                readonly subject: {
+                                    readonly type: "string";
+                                    readonly minLength: 1;
+                                    readonly maxLength: 2048;
+                                    readonly description: "VID of the approver or acknowledger, as proven by the decision's own proof.";
+                                };
+                                readonly at: {
+                                    readonly type: "string";
+                                    readonly format: "date-time";
+                                    readonly description: "When the decision was recorded.";
+                                };
+                            };
+                        };
+                    };
+                    readonly approversRemaining: {
+                        readonly type: "integer";
+                        readonly minimum: 0;
+                        readonly description: "How many further distinct decisions the action needs while `open` — approvals for `approval`, acknowledgements for `acknowledge`. Lets a console say 'one more' without disclosing the eligible set.";
+                    };
+                    readonly summary: {
+                        readonly $ref: "#/$defs/Summary";
+                    };
+                    readonly payload: {
+                        readonly type: "object";
+                        readonly description: "The exact payload of the parked operation — the object `payloadDigest` is computed over and the one the community will execute. Carried so an approver can recompute the digest and re-derive every summary field from it rather than trusting the rendering (VTI-APV-013). Deliberately an open object: its shape is governed by the specification `typeUri` names, and a digest is checked over members exactly as received.";
+                    };
+                    readonly payloadDigest: {
+                        readonly $ref: "#/$defs/DigestMultibase";
+                        readonly description: "Digest of `payload`, taken over its RFC 8785 (JCS) canonicalization. The community re-derives it from the payload it is about to execute and refuses on mismatch. The digest an approver signs over is the challenge-salted one of `task-consent/decision`, not this value; this one lets the approver check that `payload` is what was parked.";
+                    };
+                    readonly challenge: {
+                        readonly type: "string";
+                        readonly minLength: 16;
+                        readonly maxLength: 256;
+                        readonly description: "Present ONLY on an action the CALLER may decide now — an `approval` or `queue` action on which the caller is an eligible approver who has not yet decided. Per-approver: two approvers are shown different challenges for the same action. Echoed verbatim in `task-consent/decision`'s `challenge`, which binds that decision to this approver and this action. Absent for everyone else, including the requester.";
+                    };
+                    readonly callerRole: {
+                        readonly type: "string";
+                        readonly enum: readonly ["approver", "requester", "acknowledger", "observer"];
+                        readonly description: "The caller's relation to this action. `approver` — an eligible approver (whether or not already decided). `requester` — the party whose operation was parked. `acknowledger` — an administrator expected to acknowledge it. `observer` — none of these; seen only through the audit-read capability on a `history` or `all` view.";
+                    };
+                    readonly requesterOpenActions: {
+                        readonly type: "integer";
+                        readonly minimum: 0;
+                        readonly description: "How many open actions the requester currently has at the community, this one included. For consent-fatigue display: an approver shown the twentieth request from one requester today should be able to see that it is the twentieth.";
+                    };
+                    readonly ext: {
+                        readonly $ref: "#/$defs/Ext";
+                    };
+                };
+            };
+            readonly Summary: {
+                readonly title: "Summary";
+                readonly description: "What an approver is shown, rendered from the summary template for the action's `kind`. Title and effect are the template's prose; the fields are the payload values that prose is about, each located by pointer so a renderer can verify it.";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["title", "fields", "templateDigest"];
+                readonly properties: {
+                    readonly title: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                        readonly maxLength: 256;
+                        readonly description: "One-line heading from the template. Prose only: a renderer MUST NOT present the action from this text without the fields.";
+                    };
+                    readonly effect: {
+                        readonly type: "string";
+                        readonly maxLength: 1024;
+                        readonly description: "One or two sentences from the template saying what executing the operation will do.";
+                    };
+                    readonly fields: {
+                        readonly type: "object";
+                        readonly description: "Named values the template displays, keyed by a lowerCamelCase field name. Each locates its value in `payload` by JSON Pointer.";
+                        readonly propertyNames: {
+                            readonly pattern: "^[a-z][a-zA-Z0-9]*$";
+                            readonly maxLength: 64;
+                        };
+                        readonly additionalProperties: {
+                            readonly $ref: "#/$defs/Field";
+                        };
+                    };
+                    readonly templateDigest: {
+                        readonly $ref: "#/$defs/DigestMultibase";
+                        readonly description: "Digest of the summary template this summary was rendered from, over its RFC 8785 (JCS) canonicalization. Pinned per `kind`: a renderer that holds the template for a kind refuses a summary naming a different digest, so the community cannot change what approvers are shown for a kind without that change being visible.";
+                    };
+                };
+            };
+            readonly Field: {
+                readonly title: "Field";
+                readonly description: "One displayed value, with where it comes from and how to render it.";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["pointer", "format", "value"];
+                readonly properties: {
+                    readonly pointer: {
+                        readonly type: "string";
+                        readonly maxLength: 512;
+                        readonly pattern: "^(/([^~/]|~[01])*)*$";
+                        readonly description: "RFC 6901 JSON Pointer into the action's `payload`. The empty string addresses the whole payload.";
+                    };
+                    readonly format: {
+                        readonly type: "string";
+                        readonly enum: readonly ["did", "capabilityList", "duration", "datetime", "text"];
+                        readonly description: "How to render the value. `did` — a DID, shown in full or with a verified display name, never truncated to a prefix that two DIDs share. `capabilityList` — an array of capability names. `duration` — an ISO 8601 duration. `datetime` — an RFC 3339 date-time. `text` — anything else, rendered as literal text.";
+                    };
+                    readonly value: {
+                        readonly description: "The value found at `pointer` when the community rendered the summary. A renderer re-derives it from `payload` and refuses to render the action on any mismatch; it is carried so that a mismatch is detectable, not so that it can be trusted.";
+                    };
+                };
+            };
+            readonly DigestMultibase: {
+                readonly title: "DigestMultibase";
+                readonly description: "A cryptographic digest as a multibase-encoded multihash — the encoding the W3C Verifiable Credentials Data Model 2.0 defines for `digestMultibase`, and the one `did:webvh` uses for its SCID and entry hashes.\n\nMultihash carries the hash algorithm in-band, so the value is self-describing and the wire format survives an algorithm change without a schema revision; multibase does the same for the base encoding, so a verifier never infers base58 from base64url by context. A bare hex string or a `sha-256:`-style prefix hard-codes one algorithm into the wire contract and is non-conforming here.\n\nThis definition constrains the *encoding only*. What the digest is computed over is stated by each referencing field, because it differs legitimately: a digest over a JSON document is taken over its RFC 8785 (JCS) canonicalization, while a digest over an opaque artifact is taken over its bytes. A field whose input is a JSON document and which does not name a canonicalization is not reproducible.\n\nRestricted to the two multibase headers W3C Controlled Identifiers 1.0 §2.4 normatively requires — `z` (base58btc) and `u` (base64url-no-pad). CID permits others but states that \"interoperability is not guaranteed between implementations using such values\", and a registry whose purpose is interoperability should not mint digests a conforming verifier may be unable to read. The alphabets are enforced rather than assumed: base58btc excludes 0, O, I and l, and an earlier permissive pattern let three published examples carry digests that were not valid base58 at all. base58btc is RECOMMENDED, for consistency with `did:key` and `did:webvh`.";
+                readonly type: "string";
+                readonly minLength: 16;
+                readonly pattern: "^(z[1-9A-HJ-NP-Za-km-z]+|u[A-Za-z0-9_-]+)$";
+                readonly examples: readonly ["zQmbWqxBEKC3P8tqsKc98xmWNzrzDtRLMiMPL8wBuTGsMnR"];
+            };
+            readonly ActionId: {
+                readonly title: "ActionId";
+                readonly description: "Opaque, community-minted identifier of one action. A consumer MUST NOT parse or order it; it is compared for equality only. Long enough to be unguessable, because a show of an id the caller may not see is answered `notFound` and an enumerable id would turn that answer into an oracle.";
+                readonly type: "string";
+                readonly minLength: 16;
+                readonly maxLength: 128;
+                readonly pattern: "^[A-Za-z0-9._~:-]+$";
+            };
+        };
+    };
+};
+//# sourceMappingURL=payload.d.ts.map