@openvtc/trust-tasks 0.23.7 → 0.23.9

package/src/index.ts

@@ -43,6 +43,15 @@ export * as AuthAuthenticate_v0_1 from "./auth/authenticate/0.1/payload.js";
 export * as AuthAuthenticate_v0_2 from "./auth/authenticate/0.2/payload.js";
 export * as AuthAuthenticate_v0_3 from "./auth/authenticate/0.3/payload.js";
 export * as AuthChallenge_v0_1 from "./auth/challenge/0.1/payload.js";
+export * as OobShared_v0_1 from "./auth/oob/_shared/0.1/oob.js";
+export * as AuthOobCancel_v0_1 from "./auth/oob/cancel/0.1/payload.js";
+export * as AuthOobClaim_v0_1 from "./auth/oob/claim/0.1/payload.js";
+export * as AuthOobGrant_v0_1 from "./auth/oob/grant/0.1/payload.js";
+export * as AuthOobIdentify_v0_1 from "./auth/oob/identify/0.1/payload.js";
+export * as AuthOobProve_v0_1 from "./auth/oob/prove/0.1/payload.js";
+export * as AuthOobRedeem_v0_1 from "./auth/oob/redeem/0.1/payload.js";
+export * as AuthOobRequest_v0_1 from "./auth/oob/request/0.1/payload.js";
+export * as AuthOobRespond_v0_1 from "./auth/oob/respond/0.1/payload.js";
 export * as AuthPasskeyAdminList_v0_1 from "./auth/passkey/admin-list/0.1/payload.js";
 export * as AuthPasskeyEnrollFinish_v0_1 from "./auth/passkey/enroll/finish/0.1/payload.js";
 export * as AuthPasskeyEnrollFinish_v0_2 from "./auth/passkey/enroll/finish/0.2/payload.js";
@@ -201,6 +210,24 @@ export * as DidManagementServerRegister_v0_1 from "./did-management/server/regis
 export * as DidManagementServerStatsSync_v0_1 from "./did-management/server/stats-sync/0.1/payload.js";
 export * as DidManagementStatsGet_v0_1 from "./did-management/stats/get/0.1/payload.js";
 export * as DidManagementStatsTimeseries_v0_1 from "./did-management/stats/timeseries/0.1/payload.js";
+export * as AccountsShared_v0_1 from "./external/_shared/0.1/accounts.js";
+export * as ExternalAccountsArchive_v0_1 from "./external/accounts/archive/0.1/payload.js";
+export * as ExternalAccountsBindingsGrant_v0_1 from "./external/accounts/bindings/grant/0.1/payload.js";
+export * as ExternalAccountsBindingsRevoke_v0_1 from "./external/accounts/bindings/revoke/0.1/payload.js";
+export * as ExternalAccountsCreate_v0_1 from "./external/accounts/create/0.1/payload.js";
+export * as ExternalAccountsDelete_v0_1 from "./external/accounts/delete/0.1/payload.js";
+export * as ExternalAccountsGet_v0_1 from "./external/accounts/get/0.1/payload.js";
+export * as ExternalAccountsKeysRotate_v0_1 from "./external/accounts/keys/rotate/0.1/payload.js";
+export * as ExternalAccountsList_v0_1 from "./external/accounts/list/0.1/payload.js";
+export * as ExternalAccountsProbe_v0_1 from "./external/accounts/probe/0.1/payload.js";
+export * as ExternalAccountsRestore_v0_1 from "./external/accounts/restore/0.1/payload.js";
+export * as ExternalAccountsResume_v0_1 from "./external/accounts/resume/0.1/payload.js";
+export * as ExternalAccountsSecretSet_v0_1 from "./external/accounts/secret/set/0.1/payload.js";
+export * as ExternalAccountsSetup_v0_1 from "./external/accounts/setup/0.1/payload.js";
+export * as ExternalAccountsSuspend_v0_1 from "./external/accounts/suspend/0.1/payload.js";
+export * as ExternalAccountsUpdate_v0_1 from "./external/accounts/update/0.1/payload.js";
+export * as ExternalCredentialsIssue_v0_1 from "./external/credentials/issue/0.1/payload.js";
+export * as ExternalSign_v0_1 from "./external/sign/0.1/payload.js";
 export * as GitNsShared_v0_1 from "./git-ns/_shared/0.1/git-ns.js";
 export * as GitNsShared_v0_2 from "./git-ns/_shared/0.2/git-ns.js";
 export * as GitNsShared_v0_3 from "./git-ns/_shared/0.3/git-ns.js";
@@ -391,16 +418,25 @@ export * as RegistryRecordPut_v0_1 from "./registry/record/put/0.1/payload.js";
 export * as RegistryRecordQuery_v0_1 from "./registry/record/query/0.1/payload.js";
 export * as RegistryRecordRead_v0_1 from "./registry/record/read/0.1/payload.js";
 export * as RegistryRecordUpdate_v0_1 from "./registry/record/update/0.1/payload.js";
+export * as BlobsShared_v0_1 from "./rooms/_shared/0.1/blobs.js";
 export * as RoomShared_v0_1 from "./rooms/_shared/0.1/room.js";
+export * as RoomsBlobsChunk_v0_1 from "./rooms/blobs/chunk/0.1/payload.js";
+export * as RoomsBlobsGet_v0_1 from "./rooms/blobs/get/0.1/payload.js";
+export * as RoomsBlobsUploadAbort_v0_1 from "./rooms/blobs/upload/abort/0.1/payload.js";
+export * as RoomsBlobsUploadBegin_v0_1 from "./rooms/blobs/upload/begin/0.1/payload.js";
+export * as RoomsBlobsUploadChunk_v0_1 from "./rooms/blobs/upload/chunk/0.1/payload.js";
+export * as RoomsBlobsUploadCommit_v0_1 from "./rooms/blobs/upload/commit/0.1/payload.js";
 export * as RoomsCreate_v0_1 from "./rooms/create/0.1/payload.js";
 export * as RoomsEpochChain_v0_1 from "./rooms/epoch/chain/0.1/payload.js";
 export * as RoomsEpochCommits_v0_1 from "./rooms/epoch/commits/0.1/payload.js";
 export * as RoomsEpochMint_v0_1 from "./rooms/epoch/mint/0.1/payload.js";
 export * as RoomsEpochPrune_v0_1 from "./rooms/epoch/prune/0.1/payload.js";
+export * as RoomsInfo_v0_1 from "./rooms/info/0.1/payload.js";
 export * as RoomsKeysBackfill_v0_1 from "./rooms/keys/backfill/0.1/payload.js";
 export * as RoomsKeysBrowse_v0_1 from "./rooms/keys/browse/0.1/payload.js";
 export * as RoomsKeysChain_v0_1 from "./rooms/keys/chain/0.1/payload.js";
 export * as RoomsKeysCommit_v0_1 from "./rooms/keys/commit/0.1/payload.js";
+export * as RoomsKeysFileKey_v0_1 from "./rooms/keys/file-key/0.1/payload.js";
 export * as RoomsKeysKeyPackage_v0_1 from "./rooms/keys/key-package/0.1/payload.js";
 export * as RoomsKeysList_v0_1 from "./rooms/keys/list/0.1/payload.js";
 export * as RoomsKeysOpen_v0_1 from "./rooms/keys/open/0.1/payload.js";
@@ -419,8 +455,12 @@ export * as RoomsOwnerRegister_v0_1 from "./rooms/owner/register/0.1/payload.js"
 export * as RoomsOwnerTransfer_v0_1 from "./rooms/owner/transfer/0.1/payload.js";
 export * as RoomsRecordsCurate_v0_1 from "./rooms/records/curate/0.1/payload.js";
 export * as RoomsRecordsGet_v0_1 from "./rooms/records/get/0.1/payload.js";
+export * as RoomsRecordsGet_v0_2 from "./rooms/records/get/0.2/payload.js";
 export * as RoomsRecordsList_v0_1 from "./rooms/records/list/0.1/payload.js";
+export * as RoomsRecordsList_v0_2 from "./rooms/records/list/0.2/payload.js";
 export * as RoomsRecordsPut_v0_1 from "./rooms/records/put/0.1/payload.js";
+export * as RoomsRecordsPut_v0_2 from "./rooms/records/put/0.2/payload.js";
+export * as RoomsUsage_v0_1 from "./rooms/usage/0.1/payload.js";
 export * as SyncEventShared_v0_1 from "./sync/_shared/0.1/sync-event.js";
 export * as SyncEventShared_v0_2 from "./sync/_shared/0.2/sync-event.js";
 export * as SyncEvent_v0_1 from "./sync/event/0.1/payload.js";
@@ -620,6 +660,7 @@ export * as InviteShared_v0_1 from "./vtc/_shared/0.1/invite.js";
 export * as JoinRequestShared_v0_1 from "./vtc/_shared/0.1/join-request.js";
 export * as MemberShared_v0_1 from "./vtc/_shared/0.1/member.js";
 export * as RelationshipLifecycleShared_v0_1 from "./vtc/_shared/0.1/relationship-lifecycle.js";
+export * as RoomStorageShared_v0_1 from "./vtc/_shared/0.1/room-storage.js";
 export * as SchemaRegistryShared_v0_1 from "./vtc/_shared/0.1/schema-registry.js";
 export * as VetterProfileShared_v0_1 from "./vtc/_shared/0.1/vetter-profile.js";
 export * as VettingAutoGrantShared_v0_1 from "./vtc/_shared/0.1/vetting-auto-grant.js";
@@ -743,7 +784,12 @@ export * as VtcRolesDefine_v0_1 from "./vtc/roles/define/0.1/payload.js";
 export * as VtcRolesDelete_v0_1 from "./vtc/roles/delete/0.1/payload.js";
 export * as VtcRolesList_v0_1 from "./vtc/roles/list/0.1/payload.js";
 export * as VtcRolesShow_v0_1 from "./vtc/roles/show/0.1/payload.js";
+export * as VtcRoomsGet_v0_1 from "./vtc/rooms/get/0.1/payload.js";
+export * as VtcRoomsLimitsSet_v0_1 from "./vtc/rooms/limits/set/0.1/payload.js";
 export * as VtcRoomsList_v0_1 from "./vtc/rooms/list/0.1/payload.js";
+export * as VtcRoomsStorageAssign_v0_1 from "./vtc/rooms/storage/assign/0.1/payload.js";
+export * as VtcRoomsStorageMigrate_v0_1 from "./vtc/rooms/storage/migrate/0.1/payload.js";
+export * as VtcRoomsUsage_v0_1 from "./vtc/rooms/usage/0.1/payload.js";
 export * as VtcSchemasAcceptsDelete_v0_1 from "./vtc/schemas/accepts/delete/0.1/payload.js";
 export * as VtcSchemasAcceptsList_v0_1 from "./vtc/schemas/accepts/list/0.1/payload.js";
 export * as VtcSchemasAcceptsList_v0_2 from "./vtc/schemas/accepts/list/0.2/payload.js";
@@ -755,6 +801,13 @@ export * as VtcSchemasDelete_v0_1 from "./vtc/schemas/delete/0.1/payload.js";
 export * as VtcSchemasList_v0_1 from "./vtc/schemas/list/0.1/payload.js";
 export * as VtcSchemasRegister_v0_1 from "./vtc/schemas/register/0.1/payload.js";
 export * as VtcSchemasShow_v0_1 from "./vtc/schemas/show/0.1/payload.js";
+export * as VtcStorageConfigsCreate_v0_1 from "./vtc/storage/configs/create/0.1/payload.js";
+export * as VtcStorageConfigsGet_v0_1 from "./vtc/storage/configs/get/0.1/payload.js";
+export * as VtcStorageConfigsList_v0_1 from "./vtc/storage/configs/list/0.1/payload.js";
+export * as VtcStorageConfigsProbe_v0_1 from "./vtc/storage/configs/probe/0.1/payload.js";
+export * as VtcStorageConfigsRetire_v0_1 from "./vtc/storage/configs/retire/0.1/payload.js";
+export * as VtcStorageConfigsUpdate_v0_1 from "./vtc/storage/configs/update/0.1/payload.js";
+export * as VtcStorageCredentialsSet_v0_1 from "./vtc/storage/credentials/set/0.1/payload.js";
 export * as VtcVettingAutoGrantShow_v0_1 from "./vtc/vetting/auto-grant/show/0.1/payload.js";
 export * as VtcVettingAutoGrantUpdate_v0_1 from "./vtc/vetting/auto-grant/update/0.1/payload.js";
 export * as VtcVettingHiddenPublish_v0_1 from "./vtc/vetting/hidden/publish/0.1/payload.js";

package/src/rooms/_shared/0.1/blobs.ts

@@ -0,0 +1,17 @@
+/**
+ * Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
+ * Source: specs/rooms/_shared/0.1/blobs.schema.json
+ */
+
+/**
+ * Types shared by the tasks that put files into a data room: the rooms/blobs/* upload and download tasks, rooms/records/put 0.2, rooms/info, rooms/usage, rooms/keys/file-key, and the host-side vtc/rooms/* and vtc/storage/* tasks. A file is a record plus a blob. The record is an ordinary room record, whose sealed body carries the FileManifest. The blob is the file's ciphertext, held outside the record in whatever store the host uses, and named on the record by its BlobRef. Chunking reuses the node-neutral chunked-transfer vocabulary of vta/_shared/0.1/backup-transfer, so an implementation of backup/put-chunk moves a blob's chunks the same way. Not itself a Trust Task specification (the `_shared` folder is skipped by the registry build and the codegen).
+ */
+export interface RoomsSharedFileAndBlobTypes {
+  [k: string]: unknown | undefined;
+}
+
+/**
+ * The definitions this shared schema publishes, hoisted to one declaration each.
+ * See "../../../_shared/components.js".
+ */
+export type { BlobManifest, BlobRef, RoomLimits, ScopeLimits, TransferId, Usage } from "../../../_shared/components.js";

package/src/rooms/_shared/0.1/room.ts

@@ -14,4 +14,4 @@ export interface RoomsSharedTypes {
  * The definitions this shared schema publishes, hoisted to one declaration each.
  * See "../../../_shared/components.js".
  */
-export type { AnchorCadence, AuthorityPresentation, DataCommitment, EpochAnchor, EpochLink, HeadVersion, ReadVerification, RecordCount, RecordMetadata, RecordTrace, RetentionPolicy, SealedRecord, Visibility } from "../../../_shared/components.js";
+export type { AnchorCadence, AuthorityPresentation, DataCommitment, EpochAnchor, EpochLink, HeadVersion, ReadVerification, RecordCount, RecordMetadata, RecordMetadataV2, RecordTrace, RetentionPolicy, SealedRecord, Visibility } from "../../../_shared/components.js";

package/src/rooms/blobs/chunk/0.1/payload.ts

@@ -0,0 +1,251 @@
+/**
+ * Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
+ * Source: specs/rooms/blobs/chunk/0.1/payload.schema.json
+ */
+
+import type { ChunkData, ChunkIndex, DigestMultibase, Ext, TransferId } from "../../../../_shared/components.js";
+
+
+/**
+ * Fetch one chunk of an open blob download. The outer document members are owned by the framework — SPEC §6.3.
+ */
+export interface RoomsBlobsChunkPayload {
+  downloadId: TransferId;
+  index: ChunkIndex;
+  ext?: Ext;
+}
+/**
+ * Success response to rooms/blobs/chunk. Type https://trusttasks.org/spec/rooms/blobs/chunk/0.1#response.
+ */
+export interface RoomsBlobsChunkResponsePayload {
+  index: ChunkIndex;
+  /**
+   * The digest of this chunk's raw bytes, restated from the manifest. The reader checks the bytes against the manifest it verified, not against this restatement.
+   */
+  digestMultibase: DigestMultibase;
+  data: ChunkData;
+  ext?: Ext;
+}
+
+/** Shared definitions this specification references, re-exported under the names it used to declare them with. */
+export type { ChunkData, ChunkIndex, DigestMultibase, Ext, TransferId };
+
+/** Trust Task type URI. */
+export const TYPE_URI = "https://trusttasks.org/spec/rooms/blobs/chunk/0.1" as const;
+
+/** Stable alias for this specification's request payload shape. */
+export type Payload = RoomsBlobsChunkPayload;
+
+/** Trust Task response type URI (request type URI + "#response"). */
+export const RESPONSE_TYPE_URI = "https://trusttasks.org/spec/rooms/blobs/chunk/0.1#response" as const;
+
+/** Stable alias for this specification's success-response payload shape. */
+export type Response = RoomsBlobsChunkResponsePayload;
+
+/**
+ * This specification's payload schema, as a value.
+ *
+ * SPEC.md §7.2 item 2 is performed against this. It is shipped as data
+ * rather than only as a `.json` file because TypeScript types are erased
+ * at runtime: without a schema a consumer has nothing to validate, and
+ * every REQUIRED payload member is optional in practice. Cross-file
+ * `$ref`s are already inlined, so it needs no resolver.
+ */
+export const PAYLOAD_SCHEMA = {
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://trusttasks.org/spec/rooms/blobs/chunk/0.1",
+  "title": "Rooms Blobs — Chunk — payload",
+  "description": "Fetch one chunk of an open blob download. The outer document members are owned by the framework — SPEC §6.3.",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "downloadId",
+    "index"
+  ],
+  "properties": {
+    "downloadId": {
+      "$ref": "#/$defs/TransferId"
+    },
+    "index": {
+      "$ref": "#/$defs/ChunkIndex"
+    },
+    "ext": {
+      "$ref": "#/$defs/Ext"
+    }
+  },
+  "$defs": {
+    "Response": {
+      "$anchor": "response",
+      "title": "Rooms Blobs — Chunk — response payload",
+      "description": "Success response to rooms/blobs/chunk. Type https://trusttasks.org/spec/rooms/blobs/chunk/0.1#response.",
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "index",
+        "digestMultibase",
+        "data"
+      ],
+      "properties": {
+        "index": {
+          "$ref": "#/$defs/ChunkIndex"
+        },
+        "digestMultibase": {
+          "$ref": "#/$defs/DigestMultibase",
+          "description": "The digest of this chunk's raw bytes, restated from the manifest. The reader checks the bytes against the manifest it verified, not against this restatement."
+        },
+        "data": {
+          "$ref": "#/$defs/ChunkData"
+        },
+        "ext": {
+          "$ref": "#/$defs/Ext"
+        }
+      }
+    },
+    "Ext": {
+      "title": "Ext",
+      "description": "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.",
+      "type": "object",
+      "minProperties": 1,
+      "additionalProperties": true,
+      "propertyNames": {
+        "pattern": "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$"
+      }
+    },
+    "ChunkData": {
+      "title": "ChunkData",
+      "description": "The chunk's bytes, base64url-encoded without padding (RFC 4648 §5). Bounded at 349526 characters, the unpadded encoding of a 262144-byte chunk. These are bytes of the encrypted bundle, so a chunk read in isolation reveals nothing of the agent's state — but a complete set of chunks is the export, and is to be handled as such.",
+      "type": "string",
+      "minLength": 2,
+      "maxLength": 349526,
+      "pattern": "^[A-Za-z0-9_-]+$"
+    },
+    "DigestMultibase": {
+      "title": "DigestMultibase",
+      "description": "A cryptographic digest as a multibase-encoded multihash — the encoding the W3C Verifiable Credentials Data Model 2.0 defines for `digestMultibase`, and the one `did:webvh` uses for its SCID and entry hashes.\n\nMultihash carries the hash algorithm in-band, so the value is self-describing and the wire format survives an algorithm change without a schema revision; multibase does the same for the base encoding, so a verifier never infers base58 from base64url by context. A bare hex string or a `sha-256:`-style prefix hard-codes one algorithm into the wire contract and is non-conforming here.\n\nThis definition constrains the *encoding only*. What the digest is computed over is stated by each referencing field, because it differs legitimately: a digest over a JSON document is taken over its RFC 8785 (JCS) canonicalization, while a digest over an opaque artifact is taken over its bytes. A field whose input is a JSON document and which does not name a canonicalization is not reproducible.\n\nRestricted to the two multibase headers W3C Controlled Identifiers 1.0 §2.4 normatively requires — `z` (base58btc) and `u` (base64url-no-pad). CID permits others but states that \"interoperability is not guaranteed between implementations using such values\", and a registry whose purpose is interoperability should not mint digests a conforming verifier may be unable to read. The alphabets are enforced rather than assumed: base58btc excludes 0, O, I and l, and an earlier permissive pattern let three published examples carry digests that were not valid base58 at all. base58btc is RECOMMENDED, for consistency with `did:key` and `did:webvh`.",
+      "type": "string",
+      "minLength": 16,
+      "pattern": "^(z[1-9A-HJ-NP-Za-km-z]+|u[A-Za-z0-9_-]+)$",
+      "examples": [
+        "zQmbWqxBEKC3P8tqsKc98xmWNzrzDtRLMiMPL8wBuTGsMnR"
+      ]
+    },
+    "ChunkIndex": {
+      "title": "ChunkIndex",
+      "description": "Zero-based position of a chunk within its bundle. Valid values are 0 to chunkCount − 1; an index outside that range is refused with chunkOutOfRange rather than validated here, because the bound depends on the bundle.",
+      "type": "integer",
+      "minimum": 0,
+      "maximum": 4095
+    },
+    "TransferId": {
+      "title": "TransferId",
+      "type": "string",
+      "pattern": "^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$",
+      "description": "Handle for one upload (begin → chunk → commit or abort) or one download (get → chunk). Host-generated and unguessable, which is what lets a reference to another party's transfer be answered as not-found without confirming that it exists. Bound at creation to the party that opened it: the subject the host authenticated for the opening request. Opaque: a producer quotes what it was given."
+    }
+  }
+} as const;
+
+/** As {@link PAYLOAD_SCHEMA}, for the success-response variant. */
+export const RESPONSE_PAYLOAD_SCHEMA = {
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$ref": "#/$defs/Response",
+  "$defs": {
+    "Response": {
+      "$anchor": "response",
+      "title": "Rooms Blobs — Chunk — response payload",
+      "description": "Success response to rooms/blobs/chunk. Type https://trusttasks.org/spec/rooms/blobs/chunk/0.1#response.",
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "index",
+        "digestMultibase",
+        "data"
+      ],
+      "properties": {
+        "index": {
+          "$ref": "#/$defs/ChunkIndex"
+        },
+        "digestMultibase": {
+          "$ref": "#/$defs/DigestMultibase",
+          "description": "The digest of this chunk's raw bytes, restated from the manifest. The reader checks the bytes against the manifest it verified, not against this restatement."
+        },
+        "data": {
+          "$ref": "#/$defs/ChunkData"
+        },
+        "ext": {
+          "$ref": "#/$defs/Ext"
+        }
+      }
+    },
+    "Ext": {
+      "title": "Ext",
+      "description": "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.",
+      "type": "object",
+      "minProperties": 1,
+      "additionalProperties": true,
+      "propertyNames": {
+        "pattern": "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$"
+      }
+    },
+    "ChunkData": {
+      "title": "ChunkData",
+      "description": "The chunk's bytes, base64url-encoded without padding (RFC 4648 §5). Bounded at 349526 characters, the unpadded encoding of a 262144-byte chunk. These are bytes of the encrypted bundle, so a chunk read in isolation reveals nothing of the agent's state — but a complete set of chunks is the export, and is to be handled as such.",
+      "type": "string",
+      "minLength": 2,
+      "maxLength": 349526,
+      "pattern": "^[A-Za-z0-9_-]+$"
+    },
+    "DigestMultibase": {
+      "title": "DigestMultibase",
+      "description": "A cryptographic digest as a multibase-encoded multihash — the encoding the W3C Verifiable Credentials Data Model 2.0 defines for `digestMultibase`, and the one `did:webvh` uses for its SCID and entry hashes.\n\nMultihash carries the hash algorithm in-band, so the value is self-describing and the wire format survives an algorithm change without a schema revision; multibase does the same for the base encoding, so a verifier never infers base58 from base64url by context. A bare hex string or a `sha-256:`-style prefix hard-codes one algorithm into the wire contract and is non-conforming here.\n\nThis definition constrains the *encoding only*. What the digest is computed over is stated by each referencing field, because it differs legitimately: a digest over a JSON document is taken over its RFC 8785 (JCS) canonicalization, while a digest over an opaque artifact is taken over its bytes. A field whose input is a JSON document and which does not name a canonicalization is not reproducible.\n\nRestricted to the two multibase headers W3C Controlled Identifiers 1.0 §2.4 normatively requires — `z` (base58btc) and `u` (base64url-no-pad). CID permits others but states that \"interoperability is not guaranteed between implementations using such values\", and a registry whose purpose is interoperability should not mint digests a conforming verifier may be unable to read. The alphabets are enforced rather than assumed: base58btc excludes 0, O, I and l, and an earlier permissive pattern let three published examples carry digests that were not valid base58 at all. base58btc is RECOMMENDED, for consistency with `did:key` and `did:webvh`.",
+      "type": "string",
+      "minLength": 16,
+      "pattern": "^(z[1-9A-HJ-NP-Za-km-z]+|u[A-Za-z0-9_-]+)$",
+      "examples": [
+        "zQmbWqxBEKC3P8tqsKc98xmWNzrzDtRLMiMPL8wBuTGsMnR"
+      ]
+    },
+    "ChunkIndex": {
+      "title": "ChunkIndex",
+      "description": "Zero-based position of a chunk within its bundle. Valid values are 0 to chunkCount − 1; an index outside that range is refused with chunkOutOfRange rather than validated here, because the bound depends on the bundle.",
+      "type": "integer",
+      "minimum": 0,
+      "maximum": 4095
+    },
+    "TransferId": {
+      "title": "TransferId",
+      "type": "string",
+      "pattern": "^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$",
+      "description": "Handle for one upload (begin → chunk → commit or abort) or one download (get → chunk). Host-generated and unguessable, which is what lets a reference to another party's transfer be answered as not-found without confirming that it exists. Bound at creation to the party that opened it: the subject the host authenticated for the opening request. Opaque: a producer quotes what it was given."
+    }
+  }
+} as const;
+
+/**
+ * SPEC.md §7.2 policy for the request variant, from this specification's
+ * front matter. Pass to `consumeInbound` — items 5b, 7 and 8 are
+ * per-specification and cannot be derived from the document alone, and
+ * item 2 needs the schema this carries.
+ */
+export const SPEC = {
+  typeUri: TYPE_URI,
+  isBearer: false,
+  isProofRequired: true,
+  isRecipientRequired: true,
+  isIssuedAtRequired: true,
+  payloadSchema: PAYLOAD_SCHEMA,
+} as const;
+
+/**
+ * SPEC.md §7.2 policy for the success-response variant. `isRecipientRequired`
+ * tracks the *issuer* party's requirement because a response swaps the
+ * parties (§7.3 item 5).
+ */
+export const RESPONSE_SPEC = {
+  typeUri: RESPONSE_TYPE_URI,
+  isBearer: false,
+  isProofRequired: false,
+  isRecipientRequired: true,
+  isIssuedAtRequired: true,
+  payloadSchema: RESPONSE_PAYLOAD_SCHEMA,
+} as const;