@openvtc/trust-tasks 0.23.9 → 0.24.1

package/dist/vtc/join-requests/wallet-session/status/0.1/payload.d.ts

@@ -0,0 +1,655 @@
+/**
+ * Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
+ * Source: specs/vtc/join-requests/wallet-session/status/0.1/payload.schema.json
+ */
+import type { Ext } from "../../../../../_shared/components.js";
+/**
+ * An applicant reads the state of a wallet presentation session they opened with vtc/join-requests/wallet-session/start, and, once a wallet has answered, what the presentation established. The applicant is the document proof's signer. The outer document members are owned by the framework — SPEC §6.3.
+ */
+export interface VTCJoinRequestsWalletSessionStatusPayload {
+    /**
+     * The session to read, as vtc/join-requests/wallet-session/start returned it.
+     */
+    sessionId: string;
+    ext?: Ext;
+}
+export interface VTCJoinRequestsWalletSessionStatusResponsePayload {
+    sessionId: string;
+    /**
+     * `awaitingWallet`: no wallet has fetched the request object. `requestRetrieved`: a wallet has fetched it and not yet answered. `presented`: a wallet answered and the presentation verified; see `evidence`. `refused`: a wallet answered and the community did not accept the answer, or the wallet declined; see `reason`. `expired`: the session closed unanswered.
+     */
+    state: "awaitingWallet" | "requestRetrieved" | "presented" | "refused" | "expired";
+    /**
+     * When the session closes, or closed, if unanswered.
+     */
+    expiresAt: string;
+    /**
+     * The join request the session's evidence is recorded on. Present when the session was bound to one, or its evidence has since been attached to one by a submission.
+     */
+    requestId?: string;
+    evidence?: Evidence;
+    /**
+     * Why the session ended `refused`. `presentationInvalid`: the response or a presentation failed verification — decryption, `state`, signature, key binding, nonce or audience. `queryNotSatisfied`: the presentations verified but do not satisfy the query. `issuerNotTrusted`: a credential's issuer is not one the criterion accepts. `statusNotValid`: a credential's status is revoked or suspended, or could not be read. `walletDeclined`: the wallet answered with an OpenID4VP error, such as `access_denied`. Present only when `state` is `refused`.
+     */
+    reason?: "presentationInvalid" | "queryNotSatisfied" | "issuerNotTrusted" | "statusNotValid" | "walletDeclined";
+    ext?: Ext;
+}
+/**
+ * Present only when `state` is `presented`.
+ */
+export interface Evidence {
+    /**
+     * Whether the presentation satisfies the criterion's DCQL query. Satisfying the query is not admission: the community still decides the join under the criterion's `admission`.
+     */
+    satisfied: boolean;
+    /**
+     * The identifier of the key that held the presented credentials — for an SD-JWT VC, the `did:key` of its `cnf` key. Recorded beside the applicant DID, never as it.
+     */
+    holder: string;
+    /**
+     * The credentials presented, one entry each.
+     *
+     * @minItems 1
+     * @maxItems 32
+     */
+    credentials: [PresentedCredential, ...PresentedCredential[]];
+    /**
+     * When evidence not yet recorded on a join request is discarded if the applicant has not submitted under the session's criterion. Absent when the evidence is recorded on a request.
+     */
+    heldUntil?: string;
+}
+/**
+ * One credential the wallet presented, described without any of its claim values.
+ */
+export interface PresentedCredential {
+    /**
+     * The `id` of the DCQL credential query this credential was presented for — the key it arrived under in the OpenID4VP `vp_token`.
+     */
+    credentialQueryId: string;
+    /**
+     * The credential format identifier, as OpenID4VP names it (`dc+sd-jwt`, `mso_mdoc`). Carried verbatim.
+     */
+    format: string;
+    /**
+     * The identifier of the credential's issuer as the community verified it — a DID, or for an issuer identified by an X.509 certificate, the certificate subject or hash the community's policy names it by.
+     */
+    issuer: string;
+    /**
+     * The SD-JWT VC credential type (`vct`). Present for SD-JWT VC credentials.
+     */
+    vct?: string;
+}
+/** Shared definitions this specification references, re-exported under the names it used to declare them with. */
+export type { Ext };
+/** Trust Task type URI. */
+export declare const TYPE_URI: "https://trusttasks.org/spec/vtc/join-requests/wallet-session/status/0.1";
+/** Stable alias for this specification's request payload shape. */
+export type Payload = VTCJoinRequestsWalletSessionStatusPayload;
+/** Trust Task response type URI (request type URI + "#response"). */
+export declare const RESPONSE_TYPE_URI: "https://trusttasks.org/spec/vtc/join-requests/wallet-session/status/0.1#response";
+/** Stable alias for this specification's success-response payload shape. */
+export type Response = VTCJoinRequestsWalletSessionStatusResponsePayload;
+/**
+ * This specification's payload schema, as a value.
+ *
+ * SPEC.md §7.2 item 2 is performed against this. It is shipped as data
+ * rather than only as a `.json` file because TypeScript types are erased
+ * at runtime: without a schema a consumer has nothing to validate, and
+ * every REQUIRED payload member is optional in practice. Cross-file
+ * `$ref`s are already inlined, so it needs no resolver.
+ */
+export declare const PAYLOAD_SCHEMA: {
+    readonly $schema: "https://json-schema.org/draft/2020-12/schema";
+    readonly $id: "https://trusttasks.org/spec/vtc/join-requests/wallet-session/status/0.1";
+    readonly title: "VTC Join-Requests Wallet Session Status — payload";
+    readonly description: "An applicant reads the state of a wallet presentation session they opened with vtc/join-requests/wallet-session/start, and, once a wallet has answered, what the presentation established. The applicant is the document proof's signer. The outer document members are owned by the framework — SPEC §6.3.";
+    readonly type: "object";
+    readonly additionalProperties: false;
+    readonly required: readonly ["sessionId"];
+    readonly properties: {
+        readonly sessionId: {
+            readonly type: "string";
+            readonly minLength: 16;
+            readonly maxLength: 128;
+            readonly description: "The session to read, as vtc/join-requests/wallet-session/start returned it.";
+        };
+        readonly ext: {
+            readonly $ref: "#/$defs/Ext";
+        };
+    };
+    readonly $defs: {
+        readonly PresentedCredential: {
+            readonly title: "PresentedCredential";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["credentialQueryId", "format", "issuer"];
+            readonly description: "One credential the wallet presented, described without any of its claim values.";
+            readonly properties: {
+                readonly credentialQueryId: {
+                    readonly type: "string";
+                    readonly minLength: 1;
+                    readonly maxLength: 128;
+                    readonly description: "The `id` of the DCQL credential query this credential was presented for — the key it arrived under in the OpenID4VP `vp_token`.";
+                };
+                readonly format: {
+                    readonly type: "string";
+                    readonly minLength: 1;
+                    readonly maxLength: 64;
+                    readonly description: "The credential format identifier, as OpenID4VP names it (`dc+sd-jwt`, `mso_mdoc`). Carried verbatim.";
+                };
+                readonly issuer: {
+                    readonly type: "string";
+                    readonly minLength: 1;
+                    readonly maxLength: 2048;
+                    readonly description: "The identifier of the credential's issuer as the community verified it — a DID, or for an issuer identified by an X.509 certificate, the certificate subject or hash the community's policy names it by.";
+                };
+                readonly vct: {
+                    readonly type: "string";
+                    readonly minLength: 1;
+                    readonly maxLength: 2048;
+                    readonly description: "The SD-JWT VC credential type (`vct`). Present for SD-JWT VC credentials.";
+                };
+            };
+        };
+        readonly Evidence: {
+            readonly title: "Evidence";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["satisfied", "holder", "credentials"];
+            readonly description: "What a verified wallet presentation established. Never claim values.";
+            readonly properties: {
+                readonly satisfied: {
+                    readonly type: "boolean";
+                    readonly description: "Whether the presentation satisfies the criterion's DCQL query. Satisfying the query is not admission: the community still decides the join under the criterion's `admission`.";
+                };
+                readonly holder: {
+                    readonly type: "string";
+                    readonly minLength: 1;
+                    readonly maxLength: 2048;
+                    readonly description: "The identifier of the key that held the presented credentials — for an SD-JWT VC, the `did:key` of its `cnf` key. Recorded beside the applicant DID, never as it.";
+                };
+                readonly credentials: {
+                    readonly type: "array";
+                    readonly minItems: 1;
+                    readonly maxItems: 32;
+                    readonly items: {
+                        readonly $ref: "#/$defs/PresentedCredential";
+                    };
+                    readonly description: "The credentials presented, one entry each.";
+                };
+                readonly heldUntil: {
+                    readonly type: "string";
+                    readonly format: "date-time";
+                    readonly description: "When evidence not yet recorded on a join request is discarded if the applicant has not submitted under the session's criterion. Absent when the evidence is recorded on a request.";
+                };
+            };
+        };
+        readonly Response: {
+            readonly $anchor: "response";
+            readonly title: "VTC Join-Requests Wallet Session Status — response payload";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["sessionId", "state", "expiresAt"];
+            readonly properties: {
+                readonly sessionId: {
+                    readonly type: "string";
+                    readonly minLength: 16;
+                    readonly maxLength: 128;
+                };
+                readonly state: {
+                    readonly type: "string";
+                    readonly enum: readonly ["awaitingWallet", "requestRetrieved", "presented", "refused", "expired"];
+                    readonly description: "`awaitingWallet`: no wallet has fetched the request object. `requestRetrieved`: a wallet has fetched it and not yet answered. `presented`: a wallet answered and the presentation verified; see `evidence`. `refused`: a wallet answered and the community did not accept the answer, or the wallet declined; see `reason`. `expired`: the session closed unanswered.";
+                };
+                readonly expiresAt: {
+                    readonly type: "string";
+                    readonly format: "date-time";
+                    readonly description: "When the session closes, or closed, if unanswered.";
+                };
+                readonly requestId: {
+                    readonly type: "string";
+                    readonly minLength: 1;
+                    readonly maxLength: 128;
+                    readonly description: "The join request the session's evidence is recorded on. Present when the session was bound to one, or its evidence has since been attached to one by a submission.";
+                };
+                readonly evidence: {
+                    readonly $ref: "#/$defs/Evidence";
+                    readonly description: "Present only when `state` is `presented`.";
+                };
+                readonly reason: {
+                    readonly type: "string";
+                    readonly enum: readonly ["presentationInvalid", "queryNotSatisfied", "issuerNotTrusted", "statusNotValid", "walletDeclined"];
+                    readonly description: "Why the session ended `refused`. `presentationInvalid`: the response or a presentation failed verification — decryption, `state`, signature, key binding, nonce or audience. `queryNotSatisfied`: the presentations verified but do not satisfy the query. `issuerNotTrusted`: a credential's issuer is not one the criterion accepts. `statusNotValid`: a credential's status is revoked or suspended, or could not be read. `walletDeclined`: the wallet answered with an OpenID4VP error, such as `access_denied`. Present only when `state` is `refused`.";
+                };
+                readonly ext: {
+                    readonly $ref: "#/$defs/Ext";
+                };
+            };
+        };
+        readonly Ext: {
+            readonly title: "Ext";
+            readonly description: "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.";
+            readonly type: "object";
+            readonly minProperties: 1;
+            readonly additionalProperties: true;
+            readonly propertyNames: {
+                readonly pattern: "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$";
+            };
+        };
+    };
+};
+/** As {@link PAYLOAD_SCHEMA}, for the success-response variant. */
+export declare const RESPONSE_PAYLOAD_SCHEMA: {
+    readonly $schema: "https://json-schema.org/draft/2020-12/schema";
+    readonly $ref: "#/$defs/Response";
+    readonly $defs: {
+        readonly PresentedCredential: {
+            readonly title: "PresentedCredential";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["credentialQueryId", "format", "issuer"];
+            readonly description: "One credential the wallet presented, described without any of its claim values.";
+            readonly properties: {
+                readonly credentialQueryId: {
+                    readonly type: "string";
+                    readonly minLength: 1;
+                    readonly maxLength: 128;
+                    readonly description: "The `id` of the DCQL credential query this credential was presented for — the key it arrived under in the OpenID4VP `vp_token`.";
+                };
+                readonly format: {
+                    readonly type: "string";
+                    readonly minLength: 1;
+                    readonly maxLength: 64;
+                    readonly description: "The credential format identifier, as OpenID4VP names it (`dc+sd-jwt`, `mso_mdoc`). Carried verbatim.";
+                };
+                readonly issuer: {
+                    readonly type: "string";
+                    readonly minLength: 1;
+                    readonly maxLength: 2048;
+                    readonly description: "The identifier of the credential's issuer as the community verified it — a DID, or for an issuer identified by an X.509 certificate, the certificate subject or hash the community's policy names it by.";
+                };
+                readonly vct: {
+                    readonly type: "string";
+                    readonly minLength: 1;
+                    readonly maxLength: 2048;
+                    readonly description: "The SD-JWT VC credential type (`vct`). Present for SD-JWT VC credentials.";
+                };
+            };
+        };
+        readonly Evidence: {
+            readonly title: "Evidence";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["satisfied", "holder", "credentials"];
+            readonly description: "What a verified wallet presentation established. Never claim values.";
+            readonly properties: {
+                readonly satisfied: {
+                    readonly type: "boolean";
+                    readonly description: "Whether the presentation satisfies the criterion's DCQL query. Satisfying the query is not admission: the community still decides the join under the criterion's `admission`.";
+                };
+                readonly holder: {
+                    readonly type: "string";
+                    readonly minLength: 1;
+                    readonly maxLength: 2048;
+                    readonly description: "The identifier of the key that held the presented credentials — for an SD-JWT VC, the `did:key` of its `cnf` key. Recorded beside the applicant DID, never as it.";
+                };
+                readonly credentials: {
+                    readonly type: "array";
+                    readonly minItems: 1;
+                    readonly maxItems: 32;
+                    readonly items: {
+                        readonly $ref: "#/$defs/PresentedCredential";
+                    };
+                    readonly description: "The credentials presented, one entry each.";
+                };
+                readonly heldUntil: {
+                    readonly type: "string";
+                    readonly format: "date-time";
+                    readonly description: "When evidence not yet recorded on a join request is discarded if the applicant has not submitted under the session's criterion. Absent when the evidence is recorded on a request.";
+                };
+            };
+        };
+        readonly Response: {
+            readonly $anchor: "response";
+            readonly title: "VTC Join-Requests Wallet Session Status — response payload";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["sessionId", "state", "expiresAt"];
+            readonly properties: {
+                readonly sessionId: {
+                    readonly type: "string";
+                    readonly minLength: 16;
+                    readonly maxLength: 128;
+                };
+                readonly state: {
+                    readonly type: "string";
+                    readonly enum: readonly ["awaitingWallet", "requestRetrieved", "presented", "refused", "expired"];
+                    readonly description: "`awaitingWallet`: no wallet has fetched the request object. `requestRetrieved`: a wallet has fetched it and not yet answered. `presented`: a wallet answered and the presentation verified; see `evidence`. `refused`: a wallet answered and the community did not accept the answer, or the wallet declined; see `reason`. `expired`: the session closed unanswered.";
+                };
+                readonly expiresAt: {
+                    readonly type: "string";
+                    readonly format: "date-time";
+                    readonly description: "When the session closes, or closed, if unanswered.";
+                };
+                readonly requestId: {
+                    readonly type: "string";
+                    readonly minLength: 1;
+                    readonly maxLength: 128;
+                    readonly description: "The join request the session's evidence is recorded on. Present when the session was bound to one, or its evidence has since been attached to one by a submission.";
+                };
+                readonly evidence: {
+                    readonly $ref: "#/$defs/Evidence";
+                    readonly description: "Present only when `state` is `presented`.";
+                };
+                readonly reason: {
+                    readonly type: "string";
+                    readonly enum: readonly ["presentationInvalid", "queryNotSatisfied", "issuerNotTrusted", "statusNotValid", "walletDeclined"];
+                    readonly description: "Why the session ended `refused`. `presentationInvalid`: the response or a presentation failed verification — decryption, `state`, signature, key binding, nonce or audience. `queryNotSatisfied`: the presentations verified but do not satisfy the query. `issuerNotTrusted`: a credential's issuer is not one the criterion accepts. `statusNotValid`: a credential's status is revoked or suspended, or could not be read. `walletDeclined`: the wallet answered with an OpenID4VP error, such as `access_denied`. Present only when `state` is `refused`.";
+                };
+                readonly ext: {
+                    readonly $ref: "#/$defs/Ext";
+                };
+            };
+        };
+        readonly Ext: {
+            readonly title: "Ext";
+            readonly description: "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.";
+            readonly type: "object";
+            readonly minProperties: 1;
+            readonly additionalProperties: true;
+            readonly propertyNames: {
+                readonly pattern: "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$";
+            };
+        };
+    };
+};
+/**
+ * SPEC.md §7.2 policy for the request variant, from this specification's
+ * front matter. Pass to `consumeInbound` — items 5b, 7 and 8 are
+ * per-specification and cannot be derived from the document alone, and
+ * item 2 needs the schema this carries.
+ */
+export declare const SPEC: {
+    readonly typeUri: "https://trusttasks.org/spec/vtc/join-requests/wallet-session/status/0.1";
+    readonly isBearer: false;
+    readonly isProofRequired: true;
+    readonly isRecipientRequired: true;
+    readonly isIssuedAtRequired: false;
+    readonly payloadSchema: {
+        readonly $schema: "https://json-schema.org/draft/2020-12/schema";
+        readonly $id: "https://trusttasks.org/spec/vtc/join-requests/wallet-session/status/0.1";
+        readonly title: "VTC Join-Requests Wallet Session Status — payload";
+        readonly description: "An applicant reads the state of a wallet presentation session they opened with vtc/join-requests/wallet-session/start, and, once a wallet has answered, what the presentation established. The applicant is the document proof's signer. The outer document members are owned by the framework — SPEC §6.3.";
+        readonly type: "object";
+        readonly additionalProperties: false;
+        readonly required: readonly ["sessionId"];
+        readonly properties: {
+            readonly sessionId: {
+                readonly type: "string";
+                readonly minLength: 16;
+                readonly maxLength: 128;
+                readonly description: "The session to read, as vtc/join-requests/wallet-session/start returned it.";
+            };
+            readonly ext: {
+                readonly $ref: "#/$defs/Ext";
+            };
+        };
+        readonly $defs: {
+            readonly PresentedCredential: {
+                readonly title: "PresentedCredential";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["credentialQueryId", "format", "issuer"];
+                readonly description: "One credential the wallet presented, described without any of its claim values.";
+                readonly properties: {
+                    readonly credentialQueryId: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                        readonly maxLength: 128;
+                        readonly description: "The `id` of the DCQL credential query this credential was presented for — the key it arrived under in the OpenID4VP `vp_token`.";
+                    };
+                    readonly format: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                        readonly maxLength: 64;
+                        readonly description: "The credential format identifier, as OpenID4VP names it (`dc+sd-jwt`, `mso_mdoc`). Carried verbatim.";
+                    };
+                    readonly issuer: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                        readonly maxLength: 2048;
+                        readonly description: "The identifier of the credential's issuer as the community verified it — a DID, or for an issuer identified by an X.509 certificate, the certificate subject or hash the community's policy names it by.";
+                    };
+                    readonly vct: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                        readonly maxLength: 2048;
+                        readonly description: "The SD-JWT VC credential type (`vct`). Present for SD-JWT VC credentials.";
+                    };
+                };
+            };
+            readonly Evidence: {
+                readonly title: "Evidence";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["satisfied", "holder", "credentials"];
+                readonly description: "What a verified wallet presentation established. Never claim values.";
+                readonly properties: {
+                    readonly satisfied: {
+                        readonly type: "boolean";
+                        readonly description: "Whether the presentation satisfies the criterion's DCQL query. Satisfying the query is not admission: the community still decides the join under the criterion's `admission`.";
+                    };
+                    readonly holder: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                        readonly maxLength: 2048;
+                        readonly description: "The identifier of the key that held the presented credentials — for an SD-JWT VC, the `did:key` of its `cnf` key. Recorded beside the applicant DID, never as it.";
+                    };
+                    readonly credentials: {
+                        readonly type: "array";
+                        readonly minItems: 1;
+                        readonly maxItems: 32;
+                        readonly items: {
+                            readonly $ref: "#/$defs/PresentedCredential";
+                        };
+                        readonly description: "The credentials presented, one entry each.";
+                    };
+                    readonly heldUntil: {
+                        readonly type: "string";
+                        readonly format: "date-time";
+                        readonly description: "When evidence not yet recorded on a join request is discarded if the applicant has not submitted under the session's criterion. Absent when the evidence is recorded on a request.";
+                    };
+                };
+            };
+            readonly Response: {
+                readonly $anchor: "response";
+                readonly title: "VTC Join-Requests Wallet Session Status — response payload";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["sessionId", "state", "expiresAt"];
+                readonly properties: {
+                    readonly sessionId: {
+                        readonly type: "string";
+                        readonly minLength: 16;
+                        readonly maxLength: 128;
+                    };
+                    readonly state: {
+                        readonly type: "string";
+                        readonly enum: readonly ["awaitingWallet", "requestRetrieved", "presented", "refused", "expired"];
+                        readonly description: "`awaitingWallet`: no wallet has fetched the request object. `requestRetrieved`: a wallet has fetched it and not yet answered. `presented`: a wallet answered and the presentation verified; see `evidence`. `refused`: a wallet answered and the community did not accept the answer, or the wallet declined; see `reason`. `expired`: the session closed unanswered.";
+                    };
+                    readonly expiresAt: {
+                        readonly type: "string";
+                        readonly format: "date-time";
+                        readonly description: "When the session closes, or closed, if unanswered.";
+                    };
+                    readonly requestId: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                        readonly maxLength: 128;
+                        readonly description: "The join request the session's evidence is recorded on. Present when the session was bound to one, or its evidence has since been attached to one by a submission.";
+                    };
+                    readonly evidence: {
+                        readonly $ref: "#/$defs/Evidence";
+                        readonly description: "Present only when `state` is `presented`.";
+                    };
+                    readonly reason: {
+                        readonly type: "string";
+                        readonly enum: readonly ["presentationInvalid", "queryNotSatisfied", "issuerNotTrusted", "statusNotValid", "walletDeclined"];
+                        readonly description: "Why the session ended `refused`. `presentationInvalid`: the response or a presentation failed verification — decryption, `state`, signature, key binding, nonce or audience. `queryNotSatisfied`: the presentations verified but do not satisfy the query. `issuerNotTrusted`: a credential's issuer is not one the criterion accepts. `statusNotValid`: a credential's status is revoked or suspended, or could not be read. `walletDeclined`: the wallet answered with an OpenID4VP error, such as `access_denied`. Present only when `state` is `refused`.";
+                    };
+                    readonly ext: {
+                        readonly $ref: "#/$defs/Ext";
+                    };
+                };
+            };
+            readonly Ext: {
+                readonly title: "Ext";
+                readonly description: "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.";
+                readonly type: "object";
+                readonly minProperties: 1;
+                readonly additionalProperties: true;
+                readonly propertyNames: {
+                    readonly pattern: "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$";
+                };
+            };
+        };
+    };
+};
+/**
+ * SPEC.md §7.2 policy for the success-response variant. `isRecipientRequired`
+ * tracks the *issuer* party's requirement because a response swaps the
+ * parties (§7.3 item 5).
+ */
+export declare const RESPONSE_SPEC: {
+    readonly typeUri: "https://trusttasks.org/spec/vtc/join-requests/wallet-session/status/0.1#response";
+    readonly isBearer: false;
+    readonly isProofRequired: true;
+    readonly isRecipientRequired: true;
+    readonly isIssuedAtRequired: false;
+    readonly payloadSchema: {
+        readonly $schema: "https://json-schema.org/draft/2020-12/schema";
+        readonly $ref: "#/$defs/Response";
+        readonly $defs: {
+            readonly PresentedCredential: {
+                readonly title: "PresentedCredential";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["credentialQueryId", "format", "issuer"];
+                readonly description: "One credential the wallet presented, described without any of its claim values.";
+                readonly properties: {
+                    readonly credentialQueryId: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                        readonly maxLength: 128;
+                        readonly description: "The `id` of the DCQL credential query this credential was presented for — the key it arrived under in the OpenID4VP `vp_token`.";
+                    };
+                    readonly format: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                        readonly maxLength: 64;
+                        readonly description: "The credential format identifier, as OpenID4VP names it (`dc+sd-jwt`, `mso_mdoc`). Carried verbatim.";
+                    };
+                    readonly issuer: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                        readonly maxLength: 2048;
+                        readonly description: "The identifier of the credential's issuer as the community verified it — a DID, or for an issuer identified by an X.509 certificate, the certificate subject or hash the community's policy names it by.";
+                    };
+                    readonly vct: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                        readonly maxLength: 2048;
+                        readonly description: "The SD-JWT VC credential type (`vct`). Present for SD-JWT VC credentials.";
+                    };
+                };
+            };
+            readonly Evidence: {
+                readonly title: "Evidence";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["satisfied", "holder", "credentials"];
+                readonly description: "What a verified wallet presentation established. Never claim values.";
+                readonly properties: {
+                    readonly satisfied: {
+                        readonly type: "boolean";
+                        readonly description: "Whether the presentation satisfies the criterion's DCQL query. Satisfying the query is not admission: the community still decides the join under the criterion's `admission`.";
+                    };
+                    readonly holder: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                        readonly maxLength: 2048;
+                        readonly description: "The identifier of the key that held the presented credentials — for an SD-JWT VC, the `did:key` of its `cnf` key. Recorded beside the applicant DID, never as it.";
+                    };
+                    readonly credentials: {
+                        readonly type: "array";
+                        readonly minItems: 1;
+                        readonly maxItems: 32;
+                        readonly items: {
+                            readonly $ref: "#/$defs/PresentedCredential";
+                        };
+                        readonly description: "The credentials presented, one entry each.";
+                    };
+                    readonly heldUntil: {
+                        readonly type: "string";
+                        readonly format: "date-time";
+                        readonly description: "When evidence not yet recorded on a join request is discarded if the applicant has not submitted under the session's criterion. Absent when the evidence is recorded on a request.";
+                    };
+                };
+            };
+            readonly Response: {
+                readonly $anchor: "response";
+                readonly title: "VTC Join-Requests Wallet Session Status — response payload";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["sessionId", "state", "expiresAt"];
+                readonly properties: {
+                    readonly sessionId: {
+                        readonly type: "string";
+                        readonly minLength: 16;
+                        readonly maxLength: 128;
+                    };
+                    readonly state: {
+                        readonly type: "string";
+                        readonly enum: readonly ["awaitingWallet", "requestRetrieved", "presented", "refused", "expired"];
+                        readonly description: "`awaitingWallet`: no wallet has fetched the request object. `requestRetrieved`: a wallet has fetched it and not yet answered. `presented`: a wallet answered and the presentation verified; see `evidence`. `refused`: a wallet answered and the community did not accept the answer, or the wallet declined; see `reason`. `expired`: the session closed unanswered.";
+                    };
+                    readonly expiresAt: {
+                        readonly type: "string";
+                        readonly format: "date-time";
+                        readonly description: "When the session closes, or closed, if unanswered.";
+                    };
+                    readonly requestId: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                        readonly maxLength: 128;
+                        readonly description: "The join request the session's evidence is recorded on. Present when the session was bound to one, or its evidence has since been attached to one by a submission.";
+                    };
+                    readonly evidence: {
+                        readonly $ref: "#/$defs/Evidence";
+                        readonly description: "Present only when `state` is `presented`.";
+                    };
+                    readonly reason: {
+                        readonly type: "string";
+                        readonly enum: readonly ["presentationInvalid", "queryNotSatisfied", "issuerNotTrusted", "statusNotValid", "walletDeclined"];
+                        readonly description: "Why the session ended `refused`. `presentationInvalid`: the response or a presentation failed verification — decryption, `state`, signature, key binding, nonce or audience. `queryNotSatisfied`: the presentations verified but do not satisfy the query. `issuerNotTrusted`: a credential's issuer is not one the criterion accepts. `statusNotValid`: a credential's status is revoked or suspended, or could not be read. `walletDeclined`: the wallet answered with an OpenID4VP error, such as `access_denied`. Present only when `state` is `refused`.";
+                    };
+                    readonly ext: {
+                        readonly $ref: "#/$defs/Ext";
+                    };
+                };
+            };
+            readonly Ext: {
+                readonly title: "Ext";
+                readonly description: "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.";
+                readonly type: "object";
+                readonly minProperties: 1;
+                readonly additionalProperties: true;
+                readonly propertyNames: {
+                    readonly pattern: "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$";
+                };
+            };
+        };
+    };
+};
+//# sourceMappingURL=payload.d.ts.map