@openvtc/trust-tasks 0.25.0 → 0.25.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +29 -0
- package/dist/_shared/components.d.ts +308 -2
- package/dist/_shared/components.d.ts.map +1 -1
- package/dist/device/list/0.1/payload.d.ts +4 -4
- package/dist/device/list/0.1/payload.d.ts.map +1 -1
- package/dist/device/list/0.1/payload.js +6 -2
- package/dist/device/list/0.1/payload.js.map +1 -1
- package/dist/device/list/0.2/payload.d.ts +4 -4
- package/dist/device/list/0.2/payload.d.ts.map +1 -1
- package/dist/device/list/0.2/payload.js +6 -2
- package/dist/device/list/0.2/payload.js.map +1 -1
- package/dist/device/register/0.1/payload.d.ts +4 -4
- package/dist/device/register/0.1/payload.d.ts.map +1 -1
- package/dist/device/register/0.1/payload.js +6 -2
- package/dist/device/register/0.1/payload.js.map +1 -1
- package/dist/device/register/0.2/payload.d.ts +4 -4
- package/dist/device/register/0.2/payload.d.ts.map +1 -1
- package/dist/device/register/0.2/payload.js +6 -2
- package/dist/device/register/0.2/payload.js.map +1 -1
- package/dist/index.d.ts +17 -0
- package/dist/index.d.ts.map +1 -1
- package/dist/index.js +17 -0
- package/dist/index.js.map +1 -1
- package/dist/provision/vta/_shared/0.1/vta.d.ts +16 -0
- package/dist/provision/vta/_shared/0.1/vta.d.ts.map +1 -0
- package/dist/provision/vta/_shared/0.1/vta.js +6 -0
- package/dist/provision/vta/_shared/0.1/vta.js.map +1 -0
- package/dist/provision/vta/claim/0.1/payload.d.ts +115 -0
- package/dist/provision/vta/claim/0.1/payload.d.ts.map +1 -0
- package/dist/provision/vta/claim/0.1/payload.js +69 -0
- package/dist/provision/vta/claim/0.1/payload.js.map +1 -0
- package/dist/provision/vta/redeem/0.1/payload.d.ts +371 -0
- package/dist/provision/vta/redeem/0.1/payload.d.ts.map +1 -0
- package/dist/provision/vta/redeem/0.1/payload.js +207 -0
- package/dist/provision/vta/redeem/0.1/payload.js.map +1 -0
- package/dist/vetting/_shared/0.1/hidden-vetting.d.ts +16 -0
- package/dist/vetting/_shared/0.1/hidden-vetting.d.ts.map +1 -0
- package/dist/vetting/_shared/0.1/hidden-vetting.js +6 -0
- package/dist/vetting/_shared/0.1/hidden-vetting.js.map +1 -0
- package/dist/vetting/attestation/0.1/payload.d.ts +94 -146
- package/dist/vetting/attestation/0.1/payload.d.ts.map +1 -1
- package/dist/vetting/attestation/0.1/payload.js +43 -43
- package/dist/vetting/attestation/0.1/payload.js.map +1 -1
- package/dist/vta/_shared/0.4/pcs-engine.d.ts +16 -0
- package/dist/vta/_shared/0.4/pcs-engine.d.ts.map +1 -0
- package/dist/vta/_shared/0.4/pcs-engine.js +6 -0
- package/dist/vta/_shared/0.4/pcs-engine.js.map +1 -0
- package/dist/vta/pcs/applications/create/0.1/payload.d.ts +1215 -0
- package/dist/vta/pcs/applications/create/0.1/payload.d.ts.map +1 -0
- package/dist/vta/pcs/applications/create/0.1/payload.js +724 -0
- package/dist/vta/pcs/applications/create/0.1/payload.js.map +1 -0
- package/dist/vta/pcs/applications/delete/0.1/payload.d.ts +253 -0
- package/dist/vta/pcs/applications/delete/0.1/payload.d.ts.map +1 -0
- package/dist/vta/pcs/applications/delete/0.1/payload.js +146 -0
- package/dist/vta/pcs/applications/delete/0.1/payload.js.map +1 -0
- package/dist/vta/pcs/applications/show/0.1/payload.d.ts +733 -0
- package/dist/vta/pcs/applications/show/0.1/payload.d.ts.map +1 -0
- package/dist/vta/pcs/applications/show/0.1/payload.js +450 -0
- package/dist/vta/pcs/applications/show/0.1/payload.js.map +1 -0
- package/dist/vta/pcs/attest/0.1/payload.d.ts +1456 -0
- package/dist/vta/pcs/attest/0.1/payload.d.ts.map +1 -0
- package/dist/vta/pcs/attest/0.1/payload.js +876 -0
- package/dist/vta/pcs/attest/0.1/payload.js.map +1 -0
- package/dist/vta/pcs/prove/0.1/payload.d.ts +1348 -0
- package/dist/vta/pcs/prove/0.1/payload.d.ts.map +1 -0
- package/dist/vta/pcs/prove/0.1/payload.js +804 -0
- package/dist/vta/pcs/prove/0.1/payload.js.map +1 -0
- package/dist/vta/pcs/root-accept/0.1/payload.d.ts +1100 -0
- package/dist/vta/pcs/root-accept/0.1/payload.d.ts.map +1 -0
- package/dist/vta/pcs/root-accept/0.1/payload.js +634 -0
- package/dist/vta/pcs/root-accept/0.1/payload.js.map +1 -0
- package/dist/vta/pcs/root-request/0.1/payload.d.ts +880 -0
- package/dist/vta/pcs/root-request/0.1/payload.d.ts.map +1 -0
- package/dist/vta/pcs/root-request/0.1/payload.js +496 -0
- package/dist/vta/pcs/root-request/0.1/payload.js.map +1 -0
- package/dist/vta/pcs/tokens/abandon/0.1/payload.d.ts +612 -0
- package/dist/vta/pcs/tokens/abandon/0.1/payload.d.ts.map +1 -0
- package/dist/vta/pcs/tokens/abandon/0.1/payload.js +355 -0
- package/dist/vta/pcs/tokens/abandon/0.1/payload.js.map +1 -0
- package/dist/vta/pcs/tokens/accept/0.1/payload.d.ts +1149 -0
- package/dist/vta/pcs/tokens/accept/0.1/payload.d.ts.map +1 -0
- package/dist/vta/pcs/tokens/accept/0.1/payload.js +657 -0
- package/dist/vta/pcs/tokens/accept/0.1/payload.js.map +1 -0
- package/dist/vta/pcs/tokens/request/0.1/payload.d.ts +908 -0
- package/dist/vta/pcs/tokens/request/0.1/payload.d.ts.map +1 -0
- package/dist/vta/pcs/tokens/request/0.1/payload.js +508 -0
- package/dist/vta/pcs/tokens/request/0.1/payload.js.map +1 -0
- package/dist/vta/pcs/verify-attestation/0.1/payload.d.ts +1423 -0
- package/dist/vta/pcs/verify-attestation/0.1/payload.d.ts.map +1 -0
- package/dist/vta/pcs/verify-attestation/0.1/payload.js +850 -0
- package/dist/vta/pcs/verify-attestation/0.1/payload.js.map +1 -0
- package/dist/vta/pcs/vetter/show/0.1/payload.d.ts +605 -0
- package/dist/vta/pcs/vetter/show/0.1/payload.d.ts.map +1 -0
- package/dist/vta/pcs/vetter/show/0.1/payload.js +351 -0
- package/dist/vta/pcs/vetter/show/0.1/payload.js.map +1 -0
- package/dist/vtc/vetting/hidden/publish/0.1/payload.d.ts +403 -486
- package/dist/vtc/vetting/hidden/publish/0.1/payload.d.ts.map +1 -1
- package/dist/vtc/vetting/hidden/publish/0.1/payload.js +240 -240
- package/dist/vtc/vetting/hidden/publish/0.1/payload.js.map +1 -1
- package/dist/vtc/vetting/hidden/show/0.1/payload.d.ts +482 -565
- package/dist/vtc/vetting/hidden/show/0.1/payload.d.ts.map +1 -1
- package/dist/vtc/vetting/hidden/show/0.1/payload.js +294 -294
- package/dist/vtc/vetting/hidden/show/0.1/payload.js.map +1 -1
- package/package.json +1 -1
- package/src/_shared/components.ts +312 -2
- package/src/device/list/0.1/payload.ts +6 -2
- package/src/device/list/0.2/payload.ts +6 -2
- package/src/device/register/0.1/payload.ts +6 -2
- package/src/device/register/0.2/payload.ts +6 -2
- package/src/index.ts +17 -0
- package/src/provision/vta/_shared/0.1/vta.ts +17 -0
- package/src/provision/vta/claim/0.1/payload.ts +88 -0
- package/src/provision/vta/redeem/0.1/payload.ts +255 -0
- package/src/vetting/_shared/0.1/hidden-vetting.ts +17 -0
- package/src/vetting/attestation/0.1/payload.ts +49 -101
- package/src/vta/_shared/0.4/pcs-engine.ts +17 -0
- package/src/vta/pcs/applications/create/0.1/payload.ts +768 -0
- package/src/vta/pcs/applications/delete/0.1/payload.ts +182 -0
- package/src/vta/pcs/applications/show/0.1/payload.ts +482 -0
- package/src/vta/pcs/attest/0.1/payload.ts +943 -0
- package/src/vta/pcs/prove/0.1/payload.ts +845 -0
- package/src/vta/pcs/root-accept/0.1/payload.ts +681 -0
- package/src/vta/pcs/root-request/0.1/payload.ts +559 -0
- package/src/vta/pcs/tokens/abandon/0.1/payload.ts +392 -0
- package/src/vta/pcs/tokens/accept/0.1/payload.ts +713 -0
- package/src/vta/pcs/tokens/request/0.1/payload.ts +581 -0
- package/src/vta/pcs/verify-attestation/0.1/payload.ts +888 -0
- package/src/vta/pcs/vetter/show/0.1/payload.ts +387 -0
- package/src/vtc/vetting/hidden/publish/0.1/payload.ts +247 -331
- package/src/vtc/vetting/hidden/show/0.1/payload.ts +295 -379
|
@@ -0,0 +1,1456 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
|
|
3
|
+
* Source: specs/vta/pcs/attest/0.1/payload.schema.json
|
|
4
|
+
*/
|
|
5
|
+
import type { Attestation, AttestationToken, CommunityParameters, Ext, Multibase, PublishedConfig, PublishedEvent, StatementMeta, TickLength, Tier } from "../../../../_shared/components.js";
|
|
6
|
+
/**
|
|
7
|
+
* A vetter's client asks its VTA to attest, after the human check, that an applicant was vetted: the VTA spends a token and makes an attestation that names no vetter.
|
|
8
|
+
*/
|
|
9
|
+
export interface VTAPCSAttestPayload {
|
|
10
|
+
/**
|
|
11
|
+
* The context the engine belongs to. Its key is derived from this context's base.
|
|
12
|
+
*/
|
|
13
|
+
contextId: string;
|
|
14
|
+
/**
|
|
15
|
+
* The community's DID: the helper whose parameters the engine runs under.
|
|
16
|
+
*/
|
|
17
|
+
community: string;
|
|
18
|
+
/**
|
|
19
|
+
* The community's published hidden-vetting parameters, copied verbatim from its join manifest.
|
|
20
|
+
*/
|
|
21
|
+
parameters: CommunityParameters;
|
|
22
|
+
/**
|
|
23
|
+
* The applicant's PCS identifier, from its vetting/request.
|
|
24
|
+
*/
|
|
25
|
+
applicantId: string;
|
|
26
|
+
meta: AttestMeta;
|
|
27
|
+
/**
|
|
28
|
+
* A token label to spend under in preference — an event label the vetter is attesting at.
|
|
29
|
+
*/
|
|
30
|
+
preferLabel?: string;
|
|
31
|
+
ext?: Ext;
|
|
32
|
+
}
|
|
33
|
+
/**
|
|
34
|
+
* What the vetter checked in the session, as vetting/attestation/0.1's StatementMeta states it, without the token members: the engine fills those from the token it spends.
|
|
35
|
+
*/
|
|
36
|
+
export interface AttestMeta {
|
|
37
|
+
community: string;
|
|
38
|
+
requirementsDigest: string;
|
|
39
|
+
method: "inPerson" | "video" | "priorAcquaintance";
|
|
40
|
+
/**
|
|
41
|
+
* @minItems 1
|
|
42
|
+
*/
|
|
43
|
+
claimsVerified: [string, ...string[]];
|
|
44
|
+
livenessConfirmed: boolean;
|
|
45
|
+
declaredRelationship: "none" | "family" | "sameEmployer" | "closeFriend" | "other";
|
|
46
|
+
identityCommitment: string;
|
|
47
|
+
cardDigestMultibase: string;
|
|
48
|
+
validFrom: string;
|
|
49
|
+
validUntil: string;
|
|
50
|
+
}
|
|
51
|
+
export interface VTAPCSAttestResponsePayload {
|
|
52
|
+
attestation: Attestation;
|
|
53
|
+
ext?: Ext;
|
|
54
|
+
}
|
|
55
|
+
/** Shared definitions this specification references, re-exported under the names it used to declare them with. */
|
|
56
|
+
export type { Attestation, AttestationToken, CommunityParameters, Ext, Multibase, PublishedConfig, PublishedEvent, StatementMeta, TickLength, Tier };
|
|
57
|
+
/** Trust Task type URI. */
|
|
58
|
+
export declare const TYPE_URI: "https://trusttasks.org/spec/vta/pcs/attest/0.1";
|
|
59
|
+
/** Stable alias for this specification's request payload shape. */
|
|
60
|
+
export type Payload = VTAPCSAttestPayload;
|
|
61
|
+
/** Trust Task response type URI (request type URI + "#response"). */
|
|
62
|
+
export declare const RESPONSE_TYPE_URI: "https://trusttasks.org/spec/vta/pcs/attest/0.1#response";
|
|
63
|
+
/** Stable alias for this specification's success-response payload shape. */
|
|
64
|
+
export type Response = VTAPCSAttestResponsePayload;
|
|
65
|
+
/**
|
|
66
|
+
* This specification's payload schema, as a value.
|
|
67
|
+
*
|
|
68
|
+
* SPEC.md §7.2 item 2 is performed against this. It is shipped as data
|
|
69
|
+
* rather than only as a `.json` file because TypeScript types are erased
|
|
70
|
+
* at runtime: without a schema a consumer has nothing to validate, and
|
|
71
|
+
* every REQUIRED payload member is optional in practice. Cross-file
|
|
72
|
+
* `$ref`s are already inlined, so it needs no resolver.
|
|
73
|
+
*/
|
|
74
|
+
export declare const PAYLOAD_SCHEMA: {
|
|
75
|
+
readonly $schema: "https://json-schema.org/draft/2020-12/schema";
|
|
76
|
+
readonly $id: "https://trusttasks.org/spec/vta/pcs/attest/0.1";
|
|
77
|
+
readonly title: "VTA PCS — Attest — payload";
|
|
78
|
+
readonly description: "A vetter's client asks its VTA to attest, after the human check, that an applicant was vetted: the VTA spends a token and makes an attestation that names no vetter.";
|
|
79
|
+
readonly type: "object";
|
|
80
|
+
readonly additionalProperties: false;
|
|
81
|
+
readonly required: readonly ["contextId", "community", "parameters", "applicantId", "meta"];
|
|
82
|
+
readonly properties: {
|
|
83
|
+
readonly contextId: {
|
|
84
|
+
readonly type: "string";
|
|
85
|
+
readonly minLength: 1;
|
|
86
|
+
readonly description: "The context the engine belongs to. Its key is derived from this context's base.";
|
|
87
|
+
};
|
|
88
|
+
readonly community: {
|
|
89
|
+
readonly type: "string";
|
|
90
|
+
readonly minLength: 1;
|
|
91
|
+
readonly description: "The community's DID: the helper whose parameters the engine runs under.";
|
|
92
|
+
};
|
|
93
|
+
readonly parameters: {
|
|
94
|
+
readonly $ref: "#/$defs/CommunityParameters";
|
|
95
|
+
readonly description: "The community's published hidden-vetting parameters, copied verbatim from its join manifest.";
|
|
96
|
+
};
|
|
97
|
+
readonly applicantId: {
|
|
98
|
+
readonly type: "string";
|
|
99
|
+
readonly pattern: "^z[1-9A-HJ-NP-Za-km-z]+$";
|
|
100
|
+
readonly description: "The applicant's PCS identifier, from its vetting/request.";
|
|
101
|
+
};
|
|
102
|
+
readonly meta: {
|
|
103
|
+
readonly $ref: "#/$defs/AttestMeta";
|
|
104
|
+
};
|
|
105
|
+
readonly preferLabel: {
|
|
106
|
+
readonly type: "string";
|
|
107
|
+
readonly minLength: 1;
|
|
108
|
+
readonly maxLength: 128;
|
|
109
|
+
readonly description: "A token label to spend under in preference — an event label the vetter is attesting at.";
|
|
110
|
+
};
|
|
111
|
+
readonly ext: {
|
|
112
|
+
readonly $ref: "#/$defs/Ext";
|
|
113
|
+
};
|
|
114
|
+
};
|
|
115
|
+
readonly $defs: {
|
|
116
|
+
readonly AttestMeta: {
|
|
117
|
+
readonly title: "AttestMeta";
|
|
118
|
+
readonly description: "What the vetter checked in the session, as vetting/attestation/0.1's StatementMeta states it, without the token members: the engine fills those from the token it spends.";
|
|
119
|
+
readonly type: "object";
|
|
120
|
+
readonly additionalProperties: false;
|
|
121
|
+
readonly required: readonly ["community", "requirementsDigest", "method", "claimsVerified", "livenessConfirmed", "declaredRelationship", "identityCommitment", "cardDigestMultibase", "validFrom", "validUntil"];
|
|
122
|
+
readonly properties: {
|
|
123
|
+
readonly community: {
|
|
124
|
+
readonly type: "string";
|
|
125
|
+
readonly minLength: 1;
|
|
126
|
+
};
|
|
127
|
+
readonly requirementsDigest: {
|
|
128
|
+
readonly type: "string";
|
|
129
|
+
readonly minLength: 1;
|
|
130
|
+
};
|
|
131
|
+
readonly method: {
|
|
132
|
+
readonly type: "string";
|
|
133
|
+
readonly enum: readonly ["inPerson", "video", "priorAcquaintance"];
|
|
134
|
+
};
|
|
135
|
+
readonly claimsVerified: {
|
|
136
|
+
readonly type: "array";
|
|
137
|
+
readonly minItems: 1;
|
|
138
|
+
readonly items: {
|
|
139
|
+
readonly type: "string";
|
|
140
|
+
readonly minLength: 1;
|
|
141
|
+
};
|
|
142
|
+
};
|
|
143
|
+
readonly livenessConfirmed: {
|
|
144
|
+
readonly type: "boolean";
|
|
145
|
+
};
|
|
146
|
+
readonly declaredRelationship: {
|
|
147
|
+
readonly type: "string";
|
|
148
|
+
readonly enum: readonly ["none", "family", "sameEmployer", "closeFriend", "other"];
|
|
149
|
+
};
|
|
150
|
+
readonly identityCommitment: {
|
|
151
|
+
readonly type: "string";
|
|
152
|
+
readonly pattern: "^z[1-9A-HJ-NP-Za-km-z]+$";
|
|
153
|
+
};
|
|
154
|
+
readonly cardDigestMultibase: {
|
|
155
|
+
readonly type: "string";
|
|
156
|
+
readonly pattern: "^z[1-9A-HJ-NP-Za-km-z]+$";
|
|
157
|
+
};
|
|
158
|
+
readonly validFrom: {
|
|
159
|
+
readonly type: "string";
|
|
160
|
+
readonly format: "date";
|
|
161
|
+
};
|
|
162
|
+
readonly validUntil: {
|
|
163
|
+
readonly type: "string";
|
|
164
|
+
readonly format: "date";
|
|
165
|
+
};
|
|
166
|
+
};
|
|
167
|
+
};
|
|
168
|
+
readonly Response: {
|
|
169
|
+
readonly $anchor: "response";
|
|
170
|
+
readonly title: "VTA PCS — Attest — response payload";
|
|
171
|
+
readonly type: "object";
|
|
172
|
+
readonly additionalProperties: false;
|
|
173
|
+
readonly required: readonly ["attestation"];
|
|
174
|
+
readonly properties: {
|
|
175
|
+
readonly attestation: {
|
|
176
|
+
readonly $ref: "#/$defs/Attestation";
|
|
177
|
+
};
|
|
178
|
+
readonly ext: {
|
|
179
|
+
readonly $ref: "#/$defs/Ext";
|
|
180
|
+
};
|
|
181
|
+
};
|
|
182
|
+
};
|
|
183
|
+
readonly Ext: {
|
|
184
|
+
readonly title: "Ext";
|
|
185
|
+
readonly description: "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.";
|
|
186
|
+
readonly type: "object";
|
|
187
|
+
readonly minProperties: 1;
|
|
188
|
+
readonly additionalProperties: true;
|
|
189
|
+
readonly propertyNames: {
|
|
190
|
+
readonly pattern: "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$";
|
|
191
|
+
};
|
|
192
|
+
};
|
|
193
|
+
readonly Attestation: {
|
|
194
|
+
readonly title: "Attestation";
|
|
195
|
+
readonly description: "An attestation as a vetter hands it to an applicant: the payload of vetting/attestation/0.1, without its `ext`. The engine produces it from vta/pcs/attest and takes it into vta/pcs/verify-attestation.";
|
|
196
|
+
readonly type: "object";
|
|
197
|
+
readonly additionalProperties: false;
|
|
198
|
+
readonly required: readonly ["suite", "attestation", "meta", "token"];
|
|
199
|
+
readonly properties: {
|
|
200
|
+
readonly suite: {
|
|
201
|
+
readonly type: "string";
|
|
202
|
+
readonly minLength: 1;
|
|
203
|
+
readonly maxLength: 64;
|
|
204
|
+
readonly description: "The suite the attestation was made under, as the community publishes it.";
|
|
205
|
+
};
|
|
206
|
+
readonly attestation: {
|
|
207
|
+
readonly $ref: "#/$defs/Multibase";
|
|
208
|
+
readonly description: "The attestation: a tag, a shown class credential and a proof. It names no vetter.";
|
|
209
|
+
};
|
|
210
|
+
readonly meta: {
|
|
211
|
+
readonly $ref: "#/$defs/StatementMeta";
|
|
212
|
+
};
|
|
213
|
+
readonly token: {
|
|
214
|
+
readonly $ref: "#/$defs/AttestationToken";
|
|
215
|
+
};
|
|
216
|
+
};
|
|
217
|
+
};
|
|
218
|
+
readonly AttestationToken: {
|
|
219
|
+
readonly title: "AttestationToken";
|
|
220
|
+
readonly description: "The attestation token spent on one attestation: the label it was drawn under, the serial its spend reveals, and its re-randomised signature. The same members as `token` in vetting/attestation/0.1.";
|
|
221
|
+
readonly type: "object";
|
|
222
|
+
readonly additionalProperties: false;
|
|
223
|
+
readonly required: readonly ["label", "serial", "shown"];
|
|
224
|
+
readonly properties: {
|
|
225
|
+
readonly label: {
|
|
226
|
+
readonly type: "string";
|
|
227
|
+
readonly minLength: 1;
|
|
228
|
+
readonly maxLength: 128;
|
|
229
|
+
readonly description: "The token label spent under.";
|
|
230
|
+
};
|
|
231
|
+
readonly serial: {
|
|
232
|
+
readonly $ref: "#/$defs/Multibase";
|
|
233
|
+
readonly description: "The serial revealed by the spend.";
|
|
234
|
+
};
|
|
235
|
+
readonly shown: {
|
|
236
|
+
readonly $ref: "#/$defs/Multibase";
|
|
237
|
+
readonly description: "The re-randomised token signature, verifiable under the published token key.";
|
|
238
|
+
};
|
|
239
|
+
};
|
|
240
|
+
};
|
|
241
|
+
readonly Multibase: {
|
|
242
|
+
readonly title: "Multibase";
|
|
243
|
+
readonly description: "A binary value, multibase base58btc over the suite's canonical encoding.";
|
|
244
|
+
readonly type: "string";
|
|
245
|
+
readonly pattern: "^z[1-9A-HJ-NP-Za-km-z]+$";
|
|
246
|
+
};
|
|
247
|
+
readonly StatementMeta: {
|
|
248
|
+
readonly type: "object";
|
|
249
|
+
readonly additionalProperties: false;
|
|
250
|
+
readonly required: readonly ["community", "requirementsDigest", "method", "claimsVerified", "livenessConfirmed", "declaredRelationship", "identityCommitment", "cardDigestMultibase", "validFrom", "validUntil", "tokenLabel", "tokenSerial"];
|
|
251
|
+
readonly description: "What a Vetting Statement would have said, minus its issuer.";
|
|
252
|
+
readonly properties: {
|
|
253
|
+
readonly community: {
|
|
254
|
+
readonly type: "string";
|
|
255
|
+
readonly minLength: 1;
|
|
256
|
+
readonly description: "The community this attestation is for. An attestation is not portable between communities.";
|
|
257
|
+
};
|
|
258
|
+
readonly requirementsDigest: {
|
|
259
|
+
readonly type: "string";
|
|
260
|
+
readonly minLength: 1;
|
|
261
|
+
readonly description: "The digest of the criterion's requirements as the vetter read them.";
|
|
262
|
+
};
|
|
263
|
+
readonly method: {
|
|
264
|
+
readonly type: "string";
|
|
265
|
+
readonly enum: readonly ["inPerson", "video", "priorAcquaintance"];
|
|
266
|
+
readonly description: "How the vetter met the applicant.";
|
|
267
|
+
};
|
|
268
|
+
readonly claimsVerified: {
|
|
269
|
+
readonly type: "array";
|
|
270
|
+
readonly minItems: 1;
|
|
271
|
+
readonly items: {
|
|
272
|
+
readonly type: "string";
|
|
273
|
+
readonly minLength: 1;
|
|
274
|
+
};
|
|
275
|
+
readonly description: "The claim types the vetter checked.";
|
|
276
|
+
};
|
|
277
|
+
readonly livenessConfirmed: {
|
|
278
|
+
readonly type: "boolean";
|
|
279
|
+
readonly description: "Whether the vetter confirmed a live person.";
|
|
280
|
+
};
|
|
281
|
+
readonly declaredRelationship: {
|
|
282
|
+
readonly type: "string";
|
|
283
|
+
readonly enum: readonly ["none", "family", "sameEmployer", "closeFriend", "other"];
|
|
284
|
+
readonly description: "The relationship the vetter declared, which the community's independence rules count.";
|
|
285
|
+
};
|
|
286
|
+
readonly identityCommitment: {
|
|
287
|
+
readonly type: "string";
|
|
288
|
+
readonly pattern: "^z[1-9A-HJ-NP-Za-km-z]+$";
|
|
289
|
+
readonly description: "The commitment on the Vetting Card the applicant showed. Consistency across attestations is what stops two applicants pooling them.";
|
|
290
|
+
};
|
|
291
|
+
readonly cardDigestMultibase: {
|
|
292
|
+
readonly type: "string";
|
|
293
|
+
readonly pattern: "^z[1-9A-HJ-NP-Za-km-z]+$";
|
|
294
|
+
readonly description: "Digest of that card, as the vetter verified it.";
|
|
295
|
+
};
|
|
296
|
+
readonly validFrom: {
|
|
297
|
+
readonly type: "string";
|
|
298
|
+
readonly format: "date";
|
|
299
|
+
readonly description: "A DATE, never a timestamp: an exact time would let a community line an attestation up with a vetter's activity, which undoes the proof without touching it.";
|
|
300
|
+
};
|
|
301
|
+
readonly validUntil: {
|
|
302
|
+
readonly type: "string";
|
|
303
|
+
readonly format: "date";
|
|
304
|
+
readonly description: "A date, for the same reason.";
|
|
305
|
+
};
|
|
306
|
+
readonly tokenLabel: {
|
|
307
|
+
readonly type: "string";
|
|
308
|
+
readonly minLength: 1;
|
|
309
|
+
readonly maxLength: 128;
|
|
310
|
+
readonly description: "The token label spent, repeated inside the bound facts so it cannot be swapped in transit.";
|
|
311
|
+
};
|
|
312
|
+
readonly tokenSerial: {
|
|
313
|
+
readonly type: "string";
|
|
314
|
+
readonly pattern: "^z[1-9A-HJ-NP-Za-km-z]+$";
|
|
315
|
+
readonly description: "The token serial spent, likewise bound.";
|
|
316
|
+
};
|
|
317
|
+
};
|
|
318
|
+
};
|
|
319
|
+
readonly CommunityParameters: {
|
|
320
|
+
readonly title: "CommunityParameters";
|
|
321
|
+
readonly description: "The community's hidden-vetting parameters exactly as its join manifest publishes them, under the criterion's `vetting.ext`. The caller copies them in verbatim on every call that needs them, because the community rotates labels and the engine keeps no copy of its own: a stale copy costs the caller a refused proof, never a mistaken one.";
|
|
322
|
+
readonly $ref: "#/$defs/PublishedConfig";
|
|
323
|
+
};
|
|
324
|
+
readonly PublishedConfig: {
|
|
325
|
+
readonly title: "PublishedConfig";
|
|
326
|
+
readonly description: "The parameters exactly as they now appear in this community's join manifest, under vetting.ext. What an applicant and a vetter read.";
|
|
327
|
+
readonly type: "object";
|
|
328
|
+
readonly additionalProperties: false;
|
|
329
|
+
readonly required: readonly ["suite", "helperKey", "tokenKey", "vetterLabels", "tokenLabels", "dripPerTick", "tickLength", "events"];
|
|
330
|
+
readonly properties: {
|
|
331
|
+
readonly suite: {
|
|
332
|
+
readonly type: "string";
|
|
333
|
+
readonly minLength: 1;
|
|
334
|
+
};
|
|
335
|
+
readonly helperKey: {
|
|
336
|
+
readonly type: "string";
|
|
337
|
+
readonly minLength: 1;
|
|
338
|
+
readonly description: "The helper verification key, multibase — named for its role on the wire rather than for hvk.";
|
|
339
|
+
};
|
|
340
|
+
readonly tokenKey: {
|
|
341
|
+
readonly type: "string";
|
|
342
|
+
readonly minLength: 1;
|
|
343
|
+
readonly description: "The token verification key, multibase — named for its role on the wire rather than for tvk.";
|
|
344
|
+
};
|
|
345
|
+
readonly vetterLabels: {
|
|
346
|
+
readonly type: "array";
|
|
347
|
+
readonly items: {
|
|
348
|
+
readonly type: "string";
|
|
349
|
+
readonly minLength: 1;
|
|
350
|
+
};
|
|
351
|
+
readonly description: "Class labels published whole, e.g. vetter/2026-09 — a request names one of these, not the bare period.";
|
|
352
|
+
};
|
|
353
|
+
readonly tokenLabels: {
|
|
354
|
+
readonly type: "array";
|
|
355
|
+
readonly items: {
|
|
356
|
+
readonly type: "string";
|
|
357
|
+
readonly minLength: 1;
|
|
358
|
+
};
|
|
359
|
+
};
|
|
360
|
+
readonly dripPerTick: {
|
|
361
|
+
readonly type: "integer";
|
|
362
|
+
readonly minimum: 1;
|
|
363
|
+
};
|
|
364
|
+
readonly tickLength: {
|
|
365
|
+
readonly $ref: "#/$defs/TickLength";
|
|
366
|
+
};
|
|
367
|
+
readonly events: {
|
|
368
|
+
readonly type: "array";
|
|
369
|
+
readonly items: {
|
|
370
|
+
readonly $ref: "#/$defs/PublishedEvent";
|
|
371
|
+
};
|
|
372
|
+
};
|
|
373
|
+
};
|
|
374
|
+
};
|
|
375
|
+
readonly PublishedEvent: {
|
|
376
|
+
readonly title: "PublishedEvent";
|
|
377
|
+
readonly description: "The published shape drops approvedBy and graceDays: who approved is the community's own record, and a vetter is told closesAfter when its request is approved rather than being handed the raw grace period here.";
|
|
378
|
+
readonly type: "object";
|
|
379
|
+
readonly additionalProperties: false;
|
|
380
|
+
readonly required: readonly ["eventId", "startDate", "endDate", "groupFloor", "tiers"];
|
|
381
|
+
readonly properties: {
|
|
382
|
+
readonly eventId: {
|
|
383
|
+
readonly type: "string";
|
|
384
|
+
readonly minLength: 1;
|
|
385
|
+
};
|
|
386
|
+
readonly startDate: {
|
|
387
|
+
readonly type: "string";
|
|
388
|
+
readonly format: "date";
|
|
389
|
+
};
|
|
390
|
+
readonly endDate: {
|
|
391
|
+
readonly type: "string";
|
|
392
|
+
readonly format: "date";
|
|
393
|
+
};
|
|
394
|
+
readonly groupFloor: {
|
|
395
|
+
readonly type: "integer";
|
|
396
|
+
readonly minimum: 1;
|
|
397
|
+
};
|
|
398
|
+
readonly tiers: {
|
|
399
|
+
readonly type: "array";
|
|
400
|
+
readonly items: {
|
|
401
|
+
readonly $ref: "#/$defs/Tier";
|
|
402
|
+
};
|
|
403
|
+
};
|
|
404
|
+
};
|
|
405
|
+
};
|
|
406
|
+
readonly Tier: {
|
|
407
|
+
readonly title: "Tier";
|
|
408
|
+
readonly type: "object";
|
|
409
|
+
readonly additionalProperties: false;
|
|
410
|
+
readonly required: readonly ["name", "dripPerTick"];
|
|
411
|
+
readonly properties: {
|
|
412
|
+
readonly name: {
|
|
413
|
+
readonly type: "string";
|
|
414
|
+
readonly minLength: 1;
|
|
415
|
+
readonly description: "How the menu names it: desk, busy-desk.";
|
|
416
|
+
};
|
|
417
|
+
readonly dripPerTick: {
|
|
418
|
+
readonly type: "integer";
|
|
419
|
+
readonly minimum: 1;
|
|
420
|
+
readonly description: "How many tokens a tick under this tier yields.";
|
|
421
|
+
};
|
|
422
|
+
};
|
|
423
|
+
};
|
|
424
|
+
readonly TickLength: {
|
|
425
|
+
readonly title: "TickLength";
|
|
426
|
+
readonly type: "string";
|
|
427
|
+
readonly pattern: "^P(?:\\d+D(?:T\\d+H)?|T\\d+H)$";
|
|
428
|
+
readonly description: "The length of one tick of the drip, as an ISO 8601 duration in days and/or hours — at least `PT1H`. A label's tick `t` is the window starting `t` tick lengths after the label's start (`vtc/vetting/vetters/pcs-tokens`).";
|
|
429
|
+
};
|
|
430
|
+
};
|
|
431
|
+
};
|
|
432
|
+
/** As {@link PAYLOAD_SCHEMA}, for the success-response variant. */
|
|
433
|
+
export declare const RESPONSE_PAYLOAD_SCHEMA: {
|
|
434
|
+
readonly $schema: "https://json-schema.org/draft/2020-12/schema";
|
|
435
|
+
readonly $ref: "#/$defs/Response";
|
|
436
|
+
readonly $defs: {
|
|
437
|
+
readonly AttestMeta: {
|
|
438
|
+
readonly title: "AttestMeta";
|
|
439
|
+
readonly description: "What the vetter checked in the session, as vetting/attestation/0.1's StatementMeta states it, without the token members: the engine fills those from the token it spends.";
|
|
440
|
+
readonly type: "object";
|
|
441
|
+
readonly additionalProperties: false;
|
|
442
|
+
readonly required: readonly ["community", "requirementsDigest", "method", "claimsVerified", "livenessConfirmed", "declaredRelationship", "identityCommitment", "cardDigestMultibase", "validFrom", "validUntil"];
|
|
443
|
+
readonly properties: {
|
|
444
|
+
readonly community: {
|
|
445
|
+
readonly type: "string";
|
|
446
|
+
readonly minLength: 1;
|
|
447
|
+
};
|
|
448
|
+
readonly requirementsDigest: {
|
|
449
|
+
readonly type: "string";
|
|
450
|
+
readonly minLength: 1;
|
|
451
|
+
};
|
|
452
|
+
readonly method: {
|
|
453
|
+
readonly type: "string";
|
|
454
|
+
readonly enum: readonly ["inPerson", "video", "priorAcquaintance"];
|
|
455
|
+
};
|
|
456
|
+
readonly claimsVerified: {
|
|
457
|
+
readonly type: "array";
|
|
458
|
+
readonly minItems: 1;
|
|
459
|
+
readonly items: {
|
|
460
|
+
readonly type: "string";
|
|
461
|
+
readonly minLength: 1;
|
|
462
|
+
};
|
|
463
|
+
};
|
|
464
|
+
readonly livenessConfirmed: {
|
|
465
|
+
readonly type: "boolean";
|
|
466
|
+
};
|
|
467
|
+
readonly declaredRelationship: {
|
|
468
|
+
readonly type: "string";
|
|
469
|
+
readonly enum: readonly ["none", "family", "sameEmployer", "closeFriend", "other"];
|
|
470
|
+
};
|
|
471
|
+
readonly identityCommitment: {
|
|
472
|
+
readonly type: "string";
|
|
473
|
+
readonly pattern: "^z[1-9A-HJ-NP-Za-km-z]+$";
|
|
474
|
+
};
|
|
475
|
+
readonly cardDigestMultibase: {
|
|
476
|
+
readonly type: "string";
|
|
477
|
+
readonly pattern: "^z[1-9A-HJ-NP-Za-km-z]+$";
|
|
478
|
+
};
|
|
479
|
+
readonly validFrom: {
|
|
480
|
+
readonly type: "string";
|
|
481
|
+
readonly format: "date";
|
|
482
|
+
};
|
|
483
|
+
readonly validUntil: {
|
|
484
|
+
readonly type: "string";
|
|
485
|
+
readonly format: "date";
|
|
486
|
+
};
|
|
487
|
+
};
|
|
488
|
+
};
|
|
489
|
+
readonly Response: {
|
|
490
|
+
readonly $anchor: "response";
|
|
491
|
+
readonly title: "VTA PCS — Attest — response payload";
|
|
492
|
+
readonly type: "object";
|
|
493
|
+
readonly additionalProperties: false;
|
|
494
|
+
readonly required: readonly ["attestation"];
|
|
495
|
+
readonly properties: {
|
|
496
|
+
readonly attestation: {
|
|
497
|
+
readonly $ref: "#/$defs/Attestation";
|
|
498
|
+
};
|
|
499
|
+
readonly ext: {
|
|
500
|
+
readonly $ref: "#/$defs/Ext";
|
|
501
|
+
};
|
|
502
|
+
};
|
|
503
|
+
};
|
|
504
|
+
readonly Ext: {
|
|
505
|
+
readonly title: "Ext";
|
|
506
|
+
readonly description: "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.";
|
|
507
|
+
readonly type: "object";
|
|
508
|
+
readonly minProperties: 1;
|
|
509
|
+
readonly additionalProperties: true;
|
|
510
|
+
readonly propertyNames: {
|
|
511
|
+
readonly pattern: "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$";
|
|
512
|
+
};
|
|
513
|
+
};
|
|
514
|
+
readonly Attestation: {
|
|
515
|
+
readonly title: "Attestation";
|
|
516
|
+
readonly description: "An attestation as a vetter hands it to an applicant: the payload of vetting/attestation/0.1, without its `ext`. The engine produces it from vta/pcs/attest and takes it into vta/pcs/verify-attestation.";
|
|
517
|
+
readonly type: "object";
|
|
518
|
+
readonly additionalProperties: false;
|
|
519
|
+
readonly required: readonly ["suite", "attestation", "meta", "token"];
|
|
520
|
+
readonly properties: {
|
|
521
|
+
readonly suite: {
|
|
522
|
+
readonly type: "string";
|
|
523
|
+
readonly minLength: 1;
|
|
524
|
+
readonly maxLength: 64;
|
|
525
|
+
readonly description: "The suite the attestation was made under, as the community publishes it.";
|
|
526
|
+
};
|
|
527
|
+
readonly attestation: {
|
|
528
|
+
readonly $ref: "#/$defs/Multibase";
|
|
529
|
+
readonly description: "The attestation: a tag, a shown class credential and a proof. It names no vetter.";
|
|
530
|
+
};
|
|
531
|
+
readonly meta: {
|
|
532
|
+
readonly $ref: "#/$defs/StatementMeta";
|
|
533
|
+
};
|
|
534
|
+
readonly token: {
|
|
535
|
+
readonly $ref: "#/$defs/AttestationToken";
|
|
536
|
+
};
|
|
537
|
+
};
|
|
538
|
+
};
|
|
539
|
+
readonly AttestationToken: {
|
|
540
|
+
readonly title: "AttestationToken";
|
|
541
|
+
readonly description: "The attestation token spent on one attestation: the label it was drawn under, the serial its spend reveals, and its re-randomised signature. The same members as `token` in vetting/attestation/0.1.";
|
|
542
|
+
readonly type: "object";
|
|
543
|
+
readonly additionalProperties: false;
|
|
544
|
+
readonly required: readonly ["label", "serial", "shown"];
|
|
545
|
+
readonly properties: {
|
|
546
|
+
readonly label: {
|
|
547
|
+
readonly type: "string";
|
|
548
|
+
readonly minLength: 1;
|
|
549
|
+
readonly maxLength: 128;
|
|
550
|
+
readonly description: "The token label spent under.";
|
|
551
|
+
};
|
|
552
|
+
readonly serial: {
|
|
553
|
+
readonly $ref: "#/$defs/Multibase";
|
|
554
|
+
readonly description: "The serial revealed by the spend.";
|
|
555
|
+
};
|
|
556
|
+
readonly shown: {
|
|
557
|
+
readonly $ref: "#/$defs/Multibase";
|
|
558
|
+
readonly description: "The re-randomised token signature, verifiable under the published token key.";
|
|
559
|
+
};
|
|
560
|
+
};
|
|
561
|
+
};
|
|
562
|
+
readonly Multibase: {
|
|
563
|
+
readonly title: "Multibase";
|
|
564
|
+
readonly description: "A binary value, multibase base58btc over the suite's canonical encoding.";
|
|
565
|
+
readonly type: "string";
|
|
566
|
+
readonly pattern: "^z[1-9A-HJ-NP-Za-km-z]+$";
|
|
567
|
+
};
|
|
568
|
+
readonly StatementMeta: {
|
|
569
|
+
readonly type: "object";
|
|
570
|
+
readonly additionalProperties: false;
|
|
571
|
+
readonly required: readonly ["community", "requirementsDigest", "method", "claimsVerified", "livenessConfirmed", "declaredRelationship", "identityCommitment", "cardDigestMultibase", "validFrom", "validUntil", "tokenLabel", "tokenSerial"];
|
|
572
|
+
readonly description: "What a Vetting Statement would have said, minus its issuer.";
|
|
573
|
+
readonly properties: {
|
|
574
|
+
readonly community: {
|
|
575
|
+
readonly type: "string";
|
|
576
|
+
readonly minLength: 1;
|
|
577
|
+
readonly description: "The community this attestation is for. An attestation is not portable between communities.";
|
|
578
|
+
};
|
|
579
|
+
readonly requirementsDigest: {
|
|
580
|
+
readonly type: "string";
|
|
581
|
+
readonly minLength: 1;
|
|
582
|
+
readonly description: "The digest of the criterion's requirements as the vetter read them.";
|
|
583
|
+
};
|
|
584
|
+
readonly method: {
|
|
585
|
+
readonly type: "string";
|
|
586
|
+
readonly enum: readonly ["inPerson", "video", "priorAcquaintance"];
|
|
587
|
+
readonly description: "How the vetter met the applicant.";
|
|
588
|
+
};
|
|
589
|
+
readonly claimsVerified: {
|
|
590
|
+
readonly type: "array";
|
|
591
|
+
readonly minItems: 1;
|
|
592
|
+
readonly items: {
|
|
593
|
+
readonly type: "string";
|
|
594
|
+
readonly minLength: 1;
|
|
595
|
+
};
|
|
596
|
+
readonly description: "The claim types the vetter checked.";
|
|
597
|
+
};
|
|
598
|
+
readonly livenessConfirmed: {
|
|
599
|
+
readonly type: "boolean";
|
|
600
|
+
readonly description: "Whether the vetter confirmed a live person.";
|
|
601
|
+
};
|
|
602
|
+
readonly declaredRelationship: {
|
|
603
|
+
readonly type: "string";
|
|
604
|
+
readonly enum: readonly ["none", "family", "sameEmployer", "closeFriend", "other"];
|
|
605
|
+
readonly description: "The relationship the vetter declared, which the community's independence rules count.";
|
|
606
|
+
};
|
|
607
|
+
readonly identityCommitment: {
|
|
608
|
+
readonly type: "string";
|
|
609
|
+
readonly pattern: "^z[1-9A-HJ-NP-Za-km-z]+$";
|
|
610
|
+
readonly description: "The commitment on the Vetting Card the applicant showed. Consistency across attestations is what stops two applicants pooling them.";
|
|
611
|
+
};
|
|
612
|
+
readonly cardDigestMultibase: {
|
|
613
|
+
readonly type: "string";
|
|
614
|
+
readonly pattern: "^z[1-9A-HJ-NP-Za-km-z]+$";
|
|
615
|
+
readonly description: "Digest of that card, as the vetter verified it.";
|
|
616
|
+
};
|
|
617
|
+
readonly validFrom: {
|
|
618
|
+
readonly type: "string";
|
|
619
|
+
readonly format: "date";
|
|
620
|
+
readonly description: "A DATE, never a timestamp: an exact time would let a community line an attestation up with a vetter's activity, which undoes the proof without touching it.";
|
|
621
|
+
};
|
|
622
|
+
readonly validUntil: {
|
|
623
|
+
readonly type: "string";
|
|
624
|
+
readonly format: "date";
|
|
625
|
+
readonly description: "A date, for the same reason.";
|
|
626
|
+
};
|
|
627
|
+
readonly tokenLabel: {
|
|
628
|
+
readonly type: "string";
|
|
629
|
+
readonly minLength: 1;
|
|
630
|
+
readonly maxLength: 128;
|
|
631
|
+
readonly description: "The token label spent, repeated inside the bound facts so it cannot be swapped in transit.";
|
|
632
|
+
};
|
|
633
|
+
readonly tokenSerial: {
|
|
634
|
+
readonly type: "string";
|
|
635
|
+
readonly pattern: "^z[1-9A-HJ-NP-Za-km-z]+$";
|
|
636
|
+
readonly description: "The token serial spent, likewise bound.";
|
|
637
|
+
};
|
|
638
|
+
};
|
|
639
|
+
};
|
|
640
|
+
readonly CommunityParameters: {
|
|
641
|
+
readonly title: "CommunityParameters";
|
|
642
|
+
readonly description: "The community's hidden-vetting parameters exactly as its join manifest publishes them, under the criterion's `vetting.ext`. The caller copies them in verbatim on every call that needs them, because the community rotates labels and the engine keeps no copy of its own: a stale copy costs the caller a refused proof, never a mistaken one.";
|
|
643
|
+
readonly $ref: "#/$defs/PublishedConfig";
|
|
644
|
+
};
|
|
645
|
+
readonly PublishedConfig: {
|
|
646
|
+
readonly title: "PublishedConfig";
|
|
647
|
+
readonly description: "The parameters exactly as they now appear in this community's join manifest, under vetting.ext. What an applicant and a vetter read.";
|
|
648
|
+
readonly type: "object";
|
|
649
|
+
readonly additionalProperties: false;
|
|
650
|
+
readonly required: readonly ["suite", "helperKey", "tokenKey", "vetterLabels", "tokenLabels", "dripPerTick", "tickLength", "events"];
|
|
651
|
+
readonly properties: {
|
|
652
|
+
readonly suite: {
|
|
653
|
+
readonly type: "string";
|
|
654
|
+
readonly minLength: 1;
|
|
655
|
+
};
|
|
656
|
+
readonly helperKey: {
|
|
657
|
+
readonly type: "string";
|
|
658
|
+
readonly minLength: 1;
|
|
659
|
+
readonly description: "The helper verification key, multibase — named for its role on the wire rather than for hvk.";
|
|
660
|
+
};
|
|
661
|
+
readonly tokenKey: {
|
|
662
|
+
readonly type: "string";
|
|
663
|
+
readonly minLength: 1;
|
|
664
|
+
readonly description: "The token verification key, multibase — named for its role on the wire rather than for tvk.";
|
|
665
|
+
};
|
|
666
|
+
readonly vetterLabels: {
|
|
667
|
+
readonly type: "array";
|
|
668
|
+
readonly items: {
|
|
669
|
+
readonly type: "string";
|
|
670
|
+
readonly minLength: 1;
|
|
671
|
+
};
|
|
672
|
+
readonly description: "Class labels published whole, e.g. vetter/2026-09 — a request names one of these, not the bare period.";
|
|
673
|
+
};
|
|
674
|
+
readonly tokenLabels: {
|
|
675
|
+
readonly type: "array";
|
|
676
|
+
readonly items: {
|
|
677
|
+
readonly type: "string";
|
|
678
|
+
readonly minLength: 1;
|
|
679
|
+
};
|
|
680
|
+
};
|
|
681
|
+
readonly dripPerTick: {
|
|
682
|
+
readonly type: "integer";
|
|
683
|
+
readonly minimum: 1;
|
|
684
|
+
};
|
|
685
|
+
readonly tickLength: {
|
|
686
|
+
readonly $ref: "#/$defs/TickLength";
|
|
687
|
+
};
|
|
688
|
+
readonly events: {
|
|
689
|
+
readonly type: "array";
|
|
690
|
+
readonly items: {
|
|
691
|
+
readonly $ref: "#/$defs/PublishedEvent";
|
|
692
|
+
};
|
|
693
|
+
};
|
|
694
|
+
};
|
|
695
|
+
};
|
|
696
|
+
readonly PublishedEvent: {
|
|
697
|
+
readonly title: "PublishedEvent";
|
|
698
|
+
readonly description: "The published shape drops approvedBy and graceDays: who approved is the community's own record, and a vetter is told closesAfter when its request is approved rather than being handed the raw grace period here.";
|
|
699
|
+
readonly type: "object";
|
|
700
|
+
readonly additionalProperties: false;
|
|
701
|
+
readonly required: readonly ["eventId", "startDate", "endDate", "groupFloor", "tiers"];
|
|
702
|
+
readonly properties: {
|
|
703
|
+
readonly eventId: {
|
|
704
|
+
readonly type: "string";
|
|
705
|
+
readonly minLength: 1;
|
|
706
|
+
};
|
|
707
|
+
readonly startDate: {
|
|
708
|
+
readonly type: "string";
|
|
709
|
+
readonly format: "date";
|
|
710
|
+
};
|
|
711
|
+
readonly endDate: {
|
|
712
|
+
readonly type: "string";
|
|
713
|
+
readonly format: "date";
|
|
714
|
+
};
|
|
715
|
+
readonly groupFloor: {
|
|
716
|
+
readonly type: "integer";
|
|
717
|
+
readonly minimum: 1;
|
|
718
|
+
};
|
|
719
|
+
readonly tiers: {
|
|
720
|
+
readonly type: "array";
|
|
721
|
+
readonly items: {
|
|
722
|
+
readonly $ref: "#/$defs/Tier";
|
|
723
|
+
};
|
|
724
|
+
};
|
|
725
|
+
};
|
|
726
|
+
};
|
|
727
|
+
readonly Tier: {
|
|
728
|
+
readonly title: "Tier";
|
|
729
|
+
readonly type: "object";
|
|
730
|
+
readonly additionalProperties: false;
|
|
731
|
+
readonly required: readonly ["name", "dripPerTick"];
|
|
732
|
+
readonly properties: {
|
|
733
|
+
readonly name: {
|
|
734
|
+
readonly type: "string";
|
|
735
|
+
readonly minLength: 1;
|
|
736
|
+
readonly description: "How the menu names it: desk, busy-desk.";
|
|
737
|
+
};
|
|
738
|
+
readonly dripPerTick: {
|
|
739
|
+
readonly type: "integer";
|
|
740
|
+
readonly minimum: 1;
|
|
741
|
+
readonly description: "How many tokens a tick under this tier yields.";
|
|
742
|
+
};
|
|
743
|
+
};
|
|
744
|
+
};
|
|
745
|
+
readonly TickLength: {
|
|
746
|
+
readonly title: "TickLength";
|
|
747
|
+
readonly type: "string";
|
|
748
|
+
readonly pattern: "^P(?:\\d+D(?:T\\d+H)?|T\\d+H)$";
|
|
749
|
+
readonly description: "The length of one tick of the drip, as an ISO 8601 duration in days and/or hours — at least `PT1H`. A label's tick `t` is the window starting `t` tick lengths after the label's start (`vtc/vetting/vetters/pcs-tokens`).";
|
|
750
|
+
};
|
|
751
|
+
};
|
|
752
|
+
};
|
|
753
|
+
/**
|
|
754
|
+
* SPEC.md §7.2 policy for the request variant, from this specification's
|
|
755
|
+
* front matter. Pass to `consumeInbound` — items 5b, 7 and 8 are
|
|
756
|
+
* per-specification and cannot be derived from the document alone, and
|
|
757
|
+
* item 2 needs the schema this carries.
|
|
758
|
+
*/
|
|
759
|
+
export declare const SPEC: {
|
|
760
|
+
readonly typeUri: "https://trusttasks.org/spec/vta/pcs/attest/0.1";
|
|
761
|
+
readonly isBearer: false;
|
|
762
|
+
readonly isProofRequired: true;
|
|
763
|
+
readonly isRecipientRequired: true;
|
|
764
|
+
readonly isIssuedAtRequired: true;
|
|
765
|
+
readonly payloadSchema: {
|
|
766
|
+
readonly $schema: "https://json-schema.org/draft/2020-12/schema";
|
|
767
|
+
readonly $id: "https://trusttasks.org/spec/vta/pcs/attest/0.1";
|
|
768
|
+
readonly title: "VTA PCS — Attest — payload";
|
|
769
|
+
readonly description: "A vetter's client asks its VTA to attest, after the human check, that an applicant was vetted: the VTA spends a token and makes an attestation that names no vetter.";
|
|
770
|
+
readonly type: "object";
|
|
771
|
+
readonly additionalProperties: false;
|
|
772
|
+
readonly required: readonly ["contextId", "community", "parameters", "applicantId", "meta"];
|
|
773
|
+
readonly properties: {
|
|
774
|
+
readonly contextId: {
|
|
775
|
+
readonly type: "string";
|
|
776
|
+
readonly minLength: 1;
|
|
777
|
+
readonly description: "The context the engine belongs to. Its key is derived from this context's base.";
|
|
778
|
+
};
|
|
779
|
+
readonly community: {
|
|
780
|
+
readonly type: "string";
|
|
781
|
+
readonly minLength: 1;
|
|
782
|
+
readonly description: "The community's DID: the helper whose parameters the engine runs under.";
|
|
783
|
+
};
|
|
784
|
+
readonly parameters: {
|
|
785
|
+
readonly $ref: "#/$defs/CommunityParameters";
|
|
786
|
+
readonly description: "The community's published hidden-vetting parameters, copied verbatim from its join manifest.";
|
|
787
|
+
};
|
|
788
|
+
readonly applicantId: {
|
|
789
|
+
readonly type: "string";
|
|
790
|
+
readonly pattern: "^z[1-9A-HJ-NP-Za-km-z]+$";
|
|
791
|
+
readonly description: "The applicant's PCS identifier, from its vetting/request.";
|
|
792
|
+
};
|
|
793
|
+
readonly meta: {
|
|
794
|
+
readonly $ref: "#/$defs/AttestMeta";
|
|
795
|
+
};
|
|
796
|
+
readonly preferLabel: {
|
|
797
|
+
readonly type: "string";
|
|
798
|
+
readonly minLength: 1;
|
|
799
|
+
readonly maxLength: 128;
|
|
800
|
+
readonly description: "A token label to spend under in preference — an event label the vetter is attesting at.";
|
|
801
|
+
};
|
|
802
|
+
readonly ext: {
|
|
803
|
+
readonly $ref: "#/$defs/Ext";
|
|
804
|
+
};
|
|
805
|
+
};
|
|
806
|
+
readonly $defs: {
|
|
807
|
+
readonly AttestMeta: {
|
|
808
|
+
readonly title: "AttestMeta";
|
|
809
|
+
readonly description: "What the vetter checked in the session, as vetting/attestation/0.1's StatementMeta states it, without the token members: the engine fills those from the token it spends.";
|
|
810
|
+
readonly type: "object";
|
|
811
|
+
readonly additionalProperties: false;
|
|
812
|
+
readonly required: readonly ["community", "requirementsDigest", "method", "claimsVerified", "livenessConfirmed", "declaredRelationship", "identityCommitment", "cardDigestMultibase", "validFrom", "validUntil"];
|
|
813
|
+
readonly properties: {
|
|
814
|
+
readonly community: {
|
|
815
|
+
readonly type: "string";
|
|
816
|
+
readonly minLength: 1;
|
|
817
|
+
};
|
|
818
|
+
readonly requirementsDigest: {
|
|
819
|
+
readonly type: "string";
|
|
820
|
+
readonly minLength: 1;
|
|
821
|
+
};
|
|
822
|
+
readonly method: {
|
|
823
|
+
readonly type: "string";
|
|
824
|
+
readonly enum: readonly ["inPerson", "video", "priorAcquaintance"];
|
|
825
|
+
};
|
|
826
|
+
readonly claimsVerified: {
|
|
827
|
+
readonly type: "array";
|
|
828
|
+
readonly minItems: 1;
|
|
829
|
+
readonly items: {
|
|
830
|
+
readonly type: "string";
|
|
831
|
+
readonly minLength: 1;
|
|
832
|
+
};
|
|
833
|
+
};
|
|
834
|
+
readonly livenessConfirmed: {
|
|
835
|
+
readonly type: "boolean";
|
|
836
|
+
};
|
|
837
|
+
readonly declaredRelationship: {
|
|
838
|
+
readonly type: "string";
|
|
839
|
+
readonly enum: readonly ["none", "family", "sameEmployer", "closeFriend", "other"];
|
|
840
|
+
};
|
|
841
|
+
readonly identityCommitment: {
|
|
842
|
+
readonly type: "string";
|
|
843
|
+
readonly pattern: "^z[1-9A-HJ-NP-Za-km-z]+$";
|
|
844
|
+
};
|
|
845
|
+
readonly cardDigestMultibase: {
|
|
846
|
+
readonly type: "string";
|
|
847
|
+
readonly pattern: "^z[1-9A-HJ-NP-Za-km-z]+$";
|
|
848
|
+
};
|
|
849
|
+
readonly validFrom: {
|
|
850
|
+
readonly type: "string";
|
|
851
|
+
readonly format: "date";
|
|
852
|
+
};
|
|
853
|
+
readonly validUntil: {
|
|
854
|
+
readonly type: "string";
|
|
855
|
+
readonly format: "date";
|
|
856
|
+
};
|
|
857
|
+
};
|
|
858
|
+
};
|
|
859
|
+
readonly Response: {
|
|
860
|
+
readonly $anchor: "response";
|
|
861
|
+
readonly title: "VTA PCS — Attest — response payload";
|
|
862
|
+
readonly type: "object";
|
|
863
|
+
readonly additionalProperties: false;
|
|
864
|
+
readonly required: readonly ["attestation"];
|
|
865
|
+
readonly properties: {
|
|
866
|
+
readonly attestation: {
|
|
867
|
+
readonly $ref: "#/$defs/Attestation";
|
|
868
|
+
};
|
|
869
|
+
readonly ext: {
|
|
870
|
+
readonly $ref: "#/$defs/Ext";
|
|
871
|
+
};
|
|
872
|
+
};
|
|
873
|
+
};
|
|
874
|
+
readonly Ext: {
|
|
875
|
+
readonly title: "Ext";
|
|
876
|
+
readonly description: "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.";
|
|
877
|
+
readonly type: "object";
|
|
878
|
+
readonly minProperties: 1;
|
|
879
|
+
readonly additionalProperties: true;
|
|
880
|
+
readonly propertyNames: {
|
|
881
|
+
readonly pattern: "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$";
|
|
882
|
+
};
|
|
883
|
+
};
|
|
884
|
+
readonly Attestation: {
|
|
885
|
+
readonly title: "Attestation";
|
|
886
|
+
readonly description: "An attestation as a vetter hands it to an applicant: the payload of vetting/attestation/0.1, without its `ext`. The engine produces it from vta/pcs/attest and takes it into vta/pcs/verify-attestation.";
|
|
887
|
+
readonly type: "object";
|
|
888
|
+
readonly additionalProperties: false;
|
|
889
|
+
readonly required: readonly ["suite", "attestation", "meta", "token"];
|
|
890
|
+
readonly properties: {
|
|
891
|
+
readonly suite: {
|
|
892
|
+
readonly type: "string";
|
|
893
|
+
readonly minLength: 1;
|
|
894
|
+
readonly maxLength: 64;
|
|
895
|
+
readonly description: "The suite the attestation was made under, as the community publishes it.";
|
|
896
|
+
};
|
|
897
|
+
readonly attestation: {
|
|
898
|
+
readonly $ref: "#/$defs/Multibase";
|
|
899
|
+
readonly description: "The attestation: a tag, a shown class credential and a proof. It names no vetter.";
|
|
900
|
+
};
|
|
901
|
+
readonly meta: {
|
|
902
|
+
readonly $ref: "#/$defs/StatementMeta";
|
|
903
|
+
};
|
|
904
|
+
readonly token: {
|
|
905
|
+
readonly $ref: "#/$defs/AttestationToken";
|
|
906
|
+
};
|
|
907
|
+
};
|
|
908
|
+
};
|
|
909
|
+
readonly AttestationToken: {
|
|
910
|
+
readonly title: "AttestationToken";
|
|
911
|
+
readonly description: "The attestation token spent on one attestation: the label it was drawn under, the serial its spend reveals, and its re-randomised signature. The same members as `token` in vetting/attestation/0.1.";
|
|
912
|
+
readonly type: "object";
|
|
913
|
+
readonly additionalProperties: false;
|
|
914
|
+
readonly required: readonly ["label", "serial", "shown"];
|
|
915
|
+
readonly properties: {
|
|
916
|
+
readonly label: {
|
|
917
|
+
readonly type: "string";
|
|
918
|
+
readonly minLength: 1;
|
|
919
|
+
readonly maxLength: 128;
|
|
920
|
+
readonly description: "The token label spent under.";
|
|
921
|
+
};
|
|
922
|
+
readonly serial: {
|
|
923
|
+
readonly $ref: "#/$defs/Multibase";
|
|
924
|
+
readonly description: "The serial revealed by the spend.";
|
|
925
|
+
};
|
|
926
|
+
readonly shown: {
|
|
927
|
+
readonly $ref: "#/$defs/Multibase";
|
|
928
|
+
readonly description: "The re-randomised token signature, verifiable under the published token key.";
|
|
929
|
+
};
|
|
930
|
+
};
|
|
931
|
+
};
|
|
932
|
+
readonly Multibase: {
|
|
933
|
+
readonly title: "Multibase";
|
|
934
|
+
readonly description: "A binary value, multibase base58btc over the suite's canonical encoding.";
|
|
935
|
+
readonly type: "string";
|
|
936
|
+
readonly pattern: "^z[1-9A-HJ-NP-Za-km-z]+$";
|
|
937
|
+
};
|
|
938
|
+
readonly StatementMeta: {
|
|
939
|
+
readonly type: "object";
|
|
940
|
+
readonly additionalProperties: false;
|
|
941
|
+
readonly required: readonly ["community", "requirementsDigest", "method", "claimsVerified", "livenessConfirmed", "declaredRelationship", "identityCommitment", "cardDigestMultibase", "validFrom", "validUntil", "tokenLabel", "tokenSerial"];
|
|
942
|
+
readonly description: "What a Vetting Statement would have said, minus its issuer.";
|
|
943
|
+
readonly properties: {
|
|
944
|
+
readonly community: {
|
|
945
|
+
readonly type: "string";
|
|
946
|
+
readonly minLength: 1;
|
|
947
|
+
readonly description: "The community this attestation is for. An attestation is not portable between communities.";
|
|
948
|
+
};
|
|
949
|
+
readonly requirementsDigest: {
|
|
950
|
+
readonly type: "string";
|
|
951
|
+
readonly minLength: 1;
|
|
952
|
+
readonly description: "The digest of the criterion's requirements as the vetter read them.";
|
|
953
|
+
};
|
|
954
|
+
readonly method: {
|
|
955
|
+
readonly type: "string";
|
|
956
|
+
readonly enum: readonly ["inPerson", "video", "priorAcquaintance"];
|
|
957
|
+
readonly description: "How the vetter met the applicant.";
|
|
958
|
+
};
|
|
959
|
+
readonly claimsVerified: {
|
|
960
|
+
readonly type: "array";
|
|
961
|
+
readonly minItems: 1;
|
|
962
|
+
readonly items: {
|
|
963
|
+
readonly type: "string";
|
|
964
|
+
readonly minLength: 1;
|
|
965
|
+
};
|
|
966
|
+
readonly description: "The claim types the vetter checked.";
|
|
967
|
+
};
|
|
968
|
+
readonly livenessConfirmed: {
|
|
969
|
+
readonly type: "boolean";
|
|
970
|
+
readonly description: "Whether the vetter confirmed a live person.";
|
|
971
|
+
};
|
|
972
|
+
readonly declaredRelationship: {
|
|
973
|
+
readonly type: "string";
|
|
974
|
+
readonly enum: readonly ["none", "family", "sameEmployer", "closeFriend", "other"];
|
|
975
|
+
readonly description: "The relationship the vetter declared, which the community's independence rules count.";
|
|
976
|
+
};
|
|
977
|
+
readonly identityCommitment: {
|
|
978
|
+
readonly type: "string";
|
|
979
|
+
readonly pattern: "^z[1-9A-HJ-NP-Za-km-z]+$";
|
|
980
|
+
readonly description: "The commitment on the Vetting Card the applicant showed. Consistency across attestations is what stops two applicants pooling them.";
|
|
981
|
+
};
|
|
982
|
+
readonly cardDigestMultibase: {
|
|
983
|
+
readonly type: "string";
|
|
984
|
+
readonly pattern: "^z[1-9A-HJ-NP-Za-km-z]+$";
|
|
985
|
+
readonly description: "Digest of that card, as the vetter verified it.";
|
|
986
|
+
};
|
|
987
|
+
readonly validFrom: {
|
|
988
|
+
readonly type: "string";
|
|
989
|
+
readonly format: "date";
|
|
990
|
+
readonly description: "A DATE, never a timestamp: an exact time would let a community line an attestation up with a vetter's activity, which undoes the proof without touching it.";
|
|
991
|
+
};
|
|
992
|
+
readonly validUntil: {
|
|
993
|
+
readonly type: "string";
|
|
994
|
+
readonly format: "date";
|
|
995
|
+
readonly description: "A date, for the same reason.";
|
|
996
|
+
};
|
|
997
|
+
readonly tokenLabel: {
|
|
998
|
+
readonly type: "string";
|
|
999
|
+
readonly minLength: 1;
|
|
1000
|
+
readonly maxLength: 128;
|
|
1001
|
+
readonly description: "The token label spent, repeated inside the bound facts so it cannot be swapped in transit.";
|
|
1002
|
+
};
|
|
1003
|
+
readonly tokenSerial: {
|
|
1004
|
+
readonly type: "string";
|
|
1005
|
+
readonly pattern: "^z[1-9A-HJ-NP-Za-km-z]+$";
|
|
1006
|
+
readonly description: "The token serial spent, likewise bound.";
|
|
1007
|
+
};
|
|
1008
|
+
};
|
|
1009
|
+
};
|
|
1010
|
+
readonly CommunityParameters: {
|
|
1011
|
+
readonly title: "CommunityParameters";
|
|
1012
|
+
readonly description: "The community's hidden-vetting parameters exactly as its join manifest publishes them, under the criterion's `vetting.ext`. The caller copies them in verbatim on every call that needs them, because the community rotates labels and the engine keeps no copy of its own: a stale copy costs the caller a refused proof, never a mistaken one.";
|
|
1013
|
+
readonly $ref: "#/$defs/PublishedConfig";
|
|
1014
|
+
};
|
|
1015
|
+
readonly PublishedConfig: {
|
|
1016
|
+
readonly title: "PublishedConfig";
|
|
1017
|
+
readonly description: "The parameters exactly as they now appear in this community's join manifest, under vetting.ext. What an applicant and a vetter read.";
|
|
1018
|
+
readonly type: "object";
|
|
1019
|
+
readonly additionalProperties: false;
|
|
1020
|
+
readonly required: readonly ["suite", "helperKey", "tokenKey", "vetterLabels", "tokenLabels", "dripPerTick", "tickLength", "events"];
|
|
1021
|
+
readonly properties: {
|
|
1022
|
+
readonly suite: {
|
|
1023
|
+
readonly type: "string";
|
|
1024
|
+
readonly minLength: 1;
|
|
1025
|
+
};
|
|
1026
|
+
readonly helperKey: {
|
|
1027
|
+
readonly type: "string";
|
|
1028
|
+
readonly minLength: 1;
|
|
1029
|
+
readonly description: "The helper verification key, multibase — named for its role on the wire rather than for hvk.";
|
|
1030
|
+
};
|
|
1031
|
+
readonly tokenKey: {
|
|
1032
|
+
readonly type: "string";
|
|
1033
|
+
readonly minLength: 1;
|
|
1034
|
+
readonly description: "The token verification key, multibase — named for its role on the wire rather than for tvk.";
|
|
1035
|
+
};
|
|
1036
|
+
readonly vetterLabels: {
|
|
1037
|
+
readonly type: "array";
|
|
1038
|
+
readonly items: {
|
|
1039
|
+
readonly type: "string";
|
|
1040
|
+
readonly minLength: 1;
|
|
1041
|
+
};
|
|
1042
|
+
readonly description: "Class labels published whole, e.g. vetter/2026-09 — a request names one of these, not the bare period.";
|
|
1043
|
+
};
|
|
1044
|
+
readonly tokenLabels: {
|
|
1045
|
+
readonly type: "array";
|
|
1046
|
+
readonly items: {
|
|
1047
|
+
readonly type: "string";
|
|
1048
|
+
readonly minLength: 1;
|
|
1049
|
+
};
|
|
1050
|
+
};
|
|
1051
|
+
readonly dripPerTick: {
|
|
1052
|
+
readonly type: "integer";
|
|
1053
|
+
readonly minimum: 1;
|
|
1054
|
+
};
|
|
1055
|
+
readonly tickLength: {
|
|
1056
|
+
readonly $ref: "#/$defs/TickLength";
|
|
1057
|
+
};
|
|
1058
|
+
readonly events: {
|
|
1059
|
+
readonly type: "array";
|
|
1060
|
+
readonly items: {
|
|
1061
|
+
readonly $ref: "#/$defs/PublishedEvent";
|
|
1062
|
+
};
|
|
1063
|
+
};
|
|
1064
|
+
};
|
|
1065
|
+
};
|
|
1066
|
+
readonly PublishedEvent: {
|
|
1067
|
+
readonly title: "PublishedEvent";
|
|
1068
|
+
readonly description: "The published shape drops approvedBy and graceDays: who approved is the community's own record, and a vetter is told closesAfter when its request is approved rather than being handed the raw grace period here.";
|
|
1069
|
+
readonly type: "object";
|
|
1070
|
+
readonly additionalProperties: false;
|
|
1071
|
+
readonly required: readonly ["eventId", "startDate", "endDate", "groupFloor", "tiers"];
|
|
1072
|
+
readonly properties: {
|
|
1073
|
+
readonly eventId: {
|
|
1074
|
+
readonly type: "string";
|
|
1075
|
+
readonly minLength: 1;
|
|
1076
|
+
};
|
|
1077
|
+
readonly startDate: {
|
|
1078
|
+
readonly type: "string";
|
|
1079
|
+
readonly format: "date";
|
|
1080
|
+
};
|
|
1081
|
+
readonly endDate: {
|
|
1082
|
+
readonly type: "string";
|
|
1083
|
+
readonly format: "date";
|
|
1084
|
+
};
|
|
1085
|
+
readonly groupFloor: {
|
|
1086
|
+
readonly type: "integer";
|
|
1087
|
+
readonly minimum: 1;
|
|
1088
|
+
};
|
|
1089
|
+
readonly tiers: {
|
|
1090
|
+
readonly type: "array";
|
|
1091
|
+
readonly items: {
|
|
1092
|
+
readonly $ref: "#/$defs/Tier";
|
|
1093
|
+
};
|
|
1094
|
+
};
|
|
1095
|
+
};
|
|
1096
|
+
};
|
|
1097
|
+
readonly Tier: {
|
|
1098
|
+
readonly title: "Tier";
|
|
1099
|
+
readonly type: "object";
|
|
1100
|
+
readonly additionalProperties: false;
|
|
1101
|
+
readonly required: readonly ["name", "dripPerTick"];
|
|
1102
|
+
readonly properties: {
|
|
1103
|
+
readonly name: {
|
|
1104
|
+
readonly type: "string";
|
|
1105
|
+
readonly minLength: 1;
|
|
1106
|
+
readonly description: "How the menu names it: desk, busy-desk.";
|
|
1107
|
+
};
|
|
1108
|
+
readonly dripPerTick: {
|
|
1109
|
+
readonly type: "integer";
|
|
1110
|
+
readonly minimum: 1;
|
|
1111
|
+
readonly description: "How many tokens a tick under this tier yields.";
|
|
1112
|
+
};
|
|
1113
|
+
};
|
|
1114
|
+
};
|
|
1115
|
+
readonly TickLength: {
|
|
1116
|
+
readonly title: "TickLength";
|
|
1117
|
+
readonly type: "string";
|
|
1118
|
+
readonly pattern: "^P(?:\\d+D(?:T\\d+H)?|T\\d+H)$";
|
|
1119
|
+
readonly description: "The length of one tick of the drip, as an ISO 8601 duration in days and/or hours — at least `PT1H`. A label's tick `t` is the window starting `t` tick lengths after the label's start (`vtc/vetting/vetters/pcs-tokens`).";
|
|
1120
|
+
};
|
|
1121
|
+
};
|
|
1122
|
+
};
|
|
1123
|
+
};
|
|
1124
|
+
/**
|
|
1125
|
+
* SPEC.md §7.2 policy for the success-response variant. `isRecipientRequired`
|
|
1126
|
+
* tracks the *issuer* party's requirement because a response swaps the
|
|
1127
|
+
* parties (§7.3 item 5).
|
|
1128
|
+
*/
|
|
1129
|
+
export declare const RESPONSE_SPEC: {
|
|
1130
|
+
readonly typeUri: "https://trusttasks.org/spec/vta/pcs/attest/0.1#response";
|
|
1131
|
+
readonly isBearer: false;
|
|
1132
|
+
readonly isProofRequired: false;
|
|
1133
|
+
readonly isRecipientRequired: true;
|
|
1134
|
+
readonly isIssuedAtRequired: true;
|
|
1135
|
+
readonly payloadSchema: {
|
|
1136
|
+
readonly $schema: "https://json-schema.org/draft/2020-12/schema";
|
|
1137
|
+
readonly $ref: "#/$defs/Response";
|
|
1138
|
+
readonly $defs: {
|
|
1139
|
+
readonly AttestMeta: {
|
|
1140
|
+
readonly title: "AttestMeta";
|
|
1141
|
+
readonly description: "What the vetter checked in the session, as vetting/attestation/0.1's StatementMeta states it, without the token members: the engine fills those from the token it spends.";
|
|
1142
|
+
readonly type: "object";
|
|
1143
|
+
readonly additionalProperties: false;
|
|
1144
|
+
readonly required: readonly ["community", "requirementsDigest", "method", "claimsVerified", "livenessConfirmed", "declaredRelationship", "identityCommitment", "cardDigestMultibase", "validFrom", "validUntil"];
|
|
1145
|
+
readonly properties: {
|
|
1146
|
+
readonly community: {
|
|
1147
|
+
readonly type: "string";
|
|
1148
|
+
readonly minLength: 1;
|
|
1149
|
+
};
|
|
1150
|
+
readonly requirementsDigest: {
|
|
1151
|
+
readonly type: "string";
|
|
1152
|
+
readonly minLength: 1;
|
|
1153
|
+
};
|
|
1154
|
+
readonly method: {
|
|
1155
|
+
readonly type: "string";
|
|
1156
|
+
readonly enum: readonly ["inPerson", "video", "priorAcquaintance"];
|
|
1157
|
+
};
|
|
1158
|
+
readonly claimsVerified: {
|
|
1159
|
+
readonly type: "array";
|
|
1160
|
+
readonly minItems: 1;
|
|
1161
|
+
readonly items: {
|
|
1162
|
+
readonly type: "string";
|
|
1163
|
+
readonly minLength: 1;
|
|
1164
|
+
};
|
|
1165
|
+
};
|
|
1166
|
+
readonly livenessConfirmed: {
|
|
1167
|
+
readonly type: "boolean";
|
|
1168
|
+
};
|
|
1169
|
+
readonly declaredRelationship: {
|
|
1170
|
+
readonly type: "string";
|
|
1171
|
+
readonly enum: readonly ["none", "family", "sameEmployer", "closeFriend", "other"];
|
|
1172
|
+
};
|
|
1173
|
+
readonly identityCommitment: {
|
|
1174
|
+
readonly type: "string";
|
|
1175
|
+
readonly pattern: "^z[1-9A-HJ-NP-Za-km-z]+$";
|
|
1176
|
+
};
|
|
1177
|
+
readonly cardDigestMultibase: {
|
|
1178
|
+
readonly type: "string";
|
|
1179
|
+
readonly pattern: "^z[1-9A-HJ-NP-Za-km-z]+$";
|
|
1180
|
+
};
|
|
1181
|
+
readonly validFrom: {
|
|
1182
|
+
readonly type: "string";
|
|
1183
|
+
readonly format: "date";
|
|
1184
|
+
};
|
|
1185
|
+
readonly validUntil: {
|
|
1186
|
+
readonly type: "string";
|
|
1187
|
+
readonly format: "date";
|
|
1188
|
+
};
|
|
1189
|
+
};
|
|
1190
|
+
};
|
|
1191
|
+
readonly Response: {
|
|
1192
|
+
readonly $anchor: "response";
|
|
1193
|
+
readonly title: "VTA PCS — Attest — response payload";
|
|
1194
|
+
readonly type: "object";
|
|
1195
|
+
readonly additionalProperties: false;
|
|
1196
|
+
readonly required: readonly ["attestation"];
|
|
1197
|
+
readonly properties: {
|
|
1198
|
+
readonly attestation: {
|
|
1199
|
+
readonly $ref: "#/$defs/Attestation";
|
|
1200
|
+
};
|
|
1201
|
+
readonly ext: {
|
|
1202
|
+
readonly $ref: "#/$defs/Ext";
|
|
1203
|
+
};
|
|
1204
|
+
};
|
|
1205
|
+
};
|
|
1206
|
+
readonly Ext: {
|
|
1207
|
+
readonly title: "Ext";
|
|
1208
|
+
readonly description: "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.";
|
|
1209
|
+
readonly type: "object";
|
|
1210
|
+
readonly minProperties: 1;
|
|
1211
|
+
readonly additionalProperties: true;
|
|
1212
|
+
readonly propertyNames: {
|
|
1213
|
+
readonly pattern: "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$";
|
|
1214
|
+
};
|
|
1215
|
+
};
|
|
1216
|
+
readonly Attestation: {
|
|
1217
|
+
readonly title: "Attestation";
|
|
1218
|
+
readonly description: "An attestation as a vetter hands it to an applicant: the payload of vetting/attestation/0.1, without its `ext`. The engine produces it from vta/pcs/attest and takes it into vta/pcs/verify-attestation.";
|
|
1219
|
+
readonly type: "object";
|
|
1220
|
+
readonly additionalProperties: false;
|
|
1221
|
+
readonly required: readonly ["suite", "attestation", "meta", "token"];
|
|
1222
|
+
readonly properties: {
|
|
1223
|
+
readonly suite: {
|
|
1224
|
+
readonly type: "string";
|
|
1225
|
+
readonly minLength: 1;
|
|
1226
|
+
readonly maxLength: 64;
|
|
1227
|
+
readonly description: "The suite the attestation was made under, as the community publishes it.";
|
|
1228
|
+
};
|
|
1229
|
+
readonly attestation: {
|
|
1230
|
+
readonly $ref: "#/$defs/Multibase";
|
|
1231
|
+
readonly description: "The attestation: a tag, a shown class credential and a proof. It names no vetter.";
|
|
1232
|
+
};
|
|
1233
|
+
readonly meta: {
|
|
1234
|
+
readonly $ref: "#/$defs/StatementMeta";
|
|
1235
|
+
};
|
|
1236
|
+
readonly token: {
|
|
1237
|
+
readonly $ref: "#/$defs/AttestationToken";
|
|
1238
|
+
};
|
|
1239
|
+
};
|
|
1240
|
+
};
|
|
1241
|
+
readonly AttestationToken: {
|
|
1242
|
+
readonly title: "AttestationToken";
|
|
1243
|
+
readonly description: "The attestation token spent on one attestation: the label it was drawn under, the serial its spend reveals, and its re-randomised signature. The same members as `token` in vetting/attestation/0.1.";
|
|
1244
|
+
readonly type: "object";
|
|
1245
|
+
readonly additionalProperties: false;
|
|
1246
|
+
readonly required: readonly ["label", "serial", "shown"];
|
|
1247
|
+
readonly properties: {
|
|
1248
|
+
readonly label: {
|
|
1249
|
+
readonly type: "string";
|
|
1250
|
+
readonly minLength: 1;
|
|
1251
|
+
readonly maxLength: 128;
|
|
1252
|
+
readonly description: "The token label spent under.";
|
|
1253
|
+
};
|
|
1254
|
+
readonly serial: {
|
|
1255
|
+
readonly $ref: "#/$defs/Multibase";
|
|
1256
|
+
readonly description: "The serial revealed by the spend.";
|
|
1257
|
+
};
|
|
1258
|
+
readonly shown: {
|
|
1259
|
+
readonly $ref: "#/$defs/Multibase";
|
|
1260
|
+
readonly description: "The re-randomised token signature, verifiable under the published token key.";
|
|
1261
|
+
};
|
|
1262
|
+
};
|
|
1263
|
+
};
|
|
1264
|
+
readonly Multibase: {
|
|
1265
|
+
readonly title: "Multibase";
|
|
1266
|
+
readonly description: "A binary value, multibase base58btc over the suite's canonical encoding.";
|
|
1267
|
+
readonly type: "string";
|
|
1268
|
+
readonly pattern: "^z[1-9A-HJ-NP-Za-km-z]+$";
|
|
1269
|
+
};
|
|
1270
|
+
readonly StatementMeta: {
|
|
1271
|
+
readonly type: "object";
|
|
1272
|
+
readonly additionalProperties: false;
|
|
1273
|
+
readonly required: readonly ["community", "requirementsDigest", "method", "claimsVerified", "livenessConfirmed", "declaredRelationship", "identityCommitment", "cardDigestMultibase", "validFrom", "validUntil", "tokenLabel", "tokenSerial"];
|
|
1274
|
+
readonly description: "What a Vetting Statement would have said, minus its issuer.";
|
|
1275
|
+
readonly properties: {
|
|
1276
|
+
readonly community: {
|
|
1277
|
+
readonly type: "string";
|
|
1278
|
+
readonly minLength: 1;
|
|
1279
|
+
readonly description: "The community this attestation is for. An attestation is not portable between communities.";
|
|
1280
|
+
};
|
|
1281
|
+
readonly requirementsDigest: {
|
|
1282
|
+
readonly type: "string";
|
|
1283
|
+
readonly minLength: 1;
|
|
1284
|
+
readonly description: "The digest of the criterion's requirements as the vetter read them.";
|
|
1285
|
+
};
|
|
1286
|
+
readonly method: {
|
|
1287
|
+
readonly type: "string";
|
|
1288
|
+
readonly enum: readonly ["inPerson", "video", "priorAcquaintance"];
|
|
1289
|
+
readonly description: "How the vetter met the applicant.";
|
|
1290
|
+
};
|
|
1291
|
+
readonly claimsVerified: {
|
|
1292
|
+
readonly type: "array";
|
|
1293
|
+
readonly minItems: 1;
|
|
1294
|
+
readonly items: {
|
|
1295
|
+
readonly type: "string";
|
|
1296
|
+
readonly minLength: 1;
|
|
1297
|
+
};
|
|
1298
|
+
readonly description: "The claim types the vetter checked.";
|
|
1299
|
+
};
|
|
1300
|
+
readonly livenessConfirmed: {
|
|
1301
|
+
readonly type: "boolean";
|
|
1302
|
+
readonly description: "Whether the vetter confirmed a live person.";
|
|
1303
|
+
};
|
|
1304
|
+
readonly declaredRelationship: {
|
|
1305
|
+
readonly type: "string";
|
|
1306
|
+
readonly enum: readonly ["none", "family", "sameEmployer", "closeFriend", "other"];
|
|
1307
|
+
readonly description: "The relationship the vetter declared, which the community's independence rules count.";
|
|
1308
|
+
};
|
|
1309
|
+
readonly identityCommitment: {
|
|
1310
|
+
readonly type: "string";
|
|
1311
|
+
readonly pattern: "^z[1-9A-HJ-NP-Za-km-z]+$";
|
|
1312
|
+
readonly description: "The commitment on the Vetting Card the applicant showed. Consistency across attestations is what stops two applicants pooling them.";
|
|
1313
|
+
};
|
|
1314
|
+
readonly cardDigestMultibase: {
|
|
1315
|
+
readonly type: "string";
|
|
1316
|
+
readonly pattern: "^z[1-9A-HJ-NP-Za-km-z]+$";
|
|
1317
|
+
readonly description: "Digest of that card, as the vetter verified it.";
|
|
1318
|
+
};
|
|
1319
|
+
readonly validFrom: {
|
|
1320
|
+
readonly type: "string";
|
|
1321
|
+
readonly format: "date";
|
|
1322
|
+
readonly description: "A DATE, never a timestamp: an exact time would let a community line an attestation up with a vetter's activity, which undoes the proof without touching it.";
|
|
1323
|
+
};
|
|
1324
|
+
readonly validUntil: {
|
|
1325
|
+
readonly type: "string";
|
|
1326
|
+
readonly format: "date";
|
|
1327
|
+
readonly description: "A date, for the same reason.";
|
|
1328
|
+
};
|
|
1329
|
+
readonly tokenLabel: {
|
|
1330
|
+
readonly type: "string";
|
|
1331
|
+
readonly minLength: 1;
|
|
1332
|
+
readonly maxLength: 128;
|
|
1333
|
+
readonly description: "The token label spent, repeated inside the bound facts so it cannot be swapped in transit.";
|
|
1334
|
+
};
|
|
1335
|
+
readonly tokenSerial: {
|
|
1336
|
+
readonly type: "string";
|
|
1337
|
+
readonly pattern: "^z[1-9A-HJ-NP-Za-km-z]+$";
|
|
1338
|
+
readonly description: "The token serial spent, likewise bound.";
|
|
1339
|
+
};
|
|
1340
|
+
};
|
|
1341
|
+
};
|
|
1342
|
+
readonly CommunityParameters: {
|
|
1343
|
+
readonly title: "CommunityParameters";
|
|
1344
|
+
readonly description: "The community's hidden-vetting parameters exactly as its join manifest publishes them, under the criterion's `vetting.ext`. The caller copies them in verbatim on every call that needs them, because the community rotates labels and the engine keeps no copy of its own: a stale copy costs the caller a refused proof, never a mistaken one.";
|
|
1345
|
+
readonly $ref: "#/$defs/PublishedConfig";
|
|
1346
|
+
};
|
|
1347
|
+
readonly PublishedConfig: {
|
|
1348
|
+
readonly title: "PublishedConfig";
|
|
1349
|
+
readonly description: "The parameters exactly as they now appear in this community's join manifest, under vetting.ext. What an applicant and a vetter read.";
|
|
1350
|
+
readonly type: "object";
|
|
1351
|
+
readonly additionalProperties: false;
|
|
1352
|
+
readonly required: readonly ["suite", "helperKey", "tokenKey", "vetterLabels", "tokenLabels", "dripPerTick", "tickLength", "events"];
|
|
1353
|
+
readonly properties: {
|
|
1354
|
+
readonly suite: {
|
|
1355
|
+
readonly type: "string";
|
|
1356
|
+
readonly minLength: 1;
|
|
1357
|
+
};
|
|
1358
|
+
readonly helperKey: {
|
|
1359
|
+
readonly type: "string";
|
|
1360
|
+
readonly minLength: 1;
|
|
1361
|
+
readonly description: "The helper verification key, multibase — named for its role on the wire rather than for hvk.";
|
|
1362
|
+
};
|
|
1363
|
+
readonly tokenKey: {
|
|
1364
|
+
readonly type: "string";
|
|
1365
|
+
readonly minLength: 1;
|
|
1366
|
+
readonly description: "The token verification key, multibase — named for its role on the wire rather than for tvk.";
|
|
1367
|
+
};
|
|
1368
|
+
readonly vetterLabels: {
|
|
1369
|
+
readonly type: "array";
|
|
1370
|
+
readonly items: {
|
|
1371
|
+
readonly type: "string";
|
|
1372
|
+
readonly minLength: 1;
|
|
1373
|
+
};
|
|
1374
|
+
readonly description: "Class labels published whole, e.g. vetter/2026-09 — a request names one of these, not the bare period.";
|
|
1375
|
+
};
|
|
1376
|
+
readonly tokenLabels: {
|
|
1377
|
+
readonly type: "array";
|
|
1378
|
+
readonly items: {
|
|
1379
|
+
readonly type: "string";
|
|
1380
|
+
readonly minLength: 1;
|
|
1381
|
+
};
|
|
1382
|
+
};
|
|
1383
|
+
readonly dripPerTick: {
|
|
1384
|
+
readonly type: "integer";
|
|
1385
|
+
readonly minimum: 1;
|
|
1386
|
+
};
|
|
1387
|
+
readonly tickLength: {
|
|
1388
|
+
readonly $ref: "#/$defs/TickLength";
|
|
1389
|
+
};
|
|
1390
|
+
readonly events: {
|
|
1391
|
+
readonly type: "array";
|
|
1392
|
+
readonly items: {
|
|
1393
|
+
readonly $ref: "#/$defs/PublishedEvent";
|
|
1394
|
+
};
|
|
1395
|
+
};
|
|
1396
|
+
};
|
|
1397
|
+
};
|
|
1398
|
+
readonly PublishedEvent: {
|
|
1399
|
+
readonly title: "PublishedEvent";
|
|
1400
|
+
readonly description: "The published shape drops approvedBy and graceDays: who approved is the community's own record, and a vetter is told closesAfter when its request is approved rather than being handed the raw grace period here.";
|
|
1401
|
+
readonly type: "object";
|
|
1402
|
+
readonly additionalProperties: false;
|
|
1403
|
+
readonly required: readonly ["eventId", "startDate", "endDate", "groupFloor", "tiers"];
|
|
1404
|
+
readonly properties: {
|
|
1405
|
+
readonly eventId: {
|
|
1406
|
+
readonly type: "string";
|
|
1407
|
+
readonly minLength: 1;
|
|
1408
|
+
};
|
|
1409
|
+
readonly startDate: {
|
|
1410
|
+
readonly type: "string";
|
|
1411
|
+
readonly format: "date";
|
|
1412
|
+
};
|
|
1413
|
+
readonly endDate: {
|
|
1414
|
+
readonly type: "string";
|
|
1415
|
+
readonly format: "date";
|
|
1416
|
+
};
|
|
1417
|
+
readonly groupFloor: {
|
|
1418
|
+
readonly type: "integer";
|
|
1419
|
+
readonly minimum: 1;
|
|
1420
|
+
};
|
|
1421
|
+
readonly tiers: {
|
|
1422
|
+
readonly type: "array";
|
|
1423
|
+
readonly items: {
|
|
1424
|
+
readonly $ref: "#/$defs/Tier";
|
|
1425
|
+
};
|
|
1426
|
+
};
|
|
1427
|
+
};
|
|
1428
|
+
};
|
|
1429
|
+
readonly Tier: {
|
|
1430
|
+
readonly title: "Tier";
|
|
1431
|
+
readonly type: "object";
|
|
1432
|
+
readonly additionalProperties: false;
|
|
1433
|
+
readonly required: readonly ["name", "dripPerTick"];
|
|
1434
|
+
readonly properties: {
|
|
1435
|
+
readonly name: {
|
|
1436
|
+
readonly type: "string";
|
|
1437
|
+
readonly minLength: 1;
|
|
1438
|
+
readonly description: "How the menu names it: desk, busy-desk.";
|
|
1439
|
+
};
|
|
1440
|
+
readonly dripPerTick: {
|
|
1441
|
+
readonly type: "integer";
|
|
1442
|
+
readonly minimum: 1;
|
|
1443
|
+
readonly description: "How many tokens a tick under this tier yields.";
|
|
1444
|
+
};
|
|
1445
|
+
};
|
|
1446
|
+
};
|
|
1447
|
+
readonly TickLength: {
|
|
1448
|
+
readonly title: "TickLength";
|
|
1449
|
+
readonly type: "string";
|
|
1450
|
+
readonly pattern: "^P(?:\\d+D(?:T\\d+H)?|T\\d+H)$";
|
|
1451
|
+
readonly description: "The length of one tick of the drip, as an ISO 8601 duration in days and/or hours — at least `PT1H`. A label's tick `t` is the window starting `t` tick lengths after the label's start (`vtc/vetting/vetters/pcs-tokens`).";
|
|
1452
|
+
};
|
|
1453
|
+
};
|
|
1454
|
+
};
|
|
1455
|
+
};
|
|
1456
|
+
//# sourceMappingURL=payload.d.ts.map
|