@openvtc/trust-tasks 0.25.0 → 0.25.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (130) hide show
  1. package/CHANGELOG.md +29 -0
  2. package/dist/_shared/components.d.ts +308 -2
  3. package/dist/_shared/components.d.ts.map +1 -1
  4. package/dist/device/list/0.1/payload.d.ts +4 -4
  5. package/dist/device/list/0.1/payload.d.ts.map +1 -1
  6. package/dist/device/list/0.1/payload.js +6 -2
  7. package/dist/device/list/0.1/payload.js.map +1 -1
  8. package/dist/device/list/0.2/payload.d.ts +4 -4
  9. package/dist/device/list/0.2/payload.d.ts.map +1 -1
  10. package/dist/device/list/0.2/payload.js +6 -2
  11. package/dist/device/list/0.2/payload.js.map +1 -1
  12. package/dist/device/register/0.1/payload.d.ts +4 -4
  13. package/dist/device/register/0.1/payload.d.ts.map +1 -1
  14. package/dist/device/register/0.1/payload.js +6 -2
  15. package/dist/device/register/0.1/payload.js.map +1 -1
  16. package/dist/device/register/0.2/payload.d.ts +4 -4
  17. package/dist/device/register/0.2/payload.d.ts.map +1 -1
  18. package/dist/device/register/0.2/payload.js +6 -2
  19. package/dist/device/register/0.2/payload.js.map +1 -1
  20. package/dist/index.d.ts +17 -0
  21. package/dist/index.d.ts.map +1 -1
  22. package/dist/index.js +17 -0
  23. package/dist/index.js.map +1 -1
  24. package/dist/provision/vta/_shared/0.1/vta.d.ts +16 -0
  25. package/dist/provision/vta/_shared/0.1/vta.d.ts.map +1 -0
  26. package/dist/provision/vta/_shared/0.1/vta.js +6 -0
  27. package/dist/provision/vta/_shared/0.1/vta.js.map +1 -0
  28. package/dist/provision/vta/claim/0.1/payload.d.ts +115 -0
  29. package/dist/provision/vta/claim/0.1/payload.d.ts.map +1 -0
  30. package/dist/provision/vta/claim/0.1/payload.js +69 -0
  31. package/dist/provision/vta/claim/0.1/payload.js.map +1 -0
  32. package/dist/provision/vta/redeem/0.1/payload.d.ts +371 -0
  33. package/dist/provision/vta/redeem/0.1/payload.d.ts.map +1 -0
  34. package/dist/provision/vta/redeem/0.1/payload.js +207 -0
  35. package/dist/provision/vta/redeem/0.1/payload.js.map +1 -0
  36. package/dist/vetting/_shared/0.1/hidden-vetting.d.ts +16 -0
  37. package/dist/vetting/_shared/0.1/hidden-vetting.d.ts.map +1 -0
  38. package/dist/vetting/_shared/0.1/hidden-vetting.js +6 -0
  39. package/dist/vetting/_shared/0.1/hidden-vetting.js.map +1 -0
  40. package/dist/vetting/attestation/0.1/payload.d.ts +94 -146
  41. package/dist/vetting/attestation/0.1/payload.d.ts.map +1 -1
  42. package/dist/vetting/attestation/0.1/payload.js +43 -43
  43. package/dist/vetting/attestation/0.1/payload.js.map +1 -1
  44. package/dist/vta/_shared/0.4/pcs-engine.d.ts +16 -0
  45. package/dist/vta/_shared/0.4/pcs-engine.d.ts.map +1 -0
  46. package/dist/vta/_shared/0.4/pcs-engine.js +6 -0
  47. package/dist/vta/_shared/0.4/pcs-engine.js.map +1 -0
  48. package/dist/vta/pcs/applications/create/0.1/payload.d.ts +1215 -0
  49. package/dist/vta/pcs/applications/create/0.1/payload.d.ts.map +1 -0
  50. package/dist/vta/pcs/applications/create/0.1/payload.js +724 -0
  51. package/dist/vta/pcs/applications/create/0.1/payload.js.map +1 -0
  52. package/dist/vta/pcs/applications/delete/0.1/payload.d.ts +253 -0
  53. package/dist/vta/pcs/applications/delete/0.1/payload.d.ts.map +1 -0
  54. package/dist/vta/pcs/applications/delete/0.1/payload.js +146 -0
  55. package/dist/vta/pcs/applications/delete/0.1/payload.js.map +1 -0
  56. package/dist/vta/pcs/applications/show/0.1/payload.d.ts +733 -0
  57. package/dist/vta/pcs/applications/show/0.1/payload.d.ts.map +1 -0
  58. package/dist/vta/pcs/applications/show/0.1/payload.js +450 -0
  59. package/dist/vta/pcs/applications/show/0.1/payload.js.map +1 -0
  60. package/dist/vta/pcs/attest/0.1/payload.d.ts +1456 -0
  61. package/dist/vta/pcs/attest/0.1/payload.d.ts.map +1 -0
  62. package/dist/vta/pcs/attest/0.1/payload.js +876 -0
  63. package/dist/vta/pcs/attest/0.1/payload.js.map +1 -0
  64. package/dist/vta/pcs/prove/0.1/payload.d.ts +1348 -0
  65. package/dist/vta/pcs/prove/0.1/payload.d.ts.map +1 -0
  66. package/dist/vta/pcs/prove/0.1/payload.js +804 -0
  67. package/dist/vta/pcs/prove/0.1/payload.js.map +1 -0
  68. package/dist/vta/pcs/root-accept/0.1/payload.d.ts +1100 -0
  69. package/dist/vta/pcs/root-accept/0.1/payload.d.ts.map +1 -0
  70. package/dist/vta/pcs/root-accept/0.1/payload.js +634 -0
  71. package/dist/vta/pcs/root-accept/0.1/payload.js.map +1 -0
  72. package/dist/vta/pcs/root-request/0.1/payload.d.ts +880 -0
  73. package/dist/vta/pcs/root-request/0.1/payload.d.ts.map +1 -0
  74. package/dist/vta/pcs/root-request/0.1/payload.js +496 -0
  75. package/dist/vta/pcs/root-request/0.1/payload.js.map +1 -0
  76. package/dist/vta/pcs/tokens/abandon/0.1/payload.d.ts +612 -0
  77. package/dist/vta/pcs/tokens/abandon/0.1/payload.d.ts.map +1 -0
  78. package/dist/vta/pcs/tokens/abandon/0.1/payload.js +355 -0
  79. package/dist/vta/pcs/tokens/abandon/0.1/payload.js.map +1 -0
  80. package/dist/vta/pcs/tokens/accept/0.1/payload.d.ts +1149 -0
  81. package/dist/vta/pcs/tokens/accept/0.1/payload.d.ts.map +1 -0
  82. package/dist/vta/pcs/tokens/accept/0.1/payload.js +657 -0
  83. package/dist/vta/pcs/tokens/accept/0.1/payload.js.map +1 -0
  84. package/dist/vta/pcs/tokens/request/0.1/payload.d.ts +908 -0
  85. package/dist/vta/pcs/tokens/request/0.1/payload.d.ts.map +1 -0
  86. package/dist/vta/pcs/tokens/request/0.1/payload.js +508 -0
  87. package/dist/vta/pcs/tokens/request/0.1/payload.js.map +1 -0
  88. package/dist/vta/pcs/verify-attestation/0.1/payload.d.ts +1423 -0
  89. package/dist/vta/pcs/verify-attestation/0.1/payload.d.ts.map +1 -0
  90. package/dist/vta/pcs/verify-attestation/0.1/payload.js +850 -0
  91. package/dist/vta/pcs/verify-attestation/0.1/payload.js.map +1 -0
  92. package/dist/vta/pcs/vetter/show/0.1/payload.d.ts +605 -0
  93. package/dist/vta/pcs/vetter/show/0.1/payload.d.ts.map +1 -0
  94. package/dist/vta/pcs/vetter/show/0.1/payload.js +351 -0
  95. package/dist/vta/pcs/vetter/show/0.1/payload.js.map +1 -0
  96. package/dist/vtc/vetting/hidden/publish/0.1/payload.d.ts +403 -486
  97. package/dist/vtc/vetting/hidden/publish/0.1/payload.d.ts.map +1 -1
  98. package/dist/vtc/vetting/hidden/publish/0.1/payload.js +240 -240
  99. package/dist/vtc/vetting/hidden/publish/0.1/payload.js.map +1 -1
  100. package/dist/vtc/vetting/hidden/show/0.1/payload.d.ts +482 -565
  101. package/dist/vtc/vetting/hidden/show/0.1/payload.d.ts.map +1 -1
  102. package/dist/vtc/vetting/hidden/show/0.1/payload.js +294 -294
  103. package/dist/vtc/vetting/hidden/show/0.1/payload.js.map +1 -1
  104. package/package.json +1 -1
  105. package/src/_shared/components.ts +312 -2
  106. package/src/device/list/0.1/payload.ts +6 -2
  107. package/src/device/list/0.2/payload.ts +6 -2
  108. package/src/device/register/0.1/payload.ts +6 -2
  109. package/src/device/register/0.2/payload.ts +6 -2
  110. package/src/index.ts +17 -0
  111. package/src/provision/vta/_shared/0.1/vta.ts +17 -0
  112. package/src/provision/vta/claim/0.1/payload.ts +88 -0
  113. package/src/provision/vta/redeem/0.1/payload.ts +255 -0
  114. package/src/vetting/_shared/0.1/hidden-vetting.ts +17 -0
  115. package/src/vetting/attestation/0.1/payload.ts +49 -101
  116. package/src/vta/_shared/0.4/pcs-engine.ts +17 -0
  117. package/src/vta/pcs/applications/create/0.1/payload.ts +768 -0
  118. package/src/vta/pcs/applications/delete/0.1/payload.ts +182 -0
  119. package/src/vta/pcs/applications/show/0.1/payload.ts +482 -0
  120. package/src/vta/pcs/attest/0.1/payload.ts +943 -0
  121. package/src/vta/pcs/prove/0.1/payload.ts +845 -0
  122. package/src/vta/pcs/root-accept/0.1/payload.ts +681 -0
  123. package/src/vta/pcs/root-request/0.1/payload.ts +559 -0
  124. package/src/vta/pcs/tokens/abandon/0.1/payload.ts +392 -0
  125. package/src/vta/pcs/tokens/accept/0.1/payload.ts +713 -0
  126. package/src/vta/pcs/tokens/request/0.1/payload.ts +581 -0
  127. package/src/vta/pcs/verify-attestation/0.1/payload.ts +888 -0
  128. package/src/vta/pcs/vetter/show/0.1/payload.ts +387 -0
  129. package/src/vtc/vetting/hidden/publish/0.1/payload.ts +247 -331
  130. package/src/vtc/vetting/hidden/show/0.1/payload.ts +295 -379
@@ -0,0 +1,1423 @@
1
+ /**
2
+ * Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
3
+ * Source: specs/vta/pcs/verify-attestation/0.1/payload.schema.json
4
+ */
5
+ import type { ApplicationSummary, Attestation, AttestationMeta, AttestationToken, CommunityParameters, Ext, Multibase, PublishedConfig, PublishedEvent, StatementMeta, TickLength, Tier } from "../../../../_shared/components.js";
6
+ /**
7
+ * A client hands its VTA an attestation a vetter sent; the VTA checks it and its token against the community's parameters and keeps it for the application's proof.
8
+ */
9
+ export interface VTAPCSVerifyAttestationPayload {
10
+ applicationId: string;
11
+ /**
12
+ * The community's published hidden-vetting parameters, copied verbatim from its join manifest.
13
+ */
14
+ parameters: CommunityParameters;
15
+ attestation: Attestation;
16
+ ext?: Ext;
17
+ }
18
+ export interface VTAPCSVerifyAttestationResponsePayload {
19
+ application: ApplicationSummary;
20
+ /**
21
+ * The metadata of the attestation taken.
22
+ */
23
+ accepted: AttestationMeta;
24
+ ext?: Ext;
25
+ }
26
+ /** Shared definitions this specification references, re-exported under the names it used to declare them with. */
27
+ export type { ApplicationSummary, Attestation, AttestationMeta, AttestationToken, CommunityParameters, Ext, Multibase, PublishedConfig, PublishedEvent, StatementMeta, TickLength, Tier };
28
+ /** Trust Task type URI. */
29
+ export declare const TYPE_URI: "https://trusttasks.org/spec/vta/pcs/verify-attestation/0.1";
30
+ /** Stable alias for this specification's request payload shape. */
31
+ export type Payload = VTAPCSVerifyAttestationPayload;
32
+ /** Trust Task response type URI (request type URI + "#response"). */
33
+ export declare const RESPONSE_TYPE_URI: "https://trusttasks.org/spec/vta/pcs/verify-attestation/0.1#response";
34
+ /** Stable alias for this specification's success-response payload shape. */
35
+ export type Response = VTAPCSVerifyAttestationResponsePayload;
36
+ /**
37
+ * This specification's payload schema, as a value.
38
+ *
39
+ * SPEC.md §7.2 item 2 is performed against this. It is shipped as data
40
+ * rather than only as a `.json` file because TypeScript types are erased
41
+ * at runtime: without a schema a consumer has nothing to validate, and
42
+ * every REQUIRED payload member is optional in practice. Cross-file
43
+ * `$ref`s are already inlined, so it needs no resolver.
44
+ */
45
+ export declare const PAYLOAD_SCHEMA: {
46
+ readonly $schema: "https://json-schema.org/draft/2020-12/schema";
47
+ readonly $id: "https://trusttasks.org/spec/vta/pcs/verify-attestation/0.1";
48
+ readonly title: "VTA PCS — Verify Attestation — payload";
49
+ readonly description: "A client hands its VTA an attestation a vetter sent; the VTA checks it and its token against the community's parameters and keeps it for the application's proof.";
50
+ readonly type: "object";
51
+ readonly additionalProperties: false;
52
+ readonly required: readonly ["applicationId", "parameters", "attestation"];
53
+ readonly properties: {
54
+ readonly applicationId: {
55
+ readonly type: "string";
56
+ readonly minLength: 1;
57
+ readonly maxLength: 128;
58
+ };
59
+ readonly parameters: {
60
+ readonly $ref: "#/$defs/CommunityParameters";
61
+ readonly description: "The community's published hidden-vetting parameters, copied verbatim from its join manifest.";
62
+ };
63
+ readonly attestation: {
64
+ readonly $ref: "#/$defs/Attestation";
65
+ };
66
+ readonly ext: {
67
+ readonly $ref: "#/$defs/Ext";
68
+ };
69
+ };
70
+ readonly $defs: {
71
+ readonly Response: {
72
+ readonly $anchor: "response";
73
+ readonly title: "VTA PCS — Verify Attestation — response payload";
74
+ readonly type: "object";
75
+ readonly additionalProperties: false;
76
+ readonly required: readonly ["application", "accepted"];
77
+ readonly properties: {
78
+ readonly application: {
79
+ readonly $ref: "#/$defs/ApplicationSummary";
80
+ };
81
+ readonly accepted: {
82
+ readonly $ref: "#/$defs/AttestationMeta";
83
+ readonly description: "The metadata of the attestation taken.";
84
+ };
85
+ readonly ext: {
86
+ readonly $ref: "#/$defs/Ext";
87
+ };
88
+ };
89
+ };
90
+ readonly Ext: {
91
+ readonly title: "Ext";
92
+ readonly description: "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.";
93
+ readonly type: "object";
94
+ readonly minProperties: 1;
95
+ readonly additionalProperties: true;
96
+ readonly propertyNames: {
97
+ readonly pattern: "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$";
98
+ };
99
+ };
100
+ readonly AttestationMeta: {
101
+ readonly title: "AttestationMeta";
102
+ readonly description: "The metadata of one attestation: what a Vetting Statement would have said, minus its issuer, as vetting/attestation/0.1 defines it.";
103
+ readonly $ref: "#/$defs/StatementMeta";
104
+ };
105
+ readonly StatementMeta: {
106
+ readonly type: "object";
107
+ readonly additionalProperties: false;
108
+ readonly required: readonly ["community", "requirementsDigest", "method", "claimsVerified", "livenessConfirmed", "declaredRelationship", "identityCommitment", "cardDigestMultibase", "validFrom", "validUntil", "tokenLabel", "tokenSerial"];
109
+ readonly description: "What a Vetting Statement would have said, minus its issuer.";
110
+ readonly properties: {
111
+ readonly community: {
112
+ readonly type: "string";
113
+ readonly minLength: 1;
114
+ readonly description: "The community this attestation is for. An attestation is not portable between communities.";
115
+ };
116
+ readonly requirementsDigest: {
117
+ readonly type: "string";
118
+ readonly minLength: 1;
119
+ readonly description: "The digest of the criterion's requirements as the vetter read them.";
120
+ };
121
+ readonly method: {
122
+ readonly type: "string";
123
+ readonly enum: readonly ["inPerson", "video", "priorAcquaintance"];
124
+ readonly description: "How the vetter met the applicant.";
125
+ };
126
+ readonly claimsVerified: {
127
+ readonly type: "array";
128
+ readonly minItems: 1;
129
+ readonly items: {
130
+ readonly type: "string";
131
+ readonly minLength: 1;
132
+ };
133
+ readonly description: "The claim types the vetter checked.";
134
+ };
135
+ readonly livenessConfirmed: {
136
+ readonly type: "boolean";
137
+ readonly description: "Whether the vetter confirmed a live person.";
138
+ };
139
+ readonly declaredRelationship: {
140
+ readonly type: "string";
141
+ readonly enum: readonly ["none", "family", "sameEmployer", "closeFriend", "other"];
142
+ readonly description: "The relationship the vetter declared, which the community's independence rules count.";
143
+ };
144
+ readonly identityCommitment: {
145
+ readonly type: "string";
146
+ readonly pattern: "^z[1-9A-HJ-NP-Za-km-z]+$";
147
+ readonly description: "The commitment on the Vetting Card the applicant showed. Consistency across attestations is what stops two applicants pooling them.";
148
+ };
149
+ readonly cardDigestMultibase: {
150
+ readonly type: "string";
151
+ readonly pattern: "^z[1-9A-HJ-NP-Za-km-z]+$";
152
+ readonly description: "Digest of that card, as the vetter verified it.";
153
+ };
154
+ readonly validFrom: {
155
+ readonly type: "string";
156
+ readonly format: "date";
157
+ readonly description: "A DATE, never a timestamp: an exact time would let a community line an attestation up with a vetter's activity, which undoes the proof without touching it.";
158
+ };
159
+ readonly validUntil: {
160
+ readonly type: "string";
161
+ readonly format: "date";
162
+ readonly description: "A date, for the same reason.";
163
+ };
164
+ readonly tokenLabel: {
165
+ readonly type: "string";
166
+ readonly minLength: 1;
167
+ readonly maxLength: 128;
168
+ readonly description: "The token label spent, repeated inside the bound facts so it cannot be swapped in transit.";
169
+ };
170
+ readonly tokenSerial: {
171
+ readonly type: "string";
172
+ readonly pattern: "^z[1-9A-HJ-NP-Za-km-z]+$";
173
+ readonly description: "The token serial spent, likewise bound.";
174
+ };
175
+ };
176
+ };
177
+ readonly ApplicationSummary: {
178
+ readonly title: "ApplicationSummary";
179
+ readonly description: "An applicant engine as the VTA holds it, without its key.";
180
+ readonly type: "object";
181
+ readonly additionalProperties: false;
182
+ readonly required: readonly ["applicationId", "contextId", "community", "joinDid", "suite", "id", "attestations", "createdAt"];
183
+ readonly properties: {
184
+ readonly applicationId: {
185
+ readonly type: "string";
186
+ readonly minLength: 1;
187
+ readonly maxLength: 128;
188
+ readonly description: "The VTA's handle for this application. Opaque; never sent to the community.";
189
+ };
190
+ readonly contextId: {
191
+ readonly type: "string";
192
+ readonly minLength: 1;
193
+ readonly description: "The context the application's key is derived in.";
194
+ };
195
+ readonly community: {
196
+ readonly type: "string";
197
+ readonly minLength: 1;
198
+ readonly description: "The community's DID.";
199
+ };
200
+ readonly joinDid: {
201
+ readonly type: "string";
202
+ readonly minLength: 1;
203
+ readonly description: "The DID the application joins as.";
204
+ };
205
+ readonly suite: {
206
+ readonly type: "string";
207
+ readonly minLength: 1;
208
+ readonly maxLength: 64;
209
+ };
210
+ readonly id: {
211
+ readonly $ref: "#/$defs/Multibase";
212
+ readonly description: "The applicant's PCS identifier: what a vetter attests to, carried in a vetting/request's `ext`.";
213
+ };
214
+ readonly attestations: {
215
+ readonly type: "array";
216
+ readonly description: "The metadata of each attestation held, in the order received. Metadata names no vetter.";
217
+ readonly items: {
218
+ readonly $ref: "#/$defs/StatementMeta";
219
+ };
220
+ };
221
+ readonly createdAt: {
222
+ readonly type: "string";
223
+ readonly format: "date-time";
224
+ };
225
+ };
226
+ };
227
+ readonly Multibase: {
228
+ readonly title: "Multibase";
229
+ readonly description: "A binary value, multibase base58btc over the suite's canonical encoding.";
230
+ readonly type: "string";
231
+ readonly pattern: "^z[1-9A-HJ-NP-Za-km-z]+$";
232
+ };
233
+ readonly Attestation: {
234
+ readonly title: "Attestation";
235
+ readonly description: "An attestation as a vetter hands it to an applicant: the payload of vetting/attestation/0.1, without its `ext`. The engine produces it from vta/pcs/attest and takes it into vta/pcs/verify-attestation.";
236
+ readonly type: "object";
237
+ readonly additionalProperties: false;
238
+ readonly required: readonly ["suite", "attestation", "meta", "token"];
239
+ readonly properties: {
240
+ readonly suite: {
241
+ readonly type: "string";
242
+ readonly minLength: 1;
243
+ readonly maxLength: 64;
244
+ readonly description: "The suite the attestation was made under, as the community publishes it.";
245
+ };
246
+ readonly attestation: {
247
+ readonly $ref: "#/$defs/Multibase";
248
+ readonly description: "The attestation: a tag, a shown class credential and a proof. It names no vetter.";
249
+ };
250
+ readonly meta: {
251
+ readonly $ref: "#/$defs/StatementMeta";
252
+ };
253
+ readonly token: {
254
+ readonly $ref: "#/$defs/AttestationToken";
255
+ };
256
+ };
257
+ };
258
+ readonly AttestationToken: {
259
+ readonly title: "AttestationToken";
260
+ readonly description: "The attestation token spent on one attestation: the label it was drawn under, the serial its spend reveals, and its re-randomised signature. The same members as `token` in vetting/attestation/0.1.";
261
+ readonly type: "object";
262
+ readonly additionalProperties: false;
263
+ readonly required: readonly ["label", "serial", "shown"];
264
+ readonly properties: {
265
+ readonly label: {
266
+ readonly type: "string";
267
+ readonly minLength: 1;
268
+ readonly maxLength: 128;
269
+ readonly description: "The token label spent under.";
270
+ };
271
+ readonly serial: {
272
+ readonly $ref: "#/$defs/Multibase";
273
+ readonly description: "The serial revealed by the spend.";
274
+ };
275
+ readonly shown: {
276
+ readonly $ref: "#/$defs/Multibase";
277
+ readonly description: "The re-randomised token signature, verifiable under the published token key.";
278
+ };
279
+ };
280
+ };
281
+ readonly CommunityParameters: {
282
+ readonly title: "CommunityParameters";
283
+ readonly description: "The community's hidden-vetting parameters exactly as its join manifest publishes them, under the criterion's `vetting.ext`. The caller copies them in verbatim on every call that needs them, because the community rotates labels and the engine keeps no copy of its own: a stale copy costs the caller a refused proof, never a mistaken one.";
284
+ readonly $ref: "#/$defs/PublishedConfig";
285
+ };
286
+ readonly PublishedConfig: {
287
+ readonly title: "PublishedConfig";
288
+ readonly description: "The parameters exactly as they now appear in this community's join manifest, under vetting.ext. What an applicant and a vetter read.";
289
+ readonly type: "object";
290
+ readonly additionalProperties: false;
291
+ readonly required: readonly ["suite", "helperKey", "tokenKey", "vetterLabels", "tokenLabels", "dripPerTick", "tickLength", "events"];
292
+ readonly properties: {
293
+ readonly suite: {
294
+ readonly type: "string";
295
+ readonly minLength: 1;
296
+ };
297
+ readonly helperKey: {
298
+ readonly type: "string";
299
+ readonly minLength: 1;
300
+ readonly description: "The helper verification key, multibase — named for its role on the wire rather than for hvk.";
301
+ };
302
+ readonly tokenKey: {
303
+ readonly type: "string";
304
+ readonly minLength: 1;
305
+ readonly description: "The token verification key, multibase — named for its role on the wire rather than for tvk.";
306
+ };
307
+ readonly vetterLabels: {
308
+ readonly type: "array";
309
+ readonly items: {
310
+ readonly type: "string";
311
+ readonly minLength: 1;
312
+ };
313
+ readonly description: "Class labels published whole, e.g. vetter/2026-09 — a request names one of these, not the bare period.";
314
+ };
315
+ readonly tokenLabels: {
316
+ readonly type: "array";
317
+ readonly items: {
318
+ readonly type: "string";
319
+ readonly minLength: 1;
320
+ };
321
+ };
322
+ readonly dripPerTick: {
323
+ readonly type: "integer";
324
+ readonly minimum: 1;
325
+ };
326
+ readonly tickLength: {
327
+ readonly $ref: "#/$defs/TickLength";
328
+ };
329
+ readonly events: {
330
+ readonly type: "array";
331
+ readonly items: {
332
+ readonly $ref: "#/$defs/PublishedEvent";
333
+ };
334
+ };
335
+ };
336
+ };
337
+ readonly PublishedEvent: {
338
+ readonly title: "PublishedEvent";
339
+ readonly description: "The published shape drops approvedBy and graceDays: who approved is the community's own record, and a vetter is told closesAfter when its request is approved rather than being handed the raw grace period here.";
340
+ readonly type: "object";
341
+ readonly additionalProperties: false;
342
+ readonly required: readonly ["eventId", "startDate", "endDate", "groupFloor", "tiers"];
343
+ readonly properties: {
344
+ readonly eventId: {
345
+ readonly type: "string";
346
+ readonly minLength: 1;
347
+ };
348
+ readonly startDate: {
349
+ readonly type: "string";
350
+ readonly format: "date";
351
+ };
352
+ readonly endDate: {
353
+ readonly type: "string";
354
+ readonly format: "date";
355
+ };
356
+ readonly groupFloor: {
357
+ readonly type: "integer";
358
+ readonly minimum: 1;
359
+ };
360
+ readonly tiers: {
361
+ readonly type: "array";
362
+ readonly items: {
363
+ readonly $ref: "#/$defs/Tier";
364
+ };
365
+ };
366
+ };
367
+ };
368
+ readonly Tier: {
369
+ readonly title: "Tier";
370
+ readonly type: "object";
371
+ readonly additionalProperties: false;
372
+ readonly required: readonly ["name", "dripPerTick"];
373
+ readonly properties: {
374
+ readonly name: {
375
+ readonly type: "string";
376
+ readonly minLength: 1;
377
+ readonly description: "How the menu names it: desk, busy-desk.";
378
+ };
379
+ readonly dripPerTick: {
380
+ readonly type: "integer";
381
+ readonly minimum: 1;
382
+ readonly description: "How many tokens a tick under this tier yields.";
383
+ };
384
+ };
385
+ };
386
+ readonly TickLength: {
387
+ readonly title: "TickLength";
388
+ readonly type: "string";
389
+ readonly pattern: "^P(?:\\d+D(?:T\\d+H)?|T\\d+H)$";
390
+ readonly description: "The length of one tick of the drip, as an ISO 8601 duration in days and/or hours — at least `PT1H`. A label's tick `t` is the window starting `t` tick lengths after the label's start (`vtc/vetting/vetters/pcs-tokens`).";
391
+ };
392
+ };
393
+ };
394
+ /** As {@link PAYLOAD_SCHEMA}, for the success-response variant. */
395
+ export declare const RESPONSE_PAYLOAD_SCHEMA: {
396
+ readonly $schema: "https://json-schema.org/draft/2020-12/schema";
397
+ readonly $ref: "#/$defs/Response";
398
+ readonly $defs: {
399
+ readonly Response: {
400
+ readonly $anchor: "response";
401
+ readonly title: "VTA PCS — Verify Attestation — response payload";
402
+ readonly type: "object";
403
+ readonly additionalProperties: false;
404
+ readonly required: readonly ["application", "accepted"];
405
+ readonly properties: {
406
+ readonly application: {
407
+ readonly $ref: "#/$defs/ApplicationSummary";
408
+ };
409
+ readonly accepted: {
410
+ readonly $ref: "#/$defs/AttestationMeta";
411
+ readonly description: "The metadata of the attestation taken.";
412
+ };
413
+ readonly ext: {
414
+ readonly $ref: "#/$defs/Ext";
415
+ };
416
+ };
417
+ };
418
+ readonly Ext: {
419
+ readonly title: "Ext";
420
+ readonly description: "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.";
421
+ readonly type: "object";
422
+ readonly minProperties: 1;
423
+ readonly additionalProperties: true;
424
+ readonly propertyNames: {
425
+ readonly pattern: "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$";
426
+ };
427
+ };
428
+ readonly AttestationMeta: {
429
+ readonly title: "AttestationMeta";
430
+ readonly description: "The metadata of one attestation: what a Vetting Statement would have said, minus its issuer, as vetting/attestation/0.1 defines it.";
431
+ readonly $ref: "#/$defs/StatementMeta";
432
+ };
433
+ readonly StatementMeta: {
434
+ readonly type: "object";
435
+ readonly additionalProperties: false;
436
+ readonly required: readonly ["community", "requirementsDigest", "method", "claimsVerified", "livenessConfirmed", "declaredRelationship", "identityCommitment", "cardDigestMultibase", "validFrom", "validUntil", "tokenLabel", "tokenSerial"];
437
+ readonly description: "What a Vetting Statement would have said, minus its issuer.";
438
+ readonly properties: {
439
+ readonly community: {
440
+ readonly type: "string";
441
+ readonly minLength: 1;
442
+ readonly description: "The community this attestation is for. An attestation is not portable between communities.";
443
+ };
444
+ readonly requirementsDigest: {
445
+ readonly type: "string";
446
+ readonly minLength: 1;
447
+ readonly description: "The digest of the criterion's requirements as the vetter read them.";
448
+ };
449
+ readonly method: {
450
+ readonly type: "string";
451
+ readonly enum: readonly ["inPerson", "video", "priorAcquaintance"];
452
+ readonly description: "How the vetter met the applicant.";
453
+ };
454
+ readonly claimsVerified: {
455
+ readonly type: "array";
456
+ readonly minItems: 1;
457
+ readonly items: {
458
+ readonly type: "string";
459
+ readonly minLength: 1;
460
+ };
461
+ readonly description: "The claim types the vetter checked.";
462
+ };
463
+ readonly livenessConfirmed: {
464
+ readonly type: "boolean";
465
+ readonly description: "Whether the vetter confirmed a live person.";
466
+ };
467
+ readonly declaredRelationship: {
468
+ readonly type: "string";
469
+ readonly enum: readonly ["none", "family", "sameEmployer", "closeFriend", "other"];
470
+ readonly description: "The relationship the vetter declared, which the community's independence rules count.";
471
+ };
472
+ readonly identityCommitment: {
473
+ readonly type: "string";
474
+ readonly pattern: "^z[1-9A-HJ-NP-Za-km-z]+$";
475
+ readonly description: "The commitment on the Vetting Card the applicant showed. Consistency across attestations is what stops two applicants pooling them.";
476
+ };
477
+ readonly cardDigestMultibase: {
478
+ readonly type: "string";
479
+ readonly pattern: "^z[1-9A-HJ-NP-Za-km-z]+$";
480
+ readonly description: "Digest of that card, as the vetter verified it.";
481
+ };
482
+ readonly validFrom: {
483
+ readonly type: "string";
484
+ readonly format: "date";
485
+ readonly description: "A DATE, never a timestamp: an exact time would let a community line an attestation up with a vetter's activity, which undoes the proof without touching it.";
486
+ };
487
+ readonly validUntil: {
488
+ readonly type: "string";
489
+ readonly format: "date";
490
+ readonly description: "A date, for the same reason.";
491
+ };
492
+ readonly tokenLabel: {
493
+ readonly type: "string";
494
+ readonly minLength: 1;
495
+ readonly maxLength: 128;
496
+ readonly description: "The token label spent, repeated inside the bound facts so it cannot be swapped in transit.";
497
+ };
498
+ readonly tokenSerial: {
499
+ readonly type: "string";
500
+ readonly pattern: "^z[1-9A-HJ-NP-Za-km-z]+$";
501
+ readonly description: "The token serial spent, likewise bound.";
502
+ };
503
+ };
504
+ };
505
+ readonly ApplicationSummary: {
506
+ readonly title: "ApplicationSummary";
507
+ readonly description: "An applicant engine as the VTA holds it, without its key.";
508
+ readonly type: "object";
509
+ readonly additionalProperties: false;
510
+ readonly required: readonly ["applicationId", "contextId", "community", "joinDid", "suite", "id", "attestations", "createdAt"];
511
+ readonly properties: {
512
+ readonly applicationId: {
513
+ readonly type: "string";
514
+ readonly minLength: 1;
515
+ readonly maxLength: 128;
516
+ readonly description: "The VTA's handle for this application. Opaque; never sent to the community.";
517
+ };
518
+ readonly contextId: {
519
+ readonly type: "string";
520
+ readonly minLength: 1;
521
+ readonly description: "The context the application's key is derived in.";
522
+ };
523
+ readonly community: {
524
+ readonly type: "string";
525
+ readonly minLength: 1;
526
+ readonly description: "The community's DID.";
527
+ };
528
+ readonly joinDid: {
529
+ readonly type: "string";
530
+ readonly minLength: 1;
531
+ readonly description: "The DID the application joins as.";
532
+ };
533
+ readonly suite: {
534
+ readonly type: "string";
535
+ readonly minLength: 1;
536
+ readonly maxLength: 64;
537
+ };
538
+ readonly id: {
539
+ readonly $ref: "#/$defs/Multibase";
540
+ readonly description: "The applicant's PCS identifier: what a vetter attests to, carried in a vetting/request's `ext`.";
541
+ };
542
+ readonly attestations: {
543
+ readonly type: "array";
544
+ readonly description: "The metadata of each attestation held, in the order received. Metadata names no vetter.";
545
+ readonly items: {
546
+ readonly $ref: "#/$defs/StatementMeta";
547
+ };
548
+ };
549
+ readonly createdAt: {
550
+ readonly type: "string";
551
+ readonly format: "date-time";
552
+ };
553
+ };
554
+ };
555
+ readonly Multibase: {
556
+ readonly title: "Multibase";
557
+ readonly description: "A binary value, multibase base58btc over the suite's canonical encoding.";
558
+ readonly type: "string";
559
+ readonly pattern: "^z[1-9A-HJ-NP-Za-km-z]+$";
560
+ };
561
+ readonly Attestation: {
562
+ readonly title: "Attestation";
563
+ readonly description: "An attestation as a vetter hands it to an applicant: the payload of vetting/attestation/0.1, without its `ext`. The engine produces it from vta/pcs/attest and takes it into vta/pcs/verify-attestation.";
564
+ readonly type: "object";
565
+ readonly additionalProperties: false;
566
+ readonly required: readonly ["suite", "attestation", "meta", "token"];
567
+ readonly properties: {
568
+ readonly suite: {
569
+ readonly type: "string";
570
+ readonly minLength: 1;
571
+ readonly maxLength: 64;
572
+ readonly description: "The suite the attestation was made under, as the community publishes it.";
573
+ };
574
+ readonly attestation: {
575
+ readonly $ref: "#/$defs/Multibase";
576
+ readonly description: "The attestation: a tag, a shown class credential and a proof. It names no vetter.";
577
+ };
578
+ readonly meta: {
579
+ readonly $ref: "#/$defs/StatementMeta";
580
+ };
581
+ readonly token: {
582
+ readonly $ref: "#/$defs/AttestationToken";
583
+ };
584
+ };
585
+ };
586
+ readonly AttestationToken: {
587
+ readonly title: "AttestationToken";
588
+ readonly description: "The attestation token spent on one attestation: the label it was drawn under, the serial its spend reveals, and its re-randomised signature. The same members as `token` in vetting/attestation/0.1.";
589
+ readonly type: "object";
590
+ readonly additionalProperties: false;
591
+ readonly required: readonly ["label", "serial", "shown"];
592
+ readonly properties: {
593
+ readonly label: {
594
+ readonly type: "string";
595
+ readonly minLength: 1;
596
+ readonly maxLength: 128;
597
+ readonly description: "The token label spent under.";
598
+ };
599
+ readonly serial: {
600
+ readonly $ref: "#/$defs/Multibase";
601
+ readonly description: "The serial revealed by the spend.";
602
+ };
603
+ readonly shown: {
604
+ readonly $ref: "#/$defs/Multibase";
605
+ readonly description: "The re-randomised token signature, verifiable under the published token key.";
606
+ };
607
+ };
608
+ };
609
+ readonly CommunityParameters: {
610
+ readonly title: "CommunityParameters";
611
+ readonly description: "The community's hidden-vetting parameters exactly as its join manifest publishes them, under the criterion's `vetting.ext`. The caller copies them in verbatim on every call that needs them, because the community rotates labels and the engine keeps no copy of its own: a stale copy costs the caller a refused proof, never a mistaken one.";
612
+ readonly $ref: "#/$defs/PublishedConfig";
613
+ };
614
+ readonly PublishedConfig: {
615
+ readonly title: "PublishedConfig";
616
+ readonly description: "The parameters exactly as they now appear in this community's join manifest, under vetting.ext. What an applicant and a vetter read.";
617
+ readonly type: "object";
618
+ readonly additionalProperties: false;
619
+ readonly required: readonly ["suite", "helperKey", "tokenKey", "vetterLabels", "tokenLabels", "dripPerTick", "tickLength", "events"];
620
+ readonly properties: {
621
+ readonly suite: {
622
+ readonly type: "string";
623
+ readonly minLength: 1;
624
+ };
625
+ readonly helperKey: {
626
+ readonly type: "string";
627
+ readonly minLength: 1;
628
+ readonly description: "The helper verification key, multibase — named for its role on the wire rather than for hvk.";
629
+ };
630
+ readonly tokenKey: {
631
+ readonly type: "string";
632
+ readonly minLength: 1;
633
+ readonly description: "The token verification key, multibase — named for its role on the wire rather than for tvk.";
634
+ };
635
+ readonly vetterLabels: {
636
+ readonly type: "array";
637
+ readonly items: {
638
+ readonly type: "string";
639
+ readonly minLength: 1;
640
+ };
641
+ readonly description: "Class labels published whole, e.g. vetter/2026-09 — a request names one of these, not the bare period.";
642
+ };
643
+ readonly tokenLabels: {
644
+ readonly type: "array";
645
+ readonly items: {
646
+ readonly type: "string";
647
+ readonly minLength: 1;
648
+ };
649
+ };
650
+ readonly dripPerTick: {
651
+ readonly type: "integer";
652
+ readonly minimum: 1;
653
+ };
654
+ readonly tickLength: {
655
+ readonly $ref: "#/$defs/TickLength";
656
+ };
657
+ readonly events: {
658
+ readonly type: "array";
659
+ readonly items: {
660
+ readonly $ref: "#/$defs/PublishedEvent";
661
+ };
662
+ };
663
+ };
664
+ };
665
+ readonly PublishedEvent: {
666
+ readonly title: "PublishedEvent";
667
+ readonly description: "The published shape drops approvedBy and graceDays: who approved is the community's own record, and a vetter is told closesAfter when its request is approved rather than being handed the raw grace period here.";
668
+ readonly type: "object";
669
+ readonly additionalProperties: false;
670
+ readonly required: readonly ["eventId", "startDate", "endDate", "groupFloor", "tiers"];
671
+ readonly properties: {
672
+ readonly eventId: {
673
+ readonly type: "string";
674
+ readonly minLength: 1;
675
+ };
676
+ readonly startDate: {
677
+ readonly type: "string";
678
+ readonly format: "date";
679
+ };
680
+ readonly endDate: {
681
+ readonly type: "string";
682
+ readonly format: "date";
683
+ };
684
+ readonly groupFloor: {
685
+ readonly type: "integer";
686
+ readonly minimum: 1;
687
+ };
688
+ readonly tiers: {
689
+ readonly type: "array";
690
+ readonly items: {
691
+ readonly $ref: "#/$defs/Tier";
692
+ };
693
+ };
694
+ };
695
+ };
696
+ readonly Tier: {
697
+ readonly title: "Tier";
698
+ readonly type: "object";
699
+ readonly additionalProperties: false;
700
+ readonly required: readonly ["name", "dripPerTick"];
701
+ readonly properties: {
702
+ readonly name: {
703
+ readonly type: "string";
704
+ readonly minLength: 1;
705
+ readonly description: "How the menu names it: desk, busy-desk.";
706
+ };
707
+ readonly dripPerTick: {
708
+ readonly type: "integer";
709
+ readonly minimum: 1;
710
+ readonly description: "How many tokens a tick under this tier yields.";
711
+ };
712
+ };
713
+ };
714
+ readonly TickLength: {
715
+ readonly title: "TickLength";
716
+ readonly type: "string";
717
+ readonly pattern: "^P(?:\\d+D(?:T\\d+H)?|T\\d+H)$";
718
+ readonly description: "The length of one tick of the drip, as an ISO 8601 duration in days and/or hours — at least `PT1H`. A label's tick `t` is the window starting `t` tick lengths after the label's start (`vtc/vetting/vetters/pcs-tokens`).";
719
+ };
720
+ };
721
+ };
722
+ /**
723
+ * SPEC.md §7.2 policy for the request variant, from this specification's
724
+ * front matter. Pass to `consumeInbound` — items 5b, 7 and 8 are
725
+ * per-specification and cannot be derived from the document alone, and
726
+ * item 2 needs the schema this carries.
727
+ */
728
+ export declare const SPEC: {
729
+ readonly typeUri: "https://trusttasks.org/spec/vta/pcs/verify-attestation/0.1";
730
+ readonly isBearer: false;
731
+ readonly isProofRequired: true;
732
+ readonly isRecipientRequired: true;
733
+ readonly isIssuedAtRequired: true;
734
+ readonly payloadSchema: {
735
+ readonly $schema: "https://json-schema.org/draft/2020-12/schema";
736
+ readonly $id: "https://trusttasks.org/spec/vta/pcs/verify-attestation/0.1";
737
+ readonly title: "VTA PCS — Verify Attestation — payload";
738
+ readonly description: "A client hands its VTA an attestation a vetter sent; the VTA checks it and its token against the community's parameters and keeps it for the application's proof.";
739
+ readonly type: "object";
740
+ readonly additionalProperties: false;
741
+ readonly required: readonly ["applicationId", "parameters", "attestation"];
742
+ readonly properties: {
743
+ readonly applicationId: {
744
+ readonly type: "string";
745
+ readonly minLength: 1;
746
+ readonly maxLength: 128;
747
+ };
748
+ readonly parameters: {
749
+ readonly $ref: "#/$defs/CommunityParameters";
750
+ readonly description: "The community's published hidden-vetting parameters, copied verbatim from its join manifest.";
751
+ };
752
+ readonly attestation: {
753
+ readonly $ref: "#/$defs/Attestation";
754
+ };
755
+ readonly ext: {
756
+ readonly $ref: "#/$defs/Ext";
757
+ };
758
+ };
759
+ readonly $defs: {
760
+ readonly Response: {
761
+ readonly $anchor: "response";
762
+ readonly title: "VTA PCS — Verify Attestation — response payload";
763
+ readonly type: "object";
764
+ readonly additionalProperties: false;
765
+ readonly required: readonly ["application", "accepted"];
766
+ readonly properties: {
767
+ readonly application: {
768
+ readonly $ref: "#/$defs/ApplicationSummary";
769
+ };
770
+ readonly accepted: {
771
+ readonly $ref: "#/$defs/AttestationMeta";
772
+ readonly description: "The metadata of the attestation taken.";
773
+ };
774
+ readonly ext: {
775
+ readonly $ref: "#/$defs/Ext";
776
+ };
777
+ };
778
+ };
779
+ readonly Ext: {
780
+ readonly title: "Ext";
781
+ readonly description: "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.";
782
+ readonly type: "object";
783
+ readonly minProperties: 1;
784
+ readonly additionalProperties: true;
785
+ readonly propertyNames: {
786
+ readonly pattern: "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$";
787
+ };
788
+ };
789
+ readonly AttestationMeta: {
790
+ readonly title: "AttestationMeta";
791
+ readonly description: "The metadata of one attestation: what a Vetting Statement would have said, minus its issuer, as vetting/attestation/0.1 defines it.";
792
+ readonly $ref: "#/$defs/StatementMeta";
793
+ };
794
+ readonly StatementMeta: {
795
+ readonly type: "object";
796
+ readonly additionalProperties: false;
797
+ readonly required: readonly ["community", "requirementsDigest", "method", "claimsVerified", "livenessConfirmed", "declaredRelationship", "identityCommitment", "cardDigestMultibase", "validFrom", "validUntil", "tokenLabel", "tokenSerial"];
798
+ readonly description: "What a Vetting Statement would have said, minus its issuer.";
799
+ readonly properties: {
800
+ readonly community: {
801
+ readonly type: "string";
802
+ readonly minLength: 1;
803
+ readonly description: "The community this attestation is for. An attestation is not portable between communities.";
804
+ };
805
+ readonly requirementsDigest: {
806
+ readonly type: "string";
807
+ readonly minLength: 1;
808
+ readonly description: "The digest of the criterion's requirements as the vetter read them.";
809
+ };
810
+ readonly method: {
811
+ readonly type: "string";
812
+ readonly enum: readonly ["inPerson", "video", "priorAcquaintance"];
813
+ readonly description: "How the vetter met the applicant.";
814
+ };
815
+ readonly claimsVerified: {
816
+ readonly type: "array";
817
+ readonly minItems: 1;
818
+ readonly items: {
819
+ readonly type: "string";
820
+ readonly minLength: 1;
821
+ };
822
+ readonly description: "The claim types the vetter checked.";
823
+ };
824
+ readonly livenessConfirmed: {
825
+ readonly type: "boolean";
826
+ readonly description: "Whether the vetter confirmed a live person.";
827
+ };
828
+ readonly declaredRelationship: {
829
+ readonly type: "string";
830
+ readonly enum: readonly ["none", "family", "sameEmployer", "closeFriend", "other"];
831
+ readonly description: "The relationship the vetter declared, which the community's independence rules count.";
832
+ };
833
+ readonly identityCommitment: {
834
+ readonly type: "string";
835
+ readonly pattern: "^z[1-9A-HJ-NP-Za-km-z]+$";
836
+ readonly description: "The commitment on the Vetting Card the applicant showed. Consistency across attestations is what stops two applicants pooling them.";
837
+ };
838
+ readonly cardDigestMultibase: {
839
+ readonly type: "string";
840
+ readonly pattern: "^z[1-9A-HJ-NP-Za-km-z]+$";
841
+ readonly description: "Digest of that card, as the vetter verified it.";
842
+ };
843
+ readonly validFrom: {
844
+ readonly type: "string";
845
+ readonly format: "date";
846
+ readonly description: "A DATE, never a timestamp: an exact time would let a community line an attestation up with a vetter's activity, which undoes the proof without touching it.";
847
+ };
848
+ readonly validUntil: {
849
+ readonly type: "string";
850
+ readonly format: "date";
851
+ readonly description: "A date, for the same reason.";
852
+ };
853
+ readonly tokenLabel: {
854
+ readonly type: "string";
855
+ readonly minLength: 1;
856
+ readonly maxLength: 128;
857
+ readonly description: "The token label spent, repeated inside the bound facts so it cannot be swapped in transit.";
858
+ };
859
+ readonly tokenSerial: {
860
+ readonly type: "string";
861
+ readonly pattern: "^z[1-9A-HJ-NP-Za-km-z]+$";
862
+ readonly description: "The token serial spent, likewise bound.";
863
+ };
864
+ };
865
+ };
866
+ readonly ApplicationSummary: {
867
+ readonly title: "ApplicationSummary";
868
+ readonly description: "An applicant engine as the VTA holds it, without its key.";
869
+ readonly type: "object";
870
+ readonly additionalProperties: false;
871
+ readonly required: readonly ["applicationId", "contextId", "community", "joinDid", "suite", "id", "attestations", "createdAt"];
872
+ readonly properties: {
873
+ readonly applicationId: {
874
+ readonly type: "string";
875
+ readonly minLength: 1;
876
+ readonly maxLength: 128;
877
+ readonly description: "The VTA's handle for this application. Opaque; never sent to the community.";
878
+ };
879
+ readonly contextId: {
880
+ readonly type: "string";
881
+ readonly minLength: 1;
882
+ readonly description: "The context the application's key is derived in.";
883
+ };
884
+ readonly community: {
885
+ readonly type: "string";
886
+ readonly minLength: 1;
887
+ readonly description: "The community's DID.";
888
+ };
889
+ readonly joinDid: {
890
+ readonly type: "string";
891
+ readonly minLength: 1;
892
+ readonly description: "The DID the application joins as.";
893
+ };
894
+ readonly suite: {
895
+ readonly type: "string";
896
+ readonly minLength: 1;
897
+ readonly maxLength: 64;
898
+ };
899
+ readonly id: {
900
+ readonly $ref: "#/$defs/Multibase";
901
+ readonly description: "The applicant's PCS identifier: what a vetter attests to, carried in a vetting/request's `ext`.";
902
+ };
903
+ readonly attestations: {
904
+ readonly type: "array";
905
+ readonly description: "The metadata of each attestation held, in the order received. Metadata names no vetter.";
906
+ readonly items: {
907
+ readonly $ref: "#/$defs/StatementMeta";
908
+ };
909
+ };
910
+ readonly createdAt: {
911
+ readonly type: "string";
912
+ readonly format: "date-time";
913
+ };
914
+ };
915
+ };
916
+ readonly Multibase: {
917
+ readonly title: "Multibase";
918
+ readonly description: "A binary value, multibase base58btc over the suite's canonical encoding.";
919
+ readonly type: "string";
920
+ readonly pattern: "^z[1-9A-HJ-NP-Za-km-z]+$";
921
+ };
922
+ readonly Attestation: {
923
+ readonly title: "Attestation";
924
+ readonly description: "An attestation as a vetter hands it to an applicant: the payload of vetting/attestation/0.1, without its `ext`. The engine produces it from vta/pcs/attest and takes it into vta/pcs/verify-attestation.";
925
+ readonly type: "object";
926
+ readonly additionalProperties: false;
927
+ readonly required: readonly ["suite", "attestation", "meta", "token"];
928
+ readonly properties: {
929
+ readonly suite: {
930
+ readonly type: "string";
931
+ readonly minLength: 1;
932
+ readonly maxLength: 64;
933
+ readonly description: "The suite the attestation was made under, as the community publishes it.";
934
+ };
935
+ readonly attestation: {
936
+ readonly $ref: "#/$defs/Multibase";
937
+ readonly description: "The attestation: a tag, a shown class credential and a proof. It names no vetter.";
938
+ };
939
+ readonly meta: {
940
+ readonly $ref: "#/$defs/StatementMeta";
941
+ };
942
+ readonly token: {
943
+ readonly $ref: "#/$defs/AttestationToken";
944
+ };
945
+ };
946
+ };
947
+ readonly AttestationToken: {
948
+ readonly title: "AttestationToken";
949
+ readonly description: "The attestation token spent on one attestation: the label it was drawn under, the serial its spend reveals, and its re-randomised signature. The same members as `token` in vetting/attestation/0.1.";
950
+ readonly type: "object";
951
+ readonly additionalProperties: false;
952
+ readonly required: readonly ["label", "serial", "shown"];
953
+ readonly properties: {
954
+ readonly label: {
955
+ readonly type: "string";
956
+ readonly minLength: 1;
957
+ readonly maxLength: 128;
958
+ readonly description: "The token label spent under.";
959
+ };
960
+ readonly serial: {
961
+ readonly $ref: "#/$defs/Multibase";
962
+ readonly description: "The serial revealed by the spend.";
963
+ };
964
+ readonly shown: {
965
+ readonly $ref: "#/$defs/Multibase";
966
+ readonly description: "The re-randomised token signature, verifiable under the published token key.";
967
+ };
968
+ };
969
+ };
970
+ readonly CommunityParameters: {
971
+ readonly title: "CommunityParameters";
972
+ readonly description: "The community's hidden-vetting parameters exactly as its join manifest publishes them, under the criterion's `vetting.ext`. The caller copies them in verbatim on every call that needs them, because the community rotates labels and the engine keeps no copy of its own: a stale copy costs the caller a refused proof, never a mistaken one.";
973
+ readonly $ref: "#/$defs/PublishedConfig";
974
+ };
975
+ readonly PublishedConfig: {
976
+ readonly title: "PublishedConfig";
977
+ readonly description: "The parameters exactly as they now appear in this community's join manifest, under vetting.ext. What an applicant and a vetter read.";
978
+ readonly type: "object";
979
+ readonly additionalProperties: false;
980
+ readonly required: readonly ["suite", "helperKey", "tokenKey", "vetterLabels", "tokenLabels", "dripPerTick", "tickLength", "events"];
981
+ readonly properties: {
982
+ readonly suite: {
983
+ readonly type: "string";
984
+ readonly minLength: 1;
985
+ };
986
+ readonly helperKey: {
987
+ readonly type: "string";
988
+ readonly minLength: 1;
989
+ readonly description: "The helper verification key, multibase — named for its role on the wire rather than for hvk.";
990
+ };
991
+ readonly tokenKey: {
992
+ readonly type: "string";
993
+ readonly minLength: 1;
994
+ readonly description: "The token verification key, multibase — named for its role on the wire rather than for tvk.";
995
+ };
996
+ readonly vetterLabels: {
997
+ readonly type: "array";
998
+ readonly items: {
999
+ readonly type: "string";
1000
+ readonly minLength: 1;
1001
+ };
1002
+ readonly description: "Class labels published whole, e.g. vetter/2026-09 — a request names one of these, not the bare period.";
1003
+ };
1004
+ readonly tokenLabels: {
1005
+ readonly type: "array";
1006
+ readonly items: {
1007
+ readonly type: "string";
1008
+ readonly minLength: 1;
1009
+ };
1010
+ };
1011
+ readonly dripPerTick: {
1012
+ readonly type: "integer";
1013
+ readonly minimum: 1;
1014
+ };
1015
+ readonly tickLength: {
1016
+ readonly $ref: "#/$defs/TickLength";
1017
+ };
1018
+ readonly events: {
1019
+ readonly type: "array";
1020
+ readonly items: {
1021
+ readonly $ref: "#/$defs/PublishedEvent";
1022
+ };
1023
+ };
1024
+ };
1025
+ };
1026
+ readonly PublishedEvent: {
1027
+ readonly title: "PublishedEvent";
1028
+ readonly description: "The published shape drops approvedBy and graceDays: who approved is the community's own record, and a vetter is told closesAfter when its request is approved rather than being handed the raw grace period here.";
1029
+ readonly type: "object";
1030
+ readonly additionalProperties: false;
1031
+ readonly required: readonly ["eventId", "startDate", "endDate", "groupFloor", "tiers"];
1032
+ readonly properties: {
1033
+ readonly eventId: {
1034
+ readonly type: "string";
1035
+ readonly minLength: 1;
1036
+ };
1037
+ readonly startDate: {
1038
+ readonly type: "string";
1039
+ readonly format: "date";
1040
+ };
1041
+ readonly endDate: {
1042
+ readonly type: "string";
1043
+ readonly format: "date";
1044
+ };
1045
+ readonly groupFloor: {
1046
+ readonly type: "integer";
1047
+ readonly minimum: 1;
1048
+ };
1049
+ readonly tiers: {
1050
+ readonly type: "array";
1051
+ readonly items: {
1052
+ readonly $ref: "#/$defs/Tier";
1053
+ };
1054
+ };
1055
+ };
1056
+ };
1057
+ readonly Tier: {
1058
+ readonly title: "Tier";
1059
+ readonly type: "object";
1060
+ readonly additionalProperties: false;
1061
+ readonly required: readonly ["name", "dripPerTick"];
1062
+ readonly properties: {
1063
+ readonly name: {
1064
+ readonly type: "string";
1065
+ readonly minLength: 1;
1066
+ readonly description: "How the menu names it: desk, busy-desk.";
1067
+ };
1068
+ readonly dripPerTick: {
1069
+ readonly type: "integer";
1070
+ readonly minimum: 1;
1071
+ readonly description: "How many tokens a tick under this tier yields.";
1072
+ };
1073
+ };
1074
+ };
1075
+ readonly TickLength: {
1076
+ readonly title: "TickLength";
1077
+ readonly type: "string";
1078
+ readonly pattern: "^P(?:\\d+D(?:T\\d+H)?|T\\d+H)$";
1079
+ readonly description: "The length of one tick of the drip, as an ISO 8601 duration in days and/or hours — at least `PT1H`. A label's tick `t` is the window starting `t` tick lengths after the label's start (`vtc/vetting/vetters/pcs-tokens`).";
1080
+ };
1081
+ };
1082
+ };
1083
+ };
1084
+ /**
1085
+ * SPEC.md §7.2 policy for the success-response variant. `isRecipientRequired`
1086
+ * tracks the *issuer* party's requirement because a response swaps the
1087
+ * parties (§7.3 item 5).
1088
+ */
1089
+ export declare const RESPONSE_SPEC: {
1090
+ readonly typeUri: "https://trusttasks.org/spec/vta/pcs/verify-attestation/0.1#response";
1091
+ readonly isBearer: false;
1092
+ readonly isProofRequired: false;
1093
+ readonly isRecipientRequired: true;
1094
+ readonly isIssuedAtRequired: true;
1095
+ readonly payloadSchema: {
1096
+ readonly $schema: "https://json-schema.org/draft/2020-12/schema";
1097
+ readonly $ref: "#/$defs/Response";
1098
+ readonly $defs: {
1099
+ readonly Response: {
1100
+ readonly $anchor: "response";
1101
+ readonly title: "VTA PCS — Verify Attestation — response payload";
1102
+ readonly type: "object";
1103
+ readonly additionalProperties: false;
1104
+ readonly required: readonly ["application", "accepted"];
1105
+ readonly properties: {
1106
+ readonly application: {
1107
+ readonly $ref: "#/$defs/ApplicationSummary";
1108
+ };
1109
+ readonly accepted: {
1110
+ readonly $ref: "#/$defs/AttestationMeta";
1111
+ readonly description: "The metadata of the attestation taken.";
1112
+ };
1113
+ readonly ext: {
1114
+ readonly $ref: "#/$defs/Ext";
1115
+ };
1116
+ };
1117
+ };
1118
+ readonly Ext: {
1119
+ readonly title: "Ext";
1120
+ readonly description: "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.";
1121
+ readonly type: "object";
1122
+ readonly minProperties: 1;
1123
+ readonly additionalProperties: true;
1124
+ readonly propertyNames: {
1125
+ readonly pattern: "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$";
1126
+ };
1127
+ };
1128
+ readonly AttestationMeta: {
1129
+ readonly title: "AttestationMeta";
1130
+ readonly description: "The metadata of one attestation: what a Vetting Statement would have said, minus its issuer, as vetting/attestation/0.1 defines it.";
1131
+ readonly $ref: "#/$defs/StatementMeta";
1132
+ };
1133
+ readonly StatementMeta: {
1134
+ readonly type: "object";
1135
+ readonly additionalProperties: false;
1136
+ readonly required: readonly ["community", "requirementsDigest", "method", "claimsVerified", "livenessConfirmed", "declaredRelationship", "identityCommitment", "cardDigestMultibase", "validFrom", "validUntil", "tokenLabel", "tokenSerial"];
1137
+ readonly description: "What a Vetting Statement would have said, minus its issuer.";
1138
+ readonly properties: {
1139
+ readonly community: {
1140
+ readonly type: "string";
1141
+ readonly minLength: 1;
1142
+ readonly description: "The community this attestation is for. An attestation is not portable between communities.";
1143
+ };
1144
+ readonly requirementsDigest: {
1145
+ readonly type: "string";
1146
+ readonly minLength: 1;
1147
+ readonly description: "The digest of the criterion's requirements as the vetter read them.";
1148
+ };
1149
+ readonly method: {
1150
+ readonly type: "string";
1151
+ readonly enum: readonly ["inPerson", "video", "priorAcquaintance"];
1152
+ readonly description: "How the vetter met the applicant.";
1153
+ };
1154
+ readonly claimsVerified: {
1155
+ readonly type: "array";
1156
+ readonly minItems: 1;
1157
+ readonly items: {
1158
+ readonly type: "string";
1159
+ readonly minLength: 1;
1160
+ };
1161
+ readonly description: "The claim types the vetter checked.";
1162
+ };
1163
+ readonly livenessConfirmed: {
1164
+ readonly type: "boolean";
1165
+ readonly description: "Whether the vetter confirmed a live person.";
1166
+ };
1167
+ readonly declaredRelationship: {
1168
+ readonly type: "string";
1169
+ readonly enum: readonly ["none", "family", "sameEmployer", "closeFriend", "other"];
1170
+ readonly description: "The relationship the vetter declared, which the community's independence rules count.";
1171
+ };
1172
+ readonly identityCommitment: {
1173
+ readonly type: "string";
1174
+ readonly pattern: "^z[1-9A-HJ-NP-Za-km-z]+$";
1175
+ readonly description: "The commitment on the Vetting Card the applicant showed. Consistency across attestations is what stops two applicants pooling them.";
1176
+ };
1177
+ readonly cardDigestMultibase: {
1178
+ readonly type: "string";
1179
+ readonly pattern: "^z[1-9A-HJ-NP-Za-km-z]+$";
1180
+ readonly description: "Digest of that card, as the vetter verified it.";
1181
+ };
1182
+ readonly validFrom: {
1183
+ readonly type: "string";
1184
+ readonly format: "date";
1185
+ readonly description: "A DATE, never a timestamp: an exact time would let a community line an attestation up with a vetter's activity, which undoes the proof without touching it.";
1186
+ };
1187
+ readonly validUntil: {
1188
+ readonly type: "string";
1189
+ readonly format: "date";
1190
+ readonly description: "A date, for the same reason.";
1191
+ };
1192
+ readonly tokenLabel: {
1193
+ readonly type: "string";
1194
+ readonly minLength: 1;
1195
+ readonly maxLength: 128;
1196
+ readonly description: "The token label spent, repeated inside the bound facts so it cannot be swapped in transit.";
1197
+ };
1198
+ readonly tokenSerial: {
1199
+ readonly type: "string";
1200
+ readonly pattern: "^z[1-9A-HJ-NP-Za-km-z]+$";
1201
+ readonly description: "The token serial spent, likewise bound.";
1202
+ };
1203
+ };
1204
+ };
1205
+ readonly ApplicationSummary: {
1206
+ readonly title: "ApplicationSummary";
1207
+ readonly description: "An applicant engine as the VTA holds it, without its key.";
1208
+ readonly type: "object";
1209
+ readonly additionalProperties: false;
1210
+ readonly required: readonly ["applicationId", "contextId", "community", "joinDid", "suite", "id", "attestations", "createdAt"];
1211
+ readonly properties: {
1212
+ readonly applicationId: {
1213
+ readonly type: "string";
1214
+ readonly minLength: 1;
1215
+ readonly maxLength: 128;
1216
+ readonly description: "The VTA's handle for this application. Opaque; never sent to the community.";
1217
+ };
1218
+ readonly contextId: {
1219
+ readonly type: "string";
1220
+ readonly minLength: 1;
1221
+ readonly description: "The context the application's key is derived in.";
1222
+ };
1223
+ readonly community: {
1224
+ readonly type: "string";
1225
+ readonly minLength: 1;
1226
+ readonly description: "The community's DID.";
1227
+ };
1228
+ readonly joinDid: {
1229
+ readonly type: "string";
1230
+ readonly minLength: 1;
1231
+ readonly description: "The DID the application joins as.";
1232
+ };
1233
+ readonly suite: {
1234
+ readonly type: "string";
1235
+ readonly minLength: 1;
1236
+ readonly maxLength: 64;
1237
+ };
1238
+ readonly id: {
1239
+ readonly $ref: "#/$defs/Multibase";
1240
+ readonly description: "The applicant's PCS identifier: what a vetter attests to, carried in a vetting/request's `ext`.";
1241
+ };
1242
+ readonly attestations: {
1243
+ readonly type: "array";
1244
+ readonly description: "The metadata of each attestation held, in the order received. Metadata names no vetter.";
1245
+ readonly items: {
1246
+ readonly $ref: "#/$defs/StatementMeta";
1247
+ };
1248
+ };
1249
+ readonly createdAt: {
1250
+ readonly type: "string";
1251
+ readonly format: "date-time";
1252
+ };
1253
+ };
1254
+ };
1255
+ readonly Multibase: {
1256
+ readonly title: "Multibase";
1257
+ readonly description: "A binary value, multibase base58btc over the suite's canonical encoding.";
1258
+ readonly type: "string";
1259
+ readonly pattern: "^z[1-9A-HJ-NP-Za-km-z]+$";
1260
+ };
1261
+ readonly Attestation: {
1262
+ readonly title: "Attestation";
1263
+ readonly description: "An attestation as a vetter hands it to an applicant: the payload of vetting/attestation/0.1, without its `ext`. The engine produces it from vta/pcs/attest and takes it into vta/pcs/verify-attestation.";
1264
+ readonly type: "object";
1265
+ readonly additionalProperties: false;
1266
+ readonly required: readonly ["suite", "attestation", "meta", "token"];
1267
+ readonly properties: {
1268
+ readonly suite: {
1269
+ readonly type: "string";
1270
+ readonly minLength: 1;
1271
+ readonly maxLength: 64;
1272
+ readonly description: "The suite the attestation was made under, as the community publishes it.";
1273
+ };
1274
+ readonly attestation: {
1275
+ readonly $ref: "#/$defs/Multibase";
1276
+ readonly description: "The attestation: a tag, a shown class credential and a proof. It names no vetter.";
1277
+ };
1278
+ readonly meta: {
1279
+ readonly $ref: "#/$defs/StatementMeta";
1280
+ };
1281
+ readonly token: {
1282
+ readonly $ref: "#/$defs/AttestationToken";
1283
+ };
1284
+ };
1285
+ };
1286
+ readonly AttestationToken: {
1287
+ readonly title: "AttestationToken";
1288
+ readonly description: "The attestation token spent on one attestation: the label it was drawn under, the serial its spend reveals, and its re-randomised signature. The same members as `token` in vetting/attestation/0.1.";
1289
+ readonly type: "object";
1290
+ readonly additionalProperties: false;
1291
+ readonly required: readonly ["label", "serial", "shown"];
1292
+ readonly properties: {
1293
+ readonly label: {
1294
+ readonly type: "string";
1295
+ readonly minLength: 1;
1296
+ readonly maxLength: 128;
1297
+ readonly description: "The token label spent under.";
1298
+ };
1299
+ readonly serial: {
1300
+ readonly $ref: "#/$defs/Multibase";
1301
+ readonly description: "The serial revealed by the spend.";
1302
+ };
1303
+ readonly shown: {
1304
+ readonly $ref: "#/$defs/Multibase";
1305
+ readonly description: "The re-randomised token signature, verifiable under the published token key.";
1306
+ };
1307
+ };
1308
+ };
1309
+ readonly CommunityParameters: {
1310
+ readonly title: "CommunityParameters";
1311
+ readonly description: "The community's hidden-vetting parameters exactly as its join manifest publishes them, under the criterion's `vetting.ext`. The caller copies them in verbatim on every call that needs them, because the community rotates labels and the engine keeps no copy of its own: a stale copy costs the caller a refused proof, never a mistaken one.";
1312
+ readonly $ref: "#/$defs/PublishedConfig";
1313
+ };
1314
+ readonly PublishedConfig: {
1315
+ readonly title: "PublishedConfig";
1316
+ readonly description: "The parameters exactly as they now appear in this community's join manifest, under vetting.ext. What an applicant and a vetter read.";
1317
+ readonly type: "object";
1318
+ readonly additionalProperties: false;
1319
+ readonly required: readonly ["suite", "helperKey", "tokenKey", "vetterLabels", "tokenLabels", "dripPerTick", "tickLength", "events"];
1320
+ readonly properties: {
1321
+ readonly suite: {
1322
+ readonly type: "string";
1323
+ readonly minLength: 1;
1324
+ };
1325
+ readonly helperKey: {
1326
+ readonly type: "string";
1327
+ readonly minLength: 1;
1328
+ readonly description: "The helper verification key, multibase — named for its role on the wire rather than for hvk.";
1329
+ };
1330
+ readonly tokenKey: {
1331
+ readonly type: "string";
1332
+ readonly minLength: 1;
1333
+ readonly description: "The token verification key, multibase — named for its role on the wire rather than for tvk.";
1334
+ };
1335
+ readonly vetterLabels: {
1336
+ readonly type: "array";
1337
+ readonly items: {
1338
+ readonly type: "string";
1339
+ readonly minLength: 1;
1340
+ };
1341
+ readonly description: "Class labels published whole, e.g. vetter/2026-09 — a request names one of these, not the bare period.";
1342
+ };
1343
+ readonly tokenLabels: {
1344
+ readonly type: "array";
1345
+ readonly items: {
1346
+ readonly type: "string";
1347
+ readonly minLength: 1;
1348
+ };
1349
+ };
1350
+ readonly dripPerTick: {
1351
+ readonly type: "integer";
1352
+ readonly minimum: 1;
1353
+ };
1354
+ readonly tickLength: {
1355
+ readonly $ref: "#/$defs/TickLength";
1356
+ };
1357
+ readonly events: {
1358
+ readonly type: "array";
1359
+ readonly items: {
1360
+ readonly $ref: "#/$defs/PublishedEvent";
1361
+ };
1362
+ };
1363
+ };
1364
+ };
1365
+ readonly PublishedEvent: {
1366
+ readonly title: "PublishedEvent";
1367
+ readonly description: "The published shape drops approvedBy and graceDays: who approved is the community's own record, and a vetter is told closesAfter when its request is approved rather than being handed the raw grace period here.";
1368
+ readonly type: "object";
1369
+ readonly additionalProperties: false;
1370
+ readonly required: readonly ["eventId", "startDate", "endDate", "groupFloor", "tiers"];
1371
+ readonly properties: {
1372
+ readonly eventId: {
1373
+ readonly type: "string";
1374
+ readonly minLength: 1;
1375
+ };
1376
+ readonly startDate: {
1377
+ readonly type: "string";
1378
+ readonly format: "date";
1379
+ };
1380
+ readonly endDate: {
1381
+ readonly type: "string";
1382
+ readonly format: "date";
1383
+ };
1384
+ readonly groupFloor: {
1385
+ readonly type: "integer";
1386
+ readonly minimum: 1;
1387
+ };
1388
+ readonly tiers: {
1389
+ readonly type: "array";
1390
+ readonly items: {
1391
+ readonly $ref: "#/$defs/Tier";
1392
+ };
1393
+ };
1394
+ };
1395
+ };
1396
+ readonly Tier: {
1397
+ readonly title: "Tier";
1398
+ readonly type: "object";
1399
+ readonly additionalProperties: false;
1400
+ readonly required: readonly ["name", "dripPerTick"];
1401
+ readonly properties: {
1402
+ readonly name: {
1403
+ readonly type: "string";
1404
+ readonly minLength: 1;
1405
+ readonly description: "How the menu names it: desk, busy-desk.";
1406
+ };
1407
+ readonly dripPerTick: {
1408
+ readonly type: "integer";
1409
+ readonly minimum: 1;
1410
+ readonly description: "How many tokens a tick under this tier yields.";
1411
+ };
1412
+ };
1413
+ };
1414
+ readonly TickLength: {
1415
+ readonly title: "TickLength";
1416
+ readonly type: "string";
1417
+ readonly pattern: "^P(?:\\d+D(?:T\\d+H)?|T\\d+H)$";
1418
+ readonly description: "The length of one tick of the drip, as an ISO 8601 duration in days and/or hours — at least `PT1H`. A label's tick `t` is the window starting `t` tick lengths after the label's start (`vtc/vetting/vetters/pcs-tokens`).";
1419
+ };
1420
+ };
1421
+ };
1422
+ };
1423
+ //# sourceMappingURL=payload.d.ts.map