@openvtc/trust-tasks 0.26.17 → 0.26.18

package/dist/keys/sign-document/0.1/payload.js

@@ -0,0 +1,341 @@
+/**
+ * Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
+ * Source: specs/keys/sign-document/0.1/payload.schema.json
+ */
+/** Trust Task type URI. */
+export const TYPE_URI = "https://trusttasks.org/spec/keys/sign-document/0.1";
+/** Trust Task response type URI (request type URI + "#response"). */
+export const RESPONSE_TYPE_URI = "https://trusttasks.org/spec/keys/sign-document/0.1#response";
+/**
+ * This specification's payload schema, as a value.
+ *
+ * SPEC.md §7.2 item 2 is performed against this. It is shipped as data
+ * rather than only as a `.json` file because TypeScript types are erased
+ * at runtime: without a schema a consumer has nothing to validate, and
+ * every REQUIRED payload member is optional in practice. Cross-file
+ * `$ref`s are already inlined, so it needs no resolver.
+ */
+export const PAYLOAD_SCHEMA = {
+    "$schema": "https://json-schema.org/draft/2020-12/schema",
+    "$id": "https://trusttasks.org/spec/keys/sign-document/0.1",
+    "title": "Keys — Sign Document — payload",
+    "description": "A request for a W3C Data Integrity proof (`eddsa-jcs-2022`) over a JSON document, made with a key the custodian already holds, named by `keyId`. The document names its own signer — an `issuer` or a `controller` — and the custodian signs only as that DID, only with a key that DID's document lists under the requested proof purpose. The custodian canonicalises the document (RFC 8785), builds the proof configuration and the signing input itself; the producer never supplies bytes to sign. The outer document members (id, type, issuer, recipient, issuedAt, expiresAt, proof) are owned by the framework — SPEC §6.3.",
+    "type": "object",
+    "additionalProperties": false,
+    "required": [
+        "keyId",
+        "document"
+    ],
+    "properties": {
+        "keyId": {
+            "type": "string",
+            "minLength": 1,
+            "description": "Identifier of the key to sign with, as `keys/show` describes it. The key MUST be `active`, `ed25519`, and a verification method of the DID the document names as its issuer or controller."
+        },
+        "document": {
+            "type": "object",
+            "description": "The JSON document to secure — a verifiable credential, a Trust Task document, or another document that names its own signer. It MUST NOT carry `proof`, and MUST carry `issuer` (a DID, or an object whose `id` is a DID) or `controller` (a DID, or an array holding exactly one DID), every one present naming the DID the key belongs to. The custodian checks these rules itself (`proofPresent`, `documentInvalid`, `issuerMismatch`) rather than the schema, because the document is carried whole and every member is signed as given: a typed document would drop the members it does not name. The custodian serialises the whole object with RFC 8785."
+        },
+        "proofPurpose": {
+            "type": "string",
+            "enum": [
+                "assertionMethod",
+                "authentication"
+            ],
+            "description": "The verification relationship the proof is made under, carried verbatim into the proof (W3C Data Integrity). The key MUST be listed under this relationship in the signer DID's document. Absent means `assertionMethod`, which is what a credential's issuer signs under; `authentication` is for a document the DID presents as itself, such as a Trust Task document. Externally owned, carried verbatim."
+        },
+        "created": {
+            "type": "string",
+            "format": "date-time",
+            "pattern": "^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}(\\.\\d+)?(Z|[+-]\\d{2}:\\d{2})$",
+            "description": "The proof's `created` value (an XML Schema dateTimeStamp, as Data Integrity requires). Absent means the custodian's own clock at signing. When present, the custodian refuses a value outside its acceptance window around its own clock with `keys:invalidArgument`: the key's signature dates the proof, so the producer cannot back- or forward-date it."
+        },
+        "challenge": {
+            "type": "string",
+            "minLength": 1,
+            "maxLength": 1024,
+            "description": "A challenge the proof's verifier issued, copied into the proof's `challenge` member verbatim (W3C Data Integrity). Absent means the proof carries none. The custodian does not interpret it."
+        },
+        "domain": {
+            "type": "string",
+            "minLength": 1,
+            "maxLength": 1024,
+            "description": "The security domain the proof is restricted to, copied into the proof's `domain` member verbatim (W3C Data Integrity). Absent means the proof carries none. The custodian does not interpret it."
+        },
+        "ext": {
+            "$ref": "#/$defs/Ext",
+            "description": "Ecosystem-defined extension members per SPEC.md §4.5.1."
+        }
+    },
+    "$defs": {
+        "Did": {
+            "type": "string",
+            "minLength": 7,
+            "maxLength": 2048,
+            "pattern": "^did:[a-z0-9]+:[A-Za-z0-9._:%-]*[A-Za-z0-9._%-]$",
+            "description": "A DID (W3C DID Core §3.1) — never a DID URL: no path, query or fragment."
+        },
+        "Proof": {
+            "title": "Data Integrity proof",
+            "description": "The proof the custodian made: a W3C `DataIntegrityProof` under the `eddsa-jcs-2022` cryptosuite. Member names and values are Data Integrity's, carried verbatim.",
+            "type": "object",
+            "additionalProperties": false,
+            "required": [
+                "type",
+                "cryptosuite",
+                "created",
+                "verificationMethod",
+                "proofPurpose",
+                "proofValue"
+            ],
+            "properties": {
+                "@context": {
+                    "description": "The document's own `@context`, copied into the proof configuration as `eddsa-jcs-2022` requires when the document has one; absent otherwise.",
+                    "oneOf": [
+                        {
+                            "type": "string"
+                        },
+                        {
+                            "type": "array",
+                            "minItems": 1
+                        }
+                    ]
+                },
+                "type": {
+                    "type": "string",
+                    "const": "DataIntegrityProof"
+                },
+                "cryptosuite": {
+                    "type": "string",
+                    "enum": [
+                        "eddsa-jcs-2022"
+                    ],
+                    "description": "The only cryptosuite this version defines."
+                },
+                "created": {
+                    "type": "string",
+                    "format": "date-time"
+                },
+                "verificationMethod": {
+                    "type": "string",
+                    "pattern": "^did:[a-z0-9]+:[^#\\s]+#[^\\s]+$",
+                    "description": "The DID URL of the key's verification method in the signer DID's document, chosen by the custodian."
+                },
+                "proofPurpose": {
+                    "type": "string",
+                    "enum": [
+                        "assertionMethod",
+                        "authentication"
+                    ]
+                },
+                "challenge": {
+                    "type": "string"
+                },
+                "domain": {
+                    "type": "string"
+                },
+                "proofValue": {
+                    "type": "string",
+                    "pattern": "^z[1-9A-HJ-NP-Za-km-z]+$",
+                    "description": "The Ed25519 signature, base58btc multibase-encoded."
+                }
+            }
+        },
+        "Response": {
+            "$anchor": "response",
+            "title": "Keys — Sign Document — response payload",
+            "description": "The success response to a keys/sign-document request. Carried in a Trust Task document whose type is https://trusttasks.org/spec/keys/sign-document/0.1#response. Failures use trust-task-error, not this shape.",
+            "type": "object",
+            "additionalProperties": false,
+            "required": [
+                "keyId",
+                "signerDid",
+                "document",
+                "proof"
+            ],
+            "properties": {
+                "keyId": {
+                    "type": "string",
+                    "description": "The key that produced the proof. Echoed so a response separated from its request is still attributable."
+                },
+                "signerDid": {
+                    "$ref": "#/$defs/Did",
+                    "description": "The DID the document was signed as — the one its `issuer` or `controller` names, and the DID a verifier resolves the proof's verification method against."
+                },
+                "document": {
+                    "type": "object",
+                    "description": "The request's document, unchanged, with `proof` added. Every other member is exactly as the producer sent it."
+                },
+                "proof": {
+                    "$ref": "#/$defs/Proof",
+                    "description": "The proof the custodian attached to `document`, returned on its own so a producer need not dig it out."
+                },
+                "ext": {
+                    "$ref": "#/$defs/Ext"
+                }
+            }
+        },
+        "Ext": {
+            "title": "Ext",
+            "description": "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.",
+            "type": "object",
+            "minProperties": 1,
+            "additionalProperties": true,
+            "propertyNames": {
+                "pattern": "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$"
+            }
+        }
+    }
+};
+/** As {@link PAYLOAD_SCHEMA}, for the success-response variant. */
+export const RESPONSE_PAYLOAD_SCHEMA = {
+    "$schema": "https://json-schema.org/draft/2020-12/schema",
+    "$ref": "#/$defs/Response",
+    "$defs": {
+        "Did": {
+            "type": "string",
+            "minLength": 7,
+            "maxLength": 2048,
+            "pattern": "^did:[a-z0-9]+:[A-Za-z0-9._:%-]*[A-Za-z0-9._%-]$",
+            "description": "A DID (W3C DID Core §3.1) — never a DID URL: no path, query or fragment."
+        },
+        "Proof": {
+            "title": "Data Integrity proof",
+            "description": "The proof the custodian made: a W3C `DataIntegrityProof` under the `eddsa-jcs-2022` cryptosuite. Member names and values are Data Integrity's, carried verbatim.",
+            "type": "object",
+            "additionalProperties": false,
+            "required": [
+                "type",
+                "cryptosuite",
+                "created",
+                "verificationMethod",
+                "proofPurpose",
+                "proofValue"
+            ],
+            "properties": {
+                "@context": {
+                    "description": "The document's own `@context`, copied into the proof configuration as `eddsa-jcs-2022` requires when the document has one; absent otherwise.",
+                    "oneOf": [
+                        {
+                            "type": "string"
+                        },
+                        {
+                            "type": "array",
+                            "minItems": 1
+                        }
+                    ]
+                },
+                "type": {
+                    "type": "string",
+                    "const": "DataIntegrityProof"
+                },
+                "cryptosuite": {
+                    "type": "string",
+                    "enum": [
+                        "eddsa-jcs-2022"
+                    ],
+                    "description": "The only cryptosuite this version defines."
+                },
+                "created": {
+                    "type": "string",
+                    "format": "date-time"
+                },
+                "verificationMethod": {
+                    "type": "string",
+                    "pattern": "^did:[a-z0-9]+:[^#\\s]+#[^\\s]+$",
+                    "description": "The DID URL of the key's verification method in the signer DID's document, chosen by the custodian."
+                },
+                "proofPurpose": {
+                    "type": "string",
+                    "enum": [
+                        "assertionMethod",
+                        "authentication"
+                    ]
+                },
+                "challenge": {
+                    "type": "string"
+                },
+                "domain": {
+                    "type": "string"
+                },
+                "proofValue": {
+                    "type": "string",
+                    "pattern": "^z[1-9A-HJ-NP-Za-km-z]+$",
+                    "description": "The Ed25519 signature, base58btc multibase-encoded."
+                }
+            }
+        },
+        "Response": {
+            "$anchor": "response",
+            "title": "Keys — Sign Document — response payload",
+            "description": "The success response to a keys/sign-document request. Carried in a Trust Task document whose type is https://trusttasks.org/spec/keys/sign-document/0.1#response. Failures use trust-task-error, not this shape.",
+            "type": "object",
+            "additionalProperties": false,
+            "required": [
+                "keyId",
+                "signerDid",
+                "document",
+                "proof"
+            ],
+            "properties": {
+                "keyId": {
+                    "type": "string",
+                    "description": "The key that produced the proof. Echoed so a response separated from its request is still attributable."
+                },
+                "signerDid": {
+                    "$ref": "#/$defs/Did",
+                    "description": "The DID the document was signed as — the one its `issuer` or `controller` names, and the DID a verifier resolves the proof's verification method against."
+                },
+                "document": {
+                    "type": "object",
+                    "description": "The request's document, unchanged, with `proof` added. Every other member is exactly as the producer sent it."
+                },
+                "proof": {
+                    "$ref": "#/$defs/Proof",
+                    "description": "The proof the custodian attached to `document`, returned on its own so a producer need not dig it out."
+                },
+                "ext": {
+                    "$ref": "#/$defs/Ext"
+                }
+            }
+        },
+        "Ext": {
+            "title": "Ext",
+            "description": "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.",
+            "type": "object",
+            "minProperties": 1,
+            "additionalProperties": true,
+            "propertyNames": {
+                "pattern": "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$"
+            }
+        }
+    }
+};
+/**
+ * SPEC.md §7.2 policy for the request variant, from this specification's
+ * front matter. Pass to `consumeInbound` — items 5b, 7 and 8 are
+ * per-specification and cannot be derived from the document alone, and
+ * item 2 needs the schema this carries.
+ */
+export const SPEC = {
+    typeUri: TYPE_URI,
+    isBearer: false,
+    isProofRequired: true,
+    isRecipientRequired: true,
+    isIssuedAtRequired: true,
+    payloadSchema: PAYLOAD_SCHEMA,
+};
+/**
+ * SPEC.md §7.2 policy for the success-response variant. `isRecipientRequired`
+ * tracks the *issuer* party's requirement because a response swaps the
+ * parties (§7.3 item 5).
+ */
+export const RESPONSE_SPEC = {
+    typeUri: RESPONSE_TYPE_URI,
+    isBearer: false,
+    isProofRequired: false,
+    isRecipientRequired: true,
+    isIssuedAtRequired: true,
+    payloadSchema: RESPONSE_PAYLOAD_SCHEMA,
+};
+//# sourceMappingURL=payload.js.map

package/dist/keys/sign-document/0.1/payload.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"payload.js","sourceRoot":"","sources":["../../../../src/keys/sign-document/0.1/payload.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAuFH,2BAA2B;AAC3B,MAAM,CAAC,MAAM,QAAQ,GAAG,oDAA6D,CAAC;AAKtF,qEAAqE;AACrE,MAAM,CAAC,MAAM,iBAAiB,GAAG,6DAAsE,CAAC;AAKxG;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,SAAS,EAAE,8CAA8C;IACzD,KAAK,EAAE,oDAAoD;IAC3D,OAAO,EAAE,gCAAgC;IACzC,aAAa,EAAE,umBAAumB;IACtnB,MAAM,EAAE,QAAQ;IAChB,sBAAsB,EAAE,KAAK;IAC7B,UAAU,EAAE;QACV,OAAO;QACP,UAAU;KACX;IACD,YAAY,EAAE;QACZ,OAAO,EAAE;YACP,MAAM,EAAE,QAAQ;YAChB,WAAW,EAAE,CAAC;YACd,aAAa,EAAE,4LAA4L;SAC5M;QACD,UAAU,EAAE;YACV,MAAM,EAAE,QAAQ;YAChB,aAAa,EAAE,koBAAkoB;SAClpB;QACD,cAAc,EAAE;YACd,MAAM,EAAE,QAAQ;YAChB,MAAM,EAAE;gBACN,iBAAiB;gBACjB,gBAAgB;aACjB;YACD,aAAa,EAAE,8YAA8Y;SAC9Z;QACD,SAAS,EAAE;YACT,MAAM,EAAE,QAAQ;YAChB,QAAQ,EAAE,WAAW;YACrB,SAAS,EAAE,4EAA4E;YACvF,aAAa,EAAE,6VAA6V;SAC7W;QACD,WAAW,EAAE;YACX,MAAM,EAAE,QAAQ;YAChB,WAAW,EAAE,CAAC;YACd,WAAW,EAAE,IAAI;YACjB,aAAa,EAAE,8LAA8L;SAC9M;QACD,QAAQ,EAAE;YACR,MAAM,EAAE,QAAQ;YAChB,WAAW,EAAE,CAAC;YACd,WAAW,EAAE,IAAI;YACjB,aAAa,EAAE,kMAAkM;SAClN;QACD,KAAK,EAAE;YACL,MAAM,EAAE,aAAa;YACrB,aAAa,EAAE,yDAAyD;SACzE;KACF;IACD,OAAO,EAAE;QACP,KAAK,EAAE;YACL,MAAM,EAAE,QAAQ;YAChB,WAAW,EAAE,CAAC;YACd,WAAW,EAAE,IAAI;YACjB,SAAS,EAAE,kDAAkD;YAC7D,aAAa,EAAE,0EAA0E;SAC1F;QACD,OAAO,EAAE;YACP,OAAO,EAAE,sBAAsB;YAC/B,aAAa,EAAE,kKAAkK;YACjL,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,MAAM;gBACN,aAAa;gBACb,SAAS;gBACT,oBAAoB;gBACpB,cAAc;gBACd,YAAY;aACb;YACD,YAAY,EAAE;gBACZ,UAAU,EAAE;oBACV,aAAa,EAAE,8IAA8I;oBAC7J,OAAO,EAAE;wBACP;4BACE,MAAM,EAAE,QAAQ;yBACjB;wBACD;4BACE,MAAM,EAAE,OAAO;4BACf,UAAU,EAAE,CAAC;yBACd;qBACF;iBACF;gBACD,MAAM,EAAE;oBACN,MAAM,EAAE,QAAQ;oBAChB,OAAO,EAAE,oBAAoB;iBAC9B;gBACD,aAAa,EAAE;oBACb,MAAM,EAAE,QAAQ;oBAChB,MAAM,EAAE;wBACN,gBAAgB;qBACjB;oBACD,aAAa,EAAE,4CAA4C;iBAC5D;gBACD,SAAS,EAAE;oBACT,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,WAAW;iBACtB;gBACD,oBAAoB,EAAE;oBACpB,MAAM,EAAE,QAAQ;oBAChB,SAAS,EAAE,kCAAkC;oBAC7C,aAAa,EAAE,qGAAqG;iBACrH;gBACD,cAAc,EAAE;oBACd,MAAM,EAAE,QAAQ;oBAChB,MAAM,EAAE;wBACN,iBAAiB;wBACjB,gBAAgB;qBACjB;iBACF;gBACD,WAAW,EAAE;oBACX,MAAM,EAAE,QAAQ;iBACjB;gBACD,QAAQ,EAAE;oBACR,MAAM,EAAE,QAAQ;iBACjB;gBACD,YAAY,EAAE;oBACZ,MAAM,EAAE,QAAQ;oBAChB,SAAS,EAAE,0BAA0B;oBACrC,aAAa,EAAE,qDAAqD;iBACrE;aACF;SACF;QACD,UAAU,EAAE;YACV,SAAS,EAAE,UAAU;YACrB,OAAO,EAAE,yCAAyC;YAClD,aAAa,EAAE,kNAAkN;YACjO,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,OAAO;gBACP,WAAW;gBACX,UAAU;gBACV,OAAO;aACR;YACD,YAAY,EAAE;gBACZ,OAAO,EAAE;oBACP,MAAM,EAAE,QAAQ;oBAChB,aAAa,EAAE,yGAAyG;iBACzH;gBACD,WAAW,EAAE;oBACX,MAAM,EAAE,aAAa;oBACrB,aAAa,EAAE,2JAA2J;iBAC3K;gBACD,UAAU,EAAE;oBACV,MAAM,EAAE,QAAQ;oBAChB,aAAa,EAAE,+GAA+G;iBAC/H;gBACD,OAAO,EAAE;oBACP,MAAM,EAAE,eAAe;oBACvB,aAAa,EAAE,wGAAwG;iBACxH;gBACD,KAAK,EAAE;oBACL,MAAM,EAAE,aAAa;iBACtB;aACF;SACF;QACD,KAAK,EAAE;YACL,OAAO,EAAE,KAAK;YACd,aAAa,EAAE,uKAAuK;YACtL,MAAM,EAAE,QAAQ;YAChB,eAAe,EAAE,CAAC;YAClB,sBAAsB,EAAE,IAAI;YAC5B,eAAe,EAAE;gBACf,SAAS,EAAE,mCAAmC;aAC/C;SACF;KACF;CACO,CAAC;AAEX,mEAAmE;AACnE,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,SAAS,EAAE,8CAA8C;IACzD,MAAM,EAAE,kBAAkB;IAC1B,OAAO,EAAE;QACP,KAAK,EAAE;YACL,MAAM,EAAE,QAAQ;YAChB,WAAW,EAAE,CAAC;YACd,WAAW,EAAE,IAAI;YACjB,SAAS,EAAE,kDAAkD;YAC7D,aAAa,EAAE,0EAA0E;SAC1F;QACD,OAAO,EAAE;YACP,OAAO,EAAE,sBAAsB;YAC/B,aAAa,EAAE,kKAAkK;YACjL,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,MAAM;gBACN,aAAa;gBACb,SAAS;gBACT,oBAAoB;gBACpB,cAAc;gBACd,YAAY;aACb;YACD,YAAY,EAAE;gBACZ,UAAU,EAAE;oBACV,aAAa,EAAE,8IAA8I;oBAC7J,OAAO,EAAE;wBACP;4BACE,MAAM,EAAE,QAAQ;yBACjB;wBACD;4BACE,MAAM,EAAE,OAAO;4BACf,UAAU,EAAE,CAAC;yBACd;qBACF;iBACF;gBACD,MAAM,EAAE;oBACN,MAAM,EAAE,QAAQ;oBAChB,OAAO,EAAE,oBAAoB;iBAC9B;gBACD,aAAa,EAAE;oBACb,MAAM,EAAE,QAAQ;oBAChB,MAAM,EAAE;wBACN,gBAAgB;qBACjB;oBACD,aAAa,EAAE,4CAA4C;iBAC5D;gBACD,SAAS,EAAE;oBACT,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,WAAW;iBACtB;gBACD,oBAAoB,EAAE;oBACpB,MAAM,EAAE,QAAQ;oBAChB,SAAS,EAAE,kCAAkC;oBAC7C,aAAa,EAAE,qGAAqG;iBACrH;gBACD,cAAc,EAAE;oBACd,MAAM,EAAE,QAAQ;oBAChB,MAAM,EAAE;wBACN,iBAAiB;wBACjB,gBAAgB;qBACjB;iBACF;gBACD,WAAW,EAAE;oBACX,MAAM,EAAE,QAAQ;iBACjB;gBACD,QAAQ,EAAE;oBACR,MAAM,EAAE,QAAQ;iBACjB;gBACD,YAAY,EAAE;oBACZ,MAAM,EAAE,QAAQ;oBAChB,SAAS,EAAE,0BAA0B;oBACrC,aAAa,EAAE,qDAAqD;iBACrE;aACF;SACF;QACD,UAAU,EAAE;YACV,SAAS,EAAE,UAAU;YACrB,OAAO,EAAE,yCAAyC;YAClD,aAAa,EAAE,kNAAkN;YACjO,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,OAAO;gBACP,WAAW;gBACX,UAAU;gBACV,OAAO;aACR;YACD,YAAY,EAAE;gBACZ,OAAO,EAAE;oBACP,MAAM,EAAE,QAAQ;oBAChB,aAAa,EAAE,yGAAyG;iBACzH;gBACD,WAAW,EAAE;oBACX,MAAM,EAAE,aAAa;oBACrB,aAAa,EAAE,2JAA2J;iBAC3K;gBACD,UAAU,EAAE;oBACV,MAAM,EAAE,QAAQ;oBAChB,aAAa,EAAE,+GAA+G;iBAC/H;gBACD,OAAO,EAAE;oBACP,MAAM,EAAE,eAAe;oBACvB,aAAa,EAAE,wGAAwG;iBACxH;gBACD,KAAK,EAAE;oBACL,MAAM,EAAE,aAAa;iBACtB;aACF;SACF;QACD,KAAK,EAAE;YACL,OAAO,EAAE,KAAK;YACd,aAAa,EAAE,uKAAuK;YACtL,MAAM,EAAE,QAAQ;YAChB,eAAe,EAAE,CAAC;YAClB,sBAAsB,EAAE,IAAI;YAC5B,eAAe,EAAE;gBACf,SAAS,EAAE,mCAAmC;aAC/C;SACF;KACF;CACO,CAAC;AAEX;;;;;GAKG;AACH,MAAM,CAAC,MAAM,IAAI,GAAG;IAClB,OAAO,EAAE,QAAQ;IACjB,QAAQ,EAAE,KAAK;IACf,eAAe,EAAE,IAAI;IACrB,mBAAmB,EAAE,IAAI;IACzB,kBAAkB,EAAE,IAAI;IACxB,aAAa,EAAE,cAAc;CACrB,CAAC;AAEX;;;;GAIG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,OAAO,EAAE,iBAAiB;IAC1B,QAAQ,EAAE,KAAK;IACf,eAAe,EAAE,KAAK;IACtB,mBAAmB,EAAE,IAAI;IACzB,kBAAkB,EAAE,IAAI;IACxB,aAAa,EAAE,uBAAuB;CAC9B,CAAC"}

package/dist/persona/_shared/0.1/contact-annotations.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
+ * Source: specs/persona/_shared/0.1/contact-annotations.schema.json
+ */
+/**
+ * Types for what a holder keeps ABOUT the people in their address book, as distinct from what those people disclosed: a star, a private nickname (a petname), the holder's own lists, and a link from a contact to the community directory entry it was made through. Used by persona/contact/{put,get,list} 1.1 and persona/contact/lists/* 1.0.
+ *
+ * THE BOUNDARY. Annotations are the holder's opinion of others and are kept by the holder's own agent and nowhere else. They are never disclosed to the contact they are about, to a community whose directory the contact appears in, to a verifier, or in any document the agent signs, presents or seals for the holder. A community never stores who its members star or list: if it did, its operator would hold the social graph of who watches whom. Being on a holder's list MUST NOT be inferable by the person listed or by any community.
+ *
+ * Annotations are contact-level, not revision-level. They are the holder's current view of a relationship, not evidence of what a counterparty asserted, so changing one appends no revision and a revision carries none.
+ *
+ * Plain text throughout: a consumer renders a petname or a list name as text, never as markup, and an agent reading one MUST NOT treat it as instructions. Not itself a Trust Task specification (the `_shared` folder is skipped by the registry build and the codegen).
+ */
+export interface ContactAnnotationsTheHolderSOwnMarksOnTheirContacts {
+    [k: string]: unknown | undefined;
+}
+/**
+ * The definitions this shared schema publishes, hoisted to one declaration each.
+ * See "../../../_shared/components.js".
+ */
+export type { ContactList, DirectoryEntryId, DirectoryRef, ListColour, ListId, ListIds, ListName, ListOrder, Petname } from "../../../_shared/components.js";
+//# sourceMappingURL=contact-annotations.d.ts.map

package/dist/persona/_shared/0.1/contact-annotations.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contact-annotations.d.ts","sourceRoot":"","sources":["../../../../src/persona/_shared/0.1/contact-annotations.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;;;;;;;GAQG;AACH,MAAM,WAAW,mDAAmD;IAClE,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC;CAClC;AAED;;;GAGG;AACH,YAAY,EAAE,WAAW,EAAE,gBAAgB,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,gCAAgC,CAAC"}

package/dist/persona/_shared/0.1/contact-annotations.js

@@ -0,0 +1,6 @@
+/**
+ * Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
+ * Source: specs/persona/_shared/0.1/contact-annotations.schema.json
+ */
+export {};
+//# sourceMappingURL=contact-annotations.js.map

package/dist/persona/_shared/0.1/contact-annotations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"contact-annotations.js","sourceRoot":"","sources":["../../../../src/persona/_shared/0.1/contact-annotations.ts"],"names":[],"mappings":"AAAA;;;GAGG"}