@openvtc/trust-tasks 0.26.17 → 0.26.19

package/dist/vtc/groups/members/list/0.1/payload.d.ts

@@ -0,0 +1,1018 @@
+/**
+ * Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
+ * Source: specs/vtc/groups/members/list/0.1/payload.schema.json
+ */
+import type { CardBlobRef, EntryFields, EntryId, Ext, FieldValue, GroupCredentialId, GroupId, GroupMember, MembershipSource, VerifiedValue } from "../../../../../_shared/components.js";
+/**
+ * List a group's members, a page at a time, each projected for the caller as the directory projects them — only where the group shows its members to the caller. The outer document members are owned by the framework — SPEC §6.3.
+ */
+export interface VTCGroupsMembersListPayload {
+    groupId: GroupId;
+    cursor?: string;
+    /**
+     * Page size; clamped to 1..=200 (default 50).
+     */
+    limit?: number;
+    ext?: Ext;
+}
+/**
+ * The success response to a vtc/groups/members/list/0.1 request. Carried in a Trust Task document whose type is https://trusttasks.org/spec/vtc/groups/members/list/0.1#response.
+ */
+export interface VTCGroupsMembersListResponsePayload {
+    /**
+     * @maxItems 200
+     */
+    items: GroupMember[];
+    nextCursor?: string | null;
+    ext?: Ext;
+}
+/** Shared definitions this specification references, re-exported under the names it used to declare them with. */
+export type { CardBlobRef, EntryFields, EntryId, Ext, FieldValue, GroupCredentialId, GroupId, GroupMember, MembershipSource, VerifiedValue };
+/** Trust Task type URI. */
+export declare const TYPE_URI: "https://trusttasks.org/spec/vtc/groups/members/list/0.1";
+/** Stable alias for this specification's request payload shape. */
+export type Payload = VTCGroupsMembersListPayload;
+/** Trust Task response type URI (request type URI + "#response"). */
+export declare const RESPONSE_TYPE_URI: "https://trusttasks.org/spec/vtc/groups/members/list/0.1#response";
+/** Stable alias for this specification's success-response payload shape. */
+export type Response = VTCGroupsMembersListResponsePayload;
+/**
+ * This specification's payload schema, as a value.
+ *
+ * SPEC.md §7.2 item 2 is performed against this. It is shipped as data
+ * rather than only as a `.json` file because TypeScript types are erased
+ * at runtime: without a schema a consumer has nothing to validate, and
+ * every REQUIRED payload member is optional in practice. Cross-file
+ * `$ref`s are already inlined, so it needs no resolver.
+ */
+export declare const PAYLOAD_SCHEMA: {
+    readonly $schema: "https://json-schema.org/draft/2020-12/schema";
+    readonly $id: "https://trusttasks.org/spec/vtc/groups/members/list/0.1";
+    readonly title: "VTC Groups — Members — List — payload";
+    readonly description: "List a group's members, a page at a time, each projected for the caller as the directory projects them — only where the group shows its members to the caller. The outer document members are owned by the framework — SPEC §6.3.";
+    readonly type: "object";
+    readonly additionalProperties: false;
+    readonly required: readonly ["groupId"];
+    readonly properties: {
+        readonly groupId: {
+            readonly $ref: "#/$defs/GroupId";
+        };
+        readonly cursor: {
+            readonly type: "string";
+            readonly minLength: 1;
+            readonly maxLength: 1024;
+        };
+        readonly limit: {
+            readonly type: "integer";
+            readonly minimum: 1;
+            readonly maximum: 200;
+            readonly description: "Page size; clamped to 1..=200 (default 50).";
+        };
+        readonly ext: {
+            readonly $ref: "#/$defs/Ext";
+        };
+    };
+    readonly $defs: {
+        readonly Response: {
+            readonly $anchor: "response";
+            readonly title: "VTC Groups — Members — List — response payload";
+            readonly description: "The success response to a vtc/groups/members/list/0.1 request. Carried in a Trust Task document whose type is https://trusttasks.org/spec/vtc/groups/members/list/0.1#response.";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["items"];
+            readonly properties: {
+                readonly items: {
+                    readonly type: "array";
+                    readonly maxItems: 200;
+                    readonly items: {
+                        readonly $ref: "#/$defs/GroupMember";
+                    };
+                };
+                readonly nextCursor: {
+                    readonly type: readonly ["string", "null"];
+                    readonly maxLength: 1024;
+                };
+                readonly ext: {
+                    readonly $ref: "#/$defs/Ext";
+                };
+            };
+        };
+        readonly Ext: {
+            readonly title: "Ext";
+            readonly description: "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.";
+            readonly type: "object";
+            readonly minProperties: 1;
+            readonly additionalProperties: true;
+            readonly propertyNames: {
+                readonly pattern: "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$";
+            };
+        };
+        readonly GroupMember: {
+            readonly title: "GroupMember";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["entryId", "source", "since", "state"];
+            readonly properties: {
+                readonly entryId: {
+                    readonly $ref: "#/$defs/EntryId";
+                };
+                readonly source: {
+                    readonly $ref: "#/$defs/MembershipSource";
+                };
+                readonly since: {
+                    readonly type: "string";
+                    readonly format: "date-time";
+                };
+                readonly state: {
+                    readonly type: "string";
+                    readonly enum: readonly ["active", "pending"];
+                    readonly description: "`active`: a member. `pending`: an addition to a group carrying authority that is waiting for the consent the community requires for a grant.";
+                };
+                readonly fields: {
+                    readonly $ref: "#/$defs/EntryFields";
+                    readonly description: "The member's directory fields that the caller may see, projected exactly as vtc/directory/entries/show would project them. Absent when the caller may see none.";
+                };
+                readonly credentialId: {
+                    readonly anyOf: readonly [{
+                        readonly $ref: "#/$defs/GroupCredentialId";
+                    }, {
+                        readonly type: "null";
+                    }];
+                    readonly description: "The member's current group membership credential, or null when the group issues none.";
+                };
+                readonly credentialValidUntil: {
+                    readonly type: "string";
+                    readonly format: "date-time";
+                    readonly description: "When the member's current group credential expires. Shown to the member themselves and to managers only.";
+                };
+            };
+        };
+        readonly GroupCredentialId: {
+            readonly title: "GroupCredentialId";
+            readonly description: "Identifier (`id`) of a group membership credential issued to a member. Each renewal issues a new credential with a new identifier. Validity is the community's setting; a community SHOULD default to 30 days, renewed when 10 days remain.";
+            readonly type: "string";
+            readonly minLength: 1;
+            readonly maxLength: 512;
+        };
+        readonly MembershipSource: {
+            readonly title: "MembershipSource";
+            readonly description: "How the member came to be in the group. `added`: by a manager. `joined`: they joined an open group. `requestApproved`: a manager approved their request. `rule`: a dynamic group's rule admits them.";
+            readonly type: "string";
+            readonly enum: readonly ["added", "joined", "requestApproved", "rule"];
+        };
+        readonly EntryFields: {
+            readonly title: "EntryFields";
+            readonly description: "The fields of one entry that a particular viewer may see, keyed by field: the intersection of the member's visibility, the community's ceiling and policy, plus any derived fields that intersection admits. A withheld field is ABSENT, never null.";
+            readonly type: "object";
+            readonly maxProperties: 64;
+            readonly propertyNames: {
+                readonly $ref: "#/$defs/FieldKey";
+            };
+            readonly additionalProperties: {
+                readonly $ref: "#/$defs/FieldValue";
+            };
+        };
+        readonly FieldValue: {
+            readonly title: "FieldValue";
+            readonly description: "The value of one field. Which shape a field takes is fixed by its definition's `type`: text-like types (`text`, `longText`, `url`, `email`, `phone`, `enum`, `date` as YYYY-MM-DD, `country` as ISO 3166-1 alpha-2, `did`) are strings; `multiEnum` and the base field `links` are arrays of strings; `image` and the base field `avatar` are a `CardBlobRef`; `claim` is a `VerifiedValue`; the derived base field `personhood` is a boolean.";
+            readonly anyOf: readonly [{
+                readonly type: "string";
+                readonly maxLength: 2000;
+            }, {
+                readonly type: "boolean";
+            }, {
+                readonly type: "array";
+                readonly maxItems: 32;
+                readonly items: {
+                    readonly type: "string";
+                    readonly maxLength: 500;
+                };
+            }, {
+                readonly $ref: "#/$defs/CardBlobRef";
+            }, {
+                readonly $ref: "#/$defs/VerifiedValue";
+            }];
+        };
+        readonly VerifiedValue: {
+            readonly title: "VerifiedValue";
+            readonly description: "The value of a `credential`-sourced field: a claim the member disclosed from a credential they presented, with the issuer that attests it. A verified value always names its issuer, and a self-asserted value is never shaped as one. The community keeps only the disclosed claim and these facts about it — never the presentation.";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["value", "issuer", "verifiedAt"];
+            readonly properties: {
+                readonly value: {
+                    readonly anyOf: readonly [{
+                        readonly type: "string";
+                        readonly maxLength: 2000;
+                    }, {
+                        readonly type: "boolean";
+                    }, {
+                        readonly type: "number";
+                    }];
+                    readonly description: "The disclosed claim value.";
+                };
+                readonly issuer: {
+                    readonly type: "string";
+                    readonly pattern: "^did:";
+                    readonly maxLength: 2048;
+                    readonly description: "DID of the credential's issuer, shown as the field's verification badge.";
+                };
+                readonly credentialType: {
+                    readonly type: "string";
+                    readonly minLength: 1;
+                    readonly maxLength: 128;
+                    readonly description: "The most specific `type` of the credential the claim came from.";
+                };
+                readonly verifiedAt: {
+                    readonly type: "string";
+                    readonly format: "date-time";
+                    readonly description: "When the community verified the presentation.";
+                };
+                readonly validUntil: {
+                    readonly type: "string";
+                    readonly format: "date-time";
+                    readonly description: "When the credential expires, where it does. The community withdraws the value once it passes.";
+                };
+            };
+        };
+        readonly CardBlobRef: {
+            readonly title: "CardBlobRef";
+            readonly description: "A content-addressed image held in the community's blob store — an avatar or an `image` field. At most 256 KiB, images only, re-encoded by the community on upload (vtc/directory/images/upload: metadata stripped, dimensions capped) so its digest does not link the member across communities. A viewer reads the bytes with vtc/directory/images/get, which answers only where the same projection shows the value. `url` and `urlExpiresAt` MAY appear in a projection: a short-lived URL the community checks against the same projection, so a member-only image is never a public URL. A community that does not offer one leaves both out.";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["sha256", "mediaType"];
+            readonly properties: {
+                readonly sha256: {
+                    readonly type: "string";
+                    readonly pattern: "^[0-9a-f]{64}$";
+                    readonly description: "Lowercase hex SHA-256 of the stored, re-encoded bytes.";
+                };
+                readonly mediaType: {
+                    readonly type: "string";
+                    readonly enum: readonly ["image/png", "image/jpeg", "image/webp", "image/avif"];
+                    readonly description: "Media type of the stored bytes.";
+                };
+                readonly size: {
+                    readonly type: "integer";
+                    readonly minimum: 1;
+                    readonly maximum: 262144;
+                    readonly description: "Size in bytes of the stored bytes.";
+                };
+                readonly url: {
+                    readonly type: "string";
+                    readonly format: "uri";
+                    readonly maxLength: 2048;
+                    readonly description: "Projection only: a URL the viewer can fetch the image from until `urlExpiresAt`.";
+                };
+                readonly urlExpiresAt: {
+                    readonly type: "string";
+                    readonly format: "date-time";
+                    readonly description: "Projection only: when `url` stops working.";
+                };
+            };
+        };
+        readonly FieldKey: {
+            readonly title: "FieldKey";
+            readonly description: "Identifier of a directory field. A key with no `.` is a BASE field, the same in every community: `displayName`, `nickname`, `avatar`, `pronouns`, `bio`, `links` (written by the member) and `role`, `joinedAt`, `did`, `personhood` (derived from the community's own records, never stored on a card). A community-defined field MUST use a reverse-DNS key (`org.example.employer`), so a base key never collides with one, and a key is never reused with a different meaning once defined.";
+            readonly type: "string";
+            readonly minLength: 1;
+            readonly maxLength: 128;
+            readonly pattern: "^([a-z][a-z0-9-]*\\.)*[a-z][a-zA-Z0-9]{0,63}$";
+        };
+        readonly EntryId: {
+            readonly title: "EntryId";
+            readonly description: "Opaque identifier of one directory entry: `dir_` followed by 16 to 64 base64url characters. Random, scoped to one community, and stable for the life of the membership — it survives a rotation of the member's DID, which is why groups, notes and cards are keyed by it. It MUST NOT be derived from, and MUST NOT reveal, any DID of the member, and the same person's entries in two communities MUST NOT share one. Compared by exact string equality.";
+            readonly type: "string";
+            readonly pattern: "^dir_[A-Za-z0-9_-]{16,64}$";
+        };
+        readonly GroupId: {
+            readonly title: "GroupId";
+            readonly description: "Opaque identifier of a community group: `grp_` followed by 16 to 64 base64url characters. Random and community-scoped; not the group's DID.";
+            readonly type: "string";
+            readonly pattern: "^grp_[A-Za-z0-9_-]{16,64}$";
+        };
+    };
+};
+/** As {@link PAYLOAD_SCHEMA}, for the success-response variant. */
+export declare const RESPONSE_PAYLOAD_SCHEMA: {
+    readonly $schema: "https://json-schema.org/draft/2020-12/schema";
+    readonly $ref: "#/$defs/Response";
+    readonly $defs: {
+        readonly Response: {
+            readonly $anchor: "response";
+            readonly title: "VTC Groups — Members — List — response payload";
+            readonly description: "The success response to a vtc/groups/members/list/0.1 request. Carried in a Trust Task document whose type is https://trusttasks.org/spec/vtc/groups/members/list/0.1#response.";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["items"];
+            readonly properties: {
+                readonly items: {
+                    readonly type: "array";
+                    readonly maxItems: 200;
+                    readonly items: {
+                        readonly $ref: "#/$defs/GroupMember";
+                    };
+                };
+                readonly nextCursor: {
+                    readonly type: readonly ["string", "null"];
+                    readonly maxLength: 1024;
+                };
+                readonly ext: {
+                    readonly $ref: "#/$defs/Ext";
+                };
+            };
+        };
+        readonly Ext: {
+            readonly title: "Ext";
+            readonly description: "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.";
+            readonly type: "object";
+            readonly minProperties: 1;
+            readonly additionalProperties: true;
+            readonly propertyNames: {
+                readonly pattern: "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$";
+            };
+        };
+        readonly GroupMember: {
+            readonly title: "GroupMember";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["entryId", "source", "since", "state"];
+            readonly properties: {
+                readonly entryId: {
+                    readonly $ref: "#/$defs/EntryId";
+                };
+                readonly source: {
+                    readonly $ref: "#/$defs/MembershipSource";
+                };
+                readonly since: {
+                    readonly type: "string";
+                    readonly format: "date-time";
+                };
+                readonly state: {
+                    readonly type: "string";
+                    readonly enum: readonly ["active", "pending"];
+                    readonly description: "`active`: a member. `pending`: an addition to a group carrying authority that is waiting for the consent the community requires for a grant.";
+                };
+                readonly fields: {
+                    readonly $ref: "#/$defs/EntryFields";
+                    readonly description: "The member's directory fields that the caller may see, projected exactly as vtc/directory/entries/show would project them. Absent when the caller may see none.";
+                };
+                readonly credentialId: {
+                    readonly anyOf: readonly [{
+                        readonly $ref: "#/$defs/GroupCredentialId";
+                    }, {
+                        readonly type: "null";
+                    }];
+                    readonly description: "The member's current group membership credential, or null when the group issues none.";
+                };
+                readonly credentialValidUntil: {
+                    readonly type: "string";
+                    readonly format: "date-time";
+                    readonly description: "When the member's current group credential expires. Shown to the member themselves and to managers only.";
+                };
+            };
+        };
+        readonly GroupCredentialId: {
+            readonly title: "GroupCredentialId";
+            readonly description: "Identifier (`id`) of a group membership credential issued to a member. Each renewal issues a new credential with a new identifier. Validity is the community's setting; a community SHOULD default to 30 days, renewed when 10 days remain.";
+            readonly type: "string";
+            readonly minLength: 1;
+            readonly maxLength: 512;
+        };
+        readonly MembershipSource: {
+            readonly title: "MembershipSource";
+            readonly description: "How the member came to be in the group. `added`: by a manager. `joined`: they joined an open group. `requestApproved`: a manager approved their request. `rule`: a dynamic group's rule admits them.";
+            readonly type: "string";
+            readonly enum: readonly ["added", "joined", "requestApproved", "rule"];
+        };
+        readonly EntryFields: {
+            readonly title: "EntryFields";
+            readonly description: "The fields of one entry that a particular viewer may see, keyed by field: the intersection of the member's visibility, the community's ceiling and policy, plus any derived fields that intersection admits. A withheld field is ABSENT, never null.";
+            readonly type: "object";
+            readonly maxProperties: 64;
+            readonly propertyNames: {
+                readonly $ref: "#/$defs/FieldKey";
+            };
+            readonly additionalProperties: {
+                readonly $ref: "#/$defs/FieldValue";
+            };
+        };
+        readonly FieldValue: {
+            readonly title: "FieldValue";
+            readonly description: "The value of one field. Which shape a field takes is fixed by its definition's `type`: text-like types (`text`, `longText`, `url`, `email`, `phone`, `enum`, `date` as YYYY-MM-DD, `country` as ISO 3166-1 alpha-2, `did`) are strings; `multiEnum` and the base field `links` are arrays of strings; `image` and the base field `avatar` are a `CardBlobRef`; `claim` is a `VerifiedValue`; the derived base field `personhood` is a boolean.";
+            readonly anyOf: readonly [{
+                readonly type: "string";
+                readonly maxLength: 2000;
+            }, {
+                readonly type: "boolean";
+            }, {
+                readonly type: "array";
+                readonly maxItems: 32;
+                readonly items: {
+                    readonly type: "string";
+                    readonly maxLength: 500;
+                };
+            }, {
+                readonly $ref: "#/$defs/CardBlobRef";
+            }, {
+                readonly $ref: "#/$defs/VerifiedValue";
+            }];
+        };
+        readonly VerifiedValue: {
+            readonly title: "VerifiedValue";
+            readonly description: "The value of a `credential`-sourced field: a claim the member disclosed from a credential they presented, with the issuer that attests it. A verified value always names its issuer, and a self-asserted value is never shaped as one. The community keeps only the disclosed claim and these facts about it — never the presentation.";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["value", "issuer", "verifiedAt"];
+            readonly properties: {
+                readonly value: {
+                    readonly anyOf: readonly [{
+                        readonly type: "string";
+                        readonly maxLength: 2000;
+                    }, {
+                        readonly type: "boolean";
+                    }, {
+                        readonly type: "number";
+                    }];
+                    readonly description: "The disclosed claim value.";
+                };
+                readonly issuer: {
+                    readonly type: "string";
+                    readonly pattern: "^did:";
+                    readonly maxLength: 2048;
+                    readonly description: "DID of the credential's issuer, shown as the field's verification badge.";
+                };
+                readonly credentialType: {
+                    readonly type: "string";
+                    readonly minLength: 1;
+                    readonly maxLength: 128;
+                    readonly description: "The most specific `type` of the credential the claim came from.";
+                };
+                readonly verifiedAt: {
+                    readonly type: "string";
+                    readonly format: "date-time";
+                    readonly description: "When the community verified the presentation.";
+                };
+                readonly validUntil: {
+                    readonly type: "string";
+                    readonly format: "date-time";
+                    readonly description: "When the credential expires, where it does. The community withdraws the value once it passes.";
+                };
+            };
+        };
+        readonly CardBlobRef: {
+            readonly title: "CardBlobRef";
+            readonly description: "A content-addressed image held in the community's blob store — an avatar or an `image` field. At most 256 KiB, images only, re-encoded by the community on upload (vtc/directory/images/upload: metadata stripped, dimensions capped) so its digest does not link the member across communities. A viewer reads the bytes with vtc/directory/images/get, which answers only where the same projection shows the value. `url` and `urlExpiresAt` MAY appear in a projection: a short-lived URL the community checks against the same projection, so a member-only image is never a public URL. A community that does not offer one leaves both out.";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["sha256", "mediaType"];
+            readonly properties: {
+                readonly sha256: {
+                    readonly type: "string";
+                    readonly pattern: "^[0-9a-f]{64}$";
+                    readonly description: "Lowercase hex SHA-256 of the stored, re-encoded bytes.";
+                };
+                readonly mediaType: {
+                    readonly type: "string";
+                    readonly enum: readonly ["image/png", "image/jpeg", "image/webp", "image/avif"];
+                    readonly description: "Media type of the stored bytes.";
+                };
+                readonly size: {
+                    readonly type: "integer";
+                    readonly minimum: 1;
+                    readonly maximum: 262144;
+                    readonly description: "Size in bytes of the stored bytes.";
+                };
+                readonly url: {
+                    readonly type: "string";
+                    readonly format: "uri";
+                    readonly maxLength: 2048;
+                    readonly description: "Projection only: a URL the viewer can fetch the image from until `urlExpiresAt`.";
+                };
+                readonly urlExpiresAt: {
+                    readonly type: "string";
+                    readonly format: "date-time";
+                    readonly description: "Projection only: when `url` stops working.";
+                };
+            };
+        };
+        readonly FieldKey: {
+            readonly title: "FieldKey";
+            readonly description: "Identifier of a directory field. A key with no `.` is a BASE field, the same in every community: `displayName`, `nickname`, `avatar`, `pronouns`, `bio`, `links` (written by the member) and `role`, `joinedAt`, `did`, `personhood` (derived from the community's own records, never stored on a card). A community-defined field MUST use a reverse-DNS key (`org.example.employer`), so a base key never collides with one, and a key is never reused with a different meaning once defined.";
+            readonly type: "string";
+            readonly minLength: 1;
+            readonly maxLength: 128;
+            readonly pattern: "^([a-z][a-z0-9-]*\\.)*[a-z][a-zA-Z0-9]{0,63}$";
+        };
+        readonly EntryId: {
+            readonly title: "EntryId";
+            readonly description: "Opaque identifier of one directory entry: `dir_` followed by 16 to 64 base64url characters. Random, scoped to one community, and stable for the life of the membership — it survives a rotation of the member's DID, which is why groups, notes and cards are keyed by it. It MUST NOT be derived from, and MUST NOT reveal, any DID of the member, and the same person's entries in two communities MUST NOT share one. Compared by exact string equality.";
+            readonly type: "string";
+            readonly pattern: "^dir_[A-Za-z0-9_-]{16,64}$";
+        };
+        readonly GroupId: {
+            readonly title: "GroupId";
+            readonly description: "Opaque identifier of a community group: `grp_` followed by 16 to 64 base64url characters. Random and community-scoped; not the group's DID.";
+            readonly type: "string";
+            readonly pattern: "^grp_[A-Za-z0-9_-]{16,64}$";
+        };
+    };
+};
+/**
+ * SPEC.md §7.2 policy for the request variant, from this specification's
+ * front matter. Pass to `consumeInbound` — items 5b, 7 and 8 are
+ * per-specification and cannot be derived from the document alone, and
+ * item 2 needs the schema this carries.
+ */
+export declare const SPEC: {
+    readonly typeUri: "https://trusttasks.org/spec/vtc/groups/members/list/0.1";
+    readonly isBearer: false;
+    readonly isProofRequired: false;
+    readonly isRecipientRequired: true;
+    readonly isIssuedAtRequired: false;
+    readonly payloadSchema: {
+        readonly $schema: "https://json-schema.org/draft/2020-12/schema";
+        readonly $id: "https://trusttasks.org/spec/vtc/groups/members/list/0.1";
+        readonly title: "VTC Groups — Members — List — payload";
+        readonly description: "List a group's members, a page at a time, each projected for the caller as the directory projects them — only where the group shows its members to the caller. The outer document members are owned by the framework — SPEC §6.3.";
+        readonly type: "object";
+        readonly additionalProperties: false;
+        readonly required: readonly ["groupId"];
+        readonly properties: {
+            readonly groupId: {
+                readonly $ref: "#/$defs/GroupId";
+            };
+            readonly cursor: {
+                readonly type: "string";
+                readonly minLength: 1;
+                readonly maxLength: 1024;
+            };
+            readonly limit: {
+                readonly type: "integer";
+                readonly minimum: 1;
+                readonly maximum: 200;
+                readonly description: "Page size; clamped to 1..=200 (default 50).";
+            };
+            readonly ext: {
+                readonly $ref: "#/$defs/Ext";
+            };
+        };
+        readonly $defs: {
+            readonly Response: {
+                readonly $anchor: "response";
+                readonly title: "VTC Groups — Members — List — response payload";
+                readonly description: "The success response to a vtc/groups/members/list/0.1 request. Carried in a Trust Task document whose type is https://trusttasks.org/spec/vtc/groups/members/list/0.1#response.";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["items"];
+                readonly properties: {
+                    readonly items: {
+                        readonly type: "array";
+                        readonly maxItems: 200;
+                        readonly items: {
+                            readonly $ref: "#/$defs/GroupMember";
+                        };
+                    };
+                    readonly nextCursor: {
+                        readonly type: readonly ["string", "null"];
+                        readonly maxLength: 1024;
+                    };
+                    readonly ext: {
+                        readonly $ref: "#/$defs/Ext";
+                    };
+                };
+            };
+            readonly Ext: {
+                readonly title: "Ext";
+                readonly description: "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.";
+                readonly type: "object";
+                readonly minProperties: 1;
+                readonly additionalProperties: true;
+                readonly propertyNames: {
+                    readonly pattern: "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$";
+                };
+            };
+            readonly GroupMember: {
+                readonly title: "GroupMember";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["entryId", "source", "since", "state"];
+                readonly properties: {
+                    readonly entryId: {
+                        readonly $ref: "#/$defs/EntryId";
+                    };
+                    readonly source: {
+                        readonly $ref: "#/$defs/MembershipSource";
+                    };
+                    readonly since: {
+                        readonly type: "string";
+                        readonly format: "date-time";
+                    };
+                    readonly state: {
+                        readonly type: "string";
+                        readonly enum: readonly ["active", "pending"];
+                        readonly description: "`active`: a member. `pending`: an addition to a group carrying authority that is waiting for the consent the community requires for a grant.";
+                    };
+                    readonly fields: {
+                        readonly $ref: "#/$defs/EntryFields";
+                        readonly description: "The member's directory fields that the caller may see, projected exactly as vtc/directory/entries/show would project them. Absent when the caller may see none.";
+                    };
+                    readonly credentialId: {
+                        readonly anyOf: readonly [{
+                            readonly $ref: "#/$defs/GroupCredentialId";
+                        }, {
+                            readonly type: "null";
+                        }];
+                        readonly description: "The member's current group membership credential, or null when the group issues none.";
+                    };
+                    readonly credentialValidUntil: {
+                        readonly type: "string";
+                        readonly format: "date-time";
+                        readonly description: "When the member's current group credential expires. Shown to the member themselves and to managers only.";
+                    };
+                };
+            };
+            readonly GroupCredentialId: {
+                readonly title: "GroupCredentialId";
+                readonly description: "Identifier (`id`) of a group membership credential issued to a member. Each renewal issues a new credential with a new identifier. Validity is the community's setting; a community SHOULD default to 30 days, renewed when 10 days remain.";
+                readonly type: "string";
+                readonly minLength: 1;
+                readonly maxLength: 512;
+            };
+            readonly MembershipSource: {
+                readonly title: "MembershipSource";
+                readonly description: "How the member came to be in the group. `added`: by a manager. `joined`: they joined an open group. `requestApproved`: a manager approved their request. `rule`: a dynamic group's rule admits them.";
+                readonly type: "string";
+                readonly enum: readonly ["added", "joined", "requestApproved", "rule"];
+            };
+            readonly EntryFields: {
+                readonly title: "EntryFields";
+                readonly description: "The fields of one entry that a particular viewer may see, keyed by field: the intersection of the member's visibility, the community's ceiling and policy, plus any derived fields that intersection admits. A withheld field is ABSENT, never null.";
+                readonly type: "object";
+                readonly maxProperties: 64;
+                readonly propertyNames: {
+                    readonly $ref: "#/$defs/FieldKey";
+                };
+                readonly additionalProperties: {
+                    readonly $ref: "#/$defs/FieldValue";
+                };
+            };
+            readonly FieldValue: {
+                readonly title: "FieldValue";
+                readonly description: "The value of one field. Which shape a field takes is fixed by its definition's `type`: text-like types (`text`, `longText`, `url`, `email`, `phone`, `enum`, `date` as YYYY-MM-DD, `country` as ISO 3166-1 alpha-2, `did`) are strings; `multiEnum` and the base field `links` are arrays of strings; `image` and the base field `avatar` are a `CardBlobRef`; `claim` is a `VerifiedValue`; the derived base field `personhood` is a boolean.";
+                readonly anyOf: readonly [{
+                    readonly type: "string";
+                    readonly maxLength: 2000;
+                }, {
+                    readonly type: "boolean";
+                }, {
+                    readonly type: "array";
+                    readonly maxItems: 32;
+                    readonly items: {
+                        readonly type: "string";
+                        readonly maxLength: 500;
+                    };
+                }, {
+                    readonly $ref: "#/$defs/CardBlobRef";
+                }, {
+                    readonly $ref: "#/$defs/VerifiedValue";
+                }];
+            };
+            readonly VerifiedValue: {
+                readonly title: "VerifiedValue";
+                readonly description: "The value of a `credential`-sourced field: a claim the member disclosed from a credential they presented, with the issuer that attests it. A verified value always names its issuer, and a self-asserted value is never shaped as one. The community keeps only the disclosed claim and these facts about it — never the presentation.";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["value", "issuer", "verifiedAt"];
+                readonly properties: {
+                    readonly value: {
+                        readonly anyOf: readonly [{
+                            readonly type: "string";
+                            readonly maxLength: 2000;
+                        }, {
+                            readonly type: "boolean";
+                        }, {
+                            readonly type: "number";
+                        }];
+                        readonly description: "The disclosed claim value.";
+                    };
+                    readonly issuer: {
+                        readonly type: "string";
+                        readonly pattern: "^did:";
+                        readonly maxLength: 2048;
+                        readonly description: "DID of the credential's issuer, shown as the field's verification badge.";
+                    };
+                    readonly credentialType: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                        readonly maxLength: 128;
+                        readonly description: "The most specific `type` of the credential the claim came from.";
+                    };
+                    readonly verifiedAt: {
+                        readonly type: "string";
+                        readonly format: "date-time";
+                        readonly description: "When the community verified the presentation.";
+                    };
+                    readonly validUntil: {
+                        readonly type: "string";
+                        readonly format: "date-time";
+                        readonly description: "When the credential expires, where it does. The community withdraws the value once it passes.";
+                    };
+                };
+            };
+            readonly CardBlobRef: {
+                readonly title: "CardBlobRef";
+                readonly description: "A content-addressed image held in the community's blob store — an avatar or an `image` field. At most 256 KiB, images only, re-encoded by the community on upload (vtc/directory/images/upload: metadata stripped, dimensions capped) so its digest does not link the member across communities. A viewer reads the bytes with vtc/directory/images/get, which answers only where the same projection shows the value. `url` and `urlExpiresAt` MAY appear in a projection: a short-lived URL the community checks against the same projection, so a member-only image is never a public URL. A community that does not offer one leaves both out.";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["sha256", "mediaType"];
+                readonly properties: {
+                    readonly sha256: {
+                        readonly type: "string";
+                        readonly pattern: "^[0-9a-f]{64}$";
+                        readonly description: "Lowercase hex SHA-256 of the stored, re-encoded bytes.";
+                    };
+                    readonly mediaType: {
+                        readonly type: "string";
+                        readonly enum: readonly ["image/png", "image/jpeg", "image/webp", "image/avif"];
+                        readonly description: "Media type of the stored bytes.";
+                    };
+                    readonly size: {
+                        readonly type: "integer";
+                        readonly minimum: 1;
+                        readonly maximum: 262144;
+                        readonly description: "Size in bytes of the stored bytes.";
+                    };
+                    readonly url: {
+                        readonly type: "string";
+                        readonly format: "uri";
+                        readonly maxLength: 2048;
+                        readonly description: "Projection only: a URL the viewer can fetch the image from until `urlExpiresAt`.";
+                    };
+                    readonly urlExpiresAt: {
+                        readonly type: "string";
+                        readonly format: "date-time";
+                        readonly description: "Projection only: when `url` stops working.";
+                    };
+                };
+            };
+            readonly FieldKey: {
+                readonly title: "FieldKey";
+                readonly description: "Identifier of a directory field. A key with no `.` is a BASE field, the same in every community: `displayName`, `nickname`, `avatar`, `pronouns`, `bio`, `links` (written by the member) and `role`, `joinedAt`, `did`, `personhood` (derived from the community's own records, never stored on a card). A community-defined field MUST use a reverse-DNS key (`org.example.employer`), so a base key never collides with one, and a key is never reused with a different meaning once defined.";
+                readonly type: "string";
+                readonly minLength: 1;
+                readonly maxLength: 128;
+                readonly pattern: "^([a-z][a-z0-9-]*\\.)*[a-z][a-zA-Z0-9]{0,63}$";
+            };
+            readonly EntryId: {
+                readonly title: "EntryId";
+                readonly description: "Opaque identifier of one directory entry: `dir_` followed by 16 to 64 base64url characters. Random, scoped to one community, and stable for the life of the membership — it survives a rotation of the member's DID, which is why groups, notes and cards are keyed by it. It MUST NOT be derived from, and MUST NOT reveal, any DID of the member, and the same person's entries in two communities MUST NOT share one. Compared by exact string equality.";
+                readonly type: "string";
+                readonly pattern: "^dir_[A-Za-z0-9_-]{16,64}$";
+            };
+            readonly GroupId: {
+                readonly title: "GroupId";
+                readonly description: "Opaque identifier of a community group: `grp_` followed by 16 to 64 base64url characters. Random and community-scoped; not the group's DID.";
+                readonly type: "string";
+                readonly pattern: "^grp_[A-Za-z0-9_-]{16,64}$";
+            };
+        };
+    };
+};
+/**
+ * SPEC.md §7.2 policy for the success-response variant. `isRecipientRequired`
+ * tracks the *issuer* party's requirement because a response swaps the
+ * parties (§7.3 item 5).
+ */
+export declare const RESPONSE_SPEC: {
+    readonly typeUri: "https://trusttasks.org/spec/vtc/groups/members/list/0.1#response";
+    readonly isBearer: false;
+    readonly isProofRequired: false;
+    readonly isRecipientRequired: true;
+    readonly isIssuedAtRequired: false;
+    readonly payloadSchema: {
+        readonly $schema: "https://json-schema.org/draft/2020-12/schema";
+        readonly $ref: "#/$defs/Response";
+        readonly $defs: {
+            readonly Response: {
+                readonly $anchor: "response";
+                readonly title: "VTC Groups — Members — List — response payload";
+                readonly description: "The success response to a vtc/groups/members/list/0.1 request. Carried in a Trust Task document whose type is https://trusttasks.org/spec/vtc/groups/members/list/0.1#response.";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["items"];
+                readonly properties: {
+                    readonly items: {
+                        readonly type: "array";
+                        readonly maxItems: 200;
+                        readonly items: {
+                            readonly $ref: "#/$defs/GroupMember";
+                        };
+                    };
+                    readonly nextCursor: {
+                        readonly type: readonly ["string", "null"];
+                        readonly maxLength: 1024;
+                    };
+                    readonly ext: {
+                        readonly $ref: "#/$defs/Ext";
+                    };
+                };
+            };
+            readonly Ext: {
+                readonly title: "Ext";
+                readonly description: "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.";
+                readonly type: "object";
+                readonly minProperties: 1;
+                readonly additionalProperties: true;
+                readonly propertyNames: {
+                    readonly pattern: "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$";
+                };
+            };
+            readonly GroupMember: {
+                readonly title: "GroupMember";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["entryId", "source", "since", "state"];
+                readonly properties: {
+                    readonly entryId: {
+                        readonly $ref: "#/$defs/EntryId";
+                    };
+                    readonly source: {
+                        readonly $ref: "#/$defs/MembershipSource";
+                    };
+                    readonly since: {
+                        readonly type: "string";
+                        readonly format: "date-time";
+                    };
+                    readonly state: {
+                        readonly type: "string";
+                        readonly enum: readonly ["active", "pending"];
+                        readonly description: "`active`: a member. `pending`: an addition to a group carrying authority that is waiting for the consent the community requires for a grant.";
+                    };
+                    readonly fields: {
+                        readonly $ref: "#/$defs/EntryFields";
+                        readonly description: "The member's directory fields that the caller may see, projected exactly as vtc/directory/entries/show would project them. Absent when the caller may see none.";
+                    };
+                    readonly credentialId: {
+                        readonly anyOf: readonly [{
+                            readonly $ref: "#/$defs/GroupCredentialId";
+                        }, {
+                            readonly type: "null";
+                        }];
+                        readonly description: "The member's current group membership credential, or null when the group issues none.";
+                    };
+                    readonly credentialValidUntil: {
+                        readonly type: "string";
+                        readonly format: "date-time";
+                        readonly description: "When the member's current group credential expires. Shown to the member themselves and to managers only.";
+                    };
+                };
+            };
+            readonly GroupCredentialId: {
+                readonly title: "GroupCredentialId";
+                readonly description: "Identifier (`id`) of a group membership credential issued to a member. Each renewal issues a new credential with a new identifier. Validity is the community's setting; a community SHOULD default to 30 days, renewed when 10 days remain.";
+                readonly type: "string";
+                readonly minLength: 1;
+                readonly maxLength: 512;
+            };
+            readonly MembershipSource: {
+                readonly title: "MembershipSource";
+                readonly description: "How the member came to be in the group. `added`: by a manager. `joined`: they joined an open group. `requestApproved`: a manager approved their request. `rule`: a dynamic group's rule admits them.";
+                readonly type: "string";
+                readonly enum: readonly ["added", "joined", "requestApproved", "rule"];
+            };
+            readonly EntryFields: {
+                readonly title: "EntryFields";
+                readonly description: "The fields of one entry that a particular viewer may see, keyed by field: the intersection of the member's visibility, the community's ceiling and policy, plus any derived fields that intersection admits. A withheld field is ABSENT, never null.";
+                readonly type: "object";
+                readonly maxProperties: 64;
+                readonly propertyNames: {
+                    readonly $ref: "#/$defs/FieldKey";
+                };
+                readonly additionalProperties: {
+                    readonly $ref: "#/$defs/FieldValue";
+                };
+            };
+            readonly FieldValue: {
+                readonly title: "FieldValue";
+                readonly description: "The value of one field. Which shape a field takes is fixed by its definition's `type`: text-like types (`text`, `longText`, `url`, `email`, `phone`, `enum`, `date` as YYYY-MM-DD, `country` as ISO 3166-1 alpha-2, `did`) are strings; `multiEnum` and the base field `links` are arrays of strings; `image` and the base field `avatar` are a `CardBlobRef`; `claim` is a `VerifiedValue`; the derived base field `personhood` is a boolean.";
+                readonly anyOf: readonly [{
+                    readonly type: "string";
+                    readonly maxLength: 2000;
+                }, {
+                    readonly type: "boolean";
+                }, {
+                    readonly type: "array";
+                    readonly maxItems: 32;
+                    readonly items: {
+                        readonly type: "string";
+                        readonly maxLength: 500;
+                    };
+                }, {
+                    readonly $ref: "#/$defs/CardBlobRef";
+                }, {
+                    readonly $ref: "#/$defs/VerifiedValue";
+                }];
+            };
+            readonly VerifiedValue: {
+                readonly title: "VerifiedValue";
+                readonly description: "The value of a `credential`-sourced field: a claim the member disclosed from a credential they presented, with the issuer that attests it. A verified value always names its issuer, and a self-asserted value is never shaped as one. The community keeps only the disclosed claim and these facts about it — never the presentation.";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["value", "issuer", "verifiedAt"];
+                readonly properties: {
+                    readonly value: {
+                        readonly anyOf: readonly [{
+                            readonly type: "string";
+                            readonly maxLength: 2000;
+                        }, {
+                            readonly type: "boolean";
+                        }, {
+                            readonly type: "number";
+                        }];
+                        readonly description: "The disclosed claim value.";
+                    };
+                    readonly issuer: {
+                        readonly type: "string";
+                        readonly pattern: "^did:";
+                        readonly maxLength: 2048;
+                        readonly description: "DID of the credential's issuer, shown as the field's verification badge.";
+                    };
+                    readonly credentialType: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                        readonly maxLength: 128;
+                        readonly description: "The most specific `type` of the credential the claim came from.";
+                    };
+                    readonly verifiedAt: {
+                        readonly type: "string";
+                        readonly format: "date-time";
+                        readonly description: "When the community verified the presentation.";
+                    };
+                    readonly validUntil: {
+                        readonly type: "string";
+                        readonly format: "date-time";
+                        readonly description: "When the credential expires, where it does. The community withdraws the value once it passes.";
+                    };
+                };
+            };
+            readonly CardBlobRef: {
+                readonly title: "CardBlobRef";
+                readonly description: "A content-addressed image held in the community's blob store — an avatar or an `image` field. At most 256 KiB, images only, re-encoded by the community on upload (vtc/directory/images/upload: metadata stripped, dimensions capped) so its digest does not link the member across communities. A viewer reads the bytes with vtc/directory/images/get, which answers only where the same projection shows the value. `url` and `urlExpiresAt` MAY appear in a projection: a short-lived URL the community checks against the same projection, so a member-only image is never a public URL. A community that does not offer one leaves both out.";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["sha256", "mediaType"];
+                readonly properties: {
+                    readonly sha256: {
+                        readonly type: "string";
+                        readonly pattern: "^[0-9a-f]{64}$";
+                        readonly description: "Lowercase hex SHA-256 of the stored, re-encoded bytes.";
+                    };
+                    readonly mediaType: {
+                        readonly type: "string";
+                        readonly enum: readonly ["image/png", "image/jpeg", "image/webp", "image/avif"];
+                        readonly description: "Media type of the stored bytes.";
+                    };
+                    readonly size: {
+                        readonly type: "integer";
+                        readonly minimum: 1;
+                        readonly maximum: 262144;
+                        readonly description: "Size in bytes of the stored bytes.";
+                    };
+                    readonly url: {
+                        readonly type: "string";
+                        readonly format: "uri";
+                        readonly maxLength: 2048;
+                        readonly description: "Projection only: a URL the viewer can fetch the image from until `urlExpiresAt`.";
+                    };
+                    readonly urlExpiresAt: {
+                        readonly type: "string";
+                        readonly format: "date-time";
+                        readonly description: "Projection only: when `url` stops working.";
+                    };
+                };
+            };
+            readonly FieldKey: {
+                readonly title: "FieldKey";
+                readonly description: "Identifier of a directory field. A key with no `.` is a BASE field, the same in every community: `displayName`, `nickname`, `avatar`, `pronouns`, `bio`, `links` (written by the member) and `role`, `joinedAt`, `did`, `personhood` (derived from the community's own records, never stored on a card). A community-defined field MUST use a reverse-DNS key (`org.example.employer`), so a base key never collides with one, and a key is never reused with a different meaning once defined.";
+                readonly type: "string";
+                readonly minLength: 1;
+                readonly maxLength: 128;
+                readonly pattern: "^([a-z][a-z0-9-]*\\.)*[a-z][a-zA-Z0-9]{0,63}$";
+            };
+            readonly EntryId: {
+                readonly title: "EntryId";
+                readonly description: "Opaque identifier of one directory entry: `dir_` followed by 16 to 64 base64url characters. Random, scoped to one community, and stable for the life of the membership — it survives a rotation of the member's DID, which is why groups, notes and cards are keyed by it. It MUST NOT be derived from, and MUST NOT reveal, any DID of the member, and the same person's entries in two communities MUST NOT share one. Compared by exact string equality.";
+                readonly type: "string";
+                readonly pattern: "^dir_[A-Za-z0-9_-]{16,64}$";
+            };
+            readonly GroupId: {
+                readonly title: "GroupId";
+                readonly description: "Opaque identifier of a community group: `grp_` followed by 16 to 64 base64url characters. Random and community-scoped; not the group's DID.";
+                readonly type: "string";
+                readonly pattern: "^grp_[A-Za-z0-9_-]{16,64}$";
+            };
+        };
+    };
+};
+//# sourceMappingURL=payload.d.ts.map