@openvtc/trust-tasks 0.26.18 → 0.26.19

package/dist/vtc/directory/disclosure/0.1/payload.d.ts

@@ -0,0 +1,951 @@
+/**
+ * Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
+ * Source: specs/vtc/directory/disclosure/0.1/payload.schema.json
+ */
+import type { Audience, DigestMultibase, DirectoryDisclosure, DisclosedField, Ext, FieldDescription, FieldKey, FieldLabel, FieldSource, FieldType, GroupDisclosure, Introductions, Listing, NewCardDefaults } from "../../../../_shared/components.js";
+/**
+ * Read the statement of what a community's directory discloses about its members, and to whom, generated from the configuration in force. Anyone may read it, applicants above all, so the request carries nothing about the reader. The outer document members are owned by the framework — SPEC §6.3.
+ */
+export interface VTCDirectoryDisclosurePayload {
+    ext?: Ext;
+}
+/**
+ * The success response to a vtc/directory/disclosure/0.1 request. Carried in a Trust Task document whose type is https://trusttasks.org/spec/vtc/directory/disclosure/0.1#response.
+ */
+export interface VTCDirectoryDisclosureResponsePayload {
+    communityDid: string;
+    disclosure: DirectoryDisclosure;
+    ext?: Ext;
+}
+/** Shared definitions this specification references, re-exported under the names it used to declare them with. */
+export type { Audience, DigestMultibase, DirectoryDisclosure, DisclosedField, Ext, FieldDescription, FieldKey, FieldLabel, FieldSource, FieldType, GroupDisclosure, Introductions, Listing, NewCardDefaults };
+/** Trust Task type URI. */
+export declare const TYPE_URI: "https://trusttasks.org/spec/vtc/directory/disclosure/0.1";
+/** Stable alias for this specification's request payload shape. */
+export type Payload = VTCDirectoryDisclosurePayload;
+/** Trust Task response type URI (request type URI + "#response"). */
+export declare const RESPONSE_TYPE_URI: "https://trusttasks.org/spec/vtc/directory/disclosure/0.1#response";
+/** Stable alias for this specification's success-response payload shape. */
+export type Response = VTCDirectoryDisclosureResponsePayload;
+/**
+ * This specification's payload schema, as a value.
+ *
+ * SPEC.md §7.2 item 2 is performed against this. It is shipped as data
+ * rather than only as a `.json` file because TypeScript types are erased
+ * at runtime: without a schema a consumer has nothing to validate, and
+ * every REQUIRED payload member is optional in practice. Cross-file
+ * `$ref`s are already inlined, so it needs no resolver.
+ */
+export declare const PAYLOAD_SCHEMA: {
+    readonly $schema: "https://json-schema.org/draft/2020-12/schema";
+    readonly $id: "https://trusttasks.org/spec/vtc/directory/disclosure/0.1";
+    readonly title: "VTC Directory — Disclosure — payload";
+    readonly description: "Read the statement of what a community's directory discloses about its members, and to whom, generated from the configuration in force. Anyone may read it, applicants above all, so the request carries nothing about the reader. The outer document members are owned by the framework — SPEC §6.3.";
+    readonly type: "object";
+    readonly additionalProperties: false;
+    readonly properties: {
+        readonly ext: {
+            readonly $ref: "#/$defs/Ext";
+        };
+    };
+    readonly $defs: {
+        readonly Response: {
+            readonly $anchor: "response";
+            readonly title: "VTC Directory — Disclosure — response payload";
+            readonly description: "The success response to a vtc/directory/disclosure/0.1 request. Carried in a Trust Task document whose type is https://trusttasks.org/spec/vtc/directory/disclosure/0.1#response.";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["communityDid", "disclosure"];
+            readonly properties: {
+                readonly communityDid: {
+                    readonly type: "string";
+                    readonly pattern: "^did:";
+                    readonly maxLength: 2048;
+                };
+                readonly disclosure: {
+                    readonly $ref: "#/$defs/DirectoryDisclosure";
+                };
+                readonly ext: {
+                    readonly $ref: "#/$defs/Ext";
+                };
+            };
+        };
+        readonly Ext: {
+            readonly title: "Ext";
+            readonly description: "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.";
+            readonly type: "object";
+            readonly minProperties: 1;
+            readonly additionalProperties: true;
+            readonly propertyNames: {
+                readonly pattern: "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$";
+            };
+        };
+        readonly DirectoryDisclosure: {
+            readonly title: "DirectoryDisclosure";
+            readonly description: "The statement itself. Every member is generated from the community's configuration when the statement is read. `statementDigest` names this exact statement, so an applicant can record which one it was shown.";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["fields", "newCard", "membershipIdentifiers", "adminNotes", "externalCards", "statementDigest"];
+            readonly properties: {
+                readonly fields: {
+                    readonly type: "array";
+                    readonly maxItems: 128;
+                    readonly items: {
+                        readonly $ref: "#/$defs/DisclosedField";
+                    };
+                    readonly description: "Every active field, base and community-defined, in display order. A base field the community has disabled is absent, which is how a reader learns it is not collected.";
+                };
+                readonly newCard: {
+                    readonly $ref: "#/$defs/NewCardDefaults";
+                };
+                readonly membershipIdentifiers: {
+                    readonly $ref: "#/$defs/Audience";
+                    readonly description: "The widest audience a member's membership identifier — the DID they joined with — can reach through the directory: the ceiling of the base field `did`, or `admins` where that field is disabled. `members` or `public` means a member may choose to show it that widely; a new card never shows it beyond `admins` (VTI-DIR-042). Administrators always see it.";
+                };
+                readonly adminNotes: {
+                    readonly type: "boolean";
+                    readonly description: "Whether administrators keep notes about members. Notes are never on a card and never reach another member; a member may ask for the notes about them.";
+                };
+                readonly groups: {
+                    readonly $ref: "#/$defs/GroupDisclosure";
+                };
+                readonly externalCards: {
+                    readonly type: "boolean";
+                    readonly description: "Whether a member may publish a card beyond the community: their `public` values, signed by them, offered through the community's trust registry. Always the member's own choice, and off on a new card. False where the community cannot publish external cards.";
+                };
+                readonly statementDigest: {
+                    readonly $ref: "#/$defs/DigestMultibase";
+                    readonly description: "Digest over the RFC 8785 (JCS) canonicalization of this statement with the `statementDigest` member removed, as a multibase-encoded multihash (SHA-256 and base58btc RECOMMENDED). Changes exactly when what the statement says changes.";
+                };
+                readonly ext: {
+                    readonly $ref: "#/$defs/Ext";
+                };
+            };
+        };
+        readonly GroupDisclosure: {
+            readonly title: "GroupDisclosure";
+            readonly description: "Present when the community has groups. A member of a group holds a credential, issued by the group's own identifier, that evidences their membership, and can present it outside the community — which is why an applicant is told.";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["credentialValidity"];
+            readonly properties: {
+                readonly credentialValidity: {
+                    readonly type: "string";
+                    readonly maxLength: 32;
+                    readonly pattern: "^P(([0-9]+W)?([0-9]+D)?T([0-9]+H([0-9]+M)?([0-9]+S)?|[0-9]+M([0-9]+S)?|[0-9]+S)|[0-9]+W([0-9]+D)?|[0-9]+D)$";
+                    readonly description: "How long each group membership credential is valid for, as an ISO 8601 duration in weeks, days, hours, minutes and seconds (`P30D`). It is renewed while the member stays in the group, and a credential already issued stays valid until it expires even after its holder leaves.";
+                };
+            };
+        };
+        readonly NewCardDefaults: {
+            readonly title: "NewCardDefaults";
+            readonly description: "The discoverability a card has when the community creates it, before its member chooses. A new card is never published beyond the community (VTI-DIR-042), so there is no member for that here: `externalCards` says whether the member may turn it on.";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["listing", "search"];
+            readonly properties: {
+                readonly listing: {
+                    readonly $ref: "#/$defs/Listing";
+                    readonly description: "The listing a new card starts with: the community's `defaultListing` (vtc/directory/fields/list). Every member may always choose `hidden`.";
+                };
+                readonly search: {
+                    readonly type: "string";
+                    readonly enum: readonly ["byName", "exactNickname", "off"];
+                    readonly description: "What a member's search may match, as the card's `discoverability.search`.";
+                };
+                readonly introductions: {
+                    readonly $ref: "#/$defs/Introductions";
+                    readonly description: "From whom a new card accepts introductions. Absent where the community does not deliver introductions.";
+                };
+            };
+        };
+        readonly Introductions: {
+            readonly title: "Introductions";
+            readonly description: "Who may ask the community to introduce them to this member. `anyone`: any active member who can find the entry. `groups`: only members who share a community group with them. `connections`: only members holding an attributed, in-force verified relationship with them. `off`: nobody. A refused introduction is never reported to its sender.";
+            readonly type: "string";
+            readonly enum: readonly ["anyone", "groups", "connections", "off"];
+        };
+        readonly Listing: {
+            readonly title: "Listing";
+            readonly description: "Whether members can find the entry. `listed`: it appears when members browse. `findable`: it does not appear when browsing, but a search that matches it under `search` returns it. `hidden`: no member finds it by browsing or searching; administrators still see it, and members who share a group that shows its members see it in that group's member list.";
+            readonly type: "string";
+            readonly enum: readonly ["listed", "findable", "hidden"];
+        };
+        readonly DisclosedField: {
+            readonly title: "DisclosedField";
+            readonly description: "One active field of the community's directory, as an applicant needs to see it: what it is, who writes its value, the widest audience it may ever reach and the audience a new card gives it. Disabled and retired fields are not listed: no projection shows them.";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["key", "label", "type", "source", "ceiling", "defaultVisibility", "searchable"];
+            readonly properties: {
+                readonly key: {
+                    readonly $ref: "#/$defs/FieldKey";
+                };
+                readonly label: {
+                    readonly $ref: "#/$defs/FieldLabel";
+                };
+                readonly description: {
+                    readonly $ref: "#/$defs/FieldDescription";
+                };
+                readonly type: {
+                    readonly $ref: "#/$defs/FieldType";
+                };
+                readonly source: {
+                    readonly $ref: "#/$defs/FieldSource";
+                    readonly description: "Who writes the value. `admin` and `credential` matter most to an applicant: an `admin` field holds what the community asserts about the member, which the member reads and cannot change.";
+                };
+                readonly ceiling: {
+                    readonly $ref: "#/$defs/Audience";
+                    readonly description: "The widest audience the field may ever reach, whatever the member chooses.";
+                };
+                readonly defaultVisibility: {
+                    readonly $ref: "#/$defs/Audience";
+                    readonly description: "The audience a new card gives the field until its member chooses. Never wider than `ceiling`.";
+                };
+                readonly searchable: {
+                    readonly type: "boolean";
+                    readonly description: "Whether a member's search may match the field, within what the searcher may see.";
+                };
+                readonly facet: {
+                    readonly type: "boolean";
+                    readonly description: "Whether members may filter on the field and see counts by its values. Absent: false.";
+                };
+            };
+        };
+        readonly Audience: {
+            readonly title: "Audience";
+            readonly description: "Who may see a directory field, ordered from narrowest to widest. `admins`: holders of `vtc.directory.admin` (and, for derived fields, `vtc.members.manage`). `groups`: members who share at least one community group with the subject (narrowed to the groups the subject names in `groupAudience`, where it names any). `connections`: members holding an attributed, in-force verified relationship with the subject at the community. `members`: every active member. `public`: anyone, and what the member's signed public card carries outside the community.\n\n`groups` and `connections` are not a chain: a viewer sees a field when they satisfy the audience the subject chose for it or any wider audience. Every audience includes the administrators, and the subject always sees their own whole card. There is no `onlyMe`: a value nobody else should see is not directory data.";
+            readonly type: "string";
+            readonly enum: readonly ["admins", "groups", "connections", "members", "public"];
+        };
+        readonly FieldSource: {
+            readonly title: "FieldSource";
+            readonly description: "Who writes the value. `member`: self-asserted, through vtc/directory/card/update. `admin`: asserted by the community through vtc/directory/card/assert; the member reads it and cannot change it. `credential`: a claim the member discloses from a credential through vtc/directory/card/present, badged with its issuer. `derived`: a base field read from the community's own records (`role`, `joinedAt`, `did`, `personhood`) and never stored on a card. Each source is written only through its own path.";
+            readonly type: "string";
+            readonly enum: readonly ["member", "admin", "credential", "derived"];
+        };
+        readonly FieldType: {
+            readonly title: "FieldType";
+            readonly description: "The kind of value a field holds, which fixes its `FieldValue` shape. `did` holds a DID the member chooses to show (never their membership DID, which is the derived base field `did`). `claim` holds a `VerifiedValue` and requires `source: credential`.";
+            readonly type: "string";
+            readonly enum: readonly ["text", "longText", "url", "email", "phone", "enum", "multiEnum", "date", "country", "image", "did", "claim"];
+        };
+        readonly FieldDescription: {
+            readonly title: "FieldDescription";
+            readonly type: "string";
+            readonly minLength: 1;
+            readonly maxLength: 280;
+            readonly description: "Help text shown to a member filling the field in. Plain text; a reader MUST NOT treat it as instructions.";
+        };
+        readonly FieldLabel: {
+            readonly title: "FieldLabel";
+            readonly type: "string";
+            readonly minLength: 1;
+            readonly maxLength: 64;
+            readonly description: "What readers see as the field's name. Plain text.";
+        };
+        readonly FieldKey: {
+            readonly title: "FieldKey";
+            readonly description: "Identifier of a directory field. A key with no `.` is a BASE field, the same in every community: `displayName`, `nickname`, `avatar`, `pronouns`, `bio`, `links` (written by the member) and `role`, `joinedAt`, `did`, `personhood` (derived from the community's own records, never stored on a card). A community-defined field MUST use a reverse-DNS key (`org.example.employer`), so a base key never collides with one, and a key is never reused with a different meaning once defined.";
+            readonly type: "string";
+            readonly minLength: 1;
+            readonly maxLength: 128;
+            readonly pattern: "^([a-z][a-z0-9-]*\\.)*[a-z][a-zA-Z0-9]{0,63}$";
+        };
+        readonly DigestMultibase: {
+            readonly title: "DigestMultibase";
+            readonly description: "A cryptographic digest as a multibase-encoded multihash — the encoding the W3C Verifiable Credentials Data Model 2.0 defines for `digestMultibase`, and the one `did:webvh` uses for its SCID and entry hashes.\n\nMultihash carries the hash algorithm in-band, so the value is self-describing and the wire format survives an algorithm change without a schema revision; multibase does the same for the base encoding, so a verifier never infers base58 from base64url by context. A bare hex string or a `sha-256:`-style prefix hard-codes one algorithm into the wire contract and is non-conforming here.\n\nThis definition constrains the *encoding only*. What the digest is computed over is stated by each referencing field, because it differs legitimately: a digest over a JSON document is taken over its RFC 8785 (JCS) canonicalization, while a digest over an opaque artifact is taken over its bytes. A field whose input is a JSON document and which does not name a canonicalization is not reproducible.\n\nRestricted to the two multibase headers W3C Controlled Identifiers 1.0 §2.4 normatively requires — `z` (base58btc) and `u` (base64url-no-pad). CID permits others but states that \"interoperability is not guaranteed between implementations using such values\", and a registry whose purpose is interoperability should not mint digests a conforming verifier may be unable to read. The alphabets are enforced rather than assumed: base58btc excludes 0, O, I and l, and an earlier permissive pattern let three published examples carry digests that were not valid base58 at all. base58btc is RECOMMENDED, for consistency with `did:key` and `did:webvh`.";
+            readonly type: "string";
+            readonly minLength: 16;
+            readonly pattern: "^(z[1-9A-HJ-NP-Za-km-z]+|u[A-Za-z0-9_-]+)$";
+            readonly examples: readonly ["zQmbWqxBEKC3P8tqsKc98xmWNzrzDtRLMiMPL8wBuTGsMnR"];
+        };
+    };
+};
+/** As {@link PAYLOAD_SCHEMA}, for the success-response variant. */
+export declare const RESPONSE_PAYLOAD_SCHEMA: {
+    readonly $schema: "https://json-schema.org/draft/2020-12/schema";
+    readonly $ref: "#/$defs/Response";
+    readonly $defs: {
+        readonly Response: {
+            readonly $anchor: "response";
+            readonly title: "VTC Directory — Disclosure — response payload";
+            readonly description: "The success response to a vtc/directory/disclosure/0.1 request. Carried in a Trust Task document whose type is https://trusttasks.org/spec/vtc/directory/disclosure/0.1#response.";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["communityDid", "disclosure"];
+            readonly properties: {
+                readonly communityDid: {
+                    readonly type: "string";
+                    readonly pattern: "^did:";
+                    readonly maxLength: 2048;
+                };
+                readonly disclosure: {
+                    readonly $ref: "#/$defs/DirectoryDisclosure";
+                };
+                readonly ext: {
+                    readonly $ref: "#/$defs/Ext";
+                };
+            };
+        };
+        readonly Ext: {
+            readonly title: "Ext";
+            readonly description: "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.";
+            readonly type: "object";
+            readonly minProperties: 1;
+            readonly additionalProperties: true;
+            readonly propertyNames: {
+                readonly pattern: "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$";
+            };
+        };
+        readonly DirectoryDisclosure: {
+            readonly title: "DirectoryDisclosure";
+            readonly description: "The statement itself. Every member is generated from the community's configuration when the statement is read. `statementDigest` names this exact statement, so an applicant can record which one it was shown.";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["fields", "newCard", "membershipIdentifiers", "adminNotes", "externalCards", "statementDigest"];
+            readonly properties: {
+                readonly fields: {
+                    readonly type: "array";
+                    readonly maxItems: 128;
+                    readonly items: {
+                        readonly $ref: "#/$defs/DisclosedField";
+                    };
+                    readonly description: "Every active field, base and community-defined, in display order. A base field the community has disabled is absent, which is how a reader learns it is not collected.";
+                };
+                readonly newCard: {
+                    readonly $ref: "#/$defs/NewCardDefaults";
+                };
+                readonly membershipIdentifiers: {
+                    readonly $ref: "#/$defs/Audience";
+                    readonly description: "The widest audience a member's membership identifier — the DID they joined with — can reach through the directory: the ceiling of the base field `did`, or `admins` where that field is disabled. `members` or `public` means a member may choose to show it that widely; a new card never shows it beyond `admins` (VTI-DIR-042). Administrators always see it.";
+                };
+                readonly adminNotes: {
+                    readonly type: "boolean";
+                    readonly description: "Whether administrators keep notes about members. Notes are never on a card and never reach another member; a member may ask for the notes about them.";
+                };
+                readonly groups: {
+                    readonly $ref: "#/$defs/GroupDisclosure";
+                };
+                readonly externalCards: {
+                    readonly type: "boolean";
+                    readonly description: "Whether a member may publish a card beyond the community: their `public` values, signed by them, offered through the community's trust registry. Always the member's own choice, and off on a new card. False where the community cannot publish external cards.";
+                };
+                readonly statementDigest: {
+                    readonly $ref: "#/$defs/DigestMultibase";
+                    readonly description: "Digest over the RFC 8785 (JCS) canonicalization of this statement with the `statementDigest` member removed, as a multibase-encoded multihash (SHA-256 and base58btc RECOMMENDED). Changes exactly when what the statement says changes.";
+                };
+                readonly ext: {
+                    readonly $ref: "#/$defs/Ext";
+                };
+            };
+        };
+        readonly GroupDisclosure: {
+            readonly title: "GroupDisclosure";
+            readonly description: "Present when the community has groups. A member of a group holds a credential, issued by the group's own identifier, that evidences their membership, and can present it outside the community — which is why an applicant is told.";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["credentialValidity"];
+            readonly properties: {
+                readonly credentialValidity: {
+                    readonly type: "string";
+                    readonly maxLength: 32;
+                    readonly pattern: "^P(([0-9]+W)?([0-9]+D)?T([0-9]+H([0-9]+M)?([0-9]+S)?|[0-9]+M([0-9]+S)?|[0-9]+S)|[0-9]+W([0-9]+D)?|[0-9]+D)$";
+                    readonly description: "How long each group membership credential is valid for, as an ISO 8601 duration in weeks, days, hours, minutes and seconds (`P30D`). It is renewed while the member stays in the group, and a credential already issued stays valid until it expires even after its holder leaves.";
+                };
+            };
+        };
+        readonly NewCardDefaults: {
+            readonly title: "NewCardDefaults";
+            readonly description: "The discoverability a card has when the community creates it, before its member chooses. A new card is never published beyond the community (VTI-DIR-042), so there is no member for that here: `externalCards` says whether the member may turn it on.";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["listing", "search"];
+            readonly properties: {
+                readonly listing: {
+                    readonly $ref: "#/$defs/Listing";
+                    readonly description: "The listing a new card starts with: the community's `defaultListing` (vtc/directory/fields/list). Every member may always choose `hidden`.";
+                };
+                readonly search: {
+                    readonly type: "string";
+                    readonly enum: readonly ["byName", "exactNickname", "off"];
+                    readonly description: "What a member's search may match, as the card's `discoverability.search`.";
+                };
+                readonly introductions: {
+                    readonly $ref: "#/$defs/Introductions";
+                    readonly description: "From whom a new card accepts introductions. Absent where the community does not deliver introductions.";
+                };
+            };
+        };
+        readonly Introductions: {
+            readonly title: "Introductions";
+            readonly description: "Who may ask the community to introduce them to this member. `anyone`: any active member who can find the entry. `groups`: only members who share a community group with them. `connections`: only members holding an attributed, in-force verified relationship with them. `off`: nobody. A refused introduction is never reported to its sender.";
+            readonly type: "string";
+            readonly enum: readonly ["anyone", "groups", "connections", "off"];
+        };
+        readonly Listing: {
+            readonly title: "Listing";
+            readonly description: "Whether members can find the entry. `listed`: it appears when members browse. `findable`: it does not appear when browsing, but a search that matches it under `search` returns it. `hidden`: no member finds it by browsing or searching; administrators still see it, and members who share a group that shows its members see it in that group's member list.";
+            readonly type: "string";
+            readonly enum: readonly ["listed", "findable", "hidden"];
+        };
+        readonly DisclosedField: {
+            readonly title: "DisclosedField";
+            readonly description: "One active field of the community's directory, as an applicant needs to see it: what it is, who writes its value, the widest audience it may ever reach and the audience a new card gives it. Disabled and retired fields are not listed: no projection shows them.";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["key", "label", "type", "source", "ceiling", "defaultVisibility", "searchable"];
+            readonly properties: {
+                readonly key: {
+                    readonly $ref: "#/$defs/FieldKey";
+                };
+                readonly label: {
+                    readonly $ref: "#/$defs/FieldLabel";
+                };
+                readonly description: {
+                    readonly $ref: "#/$defs/FieldDescription";
+                };
+                readonly type: {
+                    readonly $ref: "#/$defs/FieldType";
+                };
+                readonly source: {
+                    readonly $ref: "#/$defs/FieldSource";
+                    readonly description: "Who writes the value. `admin` and `credential` matter most to an applicant: an `admin` field holds what the community asserts about the member, which the member reads and cannot change.";
+                };
+                readonly ceiling: {
+                    readonly $ref: "#/$defs/Audience";
+                    readonly description: "The widest audience the field may ever reach, whatever the member chooses.";
+                };
+                readonly defaultVisibility: {
+                    readonly $ref: "#/$defs/Audience";
+                    readonly description: "The audience a new card gives the field until its member chooses. Never wider than `ceiling`.";
+                };
+                readonly searchable: {
+                    readonly type: "boolean";
+                    readonly description: "Whether a member's search may match the field, within what the searcher may see.";
+                };
+                readonly facet: {
+                    readonly type: "boolean";
+                    readonly description: "Whether members may filter on the field and see counts by its values. Absent: false.";
+                };
+            };
+        };
+        readonly Audience: {
+            readonly title: "Audience";
+            readonly description: "Who may see a directory field, ordered from narrowest to widest. `admins`: holders of `vtc.directory.admin` (and, for derived fields, `vtc.members.manage`). `groups`: members who share at least one community group with the subject (narrowed to the groups the subject names in `groupAudience`, where it names any). `connections`: members holding an attributed, in-force verified relationship with the subject at the community. `members`: every active member. `public`: anyone, and what the member's signed public card carries outside the community.\n\n`groups` and `connections` are not a chain: a viewer sees a field when they satisfy the audience the subject chose for it or any wider audience. Every audience includes the administrators, and the subject always sees their own whole card. There is no `onlyMe`: a value nobody else should see is not directory data.";
+            readonly type: "string";
+            readonly enum: readonly ["admins", "groups", "connections", "members", "public"];
+        };
+        readonly FieldSource: {
+            readonly title: "FieldSource";
+            readonly description: "Who writes the value. `member`: self-asserted, through vtc/directory/card/update. `admin`: asserted by the community through vtc/directory/card/assert; the member reads it and cannot change it. `credential`: a claim the member discloses from a credential through vtc/directory/card/present, badged with its issuer. `derived`: a base field read from the community's own records (`role`, `joinedAt`, `did`, `personhood`) and never stored on a card. Each source is written only through its own path.";
+            readonly type: "string";
+            readonly enum: readonly ["member", "admin", "credential", "derived"];
+        };
+        readonly FieldType: {
+            readonly title: "FieldType";
+            readonly description: "The kind of value a field holds, which fixes its `FieldValue` shape. `did` holds a DID the member chooses to show (never their membership DID, which is the derived base field `did`). `claim` holds a `VerifiedValue` and requires `source: credential`.";
+            readonly type: "string";
+            readonly enum: readonly ["text", "longText", "url", "email", "phone", "enum", "multiEnum", "date", "country", "image", "did", "claim"];
+        };
+        readonly FieldDescription: {
+            readonly title: "FieldDescription";
+            readonly type: "string";
+            readonly minLength: 1;
+            readonly maxLength: 280;
+            readonly description: "Help text shown to a member filling the field in. Plain text; a reader MUST NOT treat it as instructions.";
+        };
+        readonly FieldLabel: {
+            readonly title: "FieldLabel";
+            readonly type: "string";
+            readonly minLength: 1;
+            readonly maxLength: 64;
+            readonly description: "What readers see as the field's name. Plain text.";
+        };
+        readonly FieldKey: {
+            readonly title: "FieldKey";
+            readonly description: "Identifier of a directory field. A key with no `.` is a BASE field, the same in every community: `displayName`, `nickname`, `avatar`, `pronouns`, `bio`, `links` (written by the member) and `role`, `joinedAt`, `did`, `personhood` (derived from the community's own records, never stored on a card). A community-defined field MUST use a reverse-DNS key (`org.example.employer`), so a base key never collides with one, and a key is never reused with a different meaning once defined.";
+            readonly type: "string";
+            readonly minLength: 1;
+            readonly maxLength: 128;
+            readonly pattern: "^([a-z][a-z0-9-]*\\.)*[a-z][a-zA-Z0-9]{0,63}$";
+        };
+        readonly DigestMultibase: {
+            readonly title: "DigestMultibase";
+            readonly description: "A cryptographic digest as a multibase-encoded multihash — the encoding the W3C Verifiable Credentials Data Model 2.0 defines for `digestMultibase`, and the one `did:webvh` uses for its SCID and entry hashes.\n\nMultihash carries the hash algorithm in-band, so the value is self-describing and the wire format survives an algorithm change without a schema revision; multibase does the same for the base encoding, so a verifier never infers base58 from base64url by context. A bare hex string or a `sha-256:`-style prefix hard-codes one algorithm into the wire contract and is non-conforming here.\n\nThis definition constrains the *encoding only*. What the digest is computed over is stated by each referencing field, because it differs legitimately: a digest over a JSON document is taken over its RFC 8785 (JCS) canonicalization, while a digest over an opaque artifact is taken over its bytes. A field whose input is a JSON document and which does not name a canonicalization is not reproducible.\n\nRestricted to the two multibase headers W3C Controlled Identifiers 1.0 §2.4 normatively requires — `z` (base58btc) and `u` (base64url-no-pad). CID permits others but states that \"interoperability is not guaranteed between implementations using such values\", and a registry whose purpose is interoperability should not mint digests a conforming verifier may be unable to read. The alphabets are enforced rather than assumed: base58btc excludes 0, O, I and l, and an earlier permissive pattern let three published examples carry digests that were not valid base58 at all. base58btc is RECOMMENDED, for consistency with `did:key` and `did:webvh`.";
+            readonly type: "string";
+            readonly minLength: 16;
+            readonly pattern: "^(z[1-9A-HJ-NP-Za-km-z]+|u[A-Za-z0-9_-]+)$";
+            readonly examples: readonly ["zQmbWqxBEKC3P8tqsKc98xmWNzrzDtRLMiMPL8wBuTGsMnR"];
+        };
+    };
+};
+/**
+ * SPEC.md §7.2 policy for the request variant, from this specification's
+ * front matter. Pass to `consumeInbound` — items 5b, 7 and 8 are
+ * per-specification and cannot be derived from the document alone, and
+ * item 2 needs the schema this carries.
+ */
+export declare const SPEC: {
+    readonly typeUri: "https://trusttasks.org/spec/vtc/directory/disclosure/0.1";
+    readonly isBearer: false;
+    readonly isProofRequired: false;
+    readonly isRecipientRequired: true;
+    readonly isIssuedAtRequired: false;
+    readonly payloadSchema: {
+        readonly $schema: "https://json-schema.org/draft/2020-12/schema";
+        readonly $id: "https://trusttasks.org/spec/vtc/directory/disclosure/0.1";
+        readonly title: "VTC Directory — Disclosure — payload";
+        readonly description: "Read the statement of what a community's directory discloses about its members, and to whom, generated from the configuration in force. Anyone may read it, applicants above all, so the request carries nothing about the reader. The outer document members are owned by the framework — SPEC §6.3.";
+        readonly type: "object";
+        readonly additionalProperties: false;
+        readonly properties: {
+            readonly ext: {
+                readonly $ref: "#/$defs/Ext";
+            };
+        };
+        readonly $defs: {
+            readonly Response: {
+                readonly $anchor: "response";
+                readonly title: "VTC Directory — Disclosure — response payload";
+                readonly description: "The success response to a vtc/directory/disclosure/0.1 request. Carried in a Trust Task document whose type is https://trusttasks.org/spec/vtc/directory/disclosure/0.1#response.";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["communityDid", "disclosure"];
+                readonly properties: {
+                    readonly communityDid: {
+                        readonly type: "string";
+                        readonly pattern: "^did:";
+                        readonly maxLength: 2048;
+                    };
+                    readonly disclosure: {
+                        readonly $ref: "#/$defs/DirectoryDisclosure";
+                    };
+                    readonly ext: {
+                        readonly $ref: "#/$defs/Ext";
+                    };
+                };
+            };
+            readonly Ext: {
+                readonly title: "Ext";
+                readonly description: "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.";
+                readonly type: "object";
+                readonly minProperties: 1;
+                readonly additionalProperties: true;
+                readonly propertyNames: {
+                    readonly pattern: "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$";
+                };
+            };
+            readonly DirectoryDisclosure: {
+                readonly title: "DirectoryDisclosure";
+                readonly description: "The statement itself. Every member is generated from the community's configuration when the statement is read. `statementDigest` names this exact statement, so an applicant can record which one it was shown.";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["fields", "newCard", "membershipIdentifiers", "adminNotes", "externalCards", "statementDigest"];
+                readonly properties: {
+                    readonly fields: {
+                        readonly type: "array";
+                        readonly maxItems: 128;
+                        readonly items: {
+                            readonly $ref: "#/$defs/DisclosedField";
+                        };
+                        readonly description: "Every active field, base and community-defined, in display order. A base field the community has disabled is absent, which is how a reader learns it is not collected.";
+                    };
+                    readonly newCard: {
+                        readonly $ref: "#/$defs/NewCardDefaults";
+                    };
+                    readonly membershipIdentifiers: {
+                        readonly $ref: "#/$defs/Audience";
+                        readonly description: "The widest audience a member's membership identifier — the DID they joined with — can reach through the directory: the ceiling of the base field `did`, or `admins` where that field is disabled. `members` or `public` means a member may choose to show it that widely; a new card never shows it beyond `admins` (VTI-DIR-042). Administrators always see it.";
+                    };
+                    readonly adminNotes: {
+                        readonly type: "boolean";
+                        readonly description: "Whether administrators keep notes about members. Notes are never on a card and never reach another member; a member may ask for the notes about them.";
+                    };
+                    readonly groups: {
+                        readonly $ref: "#/$defs/GroupDisclosure";
+                    };
+                    readonly externalCards: {
+                        readonly type: "boolean";
+                        readonly description: "Whether a member may publish a card beyond the community: their `public` values, signed by them, offered through the community's trust registry. Always the member's own choice, and off on a new card. False where the community cannot publish external cards.";
+                    };
+                    readonly statementDigest: {
+                        readonly $ref: "#/$defs/DigestMultibase";
+                        readonly description: "Digest over the RFC 8785 (JCS) canonicalization of this statement with the `statementDigest` member removed, as a multibase-encoded multihash (SHA-256 and base58btc RECOMMENDED). Changes exactly when what the statement says changes.";
+                    };
+                    readonly ext: {
+                        readonly $ref: "#/$defs/Ext";
+                    };
+                };
+            };
+            readonly GroupDisclosure: {
+                readonly title: "GroupDisclosure";
+                readonly description: "Present when the community has groups. A member of a group holds a credential, issued by the group's own identifier, that evidences their membership, and can present it outside the community — which is why an applicant is told.";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["credentialValidity"];
+                readonly properties: {
+                    readonly credentialValidity: {
+                        readonly type: "string";
+                        readonly maxLength: 32;
+                        readonly pattern: "^P(([0-9]+W)?([0-9]+D)?T([0-9]+H([0-9]+M)?([0-9]+S)?|[0-9]+M([0-9]+S)?|[0-9]+S)|[0-9]+W([0-9]+D)?|[0-9]+D)$";
+                        readonly description: "How long each group membership credential is valid for, as an ISO 8601 duration in weeks, days, hours, minutes and seconds (`P30D`). It is renewed while the member stays in the group, and a credential already issued stays valid until it expires even after its holder leaves.";
+                    };
+                };
+            };
+            readonly NewCardDefaults: {
+                readonly title: "NewCardDefaults";
+                readonly description: "The discoverability a card has when the community creates it, before its member chooses. A new card is never published beyond the community (VTI-DIR-042), so there is no member for that here: `externalCards` says whether the member may turn it on.";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["listing", "search"];
+                readonly properties: {
+                    readonly listing: {
+                        readonly $ref: "#/$defs/Listing";
+                        readonly description: "The listing a new card starts with: the community's `defaultListing` (vtc/directory/fields/list). Every member may always choose `hidden`.";
+                    };
+                    readonly search: {
+                        readonly type: "string";
+                        readonly enum: readonly ["byName", "exactNickname", "off"];
+                        readonly description: "What a member's search may match, as the card's `discoverability.search`.";
+                    };
+                    readonly introductions: {
+                        readonly $ref: "#/$defs/Introductions";
+                        readonly description: "From whom a new card accepts introductions. Absent where the community does not deliver introductions.";
+                    };
+                };
+            };
+            readonly Introductions: {
+                readonly title: "Introductions";
+                readonly description: "Who may ask the community to introduce them to this member. `anyone`: any active member who can find the entry. `groups`: only members who share a community group with them. `connections`: only members holding an attributed, in-force verified relationship with them. `off`: nobody. A refused introduction is never reported to its sender.";
+                readonly type: "string";
+                readonly enum: readonly ["anyone", "groups", "connections", "off"];
+            };
+            readonly Listing: {
+                readonly title: "Listing";
+                readonly description: "Whether members can find the entry. `listed`: it appears when members browse. `findable`: it does not appear when browsing, but a search that matches it under `search` returns it. `hidden`: no member finds it by browsing or searching; administrators still see it, and members who share a group that shows its members see it in that group's member list.";
+                readonly type: "string";
+                readonly enum: readonly ["listed", "findable", "hidden"];
+            };
+            readonly DisclosedField: {
+                readonly title: "DisclosedField";
+                readonly description: "One active field of the community's directory, as an applicant needs to see it: what it is, who writes its value, the widest audience it may ever reach and the audience a new card gives it. Disabled and retired fields are not listed: no projection shows them.";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["key", "label", "type", "source", "ceiling", "defaultVisibility", "searchable"];
+                readonly properties: {
+                    readonly key: {
+                        readonly $ref: "#/$defs/FieldKey";
+                    };
+                    readonly label: {
+                        readonly $ref: "#/$defs/FieldLabel";
+                    };
+                    readonly description: {
+                        readonly $ref: "#/$defs/FieldDescription";
+                    };
+                    readonly type: {
+                        readonly $ref: "#/$defs/FieldType";
+                    };
+                    readonly source: {
+                        readonly $ref: "#/$defs/FieldSource";
+                        readonly description: "Who writes the value. `admin` and `credential` matter most to an applicant: an `admin` field holds what the community asserts about the member, which the member reads and cannot change.";
+                    };
+                    readonly ceiling: {
+                        readonly $ref: "#/$defs/Audience";
+                        readonly description: "The widest audience the field may ever reach, whatever the member chooses.";
+                    };
+                    readonly defaultVisibility: {
+                        readonly $ref: "#/$defs/Audience";
+                        readonly description: "The audience a new card gives the field until its member chooses. Never wider than `ceiling`.";
+                    };
+                    readonly searchable: {
+                        readonly type: "boolean";
+                        readonly description: "Whether a member's search may match the field, within what the searcher may see.";
+                    };
+                    readonly facet: {
+                        readonly type: "boolean";
+                        readonly description: "Whether members may filter on the field and see counts by its values. Absent: false.";
+                    };
+                };
+            };
+            readonly Audience: {
+                readonly title: "Audience";
+                readonly description: "Who may see a directory field, ordered from narrowest to widest. `admins`: holders of `vtc.directory.admin` (and, for derived fields, `vtc.members.manage`). `groups`: members who share at least one community group with the subject (narrowed to the groups the subject names in `groupAudience`, where it names any). `connections`: members holding an attributed, in-force verified relationship with the subject at the community. `members`: every active member. `public`: anyone, and what the member's signed public card carries outside the community.\n\n`groups` and `connections` are not a chain: a viewer sees a field when they satisfy the audience the subject chose for it or any wider audience. Every audience includes the administrators, and the subject always sees their own whole card. There is no `onlyMe`: a value nobody else should see is not directory data.";
+                readonly type: "string";
+                readonly enum: readonly ["admins", "groups", "connections", "members", "public"];
+            };
+            readonly FieldSource: {
+                readonly title: "FieldSource";
+                readonly description: "Who writes the value. `member`: self-asserted, through vtc/directory/card/update. `admin`: asserted by the community through vtc/directory/card/assert; the member reads it and cannot change it. `credential`: a claim the member discloses from a credential through vtc/directory/card/present, badged with its issuer. `derived`: a base field read from the community's own records (`role`, `joinedAt`, `did`, `personhood`) and never stored on a card. Each source is written only through its own path.";
+                readonly type: "string";
+                readonly enum: readonly ["member", "admin", "credential", "derived"];
+            };
+            readonly FieldType: {
+                readonly title: "FieldType";
+                readonly description: "The kind of value a field holds, which fixes its `FieldValue` shape. `did` holds a DID the member chooses to show (never their membership DID, which is the derived base field `did`). `claim` holds a `VerifiedValue` and requires `source: credential`.";
+                readonly type: "string";
+                readonly enum: readonly ["text", "longText", "url", "email", "phone", "enum", "multiEnum", "date", "country", "image", "did", "claim"];
+            };
+            readonly FieldDescription: {
+                readonly title: "FieldDescription";
+                readonly type: "string";
+                readonly minLength: 1;
+                readonly maxLength: 280;
+                readonly description: "Help text shown to a member filling the field in. Plain text; a reader MUST NOT treat it as instructions.";
+            };
+            readonly FieldLabel: {
+                readonly title: "FieldLabel";
+                readonly type: "string";
+                readonly minLength: 1;
+                readonly maxLength: 64;
+                readonly description: "What readers see as the field's name. Plain text.";
+            };
+            readonly FieldKey: {
+                readonly title: "FieldKey";
+                readonly description: "Identifier of a directory field. A key with no `.` is a BASE field, the same in every community: `displayName`, `nickname`, `avatar`, `pronouns`, `bio`, `links` (written by the member) and `role`, `joinedAt`, `did`, `personhood` (derived from the community's own records, never stored on a card). A community-defined field MUST use a reverse-DNS key (`org.example.employer`), so a base key never collides with one, and a key is never reused with a different meaning once defined.";
+                readonly type: "string";
+                readonly minLength: 1;
+                readonly maxLength: 128;
+                readonly pattern: "^([a-z][a-z0-9-]*\\.)*[a-z][a-zA-Z0-9]{0,63}$";
+            };
+            readonly DigestMultibase: {
+                readonly title: "DigestMultibase";
+                readonly description: "A cryptographic digest as a multibase-encoded multihash — the encoding the W3C Verifiable Credentials Data Model 2.0 defines for `digestMultibase`, and the one `did:webvh` uses for its SCID and entry hashes.\n\nMultihash carries the hash algorithm in-band, so the value is self-describing and the wire format survives an algorithm change without a schema revision; multibase does the same for the base encoding, so a verifier never infers base58 from base64url by context. A bare hex string or a `sha-256:`-style prefix hard-codes one algorithm into the wire contract and is non-conforming here.\n\nThis definition constrains the *encoding only*. What the digest is computed over is stated by each referencing field, because it differs legitimately: a digest over a JSON document is taken over its RFC 8785 (JCS) canonicalization, while a digest over an opaque artifact is taken over its bytes. A field whose input is a JSON document and which does not name a canonicalization is not reproducible.\n\nRestricted to the two multibase headers W3C Controlled Identifiers 1.0 §2.4 normatively requires — `z` (base58btc) and `u` (base64url-no-pad). CID permits others but states that \"interoperability is not guaranteed between implementations using such values\", and a registry whose purpose is interoperability should not mint digests a conforming verifier may be unable to read. The alphabets are enforced rather than assumed: base58btc excludes 0, O, I and l, and an earlier permissive pattern let three published examples carry digests that were not valid base58 at all. base58btc is RECOMMENDED, for consistency with `did:key` and `did:webvh`.";
+                readonly type: "string";
+                readonly minLength: 16;
+                readonly pattern: "^(z[1-9A-HJ-NP-Za-km-z]+|u[A-Za-z0-9_-]+)$";
+                readonly examples: readonly ["zQmbWqxBEKC3P8tqsKc98xmWNzrzDtRLMiMPL8wBuTGsMnR"];
+            };
+        };
+    };
+};
+/**
+ * SPEC.md §7.2 policy for the success-response variant. `isRecipientRequired`
+ * tracks the *issuer* party's requirement because a response swaps the
+ * parties (§7.3 item 5).
+ */
+export declare const RESPONSE_SPEC: {
+    readonly typeUri: "https://trusttasks.org/spec/vtc/directory/disclosure/0.1#response";
+    readonly isBearer: false;
+    readonly isProofRequired: false;
+    readonly isRecipientRequired: true;
+    readonly isIssuedAtRequired: false;
+    readonly payloadSchema: {
+        readonly $schema: "https://json-schema.org/draft/2020-12/schema";
+        readonly $ref: "#/$defs/Response";
+        readonly $defs: {
+            readonly Response: {
+                readonly $anchor: "response";
+                readonly title: "VTC Directory — Disclosure — response payload";
+                readonly description: "The success response to a vtc/directory/disclosure/0.1 request. Carried in a Trust Task document whose type is https://trusttasks.org/spec/vtc/directory/disclosure/0.1#response.";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["communityDid", "disclosure"];
+                readonly properties: {
+                    readonly communityDid: {
+                        readonly type: "string";
+                        readonly pattern: "^did:";
+                        readonly maxLength: 2048;
+                    };
+                    readonly disclosure: {
+                        readonly $ref: "#/$defs/DirectoryDisclosure";
+                    };
+                    readonly ext: {
+                        readonly $ref: "#/$defs/Ext";
+                    };
+                };
+            };
+            readonly Ext: {
+                readonly title: "Ext";
+                readonly description: "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.";
+                readonly type: "object";
+                readonly minProperties: 1;
+                readonly additionalProperties: true;
+                readonly propertyNames: {
+                    readonly pattern: "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$";
+                };
+            };
+            readonly DirectoryDisclosure: {
+                readonly title: "DirectoryDisclosure";
+                readonly description: "The statement itself. Every member is generated from the community's configuration when the statement is read. `statementDigest` names this exact statement, so an applicant can record which one it was shown.";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["fields", "newCard", "membershipIdentifiers", "adminNotes", "externalCards", "statementDigest"];
+                readonly properties: {
+                    readonly fields: {
+                        readonly type: "array";
+                        readonly maxItems: 128;
+                        readonly items: {
+                            readonly $ref: "#/$defs/DisclosedField";
+                        };
+                        readonly description: "Every active field, base and community-defined, in display order. A base field the community has disabled is absent, which is how a reader learns it is not collected.";
+                    };
+                    readonly newCard: {
+                        readonly $ref: "#/$defs/NewCardDefaults";
+                    };
+                    readonly membershipIdentifiers: {
+                        readonly $ref: "#/$defs/Audience";
+                        readonly description: "The widest audience a member's membership identifier — the DID they joined with — can reach through the directory: the ceiling of the base field `did`, or `admins` where that field is disabled. `members` or `public` means a member may choose to show it that widely; a new card never shows it beyond `admins` (VTI-DIR-042). Administrators always see it.";
+                    };
+                    readonly adminNotes: {
+                        readonly type: "boolean";
+                        readonly description: "Whether administrators keep notes about members. Notes are never on a card and never reach another member; a member may ask for the notes about them.";
+                    };
+                    readonly groups: {
+                        readonly $ref: "#/$defs/GroupDisclosure";
+                    };
+                    readonly externalCards: {
+                        readonly type: "boolean";
+                        readonly description: "Whether a member may publish a card beyond the community: their `public` values, signed by them, offered through the community's trust registry. Always the member's own choice, and off on a new card. False where the community cannot publish external cards.";
+                    };
+                    readonly statementDigest: {
+                        readonly $ref: "#/$defs/DigestMultibase";
+                        readonly description: "Digest over the RFC 8785 (JCS) canonicalization of this statement with the `statementDigest` member removed, as a multibase-encoded multihash (SHA-256 and base58btc RECOMMENDED). Changes exactly when what the statement says changes.";
+                    };
+                    readonly ext: {
+                        readonly $ref: "#/$defs/Ext";
+                    };
+                };
+            };
+            readonly GroupDisclosure: {
+                readonly title: "GroupDisclosure";
+                readonly description: "Present when the community has groups. A member of a group holds a credential, issued by the group's own identifier, that evidences their membership, and can present it outside the community — which is why an applicant is told.";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["credentialValidity"];
+                readonly properties: {
+                    readonly credentialValidity: {
+                        readonly type: "string";
+                        readonly maxLength: 32;
+                        readonly pattern: "^P(([0-9]+W)?([0-9]+D)?T([0-9]+H([0-9]+M)?([0-9]+S)?|[0-9]+M([0-9]+S)?|[0-9]+S)|[0-9]+W([0-9]+D)?|[0-9]+D)$";
+                        readonly description: "How long each group membership credential is valid for, as an ISO 8601 duration in weeks, days, hours, minutes and seconds (`P30D`). It is renewed while the member stays in the group, and a credential already issued stays valid until it expires even after its holder leaves.";
+                    };
+                };
+            };
+            readonly NewCardDefaults: {
+                readonly title: "NewCardDefaults";
+                readonly description: "The discoverability a card has when the community creates it, before its member chooses. A new card is never published beyond the community (VTI-DIR-042), so there is no member for that here: `externalCards` says whether the member may turn it on.";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["listing", "search"];
+                readonly properties: {
+                    readonly listing: {
+                        readonly $ref: "#/$defs/Listing";
+                        readonly description: "The listing a new card starts with: the community's `defaultListing` (vtc/directory/fields/list). Every member may always choose `hidden`.";
+                    };
+                    readonly search: {
+                        readonly type: "string";
+                        readonly enum: readonly ["byName", "exactNickname", "off"];
+                        readonly description: "What a member's search may match, as the card's `discoverability.search`.";
+                    };
+                    readonly introductions: {
+                        readonly $ref: "#/$defs/Introductions";
+                        readonly description: "From whom a new card accepts introductions. Absent where the community does not deliver introductions.";
+                    };
+                };
+            };
+            readonly Introductions: {
+                readonly title: "Introductions";
+                readonly description: "Who may ask the community to introduce them to this member. `anyone`: any active member who can find the entry. `groups`: only members who share a community group with them. `connections`: only members holding an attributed, in-force verified relationship with them. `off`: nobody. A refused introduction is never reported to its sender.";
+                readonly type: "string";
+                readonly enum: readonly ["anyone", "groups", "connections", "off"];
+            };
+            readonly Listing: {
+                readonly title: "Listing";
+                readonly description: "Whether members can find the entry. `listed`: it appears when members browse. `findable`: it does not appear when browsing, but a search that matches it under `search` returns it. `hidden`: no member finds it by browsing or searching; administrators still see it, and members who share a group that shows its members see it in that group's member list.";
+                readonly type: "string";
+                readonly enum: readonly ["listed", "findable", "hidden"];
+            };
+            readonly DisclosedField: {
+                readonly title: "DisclosedField";
+                readonly description: "One active field of the community's directory, as an applicant needs to see it: what it is, who writes its value, the widest audience it may ever reach and the audience a new card gives it. Disabled and retired fields are not listed: no projection shows them.";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["key", "label", "type", "source", "ceiling", "defaultVisibility", "searchable"];
+                readonly properties: {
+                    readonly key: {
+                        readonly $ref: "#/$defs/FieldKey";
+                    };
+                    readonly label: {
+                        readonly $ref: "#/$defs/FieldLabel";
+                    };
+                    readonly description: {
+                        readonly $ref: "#/$defs/FieldDescription";
+                    };
+                    readonly type: {
+                        readonly $ref: "#/$defs/FieldType";
+                    };
+                    readonly source: {
+                        readonly $ref: "#/$defs/FieldSource";
+                        readonly description: "Who writes the value. `admin` and `credential` matter most to an applicant: an `admin` field holds what the community asserts about the member, which the member reads and cannot change.";
+                    };
+                    readonly ceiling: {
+                        readonly $ref: "#/$defs/Audience";
+                        readonly description: "The widest audience the field may ever reach, whatever the member chooses.";
+                    };
+                    readonly defaultVisibility: {
+                        readonly $ref: "#/$defs/Audience";
+                        readonly description: "The audience a new card gives the field until its member chooses. Never wider than `ceiling`.";
+                    };
+                    readonly searchable: {
+                        readonly type: "boolean";
+                        readonly description: "Whether a member's search may match the field, within what the searcher may see.";
+                    };
+                    readonly facet: {
+                        readonly type: "boolean";
+                        readonly description: "Whether members may filter on the field and see counts by its values. Absent: false.";
+                    };
+                };
+            };
+            readonly Audience: {
+                readonly title: "Audience";
+                readonly description: "Who may see a directory field, ordered from narrowest to widest. `admins`: holders of `vtc.directory.admin` (and, for derived fields, `vtc.members.manage`). `groups`: members who share at least one community group with the subject (narrowed to the groups the subject names in `groupAudience`, where it names any). `connections`: members holding an attributed, in-force verified relationship with the subject at the community. `members`: every active member. `public`: anyone, and what the member's signed public card carries outside the community.\n\n`groups` and `connections` are not a chain: a viewer sees a field when they satisfy the audience the subject chose for it or any wider audience. Every audience includes the administrators, and the subject always sees their own whole card. There is no `onlyMe`: a value nobody else should see is not directory data.";
+                readonly type: "string";
+                readonly enum: readonly ["admins", "groups", "connections", "members", "public"];
+            };
+            readonly FieldSource: {
+                readonly title: "FieldSource";
+                readonly description: "Who writes the value. `member`: self-asserted, through vtc/directory/card/update. `admin`: asserted by the community through vtc/directory/card/assert; the member reads it and cannot change it. `credential`: a claim the member discloses from a credential through vtc/directory/card/present, badged with its issuer. `derived`: a base field read from the community's own records (`role`, `joinedAt`, `did`, `personhood`) and never stored on a card. Each source is written only through its own path.";
+                readonly type: "string";
+                readonly enum: readonly ["member", "admin", "credential", "derived"];
+            };
+            readonly FieldType: {
+                readonly title: "FieldType";
+                readonly description: "The kind of value a field holds, which fixes its `FieldValue` shape. `did` holds a DID the member chooses to show (never their membership DID, which is the derived base field `did`). `claim` holds a `VerifiedValue` and requires `source: credential`.";
+                readonly type: "string";
+                readonly enum: readonly ["text", "longText", "url", "email", "phone", "enum", "multiEnum", "date", "country", "image", "did", "claim"];
+            };
+            readonly FieldDescription: {
+                readonly title: "FieldDescription";
+                readonly type: "string";
+                readonly minLength: 1;
+                readonly maxLength: 280;
+                readonly description: "Help text shown to a member filling the field in. Plain text; a reader MUST NOT treat it as instructions.";
+            };
+            readonly FieldLabel: {
+                readonly title: "FieldLabel";
+                readonly type: "string";
+                readonly minLength: 1;
+                readonly maxLength: 64;
+                readonly description: "What readers see as the field's name. Plain text.";
+            };
+            readonly FieldKey: {
+                readonly title: "FieldKey";
+                readonly description: "Identifier of a directory field. A key with no `.` is a BASE field, the same in every community: `displayName`, `nickname`, `avatar`, `pronouns`, `bio`, `links` (written by the member) and `role`, `joinedAt`, `did`, `personhood` (derived from the community's own records, never stored on a card). A community-defined field MUST use a reverse-DNS key (`org.example.employer`), so a base key never collides with one, and a key is never reused with a different meaning once defined.";
+                readonly type: "string";
+                readonly minLength: 1;
+                readonly maxLength: 128;
+                readonly pattern: "^([a-z][a-z0-9-]*\\.)*[a-z][a-zA-Z0-9]{0,63}$";
+            };
+            readonly DigestMultibase: {
+                readonly title: "DigestMultibase";
+                readonly description: "A cryptographic digest as a multibase-encoded multihash — the encoding the W3C Verifiable Credentials Data Model 2.0 defines for `digestMultibase`, and the one `did:webvh` uses for its SCID and entry hashes.\n\nMultihash carries the hash algorithm in-band, so the value is self-describing and the wire format survives an algorithm change without a schema revision; multibase does the same for the base encoding, so a verifier never infers base58 from base64url by context. A bare hex string or a `sha-256:`-style prefix hard-codes one algorithm into the wire contract and is non-conforming here.\n\nThis definition constrains the *encoding only*. What the digest is computed over is stated by each referencing field, because it differs legitimately: a digest over a JSON document is taken over its RFC 8785 (JCS) canonicalization, while a digest over an opaque artifact is taken over its bytes. A field whose input is a JSON document and which does not name a canonicalization is not reproducible.\n\nRestricted to the two multibase headers W3C Controlled Identifiers 1.0 §2.4 normatively requires — `z` (base58btc) and `u` (base64url-no-pad). CID permits others but states that \"interoperability is not guaranteed between implementations using such values\", and a registry whose purpose is interoperability should not mint digests a conforming verifier may be unable to read. The alphabets are enforced rather than assumed: base58btc excludes 0, O, I and l, and an earlier permissive pattern let three published examples carry digests that were not valid base58 at all. base58btc is RECOMMENDED, for consistency with `did:key` and `did:webvh`.";
+                readonly type: "string";
+                readonly minLength: 16;
+                readonly pattern: "^(z[1-9A-HJ-NP-Za-km-z]+|u[A-Za-z0-9_-]+)$";
+                readonly examples: readonly ["zQmbWqxBEKC3P8tqsKc98xmWNzrzDtRLMiMPL8wBuTGsMnR"];
+            };
+        };
+    };
+};
+//# sourceMappingURL=payload.d.ts.map