@openvtc/trust-tasks 0.26.24 → 0.26.25

package/CHANGELOG.md

@@ -11,6 +11,45 @@ The package versions over **its own API** — what a consumer compiles against
 not over `SPEC.md`. Below 1.0 a breaking change bumps the leading non-zero
 component.
 
+## 0.26.25 — 2026-10-20
+
+
+### Added
+
+- **vtc/rooms/offers**: List 0.3 — renewals of the admissions a member holds; rooms/keys/act 0.6 completes it; groups bindings refuse an unserved kind (#843)
+
+A group's room binding says the community renews each admission it made "while
+  the member stays in the group". Nothing defined how an already-admitted member
+  receives renewed credentials. `offers/list` carries only an offer's three
+  credentials, and `memberships/list` carries none by design. So an admission
+  could only be carried past its `validUntil` by an administrator removing and
+  re-admitting the member.
+
+  - vtc/rooms/offers/list/0.3: the response gains `renewals`. For an admission the
+    caller holds, it lists the room's fresh membership and authority credentials,
+    granting the same actions until a later `validUntil`. `renews` names the
+    expiry of the ones they replace. There is no invitation: a renewal is never a
+    second way in.
+    The community issues a renewal through the room's key holder before
+    recording it, and lists only the latest one per admission. A renewal stays
+    listed on the first page until what it renews expires, the member is removed,
+    or a later renewal supersedes it. The community records the renewed
+    `validUntil` as the admission's own.
+    A surface stores a renewal in place of the credentials it renews, never
+    beside them, and treats storing it twice as success. It never accepts a
+    renewal.
+  - vtc/_shared/0.1/community-room: `Renewal` and `RenewalCredentials`, additive.
+  - rooms/keys/act/0.6: the table adds vtc/rooms/offers/list/0.3, in the offer
+    types' row and on their terms. 0.5's table is closed, so a 0.5 key holder
+    refuses 0.3 with `typeNotActable`.
+  - vtc/groups/bindings/add/0.1: item 6 renews a room binding's admissions
+    through offers/list 0.3. New code `kindNotServed` (item 7): a community that
+    serves room bindings only may refuse a grants or role binding after item 1,
+    and never records a binding it does not provision.
+  - vtc/rooms/memberships/list/0.1: a row for an admitted room with a renewal
+    listed, which the surface stores before anything else it offers.
+  - RoomBindingSpec's description points at the renewal path.
+
 ## 0.26.24 — 2026-10-20
 
 

package/dist/_shared/components.d.ts

@@ -8719,6 +8719,46 @@ export interface RejectedKey {
      */
     reason: string;
 }
+/**
+ * What vtc/rooms/offers/list/0.3 returns in `renewals`: a renewal of an admission the member already holds, as the member it is addressed to sees it. `label` and `description` are the room's as they stand when it is read.
+ */
+export interface Renewal {
+    roomId: string;
+    /**
+     * The room's host: this community.
+     */
+    host: string;
+    label: RoomLabel;
+    /**
+     * Absent when the room has none.
+     */
+    description?: RoomDescription;
+    visibility: Visibility;
+    actions: MemberActions;
+    /**
+     * When the renewed authority expires.
+     */
+    validUntil: string;
+    /**
+     * When the authority it replaces expires: the renewal is listed until then, or until a later renewal or the member's removal supersedes it.
+     */
+    renews: string;
+    issuedAt: string;
+    credentials: RenewalCredentials;
+}
+/**
+ * The two credentials a renewal replaces, serialized as rooms/owner/{issue-membership,issue-authority} return them: a membership and an authority granting the same actions until the renewal's `validUntil`. No invitation: the member is already admitted, and a renewal never opens a second way in. The member's surface stores each with the member's key holder **in place of** the one it renews, never beside it.
+ */
+export interface RenewalCredentials {
+    /**
+     * The renewed Verifiable Membership Credential.
+     */
+    membership: string;
+    /**
+     * The renewed Verifiable Authority Credential granting `actions` until `validUntil`.
+     */
+    authority: string;
+}
 /**
  * One repository as the VTC records it.
  */
@@ -9193,7 +9233,7 @@ export interface RollbackResult {
     ext?: Ext;
 }
 /**
- * Links a room the community owns to the group: joining the group offers the member admission to the room with `actions`, valid for `validFor`; leaving removes them unless another source still covers them.
+ * Links a room the community owns to the group: joining the group offers the member admission to the room with `actions`, valid for `validFor`, renewed while they stay in the group (collected with vtc/rooms/offers/list at 0.3 or later); leaving removes them unless another source still covers them.
  */
 export interface RoomBindingSpec {
     kind: "room";