@openvtc/trust-tasks 0.26.6 → 0.26.7

package/CHANGELOG.md

@@ -11,6 +11,44 @@ The package versions over **its own API** — what a consumer compiles against
 not over `SPEC.md`. Below 1.0 a breaking change bumps the leading non-zero
 component.
 
+## 0.26.7 — 2026-10-15
+
+
+### Added
+
+- **vta/witness**: Vta/witness/request — the VTA runs a witnessed session for its principal's relationship (#777)
+
+A Verifiable Witness Credential is issued to the participating party of a
+  witness/session, who presents its relationship credential bound to the
+  session's challenge. A principal whose keys and credentials live in a VTA
+  cannot do that from a client that holds neither. This adds
+  vta/witness/request/0.1: the client names a witness, the relationship
+  (relationshipDid, counterpartyDid, the enclosing thread) and credentials by
+  vault handle; the VTA opens the session as the relationship DID, builds and
+  signs the presentation itself, submits, verifies the VWC as a verifier of
+  the evidence would (issuer = session recipient = response signer,
+  taskContext/taskDigest over the session document as sent, subject and
+  object digest, vwcDigestMultibase), and stores it in the credential vault
+  with its evidence — the session document as sent and the submit #response
+  as received. It answers with the vault handle, the digest and the two
+  evidence documents (which carry the VWC); never a key, a presentation or
+  the challenge.
+
+  Membership evidence is optional. A VMC naming the relationship DID rides
+  in the relationship presentation; one naming a member DID needs an
+  explicit memberDid, and the VTA builds a second presentation by that DID
+  bound to the same session. witness/session/submit/0.1 has no member for
+  it, so its carriage is the witness's own (SPEC 4.5.1 leaves an ext
+  namespace's semantics to its controller); the OpenVTC carriage is cited
+  non-normatively.
+
+  Authorization is standing over every context the task touches, expressed
+  as the new witnessRequest capability (witness-request in device/_shared
+  0.1), which is not sign and is not satisfied by sign. Errors: notFound,
+  credentialMismatch, noMatchingProtocol, witnessUnreachable (retryable),
+  witnessRefused, challengeMismatch, presentationInvalid (the witness's own
+  code and message in details), vwcInvalid.
+
 ## 0.26.6 — 2026-10-15
 
 

package/dist/_shared/components.d.ts

@@ -396,11 +396,11 @@ export type Capability_AclV0_2 = string;
 /**
  * Fine-grained capability flag scoped to the device's allowed contexts. See SPEC.md for the full semantics of each. Capability values are additive: a consumer MUST ignore a value it does not recognise rather than reject the binding, and MUST NOT treat an unrecognised value as conferring anything.
  */
-export type Capability_DeviceV0_1 = "vault-read" | "vault-write" | "proxy-login" | "fill-release" | "policy-admin" | "device-admin" | "sign" | "key-mint" | "sign-trust-task" | "credential-write" | "memory-read" | "memory-write" | "room-present" | "room-open" | "key-export" | "sign-sshsig" | "sign-jws" | "sign-csr" | "external-accounts-manage" | "external-auth-use" | "pcs-vetter" | "pcs-applicant";
+export type Capability_DeviceV0_1 = "vault-read" | "vault-write" | "proxy-login" | "fill-release" | "policy-admin" | "device-admin" | "sign" | "key-mint" | "sign-trust-task" | "credential-write" | "memory-read" | "memory-write" | "room-present" | "room-open" | "key-export" | "sign-sshsig" | "sign-jws" | "sign-csr" | "external-accounts-manage" | "external-auth-use" | "pcs-vetter" | "pcs-applicant" | "witness-request";
 /**
  * Fine-grained capability flag scoped to the device's allowed contexts. See SPEC.md for the full semantics of each. Capability values are additive: a consumer MUST ignore a value it does not recognise rather than reject the binding, and MUST NOT treat an unrecognised value as conferring anything.
  */
-export type Capability_DeviceV0_2 = "vaultRead" | "vaultWrite" | "proxyLogin" | "fillRelease" | "policyAdmin" | "deviceAdmin" | "sign" | "keyMint" | "signTrustTask" | "credentialWrite" | "memoryRead" | "memoryWrite" | "roomPresent" | "roomOpen" | "keyExport" | "signSshsig" | "signJws" | "signCsr" | "externalAccountsManage" | "externalAuthUse" | "pcsVetter" | "pcsApplicant";
+export type Capability_DeviceV0_2 = "vaultRead" | "vaultWrite" | "proxyLogin" | "fillRelease" | "policyAdmin" | "deviceAdmin" | "sign" | "keyMint" | "signTrustTask" | "credentialWrite" | "memoryRead" | "memoryWrite" | "roomPresent" | "roomOpen" | "keyExport" | "signSshsig" | "signJws" | "signCsr" | "externalAccountsManage" | "externalAuthUse" | "pcsVetter" | "pcsApplicant" | "witnessRequest";
 /**
  * Number of chunks in the bundle, equal to ceil(expectedSizeBytes / chunkSize). Bounded at 4096 so that the manifest itself — one digest per chunk — fits in the single document that carries it under the same message-size reasoning as a chunk.
  */