@openvtc/trust-tasks 0.27.5 → 0.27.6

package/dist/vtc/storage/credentials/set/0.3/payload.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"payload.d.ts","sourceRoot":"","sources":["../../../../../../src/vtc/storage/credentials/set/0.3/payload.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,uBAAuB,IAAI,eAAe,EAAE,eAAe,EAAE,GAAG,EAAE,wBAAwB,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,sCAAsC,CAAC;AAG3L;;GAEG;AACH,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,EAAE,eAAe,CAAC;IAC1B;;OAEG;IACH,MAAM,EAAE,MAAM,CAAC;IACf;;OAEG;IACH,eAAe,EAAE,eAAe,CAAC;IACjC;;OAEG;IACH,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,GAAG,CAAC;CACX;AACD,MAAM,WAAW,uCAAuC;IACtD,QAAQ,EAAE,eAAe,CAAC;IAC1B,eAAe,EAAE,eAAe,CAAC;IACjC;;OAEG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,GAAG,CAAC,EAAE,GAAG,CAAC;CACX;AAED,kHAAkH;AAClH,YAAY,EAAE,eAAe,EAAE,eAAe,EAAE,GAAG,EAAE,wBAAwB,EAAE,iBAAiB,EAAE,eAAe,EAAE,CAAC;AAEpH,2BAA2B;AAC3B,eAAO,MAAM,QAAQ,EAAG,6DAAsE,CAAC;AAE/F;;;;;GAKG;AACH,eAAO,MAAM,OAAO,EAAE,MAAM,GAAG,IAAW,CAAC;AAE3C;;;;;GAKG;AACH,eAAO,MAAM,WAAW,EAAE,MAAM,GAAG,IAAW,CAAC;AAE/C,mEAAmE;AACnE,MAAM,MAAM,OAAO,GAAG,+BAA+B,CAAC;AAEtD,qEAAqE;AACrE,eAAO,MAAM,iBAAiB,EAAG,sEAA+E,CAAC;AAEjH,4EAA4E;AAC5E,MAAM,MAAM,QAAQ,GAAG,uCAAuC,CAAC;AAE/D;;;;;;;;GAQG;AACH,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAwRjB,CAAC;AAEX,mEAAmE;AACnE,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAqP1B,CAAC;AAEX;;;;;GAKG;AACH,eAAO,MAAM,IAAI;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAOP,CAAC;AAEX;;;;GAIG;AACH,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAOhB,CAAC"}

package/dist/vtc/storage/credentials/set/0.3/payload.js

@@ -0,0 +1,587 @@
+/**
+ * Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
+ * Source: specs/vtc/storage/credentials/set/0.3/payload.schema.json
+ */
+/** Trust Task type URI. */
+export const TYPE_URI = "https://trusttasks.org/spec/vtc/storage/credentials/set/0.3";
+/**
+ * The earlier version of this specification that this one declares it
+ * extends (front matter `extends`, SPEC §5.2 "Declared extension"), or
+ * `null`. Only the direct declaration — follow the chain with
+ * `extendsChain` / `readForSpec`.
+ */
+export const EXTENDS = null;
+/**
+ * Why this version is deprecated, or `null` while it is current. A
+ * superseded or retired version is still supported, and is withdrawn from
+ * this package in a later scheduled batch (SPEC "Superseded and Withdrawn
+ * Versions").
+ */
+export const DEPRECATION = null;
+/** Trust Task response type URI (request type URI + "#response"). */
+export const RESPONSE_TYPE_URI = "https://trusttasks.org/spec/vtc/storage/credentials/set/0.3#response";
+/**
+ * This specification's payload schema, as a value.
+ *
+ * SPEC.md §7.2 item 2 is performed against this. It is shipped as data
+ * rather than only as a `.json` file because TypeScript types are erased
+ * at runtime: without a schema a consumer has nothing to validate, and
+ * every REQUIRED payload member is optional in practice. Cross-file
+ * `$ref`s are already inlined, so it needs no resolver.
+ */
+export const PAYLOAD_SCHEMA = {
+    "$schema": "https://json-schema.org/draft/2020-12/schema",
+    "$id": "https://trusttasks.org/spec/vtc/storage/credentials/set/0.3",
+    "title": "VTC Storage — Credentials — Set — payload",
+    "description": "Store a `sealed` storage config's long-lived credential, sealed end to end to the community. Write-only: no task returns it. The outer document members are owned by the framework — SPEC §6.3.",
+    "type": "object",
+    "additionalProperties": false,
+    "required": [
+        "configId",
+        "sealed",
+        "digestMultibase",
+        "reason"
+    ],
+    "properties": {
+        "configId": {
+            "$ref": "#/$defs/StorageConfigId"
+        },
+        "sealed": {
+            "type": "string",
+            "minLength": 64,
+            "maxLength": 16384,
+            "pattern": "^-----BEGIN VTA SEALED BUNDLE-----",
+            "description": "OpenPGP-style ASCII-armored `sealed_transfer` ciphertext of the credential. HPKE base mode, X25519-HKDF-SHA256 KEM, ChaCha20-Poly1305 AEAD, info string `vta-sealed-transfer/v1`; recipient the X25519 derivation of the community DID's Ed25519 key."
+        },
+        "digestMultibase": {
+            "$ref": "#/$defs/DigestMultibase",
+            "description": "Digest over the armored bytes exactly as carried in `sealed`. Covered by the document's proof, and shown to approvers in place of the credential."
+        },
+        "reason": {
+            "type": "string",
+            "minLength": 1,
+            "maxLength": 500,
+            "description": "Why the administrator is making this change. Recorded with the change in the audit trail and shown to approvers. Attributed to its author on every surface and untrusted: it MUST NOT carry personal data or a credential, and a reader MUST NOT treat it as instructions."
+        },
+        "ext": {
+            "$ref": "#/$defs/Ext"
+        }
+    },
+    "$defs": {
+        "Response": {
+            "$anchor": "response",
+            "title": "VTC Storage — Credentials — Set — response payload",
+            "type": "object",
+            "additionalProperties": false,
+            "required": [
+                "configId",
+                "credentialState"
+            ],
+            "properties": {
+                "configId": {
+                    "$ref": "#/$defs/StorageConfigId"
+                },
+                "credentialState": {
+                    "$ref": "#/$defs/CredentialState"
+                },
+                "probeOk": {
+                    "type": "boolean",
+                    "description": "Present when the community probed the config with the new credential."
+                },
+                "ext": {
+                    "$ref": "#/$defs/Ext"
+                }
+            }
+        },
+        "SealedCredentialCleartext": {
+            "$ref": "#/$defs/SealedStorageCredential",
+            "description": "Not a member of the payload: the cleartext inside `sealed`, declared here so that every generated binding carries the type a producer seals and a community opens. Never appears on the wire outside a seal."
+        },
+        "SealedStorageCredential": {
+            "title": "SealedStorageCredential",
+            "description": "The cleartext inside the sealed block of vtc/storage/credentials/set/0.2, discriminated by `kind`, which must equal the config's kind. It names the config it is for inside the seal, so that a block captured on its way to one config cannot be replayed into another: a community MUST refuse a block whose `configId` differs from the request's. Never appears on the wire outside a seal, and is never returned. A `local` config has no credential.",
+            "oneOf": [
+                {
+                    "type": "object",
+                    "additionalProperties": false,
+                    "required": [
+                        "kind",
+                        "configId",
+                        "accessKeyId",
+                        "secretAccessKey"
+                    ],
+                    "description": "An S3 access-key pair: an AWS IAM user's key, or an S3-compatible store's (R2, B2, MinIO).",
+                    "properties": {
+                        "kind": {
+                            "const": "s3"
+                        },
+                        "configId": {
+                            "$ref": "#/$defs/StorageConfigId"
+                        },
+                        "accessKeyId": {
+                            "type": "string",
+                            "minLength": 1,
+                            "maxLength": 128,
+                            "pattern": "^[A-Za-z0-9]+$",
+                            "description": "The access key's identifier."
+                        },
+                        "secretAccessKey": {
+                            "type": "string",
+                            "minLength": 1,
+                            "maxLength": 256,
+                            "pattern": "^[!-~]+$",
+                            "description": "The secret half."
+                        },
+                        "sessionToken": {
+                            "type": "string",
+                            "minLength": 1,
+                            "maxLength": 8192,
+                            "pattern": "^[!-~]+$",
+                            "description": "Present when the pair is a temporary one that needs it. A temporary pair stops working at its own expiry, after which the config reports failures until another is set; it is accepted for evaluation, never recommended."
+                        }
+                    }
+                },
+                {
+                    "type": "object",
+                    "additionalProperties": false,
+                    "required": [
+                        "kind",
+                        "configId",
+                        "serviceAccountKey"
+                    ],
+                    "description": "A Google Cloud service-account key.",
+                    "properties": {
+                        "kind": {
+                            "const": "gcs"
+                        },
+                        "configId": {
+                            "$ref": "#/$defs/StorageConfigId"
+                        },
+                        "serviceAccountKey": {
+                            "type": "object",
+                            "additionalProperties": true,
+                            "required": [
+                                "type",
+                                "client_email",
+                                "private_key_id",
+                                "private_key"
+                            ],
+                            "description": "The service-account key exactly as Google issues it — the JSON key file, as an object, its member names carried verbatim in Google's own snake_case. Members beyond the four required (`project_id`, `client_id`, `token_uri`, `universe_domain` and the rest) are permitted, and a community MAY discard them: it authenticates with `client_email`, `private_key_id` and `private_key` alone, against Google's own token endpoint, and never against a `token_uri` the key file names.",
+                            "properties": {
+                                "type": {
+                                    "const": "service_account"
+                                },
+                                "client_email": {
+                                    "type": "string",
+                                    "minLength": 3,
+                                    "maxLength": 320,
+                                    "pattern": "^[^@\\s]+@[^@\\s]+$"
+                                },
+                                "private_key_id": {
+                                    "type": "string",
+                                    "minLength": 1,
+                                    "maxLength": 128,
+                                    "pattern": "^[A-Za-z0-9]+$"
+                                },
+                                "private_key": {
+                                    "type": "string",
+                                    "minLength": 64,
+                                    "maxLength": 8192,
+                                    "pattern": "^-----BEGIN PRIVATE KEY-----",
+                                    "description": "The PKCS #8 PEM private key."
+                                }
+                            }
+                        }
+                    }
+                },
+                {
+                    "type": "object",
+                    "additionalProperties": false,
+                    "required": [
+                        "kind",
+                        "configId",
+                        "suiPrivateKey"
+                    ],
+                    "description": "The Sui key that pays for a `walrus` config's storage.",
+                    "properties": {
+                        "kind": {
+                            "const": "walrus"
+                        },
+                        "configId": {
+                            "$ref": "#/$defs/StorageConfigId"
+                        },
+                        "suiPrivateKey": {
+                            "type": "string",
+                            "minLength": 20,
+                            "maxLength": 256,
+                            "pattern": "^suiprivkey1[02-9ac-hj-np-z]+$",
+                            "description": "The private key in Sui's Bech32 `suiprivkey` encoding (SIP-15), which carries its signature scheme."
+                        }
+                    }
+                }
+            ]
+        },
+        "StorageConfigId": {
+            "title": "StorageConfigId",
+            "type": "string",
+            "minLength": 1,
+            "maxLength": 64,
+            "pattern": "^[a-z0-9](?:[a-z0-9-]{0,62}[a-z0-9])?$",
+            "description": "A storage config's identifier, chosen by the administrator who creates it and immutable thereafter: lowercase letters, digits and inner hyphens, at most 64 characters (`eu-s3-primary`, `walrus-main`). Unique within the community. Never reused after a config is retired, because blobs name their config by this value."
+        },
+        "Ext": {
+            "title": "Ext",
+            "description": "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.",
+            "type": "object",
+            "minProperties": 1,
+            "additionalProperties": true,
+            "propertyNames": {
+                "pattern": "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$"
+            }
+        },
+        "CredentialState": {
+            "title": "CredentialState",
+            "type": "object",
+            "additionalProperties": false,
+            "required": [
+                "status"
+            ],
+            "description": "Whether a config can authenticate now, and how — never the credential. `status`: `vta-account`, `ambient` and `sealed` are usable; `required` means the config cannot store until a credential is provided (a `sealed` config never set, or set before a restore, which carries no credential); `notAllowed` means the config's mode is one the community's host configuration no longer permits, so it cannot store until its `auth` is changed; `none` is a `local` config.",
+            "properties": {
+                "status": {
+                    "type": "string",
+                    "enum": [
+                        "vta-account",
+                        "ambient",
+                        "sealed",
+                        "required",
+                        "notAllowed",
+                        "none"
+                    ]
+                },
+                "context": {
+                    "$ref": "#/$defs/ExternalAccountContextId",
+                    "description": "Present with `vta-account`."
+                },
+                "account": {
+                    "$ref": "#/$defs/ExternalAccountId",
+                    "description": "Present with `vta-account`."
+                },
+                "fingerprint": {
+                    "$ref": "#/$defs/DigestMultibase",
+                    "description": "Present with `sealed`: a digest identifying the stored credential, so an administrator can tell which one is set without anyone being able to read it. Computed over the credential with a community-held key, never a bare hash of a low-entropy secret."
+                },
+                "setAt": {
+                    "type": "string",
+                    "format": "date-time",
+                    "description": "Present with `sealed`: when the stored credential was last set."
+                },
+                "roomsHoldingCredentials": {
+                    "type": "integer",
+                    "minimum": 0,
+                    "description": "Present with `vta-account`, `ambient` and `sealed`: how many rooms the community currently holds a live room-scoped credential for."
+                }
+            }
+        },
+        "ExternalAccountId": {
+            "title": "ExternalAccountId",
+            "type": "string",
+            "minLength": 1,
+            "maxLength": 64,
+            "pattern": "^[a-z0-9](?:[a-z0-9-]{0,62}[a-z0-9])?$",
+            "description": "The identifier of an external account held by the community's VTA (the external/accounts/* family), which issues the community short-lived, room-scoped credentials and holds the long-lived authority itself."
+        },
+        "ExternalAccountContextId": {
+            "title": "ExternalAccountContextId",
+            "type": "string",
+            "minLength": 1,
+            "maxLength": 256,
+            "description": "The context at the community's VTA that owns an external account. The VTA names an account by its context and its identifier, and decides who may use it by act scope in that context: the community must hold `external-auth-use` there, and be bound to the account, for the account to issue it anything. Naming a context grants nothing; the VTA's binding is the gate."
+        },
+        "DigestMultibase": {
+            "title": "DigestMultibase",
+            "description": "A cryptographic digest as a multibase-encoded multihash — the encoding the W3C Verifiable Credentials Data Model 2.0 defines for `digestMultibase`, and the one `did:webvh` uses for its SCID and entry hashes.\n\nMultihash carries the hash algorithm in-band, so the value is self-describing and the wire format survives an algorithm change without a schema revision; multibase does the same for the base encoding, so a verifier never infers base58 from base64url by context. A bare hex string or a `sha-256:`-style prefix hard-codes one algorithm into the wire contract and is non-conforming here.\n\nThis definition constrains the *encoding only*. What the digest is computed over is stated by each referencing field, because it differs legitimately: a digest over a JSON document is taken over its RFC 8785 (JCS) canonicalization, while a digest over an opaque artifact is taken over its bytes. A field whose input is a JSON document and which does not name a canonicalization is not reproducible.\n\nRestricted to the two multibase headers W3C Controlled Identifiers 1.0 §2.4 normatively requires — `z` (base58btc) and `u` (base64url-no-pad). CID permits others but states that \"interoperability is not guaranteed between implementations using such values\", and a registry whose purpose is interoperability should not mint digests a conforming verifier may be unable to read. The alphabets are enforced rather than assumed: base58btc excludes 0, O, I and l, and an earlier permissive pattern let three published examples carry digests that were not valid base58 at all. base58btc is RECOMMENDED, for consistency with `did:key` and `did:webvh`.",
+            "type": "string",
+            "minLength": 16,
+            "pattern": "^(z[1-9A-HJ-NP-Za-km-z]+|u[A-Za-z0-9_-]+)$",
+            "examples": [
+                "zQmbWqxBEKC3P8tqsKc98xmWNzrzDtRLMiMPL8wBuTGsMnR"
+            ]
+        }
+    }
+};
+/** As {@link PAYLOAD_SCHEMA}, for the success-response variant. */
+export const RESPONSE_PAYLOAD_SCHEMA = {
+    "$schema": "https://json-schema.org/draft/2020-12/schema",
+    "$ref": "#/$defs/Response",
+    "$defs": {
+        "Response": {
+            "$anchor": "response",
+            "title": "VTC Storage — Credentials — Set — response payload",
+            "type": "object",
+            "additionalProperties": false,
+            "required": [
+                "configId",
+                "credentialState"
+            ],
+            "properties": {
+                "configId": {
+                    "$ref": "#/$defs/StorageConfigId"
+                },
+                "credentialState": {
+                    "$ref": "#/$defs/CredentialState"
+                },
+                "probeOk": {
+                    "type": "boolean",
+                    "description": "Present when the community probed the config with the new credential."
+                },
+                "ext": {
+                    "$ref": "#/$defs/Ext"
+                }
+            }
+        },
+        "SealedCredentialCleartext": {
+            "$ref": "#/$defs/SealedStorageCredential",
+            "description": "Not a member of the payload: the cleartext inside `sealed`, declared here so that every generated binding carries the type a producer seals and a community opens. Never appears on the wire outside a seal."
+        },
+        "SealedStorageCredential": {
+            "title": "SealedStorageCredential",
+            "description": "The cleartext inside the sealed block of vtc/storage/credentials/set/0.2, discriminated by `kind`, which must equal the config's kind. It names the config it is for inside the seal, so that a block captured on its way to one config cannot be replayed into another: a community MUST refuse a block whose `configId` differs from the request's. Never appears on the wire outside a seal, and is never returned. A `local` config has no credential.",
+            "oneOf": [
+                {
+                    "type": "object",
+                    "additionalProperties": false,
+                    "required": [
+                        "kind",
+                        "configId",
+                        "accessKeyId",
+                        "secretAccessKey"
+                    ],
+                    "description": "An S3 access-key pair: an AWS IAM user's key, or an S3-compatible store's (R2, B2, MinIO).",
+                    "properties": {
+                        "kind": {
+                            "const": "s3"
+                        },
+                        "configId": {
+                            "$ref": "#/$defs/StorageConfigId"
+                        },
+                        "accessKeyId": {
+                            "type": "string",
+                            "minLength": 1,
+                            "maxLength": 128,
+                            "pattern": "^[A-Za-z0-9]+$",
+                            "description": "The access key's identifier."
+                        },
+                        "secretAccessKey": {
+                            "type": "string",
+                            "minLength": 1,
+                            "maxLength": 256,
+                            "pattern": "^[!-~]+$",
+                            "description": "The secret half."
+                        },
+                        "sessionToken": {
+                            "type": "string",
+                            "minLength": 1,
+                            "maxLength": 8192,
+                            "pattern": "^[!-~]+$",
+                            "description": "Present when the pair is a temporary one that needs it. A temporary pair stops working at its own expiry, after which the config reports failures until another is set; it is accepted for evaluation, never recommended."
+                        }
+                    }
+                },
+                {
+                    "type": "object",
+                    "additionalProperties": false,
+                    "required": [
+                        "kind",
+                        "configId",
+                        "serviceAccountKey"
+                    ],
+                    "description": "A Google Cloud service-account key.",
+                    "properties": {
+                        "kind": {
+                            "const": "gcs"
+                        },
+                        "configId": {
+                            "$ref": "#/$defs/StorageConfigId"
+                        },
+                        "serviceAccountKey": {
+                            "type": "object",
+                            "additionalProperties": true,
+                            "required": [
+                                "type",
+                                "client_email",
+                                "private_key_id",
+                                "private_key"
+                            ],
+                            "description": "The service-account key exactly as Google issues it — the JSON key file, as an object, its member names carried verbatim in Google's own snake_case. Members beyond the four required (`project_id`, `client_id`, `token_uri`, `universe_domain` and the rest) are permitted, and a community MAY discard them: it authenticates with `client_email`, `private_key_id` and `private_key` alone, against Google's own token endpoint, and never against a `token_uri` the key file names.",
+                            "properties": {
+                                "type": {
+                                    "const": "service_account"
+                                },
+                                "client_email": {
+                                    "type": "string",
+                                    "minLength": 3,
+                                    "maxLength": 320,
+                                    "pattern": "^[^@\\s]+@[^@\\s]+$"
+                                },
+                                "private_key_id": {
+                                    "type": "string",
+                                    "minLength": 1,
+                                    "maxLength": 128,
+                                    "pattern": "^[A-Za-z0-9]+$"
+                                },
+                                "private_key": {
+                                    "type": "string",
+                                    "minLength": 64,
+                                    "maxLength": 8192,
+                                    "pattern": "^-----BEGIN PRIVATE KEY-----",
+                                    "description": "The PKCS #8 PEM private key."
+                                }
+                            }
+                        }
+                    }
+                },
+                {
+                    "type": "object",
+                    "additionalProperties": false,
+                    "required": [
+                        "kind",
+                        "configId",
+                        "suiPrivateKey"
+                    ],
+                    "description": "The Sui key that pays for a `walrus` config's storage.",
+                    "properties": {
+                        "kind": {
+                            "const": "walrus"
+                        },
+                        "configId": {
+                            "$ref": "#/$defs/StorageConfigId"
+                        },
+                        "suiPrivateKey": {
+                            "type": "string",
+                            "minLength": 20,
+                            "maxLength": 256,
+                            "pattern": "^suiprivkey1[02-9ac-hj-np-z]+$",
+                            "description": "The private key in Sui's Bech32 `suiprivkey` encoding (SIP-15), which carries its signature scheme."
+                        }
+                    }
+                }
+            ]
+        },
+        "StorageConfigId": {
+            "title": "StorageConfigId",
+            "type": "string",
+            "minLength": 1,
+            "maxLength": 64,
+            "pattern": "^[a-z0-9](?:[a-z0-9-]{0,62}[a-z0-9])?$",
+            "description": "A storage config's identifier, chosen by the administrator who creates it and immutable thereafter: lowercase letters, digits and inner hyphens, at most 64 characters (`eu-s3-primary`, `walrus-main`). Unique within the community. Never reused after a config is retired, because blobs name their config by this value."
+        },
+        "Ext": {
+            "title": "Ext",
+            "description": "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.",
+            "type": "object",
+            "minProperties": 1,
+            "additionalProperties": true,
+            "propertyNames": {
+                "pattern": "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$"
+            }
+        },
+        "CredentialState": {
+            "title": "CredentialState",
+            "type": "object",
+            "additionalProperties": false,
+            "required": [
+                "status"
+            ],
+            "description": "Whether a config can authenticate now, and how — never the credential. `status`: `vta-account`, `ambient` and `sealed` are usable; `required` means the config cannot store until a credential is provided (a `sealed` config never set, or set before a restore, which carries no credential); `notAllowed` means the config's mode is one the community's host configuration no longer permits, so it cannot store until its `auth` is changed; `none` is a `local` config.",
+            "properties": {
+                "status": {
+                    "type": "string",
+                    "enum": [
+                        "vta-account",
+                        "ambient",
+                        "sealed",
+                        "required",
+                        "notAllowed",
+                        "none"
+                    ]
+                },
+                "context": {
+                    "$ref": "#/$defs/ExternalAccountContextId",
+                    "description": "Present with `vta-account`."
+                },
+                "account": {
+                    "$ref": "#/$defs/ExternalAccountId",
+                    "description": "Present with `vta-account`."
+                },
+                "fingerprint": {
+                    "$ref": "#/$defs/DigestMultibase",
+                    "description": "Present with `sealed`: a digest identifying the stored credential, so an administrator can tell which one is set without anyone being able to read it. Computed over the credential with a community-held key, never a bare hash of a low-entropy secret."
+                },
+                "setAt": {
+                    "type": "string",
+                    "format": "date-time",
+                    "description": "Present with `sealed`: when the stored credential was last set."
+                },
+                "roomsHoldingCredentials": {
+                    "type": "integer",
+                    "minimum": 0,
+                    "description": "Present with `vta-account`, `ambient` and `sealed`: how many rooms the community currently holds a live room-scoped credential for."
+                }
+            }
+        },
+        "ExternalAccountId": {
+            "title": "ExternalAccountId",
+            "type": "string",
+            "minLength": 1,
+            "maxLength": 64,
+            "pattern": "^[a-z0-9](?:[a-z0-9-]{0,62}[a-z0-9])?$",
+            "description": "The identifier of an external account held by the community's VTA (the external/accounts/* family), which issues the community short-lived, room-scoped credentials and holds the long-lived authority itself."
+        },
+        "ExternalAccountContextId": {
+            "title": "ExternalAccountContextId",
+            "type": "string",
+            "minLength": 1,
+            "maxLength": 256,
+            "description": "The context at the community's VTA that owns an external account. The VTA names an account by its context and its identifier, and decides who may use it by act scope in that context: the community must hold `external-auth-use` there, and be bound to the account, for the account to issue it anything. Naming a context grants nothing; the VTA's binding is the gate."
+        },
+        "DigestMultibase": {
+            "title": "DigestMultibase",
+            "description": "A cryptographic digest as a multibase-encoded multihash — the encoding the W3C Verifiable Credentials Data Model 2.0 defines for `digestMultibase`, and the one `did:webvh` uses for its SCID and entry hashes.\n\nMultihash carries the hash algorithm in-band, so the value is self-describing and the wire format survives an algorithm change without a schema revision; multibase does the same for the base encoding, so a verifier never infers base58 from base64url by context. A bare hex string or a `sha-256:`-style prefix hard-codes one algorithm into the wire contract and is non-conforming here.\n\nThis definition constrains the *encoding only*. What the digest is computed over is stated by each referencing field, because it differs legitimately: a digest over a JSON document is taken over its RFC 8785 (JCS) canonicalization, while a digest over an opaque artifact is taken over its bytes. A field whose input is a JSON document and which does not name a canonicalization is not reproducible.\n\nRestricted to the two multibase headers W3C Controlled Identifiers 1.0 §2.4 normatively requires — `z` (base58btc) and `u` (base64url-no-pad). CID permits others but states that \"interoperability is not guaranteed between implementations using such values\", and a registry whose purpose is interoperability should not mint digests a conforming verifier may be unable to read. The alphabets are enforced rather than assumed: base58btc excludes 0, O, I and l, and an earlier permissive pattern let three published examples carry digests that were not valid base58 at all. base58btc is RECOMMENDED, for consistency with `did:key` and `did:webvh`.",
+            "type": "string",
+            "minLength": 16,
+            "pattern": "^(z[1-9A-HJ-NP-Za-km-z]+|u[A-Za-z0-9_-]+)$",
+            "examples": [
+                "zQmbWqxBEKC3P8tqsKc98xmWNzrzDtRLMiMPL8wBuTGsMnR"
+            ]
+        }
+    }
+};
+/**
+ * SPEC.md §7.2 policy for the request variant, from this specification's
+ * front matter. Pass to `consumeInbound` — items 5b, 7 and 8 are
+ * per-specification and cannot be derived from the document alone, and
+ * item 2 needs the schema this carries.
+ */
+export const SPEC = {
+    typeUri: TYPE_URI,
+    isBearer: false,
+    isProofRequired: true,
+    isRecipientRequired: true,
+    isIssuedAtRequired: true,
+    payloadSchema: PAYLOAD_SCHEMA,
+};
+/**
+ * SPEC.md §7.2 policy for the success-response variant. `isRecipientRequired`
+ * tracks the *issuer* party's requirement because a response swaps the
+ * parties (§7.3 item 5).
+ */
+export const RESPONSE_SPEC = {
+    typeUri: RESPONSE_TYPE_URI,
+    isBearer: false,
+    isProofRequired: true,
+    isRecipientRequired: true,
+    isIssuedAtRequired: true,
+    payloadSchema: RESPONSE_PAYLOAD_SCHEMA,
+};
+//# sourceMappingURL=payload.js.map

package/dist/vtc/storage/credentials/set/0.3/payload.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"payload.js","sourceRoot":"","sources":["../../../../../../src/vtc/storage/credentials/set/0.3/payload.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAqCH,2BAA2B;AAC3B,MAAM,CAAC,MAAM,QAAQ,GAAG,6DAAsE,CAAC;AAE/F;;;;;GAKG;AACH,MAAM,CAAC,MAAM,OAAO,GAAkB,IAAI,CAAC;AAE3C;;;;;GAKG;AACH,MAAM,CAAC,MAAM,WAAW,GAAkB,IAAI,CAAC;AAK/C,qEAAqE;AACrE,MAAM,CAAC,MAAM,iBAAiB,GAAG,sEAA+E,CAAC;AAKjH;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,SAAS,EAAE,8CAA8C;IACzD,KAAK,EAAE,6DAA6D;IACpE,OAAO,EAAE,2CAA2C;IACpD,aAAa,EAAE,iMAAiM;IAChN,MAAM,EAAE,QAAQ;IAChB,sBAAsB,EAAE,KAAK;IAC7B,UAAU,EAAE;QACV,UAAU;QACV,QAAQ;QACR,iBAAiB;QACjB,QAAQ;KACT;IACD,YAAY,EAAE;QACZ,UAAU,EAAE;YACV,MAAM,EAAE,yBAAyB;SAClC;QACD,QAAQ,EAAE;YACR,MAAM,EAAE,QAAQ;YAChB,WAAW,EAAE,EAAE;YACf,WAAW,EAAE,KAAK;YAClB,SAAS,EAAE,oCAAoC;YAC/C,aAAa,EAAE,uPAAuP;SACvQ;QACD,iBAAiB,EAAE;YACjB,MAAM,EAAE,yBAAyB;YACjC,aAAa,EAAE,mJAAmJ;SACnK;QACD,QAAQ,EAAE;YACR,MAAM,EAAE,QAAQ;YAChB,WAAW,EAAE,CAAC;YACd,WAAW,EAAE,GAAG;YAChB,aAAa,EAAE,4QAA4Q;SAC5R;QACD,KAAK,EAAE;YACL,MAAM,EAAE,aAAa;SACtB;KACF;IACD,OAAO,EAAE;QACP,UAAU,EAAE;YACV,SAAS,EAAE,UAAU;YACrB,OAAO,EAAE,oDAAoD;YAC7D,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,UAAU;gBACV,iBAAiB;aAClB;YACD,YAAY,EAAE;gBACZ,UAAU,EAAE;oBACV,MAAM,EAAE,yBAAyB;iBAClC;gBACD,iBAAiB,EAAE;oBACjB,MAAM,EAAE,yBAAyB;iBAClC;gBACD,SAAS,EAAE;oBACT,MAAM,EAAE,SAAS;oBACjB,aAAa,EAAE,uEAAuE;iBACvF;gBACD,KAAK,EAAE;oBACL,MAAM,EAAE,aAAa;iBACtB;aACF;SACF;QACD,2BAA2B,EAAE;YAC3B,MAAM,EAAE,iCAAiC;YACzC,aAAa,EAAE,8MAA8M;SAC9N;QACD,yBAAyB,EAAE;YACzB,OAAO,EAAE,yBAAyB;YAClC,aAAa,EAAE,4bAA4b;YAC3c,OAAO,EAAE;gBACP;oBACE,MAAM,EAAE,QAAQ;oBAChB,sBAAsB,EAAE,KAAK;oBAC7B,UAAU,EAAE;wBACV,MAAM;wBACN,UAAU;wBACV,aAAa;wBACb,iBAAiB;qBAClB;oBACD,aAAa,EAAE,4FAA4F;oBAC3G,YAAY,EAAE;wBACZ,MAAM,EAAE;4BACN,OAAO,EAAE,IAAI;yBACd;wBACD,UAAU,EAAE;4BACV,MAAM,EAAE,yBAAyB;yBAClC;wBACD,aAAa,EAAE;4BACb,MAAM,EAAE,QAAQ;4BAChB,WAAW,EAAE,CAAC;4BACd,WAAW,EAAE,GAAG;4BAChB,SAAS,EAAE,gBAAgB;4BAC3B,aAAa,EAAE,8BAA8B;yBAC9C;wBACD,iBAAiB,EAAE;4BACjB,MAAM,EAAE,QAAQ;4BAChB,WAAW,EAAE,CAAC;4BACd,WAAW,EAAE,GAAG;4BAChB,SAAS,EAAE,UAAU;4BACrB,aAAa,EAAE,kBAAkB;yBAClC;wBACD,cAAc,EAAE;4BACd,MAAM,EAAE,QAAQ;4BAChB,WAAW,EAAE,CAAC;4BACd,WAAW,EAAE,IAAI;4BACjB,SAAS,EAAE,UAAU;4BACrB,aAAa,EAAE,2NAA2N;yBAC3O;qBACF;iBACF;gBACD;oBACE,MAAM,EAAE,QAAQ;oBAChB,sBAAsB,EAAE,KAAK;oBAC7B,UAAU,EAAE;wBACV,MAAM;wBACN,UAAU;wBACV,mBAAmB;qBACpB;oBACD,aAAa,EAAE,qCAAqC;oBACpD,YAAY,EAAE;wBACZ,MAAM,EAAE;4BACN,OAAO,EAAE,KAAK;yBACf;wBACD,UAAU,EAAE;4BACV,MAAM,EAAE,yBAAyB;yBAClC;wBACD,mBAAmB,EAAE;4BACnB,MAAM,EAAE,QAAQ;4BAChB,sBAAsB,EAAE,IAAI;4BAC5B,UAAU,EAAE;gCACV,MAAM;gCACN,cAAc;gCACd,gBAAgB;gCAChB,aAAa;6BACd;4BACD,aAAa,EAAE,0dAA0d;4BACze,YAAY,EAAE;gCACZ,MAAM,EAAE;oCACN,OAAO,EAAE,iBAAiB;iCAC3B;gCACD,cAAc,EAAE;oCACd,MAAM,EAAE,QAAQ;oCAChB,WAAW,EAAE,CAAC;oCACd,WAAW,EAAE,GAAG;oCAChB,SAAS,EAAE,qBAAqB;iCACjC;gCACD,gBAAgB,EAAE;oCAChB,MAAM,EAAE,QAAQ;oCAChB,WAAW,EAAE,CAAC;oCACd,WAAW,EAAE,GAAG;oCAChB,SAAS,EAAE,gBAAgB;iCAC5B;gCACD,aAAa,EAAE;oCACb,MAAM,EAAE,QAAQ;oCAChB,WAAW,EAAE,EAAE;oCACf,WAAW,EAAE,IAAI;oCACjB,SAAS,EAAE,8BAA8B;oCACzC,aAAa,EAAE,8BAA8B;iCAC9C;6BACF;yBACF;qBACF;iBACF;gBACD;oBACE,MAAM,EAAE,QAAQ;oBAChB,sBAAsB,EAAE,KAAK;oBAC7B,UAAU,EAAE;wBACV,MAAM;wBACN,UAAU;wBACV,eAAe;qBAChB;oBACD,aAAa,EAAE,wDAAwD;oBACvE,YAAY,EAAE;wBACZ,MAAM,EAAE;4BACN,OAAO,EAAE,QAAQ;yBAClB;wBACD,UAAU,EAAE;4BACV,MAAM,EAAE,yBAAyB;yBAClC;wBACD,eAAe,EAAE;4BACf,MAAM,EAAE,QAAQ;4BAChB,WAAW,EAAE,EAAE;4BACf,WAAW,EAAE,GAAG;4BAChB,SAAS,EAAE,gCAAgC;4BAC3C,aAAa,EAAE,qGAAqG;yBACrH;qBACF;iBACF;aACF;SACF;QACD,iBAAiB,EAAE;YACjB,OAAO,EAAE,iBAAiB;YAC1B,MAAM,EAAE,QAAQ;YAChB,WAAW,EAAE,CAAC;YACd,WAAW,EAAE,EAAE;YACf,SAAS,EAAE,wCAAwC;YACnD,aAAa,EAAE,8TAA8T;SAC9U;QACD,KAAK,EAAE;YACL,OAAO,EAAE,KAAK;YACd,aAAa,EAAE,uKAAuK;YACtL,MAAM,EAAE,QAAQ;YAChB,eAAe,EAAE,CAAC;YAClB,sBAAsB,EAAE,IAAI;YAC5B,eAAe,EAAE;gBACf,SAAS,EAAE,mCAAmC;aAC/C;SACF;QACD,iBAAiB,EAAE;YACjB,OAAO,EAAE,iBAAiB;YAC1B,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,QAAQ;aACT;YACD,aAAa,EAAE,+cAA+c;YAC9d,YAAY,EAAE;gBACZ,QAAQ,EAAE;oBACR,MAAM,EAAE,QAAQ;oBAChB,MAAM,EAAE;wBACN,aAAa;wBACb,SAAS;wBACT,QAAQ;wBACR,UAAU;wBACV,YAAY;wBACZ,MAAM;qBACP;iBACF;gBACD,SAAS,EAAE;oBACT,MAAM,EAAE,kCAAkC;oBAC1C,aAAa,EAAE,6BAA6B;iBAC7C;gBACD,SAAS,EAAE;oBACT,MAAM,EAAE,2BAA2B;oBACnC,aAAa,EAAE,6BAA6B;iBAC7C;gBACD,aAAa,EAAE;oBACb,MAAM,EAAE,yBAAyB;oBACjC,aAAa,EAAE,2PAA2P;iBAC3Q;gBACD,OAAO,EAAE;oBACP,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,WAAW;oBACrB,aAAa,EAAE,iEAAiE;iBACjF;gBACD,yBAAyB,EAAE;oBACzB,MAAM,EAAE,SAAS;oBACjB,SAAS,EAAE,CAAC;oBACZ,aAAa,EAAE,qIAAqI;iBACrJ;aACF;SACF;QACD,mBAAmB,EAAE;YACnB,OAAO,EAAE,mBAAmB;YAC5B,MAAM,EAAE,QAAQ;YAChB,WAAW,EAAE,CAAC;YACd,WAAW,EAAE,EAAE;YACf,SAAS,EAAE,wCAAwC;YACnD,aAAa,EAAE,gNAAgN;SAChO;QACD,0BAA0B,EAAE;YAC1B,OAAO,EAAE,0BAA0B;YACnC,MAAM,EAAE,QAAQ;YAChB,WAAW,EAAE,CAAC;YACd,WAAW,EAAE,GAAG;YAChB,aAAa,EAAE,8WAA8W;SAC9X;QACD,iBAAiB,EAAE;YACjB,OAAO,EAAE,iBAAiB;YAC1B,aAAa,EAAE,gnDAAgnD;YAC/nD,MAAM,EAAE,QAAQ;YAChB,WAAW,EAAE,EAAE;YACf,SAAS,EAAE,4CAA4C;YACvD,UAAU,EAAE;gBACV,iDAAiD;aAClD;SACF;KACF;CACO,CAAC;AAEX,mEAAmE;AACnE,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,SAAS,EAAE,8CAA8C;IACzD,MAAM,EAAE,kBAAkB;IAC1B,OAAO,EAAE;QACP,UAAU,EAAE;YACV,SAAS,EAAE,UAAU;YACrB,OAAO,EAAE,oDAAoD;YAC7D,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,UAAU;gBACV,iBAAiB;aAClB;YACD,YAAY,EAAE;gBACZ,UAAU,EAAE;oBACV,MAAM,EAAE,yBAAyB;iBAClC;gBACD,iBAAiB,EAAE;oBACjB,MAAM,EAAE,yBAAyB;iBAClC;gBACD,SAAS,EAAE;oBACT,MAAM,EAAE,SAAS;oBACjB,aAAa,EAAE,uEAAuE;iBACvF;gBACD,KAAK,EAAE;oBACL,MAAM,EAAE,aAAa;iBACtB;aACF;SACF;QACD,2BAA2B,EAAE;YAC3B,MAAM,EAAE,iCAAiC;YACzC,aAAa,EAAE,8MAA8M;SAC9N;QACD,yBAAyB,EAAE;YACzB,OAAO,EAAE,yBAAyB;YAClC,aAAa,EAAE,4bAA4b;YAC3c,OAAO,EAAE;gBACP;oBACE,MAAM,EAAE,QAAQ;oBAChB,sBAAsB,EAAE,KAAK;oBAC7B,UAAU,EAAE;wBACV,MAAM;wBACN,UAAU;wBACV,aAAa;wBACb,iBAAiB;qBAClB;oBACD,aAAa,EAAE,4FAA4F;oBAC3G,YAAY,EAAE;wBACZ,MAAM,EAAE;4BACN,OAAO,EAAE,IAAI;yBACd;wBACD,UAAU,EAAE;4BACV,MAAM,EAAE,yBAAyB;yBAClC;wBACD,aAAa,EAAE;4BACb,MAAM,EAAE,QAAQ;4BAChB,WAAW,EAAE,CAAC;4BACd,WAAW,EAAE,GAAG;4BAChB,SAAS,EAAE,gBAAgB;4BAC3B,aAAa,EAAE,8BAA8B;yBAC9C;wBACD,iBAAiB,EAAE;4BACjB,MAAM,EAAE,QAAQ;4BAChB,WAAW,EAAE,CAAC;4BACd,WAAW,EAAE,GAAG;4BAChB,SAAS,EAAE,UAAU;4BACrB,aAAa,EAAE,kBAAkB;yBAClC;wBACD,cAAc,EAAE;4BACd,MAAM,EAAE,QAAQ;4BAChB,WAAW,EAAE,CAAC;4BACd,WAAW,EAAE,IAAI;4BACjB,SAAS,EAAE,UAAU;4BACrB,aAAa,EAAE,2NAA2N;yBAC3O;qBACF;iBACF;gBACD;oBACE,MAAM,EAAE,QAAQ;oBAChB,sBAAsB,EAAE,KAAK;oBAC7B,UAAU,EAAE;wBACV,MAAM;wBACN,UAAU;wBACV,mBAAmB;qBACpB;oBACD,aAAa,EAAE,qCAAqC;oBACpD,YAAY,EAAE;wBACZ,MAAM,EAAE;4BACN,OAAO,EAAE,KAAK;yBACf;wBACD,UAAU,EAAE;4BACV,MAAM,EAAE,yBAAyB;yBAClC;wBACD,mBAAmB,EAAE;4BACnB,MAAM,EAAE,QAAQ;4BAChB,sBAAsB,EAAE,IAAI;4BAC5B,UAAU,EAAE;gCACV,MAAM;gCACN,cAAc;gCACd,gBAAgB;gCAChB,aAAa;6BACd;4BACD,aAAa,EAAE,0dAA0d;4BACze,YAAY,EAAE;gCACZ,MAAM,EAAE;oCACN,OAAO,EAAE,iBAAiB;iCAC3B;gCACD,cAAc,EAAE;oCACd,MAAM,EAAE,QAAQ;oCAChB,WAAW,EAAE,CAAC;oCACd,WAAW,EAAE,GAAG;oCAChB,SAAS,EAAE,qBAAqB;iCACjC;gCACD,gBAAgB,EAAE;oCAChB,MAAM,EAAE,QAAQ;oCAChB,WAAW,EAAE,CAAC;oCACd,WAAW,EAAE,GAAG;oCAChB,SAAS,EAAE,gBAAgB;iCAC5B;gCACD,aAAa,EAAE;oCACb,MAAM,EAAE,QAAQ;oCAChB,WAAW,EAAE,EAAE;oCACf,WAAW,EAAE,IAAI;oCACjB,SAAS,EAAE,8BAA8B;oCACzC,aAAa,EAAE,8BAA8B;iCAC9C;6BACF;yBACF;qBACF;iBACF;gBACD;oBACE,MAAM,EAAE,QAAQ;oBAChB,sBAAsB,EAAE,KAAK;oBAC7B,UAAU,EAAE;wBACV,MAAM;wBACN,UAAU;wBACV,eAAe;qBAChB;oBACD,aAAa,EAAE,wDAAwD;oBACvE,YAAY,EAAE;wBACZ,MAAM,EAAE;4BACN,OAAO,EAAE,QAAQ;yBAClB;wBACD,UAAU,EAAE;4BACV,MAAM,EAAE,yBAAyB;yBAClC;wBACD,eAAe,EAAE;4BACf,MAAM,EAAE,QAAQ;4BAChB,WAAW,EAAE,EAAE;4BACf,WAAW,EAAE,GAAG;4BAChB,SAAS,EAAE,gCAAgC;4BAC3C,aAAa,EAAE,qGAAqG;yBACrH;qBACF;iBACF;aACF;SACF;QACD,iBAAiB,EAAE;YACjB,OAAO,EAAE,iBAAiB;YAC1B,MAAM,EAAE,QAAQ;YAChB,WAAW,EAAE,CAAC;YACd,WAAW,EAAE,EAAE;YACf,SAAS,EAAE,wCAAwC;YACnD,aAAa,EAAE,8TAA8T;SAC9U;QACD,KAAK,EAAE;YACL,OAAO,EAAE,KAAK;YACd,aAAa,EAAE,uKAAuK;YACtL,MAAM,EAAE,QAAQ;YAChB,eAAe,EAAE,CAAC;YAClB,sBAAsB,EAAE,IAAI;YAC5B,eAAe,EAAE;gBACf,SAAS,EAAE,mCAAmC;aAC/C;SACF;QACD,iBAAiB,EAAE;YACjB,OAAO,EAAE,iBAAiB;YAC1B,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,QAAQ;aACT;YACD,aAAa,EAAE,+cAA+c;YAC9d,YAAY,EAAE;gBACZ,QAAQ,EAAE;oBACR,MAAM,EAAE,QAAQ;oBAChB,MAAM,EAAE;wBACN,aAAa;wBACb,SAAS;wBACT,QAAQ;wBACR,UAAU;wBACV,YAAY;wBACZ,MAAM;qBACP;iBACF;gBACD,SAAS,EAAE;oBACT,MAAM,EAAE,kCAAkC;oBAC1C,aAAa,EAAE,6BAA6B;iBAC7C;gBACD,SAAS,EAAE;oBACT,MAAM,EAAE,2BAA2B;oBACnC,aAAa,EAAE,6BAA6B;iBAC7C;gBACD,aAAa,EAAE;oBACb,MAAM,EAAE,yBAAyB;oBACjC,aAAa,EAAE,2PAA2P;iBAC3Q;gBACD,OAAO,EAAE;oBACP,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,WAAW;oBACrB,aAAa,EAAE,iEAAiE;iBACjF;gBACD,yBAAyB,EAAE;oBACzB,MAAM,EAAE,SAAS;oBACjB,SAAS,EAAE,CAAC;oBACZ,aAAa,EAAE,qIAAqI;iBACrJ;aACF;SACF;QACD,mBAAmB,EAAE;YACnB,OAAO,EAAE,mBAAmB;YAC5B,MAAM,EAAE,QAAQ;YAChB,WAAW,EAAE,CAAC;YACd,WAAW,EAAE,EAAE;YACf,SAAS,EAAE,wCAAwC;YACnD,aAAa,EAAE,gNAAgN;SAChO;QACD,0BAA0B,EAAE;YAC1B,OAAO,EAAE,0BAA0B;YACnC,MAAM,EAAE,QAAQ;YAChB,WAAW,EAAE,CAAC;YACd,WAAW,EAAE,GAAG;YAChB,aAAa,EAAE,8WAA8W;SAC9X;QACD,iBAAiB,EAAE;YACjB,OAAO,EAAE,iBAAiB;YAC1B,aAAa,EAAE,gnDAAgnD;YAC/nD,MAAM,EAAE,QAAQ;YAChB,WAAW,EAAE,EAAE;YACf,SAAS,EAAE,4CAA4C;YACvD,UAAU,EAAE;gBACV,iDAAiD;aAClD;SACF;KACF;CACO,CAAC;AAEX;;;;;GAKG;AACH,MAAM,CAAC,MAAM,IAAI,GAAG;IAClB,OAAO,EAAE,QAAQ;IACjB,QAAQ,EAAE,KAAK;IACf,eAAe,EAAE,IAAI;IACrB,mBAAmB,EAAE,IAAI;IACzB,kBAAkB,EAAE,IAAI;IACxB,aAAa,EAAE,cAAc;CACrB,CAAC;AAEX;;;;GAIG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,OAAO,EAAE,iBAAiB;IAC1B,QAAQ,EAAE,KAAK;IACf,eAAe,EAAE,IAAI;IACrB,mBAAmB,EAAE,IAAI;IACzB,kBAAkB,EAAE,IAAI;IACxB,aAAa,EAAE,uBAAuB;CAC9B,CAAC"}

package/dist/vtc/vetting/auto-grant/show/0.1/payload.d.ts

@@ -17,6 +17,20 @@ export interface VTCVettingAutoGrantShowResponsePayload {
 export type { AutoGrantStatus, AutoGrantSweep, Ext, GrantValiditySeconds, SweepMinutes };
 /** Trust Task type URI. */
 export declare const TYPE_URI: "https://trusttasks.org/spec/vtc/vetting/auto-grant/show/0.1";
+/**
+ * The earlier version of this specification that this one declares it
+ * extends (front matter `extends`, SPEC §5.2 "Declared extension"), or
+ * `null`. Only the direct declaration — follow the chain with
+ * `extendsChain` / `readForSpec`.
+ */
+export declare const EXTENDS: string | null;
+/**
+ * Why this version is deprecated, or `null` while it is current. A
+ * superseded or retired version is still supported, and is withdrawn from
+ * this package in a later scheduled batch (SPEC "Superseded and Withdrawn
+ * Versions").
+ */
+export declare const DEPRECATION: string | null;
 /** Stable alias for this specification's request payload shape. */
 export type Payload = VTCVettingAutoGrantShowPayload;
 /** Trust Task response type URI (request type URI + "#response"). */

package/dist/vtc/vetting/auto-grant/show/0.1/payload.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"payload.d.ts","sourceRoot":"","sources":["../../../../../../src/vtc/vetting/auto-grant/show/0.1/payload.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,GAAG,EAAE,oBAAoB,EAAE,YAAY,EAAE,MAAM,sCAAsC,CAAC;AAGrI;;GAEG;AACH,MAAM,WAAW,8BAA8B;IAC7C,GAAG,CAAC,EAAE,GAAG,CAAC;CACX;AACD,MAAM,WAAW,sCAAsC;IACrD,SAAS,EAAE,eAAe,CAAC;IAC3B,GAAG,CAAC,EAAE,GAAG,CAAC;CACX;AAED,kHAAkH;AAClH,YAAY,EAAE,eAAe,EAAE,cAAc,EAAE,GAAG,EAAE,oBAAoB,EAAE,YAAY,EAAE,CAAC;AAEzF,2BAA2B;AAC3B,eAAO,MAAM,QAAQ,EAAG,6DAAsE,CAAC;AAE/F,mEAAmE;AACnE,MAAM,MAAM,OAAO,GAAG,8BAA8B,CAAC;AAErD,qEAAqE;AACrE,eAAO,MAAM,iBAAiB,EAAG,sEAA+E,CAAC;AAEjH,4EAA4E;AAC5E,MAAM,MAAM,QAAQ,GAAG,sCAAsC,CAAC;AAE9D;;;;;;;;GAQG;AACH,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAmHjB,CAAC;AAEX,mEAAmE;AACnE,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA0G1B,CAAC;AAEX;;;;;GAKG;AACH,eAAO,MAAM,IAAI;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAOP,CAAC;AAEX;;;;GAIG;AACH,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAOhB,CAAC"}
+{"version":3,"file":"payload.d.ts","sourceRoot":"","sources":["../../../../../../src/vtc/vetting/auto-grant/show/0.1/payload.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,GAAG,EAAE,oBAAoB,EAAE,YAAY,EAAE,MAAM,sCAAsC,CAAC;AAGrI;;GAEG;AACH,MAAM,WAAW,8BAA8B;IAC7C,GAAG,CAAC,EAAE,GAAG,CAAC;CACX;AACD,MAAM,WAAW,sCAAsC;IACrD,SAAS,EAAE,eAAe,CAAC;IAC3B,GAAG,CAAC,EAAE,GAAG,CAAC;CACX;AAED,kHAAkH;AAClH,YAAY,EAAE,eAAe,EAAE,cAAc,EAAE,GAAG,EAAE,oBAAoB,EAAE,YAAY,EAAE,CAAC;AAEzF,2BAA2B;AAC3B,eAAO,MAAM,QAAQ,EAAG,6DAAsE,CAAC;AAE/F;;;;;GAKG;AACH,eAAO,MAAM,OAAO,EAAE,MAAM,GAAG,IAAW,CAAC;AAE3C;;;;;GAKG;AACH,eAAO,MAAM,WAAW,EAAE,MAAM,GAAG,IAAW,CAAC;AAE/C,mEAAmE;AACnE,MAAM,MAAM,OAAO,GAAG,8BAA8B,CAAC;AAErD,qEAAqE;AACrE,eAAO,MAAM,iBAAiB,EAAG,sEAA+E,CAAC;AAEjH,4EAA4E;AAC5E,MAAM,MAAM,QAAQ,GAAG,sCAAsC,CAAC;AAE9D;;;;;;;;GAQG;AACH,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAmHjB,CAAC;AAEX,mEAAmE;AACnE,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA0G1B,CAAC;AAEX;;;;;GAKG;AACH,eAAO,MAAM,IAAI;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAOP,CAAC;AAEX;;;;GAIG;AACH,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAOhB,CAAC"}