@openvtc/trust-tasks 0.27.6 → 0.27.7

package/dist/registry/record/query/0.3/payload.js

@@ -0,0 +1,299 @@
+/**
+ * Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
+ * Source: specs/registry/record/query/0.3/payload.schema.json
+ */
+/** Trust Task type URI. */
+export const TYPE_URI = "https://trusttasks.org/spec/registry/record/query/0.3";
+/**
+ * The earlier version of this specification that this one declares it
+ * extends (front matter `extends`, SPEC §5.2 "Declared extension"), or
+ * `null`. Only the direct declaration — follow the chain with
+ * `extendsChain` / `readForSpec`.
+ */
+export const EXTENDS = null;
+/**
+ * Why this version is deprecated, or `null` while it is current. A
+ * superseded or retired version is still supported, and is withdrawn from
+ * this package in a later scheduled batch (SPEC "Superseded and Withdrawn
+ * Versions").
+ */
+export const DEPRECATION = null;
+/** Trust Task response type URI (request type URI + "#response"). */
+export const RESPONSE_TYPE_URI = "https://trusttasks.org/spec/registry/record/query/0.3#response";
+/**
+ * This specification's payload schema, as a value.
+ *
+ * SPEC.md §7.2 item 2 is performed against this. It is shipped as data
+ * rather than only as a `.json` file because TypeScript types are erased
+ * at runtime: without a schema a consumer has nothing to validate, and
+ * every REQUIRED payload member is optional in practice. Cross-file
+ * `$ref`s are already inlined, so it needs no resolver.
+ */
+export const PAYLOAD_SCHEMA = {
+    "$schema": "https://json-schema.org/draft/2020-12/schema",
+    "$id": "https://trusttasks.org/spec/registry/record/query/0.3",
+    "title": "Registry Record Query — payload",
+    "description": "An administrator queries a trust registry's stored records by an optional four-part key. All four parts supplied: an exact fetch of one record (notFound on a miss). Fewer parts: a filtered, cursor-paginated enumeration — fixing the pagination gap the superseded registry/record/list conceded. Members are lowerCamelCase, as throughout the registry/* family.",
+    "type": "object",
+    "additionalProperties": false,
+    "properties": {
+        "entityId": {
+            "type": "string",
+            "description": "Filter to records for this entity."
+        },
+        "authorityId": {
+            "type": "string",
+            "description": "Filter to records asserted by this authority."
+        },
+        "action": {
+            "type": "string",
+            "description": "Filter to records for this action."
+        },
+        "resource": {
+            "type": "string",
+            "description": "Filter to records for this resource."
+        },
+        "cursor": {
+            "type": "string",
+            "description": "Opaque continuation token from a previous page's `nextCursor`."
+        },
+        "limit": {
+            "type": "integer",
+            "minimum": 1,
+            "maximum": 200,
+            "description": "Page size; the registry clamps to 1..=200 (default 50). Ignored on a fully keyed exact fetch."
+        },
+        "ext": {
+            "$ref": "#/$defs/Ext"
+        }
+    },
+    "$defs": {
+        "Response": {
+            "$anchor": "response",
+            "title": "Registry Record Query — response payload",
+            "type": "object",
+            "additionalProperties": false,
+            "required": [
+                "records"
+            ],
+            "properties": {
+                "records": {
+                    "type": "array",
+                    "description": "The matching trust records. Exactly one entry on a fully keyed fetch; zero or more per page on an enumeration.",
+                    "items": {
+                        "$ref": "#/$defs/TrustRecord"
+                    }
+                },
+                "nextCursor": {
+                    "type": "string",
+                    "description": "Continuation token for the next page; pass it back as the request's `cursor`. Absent on the last page and on a fully keyed fetch — never null."
+                },
+                "ext": {
+                    "$ref": "#/$defs/Ext"
+                }
+            }
+        },
+        "Ext": {
+            "title": "Ext",
+            "description": "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.",
+            "type": "object",
+            "minProperties": 1,
+            "additionalProperties": true,
+            "propertyNames": {
+                "pattern": "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$"
+            }
+        },
+        "TrustRecord": {
+            "title": "TrustRecord",
+            "type": "object",
+            "additionalProperties": false,
+            "required": [
+                "entityId",
+                "authorityId",
+                "action",
+                "resource",
+                "recordType"
+            ],
+            "properties": {
+                "entityId": {
+                    "type": "string"
+                },
+                "authorityId": {
+                    "type": "string"
+                },
+                "action": {
+                    "type": "string"
+                },
+                "resource": {
+                    "type": "string"
+                },
+                "recognized": {
+                    "type": "boolean",
+                    "description": "Present on recognition records: whether the action+resource is recognised."
+                },
+                "authorized": {
+                    "type": "boolean",
+                    "description": "Present on authorization records: whether the action+resource authorization is confirmed."
+                },
+                "context": {
+                    "type": "object",
+                    "description": "Opaque governance context attached to the record.",
+                    "additionalProperties": true
+                },
+                "recordType": {
+                    "$ref": "#/$defs/RecordType"
+                },
+                "validFrom": {
+                    "type": "string",
+                    "format": "date-time",
+                    "description": "The first instant at which the authority statement holds (inclusive). Absent: no lower bound."
+                },
+                "validUntil": {
+                    "type": "string",
+                    "format": "date-time",
+                    "description": "The instant at which the authority statement stops holding (exclusive). Absent: no upper bound. When both bounds are present, `validFrom` MUST be earlier than `validUntil`."
+                }
+            }
+        },
+        "RecordType": {
+            "title": "RecordType",
+            "type": "string",
+            "enum": [
+                "authorization",
+                "recognition"
+            ],
+            "description": "Whether the record asserts an authorization or a recognition relationship."
+        }
+    }
+};
+/** As {@link PAYLOAD_SCHEMA}, for the success-response variant. */
+export const RESPONSE_PAYLOAD_SCHEMA = {
+    "$schema": "https://json-schema.org/draft/2020-12/schema",
+    "$ref": "#/$defs/Response",
+    "$defs": {
+        "Response": {
+            "$anchor": "response",
+            "title": "Registry Record Query — response payload",
+            "type": "object",
+            "additionalProperties": false,
+            "required": [
+                "records"
+            ],
+            "properties": {
+                "records": {
+                    "type": "array",
+                    "description": "The matching trust records. Exactly one entry on a fully keyed fetch; zero or more per page on an enumeration.",
+                    "items": {
+                        "$ref": "#/$defs/TrustRecord"
+                    }
+                },
+                "nextCursor": {
+                    "type": "string",
+                    "description": "Continuation token for the next page; pass it back as the request's `cursor`. Absent on the last page and on a fully keyed fetch — never null."
+                },
+                "ext": {
+                    "$ref": "#/$defs/Ext"
+                }
+            }
+        },
+        "Ext": {
+            "title": "Ext",
+            "description": "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.",
+            "type": "object",
+            "minProperties": 1,
+            "additionalProperties": true,
+            "propertyNames": {
+                "pattern": "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$"
+            }
+        },
+        "TrustRecord": {
+            "title": "TrustRecord",
+            "type": "object",
+            "additionalProperties": false,
+            "required": [
+                "entityId",
+                "authorityId",
+                "action",
+                "resource",
+                "recordType"
+            ],
+            "properties": {
+                "entityId": {
+                    "type": "string"
+                },
+                "authorityId": {
+                    "type": "string"
+                },
+                "action": {
+                    "type": "string"
+                },
+                "resource": {
+                    "type": "string"
+                },
+                "recognized": {
+                    "type": "boolean",
+                    "description": "Present on recognition records: whether the action+resource is recognised."
+                },
+                "authorized": {
+                    "type": "boolean",
+                    "description": "Present on authorization records: whether the action+resource authorization is confirmed."
+                },
+                "context": {
+                    "type": "object",
+                    "description": "Opaque governance context attached to the record.",
+                    "additionalProperties": true
+                },
+                "recordType": {
+                    "$ref": "#/$defs/RecordType"
+                },
+                "validFrom": {
+                    "type": "string",
+                    "format": "date-time",
+                    "description": "The first instant at which the authority statement holds (inclusive). Absent: no lower bound."
+                },
+                "validUntil": {
+                    "type": "string",
+                    "format": "date-time",
+                    "description": "The instant at which the authority statement stops holding (exclusive). Absent: no upper bound. When both bounds are present, `validFrom` MUST be earlier than `validUntil`."
+                }
+            }
+        },
+        "RecordType": {
+            "title": "RecordType",
+            "type": "string",
+            "enum": [
+                "authorization",
+                "recognition"
+            ],
+            "description": "Whether the record asserts an authorization or a recognition relationship."
+        }
+    }
+};
+/**
+ * SPEC.md §7.2 policy for the request variant, from this specification's
+ * front matter. Pass to `consumeInbound` — items 5b, 7 and 8 are
+ * per-specification and cannot be derived from the document alone, and
+ * item 2 needs the schema this carries.
+ */
+export const SPEC = {
+    typeUri: TYPE_URI,
+    isBearer: false,
+    isProofRequired: false,
+    isRecipientRequired: true,
+    isIssuedAtRequired: false,
+    payloadSchema: PAYLOAD_SCHEMA,
+};
+/**
+ * SPEC.md §7.2 policy for the success-response variant. `isRecipientRequired`
+ * tracks the *issuer* party's requirement because a response swaps the
+ * parties (§7.3 item 5).
+ */
+export const RESPONSE_SPEC = {
+    typeUri: RESPONSE_TYPE_URI,
+    isBearer: false,
+    isProofRequired: false,
+    isRecipientRequired: true,
+    isIssuedAtRequired: false,
+    payloadSchema: RESPONSE_PAYLOAD_SCHEMA,
+};
+//# sourceMappingURL=payload.js.map

package/dist/registry/record/query/0.3/payload.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"payload.js","sourceRoot":"","sources":["../../../../../src/registry/record/query/0.3/payload.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAkDH,2BAA2B;AAC3B,MAAM,CAAC,MAAM,QAAQ,GAAG,uDAAgE,CAAC;AAEzF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,OAAO,GAAkB,IAAI,CAAC;AAE3C;;;;;GAKG;AACH,MAAM,CAAC,MAAM,WAAW,GAAkB,IAAI,CAAC;AAK/C,qEAAqE;AACrE,MAAM,CAAC,MAAM,iBAAiB,GAAG,gEAAyE,CAAC;AAK3G;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,SAAS,EAAE,8CAA8C;IACzD,KAAK,EAAE,uDAAuD;IAC9D,OAAO,EAAE,iCAAiC;IAC1C,aAAa,EAAE,uWAAuW;IACtX,MAAM,EAAE,QAAQ;IAChB,sBAAsB,EAAE,KAAK;IAC7B,YAAY,EAAE;QACZ,UAAU,EAAE;YACV,MAAM,EAAE,QAAQ;YAChB,aAAa,EAAE,oCAAoC;SACpD;QACD,aAAa,EAAE;YACb,MAAM,EAAE,QAAQ;YAChB,aAAa,EAAE,+CAA+C;SAC/D;QACD,QAAQ,EAAE;YACR,MAAM,EAAE,QAAQ;YAChB,aAAa,EAAE,oCAAoC;SACpD;QACD,UAAU,EAAE;YACV,MAAM,EAAE,QAAQ;YAChB,aAAa,EAAE,sCAAsC;SACtD;QACD,QAAQ,EAAE;YACR,MAAM,EAAE,QAAQ;YAChB,aAAa,EAAE,gEAAgE;SAChF;QACD,OAAO,EAAE;YACP,MAAM,EAAE,SAAS;YACjB,SAAS,EAAE,CAAC;YACZ,SAAS,EAAE,GAAG;YACd,aAAa,EAAE,+FAA+F;SAC/G;QACD,KAAK,EAAE;YACL,MAAM,EAAE,aAAa;SACtB;KACF;IACD,OAAO,EAAE;QACP,UAAU,EAAE;YACV,SAAS,EAAE,UAAU;YACrB,OAAO,EAAE,0CAA0C;YACnD,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,SAAS;aACV;YACD,YAAY,EAAE;gBACZ,SAAS,EAAE;oBACT,MAAM,EAAE,OAAO;oBACf,aAAa,EAAE,gHAAgH;oBAC/H,OAAO,EAAE;wBACP,MAAM,EAAE,qBAAqB;qBAC9B;iBACF;gBACD,YAAY,EAAE;oBACZ,MAAM,EAAE,QAAQ;oBAChB,aAAa,EAAE,gJAAgJ;iBAChK;gBACD,KAAK,EAAE;oBACL,MAAM,EAAE,aAAa;iBACtB;aACF;SACF;QACD,KAAK,EAAE;YACL,OAAO,EAAE,KAAK;YACd,aAAa,EAAE,uKAAuK;YACtL,MAAM,EAAE,QAAQ;YAChB,eAAe,EAAE,CAAC;YAClB,sBAAsB,EAAE,IAAI;YAC5B,eAAe,EAAE;gBACf,SAAS,EAAE,mCAAmC;aAC/C;SACF;QACD,aAAa,EAAE;YACb,OAAO,EAAE,aAAa;YACtB,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,UAAU;gBACV,aAAa;gBACb,QAAQ;gBACR,UAAU;gBACV,YAAY;aACb;YACD,YAAY,EAAE;gBACZ,UAAU,EAAE;oBACV,MAAM,EAAE,QAAQ;iBACjB;gBACD,aAAa,EAAE;oBACb,MAAM,EAAE,QAAQ;iBACjB;gBACD,QAAQ,EAAE;oBACR,MAAM,EAAE,QAAQ;iBACjB;gBACD,UAAU,EAAE;oBACV,MAAM,EAAE,QAAQ;iBACjB;gBACD,YAAY,EAAE;oBACZ,MAAM,EAAE,SAAS;oBACjB,aAAa,EAAE,4EAA4E;iBAC5F;gBACD,YAAY,EAAE;oBACZ,MAAM,EAAE,SAAS;oBACjB,aAAa,EAAE,2FAA2F;iBAC3G;gBACD,SAAS,EAAE;oBACT,MAAM,EAAE,QAAQ;oBAChB,aAAa,EAAE,mDAAmD;oBAClE,sBAAsB,EAAE,IAAI;iBAC7B;gBACD,YAAY,EAAE;oBACZ,MAAM,EAAE,oBAAoB;iBAC7B;gBACD,WAAW,EAAE;oBACX,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,WAAW;oBACrB,aAAa,EAAE,+FAA+F;iBAC/G;gBACD,YAAY,EAAE;oBACZ,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,WAAW;oBACrB,aAAa,EAAE,8KAA8K;iBAC9L;aACF;SACF;QACD,YAAY,EAAE;YACZ,OAAO,EAAE,YAAY;YACrB,MAAM,EAAE,QAAQ;YAChB,MAAM,EAAE;gBACN,eAAe;gBACf,aAAa;aACd;YACD,aAAa,EAAE,4EAA4E;SAC5F;KACF;CACO,CAAC;AAEX,mEAAmE;AACnE,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,SAAS,EAAE,8CAA8C;IACzD,MAAM,EAAE,kBAAkB;IAC1B,OAAO,EAAE;QACP,UAAU,EAAE;YACV,SAAS,EAAE,UAAU;YACrB,OAAO,EAAE,0CAA0C;YACnD,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,SAAS;aACV;YACD,YAAY,EAAE;gBACZ,SAAS,EAAE;oBACT,MAAM,EAAE,OAAO;oBACf,aAAa,EAAE,gHAAgH;oBAC/H,OAAO,EAAE;wBACP,MAAM,EAAE,qBAAqB;qBAC9B;iBACF;gBACD,YAAY,EAAE;oBACZ,MAAM,EAAE,QAAQ;oBAChB,aAAa,EAAE,gJAAgJ;iBAChK;gBACD,KAAK,EAAE;oBACL,MAAM,EAAE,aAAa;iBACtB;aACF;SACF;QACD,KAAK,EAAE;YACL,OAAO,EAAE,KAAK;YACd,aAAa,EAAE,uKAAuK;YACtL,MAAM,EAAE,QAAQ;YAChB,eAAe,EAAE,CAAC;YAClB,sBAAsB,EAAE,IAAI;YAC5B,eAAe,EAAE;gBACf,SAAS,EAAE,mCAAmC;aAC/C;SACF;QACD,aAAa,EAAE;YACb,OAAO,EAAE,aAAa;YACtB,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,UAAU;gBACV,aAAa;gBACb,QAAQ;gBACR,UAAU;gBACV,YAAY;aACb;YACD,YAAY,EAAE;gBACZ,UAAU,EAAE;oBACV,MAAM,EAAE,QAAQ;iBACjB;gBACD,aAAa,EAAE;oBACb,MAAM,EAAE,QAAQ;iBACjB;gBACD,QAAQ,EAAE;oBACR,MAAM,EAAE,QAAQ;iBACjB;gBACD,UAAU,EAAE;oBACV,MAAM,EAAE,QAAQ;iBACjB;gBACD,YAAY,EAAE;oBACZ,MAAM,EAAE,SAAS;oBACjB,aAAa,EAAE,4EAA4E;iBAC5F;gBACD,YAAY,EAAE;oBACZ,MAAM,EAAE,SAAS;oBACjB,aAAa,EAAE,2FAA2F;iBAC3G;gBACD,SAAS,EAAE;oBACT,MAAM,EAAE,QAAQ;oBAChB,aAAa,EAAE,mDAAmD;oBAClE,sBAAsB,EAAE,IAAI;iBAC7B;gBACD,YAAY,EAAE;oBACZ,MAAM,EAAE,oBAAoB;iBAC7B;gBACD,WAAW,EAAE;oBACX,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,WAAW;oBACrB,aAAa,EAAE,+FAA+F;iBAC/G;gBACD,YAAY,EAAE;oBACZ,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,WAAW;oBACrB,aAAa,EAAE,8KAA8K;iBAC9L;aACF;SACF;QACD,YAAY,EAAE;YACZ,OAAO,EAAE,YAAY;YACrB,MAAM,EAAE,QAAQ;YAChB,MAAM,EAAE;gBACN,eAAe;gBACf,aAAa;aACd;YACD,aAAa,EAAE,4EAA4E;SAC5F;KACF;CACO,CAAC;AAEX;;;;;GAKG;AACH,MAAM,CAAC,MAAM,IAAI,GAAG;IAClB,OAAO,EAAE,QAAQ;IACjB,QAAQ,EAAE,KAAK;IACf,eAAe,EAAE,KAAK;IACtB,mBAAmB,EAAE,IAAI;IACzB,kBAAkB,EAAE,KAAK;IACzB,aAAa,EAAE,cAAc;CACrB,CAAC;AAEX;;;;GAIG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,OAAO,EAAE,iBAAiB;IAC1B,QAAQ,EAAE,KAAK;IACf,eAAe,EAAE,KAAK;IACtB,mBAAmB,EAAE,IAAI;IACzB,kBAAkB,EAAE,KAAK;IACzB,aAAa,EAAE,uBAAuB;CAC9B,CAAC"}

package/dist/registry/record/read/0.1/payload.d.ts

@@ -6,7 +6,7 @@ import type { Ext, RecordType } from "../../../../_shared/components.js";
 /**
  * An administrator reads the full trust record identified by the four TRQP identifiers (both the recognized and authorized facets, unlike the filtered TRQP query responses).
  *
- * @deprecated retired; use registry/record/query/0.2
+ * @deprecated retired; use registry/record/query/0.3
  */
 export interface RegistryRecordReadPayload {
     entity_id: string;
@@ -15,7 +15,7 @@ export interface RegistryRecordReadPayload {
     resource: string;
     ext?: Ext;
 }
-/** @deprecated retired; use registry/record/query/0.2 */
+/** @deprecated retired; use registry/record/query/0.3 */
 export interface RegistryRecordReadResponsePayloadATrustRecord {
     entity_id: string;
     authority_id: string;
@@ -49,7 +49,7 @@ export declare const DEPRECATION: string | null;
 /**
  * Stable alias for this specification's request payload shape.
  *
- * @deprecated retired; use registry/record/query/0.2
+ * @deprecated retired; use registry/record/query/0.3
  */
 export type Payload = RegistryRecordReadPayload;
 /** Trust Task response type URI (request type URI + "#response"). */
@@ -57,7 +57,7 @@ export declare const RESPONSE_TYPE_URI: "https://trusttasks.org/spec/registry/re
 /**
  * Stable alias for this specification's success-response payload shape.
  *
- * @deprecated retired; use registry/record/query/0.2
+ * @deprecated retired; use registry/record/query/0.3
  */
 export type Response = RegistryRecordReadResponsePayloadATrustRecord;
 /**

package/dist/registry/record/read/0.1/payload.js

@@ -17,7 +17,7 @@ export const EXTENDS = null;
  * this package in a later scheduled batch (SPEC "Superseded and Withdrawn
  * Versions").
  */
-export const DEPRECATION = "retired; use registry/record/query/0.2";
+export const DEPRECATION = "retired; use registry/record/query/0.3";
 /** Trust Task response type URI (request type URI + "#response"). */
 export const RESPONSE_TYPE_URI = "https://trusttasks.org/spec/registry/record/read/0.1#response";
 /**

package/dist/registry/record/update/0.1/payload.d.ts

@@ -6,13 +6,13 @@ import type { Ext, RecordType, TrustRecord } from "../../../../_shared/component
 /**
  * An administrator asks a trust registry to update an existing trust record. The record key (entity+authority+action+resource) must already exist.
  *
- * @deprecated retired; use registry/record/put/0.2
+ * @deprecated retired; use registry/record/put/0.3
  */
 export interface RegistryRecordUpdatePayload {
     record: TrustRecord;
     ext?: Ext;
 }
-/** @deprecated retired; use registry/record/put/0.2 */
+/** @deprecated retired; use registry/record/put/0.3 */
 export interface RegistryRecordUpdateResponsePayload {
     /**
      * Whether the record was updated.
@@ -45,7 +45,7 @@ export declare const DEPRECATION: string | null;
 /**
  * Stable alias for this specification's request payload shape.
  *
- * @deprecated retired; use registry/record/put/0.2
+ * @deprecated retired; use registry/record/put/0.3
  */
 export type Payload = RegistryRecordUpdatePayload;
 /** Trust Task response type URI (request type URI + "#response"). */
@@ -53,7 +53,7 @@ export declare const RESPONSE_TYPE_URI: "https://trusttasks.org/spec/registry/re
 /**
  * Stable alias for this specification's success-response payload shape.
  *
- * @deprecated retired; use registry/record/put/0.2
+ * @deprecated retired; use registry/record/put/0.3
  */
 export type Response = RegistryRecordUpdateResponsePayload;
 /**

package/dist/registry/record/update/0.1/payload.js

@@ -17,7 +17,7 @@ export const EXTENDS = null;
  * this package in a later scheduled batch (SPEC "Superseded and Withdrawn
  * Versions").
  */
-export const DEPRECATION = "retired; use registry/record/put/0.2";
+export const DEPRECATION = "retired; use registry/record/put/0.3";
 /** Trust Task response type URI (request type URI + "#response"). */
 export const RESPONSE_TYPE_URI = "https://trusttasks.org/spec/registry/record/update/0.1#response";
 /**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openvtc/trust-tasks",
-  "version": "0.27.6",
+  "version": "0.27.7",
   "description": "Generated TypeScript bindings for the Trust Tasks framework registry.",
   "type": "module",
   "main": "./dist/index.js",

package/src/_runtime/consume.ts

@@ -10,7 +10,7 @@
  * ```ts
  * import {
  *   consequentialChecks, consumeInbound, InMemoryReplayGuard,
- *   StaticTransport, AclGrant_v0_1,
+ *   StaticTransport, AclGrant_v0_2,
  * } from "@openvtc/trust-tasks";
  *
  * // One guard per consumer, not one per document: it *is* the record.
@@ -18,7 +18,7 @@
  *
  * const outcome = await consumeInbound({
  *   transport,
- *   spec: AclGrant_v0_1.SPEC,
+ *   spec: AclGrant_v0_2.SPEC,
  *   proofPolicy: { kind: "verify", verify: myVerifier },
  *   // ajv, or whatever validator you already run — see PayloadPolicy.
  *   payloadPolicy: { kind: "validate", validate: myValidator },

package/src/_shared/components.ts

@@ -12761,6 +12761,35 @@ export interface TrustRecord {
   };
   record_type: RecordType;
 }
+export interface TrustRecord_RegistryV0_2 {
+  entityId: string;
+  authorityId: string;
+  action: string;
+  resource: string;
+  /**
+   * Present on recognition records: whether the action+resource is recognised.
+   */
+  recognized?: boolean;
+  /**
+   * Present on authorization records: whether the action+resource authorization is confirmed.
+   */
+  authorized?: boolean;
+  /**
+   * Opaque governance context attached to the record.
+   */
+  context?: {
+    [k: string]: unknown | undefined;
+  };
+  recordType: RecordType;
+  /**
+   * The first instant at which the authority statement holds (inclusive). Absent: no lower bound.
+   */
+  validFrom?: string;
+  /**
+   * The instant at which the authority statement stops holding (exclusive). Absent: no upper bound. When both bounds are present, `validFrom` MUST be earlier than `validUntil`.
+   */
+  validUntil?: string;
+}
 /**
  * The trustees of a sealed or tallied-encrypted election and the number of them decryption needs (VTI-VOT-062). Neither the community nor the ballot box may be one.
  */

package/src/index.ts

@@ -517,16 +517,23 @@ export * as PushRegister_v0_2 from "./push/register/0.2/payload.js";
 export * as PushWake_v0_1 from "./push/wake/0.1/payload.js";
 export * as PushWake_v0_2 from "./push/wake/0.2/payload.js";
 export * as RegistryShared_v0_1 from "./registry/_shared/0.1/registry.js";
+export * as RegistryShared_v0_2 from "./registry/_shared/0.2/registry.js";
 export * as RegistryAuthorization_v0_1 from "./registry/authorization/0.1/payload.js";
+export * as RegistryAuthorization_v0_2 from "./registry/authorization/0.2/payload.js";
 export * as RegistryDidRotate_v0_1 from "./registry/did/rotate/0.1/payload.js";
+export * as RegistryDidRotate_v0_2 from "./registry/did/rotate/0.2/payload.js";
 export * as RegistryRecognition_v0_1 from "./registry/recognition/0.1/payload.js";
+export * as RegistryRecognition_v0_2 from "./registry/recognition/0.2/payload.js";
 export * as RegistryRecordCreate_v0_1 from "./registry/record/create/0.1/payload.js";
 export * as RegistryRecordDelete_v0_1 from "./registry/record/delete/0.1/payload.js";
+export * as RegistryRecordDelete_v0_2 from "./registry/record/delete/0.2/payload.js";
 export * as RegistryRecordList_v0_1 from "./registry/record/list/0.1/payload.js";
 export * as RegistryRecordPut_v0_1 from "./registry/record/put/0.1/payload.js";
 export * as RegistryRecordPut_v0_2 from "./registry/record/put/0.2/payload.js";
+export * as RegistryRecordPut_v0_3 from "./registry/record/put/0.3/payload.js";
 export * as RegistryRecordQuery_v0_1 from "./registry/record/query/0.1/payload.js";
 export * as RegistryRecordQuery_v0_2 from "./registry/record/query/0.2/payload.js";
+export * as RegistryRecordQuery_v0_3 from "./registry/record/query/0.3/payload.js";
 export * as RegistryRecordRead_v0_1 from "./registry/record/read/0.1/payload.js";
 export * as RegistryRecordUpdate_v0_1 from "./registry/record/update/0.1/payload.js";
 export * as BlobsShared_v0_1 from "./rooms/_shared/0.1/blobs.js";

package/src/registry/_shared/0.2/registry.ts

@@ -0,0 +1,17 @@
+/**
+ * Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
+ * Source: specs/registry/_shared/0.2/registry.schema.json
+ */
+
+/**
+ * Canonical $defs referenced by every registry/* specification: the query context, the trust record, and the mutation acknowledgement. Not itself a Trust Task specification (the `_shared` folder is skipped by the registry build and the codegen). Members are lowerCamelCase per the registry naming convention. The query tuple and responses carry the same information as the ToIP Trust Registry Query Protocol (TRQP) v2.0 JSON schemas; a registry that also serves the plain HTTP TRQP binding maps the member names to TRQP's snake_case at that binding. 0.2 renames the 0.1 snake_case members and adds the optional `validFrom`/`validUntil` validity window to `TrustRecord`.
+ */
+export interface SharedDefinitionsForTheRegistrySpecFamily {
+  [k: string]: unknown | undefined;
+}
+
+/**
+ * The definitions this shared schema publishes, hoisted to one declaration each.
+ * See "../../../_shared/components.js".
+ */
+export type { QueryContext, RecordType, TrustRecord_RegistryV0_2 as TrustRecord } from "../../../_shared/components.js";

package/src/registry/authorization/0.1/payload.ts

@@ -8,6 +8,8 @@ import type { Ext, QueryContext } from "../../../_shared/components.js";
 
 /**
  * TRQP v2.0 authorization query: ask a trust registry whether an entity is authorized by an authority for a given action+resource. Field names are verbatim from the TRQP authorization request/response schemas so the same payload serves the plain HTTP TRQP binding and the Trust Task binding.
+ *
+ * @deprecated superseded by registry/authorization/0.2
  */
 export interface RegistryAuthorizationPayload {
   /**
@@ -29,6 +31,7 @@ export interface RegistryAuthorizationPayload {
   context?: QueryContext;
   ext?: Ext;
 }
+/** @deprecated superseded by registry/authorization/0.2 */
 export interface RegistryAuthorizationResponsePayload {
   entity_id: string;
   authority_id: string;
@@ -74,15 +77,23 @@ export const EXTENDS: string | null = null;
  * this package in a later scheduled batch (SPEC "Superseded and Withdrawn
  * Versions").
  */
-export const DEPRECATION: string | null = null;
+export const DEPRECATION: string | null = "superseded by registry/authorization/0.2";
 
-/** Stable alias for this specification's request payload shape. */
+/**
+ * Stable alias for this specification's request payload shape.
+ *
+ * @deprecated superseded by registry/authorization/0.2
+ */
 export type Payload = RegistryAuthorizationPayload;
 
 /** Trust Task response type URI (request type URI + "#response"). */
 export const RESPONSE_TYPE_URI = "https://trusttasks.org/spec/registry/authorization/0.1#response" as const;
 
-/** Stable alias for this specification's success-response payload shape. */
+/**
+ * Stable alias for this specification's success-response payload shape.
+ *
+ * @deprecated superseded by registry/authorization/0.2
+ */
 export type Response = RegistryAuthorizationResponsePayload;
 
 /**