@openvtc/trust-tasks 0.27.8 → 0.28.0

package/src/policy/_shared/0.4/policy.ts

@@ -0,0 +1,17 @@
+/**
+ * Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
+ * Source: specs/policy/_shared/0.4/policy.schema.json
+ */
+
+/**
+ * Shared Rego policy types referenced by the policy/* spec family. The maintainer evaluates these against PolicyInput (the request context) to decide the disposition of a task. 0.3 generalises PolicyInput from the vault-flow triad (proxy-login / release / step-up) to any Trust Task, carrying the task's Type URI, subject, and the two authoritative SPEC §7.3 classifications (side-effect and exposure) so a policy can gate on what a task does; and adds a `requireConsent` decision so a policy can demand approver-set consent. Engine: embedded Rego via `regorus` (pure-Rust evaluator) in the canonical maintainer implementation; other implementations MAY use a different engine if they accept the same Rego syntax. 0.4 makes `requireConsent.minApprovals` and `requireConsent.excludeRequester` required and drops their defaults (SPEC §6.6 rule 5: a shared component supplies no governance default). 0.3 defaulted them to 1 and false, so a decision that omitted either sent a quorum of one, or let the requester approve itself, with nothing on the wire to show it.
+ */
+export interface PolicySharedDefinitions {
+  [k: string]: unknown | undefined;
+}
+
+/**
+ * The definitions this shared schema publishes, hoisted to one declaration each.
+ * See "../../../_shared/components.js".
+ */
+export type { PolicyDecision_PolicyV0_4 as PolicyDecision, PolicyInput_PolicyV0_3 as PolicyInput } from "../../../_shared/components.js";

package/src/policy/evaluate/0.1/payload.ts

@@ -9,7 +9,7 @@ import type { AndroidApp_VaultV0_1 as AndroidApp, Companion_DeviceV0_1 as Compan
 /**
  * Dry-run a policy decision against a synthetic PolicyInput. Returns the policy decision plus a trace of which policy modules matched and which rules fired. Used by the policy-editor UI to verify changes before save and by admins to diagnose unexpected deny/allow outcomes.
  *
- * @deprecated superseded by policy/evaluate/0.3
+ * @deprecated superseded by policy/evaluate/0.4
  */
 export interface PolicyEvaluatePayload {
   input: PolicyInput;
@@ -21,7 +21,7 @@ export interface PolicyEvaluatePayload {
   includeTrace?: boolean;
   ext?: Ext;
 }
-/** @deprecated superseded by policy/evaluate/0.3 */
+/** @deprecated superseded by policy/evaluate/0.4 */
 export interface PolicyEvaluateResponsePayload {
   decision: PolicyDecision;
   /**
@@ -55,12 +55,12 @@ export const EXTENDS: string | null = null;
  * this package in a later scheduled batch (SPEC "Superseded and Withdrawn
  * Versions").
  */
-export const DEPRECATION: string | null = "superseded by policy/evaluate/0.3";
+export const DEPRECATION: string | null = "superseded by policy/evaluate/0.4";
 
 /**
  * Stable alias for this specification's request payload shape.
  *
- * @deprecated superseded by policy/evaluate/0.3
+ * @deprecated superseded by policy/evaluate/0.4
  */
 export type Payload = PolicyEvaluatePayload;
 
@@ -70,7 +70,7 @@ export const RESPONSE_TYPE_URI = "https://trusttasks.org/spec/policy/evaluate/0.
 /**
  * Stable alias for this specification's success-response payload shape.
  *
- * @deprecated superseded by policy/evaluate/0.3
+ * @deprecated superseded by policy/evaluate/0.4
  */
 export type Response = PolicyEvaluateResponsePayload;
 

package/src/policy/evaluate/0.2/payload.ts

@@ -9,7 +9,7 @@ import type { AndroidApp_VaultV0_2 as AndroidApp, Companion_DeviceV0_2 as Compan
 /**
  * Dry-run a policy decision against a synthetic PolicyInput. Returns the policy decision plus a trace of which policy modules matched and which rules fired. Used by the policy-editor UI to verify changes before save and by admins to diagnose unexpected deny/allow outcomes.
  *
- * @deprecated superseded by policy/evaluate/0.3
+ * @deprecated superseded by policy/evaluate/0.4
  */
 export interface PolicyEvaluatePayload {
   input: PolicyInput;
@@ -21,7 +21,7 @@ export interface PolicyEvaluatePayload {
   includeTrace?: boolean;
   ext?: Ext;
 }
-/** @deprecated superseded by policy/evaluate/0.3 */
+/** @deprecated superseded by policy/evaluate/0.4 */
 export interface PolicyEvaluateResponsePayload {
   decision: PolicyDecision;
   /**
@@ -55,12 +55,12 @@ export const EXTENDS: string | null = null;
  * this package in a later scheduled batch (SPEC "Superseded and Withdrawn
  * Versions").
  */
-export const DEPRECATION: string | null = "superseded by policy/evaluate/0.3";
+export const DEPRECATION: string | null = "superseded by policy/evaluate/0.4";
 
 /**
  * Stable alias for this specification's request payload shape.
  *
- * @deprecated superseded by policy/evaluate/0.3
+ * @deprecated superseded by policy/evaluate/0.4
  */
 export type Payload = PolicyEvaluatePayload;
 
@@ -70,7 +70,7 @@ export const RESPONSE_TYPE_URI = "https://trusttasks.org/spec/policy/evaluate/0.
 /**
  * Stable alias for this specification's success-response payload shape.
  *
- * @deprecated superseded by policy/evaluate/0.3
+ * @deprecated superseded by policy/evaluate/0.4
  */
 export type Response = PolicyEvaluateResponsePayload;
 

package/src/policy/evaluate/0.3/payload.ts

@@ -8,6 +8,8 @@ import type { AndroidApp_VaultV0_2 as AndroidApp, Companion_DeviceV0_2 as Compan
 
 /**
  * Dry-run a policy decision against a synthetic PolicyInput. Returns the policy decision plus a trace of which policy modules matched and which rules fired. Used by the policy-editor UI to verify changes before save and by admins to diagnose unexpected outcomes. 0.3 evaluates against the generalised PolicyInput (any Trust Task, carrying typeUri + side-effect/exposure classes) and can return the `requireConsent` decision.
+ *
+ * @deprecated superseded by policy/evaluate/0.4
  */
 export interface PolicyEvaluatePayload {
   input: PolicyInput;
@@ -19,6 +21,7 @@ export interface PolicyEvaluatePayload {
   includeTrace?: boolean;
   ext?: Ext;
 }
+/** @deprecated superseded by policy/evaluate/0.4 */
 export interface PolicyEvaluateResponsePayload {
   decision: PolicyDecision;
   /**
@@ -52,15 +55,23 @@ export const EXTENDS: string | null = null;
  * this package in a later scheduled batch (SPEC "Superseded and Withdrawn
  * Versions").
  */
-export const DEPRECATION: string | null = null;
+export const DEPRECATION: string | null = "superseded by policy/evaluate/0.4";
 
-/** Stable alias for this specification's request payload shape. */
+/**
+ * Stable alias for this specification's request payload shape.
+ *
+ * @deprecated superseded by policy/evaluate/0.4
+ */
 export type Payload = PolicyEvaluatePayload;
 
 /** Trust Task response type URI (request type URI + "#response"). */
 export const RESPONSE_TYPE_URI = "https://trusttasks.org/spec/policy/evaluate/0.3#response" as const;
 
-/** Stable alias for this specification's success-response payload shape. */
+/**
+ * Stable alias for this specification's success-response payload shape.
+ *
+ * @deprecated superseded by policy/evaluate/0.4
+ */
 export type Response = PolicyEvaluateResponsePayload;
 
 /**