@openvtc/trust-tasks 0.27.9 → 0.28.0

package/src/index.ts

@@ -1444,6 +1444,9 @@ export import PolicyShared_v0_2 = _PolicyShared_v0_2;
 import * as _PolicyShared_v0_3 from "./policy/_shared/0.3/policy.js";
 /** @deprecated The prebuilt specification modules will be removed: pin the tasks you use with the `trust-tasks` CLI, generate them with `@openvtc/trust-tasks-gen`, and import the runtime from `@openvtc/trust-tasks/runtime` (GETTING-STARTED.md). */
 export import PolicyShared_v0_3 = _PolicyShared_v0_3;
+import * as _PolicyShared_v0_4 from "./policy/_shared/0.4/policy.js";
+/** @deprecated The prebuilt specification modules will be removed: pin the tasks you use with the `trust-tasks` CLI, generate them with `@openvtc/trust-tasks-gen`, and import the runtime from `@openvtc/trust-tasks/runtime` (GETTING-STARTED.md). */
+export import PolicyShared_v0_4 = _PolicyShared_v0_4;
 import * as _PolicyActivate_v0_1 from "./policy/activate/0.1/payload.js";
 /** @deprecated The prebuilt specification modules will be removed: pin the tasks you use with the `trust-tasks` CLI, generate them with `@openvtc/trust-tasks-gen`, and import the runtime from `@openvtc/trust-tasks/runtime` (GETTING-STARTED.md). */
 export import PolicyActivate_v0_1 = _PolicyActivate_v0_1;
@@ -1462,6 +1465,9 @@ export import PolicyEvaluate_v0_2 = _PolicyEvaluate_v0_2;
 import * as _PolicyEvaluate_v0_3 from "./policy/evaluate/0.3/payload.js";
 /** @deprecated The prebuilt specification modules will be removed: pin the tasks you use with the `trust-tasks` CLI, generate them with `@openvtc/trust-tasks-gen`, and import the runtime from `@openvtc/trust-tasks/runtime` (GETTING-STARTED.md). */
 export import PolicyEvaluate_v0_3 = _PolicyEvaluate_v0_3;
+import * as _PolicyEvaluate_v0_4 from "./policy/evaluate/0.4/payload.js";
+/** @deprecated The prebuilt specification modules will be removed: pin the tasks you use with the `trust-tasks` CLI, generate them with `@openvtc/trust-tasks-gen`, and import the runtime from `@openvtc/trust-tasks/runtime` (GETTING-STARTED.md). */
+export import PolicyEvaluate_v0_4 = _PolicyEvaluate_v0_4;
 import * as _PolicyGet_v0_1 from "./policy/get/0.1/payload.js";
 /** @deprecated The prebuilt specification modules will be removed: pin the tasks you use with the `trust-tasks` CLI, generate them with `@openvtc/trust-tasks-gen`, and import the runtime from `@openvtc/trust-tasks/runtime` (GETTING-STARTED.md). */
 export import PolicyGet_v0_1 = _PolicyGet_v0_1;
@@ -1904,6 +1910,7 @@ export * as TrustTaskError_v0_2 from "./trust-task-error/0.2/payload.js";
 export * as TrustTaskError_v0_3 from "./trust-task-error/0.3/payload.js";
 export * as TrustTaskError_v0_4 from "./trust-task-error/0.4/payload.js";
 export * as TrustTaskError_v0_5 from "./trust-task-error/0.5/payload.js";
+export * as TrustTaskError_v0_6 from "./trust-task-error/0.6/payload.js";
 export * as TrustTaskNextStep_v0_1 from "./trust-task-next-step/0.1/payload.js";
 export * as TrustTaskOk_v0_1 from "./trust-task-ok/0.1/payload.js";
 import * as _ConsumerContextShared_v0_1 from "./vault/_shared/0.1/consumer-context.js";

package/src/policy/_shared/0.4/policy.ts

@@ -0,0 +1,17 @@
+/**
+ * Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
+ * Source: specs/policy/_shared/0.4/policy.schema.json
+ */
+
+/**
+ * Shared Rego policy types referenced by the policy/* spec family. The maintainer evaluates these against PolicyInput (the request context) to decide the disposition of a task. 0.3 generalises PolicyInput from the vault-flow triad (proxy-login / release / step-up) to any Trust Task, carrying the task's Type URI, subject, and the two authoritative SPEC §7.3 classifications (side-effect and exposure) so a policy can gate on what a task does; and adds a `requireConsent` decision so a policy can demand approver-set consent. Engine: embedded Rego via `regorus` (pure-Rust evaluator) in the canonical maintainer implementation; other implementations MAY use a different engine if they accept the same Rego syntax. 0.4 makes `requireConsent.minApprovals` and `requireConsent.excludeRequester` required and drops their defaults (SPEC §6.6 rule 5: a shared component supplies no governance default). 0.3 defaulted them to 1 and false, so a decision that omitted either sent a quorum of one, or let the requester approve itself, with nothing on the wire to show it.
+ */
+export interface PolicySharedDefinitions {
+  [k: string]: unknown | undefined;
+}
+
+/**
+ * The definitions this shared schema publishes, hoisted to one declaration each.
+ * See "../../../_shared/components.js".
+ */
+export type { PolicyDecision_PolicyV0_4 as PolicyDecision, PolicyInput_PolicyV0_3 as PolicyInput } from "../../../_shared/components.js";

package/src/policy/evaluate/0.1/payload.ts

@@ -9,7 +9,7 @@ import type { AndroidApp_VaultV0_1 as AndroidApp, Companion_DeviceV0_1 as Compan
 /**
  * Dry-run a policy decision against a synthetic PolicyInput. Returns the policy decision plus a trace of which policy modules matched and which rules fired. Used by the policy-editor UI to verify changes before save and by admins to diagnose unexpected deny/allow outcomes.
  *
- * @deprecated superseded by policy/evaluate/0.3
+ * @deprecated superseded by policy/evaluate/0.4
  */
 export interface PolicyEvaluatePayload {
   input: PolicyInput;
@@ -21,7 +21,7 @@ export interface PolicyEvaluatePayload {
   includeTrace?: boolean;
   ext?: Ext;
 }
-/** @deprecated superseded by policy/evaluate/0.3 */
+/** @deprecated superseded by policy/evaluate/0.4 */
 export interface PolicyEvaluateResponsePayload {
   decision: PolicyDecision;
   /**
@@ -55,12 +55,12 @@ export const EXTENDS: string | null = null;
  * this package in a later scheduled batch (SPEC "Superseded and Withdrawn
  * Versions").
  */
-export const DEPRECATION: string | null = "superseded by policy/evaluate/0.3";
+export const DEPRECATION: string | null = "superseded by policy/evaluate/0.4";
 
 /**
  * Stable alias for this specification's request payload shape.
  *
- * @deprecated superseded by policy/evaluate/0.3
+ * @deprecated superseded by policy/evaluate/0.4
  */
 export type Payload = PolicyEvaluatePayload;
 
@@ -70,7 +70,7 @@ export const RESPONSE_TYPE_URI = "https://trusttasks.org/spec/policy/evaluate/0.
 /**
  * Stable alias for this specification's success-response payload shape.
  *
- * @deprecated superseded by policy/evaluate/0.3
+ * @deprecated superseded by policy/evaluate/0.4
  */
 export type Response = PolicyEvaluateResponsePayload;
 

package/src/policy/evaluate/0.2/payload.ts

@@ -9,7 +9,7 @@ import type { AndroidApp_VaultV0_2 as AndroidApp, Companion_DeviceV0_2 as Compan
 /**
  * Dry-run a policy decision against a synthetic PolicyInput. Returns the policy decision plus a trace of which policy modules matched and which rules fired. Used by the policy-editor UI to verify changes before save and by admins to diagnose unexpected deny/allow outcomes.
  *
- * @deprecated superseded by policy/evaluate/0.3
+ * @deprecated superseded by policy/evaluate/0.4
  */
 export interface PolicyEvaluatePayload {
   input: PolicyInput;
@@ -21,7 +21,7 @@ export interface PolicyEvaluatePayload {
   includeTrace?: boolean;
   ext?: Ext;
 }
-/** @deprecated superseded by policy/evaluate/0.3 */
+/** @deprecated superseded by policy/evaluate/0.4 */
 export interface PolicyEvaluateResponsePayload {
   decision: PolicyDecision;
   /**
@@ -55,12 +55,12 @@ export const EXTENDS: string | null = null;
  * this package in a later scheduled batch (SPEC "Superseded and Withdrawn
  * Versions").
  */
-export const DEPRECATION: string | null = "superseded by policy/evaluate/0.3";
+export const DEPRECATION: string | null = "superseded by policy/evaluate/0.4";
 
 /**
  * Stable alias for this specification's request payload shape.
  *
- * @deprecated superseded by policy/evaluate/0.3
+ * @deprecated superseded by policy/evaluate/0.4
  */
 export type Payload = PolicyEvaluatePayload;
 
@@ -70,7 +70,7 @@ export const RESPONSE_TYPE_URI = "https://trusttasks.org/spec/policy/evaluate/0.
 /**
  * Stable alias for this specification's success-response payload shape.
  *
- * @deprecated superseded by policy/evaluate/0.3
+ * @deprecated superseded by policy/evaluate/0.4
  */
 export type Response = PolicyEvaluateResponsePayload;
 

package/src/policy/evaluate/0.3/payload.ts

@@ -8,6 +8,8 @@ import type { AndroidApp_VaultV0_2 as AndroidApp, Companion_DeviceV0_2 as Compan
 
 /**
  * Dry-run a policy decision against a synthetic PolicyInput. Returns the policy decision plus a trace of which policy modules matched and which rules fired. Used by the policy-editor UI to verify changes before save and by admins to diagnose unexpected outcomes. 0.3 evaluates against the generalised PolicyInput (any Trust Task, carrying typeUri + side-effect/exposure classes) and can return the `requireConsent` decision.
+ *
+ * @deprecated superseded by policy/evaluate/0.4
  */
 export interface PolicyEvaluatePayload {
   input: PolicyInput;
@@ -19,6 +21,7 @@ export interface PolicyEvaluatePayload {
   includeTrace?: boolean;
   ext?: Ext;
 }
+/** @deprecated superseded by policy/evaluate/0.4 */
 export interface PolicyEvaluateResponsePayload {
   decision: PolicyDecision;
   /**
@@ -52,15 +55,23 @@ export const EXTENDS: string | null = null;
  * this package in a later scheduled batch (SPEC "Superseded and Withdrawn
  * Versions").
  */
-export const DEPRECATION: string | null = null;
+export const DEPRECATION: string | null = "superseded by policy/evaluate/0.4";
 
-/** Stable alias for this specification's request payload shape. */
+/**
+ * Stable alias for this specification's request payload shape.
+ *
+ * @deprecated superseded by policy/evaluate/0.4
+ */
 export type Payload = PolicyEvaluatePayload;
 
 /** Trust Task response type URI (request type URI + "#response"). */
 export const RESPONSE_TYPE_URI = "https://trusttasks.org/spec/policy/evaluate/0.3#response" as const;
 
-/** Stable alias for this specification's success-response payload shape. */
+/**
+ * Stable alias for this specification's success-response payload shape.
+ *
+ * @deprecated superseded by policy/evaluate/0.4
+ */
 export type Response = PolicyEvaluateResponsePayload;
 
 /**