@openvtc/trust-tasks 0.28.11 → 0.28.12

package/CHANGELOG.md

@@ -11,6 +11,54 @@ The package versions over **its own API** — what a consumer compiles against
 not over `SPEC.md`. Below 1.0 a breaking change bumps the leading non-zero
 component.
 
+## 0.28.12 — 2026-11-04
+
+
+### Added
+
+- **vta/collection**: Claim, release and list who collects a persona DID's messages at the mediator (#1023)
+
+Implements dtgwg-vti-spec's collection for the principal's identifiers
+  (VTI-NTF-080 – VTI-NTF-092).
+
+  A VTA collects, at the mediator each DID document advertises, the messages
+  for every identifier whose messaging keys it holds in one of the principal's
+  trust contexts — its personas — unless a client has claimed it. The mediator
+  permits one connection per DID, so at most one party collects at a time.
+
+  New tasks (family vta/collection, category messaging):
+
+  - vta/collection/claim/0.1 — a client becomes an identifier's one collector
+    until a stated end (a lease, at most thirty days), or renews its claim. The
+    VTA stops collecting and closes its connection before it grants; the client
+    connects only after the grant and closes before the end unless renewed.
+    notCollectable, claimHeld, claimNotRenewable. Retry class 2.
+  - vta/collection/release/0.1 — the claimant ends its claim at once, having
+    stopped collecting; any other party with standing makes it unrenewable,
+    and it still ends at its end. notCollectable. Retry class 2.
+  - vta/collection/list/0.1 — who collects for each identifier of a context:
+    the VTA, a claimant (with the end and whether renewable), or nobody, with
+    the reason (limit, conflict).
+
+
+
+### Specifications
+
+- **vta/collection**: Category notifications, a disabled reason, and the 24-hour lease (#1024)
+
+Follows dtgwg-vti-spec#97's VTI-NTF-093 and lease recommendation.
+
+  - Category messaging -> notifications for claim, release and list.
+  - NotCollectedReason gains `disabled` (appended): the operator has not
+    enabled collection by default (VTI-NTF-093). Claims are still granted,
+    renewed, released and listed while it is off; notCollectable and list
+    scope now refer to the identifiers VTI-NTF-080 names whether or not it is
+    enabled, and a claimant's release resumes collection only where enabled.
+  - Claim: a producer SHOULD request 86400 seconds and renew at half the
+    period granted; the VTA's stated maximum SHOULD NOT exceed thirty days.
+
+  Rust, TS, Go and Dart bindings regenerated.
+
 ## 0.28.11 — 2026-11-03
 
 

package/dist/_shared/components.d.ts

@@ -461,6 +461,10 @@ export type ChunkSize = number;
  * The `x:` prefix is an open extension namespace and is not decoration. The closest prior art — Windows CardSpace's self-issued card — supported exactly fifteen predefined claim types with no extensibility, and that is the specific way it failed the requirement a holder actually has. An `x:` attribute stores, composes, binds and discloses exactly like a known one; it renders generically and matches only an explicit query.
  */
 export type ClaimType = string;
+/**
+ * Who collects for an identifier: `vta`, the VTA itself; `client`, the claimant of a collection claim in force; or `none`, nobody, for the reason given in `notCollectedReason`.
+ */
+export type Collector = "vta" | "client" | "none";
 /**
  * The community's hidden-vetting parameters exactly as its join manifest publishes them, under the criterion's `vetting.ext`. The caller copies them in verbatim on every call that needs them, because the community rotates labels and the engine keeps no copy of its own: a stale copy costs the caller a refused proof, never a mistaken one.
  */
@@ -481,6 +485,10 @@ export type ConsumerKind_DeviceV0_2 = Companion_DeviceV0_2 | Service_DeviceV0_2;
  * The trust context the notification is held in: the one the addressed DID belongs to.
  */
 export type ContextId = string;
+/**
+ * The trust context the identifier belongs to.
+ */
+export type ContextId_VtaCollectionV0_1 = string;
 /**
  * Opaque identifier of one of the maintainer's contexts, compared by the maintainer's own ancestry predicate. Its grammar is the maintainer's.
  */
@@ -1056,6 +1064,10 @@ export type NamespaceId = string;
  * What a node is.
  */
 export type NodeKind = "network" | "community";
+/**
+ * Why nobody collects for an identifier the VTA would otherwise collect for: `limit`, the VTA is at the bound it states on the number of identifiers it collects for (VTI-NTF-088); `conflict`, another connection for the identifier kept closing the VTA's, and the VTA stopped after the bound it states until the conflict is resolved (VTI-NTF-085). `disabled`, the VTA's operator has not enabled collection by default (VTI-NTF-093), so the VTA collects for no identifier a client has not claimed.
+ */
+export type NotCollectedReason = "limit" | "conflict" | "disabled";
 /**
  * Opaque identifier of one note: `note_` followed by 16 to 64 base64url characters.
  */
@@ -6027,6 +6039,23 @@ export interface ChunkedDescriptor {
     expectedSizeBytes: ExpectedSizeBytes;
     expiresAt: ExpiresAt;
 }
+/**
+ * A collection claim in force for one identifier: the client that is its collector, when the claim ends, and whether the claimant may still renew it. A claim released by a party other than its claimant, or whose claimant's access control entry no longer gives it standing in the context, is not renewable and still ends at `endsAt`, because the claimant is still connected until its own clock tells it to stop (VTI-NTF-084).
+ */
+export interface Claim {
+    /**
+     * The client holding the claim: the subject of the access control entry it was granted to.
+     */
+    claimant: Did_NotificationsV0_1;
+    /**
+     * When the claim ends unless renewed. The claimant stops collecting before this instant less its clock-skew tolerance; the VTA resumes no earlier than this instant plus its own (VTI-NTF-083, VTI-NTF-084).
+     */
+    endsAt: string;
+    /**
+     * Whether the claimant may renew the claim with vta/collection/claim before it ends.
+     */
+    renewable: boolean;
+}
 /**
  * Which claim a `claim` field accepts, from which credentials and issuers.
  */
@@ -6046,6 +6075,15 @@ export interface ClaimSelector {
      */
     issuers?: string[];
 }
+/**
+ * The collection state of one identifier. `claim` is present exactly when `collector` is `client`, and `notCollectedReason` exactly when it is `none`.
+ */
+export interface CollectionEntry {
+    identifier: Did_NotificationsV0_1;
+    collector: Collector;
+    claim?: Claim;
+    notCollectedReason?: NotCollectedReason;
+}
 /**
  * OPTIONAL. How the community asks to be shown to a prospective applicant: a name, an accent colour and a logo. Presentation only, self-asserted and unverified — `communityDid` identifies the community, never `branding`. Not part of any criterion, so not covered by a `requirementsDigest`. Every member is optional.
  */