@openvtc/trust-tasks 0.28.13 → 0.28.14

package/dist/trust-task-discovery/0.4/payload.js

@@ -0,0 +1,266 @@
+/**
+ * Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
+ * Source: specs/trust-task-discovery/0.4/payload.schema.json
+ */
+/** Trust Task type URI. */
+export const TYPE_URI = "https://trusttasks.org/spec/trust-task-discovery/0.4";
+/**
+ * The earlier version of this specification that this one declares it
+ * extends (front matter `extends`, SPEC §5.2 "Declared extension"), or
+ * `null`. Only the direct declaration — follow the chain with
+ * `extendsChain` / `readForSpec`.
+ */
+export const EXTENDS = null;
+/**
+ * Why this version is deprecated, or `null` while it is current. A
+ * superseded or retired version is still supported, and is withdrawn from
+ * this package in a later scheduled batch (SPEC "Superseded and Withdrawn
+ * Versions").
+ */
+export const DEPRECATION = null;
+/** Trust Task response type URI (request type URI + "#response"). */
+export const RESPONSE_TYPE_URI = "https://trusttasks.org/spec/trust-task-discovery/0.4#response";
+/**
+ * This specification's payload schema, as a value.
+ *
+ * SPEC.md §7.2 item 2 is performed against this. It is shipped as data
+ * rather than only as a `.json` file because TypeScript types are erased
+ * at runtime: without a schema a consumer has nothing to validate, and
+ * every REQUIRED payload member is optional in practice. Cross-file
+ * `$ref`s are already inlined, so it needs no resolver.
+ */
+export const PAYLOAD_SCHEMA = {
+    "$schema": "https://json-schema.org/draft/2020-12/schema",
+    "$id": "https://trusttasks.org/spec/trust-task-discovery/0.4",
+    "title": "Trust Task Discovery — payload",
+    "description": "Request payload for the framework-defined trust-task-discovery exchange. Carries zero or more slug-glob patterns the discoverer wants the responder to filter against. The response payload schema is reachable via $anchor: 'response'.",
+    "type": "object",
+    "additionalProperties": false,
+    "properties": {
+        "patterns": {
+            "type": "array",
+            "maxItems": 16,
+            "items": {
+                "type": "string",
+                "minLength": 1,
+                "description": "Slug-glob pattern. Matches: '*' (every slug); '<prefix>/*' (any slug starting with '<prefix>/' — e.g. 'acl/*' matches 'acl/grant', 'acl/revoke', 'acl/grant/sub'); otherwise an exact slug match. Wildcards anywhere other than as a trailing segment are not interpreted — the only sigils are the trailing '/*' and the bare '*'."
+            },
+            "description": "Patterns are ORed: a slug matches the query if at least one pattern matches it. If the array is omitted or empty, the responder MUST treat the query as ['*'] — return every supported task. Bounded at 16 entries as parser hardening (SPEC.md §12.2), not as a capability limit: matching an unbounded pattern list against every published slug is work a responder does on an unauthenticated request, and a discoverer wanting more asks for '*' and filters locally."
+        }
+    },
+    "$defs": {
+        "AcceptanceWindow": {
+            "title": "Acceptance window",
+            "description": "The acceptance window a responder applies, as a consumer, to documents it receives (SPEC.md §7.2 items 4 and 13, *Bounding the record*). A document's acceptance end is issuedAt + maxAgeSeconds where it states no `expiresAt`; where it states one, the earlier of `expiresAt` and issuedAt + expiryHorizonSeconds, or of `expiresAt` and issuedAt + maxAgeSeconds where the window carries no expiryHorizonSeconds. A responder refuses a document when now is past its acceptance end + clockSkewSeconds, when issuedAt > now + clockSkewSeconds, and when now is at or past a stated `expiresAt`. All members are whole seconds.",
+            "type": "object",
+            "additionalProperties": false,
+            "required": [
+                "maxAgeSeconds",
+                "clockSkewSeconds"
+            ],
+            "properties": {
+                "maxAgeSeconds": {
+                    "type": "integer",
+                    "minimum": 1,
+                    "description": "The greatest age, in whole seconds, of a document's `issuedAt` at which the responder still accepts a document that states no `expiresAt`, before any clock-skew tolerance is applied."
+                },
+                "clockSkewSeconds": {
+                    "type": "integer",
+                    "minimum": 0,
+                    "description": "The clock-skew tolerance, in whole seconds, the responder applies in both directions: added to maxAgeSeconds for a document in its past, and allowed for an `issuedAt` in its future (SPEC.md §4.2, §7.2 item 13). Zero when it applies none."
+                },
+                "expiryHorizonSeconds": {
+                    "type": "integer",
+                    "minimum": 1,
+                    "description": "The greatest span, in whole seconds, after a document's `issuedAt` up to which the responder honours a stated `expiresAt` in place of maxAgeSeconds. An `expiresAt` beyond it is not refused; the horizon applies in its place. Absent: the responder applies maxAgeSeconds to every document, whatever `expiresAt` it states, as a trust-task-discovery/0.3 window does."
+                }
+            }
+        },
+        "Response": {
+            "$anchor": "response",
+            "title": "Trust Task Discovery — response payload",
+            "description": "List of bare Type URIs the responding party supports. Carried in a Trust Task document whose type is https://trusttasks.org/spec/trust-task-discovery/0.4#response. A response-level `acceptanceWindow` is the window the responder applies to every listed Type URI whose entry carries none of its own. Where neither is present for an entry, the discoverer has learnt nothing about that entry's window and MUST NOT read the absence as the absence of a window.",
+            "type": "object",
+            "additionalProperties": false,
+            "required": [
+                "supportedTypes"
+            ],
+            "properties": {
+                "supportedTypes": {
+                    "type": "array",
+                    "items": {
+                        "oneOf": [
+                            {
+                                "type": "string",
+                                "format": "uri",
+                                "description": "Shorthand form: a bare Type URI string. Equivalent to an object with only the `type` member set."
+                            },
+                            {
+                                "type": "object",
+                                "additionalProperties": false,
+                                "required": [
+                                    "type"
+                                ],
+                                "properties": {
+                                    "type": {
+                                        "type": "string",
+                                        "format": "uri",
+                                        "description": "A bare Type URI (no #request or #response fragment). The responder supports both request and response variants of every entry it lists."
+                                    },
+                                    "requiredExt": {
+                                        "type": "array",
+                                        "items": {
+                                            "type": "string",
+                                            "pattern": "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$"
+                                        },
+                                        "minItems": 1,
+                                        "uniqueItems": true,
+                                        "description": "Reverse-DNS `ext` namespaces this responder requires on inbound documents of this Type URI as a matter of local policy (SPEC.md §4.5.1, §7.2). A producer that does not populate every listed namespace will receive a `malformedRequest` rejection. Optional; reserved-but-recognized in 0.1, RECOMMENDED in future revisions for responders that enforce such policies."
+                                    },
+                                    "acceptanceWindow": {
+                                        "$ref": "#/$defs/AcceptanceWindow"
+                                    }
+                                },
+                                "description": "Object form: lists a Type URI together with optional capability annotations. An `acceptanceWindow` here is the window the responder applies to documents of this Type URI, and takes precedence over the response-level `acceptanceWindow` for this entry."
+                            }
+                        ],
+                        "description": "An entry in the supportedTypes list. SHORTHAND: a bare Type URI string. EXPANDED: an object with `type` and optional capability annotations (`requiredExt`, `acceptanceWindow`)."
+                    },
+                    "description": "Each entry's Type URI MUST match at least one of the request's patterns (if any were supplied). Order is not significant. Duplicates by Type URI are not permitted, regardless of whether the entry is in shorthand or expanded form."
+                },
+                "frameworkVersion": {
+                    "type": "string",
+                    "pattern": "^(0|[1-9][0-9]*)\\.(0|[1-9][0-9]*)\\.(0|[1-9][0-9]*)$",
+                    "description": "MAJOR.MINOR.PATCH version of the Trust Tasks framework specification (SPEC.md) the responder targets — three-part, as the framework has been versioned since 0.4.0 (SPEC.md §5.1.1), and exactly the value a Trust Task specification declares as its target framework version. Lets a discoverer reason about compatibility (SPEC.md §5.2) and select the envelope schema a responder's documents are validated against, which is keyed by the full release: a PATCH is never substituted for another. RECOMMENDED. Two-part in trust-task-discovery/0.1, which could not express a PATCH."
+                },
+                "acceptanceWindow": {
+                    "$ref": "#/$defs/AcceptanceWindow"
+                }
+            }
+        }
+    }
+};
+/** As {@link PAYLOAD_SCHEMA}, for the success-response variant. */
+export const RESPONSE_PAYLOAD_SCHEMA = {
+    "$schema": "https://json-schema.org/draft/2020-12/schema",
+    "$ref": "#/$defs/Response",
+    "$defs": {
+        "AcceptanceWindow": {
+            "title": "Acceptance window",
+            "description": "The acceptance window a responder applies, as a consumer, to documents it receives (SPEC.md §7.2 items 4 and 13, *Bounding the record*). A document's acceptance end is issuedAt + maxAgeSeconds where it states no `expiresAt`; where it states one, the earlier of `expiresAt` and issuedAt + expiryHorizonSeconds, or of `expiresAt` and issuedAt + maxAgeSeconds where the window carries no expiryHorizonSeconds. A responder refuses a document when now is past its acceptance end + clockSkewSeconds, when issuedAt > now + clockSkewSeconds, and when now is at or past a stated `expiresAt`. All members are whole seconds.",
+            "type": "object",
+            "additionalProperties": false,
+            "required": [
+                "maxAgeSeconds",
+                "clockSkewSeconds"
+            ],
+            "properties": {
+                "maxAgeSeconds": {
+                    "type": "integer",
+                    "minimum": 1,
+                    "description": "The greatest age, in whole seconds, of a document's `issuedAt` at which the responder still accepts a document that states no `expiresAt`, before any clock-skew tolerance is applied."
+                },
+                "clockSkewSeconds": {
+                    "type": "integer",
+                    "minimum": 0,
+                    "description": "The clock-skew tolerance, in whole seconds, the responder applies in both directions: added to maxAgeSeconds for a document in its past, and allowed for an `issuedAt` in its future (SPEC.md §4.2, §7.2 item 13). Zero when it applies none."
+                },
+                "expiryHorizonSeconds": {
+                    "type": "integer",
+                    "minimum": 1,
+                    "description": "The greatest span, in whole seconds, after a document's `issuedAt` up to which the responder honours a stated `expiresAt` in place of maxAgeSeconds. An `expiresAt` beyond it is not refused; the horizon applies in its place. Absent: the responder applies maxAgeSeconds to every document, whatever `expiresAt` it states, as a trust-task-discovery/0.3 window does."
+                }
+            }
+        },
+        "Response": {
+            "$anchor": "response",
+            "title": "Trust Task Discovery — response payload",
+            "description": "List of bare Type URIs the responding party supports. Carried in a Trust Task document whose type is https://trusttasks.org/spec/trust-task-discovery/0.4#response. A response-level `acceptanceWindow` is the window the responder applies to every listed Type URI whose entry carries none of its own. Where neither is present for an entry, the discoverer has learnt nothing about that entry's window and MUST NOT read the absence as the absence of a window.",
+            "type": "object",
+            "additionalProperties": false,
+            "required": [
+                "supportedTypes"
+            ],
+            "properties": {
+                "supportedTypes": {
+                    "type": "array",
+                    "items": {
+                        "oneOf": [
+                            {
+                                "type": "string",
+                                "format": "uri",
+                                "description": "Shorthand form: a bare Type URI string. Equivalent to an object with only the `type` member set."
+                            },
+                            {
+                                "type": "object",
+                                "additionalProperties": false,
+                                "required": [
+                                    "type"
+                                ],
+                                "properties": {
+                                    "type": {
+                                        "type": "string",
+                                        "format": "uri",
+                                        "description": "A bare Type URI (no #request or #response fragment). The responder supports both request and response variants of every entry it lists."
+                                    },
+                                    "requiredExt": {
+                                        "type": "array",
+                                        "items": {
+                                            "type": "string",
+                                            "pattern": "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$"
+                                        },
+                                        "minItems": 1,
+                                        "uniqueItems": true,
+                                        "description": "Reverse-DNS `ext` namespaces this responder requires on inbound documents of this Type URI as a matter of local policy (SPEC.md §4.5.1, §7.2). A producer that does not populate every listed namespace will receive a `malformedRequest` rejection. Optional; reserved-but-recognized in 0.1, RECOMMENDED in future revisions for responders that enforce such policies."
+                                    },
+                                    "acceptanceWindow": {
+                                        "$ref": "#/$defs/AcceptanceWindow"
+                                    }
+                                },
+                                "description": "Object form: lists a Type URI together with optional capability annotations. An `acceptanceWindow` here is the window the responder applies to documents of this Type URI, and takes precedence over the response-level `acceptanceWindow` for this entry."
+                            }
+                        ],
+                        "description": "An entry in the supportedTypes list. SHORTHAND: a bare Type URI string. EXPANDED: an object with `type` and optional capability annotations (`requiredExt`, `acceptanceWindow`)."
+                    },
+                    "description": "Each entry's Type URI MUST match at least one of the request's patterns (if any were supplied). Order is not significant. Duplicates by Type URI are not permitted, regardless of whether the entry is in shorthand or expanded form."
+                },
+                "frameworkVersion": {
+                    "type": "string",
+                    "pattern": "^(0|[1-9][0-9]*)\\.(0|[1-9][0-9]*)\\.(0|[1-9][0-9]*)$",
+                    "description": "MAJOR.MINOR.PATCH version of the Trust Tasks framework specification (SPEC.md) the responder targets — three-part, as the framework has been versioned since 0.4.0 (SPEC.md §5.1.1), and exactly the value a Trust Task specification declares as its target framework version. Lets a discoverer reason about compatibility (SPEC.md §5.2) and select the envelope schema a responder's documents are validated against, which is keyed by the full release: a PATCH is never substituted for another. RECOMMENDED. Two-part in trust-task-discovery/0.1, which could not express a PATCH."
+                },
+                "acceptanceWindow": {
+                    "$ref": "#/$defs/AcceptanceWindow"
+                }
+            }
+        }
+    }
+};
+/**
+ * SPEC.md §7.2 policy for the request variant, from this specification's
+ * front matter. Pass to `consumeInbound` — items 5b, 7 and 8 are
+ * per-specification and cannot be derived from the document alone, and
+ * item 2 needs the schema this carries.
+ */
+export const SPEC = {
+    typeUri: TYPE_URI,
+    isBearer: false,
+    isProofRequired: false,
+    isRecipientRequired: true,
+    isIssuedAtRequired: false,
+    payloadSchema: PAYLOAD_SCHEMA,
+};
+/**
+ * SPEC.md §7.2 policy for the success-response variant. `isRecipientRequired`
+ * tracks the *issuer* party's requirement because a response swaps the
+ * parties (§7.3 item 5).
+ */
+export const RESPONSE_SPEC = {
+    typeUri: RESPONSE_TYPE_URI,
+    isBearer: false,
+    isProofRequired: false,
+    isRecipientRequired: true,
+    isIssuedAtRequired: false,
+    payloadSchema: RESPONSE_PAYLOAD_SCHEMA,
+};
+//# sourceMappingURL=payload.js.map

package/dist/trust-task-discovery/0.4/payload.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"payload.js","sourceRoot":"","sources":["../../../src/trust-task-discovery/0.4/payload.ts"],"names":[],"mappings":"AAAA;;;GAGG;AA8GH,2BAA2B;AAC3B,MAAM,CAAC,MAAM,QAAQ,GAAG,sDAA+D,CAAC;AAExF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,OAAO,GAAkB,IAAI,CAAC;AAE3C;;;;;GAKG;AACH,MAAM,CAAC,MAAM,WAAW,GAAkB,IAAI,CAAC;AAK/C,qEAAqE;AACrE,MAAM,CAAC,MAAM,iBAAiB,GAAG,+DAAwE,CAAC;AAK1G;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,SAAS,EAAE,8CAA8C;IACzD,KAAK,EAAE,sDAAsD;IAC7D,OAAO,EAAE,gCAAgC;IACzC,aAAa,EAAE,0OAA0O;IACzP,MAAM,EAAE,QAAQ;IAChB,sBAAsB,EAAE,KAAK;IAC7B,YAAY,EAAE;QACZ,UAAU,EAAE;YACV,MAAM,EAAE,OAAO;YACf,UAAU,EAAE,EAAE;YACd,OAAO,EAAE;gBACP,MAAM,EAAE,QAAQ;gBAChB,WAAW,EAAE,CAAC;gBACd,aAAa,EAAE,qUAAqU;aACrV;YACD,aAAa,EAAE,4cAA4c;SAC5d;KACF;IACD,OAAO,EAAE;QACP,kBAAkB,EAAE;YAClB,OAAO,EAAE,mBAAmB;YAC5B,aAAa,EAAE,umBAAumB;YACtnB,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,eAAe;gBACf,kBAAkB;aACnB;YACD,YAAY,EAAE;gBACZ,eAAe,EAAE;oBACf,MAAM,EAAE,SAAS;oBACjB,SAAS,EAAE,CAAC;oBACZ,aAAa,EAAE,wLAAwL;iBACxM;gBACD,kBAAkB,EAAE;oBAClB,MAAM,EAAE,SAAS;oBACjB,SAAS,EAAE,CAAC;oBACZ,aAAa,EAAE,+OAA+O;iBAC/P;gBACD,sBAAsB,EAAE;oBACtB,MAAM,EAAE,SAAS;oBACjB,SAAS,EAAE,CAAC;oBACZ,aAAa,EAAE,2WAA2W;iBAC3X;aACF;SACF;QACD,UAAU,EAAE;YACV,SAAS,EAAE,UAAU;YACrB,OAAO,EAAE,yCAAyC;YAClD,aAAa,EAAE,wcAAwc;YACvd,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,gBAAgB;aACjB;YACD,YAAY,EAAE;gBACZ,gBAAgB,EAAE;oBAChB,MAAM,EAAE,OAAO;oBACf,OAAO,EAAE;wBACP,OAAO,EAAE;4BACP;gCACE,MAAM,EAAE,QAAQ;gCAChB,QAAQ,EAAE,KAAK;gCACf,aAAa,EAAE,kGAAkG;6BAClH;4BACD;gCACE,MAAM,EAAE,QAAQ;gCAChB,sBAAsB,EAAE,KAAK;gCAC7B,UAAU,EAAE;oCACV,MAAM;iCACP;gCACD,YAAY,EAAE;oCACZ,MAAM,EAAE;wCACN,MAAM,EAAE,QAAQ;wCAChB,QAAQ,EAAE,KAAK;wCACf,aAAa,EAAE,yIAAyI;qCACzJ;oCACD,aAAa,EAAE;wCACb,MAAM,EAAE,OAAO;wCACf,OAAO,EAAE;4CACP,MAAM,EAAE,QAAQ;4CAChB,SAAS,EAAE,mCAAmC;yCAC/C;wCACD,UAAU,EAAE,CAAC;wCACb,aAAa,EAAE,IAAI;wCACnB,aAAa,EAAE,2WAA2W;qCAC3X;oCACD,kBAAkB,EAAE;wCAClB,MAAM,EAAE,0BAA0B;qCACnC;iCACF;gCACD,aAAa,EAAE,4PAA4P;6BAC5Q;yBACF;wBACD,aAAa,EAAE,kLAAkL;qBAClM;oBACD,aAAa,EAAE,uOAAuO;iBACvP;gBACD,kBAAkB,EAAE;oBAClB,MAAM,EAAE,QAAQ;oBAChB,SAAS,EAAE,uDAAuD;oBAClE,aAAa,EAAE,6jBAA6jB;iBAC7kB;gBACD,kBAAkB,EAAE;oBAClB,MAAM,EAAE,0BAA0B;iBACnC;aACF;SACF;KACF;CACO,CAAC;AAEX,mEAAmE;AACnE,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,SAAS,EAAE,8CAA8C;IACzD,MAAM,EAAE,kBAAkB;IAC1B,OAAO,EAAE;QACP,kBAAkB,EAAE;YAClB,OAAO,EAAE,mBAAmB;YAC5B,aAAa,EAAE,umBAAumB;YACtnB,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,eAAe;gBACf,kBAAkB;aACnB;YACD,YAAY,EAAE;gBACZ,eAAe,EAAE;oBACf,MAAM,EAAE,SAAS;oBACjB,SAAS,EAAE,CAAC;oBACZ,aAAa,EAAE,wLAAwL;iBACxM;gBACD,kBAAkB,EAAE;oBAClB,MAAM,EAAE,SAAS;oBACjB,SAAS,EAAE,CAAC;oBACZ,aAAa,EAAE,+OAA+O;iBAC/P;gBACD,sBAAsB,EAAE;oBACtB,MAAM,EAAE,SAAS;oBACjB,SAAS,EAAE,CAAC;oBACZ,aAAa,EAAE,2WAA2W;iBAC3X;aACF;SACF;QACD,UAAU,EAAE;YACV,SAAS,EAAE,UAAU;YACrB,OAAO,EAAE,yCAAyC;YAClD,aAAa,EAAE,wcAAwc;YACvd,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,gBAAgB;aACjB;YACD,YAAY,EAAE;gBACZ,gBAAgB,EAAE;oBAChB,MAAM,EAAE,OAAO;oBACf,OAAO,EAAE;wBACP,OAAO,EAAE;4BACP;gCACE,MAAM,EAAE,QAAQ;gCAChB,QAAQ,EAAE,KAAK;gCACf,aAAa,EAAE,kGAAkG;6BAClH;4BACD;gCACE,MAAM,EAAE,QAAQ;gCAChB,sBAAsB,EAAE,KAAK;gCAC7B,UAAU,EAAE;oCACV,MAAM;iCACP;gCACD,YAAY,EAAE;oCACZ,MAAM,EAAE;wCACN,MAAM,EAAE,QAAQ;wCAChB,QAAQ,EAAE,KAAK;wCACf,aAAa,EAAE,yIAAyI;qCACzJ;oCACD,aAAa,EAAE;wCACb,MAAM,EAAE,OAAO;wCACf,OAAO,EAAE;4CACP,MAAM,EAAE,QAAQ;4CAChB,SAAS,EAAE,mCAAmC;yCAC/C;wCACD,UAAU,EAAE,CAAC;wCACb,aAAa,EAAE,IAAI;wCACnB,aAAa,EAAE,2WAA2W;qCAC3X;oCACD,kBAAkB,EAAE;wCAClB,MAAM,EAAE,0BAA0B;qCACnC;iCACF;gCACD,aAAa,EAAE,4PAA4P;6BAC5Q;yBACF;wBACD,aAAa,EAAE,kLAAkL;qBAClM;oBACD,aAAa,EAAE,uOAAuO;iBACvP;gBACD,kBAAkB,EAAE;oBAClB,MAAM,EAAE,QAAQ;oBAChB,SAAS,EAAE,uDAAuD;oBAClE,aAAa,EAAE,6jBAA6jB;iBAC7kB;gBACD,kBAAkB,EAAE;oBAClB,MAAM,EAAE,0BAA0B;iBACnC;aACF;SACF;KACF;CACO,CAAC;AAEX;;;;;GAKG;AACH,MAAM,CAAC,MAAM,IAAI,GAAG;IAClB,OAAO,EAAE,QAAQ;IACjB,QAAQ,EAAE,KAAK;IACf,eAAe,EAAE,KAAK;IACtB,mBAAmB,EAAE,IAAI;IACzB,kBAAkB,EAAE,KAAK;IACzB,aAAa,EAAE,cAAc;CACrB,CAAC;AAEX;;;;GAIG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,OAAO,EAAE,iBAAiB;IAC1B,QAAQ,EAAE,KAAK;IACf,eAAe,EAAE,KAAK;IACtB,mBAAmB,EAAE,IAAI;IACzB,kBAAkB,EAAE,KAAK;IACzB,aAAa,EAAE,uBAAuB;CAC9B,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openvtc/trust-tasks",
-  "version": "0.28.13",
+  "version": "0.28.14",
   "description": "Generated TypeScript bindings for the Trust Tasks framework registry.",
   "type": "module",
   "main": "./dist/index.js",

package/src/index.ts

@@ -1938,6 +1938,7 @@ export * as TrustTaskControl_v0_1 from "./trust-task-control/0.1/payload.js";
 export * as TrustTaskDiscovery_v0_1 from "./trust-task-discovery/0.1/payload.js";
 export * as TrustTaskDiscovery_v0_2 from "./trust-task-discovery/0.2/payload.js";
 export * as TrustTaskDiscovery_v0_3 from "./trust-task-discovery/0.3/payload.js";
+export * as TrustTaskDiscovery_v0_4 from "./trust-task-discovery/0.4/payload.js";
 export * as TrustTaskError_v0_1 from "./trust-task-error/0.1/payload.js";
 export * as TrustTaskError_v0_2 from "./trust-task-error/0.2/payload.js";
 export * as TrustTaskError_v0_3 from "./trust-task-error/0.3/payload.js";

package/src/process-attestation/0.1/payload.ts

@@ -3,7 +3,7 @@
  * Source: specs/process-attestation/0.1/payload.schema.json
  */
 
-import type { Ext } from "../../_shared/components.js";
+import type { DigestMultibase, Ext } from "../../_shared/components.js";
 
 
 /**
@@ -22,6 +22,10 @@ export type ReceiptReference =
       type: "uri";
       uri: string;
       mediaType?: string;
+      /**
+       * Digest of the exact receipt bytes the URI serves. The response's proof covers the URI and not what it serves, so this is what lets a retained response show which receipt it referred to; a Verifier that dereferences the URI compares before relying on the bytes (Verifier rule 6).
+       */
+      digestMultibase?: DigestMultibase;
     }
   | {
       type: "inline";
@@ -102,13 +106,19 @@ export interface Disclosed {
     endedAt?: string;
     checkpointCount?: number;
   };
+  /**
+   * The Holder's own report of its receipt's state. It is not verification: a Verifier relies on its own verification of the receipt (Verifier rules 4 and 7).
+   */
   integrity?: {
     chainValid?: boolean;
     signatureValid?: boolean;
     keyCustody?: "software" | "tpm" | "secureEnclave";
   };
   anchors?: {
-    kind: "rfc3161" | "opentimestamps" | "roughtime";
+    /**
+     * The anchoring mechanism. `rfc3161` is a timestamp-authority response, `opentimestamps` an OpenTimestamps proof, `roughtime` a Roughtime sample, `blockchain` a direct chain anchor. Appended values are additive; a reader passes an unrecognised one through.
+     */
+    kind: "rfc3161" | "opentimestamps" | "roughtime" | "blockchain";
     anchoredAt?: string;
   }[];
 }
@@ -123,7 +133,7 @@ export interface Unavailable {
 }
 
 /** Shared definitions this specification references, re-exported under the names it used to declare them with. */
-export type { Ext };
+export type { DigestMultibase, Ext };
 
 /** Trust Task type URI. */
 export const TYPE_URI = "https://trusttasks.org/spec/process-attestation/0.1" as const;
@@ -350,6 +360,10 @@ export const PAYLOAD_SCHEMA = {
             "mediaType": {
               "type": "string",
               "maxLength": 255
+            },
+            "digestMultibase": {
+              "$ref": "#/$defs/DigestMultibase",
+              "description": "Digest of the exact receipt bytes the URI serves. The response's proof covers the URI and not what it serves, so this is what lets a retained response show which receipt it referred to; a Verifier that dereferences the URI compares before relying on the bytes (Verifier rule 6)."
             }
           }
         },
@@ -440,7 +454,8 @@ export const PAYLOAD_SCHEMA = {
                 "secureEnclave"
               ]
             }
-          }
+          },
+          "description": "The Holder's own report of its receipt's state. It is not verification: a Verifier relies on its own verification of the receipt (Verifier rules 4 and 7)."
         },
         "anchors": {
           "type": "array",
@@ -456,8 +471,10 @@ export const PAYLOAD_SCHEMA = {
                 "enum": [
                   "rfc3161",
                   "opentimestamps",
-                  "roughtime"
-                ]
+                  "roughtime",
+                  "blockchain"
+                ],
+                "description": "The anchoring mechanism. `rfc3161` is a timestamp-authority response, `opentimestamps` an OpenTimestamps proof, `roughtime` a Roughtime sample, `blockchain` a direct chain anchor. Appended values are additive; a reader passes an unrecognised one through."
               },
               "anchoredAt": {
                 "type": "string",
@@ -468,6 +485,16 @@ export const PAYLOAD_SCHEMA = {
         }
       }
     },
+    "DigestMultibase": {
+      "title": "DigestMultibase",
+      "description": "A cryptographic digest as a multibase-encoded multihash — the encoding the W3C Verifiable Credentials Data Model 2.0 defines for `digestMultibase`, and the one `did:webvh` uses for its SCID and entry hashes.\n\nMultihash carries the hash algorithm in-band, so the value is self-describing and the wire format survives an algorithm change without a schema revision; multibase does the same for the base encoding, so a verifier never infers base58 from base64url by context. A bare hex string or a `sha-256:`-style prefix hard-codes one algorithm into the wire contract and is non-conforming here.\n\nThis definition constrains the *encoding only*. What the digest is computed over is stated by each referencing field, because it differs legitimately: a digest over a JSON document is taken over its RFC 8785 (JCS) canonicalization, while a digest over an opaque artifact is taken over its bytes. A field whose input is a JSON document and which does not name a canonicalization is not reproducible.\n\nRestricted to the two multibase headers W3C Controlled Identifiers 1.0 §2.4 normatively requires — `z` (base58btc) and `u` (base64url-no-pad). CID permits others but states that \"interoperability is not guaranteed between implementations using such values\", and a registry whose purpose is interoperability should not mint digests a conforming verifier may be unable to read. The alphabets are enforced rather than assumed: base58btc excludes 0, O, I and l, and an earlier permissive pattern let three published examples carry digests that were not valid base58 at all. base58btc is RECOMMENDED, for consistency with `did:key` and `did:webvh`.",
+      "type": "string",
+      "minLength": 16,
+      "pattern": "^(z[1-9A-HJ-NP-Za-km-z]+|u[A-Za-z0-9_-]+)$",
+      "examples": [
+        "zQmbWqxBEKC3P8tqsKc98xmWNzrzDtRLMiMPL8wBuTGsMnR"
+      ]
+    },
     "Ext": {
       "title": "Ext",
       "description": "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.",
@@ -640,6 +667,10 @@ export const RESPONSE_PAYLOAD_SCHEMA = {
             "mediaType": {
               "type": "string",
               "maxLength": 255
+            },
+            "digestMultibase": {
+              "$ref": "#/$defs/DigestMultibase",
+              "description": "Digest of the exact receipt bytes the URI serves. The response's proof covers the URI and not what it serves, so this is what lets a retained response show which receipt it referred to; a Verifier that dereferences the URI compares before relying on the bytes (Verifier rule 6)."
             }
           }
         },
@@ -730,7 +761,8 @@ export const RESPONSE_PAYLOAD_SCHEMA = {
                 "secureEnclave"
               ]
             }
-          }
+          },
+          "description": "The Holder's own report of its receipt's state. It is not verification: a Verifier relies on its own verification of the receipt (Verifier rules 4 and 7)."
         },
         "anchors": {
           "type": "array",
@@ -746,8 +778,10 @@ export const RESPONSE_PAYLOAD_SCHEMA = {
                 "enum": [
                   "rfc3161",
                   "opentimestamps",
-                  "roughtime"
-                ]
+                  "roughtime",
+                  "blockchain"
+                ],
+                "description": "The anchoring mechanism. `rfc3161` is a timestamp-authority response, `opentimestamps` an OpenTimestamps proof, `roughtime` a Roughtime sample, `blockchain` a direct chain anchor. Appended values are additive; a reader passes an unrecognised one through."
               },
               "anchoredAt": {
                 "type": "string",
@@ -758,6 +792,16 @@ export const RESPONSE_PAYLOAD_SCHEMA = {
         }
       }
     },
+    "DigestMultibase": {
+      "title": "DigestMultibase",
+      "description": "A cryptographic digest as a multibase-encoded multihash — the encoding the W3C Verifiable Credentials Data Model 2.0 defines for `digestMultibase`, and the one `did:webvh` uses for its SCID and entry hashes.\n\nMultihash carries the hash algorithm in-band, so the value is self-describing and the wire format survives an algorithm change without a schema revision; multibase does the same for the base encoding, so a verifier never infers base58 from base64url by context. A bare hex string or a `sha-256:`-style prefix hard-codes one algorithm into the wire contract and is non-conforming here.\n\nThis definition constrains the *encoding only*. What the digest is computed over is stated by each referencing field, because it differs legitimately: a digest over a JSON document is taken over its RFC 8785 (JCS) canonicalization, while a digest over an opaque artifact is taken over its bytes. A field whose input is a JSON document and which does not name a canonicalization is not reproducible.\n\nRestricted to the two multibase headers W3C Controlled Identifiers 1.0 §2.4 normatively requires — `z` (base58btc) and `u` (base64url-no-pad). CID permits others but states that \"interoperability is not guaranteed between implementations using such values\", and a registry whose purpose is interoperability should not mint digests a conforming verifier may be unable to read. The alphabets are enforced rather than assumed: base58btc excludes 0, O, I and l, and an earlier permissive pattern let three published examples carry digests that were not valid base58 at all. base58btc is RECOMMENDED, for consistency with `did:key` and `did:webvh`.",
+      "type": "string",
+      "minLength": 16,
+      "pattern": "^(z[1-9A-HJ-NP-Za-km-z]+|u[A-Za-z0-9_-]+)$",
+      "examples": [
+        "zQmbWqxBEKC3P8tqsKc98xmWNzrzDtRLMiMPL8wBuTGsMnR"
+      ]
+    },
     "Ext": {
       "title": "Ext",
       "description": "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.",

package/src/trust-task-discovery/0.1/payload.ts

@@ -6,7 +6,7 @@
 /**
  * Request payload for the framework-defined trust-task-discovery exchange. Carries zero or more slug-glob patterns the discoverer wants the responder to filter against. The response payload schema is reachable via $anchor: 'response'.
  *
- * @deprecated superseded by trust-task-discovery/0.3
+ * @deprecated superseded by trust-task-discovery/0.4
  */
 export interface TrustTaskDiscoveryPayload {
   /**
@@ -69,7 +69,7 @@ export interface TrustTaskDiscoveryPayload {
 /**
  * List of bare Type URIs the responding party supports. Carried in a Trust Task document whose type is https://trusttasks.org/spec/trust-task-discovery/0.1#response.
  *
- * @deprecated superseded by trust-task-discovery/0.3
+ * @deprecated superseded by trust-task-discovery/0.4
  */
 export interface TrustTaskDiscoveryResponsePayload {
   /**
@@ -113,12 +113,12 @@ export const EXTENDS: string | null = null;
  * this package in a later scheduled batch (SPEC "Superseded and Withdrawn
  * Versions").
  */
-export const DEPRECATION: string | null = "superseded by trust-task-discovery/0.3";
+export const DEPRECATION: string | null = "superseded by trust-task-discovery/0.4";
 
 /**
  * Stable alias for this specification's request payload shape.
  *
- * @deprecated superseded by trust-task-discovery/0.3
+ * @deprecated superseded by trust-task-discovery/0.4
  */
 export type Payload = TrustTaskDiscoveryPayload;
 
@@ -128,7 +128,7 @@ export const RESPONSE_TYPE_URI = "https://trusttasks.org/spec/trust-task-discove
 /**
  * Stable alias for this specification's success-response payload shape.
  *
- * @deprecated superseded by trust-task-discovery/0.3
+ * @deprecated superseded by trust-task-discovery/0.4
  */
 export type Response = TrustTaskDiscoveryResponsePayload;
 

package/src/trust-task-discovery/0.2/payload.ts

@@ -6,7 +6,7 @@
 /**
  * Request payload for the framework-defined trust-task-discovery exchange. Carries zero or more slug-glob patterns the discoverer wants the responder to filter against. The response payload schema is reachable via $anchor: 'response'.
  *
- * @deprecated superseded by trust-task-discovery/0.3
+ * @deprecated superseded by trust-task-discovery/0.4
  */
 export interface TrustTaskDiscoveryPayload {
   /**
@@ -69,7 +69,7 @@ export interface TrustTaskDiscoveryPayload {
 /**
  * List of bare Type URIs the responding party supports. Carried in a Trust Task document whose type is https://trusttasks.org/spec/trust-task-discovery/0.2#response.
  *
- * @deprecated superseded by trust-task-discovery/0.3
+ * @deprecated superseded by trust-task-discovery/0.4
  */
 export interface TrustTaskDiscoveryResponsePayload {
   /**
@@ -113,12 +113,12 @@ export const EXTENDS: string | null = null;
  * this package in a later scheduled batch (SPEC "Superseded and Withdrawn
  * Versions").
  */
-export const DEPRECATION: string | null = "superseded by trust-task-discovery/0.3";
+export const DEPRECATION: string | null = "superseded by trust-task-discovery/0.4";
 
 /**
  * Stable alias for this specification's request payload shape.
  *
- * @deprecated superseded by trust-task-discovery/0.3
+ * @deprecated superseded by trust-task-discovery/0.4
  */
 export type Payload = TrustTaskDiscoveryPayload;
 
@@ -128,7 +128,7 @@ export const RESPONSE_TYPE_URI = "https://trusttasks.org/spec/trust-task-discove
 /**
  * Stable alias for this specification's success-response payload shape.
  *
- * @deprecated superseded by trust-task-discovery/0.3
+ * @deprecated superseded by trust-task-discovery/0.4
  */
 export type Response = TrustTaskDiscoveryResponsePayload;
 

package/src/trust-task-discovery/0.3/payload.ts

@@ -5,6 +5,8 @@
 
 /**
  * Request payload for the framework-defined trust-task-discovery exchange. Carries zero or more slug-glob patterns the discoverer wants the responder to filter against. The response payload schema is reachable via $anchor: 'response'.
+ *
+ * @deprecated superseded by trust-task-discovery/0.4
  */
 export interface TrustTaskDiscoveryPayload {
   /**
@@ -66,6 +68,8 @@ export interface TrustTaskDiscoveryPayload {
 }
 /**
  * List of bare Type URIs the responding party supports. Carried in a Trust Task document whose type is https://trusttasks.org/spec/trust-task-discovery/0.3#response. A response-level `acceptanceWindow` is the window the responder applies to every listed Type URI whose entry carries none of its own. Where neither is present for an entry, the discoverer has learnt nothing about that entry's window and MUST NOT read the absence as the absence of a window.
+ *
+ * @deprecated superseded by trust-task-discovery/0.4
  */
 export interface TrustTaskDiscoveryResponsePayload {
   /**
@@ -124,15 +128,23 @@ export const EXTENDS: string | null = null;
  * this package in a later scheduled batch (SPEC "Superseded and Withdrawn
  * Versions").
  */
-export const DEPRECATION: string | null = null;
+export const DEPRECATION: string | null = "superseded by trust-task-discovery/0.4";
 
-/** Stable alias for this specification's request payload shape. */
+/**
+ * Stable alias for this specification's request payload shape.
+ *
+ * @deprecated superseded by trust-task-discovery/0.4
+ */
 export type Payload = TrustTaskDiscoveryPayload;
 
 /** Trust Task response type URI (request type URI + "#response"). */
 export const RESPONSE_TYPE_URI = "https://trusttasks.org/spec/trust-task-discovery/0.3#response" as const;
 
-/** Stable alias for this specification's success-response payload shape. */
+/**
+ * Stable alias for this specification's success-response payload shape.
+ *
+ * @deprecated superseded by trust-task-discovery/0.4
+ */
 export type Response = TrustTaskDiscoveryResponsePayload;
 
 /**