@openvtc/trust-tasks 0.28.18 → 0.28.20

package/dist/vtc/badges/promote/0.1/payload.d.ts

@@ -0,0 +1,1757 @@
+/**
+ * Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
+ * Source: specs/vtc/badges/promote/0.1/payload.schema.json
+ */
+import type { Badge, BadgeCriteria, BadgeDescription, BadgeId, BadgeKind, BadgeName, BadgeState, CardBlobRef, DynamicRule, EntryId, Ext, FieldKey, Group, GroupAudience, GroupDescription, GroupId, GroupKind, GroupName, JoinPolicy, RuleCondition } from "../../../../_shared/components.js";
+/**
+ * Turn a kudos badge into a community badge: its badge group is created and its owners named, and every current holder is offered the badge so that each accepts before anything is issued or recorded. The outer document members are owned by the framework — SPEC §6.3.
+ */
+export interface VTCBadgesPromotePayload {
+    /**
+     * A kudos badge.
+     */
+    badgeId: BadgeId;
+    /**
+     * Whether members may ask for it (a request to join the badge group). Absent: false.
+     */
+    requestable?: boolean;
+    /**
+     * Whether holders may show it outside the community, which fixes the credential's regime for the badge's life. Absent: false.
+     */
+    shareableOutside?: boolean;
+    /**
+     * Who may see the badge's holders: the badge group's `showMembers`. Absent: `members`.
+     */
+    holdersVisibleTo?: GroupAudience;
+    /**
+     * Members to appoint as the badge's owners — the badge group's managers — as vtc/groups/managers/add appoints them, bounded by the signer's own holding. The badge's maker is an owner only if named here.
+     *
+     * @maxItems 32
+     */
+    owners?: EntryId[];
+    /**
+     * Why, recorded with the change.
+     */
+    reason: string;
+    ext?: Ext;
+}
+/**
+ * The success response to a vtc/badges/promote/0.1 request. Carried in a Trust Task document whose type is https://trusttasks.org/spec/vtc/badges/promote/0.1#response.
+ */
+export interface VTCBadgesPromoteResponsePayload {
+    /**
+     * The badge, now `kind` `community` with its `groupId`. `holderCount` is 0 until a holder accepts.
+     */
+    badge: Badge;
+    /**
+     * The badge group, as vtc/groups/create answers it.
+     */
+    group: Group;
+    /**
+     * How many current holders were offered the badge — one offer each, who they are never said here.
+     */
+    holdersOffered?: number;
+    ext?: Ext;
+}
+/** Shared definitions this specification references, re-exported under the names it used to declare them with. */
+export type { Badge, BadgeCriteria, BadgeDescription, BadgeId, BadgeKind, BadgeName, BadgeState, CardBlobRef, DynamicRule, EntryId, Ext, FieldKey, Group, GroupAudience, GroupDescription, GroupId, GroupKind, GroupName, JoinPolicy, RuleCondition };
+/** Trust Task type URI. */
+export declare const TYPE_URI: "https://trusttasks.org/spec/vtc/badges/promote/0.1";
+/**
+ * The earlier version of this specification that this one declares it
+ * extends (front matter `extends`, SPEC §5.2 "Declared extension"), or
+ * `null`. Only the direct declaration — follow the chain with
+ * `extendsChain` / `readForSpec`.
+ */
+export declare const EXTENDS: string | null;
+/**
+ * Why this version is deprecated, or `null` while it is current. A
+ * superseded or retired version is still supported, and is withdrawn from
+ * this package in a later scheduled batch (SPEC "Superseded and Withdrawn
+ * Versions").
+ */
+export declare const DEPRECATION: string | null;
+/** Stable alias for this specification's request payload shape. */
+export type Payload = VTCBadgesPromotePayload;
+/** Trust Task response type URI (request type URI + "#response"). */
+export declare const RESPONSE_TYPE_URI: "https://trusttasks.org/spec/vtc/badges/promote/0.1#response";
+/** Stable alias for this specification's success-response payload shape. */
+export type Response = VTCBadgesPromoteResponsePayload;
+/**
+ * This specification's payload schema, as a value.
+ *
+ * SPEC.md §7.2 item 2 is performed against this. It is shipped as data
+ * rather than only as a `.json` file because TypeScript types are erased
+ * at runtime: without a schema a consumer has nothing to validate, and
+ * every REQUIRED payload member is optional in practice. Cross-file
+ * `$ref`s are already inlined, so it needs no resolver.
+ */
+export declare const PAYLOAD_SCHEMA: {
+    readonly $schema: "https://json-schema.org/draft/2020-12/schema";
+    readonly $id: "https://trusttasks.org/spec/vtc/badges/promote/0.1";
+    readonly title: "VTC Badges — Promote — payload";
+    readonly description: "Turn a kudos badge into a community badge: its badge group is created and its owners named, and every current holder is offered the badge so that each accepts before anything is issued or recorded. The outer document members are owned by the framework — SPEC §6.3.";
+    readonly type: "object";
+    readonly additionalProperties: false;
+    readonly required: readonly ["badgeId", "reason"];
+    readonly properties: {
+        readonly badgeId: {
+            readonly $ref: "#/$defs/BadgeId";
+            readonly description: "A kudos badge.";
+        };
+        readonly requestable: {
+            readonly type: "boolean";
+            readonly description: "Whether members may ask for it (a request to join the badge group). Absent: false.";
+        };
+        readonly shareableOutside: {
+            readonly type: "boolean";
+            readonly description: "Whether holders may show it outside the community, which fixes the credential's regime for the badge's life. Absent: false.";
+        };
+        readonly holdersVisibleTo: {
+            readonly $ref: "#/$defs/GroupAudience";
+            readonly description: "Who may see the badge's holders: the badge group's `showMembers`. Absent: `members`.";
+        };
+        readonly owners: {
+            readonly type: "array";
+            readonly maxItems: 32;
+            readonly uniqueItems: true;
+            readonly items: {
+                readonly $ref: "#/$defs/EntryId";
+            };
+            readonly description: "Members to appoint as the badge's owners — the badge group's managers — as vtc/groups/managers/add appoints them, bounded by the signer's own holding. The badge's maker is an owner only if named here.";
+        };
+        readonly reason: {
+            readonly type: "string";
+            readonly minLength: 1;
+            readonly maxLength: 1024;
+            readonly description: "Why, recorded with the change.";
+        };
+        readonly ext: {
+            readonly $ref: "#/$defs/Ext";
+        };
+    };
+    readonly $defs: {
+        readonly Response: {
+            readonly $anchor: "response";
+            readonly title: "VTC Badges — Promote — response payload";
+            readonly description: "The success response to a vtc/badges/promote/0.1 request. Carried in a Trust Task document whose type is https://trusttasks.org/spec/vtc/badges/promote/0.1#response.";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["badge", "group"];
+            readonly properties: {
+                readonly badge: {
+                    readonly $ref: "#/$defs/Badge";
+                    readonly description: "The badge, now `kind` `community` with its `groupId`. `holderCount` is 0 until a holder accepts.";
+                };
+                readonly group: {
+                    readonly $ref: "#/$defs/Group";
+                    readonly description: "The badge group, as vtc/groups/create answers it.";
+                };
+                readonly holdersOffered: {
+                    readonly type: "integer";
+                    readonly minimum: 0;
+                    readonly description: "How many current holders were offered the badge — one offer each, who they are never said here.";
+                };
+                readonly ext: {
+                    readonly $ref: "#/$defs/Ext";
+                };
+            };
+        };
+        readonly Ext: {
+            readonly title: "Ext";
+            readonly description: "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.";
+            readonly type: "object";
+            readonly minProperties: 1;
+            readonly additionalProperties: true;
+            readonly propertyNames: {
+                readonly pattern: "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$";
+            };
+        };
+        readonly Group: {
+            readonly title: "Group";
+            readonly description: "A community group, as a caller who may see it sees it. Members a caller may not see are absent: `memberCount` only to those who may see the group's members, `managers` and `credentialAuthorityValidUntil` only to its managers.";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["groupId", "groupDid", "name", "kind", "visibility", "showMembers", "issuesCredentials", "carriesAuthority", "createdAt"];
+            readonly properties: {
+                readonly groupId: {
+                    readonly $ref: "#/$defs/GroupId";
+                };
+                readonly groupDid: {
+                    readonly type: "string";
+                    readonly pattern: "^did:";
+                    readonly maxLength: 2048;
+                    readonly description: "The group's own DID, minted by the community's VTA for this group alone. It issues the group's membership credentials. Its DID document carries no name or description.";
+                };
+                readonly name: {
+                    readonly $ref: "#/$defs/GroupName";
+                };
+                readonly description: {
+                    readonly $ref: "#/$defs/GroupDescription";
+                };
+                readonly kind: {
+                    readonly $ref: "#/$defs/GroupKind";
+                };
+                readonly rule: {
+                    readonly $ref: "#/$defs/DynamicRule";
+                    readonly description: "Present exactly when `kind` is `dynamic`.";
+                };
+                readonly joinPolicy: {
+                    readonly $ref: "#/$defs/JoinPolicy";
+                    readonly description: "Present exactly when `kind` is `static`.";
+                };
+                readonly visibility: {
+                    readonly $ref: "#/$defs/GroupAudience";
+                    readonly description: "Who may see that the group exists, and its name and description.";
+                };
+                readonly showMembers: {
+                    readonly $ref: "#/$defs/GroupAudience";
+                    readonly description: "Who may see the group's member list. Separate from `visibility`: a group everyone sees may show its members only to administrators. Never wider than `visibility`.";
+                };
+                readonly issuesCredentials: {
+                    readonly type: "boolean";
+                    readonly description: "Whether the group's DID issues its members a membership credential. Default true.";
+                };
+                readonly carriesAuthority: {
+                    readonly type: "boolean";
+                    readonly description: "`true` while the group has a `grants` or `role` binding. Such a group is `static` and `closed` for as long as it does.";
+                };
+                readonly badgeId: {
+                    readonly $ref: "#/$defs/BadgeId";
+                    readonly description: "Present exactly when the group backs a community badge (vtc/badges/*): its managers are the badge's owners, its members the badge's holders, and its DID issues the badge credential in place of a membership credential. A badge group never carries authority, is not counted among the groups two members share, and is listed among the community's groups only to a caller who asks for badge groups (VTI-BDG-010 – VTI-BDG-012).";
+                };
+                readonly memberCount: {
+                    readonly type: "integer";
+                    readonly minimum: 0;
+                    readonly description: "Active members. Only to callers who may see the member list.";
+                };
+                readonly managers: {
+                    readonly type: "array";
+                    readonly maxItems: 256;
+                    readonly uniqueItems: true;
+                    readonly items: {
+                        readonly $ref: "#/$defs/EntryId";
+                    };
+                    readonly description: "Entries holding `vtc.groups.manage` qualified to this group, read from the access-control list. Informational: managers are appointed by an access-control grant (vtc/groups/managers/add), never by this record.";
+                };
+                readonly credentialAuthorityValidUntil: {
+                    readonly type: "string";
+                    readonly format: "date-time";
+                    readonly description: "When the community's authorization credential to the group expires. The community renews it well before.";
+                };
+                readonly createdAt: {
+                    readonly type: "string";
+                    readonly format: "date-time";
+                };
+                readonly createdBy: {
+                    readonly $ref: "#/$defs/EntryId";
+                    readonly description: "The creating administrator's directory entry, where they have one.";
+                };
+                readonly updatedAt: {
+                    readonly type: "string";
+                    readonly format: "date-time";
+                };
+                readonly ext: {
+                    readonly $ref: "#/$defs/Ext";
+                    readonly description: "Ecosystem-defined extension members per SPEC.md §4.5.1. An extension member MUST NOT carry authority.";
+                };
+            };
+        };
+        readonly GroupAudience: {
+            readonly title: "GroupAudience";
+            readonly description: "Who may see something about a group, narrowest first. `admins`: holders of `vtc.groups.manage` for the group (unqualified, or qualified `group:<groupId>`). `groupMembers`: the group's own members, and its managers. `members`: every active member of the community.";
+            readonly type: "string";
+            readonly enum: readonly ["admins", "groupMembers", "members"];
+        };
+        readonly JoinPolicy: {
+            readonly title: "JoinPolicy";
+            readonly description: "How a member enters a static group by themselves. `closed`: only a manager adds them. `request`: a member asks and a manager decides. `open`: a member joins at once, subject to the community's `groups` policy. A group carrying authority is always `closed`.";
+            readonly type: "string";
+            readonly enum: readonly ["closed", "request", "open"];
+        };
+        readonly DynamicRule: {
+            readonly title: "DynamicRule";
+            readonly description: "A dynamic group's membership rule: a member belongs when every condition holds and they have not opted out. The community evaluates it under its `groups` policy and recomputes membership whenever a fact it reads changes, always excluding opted-out entries.";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["all"];
+            readonly properties: {
+                readonly all: {
+                    readonly type: "array";
+                    readonly minItems: 1;
+                    readonly maxItems: 16;
+                    readonly items: {
+                        readonly $ref: "#/$defs/RuleCondition";
+                    };
+                };
+            };
+        };
+        readonly RuleCondition: {
+            readonly title: "RuleCondition";
+            readonly description: "One test over a verified fact about a member. `fact: role` tests the member's community role; `fact: field` tests an `admin`- or `credential`-sourced directory field named by `field`; `fact: personhood` tests whether a personhood assertion is on file; `fact: joinedAt` tests when they joined. A rule never reads a self-asserted (`member`-sourced) field: a member must not be able to join a group by editing their card.";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["fact", "op"];
+            readonly properties: {
+                readonly fact: {
+                    readonly type: "string";
+                    readonly enum: readonly ["role", "field", "personhood", "joinedAt"];
+                };
+                readonly field: {
+                    readonly $ref: "#/$defs/FieldKey";
+                    readonly description: "Present exactly when `fact` is `field`.";
+                };
+                readonly op: {
+                    readonly type: "string";
+                    readonly enum: readonly ["equals", "oneOf", "exists", "before", "after"];
+                    readonly description: "`equals` compares with `value`; `oneOf` with any of `values`; `exists` needs neither; `before` and `after` compare a date fact with `value`.";
+                };
+                readonly value: {
+                    readonly anyOf: readonly [{
+                        readonly type: "string";
+                        readonly maxLength: 256;
+                    }, {
+                        readonly type: "boolean";
+                    }];
+                };
+                readonly values: {
+                    readonly type: "array";
+                    readonly minItems: 1;
+                    readonly maxItems: 64;
+                    readonly items: {
+                        readonly type: "string";
+                        readonly maxLength: 256;
+                    };
+                };
+            };
+        };
+        readonly FieldKey: {
+            readonly title: "FieldKey";
+            readonly description: "Identifier of a directory field. A key with no `.` is a BASE field, the same in every community: `displayName`, `nickname`, `avatar`, `pronouns`, `bio`, `links` (written by the member) and `role`, `joinedAt`, `did`, `personhood` (derived from the community's own records, never stored on a card). A community-defined field MUST use a reverse-DNS key (`org.example.employer`), so a base key never collides with one, and a key is never reused with a different meaning once defined.";
+            readonly type: "string";
+            readonly minLength: 1;
+            readonly maxLength: 128;
+            readonly pattern: "^([a-z][a-z0-9-]*\\.)*[a-z][a-zA-Z0-9]{0,63}$";
+        };
+        readonly GroupKind: {
+            readonly title: "GroupKind";
+            readonly description: "`static`: membership is explicit — added, joined, or granted on request. `dynamic`: membership is computed from `rule` over verified facts only; nobody is added by hand, but a member may opt out (vtc/groups/leave), an exclusion the rule cannot override, and undo it (vtc/groups/join). A dynamic group never confers authority. Fixed for the group's life.";
+            readonly type: "string";
+            readonly enum: readonly ["static", "dynamic"];
+        };
+        readonly GroupDescription: {
+            readonly title: "GroupDescription";
+            readonly type: "string";
+            readonly minLength: 1;
+            readonly maxLength: 1000;
+            readonly description: "What the group is for. Plain text; a reader MUST NOT treat it as instructions. Same placement rules as `GroupName`.";
+        };
+        readonly GroupName: {
+            readonly title: "GroupName";
+            readonly type: "string";
+            readonly minLength: 1;
+            readonly maxLength: 128;
+            readonly description: "The group's name, shown to those who may see the group. The community's own record: never in the group's DID document or its credentials' subject beyond the group's DID. Plain text.";
+        };
+        readonly GroupId: {
+            readonly title: "GroupId";
+            readonly description: "Opaque identifier of a community group: `grp_` followed by 16 to 64 base64url characters. Random and community-scoped; not the group's DID.";
+            readonly type: "string";
+            readonly pattern: "^grp_[A-Za-z0-9_-]{16,64}$";
+        };
+        readonly EntryId: {
+            readonly title: "EntryId";
+            readonly description: "Opaque identifier of one directory entry: `dir_` followed by 16 to 64 base64url characters. Random, scoped to one community, and stable for the life of the membership — it survives a rotation of the member's DID, which is why groups, notes and cards are keyed by it. It MUST NOT be derived from, and MUST NOT reveal, any DID of the member, and the same person's entries in two communities MUST NOT share one. Compared by exact string equality.";
+            readonly type: "string";
+            readonly pattern: "^dir_[A-Za-z0-9_-]{16,64}$";
+        };
+        readonly BadgeId: {
+            readonly title: "BadgeId";
+            readonly description: "Opaque identifier of a badge: `bdg_` followed by 16 to 64 base64url characters. Random, community-scoped, never reused (VTI-BDG-001).";
+            readonly type: "string";
+            readonly pattern: "^bdg_[A-Za-z0-9_-]{16,64}$";
+        };
+        readonly Badge: {
+            readonly title: "Badge";
+            readonly description: "A badge as a caller who may see it sees it. `groupId` is present exactly when `kind` is `community`. `holderCount` only to callers who may see the badge's holders, counted over holders who have not hidden it (VTI-BDG-030, VTI-BDG-033). `createdBy` is the directory entry of the administrator or member who made it, where they have one.";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["badgeId", "kind", "name", "description", "image", "repeatable", "listed", "state", "createdAt"];
+            readonly properties: {
+                readonly badgeId: {
+                    readonly $ref: "#/$defs/BadgeId";
+                };
+                readonly kind: {
+                    readonly $ref: "#/$defs/BadgeKind";
+                };
+                readonly name: {
+                    readonly $ref: "#/$defs/BadgeName";
+                };
+                readonly description: {
+                    readonly $ref: "#/$defs/BadgeDescription";
+                };
+                readonly criteria: {
+                    readonly $ref: "#/$defs/BadgeCriteria";
+                };
+                readonly image: {
+                    readonly $ref: "#/$defs/CardBlobRef";
+                    readonly description: "The badge's picture, re-encoded and stored by the community (vtc/badges/images/upload), read with vtc/badges/images/get. `url` and `urlExpiresAt` MAY appear in a projection as for a card picture; for a badge whose holders may show it outside, `url` MAY be the picture's stable public location.";
+                };
+                readonly repeatable: {
+                    readonly type: "boolean";
+                    readonly description: "Whether one member may hold the badge more than once, each giving an award of its own (VTI-BDG-022). Always true for a kudos badge.";
+                };
+                readonly requestable: {
+                    readonly type: "boolean";
+                    readonly description: "Community badges only. Whether a member may ask for it: a request to join its badge group, decided by its owners (VTI-BDG-014). Absent reads as false.";
+                };
+                readonly listed: {
+                    readonly type: "boolean";
+                    readonly description: "Whether members who do not hold the badge see it in the community's badge list. An unlisted badge is seen by its holders, its owners and administrators.";
+                };
+                readonly shareableOutside: {
+                    readonly type: "boolean";
+                    readonly description: "Community badges only. Whether its holders may show it outside the community, which decides the credential's regime: short-lived and renewed with no status when false, long-lived with a status in the community's own status set when true (VTI-BDG-061, VTI-BDG-062). Absent reads as false.";
+                };
+                readonly groupId: {
+                    readonly $ref: "#/$defs/GroupId";
+                    readonly description: "The badge group that backs a community badge: its managers are the badge's owners, its members the holders, its DID the credential's issuer.";
+                };
+                readonly state: {
+                    readonly $ref: "#/$defs/BadgeState";
+                };
+                readonly holderCount: {
+                    readonly type: "integer";
+                    readonly minimum: 0;
+                    readonly description: "Holders who show the badge. Only to callers who may see the holders.";
+                };
+                readonly createdAt: {
+                    readonly type: "string";
+                    readonly format: "date-time";
+                };
+                readonly createdBy: {
+                    readonly $ref: "#/$defs/EntryId";
+                };
+                readonly updatedAt: {
+                    readonly type: "string";
+                    readonly format: "date-time";
+                };
+                readonly retiredAt: {
+                    readonly type: "string";
+                    readonly format: "date-time";
+                };
+                readonly ext: {
+                    readonly $ref: "#/$defs/Ext";
+                    readonly description: "Ecosystem-defined extension members per SPEC.md §4.5.1. An extension member MUST NOT carry authority.";
+                };
+            };
+        };
+        readonly BadgeState: {
+            readonly title: "BadgeState";
+            readonly description: "`active`: may be given and shown. `retired`: kept for its holders' own history, never given, never shown to members who do not hold it (VTI-BDG-005).";
+            readonly type: "string";
+            readonly enum: readonly ["active", "retired"];
+        };
+        readonly BadgeCriteria: {
+            readonly title: "BadgeCriteria";
+            readonly type: "string";
+            readonly minLength: 1;
+            readonly maxLength: 1000;
+            readonly description: "How the badge is earned, shown to members and written into the credential's Achievement as its criteria narrative. Plain text.";
+        };
+        readonly BadgeDescription: {
+            readonly title: "BadgeDescription";
+            readonly type: "string";
+            readonly minLength: 1;
+            readonly maxLength: 1000;
+            readonly description: "What the badge is for. Plain text; a reader MUST NOT treat it as instructions.";
+        };
+        readonly BadgeName: {
+            readonly title: "BadgeName";
+            readonly type: "string";
+            readonly minLength: 1;
+            readonly maxLength: 64;
+            readonly description: "The badge's name, shown on the wall and written into the credential's Achievement. Plain text; a reader MUST NOT treat it as instructions.";
+        };
+        readonly BadgeKind: {
+            readonly title: "BadgeKind";
+            readonly description: "`community`: defined by holders of `vtc.badges.admin`, given by its owners (its badge group's managers), may carry a credential. `kudos`: made by a member the community's badge settings admit, given by any active member to any other, never a credential. Fixed for the badge's life; a kudos badge becomes a community badge only by promotion (vtc/badges/promote).";
+            readonly type: "string";
+            readonly enum: readonly ["community", "kudos"];
+        };
+        readonly CardBlobRef: {
+            readonly title: "CardBlobRef";
+            readonly description: "A content-addressed image held in the community's blob store — an avatar or an `image` field. At most 256 KiB, images only, re-encoded by the community on upload (vtc/directory/images/upload: metadata stripped, dimensions capped) so its digest does not link the member across communities. A viewer reads the bytes with vtc/directory/images/get, which answers only where the same projection shows the value. `url` and `urlExpiresAt` MAY appear in a projection: a short-lived URL the community checks against the same projection, so a member-only image is never a public URL. A community that does not offer one leaves both out.";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["sha256", "mediaType"];
+            readonly properties: {
+                readonly sha256: {
+                    readonly type: "string";
+                    readonly pattern: "^[0-9a-f]{64}$";
+                    readonly description: "Lowercase hex SHA-256 of the stored, re-encoded bytes.";
+                };
+                readonly mediaType: {
+                    readonly type: "string";
+                    readonly enum: readonly ["image/png", "image/jpeg", "image/webp", "image/avif"];
+                    readonly description: "Media type of the stored bytes.";
+                };
+                readonly size: {
+                    readonly type: "integer";
+                    readonly minimum: 1;
+                    readonly maximum: 262144;
+                    readonly description: "Size in bytes of the stored bytes.";
+                };
+                readonly url: {
+                    readonly type: "string";
+                    readonly format: "uri";
+                    readonly maxLength: 2048;
+                    readonly description: "Projection only: a URL the viewer can fetch the image from until `urlExpiresAt`.";
+                };
+                readonly urlExpiresAt: {
+                    readonly type: "string";
+                    readonly format: "date-time";
+                    readonly description: "Projection only: when `url` stops working.";
+                };
+            };
+        };
+    };
+};
+/** As {@link PAYLOAD_SCHEMA}, for the success-response variant. */
+export declare const RESPONSE_PAYLOAD_SCHEMA: {
+    readonly $schema: "https://json-schema.org/draft/2020-12/schema";
+    readonly $ref: "#/$defs/Response";
+    readonly $defs: {
+        readonly Response: {
+            readonly $anchor: "response";
+            readonly title: "VTC Badges — Promote — response payload";
+            readonly description: "The success response to a vtc/badges/promote/0.1 request. Carried in a Trust Task document whose type is https://trusttasks.org/spec/vtc/badges/promote/0.1#response.";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["badge", "group"];
+            readonly properties: {
+                readonly badge: {
+                    readonly $ref: "#/$defs/Badge";
+                    readonly description: "The badge, now `kind` `community` with its `groupId`. `holderCount` is 0 until a holder accepts.";
+                };
+                readonly group: {
+                    readonly $ref: "#/$defs/Group";
+                    readonly description: "The badge group, as vtc/groups/create answers it.";
+                };
+                readonly holdersOffered: {
+                    readonly type: "integer";
+                    readonly minimum: 0;
+                    readonly description: "How many current holders were offered the badge — one offer each, who they are never said here.";
+                };
+                readonly ext: {
+                    readonly $ref: "#/$defs/Ext";
+                };
+            };
+        };
+        readonly Ext: {
+            readonly title: "Ext";
+            readonly description: "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.";
+            readonly type: "object";
+            readonly minProperties: 1;
+            readonly additionalProperties: true;
+            readonly propertyNames: {
+                readonly pattern: "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$";
+            };
+        };
+        readonly Group: {
+            readonly title: "Group";
+            readonly description: "A community group, as a caller who may see it sees it. Members a caller may not see are absent: `memberCount` only to those who may see the group's members, `managers` and `credentialAuthorityValidUntil` only to its managers.";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["groupId", "groupDid", "name", "kind", "visibility", "showMembers", "issuesCredentials", "carriesAuthority", "createdAt"];
+            readonly properties: {
+                readonly groupId: {
+                    readonly $ref: "#/$defs/GroupId";
+                };
+                readonly groupDid: {
+                    readonly type: "string";
+                    readonly pattern: "^did:";
+                    readonly maxLength: 2048;
+                    readonly description: "The group's own DID, minted by the community's VTA for this group alone. It issues the group's membership credentials. Its DID document carries no name or description.";
+                };
+                readonly name: {
+                    readonly $ref: "#/$defs/GroupName";
+                };
+                readonly description: {
+                    readonly $ref: "#/$defs/GroupDescription";
+                };
+                readonly kind: {
+                    readonly $ref: "#/$defs/GroupKind";
+                };
+                readonly rule: {
+                    readonly $ref: "#/$defs/DynamicRule";
+                    readonly description: "Present exactly when `kind` is `dynamic`.";
+                };
+                readonly joinPolicy: {
+                    readonly $ref: "#/$defs/JoinPolicy";
+                    readonly description: "Present exactly when `kind` is `static`.";
+                };
+                readonly visibility: {
+                    readonly $ref: "#/$defs/GroupAudience";
+                    readonly description: "Who may see that the group exists, and its name and description.";
+                };
+                readonly showMembers: {
+                    readonly $ref: "#/$defs/GroupAudience";
+                    readonly description: "Who may see the group's member list. Separate from `visibility`: a group everyone sees may show its members only to administrators. Never wider than `visibility`.";
+                };
+                readonly issuesCredentials: {
+                    readonly type: "boolean";
+                    readonly description: "Whether the group's DID issues its members a membership credential. Default true.";
+                };
+                readonly carriesAuthority: {
+                    readonly type: "boolean";
+                    readonly description: "`true` while the group has a `grants` or `role` binding. Such a group is `static` and `closed` for as long as it does.";
+                };
+                readonly badgeId: {
+                    readonly $ref: "#/$defs/BadgeId";
+                    readonly description: "Present exactly when the group backs a community badge (vtc/badges/*): its managers are the badge's owners, its members the badge's holders, and its DID issues the badge credential in place of a membership credential. A badge group never carries authority, is not counted among the groups two members share, and is listed among the community's groups only to a caller who asks for badge groups (VTI-BDG-010 – VTI-BDG-012).";
+                };
+                readonly memberCount: {
+                    readonly type: "integer";
+                    readonly minimum: 0;
+                    readonly description: "Active members. Only to callers who may see the member list.";
+                };
+                readonly managers: {
+                    readonly type: "array";
+                    readonly maxItems: 256;
+                    readonly uniqueItems: true;
+                    readonly items: {
+                        readonly $ref: "#/$defs/EntryId";
+                    };
+                    readonly description: "Entries holding `vtc.groups.manage` qualified to this group, read from the access-control list. Informational: managers are appointed by an access-control grant (vtc/groups/managers/add), never by this record.";
+                };
+                readonly credentialAuthorityValidUntil: {
+                    readonly type: "string";
+                    readonly format: "date-time";
+                    readonly description: "When the community's authorization credential to the group expires. The community renews it well before.";
+                };
+                readonly createdAt: {
+                    readonly type: "string";
+                    readonly format: "date-time";
+                };
+                readonly createdBy: {
+                    readonly $ref: "#/$defs/EntryId";
+                    readonly description: "The creating administrator's directory entry, where they have one.";
+                };
+                readonly updatedAt: {
+                    readonly type: "string";
+                    readonly format: "date-time";
+                };
+                readonly ext: {
+                    readonly $ref: "#/$defs/Ext";
+                    readonly description: "Ecosystem-defined extension members per SPEC.md §4.5.1. An extension member MUST NOT carry authority.";
+                };
+            };
+        };
+        readonly GroupAudience: {
+            readonly title: "GroupAudience";
+            readonly description: "Who may see something about a group, narrowest first. `admins`: holders of `vtc.groups.manage` for the group (unqualified, or qualified `group:<groupId>`). `groupMembers`: the group's own members, and its managers. `members`: every active member of the community.";
+            readonly type: "string";
+            readonly enum: readonly ["admins", "groupMembers", "members"];
+        };
+        readonly JoinPolicy: {
+            readonly title: "JoinPolicy";
+            readonly description: "How a member enters a static group by themselves. `closed`: only a manager adds them. `request`: a member asks and a manager decides. `open`: a member joins at once, subject to the community's `groups` policy. A group carrying authority is always `closed`.";
+            readonly type: "string";
+            readonly enum: readonly ["closed", "request", "open"];
+        };
+        readonly DynamicRule: {
+            readonly title: "DynamicRule";
+            readonly description: "A dynamic group's membership rule: a member belongs when every condition holds and they have not opted out. The community evaluates it under its `groups` policy and recomputes membership whenever a fact it reads changes, always excluding opted-out entries.";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["all"];
+            readonly properties: {
+                readonly all: {
+                    readonly type: "array";
+                    readonly minItems: 1;
+                    readonly maxItems: 16;
+                    readonly items: {
+                        readonly $ref: "#/$defs/RuleCondition";
+                    };
+                };
+            };
+        };
+        readonly RuleCondition: {
+            readonly title: "RuleCondition";
+            readonly description: "One test over a verified fact about a member. `fact: role` tests the member's community role; `fact: field` tests an `admin`- or `credential`-sourced directory field named by `field`; `fact: personhood` tests whether a personhood assertion is on file; `fact: joinedAt` tests when they joined. A rule never reads a self-asserted (`member`-sourced) field: a member must not be able to join a group by editing their card.";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["fact", "op"];
+            readonly properties: {
+                readonly fact: {
+                    readonly type: "string";
+                    readonly enum: readonly ["role", "field", "personhood", "joinedAt"];
+                };
+                readonly field: {
+                    readonly $ref: "#/$defs/FieldKey";
+                    readonly description: "Present exactly when `fact` is `field`.";
+                };
+                readonly op: {
+                    readonly type: "string";
+                    readonly enum: readonly ["equals", "oneOf", "exists", "before", "after"];
+                    readonly description: "`equals` compares with `value`; `oneOf` with any of `values`; `exists` needs neither; `before` and `after` compare a date fact with `value`.";
+                };
+                readonly value: {
+                    readonly anyOf: readonly [{
+                        readonly type: "string";
+                        readonly maxLength: 256;
+                    }, {
+                        readonly type: "boolean";
+                    }];
+                };
+                readonly values: {
+                    readonly type: "array";
+                    readonly minItems: 1;
+                    readonly maxItems: 64;
+                    readonly items: {
+                        readonly type: "string";
+                        readonly maxLength: 256;
+                    };
+                };
+            };
+        };
+        readonly FieldKey: {
+            readonly title: "FieldKey";
+            readonly description: "Identifier of a directory field. A key with no `.` is a BASE field, the same in every community: `displayName`, `nickname`, `avatar`, `pronouns`, `bio`, `links` (written by the member) and `role`, `joinedAt`, `did`, `personhood` (derived from the community's own records, never stored on a card). A community-defined field MUST use a reverse-DNS key (`org.example.employer`), so a base key never collides with one, and a key is never reused with a different meaning once defined.";
+            readonly type: "string";
+            readonly minLength: 1;
+            readonly maxLength: 128;
+            readonly pattern: "^([a-z][a-z0-9-]*\\.)*[a-z][a-zA-Z0-9]{0,63}$";
+        };
+        readonly GroupKind: {
+            readonly title: "GroupKind";
+            readonly description: "`static`: membership is explicit — added, joined, or granted on request. `dynamic`: membership is computed from `rule` over verified facts only; nobody is added by hand, but a member may opt out (vtc/groups/leave), an exclusion the rule cannot override, and undo it (vtc/groups/join). A dynamic group never confers authority. Fixed for the group's life.";
+            readonly type: "string";
+            readonly enum: readonly ["static", "dynamic"];
+        };
+        readonly GroupDescription: {
+            readonly title: "GroupDescription";
+            readonly type: "string";
+            readonly minLength: 1;
+            readonly maxLength: 1000;
+            readonly description: "What the group is for. Plain text; a reader MUST NOT treat it as instructions. Same placement rules as `GroupName`.";
+        };
+        readonly GroupName: {
+            readonly title: "GroupName";
+            readonly type: "string";
+            readonly minLength: 1;
+            readonly maxLength: 128;
+            readonly description: "The group's name, shown to those who may see the group. The community's own record: never in the group's DID document or its credentials' subject beyond the group's DID. Plain text.";
+        };
+        readonly GroupId: {
+            readonly title: "GroupId";
+            readonly description: "Opaque identifier of a community group: `grp_` followed by 16 to 64 base64url characters. Random and community-scoped; not the group's DID.";
+            readonly type: "string";
+            readonly pattern: "^grp_[A-Za-z0-9_-]{16,64}$";
+        };
+        readonly EntryId: {
+            readonly title: "EntryId";
+            readonly description: "Opaque identifier of one directory entry: `dir_` followed by 16 to 64 base64url characters. Random, scoped to one community, and stable for the life of the membership — it survives a rotation of the member's DID, which is why groups, notes and cards are keyed by it. It MUST NOT be derived from, and MUST NOT reveal, any DID of the member, and the same person's entries in two communities MUST NOT share one. Compared by exact string equality.";
+            readonly type: "string";
+            readonly pattern: "^dir_[A-Za-z0-9_-]{16,64}$";
+        };
+        readonly BadgeId: {
+            readonly title: "BadgeId";
+            readonly description: "Opaque identifier of a badge: `bdg_` followed by 16 to 64 base64url characters. Random, community-scoped, never reused (VTI-BDG-001).";
+            readonly type: "string";
+            readonly pattern: "^bdg_[A-Za-z0-9_-]{16,64}$";
+        };
+        readonly Badge: {
+            readonly title: "Badge";
+            readonly description: "A badge as a caller who may see it sees it. `groupId` is present exactly when `kind` is `community`. `holderCount` only to callers who may see the badge's holders, counted over holders who have not hidden it (VTI-BDG-030, VTI-BDG-033). `createdBy` is the directory entry of the administrator or member who made it, where they have one.";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["badgeId", "kind", "name", "description", "image", "repeatable", "listed", "state", "createdAt"];
+            readonly properties: {
+                readonly badgeId: {
+                    readonly $ref: "#/$defs/BadgeId";
+                };
+                readonly kind: {
+                    readonly $ref: "#/$defs/BadgeKind";
+                };
+                readonly name: {
+                    readonly $ref: "#/$defs/BadgeName";
+                };
+                readonly description: {
+                    readonly $ref: "#/$defs/BadgeDescription";
+                };
+                readonly criteria: {
+                    readonly $ref: "#/$defs/BadgeCriteria";
+                };
+                readonly image: {
+                    readonly $ref: "#/$defs/CardBlobRef";
+                    readonly description: "The badge's picture, re-encoded and stored by the community (vtc/badges/images/upload), read with vtc/badges/images/get. `url` and `urlExpiresAt` MAY appear in a projection as for a card picture; for a badge whose holders may show it outside, `url` MAY be the picture's stable public location.";
+                };
+                readonly repeatable: {
+                    readonly type: "boolean";
+                    readonly description: "Whether one member may hold the badge more than once, each giving an award of its own (VTI-BDG-022). Always true for a kudos badge.";
+                };
+                readonly requestable: {
+                    readonly type: "boolean";
+                    readonly description: "Community badges only. Whether a member may ask for it: a request to join its badge group, decided by its owners (VTI-BDG-014). Absent reads as false.";
+                };
+                readonly listed: {
+                    readonly type: "boolean";
+                    readonly description: "Whether members who do not hold the badge see it in the community's badge list. An unlisted badge is seen by its holders, its owners and administrators.";
+                };
+                readonly shareableOutside: {
+                    readonly type: "boolean";
+                    readonly description: "Community badges only. Whether its holders may show it outside the community, which decides the credential's regime: short-lived and renewed with no status when false, long-lived with a status in the community's own status set when true (VTI-BDG-061, VTI-BDG-062). Absent reads as false.";
+                };
+                readonly groupId: {
+                    readonly $ref: "#/$defs/GroupId";
+                    readonly description: "The badge group that backs a community badge: its managers are the badge's owners, its members the holders, its DID the credential's issuer.";
+                };
+                readonly state: {
+                    readonly $ref: "#/$defs/BadgeState";
+                };
+                readonly holderCount: {
+                    readonly type: "integer";
+                    readonly minimum: 0;
+                    readonly description: "Holders who show the badge. Only to callers who may see the holders.";
+                };
+                readonly createdAt: {
+                    readonly type: "string";
+                    readonly format: "date-time";
+                };
+                readonly createdBy: {
+                    readonly $ref: "#/$defs/EntryId";
+                };
+                readonly updatedAt: {
+                    readonly type: "string";
+                    readonly format: "date-time";
+                };
+                readonly retiredAt: {
+                    readonly type: "string";
+                    readonly format: "date-time";
+                };
+                readonly ext: {
+                    readonly $ref: "#/$defs/Ext";
+                    readonly description: "Ecosystem-defined extension members per SPEC.md §4.5.1. An extension member MUST NOT carry authority.";
+                };
+            };
+        };
+        readonly BadgeState: {
+            readonly title: "BadgeState";
+            readonly description: "`active`: may be given and shown. `retired`: kept for its holders' own history, never given, never shown to members who do not hold it (VTI-BDG-005).";
+            readonly type: "string";
+            readonly enum: readonly ["active", "retired"];
+        };
+        readonly BadgeCriteria: {
+            readonly title: "BadgeCriteria";
+            readonly type: "string";
+            readonly minLength: 1;
+            readonly maxLength: 1000;
+            readonly description: "How the badge is earned, shown to members and written into the credential's Achievement as its criteria narrative. Plain text.";
+        };
+        readonly BadgeDescription: {
+            readonly title: "BadgeDescription";
+            readonly type: "string";
+            readonly minLength: 1;
+            readonly maxLength: 1000;
+            readonly description: "What the badge is for. Plain text; a reader MUST NOT treat it as instructions.";
+        };
+        readonly BadgeName: {
+            readonly title: "BadgeName";
+            readonly type: "string";
+            readonly minLength: 1;
+            readonly maxLength: 64;
+            readonly description: "The badge's name, shown on the wall and written into the credential's Achievement. Plain text; a reader MUST NOT treat it as instructions.";
+        };
+        readonly BadgeKind: {
+            readonly title: "BadgeKind";
+            readonly description: "`community`: defined by holders of `vtc.badges.admin`, given by its owners (its badge group's managers), may carry a credential. `kudos`: made by a member the community's badge settings admit, given by any active member to any other, never a credential. Fixed for the badge's life; a kudos badge becomes a community badge only by promotion (vtc/badges/promote).";
+            readonly type: "string";
+            readonly enum: readonly ["community", "kudos"];
+        };
+        readonly CardBlobRef: {
+            readonly title: "CardBlobRef";
+            readonly description: "A content-addressed image held in the community's blob store — an avatar or an `image` field. At most 256 KiB, images only, re-encoded by the community on upload (vtc/directory/images/upload: metadata stripped, dimensions capped) so its digest does not link the member across communities. A viewer reads the bytes with vtc/directory/images/get, which answers only where the same projection shows the value. `url` and `urlExpiresAt` MAY appear in a projection: a short-lived URL the community checks against the same projection, so a member-only image is never a public URL. A community that does not offer one leaves both out.";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["sha256", "mediaType"];
+            readonly properties: {
+                readonly sha256: {
+                    readonly type: "string";
+                    readonly pattern: "^[0-9a-f]{64}$";
+                    readonly description: "Lowercase hex SHA-256 of the stored, re-encoded bytes.";
+                };
+                readonly mediaType: {
+                    readonly type: "string";
+                    readonly enum: readonly ["image/png", "image/jpeg", "image/webp", "image/avif"];
+                    readonly description: "Media type of the stored bytes.";
+                };
+                readonly size: {
+                    readonly type: "integer";
+                    readonly minimum: 1;
+                    readonly maximum: 262144;
+                    readonly description: "Size in bytes of the stored bytes.";
+                };
+                readonly url: {
+                    readonly type: "string";
+                    readonly format: "uri";
+                    readonly maxLength: 2048;
+                    readonly description: "Projection only: a URL the viewer can fetch the image from until `urlExpiresAt`.";
+                };
+                readonly urlExpiresAt: {
+                    readonly type: "string";
+                    readonly format: "date-time";
+                    readonly description: "Projection only: when `url` stops working.";
+                };
+            };
+        };
+    };
+};
+/**
+ * SPEC.md §7.2 policy for the request variant, from this specification's
+ * front matter. Pass to `consumeInbound` — items 5b, 7 and 8 are
+ * per-specification and cannot be derived from the document alone, and
+ * item 2 needs the schema this carries.
+ */
+export declare const SPEC: {
+    readonly typeUri: "https://trusttasks.org/spec/vtc/badges/promote/0.1";
+    readonly isBearer: false;
+    readonly isProofRequired: true;
+    readonly isRecipientRequired: true;
+    readonly isIssuedAtRequired: true;
+    readonly payloadSchema: {
+        readonly $schema: "https://json-schema.org/draft/2020-12/schema";
+        readonly $id: "https://trusttasks.org/spec/vtc/badges/promote/0.1";
+        readonly title: "VTC Badges — Promote — payload";
+        readonly description: "Turn a kudos badge into a community badge: its badge group is created and its owners named, and every current holder is offered the badge so that each accepts before anything is issued or recorded. The outer document members are owned by the framework — SPEC §6.3.";
+        readonly type: "object";
+        readonly additionalProperties: false;
+        readonly required: readonly ["badgeId", "reason"];
+        readonly properties: {
+            readonly badgeId: {
+                readonly $ref: "#/$defs/BadgeId";
+                readonly description: "A kudos badge.";
+            };
+            readonly requestable: {
+                readonly type: "boolean";
+                readonly description: "Whether members may ask for it (a request to join the badge group). Absent: false.";
+            };
+            readonly shareableOutside: {
+                readonly type: "boolean";
+                readonly description: "Whether holders may show it outside the community, which fixes the credential's regime for the badge's life. Absent: false.";
+            };
+            readonly holdersVisibleTo: {
+                readonly $ref: "#/$defs/GroupAudience";
+                readonly description: "Who may see the badge's holders: the badge group's `showMembers`. Absent: `members`.";
+            };
+            readonly owners: {
+                readonly type: "array";
+                readonly maxItems: 32;
+                readonly uniqueItems: true;
+                readonly items: {
+                    readonly $ref: "#/$defs/EntryId";
+                };
+                readonly description: "Members to appoint as the badge's owners — the badge group's managers — as vtc/groups/managers/add appoints them, bounded by the signer's own holding. The badge's maker is an owner only if named here.";
+            };
+            readonly reason: {
+                readonly type: "string";
+                readonly minLength: 1;
+                readonly maxLength: 1024;
+                readonly description: "Why, recorded with the change.";
+            };
+            readonly ext: {
+                readonly $ref: "#/$defs/Ext";
+            };
+        };
+        readonly $defs: {
+            readonly Response: {
+                readonly $anchor: "response";
+                readonly title: "VTC Badges — Promote — response payload";
+                readonly description: "The success response to a vtc/badges/promote/0.1 request. Carried in a Trust Task document whose type is https://trusttasks.org/spec/vtc/badges/promote/0.1#response.";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["badge", "group"];
+                readonly properties: {
+                    readonly badge: {
+                        readonly $ref: "#/$defs/Badge";
+                        readonly description: "The badge, now `kind` `community` with its `groupId`. `holderCount` is 0 until a holder accepts.";
+                    };
+                    readonly group: {
+                        readonly $ref: "#/$defs/Group";
+                        readonly description: "The badge group, as vtc/groups/create answers it.";
+                    };
+                    readonly holdersOffered: {
+                        readonly type: "integer";
+                        readonly minimum: 0;
+                        readonly description: "How many current holders were offered the badge — one offer each, who they are never said here.";
+                    };
+                    readonly ext: {
+                        readonly $ref: "#/$defs/Ext";
+                    };
+                };
+            };
+            readonly Ext: {
+                readonly title: "Ext";
+                readonly description: "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.";
+                readonly type: "object";
+                readonly minProperties: 1;
+                readonly additionalProperties: true;
+                readonly propertyNames: {
+                    readonly pattern: "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$";
+                };
+            };
+            readonly Group: {
+                readonly title: "Group";
+                readonly description: "A community group, as a caller who may see it sees it. Members a caller may not see are absent: `memberCount` only to those who may see the group's members, `managers` and `credentialAuthorityValidUntil` only to its managers.";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["groupId", "groupDid", "name", "kind", "visibility", "showMembers", "issuesCredentials", "carriesAuthority", "createdAt"];
+                readonly properties: {
+                    readonly groupId: {
+                        readonly $ref: "#/$defs/GroupId";
+                    };
+                    readonly groupDid: {
+                        readonly type: "string";
+                        readonly pattern: "^did:";
+                        readonly maxLength: 2048;
+                        readonly description: "The group's own DID, minted by the community's VTA for this group alone. It issues the group's membership credentials. Its DID document carries no name or description.";
+                    };
+                    readonly name: {
+                        readonly $ref: "#/$defs/GroupName";
+                    };
+                    readonly description: {
+                        readonly $ref: "#/$defs/GroupDescription";
+                    };
+                    readonly kind: {
+                        readonly $ref: "#/$defs/GroupKind";
+                    };
+                    readonly rule: {
+                        readonly $ref: "#/$defs/DynamicRule";
+                        readonly description: "Present exactly when `kind` is `dynamic`.";
+                    };
+                    readonly joinPolicy: {
+                        readonly $ref: "#/$defs/JoinPolicy";
+                        readonly description: "Present exactly when `kind` is `static`.";
+                    };
+                    readonly visibility: {
+                        readonly $ref: "#/$defs/GroupAudience";
+                        readonly description: "Who may see that the group exists, and its name and description.";
+                    };
+                    readonly showMembers: {
+                        readonly $ref: "#/$defs/GroupAudience";
+                        readonly description: "Who may see the group's member list. Separate from `visibility`: a group everyone sees may show its members only to administrators. Never wider than `visibility`.";
+                    };
+                    readonly issuesCredentials: {
+                        readonly type: "boolean";
+                        readonly description: "Whether the group's DID issues its members a membership credential. Default true.";
+                    };
+                    readonly carriesAuthority: {
+                        readonly type: "boolean";
+                        readonly description: "`true` while the group has a `grants` or `role` binding. Such a group is `static` and `closed` for as long as it does.";
+                    };
+                    readonly badgeId: {
+                        readonly $ref: "#/$defs/BadgeId";
+                        readonly description: "Present exactly when the group backs a community badge (vtc/badges/*): its managers are the badge's owners, its members the badge's holders, and its DID issues the badge credential in place of a membership credential. A badge group never carries authority, is not counted among the groups two members share, and is listed among the community's groups only to a caller who asks for badge groups (VTI-BDG-010 – VTI-BDG-012).";
+                    };
+                    readonly memberCount: {
+                        readonly type: "integer";
+                        readonly minimum: 0;
+                        readonly description: "Active members. Only to callers who may see the member list.";
+                    };
+                    readonly managers: {
+                        readonly type: "array";
+                        readonly maxItems: 256;
+                        readonly uniqueItems: true;
+                        readonly items: {
+                            readonly $ref: "#/$defs/EntryId";
+                        };
+                        readonly description: "Entries holding `vtc.groups.manage` qualified to this group, read from the access-control list. Informational: managers are appointed by an access-control grant (vtc/groups/managers/add), never by this record.";
+                    };
+                    readonly credentialAuthorityValidUntil: {
+                        readonly type: "string";
+                        readonly format: "date-time";
+                        readonly description: "When the community's authorization credential to the group expires. The community renews it well before.";
+                    };
+                    readonly createdAt: {
+                        readonly type: "string";
+                        readonly format: "date-time";
+                    };
+                    readonly createdBy: {
+                        readonly $ref: "#/$defs/EntryId";
+                        readonly description: "The creating administrator's directory entry, where they have one.";
+                    };
+                    readonly updatedAt: {
+                        readonly type: "string";
+                        readonly format: "date-time";
+                    };
+                    readonly ext: {
+                        readonly $ref: "#/$defs/Ext";
+                        readonly description: "Ecosystem-defined extension members per SPEC.md §4.5.1. An extension member MUST NOT carry authority.";
+                    };
+                };
+            };
+            readonly GroupAudience: {
+                readonly title: "GroupAudience";
+                readonly description: "Who may see something about a group, narrowest first. `admins`: holders of `vtc.groups.manage` for the group (unqualified, or qualified `group:<groupId>`). `groupMembers`: the group's own members, and its managers. `members`: every active member of the community.";
+                readonly type: "string";
+                readonly enum: readonly ["admins", "groupMembers", "members"];
+            };
+            readonly JoinPolicy: {
+                readonly title: "JoinPolicy";
+                readonly description: "How a member enters a static group by themselves. `closed`: only a manager adds them. `request`: a member asks and a manager decides. `open`: a member joins at once, subject to the community's `groups` policy. A group carrying authority is always `closed`.";
+                readonly type: "string";
+                readonly enum: readonly ["closed", "request", "open"];
+            };
+            readonly DynamicRule: {
+                readonly title: "DynamicRule";
+                readonly description: "A dynamic group's membership rule: a member belongs when every condition holds and they have not opted out. The community evaluates it under its `groups` policy and recomputes membership whenever a fact it reads changes, always excluding opted-out entries.";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["all"];
+                readonly properties: {
+                    readonly all: {
+                        readonly type: "array";
+                        readonly minItems: 1;
+                        readonly maxItems: 16;
+                        readonly items: {
+                            readonly $ref: "#/$defs/RuleCondition";
+                        };
+                    };
+                };
+            };
+            readonly RuleCondition: {
+                readonly title: "RuleCondition";
+                readonly description: "One test over a verified fact about a member. `fact: role` tests the member's community role; `fact: field` tests an `admin`- or `credential`-sourced directory field named by `field`; `fact: personhood` tests whether a personhood assertion is on file; `fact: joinedAt` tests when they joined. A rule never reads a self-asserted (`member`-sourced) field: a member must not be able to join a group by editing their card.";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["fact", "op"];
+                readonly properties: {
+                    readonly fact: {
+                        readonly type: "string";
+                        readonly enum: readonly ["role", "field", "personhood", "joinedAt"];
+                    };
+                    readonly field: {
+                        readonly $ref: "#/$defs/FieldKey";
+                        readonly description: "Present exactly when `fact` is `field`.";
+                    };
+                    readonly op: {
+                        readonly type: "string";
+                        readonly enum: readonly ["equals", "oneOf", "exists", "before", "after"];
+                        readonly description: "`equals` compares with `value`; `oneOf` with any of `values`; `exists` needs neither; `before` and `after` compare a date fact with `value`.";
+                    };
+                    readonly value: {
+                        readonly anyOf: readonly [{
+                            readonly type: "string";
+                            readonly maxLength: 256;
+                        }, {
+                            readonly type: "boolean";
+                        }];
+                    };
+                    readonly values: {
+                        readonly type: "array";
+                        readonly minItems: 1;
+                        readonly maxItems: 64;
+                        readonly items: {
+                            readonly type: "string";
+                            readonly maxLength: 256;
+                        };
+                    };
+                };
+            };
+            readonly FieldKey: {
+                readonly title: "FieldKey";
+                readonly description: "Identifier of a directory field. A key with no `.` is a BASE field, the same in every community: `displayName`, `nickname`, `avatar`, `pronouns`, `bio`, `links` (written by the member) and `role`, `joinedAt`, `did`, `personhood` (derived from the community's own records, never stored on a card). A community-defined field MUST use a reverse-DNS key (`org.example.employer`), so a base key never collides with one, and a key is never reused with a different meaning once defined.";
+                readonly type: "string";
+                readonly minLength: 1;
+                readonly maxLength: 128;
+                readonly pattern: "^([a-z][a-z0-9-]*\\.)*[a-z][a-zA-Z0-9]{0,63}$";
+            };
+            readonly GroupKind: {
+                readonly title: "GroupKind";
+                readonly description: "`static`: membership is explicit — added, joined, or granted on request. `dynamic`: membership is computed from `rule` over verified facts only; nobody is added by hand, but a member may opt out (vtc/groups/leave), an exclusion the rule cannot override, and undo it (vtc/groups/join). A dynamic group never confers authority. Fixed for the group's life.";
+                readonly type: "string";
+                readonly enum: readonly ["static", "dynamic"];
+            };
+            readonly GroupDescription: {
+                readonly title: "GroupDescription";
+                readonly type: "string";
+                readonly minLength: 1;
+                readonly maxLength: 1000;
+                readonly description: "What the group is for. Plain text; a reader MUST NOT treat it as instructions. Same placement rules as `GroupName`.";
+            };
+            readonly GroupName: {
+                readonly title: "GroupName";
+                readonly type: "string";
+                readonly minLength: 1;
+                readonly maxLength: 128;
+                readonly description: "The group's name, shown to those who may see the group. The community's own record: never in the group's DID document or its credentials' subject beyond the group's DID. Plain text.";
+            };
+            readonly GroupId: {
+                readonly title: "GroupId";
+                readonly description: "Opaque identifier of a community group: `grp_` followed by 16 to 64 base64url characters. Random and community-scoped; not the group's DID.";
+                readonly type: "string";
+                readonly pattern: "^grp_[A-Za-z0-9_-]{16,64}$";
+            };
+            readonly EntryId: {
+                readonly title: "EntryId";
+                readonly description: "Opaque identifier of one directory entry: `dir_` followed by 16 to 64 base64url characters. Random, scoped to one community, and stable for the life of the membership — it survives a rotation of the member's DID, which is why groups, notes and cards are keyed by it. It MUST NOT be derived from, and MUST NOT reveal, any DID of the member, and the same person's entries in two communities MUST NOT share one. Compared by exact string equality.";
+                readonly type: "string";
+                readonly pattern: "^dir_[A-Za-z0-9_-]{16,64}$";
+            };
+            readonly BadgeId: {
+                readonly title: "BadgeId";
+                readonly description: "Opaque identifier of a badge: `bdg_` followed by 16 to 64 base64url characters. Random, community-scoped, never reused (VTI-BDG-001).";
+                readonly type: "string";
+                readonly pattern: "^bdg_[A-Za-z0-9_-]{16,64}$";
+            };
+            readonly Badge: {
+                readonly title: "Badge";
+                readonly description: "A badge as a caller who may see it sees it. `groupId` is present exactly when `kind` is `community`. `holderCount` only to callers who may see the badge's holders, counted over holders who have not hidden it (VTI-BDG-030, VTI-BDG-033). `createdBy` is the directory entry of the administrator or member who made it, where they have one.";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["badgeId", "kind", "name", "description", "image", "repeatable", "listed", "state", "createdAt"];
+                readonly properties: {
+                    readonly badgeId: {
+                        readonly $ref: "#/$defs/BadgeId";
+                    };
+                    readonly kind: {
+                        readonly $ref: "#/$defs/BadgeKind";
+                    };
+                    readonly name: {
+                        readonly $ref: "#/$defs/BadgeName";
+                    };
+                    readonly description: {
+                        readonly $ref: "#/$defs/BadgeDescription";
+                    };
+                    readonly criteria: {
+                        readonly $ref: "#/$defs/BadgeCriteria";
+                    };
+                    readonly image: {
+                        readonly $ref: "#/$defs/CardBlobRef";
+                        readonly description: "The badge's picture, re-encoded and stored by the community (vtc/badges/images/upload), read with vtc/badges/images/get. `url` and `urlExpiresAt` MAY appear in a projection as for a card picture; for a badge whose holders may show it outside, `url` MAY be the picture's stable public location.";
+                    };
+                    readonly repeatable: {
+                        readonly type: "boolean";
+                        readonly description: "Whether one member may hold the badge more than once, each giving an award of its own (VTI-BDG-022). Always true for a kudos badge.";
+                    };
+                    readonly requestable: {
+                        readonly type: "boolean";
+                        readonly description: "Community badges only. Whether a member may ask for it: a request to join its badge group, decided by its owners (VTI-BDG-014). Absent reads as false.";
+                    };
+                    readonly listed: {
+                        readonly type: "boolean";
+                        readonly description: "Whether members who do not hold the badge see it in the community's badge list. An unlisted badge is seen by its holders, its owners and administrators.";
+                    };
+                    readonly shareableOutside: {
+                        readonly type: "boolean";
+                        readonly description: "Community badges only. Whether its holders may show it outside the community, which decides the credential's regime: short-lived and renewed with no status when false, long-lived with a status in the community's own status set when true (VTI-BDG-061, VTI-BDG-062). Absent reads as false.";
+                    };
+                    readonly groupId: {
+                        readonly $ref: "#/$defs/GroupId";
+                        readonly description: "The badge group that backs a community badge: its managers are the badge's owners, its members the holders, its DID the credential's issuer.";
+                    };
+                    readonly state: {
+                        readonly $ref: "#/$defs/BadgeState";
+                    };
+                    readonly holderCount: {
+                        readonly type: "integer";
+                        readonly minimum: 0;
+                        readonly description: "Holders who show the badge. Only to callers who may see the holders.";
+                    };
+                    readonly createdAt: {
+                        readonly type: "string";
+                        readonly format: "date-time";
+                    };
+                    readonly createdBy: {
+                        readonly $ref: "#/$defs/EntryId";
+                    };
+                    readonly updatedAt: {
+                        readonly type: "string";
+                        readonly format: "date-time";
+                    };
+                    readonly retiredAt: {
+                        readonly type: "string";
+                        readonly format: "date-time";
+                    };
+                    readonly ext: {
+                        readonly $ref: "#/$defs/Ext";
+                        readonly description: "Ecosystem-defined extension members per SPEC.md §4.5.1. An extension member MUST NOT carry authority.";
+                    };
+                };
+            };
+            readonly BadgeState: {
+                readonly title: "BadgeState";
+                readonly description: "`active`: may be given and shown. `retired`: kept for its holders' own history, never given, never shown to members who do not hold it (VTI-BDG-005).";
+                readonly type: "string";
+                readonly enum: readonly ["active", "retired"];
+            };
+            readonly BadgeCriteria: {
+                readonly title: "BadgeCriteria";
+                readonly type: "string";
+                readonly minLength: 1;
+                readonly maxLength: 1000;
+                readonly description: "How the badge is earned, shown to members and written into the credential's Achievement as its criteria narrative. Plain text.";
+            };
+            readonly BadgeDescription: {
+                readonly title: "BadgeDescription";
+                readonly type: "string";
+                readonly minLength: 1;
+                readonly maxLength: 1000;
+                readonly description: "What the badge is for. Plain text; a reader MUST NOT treat it as instructions.";
+            };
+            readonly BadgeName: {
+                readonly title: "BadgeName";
+                readonly type: "string";
+                readonly minLength: 1;
+                readonly maxLength: 64;
+                readonly description: "The badge's name, shown on the wall and written into the credential's Achievement. Plain text; a reader MUST NOT treat it as instructions.";
+            };
+            readonly BadgeKind: {
+                readonly title: "BadgeKind";
+                readonly description: "`community`: defined by holders of `vtc.badges.admin`, given by its owners (its badge group's managers), may carry a credential. `kudos`: made by a member the community's badge settings admit, given by any active member to any other, never a credential. Fixed for the badge's life; a kudos badge becomes a community badge only by promotion (vtc/badges/promote).";
+                readonly type: "string";
+                readonly enum: readonly ["community", "kudos"];
+            };
+            readonly CardBlobRef: {
+                readonly title: "CardBlobRef";
+                readonly description: "A content-addressed image held in the community's blob store — an avatar or an `image` field. At most 256 KiB, images only, re-encoded by the community on upload (vtc/directory/images/upload: metadata stripped, dimensions capped) so its digest does not link the member across communities. A viewer reads the bytes with vtc/directory/images/get, which answers only where the same projection shows the value. `url` and `urlExpiresAt` MAY appear in a projection: a short-lived URL the community checks against the same projection, so a member-only image is never a public URL. A community that does not offer one leaves both out.";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["sha256", "mediaType"];
+                readonly properties: {
+                    readonly sha256: {
+                        readonly type: "string";
+                        readonly pattern: "^[0-9a-f]{64}$";
+                        readonly description: "Lowercase hex SHA-256 of the stored, re-encoded bytes.";
+                    };
+                    readonly mediaType: {
+                        readonly type: "string";
+                        readonly enum: readonly ["image/png", "image/jpeg", "image/webp", "image/avif"];
+                        readonly description: "Media type of the stored bytes.";
+                    };
+                    readonly size: {
+                        readonly type: "integer";
+                        readonly minimum: 1;
+                        readonly maximum: 262144;
+                        readonly description: "Size in bytes of the stored bytes.";
+                    };
+                    readonly url: {
+                        readonly type: "string";
+                        readonly format: "uri";
+                        readonly maxLength: 2048;
+                        readonly description: "Projection only: a URL the viewer can fetch the image from until `urlExpiresAt`.";
+                    };
+                    readonly urlExpiresAt: {
+                        readonly type: "string";
+                        readonly format: "date-time";
+                        readonly description: "Projection only: when `url` stops working.";
+                    };
+                };
+            };
+        };
+    };
+};
+/**
+ * SPEC.md §7.2 policy for the success-response variant. `isRecipientRequired`
+ * tracks the *issuer* party's requirement because a response swaps the
+ * parties (§7.3 item 5).
+ */
+export declare const RESPONSE_SPEC: {
+    readonly typeUri: "https://trusttasks.org/spec/vtc/badges/promote/0.1#response";
+    readonly isBearer: false;
+    readonly isProofRequired: true;
+    readonly isRecipientRequired: true;
+    readonly isIssuedAtRequired: true;
+    readonly payloadSchema: {
+        readonly $schema: "https://json-schema.org/draft/2020-12/schema";
+        readonly $ref: "#/$defs/Response";
+        readonly $defs: {
+            readonly Response: {
+                readonly $anchor: "response";
+                readonly title: "VTC Badges — Promote — response payload";
+                readonly description: "The success response to a vtc/badges/promote/0.1 request. Carried in a Trust Task document whose type is https://trusttasks.org/spec/vtc/badges/promote/0.1#response.";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["badge", "group"];
+                readonly properties: {
+                    readonly badge: {
+                        readonly $ref: "#/$defs/Badge";
+                        readonly description: "The badge, now `kind` `community` with its `groupId`. `holderCount` is 0 until a holder accepts.";
+                    };
+                    readonly group: {
+                        readonly $ref: "#/$defs/Group";
+                        readonly description: "The badge group, as vtc/groups/create answers it.";
+                    };
+                    readonly holdersOffered: {
+                        readonly type: "integer";
+                        readonly minimum: 0;
+                        readonly description: "How many current holders were offered the badge — one offer each, who they are never said here.";
+                    };
+                    readonly ext: {
+                        readonly $ref: "#/$defs/Ext";
+                    };
+                };
+            };
+            readonly Ext: {
+                readonly title: "Ext";
+                readonly description: "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.";
+                readonly type: "object";
+                readonly minProperties: 1;
+                readonly additionalProperties: true;
+                readonly propertyNames: {
+                    readonly pattern: "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$";
+                };
+            };
+            readonly Group: {
+                readonly title: "Group";
+                readonly description: "A community group, as a caller who may see it sees it. Members a caller may not see are absent: `memberCount` only to those who may see the group's members, `managers` and `credentialAuthorityValidUntil` only to its managers.";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["groupId", "groupDid", "name", "kind", "visibility", "showMembers", "issuesCredentials", "carriesAuthority", "createdAt"];
+                readonly properties: {
+                    readonly groupId: {
+                        readonly $ref: "#/$defs/GroupId";
+                    };
+                    readonly groupDid: {
+                        readonly type: "string";
+                        readonly pattern: "^did:";
+                        readonly maxLength: 2048;
+                        readonly description: "The group's own DID, minted by the community's VTA for this group alone. It issues the group's membership credentials. Its DID document carries no name or description.";
+                    };
+                    readonly name: {
+                        readonly $ref: "#/$defs/GroupName";
+                    };
+                    readonly description: {
+                        readonly $ref: "#/$defs/GroupDescription";
+                    };
+                    readonly kind: {
+                        readonly $ref: "#/$defs/GroupKind";
+                    };
+                    readonly rule: {
+                        readonly $ref: "#/$defs/DynamicRule";
+                        readonly description: "Present exactly when `kind` is `dynamic`.";
+                    };
+                    readonly joinPolicy: {
+                        readonly $ref: "#/$defs/JoinPolicy";
+                        readonly description: "Present exactly when `kind` is `static`.";
+                    };
+                    readonly visibility: {
+                        readonly $ref: "#/$defs/GroupAudience";
+                        readonly description: "Who may see that the group exists, and its name and description.";
+                    };
+                    readonly showMembers: {
+                        readonly $ref: "#/$defs/GroupAudience";
+                        readonly description: "Who may see the group's member list. Separate from `visibility`: a group everyone sees may show its members only to administrators. Never wider than `visibility`.";
+                    };
+                    readonly issuesCredentials: {
+                        readonly type: "boolean";
+                        readonly description: "Whether the group's DID issues its members a membership credential. Default true.";
+                    };
+                    readonly carriesAuthority: {
+                        readonly type: "boolean";
+                        readonly description: "`true` while the group has a `grants` or `role` binding. Such a group is `static` and `closed` for as long as it does.";
+                    };
+                    readonly badgeId: {
+                        readonly $ref: "#/$defs/BadgeId";
+                        readonly description: "Present exactly when the group backs a community badge (vtc/badges/*): its managers are the badge's owners, its members the badge's holders, and its DID issues the badge credential in place of a membership credential. A badge group never carries authority, is not counted among the groups two members share, and is listed among the community's groups only to a caller who asks for badge groups (VTI-BDG-010 – VTI-BDG-012).";
+                    };
+                    readonly memberCount: {
+                        readonly type: "integer";
+                        readonly minimum: 0;
+                        readonly description: "Active members. Only to callers who may see the member list.";
+                    };
+                    readonly managers: {
+                        readonly type: "array";
+                        readonly maxItems: 256;
+                        readonly uniqueItems: true;
+                        readonly items: {
+                            readonly $ref: "#/$defs/EntryId";
+                        };
+                        readonly description: "Entries holding `vtc.groups.manage` qualified to this group, read from the access-control list. Informational: managers are appointed by an access-control grant (vtc/groups/managers/add), never by this record.";
+                    };
+                    readonly credentialAuthorityValidUntil: {
+                        readonly type: "string";
+                        readonly format: "date-time";
+                        readonly description: "When the community's authorization credential to the group expires. The community renews it well before.";
+                    };
+                    readonly createdAt: {
+                        readonly type: "string";
+                        readonly format: "date-time";
+                    };
+                    readonly createdBy: {
+                        readonly $ref: "#/$defs/EntryId";
+                        readonly description: "The creating administrator's directory entry, where they have one.";
+                    };
+                    readonly updatedAt: {
+                        readonly type: "string";
+                        readonly format: "date-time";
+                    };
+                    readonly ext: {
+                        readonly $ref: "#/$defs/Ext";
+                        readonly description: "Ecosystem-defined extension members per SPEC.md §4.5.1. An extension member MUST NOT carry authority.";
+                    };
+                };
+            };
+            readonly GroupAudience: {
+                readonly title: "GroupAudience";
+                readonly description: "Who may see something about a group, narrowest first. `admins`: holders of `vtc.groups.manage` for the group (unqualified, or qualified `group:<groupId>`). `groupMembers`: the group's own members, and its managers. `members`: every active member of the community.";
+                readonly type: "string";
+                readonly enum: readonly ["admins", "groupMembers", "members"];
+            };
+            readonly JoinPolicy: {
+                readonly title: "JoinPolicy";
+                readonly description: "How a member enters a static group by themselves. `closed`: only a manager adds them. `request`: a member asks and a manager decides. `open`: a member joins at once, subject to the community's `groups` policy. A group carrying authority is always `closed`.";
+                readonly type: "string";
+                readonly enum: readonly ["closed", "request", "open"];
+            };
+            readonly DynamicRule: {
+                readonly title: "DynamicRule";
+                readonly description: "A dynamic group's membership rule: a member belongs when every condition holds and they have not opted out. The community evaluates it under its `groups` policy and recomputes membership whenever a fact it reads changes, always excluding opted-out entries.";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["all"];
+                readonly properties: {
+                    readonly all: {
+                        readonly type: "array";
+                        readonly minItems: 1;
+                        readonly maxItems: 16;
+                        readonly items: {
+                            readonly $ref: "#/$defs/RuleCondition";
+                        };
+                    };
+                };
+            };
+            readonly RuleCondition: {
+                readonly title: "RuleCondition";
+                readonly description: "One test over a verified fact about a member. `fact: role` tests the member's community role; `fact: field` tests an `admin`- or `credential`-sourced directory field named by `field`; `fact: personhood` tests whether a personhood assertion is on file; `fact: joinedAt` tests when they joined. A rule never reads a self-asserted (`member`-sourced) field: a member must not be able to join a group by editing their card.";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["fact", "op"];
+                readonly properties: {
+                    readonly fact: {
+                        readonly type: "string";
+                        readonly enum: readonly ["role", "field", "personhood", "joinedAt"];
+                    };
+                    readonly field: {
+                        readonly $ref: "#/$defs/FieldKey";
+                        readonly description: "Present exactly when `fact` is `field`.";
+                    };
+                    readonly op: {
+                        readonly type: "string";
+                        readonly enum: readonly ["equals", "oneOf", "exists", "before", "after"];
+                        readonly description: "`equals` compares with `value`; `oneOf` with any of `values`; `exists` needs neither; `before` and `after` compare a date fact with `value`.";
+                    };
+                    readonly value: {
+                        readonly anyOf: readonly [{
+                            readonly type: "string";
+                            readonly maxLength: 256;
+                        }, {
+                            readonly type: "boolean";
+                        }];
+                    };
+                    readonly values: {
+                        readonly type: "array";
+                        readonly minItems: 1;
+                        readonly maxItems: 64;
+                        readonly items: {
+                            readonly type: "string";
+                            readonly maxLength: 256;
+                        };
+                    };
+                };
+            };
+            readonly FieldKey: {
+                readonly title: "FieldKey";
+                readonly description: "Identifier of a directory field. A key with no `.` is a BASE field, the same in every community: `displayName`, `nickname`, `avatar`, `pronouns`, `bio`, `links` (written by the member) and `role`, `joinedAt`, `did`, `personhood` (derived from the community's own records, never stored on a card). A community-defined field MUST use a reverse-DNS key (`org.example.employer`), so a base key never collides with one, and a key is never reused with a different meaning once defined.";
+                readonly type: "string";
+                readonly minLength: 1;
+                readonly maxLength: 128;
+                readonly pattern: "^([a-z][a-z0-9-]*\\.)*[a-z][a-zA-Z0-9]{0,63}$";
+            };
+            readonly GroupKind: {
+                readonly title: "GroupKind";
+                readonly description: "`static`: membership is explicit — added, joined, or granted on request. `dynamic`: membership is computed from `rule` over verified facts only; nobody is added by hand, but a member may opt out (vtc/groups/leave), an exclusion the rule cannot override, and undo it (vtc/groups/join). A dynamic group never confers authority. Fixed for the group's life.";
+                readonly type: "string";
+                readonly enum: readonly ["static", "dynamic"];
+            };
+            readonly GroupDescription: {
+                readonly title: "GroupDescription";
+                readonly type: "string";
+                readonly minLength: 1;
+                readonly maxLength: 1000;
+                readonly description: "What the group is for. Plain text; a reader MUST NOT treat it as instructions. Same placement rules as `GroupName`.";
+            };
+            readonly GroupName: {
+                readonly title: "GroupName";
+                readonly type: "string";
+                readonly minLength: 1;
+                readonly maxLength: 128;
+                readonly description: "The group's name, shown to those who may see the group. The community's own record: never in the group's DID document or its credentials' subject beyond the group's DID. Plain text.";
+            };
+            readonly GroupId: {
+                readonly title: "GroupId";
+                readonly description: "Opaque identifier of a community group: `grp_` followed by 16 to 64 base64url characters. Random and community-scoped; not the group's DID.";
+                readonly type: "string";
+                readonly pattern: "^grp_[A-Za-z0-9_-]{16,64}$";
+            };
+            readonly EntryId: {
+                readonly title: "EntryId";
+                readonly description: "Opaque identifier of one directory entry: `dir_` followed by 16 to 64 base64url characters. Random, scoped to one community, and stable for the life of the membership — it survives a rotation of the member's DID, which is why groups, notes and cards are keyed by it. It MUST NOT be derived from, and MUST NOT reveal, any DID of the member, and the same person's entries in two communities MUST NOT share one. Compared by exact string equality.";
+                readonly type: "string";
+                readonly pattern: "^dir_[A-Za-z0-9_-]{16,64}$";
+            };
+            readonly BadgeId: {
+                readonly title: "BadgeId";
+                readonly description: "Opaque identifier of a badge: `bdg_` followed by 16 to 64 base64url characters. Random, community-scoped, never reused (VTI-BDG-001).";
+                readonly type: "string";
+                readonly pattern: "^bdg_[A-Za-z0-9_-]{16,64}$";
+            };
+            readonly Badge: {
+                readonly title: "Badge";
+                readonly description: "A badge as a caller who may see it sees it. `groupId` is present exactly when `kind` is `community`. `holderCount` only to callers who may see the badge's holders, counted over holders who have not hidden it (VTI-BDG-030, VTI-BDG-033). `createdBy` is the directory entry of the administrator or member who made it, where they have one.";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["badgeId", "kind", "name", "description", "image", "repeatable", "listed", "state", "createdAt"];
+                readonly properties: {
+                    readonly badgeId: {
+                        readonly $ref: "#/$defs/BadgeId";
+                    };
+                    readonly kind: {
+                        readonly $ref: "#/$defs/BadgeKind";
+                    };
+                    readonly name: {
+                        readonly $ref: "#/$defs/BadgeName";
+                    };
+                    readonly description: {
+                        readonly $ref: "#/$defs/BadgeDescription";
+                    };
+                    readonly criteria: {
+                        readonly $ref: "#/$defs/BadgeCriteria";
+                    };
+                    readonly image: {
+                        readonly $ref: "#/$defs/CardBlobRef";
+                        readonly description: "The badge's picture, re-encoded and stored by the community (vtc/badges/images/upload), read with vtc/badges/images/get. `url` and `urlExpiresAt` MAY appear in a projection as for a card picture; for a badge whose holders may show it outside, `url` MAY be the picture's stable public location.";
+                    };
+                    readonly repeatable: {
+                        readonly type: "boolean";
+                        readonly description: "Whether one member may hold the badge more than once, each giving an award of its own (VTI-BDG-022). Always true for a kudos badge.";
+                    };
+                    readonly requestable: {
+                        readonly type: "boolean";
+                        readonly description: "Community badges only. Whether a member may ask for it: a request to join its badge group, decided by its owners (VTI-BDG-014). Absent reads as false.";
+                    };
+                    readonly listed: {
+                        readonly type: "boolean";
+                        readonly description: "Whether members who do not hold the badge see it in the community's badge list. An unlisted badge is seen by its holders, its owners and administrators.";
+                    };
+                    readonly shareableOutside: {
+                        readonly type: "boolean";
+                        readonly description: "Community badges only. Whether its holders may show it outside the community, which decides the credential's regime: short-lived and renewed with no status when false, long-lived with a status in the community's own status set when true (VTI-BDG-061, VTI-BDG-062). Absent reads as false.";
+                    };
+                    readonly groupId: {
+                        readonly $ref: "#/$defs/GroupId";
+                        readonly description: "The badge group that backs a community badge: its managers are the badge's owners, its members the holders, its DID the credential's issuer.";
+                    };
+                    readonly state: {
+                        readonly $ref: "#/$defs/BadgeState";
+                    };
+                    readonly holderCount: {
+                        readonly type: "integer";
+                        readonly minimum: 0;
+                        readonly description: "Holders who show the badge. Only to callers who may see the holders.";
+                    };
+                    readonly createdAt: {
+                        readonly type: "string";
+                        readonly format: "date-time";
+                    };
+                    readonly createdBy: {
+                        readonly $ref: "#/$defs/EntryId";
+                    };
+                    readonly updatedAt: {
+                        readonly type: "string";
+                        readonly format: "date-time";
+                    };
+                    readonly retiredAt: {
+                        readonly type: "string";
+                        readonly format: "date-time";
+                    };
+                    readonly ext: {
+                        readonly $ref: "#/$defs/Ext";
+                        readonly description: "Ecosystem-defined extension members per SPEC.md §4.5.1. An extension member MUST NOT carry authority.";
+                    };
+                };
+            };
+            readonly BadgeState: {
+                readonly title: "BadgeState";
+                readonly description: "`active`: may be given and shown. `retired`: kept for its holders' own history, never given, never shown to members who do not hold it (VTI-BDG-005).";
+                readonly type: "string";
+                readonly enum: readonly ["active", "retired"];
+            };
+            readonly BadgeCriteria: {
+                readonly title: "BadgeCriteria";
+                readonly type: "string";
+                readonly minLength: 1;
+                readonly maxLength: 1000;
+                readonly description: "How the badge is earned, shown to members and written into the credential's Achievement as its criteria narrative. Plain text.";
+            };
+            readonly BadgeDescription: {
+                readonly title: "BadgeDescription";
+                readonly type: "string";
+                readonly minLength: 1;
+                readonly maxLength: 1000;
+                readonly description: "What the badge is for. Plain text; a reader MUST NOT treat it as instructions.";
+            };
+            readonly BadgeName: {
+                readonly title: "BadgeName";
+                readonly type: "string";
+                readonly minLength: 1;
+                readonly maxLength: 64;
+                readonly description: "The badge's name, shown on the wall and written into the credential's Achievement. Plain text; a reader MUST NOT treat it as instructions.";
+            };
+            readonly BadgeKind: {
+                readonly title: "BadgeKind";
+                readonly description: "`community`: defined by holders of `vtc.badges.admin`, given by its owners (its badge group's managers), may carry a credential. `kudos`: made by a member the community's badge settings admit, given by any active member to any other, never a credential. Fixed for the badge's life; a kudos badge becomes a community badge only by promotion (vtc/badges/promote).";
+                readonly type: "string";
+                readonly enum: readonly ["community", "kudos"];
+            };
+            readonly CardBlobRef: {
+                readonly title: "CardBlobRef";
+                readonly description: "A content-addressed image held in the community's blob store — an avatar or an `image` field. At most 256 KiB, images only, re-encoded by the community on upload (vtc/directory/images/upload: metadata stripped, dimensions capped) so its digest does not link the member across communities. A viewer reads the bytes with vtc/directory/images/get, which answers only where the same projection shows the value. `url` and `urlExpiresAt` MAY appear in a projection: a short-lived URL the community checks against the same projection, so a member-only image is never a public URL. A community that does not offer one leaves both out.";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["sha256", "mediaType"];
+                readonly properties: {
+                    readonly sha256: {
+                        readonly type: "string";
+                        readonly pattern: "^[0-9a-f]{64}$";
+                        readonly description: "Lowercase hex SHA-256 of the stored, re-encoded bytes.";
+                    };
+                    readonly mediaType: {
+                        readonly type: "string";
+                        readonly enum: readonly ["image/png", "image/jpeg", "image/webp", "image/avif"];
+                        readonly description: "Media type of the stored bytes.";
+                    };
+                    readonly size: {
+                        readonly type: "integer";
+                        readonly minimum: 1;
+                        readonly maximum: 262144;
+                        readonly description: "Size in bytes of the stored bytes.";
+                    };
+                    readonly url: {
+                        readonly type: "string";
+                        readonly format: "uri";
+                        readonly maxLength: 2048;
+                        readonly description: "Projection only: a URL the viewer can fetch the image from until `urlExpiresAt`.";
+                    };
+                    readonly urlExpiresAt: {
+                        readonly type: "string";
+                        readonly format: "date-time";
+                        readonly description: "Projection only: when `url` stops working.";
+                    };
+                };
+            };
+        };
+    };
+};
+//# sourceMappingURL=payload.d.ts.map