@openvtc/trust-tasks 0.28.19 → 0.28.20

package/CHANGELOG.md

@@ -11,6 +11,37 @@ The package versions over **its own API** — what a consumer compiles against
 not over `SPEC.md`. Below 1.0 a breaking change bumps the leading non-zero
 component.
 
+## 0.28.20 — 2026-11-07
+
+
+### Added
+
+- **vtc/badges**: Awards/share and awards/unshare — a holder shows an award outside the community (vtc/badges/awards/{share,unshare}/0.1) (#1054)
+
+* feat(vtc/badges): awards/share and awards/unshare — a holder shows an award outside the community (vtc/badges/awards/{share,unshare}/0.1)
+
+  The two tasks the VTC badges design note lists for showing a badge outside
+  the community (VTI-BDG-070 – 072), completing the vtc/badges/* 0.1 family.
+
+  - `vtc/badges/awards/share/0.1`: the holder of an accepted award of a badge
+    the community marked `shareableOutside` asks, and the community answers the
+    public locations it serves the award at — a verification location that
+    answers the credential exactly as issued with its status, and a baked image
+    where it serves one. Locations are the community's, unguessable (≥ 128
+    bits, never derived from the award), idempotent on a repeat, and disclose
+    no other holder nor a count (VTI-BDG-071). They stop serving on unshare,
+    take-back, retire and departure. Codes: badgesOff, notFound (unknown,
+    another member's, not accepted — alike), notShareable (insideOnly | kudos
+    | retired), publicLocationUnavailable.
+  - `vtc/badges/awards/unshare/0.1`: stops it; the locations answer as ones
+    that never existed; idempotent; not a revocation. Codes: badgesOff,
+    notFound.
+  - `_shared/0.1/badge.schema.json`: `AwardShare` and the optional
+    `Award.shared` (verificationUrl, bakedImageUrl?, since) — additive.
+
+  Both are acts of the member: a portal key the member authorized for
+  `vtc/badges` under auth/oob/grant/0.3 may sign them (VTI-BDG-095).
+
 ## 0.28.19 — 2026-11-06
 
 

package/dist/_shared/components.d.ts

@@ -5562,7 +5562,7 @@ export interface AutoGrantSweep {
     errors: number;
 }
 /**
- * One giving of a badge to one member. `givenBy` is the giver's directory entry, absent for an award a dynamic badge group's rule made. `note` is shown to the recipient, the giver, the badge's owners and administrators, never to other members. `credentialId` is present on an accepted award of a community badge: the badge credential that evidences it, renewed or re-issued as the badge's regime requires.
+ * One giving of a badge to one member. `givenBy` is the giver's directory entry, absent for an award a dynamic badge group's rule made. `note` is shown to the recipient, the giver, the badge's owners and administrators, never to other members. `credentialId` is present on an accepted award of a community badge: the badge credential that evidences it, renewed or re-issued as the badge's regime requires. `shared` is present on an accepted award of a badge its holders may show outside while its holder shares it (vtc/badges/awards/share).
  */
 export interface Award {
     awardId: AwardId;
@@ -5584,8 +5584,23 @@ export interface Award {
      */
     expiresAt?: string;
     credentialId?: GroupCredentialId;
+    shared?: AwardShare;
     ext?: Ext;
 }
+/**
+ * Where an accepted award is shown outside the community, by its holder's choice (VTI-BDG-070): the public location that answers a verification of exactly what the credential says, the baked image where the community serves one, and since when. Present only while the holder shares the award; absent once they stop, the award is taken back, the badge is retired or the holder departs. The locations are unguessable and name no other holder (VTI-BDG-071).
+ */
+export interface AwardShare {
+    /**
+     * The public location that answers the credential and a verification of it.
+     */
+    verificationUrl: string;
+    /**
+     * The badge's picture with the credential baked into it, for a website or an email signature. Absent where the community serves no baked image.
+     */
+    bakedImageUrl?: string;
+    since: string;
+}
 /**
  * Unencrypted metadata plus the encrypted payload. The KDF and cipher parameters travel in the clear so a reader can decrypt without knowing this specification's defaults.
  */