@openvtc/trust-tasks 0.28.19 → 0.28.21

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (78) hide show
  1. package/CHANGELOG.md +71 -0
  2. package/dist/_shared/components.d.ts +16 -1
  3. package/dist/_shared/components.d.ts.map +1 -1
  4. package/dist/auth/step-up/requests/show/0.1/payload.d.ts +458 -0
  5. package/dist/auth/step-up/requests/show/0.1/payload.d.ts.map +1 -0
  6. package/dist/auth/step-up/requests/show/0.1/payload.js +261 -0
  7. package/dist/auth/step-up/requests/show/0.1/payload.js.map +1 -0
  8. package/dist/index.d.ts +9 -0
  9. package/dist/index.d.ts.map +1 -1
  10. package/dist/index.js +9 -0
  11. package/dist/index.js.map +1 -1
  12. package/dist/vtc/badges/_shared/0.1/badge.d.ts +1 -1
  13. package/dist/vtc/badges/_shared/0.1/badge.d.ts.map +1 -1
  14. package/dist/vtc/badges/awards/list/0.1/payload.d.ts +118 -6
  15. package/dist/vtc/badges/awards/list/0.1/payload.d.ts.map +1 -1
  16. package/dist/vtc/badges/awards/list/0.1/payload.js +64 -2
  17. package/dist/vtc/badges/awards/list/0.1/payload.js.map +1 -1
  18. package/dist/vtc/badges/awards/offer/0.1/payload.d.ts +118 -6
  19. package/dist/vtc/badges/awards/offer/0.1/payload.d.ts.map +1 -1
  20. package/dist/vtc/badges/awards/offer/0.1/payload.js +64 -2
  21. package/dist/vtc/badges/awards/offer/0.1/payload.js.map +1 -1
  22. package/dist/vtc/badges/awards/revoke/0.1/payload.d.ts +118 -6
  23. package/dist/vtc/badges/awards/revoke/0.1/payload.d.ts.map +1 -1
  24. package/dist/vtc/badges/awards/revoke/0.1/payload.js +64 -2
  25. package/dist/vtc/badges/awards/revoke/0.1/payload.js.map +1 -1
  26. package/dist/vtc/badges/awards/share/0.1/payload.d.ts +701 -0
  27. package/dist/vtc/badges/awards/share/0.1/payload.d.ts.map +1 -0
  28. package/dist/vtc/badges/awards/share/0.1/payload.js +406 -0
  29. package/dist/vtc/badges/awards/share/0.1/payload.js.map +1 -0
  30. package/dist/vtc/badges/awards/unshare/0.1/payload.d.ts +701 -0
  31. package/dist/vtc/badges/awards/unshare/0.1/payload.d.ts.map +1 -0
  32. package/dist/vtc/badges/awards/unshare/0.1/payload.js +406 -0
  33. package/dist/vtc/badges/awards/unshare/0.1/payload.js.map +1 -0
  34. package/dist/vtc/badges/awards/withdraw/0.1/payload.d.ts +118 -6
  35. package/dist/vtc/badges/awards/withdraw/0.1/payload.d.ts.map +1 -1
  36. package/dist/vtc/badges/awards/withdraw/0.1/payload.js +64 -2
  37. package/dist/vtc/badges/awards/withdraw/0.1/payload.js.map +1 -1
  38. package/dist/vtc/badges/kudos/give/0.1/payload.d.ts +118 -6
  39. package/dist/vtc/badges/kudos/give/0.1/payload.d.ts.map +1 -1
  40. package/dist/vtc/badges/kudos/give/0.1/payload.js +64 -2
  41. package/dist/vtc/badges/kudos/give/0.1/payload.js.map +1 -1
  42. package/dist/vtc/badges/kudos/list/0.1/payload.d.ts +118 -6
  43. package/dist/vtc/badges/kudos/list/0.1/payload.d.ts.map +1 -1
  44. package/dist/vtc/badges/kudos/list/0.1/payload.js +64 -2
  45. package/dist/vtc/badges/kudos/list/0.1/payload.js.map +1 -1
  46. package/dist/vtc/badges/mine/accept/0.1/payload.d.ts +118 -6
  47. package/dist/vtc/badges/mine/accept/0.1/payload.d.ts.map +1 -1
  48. package/dist/vtc/badges/mine/accept/0.1/payload.js +64 -2
  49. package/dist/vtc/badges/mine/accept/0.1/payload.js.map +1 -1
  50. package/dist/vtc/badges/mine/decline/0.1/payload.d.ts +118 -6
  51. package/dist/vtc/badges/mine/decline/0.1/payload.d.ts.map +1 -1
  52. package/dist/vtc/badges/mine/decline/0.1/payload.js +64 -2
  53. package/dist/vtc/badges/mine/decline/0.1/payload.js.map +1 -1
  54. package/dist/vtc/badges/mine/list/0.1/payload.d.ts +118 -6
  55. package/dist/vtc/badges/mine/list/0.1/payload.d.ts.map +1 -1
  56. package/dist/vtc/badges/mine/list/0.1/payload.js +64 -2
  57. package/dist/vtc/badges/mine/list/0.1/payload.js.map +1 -1
  58. package/dist/vtc/badges/show/0.1/payload.d.ts +472 -26
  59. package/dist/vtc/badges/show/0.1/payload.d.ts.map +1 -1
  60. package/dist/vtc/badges/show/0.1/payload.js +264 -12
  61. package/dist/vtc/badges/show/0.1/payload.js.map +1 -1
  62. package/package.json +1 -1
  63. package/src/_shared/components.ts +16 -1
  64. package/src/auth/step-up/requests/show/0.1/payload.ts +317 -0
  65. package/src/index.ts +9 -0
  66. package/src/vtc/badges/_shared/0.1/badge.ts +1 -1
  67. package/src/vtc/badges/awards/list/0.1/payload.ts +66 -4
  68. package/src/vtc/badges/awards/offer/0.1/payload.ts +66 -4
  69. package/src/vtc/badges/awards/revoke/0.1/payload.ts +66 -4
  70. package/src/vtc/badges/awards/share/0.1/payload.ts +446 -0
  71. package/src/vtc/badges/awards/unshare/0.1/payload.ts +446 -0
  72. package/src/vtc/badges/awards/withdraw/0.1/payload.ts +66 -4
  73. package/src/vtc/badges/kudos/give/0.1/payload.ts +66 -4
  74. package/src/vtc/badges/kudos/list/0.1/payload.ts +66 -4
  75. package/src/vtc/badges/mine/accept/0.1/payload.ts +66 -4
  76. package/src/vtc/badges/mine/decline/0.1/payload.ts +66 -4
  77. package/src/vtc/badges/mine/list/0.1/payload.ts +66 -4
  78. package/src/vtc/badges/show/0.1/payload.ts +272 -14
@@ -0,0 +1,458 @@
1
+ /**
2
+ * Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
3
+ * Source: specs/auth/step-up/requests/show/0.1/payload.schema.json
4
+ */
5
+ import type { Ext } from "../../../../../_shared/components.js";
6
+ /**
7
+ * A single-use reference to one pending step-up, minted by the relying party with at least 128 bits of entropy and carried as base64url without padding. It names the request; it is not the request's challenge, and knowing it authorizes nothing but this one read.
8
+ */
9
+ export type Handle = string;
10
+ /**
11
+ * The approver's agent asks the relying party for a pending step-up bound to one operation, named by the hand-off handle the relying party gave the operation's producer. The outer document members (id, type, issuer, recipient, issuedAt, expiresAt, proof) are owned by the framework — SPEC §6.3.
12
+ */
13
+ export interface AuthStepUpRequestShowPayload {
14
+ handle: Handle;
15
+ ext?: Ext;
16
+ }
17
+ /**
18
+ * The pending step-up and the operation it is bound to. Failures use trust-task-error, not this shape.
19
+ */
20
+ export interface AuthStepUpRequestShowResponsePayload {
21
+ /**
22
+ * A complete auth/step-up/approve-request/0.5 Trust Task document, issued and signed by the relying party, whose recipient is the step-up's subject and whose payload is the request the operation's producer received inline — the same challenge, boundTo, accepts and approvers. The agent verifies it as a document in its own right — envelope, proof and payload against that specification's schema — over the members exactly as received: its proof covers every member, so it is deliberately an open object here rather than a typed one a binding could narrow.
23
+ */
24
+ request: {};
25
+ operation: Operation;
26
+ ext?: Ext;
27
+ }
28
+ /**
29
+ * The operation the step-up is bound to, exactly as the relying party received it.
30
+ */
31
+ export interface Operation {
32
+ /**
33
+ * The operation's Type URI, as the document the relying party refused named it.
34
+ */
35
+ type: string;
36
+ /**
37
+ * The operation's payload, member for member as received, so that the approver's agent can show it and — where it knows how the relying party derives `boundTo` — recompute the binding.
38
+ */
39
+ payload: {};
40
+ }
41
+ /** Shared definitions this specification references, re-exported under the names it used to declare them with. */
42
+ export type { Ext };
43
+ /** Trust Task type URI. */
44
+ export declare const TYPE_URI: "https://trusttasks.org/spec/auth/step-up/requests/show/0.1";
45
+ /**
46
+ * The earlier version of this specification that this one declares it
47
+ * extends (front matter `extends`, SPEC §5.2 "Declared extension"), or
48
+ * `null`. Only the direct declaration — follow the chain with
49
+ * `extendsChain` / `readForSpec`.
50
+ */
51
+ export declare const EXTENDS: string | null;
52
+ /**
53
+ * Why this version is deprecated, or `null` while it is current. A
54
+ * superseded or retired version is still supported, and is withdrawn from
55
+ * this package in a later scheduled batch (SPEC "Superseded and Withdrawn
56
+ * Versions").
57
+ */
58
+ export declare const DEPRECATION: string | null;
59
+ /** Stable alias for this specification's request payload shape. */
60
+ export type Payload = AuthStepUpRequestShowPayload;
61
+ /** Trust Task response type URI (request type URI + "#response"). */
62
+ export declare const RESPONSE_TYPE_URI: "https://trusttasks.org/spec/auth/step-up/requests/show/0.1#response";
63
+ /** Stable alias for this specification's success-response payload shape. */
64
+ export type Response = AuthStepUpRequestShowResponsePayload;
65
+ /**
66
+ * This specification's payload schema, as a value.
67
+ *
68
+ * SPEC.md §7.2 item 2 is performed against this. It is shipped as data
69
+ * rather than only as a `.json` file because TypeScript types are erased
70
+ * at runtime: without a schema a consumer has nothing to validate, and
71
+ * every REQUIRED payload member is optional in practice. Cross-file
72
+ * `$ref`s are already inlined, so it needs no resolver.
73
+ */
74
+ export declare const PAYLOAD_SCHEMA: {
75
+ readonly $schema: "https://json-schema.org/draft/2020-12/schema";
76
+ readonly $id: "https://trusttasks.org/spec/auth/step-up/requests/show/0.1";
77
+ readonly title: "Auth — Step-up Request Show — payload";
78
+ readonly description: "The approver's agent asks the relying party for a pending step-up bound to one operation, named by the hand-off handle the relying party gave the operation's producer. The outer document members (id, type, issuer, recipient, issuedAt, expiresAt, proof) are owned by the framework — SPEC §6.3.";
79
+ readonly type: "object";
80
+ readonly additionalProperties: false;
81
+ readonly required: readonly ["handle"];
82
+ readonly properties: {
83
+ readonly handle: {
84
+ readonly $ref: "#/$defs/Handle";
85
+ };
86
+ readonly ext: {
87
+ readonly $ref: "#/$defs/Ext";
88
+ };
89
+ };
90
+ readonly $defs: {
91
+ readonly Handle: {
92
+ readonly title: "Handle";
93
+ readonly description: "A single-use reference to one pending step-up, minted by the relying party with at least 128 bits of entropy and carried as base64url without padding. It names the request; it is not the request's challenge, and knowing it authorizes nothing but this one read.";
94
+ readonly type: "string";
95
+ readonly pattern: "^[A-Za-z0-9_-]{22,86}$";
96
+ };
97
+ readonly Handoff: {
98
+ readonly title: "Handoff";
99
+ readonly description: "What a relying party MAY carry as `details.stepUpHandoff` beside an inline `details.stepUpRequest` (auth/step-up/approve-request/0.5, Inline delivery), so that a producer which cannot obtain the evidence itself can hand the step-up to the subject's approver agent. Not a payload of this task: defined here so producers and consumers share one shape.";
100
+ readonly type: "object";
101
+ readonly additionalProperties: false;
102
+ readonly required: readonly ["handle", "expiresAt", "show"];
103
+ readonly properties: {
104
+ readonly handle: {
105
+ readonly $ref: "#/$defs/Handle";
106
+ };
107
+ readonly expiresAt: {
108
+ readonly type: "string";
109
+ readonly format: "date-time";
110
+ readonly description: "The instant after which the relying party answers the handle with `notFound`: no later than the pending step-up's own expiry.";
111
+ };
112
+ readonly show: {
113
+ readonly type: "string";
114
+ readonly const: "https://trusttasks.org/spec/auth/step-up/requests/show/0.1";
115
+ readonly description: "The Type URI the approver's agent sends with the handle.";
116
+ };
117
+ };
118
+ };
119
+ readonly Operation: {
120
+ readonly title: "Operation";
121
+ readonly description: "The operation the step-up is bound to, exactly as the relying party received it.";
122
+ readonly type: "object";
123
+ readonly additionalProperties: false;
124
+ readonly required: readonly ["type", "payload"];
125
+ readonly properties: {
126
+ readonly type: {
127
+ readonly type: "string";
128
+ readonly minLength: 1;
129
+ readonly maxLength: 2048;
130
+ readonly description: "The operation's Type URI, as the document the relying party refused named it.";
131
+ };
132
+ readonly payload: {
133
+ readonly type: "object";
134
+ readonly description: "The operation's payload, member for member as received, so that the approver's agent can show it and — where it knows how the relying party derives `boundTo` — recompute the binding.";
135
+ };
136
+ };
137
+ };
138
+ readonly Response: {
139
+ readonly $anchor: "response";
140
+ readonly title: "Auth — Step-up Request Show — response payload";
141
+ readonly type: "object";
142
+ readonly additionalProperties: false;
143
+ readonly required: readonly ["request", "operation"];
144
+ readonly description: "The pending step-up and the operation it is bound to. Failures use trust-task-error, not this shape.";
145
+ readonly properties: {
146
+ readonly request: {
147
+ readonly type: "object";
148
+ readonly description: "A complete auth/step-up/approve-request/0.5 Trust Task document, issued and signed by the relying party, whose recipient is the step-up's subject and whose payload is the request the operation's producer received inline — the same challenge, boundTo, accepts and approvers. The agent verifies it as a document in its own right — envelope, proof and payload against that specification's schema — over the members exactly as received: its proof covers every member, so it is deliberately an open object here rather than a typed one a binding could narrow.";
149
+ };
150
+ readonly operation: {
151
+ readonly $ref: "#/$defs/Operation";
152
+ };
153
+ readonly ext: {
154
+ readonly $ref: "#/$defs/Ext";
155
+ };
156
+ };
157
+ };
158
+ readonly Ext: {
159
+ readonly title: "Ext";
160
+ readonly description: "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.";
161
+ readonly type: "object";
162
+ readonly minProperties: 1;
163
+ readonly additionalProperties: true;
164
+ readonly propertyNames: {
165
+ readonly pattern: "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$";
166
+ };
167
+ };
168
+ };
169
+ };
170
+ /** As {@link PAYLOAD_SCHEMA}, for the success-response variant. */
171
+ export declare const RESPONSE_PAYLOAD_SCHEMA: {
172
+ readonly $schema: "https://json-schema.org/draft/2020-12/schema";
173
+ readonly $ref: "#/$defs/Response";
174
+ readonly $defs: {
175
+ readonly Handle: {
176
+ readonly title: "Handle";
177
+ readonly description: "A single-use reference to one pending step-up, minted by the relying party with at least 128 bits of entropy and carried as base64url without padding. It names the request; it is not the request's challenge, and knowing it authorizes nothing but this one read.";
178
+ readonly type: "string";
179
+ readonly pattern: "^[A-Za-z0-9_-]{22,86}$";
180
+ };
181
+ readonly Handoff: {
182
+ readonly title: "Handoff";
183
+ readonly description: "What a relying party MAY carry as `details.stepUpHandoff` beside an inline `details.stepUpRequest` (auth/step-up/approve-request/0.5, Inline delivery), so that a producer which cannot obtain the evidence itself can hand the step-up to the subject's approver agent. Not a payload of this task: defined here so producers and consumers share one shape.";
184
+ readonly type: "object";
185
+ readonly additionalProperties: false;
186
+ readonly required: readonly ["handle", "expiresAt", "show"];
187
+ readonly properties: {
188
+ readonly handle: {
189
+ readonly $ref: "#/$defs/Handle";
190
+ };
191
+ readonly expiresAt: {
192
+ readonly type: "string";
193
+ readonly format: "date-time";
194
+ readonly description: "The instant after which the relying party answers the handle with `notFound`: no later than the pending step-up's own expiry.";
195
+ };
196
+ readonly show: {
197
+ readonly type: "string";
198
+ readonly const: "https://trusttasks.org/spec/auth/step-up/requests/show/0.1";
199
+ readonly description: "The Type URI the approver's agent sends with the handle.";
200
+ };
201
+ };
202
+ };
203
+ readonly Operation: {
204
+ readonly title: "Operation";
205
+ readonly description: "The operation the step-up is bound to, exactly as the relying party received it.";
206
+ readonly type: "object";
207
+ readonly additionalProperties: false;
208
+ readonly required: readonly ["type", "payload"];
209
+ readonly properties: {
210
+ readonly type: {
211
+ readonly type: "string";
212
+ readonly minLength: 1;
213
+ readonly maxLength: 2048;
214
+ readonly description: "The operation's Type URI, as the document the relying party refused named it.";
215
+ };
216
+ readonly payload: {
217
+ readonly type: "object";
218
+ readonly description: "The operation's payload, member for member as received, so that the approver's agent can show it and — where it knows how the relying party derives `boundTo` — recompute the binding.";
219
+ };
220
+ };
221
+ };
222
+ readonly Response: {
223
+ readonly $anchor: "response";
224
+ readonly title: "Auth — Step-up Request Show — response payload";
225
+ readonly type: "object";
226
+ readonly additionalProperties: false;
227
+ readonly required: readonly ["request", "operation"];
228
+ readonly description: "The pending step-up and the operation it is bound to. Failures use trust-task-error, not this shape.";
229
+ readonly properties: {
230
+ readonly request: {
231
+ readonly type: "object";
232
+ readonly description: "A complete auth/step-up/approve-request/0.5 Trust Task document, issued and signed by the relying party, whose recipient is the step-up's subject and whose payload is the request the operation's producer received inline — the same challenge, boundTo, accepts and approvers. The agent verifies it as a document in its own right — envelope, proof and payload against that specification's schema — over the members exactly as received: its proof covers every member, so it is deliberately an open object here rather than a typed one a binding could narrow.";
233
+ };
234
+ readonly operation: {
235
+ readonly $ref: "#/$defs/Operation";
236
+ };
237
+ readonly ext: {
238
+ readonly $ref: "#/$defs/Ext";
239
+ };
240
+ };
241
+ };
242
+ readonly Ext: {
243
+ readonly title: "Ext";
244
+ readonly description: "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.";
245
+ readonly type: "object";
246
+ readonly minProperties: 1;
247
+ readonly additionalProperties: true;
248
+ readonly propertyNames: {
249
+ readonly pattern: "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$";
250
+ };
251
+ };
252
+ };
253
+ };
254
+ /**
255
+ * SPEC.md §7.2 policy for the request variant, from this specification's
256
+ * front matter. Pass to `consumeInbound` — items 5b, 7 and 8 are
257
+ * per-specification and cannot be derived from the document alone, and
258
+ * item 2 needs the schema this carries.
259
+ */
260
+ export declare const SPEC: {
261
+ readonly typeUri: "https://trusttasks.org/spec/auth/step-up/requests/show/0.1";
262
+ readonly isBearer: false;
263
+ readonly isProofRequired: true;
264
+ readonly isRecipientRequired: true;
265
+ readonly isIssuedAtRequired: true;
266
+ readonly payloadSchema: {
267
+ readonly $schema: "https://json-schema.org/draft/2020-12/schema";
268
+ readonly $id: "https://trusttasks.org/spec/auth/step-up/requests/show/0.1";
269
+ readonly title: "Auth — Step-up Request Show — payload";
270
+ readonly description: "The approver's agent asks the relying party for a pending step-up bound to one operation, named by the hand-off handle the relying party gave the operation's producer. The outer document members (id, type, issuer, recipient, issuedAt, expiresAt, proof) are owned by the framework — SPEC §6.3.";
271
+ readonly type: "object";
272
+ readonly additionalProperties: false;
273
+ readonly required: readonly ["handle"];
274
+ readonly properties: {
275
+ readonly handle: {
276
+ readonly $ref: "#/$defs/Handle";
277
+ };
278
+ readonly ext: {
279
+ readonly $ref: "#/$defs/Ext";
280
+ };
281
+ };
282
+ readonly $defs: {
283
+ readonly Handle: {
284
+ readonly title: "Handle";
285
+ readonly description: "A single-use reference to one pending step-up, minted by the relying party with at least 128 bits of entropy and carried as base64url without padding. It names the request; it is not the request's challenge, and knowing it authorizes nothing but this one read.";
286
+ readonly type: "string";
287
+ readonly pattern: "^[A-Za-z0-9_-]{22,86}$";
288
+ };
289
+ readonly Handoff: {
290
+ readonly title: "Handoff";
291
+ readonly description: "What a relying party MAY carry as `details.stepUpHandoff` beside an inline `details.stepUpRequest` (auth/step-up/approve-request/0.5, Inline delivery), so that a producer which cannot obtain the evidence itself can hand the step-up to the subject's approver agent. Not a payload of this task: defined here so producers and consumers share one shape.";
292
+ readonly type: "object";
293
+ readonly additionalProperties: false;
294
+ readonly required: readonly ["handle", "expiresAt", "show"];
295
+ readonly properties: {
296
+ readonly handle: {
297
+ readonly $ref: "#/$defs/Handle";
298
+ };
299
+ readonly expiresAt: {
300
+ readonly type: "string";
301
+ readonly format: "date-time";
302
+ readonly description: "The instant after which the relying party answers the handle with `notFound`: no later than the pending step-up's own expiry.";
303
+ };
304
+ readonly show: {
305
+ readonly type: "string";
306
+ readonly const: "https://trusttasks.org/spec/auth/step-up/requests/show/0.1";
307
+ readonly description: "The Type URI the approver's agent sends with the handle.";
308
+ };
309
+ };
310
+ };
311
+ readonly Operation: {
312
+ readonly title: "Operation";
313
+ readonly description: "The operation the step-up is bound to, exactly as the relying party received it.";
314
+ readonly type: "object";
315
+ readonly additionalProperties: false;
316
+ readonly required: readonly ["type", "payload"];
317
+ readonly properties: {
318
+ readonly type: {
319
+ readonly type: "string";
320
+ readonly minLength: 1;
321
+ readonly maxLength: 2048;
322
+ readonly description: "The operation's Type URI, as the document the relying party refused named it.";
323
+ };
324
+ readonly payload: {
325
+ readonly type: "object";
326
+ readonly description: "The operation's payload, member for member as received, so that the approver's agent can show it and — where it knows how the relying party derives `boundTo` — recompute the binding.";
327
+ };
328
+ };
329
+ };
330
+ readonly Response: {
331
+ readonly $anchor: "response";
332
+ readonly title: "Auth — Step-up Request Show — response payload";
333
+ readonly type: "object";
334
+ readonly additionalProperties: false;
335
+ readonly required: readonly ["request", "operation"];
336
+ readonly description: "The pending step-up and the operation it is bound to. Failures use trust-task-error, not this shape.";
337
+ readonly properties: {
338
+ readonly request: {
339
+ readonly type: "object";
340
+ readonly description: "A complete auth/step-up/approve-request/0.5 Trust Task document, issued and signed by the relying party, whose recipient is the step-up's subject and whose payload is the request the operation's producer received inline — the same challenge, boundTo, accepts and approvers. The agent verifies it as a document in its own right — envelope, proof and payload against that specification's schema — over the members exactly as received: its proof covers every member, so it is deliberately an open object here rather than a typed one a binding could narrow.";
341
+ };
342
+ readonly operation: {
343
+ readonly $ref: "#/$defs/Operation";
344
+ };
345
+ readonly ext: {
346
+ readonly $ref: "#/$defs/Ext";
347
+ };
348
+ };
349
+ };
350
+ readonly Ext: {
351
+ readonly title: "Ext";
352
+ readonly description: "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.";
353
+ readonly type: "object";
354
+ readonly minProperties: 1;
355
+ readonly additionalProperties: true;
356
+ readonly propertyNames: {
357
+ readonly pattern: "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$";
358
+ };
359
+ };
360
+ };
361
+ };
362
+ };
363
+ /**
364
+ * SPEC.md §7.2 policy for the success-response variant. `isRecipientRequired`
365
+ * tracks the *issuer* party's requirement because a response swaps the
366
+ * parties (§7.3 item 5).
367
+ */
368
+ export declare const RESPONSE_SPEC: {
369
+ readonly typeUri: "https://trusttasks.org/spec/auth/step-up/requests/show/0.1#response";
370
+ readonly isBearer: false;
371
+ readonly isProofRequired: true;
372
+ readonly isRecipientRequired: true;
373
+ readonly isIssuedAtRequired: true;
374
+ readonly payloadSchema: {
375
+ readonly $schema: "https://json-schema.org/draft/2020-12/schema";
376
+ readonly $ref: "#/$defs/Response";
377
+ readonly $defs: {
378
+ readonly Handle: {
379
+ readonly title: "Handle";
380
+ readonly description: "A single-use reference to one pending step-up, minted by the relying party with at least 128 bits of entropy and carried as base64url without padding. It names the request; it is not the request's challenge, and knowing it authorizes nothing but this one read.";
381
+ readonly type: "string";
382
+ readonly pattern: "^[A-Za-z0-9_-]{22,86}$";
383
+ };
384
+ readonly Handoff: {
385
+ readonly title: "Handoff";
386
+ readonly description: "What a relying party MAY carry as `details.stepUpHandoff` beside an inline `details.stepUpRequest` (auth/step-up/approve-request/0.5, Inline delivery), so that a producer which cannot obtain the evidence itself can hand the step-up to the subject's approver agent. Not a payload of this task: defined here so producers and consumers share one shape.";
387
+ readonly type: "object";
388
+ readonly additionalProperties: false;
389
+ readonly required: readonly ["handle", "expiresAt", "show"];
390
+ readonly properties: {
391
+ readonly handle: {
392
+ readonly $ref: "#/$defs/Handle";
393
+ };
394
+ readonly expiresAt: {
395
+ readonly type: "string";
396
+ readonly format: "date-time";
397
+ readonly description: "The instant after which the relying party answers the handle with `notFound`: no later than the pending step-up's own expiry.";
398
+ };
399
+ readonly show: {
400
+ readonly type: "string";
401
+ readonly const: "https://trusttasks.org/spec/auth/step-up/requests/show/0.1";
402
+ readonly description: "The Type URI the approver's agent sends with the handle.";
403
+ };
404
+ };
405
+ };
406
+ readonly Operation: {
407
+ readonly title: "Operation";
408
+ readonly description: "The operation the step-up is bound to, exactly as the relying party received it.";
409
+ readonly type: "object";
410
+ readonly additionalProperties: false;
411
+ readonly required: readonly ["type", "payload"];
412
+ readonly properties: {
413
+ readonly type: {
414
+ readonly type: "string";
415
+ readonly minLength: 1;
416
+ readonly maxLength: 2048;
417
+ readonly description: "The operation's Type URI, as the document the relying party refused named it.";
418
+ };
419
+ readonly payload: {
420
+ readonly type: "object";
421
+ readonly description: "The operation's payload, member for member as received, so that the approver's agent can show it and — where it knows how the relying party derives `boundTo` — recompute the binding.";
422
+ };
423
+ };
424
+ };
425
+ readonly Response: {
426
+ readonly $anchor: "response";
427
+ readonly title: "Auth — Step-up Request Show — response payload";
428
+ readonly type: "object";
429
+ readonly additionalProperties: false;
430
+ readonly required: readonly ["request", "operation"];
431
+ readonly description: "The pending step-up and the operation it is bound to. Failures use trust-task-error, not this shape.";
432
+ readonly properties: {
433
+ readonly request: {
434
+ readonly type: "object";
435
+ readonly description: "A complete auth/step-up/approve-request/0.5 Trust Task document, issued and signed by the relying party, whose recipient is the step-up's subject and whose payload is the request the operation's producer received inline — the same challenge, boundTo, accepts and approvers. The agent verifies it as a document in its own right — envelope, proof and payload against that specification's schema — over the members exactly as received: its proof covers every member, so it is deliberately an open object here rather than a typed one a binding could narrow.";
436
+ };
437
+ readonly operation: {
438
+ readonly $ref: "#/$defs/Operation";
439
+ };
440
+ readonly ext: {
441
+ readonly $ref: "#/$defs/Ext";
442
+ };
443
+ };
444
+ };
445
+ readonly Ext: {
446
+ readonly title: "Ext";
447
+ readonly description: "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.";
448
+ readonly type: "object";
449
+ readonly minProperties: 1;
450
+ readonly additionalProperties: true;
451
+ readonly propertyNames: {
452
+ readonly pattern: "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$";
453
+ };
454
+ };
455
+ };
456
+ };
457
+ };
458
+ //# sourceMappingURL=payload.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"payload.d.ts","sourceRoot":"","sources":["../../../../../../src/auth/step-up/requests/show/0.1/payload.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,sCAAsC,CAAC;AAGhE;;GAEG;AACH,MAAM,MAAM,MAAM,GAAG,MAAM,CAAC;AAE5B;;GAEG;AACH,MAAM,WAAW,4BAA4B;IAC3C,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,GAAG,CAAC;CACX;AACD;;GAEG;AACH,MAAM,WAAW,oCAAoC;IACnD;;OAEG;IACH,OAAO,EAAE,EAAE,CAAC;IACZ,SAAS,EAAE,SAAS,CAAC;IACrB,GAAG,CAAC,EAAE,GAAG,CAAC;CACX;AACD;;GAEG;AACH,MAAM,WAAW,SAAS;IACxB;;OAEG;IACH,IAAI,EAAE,MAAM,CAAC;IACb;;OAEG;IACH,OAAO,EAAE,EAAE,CAAC;CACb;AAED,kHAAkH;AAClH,YAAY,EAAE,GAAG,EAAE,CAAC;AAEpB,2BAA2B;AAC3B,eAAO,MAAM,QAAQ,EAAG,4DAAqE,CAAC;AAE9F;;;;;GAKG;AACH,eAAO,MAAM,OAAO,EAAE,MAAM,GAAG,IAAW,CAAC;AAE3C;;;;;GAKG;AACH,eAAO,MAAM,WAAW,EAAE,MAAM,GAAG,IAAW,CAAC;AAE/C,mEAAmE;AACnE,MAAM,MAAM,OAAO,GAAG,4BAA4B,CAAC;AAEnD,qEAAqE;AACrE,eAAO,MAAM,iBAAiB,EAAG,qEAA8E,CAAC;AAEhH,4EAA4E;AAC5E,MAAM,MAAM,QAAQ,GAAG,oCAAoC,CAAC;AAE5D;;;;;;;;GAQG;AACH,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA2GjB,CAAC;AAEX,mEAAmE;AACnE,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA4F1B,CAAC;AAEX;;;;;GAKG;AACH,eAAO,MAAM,IAAI;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAOP,CAAC;AAEX;;;;GAIG;AACH,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAOhB,CAAC"}