@openvtc/trust-tasks 0.28.20 → 0.28.22

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (78) hide show
  1. package/CHANGELOG.md +49 -0
  2. package/dist/_shared/components.d.ts +48 -4
  3. package/dist/_shared/components.d.ts.map +1 -1
  4. package/dist/auth/step-up/requests/show/0.1/payload.d.ts +458 -0
  5. package/dist/auth/step-up/requests/show/0.1/payload.d.ts.map +1 -0
  6. package/dist/auth/step-up/requests/show/0.1/payload.js +261 -0
  7. package/dist/auth/step-up/requests/show/0.1/payload.js.map +1 -0
  8. package/dist/index.d.ts +15 -0
  9. package/dist/index.d.ts.map +1 -1
  10. package/dist/index.js +15 -0
  11. package/dist/index.js.map +1 -1
  12. package/dist/vtc/badges/_shared/0.1/badge.d.ts +1 -1
  13. package/dist/vtc/badges/_shared/0.1/badge.d.ts.map +1 -1
  14. package/dist/vtc/badges/claims/create/0.1/payload.d.ts +595 -0
  15. package/dist/vtc/badges/claims/create/0.1/payload.d.ts.map +1 -0
  16. package/dist/vtc/badges/claims/create/0.1/payload.js +345 -0
  17. package/dist/vtc/badges/claims/create/0.1/payload.js.map +1 -0
  18. package/dist/vtc/badges/claims/list/0.1/payload.d.ts +586 -0
  19. package/dist/vtc/badges/claims/list/0.1/payload.d.ts.map +1 -0
  20. package/dist/vtc/badges/claims/list/0.1/payload.js +335 -0
  21. package/dist/vtc/badges/claims/list/0.1/payload.js.map +1 -0
  22. package/dist/vtc/badges/claims/redeem/0.1/payload.d.ts +720 -0
  23. package/dist/vtc/badges/claims/redeem/0.1/payload.d.ts.map +1 -0
  24. package/dist/vtc/badges/claims/redeem/0.1/payload.js +417 -0
  25. package/dist/vtc/badges/claims/redeem/0.1/payload.js.map +1 -0
  26. package/dist/vtc/badges/claims/withdraw/0.1/payload.d.ts +512 -0
  27. package/dist/vtc/badges/claims/withdraw/0.1/payload.d.ts.map +1 -0
  28. package/dist/vtc/badges/claims/withdraw/0.1/payload.js +305 -0
  29. package/dist/vtc/badges/claims/withdraw/0.1/payload.js.map +1 -0
  30. package/dist/vtc/badges/create/0.1/payload.d.ts +40 -16
  31. package/dist/vtc/badges/create/0.1/payload.d.ts.map +1 -1
  32. package/dist/vtc/badges/create/0.1/payload.js +28 -8
  33. package/dist/vtc/badges/create/0.1/payload.js.map +1 -1
  34. package/dist/vtc/badges/promote/0.1/payload.d.ts +40 -16
  35. package/dist/vtc/badges/promote/0.1/payload.d.ts.map +1 -1
  36. package/dist/vtc/badges/promote/0.1/payload.js +28 -8
  37. package/dist/vtc/badges/promote/0.1/payload.js.map +1 -1
  38. package/dist/vtc/badges/show/0.1/payload.d.ts +472 -26
  39. package/dist/vtc/badges/show/0.1/payload.d.ts.map +1 -1
  40. package/dist/vtc/badges/show/0.1/payload.js +264 -12
  41. package/dist/vtc/badges/show/0.1/payload.js.map +1 -1
  42. package/dist/vtc/groups/create/0.1/payload.d.ts +40 -16
  43. package/dist/vtc/groups/create/0.1/payload.d.ts.map +1 -1
  44. package/dist/vtc/groups/create/0.1/payload.js +28 -8
  45. package/dist/vtc/groups/create/0.1/payload.js.map +1 -1
  46. package/dist/vtc/groups/list/0.1/payload.d.ts +40 -16
  47. package/dist/vtc/groups/list/0.1/payload.d.ts.map +1 -1
  48. package/dist/vtc/groups/list/0.1/payload.js +28 -8
  49. package/dist/vtc/groups/list/0.1/payload.js.map +1 -1
  50. package/dist/vtc/groups/list/0.2/payload.d.ts +40 -16
  51. package/dist/vtc/groups/list/0.2/payload.d.ts.map +1 -1
  52. package/dist/vtc/groups/list/0.2/payload.js +28 -8
  53. package/dist/vtc/groups/list/0.2/payload.js.map +1 -1
  54. package/dist/vtc/groups/show/0.1/payload.d.ts +40 -16
  55. package/dist/vtc/groups/show/0.1/payload.d.ts.map +1 -1
  56. package/dist/vtc/groups/show/0.1/payload.js +28 -8
  57. package/dist/vtc/groups/show/0.1/payload.js.map +1 -1
  58. package/dist/vtc/groups/update/0.1/payload.d.ts +40 -16
  59. package/dist/vtc/groups/update/0.1/payload.d.ts.map +1 -1
  60. package/dist/vtc/groups/update/0.1/payload.js +28 -8
  61. package/dist/vtc/groups/update/0.1/payload.js.map +1 -1
  62. package/package.json +1 -1
  63. package/src/_shared/components.ts +48 -4
  64. package/src/auth/step-up/requests/show/0.1/payload.ts +317 -0
  65. package/src/index.ts +15 -0
  66. package/src/vtc/badges/_shared/0.1/badge.ts +1 -1
  67. package/src/vtc/badges/claims/create/0.1/payload.ts +395 -0
  68. package/src/vtc/badges/claims/list/0.1/payload.ts +386 -0
  69. package/src/vtc/badges/claims/redeem/0.1/payload.ts +454 -0
  70. package/src/vtc/badges/claims/withdraw/0.1/payload.ts +342 -0
  71. package/src/vtc/badges/create/0.1/payload.ts +28 -8
  72. package/src/vtc/badges/promote/0.1/payload.ts +28 -8
  73. package/src/vtc/badges/show/0.1/payload.ts +272 -14
  74. package/src/vtc/groups/create/0.1/payload.ts +28 -8
  75. package/src/vtc/groups/list/0.1/payload.ts +28 -8
  76. package/src/vtc/groups/list/0.2/payload.ts +28 -8
  77. package/src/vtc/groups/show/0.1/payload.ts +28 -8
  78. package/src/vtc/groups/update/0.1/payload.ts +28 -8
@@ -0,0 +1,454 @@
1
+ /**
2
+ * Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
3
+ * Source: specs/vtc/badges/claims/redeem/0.1/payload.schema.json
4
+ */
5
+
6
+ import type { Award, AwardId, AwardNote, AwardShare, AwardState, BadgeId, ClaimSecret, EntryId, Ext, GroupCredentialId } from "../../../../../_shared/components.js";
7
+
8
+
9
+ /**
10
+ * Redeem a claim code: the member is admitted to the badge, the redemption being their consent. The outer document members are owned by the framework — SPEC §6.3.
11
+ */
12
+ export interface VTCBadgesClaimsRedeemPayload {
13
+ code: ClaimSecret;
14
+ ext?: Ext;
15
+ }
16
+ /**
17
+ * The success response to a vtc/badges/claims/redeem/0.1 request. Carried in a Trust Task document whose type is https://trusttasks.org/spec/vtc/badges/claims/redeem/0.1#response.
18
+ */
19
+ export interface VTCBadgesClaimsRedeemResponsePayload {
20
+ /**
21
+ * The award the claim recorded, `accepted`, its giver the code's issuer.
22
+ */
23
+ award: Award;
24
+ ext?: Ext;
25
+ }
26
+
27
+ /** Shared definitions this specification references, re-exported under the names it used to declare them with. */
28
+ export type { Award, AwardId, AwardNote, AwardShare, AwardState, BadgeId, ClaimSecret, EntryId, Ext, GroupCredentialId };
29
+
30
+ /** Trust Task type URI. */
31
+ export const TYPE_URI = "https://trusttasks.org/spec/vtc/badges/claims/redeem/0.1" as const;
32
+
33
+ /**
34
+ * The earlier version of this specification that this one declares it
35
+ * extends (front matter `extends`, SPEC §5.2 "Declared extension"), or
36
+ * `null`. Only the direct declaration — follow the chain with
37
+ * `extendsChain` / `readForSpec`.
38
+ */
39
+ export const EXTENDS: string | null = null;
40
+
41
+ /**
42
+ * Why this version is deprecated, or `null` while it is current. A
43
+ * superseded or retired version is still supported, and is withdrawn from
44
+ * this package in a later scheduled batch (SPEC "Superseded and Withdrawn
45
+ * Versions").
46
+ */
47
+ export const DEPRECATION: string | null = null;
48
+
49
+ /** Stable alias for this specification's request payload shape. */
50
+ export type Payload = VTCBadgesClaimsRedeemPayload;
51
+
52
+ /** Trust Task response type URI (request type URI + "#response"). */
53
+ export const RESPONSE_TYPE_URI = "https://trusttasks.org/spec/vtc/badges/claims/redeem/0.1#response" as const;
54
+
55
+ /** Stable alias for this specification's success-response payload shape. */
56
+ export type Response = VTCBadgesClaimsRedeemResponsePayload;
57
+
58
+ /**
59
+ * This specification's payload schema, as a value.
60
+ *
61
+ * SPEC.md §7.2 item 2 is performed against this. It is shipped as data
62
+ * rather than only as a `.json` file because TypeScript types are erased
63
+ * at runtime: without a schema a consumer has nothing to validate, and
64
+ * every REQUIRED payload member is optional in practice. Cross-file
65
+ * `$ref`s are already inlined, so it needs no resolver.
66
+ */
67
+ export const PAYLOAD_SCHEMA = {
68
+ "$schema": "https://json-schema.org/draft/2020-12/schema",
69
+ "$id": "https://trusttasks.org/spec/vtc/badges/claims/redeem/0.1",
70
+ "title": "VTC Badges — Claims — Redeem — payload",
71
+ "description": "Redeem a claim code: the member is admitted to the badge, the redemption being their consent. The outer document members are owned by the framework — SPEC §6.3.",
72
+ "type": "object",
73
+ "additionalProperties": false,
74
+ "required": [
75
+ "code"
76
+ ],
77
+ "properties": {
78
+ "code": {
79
+ "$ref": "#/$defs/ClaimSecret"
80
+ },
81
+ "ext": {
82
+ "$ref": "#/$defs/Ext"
83
+ }
84
+ },
85
+ "$defs": {
86
+ "Response": {
87
+ "$anchor": "response",
88
+ "title": "VTC Badges — Claims — Redeem — response payload",
89
+ "description": "The success response to a vtc/badges/claims/redeem/0.1 request. Carried in a Trust Task document whose type is https://trusttasks.org/spec/vtc/badges/claims/redeem/0.1#response.",
90
+ "type": "object",
91
+ "additionalProperties": false,
92
+ "required": [
93
+ "award"
94
+ ],
95
+ "properties": {
96
+ "award": {
97
+ "$ref": "#/$defs/Award",
98
+ "description": "The award the claim recorded, `accepted`, its giver the code's issuer."
99
+ },
100
+ "ext": {
101
+ "$ref": "#/$defs/Ext"
102
+ }
103
+ }
104
+ },
105
+ "Ext": {
106
+ "title": "Ext",
107
+ "description": "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.",
108
+ "type": "object",
109
+ "minProperties": 1,
110
+ "additionalProperties": true,
111
+ "propertyNames": {
112
+ "pattern": "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$"
113
+ }
114
+ },
115
+ "Award": {
116
+ "title": "Award",
117
+ "description": "One giving of a badge to one member. `givenBy` is the giver's directory entry, absent for an award a dynamic badge group's rule made. `note` is shown to the recipient, the giver, the badge's owners and administrators, never to other members. `credentialId` is present on an accepted award of a community badge: the badge credential that evidences it, renewed or re-issued as the badge's regime requires. `shared` is present on an accepted award of a badge its holders may show outside while its holder shares it (vtc/badges/awards/share).",
118
+ "type": "object",
119
+ "additionalProperties": false,
120
+ "required": [
121
+ "awardId",
122
+ "badgeId",
123
+ "entryId",
124
+ "state",
125
+ "offeredAt"
126
+ ],
127
+ "properties": {
128
+ "awardId": {
129
+ "$ref": "#/$defs/AwardId"
130
+ },
131
+ "badgeId": {
132
+ "$ref": "#/$defs/BadgeId"
133
+ },
134
+ "entryId": {
135
+ "$ref": "#/$defs/EntryId",
136
+ "description": "The recipient."
137
+ },
138
+ "givenBy": {
139
+ "$ref": "#/$defs/EntryId"
140
+ },
141
+ "note": {
142
+ "$ref": "#/$defs/AwardNote"
143
+ },
144
+ "state": {
145
+ "$ref": "#/$defs/AwardState"
146
+ },
147
+ "offeredAt": {
148
+ "type": "string",
149
+ "format": "date-time"
150
+ },
151
+ "decidedAt": {
152
+ "type": "string",
153
+ "format": "date-time",
154
+ "description": "When the recipient accepted or declined, the giver withdrew, the offer expired, or the award was revoked."
155
+ },
156
+ "expiresAt": {
157
+ "type": "string",
158
+ "format": "date-time",
159
+ "description": "When an unanswered offer lapses, where the community expires offers."
160
+ },
161
+ "credentialId": {
162
+ "$ref": "#/$defs/GroupCredentialId"
163
+ },
164
+ "shared": {
165
+ "$ref": "#/$defs/AwardShare"
166
+ },
167
+ "ext": {
168
+ "$ref": "#/$defs/Ext"
169
+ }
170
+ }
171
+ },
172
+ "AwardShare": {
173
+ "title": "AwardShare",
174
+ "description": "Where an accepted award is shown outside the community, by its holder's choice (VTI-BDG-070): the public location that answers a verification of exactly what the credential says, the baked image where the community serves one, and since when. Present only while the holder shares the award; absent once they stop, the award is taken back, the badge is retired or the holder departs. The locations are unguessable and name no other holder (VTI-BDG-071).",
175
+ "type": "object",
176
+ "additionalProperties": false,
177
+ "required": [
178
+ "verificationUrl",
179
+ "since"
180
+ ],
181
+ "properties": {
182
+ "verificationUrl": {
183
+ "type": "string",
184
+ "format": "uri",
185
+ "maxLength": 2048,
186
+ "description": "The public location that answers the credential and a verification of it."
187
+ },
188
+ "bakedImageUrl": {
189
+ "type": "string",
190
+ "format": "uri",
191
+ "maxLength": 2048,
192
+ "description": "The badge's picture with the credential baked into it, for a website or an email signature. Absent where the community serves no baked image."
193
+ },
194
+ "since": {
195
+ "type": "string",
196
+ "format": "date-time"
197
+ }
198
+ }
199
+ },
200
+ "AwardState": {
201
+ "title": "AwardState",
202
+ "description": "`offered`: waiting for the recipient. `accepted`: the recipient took it; for a community badge the credential was issued and the membership recorded. `declined`: the recipient declined; nothing was recorded in the group and nothing issued. `withdrawn`: the giver withdrew the offer before a decision. `expired`: the offer lapsed unanswered. `revoked`: taken back after acceptance (VTI-BDG-023).",
203
+ "type": "string",
204
+ "enum": [
205
+ "offered",
206
+ "accepted",
207
+ "declined",
208
+ "withdrawn",
209
+ "expired",
210
+ "revoked"
211
+ ]
212
+ },
213
+ "AwardNote": {
214
+ "title": "AwardNote",
215
+ "type": "string",
216
+ "minLength": 1,
217
+ "maxLength": 500,
218
+ "description": "What the award is for, from the giver, shown to the recipient and written as the award's evidence narrative where the badge carries a credential. Plain text; erased with its author (VTI-BDG-090)."
219
+ },
220
+ "BadgeId": {
221
+ "title": "BadgeId",
222
+ "description": "Opaque identifier of a badge: `bdg_` followed by 16 to 64 base64url characters. Random, community-scoped, never reused (VTI-BDG-001).",
223
+ "type": "string",
224
+ "pattern": "^bdg_[A-Za-z0-9_-]{16,64}$"
225
+ },
226
+ "AwardId": {
227
+ "title": "AwardId",
228
+ "description": "Opaque identifier of one giving of a badge to one member: `awd_` followed by 16 to 64 base64url characters. Random and unique within the community.",
229
+ "type": "string",
230
+ "pattern": "^awd_[A-Za-z0-9_-]{16,64}$"
231
+ },
232
+ "GroupCredentialId": {
233
+ "title": "GroupCredentialId",
234
+ "description": "Identifier (`id`) of a group membership credential issued to a member. Each renewal issues a new credential with a new identifier. Validity is the community's setting; a community SHOULD default to 30 days, renewed when 10 days remain.",
235
+ "type": "string",
236
+ "minLength": 1,
237
+ "maxLength": 512
238
+ },
239
+ "EntryId": {
240
+ "title": "EntryId",
241
+ "description": "Opaque identifier of one directory entry: `dir_` followed by 16 to 64 base64url characters. Random, scoped to one community, and stable for the life of the membership — it survives a rotation of the member's DID, which is why groups, notes and cards are keyed by it. It MUST NOT be derived from, and MUST NOT reveal, any DID of the member, and the same person's entries in two communities MUST NOT share one. Compared by exact string equality.",
242
+ "type": "string",
243
+ "pattern": "^dir_[A-Za-z0-9_-]{16,64}$"
244
+ },
245
+ "ClaimSecret": {
246
+ "title": "ClaimSecret",
247
+ "description": "A claim code itself: at least 128 random bits the community generated, base64url (22 to 64 characters). A bearer secret: shown to its issuer once, redeemed by a member, never stored or answered again (VTI-BDG-025).",
248
+ "type": "string",
249
+ "pattern": "^[A-Za-z0-9_-]{22,64}$"
250
+ }
251
+ }
252
+ } as const;
253
+
254
+ /** As {@link PAYLOAD_SCHEMA}, for the success-response variant. */
255
+ export const RESPONSE_PAYLOAD_SCHEMA = {
256
+ "$schema": "https://json-schema.org/draft/2020-12/schema",
257
+ "$ref": "#/$defs/Response",
258
+ "$defs": {
259
+ "Response": {
260
+ "$anchor": "response",
261
+ "title": "VTC Badges — Claims — Redeem — response payload",
262
+ "description": "The success response to a vtc/badges/claims/redeem/0.1 request. Carried in a Trust Task document whose type is https://trusttasks.org/spec/vtc/badges/claims/redeem/0.1#response.",
263
+ "type": "object",
264
+ "additionalProperties": false,
265
+ "required": [
266
+ "award"
267
+ ],
268
+ "properties": {
269
+ "award": {
270
+ "$ref": "#/$defs/Award",
271
+ "description": "The award the claim recorded, `accepted`, its giver the code's issuer."
272
+ },
273
+ "ext": {
274
+ "$ref": "#/$defs/Ext"
275
+ }
276
+ }
277
+ },
278
+ "Ext": {
279
+ "title": "Ext",
280
+ "description": "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.",
281
+ "type": "object",
282
+ "minProperties": 1,
283
+ "additionalProperties": true,
284
+ "propertyNames": {
285
+ "pattern": "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$"
286
+ }
287
+ },
288
+ "Award": {
289
+ "title": "Award",
290
+ "description": "One giving of a badge to one member. `givenBy` is the giver's directory entry, absent for an award a dynamic badge group's rule made. `note` is shown to the recipient, the giver, the badge's owners and administrators, never to other members. `credentialId` is present on an accepted award of a community badge: the badge credential that evidences it, renewed or re-issued as the badge's regime requires. `shared` is present on an accepted award of a badge its holders may show outside while its holder shares it (vtc/badges/awards/share).",
291
+ "type": "object",
292
+ "additionalProperties": false,
293
+ "required": [
294
+ "awardId",
295
+ "badgeId",
296
+ "entryId",
297
+ "state",
298
+ "offeredAt"
299
+ ],
300
+ "properties": {
301
+ "awardId": {
302
+ "$ref": "#/$defs/AwardId"
303
+ },
304
+ "badgeId": {
305
+ "$ref": "#/$defs/BadgeId"
306
+ },
307
+ "entryId": {
308
+ "$ref": "#/$defs/EntryId",
309
+ "description": "The recipient."
310
+ },
311
+ "givenBy": {
312
+ "$ref": "#/$defs/EntryId"
313
+ },
314
+ "note": {
315
+ "$ref": "#/$defs/AwardNote"
316
+ },
317
+ "state": {
318
+ "$ref": "#/$defs/AwardState"
319
+ },
320
+ "offeredAt": {
321
+ "type": "string",
322
+ "format": "date-time"
323
+ },
324
+ "decidedAt": {
325
+ "type": "string",
326
+ "format": "date-time",
327
+ "description": "When the recipient accepted or declined, the giver withdrew, the offer expired, or the award was revoked."
328
+ },
329
+ "expiresAt": {
330
+ "type": "string",
331
+ "format": "date-time",
332
+ "description": "When an unanswered offer lapses, where the community expires offers."
333
+ },
334
+ "credentialId": {
335
+ "$ref": "#/$defs/GroupCredentialId"
336
+ },
337
+ "shared": {
338
+ "$ref": "#/$defs/AwardShare"
339
+ },
340
+ "ext": {
341
+ "$ref": "#/$defs/Ext"
342
+ }
343
+ }
344
+ },
345
+ "AwardShare": {
346
+ "title": "AwardShare",
347
+ "description": "Where an accepted award is shown outside the community, by its holder's choice (VTI-BDG-070): the public location that answers a verification of exactly what the credential says, the baked image where the community serves one, and since when. Present only while the holder shares the award; absent once they stop, the award is taken back, the badge is retired or the holder departs. The locations are unguessable and name no other holder (VTI-BDG-071).",
348
+ "type": "object",
349
+ "additionalProperties": false,
350
+ "required": [
351
+ "verificationUrl",
352
+ "since"
353
+ ],
354
+ "properties": {
355
+ "verificationUrl": {
356
+ "type": "string",
357
+ "format": "uri",
358
+ "maxLength": 2048,
359
+ "description": "The public location that answers the credential and a verification of it."
360
+ },
361
+ "bakedImageUrl": {
362
+ "type": "string",
363
+ "format": "uri",
364
+ "maxLength": 2048,
365
+ "description": "The badge's picture with the credential baked into it, for a website or an email signature. Absent where the community serves no baked image."
366
+ },
367
+ "since": {
368
+ "type": "string",
369
+ "format": "date-time"
370
+ }
371
+ }
372
+ },
373
+ "AwardState": {
374
+ "title": "AwardState",
375
+ "description": "`offered`: waiting for the recipient. `accepted`: the recipient took it; for a community badge the credential was issued and the membership recorded. `declined`: the recipient declined; nothing was recorded in the group and nothing issued. `withdrawn`: the giver withdrew the offer before a decision. `expired`: the offer lapsed unanswered. `revoked`: taken back after acceptance (VTI-BDG-023).",
376
+ "type": "string",
377
+ "enum": [
378
+ "offered",
379
+ "accepted",
380
+ "declined",
381
+ "withdrawn",
382
+ "expired",
383
+ "revoked"
384
+ ]
385
+ },
386
+ "AwardNote": {
387
+ "title": "AwardNote",
388
+ "type": "string",
389
+ "minLength": 1,
390
+ "maxLength": 500,
391
+ "description": "What the award is for, from the giver, shown to the recipient and written as the award's evidence narrative where the badge carries a credential. Plain text; erased with its author (VTI-BDG-090)."
392
+ },
393
+ "BadgeId": {
394
+ "title": "BadgeId",
395
+ "description": "Opaque identifier of a badge: `bdg_` followed by 16 to 64 base64url characters. Random, community-scoped, never reused (VTI-BDG-001).",
396
+ "type": "string",
397
+ "pattern": "^bdg_[A-Za-z0-9_-]{16,64}$"
398
+ },
399
+ "AwardId": {
400
+ "title": "AwardId",
401
+ "description": "Opaque identifier of one giving of a badge to one member: `awd_` followed by 16 to 64 base64url characters. Random and unique within the community.",
402
+ "type": "string",
403
+ "pattern": "^awd_[A-Za-z0-9_-]{16,64}$"
404
+ },
405
+ "GroupCredentialId": {
406
+ "title": "GroupCredentialId",
407
+ "description": "Identifier (`id`) of a group membership credential issued to a member. Each renewal issues a new credential with a new identifier. Validity is the community's setting; a community SHOULD default to 30 days, renewed when 10 days remain.",
408
+ "type": "string",
409
+ "minLength": 1,
410
+ "maxLength": 512
411
+ },
412
+ "EntryId": {
413
+ "title": "EntryId",
414
+ "description": "Opaque identifier of one directory entry: `dir_` followed by 16 to 64 base64url characters. Random, scoped to one community, and stable for the life of the membership — it survives a rotation of the member's DID, which is why groups, notes and cards are keyed by it. It MUST NOT be derived from, and MUST NOT reveal, any DID of the member, and the same person's entries in two communities MUST NOT share one. Compared by exact string equality.",
415
+ "type": "string",
416
+ "pattern": "^dir_[A-Za-z0-9_-]{16,64}$"
417
+ },
418
+ "ClaimSecret": {
419
+ "title": "ClaimSecret",
420
+ "description": "A claim code itself: at least 128 random bits the community generated, base64url (22 to 64 characters). A bearer secret: shown to its issuer once, redeemed by a member, never stored or answered again (VTI-BDG-025).",
421
+ "type": "string",
422
+ "pattern": "^[A-Za-z0-9_-]{22,64}$"
423
+ }
424
+ }
425
+ } as const;
426
+
427
+ /**
428
+ * SPEC.md §7.2 policy for the request variant, from this specification's
429
+ * front matter. Pass to `consumeInbound` — items 5b, 7 and 8 are
430
+ * per-specification and cannot be derived from the document alone, and
431
+ * item 2 needs the schema this carries.
432
+ */
433
+ export const SPEC = {
434
+ typeUri: TYPE_URI,
435
+ isBearer: false,
436
+ isProofRequired: true,
437
+ isRecipientRequired: true,
438
+ isIssuedAtRequired: true,
439
+ payloadSchema: PAYLOAD_SCHEMA,
440
+ } as const;
441
+
442
+ /**
443
+ * SPEC.md §7.2 policy for the success-response variant. `isRecipientRequired`
444
+ * tracks the *issuer* party's requirement because a response swaps the
445
+ * parties (§7.3 item 5).
446
+ */
447
+ export const RESPONSE_SPEC = {
448
+ typeUri: RESPONSE_TYPE_URI,
449
+ isBearer: false,
450
+ isProofRequired: true,
451
+ isRecipientRequired: true,
452
+ isIssuedAtRequired: true,
453
+ payloadSchema: RESPONSE_PAYLOAD_SCHEMA,
454
+ } as const;