@openvtc/trust-tasks 0.28.23 → 0.28.24

package/dist/messaging/mux/update/0.1/payload.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"payload.d.ts","sourceRoot":"","sources":["../../../../../src/messaging/mux/update/0.1/payload.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,kBAAkB,EAAE,GAAG,EAAE,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,SAAS,EAAE,qBAAqB,EAAE,MAAM,EAAE,QAAQ,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,mCAAmC,CAAC;AAGzM;;GAEG;AACH,MAAM,WAAW,yBAAyB;IACxC;;OAEG;IACH,OAAO,EAAE,OAAO,CAAC;IACjB;;OAEG;IACH,KAAK,CAAC,EAAE,QAAQ,CAAC;IACjB;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;OAEG;IACH,GAAG,CAAC,EAAE,GAAG,CAAC;CACX;AACD;;GAEG;AACH,MAAM,WAAW,iCAAiC;IAChD;;OAEG;IACH,KAAK,EAAE,SAAS,CAAC;IACjB;;OAEG;IACH,OAAO,EAAE,OAAO,CAAC;IACjB;;OAEG;IACH,GAAG,CAAC,EAAE,GAAG,CAAC;CACX;AAED,kHAAkH;AAClH,YAAY,EAAE,kBAAkB,EAAE,GAAG,EAAE,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,SAAS,EAAE,qBAAqB,EAAE,MAAM,EAAE,QAAQ,EAAE,aAAa,EAAE,cAAc,EAAE,CAAC;AAEhK,2BAA2B;AAC3B,eAAO,MAAM,QAAQ,EAAG,sDAA+D,CAAC;AAExF;;;;;GAKG;AACH,eAAO,MAAM,OAAO,EAAE,MAAM,GAAG,IAAW,CAAC;AAE3C;;;;;GAKG;AACH,eAAO,MAAM,WAAW,EAAE,MAAM,GAAG,IAAW,CAAC;AAE/C,mEAAmE;AACnE,MAAM,MAAM,OAAO,GAAG,yBAAyB,CAAC;AAEhD,qEAAqE;AACrE,eAAO,MAAM,iBAAiB,EAAG,+DAAwE,CAAC;AAE1G,4EAA4E;AAC5E,MAAM,MAAM,QAAQ,GAAG,iCAAiC,CAAC;AAEzD;;;;;;;;GAQG;AACH,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAmRjB,CAAC;AAEX,mEAAmE;AACnE,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAyP1B,CAAC;AAEX;;;;;GAKG;AACH,eAAO,MAAM,IAAI;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAOP,CAAC;AAEX;;;;GAIG;AACH,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAOhB,CAAC"}

package/dist/messaging/mux/update/0.1/payload.js

@@ -0,0 +1,586 @@
+/**
+ * Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
+ * Source: specs/messaging/mux/update/0.1/payload.schema.json
+ */
+/** Trust Task type URI. */
+export const TYPE_URI = "https://trusttasks.org/spec/messaging/mux/update/0.1";
+/**
+ * The earlier version of this specification that this one declares it
+ * extends (front matter `extends`, SPEC §5.2 "Declared extension"), or
+ * `null`. Only the direct declaration — follow the chain with
+ * `extendsChain` / `readForSpec`.
+ */
+export const EXTENDS = null;
+/**
+ * Why this version is deprecated, or `null` while it is current. A
+ * superseded or retired version is still supported, and is withdrawn from
+ * this package in a later scheduled batch (SPEC "Superseded and Withdrawn
+ * Versions").
+ */
+export const DEPRECATION = null;
+/** Trust Task response type URI (request type URI + "#response"). */
+export const RESPONSE_TYPE_URI = "https://trusttasks.org/spec/messaging/mux/update/0.1#response";
+/**
+ * This specification's payload schema, as a value.
+ *
+ * SPEC.md §7.2 item 2 is performed against this. It is shipped as data
+ * rather than only as a `.json` file because TypeScript types are erased
+ * at runtime: without a schema a consumer has nothing to validate, and
+ * every REQUIRED payload member is optional in practice. Cross-file
+ * `$ref`s are already inlined, so it needs no resolver.
+ */
+export const PAYLOAD_SCHEMA = {
+    "$schema": "https://json-schema.org/draft/2020-12/schema",
+    "$id": "https://trusttasks.org/spec/messaging/mux/update/0.1",
+    "title": "Messaging — Mux Update — payload",
+    "description": "Narrow a stored grant — a smaller scope or an earlier expiry — without a new member signature. Anything that widens is refused. The outer document members are owned by the framework — SPEC §6.3.",
+    "type": "object",
+    "additionalProperties": false,
+    "required": [
+        "grantId"
+    ],
+    "properties": {
+        "grantId": {
+            "$ref": "#/$defs/GrantId",
+            "description": "The grant to narrow."
+        },
+        "scope": {
+            "$ref": "#/$defs/MuxScope",
+            "description": "The new effective scope. MUST be a subset of the grant's current effective scope."
+        },
+        "expiresAt": {
+            "type": "string",
+            "format": "date-time",
+            "description": "The new effective expiry. MUST be in the future and no later than the grant's current effective expiry."
+        },
+        "ext": {
+            "$ref": "#/$defs/Ext",
+            "description": "Ecosystem-defined extension members per SPEC.md §4.5.1."
+        }
+    },
+    "$defs": {
+        "Response": {
+            "$anchor": "response",
+            "title": "Messaging — Mux Update — response payload",
+            "description": "The success response to a messaging/mux/update request. Carried in a Trust Task document whose type is https://trusttasks.org/spec/messaging/mux/update/0.1#response.",
+            "type": "object",
+            "additionalProperties": false,
+            "required": [
+                "grant",
+                "changed"
+            ],
+            "properties": {
+                "grant": {
+                    "$ref": "#/$defs/GrantView",
+                    "description": "The grant as it now stands."
+                },
+                "changed": {
+                    "type": "boolean",
+                    "description": "False when the request named the values already in force."
+                },
+                "ext": {
+                    "$ref": "#/$defs/Ext",
+                    "description": "Ecosystem-defined extension members per SPEC.md §4.5.1."
+                }
+            }
+        },
+        "Ext": {
+            "title": "Ext",
+            "description": "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.",
+            "type": "object",
+            "minProperties": 1,
+            "additionalProperties": true,
+            "propertyNames": {
+                "pattern": "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$"
+            }
+        },
+        "GrantView": {
+            "title": "GrantView",
+            "type": "object",
+            "additionalProperties": false,
+            "required": [
+                "statement",
+                "state",
+                "scope",
+                "expiresAt"
+            ],
+            "description": "The mediator's view of one stored grant, as messaging/mux/list and messaging/mux/update return it: the grant statement verbatim, with the state and the effective scope and expiry beside it.",
+            "properties": {
+                "statement": {
+                    "$ref": "#/$defs/GrantStatement",
+                    "description": "The grant statement exactly as the member signed it and the mediator stored it, proof included, so either party can re-verify it."
+                },
+                "state": {
+                    "$ref": "#/$defs/GrantState"
+                },
+                "scope": {
+                    "$ref": "#/$defs/MuxScope",
+                    "description": "The effective scope: the signed scope, or the narrower one messaging/mux/update set."
+                },
+                "expiresAt": {
+                    "type": "string",
+                    "format": "date-time",
+                    "description": "The effective expiry: the signed `exp` rendered as RFC 3339, or the earlier one messaging/mux/update set."
+                },
+                "narrowed": {
+                    "type": "boolean",
+                    "description": "True when messaging/mux/update narrowed the effective scope or expiry below what the statement signs."
+                },
+                "attachedNow": {
+                    "type": "boolean",
+                    "description": "Principal view only: whether the member is attached through this grant to the connection that carried the list request."
+                }
+            }
+        },
+        "MuxScope": {
+            "title": "MuxScope",
+            "type": "array",
+            "minItems": 1,
+            "maxItems": 16,
+            "items": {
+                "$ref": "#/$defs/MuxScopeValue"
+            },
+            "description": "A set of capabilities: a non-empty JSON array of MuxScopeValue, compared as a set — order is not significant and a repeated value collapses into one. Never empty: an empty scope is refused, never read as \"all\". There is no default scope anywhere — every attach and every grant names its scope explicitly. A scope is always bounded by the member DID's own access-control capabilities at the mediator."
+        },
+        "MuxScopeValue": {
+            "title": "MuxScopeValue",
+            "type": "string",
+            "enum": [
+                "receive",
+                "pickup",
+                "delete",
+                "send"
+            ],
+            "description": "One capability a member DID extends to a principal's connection. `receive`: live delivery of the member's inbound messages on the connection. `pickup`: message-pickup status and delivery requests naming the member as `recipient_did`, and inclusion in a raw-TSP inbox drain. `delete`: deleting the member's stored messages, including delete-on-ack and delete-on-send; a member without `delete` keeps its messages in its inbox until something holding `delete` collects them. `send`: the mediator accepts on this connection frames whose sender is the member DID — the frame is still signed or authcrypted with the member's own keys; the scope only lets the mediator accept it on this socket."
+        },
+        "GrantState": {
+            "title": "GrantState",
+            "type": "string",
+            "enum": [
+                "active",
+                "suspended",
+                "staleKey",
+                "expired",
+                "epochRevoked"
+            ],
+            "description": "A stored grant's state. `active`: valid; the member is attached whenever the principal is connected. `suspended`: the member DID proved control with a key that signed none of its active grants (the unknown-key rule); terminal — the grant cannot be resumed and must be recreated by a fresh member signature. `staleKey`: the key that signed the grant is no longer in the member DID's current authentication relationship; terminal — it does not become active again if the key reappears. `expired`: an active grant past its effective expiry; computed when read, never stored. `epochRevoked`: the member DID advanced its epoch with messaging/mux/revoke-all. A grant revoked with messaging/mux/revoke has no state: it is deleted. A dead grant (every state but `active`) stays listable for the mediator's retention window after its effective expiry, then is pruned."
+        },
+        "GrantStatement": {
+            "title": "GrantStatement",
+            "type": "object",
+            "additionalProperties": false,
+            "required": [
+                "type",
+                "issuer",
+                "audience",
+                "grantId",
+                "principal",
+                "scope",
+                "epoch",
+                "iat",
+                "exp",
+                "proof"
+            ],
+            "description": "A member DID's standing statement that the named principal may carry its traffic at this mediator, on any connection, until `exp`, within `scope`, under the member's current `epoch`. Signed by the member with an embedded Data Integrity proof whose purpose is `authentication`, and stored verbatim by the mediator as the only evidence of the delegation.",
+            "properties": {
+                "type": {
+                    "type": "string",
+                    "const": "muxGrant",
+                    "description": "Always `muxGrant`; names the statement kind, so a statement of one kind is never accepted as another."
+                },
+                "issuer": {
+                    "$ref": "#/$defs/MuxDid",
+                    "description": "The member DID: the signer, and the DID the statement concerns."
+                },
+                "audience": {
+                    "$ref": "#/$defs/MuxDid",
+                    "description": "The mediator's DID. A statement names exactly one mediator and is refused by every other."
+                },
+                "grantId": {
+                    "$ref": "#/$defs/GrantId"
+                },
+                "principal": {
+                    "$ref": "#/$defs/MuxDid",
+                    "description": "The principal DID that may carry the member's traffic. MUST differ from `issuer`."
+                },
+                "scope": {
+                    "$ref": "#/$defs/StatementScope"
+                },
+                "epoch": {
+                    "type": "integer",
+                    "minimum": 0,
+                    "description": "The member DID's current epoch at the mediator. Only messaging/mux/revoke-all advances it."
+                },
+                "iat": {
+                    "type": "integer",
+                    "minimum": 0,
+                    "description": "JWT NumericDate (RFC 7519 §2), whole seconds since 1970-01-01T00:00:00Z UTC: when the statement was signed. MUST NOT be more than 60 seconds in the mediator's future."
+                },
+                "exp": {
+                    "type": "integer",
+                    "minimum": 0,
+                    "description": "JWT NumericDate (RFC 7519 §2): when the statement stops being accepted. REQUIRED; MUST be after `iat` and in the future."
+                },
+                "proof": {
+                    "$ref": "#/$defs/MuxDataIntegrityProof"
+                }
+            }
+        },
+        "MuxDataIntegrityProof": {
+            "title": "MuxDataIntegrityProof",
+            "type": "object",
+            "additionalProperties": false,
+            "required": [
+                "type",
+                "cryptosuite",
+                "verificationMethod",
+                "proofPurpose",
+                "proofValue"
+            ],
+            "description": "The W3C Data Integrity proof embedded in a mux statement, made by the member DID: the format and verifier Trust Tasks already use for document proofs (SPEC §4.7). The proof covers the whole statement except `proof` itself, as the cryptosuite defines. Closed: a member Data Integrity defines but this list omits is refused.",
+            "properties": {
+                "type": {
+                    "type": "string",
+                    "const": "DataIntegrityProof"
+                },
+                "cryptosuite": {
+                    "type": "string",
+                    "enum": [
+                        "eddsa-jcs-2022",
+                        "eddsa-rdfc-2022"
+                    ],
+                    "description": "The W3C Data Integrity EdDSA cryptosuite used."
+                },
+                "verificationMethod": {
+                    "type": "string",
+                    "minLength": 5,
+                    "maxLength": 2048,
+                    "pattern": "^did:\\S+#\\S+$",
+                    "description": "The DID URL of the verification method that signed. MUST be controlled by the statement's `issuer` and listed in that DID's current `authentication` relationship."
+                },
+                "proofPurpose": {
+                    "type": "string",
+                    "minLength": 1,
+                    "maxLength": 64,
+                    "description": "MUST be `authentication`. Any other value is refused with `messaging/mux:proofPurposeInvalid` — a proof made for another relationship (an `assertionMethod` credential signature, say) is never accepted as control of the DID."
+                },
+                "created": {
+                    "type": "string",
+                    "format": "date-time",
+                    "description": "OPTIONAL: when the proof was made, as Data Integrity defines it. Covered by the proof; the statement's own `iat` is what the mediator checks."
+                },
+                "proofValue": {
+                    "type": "string",
+                    "minLength": 2,
+                    "maxLength": 4096,
+                    "pattern": "^z[1-9A-HJ-NP-Za-km-z]+$",
+                    "description": "The multibase (base58btc) signature."
+                }
+            }
+        },
+        "StatementScope": {
+            "title": "StatementScope",
+            "type": "array",
+            "maxItems": 16,
+            "items": {
+                "$ref": "#/$defs/MuxScopeValue"
+            },
+            "description": "The scope a member DID signs into a statement: a JSON array of MuxScopeValue, compared as a set — order is not significant and a repeated value collapses. It MUST NOT be empty; an empty signed scope is refused with the task's `emptyScope` code, never read as \"all\". Unlike MuxScope, emptiness is not a schema failure here, so that the refusal is reported per statement rather than failing the whole batch."
+        },
+        "MuxDid": {
+            "title": "MuxDid",
+            "type": "string",
+            "minLength": 7,
+            "maxLength": 2048,
+            "pattern": "^did:[a-z0-9]+:\\S+$",
+            "description": "A DID, carried verbatim and compared by exact string equality. Unlike the messaging family's `Vid`, never a hash: the mediator resolves it to verify a statement signed by it. For a member DID reached over TSP, the TSP VID is the DID itself."
+        },
+        "GrantId": {
+            "title": "GrantId",
+            "type": "string",
+            "minLength": 1,
+            "maxLength": 128,
+            "pattern": "^[A-Za-z0-9._:-]+$",
+            "description": "A grant's identifier, chosen by the member DID's signer and carried in its grant statement; a UUID is RECOMMENDED. A mediator refuses a grant whose identifier is already on the member DID's record."
+        }
+    }
+};
+/** As {@link PAYLOAD_SCHEMA}, for the success-response variant. */
+export const RESPONSE_PAYLOAD_SCHEMA = {
+    "$schema": "https://json-schema.org/draft/2020-12/schema",
+    "$ref": "#/$defs/Response",
+    "$defs": {
+        "Response": {
+            "$anchor": "response",
+            "title": "Messaging — Mux Update — response payload",
+            "description": "The success response to a messaging/mux/update request. Carried in a Trust Task document whose type is https://trusttasks.org/spec/messaging/mux/update/0.1#response.",
+            "type": "object",
+            "additionalProperties": false,
+            "required": [
+                "grant",
+                "changed"
+            ],
+            "properties": {
+                "grant": {
+                    "$ref": "#/$defs/GrantView",
+                    "description": "The grant as it now stands."
+                },
+                "changed": {
+                    "type": "boolean",
+                    "description": "False when the request named the values already in force."
+                },
+                "ext": {
+                    "$ref": "#/$defs/Ext",
+                    "description": "Ecosystem-defined extension members per SPEC.md §4.5.1."
+                }
+            }
+        },
+        "Ext": {
+            "title": "Ext",
+            "description": "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.",
+            "type": "object",
+            "minProperties": 1,
+            "additionalProperties": true,
+            "propertyNames": {
+                "pattern": "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$"
+            }
+        },
+        "GrantView": {
+            "title": "GrantView",
+            "type": "object",
+            "additionalProperties": false,
+            "required": [
+                "statement",
+                "state",
+                "scope",
+                "expiresAt"
+            ],
+            "description": "The mediator's view of one stored grant, as messaging/mux/list and messaging/mux/update return it: the grant statement verbatim, with the state and the effective scope and expiry beside it.",
+            "properties": {
+                "statement": {
+                    "$ref": "#/$defs/GrantStatement",
+                    "description": "The grant statement exactly as the member signed it and the mediator stored it, proof included, so either party can re-verify it."
+                },
+                "state": {
+                    "$ref": "#/$defs/GrantState"
+                },
+                "scope": {
+                    "$ref": "#/$defs/MuxScope",
+                    "description": "The effective scope: the signed scope, or the narrower one messaging/mux/update set."
+                },
+                "expiresAt": {
+                    "type": "string",
+                    "format": "date-time",
+                    "description": "The effective expiry: the signed `exp` rendered as RFC 3339, or the earlier one messaging/mux/update set."
+                },
+                "narrowed": {
+                    "type": "boolean",
+                    "description": "True when messaging/mux/update narrowed the effective scope or expiry below what the statement signs."
+                },
+                "attachedNow": {
+                    "type": "boolean",
+                    "description": "Principal view only: whether the member is attached through this grant to the connection that carried the list request."
+                }
+            }
+        },
+        "MuxScope": {
+            "title": "MuxScope",
+            "type": "array",
+            "minItems": 1,
+            "maxItems": 16,
+            "items": {
+                "$ref": "#/$defs/MuxScopeValue"
+            },
+            "description": "A set of capabilities: a non-empty JSON array of MuxScopeValue, compared as a set — order is not significant and a repeated value collapses into one. Never empty: an empty scope is refused, never read as \"all\". There is no default scope anywhere — every attach and every grant names its scope explicitly. A scope is always bounded by the member DID's own access-control capabilities at the mediator."
+        },
+        "MuxScopeValue": {
+            "title": "MuxScopeValue",
+            "type": "string",
+            "enum": [
+                "receive",
+                "pickup",
+                "delete",
+                "send"
+            ],
+            "description": "One capability a member DID extends to a principal's connection. `receive`: live delivery of the member's inbound messages on the connection. `pickup`: message-pickup status and delivery requests naming the member as `recipient_did`, and inclusion in a raw-TSP inbox drain. `delete`: deleting the member's stored messages, including delete-on-ack and delete-on-send; a member without `delete` keeps its messages in its inbox until something holding `delete` collects them. `send`: the mediator accepts on this connection frames whose sender is the member DID — the frame is still signed or authcrypted with the member's own keys; the scope only lets the mediator accept it on this socket."
+        },
+        "GrantState": {
+            "title": "GrantState",
+            "type": "string",
+            "enum": [
+                "active",
+                "suspended",
+                "staleKey",
+                "expired",
+                "epochRevoked"
+            ],
+            "description": "A stored grant's state. `active`: valid; the member is attached whenever the principal is connected. `suspended`: the member DID proved control with a key that signed none of its active grants (the unknown-key rule); terminal — the grant cannot be resumed and must be recreated by a fresh member signature. `staleKey`: the key that signed the grant is no longer in the member DID's current authentication relationship; terminal — it does not become active again if the key reappears. `expired`: an active grant past its effective expiry; computed when read, never stored. `epochRevoked`: the member DID advanced its epoch with messaging/mux/revoke-all. A grant revoked with messaging/mux/revoke has no state: it is deleted. A dead grant (every state but `active`) stays listable for the mediator's retention window after its effective expiry, then is pruned."
+        },
+        "GrantStatement": {
+            "title": "GrantStatement",
+            "type": "object",
+            "additionalProperties": false,
+            "required": [
+                "type",
+                "issuer",
+                "audience",
+                "grantId",
+                "principal",
+                "scope",
+                "epoch",
+                "iat",
+                "exp",
+                "proof"
+            ],
+            "description": "A member DID's standing statement that the named principal may carry its traffic at this mediator, on any connection, until `exp`, within `scope`, under the member's current `epoch`. Signed by the member with an embedded Data Integrity proof whose purpose is `authentication`, and stored verbatim by the mediator as the only evidence of the delegation.",
+            "properties": {
+                "type": {
+                    "type": "string",
+                    "const": "muxGrant",
+                    "description": "Always `muxGrant`; names the statement kind, so a statement of one kind is never accepted as another."
+                },
+                "issuer": {
+                    "$ref": "#/$defs/MuxDid",
+                    "description": "The member DID: the signer, and the DID the statement concerns."
+                },
+                "audience": {
+                    "$ref": "#/$defs/MuxDid",
+                    "description": "The mediator's DID. A statement names exactly one mediator and is refused by every other."
+                },
+                "grantId": {
+                    "$ref": "#/$defs/GrantId"
+                },
+                "principal": {
+                    "$ref": "#/$defs/MuxDid",
+                    "description": "The principal DID that may carry the member's traffic. MUST differ from `issuer`."
+                },
+                "scope": {
+                    "$ref": "#/$defs/StatementScope"
+                },
+                "epoch": {
+                    "type": "integer",
+                    "minimum": 0,
+                    "description": "The member DID's current epoch at the mediator. Only messaging/mux/revoke-all advances it."
+                },
+                "iat": {
+                    "type": "integer",
+                    "minimum": 0,
+                    "description": "JWT NumericDate (RFC 7519 §2), whole seconds since 1970-01-01T00:00:00Z UTC: when the statement was signed. MUST NOT be more than 60 seconds in the mediator's future."
+                },
+                "exp": {
+                    "type": "integer",
+                    "minimum": 0,
+                    "description": "JWT NumericDate (RFC 7519 §2): when the statement stops being accepted. REQUIRED; MUST be after `iat` and in the future."
+                },
+                "proof": {
+                    "$ref": "#/$defs/MuxDataIntegrityProof"
+                }
+            }
+        },
+        "MuxDataIntegrityProof": {
+            "title": "MuxDataIntegrityProof",
+            "type": "object",
+            "additionalProperties": false,
+            "required": [
+                "type",
+                "cryptosuite",
+                "verificationMethod",
+                "proofPurpose",
+                "proofValue"
+            ],
+            "description": "The W3C Data Integrity proof embedded in a mux statement, made by the member DID: the format and verifier Trust Tasks already use for document proofs (SPEC §4.7). The proof covers the whole statement except `proof` itself, as the cryptosuite defines. Closed: a member Data Integrity defines but this list omits is refused.",
+            "properties": {
+                "type": {
+                    "type": "string",
+                    "const": "DataIntegrityProof"
+                },
+                "cryptosuite": {
+                    "type": "string",
+                    "enum": [
+                        "eddsa-jcs-2022",
+                        "eddsa-rdfc-2022"
+                    ],
+                    "description": "The W3C Data Integrity EdDSA cryptosuite used."
+                },
+                "verificationMethod": {
+                    "type": "string",
+                    "minLength": 5,
+                    "maxLength": 2048,
+                    "pattern": "^did:\\S+#\\S+$",
+                    "description": "The DID URL of the verification method that signed. MUST be controlled by the statement's `issuer` and listed in that DID's current `authentication` relationship."
+                },
+                "proofPurpose": {
+                    "type": "string",
+                    "minLength": 1,
+                    "maxLength": 64,
+                    "description": "MUST be `authentication`. Any other value is refused with `messaging/mux:proofPurposeInvalid` — a proof made for another relationship (an `assertionMethod` credential signature, say) is never accepted as control of the DID."
+                },
+                "created": {
+                    "type": "string",
+                    "format": "date-time",
+                    "description": "OPTIONAL: when the proof was made, as Data Integrity defines it. Covered by the proof; the statement's own `iat` is what the mediator checks."
+                },
+                "proofValue": {
+                    "type": "string",
+                    "minLength": 2,
+                    "maxLength": 4096,
+                    "pattern": "^z[1-9A-HJ-NP-Za-km-z]+$",
+                    "description": "The multibase (base58btc) signature."
+                }
+            }
+        },
+        "StatementScope": {
+            "title": "StatementScope",
+            "type": "array",
+            "maxItems": 16,
+            "items": {
+                "$ref": "#/$defs/MuxScopeValue"
+            },
+            "description": "The scope a member DID signs into a statement: a JSON array of MuxScopeValue, compared as a set — order is not significant and a repeated value collapses. It MUST NOT be empty; an empty signed scope is refused with the task's `emptyScope` code, never read as \"all\". Unlike MuxScope, emptiness is not a schema failure here, so that the refusal is reported per statement rather than failing the whole batch."
+        },
+        "MuxDid": {
+            "title": "MuxDid",
+            "type": "string",
+            "minLength": 7,
+            "maxLength": 2048,
+            "pattern": "^did:[a-z0-9]+:\\S+$",
+            "description": "A DID, carried verbatim and compared by exact string equality. Unlike the messaging family's `Vid`, never a hash: the mediator resolves it to verify a statement signed by it. For a member DID reached over TSP, the TSP VID is the DID itself."
+        },
+        "GrantId": {
+            "title": "GrantId",
+            "type": "string",
+            "minLength": 1,
+            "maxLength": 128,
+            "pattern": "^[A-Za-z0-9._:-]+$",
+            "description": "A grant's identifier, chosen by the member DID's signer and carried in its grant statement; a UUID is RECOMMENDED. A mediator refuses a grant whose identifier is already on the member DID's record."
+        }
+    }
+};
+/**
+ * SPEC.md §7.2 policy for the request variant, from this specification's
+ * front matter. Pass to `consumeInbound` — items 5b, 7 and 8 are
+ * per-specification and cannot be derived from the document alone, and
+ * item 2 needs the schema this carries.
+ */
+export const SPEC = {
+    typeUri: TYPE_URI,
+    isBearer: false,
+    isProofRequired: true,
+    isRecipientRequired: true,
+    isIssuedAtRequired: true,
+    payloadSchema: PAYLOAD_SCHEMA,
+};
+/**
+ * SPEC.md §7.2 policy for the success-response variant. `isRecipientRequired`
+ * tracks the *issuer* party's requirement because a response swaps the
+ * parties (§7.3 item 5).
+ */
+export const RESPONSE_SPEC = {
+    typeUri: RESPONSE_TYPE_URI,
+    isBearer: false,
+    isProofRequired: false,
+    isRecipientRequired: true,
+    isIssuedAtRequired: true,
+    payloadSchema: RESPONSE_PAYLOAD_SCHEMA,
+};
+//# sourceMappingURL=payload.js.map

package/dist/messaging/mux/update/0.1/payload.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"payload.js","sourceRoot":"","sources":["../../../../../src/messaging/mux/update/0.1/payload.ts"],"names":[],"mappings":"AAAA;;;GAGG;AA+CH,2BAA2B;AAC3B,MAAM,CAAC,MAAM,QAAQ,GAAG,sDAA+D,CAAC;AAExF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,OAAO,GAAkB,IAAI,CAAC;AAE3C;;;;;GAKG;AACH,MAAM,CAAC,MAAM,WAAW,GAAkB,IAAI,CAAC;AAK/C,qEAAqE;AACrE,MAAM,CAAC,MAAM,iBAAiB,GAAG,+DAAwE,CAAC;AAK1G;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,SAAS,EAAE,8CAA8C;IACzD,KAAK,EAAE,sDAAsD;IAC7D,OAAO,EAAE,kCAAkC;IAC3C,aAAa,EAAE,oMAAoM;IACnN,MAAM,EAAE,QAAQ;IAChB,sBAAsB,EAAE,KAAK;IAC7B,UAAU,EAAE;QACV,SAAS;KACV;IACD,YAAY,EAAE;QACZ,SAAS,EAAE;YACT,MAAM,EAAE,iBAAiB;YACzB,aAAa,EAAE,sBAAsB;SACtC;QACD,OAAO,EAAE;YACP,MAAM,EAAE,kBAAkB;YAC1B,aAAa,EAAE,mFAAmF;SACnG;QACD,WAAW,EAAE;YACX,MAAM,EAAE,QAAQ;YAChB,QAAQ,EAAE,WAAW;YACrB,aAAa,EAAE,yGAAyG;SACzH;QACD,KAAK,EAAE;YACL,MAAM,EAAE,aAAa;YACrB,aAAa,EAAE,yDAAyD;SACzE;KACF;IACD,OAAO,EAAE;QACP,UAAU,EAAE;YACV,SAAS,EAAE,UAAU;YACrB,OAAO,EAAE,2CAA2C;YACpD,aAAa,EAAE,uKAAuK;YACtL,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,OAAO;gBACP,SAAS;aACV;YACD,YAAY,EAAE;gBACZ,OAAO,EAAE;oBACP,MAAM,EAAE,mBAAmB;oBAC3B,aAAa,EAAE,6BAA6B;iBAC7C;gBACD,SAAS,EAAE;oBACT,MAAM,EAAE,SAAS;oBACjB,aAAa,EAAE,2DAA2D;iBAC3E;gBACD,KAAK,EAAE;oBACL,MAAM,EAAE,aAAa;oBACrB,aAAa,EAAE,yDAAyD;iBACzE;aACF;SACF;QACD,KAAK,EAAE;YACL,OAAO,EAAE,KAAK;YACd,aAAa,EAAE,uKAAuK;YACtL,MAAM,EAAE,QAAQ;YAChB,eAAe,EAAE,CAAC;YAClB,sBAAsB,EAAE,IAAI;YAC5B,eAAe,EAAE;gBACf,SAAS,EAAE,mCAAmC;aAC/C;SACF;QACD,WAAW,EAAE;YACX,OAAO,EAAE,WAAW;YACpB,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,WAAW;gBACX,OAAO;gBACP,OAAO;gBACP,WAAW;aACZ;YACD,aAAa,EAAE,+LAA+L;YAC9M,YAAY,EAAE;gBACZ,WAAW,EAAE;oBACX,MAAM,EAAE,wBAAwB;oBAChC,aAAa,EAAE,mIAAmI;iBACnJ;gBACD,OAAO,EAAE;oBACP,MAAM,EAAE,oBAAoB;iBAC7B;gBACD,OAAO,EAAE;oBACP,MAAM,EAAE,kBAAkB;oBAC1B,aAAa,EAAE,sFAAsF;iBACtG;gBACD,WAAW,EAAE;oBACX,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,WAAW;oBACrB,aAAa,EAAE,2GAA2G;iBAC3H;gBACD,UAAU,EAAE;oBACV,MAAM,EAAE,SAAS;oBACjB,aAAa,EAAE,uGAAuG;iBACvH;gBACD,aAAa,EAAE;oBACb,MAAM,EAAE,SAAS;oBACjB,aAAa,EAAE,yHAAyH;iBACzI;aACF;SACF;QACD,UAAU,EAAE;YACV,OAAO,EAAE,UAAU;YACnB,MAAM,EAAE,OAAO;YACf,UAAU,EAAE,CAAC;YACb,UAAU,EAAE,EAAE;YACd,OAAO,EAAE;gBACP,MAAM,EAAE,uBAAuB;aAChC;YACD,aAAa,EAAE,mZAAmZ;SACna;QACD,eAAe,EAAE;YACf,OAAO,EAAE,eAAe;YACxB,MAAM,EAAE,QAAQ;YAChB,MAAM,EAAE;gBACN,SAAS;gBACT,QAAQ;gBACR,QAAQ;gBACR,MAAM;aACP;YACD,aAAa,EAAE,krBAAkrB;SAClsB;QACD,YAAY,EAAE;YACZ,OAAO,EAAE,YAAY;YACrB,MAAM,EAAE,QAAQ;YAChB,MAAM,EAAE;gBACN,QAAQ;gBACR,WAAW;gBACX,UAAU;gBACV,SAAS;gBACT,cAAc;aACf;YACD,aAAa,EAAE,41BAA41B;SAC52B;QACD,gBAAgB,EAAE;YAChB,OAAO,EAAE,gBAAgB;YACzB,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,MAAM;gBACN,QAAQ;gBACR,UAAU;gBACV,SAAS;gBACT,WAAW;gBACX,OAAO;gBACP,OAAO;gBACP,KAAK;gBACL,KAAK;gBACL,OAAO;aACR;YACD,aAAa,EAAE,kWAAkW;YACjX,YAAY,EAAE;gBACZ,MAAM,EAAE;oBACN,MAAM,EAAE,QAAQ;oBAChB,OAAO,EAAE,UAAU;oBACnB,aAAa,EAAE,uGAAuG;iBACvH;gBACD,QAAQ,EAAE;oBACR,MAAM,EAAE,gBAAgB;oBACxB,aAAa,EAAE,iEAAiE;iBACjF;gBACD,UAAU,EAAE;oBACV,MAAM,EAAE,gBAAgB;oBACxB,aAAa,EAAE,2FAA2F;iBAC3G;gBACD,SAAS,EAAE;oBACT,MAAM,EAAE,iBAAiB;iBAC1B;gBACD,WAAW,EAAE;oBACX,MAAM,EAAE,gBAAgB;oBACxB,aAAa,EAAE,mFAAmF;iBACnG;gBACD,OAAO,EAAE;oBACP,MAAM,EAAE,wBAAwB;iBACjC;gBACD,OAAO,EAAE;oBACP,MAAM,EAAE,SAAS;oBACjB,SAAS,EAAE,CAAC;oBACZ,aAAa,EAAE,4FAA4F;iBAC5G;gBACD,KAAK,EAAE;oBACL,MAAM,EAAE,SAAS;oBACjB,SAAS,EAAE,CAAC;oBACZ,aAAa,EAAE,wKAAwK;iBACxL;gBACD,KAAK,EAAE;oBACL,MAAM,EAAE,SAAS;oBACjB,SAAS,EAAE,CAAC;oBACZ,aAAa,EAAE,0HAA0H;iBAC1I;gBACD,OAAO,EAAE;oBACP,MAAM,EAAE,+BAA+B;iBACxC;aACF;SACF;QACD,uBAAuB,EAAE;YACvB,OAAO,EAAE,uBAAuB;YAChC,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,MAAM;gBACN,aAAa;gBACb,oBAAoB;gBACpB,cAAc;gBACd,YAAY;aACb;YACD,aAAa,EAAE,oUAAoU;YACnV,YAAY,EAAE;gBACZ,MAAM,EAAE;oBACN,MAAM,EAAE,QAAQ;oBAChB,OAAO,EAAE,oBAAoB;iBAC9B;gBACD,aAAa,EAAE;oBACb,MAAM,EAAE,QAAQ;oBAChB,MAAM,EAAE;wBACN,gBAAgB;wBAChB,iBAAiB;qBAClB;oBACD,aAAa,EAAE,gDAAgD;iBAChE;gBACD,oBAAoB,EAAE;oBACpB,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,WAAW,EAAE,IAAI;oBACjB,SAAS,EAAE,iBAAiB;oBAC5B,aAAa,EAAE,oKAAoK;iBACpL;gBACD,cAAc,EAAE;oBACd,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,WAAW,EAAE,EAAE;oBACf,aAAa,EAAE,iOAAiO;iBACjP;gBACD,SAAS,EAAE;oBACT,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,WAAW;oBACrB,aAAa,EAAE,+IAA+I;iBAC/J;gBACD,YAAY,EAAE;oBACZ,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,WAAW,EAAE,IAAI;oBACjB,SAAS,EAAE,0BAA0B;oBACrC,aAAa,EAAE,sCAAsC;iBACtD;aACF;SACF;QACD,gBAAgB,EAAE;YAChB,OAAO,EAAE,gBAAgB;YACzB,MAAM,EAAE,OAAO;YACf,UAAU,EAAE,EAAE;YACd,OAAO,EAAE;gBACP,MAAM,EAAE,uBAAuB;aAChC;YACD,aAAa,EAAE,yZAAyZ;SACza;QACD,QAAQ,EAAE;YACR,OAAO,EAAE,QAAQ;YACjB,MAAM,EAAE,QAAQ;YAChB,WAAW,EAAE,CAAC;YACd,WAAW,EAAE,IAAI;YACjB,SAAS,EAAE,sBAAsB;YACjC,aAAa,EAAE,kPAAkP;SAClQ;QACD,SAAS,EAAE;YACT,OAAO,EAAE,SAAS;YAClB,MAAM,EAAE,QAAQ;YAChB,WAAW,EAAE,CAAC;YACd,WAAW,EAAE,GAAG;YAChB,SAAS,EAAE,oBAAoB;YAC/B,aAAa,EAAE,uMAAuM;SACvN;KACF;CACO,CAAC;AAEX,mEAAmE;AACnE,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,SAAS,EAAE,8CAA8C;IACzD,MAAM,EAAE,kBAAkB;IAC1B,OAAO,EAAE;QACP,UAAU,EAAE;YACV,SAAS,EAAE,UAAU;YACrB,OAAO,EAAE,2CAA2C;YACpD,aAAa,EAAE,uKAAuK;YACtL,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,OAAO;gBACP,SAAS;aACV;YACD,YAAY,EAAE;gBACZ,OAAO,EAAE;oBACP,MAAM,EAAE,mBAAmB;oBAC3B,aAAa,EAAE,6BAA6B;iBAC7C;gBACD,SAAS,EAAE;oBACT,MAAM,EAAE,SAAS;oBACjB,aAAa,EAAE,2DAA2D;iBAC3E;gBACD,KAAK,EAAE;oBACL,MAAM,EAAE,aAAa;oBACrB,aAAa,EAAE,yDAAyD;iBACzE;aACF;SACF;QACD,KAAK,EAAE;YACL,OAAO,EAAE,KAAK;YACd,aAAa,EAAE,uKAAuK;YACtL,MAAM,EAAE,QAAQ;YAChB,eAAe,EAAE,CAAC;YAClB,sBAAsB,EAAE,IAAI;YAC5B,eAAe,EAAE;gBACf,SAAS,EAAE,mCAAmC;aAC/C;SACF;QACD,WAAW,EAAE;YACX,OAAO,EAAE,WAAW;YACpB,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,WAAW;gBACX,OAAO;gBACP,OAAO;gBACP,WAAW;aACZ;YACD,aAAa,EAAE,+LAA+L;YAC9M,YAAY,EAAE;gBACZ,WAAW,EAAE;oBACX,MAAM,EAAE,wBAAwB;oBAChC,aAAa,EAAE,mIAAmI;iBACnJ;gBACD,OAAO,EAAE;oBACP,MAAM,EAAE,oBAAoB;iBAC7B;gBACD,OAAO,EAAE;oBACP,MAAM,EAAE,kBAAkB;oBAC1B,aAAa,EAAE,sFAAsF;iBACtG;gBACD,WAAW,EAAE;oBACX,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,WAAW;oBACrB,aAAa,EAAE,2GAA2G;iBAC3H;gBACD,UAAU,EAAE;oBACV,MAAM,EAAE,SAAS;oBACjB,aAAa,EAAE,uGAAuG;iBACvH;gBACD,aAAa,EAAE;oBACb,MAAM,EAAE,SAAS;oBACjB,aAAa,EAAE,yHAAyH;iBACzI;aACF;SACF;QACD,UAAU,EAAE;YACV,OAAO,EAAE,UAAU;YACnB,MAAM,EAAE,OAAO;YACf,UAAU,EAAE,CAAC;YACb,UAAU,EAAE,EAAE;YACd,OAAO,EAAE;gBACP,MAAM,EAAE,uBAAuB;aAChC;YACD,aAAa,EAAE,mZAAmZ;SACna;QACD,eAAe,EAAE;YACf,OAAO,EAAE,eAAe;YACxB,MAAM,EAAE,QAAQ;YAChB,MAAM,EAAE;gBACN,SAAS;gBACT,QAAQ;gBACR,QAAQ;gBACR,MAAM;aACP;YACD,aAAa,EAAE,krBAAkrB;SAClsB;QACD,YAAY,EAAE;YACZ,OAAO,EAAE,YAAY;YACrB,MAAM,EAAE,QAAQ;YAChB,MAAM,EAAE;gBACN,QAAQ;gBACR,WAAW;gBACX,UAAU;gBACV,SAAS;gBACT,cAAc;aACf;YACD,aAAa,EAAE,41BAA41B;SAC52B;QACD,gBAAgB,EAAE;YAChB,OAAO,EAAE,gBAAgB;YACzB,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,MAAM;gBACN,QAAQ;gBACR,UAAU;gBACV,SAAS;gBACT,WAAW;gBACX,OAAO;gBACP,OAAO;gBACP,KAAK;gBACL,KAAK;gBACL,OAAO;aACR;YACD,aAAa,EAAE,kWAAkW;YACjX,YAAY,EAAE;gBACZ,MAAM,EAAE;oBACN,MAAM,EAAE,QAAQ;oBAChB,OAAO,EAAE,UAAU;oBACnB,aAAa,EAAE,uGAAuG;iBACvH;gBACD,QAAQ,EAAE;oBACR,MAAM,EAAE,gBAAgB;oBACxB,aAAa,EAAE,iEAAiE;iBACjF;gBACD,UAAU,EAAE;oBACV,MAAM,EAAE,gBAAgB;oBACxB,aAAa,EAAE,2FAA2F;iBAC3G;gBACD,SAAS,EAAE;oBACT,MAAM,EAAE,iBAAiB;iBAC1B;gBACD,WAAW,EAAE;oBACX,MAAM,EAAE,gBAAgB;oBACxB,aAAa,EAAE,mFAAmF;iBACnG;gBACD,OAAO,EAAE;oBACP,MAAM,EAAE,wBAAwB;iBACjC;gBACD,OAAO,EAAE;oBACP,MAAM,EAAE,SAAS;oBACjB,SAAS,EAAE,CAAC;oBACZ,aAAa,EAAE,4FAA4F;iBAC5G;gBACD,KAAK,EAAE;oBACL,MAAM,EAAE,SAAS;oBACjB,SAAS,EAAE,CAAC;oBACZ,aAAa,EAAE,wKAAwK;iBACxL;gBACD,KAAK,EAAE;oBACL,MAAM,EAAE,SAAS;oBACjB,SAAS,EAAE,CAAC;oBACZ,aAAa,EAAE,0HAA0H;iBAC1I;gBACD,OAAO,EAAE;oBACP,MAAM,EAAE,+BAA+B;iBACxC;aACF;SACF;QACD,uBAAuB,EAAE;YACvB,OAAO,EAAE,uBAAuB;YAChC,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,MAAM;gBACN,aAAa;gBACb,oBAAoB;gBACpB,cAAc;gBACd,YAAY;aACb;YACD,aAAa,EAAE,oUAAoU;YACnV,YAAY,EAAE;gBACZ,MAAM,EAAE;oBACN,MAAM,EAAE,QAAQ;oBAChB,OAAO,EAAE,oBAAoB;iBAC9B;gBACD,aAAa,EAAE;oBACb,MAAM,EAAE,QAAQ;oBAChB,MAAM,EAAE;wBACN,gBAAgB;wBAChB,iBAAiB;qBAClB;oBACD,aAAa,EAAE,gDAAgD;iBAChE;gBACD,oBAAoB,EAAE;oBACpB,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,WAAW,EAAE,IAAI;oBACjB,SAAS,EAAE,iBAAiB;oBAC5B,aAAa,EAAE,oKAAoK;iBACpL;gBACD,cAAc,EAAE;oBACd,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,WAAW,EAAE,EAAE;oBACf,aAAa,EAAE,iOAAiO;iBACjP;gBACD,SAAS,EAAE;oBACT,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,WAAW;oBACrB,aAAa,EAAE,+IAA+I;iBAC/J;gBACD,YAAY,EAAE;oBACZ,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,WAAW,EAAE,IAAI;oBACjB,SAAS,EAAE,0BAA0B;oBACrC,aAAa,EAAE,sCAAsC;iBACtD;aACF;SACF;QACD,gBAAgB,EAAE;YAChB,OAAO,EAAE,gBAAgB;YACzB,MAAM,EAAE,OAAO;YACf,UAAU,EAAE,EAAE;YACd,OAAO,EAAE;gBACP,MAAM,EAAE,uBAAuB;aAChC;YACD,aAAa,EAAE,yZAAyZ;SACza;QACD,QAAQ,EAAE;YACR,OAAO,EAAE,QAAQ;YACjB,MAAM,EAAE,QAAQ;YAChB,WAAW,EAAE,CAAC;YACd,WAAW,EAAE,IAAI;YACjB,SAAS,EAAE,sBAAsB;YACjC,aAAa,EAAE,kPAAkP;SAClQ;QACD,SAAS,EAAE;YACT,OAAO,EAAE,SAAS;YAClB,MAAM,EAAE,QAAQ;YAChB,WAAW,EAAE,CAAC;YACd,WAAW,EAAE,GAAG;YAChB,SAAS,EAAE,oBAAoB;YAC/B,aAAa,EAAE,uMAAuM;SACvN;KACF;CACO,CAAC;AAEX;;;;;GAKG;AACH,MAAM,CAAC,MAAM,IAAI,GAAG;IAClB,OAAO,EAAE,QAAQ;IACjB,QAAQ,EAAE,KAAK;IACf,eAAe,EAAE,IAAI;IACrB,mBAAmB,EAAE,IAAI;IACzB,kBAAkB,EAAE,IAAI;IACxB,aAAa,EAAE,cAAc;CACrB,CAAC;AAEX;;;;GAIG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,OAAO,EAAE,iBAAiB;IAC1B,QAAQ,EAAE,KAAK;IACf,eAAe,EAAE,KAAK;IACtB,mBAAmB,EAAE,IAAI;IACzB,kBAAkB,EAAE,IAAI;IACxB,aAAa,EAAE,uBAAuB;CAC9B,CAAC"}

package/dist/vta/_shared/0.1/memory-record.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
+ * Source: specs/vta/_shared/0.1/memory-record.schema.json
+ */
+/**
+ * Agent memory is free-form text an agent stores in a VTA context so it can recall it across sessions. A memory item is addressed by the pair `(contextId, key)`; `MemoryRecord` is the shape every versioned task in the family hands back, defined once here because `list`, `get` and the conflict details of `put` and `delete` all return the same record and an inline copy per task would fork the moment one of them gained a member.
+ *
+ * The version counter is the family's load-bearing invariant and is described once, here, on the same terms as `vta/app-state/*`'s. `version` is a monotonically increasing integer maintained per `contextId`, NOT per item: every write in a context — a put or a delete — takes the next value of that context's counter, and an item's `version` is the counter value its most recent write took. One number therefore serves two purposes: it is the optimistic-concurrency token `expectedVersion` is compared against, and it is the watermark `sinceVersion` is compared against. A per-item counter could do the first but not the second, because two items' counters are not comparable and so no single number could mean "everything changed after this point". Consumers MUST treat version numbers as opaque and monotonic: an item's version can jump by any amount between two writes, because writes to other items in the context consumed the intervening values.
+ *
+ * The counter is per context because the context is the family's isolation boundary: memory has no namespace below it, and a counter spanning contexts would let a reader of one context observe how much traffic another carried.
+ *
+ * Timestamp invariants (SHOULD-level, prose — not expressible in JSON Schema): when `createdAt` is present, `updatedAt >= createdAt`; when `deletedAt` is present, `deleted` is true and `deletedAt >= createdAt`. Consumers SHOULD reject documents that violate either.
+ */
+export interface MemoryRecordSharedDefinitionForVtaMemoryFromPutDeleteList02AndGet01 {
+    [k: string]: unknown | undefined;
+}
+/**
+ * The definitions this shared schema publishes, hoisted to one declaration each.
+ * See "../../../_shared/components.js".
+ */
+export type { MemoryExpectedVersion, MemoryKey, MemoryRecord, MemoryValue, MemoryVersion } from "../../../_shared/components.js";
+//# sourceMappingURL=memory-record.d.ts.map

package/dist/vta/_shared/0.1/memory-record.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory-record.d.ts","sourceRoot":"","sources":["../../../../src/vta/_shared/0.1/memory-record.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;;;;;;;GAQG;AACH,MAAM,WAAW,mEAAmE;IAClF,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC;CAClC;AAED;;;GAGG;AACH,YAAY,EAAE,qBAAqB,EAAE,SAAS,EAAE,YAAY,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC"}

package/dist/vta/_shared/0.1/memory-record.js

@@ -0,0 +1,6 @@
+/**
+ * Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
+ * Source: specs/vta/_shared/0.1/memory-record.schema.json
+ */
+export {};
+//# sourceMappingURL=memory-record.js.map