@openvtc/trust-tasks 0.28.25 → 0.28.26

package/src/index.ts

@@ -22,18 +22,27 @@ export import AclEntryShared_v0_1 = _AclEntryShared_v0_1;
 import * as _AclEntryShared_v0_2 from "./acl/_shared/0.2/acl-entry.js";
 /** @deprecated The prebuilt specification modules will be removed: pin the tasks you use with the `trust-tasks` CLI, generate them with `@openvtc/trust-tasks-gen`, and import the runtime from `@openvtc/trust-tasks/runtime` (GETTING-STARTED.md). */
 export import AclEntryShared_v0_2 = _AclEntryShared_v0_2;
+import * as _AclEntryShared_v0_3 from "./acl/_shared/0.3/acl-entry.js";
+/** @deprecated The prebuilt specification modules will be removed: pin the tasks you use with the `trust-tasks` CLI, generate them with `@openvtc/trust-tasks-gen`, and import the runtime from `@openvtc/trust-tasks/runtime` (GETTING-STARTED.md). */
+export import AclEntryShared_v0_3 = _AclEntryShared_v0_3;
 import * as _AclChangeRole_v0_1 from "./acl/change-role/0.1/payload.js";
 /** @deprecated The prebuilt specification modules will be removed: pin the tasks you use with the `trust-tasks` CLI, generate them with `@openvtc/trust-tasks-gen`, and import the runtime from `@openvtc/trust-tasks/runtime` (GETTING-STARTED.md). */
 export import AclChangeRole_v0_1 = _AclChangeRole_v0_1;
 import * as _AclChangeRole_v0_2 from "./acl/change-role/0.2/payload.js";
 /** @deprecated The prebuilt specification modules will be removed: pin the tasks you use with the `trust-tasks` CLI, generate them with `@openvtc/trust-tasks-gen`, and import the runtime from `@openvtc/trust-tasks/runtime` (GETTING-STARTED.md). */
 export import AclChangeRole_v0_2 = _AclChangeRole_v0_2;
+import * as _AclChangeRole_v0_3 from "./acl/change-role/0.3/payload.js";
+/** @deprecated The prebuilt specification modules will be removed: pin the tasks you use with the `trust-tasks` CLI, generate them with `@openvtc/trust-tasks-gen`, and import the runtime from `@openvtc/trust-tasks/runtime` (GETTING-STARTED.md). */
+export import AclChangeRole_v0_3 = _AclChangeRole_v0_3;
 import * as _AclGrant_v0_1 from "./acl/grant/0.1/payload.js";
 /** @deprecated The prebuilt specification modules will be removed: pin the tasks you use with the `trust-tasks` CLI, generate them with `@openvtc/trust-tasks-gen`, and import the runtime from `@openvtc/trust-tasks/runtime` (GETTING-STARTED.md). */
 export import AclGrant_v0_1 = _AclGrant_v0_1;
 import * as _AclGrant_v0_2 from "./acl/grant/0.2/payload.js";
 /** @deprecated The prebuilt specification modules will be removed: pin the tasks you use with the `trust-tasks` CLI, generate them with `@openvtc/trust-tasks-gen`, and import the runtime from `@openvtc/trust-tasks/runtime` (GETTING-STARTED.md). */
 export import AclGrant_v0_2 = _AclGrant_v0_2;
+import * as _AclGrant_v0_3 from "./acl/grant/0.3/payload.js";
+/** @deprecated The prebuilt specification modules will be removed: pin the tasks you use with the `trust-tasks` CLI, generate them with `@openvtc/trust-tasks-gen`, and import the runtime from `@openvtc/trust-tasks/runtime` (GETTING-STARTED.md). */
+export import AclGrant_v0_3 = _AclGrant_v0_3;
 import * as _AclList_v0_1 from "./acl/list/0.1/payload.js";
 /** @deprecated The prebuilt specification modules will be removed: pin the tasks you use with the `trust-tasks` CLI, generate them with `@openvtc/trust-tasks-gen`, and import the runtime from `@openvtc/trust-tasks/runtime` (GETTING-STARTED.md). */
 export import AclList_v0_1 = _AclList_v0_1;
@@ -43,18 +52,27 @@ export import AclList_v0_2 = _AclList_v0_2;
 import * as _AclList_v0_3 from "./acl/list/0.3/payload.js";
 /** @deprecated The prebuilt specification modules will be removed: pin the tasks you use with the `trust-tasks` CLI, generate them with `@openvtc/trust-tasks-gen`, and import the runtime from `@openvtc/trust-tasks/runtime` (GETTING-STARTED.md). */
 export import AclList_v0_3 = _AclList_v0_3;
+import * as _AclList_v0_4 from "./acl/list/0.4/payload.js";
+/** @deprecated The prebuilt specification modules will be removed: pin the tasks you use with the `trust-tasks` CLI, generate them with `@openvtc/trust-tasks-gen`, and import the runtime from `@openvtc/trust-tasks/runtime` (GETTING-STARTED.md). */
+export import AclList_v0_4 = _AclList_v0_4;
 import * as _AclRevoke_v0_1 from "./acl/revoke/0.1/payload.js";
 /** @deprecated The prebuilt specification modules will be removed: pin the tasks you use with the `trust-tasks` CLI, generate them with `@openvtc/trust-tasks-gen`, and import the runtime from `@openvtc/trust-tasks/runtime` (GETTING-STARTED.md). */
 export import AclRevoke_v0_1 = _AclRevoke_v0_1;
 import * as _AclRevoke_v0_2 from "./acl/revoke/0.2/payload.js";
 /** @deprecated The prebuilt specification modules will be removed: pin the tasks you use with the `trust-tasks` CLI, generate them with `@openvtc/trust-tasks-gen`, and import the runtime from `@openvtc/trust-tasks/runtime` (GETTING-STARTED.md). */
 export import AclRevoke_v0_2 = _AclRevoke_v0_2;
+import * as _AclRevoke_v0_3 from "./acl/revoke/0.3/payload.js";
+/** @deprecated The prebuilt specification modules will be removed: pin the tasks you use with the `trust-tasks` CLI, generate them with `@openvtc/trust-tasks-gen`, and import the runtime from `@openvtc/trust-tasks/runtime` (GETTING-STARTED.md). */
+export import AclRevoke_v0_3 = _AclRevoke_v0_3;
 import * as _AclShow_v0_1 from "./acl/show/0.1/payload.js";
 /** @deprecated The prebuilt specification modules will be removed: pin the tasks you use with the `trust-tasks` CLI, generate them with `@openvtc/trust-tasks-gen`, and import the runtime from `@openvtc/trust-tasks/runtime` (GETTING-STARTED.md). */
 export import AclShow_v0_1 = _AclShow_v0_1;
 import * as _AclShow_v0_2 from "./acl/show/0.2/payload.js";
 /** @deprecated The prebuilt specification modules will be removed: pin the tasks you use with the `trust-tasks` CLI, generate them with `@openvtc/trust-tasks-gen`, and import the runtime from `@openvtc/trust-tasks/runtime` (GETTING-STARTED.md). */
 export import AclShow_v0_2 = _AclShow_v0_2;
+import * as _AclShow_v0_3 from "./acl/show/0.3/payload.js";
+/** @deprecated The prebuilt specification modules will be removed: pin the tasks you use with the `trust-tasks` CLI, generate them with `@openvtc/trust-tasks-gen`, and import the runtime from `@openvtc/trust-tasks/runtime` (GETTING-STARTED.md). */
+export import AclShow_v0_3 = _AclShow_v0_3;
 import * as _AclSwapKey_v0_1 from "./acl/swap-key/0.1/payload.js";
 /** @deprecated The prebuilt specification modules will be removed: pin the tasks you use with the `trust-tasks` CLI, generate them with `@openvtc/trust-tasks-gen`, and import the runtime from `@openvtc/trust-tasks/runtime` (GETTING-STARTED.md). */
 export import AclSwapKey_v0_1 = _AclSwapKey_v0_1;
@@ -64,6 +82,9 @@ export import AclUpdate_v0_1 = _AclUpdate_v0_1;
 import * as _AclUpdate_v0_2 from "./acl/update/0.2/payload.js";
 /** @deprecated The prebuilt specification modules will be removed: pin the tasks you use with the `trust-tasks` CLI, generate them with `@openvtc/trust-tasks-gen`, and import the runtime from `@openvtc/trust-tasks/runtime` (GETTING-STARTED.md). */
 export import AclUpdate_v0_2 = _AclUpdate_v0_2;
+import * as _AclUpdate_v0_3 from "./acl/update/0.3/payload.js";
+/** @deprecated The prebuilt specification modules will be removed: pin the tasks you use with the `trust-tasks` CLI, generate them with `@openvtc/trust-tasks-gen`, and import the runtime from `@openvtc/trust-tasks/runtime` (GETTING-STARTED.md). */
+export import AclUpdate_v0_3 = _AclUpdate_v0_3;
 import * as _AuditShared_v0_1 from "./audit/_shared/0.1/audit.js";
 /** @deprecated The prebuilt specification modules will be removed: pin the tasks you use with the `trust-tasks` CLI, generate them with `@openvtc/trust-tasks-gen`, and import the runtime from `@openvtc/trust-tasks/runtime` (GETTING-STARTED.md). */
 export import AuditShared_v0_1 = _AuditShared_v0_1;
@@ -1801,6 +1822,9 @@ export import RoomsKeysFileKey_v0_1 = _RoomsKeysFileKey_v0_1;
 import * as _RoomsKeysFileKey_v0_2 from "./rooms/keys/file-key/0.2/payload.js";
 /** @deprecated The prebuilt specification modules will be removed: pin the tasks you use with the `trust-tasks` CLI, generate them with `@openvtc/trust-tasks-gen`, and import the runtime from `@openvtc/trust-tasks/runtime` (GETTING-STARTED.md). */
 export import RoomsKeysFileKey_v0_2 = _RoomsKeysFileKey_v0_2;
+import * as _RoomsKeysFileKey_v0_3 from "./rooms/keys/file-key/0.3/payload.js";
+/** @deprecated The prebuilt specification modules will be removed: pin the tasks you use with the `trust-tasks` CLI, generate them with `@openvtc/trust-tasks-gen`, and import the runtime from `@openvtc/trust-tasks/runtime` (GETTING-STARTED.md). */
+export import RoomsKeysFileKey_v0_3 = _RoomsKeysFileKey_v0_3;
 import * as _RoomsKeysKeyPackage_v0_1 from "./rooms/keys/key-package/0.1/payload.js";
 /** @deprecated The prebuilt specification modules will be removed: pin the tasks you use with the `trust-tasks` CLI, generate them with `@openvtc/trust-tasks-gen`, and import the runtime from `@openvtc/trust-tasks/runtime` (GETTING-STARTED.md). */
 export import RoomsKeysKeyPackage_v0_1 = _RoomsKeysKeyPackage_v0_1;
@@ -1822,6 +1846,9 @@ export import RoomsKeysOpen_v0_1 = _RoomsKeysOpen_v0_1;
 import * as _RoomsKeysOpen_v0_2 from "./rooms/keys/open/0.2/payload.js";
 /** @deprecated The prebuilt specification modules will be removed: pin the tasks you use with the `trust-tasks` CLI, generate them with `@openvtc/trust-tasks-gen`, and import the runtime from `@openvtc/trust-tasks/runtime` (GETTING-STARTED.md). */
 export import RoomsKeysOpen_v0_2 = _RoomsKeysOpen_v0_2;
+import * as _RoomsKeysOpen_v0_3 from "./rooms/keys/open/0.3/payload.js";
+/** @deprecated The prebuilt specification modules will be removed: pin the tasks you use with the `trust-tasks` CLI, generate them with `@openvtc/trust-tasks-gen`, and import the runtime from `@openvtc/trust-tasks/runtime` (GETTING-STARTED.md). */
+export import RoomsKeysOpen_v0_3 = _RoomsKeysOpen_v0_3;
 import * as _RoomsKeysPresent_v0_1 from "./rooms/keys/present/0.1/payload.js";
 /** @deprecated The prebuilt specification modules will be removed: pin the tasks you use with the `trust-tasks` CLI, generate them with `@openvtc/trust-tasks-gen`, and import the runtime from `@openvtc/trust-tasks/runtime` (GETTING-STARTED.md). */
 export import RoomsKeysPresent_v0_1 = _RoomsKeysPresent_v0_1;
@@ -1840,6 +1867,9 @@ export import RoomsKeysRead_v0_1 = _RoomsKeysRead_v0_1;
 import * as _RoomsKeysRead_v0_2 from "./rooms/keys/read/0.2/payload.js";
 /** @deprecated The prebuilt specification modules will be removed: pin the tasks you use with the `trust-tasks` CLI, generate them with `@openvtc/trust-tasks-gen`, and import the runtime from `@openvtc/trust-tasks/runtime` (GETTING-STARTED.md). */
 export import RoomsKeysRead_v0_2 = _RoomsKeysRead_v0_2;
+import * as _RoomsKeysRead_v0_3 from "./rooms/keys/read/0.3/payload.js";
+/** @deprecated The prebuilt specification modules will be removed: pin the tasks you use with the `trust-tasks` CLI, generate them with `@openvtc/trust-tasks-gen`, and import the runtime from `@openvtc/trust-tasks/runtime` (GETTING-STARTED.md). */
+export import RoomsKeysRead_v0_3 = _RoomsKeysRead_v0_3;
 import * as _RoomsKeysSeal_v0_1 from "./rooms/keys/seal/0.1/payload.js";
 /** @deprecated The prebuilt specification modules will be removed: pin the tasks you use with the `trust-tasks` CLI, generate them with `@openvtc/trust-tasks-gen`, and import the runtime from `@openvtc/trust-tasks/runtime` (GETTING-STARTED.md). */
 export import RoomsKeysSeal_v0_1 = _RoomsKeysSeal_v0_1;
@@ -1900,6 +1930,9 @@ export import RoomsOwnerIssueAuthority_v0_1 = _RoomsOwnerIssueAuthority_v0_1;
 import * as _RoomsOwnerIssueAuthority_v0_2 from "./rooms/owner/issue-authority/0.2/payload.js";
 /** @deprecated The prebuilt specification modules will be removed: pin the tasks you use with the `trust-tasks` CLI, generate them with `@openvtc/trust-tasks-gen`, and import the runtime from `@openvtc/trust-tasks/runtime` (GETTING-STARTED.md). */
 export import RoomsOwnerIssueAuthority_v0_2 = _RoomsOwnerIssueAuthority_v0_2;
+import * as _RoomsOwnerIssueAuthority_v0_3 from "./rooms/owner/issue-authority/0.3/payload.js";
+/** @deprecated The prebuilt specification modules will be removed: pin the tasks you use with the `trust-tasks` CLI, generate them with `@openvtc/trust-tasks-gen`, and import the runtime from `@openvtc/trust-tasks/runtime` (GETTING-STARTED.md). */
+export import RoomsOwnerIssueAuthority_v0_3 = _RoomsOwnerIssueAuthority_v0_3;
 import * as _RoomsOwnerIssueMembership_v0_1 from "./rooms/owner/issue-membership/0.1/payload.js";
 /** @deprecated The prebuilt specification modules will be removed: pin the tasks you use with the `trust-tasks` CLI, generate them with `@openvtc/trust-tasks-gen`, and import the runtime from `@openvtc/trust-tasks/runtime` (GETTING-STARTED.md). */
 export import RoomsOwnerIssueMembership_v0_1 = _RoomsOwnerIssueMembership_v0_1;
@@ -1927,6 +1960,9 @@ export import RoomsRecordsGet_v0_2 = _RoomsRecordsGet_v0_2;
 import * as _RoomsRecordsGet_v0_3 from "./rooms/records/get/0.3/payload.js";
 /** @deprecated The prebuilt specification modules will be removed: pin the tasks you use with the `trust-tasks` CLI, generate them with `@openvtc/trust-tasks-gen`, and import the runtime from `@openvtc/trust-tasks/runtime` (GETTING-STARTED.md). */
 export import RoomsRecordsGet_v0_3 = _RoomsRecordsGet_v0_3;
+import * as _RoomsRecordsGet_v0_4 from "./rooms/records/get/0.4/payload.js";
+/** @deprecated The prebuilt specification modules will be removed: pin the tasks you use with the `trust-tasks` CLI, generate them with `@openvtc/trust-tasks-gen`, and import the runtime from `@openvtc/trust-tasks/runtime` (GETTING-STARTED.md). */
+export import RoomsRecordsGet_v0_4 = _RoomsRecordsGet_v0_4;
 import * as _RoomsRecordsList_v0_1 from "./rooms/records/list/0.1/payload.js";
 /** @deprecated The prebuilt specification modules will be removed: pin the tasks you use with the `trust-tasks` CLI, generate them with `@openvtc/trust-tasks-gen`, and import the runtime from `@openvtc/trust-tasks/runtime` (GETTING-STARTED.md). */
 export import RoomsRecordsList_v0_1 = _RoomsRecordsList_v0_1;
@@ -2613,21 +2649,33 @@ export import VtaMemoryDelete_v0_1 = _VtaMemoryDelete_v0_1;
 import * as _VtaMemoryDelete_v0_2 from "./vta/memory/delete/0.2/payload.js";
 /** @deprecated The prebuilt specification modules will be removed: pin the tasks you use with the `trust-tasks` CLI, generate them with `@openvtc/trust-tasks-gen`, and import the runtime from `@openvtc/trust-tasks/runtime` (GETTING-STARTED.md). */
 export import VtaMemoryDelete_v0_2 = _VtaMemoryDelete_v0_2;
+import * as _VtaMemoryDelete_v0_3 from "./vta/memory/delete/0.3/payload.js";
+/** @deprecated The prebuilt specification modules will be removed: pin the tasks you use with the `trust-tasks` CLI, generate them with `@openvtc/trust-tasks-gen`, and import the runtime from `@openvtc/trust-tasks/runtime` (GETTING-STARTED.md). */
+export import VtaMemoryDelete_v0_3 = _VtaMemoryDelete_v0_3;
 import * as _VtaMemoryGet_v0_1 from "./vta/memory/get/0.1/payload.js";
 /** @deprecated The prebuilt specification modules will be removed: pin the tasks you use with the `trust-tasks` CLI, generate them with `@openvtc/trust-tasks-gen`, and import the runtime from `@openvtc/trust-tasks/runtime` (GETTING-STARTED.md). */
 export import VtaMemoryGet_v0_1 = _VtaMemoryGet_v0_1;
+import * as _VtaMemoryGet_v0_2 from "./vta/memory/get/0.2/payload.js";
+/** @deprecated The prebuilt specification modules will be removed: pin the tasks you use with the `trust-tasks` CLI, generate them with `@openvtc/trust-tasks-gen`, and import the runtime from `@openvtc/trust-tasks/runtime` (GETTING-STARTED.md). */
+export import VtaMemoryGet_v0_2 = _VtaMemoryGet_v0_2;
 import * as _VtaMemoryList_v0_1 from "./vta/memory/list/0.1/payload.js";
 /** @deprecated The prebuilt specification modules will be removed: pin the tasks you use with the `trust-tasks` CLI, generate them with `@openvtc/trust-tasks-gen`, and import the runtime from `@openvtc/trust-tasks/runtime` (GETTING-STARTED.md). */
 export import VtaMemoryList_v0_1 = _VtaMemoryList_v0_1;
 import * as _VtaMemoryList_v0_2 from "./vta/memory/list/0.2/payload.js";
 /** @deprecated The prebuilt specification modules will be removed: pin the tasks you use with the `trust-tasks` CLI, generate them with `@openvtc/trust-tasks-gen`, and import the runtime from `@openvtc/trust-tasks/runtime` (GETTING-STARTED.md). */
 export import VtaMemoryList_v0_2 = _VtaMemoryList_v0_2;
+import * as _VtaMemoryList_v0_3 from "./vta/memory/list/0.3/payload.js";
+/** @deprecated The prebuilt specification modules will be removed: pin the tasks you use with the `trust-tasks` CLI, generate them with `@openvtc/trust-tasks-gen`, and import the runtime from `@openvtc/trust-tasks/runtime` (GETTING-STARTED.md). */
+export import VtaMemoryList_v0_3 = _VtaMemoryList_v0_3;
 import * as _VtaMemoryPut_v0_1 from "./vta/memory/put/0.1/payload.js";
 /** @deprecated The prebuilt specification modules will be removed: pin the tasks you use with the `trust-tasks` CLI, generate them with `@openvtc/trust-tasks-gen`, and import the runtime from `@openvtc/trust-tasks/runtime` (GETTING-STARTED.md). */
 export import VtaMemoryPut_v0_1 = _VtaMemoryPut_v0_1;
 import * as _VtaMemoryPut_v0_2 from "./vta/memory/put/0.2/payload.js";
 /** @deprecated The prebuilt specification modules will be removed: pin the tasks you use with the `trust-tasks` CLI, generate them with `@openvtc/trust-tasks-gen`, and import the runtime from `@openvtc/trust-tasks/runtime` (GETTING-STARTED.md). */
 export import VtaMemoryPut_v0_2 = _VtaMemoryPut_v0_2;
+import * as _VtaMemoryPut_v0_3 from "./vta/memory/put/0.3/payload.js";
+/** @deprecated The prebuilt specification modules will be removed: pin the tasks you use with the `trust-tasks` CLI, generate them with `@openvtc/trust-tasks-gen`, and import the runtime from `@openvtc/trust-tasks/runtime` (GETTING-STARTED.md). */
+export import VtaMemoryPut_v0_3 = _VtaMemoryPut_v0_3;
 import * as _VtaMetricsShow_v0_1 from "./vta/metrics/show/0.1/payload.js";
 /** @deprecated The prebuilt specification modules will be removed: pin the tasks you use with the `trust-tasks` CLI, generate them with `@openvtc/trust-tasks-gen`, and import the runtime from `@openvtc/trust-tasks/runtime` (GETTING-STARTED.md). */
 export import VtaMetricsShow_v0_1 = _VtaMetricsShow_v0_1;

package/src/rooms/_shared/0.2/room.ts

@@ -14,4 +14,4 @@ export interface RoomsSharedTypes {
  * The definitions this shared schema publishes, hoisted to one declaration each.
  * See "../../../_shared/components.js".
  */
-export type { AuthorityPresentation, DataCommitment, HeadVersion, PermittedUse, ReadVerification, RecordBasis, RecordConfidence, RecordCount, RecordEditedAt, RecordEvidence, RecordEvidenceCredential, RecordEvidenceList, RecordEvidenceRecord, RecordKind, RecordMetadata, RecordMetadataV2, RecordMetadataV3, RecordPrune_RoomsV0_2 as RecordPrune, RecordReference, RecordRetention, RecordValidUntil, RecordWrittenAt, RetentionPolicy, RoomProfile, RoomProfileStatement, SealedRecordBody, Visibility } from "../../../_shared/components.js";
+export type { AuthorityPresentation, DataCommitment, HeadVersion, PermittedUse, ReadVerification, RecordBasis, RecordConfidence, RecordCount, RecordEditedAt, RecordEvidence, RecordEvidenceCredential, RecordEvidenceList, RecordEvidenceRecord, RecordKind, RecordMetadata, RecordMetadataV2, RecordMetadataV3, RecordPrune_RoomsV0_2 as RecordPrune, RecordPurpose, RecordReference, RecordRetention, RecordValidUntil, RecordWrittenAt, RetentionPolicy, RoomProfile, RoomProfileStatement, SealedRecordBody, Visibility } from "../../../_shared/components.js";

package/src/rooms/keys/file-key/0.1/payload.ts

@@ -9,7 +9,7 @@ import type { Ext } from "../../../../_shared/components.js";
 /**
  * A caller asks the party holding its principal's room keys for the key of ONE file in a room: derived from the room's storage key for an epoch, bound to the room, the epoch and the file's identifier, and opening that file and nothing else.
  *
- * @deprecated superseded by rooms/keys/file-key/0.2
+ * @deprecated superseded by rooms/keys/file-key/0.3
  */
 export interface RoomsKeysFileKeyPayload {
   /**
@@ -36,7 +36,7 @@ export interface RoomsKeysFileKeyPayload {
 /**
  * Success response to rooms/keys/file-key. Type https://trusttasks.org/spec/rooms/keys/file-key/0.1#response.
  *
- * @deprecated superseded by rooms/keys/file-key/0.2
+ * @deprecated superseded by rooms/keys/file-key/0.3
  */
 export interface RoomsKeysFileKeyResponsePayload {
   /**
@@ -70,12 +70,12 @@ export const EXTENDS: string | null = null;
  * this package in a later scheduled batch (SPEC "Superseded and Withdrawn
  * Versions").
  */
-export const DEPRECATION: string | null = "superseded by rooms/keys/file-key/0.2";
+export const DEPRECATION: string | null = "superseded by rooms/keys/file-key/0.3";
 
 /**
  * Stable alias for this specification's request payload shape.
  *
- * @deprecated superseded by rooms/keys/file-key/0.2
+ * @deprecated superseded by rooms/keys/file-key/0.3
  */
 export type Payload = RoomsKeysFileKeyPayload;
 
@@ -85,7 +85,7 @@ export const RESPONSE_TYPE_URI = "https://trusttasks.org/spec/rooms/keys/file-ke
 /**
  * Stable alias for this specification's success-response payload shape.
  *
- * @deprecated superseded by rooms/keys/file-key/0.2
+ * @deprecated superseded by rooms/keys/file-key/0.3
  */
 export type Response = RoomsKeysFileKeyResponsePayload;
 

package/src/rooms/keys/file-key/0.2/payload.ts

@@ -8,6 +8,8 @@ import type { Ext } from "../../../../_shared/components.js";
 
 /**
  * A caller asks the party holding its principal's room keys for the key of ONE file in a room: derived from the room's storage key for an epoch, bound to the room, the epoch and the file's identifier, and opening that file and nothing else.
+ *
+ * @deprecated superseded by rooms/keys/file-key/0.3
  */
 export interface RoomsKeysFileKeyPayload {
   /**
@@ -33,6 +35,8 @@ export interface RoomsKeysFileKeyPayload {
 }
 /**
  * Success response to rooms/keys/file-key. Type https://trusttasks.org/spec/rooms/keys/file-key/0.2#response.
+ *
+ * @deprecated superseded by rooms/keys/file-key/0.3
  */
 export interface RoomsKeysFileKeyResponsePayload {
   /**
@@ -66,15 +70,23 @@ export const EXTENDS: string | null = null;
  * this package in a later scheduled batch (SPEC "Superseded and Withdrawn
  * Versions").
  */
-export const DEPRECATION: string | null = null;
+export const DEPRECATION: string | null = "superseded by rooms/keys/file-key/0.3";
 
-/** Stable alias for this specification's request payload shape. */
+/**
+ * Stable alias for this specification's request payload shape.
+ *
+ * @deprecated superseded by rooms/keys/file-key/0.3
+ */
 export type Payload = RoomsKeysFileKeyPayload;
 
 /** Trust Task response type URI (request type URI + "#response"). */
 export const RESPONSE_TYPE_URI = "https://trusttasks.org/spec/rooms/keys/file-key/0.2#response" as const;
 
-/** Stable alias for this specification's success-response payload shape. */
+/**
+ * Stable alias for this specification's success-response payload shape.
+ *
+ * @deprecated superseded by rooms/keys/file-key/0.3
+ */
 export type Response = RoomsKeysFileKeyResponsePayload;
 
 /**

package/src/rooms/keys/file-key/0.3/payload.ts

@@ -0,0 +1,286 @@
+/**
+ * Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
+ * Source: specs/rooms/keys/file-key/0.3/payload.schema.json
+ */
+
+import type { Ext, Purpose_AclV0_3 as Purpose, Purpose_AclV0_31, Purpose_AclV0_32, RecordPurpose } from "../../../../_shared/components.js";
+
+
+/**
+ * A caller asks the party holding its principal's room keys for the key of ONE file in a room: derived from the room's storage key for an epoch, bound to the room, the epoch and the file's identifier, and opening that file and nothing else.
+ */
+export interface RoomsKeysFileKeyPayload {
+  /**
+   * The room the file belongs to. Bound into the derivation, so a key released for one room cannot open a blob relocated from another.
+   */
+  roomId: string;
+  /**
+   * The file's identifier: 32 random bytes, base64url without padding, as in FileManifest.fileId. The salt of the derivation. For `seal` the caller mints it fresh and MUST NOT reuse it; for `open` it is read from the sealed record's file manifest.
+   */
+  fileId: string;
+  /**
+   * `seal`: a key for a file about to be uploaded, derived under the room's CURRENT epoch, which the response names. `open`: a key for a file already in the room, derived under the epoch its manifest names.
+   */
+  purpose: "seal" | "open";
+  /**
+   * The epoch the file key derives from, as FileManifest.epoch states it. REQUIRED for `open` and forbidden for `seal` — a rule over two members this schema does not express; the custodian refuses a violation with `malformedRequest`. A sealing caller never chooses the epoch: sealing under anything but the current one would produce a file members who joined later could not open, or one a removed member still could.
+   */
+  epoch?: number;
+  /**
+   * Ecosystem-defined extension members per SPEC.md §4.5.1.
+   */
+  ext?: Ext;
+  /**
+   * OPTIONAL. The one purpose the caller will use the file the released key opens for (VTI-ACL-103), as `RecordPurpose` defines it. Named `purposeOfUse` because `purpose` already says which key is asked for. Bound only on `purpose: open`: a `seal` key is for content the caller is about to upload itself. A purpose not granted is refused with `purposeNotGranted`; may be omitted where exactly one purpose is granted, or `any`.
+   */
+  purposeOfUse?: RecordPurpose;
+}
+/**
+ * Success response to rooms/keys/file-key. Type https://trusttasks.org/spec/rooms/keys/file-key/0.2#response.
+ */
+export interface RoomsKeysFileKeyResponsePayload {
+  /**
+   * The 32-byte file key, base64url without padding. Opens exactly one file. The caller holds it in memory for as long as the file is being sealed or opened and then discards it; it never stores, logs or forwards it.
+   */
+  key: string;
+  /**
+   * The epoch the key was derived under. For `seal`, the room's current epoch, which the caller writes into the file's manifest; for `open`, the epoch requested.
+   */
+  epoch: number;
+  ext?: Ext;
+}
+
+/** Shared definitions this specification references, re-exported under the names it used to declare them with. */
+export type { Ext, Purpose, Purpose_AclV0_31, Purpose_AclV0_32, RecordPurpose };
+
+/** Trust Task type URI. */
+export const TYPE_URI = "https://trusttasks.org/spec/rooms/keys/file-key/0.3" as const;
+
+/**
+ * The earlier version of this specification that this one declares it
+ * extends (front matter `extends`, SPEC §5.2 "Declared extension"), or
+ * `null`. Only the direct declaration — follow the chain with
+ * `extendsChain` / `readForSpec`.
+ */
+export const EXTENDS: string | null = "0.2";
+
+/**
+ * Why this version is deprecated, or `null` while it is current. A
+ * superseded or retired version is still supported, and is withdrawn from
+ * this package in a later scheduled batch (SPEC "Superseded and Withdrawn
+ * Versions").
+ */
+export const DEPRECATION: string | null = null;
+
+/** Stable alias for this specification's request payload shape. */
+export type Payload = RoomsKeysFileKeyPayload;
+
+/** Trust Task response type URI (request type URI + "#response"). */
+export const RESPONSE_TYPE_URI = "https://trusttasks.org/spec/rooms/keys/file-key/0.3#response" as const;
+
+/** Stable alias for this specification's success-response payload shape. */
+export type Response = RoomsKeysFileKeyResponsePayload;
+
+/**
+ * This specification's payload schema, as a value.
+ *
+ * SPEC.md §7.2 item 2 is performed against this. It is shipped as data
+ * rather than only as a `.json` file because TypeScript types are erased
+ * at runtime: without a schema a consumer has nothing to validate, and
+ * every REQUIRED payload member is optional in practice. Cross-file
+ * `$ref`s are already inlined, so it needs no resolver.
+ */
+export const PAYLOAD_SCHEMA = {
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://trusttasks.org/spec/rooms/keys/file-key/0.3",
+  "title": "Rooms Keys File Key — payload",
+  "description": "A caller asks the party holding its principal's room keys for the key of ONE file in a room: derived from the room's storage key for an epoch, bound to the room, the epoch and the file's identifier, and opening that file and nothing else.",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "roomId",
+    "fileId",
+    "purpose"
+  ],
+  "properties": {
+    "roomId": {
+      "type": "string",
+      "description": "The room the file belongs to. Bound into the derivation, so a key released for one room cannot open a blob relocated from another."
+    },
+    "fileId": {
+      "type": "string",
+      "pattern": "^[A-Za-z0-9_-]{43}$",
+      "description": "The file's identifier: 32 random bytes, base64url without padding, as in FileManifest.fileId. The salt of the derivation. For `seal` the caller mints it fresh and MUST NOT reuse it; for `open` it is read from the sealed record's file manifest."
+    },
+    "purpose": {
+      "type": "string",
+      "enum": [
+        "seal",
+        "open"
+      ],
+      "description": "`seal`: a key for a file about to be uploaded, derived under the room's CURRENT epoch, which the response names. `open`: a key for a file already in the room, derived under the epoch its manifest names."
+    },
+    "epoch": {
+      "type": "integer",
+      "minimum": 1,
+      "description": "The epoch the file key derives from, as FileManifest.epoch states it. REQUIRED for `open` and forbidden for `seal` — a rule over two members this schema does not express; the custodian refuses a violation with `malformedRequest`. A sealing caller never chooses the epoch: sealing under anything but the current one would produce a file members who joined later could not open, or one a removed member still could."
+    },
+    "ext": {
+      "$ref": "#/$defs/Ext",
+      "description": "Ecosystem-defined extension members per SPEC.md §4.5.1."
+    },
+    "purposeOfUse": {
+      "$ref": "#/$defs/RecordPurpose",
+      "description": "OPTIONAL. The one purpose the caller will use the file the released key opens for (VTI-ACL-103), as `RecordPurpose` defines it. Named `purposeOfUse` because `purpose` already says which key is asked for. Bound only on `purpose: open`: a `seal` key is for content the caller is about to upload itself. A purpose not granted is refused with `purposeNotGranted`; may be omitted where exactly one purpose is granted, or `any`."
+    }
+  },
+  "$defs": {
+    "Response": {
+      "$anchor": "response",
+      "title": "Rooms Keys File Key — response payload",
+      "description": "Success response to rooms/keys/file-key. Type https://trusttasks.org/spec/rooms/keys/file-key/0.2#response.",
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "key",
+        "epoch"
+      ],
+      "properties": {
+        "key": {
+          "type": "string",
+          "pattern": "^[A-Za-z0-9_-]{43}$",
+          "description": "The 32-byte file key, base64url without padding. Opens exactly one file. The caller holds it in memory for as long as the file is being sealed or opened and then discards it; it never stores, logs or forwards it."
+        },
+        "epoch": {
+          "type": "integer",
+          "minimum": 1,
+          "description": "The epoch the key was derived under. For `seal`, the room's current epoch, which the caller writes into the file's manifest; for `open`, the epoch requested."
+        },
+        "ext": {
+          "$ref": "#/$defs/Ext"
+        }
+      }
+    },
+    "Ext": {
+      "title": "Ext",
+      "description": "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.",
+      "type": "object",
+      "minProperties": 1,
+      "additionalProperties": true,
+      "propertyNames": {
+        "pattern": "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$"
+      }
+    },
+    "RecordPurpose": {
+      "title": "RecordPurpose",
+      "description": "The one purpose for which a caller will use room content a request discloses (VTI-ACL-103): a name registered in the VTI specification's purpose registry (`personalisation`, `taskExecution`, `analytics`, `modelTraining`) or an absolute IRI. Granted only as the caller's authority grants it — `any` grants every purpose but `modelTraining` — refused otherwise (`purposeNotGranted`), and recorded with the read. Distinct from `PermittedUse`, which is what a record's author permits and is a statement, not a grant.",
+      "$ref": "#/$defs/Purpose"
+    },
+    "Purpose": {
+      "title": "Purpose",
+      "description": "What content is used for: a lowerCamelCase name registered in the VTI specification's purpose registry (Appendix H) — `personalisation`, `taskExecution`, `analytics`, `modelTraining` at the time of writing — or an absolute IRI naming a purpose defined elsewhere, such as a purpose of the W3C Data Privacy Vocabulary (`https://w3id.org/dpv#ServicePersonalisation`). Compared by exact string equality: a consumer MUST NOT treat a purpose it does not recognise as equal to any other, and grants only a request naming exactly a listed purpose (VTI-ACL-109). A registered name is never an IRI, because it contains no `:`.",
+      "type": "string",
+      "maxLength": 2048,
+      "anyOf": [
+        {
+          "pattern": "^[a-z][a-zA-Z0-9]{0,63}$"
+        },
+        {
+          "pattern": "^[a-zA-Z][a-zA-Z0-9+.-]*:[^\\s]+$"
+        }
+      ]
+    }
+  }
+} as const;
+
+/** As {@link PAYLOAD_SCHEMA}, for the success-response variant. */
+export const RESPONSE_PAYLOAD_SCHEMA = {
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$ref": "#/$defs/Response",
+  "$defs": {
+    "Response": {
+      "$anchor": "response",
+      "title": "Rooms Keys File Key — response payload",
+      "description": "Success response to rooms/keys/file-key. Type https://trusttasks.org/spec/rooms/keys/file-key/0.2#response.",
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "key",
+        "epoch"
+      ],
+      "properties": {
+        "key": {
+          "type": "string",
+          "pattern": "^[A-Za-z0-9_-]{43}$",
+          "description": "The 32-byte file key, base64url without padding. Opens exactly one file. The caller holds it in memory for as long as the file is being sealed or opened and then discards it; it never stores, logs or forwards it."
+        },
+        "epoch": {
+          "type": "integer",
+          "minimum": 1,
+          "description": "The epoch the key was derived under. For `seal`, the room's current epoch, which the caller writes into the file's manifest; for `open`, the epoch requested."
+        },
+        "ext": {
+          "$ref": "#/$defs/Ext"
+        }
+      }
+    },
+    "Ext": {
+      "title": "Ext",
+      "description": "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.",
+      "type": "object",
+      "minProperties": 1,
+      "additionalProperties": true,
+      "propertyNames": {
+        "pattern": "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$"
+      }
+    },
+    "RecordPurpose": {
+      "title": "RecordPurpose",
+      "description": "The one purpose for which a caller will use room content a request discloses (VTI-ACL-103): a name registered in the VTI specification's purpose registry (`personalisation`, `taskExecution`, `analytics`, `modelTraining`) or an absolute IRI. Granted only as the caller's authority grants it — `any` grants every purpose but `modelTraining` — refused otherwise (`purposeNotGranted`), and recorded with the read. Distinct from `PermittedUse`, which is what a record's author permits and is a statement, not a grant.",
+      "$ref": "#/$defs/Purpose"
+    },
+    "Purpose": {
+      "title": "Purpose",
+      "description": "What content is used for: a lowerCamelCase name registered in the VTI specification's purpose registry (Appendix H) — `personalisation`, `taskExecution`, `analytics`, `modelTraining` at the time of writing — or an absolute IRI naming a purpose defined elsewhere, such as a purpose of the W3C Data Privacy Vocabulary (`https://w3id.org/dpv#ServicePersonalisation`). Compared by exact string equality: a consumer MUST NOT treat a purpose it does not recognise as equal to any other, and grants only a request naming exactly a listed purpose (VTI-ACL-109). A registered name is never an IRI, because it contains no `:`.",
+      "type": "string",
+      "maxLength": 2048,
+      "anyOf": [
+        {
+          "pattern": "^[a-z][a-zA-Z0-9]{0,63}$"
+        },
+        {
+          "pattern": "^[a-zA-Z][a-zA-Z0-9+.-]*:[^\\s]+$"
+        }
+      ]
+    }
+  }
+} as const;
+
+/**
+ * SPEC.md §7.2 policy for the request variant, from this specification's
+ * front matter. Pass to `consumeInbound` — items 5b, 7 and 8 are
+ * per-specification and cannot be derived from the document alone, and
+ * item 2 needs the schema this carries.
+ */
+export const SPEC = {
+  typeUri: TYPE_URI,
+  isBearer: false,
+  isProofRequired: true,
+  isRecipientRequired: true,
+  isIssuedAtRequired: true,
+  payloadSchema: PAYLOAD_SCHEMA,
+} as const;
+
+/**
+ * SPEC.md §7.2 policy for the success-response variant. `isRecipientRequired`
+ * tracks the *issuer* party's requirement because a response swaps the
+ * parties (§7.3 item 5).
+ */
+export const RESPONSE_SPEC = {
+  typeUri: RESPONSE_TYPE_URI,
+  isBearer: false,
+  isProofRequired: true,
+  isRecipientRequired: true,
+  isIssuedAtRequired: true,
+  payloadSchema: RESPONSE_PAYLOAD_SCHEMA,
+} as const;

package/src/rooms/keys/open/0.1/payload.ts

@@ -9,7 +9,7 @@ import type { Ext } from "../../../../_shared/components.js";
 /**
  * An agent asks the party holding its principal's room keys to open one sealed record. The key never crosses to the agent: this is a decryption oracle, not a key-release call.
  *
- * @deprecated superseded by rooms/keys/open/0.2
+ * @deprecated superseded by rooms/keys/open/0.3
  */
 export interface RoomsKeysOpenPayload {
   /**
@@ -49,7 +49,7 @@ export interface RoomsKeysOpenPayload {
 /**
  * Success response to rooms/keys/open. Type https://trusttasks.org/spec/rooms/keys/open/0.1#response.
  *
- * @deprecated superseded by rooms/keys/open/0.2
+ * @deprecated superseded by rooms/keys/open/0.3
  */
 export interface RoomsKeysOpenResponsePayload {
   /**
@@ -79,12 +79,12 @@ export const EXTENDS: string | null = null;
  * this package in a later scheduled batch (SPEC "Superseded and Withdrawn
  * Versions").
  */
-export const DEPRECATION: string | null = "superseded by rooms/keys/open/0.2";
+export const DEPRECATION: string | null = "superseded by rooms/keys/open/0.3";
 
 /**
  * Stable alias for this specification's request payload shape.
  *
- * @deprecated superseded by rooms/keys/open/0.2
+ * @deprecated superseded by rooms/keys/open/0.3
  */
 export type Payload = RoomsKeysOpenPayload;
 
@@ -94,7 +94,7 @@ export const RESPONSE_TYPE_URI = "https://trusttasks.org/spec/rooms/keys/open/0.
 /**
  * Stable alias for this specification's success-response payload shape.
  *
- * @deprecated superseded by rooms/keys/open/0.2
+ * @deprecated superseded by rooms/keys/open/0.3
  */
 export type Response = RoomsKeysOpenResponsePayload;
 

package/src/rooms/keys/open/0.2/payload.ts

@@ -8,6 +8,8 @@ import type { Ext } from "../../../../_shared/components.js";
 
 /**
  * An agent asks the party holding its principal's room keys to open one sealed record. The key never crosses to the agent: this is a decryption oracle, not a key-release call.
+ *
+ * @deprecated superseded by rooms/keys/open/0.3
  */
 export interface RoomsKeysOpenPayload {
   /**
@@ -46,6 +48,8 @@ export interface RoomsKeysOpenPayload {
 }
 /**
  * Success response to rooms/keys/open. Type https://trusttasks.org/spec/rooms/keys/open/0.2#response.
+ *
+ * @deprecated superseded by rooms/keys/open/0.3
  */
 export interface RoomsKeysOpenResponsePayload {
   /**
@@ -75,15 +79,23 @@ export const EXTENDS: string | null = null;
  * this package in a later scheduled batch (SPEC "Superseded and Withdrawn
  * Versions").
  */
-export const DEPRECATION: string | null = null;
+export const DEPRECATION: string | null = "superseded by rooms/keys/open/0.3";
 
-/** Stable alias for this specification's request payload shape. */
+/**
+ * Stable alias for this specification's request payload shape.
+ *
+ * @deprecated superseded by rooms/keys/open/0.3
+ */
 export type Payload = RoomsKeysOpenPayload;
 
 /** Trust Task response type URI (request type URI + "#response"). */
 export const RESPONSE_TYPE_URI = "https://trusttasks.org/spec/rooms/keys/open/0.2#response" as const;
 
-/** Stable alias for this specification's success-response payload shape. */
+/**
+ * Stable alias for this specification's success-response payload shape.
+ *
+ * @deprecated superseded by rooms/keys/open/0.3
+ */
 export type Response = RoomsKeysOpenResponsePayload;
 
 /**