@openvtc/trust-tasks 0.28.6 → 0.28.8

package/dist/vtc/rooms/community/get/0.4/payload.d.ts

@@ -0,0 +1,1405 @@
+/**
+ * Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
+ * Source: specs/vtc/rooms/community/get/0.4/payload.schema.json
+ */
+import type { ArchiveAccess, CommunityRoomV3, Ext, HostedRoom_VtcV0_3 as HostedRoom, PendingChange, PurgeProgress, RetentionPolicy, RoomDescription, RoomLabel, RoomState, RoomStatus, RoomTag, RoomTags, StorageConfigId, Visibility } from "../../../../../_shared/components.js";
+export interface VTCRoomsCommunityGetPayload {
+    /**
+     * The room's identifier: its DID.
+     */
+    roomId: string;
+    ext?: Ext;
+}
+/**
+ * Success response to vtc/rooms/community/get. Type https://trusttasks.org/spec/vtc/rooms/community/get/0.4#response. One room the community owns, in any state of its owner's lifecycle, with its counts. Its members are vtc/rooms/community/members/list's.
+ */
+export interface VTCRoomsCommunityGetResponsePayload {
+    room: CommunityRoomV3;
+    ext?: Ext;
+}
+/** Shared definitions this specification references, re-exported under the names it used to declare them with. */
+export type { ArchiveAccess, CommunityRoomV3, Ext, HostedRoom, PendingChange, PurgeProgress, RetentionPolicy, RoomDescription, RoomLabel, RoomState, RoomStatus, RoomTag, RoomTags, StorageConfigId, Visibility };
+/** Trust Task type URI. */
+export declare const TYPE_URI: "https://trusttasks.org/spec/vtc/rooms/community/get/0.4";
+/**
+ * The earlier version of this specification that this one declares it
+ * extends (front matter `extends`, SPEC §5.2 "Declared extension"), or
+ * `null`. Only the direct declaration — follow the chain with
+ * `extendsChain` / `readForSpec`.
+ */
+export declare const EXTENDS: string | null;
+/**
+ * Why this version is deprecated, or `null` while it is current. A
+ * superseded or retired version is still supported, and is withdrawn from
+ * this package in a later scheduled batch (SPEC "Superseded and Withdrawn
+ * Versions").
+ */
+export declare const DEPRECATION: string | null;
+/** Stable alias for this specification's request payload shape. */
+export type Payload = VTCRoomsCommunityGetPayload;
+/** Trust Task response type URI (request type URI + "#response"). */
+export declare const RESPONSE_TYPE_URI: "https://trusttasks.org/spec/vtc/rooms/community/get/0.4#response";
+/** Stable alias for this specification's success-response payload shape. */
+export type Response = VTCRoomsCommunityGetResponsePayload;
+/**
+ * This specification's payload schema, as a value.
+ *
+ * SPEC.md §7.2 item 2 is performed against this. It is shipped as data
+ * rather than only as a `.json` file because TypeScript types are erased
+ * at runtime: without a schema a consumer has nothing to validate, and
+ * every REQUIRED payload member is optional in practice. Cross-file
+ * `$ref`s are already inlined, so it needs no resolver.
+ */
+export declare const PAYLOAD_SCHEMA: {
+    readonly $schema: "https://json-schema.org/draft/2020-12/schema";
+    readonly $id: "https://trusttasks.org/spec/vtc/rooms/community/get/0.4";
+    readonly title: "VTC Rooms Community Get — payload";
+    readonly type: "object";
+    readonly additionalProperties: false;
+    readonly required: readonly ["roomId"];
+    readonly properties: {
+        readonly roomId: {
+            readonly type: "string";
+            readonly minLength: 1;
+            readonly maxLength: 512;
+            readonly description: "The room's identifier: its DID.";
+        };
+        readonly ext: {
+            readonly $ref: "#/$defs/Ext";
+        };
+    };
+    readonly $defs: {
+        readonly Response: {
+            readonly $anchor: "response";
+            readonly title: "VTC Rooms Community Get — response payload";
+            readonly description: "Success response to vtc/rooms/community/get. Type https://trusttasks.org/spec/vtc/rooms/community/get/0.4#response. One room the community owns, in any state of its owner's lifecycle, with its counts. Its members are vtc/rooms/community/members/list's.";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["room"];
+            readonly properties: {
+                readonly room: {
+                    readonly $ref: "#/$defs/CommunityRoomV3";
+                };
+                readonly ext: {
+                    readonly $ref: "#/$defs/Ext";
+                };
+            };
+        };
+        readonly Ext: {
+            readonly title: "Ext";
+            readonly description: "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.";
+            readonly type: "object";
+            readonly minProperties: 1;
+            readonly additionalProperties: true;
+            readonly propertyNames: {
+                readonly pattern: "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$";
+            };
+        };
+        readonly CommunityRoomV3: {
+            readonly title: "CommunityRoomV3";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["room", "label", "admitted", "offered", "status"];
+            readonly description: "What vtc/rooms/community/{get,list}/0.4 and vtc/rooms/community/{archive,unarchive,remove,removal/cancel}/0.1 return: `CommunityRoomV2` plus the room's `status` in its owner's lifecycle and the count of `suspended` admissions. A separate definition, not a change to `CommunityRoomV2`, so that the versions returning that keep the exact shape they published. For a room in state `purging` or `removed`, whose host record a purge deletes, `room` is the host record as it last stood before the purge began — the community keeps that snapshot with the room's record when the purge starts — and its `lifecycle` is what was computed then.";
+            readonly properties: {
+                readonly room: {
+                    readonly $ref: "#/$defs/HostedRoom";
+                };
+                readonly label: {
+                    readonly $ref: "#/$defs/RoomLabel";
+                };
+                readonly status: {
+                    readonly $ref: "#/$defs/RoomStatus";
+                };
+                readonly description: {
+                    readonly $ref: "#/$defs/RoomDescription";
+                    readonly description: "Absent when the room has none.";
+                };
+                readonly tags: {
+                    readonly $ref: "#/$defs/RoomTags";
+                    readonly description: "Absent or empty when the room has none.";
+                };
+                readonly storageConfig: {
+                    readonly $ref: "#/$defs/StorageConfigId";
+                    readonly description: "The storage config receiving the room's new uploads.";
+                };
+                readonly admitted: {
+                    readonly type: "integer";
+                    readonly minimum: 0;
+                    readonly description: "Members in state `admitted`.";
+                };
+                readonly offered: {
+                    readonly type: "integer";
+                    readonly minimum: 0;
+                    readonly description: "Offers not yet accepted or withdrawn.";
+                };
+                readonly suspended: {
+                    readonly type: "integer";
+                    readonly minimum: 0;
+                    readonly description: "Admissions in state `suspended`: withdrawn while the room was archived with `noAccess`, and restored when it leaves that state. Absent when zero.";
+                };
+                readonly ownerAuthorityValidUntil: {
+                    readonly type: "string";
+                    readonly format: "date-time";
+                    readonly description: "When the community's own `admin` authority over the room expires. A room whose owner's authority lapses can no longer advance its epoch, admit or remove; a community SHOULD renew it well before.";
+                };
+                readonly createdBy: {
+                    readonly type: "string";
+                    readonly pattern: "^did:";
+                    readonly maxLength: 2048;
+                    readonly description: "The administrator who created it.";
+                };
+                readonly detailsUpdatedAt: {
+                    readonly type: "string";
+                    readonly format: "date-time";
+                    readonly description: "When `label`, `description` or `tags` last changed. Absent until the first change after creation. Distinct from `room.updatedAt`, which is the host record's and moves with the room's epoch and lifecycle.";
+                };
+                readonly detailsUpdatedBy: {
+                    readonly type: "string";
+                    readonly pattern: "^did:";
+                    readonly maxLength: 2048;
+                    readonly description: "The administrator who made that change. Present exactly when `detailsUpdatedAt` is. The earlier values and who set them are in the community's audit trail, not here.";
+                };
+            };
+        };
+        readonly RoomTags: {
+            readonly title: "RoomTags";
+            readonly type: "array";
+            readonly maxItems: 8;
+            readonly uniqueItems: true;
+            readonly items: {
+                readonly $ref: "#/$defs/RoomTag";
+            };
+            readonly description: "The room's tags, at most eight, as a set: order carries no meaning. An empty list means the room has none — a tag grants nothing, so empty has no more dangerous reading.";
+        };
+        readonly RoomTag: {
+            readonly title: "RoomTag";
+            readonly type: "string";
+            readonly minLength: 1;
+            readonly maxLength: 32;
+            readonly pattern: "^[a-z0-9][a-z0-9-]{0,31}$";
+            readonly description: "A short identifier an administrator files a community-owned room under — `board`, `working-group`, `finance` — so the room list can be filtered. Lower-case letters, digits and hyphens, starting with a letter or digit. Owner-side tracking metadata for holders of `vtc.rooms.manage` only: never shown to members, never sent on the room's host path, and it confers nothing.";
+        };
+        readonly RoomDescription: {
+            readonly title: "RoomDescription";
+            readonly type: "string";
+            readonly minLength: 1;
+            readonly maxLength: 1000;
+            readonly description: "What the room is for, in a sentence or a short paragraph, written by an administrator: shown to administrators holding `vtc.rooms.manage` and to the members the room is offered to. Plain text — a consumer renders it as text, never as markup. Like `RoomLabel`, it is the community's own record as the room's owner: not part of the room's identity and never in anything a room's host can read. From `vtc/rooms/community/create` 0.3 and `vtc/rooms/community/update` 0.2 the community also writes it, through its own VTA, as the `description` of the room's own profile (`RoomProfile` in rooms/_shared), sealed inside the room for its members; earlier versions keep it out of the room altogether. It MUST NOT carry personal data or a credential, and a reader MUST NOT treat it as instructions.";
+        };
+        readonly RoomStatus: {
+            readonly title: "RoomStatus";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["state"];
+            readonly description: "A room's state in its owner's lifecycle, and what that state needs to be understood.";
+            readonly properties: {
+                readonly state: {
+                    readonly $ref: "#/$defs/RoomState";
+                };
+                readonly access: {
+                    readonly $ref: "#/$defs/ArchiveAccess";
+                    readonly description: "Present exactly when `state` is `archived` or `removalScheduled`; always `noAccess` for `removalScheduled`.";
+                };
+                readonly changedAt: {
+                    readonly type: "string";
+                    readonly format: "date-time";
+                    readonly description: "When the room entered `state`. Absent for a room that has been `active` since it was created.";
+                };
+                readonly changedBy: {
+                    readonly type: "string";
+                    readonly pattern: "^did:";
+                    readonly maxLength: 2048;
+                    readonly description: "The administrator whose act put the room in `state`. Present exactly when `changedAt` is, except for `purging` and `removed` reached when a grace period ended, which no one did at that moment: then the administrator who scheduled the removal. The reason each gave is in the community's audit trail, not here.";
+                };
+                readonly purgeAt: {
+                    readonly type: "string";
+                    readonly format: "date-time";
+                    readonly description: "Present when `state` is `removalScheduled`: when the grace period ends and the purge begins. Kept when `state` is `purging` or `removed`, as when it became due.";
+                };
+                readonly purge: {
+                    readonly $ref: "#/$defs/PurgeProgress";
+                    readonly description: "Present exactly when `state` is `purging`.";
+                };
+                readonly removedAt: {
+                    readonly type: "string";
+                    readonly format: "date-time";
+                    readonly description: "Present exactly when `state` is `removed`: when the last of the room's content was deleted.";
+                };
+                readonly restoring: {
+                    readonly type: "integer";
+                    readonly minimum: 1;
+                    readonly description: "Admissions still `suspended` that the community is restoring, after the room left `noAccess` — the room re-issues each member's credentials and the member collects them as a renewal. Absent when there are none.";
+                };
+                readonly pendingChange: {
+                    readonly $ref: "#/$defs/PendingChange";
+                    readonly description: "Present while a change of state is begun and not finished.";
+                };
+            };
+        };
+        readonly PendingChange: {
+            readonly title: "PendingChange";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["state", "beganAt"];
+            readonly description: "A change of state the community began and has not finished, because a step at its VTA did not complete — most often a room reset the host accepted, after which the community's own credentials must be re-issued before it can act on the room again. `RoomStatus.state` stays what it was until the change finishes, but what the room's host enforces may already be the new state's: a pending move to `noAccess` means members' credentials may already be refused. The community finishes it by itself, retrying with backoff, and repeating the request that began it finishes it too; nothing else changes the room until it is finished.";
+            readonly properties: {
+                readonly state: {
+                    readonly $ref: "#/$defs/RoomState";
+                    readonly description: "The state the change leads to.";
+                };
+                readonly access: {
+                    readonly $ref: "#/$defs/ArchiveAccess";
+                    readonly description: "The access it leads to, where `state` has one.";
+                };
+                readonly beganAt: {
+                    readonly type: "string";
+                    readonly format: "date-time";
+                };
+                readonly lastError: {
+                    readonly type: "string";
+                    readonly minLength: 1;
+                    readonly maxLength: 500;
+                    readonly description: "What stopped the last attempt, for an administrator. Plain text; it names no member and carries no credential.";
+                };
+            };
+        };
+        readonly ArchiveAccess: {
+            readonly title: "ArchiveAccess";
+            readonly type: "string";
+            readonly enum: readonly ["readOnly", "noAccess"];
+            readonly description: "What an archived room's members may still do. `readOnly`: their credentials stand and they keep reading what the room holds; the room's host refuses every write, upload and curation from a member. `noAccess`: every credential the room issued before the archival is withdrawn at its host — a room reset — so the host refuses every member's every task; the content is kept intact, and each withdrawn admission is `suspended`, restored when the room is unarchived or made `readOnly`. Neither recalls what a member already read or saved, and on a sealed tier neither removes anyone from the room's group.";
+        };
+        readonly RoomState: {
+            readonly title: "RoomState";
+            readonly type: "string";
+            readonly enum: readonly ["active", "archived", "removalScheduled", "purging", "removed"];
+            readonly description: "Where a room the community owns stands in its owner's lifecycle — distinct from `HostedRoom.lifecycle`, which is the host's clock (`live`, `lapsed`, `dormant`, `reclaimable`) and is computed from the room's epoch, never set. `active`: open to change. `archived`: closed to change by an administrator — no admissions, and the room's host accepts no writes from its members; what members may still do is `ArchiveAccess`. Reversible with vtc/rooms/community/unarchive. `removalScheduled`: an administrator removed the room with a grace period; it admits nobody and its content is kept until `purgeAt`, and vtc/rooms/community/removal/cancel returns it to `archived`. `purging`: the grace period ended (or there was none) and the community is deleting the room's content from its host and storage; not reversible. `removed`: the content is gone; the community keeps only this record of the room, for its history.";
+        };
+        readonly PurgeProgress: {
+            readonly title: "PurgeProgress";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["attempts"];
+            readonly description: "How a purge is going. A purge deletes at the room's host and at each storage config holding its files, and some of those are remote; a step that fails is retried with backoff until it succeeds, and nothing is reported removed until every step has.";
+            readonly properties: {
+                readonly attempts: {
+                    readonly type: "integer";
+                    readonly minimum: 0;
+                    readonly description: "Passes made so far; 0 until the first.";
+                };
+                readonly lastAttemptAt: {
+                    readonly type: "string";
+                    readonly format: "date-time";
+                };
+                readonly nextAttemptAt: {
+                    readonly type: "string";
+                    readonly format: "date-time";
+                    readonly description: "When the next pass is due. Absent while one runs.";
+                };
+                readonly lastError: {
+                    readonly type: "string";
+                    readonly minLength: 1;
+                    readonly maxLength: 500;
+                    readonly description: "What stopped the last pass, for an administrator. Present only after a pass failed. Plain text, written by the community; it names no member and carries no credential.";
+                };
+            };
+        };
+        readonly RoomLabel: {
+            readonly title: "RoomLabel";
+            readonly type: "string";
+            readonly minLength: 1;
+            readonly maxLength: 128;
+            readonly description: "A name for the room, chosen by an administrator: shown to administrators and to the members a room is offered to. Not part of the room's identity and never in anything a room's host can read. From `vtc/rooms/community/create` 0.3 and `vtc/rooms/community/update` 0.2 the community also writes it, through its own VTA, as the `name` of the room's own profile (`RoomProfile` in rooms/_shared), sealed inside the room for its members; earlier versions keep it out of the room altogether. MUST NOT carry personal data.";
+        };
+        readonly StorageConfigId: {
+            readonly title: "StorageConfigId";
+            readonly type: "string";
+            readonly minLength: 1;
+            readonly maxLength: 64;
+            readonly pattern: "^[a-z0-9](?:[a-z0-9-]{0,62}[a-z0-9])?$";
+            readonly description: "A storage config's identifier, chosen by the administrator who creates it and immutable thereafter: lowercase letters, digits and inner hyphens, at most 64 characters (`eu-s3-primary`, `walrus-main`). Unique within the community. Never reused after a config is retired, because blobs name their config by this value.";
+        };
+        readonly HostedRoom: {
+            readonly title: "HostedRoom";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["roomId", "ownerDid", "visibility", "retentionPolicy", "epoch", "lifecycle", "retentionDays", "createdAt", "updatedAt"];
+            readonly description: "One room, as its host holds it — member for member the `HostedRoom` of vtc/rooms/list/0.2, which defines it inside its own payload schema. Nothing derived from the room's contents, and no member list: the host has none.";
+            readonly properties: {
+                readonly roomId: {
+                    readonly type: "string";
+                    readonly minLength: 1;
+                    readonly maxLength: 512;
+                };
+                readonly ownerDid: {
+                    readonly type: "string";
+                    readonly pattern: "^did:";
+                    readonly maxLength: 2048;
+                };
+                readonly visibility: {
+                    readonly $ref: "#/$defs/Visibility";
+                };
+                readonly retentionPolicy: {
+                    readonly $ref: "#/$defs/RetentionPolicy";
+                };
+                readonly epoch: {
+                    readonly type: "integer";
+                    readonly minimum: 0;
+                };
+                readonly lifecycle: {
+                    readonly type: "string";
+                    readonly enum: readonly ["live", "lapsed", "dormant", "reclaimable"];
+                };
+                readonly epochExpiresAt: {
+                    readonly type: "string";
+                    readonly format: "date-time";
+                };
+                readonly retentionDays: {
+                    readonly type: "integer";
+                    readonly minimum: 0;
+                };
+                readonly mirrorOf: {
+                    readonly type: "string";
+                    readonly minLength: 1;
+                    readonly maxLength: 2048;
+                };
+                readonly createdAt: {
+                    readonly type: "string";
+                    readonly format: "date-time";
+                };
+                readonly updatedAt: {
+                    readonly type: "string";
+                    readonly format: "date-time";
+                };
+            };
+        };
+        readonly RetentionPolicy: {
+            readonly title: "RetentionPolicy";
+            readonly type: "string";
+            readonly enum: readonly ["chained", "fromJoin"];
+            readonly description: "Whether a room keeps its history readable across a membership change, fixed at creation and immutable thereafter — like `Visibility`, and for the same reason: the rungs of an epoch key chain either exist for an epoch or they do not, and no later change of mind can seal key material that was never sealed or unseal what was already severed. `chained`: each advance produces an `EpochLink`, so every member reads the room's whole retained history however long they have been in it — what a **library** wants, at the cost of post-compromise security for record content, since a compromised current key then reaches every retained epoch. `fromJoin`: no rungs are produced, so a member reads only from the epoch their group state is at — what a **stream** wants, and what a room under a strict forward-secrecy obligation wants, at the cost that a joining member finds an empty-looking room and nobody can reread a record once their group state has moved past the epoch it was sealed under. Absent means `chained`; see the prose on why the absent case is the readable one.";
+            readonly $comment: "Deliberately no JSON Schema `default`. A declared default is materialised by the generated bindings — the member becomes non-optional with a serde default — so an absent value would reappear as an explicit one on re-serialisation and break round-trip idempotence for every document written before this member existed. The meaning of absence is stated in prose, where a binding cannot act on it.";
+        };
+        readonly Visibility: {
+            readonly title: "Visibility";
+            readonly type: "string";
+            readonly enum: readonly ["open", "attributed", "private"];
+            readonly description: "How much of a room its host can see, fixed at creation and immutable thereafter. `open`: records are cleartext, searchable and fully audited. `attributed`: record content is sealed, and the host still learns which member acted. `private`: content is sealed and membership is presented in zero knowledge, so the host verifies that a member acted without learning which. Immutable because a downgrade cannot un-see cleartext and an upgrade would protect only what came after while presenting as though it protected everything.";
+        };
+    };
+};
+/** As {@link PAYLOAD_SCHEMA}, for the success-response variant. */
+export declare const RESPONSE_PAYLOAD_SCHEMA: {
+    readonly $schema: "https://json-schema.org/draft/2020-12/schema";
+    readonly $ref: "#/$defs/Response";
+    readonly $defs: {
+        readonly Response: {
+            readonly $anchor: "response";
+            readonly title: "VTC Rooms Community Get — response payload";
+            readonly description: "Success response to vtc/rooms/community/get. Type https://trusttasks.org/spec/vtc/rooms/community/get/0.4#response. One room the community owns, in any state of its owner's lifecycle, with its counts. Its members are vtc/rooms/community/members/list's.";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["room"];
+            readonly properties: {
+                readonly room: {
+                    readonly $ref: "#/$defs/CommunityRoomV3";
+                };
+                readonly ext: {
+                    readonly $ref: "#/$defs/Ext";
+                };
+            };
+        };
+        readonly Ext: {
+            readonly title: "Ext";
+            readonly description: "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.";
+            readonly type: "object";
+            readonly minProperties: 1;
+            readonly additionalProperties: true;
+            readonly propertyNames: {
+                readonly pattern: "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$";
+            };
+        };
+        readonly CommunityRoomV3: {
+            readonly title: "CommunityRoomV3";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["room", "label", "admitted", "offered", "status"];
+            readonly description: "What vtc/rooms/community/{get,list}/0.4 and vtc/rooms/community/{archive,unarchive,remove,removal/cancel}/0.1 return: `CommunityRoomV2` plus the room's `status` in its owner's lifecycle and the count of `suspended` admissions. A separate definition, not a change to `CommunityRoomV2`, so that the versions returning that keep the exact shape they published. For a room in state `purging` or `removed`, whose host record a purge deletes, `room` is the host record as it last stood before the purge began — the community keeps that snapshot with the room's record when the purge starts — and its `lifecycle` is what was computed then.";
+            readonly properties: {
+                readonly room: {
+                    readonly $ref: "#/$defs/HostedRoom";
+                };
+                readonly label: {
+                    readonly $ref: "#/$defs/RoomLabel";
+                };
+                readonly status: {
+                    readonly $ref: "#/$defs/RoomStatus";
+                };
+                readonly description: {
+                    readonly $ref: "#/$defs/RoomDescription";
+                    readonly description: "Absent when the room has none.";
+                };
+                readonly tags: {
+                    readonly $ref: "#/$defs/RoomTags";
+                    readonly description: "Absent or empty when the room has none.";
+                };
+                readonly storageConfig: {
+                    readonly $ref: "#/$defs/StorageConfigId";
+                    readonly description: "The storage config receiving the room's new uploads.";
+                };
+                readonly admitted: {
+                    readonly type: "integer";
+                    readonly minimum: 0;
+                    readonly description: "Members in state `admitted`.";
+                };
+                readonly offered: {
+                    readonly type: "integer";
+                    readonly minimum: 0;
+                    readonly description: "Offers not yet accepted or withdrawn.";
+                };
+                readonly suspended: {
+                    readonly type: "integer";
+                    readonly minimum: 0;
+                    readonly description: "Admissions in state `suspended`: withdrawn while the room was archived with `noAccess`, and restored when it leaves that state. Absent when zero.";
+                };
+                readonly ownerAuthorityValidUntil: {
+                    readonly type: "string";
+                    readonly format: "date-time";
+                    readonly description: "When the community's own `admin` authority over the room expires. A room whose owner's authority lapses can no longer advance its epoch, admit or remove; a community SHOULD renew it well before.";
+                };
+                readonly createdBy: {
+                    readonly type: "string";
+                    readonly pattern: "^did:";
+                    readonly maxLength: 2048;
+                    readonly description: "The administrator who created it.";
+                };
+                readonly detailsUpdatedAt: {
+                    readonly type: "string";
+                    readonly format: "date-time";
+                    readonly description: "When `label`, `description` or `tags` last changed. Absent until the first change after creation. Distinct from `room.updatedAt`, which is the host record's and moves with the room's epoch and lifecycle.";
+                };
+                readonly detailsUpdatedBy: {
+                    readonly type: "string";
+                    readonly pattern: "^did:";
+                    readonly maxLength: 2048;
+                    readonly description: "The administrator who made that change. Present exactly when `detailsUpdatedAt` is. The earlier values and who set them are in the community's audit trail, not here.";
+                };
+            };
+        };
+        readonly RoomTags: {
+            readonly title: "RoomTags";
+            readonly type: "array";
+            readonly maxItems: 8;
+            readonly uniqueItems: true;
+            readonly items: {
+                readonly $ref: "#/$defs/RoomTag";
+            };
+            readonly description: "The room's tags, at most eight, as a set: order carries no meaning. An empty list means the room has none — a tag grants nothing, so empty has no more dangerous reading.";
+        };
+        readonly RoomTag: {
+            readonly title: "RoomTag";
+            readonly type: "string";
+            readonly minLength: 1;
+            readonly maxLength: 32;
+            readonly pattern: "^[a-z0-9][a-z0-9-]{0,31}$";
+            readonly description: "A short identifier an administrator files a community-owned room under — `board`, `working-group`, `finance` — so the room list can be filtered. Lower-case letters, digits and hyphens, starting with a letter or digit. Owner-side tracking metadata for holders of `vtc.rooms.manage` only: never shown to members, never sent on the room's host path, and it confers nothing.";
+        };
+        readonly RoomDescription: {
+            readonly title: "RoomDescription";
+            readonly type: "string";
+            readonly minLength: 1;
+            readonly maxLength: 1000;
+            readonly description: "What the room is for, in a sentence or a short paragraph, written by an administrator: shown to administrators holding `vtc.rooms.manage` and to the members the room is offered to. Plain text — a consumer renders it as text, never as markup. Like `RoomLabel`, it is the community's own record as the room's owner: not part of the room's identity and never in anything a room's host can read. From `vtc/rooms/community/create` 0.3 and `vtc/rooms/community/update` 0.2 the community also writes it, through its own VTA, as the `description` of the room's own profile (`RoomProfile` in rooms/_shared), sealed inside the room for its members; earlier versions keep it out of the room altogether. It MUST NOT carry personal data or a credential, and a reader MUST NOT treat it as instructions.";
+        };
+        readonly RoomStatus: {
+            readonly title: "RoomStatus";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["state"];
+            readonly description: "A room's state in its owner's lifecycle, and what that state needs to be understood.";
+            readonly properties: {
+                readonly state: {
+                    readonly $ref: "#/$defs/RoomState";
+                };
+                readonly access: {
+                    readonly $ref: "#/$defs/ArchiveAccess";
+                    readonly description: "Present exactly when `state` is `archived` or `removalScheduled`; always `noAccess` for `removalScheduled`.";
+                };
+                readonly changedAt: {
+                    readonly type: "string";
+                    readonly format: "date-time";
+                    readonly description: "When the room entered `state`. Absent for a room that has been `active` since it was created.";
+                };
+                readonly changedBy: {
+                    readonly type: "string";
+                    readonly pattern: "^did:";
+                    readonly maxLength: 2048;
+                    readonly description: "The administrator whose act put the room in `state`. Present exactly when `changedAt` is, except for `purging` and `removed` reached when a grace period ended, which no one did at that moment: then the administrator who scheduled the removal. The reason each gave is in the community's audit trail, not here.";
+                };
+                readonly purgeAt: {
+                    readonly type: "string";
+                    readonly format: "date-time";
+                    readonly description: "Present when `state` is `removalScheduled`: when the grace period ends and the purge begins. Kept when `state` is `purging` or `removed`, as when it became due.";
+                };
+                readonly purge: {
+                    readonly $ref: "#/$defs/PurgeProgress";
+                    readonly description: "Present exactly when `state` is `purging`.";
+                };
+                readonly removedAt: {
+                    readonly type: "string";
+                    readonly format: "date-time";
+                    readonly description: "Present exactly when `state` is `removed`: when the last of the room's content was deleted.";
+                };
+                readonly restoring: {
+                    readonly type: "integer";
+                    readonly minimum: 1;
+                    readonly description: "Admissions still `suspended` that the community is restoring, after the room left `noAccess` — the room re-issues each member's credentials and the member collects them as a renewal. Absent when there are none.";
+                };
+                readonly pendingChange: {
+                    readonly $ref: "#/$defs/PendingChange";
+                    readonly description: "Present while a change of state is begun and not finished.";
+                };
+            };
+        };
+        readonly PendingChange: {
+            readonly title: "PendingChange";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["state", "beganAt"];
+            readonly description: "A change of state the community began and has not finished, because a step at its VTA did not complete — most often a room reset the host accepted, after which the community's own credentials must be re-issued before it can act on the room again. `RoomStatus.state` stays what it was until the change finishes, but what the room's host enforces may already be the new state's: a pending move to `noAccess` means members' credentials may already be refused. The community finishes it by itself, retrying with backoff, and repeating the request that began it finishes it too; nothing else changes the room until it is finished.";
+            readonly properties: {
+                readonly state: {
+                    readonly $ref: "#/$defs/RoomState";
+                    readonly description: "The state the change leads to.";
+                };
+                readonly access: {
+                    readonly $ref: "#/$defs/ArchiveAccess";
+                    readonly description: "The access it leads to, where `state` has one.";
+                };
+                readonly beganAt: {
+                    readonly type: "string";
+                    readonly format: "date-time";
+                };
+                readonly lastError: {
+                    readonly type: "string";
+                    readonly minLength: 1;
+                    readonly maxLength: 500;
+                    readonly description: "What stopped the last attempt, for an administrator. Plain text; it names no member and carries no credential.";
+                };
+            };
+        };
+        readonly ArchiveAccess: {
+            readonly title: "ArchiveAccess";
+            readonly type: "string";
+            readonly enum: readonly ["readOnly", "noAccess"];
+            readonly description: "What an archived room's members may still do. `readOnly`: their credentials stand and they keep reading what the room holds; the room's host refuses every write, upload and curation from a member. `noAccess`: every credential the room issued before the archival is withdrawn at its host — a room reset — so the host refuses every member's every task; the content is kept intact, and each withdrawn admission is `suspended`, restored when the room is unarchived or made `readOnly`. Neither recalls what a member already read or saved, and on a sealed tier neither removes anyone from the room's group.";
+        };
+        readonly RoomState: {
+            readonly title: "RoomState";
+            readonly type: "string";
+            readonly enum: readonly ["active", "archived", "removalScheduled", "purging", "removed"];
+            readonly description: "Where a room the community owns stands in its owner's lifecycle — distinct from `HostedRoom.lifecycle`, which is the host's clock (`live`, `lapsed`, `dormant`, `reclaimable`) and is computed from the room's epoch, never set. `active`: open to change. `archived`: closed to change by an administrator — no admissions, and the room's host accepts no writes from its members; what members may still do is `ArchiveAccess`. Reversible with vtc/rooms/community/unarchive. `removalScheduled`: an administrator removed the room with a grace period; it admits nobody and its content is kept until `purgeAt`, and vtc/rooms/community/removal/cancel returns it to `archived`. `purging`: the grace period ended (or there was none) and the community is deleting the room's content from its host and storage; not reversible. `removed`: the content is gone; the community keeps only this record of the room, for its history.";
+        };
+        readonly PurgeProgress: {
+            readonly title: "PurgeProgress";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["attempts"];
+            readonly description: "How a purge is going. A purge deletes at the room's host and at each storage config holding its files, and some of those are remote; a step that fails is retried with backoff until it succeeds, and nothing is reported removed until every step has.";
+            readonly properties: {
+                readonly attempts: {
+                    readonly type: "integer";
+                    readonly minimum: 0;
+                    readonly description: "Passes made so far; 0 until the first.";
+                };
+                readonly lastAttemptAt: {
+                    readonly type: "string";
+                    readonly format: "date-time";
+                };
+                readonly nextAttemptAt: {
+                    readonly type: "string";
+                    readonly format: "date-time";
+                    readonly description: "When the next pass is due. Absent while one runs.";
+                };
+                readonly lastError: {
+                    readonly type: "string";
+                    readonly minLength: 1;
+                    readonly maxLength: 500;
+                    readonly description: "What stopped the last pass, for an administrator. Present only after a pass failed. Plain text, written by the community; it names no member and carries no credential.";
+                };
+            };
+        };
+        readonly RoomLabel: {
+            readonly title: "RoomLabel";
+            readonly type: "string";
+            readonly minLength: 1;
+            readonly maxLength: 128;
+            readonly description: "A name for the room, chosen by an administrator: shown to administrators and to the members a room is offered to. Not part of the room's identity and never in anything a room's host can read. From `vtc/rooms/community/create` 0.3 and `vtc/rooms/community/update` 0.2 the community also writes it, through its own VTA, as the `name` of the room's own profile (`RoomProfile` in rooms/_shared), sealed inside the room for its members; earlier versions keep it out of the room altogether. MUST NOT carry personal data.";
+        };
+        readonly StorageConfigId: {
+            readonly title: "StorageConfigId";
+            readonly type: "string";
+            readonly minLength: 1;
+            readonly maxLength: 64;
+            readonly pattern: "^[a-z0-9](?:[a-z0-9-]{0,62}[a-z0-9])?$";
+            readonly description: "A storage config's identifier, chosen by the administrator who creates it and immutable thereafter: lowercase letters, digits and inner hyphens, at most 64 characters (`eu-s3-primary`, `walrus-main`). Unique within the community. Never reused after a config is retired, because blobs name their config by this value.";
+        };
+        readonly HostedRoom: {
+            readonly title: "HostedRoom";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["roomId", "ownerDid", "visibility", "retentionPolicy", "epoch", "lifecycle", "retentionDays", "createdAt", "updatedAt"];
+            readonly description: "One room, as its host holds it — member for member the `HostedRoom` of vtc/rooms/list/0.2, which defines it inside its own payload schema. Nothing derived from the room's contents, and no member list: the host has none.";
+            readonly properties: {
+                readonly roomId: {
+                    readonly type: "string";
+                    readonly minLength: 1;
+                    readonly maxLength: 512;
+                };
+                readonly ownerDid: {
+                    readonly type: "string";
+                    readonly pattern: "^did:";
+                    readonly maxLength: 2048;
+                };
+                readonly visibility: {
+                    readonly $ref: "#/$defs/Visibility";
+                };
+                readonly retentionPolicy: {
+                    readonly $ref: "#/$defs/RetentionPolicy";
+                };
+                readonly epoch: {
+                    readonly type: "integer";
+                    readonly minimum: 0;
+                };
+                readonly lifecycle: {
+                    readonly type: "string";
+                    readonly enum: readonly ["live", "lapsed", "dormant", "reclaimable"];
+                };
+                readonly epochExpiresAt: {
+                    readonly type: "string";
+                    readonly format: "date-time";
+                };
+                readonly retentionDays: {
+                    readonly type: "integer";
+                    readonly minimum: 0;
+                };
+                readonly mirrorOf: {
+                    readonly type: "string";
+                    readonly minLength: 1;
+                    readonly maxLength: 2048;
+                };
+                readonly createdAt: {
+                    readonly type: "string";
+                    readonly format: "date-time";
+                };
+                readonly updatedAt: {
+                    readonly type: "string";
+                    readonly format: "date-time";
+                };
+            };
+        };
+        readonly RetentionPolicy: {
+            readonly title: "RetentionPolicy";
+            readonly type: "string";
+            readonly enum: readonly ["chained", "fromJoin"];
+            readonly description: "Whether a room keeps its history readable across a membership change, fixed at creation and immutable thereafter — like `Visibility`, and for the same reason: the rungs of an epoch key chain either exist for an epoch or they do not, and no later change of mind can seal key material that was never sealed or unseal what was already severed. `chained`: each advance produces an `EpochLink`, so every member reads the room's whole retained history however long they have been in it — what a **library** wants, at the cost of post-compromise security for record content, since a compromised current key then reaches every retained epoch. `fromJoin`: no rungs are produced, so a member reads only from the epoch their group state is at — what a **stream** wants, and what a room under a strict forward-secrecy obligation wants, at the cost that a joining member finds an empty-looking room and nobody can reread a record once their group state has moved past the epoch it was sealed under. Absent means `chained`; see the prose on why the absent case is the readable one.";
+            readonly $comment: "Deliberately no JSON Schema `default`. A declared default is materialised by the generated bindings — the member becomes non-optional with a serde default — so an absent value would reappear as an explicit one on re-serialisation and break round-trip idempotence for every document written before this member existed. The meaning of absence is stated in prose, where a binding cannot act on it.";
+        };
+        readonly Visibility: {
+            readonly title: "Visibility";
+            readonly type: "string";
+            readonly enum: readonly ["open", "attributed", "private"];
+            readonly description: "How much of a room its host can see, fixed at creation and immutable thereafter. `open`: records are cleartext, searchable and fully audited. `attributed`: record content is sealed, and the host still learns which member acted. `private`: content is sealed and membership is presented in zero knowledge, so the host verifies that a member acted without learning which. Immutable because a downgrade cannot un-see cleartext and an upgrade would protect only what came after while presenting as though it protected everything.";
+        };
+    };
+};
+/**
+ * SPEC.md §7.2 policy for the request variant, from this specification's
+ * front matter. Pass to `consumeInbound` — items 5b, 7 and 8 are
+ * per-specification and cannot be derived from the document alone, and
+ * item 2 needs the schema this carries.
+ */
+export declare const SPEC: {
+    readonly typeUri: "https://trusttasks.org/spec/vtc/rooms/community/get/0.4";
+    readonly isBearer: false;
+    readonly isProofRequired: false;
+    readonly isRecipientRequired: true;
+    readonly isIssuedAtRequired: false;
+    readonly payloadSchema: {
+        readonly $schema: "https://json-schema.org/draft/2020-12/schema";
+        readonly $id: "https://trusttasks.org/spec/vtc/rooms/community/get/0.4";
+        readonly title: "VTC Rooms Community Get — payload";
+        readonly type: "object";
+        readonly additionalProperties: false;
+        readonly required: readonly ["roomId"];
+        readonly properties: {
+            readonly roomId: {
+                readonly type: "string";
+                readonly minLength: 1;
+                readonly maxLength: 512;
+                readonly description: "The room's identifier: its DID.";
+            };
+            readonly ext: {
+                readonly $ref: "#/$defs/Ext";
+            };
+        };
+        readonly $defs: {
+            readonly Response: {
+                readonly $anchor: "response";
+                readonly title: "VTC Rooms Community Get — response payload";
+                readonly description: "Success response to vtc/rooms/community/get. Type https://trusttasks.org/spec/vtc/rooms/community/get/0.4#response. One room the community owns, in any state of its owner's lifecycle, with its counts. Its members are vtc/rooms/community/members/list's.";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["room"];
+                readonly properties: {
+                    readonly room: {
+                        readonly $ref: "#/$defs/CommunityRoomV3";
+                    };
+                    readonly ext: {
+                        readonly $ref: "#/$defs/Ext";
+                    };
+                };
+            };
+            readonly Ext: {
+                readonly title: "Ext";
+                readonly description: "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.";
+                readonly type: "object";
+                readonly minProperties: 1;
+                readonly additionalProperties: true;
+                readonly propertyNames: {
+                    readonly pattern: "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$";
+                };
+            };
+            readonly CommunityRoomV3: {
+                readonly title: "CommunityRoomV3";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["room", "label", "admitted", "offered", "status"];
+                readonly description: "What vtc/rooms/community/{get,list}/0.4 and vtc/rooms/community/{archive,unarchive,remove,removal/cancel}/0.1 return: `CommunityRoomV2` plus the room's `status` in its owner's lifecycle and the count of `suspended` admissions. A separate definition, not a change to `CommunityRoomV2`, so that the versions returning that keep the exact shape they published. For a room in state `purging` or `removed`, whose host record a purge deletes, `room` is the host record as it last stood before the purge began — the community keeps that snapshot with the room's record when the purge starts — and its `lifecycle` is what was computed then.";
+                readonly properties: {
+                    readonly room: {
+                        readonly $ref: "#/$defs/HostedRoom";
+                    };
+                    readonly label: {
+                        readonly $ref: "#/$defs/RoomLabel";
+                    };
+                    readonly status: {
+                        readonly $ref: "#/$defs/RoomStatus";
+                    };
+                    readonly description: {
+                        readonly $ref: "#/$defs/RoomDescription";
+                        readonly description: "Absent when the room has none.";
+                    };
+                    readonly tags: {
+                        readonly $ref: "#/$defs/RoomTags";
+                        readonly description: "Absent or empty when the room has none.";
+                    };
+                    readonly storageConfig: {
+                        readonly $ref: "#/$defs/StorageConfigId";
+                        readonly description: "The storage config receiving the room's new uploads.";
+                    };
+                    readonly admitted: {
+                        readonly type: "integer";
+                        readonly minimum: 0;
+                        readonly description: "Members in state `admitted`.";
+                    };
+                    readonly offered: {
+                        readonly type: "integer";
+                        readonly minimum: 0;
+                        readonly description: "Offers not yet accepted or withdrawn.";
+                    };
+                    readonly suspended: {
+                        readonly type: "integer";
+                        readonly minimum: 0;
+                        readonly description: "Admissions in state `suspended`: withdrawn while the room was archived with `noAccess`, and restored when it leaves that state. Absent when zero.";
+                    };
+                    readonly ownerAuthorityValidUntil: {
+                        readonly type: "string";
+                        readonly format: "date-time";
+                        readonly description: "When the community's own `admin` authority over the room expires. A room whose owner's authority lapses can no longer advance its epoch, admit or remove; a community SHOULD renew it well before.";
+                    };
+                    readonly createdBy: {
+                        readonly type: "string";
+                        readonly pattern: "^did:";
+                        readonly maxLength: 2048;
+                        readonly description: "The administrator who created it.";
+                    };
+                    readonly detailsUpdatedAt: {
+                        readonly type: "string";
+                        readonly format: "date-time";
+                        readonly description: "When `label`, `description` or `tags` last changed. Absent until the first change after creation. Distinct from `room.updatedAt`, which is the host record's and moves with the room's epoch and lifecycle.";
+                    };
+                    readonly detailsUpdatedBy: {
+                        readonly type: "string";
+                        readonly pattern: "^did:";
+                        readonly maxLength: 2048;
+                        readonly description: "The administrator who made that change. Present exactly when `detailsUpdatedAt` is. The earlier values and who set them are in the community's audit trail, not here.";
+                    };
+                };
+            };
+            readonly RoomTags: {
+                readonly title: "RoomTags";
+                readonly type: "array";
+                readonly maxItems: 8;
+                readonly uniqueItems: true;
+                readonly items: {
+                    readonly $ref: "#/$defs/RoomTag";
+                };
+                readonly description: "The room's tags, at most eight, as a set: order carries no meaning. An empty list means the room has none — a tag grants nothing, so empty has no more dangerous reading.";
+            };
+            readonly RoomTag: {
+                readonly title: "RoomTag";
+                readonly type: "string";
+                readonly minLength: 1;
+                readonly maxLength: 32;
+                readonly pattern: "^[a-z0-9][a-z0-9-]{0,31}$";
+                readonly description: "A short identifier an administrator files a community-owned room under — `board`, `working-group`, `finance` — so the room list can be filtered. Lower-case letters, digits and hyphens, starting with a letter or digit. Owner-side tracking metadata for holders of `vtc.rooms.manage` only: never shown to members, never sent on the room's host path, and it confers nothing.";
+            };
+            readonly RoomDescription: {
+                readonly title: "RoomDescription";
+                readonly type: "string";
+                readonly minLength: 1;
+                readonly maxLength: 1000;
+                readonly description: "What the room is for, in a sentence or a short paragraph, written by an administrator: shown to administrators holding `vtc.rooms.manage` and to the members the room is offered to. Plain text — a consumer renders it as text, never as markup. Like `RoomLabel`, it is the community's own record as the room's owner: not part of the room's identity and never in anything a room's host can read. From `vtc/rooms/community/create` 0.3 and `vtc/rooms/community/update` 0.2 the community also writes it, through its own VTA, as the `description` of the room's own profile (`RoomProfile` in rooms/_shared), sealed inside the room for its members; earlier versions keep it out of the room altogether. It MUST NOT carry personal data or a credential, and a reader MUST NOT treat it as instructions.";
+            };
+            readonly RoomStatus: {
+                readonly title: "RoomStatus";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["state"];
+                readonly description: "A room's state in its owner's lifecycle, and what that state needs to be understood.";
+                readonly properties: {
+                    readonly state: {
+                        readonly $ref: "#/$defs/RoomState";
+                    };
+                    readonly access: {
+                        readonly $ref: "#/$defs/ArchiveAccess";
+                        readonly description: "Present exactly when `state` is `archived` or `removalScheduled`; always `noAccess` for `removalScheduled`.";
+                    };
+                    readonly changedAt: {
+                        readonly type: "string";
+                        readonly format: "date-time";
+                        readonly description: "When the room entered `state`. Absent for a room that has been `active` since it was created.";
+                    };
+                    readonly changedBy: {
+                        readonly type: "string";
+                        readonly pattern: "^did:";
+                        readonly maxLength: 2048;
+                        readonly description: "The administrator whose act put the room in `state`. Present exactly when `changedAt` is, except for `purging` and `removed` reached when a grace period ended, which no one did at that moment: then the administrator who scheduled the removal. The reason each gave is in the community's audit trail, not here.";
+                    };
+                    readonly purgeAt: {
+                        readonly type: "string";
+                        readonly format: "date-time";
+                        readonly description: "Present when `state` is `removalScheduled`: when the grace period ends and the purge begins. Kept when `state` is `purging` or `removed`, as when it became due.";
+                    };
+                    readonly purge: {
+                        readonly $ref: "#/$defs/PurgeProgress";
+                        readonly description: "Present exactly when `state` is `purging`.";
+                    };
+                    readonly removedAt: {
+                        readonly type: "string";
+                        readonly format: "date-time";
+                        readonly description: "Present exactly when `state` is `removed`: when the last of the room's content was deleted.";
+                    };
+                    readonly restoring: {
+                        readonly type: "integer";
+                        readonly minimum: 1;
+                        readonly description: "Admissions still `suspended` that the community is restoring, after the room left `noAccess` — the room re-issues each member's credentials and the member collects them as a renewal. Absent when there are none.";
+                    };
+                    readonly pendingChange: {
+                        readonly $ref: "#/$defs/PendingChange";
+                        readonly description: "Present while a change of state is begun and not finished.";
+                    };
+                };
+            };
+            readonly PendingChange: {
+                readonly title: "PendingChange";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["state", "beganAt"];
+                readonly description: "A change of state the community began and has not finished, because a step at its VTA did not complete — most often a room reset the host accepted, after which the community's own credentials must be re-issued before it can act on the room again. `RoomStatus.state` stays what it was until the change finishes, but what the room's host enforces may already be the new state's: a pending move to `noAccess` means members' credentials may already be refused. The community finishes it by itself, retrying with backoff, and repeating the request that began it finishes it too; nothing else changes the room until it is finished.";
+                readonly properties: {
+                    readonly state: {
+                        readonly $ref: "#/$defs/RoomState";
+                        readonly description: "The state the change leads to.";
+                    };
+                    readonly access: {
+                        readonly $ref: "#/$defs/ArchiveAccess";
+                        readonly description: "The access it leads to, where `state` has one.";
+                    };
+                    readonly beganAt: {
+                        readonly type: "string";
+                        readonly format: "date-time";
+                    };
+                    readonly lastError: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                        readonly maxLength: 500;
+                        readonly description: "What stopped the last attempt, for an administrator. Plain text; it names no member and carries no credential.";
+                    };
+                };
+            };
+            readonly ArchiveAccess: {
+                readonly title: "ArchiveAccess";
+                readonly type: "string";
+                readonly enum: readonly ["readOnly", "noAccess"];
+                readonly description: "What an archived room's members may still do. `readOnly`: their credentials stand and they keep reading what the room holds; the room's host refuses every write, upload and curation from a member. `noAccess`: every credential the room issued before the archival is withdrawn at its host — a room reset — so the host refuses every member's every task; the content is kept intact, and each withdrawn admission is `suspended`, restored when the room is unarchived or made `readOnly`. Neither recalls what a member already read or saved, and on a sealed tier neither removes anyone from the room's group.";
+            };
+            readonly RoomState: {
+                readonly title: "RoomState";
+                readonly type: "string";
+                readonly enum: readonly ["active", "archived", "removalScheduled", "purging", "removed"];
+                readonly description: "Where a room the community owns stands in its owner's lifecycle — distinct from `HostedRoom.lifecycle`, which is the host's clock (`live`, `lapsed`, `dormant`, `reclaimable`) and is computed from the room's epoch, never set. `active`: open to change. `archived`: closed to change by an administrator — no admissions, and the room's host accepts no writes from its members; what members may still do is `ArchiveAccess`. Reversible with vtc/rooms/community/unarchive. `removalScheduled`: an administrator removed the room with a grace period; it admits nobody and its content is kept until `purgeAt`, and vtc/rooms/community/removal/cancel returns it to `archived`. `purging`: the grace period ended (or there was none) and the community is deleting the room's content from its host and storage; not reversible. `removed`: the content is gone; the community keeps only this record of the room, for its history.";
+            };
+            readonly PurgeProgress: {
+                readonly title: "PurgeProgress";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["attempts"];
+                readonly description: "How a purge is going. A purge deletes at the room's host and at each storage config holding its files, and some of those are remote; a step that fails is retried with backoff until it succeeds, and nothing is reported removed until every step has.";
+                readonly properties: {
+                    readonly attempts: {
+                        readonly type: "integer";
+                        readonly minimum: 0;
+                        readonly description: "Passes made so far; 0 until the first.";
+                    };
+                    readonly lastAttemptAt: {
+                        readonly type: "string";
+                        readonly format: "date-time";
+                    };
+                    readonly nextAttemptAt: {
+                        readonly type: "string";
+                        readonly format: "date-time";
+                        readonly description: "When the next pass is due. Absent while one runs.";
+                    };
+                    readonly lastError: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                        readonly maxLength: 500;
+                        readonly description: "What stopped the last pass, for an administrator. Present only after a pass failed. Plain text, written by the community; it names no member and carries no credential.";
+                    };
+                };
+            };
+            readonly RoomLabel: {
+                readonly title: "RoomLabel";
+                readonly type: "string";
+                readonly minLength: 1;
+                readonly maxLength: 128;
+                readonly description: "A name for the room, chosen by an administrator: shown to administrators and to the members a room is offered to. Not part of the room's identity and never in anything a room's host can read. From `vtc/rooms/community/create` 0.3 and `vtc/rooms/community/update` 0.2 the community also writes it, through its own VTA, as the `name` of the room's own profile (`RoomProfile` in rooms/_shared), sealed inside the room for its members; earlier versions keep it out of the room altogether. MUST NOT carry personal data.";
+            };
+            readonly StorageConfigId: {
+                readonly title: "StorageConfigId";
+                readonly type: "string";
+                readonly minLength: 1;
+                readonly maxLength: 64;
+                readonly pattern: "^[a-z0-9](?:[a-z0-9-]{0,62}[a-z0-9])?$";
+                readonly description: "A storage config's identifier, chosen by the administrator who creates it and immutable thereafter: lowercase letters, digits and inner hyphens, at most 64 characters (`eu-s3-primary`, `walrus-main`). Unique within the community. Never reused after a config is retired, because blobs name their config by this value.";
+            };
+            readonly HostedRoom: {
+                readonly title: "HostedRoom";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["roomId", "ownerDid", "visibility", "retentionPolicy", "epoch", "lifecycle", "retentionDays", "createdAt", "updatedAt"];
+                readonly description: "One room, as its host holds it — member for member the `HostedRoom` of vtc/rooms/list/0.2, which defines it inside its own payload schema. Nothing derived from the room's contents, and no member list: the host has none.";
+                readonly properties: {
+                    readonly roomId: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                        readonly maxLength: 512;
+                    };
+                    readonly ownerDid: {
+                        readonly type: "string";
+                        readonly pattern: "^did:";
+                        readonly maxLength: 2048;
+                    };
+                    readonly visibility: {
+                        readonly $ref: "#/$defs/Visibility";
+                    };
+                    readonly retentionPolicy: {
+                        readonly $ref: "#/$defs/RetentionPolicy";
+                    };
+                    readonly epoch: {
+                        readonly type: "integer";
+                        readonly minimum: 0;
+                    };
+                    readonly lifecycle: {
+                        readonly type: "string";
+                        readonly enum: readonly ["live", "lapsed", "dormant", "reclaimable"];
+                    };
+                    readonly epochExpiresAt: {
+                        readonly type: "string";
+                        readonly format: "date-time";
+                    };
+                    readonly retentionDays: {
+                        readonly type: "integer";
+                        readonly minimum: 0;
+                    };
+                    readonly mirrorOf: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                        readonly maxLength: 2048;
+                    };
+                    readonly createdAt: {
+                        readonly type: "string";
+                        readonly format: "date-time";
+                    };
+                    readonly updatedAt: {
+                        readonly type: "string";
+                        readonly format: "date-time";
+                    };
+                };
+            };
+            readonly RetentionPolicy: {
+                readonly title: "RetentionPolicy";
+                readonly type: "string";
+                readonly enum: readonly ["chained", "fromJoin"];
+                readonly description: "Whether a room keeps its history readable across a membership change, fixed at creation and immutable thereafter — like `Visibility`, and for the same reason: the rungs of an epoch key chain either exist for an epoch or they do not, and no later change of mind can seal key material that was never sealed or unseal what was already severed. `chained`: each advance produces an `EpochLink`, so every member reads the room's whole retained history however long they have been in it — what a **library** wants, at the cost of post-compromise security for record content, since a compromised current key then reaches every retained epoch. `fromJoin`: no rungs are produced, so a member reads only from the epoch their group state is at — what a **stream** wants, and what a room under a strict forward-secrecy obligation wants, at the cost that a joining member finds an empty-looking room and nobody can reread a record once their group state has moved past the epoch it was sealed under. Absent means `chained`; see the prose on why the absent case is the readable one.";
+                readonly $comment: "Deliberately no JSON Schema `default`. A declared default is materialised by the generated bindings — the member becomes non-optional with a serde default — so an absent value would reappear as an explicit one on re-serialisation and break round-trip idempotence for every document written before this member existed. The meaning of absence is stated in prose, where a binding cannot act on it.";
+            };
+            readonly Visibility: {
+                readonly title: "Visibility";
+                readonly type: "string";
+                readonly enum: readonly ["open", "attributed", "private"];
+                readonly description: "How much of a room its host can see, fixed at creation and immutable thereafter. `open`: records are cleartext, searchable and fully audited. `attributed`: record content is sealed, and the host still learns which member acted. `private`: content is sealed and membership is presented in zero knowledge, so the host verifies that a member acted without learning which. Immutable because a downgrade cannot un-see cleartext and an upgrade would protect only what came after while presenting as though it protected everything.";
+            };
+        };
+    };
+};
+/**
+ * SPEC.md §7.2 policy for the success-response variant. `isRecipientRequired`
+ * tracks the *issuer* party's requirement because a response swaps the
+ * parties (§7.3 item 5).
+ */
+export declare const RESPONSE_SPEC: {
+    readonly typeUri: "https://trusttasks.org/spec/vtc/rooms/community/get/0.4#response";
+    readonly isBearer: false;
+    readonly isProofRequired: false;
+    readonly isRecipientRequired: true;
+    readonly isIssuedAtRequired: false;
+    readonly payloadSchema: {
+        readonly $schema: "https://json-schema.org/draft/2020-12/schema";
+        readonly $ref: "#/$defs/Response";
+        readonly $defs: {
+            readonly Response: {
+                readonly $anchor: "response";
+                readonly title: "VTC Rooms Community Get — response payload";
+                readonly description: "Success response to vtc/rooms/community/get. Type https://trusttasks.org/spec/vtc/rooms/community/get/0.4#response. One room the community owns, in any state of its owner's lifecycle, with its counts. Its members are vtc/rooms/community/members/list's.";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["room"];
+                readonly properties: {
+                    readonly room: {
+                        readonly $ref: "#/$defs/CommunityRoomV3";
+                    };
+                    readonly ext: {
+                        readonly $ref: "#/$defs/Ext";
+                    };
+                };
+            };
+            readonly Ext: {
+                readonly title: "Ext";
+                readonly description: "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.";
+                readonly type: "object";
+                readonly minProperties: 1;
+                readonly additionalProperties: true;
+                readonly propertyNames: {
+                    readonly pattern: "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$";
+                };
+            };
+            readonly CommunityRoomV3: {
+                readonly title: "CommunityRoomV3";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["room", "label", "admitted", "offered", "status"];
+                readonly description: "What vtc/rooms/community/{get,list}/0.4 and vtc/rooms/community/{archive,unarchive,remove,removal/cancel}/0.1 return: `CommunityRoomV2` plus the room's `status` in its owner's lifecycle and the count of `suspended` admissions. A separate definition, not a change to `CommunityRoomV2`, so that the versions returning that keep the exact shape they published. For a room in state `purging` or `removed`, whose host record a purge deletes, `room` is the host record as it last stood before the purge began — the community keeps that snapshot with the room's record when the purge starts — and its `lifecycle` is what was computed then.";
+                readonly properties: {
+                    readonly room: {
+                        readonly $ref: "#/$defs/HostedRoom";
+                    };
+                    readonly label: {
+                        readonly $ref: "#/$defs/RoomLabel";
+                    };
+                    readonly status: {
+                        readonly $ref: "#/$defs/RoomStatus";
+                    };
+                    readonly description: {
+                        readonly $ref: "#/$defs/RoomDescription";
+                        readonly description: "Absent when the room has none.";
+                    };
+                    readonly tags: {
+                        readonly $ref: "#/$defs/RoomTags";
+                        readonly description: "Absent or empty when the room has none.";
+                    };
+                    readonly storageConfig: {
+                        readonly $ref: "#/$defs/StorageConfigId";
+                        readonly description: "The storage config receiving the room's new uploads.";
+                    };
+                    readonly admitted: {
+                        readonly type: "integer";
+                        readonly minimum: 0;
+                        readonly description: "Members in state `admitted`.";
+                    };
+                    readonly offered: {
+                        readonly type: "integer";
+                        readonly minimum: 0;
+                        readonly description: "Offers not yet accepted or withdrawn.";
+                    };
+                    readonly suspended: {
+                        readonly type: "integer";
+                        readonly minimum: 0;
+                        readonly description: "Admissions in state `suspended`: withdrawn while the room was archived with `noAccess`, and restored when it leaves that state. Absent when zero.";
+                    };
+                    readonly ownerAuthorityValidUntil: {
+                        readonly type: "string";
+                        readonly format: "date-time";
+                        readonly description: "When the community's own `admin` authority over the room expires. A room whose owner's authority lapses can no longer advance its epoch, admit or remove; a community SHOULD renew it well before.";
+                    };
+                    readonly createdBy: {
+                        readonly type: "string";
+                        readonly pattern: "^did:";
+                        readonly maxLength: 2048;
+                        readonly description: "The administrator who created it.";
+                    };
+                    readonly detailsUpdatedAt: {
+                        readonly type: "string";
+                        readonly format: "date-time";
+                        readonly description: "When `label`, `description` or `tags` last changed. Absent until the first change after creation. Distinct from `room.updatedAt`, which is the host record's and moves with the room's epoch and lifecycle.";
+                    };
+                    readonly detailsUpdatedBy: {
+                        readonly type: "string";
+                        readonly pattern: "^did:";
+                        readonly maxLength: 2048;
+                        readonly description: "The administrator who made that change. Present exactly when `detailsUpdatedAt` is. The earlier values and who set them are in the community's audit trail, not here.";
+                    };
+                };
+            };
+            readonly RoomTags: {
+                readonly title: "RoomTags";
+                readonly type: "array";
+                readonly maxItems: 8;
+                readonly uniqueItems: true;
+                readonly items: {
+                    readonly $ref: "#/$defs/RoomTag";
+                };
+                readonly description: "The room's tags, at most eight, as a set: order carries no meaning. An empty list means the room has none — a tag grants nothing, so empty has no more dangerous reading.";
+            };
+            readonly RoomTag: {
+                readonly title: "RoomTag";
+                readonly type: "string";
+                readonly minLength: 1;
+                readonly maxLength: 32;
+                readonly pattern: "^[a-z0-9][a-z0-9-]{0,31}$";
+                readonly description: "A short identifier an administrator files a community-owned room under — `board`, `working-group`, `finance` — so the room list can be filtered. Lower-case letters, digits and hyphens, starting with a letter or digit. Owner-side tracking metadata for holders of `vtc.rooms.manage` only: never shown to members, never sent on the room's host path, and it confers nothing.";
+            };
+            readonly RoomDescription: {
+                readonly title: "RoomDescription";
+                readonly type: "string";
+                readonly minLength: 1;
+                readonly maxLength: 1000;
+                readonly description: "What the room is for, in a sentence or a short paragraph, written by an administrator: shown to administrators holding `vtc.rooms.manage` and to the members the room is offered to. Plain text — a consumer renders it as text, never as markup. Like `RoomLabel`, it is the community's own record as the room's owner: not part of the room's identity and never in anything a room's host can read. From `vtc/rooms/community/create` 0.3 and `vtc/rooms/community/update` 0.2 the community also writes it, through its own VTA, as the `description` of the room's own profile (`RoomProfile` in rooms/_shared), sealed inside the room for its members; earlier versions keep it out of the room altogether. It MUST NOT carry personal data or a credential, and a reader MUST NOT treat it as instructions.";
+            };
+            readonly RoomStatus: {
+                readonly title: "RoomStatus";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["state"];
+                readonly description: "A room's state in its owner's lifecycle, and what that state needs to be understood.";
+                readonly properties: {
+                    readonly state: {
+                        readonly $ref: "#/$defs/RoomState";
+                    };
+                    readonly access: {
+                        readonly $ref: "#/$defs/ArchiveAccess";
+                        readonly description: "Present exactly when `state` is `archived` or `removalScheduled`; always `noAccess` for `removalScheduled`.";
+                    };
+                    readonly changedAt: {
+                        readonly type: "string";
+                        readonly format: "date-time";
+                        readonly description: "When the room entered `state`. Absent for a room that has been `active` since it was created.";
+                    };
+                    readonly changedBy: {
+                        readonly type: "string";
+                        readonly pattern: "^did:";
+                        readonly maxLength: 2048;
+                        readonly description: "The administrator whose act put the room in `state`. Present exactly when `changedAt` is, except for `purging` and `removed` reached when a grace period ended, which no one did at that moment: then the administrator who scheduled the removal. The reason each gave is in the community's audit trail, not here.";
+                    };
+                    readonly purgeAt: {
+                        readonly type: "string";
+                        readonly format: "date-time";
+                        readonly description: "Present when `state` is `removalScheduled`: when the grace period ends and the purge begins. Kept when `state` is `purging` or `removed`, as when it became due.";
+                    };
+                    readonly purge: {
+                        readonly $ref: "#/$defs/PurgeProgress";
+                        readonly description: "Present exactly when `state` is `purging`.";
+                    };
+                    readonly removedAt: {
+                        readonly type: "string";
+                        readonly format: "date-time";
+                        readonly description: "Present exactly when `state` is `removed`: when the last of the room's content was deleted.";
+                    };
+                    readonly restoring: {
+                        readonly type: "integer";
+                        readonly minimum: 1;
+                        readonly description: "Admissions still `suspended` that the community is restoring, after the room left `noAccess` — the room re-issues each member's credentials and the member collects them as a renewal. Absent when there are none.";
+                    };
+                    readonly pendingChange: {
+                        readonly $ref: "#/$defs/PendingChange";
+                        readonly description: "Present while a change of state is begun and not finished.";
+                    };
+                };
+            };
+            readonly PendingChange: {
+                readonly title: "PendingChange";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["state", "beganAt"];
+                readonly description: "A change of state the community began and has not finished, because a step at its VTA did not complete — most often a room reset the host accepted, after which the community's own credentials must be re-issued before it can act on the room again. `RoomStatus.state` stays what it was until the change finishes, but what the room's host enforces may already be the new state's: a pending move to `noAccess` means members' credentials may already be refused. The community finishes it by itself, retrying with backoff, and repeating the request that began it finishes it too; nothing else changes the room until it is finished.";
+                readonly properties: {
+                    readonly state: {
+                        readonly $ref: "#/$defs/RoomState";
+                        readonly description: "The state the change leads to.";
+                    };
+                    readonly access: {
+                        readonly $ref: "#/$defs/ArchiveAccess";
+                        readonly description: "The access it leads to, where `state` has one.";
+                    };
+                    readonly beganAt: {
+                        readonly type: "string";
+                        readonly format: "date-time";
+                    };
+                    readonly lastError: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                        readonly maxLength: 500;
+                        readonly description: "What stopped the last attempt, for an administrator. Plain text; it names no member and carries no credential.";
+                    };
+                };
+            };
+            readonly ArchiveAccess: {
+                readonly title: "ArchiveAccess";
+                readonly type: "string";
+                readonly enum: readonly ["readOnly", "noAccess"];
+                readonly description: "What an archived room's members may still do. `readOnly`: their credentials stand and they keep reading what the room holds; the room's host refuses every write, upload and curation from a member. `noAccess`: every credential the room issued before the archival is withdrawn at its host — a room reset — so the host refuses every member's every task; the content is kept intact, and each withdrawn admission is `suspended`, restored when the room is unarchived or made `readOnly`. Neither recalls what a member already read or saved, and on a sealed tier neither removes anyone from the room's group.";
+            };
+            readonly RoomState: {
+                readonly title: "RoomState";
+                readonly type: "string";
+                readonly enum: readonly ["active", "archived", "removalScheduled", "purging", "removed"];
+                readonly description: "Where a room the community owns stands in its owner's lifecycle — distinct from `HostedRoom.lifecycle`, which is the host's clock (`live`, `lapsed`, `dormant`, `reclaimable`) and is computed from the room's epoch, never set. `active`: open to change. `archived`: closed to change by an administrator — no admissions, and the room's host accepts no writes from its members; what members may still do is `ArchiveAccess`. Reversible with vtc/rooms/community/unarchive. `removalScheduled`: an administrator removed the room with a grace period; it admits nobody and its content is kept until `purgeAt`, and vtc/rooms/community/removal/cancel returns it to `archived`. `purging`: the grace period ended (or there was none) and the community is deleting the room's content from its host and storage; not reversible. `removed`: the content is gone; the community keeps only this record of the room, for its history.";
+            };
+            readonly PurgeProgress: {
+                readonly title: "PurgeProgress";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["attempts"];
+                readonly description: "How a purge is going. A purge deletes at the room's host and at each storage config holding its files, and some of those are remote; a step that fails is retried with backoff until it succeeds, and nothing is reported removed until every step has.";
+                readonly properties: {
+                    readonly attempts: {
+                        readonly type: "integer";
+                        readonly minimum: 0;
+                        readonly description: "Passes made so far; 0 until the first.";
+                    };
+                    readonly lastAttemptAt: {
+                        readonly type: "string";
+                        readonly format: "date-time";
+                    };
+                    readonly nextAttemptAt: {
+                        readonly type: "string";
+                        readonly format: "date-time";
+                        readonly description: "When the next pass is due. Absent while one runs.";
+                    };
+                    readonly lastError: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                        readonly maxLength: 500;
+                        readonly description: "What stopped the last pass, for an administrator. Present only after a pass failed. Plain text, written by the community; it names no member and carries no credential.";
+                    };
+                };
+            };
+            readonly RoomLabel: {
+                readonly title: "RoomLabel";
+                readonly type: "string";
+                readonly minLength: 1;
+                readonly maxLength: 128;
+                readonly description: "A name for the room, chosen by an administrator: shown to administrators and to the members a room is offered to. Not part of the room's identity and never in anything a room's host can read. From `vtc/rooms/community/create` 0.3 and `vtc/rooms/community/update` 0.2 the community also writes it, through its own VTA, as the `name` of the room's own profile (`RoomProfile` in rooms/_shared), sealed inside the room for its members; earlier versions keep it out of the room altogether. MUST NOT carry personal data.";
+            };
+            readonly StorageConfigId: {
+                readonly title: "StorageConfigId";
+                readonly type: "string";
+                readonly minLength: 1;
+                readonly maxLength: 64;
+                readonly pattern: "^[a-z0-9](?:[a-z0-9-]{0,62}[a-z0-9])?$";
+                readonly description: "A storage config's identifier, chosen by the administrator who creates it and immutable thereafter: lowercase letters, digits and inner hyphens, at most 64 characters (`eu-s3-primary`, `walrus-main`). Unique within the community. Never reused after a config is retired, because blobs name their config by this value.";
+            };
+            readonly HostedRoom: {
+                readonly title: "HostedRoom";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["roomId", "ownerDid", "visibility", "retentionPolicy", "epoch", "lifecycle", "retentionDays", "createdAt", "updatedAt"];
+                readonly description: "One room, as its host holds it — member for member the `HostedRoom` of vtc/rooms/list/0.2, which defines it inside its own payload schema. Nothing derived from the room's contents, and no member list: the host has none.";
+                readonly properties: {
+                    readonly roomId: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                        readonly maxLength: 512;
+                    };
+                    readonly ownerDid: {
+                        readonly type: "string";
+                        readonly pattern: "^did:";
+                        readonly maxLength: 2048;
+                    };
+                    readonly visibility: {
+                        readonly $ref: "#/$defs/Visibility";
+                    };
+                    readonly retentionPolicy: {
+                        readonly $ref: "#/$defs/RetentionPolicy";
+                    };
+                    readonly epoch: {
+                        readonly type: "integer";
+                        readonly minimum: 0;
+                    };
+                    readonly lifecycle: {
+                        readonly type: "string";
+                        readonly enum: readonly ["live", "lapsed", "dormant", "reclaimable"];
+                    };
+                    readonly epochExpiresAt: {
+                        readonly type: "string";
+                        readonly format: "date-time";
+                    };
+                    readonly retentionDays: {
+                        readonly type: "integer";
+                        readonly minimum: 0;
+                    };
+                    readonly mirrorOf: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                        readonly maxLength: 2048;
+                    };
+                    readonly createdAt: {
+                        readonly type: "string";
+                        readonly format: "date-time";
+                    };
+                    readonly updatedAt: {
+                        readonly type: "string";
+                        readonly format: "date-time";
+                    };
+                };
+            };
+            readonly RetentionPolicy: {
+                readonly title: "RetentionPolicy";
+                readonly type: "string";
+                readonly enum: readonly ["chained", "fromJoin"];
+                readonly description: "Whether a room keeps its history readable across a membership change, fixed at creation and immutable thereafter — like `Visibility`, and for the same reason: the rungs of an epoch key chain either exist for an epoch or they do not, and no later change of mind can seal key material that was never sealed or unseal what was already severed. `chained`: each advance produces an `EpochLink`, so every member reads the room's whole retained history however long they have been in it — what a **library** wants, at the cost of post-compromise security for record content, since a compromised current key then reaches every retained epoch. `fromJoin`: no rungs are produced, so a member reads only from the epoch their group state is at — what a **stream** wants, and what a room under a strict forward-secrecy obligation wants, at the cost that a joining member finds an empty-looking room and nobody can reread a record once their group state has moved past the epoch it was sealed under. Absent means `chained`; see the prose on why the absent case is the readable one.";
+                readonly $comment: "Deliberately no JSON Schema `default`. A declared default is materialised by the generated bindings — the member becomes non-optional with a serde default — so an absent value would reappear as an explicit one on re-serialisation and break round-trip idempotence for every document written before this member existed. The meaning of absence is stated in prose, where a binding cannot act on it.";
+            };
+            readonly Visibility: {
+                readonly title: "Visibility";
+                readonly type: "string";
+                readonly enum: readonly ["open", "attributed", "private"];
+                readonly description: "How much of a room its host can see, fixed at creation and immutable thereafter. `open`: records are cleartext, searchable and fully audited. `attributed`: record content is sealed, and the host still learns which member acted. `private`: content is sealed and membership is presented in zero knowledge, so the host verifies that a member acted without learning which. Immutable because a downgrade cannot un-see cleartext and an upgrade would protect only what came after while presenting as though it protected everything.";
+            };
+        };
+    };
+};
+//# sourceMappingURL=payload.d.ts.map