@openvtc/trust-tasks 0.28.7 → 0.28.9

package/CHANGELOG.md

@@ -11,6 +11,163 @@ The package versions over **its own API** — what a consumer compiles against
 not over `SPEC.md`. Below 1.0 a breaking change bumps the leading non-zero
 component.
 
+## 0.28.9 — 2026-11-03
+
+
+### Added
+
+- **vtc/networks**: A community's side of Verifiable Trust Network membership (#1014)
+
+A Verifiable Trust Network (VTN) curates communities and networks
+  (dtgwg-vti-spec 11a-vtn.md, VTI-VTN-001..063). Listing is one-sided;
+  membership is the listed party's acknowledgement. These tasks are the
+  community's side of that relationship.
+
+  - vtc/networks/list, vtc/networks/show (0.1): the community's network
+    memberships, with the credentials that evidence each state.
+  - vtc/networks/join (0.1): accept a listing. The community checks the
+    network at the URL is the DID the administrator named, verifies the
+    listing, registers groups for the network's roles (required ones first),
+    signs the acknowledgement as itself and verifies the grant.
+  - vtc/networks/repudiate (0.1): reject a listing; the network publishes
+    the repudiation beside it (VTI-VTN-012).
+  - vtc/networks/leave (0.1): depart by repudiating the grant (VTI-VTN-053).
+  - vtc/networks/groups/register (0.1): nominate a community group to serve
+    a network role. The community is the registrant; the network learns
+    the group's DID, never its members.
+  - vtc/networks/notice (0.1): the community passes a network broadcast on
+    to members of the registered group, carrying the network's signed
+    envelope unchanged. Distinct from notifications/notify, which carries
+    a reference and none of the content (VTI-NTF-003).
+  - vtc/networks/evidence (0.1): a member gets the registration and
+    acceptance linking their group to a network, to present for a network
+    room pass.
+
+  The shared NetworkMembership, RegisteredGroup and RoleAssignment records
+  are in vtc/_shared/0.6/network-membership.schema.json. Rust, TypeScript,
+  Go and Dart bindings are regenerated.
+
+- **notifications**: A generic notification family — notify, relay, and the VTA's list, show and dismiss (#1012)
+
+notifications/notify/0.1 tells the party a DID names (an individual,
+  group, community or network) that a thing exists it, or those it stands
+  for, may take part in: where it is held, its identifier there, the task
+  that opens it, and the audience it concerns, with a kind from an
+  extensible registry (`election` registered) and nothing of the thing's
+  content. Signed by the originator; deduplicated by issuer +
+  notificationId, with revision for change and withdrawal; the receipt is
+  the same whatever the recipient did.
+
+  notifications/relay/0.1 lets the addressee pass it on, carrying the
+  received document whole and opaque so every signed member survives; the
+  recipient verifies every layer, to at most four relays.
+
+  vta/notifications/list, show and dismiss (0.1) are the principal's view
+  of what its VTA holds, per context; show returns the delivering document
+  as received.
+
+  Implements VTI-NTF-001 – VTI-NTF-063 (trustoverip/dtgwg-vti-spec#91).
+
+- **voting**: A member-party election's ticket claim says nothing to an unproven claimant, and a presentation outage is indeterminate whatever the election (vtc/elections/tickets/issue/0.3, vtc/elections/show/0.6, vta/pcs/voter/register/0.5, vta/pcs/voter/read/0.6) (#1011)
+
+Follows trustoverip/dtgwg-vti-spec#90 (VTI-VOT-015 - VTI-VOT-018,
+  VTI-VOT-025).
+
+- **voting**: An election put to a member party's members is shown only to a reader who proves that membership (vtc/elections/show/0.5, vtc/elections/list/0.5, vta/pcs/voter/read/0.5) (#1010)
+
+Follows trustoverip/dtgwg-vti-spec VTI-VOT-015/016. Under show/0.4 and
+  list/0.4, an election whose credential roll names a member party was shown
+  to any caller, so its title, questions and options were public.
+
+  - vtc/elections/show/0.5 (extends 0.4): optional `presentation` in the form
+    tickets/issue/0.2 carries (nonce = document id, domain/aud = community,
+    in a document the holder signs). Considered only for a member-party
+    election the caller cannot otherwise see, in a signed document within the
+    acceptance window and used once; checked as tickets/issue/0.2 item 5.2 to
+    5.4. Every failure, indeterminate included, is electionUnknown. Never a
+    refusal for carrying one. maxDocumentBytes.request 98304.
+  - vtc/elections/list/0.5 (extends 0.4): prose only. A member-party
+    election is listed only to administrators and the party itself; to
+    everyone else it is omitted, with no stub. A list never carries a
+    presentation.
+  - vta/pcs/voter/read/0.5: signs list/0.5 and show/0.5; optional
+    `membershipCredential` (only with read = show, a dependentSchemas rule),
+    which the engine presents from the vault in the show it signs. New code
+    membershipCredentialUnusable.
+  - CONVENTIONS.md: a Member-party election term, and the §4 row for
+    list/show.
+
+- **voting**: A credential roll, proven when the ticket is claimed (voting/_shared/0.4, vtc/elections/tickets/issue/0.2) (#1008)
+
+* feat(voting): a credential roll, proven when the ticket is claimed (voting/_shared/0.4, vtc/elections/tickets/issue/0.2)
+
+  Follows trustoverip/dtgwg-vti-spec#88 (VTI-VOT-021, VTI-VOT-022,
+  VTI-VOT-025 – VTI-VOT-028, VTI-VOT-090).
+
+  voting/_shared/0.4 appends `credential` to the roll rule, with `roll.memberOf`
+  naming exactly one DID: the community, one of its groups, or a community or
+  network it recognises. memberOf is required with `credential` and refused with
+  every other rule, and `listed` is refused with `credential` (dependentSchemas,
+  which the generators read as an optional member). Disclosure gains an optional
+  RollCredentialDisclosure saying whose credential counts (VTI-VOT-090).
+
+  Every task carrying the manifest takes a new version re-pinned to 0.4, and the
+  signed reads name the newer reads. vtc/elections/tickets/issue/0.2 (extends 0.1)
+  carries the membership presentation, bound to the document's id and the
+  community, checked at issuance, with five appended error codes.
+  vtc/elections/create/0.5 refuses an untrusted memberOf (rollUntrusted,
+  rollIndeterminate). vta/pcs/voter/register/0.4 presents a vault credential in
+  the ticket document it signs. vtc/elections/list/0.4 (extends 0.3) says who sees
+  an election under a credential roll.
+
+## 0.28.8 — 2026-11-02
+
+
+### Added
+
+- **vtc/rooms/community**: Archive, unarchive, remove and removal/cancel 0.1; get/list 0.4, members/add+list 0.2, memberships/list 0.2 (#1006)
+
+A community could create a room it owns and change its members, but never
+  close or end one. This adds an owner's lifecycle for a community-owned room,
+  distinct from the host's computed clock (live/lapsed/dormant/reclaimable):
+
+  - active
+  - archived, with an access: readOnly (members keep reading; the host refuses
+    every write, upload and curation) or noAccess (the community's VTA resets
+    the room — one `room` withdrawal — and re-issues the community's own
+    credentials; each admitted member becomes `suspended`). Open offers are
+    withdrawn either way. Reversible: vtc/rooms/community/unarchive restores
+    suspended members in the background by re-issuing their membership and
+    authority, collected as an offers/list renewal.
+  - removalScheduled: only from archived (removal is the second of two
+    deliberate acts). The room is noAccess and its content kept until purgeAt,
+    after a grace period (graceDays, or the community's configured default;
+    30 days in the reference implementation). vtc/rooms/community/removal/cancel
+    returns it to archived/noAccess.
+  - purging: graceDays 0, or the grace period ended. Deletes every record,
+    epoch link, commit, revocation list, file in every storage config, transfer
+    and the host record; drops kept credentials and owed removals; unbinds
+    groups; stops serving a serverless DID log; SHOULD have the VTA delete the
+    room's DID (a refusal there does not hold the purge). Retried with backoff,
+    progress in status.purge, never reversible.
+  - removed: a tombstone with the host record as it last stood.
+
+  A change part-way through at the VTA (a reset the host accepted before the
+  community's own credentials were re-issued) is reported as
+  status.pendingChange and finished by the community.
+
+  New shared definitions in vtc/_shared/0.5 (RoomState, ArchiveAccess,
+  RoomStatus, PendingChange, PurgeProgress, CommunityRoomV3, MemberStateV2,
+  RoomMemberV2, RoomMembershipV2). get/list 0.4 carry status (list gains a
+  `states` filter; removed rooms only when asked for); members/add 0.2 refuses
+  a room that is not active (wrongState); members/list 0.2 and
+  memberships/list 0.2 add `suspended`, and memberships/list the room's own
+  state so member surfaces can say read-only, closed or going away.
+  rooms/keys/act 0.10 adds vtc/rooms/memberships/list/0.2 to its table so a
+  member's key holder can sign it.
+
+  Rust, TS, Go and Dart bindings regenerated.
+
 ## 0.28.7 — 2026-11-01
 
 

package/dist/_extends.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"_extends.d.ts","sourceRoot":"","sources":["../src/_extends.ts"],"names":[],"mappings":"AAAA,wEAAwE;AAExE;;;;;GAKG;AACH,eAAO,MAAM,mBAAmB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAQ/D,CAAC"}
+{"version":3,"file":"_extends.d.ts","sourceRoot":"","sources":["../src/_extends.ts"],"names":[],"mappings":"AAAA,wEAAwE;AAExE;;;;;GAKG;AACH,eAAO,MAAM,mBAAmB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAc/D,CAAC"}

package/dist/_extends.js

@@ -6,6 +6,7 @@
  * `extendsChain` follows them transitively.
  */
 export const EXTENDS_BY_TYPE_URI = Object.freeze({
+    "https://trusttasks.org/spec/rooms/keys/act/0.10": "0.9",
     "https://trusttasks.org/spec/rooms/keys/act/0.9": "0.8",
     "https://trusttasks.org/spec/rooms/records/put/0.4": "0.3",
     "https://trusttasks.org/spec/vta/did-templates/create/3.2": "3.1",
@@ -13,5 +14,10 @@ export const EXTENDS_BY_TYPE_URI = Object.freeze({
     "https://trusttasks.org/spec/vta/did-templates/list/3.2": "3.1",
     "https://trusttasks.org/spec/vta/did-templates/update/3.2": "3.1",
     "https://trusttasks.org/spec/vta/webvh/dids/update/1.1": "1.0",
+    "https://trusttasks.org/spec/vtc/elections/list/0.4": "0.3",
+    "https://trusttasks.org/spec/vtc/elections/list/0.5": "0.4",
+    "https://trusttasks.org/spec/vtc/elections/show/0.5": "0.4",
+    "https://trusttasks.org/spec/vtc/elections/show/0.6": "0.5",
+    "https://trusttasks.org/spec/vtc/elections/tickets/issue/0.2": "0.1",
 });
 //# sourceMappingURL=_extends.js.map

package/dist/_extends.js.map

@@ -1 +1 @@
-{"version":3,"file":"_extends.js","sourceRoot":"","sources":["../src/_extends.ts"],"names":[],"mappings":"AAAA,wEAAwE;AAExE;;;;;GAKG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAqC,MAAM,CAAC,MAAM,CAAC;IACjF,gDAAgD,EAAE,KAAK;IACvD,mDAAmD,EAAE,KAAK;IAC1D,0DAA0D,EAAE,KAAK;IACjE,uDAAuD,EAAE,KAAK;IAC9D,wDAAwD,EAAE,KAAK;IAC/D,0DAA0D,EAAE,KAAK;IACjE,uDAAuD,EAAE,KAAK;CAC/D,CAAC,CAAC"}
+{"version":3,"file":"_extends.js","sourceRoot":"","sources":["../src/_extends.ts"],"names":[],"mappings":"AAAA,wEAAwE;AAExE;;;;;GAKG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAqC,MAAM,CAAC,MAAM,CAAC;IACjF,iDAAiD,EAAE,KAAK;IACxD,gDAAgD,EAAE,KAAK;IACvD,mDAAmD,EAAE,KAAK;IAC1D,0DAA0D,EAAE,KAAK;IACjE,uDAAuD,EAAE,KAAK;IAC9D,wDAAwD,EAAE,KAAK;IAC/D,0DAA0D,EAAE,KAAK;IACjE,uDAAuD,EAAE,KAAK;IAC9D,oDAAoD,EAAE,KAAK;IAC3D,oDAAoD,EAAE,KAAK;IAC3D,oDAAoD,EAAE,KAAK;IAC3D,oDAAoD,EAAE,KAAK;IAC3D,6DAA6D,EAAE,KAAK;CACrE,CAAC,CAAC"}