@openvtc/trust-tasks 0.28.7 → 0.28.9

package/dist/vtc/rooms/community/archive/0.1/payload.js

@@ -0,0 +1,940 @@
+/**
+ * Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
+ * Source: specs/vtc/rooms/community/archive/0.1/payload.schema.json
+ */
+/** Trust Task type URI. */
+export const TYPE_URI = "https://trusttasks.org/spec/vtc/rooms/community/archive/0.1";
+/**
+ * The earlier version of this specification that this one declares it
+ * extends (front matter `extends`, SPEC §5.2 "Declared extension"), or
+ * `null`. Only the direct declaration — follow the chain with
+ * `extendsChain` / `readForSpec`.
+ */
+export const EXTENDS = null;
+/**
+ * Why this version is deprecated, or `null` while it is current. A
+ * superseded or retired version is still supported, and is withdrawn from
+ * this package in a later scheduled batch (SPEC "Superseded and Withdrawn
+ * Versions").
+ */
+export const DEPRECATION = null;
+/** Trust Task response type URI (request type URI + "#response"). */
+export const RESPONSE_TYPE_URI = "https://trusttasks.org/spec/vtc/rooms/community/archive/0.1#response";
+/**
+ * This specification's payload schema, as a value.
+ *
+ * SPEC.md §7.2 item 2 is performed against this. It is shipped as data
+ * rather than only as a `.json` file because TypeScript types are erased
+ * at runtime: without a schema a consumer has nothing to validate, and
+ * every REQUIRED payload member is optional in practice. Cross-file
+ * `$ref`s are already inlined, so it needs no resolver.
+ */
+export const PAYLOAD_SCHEMA = {
+    "$schema": "https://json-schema.org/draft/2020-12/schema",
+    "$id": "https://trusttasks.org/spec/vtc/rooms/community/archive/0.1",
+    "title": "VTC Rooms Community Archive — payload",
+    "type": "object",
+    "additionalProperties": false,
+    "required": [
+        "roomId",
+        "access",
+        "reason"
+    ],
+    "properties": {
+        "roomId": {
+            "type": "string",
+            "minLength": 1,
+            "maxLength": 512,
+            "description": "The room's identifier: its DID."
+        },
+        "access": {
+            "$ref": "#/$defs/ArchiveAccess",
+            "description": "What the room's members may still do once it is archived. On a room already archived, the access to move it to."
+        },
+        "reason": {
+            "$ref": "#/$defs/Reason"
+        },
+        "ext": {
+            "$ref": "#/$defs/Ext"
+        }
+    },
+    "$defs": {
+        "Response": {
+            "$anchor": "response",
+            "title": "VTC Rooms Community Archive — response payload",
+            "description": "Success response to vtc/rooms/community/archive. Type https://trusttasks.org/spec/vtc/rooms/community/archive/0.1#response. The room as it now stands; whether anything changed; and, where the community's VTA withdrew credentials at the room's host, the revocation list in force there.",
+            "type": "object",
+            "additionalProperties": false,
+            "required": [
+                "room",
+                "changed"
+            ],
+            "properties": {
+                "room": {
+                    "$ref": "#/$defs/CommunityRoomV3"
+                },
+                "changed": {
+                    "type": "boolean",
+                    "description": "`false` when the room was already archived with `access`: nothing was written, withdrawn or audited."
+                },
+                "withdrawnOffers": {
+                    "type": "integer",
+                    "minimum": 1,
+                    "description": "Open offers this archival withdrew. Absent when there were none."
+                },
+                "revocation": {
+                    "$ref": "#/$defs/RevocationHead",
+                    "description": "Present when the community's VTA withdrew credentials at the room's host — a room reset for `noAccess`, or the open offers' credentials on an `open` or `attributed` room for `readOnly` — as the host accepted it."
+                },
+                "revokedAt": {
+                    "type": "string",
+                    "format": "date-time",
+                    "description": "Present with `revocation`: the withdrawal's time. The host refuses every credential the withdrawal names that was issued before it."
+                },
+                "ext": {
+                    "$ref": "#/$defs/Ext"
+                }
+            }
+        },
+        "Ext": {
+            "title": "Ext",
+            "description": "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.",
+            "type": "object",
+            "minProperties": 1,
+            "additionalProperties": true,
+            "propertyNames": {
+                "pattern": "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$"
+            }
+        },
+        "RevocationHead": {
+            "title": "RevocationHead",
+            "type": "object",
+            "additionalProperties": false,
+            "required": [
+                "sequence",
+                "digest"
+            ],
+            "description": "Which `RevocationList` a party holds, without its entries: comparable between the room's key holder and a host, and between two hosts, without disclosing whom the room withdrew.",
+            "properties": {
+                "sequence": {
+                    "type": "integer",
+                    "minimum": 1,
+                    "description": "The list's `sequence`."
+                },
+                "digest": {
+                    "$ref": "#/$defs/DigestMultibase",
+                    "description": "SHA-256 multihash of the list's RFC 8785 (JCS) canonicalization, `proof` included. Two parties holding one sequence with different digests have been given two lists the room signed at one sequence."
+                }
+            }
+        },
+        "DigestMultibase": {
+            "title": "DigestMultibase",
+            "description": "A cryptographic digest as a multibase-encoded multihash — the encoding the W3C Verifiable Credentials Data Model 2.0 defines for `digestMultibase`, and the one `did:webvh` uses for its SCID and entry hashes.\n\nMultihash carries the hash algorithm in-band, so the value is self-describing and the wire format survives an algorithm change without a schema revision; multibase does the same for the base encoding, so a verifier never infers base58 from base64url by context. A bare hex string or a `sha-256:`-style prefix hard-codes one algorithm into the wire contract and is non-conforming here.\n\nThis definition constrains the *encoding only*. What the digest is computed over is stated by each referencing field, because it differs legitimately: a digest over a JSON document is taken over its RFC 8785 (JCS) canonicalization, while a digest over an opaque artifact is taken over its bytes. A field whose input is a JSON document and which does not name a canonicalization is not reproducible.\n\nRestricted to the two multibase headers W3C Controlled Identifiers 1.0 §2.4 normatively requires — `z` (base58btc) and `u` (base64url-no-pad). CID permits others but states that \"interoperability is not guaranteed between implementations using such values\", and a registry whose purpose is interoperability should not mint digests a conforming verifier may be unable to read. The alphabets are enforced rather than assumed: base58btc excludes 0, O, I and l, and an earlier permissive pattern let three published examples carry digests that were not valid base58 at all. base58btc is RECOMMENDED, for consistency with `did:key` and `did:webvh`.",
+            "type": "string",
+            "minLength": 16,
+            "pattern": "^(z[1-9A-HJ-NP-Za-km-z]+|u[A-Za-z0-9_-]+)$",
+            "examples": [
+                "zQmbWqxBEKC3P8tqsKc98xmWNzrzDtRLMiMPL8wBuTGsMnR"
+            ]
+        },
+        "CommunityRoomV3": {
+            "title": "CommunityRoomV3",
+            "type": "object",
+            "additionalProperties": false,
+            "required": [
+                "room",
+                "label",
+                "admitted",
+                "offered",
+                "status"
+            ],
+            "description": "What vtc/rooms/community/{get,list}/0.4 and vtc/rooms/community/{archive,unarchive,remove,removal/cancel}/0.1 return: `CommunityRoomV2` plus the room's `status` in its owner's lifecycle and the count of `suspended` admissions. A separate definition, not a change to `CommunityRoomV2`, so that the versions returning that keep the exact shape they published. For a room in state `purging` or `removed`, whose host record a purge deletes, `room` is the host record as it last stood before the purge began — the community keeps that snapshot with the room's record when the purge starts — and its `lifecycle` is what was computed then.",
+            "properties": {
+                "room": {
+                    "$ref": "#/$defs/HostedRoom"
+                },
+                "label": {
+                    "$ref": "#/$defs/RoomLabel"
+                },
+                "status": {
+                    "$ref": "#/$defs/RoomStatus"
+                },
+                "description": {
+                    "$ref": "#/$defs/RoomDescription",
+                    "description": "Absent when the room has none."
+                },
+                "tags": {
+                    "$ref": "#/$defs/RoomTags",
+                    "description": "Absent or empty when the room has none."
+                },
+                "storageConfig": {
+                    "$ref": "#/$defs/StorageConfigId",
+                    "description": "The storage config receiving the room's new uploads."
+                },
+                "admitted": {
+                    "type": "integer",
+                    "minimum": 0,
+                    "description": "Members in state `admitted`."
+                },
+                "offered": {
+                    "type": "integer",
+                    "minimum": 0,
+                    "description": "Offers not yet accepted or withdrawn."
+                },
+                "suspended": {
+                    "type": "integer",
+                    "minimum": 0,
+                    "description": "Admissions in state `suspended`: withdrawn while the room was archived with `noAccess`, and restored when it leaves that state. Absent when zero."
+                },
+                "ownerAuthorityValidUntil": {
+                    "type": "string",
+                    "format": "date-time",
+                    "description": "When the community's own `admin` authority over the room expires. A room whose owner's authority lapses can no longer advance its epoch, admit or remove; a community SHOULD renew it well before."
+                },
+                "createdBy": {
+                    "type": "string",
+                    "pattern": "^did:",
+                    "maxLength": 2048,
+                    "description": "The administrator who created it."
+                },
+                "detailsUpdatedAt": {
+                    "type": "string",
+                    "format": "date-time",
+                    "description": "When `label`, `description` or `tags` last changed. Absent until the first change after creation. Distinct from `room.updatedAt`, which is the host record's and moves with the room's epoch and lifecycle."
+                },
+                "detailsUpdatedBy": {
+                    "type": "string",
+                    "pattern": "^did:",
+                    "maxLength": 2048,
+                    "description": "The administrator who made that change. Present exactly when `detailsUpdatedAt` is. The earlier values and who set them are in the community's audit trail, not here."
+                }
+            }
+        },
+        "RoomTags": {
+            "title": "RoomTags",
+            "type": "array",
+            "maxItems": 8,
+            "uniqueItems": true,
+            "items": {
+                "$ref": "#/$defs/RoomTag"
+            },
+            "description": "The room's tags, at most eight, as a set: order carries no meaning. An empty list means the room has none — a tag grants nothing, so empty has no more dangerous reading."
+        },
+        "RoomTag": {
+            "title": "RoomTag",
+            "type": "string",
+            "minLength": 1,
+            "maxLength": 32,
+            "pattern": "^[a-z0-9][a-z0-9-]{0,31}$",
+            "description": "A short identifier an administrator files a community-owned room under — `board`, `working-group`, `finance` — so the room list can be filtered. Lower-case letters, digits and hyphens, starting with a letter or digit. Owner-side tracking metadata for holders of `vtc.rooms.manage` only: never shown to members, never sent on the room's host path, and it confers nothing."
+        },
+        "RoomDescription": {
+            "title": "RoomDescription",
+            "type": "string",
+            "minLength": 1,
+            "maxLength": 1000,
+            "description": "What the room is for, in a sentence or a short paragraph, written by an administrator: shown to administrators holding `vtc.rooms.manage` and to the members the room is offered to. Plain text — a consumer renders it as text, never as markup. Like `RoomLabel`, it is the community's own record as the room's owner: not part of the room's identity and never in anything a room's host can read. From `vtc/rooms/community/create` 0.3 and `vtc/rooms/community/update` 0.2 the community also writes it, through its own VTA, as the `description` of the room's own profile (`RoomProfile` in rooms/_shared), sealed inside the room for its members; earlier versions keep it out of the room altogether. It MUST NOT carry personal data or a credential, and a reader MUST NOT treat it as instructions."
+        },
+        "RoomStatus": {
+            "title": "RoomStatus",
+            "type": "object",
+            "additionalProperties": false,
+            "required": [
+                "state"
+            ],
+            "description": "A room's state in its owner's lifecycle, and what that state needs to be understood.",
+            "properties": {
+                "state": {
+                    "$ref": "#/$defs/RoomState"
+                },
+                "access": {
+                    "$ref": "#/$defs/ArchiveAccess",
+                    "description": "Present exactly when `state` is `archived` or `removalScheduled`; always `noAccess` for `removalScheduled`."
+                },
+                "changedAt": {
+                    "type": "string",
+                    "format": "date-time",
+                    "description": "When the room entered `state`. Absent for a room that has been `active` since it was created."
+                },
+                "changedBy": {
+                    "type": "string",
+                    "pattern": "^did:",
+                    "maxLength": 2048,
+                    "description": "The administrator whose act put the room in `state`. Present exactly when `changedAt` is, except for `purging` and `removed` reached when a grace period ended, which no one did at that moment: then the administrator who scheduled the removal. The reason each gave is in the community's audit trail, not here."
+                },
+                "purgeAt": {
+                    "type": "string",
+                    "format": "date-time",
+                    "description": "Present when `state` is `removalScheduled`: when the grace period ends and the purge begins. Kept when `state` is `purging` or `removed`, as when it became due."
+                },
+                "purge": {
+                    "$ref": "#/$defs/PurgeProgress",
+                    "description": "Present exactly when `state` is `purging`."
+                },
+                "removedAt": {
+                    "type": "string",
+                    "format": "date-time",
+                    "description": "Present exactly when `state` is `removed`: when the last of the room's content was deleted."
+                },
+                "restoring": {
+                    "type": "integer",
+                    "minimum": 1,
+                    "description": "Admissions still `suspended` that the community is restoring, after the room left `noAccess` — the room re-issues each member's credentials and the member collects them as a renewal. Absent when there are none."
+                },
+                "pendingChange": {
+                    "$ref": "#/$defs/PendingChange",
+                    "description": "Present while a change of state is begun and not finished."
+                }
+            }
+        },
+        "PendingChange": {
+            "title": "PendingChange",
+            "type": "object",
+            "additionalProperties": false,
+            "required": [
+                "state",
+                "beganAt"
+            ],
+            "description": "A change of state the community began and has not finished, because a step at its VTA did not complete — most often a room reset the host accepted, after which the community's own credentials must be re-issued before it can act on the room again. `RoomStatus.state` stays what it was until the change finishes, but what the room's host enforces may already be the new state's: a pending move to `noAccess` means members' credentials may already be refused. The community finishes it by itself, retrying with backoff, and repeating the request that began it finishes it too; nothing else changes the room until it is finished.",
+            "properties": {
+                "state": {
+                    "$ref": "#/$defs/RoomState",
+                    "description": "The state the change leads to."
+                },
+                "access": {
+                    "$ref": "#/$defs/ArchiveAccess",
+                    "description": "The access it leads to, where `state` has one."
+                },
+                "beganAt": {
+                    "type": "string",
+                    "format": "date-time"
+                },
+                "lastError": {
+                    "type": "string",
+                    "minLength": 1,
+                    "maxLength": 500,
+                    "description": "What stopped the last attempt, for an administrator. Plain text; it names no member and carries no credential."
+                }
+            }
+        },
+        "ArchiveAccess": {
+            "title": "ArchiveAccess",
+            "type": "string",
+            "enum": [
+                "readOnly",
+                "noAccess"
+            ],
+            "description": "What an archived room's members may still do. `readOnly`: their credentials stand and they keep reading what the room holds; the room's host refuses every write, upload and curation from a member. `noAccess`: every credential the room issued before the archival is withdrawn at its host — a room reset — so the host refuses every member's every task; the content is kept intact, and each withdrawn admission is `suspended`, restored when the room is unarchived or made `readOnly`. Neither recalls what a member already read or saved, and on a sealed tier neither removes anyone from the room's group."
+        },
+        "RoomState": {
+            "title": "RoomState",
+            "type": "string",
+            "enum": [
+                "active",
+                "archived",
+                "removalScheduled",
+                "purging",
+                "removed"
+            ],
+            "description": "Where a room the community owns stands in its owner's lifecycle — distinct from `HostedRoom.lifecycle`, which is the host's clock (`live`, `lapsed`, `dormant`, `reclaimable`) and is computed from the room's epoch, never set. `active`: open to change. `archived`: closed to change by an administrator — no admissions, and the room's host accepts no writes from its members; what members may still do is `ArchiveAccess`. Reversible with vtc/rooms/community/unarchive. `removalScheduled`: an administrator removed the room with a grace period; it admits nobody and its content is kept until `purgeAt`, and vtc/rooms/community/removal/cancel returns it to `archived`. `purging`: the grace period ended (or there was none) and the community is deleting the room's content from its host and storage; not reversible. `removed`: the content is gone; the community keeps only this record of the room, for its history."
+        },
+        "PurgeProgress": {
+            "title": "PurgeProgress",
+            "type": "object",
+            "additionalProperties": false,
+            "required": [
+                "attempts"
+            ],
+            "description": "How a purge is going. A purge deletes at the room's host and at each storage config holding its files, and some of those are remote; a step that fails is retried with backoff until it succeeds, and nothing is reported removed until every step has.",
+            "properties": {
+                "attempts": {
+                    "type": "integer",
+                    "minimum": 0,
+                    "description": "Passes made so far; 0 until the first."
+                },
+                "lastAttemptAt": {
+                    "type": "string",
+                    "format": "date-time"
+                },
+                "nextAttemptAt": {
+                    "type": "string",
+                    "format": "date-time",
+                    "description": "When the next pass is due. Absent while one runs."
+                },
+                "lastError": {
+                    "type": "string",
+                    "minLength": 1,
+                    "maxLength": 500,
+                    "description": "What stopped the last pass, for an administrator. Present only after a pass failed. Plain text, written by the community; it names no member and carries no credential."
+                }
+            }
+        },
+        "RoomLabel": {
+            "title": "RoomLabel",
+            "type": "string",
+            "minLength": 1,
+            "maxLength": 128,
+            "description": "A name for the room, chosen by an administrator: shown to administrators and to the members a room is offered to. Not part of the room's identity and never in anything a room's host can read. From `vtc/rooms/community/create` 0.3 and `vtc/rooms/community/update` 0.2 the community also writes it, through its own VTA, as the `name` of the room's own profile (`RoomProfile` in rooms/_shared), sealed inside the room for its members; earlier versions keep it out of the room altogether. MUST NOT carry personal data."
+        },
+        "StorageConfigId": {
+            "title": "StorageConfigId",
+            "type": "string",
+            "minLength": 1,
+            "maxLength": 64,
+            "pattern": "^[a-z0-9](?:[a-z0-9-]{0,62}[a-z0-9])?$",
+            "description": "A storage config's identifier, chosen by the administrator who creates it and immutable thereafter: lowercase letters, digits and inner hyphens, at most 64 characters (`eu-s3-primary`, `walrus-main`). Unique within the community. Never reused after a config is retired, because blobs name their config by this value."
+        },
+        "HostedRoom": {
+            "title": "HostedRoom",
+            "type": "object",
+            "additionalProperties": false,
+            "required": [
+                "roomId",
+                "ownerDid",
+                "visibility",
+                "retentionPolicy",
+                "epoch",
+                "lifecycle",
+                "retentionDays",
+                "createdAt",
+                "updatedAt"
+            ],
+            "description": "One room, as its host holds it — member for member the `HostedRoom` of vtc/rooms/list/0.2, which defines it inside its own payload schema. Nothing derived from the room's contents, and no member list: the host has none.",
+            "properties": {
+                "roomId": {
+                    "type": "string",
+                    "minLength": 1,
+                    "maxLength": 512
+                },
+                "ownerDid": {
+                    "type": "string",
+                    "pattern": "^did:",
+                    "maxLength": 2048
+                },
+                "visibility": {
+                    "$ref": "#/$defs/Visibility"
+                },
+                "retentionPolicy": {
+                    "$ref": "#/$defs/RetentionPolicy"
+                },
+                "epoch": {
+                    "type": "integer",
+                    "minimum": 0
+                },
+                "lifecycle": {
+                    "type": "string",
+                    "enum": [
+                        "live",
+                        "lapsed",
+                        "dormant",
+                        "reclaimable"
+                    ]
+                },
+                "epochExpiresAt": {
+                    "type": "string",
+                    "format": "date-time"
+                },
+                "retentionDays": {
+                    "type": "integer",
+                    "minimum": 0
+                },
+                "mirrorOf": {
+                    "type": "string",
+                    "minLength": 1,
+                    "maxLength": 2048
+                },
+                "createdAt": {
+                    "type": "string",
+                    "format": "date-time"
+                },
+                "updatedAt": {
+                    "type": "string",
+                    "format": "date-time"
+                }
+            }
+        },
+        "RetentionPolicy": {
+            "title": "RetentionPolicy",
+            "type": "string",
+            "enum": [
+                "chained",
+                "fromJoin"
+            ],
+            "description": "Whether a room keeps its history readable across a membership change, fixed at creation and immutable thereafter — like `Visibility`, and for the same reason: the rungs of an epoch key chain either exist for an epoch or they do not, and no later change of mind can seal key material that was never sealed or unseal what was already severed. `chained`: each advance produces an `EpochLink`, so every member reads the room's whole retained history however long they have been in it — what a **library** wants, at the cost of post-compromise security for record content, since a compromised current key then reaches every retained epoch. `fromJoin`: no rungs are produced, so a member reads only from the epoch their group state is at — what a **stream** wants, and what a room under a strict forward-secrecy obligation wants, at the cost that a joining member finds an empty-looking room and nobody can reread a record once their group state has moved past the epoch it was sealed under. Absent means `chained`; see the prose on why the absent case is the readable one.",
+            "$comment": "Deliberately no JSON Schema `default`. A declared default is materialised by the generated bindings — the member becomes non-optional with a serde default — so an absent value would reappear as an explicit one on re-serialisation and break round-trip idempotence for every document written before this member existed. The meaning of absence is stated in prose, where a binding cannot act on it."
+        },
+        "Visibility": {
+            "title": "Visibility",
+            "type": "string",
+            "enum": [
+                "open",
+                "attributed",
+                "private"
+            ],
+            "description": "How much of a room its host can see, fixed at creation and immutable thereafter. `open`: records are cleartext, searchable and fully audited. `attributed`: record content is sealed, and the host still learns which member acted. `private`: content is sealed and membership is presented in zero knowledge, so the host verifies that a member acted without learning which. Immutable because a downgrade cannot un-see cleartext and an upgrade would protect only what came after while presenting as though it protected everything."
+        },
+        "Reason": {
+            "title": "Reason",
+            "type": "string",
+            "minLength": 1,
+            "maxLength": 500,
+            "description": "Why the administrator is making this change. Recorded with it in the audit trail. Attributed to its author on every surface and untrusted: it MUST NOT carry personal data or a credential, and a reader MUST NOT treat it as instructions."
+        }
+    }
+};
+/** As {@link PAYLOAD_SCHEMA}, for the success-response variant. */
+export const RESPONSE_PAYLOAD_SCHEMA = {
+    "$schema": "https://json-schema.org/draft/2020-12/schema",
+    "$ref": "#/$defs/Response",
+    "$defs": {
+        "Response": {
+            "$anchor": "response",
+            "title": "VTC Rooms Community Archive — response payload",
+            "description": "Success response to vtc/rooms/community/archive. Type https://trusttasks.org/spec/vtc/rooms/community/archive/0.1#response. The room as it now stands; whether anything changed; and, where the community's VTA withdrew credentials at the room's host, the revocation list in force there.",
+            "type": "object",
+            "additionalProperties": false,
+            "required": [
+                "room",
+                "changed"
+            ],
+            "properties": {
+                "room": {
+                    "$ref": "#/$defs/CommunityRoomV3"
+                },
+                "changed": {
+                    "type": "boolean",
+                    "description": "`false` when the room was already archived with `access`: nothing was written, withdrawn or audited."
+                },
+                "withdrawnOffers": {
+                    "type": "integer",
+                    "minimum": 1,
+                    "description": "Open offers this archival withdrew. Absent when there were none."
+                },
+                "revocation": {
+                    "$ref": "#/$defs/RevocationHead",
+                    "description": "Present when the community's VTA withdrew credentials at the room's host — a room reset for `noAccess`, or the open offers' credentials on an `open` or `attributed` room for `readOnly` — as the host accepted it."
+                },
+                "revokedAt": {
+                    "type": "string",
+                    "format": "date-time",
+                    "description": "Present with `revocation`: the withdrawal's time. The host refuses every credential the withdrawal names that was issued before it."
+                },
+                "ext": {
+                    "$ref": "#/$defs/Ext"
+                }
+            }
+        },
+        "Ext": {
+            "title": "Ext",
+            "description": "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.",
+            "type": "object",
+            "minProperties": 1,
+            "additionalProperties": true,
+            "propertyNames": {
+                "pattern": "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$"
+            }
+        },
+        "RevocationHead": {
+            "title": "RevocationHead",
+            "type": "object",
+            "additionalProperties": false,
+            "required": [
+                "sequence",
+                "digest"
+            ],
+            "description": "Which `RevocationList` a party holds, without its entries: comparable between the room's key holder and a host, and between two hosts, without disclosing whom the room withdrew.",
+            "properties": {
+                "sequence": {
+                    "type": "integer",
+                    "minimum": 1,
+                    "description": "The list's `sequence`."
+                },
+                "digest": {
+                    "$ref": "#/$defs/DigestMultibase",
+                    "description": "SHA-256 multihash of the list's RFC 8785 (JCS) canonicalization, `proof` included. Two parties holding one sequence with different digests have been given two lists the room signed at one sequence."
+                }
+            }
+        },
+        "DigestMultibase": {
+            "title": "DigestMultibase",
+            "description": "A cryptographic digest as a multibase-encoded multihash — the encoding the W3C Verifiable Credentials Data Model 2.0 defines for `digestMultibase`, and the one `did:webvh` uses for its SCID and entry hashes.\n\nMultihash carries the hash algorithm in-band, so the value is self-describing and the wire format survives an algorithm change without a schema revision; multibase does the same for the base encoding, so a verifier never infers base58 from base64url by context. A bare hex string or a `sha-256:`-style prefix hard-codes one algorithm into the wire contract and is non-conforming here.\n\nThis definition constrains the *encoding only*. What the digest is computed over is stated by each referencing field, because it differs legitimately: a digest over a JSON document is taken over its RFC 8785 (JCS) canonicalization, while a digest over an opaque artifact is taken over its bytes. A field whose input is a JSON document and which does not name a canonicalization is not reproducible.\n\nRestricted to the two multibase headers W3C Controlled Identifiers 1.0 §2.4 normatively requires — `z` (base58btc) and `u` (base64url-no-pad). CID permits others but states that \"interoperability is not guaranteed between implementations using such values\", and a registry whose purpose is interoperability should not mint digests a conforming verifier may be unable to read. The alphabets are enforced rather than assumed: base58btc excludes 0, O, I and l, and an earlier permissive pattern let three published examples carry digests that were not valid base58 at all. base58btc is RECOMMENDED, for consistency with `did:key` and `did:webvh`.",
+            "type": "string",
+            "minLength": 16,
+            "pattern": "^(z[1-9A-HJ-NP-Za-km-z]+|u[A-Za-z0-9_-]+)$",
+            "examples": [
+                "zQmbWqxBEKC3P8tqsKc98xmWNzrzDtRLMiMPL8wBuTGsMnR"
+            ]
+        },
+        "CommunityRoomV3": {
+            "title": "CommunityRoomV3",
+            "type": "object",
+            "additionalProperties": false,
+            "required": [
+                "room",
+                "label",
+                "admitted",
+                "offered",
+                "status"
+            ],
+            "description": "What vtc/rooms/community/{get,list}/0.4 and vtc/rooms/community/{archive,unarchive,remove,removal/cancel}/0.1 return: `CommunityRoomV2` plus the room's `status` in its owner's lifecycle and the count of `suspended` admissions. A separate definition, not a change to `CommunityRoomV2`, so that the versions returning that keep the exact shape they published. For a room in state `purging` or `removed`, whose host record a purge deletes, `room` is the host record as it last stood before the purge began — the community keeps that snapshot with the room's record when the purge starts — and its `lifecycle` is what was computed then.",
+            "properties": {
+                "room": {
+                    "$ref": "#/$defs/HostedRoom"
+                },
+                "label": {
+                    "$ref": "#/$defs/RoomLabel"
+                },
+                "status": {
+                    "$ref": "#/$defs/RoomStatus"
+                },
+                "description": {
+                    "$ref": "#/$defs/RoomDescription",
+                    "description": "Absent when the room has none."
+                },
+                "tags": {
+                    "$ref": "#/$defs/RoomTags",
+                    "description": "Absent or empty when the room has none."
+                },
+                "storageConfig": {
+                    "$ref": "#/$defs/StorageConfigId",
+                    "description": "The storage config receiving the room's new uploads."
+                },
+                "admitted": {
+                    "type": "integer",
+                    "minimum": 0,
+                    "description": "Members in state `admitted`."
+                },
+                "offered": {
+                    "type": "integer",
+                    "minimum": 0,
+                    "description": "Offers not yet accepted or withdrawn."
+                },
+                "suspended": {
+                    "type": "integer",
+                    "minimum": 0,
+                    "description": "Admissions in state `suspended`: withdrawn while the room was archived with `noAccess`, and restored when it leaves that state. Absent when zero."
+                },
+                "ownerAuthorityValidUntil": {
+                    "type": "string",
+                    "format": "date-time",
+                    "description": "When the community's own `admin` authority over the room expires. A room whose owner's authority lapses can no longer advance its epoch, admit or remove; a community SHOULD renew it well before."
+                },
+                "createdBy": {
+                    "type": "string",
+                    "pattern": "^did:",
+                    "maxLength": 2048,
+                    "description": "The administrator who created it."
+                },
+                "detailsUpdatedAt": {
+                    "type": "string",
+                    "format": "date-time",
+                    "description": "When `label`, `description` or `tags` last changed. Absent until the first change after creation. Distinct from `room.updatedAt`, which is the host record's and moves with the room's epoch and lifecycle."
+                },
+                "detailsUpdatedBy": {
+                    "type": "string",
+                    "pattern": "^did:",
+                    "maxLength": 2048,
+                    "description": "The administrator who made that change. Present exactly when `detailsUpdatedAt` is. The earlier values and who set them are in the community's audit trail, not here."
+                }
+            }
+        },
+        "RoomTags": {
+            "title": "RoomTags",
+            "type": "array",
+            "maxItems": 8,
+            "uniqueItems": true,
+            "items": {
+                "$ref": "#/$defs/RoomTag"
+            },
+            "description": "The room's tags, at most eight, as a set: order carries no meaning. An empty list means the room has none — a tag grants nothing, so empty has no more dangerous reading."
+        },
+        "RoomTag": {
+            "title": "RoomTag",
+            "type": "string",
+            "minLength": 1,
+            "maxLength": 32,
+            "pattern": "^[a-z0-9][a-z0-9-]{0,31}$",
+            "description": "A short identifier an administrator files a community-owned room under — `board`, `working-group`, `finance` — so the room list can be filtered. Lower-case letters, digits and hyphens, starting with a letter or digit. Owner-side tracking metadata for holders of `vtc.rooms.manage` only: never shown to members, never sent on the room's host path, and it confers nothing."
+        },
+        "RoomDescription": {
+            "title": "RoomDescription",
+            "type": "string",
+            "minLength": 1,
+            "maxLength": 1000,
+            "description": "What the room is for, in a sentence or a short paragraph, written by an administrator: shown to administrators holding `vtc.rooms.manage` and to the members the room is offered to. Plain text — a consumer renders it as text, never as markup. Like `RoomLabel`, it is the community's own record as the room's owner: not part of the room's identity and never in anything a room's host can read. From `vtc/rooms/community/create` 0.3 and `vtc/rooms/community/update` 0.2 the community also writes it, through its own VTA, as the `description` of the room's own profile (`RoomProfile` in rooms/_shared), sealed inside the room for its members; earlier versions keep it out of the room altogether. It MUST NOT carry personal data or a credential, and a reader MUST NOT treat it as instructions."
+        },
+        "RoomStatus": {
+            "title": "RoomStatus",
+            "type": "object",
+            "additionalProperties": false,
+            "required": [
+                "state"
+            ],
+            "description": "A room's state in its owner's lifecycle, and what that state needs to be understood.",
+            "properties": {
+                "state": {
+                    "$ref": "#/$defs/RoomState"
+                },
+                "access": {
+                    "$ref": "#/$defs/ArchiveAccess",
+                    "description": "Present exactly when `state` is `archived` or `removalScheduled`; always `noAccess` for `removalScheduled`."
+                },
+                "changedAt": {
+                    "type": "string",
+                    "format": "date-time",
+                    "description": "When the room entered `state`. Absent for a room that has been `active` since it was created."
+                },
+                "changedBy": {
+                    "type": "string",
+                    "pattern": "^did:",
+                    "maxLength": 2048,
+                    "description": "The administrator whose act put the room in `state`. Present exactly when `changedAt` is, except for `purging` and `removed` reached when a grace period ended, which no one did at that moment: then the administrator who scheduled the removal. The reason each gave is in the community's audit trail, not here."
+                },
+                "purgeAt": {
+                    "type": "string",
+                    "format": "date-time",
+                    "description": "Present when `state` is `removalScheduled`: when the grace period ends and the purge begins. Kept when `state` is `purging` or `removed`, as when it became due."
+                },
+                "purge": {
+                    "$ref": "#/$defs/PurgeProgress",
+                    "description": "Present exactly when `state` is `purging`."
+                },
+                "removedAt": {
+                    "type": "string",
+                    "format": "date-time",
+                    "description": "Present exactly when `state` is `removed`: when the last of the room's content was deleted."
+                },
+                "restoring": {
+                    "type": "integer",
+                    "minimum": 1,
+                    "description": "Admissions still `suspended` that the community is restoring, after the room left `noAccess` — the room re-issues each member's credentials and the member collects them as a renewal. Absent when there are none."
+                },
+                "pendingChange": {
+                    "$ref": "#/$defs/PendingChange",
+                    "description": "Present while a change of state is begun and not finished."
+                }
+            }
+        },
+        "PendingChange": {
+            "title": "PendingChange",
+            "type": "object",
+            "additionalProperties": false,
+            "required": [
+                "state",
+                "beganAt"
+            ],
+            "description": "A change of state the community began and has not finished, because a step at its VTA did not complete — most often a room reset the host accepted, after which the community's own credentials must be re-issued before it can act on the room again. `RoomStatus.state` stays what it was until the change finishes, but what the room's host enforces may already be the new state's: a pending move to `noAccess` means members' credentials may already be refused. The community finishes it by itself, retrying with backoff, and repeating the request that began it finishes it too; nothing else changes the room until it is finished.",
+            "properties": {
+                "state": {
+                    "$ref": "#/$defs/RoomState",
+                    "description": "The state the change leads to."
+                },
+                "access": {
+                    "$ref": "#/$defs/ArchiveAccess",
+                    "description": "The access it leads to, where `state` has one."
+                },
+                "beganAt": {
+                    "type": "string",
+                    "format": "date-time"
+                },
+                "lastError": {
+                    "type": "string",
+                    "minLength": 1,
+                    "maxLength": 500,
+                    "description": "What stopped the last attempt, for an administrator. Plain text; it names no member and carries no credential."
+                }
+            }
+        },
+        "ArchiveAccess": {
+            "title": "ArchiveAccess",
+            "type": "string",
+            "enum": [
+                "readOnly",
+                "noAccess"
+            ],
+            "description": "What an archived room's members may still do. `readOnly`: their credentials stand and they keep reading what the room holds; the room's host refuses every write, upload and curation from a member. `noAccess`: every credential the room issued before the archival is withdrawn at its host — a room reset — so the host refuses every member's every task; the content is kept intact, and each withdrawn admission is `suspended`, restored when the room is unarchived or made `readOnly`. Neither recalls what a member already read or saved, and on a sealed tier neither removes anyone from the room's group."
+        },
+        "RoomState": {
+            "title": "RoomState",
+            "type": "string",
+            "enum": [
+                "active",
+                "archived",
+                "removalScheduled",
+                "purging",
+                "removed"
+            ],
+            "description": "Where a room the community owns stands in its owner's lifecycle — distinct from `HostedRoom.lifecycle`, which is the host's clock (`live`, `lapsed`, `dormant`, `reclaimable`) and is computed from the room's epoch, never set. `active`: open to change. `archived`: closed to change by an administrator — no admissions, and the room's host accepts no writes from its members; what members may still do is `ArchiveAccess`. Reversible with vtc/rooms/community/unarchive. `removalScheduled`: an administrator removed the room with a grace period; it admits nobody and its content is kept until `purgeAt`, and vtc/rooms/community/removal/cancel returns it to `archived`. `purging`: the grace period ended (or there was none) and the community is deleting the room's content from its host and storage; not reversible. `removed`: the content is gone; the community keeps only this record of the room, for its history."
+        },
+        "PurgeProgress": {
+            "title": "PurgeProgress",
+            "type": "object",
+            "additionalProperties": false,
+            "required": [
+                "attempts"
+            ],
+            "description": "How a purge is going. A purge deletes at the room's host and at each storage config holding its files, and some of those are remote; a step that fails is retried with backoff until it succeeds, and nothing is reported removed until every step has.",
+            "properties": {
+                "attempts": {
+                    "type": "integer",
+                    "minimum": 0,
+                    "description": "Passes made so far; 0 until the first."
+                },
+                "lastAttemptAt": {
+                    "type": "string",
+                    "format": "date-time"
+                },
+                "nextAttemptAt": {
+                    "type": "string",
+                    "format": "date-time",
+                    "description": "When the next pass is due. Absent while one runs."
+                },
+                "lastError": {
+                    "type": "string",
+                    "minLength": 1,
+                    "maxLength": 500,
+                    "description": "What stopped the last pass, for an administrator. Present only after a pass failed. Plain text, written by the community; it names no member and carries no credential."
+                }
+            }
+        },
+        "RoomLabel": {
+            "title": "RoomLabel",
+            "type": "string",
+            "minLength": 1,
+            "maxLength": 128,
+            "description": "A name for the room, chosen by an administrator: shown to administrators and to the members a room is offered to. Not part of the room's identity and never in anything a room's host can read. From `vtc/rooms/community/create` 0.3 and `vtc/rooms/community/update` 0.2 the community also writes it, through its own VTA, as the `name` of the room's own profile (`RoomProfile` in rooms/_shared), sealed inside the room for its members; earlier versions keep it out of the room altogether. MUST NOT carry personal data."
+        },
+        "StorageConfigId": {
+            "title": "StorageConfigId",
+            "type": "string",
+            "minLength": 1,
+            "maxLength": 64,
+            "pattern": "^[a-z0-9](?:[a-z0-9-]{0,62}[a-z0-9])?$",
+            "description": "A storage config's identifier, chosen by the administrator who creates it and immutable thereafter: lowercase letters, digits and inner hyphens, at most 64 characters (`eu-s3-primary`, `walrus-main`). Unique within the community. Never reused after a config is retired, because blobs name their config by this value."
+        },
+        "HostedRoom": {
+            "title": "HostedRoom",
+            "type": "object",
+            "additionalProperties": false,
+            "required": [
+                "roomId",
+                "ownerDid",
+                "visibility",
+                "retentionPolicy",
+                "epoch",
+                "lifecycle",
+                "retentionDays",
+                "createdAt",
+                "updatedAt"
+            ],
+            "description": "One room, as its host holds it — member for member the `HostedRoom` of vtc/rooms/list/0.2, which defines it inside its own payload schema. Nothing derived from the room's contents, and no member list: the host has none.",
+            "properties": {
+                "roomId": {
+                    "type": "string",
+                    "minLength": 1,
+                    "maxLength": 512
+                },
+                "ownerDid": {
+                    "type": "string",
+                    "pattern": "^did:",
+                    "maxLength": 2048
+                },
+                "visibility": {
+                    "$ref": "#/$defs/Visibility"
+                },
+                "retentionPolicy": {
+                    "$ref": "#/$defs/RetentionPolicy"
+                },
+                "epoch": {
+                    "type": "integer",
+                    "minimum": 0
+                },
+                "lifecycle": {
+                    "type": "string",
+                    "enum": [
+                        "live",
+                        "lapsed",
+                        "dormant",
+                        "reclaimable"
+                    ]
+                },
+                "epochExpiresAt": {
+                    "type": "string",
+                    "format": "date-time"
+                },
+                "retentionDays": {
+                    "type": "integer",
+                    "minimum": 0
+                },
+                "mirrorOf": {
+                    "type": "string",
+                    "minLength": 1,
+                    "maxLength": 2048
+                },
+                "createdAt": {
+                    "type": "string",
+                    "format": "date-time"
+                },
+                "updatedAt": {
+                    "type": "string",
+                    "format": "date-time"
+                }
+            }
+        },
+        "RetentionPolicy": {
+            "title": "RetentionPolicy",
+            "type": "string",
+            "enum": [
+                "chained",
+                "fromJoin"
+            ],
+            "description": "Whether a room keeps its history readable across a membership change, fixed at creation and immutable thereafter — like `Visibility`, and for the same reason: the rungs of an epoch key chain either exist for an epoch or they do not, and no later change of mind can seal key material that was never sealed or unseal what was already severed. `chained`: each advance produces an `EpochLink`, so every member reads the room's whole retained history however long they have been in it — what a **library** wants, at the cost of post-compromise security for record content, since a compromised current key then reaches every retained epoch. `fromJoin`: no rungs are produced, so a member reads only from the epoch their group state is at — what a **stream** wants, and what a room under a strict forward-secrecy obligation wants, at the cost that a joining member finds an empty-looking room and nobody can reread a record once their group state has moved past the epoch it was sealed under. Absent means `chained`; see the prose on why the absent case is the readable one.",
+            "$comment": "Deliberately no JSON Schema `default`. A declared default is materialised by the generated bindings — the member becomes non-optional with a serde default — so an absent value would reappear as an explicit one on re-serialisation and break round-trip idempotence for every document written before this member existed. The meaning of absence is stated in prose, where a binding cannot act on it."
+        },
+        "Visibility": {
+            "title": "Visibility",
+            "type": "string",
+            "enum": [
+                "open",
+                "attributed",
+                "private"
+            ],
+            "description": "How much of a room its host can see, fixed at creation and immutable thereafter. `open`: records are cleartext, searchable and fully audited. `attributed`: record content is sealed, and the host still learns which member acted. `private`: content is sealed and membership is presented in zero knowledge, so the host verifies that a member acted without learning which. Immutable because a downgrade cannot un-see cleartext and an upgrade would protect only what came after while presenting as though it protected everything."
+        },
+        "Reason": {
+            "title": "Reason",
+            "type": "string",
+            "minLength": 1,
+            "maxLength": 500,
+            "description": "Why the administrator is making this change. Recorded with it in the audit trail. Attributed to its author on every surface and untrusted: it MUST NOT carry personal data or a credential, and a reader MUST NOT treat it as instructions."
+        }
+    }
+};
+/**
+ * SPEC.md §7.2 policy for the request variant, from this specification's
+ * front matter. Pass to `consumeInbound` — items 5b, 7 and 8 are
+ * per-specification and cannot be derived from the document alone, and
+ * item 2 needs the schema this carries.
+ */
+export const SPEC = {
+    typeUri: TYPE_URI,
+    isBearer: false,
+    isProofRequired: true,
+    isRecipientRequired: true,
+    isIssuedAtRequired: true,
+    payloadSchema: PAYLOAD_SCHEMA,
+};
+/**
+ * SPEC.md §7.2 policy for the success-response variant. `isRecipientRequired`
+ * tracks the *issuer* party's requirement because a response swaps the
+ * parties (§7.3 item 5).
+ */
+export const RESPONSE_SPEC = {
+    typeUri: RESPONSE_TYPE_URI,
+    isBearer: false,
+    isProofRequired: true,
+    isRecipientRequired: true,
+    isIssuedAtRequired: true,
+    payloadSchema: RESPONSE_PAYLOAD_SCHEMA,
+};
+//# sourceMappingURL=payload.js.map