@openvtc/trust-tasks 0.8.1 → 0.9.0

package/dist/trust-task-error/0.5/payload.d.ts

@@ -46,15 +46,137 @@ export interface TrustTaskErrorPayload {
 export declare const TYPE_URI: "https://trusttasks.org/spec/trust-task-error/0.5";
 /** Stable alias for this specification's request payload shape. */
 export type Payload = TrustTaskErrorPayload;
+/**
+ * This specification's payload schema, as a value.
+ *
+ * SPEC.md §7.2 item 2 is performed against this. It is shipped as data
+ * rather than only as a `.json` file because TypeScript types are erased
+ * at runtime: without a schema a consumer has nothing to validate, and
+ * every REQUIRED payload member is optional in practice. Cross-file
+ * `$ref`s are already inlined, so it needs no resolver.
+ */
+export declare const PAYLOAD_SCHEMA: {
+    readonly $schema: "https://json-schema.org/draft/2020-12/schema";
+    readonly $id: "https://trusttasks.org/spec/trust-task-error/0.5";
+    readonly title: "Trust Task Error — payload";
+    readonly description: "The canonical error-response payload per SPEC.md §8.2.";
+    readonly type: "object";
+    readonly additionalProperties: false;
+    readonly required: readonly ["code", "retryable"];
+    readonly properties: {
+        readonly code: {
+            readonly type: "string";
+            readonly description: "Short identifier for the failure category. MUST be either a framework standard code (SPEC.md §8.3) or an extended code namespaced by the originating spec's slug (SPEC.md §8.5, e.g. 'acl/grant:role_not_recognized').";
+            readonly anyOf: readonly [{
+                readonly enum: readonly ["malformedRequest", "unsupportedType", "unsupportedVersion", "expired", "proofRequired", "proofInvalid", "permissionDenied", "wrongRecipient", "identityMismatch", "idConflict", "cancelled", "taskFailed", "unavailable", "internalError"];
+            }, {
+                readonly pattern: "^[a-z][a-z0-9]*(-[a-z0-9]+)*(/[a-z][a-z0-9]*(-[a-z0-9]+)*)*:[a-z][a-zA-Z0-9_]*$";
+            }];
+        };
+        readonly inResponseTo: {
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["typeUri"];
+            readonly description: "Identifies the Trust Task document this error reports on. RECOMMENDED on every error response, and REQUIRED in practice for any error a third party may later be asked to rely on: threadId correlates the exchange only for a party that saw the request, so without this an error retained as evidence names neither the task it terminated nor the instance.";
+            readonly properties: {
+                readonly typeUri: {
+                    readonly type: "string";
+                    readonly format: "uri";
+                    readonly minLength: 1;
+                    readonly description: "The Type URI of the document being reported on, including any #request or #response fragment it carried. This is what tells a consumer which specification's semantics apply to an extended code, and which specification declared the requirement that was breached.";
+                };
+                readonly id: {
+                    readonly type: "string";
+                    readonly minLength: 1;
+                    readonly description: "The id of the specific document being reported on (SPEC §4.3). Globally unique and never reused, so it names one instance where threadId names an exchange. Omit only where echoing it would disclose more than the error already does.";
+                };
+            };
+        };
+        readonly message: {
+            readonly type: "string";
+            readonly description: "Human-readable description of the error. Non-normative; intended for logs and operator UI.";
+        };
+        readonly retryable: {
+            readonly type: "boolean";
+            readonly description: "true if the producer of the original document MAY retry; false if retrying with the same document is not expected to succeed.";
+        };
+        readonly retryAfter: {
+            readonly type: "string";
+            readonly format: "date-time";
+            readonly description: "RFC 3339 timestamp before which the producer SHOULD NOT retry. Meaningful only when retryable is true.";
+        };
+        readonly details: {
+            readonly type: "object";
+            readonly description: "Optional task-specific extension data. Per-spec error code declarations may pin the shape via a JSON Schema fragment.";
+        };
+    };
+};
 /**
  * SPEC.md §7.2 policy for the request variant, from this specification's
  * front matter. Pass to `consumeInbound` — items 5b, 7 and 8 are
- * per-specification and cannot be derived from the document alone.
+ * per-specification and cannot be derived from the document alone, and
+ * item 2 needs the schema this carries.
  */
 export declare const SPEC: {
     readonly typeUri: "https://trusttasks.org/spec/trust-task-error/0.5";
     readonly isBearer: false;
     readonly isProofRequired: false;
     readonly isRecipientRequired: true;
+    readonly payloadSchema: {
+        readonly $schema: "https://json-schema.org/draft/2020-12/schema";
+        readonly $id: "https://trusttasks.org/spec/trust-task-error/0.5";
+        readonly title: "Trust Task Error — payload";
+        readonly description: "The canonical error-response payload per SPEC.md §8.2.";
+        readonly type: "object";
+        readonly additionalProperties: false;
+        readonly required: readonly ["code", "retryable"];
+        readonly properties: {
+            readonly code: {
+                readonly type: "string";
+                readonly description: "Short identifier for the failure category. MUST be either a framework standard code (SPEC.md §8.3) or an extended code namespaced by the originating spec's slug (SPEC.md §8.5, e.g. 'acl/grant:role_not_recognized').";
+                readonly anyOf: readonly [{
+                    readonly enum: readonly ["malformedRequest", "unsupportedType", "unsupportedVersion", "expired", "proofRequired", "proofInvalid", "permissionDenied", "wrongRecipient", "identityMismatch", "idConflict", "cancelled", "taskFailed", "unavailable", "internalError"];
+                }, {
+                    readonly pattern: "^[a-z][a-z0-9]*(-[a-z0-9]+)*(/[a-z][a-z0-9]*(-[a-z0-9]+)*)*:[a-z][a-zA-Z0-9_]*$";
+                }];
+            };
+            readonly inResponseTo: {
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["typeUri"];
+                readonly description: "Identifies the Trust Task document this error reports on. RECOMMENDED on every error response, and REQUIRED in practice for any error a third party may later be asked to rely on: threadId correlates the exchange only for a party that saw the request, so without this an error retained as evidence names neither the task it terminated nor the instance.";
+                readonly properties: {
+                    readonly typeUri: {
+                        readonly type: "string";
+                        readonly format: "uri";
+                        readonly minLength: 1;
+                        readonly description: "The Type URI of the document being reported on, including any #request or #response fragment it carried. This is what tells a consumer which specification's semantics apply to an extended code, and which specification declared the requirement that was breached.";
+                    };
+                    readonly id: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                        readonly description: "The id of the specific document being reported on (SPEC §4.3). Globally unique and never reused, so it names one instance where threadId names an exchange. Omit only where echoing it would disclose more than the error already does.";
+                    };
+                };
+            };
+            readonly message: {
+                readonly type: "string";
+                readonly description: "Human-readable description of the error. Non-normative; intended for logs and operator UI.";
+            };
+            readonly retryable: {
+                readonly type: "boolean";
+                readonly description: "true if the producer of the original document MAY retry; false if retrying with the same document is not expected to succeed.";
+            };
+            readonly retryAfter: {
+                readonly type: "string";
+                readonly format: "date-time";
+                readonly description: "RFC 3339 timestamp before which the producer SHOULD NOT retry. Meaningful only when retryable is true.";
+            };
+            readonly details: {
+                readonly type: "object";
+                readonly description: "Optional task-specific extension data. Per-spec error code declarations may pin the shape via a JSON Schema fragment.";
+            };
+        };
+    };
 };
 //# sourceMappingURL=payload.d.ts.map

package/dist/trust-task-error/0.5/payload.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"payload.d.ts","sourceRoot":"","sources":["../../../src/trust-task-error/0.5/payload.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC;;OAEG;IACH,IAAI,EAAE,CACF,CACI,kBAAkB,GAClB,iBAAiB,GACjB,oBAAoB,GACpB,SAAS,GACT,eAAe,GACf,cAAc,GACd,kBAAkB,GAClB,gBAAgB,GAChB,kBAAkB,GAClB,YAAY,GACZ,WAAW,GACX,YAAY,GACZ,aAAa,GACb,eAAe,CAClB,GACD;QACE,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC;KAClC,CACJ,GACC,MAAM,CAAC;IACT;;OAEG;IACH,YAAY,CAAC,EAAE;QACb;;WAEG;QACH,OAAO,EAAE,MAAM,CAAC;QAChB;;WAEG;QACH,EAAE,CAAC,EAAE,MAAM,CAAC;KACb,CAAC;IACF;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;OAEG;IACH,SAAS,EAAE,OAAO,CAAC;IACnB;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;OAEG;IACH,OAAO,CAAC,EAAE,EAAE,CAAC;CACd;AAED,2BAA2B;AAC3B,eAAO,MAAM,QAAQ,EAAG,kDAA2D,CAAC;AAEpF,mEAAmE;AACnE,MAAM,MAAM,OAAO,GAAG,qBAAqB,CAAC;AAE5C;;;;GAIG;AACH,eAAO,MAAM,IAAI;;;;;CAKP,CAAC"}
+{"version":3,"file":"payload.d.ts","sourceRoot":"","sources":["../../../src/trust-task-error/0.5/payload.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC;;OAEG;IACH,IAAI,EAAE,CACF,CACI,kBAAkB,GAClB,iBAAiB,GACjB,oBAAoB,GACpB,SAAS,GACT,eAAe,GACf,cAAc,GACd,kBAAkB,GAClB,gBAAgB,GAChB,kBAAkB,GAClB,YAAY,GACZ,WAAW,GACX,YAAY,GACZ,aAAa,GACb,eAAe,CAClB,GACD;QACE,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC;KAClC,CACJ,GACC,MAAM,CAAC;IACT;;OAEG;IACH,YAAY,CAAC,EAAE;QACb;;WAEG;QACH,OAAO,EAAE,MAAM,CAAC;QAChB;;WAEG;QACH,EAAE,CAAC,EAAE,MAAM,CAAC;KACb,CAAC;IACF;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;OAEG;IACH,SAAS,EAAE,OAAO,CAAC;IACnB;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;OAEG;IACH,OAAO,CAAC,EAAE,EAAE,CAAC;CACd;AAED,2BAA2B;AAC3B,eAAO,MAAM,QAAQ,EAAG,kDAA2D,CAAC;AAEpF,mEAAmE;AACnE,MAAM,MAAM,OAAO,GAAG,qBAAqB,CAAC;AAE5C;;;;;;;;GAQG;AACH,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA8EjB,CAAC;AAEX;;;;;GAKG;AACH,eAAO,MAAM,IAAI;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAMP,CAAC"}

package/dist/trust-task-error/0.5/payload.js

@@ -4,15 +4,105 @@
  */
 /** Trust Task type URI. */
 export const TYPE_URI = "https://trusttasks.org/spec/trust-task-error/0.5";
+/**
+ * This specification's payload schema, as a value.
+ *
+ * SPEC.md §7.2 item 2 is performed against this. It is shipped as data
+ * rather than only as a `.json` file because TypeScript types are erased
+ * at runtime: without a schema a consumer has nothing to validate, and
+ * every REQUIRED payload member is optional in practice. Cross-file
+ * `$ref`s are already inlined, so it needs no resolver.
+ */
+export const PAYLOAD_SCHEMA = {
+    "$schema": "https://json-schema.org/draft/2020-12/schema",
+    "$id": "https://trusttasks.org/spec/trust-task-error/0.5",
+    "title": "Trust Task Error — payload",
+    "description": "The canonical error-response payload per SPEC.md §8.2.",
+    "type": "object",
+    "additionalProperties": false,
+    "required": [
+        "code",
+        "retryable"
+    ],
+    "properties": {
+        "code": {
+            "type": "string",
+            "description": "Short identifier for the failure category. MUST be either a framework standard code (SPEC.md §8.3) or an extended code namespaced by the originating spec's slug (SPEC.md §8.5, e.g. 'acl/grant:role_not_recognized').",
+            "anyOf": [
+                {
+                    "enum": [
+                        "malformedRequest",
+                        "unsupportedType",
+                        "unsupportedVersion",
+                        "expired",
+                        "proofRequired",
+                        "proofInvalid",
+                        "permissionDenied",
+                        "wrongRecipient",
+                        "identityMismatch",
+                        "idConflict",
+                        "cancelled",
+                        "taskFailed",
+                        "unavailable",
+                        "internalError"
+                    ]
+                },
+                {
+                    "pattern": "^[a-z][a-z0-9]*(-[a-z0-9]+)*(/[a-z][a-z0-9]*(-[a-z0-9]+)*)*:[a-z][a-zA-Z0-9_]*$"
+                }
+            ]
+        },
+        "inResponseTo": {
+            "type": "object",
+            "additionalProperties": false,
+            "required": [
+                "typeUri"
+            ],
+            "description": "Identifies the Trust Task document this error reports on. RECOMMENDED on every error response, and REQUIRED in practice for any error a third party may later be asked to rely on: threadId correlates the exchange only for a party that saw the request, so without this an error retained as evidence names neither the task it terminated nor the instance.",
+            "properties": {
+                "typeUri": {
+                    "type": "string",
+                    "format": "uri",
+                    "minLength": 1,
+                    "description": "The Type URI of the document being reported on, including any #request or #response fragment it carried. This is what tells a consumer which specification's semantics apply to an extended code, and which specification declared the requirement that was breached."
+                },
+                "id": {
+                    "type": "string",
+                    "minLength": 1,
+                    "description": "The id of the specific document being reported on (SPEC §4.3). Globally unique and never reused, so it names one instance where threadId names an exchange. Omit only where echoing it would disclose more than the error already does."
+                }
+            }
+        },
+        "message": {
+            "type": "string",
+            "description": "Human-readable description of the error. Non-normative; intended for logs and operator UI."
+        },
+        "retryable": {
+            "type": "boolean",
+            "description": "true if the producer of the original document MAY retry; false if retrying with the same document is not expected to succeed."
+        },
+        "retryAfter": {
+            "type": "string",
+            "format": "date-time",
+            "description": "RFC 3339 timestamp before which the producer SHOULD NOT retry. Meaningful only when retryable is true."
+        },
+        "details": {
+            "type": "object",
+            "description": "Optional task-specific extension data. Per-spec error code declarations may pin the shape via a JSON Schema fragment."
+        }
+    }
+};
 /**
  * SPEC.md §7.2 policy for the request variant, from this specification's
  * front matter. Pass to `consumeInbound` — items 5b, 7 and 8 are
- * per-specification and cannot be derived from the document alone.
+ * per-specification and cannot be derived from the document alone, and
+ * item 2 needs the schema this carries.
  */
 export const SPEC = {
     typeUri: TYPE_URI,
     isBearer: false,
     isProofRequired: false,
     isRecipientRequired: true,
+    payloadSchema: PAYLOAD_SCHEMA,
 };
 //# sourceMappingURL=payload.js.map

package/dist/trust-task-error/0.5/payload.js.map

@@ -1 +1 @@
-{"version":3,"file":"payload.js","sourceRoot":"","sources":["../../../src/trust-task-error/0.5/payload.ts"],"names":[],"mappings":"AAAA;;;GAGG;AA8DH,2BAA2B;AAC3B,MAAM,CAAC,MAAM,QAAQ,GAAG,kDAA2D,CAAC;AAKpF;;;;GAIG;AACH,MAAM,CAAC,MAAM,IAAI,GAAG;IAClB,OAAO,EAAE,QAAQ;IACjB,QAAQ,EAAE,KAAK;IACf,eAAe,EAAE,KAAK;IACtB,mBAAmB,EAAE,IAAI;CACjB,CAAC"}
+{"version":3,"file":"payload.js","sourceRoot":"","sources":["../../../src/trust-task-error/0.5/payload.ts"],"names":[],"mappings":"AAAA;;;GAGG;AA8DH,2BAA2B;AAC3B,MAAM,CAAC,MAAM,QAAQ,GAAG,kDAA2D,CAAC;AAKpF;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,SAAS,EAAE,8CAA8C;IACzD,KAAK,EAAE,kDAAkD;IACzD,OAAO,EAAE,4BAA4B;IACrC,aAAa,EAAE,wDAAwD;IACvE,MAAM,EAAE,QAAQ;IAChB,sBAAsB,EAAE,KAAK;IAC7B,UAAU,EAAE;QACV,MAAM;QACN,WAAW;KACZ;IACD,YAAY,EAAE;QACZ,MAAM,EAAE;YACN,MAAM,EAAE,QAAQ;YAChB,aAAa,EAAE,wNAAwN;YACvO,OAAO,EAAE;gBACP;oBACE,MAAM,EAAE;wBACN,kBAAkB;wBAClB,iBAAiB;wBACjB,oBAAoB;wBACpB,SAAS;wBACT,eAAe;wBACf,cAAc;wBACd,kBAAkB;wBAClB,gBAAgB;wBAChB,kBAAkB;wBAClB,YAAY;wBACZ,WAAW;wBACX,YAAY;wBACZ,aAAa;wBACb,eAAe;qBAChB;iBACF;gBACD;oBACE,SAAS,EAAE,iFAAiF;iBAC7F;aACF;SACF;QACD,cAAc,EAAE;YACd,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,SAAS;aACV;YACD,aAAa,EAAE,iWAAiW;YAChX,YAAY,EAAE;gBACZ,SAAS,EAAE;oBACT,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,KAAK;oBACf,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,uQAAuQ;iBACvR;gBACD,IAAI,EAAE;oBACJ,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,yOAAyO;iBACzP;aACF;SACF;QACD,SAAS,EAAE;YACT,MAAM,EAAE,QAAQ;YAChB,aAAa,EAAE,4FAA4F;SAC5G;QACD,WAAW,EAAE;YACX,MAAM,EAAE,SAAS;YACjB,aAAa,EAAE,+HAA+H;SAC/I;QACD,YAAY,EAAE;YACZ,MAAM,EAAE,QAAQ;YAChB,QAAQ,EAAE,WAAW;YACrB,aAAa,EAAE,wGAAwG;SACxH;QACD,SAAS,EAAE;YACT,MAAM,EAAE,QAAQ;YAChB,aAAa,EAAE,uHAAuH;SACvI;KACF;CACO,CAAC;AAEX;;;;;GAKG;AACH,MAAM,CAAC,MAAM,IAAI,GAAG;IAClB,OAAO,EAAE,QAAQ;IACjB,QAAQ,EAAE,KAAK;IACf,eAAe,EAAE,KAAK;IACtB,mBAAmB,EAAE,IAAI;IACzB,aAAa,EAAE,cAAc;CACrB,CAAC"}

package/dist/trust-task-next-step/0.1/payload.d.ts

@@ -78,15 +78,187 @@ export interface Ext {
 export declare const TYPE_URI: "https://trusttasks.org/spec/trust-task-next-step/0.1";
 /** Stable alias for this specification's request payload shape. */
 export type Payload = TrustTaskNextStepPayload;
+/**
+ * This specification's payload schema, as a value.
+ *
+ * SPEC.md §7.2 item 2 is performed against this. It is shipped as data
+ * rather than only as a `.json` file because TypeScript types are erased
+ * at runtime: without a schema a consumer has nothing to validate, and
+ * every REQUIRED payload member is optional in practice. Cross-file
+ * `$ref`s are already inlined, so it needs no resolver.
+ */
+export declare const PAYLOAD_SCHEMA: {
+    readonly $schema: "https://json-schema.org/draft/2020-12/schema";
+    readonly $id: "https://trusttasks.org/spec/trust-task-next-step/0.1";
+    readonly title: "Trust Task Next Step — payload";
+    readonly description: "The recipient-suggested continuation reserved at SPEC.md §8.6: the original task was understood, but cannot complete in isolation, and this names what the recipient party expects in order to proceed.\n\nA next step is neither a success response nor a failure. The originating task is left open — a consumer that means 'no' returns a trust-task-error instead, and one that means 'done' returns the originating specification's #response variant.\n\nThis specification declares no response anchor: a producer answers a next step by issuing a document of the expected type, not by responding to this one.";
+    readonly type: "object";
+    readonly additionalProperties: false;
+    readonly required: readonly ["expects"];
+    readonly properties: {
+        readonly expects: {
+            readonly type: "array";
+            readonly minItems: 1;
+            readonly description: "The continuations the recipient will accept, in the producer's order of preference where the recipient has one. More than one entry means ALTERNATIVES — satisfying any single entry unblocks the exchange, never all of them. A recipient that needs several things done first names the one it wants next and issues a further next step afterwards; expressing a conjunction here would be a flow definition, which belongs to a ceremony rather than to a single response.";
+            readonly items: {
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["typeUri"];
+                readonly properties: {
+                    readonly typeUri: {
+                        readonly type: "string";
+                        readonly format: "uri";
+                        readonly minLength: 1;
+                        readonly description: "The Type URI of the Trust Task the recipient expects next, including any #request fragment. A suggestion only: it confers no authorization to perform that task, and the producer applies its own policy before acting (see the specification's Security & Privacy section).";
+                    };
+                    readonly reason: {
+                        readonly type: "string";
+                        readonly description: "Human-readable explanation of why this continuation is expected. Non-normative; intended for operator UI and logs.";
+                    };
+                    readonly hint: {
+                        readonly type: "object";
+                        readonly description: "Optional structured data the producer MAY use when composing the expected document — a challenge to echo, an identifier to quote, a presentation definition to satisfy. Its shape is governed by the specification named in typeUri, not by this one. A producer MUST NOT treat a hint as authoritative for any value it can determine itself.";
+                    };
+                };
+            };
+        };
+        readonly continuation: {
+            readonly enum: readonly ["resubmit", "proceed"];
+            readonly default: "resubmit";
+            readonly description: "What happens once an expected task completes. `resubmit` (the default) means the expected task is a PREREQUISITE and the producer re-issues the originating request to continue — a new document with a fresh id and the same threadId, which SPEC §8.4 distinguishes from a retry, since a retry is bit-for-bit identical and is not what happens here; this matches the established pattern of task-consent/granted, where the requester re-submits once approval lands. `proceed` means the expected task IS the continuation and the originating request is not re-issued, as in an offer answered by a request.";
+            readonly $comment: "Two values rather than a boolean, because 'resubmit: false' reads as a negation of something the reader has to reconstruct.";
+        };
+        readonly inResponseTo: {
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["typeUri"];
+            readonly description: "Identifies the Trust Task document this next step answers. SHOULD be populated, for the reason SPEC §8.2 gives for the identical member on an error response: threadId correlates the exchange only for a party that already saw the request, so a retained next step otherwise names neither the task it interrupted nor the instance.";
+            readonly properties: {
+                readonly typeUri: {
+                    readonly type: "string";
+                    readonly format: "uri";
+                    readonly minLength: 1;
+                    readonly description: "The Type URI of the document being answered, including any fragment it carried.";
+                };
+                readonly id: {
+                    readonly type: "string";
+                    readonly minLength: 1;
+                    readonly description: "The id of the specific document being answered (SPEC §4.3). Globally unique and never reused, so it names one instance where threadId names an exchange.";
+                };
+            };
+        };
+        readonly message: {
+            readonly type: "string";
+            readonly description: "Human-readable description of why the task cannot complete in isolation. Non-normative. Subject to the same restraint as an error message: it reaches a party that may not be entitled to learn why.";
+        };
+        readonly ext: {
+            readonly $ref: "#/$defs/Ext";
+        };
+    };
+    readonly $defs: {
+        readonly Ext: {
+            readonly title: "Ext";
+            readonly description: "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.";
+            readonly type: "object";
+            readonly minProperties: 1;
+            readonly additionalProperties: true;
+            readonly propertyNames: {
+                readonly pattern: "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$";
+            };
+        };
+    };
+};
 /**
  * SPEC.md §7.2 policy for the request variant, from this specification's
  * front matter. Pass to `consumeInbound` — items 5b, 7 and 8 are
- * per-specification and cannot be derived from the document alone.
+ * per-specification and cannot be derived from the document alone, and
+ * item 2 needs the schema this carries.
  */
 export declare const SPEC: {
     readonly typeUri: "https://trusttasks.org/spec/trust-task-next-step/0.1";
     readonly isBearer: false;
     readonly isProofRequired: false;
     readonly isRecipientRequired: true;
+    readonly payloadSchema: {
+        readonly $schema: "https://json-schema.org/draft/2020-12/schema";
+        readonly $id: "https://trusttasks.org/spec/trust-task-next-step/0.1";
+        readonly title: "Trust Task Next Step — payload";
+        readonly description: "The recipient-suggested continuation reserved at SPEC.md §8.6: the original task was understood, but cannot complete in isolation, and this names what the recipient party expects in order to proceed.\n\nA next step is neither a success response nor a failure. The originating task is left open — a consumer that means 'no' returns a trust-task-error instead, and one that means 'done' returns the originating specification's #response variant.\n\nThis specification declares no response anchor: a producer answers a next step by issuing a document of the expected type, not by responding to this one.";
+        readonly type: "object";
+        readonly additionalProperties: false;
+        readonly required: readonly ["expects"];
+        readonly properties: {
+            readonly expects: {
+                readonly type: "array";
+                readonly minItems: 1;
+                readonly description: "The continuations the recipient will accept, in the producer's order of preference where the recipient has one. More than one entry means ALTERNATIVES — satisfying any single entry unblocks the exchange, never all of them. A recipient that needs several things done first names the one it wants next and issues a further next step afterwards; expressing a conjunction here would be a flow definition, which belongs to a ceremony rather than to a single response.";
+                readonly items: {
+                    readonly type: "object";
+                    readonly additionalProperties: false;
+                    readonly required: readonly ["typeUri"];
+                    readonly properties: {
+                        readonly typeUri: {
+                            readonly type: "string";
+                            readonly format: "uri";
+                            readonly minLength: 1;
+                            readonly description: "The Type URI of the Trust Task the recipient expects next, including any #request fragment. A suggestion only: it confers no authorization to perform that task, and the producer applies its own policy before acting (see the specification's Security & Privacy section).";
+                        };
+                        readonly reason: {
+                            readonly type: "string";
+                            readonly description: "Human-readable explanation of why this continuation is expected. Non-normative; intended for operator UI and logs.";
+                        };
+                        readonly hint: {
+                            readonly type: "object";
+                            readonly description: "Optional structured data the producer MAY use when composing the expected document — a challenge to echo, an identifier to quote, a presentation definition to satisfy. Its shape is governed by the specification named in typeUri, not by this one. A producer MUST NOT treat a hint as authoritative for any value it can determine itself.";
+                        };
+                    };
+                };
+            };
+            readonly continuation: {
+                readonly enum: readonly ["resubmit", "proceed"];
+                readonly default: "resubmit";
+                readonly description: "What happens once an expected task completes. `resubmit` (the default) means the expected task is a PREREQUISITE and the producer re-issues the originating request to continue — a new document with a fresh id and the same threadId, which SPEC §8.4 distinguishes from a retry, since a retry is bit-for-bit identical and is not what happens here; this matches the established pattern of task-consent/granted, where the requester re-submits once approval lands. `proceed` means the expected task IS the continuation and the originating request is not re-issued, as in an offer answered by a request.";
+                readonly $comment: "Two values rather than a boolean, because 'resubmit: false' reads as a negation of something the reader has to reconstruct.";
+            };
+            readonly inResponseTo: {
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["typeUri"];
+                readonly description: "Identifies the Trust Task document this next step answers. SHOULD be populated, for the reason SPEC §8.2 gives for the identical member on an error response: threadId correlates the exchange only for a party that already saw the request, so a retained next step otherwise names neither the task it interrupted nor the instance.";
+                readonly properties: {
+                    readonly typeUri: {
+                        readonly type: "string";
+                        readonly format: "uri";
+                        readonly minLength: 1;
+                        readonly description: "The Type URI of the document being answered, including any fragment it carried.";
+                    };
+                    readonly id: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                        readonly description: "The id of the specific document being answered (SPEC §4.3). Globally unique and never reused, so it names one instance where threadId names an exchange.";
+                    };
+                };
+            };
+            readonly message: {
+                readonly type: "string";
+                readonly description: "Human-readable description of why the task cannot complete in isolation. Non-normative. Subject to the same restraint as an error message: it reaches a party that may not be entitled to learn why.";
+            };
+            readonly ext: {
+                readonly $ref: "#/$defs/Ext";
+            };
+        };
+        readonly $defs: {
+            readonly Ext: {
+                readonly title: "Ext";
+                readonly description: "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.";
+                readonly type: "object";
+                readonly minProperties: 1;
+                readonly additionalProperties: true;
+                readonly propertyNames: {
+                    readonly pattern: "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$";
+                };
+            };
+        };
+    };
 };
 //# sourceMappingURL=payload.d.ts.map

package/dist/trust-task-next-step/0.1/payload.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"payload.d.ts","sourceRoot":"","sources":["../../../src/trust-task-next-step/0.1/payload.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;;;;;GAMG;AACH,MAAM,WAAW,wBAAwB;IACvC;;;;OAIG;IACH,OAAO,EAAE;QACP;YACE;;eAEG;YACH,OAAO,EAAE,MAAM,CAAC;YAChB;;eAEG;YACH,MAAM,CAAC,EAAE,MAAM,CAAC;YAChB;;eAEG;YACH,IAAI,CAAC,EAAE,EAAE,CAAC;SACX;QACD,GAAG;YACD;;eAEG;YACH,OAAO,EAAE,MAAM,CAAC;YAChB;;eAEG;YACH,MAAM,CAAC,EAAE,MAAM,CAAC;YAChB;;eAEG;YACH,IAAI,CAAC,EAAE,EAAE,CAAC;SACX,EAAE;KACJ,CAAC;IACF;;OAEG;IACH,YAAY,CAAC,EAAE,UAAU,GAAG,SAAS,CAAC;IACtC;;OAEG;IACH,YAAY,CAAC,EAAE;QACb;;WAEG;QACH,OAAO,EAAE,MAAM,CAAC;QAChB;;WAEG;QACH,EAAE,CAAC,EAAE,MAAM,CAAC;KACb,CAAC;IACF;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,GAAG,CAAC,EAAE,GAAG,CAAC;CACX;AACD;;GAEG;AACH,MAAM,WAAW,GAAG;IAClB,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC;CAClC;AAED,2BAA2B;AAC3B,eAAO,MAAM,QAAQ,EAAG,sDAA+D,CAAC;AAExF,mEAAmE;AACnE,MAAM,MAAM,OAAO,GAAG,wBAAwB,CAAC;AAE/C;;;;GAIG;AACH,eAAO,MAAM,IAAI;;;;;CAKP,CAAC"}
+{"version":3,"file":"payload.d.ts","sourceRoot":"","sources":["../../../src/trust-task-next-step/0.1/payload.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;;;;;GAMG;AACH,MAAM,WAAW,wBAAwB;IACvC;;;;OAIG;IACH,OAAO,EAAE;QACP;YACE;;eAEG;YACH,OAAO,EAAE,MAAM,CAAC;YAChB;;eAEG;YACH,MAAM,CAAC,EAAE,MAAM,CAAC;YAChB;;eAEG;YACH,IAAI,CAAC,EAAE,EAAE,CAAC;SACX;QACD,GAAG;YACD;;eAEG;YACH,OAAO,EAAE,MAAM,CAAC;YAChB;;eAEG;YACH,MAAM,CAAC,EAAE,MAAM,CAAC;YAChB;;eAEG;YACH,IAAI,CAAC,EAAE,EAAE,CAAC;SACX,EAAE;KACJ,CAAC;IACF;;OAEG;IACH,YAAY,CAAC,EAAE,UAAU,GAAG,SAAS,CAAC;IACtC;;OAEG;IACH,YAAY,CAAC,EAAE;QACb;;WAEG;QACH,OAAO,EAAE,MAAM,CAAC;QAChB;;WAEG;QACH,EAAE,CAAC,EAAE,MAAM,CAAC;KACb,CAAC;IACF;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,GAAG,CAAC,EAAE,GAAG,CAAC;CACX;AACD;;GAEG;AACH,MAAM,WAAW,GAAG;IAClB,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC;CAClC;AAED,2BAA2B;AAC3B,eAAO,MAAM,QAAQ,EAAG,sDAA+D,CAAC;AAExF,mEAAmE;AACnE,MAAM,MAAM,OAAO,GAAG,wBAAwB,CAAC;AAE/C;;;;;;;;GAQG;AACH,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAyFjB,CAAC;AAEX;;;;;GAKG;AACH,eAAO,MAAM,IAAI;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAMP,CAAC"}

package/dist/trust-task-next-step/0.1/payload.js

@@ -4,15 +4,116 @@
  */
 /** Trust Task type URI. */
 export const TYPE_URI = "https://trusttasks.org/spec/trust-task-next-step/0.1";
+/**
+ * This specification's payload schema, as a value.
+ *
+ * SPEC.md §7.2 item 2 is performed against this. It is shipped as data
+ * rather than only as a `.json` file because TypeScript types are erased
+ * at runtime: without a schema a consumer has nothing to validate, and
+ * every REQUIRED payload member is optional in practice. Cross-file
+ * `$ref`s are already inlined, so it needs no resolver.
+ */
+export const PAYLOAD_SCHEMA = {
+    "$schema": "https://json-schema.org/draft/2020-12/schema",
+    "$id": "https://trusttasks.org/spec/trust-task-next-step/0.1",
+    "title": "Trust Task Next Step — payload",
+    "description": "The recipient-suggested continuation reserved at SPEC.md §8.6: the original task was understood, but cannot complete in isolation, and this names what the recipient party expects in order to proceed.\n\nA next step is neither a success response nor a failure. The originating task is left open — a consumer that means 'no' returns a trust-task-error instead, and one that means 'done' returns the originating specification's #response variant.\n\nThis specification declares no response anchor: a producer answers a next step by issuing a document of the expected type, not by responding to this one.",
+    "type": "object",
+    "additionalProperties": false,
+    "required": [
+        "expects"
+    ],
+    "properties": {
+        "expects": {
+            "type": "array",
+            "minItems": 1,
+            "description": "The continuations the recipient will accept, in the producer's order of preference where the recipient has one. More than one entry means ALTERNATIVES — satisfying any single entry unblocks the exchange, never all of them. A recipient that needs several things done first names the one it wants next and issues a further next step afterwards; expressing a conjunction here would be a flow definition, which belongs to a ceremony rather than to a single response.",
+            "items": {
+                "type": "object",
+                "additionalProperties": false,
+                "required": [
+                    "typeUri"
+                ],
+                "properties": {
+                    "typeUri": {
+                        "type": "string",
+                        "format": "uri",
+                        "minLength": 1,
+                        "description": "The Type URI of the Trust Task the recipient expects next, including any #request fragment. A suggestion only: it confers no authorization to perform that task, and the producer applies its own policy before acting (see the specification's Security & Privacy section)."
+                    },
+                    "reason": {
+                        "type": "string",
+                        "description": "Human-readable explanation of why this continuation is expected. Non-normative; intended for operator UI and logs."
+                    },
+                    "hint": {
+                        "type": "object",
+                        "description": "Optional structured data the producer MAY use when composing the expected document — a challenge to echo, an identifier to quote, a presentation definition to satisfy. Its shape is governed by the specification named in typeUri, not by this one. A producer MUST NOT treat a hint as authoritative for any value it can determine itself."
+                    }
+                }
+            }
+        },
+        "continuation": {
+            "enum": [
+                "resubmit",
+                "proceed"
+            ],
+            "default": "resubmit",
+            "description": "What happens once an expected task completes. `resubmit` (the default) means the expected task is a PREREQUISITE and the producer re-issues the originating request to continue — a new document with a fresh id and the same threadId, which SPEC §8.4 distinguishes from a retry, since a retry is bit-for-bit identical and is not what happens here; this matches the established pattern of task-consent/granted, where the requester re-submits once approval lands. `proceed` means the expected task IS the continuation and the originating request is not re-issued, as in an offer answered by a request.",
+            "$comment": "Two values rather than a boolean, because 'resubmit: false' reads as a negation of something the reader has to reconstruct."
+        },
+        "inResponseTo": {
+            "type": "object",
+            "additionalProperties": false,
+            "required": [
+                "typeUri"
+            ],
+            "description": "Identifies the Trust Task document this next step answers. SHOULD be populated, for the reason SPEC §8.2 gives for the identical member on an error response: threadId correlates the exchange only for a party that already saw the request, so a retained next step otherwise names neither the task it interrupted nor the instance.",
+            "properties": {
+                "typeUri": {
+                    "type": "string",
+                    "format": "uri",
+                    "minLength": 1,
+                    "description": "The Type URI of the document being answered, including any fragment it carried."
+                },
+                "id": {
+                    "type": "string",
+                    "minLength": 1,
+                    "description": "The id of the specific document being answered (SPEC §4.3). Globally unique and never reused, so it names one instance where threadId names an exchange."
+                }
+            }
+        },
+        "message": {
+            "type": "string",
+            "description": "Human-readable description of why the task cannot complete in isolation. Non-normative. Subject to the same restraint as an error message: it reaches a party that may not be entitled to learn why."
+        },
+        "ext": {
+            "$ref": "#/$defs/Ext"
+        }
+    },
+    "$defs": {
+        "Ext": {
+            "title": "Ext",
+            "description": "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.",
+            "type": "object",
+            "minProperties": 1,
+            "additionalProperties": true,
+            "propertyNames": {
+                "pattern": "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$"
+            }
+        }
+    }
+};
 /**
  * SPEC.md §7.2 policy for the request variant, from this specification's
  * front matter. Pass to `consumeInbound` — items 5b, 7 and 8 are
- * per-specification and cannot be derived from the document alone.
+ * per-specification and cannot be derived from the document alone, and
+ * item 2 needs the schema this carries.
  */
 export const SPEC = {
     typeUri: TYPE_URI,
     isBearer: false,
     isProofRequired: false,
     isRecipientRequired: true,
+    payloadSchema: PAYLOAD_SCHEMA,
 };
 //# sourceMappingURL=payload.js.map

package/dist/trust-task-next-step/0.1/payload.js.map

@@ -1 +1 @@
-{"version":3,"file":"payload.js","sourceRoot":"","sources":["../../../src/trust-task-next-step/0.1/payload.ts"],"names":[],"mappings":"AAAA;;;GAGG;AA2EH,2BAA2B;AAC3B,MAAM,CAAC,MAAM,QAAQ,GAAG,sDAA+D,CAAC;AAKxF;;;;GAIG;AACH,MAAM,CAAC,MAAM,IAAI,GAAG;IAClB,OAAO,EAAE,QAAQ;IACjB,QAAQ,EAAE,KAAK;IACf,eAAe,EAAE,KAAK;IACtB,mBAAmB,EAAE,IAAI;CACjB,CAAC"}
+{"version":3,"file":"payload.js","sourceRoot":"","sources":["../../../src/trust-task-next-step/0.1/payload.ts"],"names":[],"mappings":"AAAA;;;GAGG;AA2EH,2BAA2B;AAC3B,MAAM,CAAC,MAAM,QAAQ,GAAG,sDAA+D,CAAC;AAKxF;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,SAAS,EAAE,8CAA8C;IACzD,KAAK,EAAE,sDAAsD;IAC7D,OAAO,EAAE,gCAAgC;IACzC,aAAa,EAAE,0lBAA0lB;IACzmB,MAAM,EAAE,QAAQ;IAChB,sBAAsB,EAAE,KAAK;IAC7B,UAAU,EAAE;QACV,SAAS;KACV;IACD,YAAY,EAAE;QACZ,SAAS,EAAE;YACT,MAAM,EAAE,OAAO;YACf,UAAU,EAAE,CAAC;YACb,aAAa,EAAE,gdAAgd;YAC/d,OAAO,EAAE;gBACP,MAAM,EAAE,QAAQ;gBAChB,sBAAsB,EAAE,KAAK;gBAC7B,UAAU,EAAE;oBACV,SAAS;iBACV;gBACD,YAAY,EAAE;oBACZ,SAAS,EAAE;wBACT,MAAM,EAAE,QAAQ;wBAChB,QAAQ,EAAE,KAAK;wBACf,WAAW,EAAE,CAAC;wBACd,aAAa,EAAE,8QAA8Q;qBAC9R;oBACD,QAAQ,EAAE;wBACR,MAAM,EAAE,QAAQ;wBAChB,aAAa,EAAE,oHAAoH;qBACpI;oBACD,MAAM,EAAE;wBACN,MAAM,EAAE,QAAQ;wBAChB,aAAa,EAAE,gVAAgV;qBAChW;iBACF;aACF;SACF;QACD,cAAc,EAAE;YACd,MAAM,EAAE;gBACN,UAAU;gBACV,SAAS;aACV;YACD,SAAS,EAAE,UAAU;YACrB,aAAa,EAAE,slBAAslB;YACrmB,UAAU,EAAE,6HAA6H;SAC1I;QACD,cAAc,EAAE;YACd,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,SAAS;aACV;YACD,aAAa,EAAE,yUAAyU;YACxV,YAAY,EAAE;gBACZ,SAAS,EAAE;oBACT,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,KAAK;oBACf,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,iFAAiF;iBACjG;gBACD,IAAI,EAAE;oBACJ,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,aAAa,EAAE,0JAA0J;iBAC1K;aACF;SACF;QACD,SAAS,EAAE;YACT,MAAM,EAAE,QAAQ;YAChB,aAAa,EAAE,sMAAsM;SACtN;QACD,KAAK,EAAE;YACL,MAAM,EAAE,aAAa;SACtB;KACF;IACD,OAAO,EAAE;QACP,KAAK,EAAE;YACL,OAAO,EAAE,KAAK;YACd,aAAa,EAAE,uKAAuK;YACtL,MAAM,EAAE,QAAQ;YAChB,eAAe,EAAE,CAAC;YAClB,sBAAsB,EAAE,IAAI;YAC5B,eAAe,EAAE;gBACf,SAAS,EAAE,mCAAmC;aAC/C;SACF;KACF;CACO,CAAC;AAEX;;;;;GAKG;AACH,MAAM,CAAC,MAAM,IAAI,GAAG;IAClB,OAAO,EAAE,QAAQ;IACjB,QAAQ,EAAE,KAAK;IACf,eAAe,EAAE,KAAK;IACtB,mBAAmB,EAAE,IAAI;IACzB,aAAa,EAAE,cAAc;CACrB,CAAC"}