@openvtc/trust-tasks 0.8.1 → 0.9.0

package/dist/vtc/config/import/0.1/payload.d.ts

@@ -130,16 +130,605 @@ export type Payload = VTCConfigImportPayload;
 export declare const RESPONSE_TYPE_URI: "https://trusttasks.org/spec/vtc/config/import/0.1#response";
 /** Stable alias for this specification's success-response payload shape. */
 export type Response = VTCConfigImportResponsePayload;
+/**
+ * This specification's payload schema, as a value.
+ *
+ * SPEC.md §7.2 item 2 is performed against this. It is shipped as data
+ * rather than only as a `.json` file because TypeScript types are erased
+ * at runtime: without a schema a consumer has nothing to validate, and
+ * every REQUIRED payload member is optional in practice. Cross-file
+ * `$ref`s are already inlined, so it needs no resolver.
+ */
+export declare const PAYLOAD_SCHEMA: {
+    readonly $schema: "https://json-schema.org/draft/2020-12/schema";
+    readonly $id: "https://trusttasks.org/spec/vtc/config/import/0.1";
+    readonly title: "VTC Config Import — payload";
+    readonly description: "Apply a portable configuration document to this community, or preview what applying it would change. Defaults to a preview.";
+    readonly type: "object";
+    readonly additionalProperties: false;
+    readonly required: readonly ["document"];
+    readonly properties: {
+        readonly document: {
+            readonly $ref: "#/$defs/ConfigExportDocument";
+            readonly description: "The document returned by `vtc/config/export`.";
+        };
+        readonly confirm: {
+            readonly type: "boolean";
+            readonly default: false;
+            readonly description: "`false` (default) previews: the diff is computed and returned, nothing is written. `true` applies it. The preview and the apply return the same shape, so an operator UX can render one and then re-submit.";
+        };
+        readonly ext: {
+            readonly $ref: "#/$defs/Ext";
+        };
+    };
+    readonly $defs: {
+        readonly Response: {
+            readonly $anchor: "response";
+            readonly title: "VTC Config Import — response payload";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["status", "profileChanges", "overrideChanges", "rejected"];
+            readonly properties: {
+                readonly status: {
+                    readonly type: "string";
+                    readonly enum: readonly ["preview", "imported"];
+                    readonly description: "`preview` when `confirm` was not set; `imported` after the document was applied.";
+                };
+                readonly profileChanges: {
+                    readonly type: "array";
+                    readonly items: {
+                        readonly $ref: "#/$defs/ConfigFieldChange";
+                    };
+                    readonly description: "Community-profile members that differ from what is in force. Empty when the document omits `communityProfile`, or when nothing differs. On `imported` these are the changes that were written.";
+                };
+                readonly overrideChanges: {
+                    readonly type: "array";
+                    readonly items: {
+                        readonly $ref: "#/$defs/ConfigFieldChange";
+                    };
+                    readonly description: "Configuration-override keys that differ from what is in force. Rejected keys are not listed here — they appear under `rejected`. On `imported` these are the changes that were written.";
+                };
+                readonly pendingRestart: {
+                    readonly type: "array";
+                    readonly items: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                    };
+                    readonly uniqueItems: true;
+                    readonly description: "Applied keys whose new value takes effect only after a restart. Reported on a preview too, so an operator learns before confirming that the import implies downtime.";
+                };
+                readonly rejected: {
+                    readonly type: "array";
+                    readonly items: {
+                        readonly $ref: "#/$defs/RejectedKey";
+                    };
+                    readonly description: "Keys the consumer declined — unknown to its configuration registry, wrong type, out of range. Reported identically on preview and apply, so a preview surfaces every rejection before anything is written.";
+                };
+                readonly ext: {
+                    readonly $ref: "#/$defs/Ext";
+                };
+            };
+        };
+        readonly Ext: {
+            readonly title: "Ext";
+            readonly description: "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.";
+            readonly type: "object";
+            readonly minProperties: 1;
+            readonly additionalProperties: true;
+            readonly propertyNames: {
+                readonly pattern: "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$";
+            };
+        };
+        readonly RejectedKey: {
+            readonly $anchor: "rejectedKey";
+            readonly title: "RejectedKey";
+            readonly description: "A key a patch declined to apply, with the reason.";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["key", "reason"];
+            readonly properties: {
+                readonly key: {
+                    readonly type: "string";
+                    readonly minLength: 1;
+                };
+                readonly reason: {
+                    readonly type: "string";
+                    readonly minLength: 1;
+                    readonly description: "Why the key was rejected — unknown key, wrong type, out-of-range, allowlist mismatch, etc.";
+                };
+            };
+        };
+        readonly ConfigFieldChange: {
+            readonly $anchor: "configFieldChange";
+            readonly title: "ConfigFieldChange";
+            readonly description: "One field an import would change, or did.\n\n`oldValue` is absent when the field is not currently set — no profile yet, or no stored override for that key. `newValue` is absent when the imported document omits the field, which means \"leave the live value alone\" rather than \"clear it\"; a caller that intends to clear a nullable member sends an explicit `null`, which appears here as `newValue: null`. The two are different requests and a consumer MUST NOT conflate them.";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["key"];
+            readonly properties: {
+                readonly key: {
+                    readonly type: "string";
+                    readonly minLength: 1;
+                    readonly description: "The profile member or configuration key, e.g. `name` or `log.level`.";
+                };
+                readonly oldValue: {
+                    readonly description: "Value in force before the import. Absent when the field is unset.";
+                };
+                readonly newValue: {
+                    readonly description: "Value the imported document carries. Absent when the document omits the field.";
+                };
+            };
+        };
+        readonly ConfigExportDocument: {
+            readonly $anchor: "configExportDocument";
+            readonly title: "ConfigExportDocument";
+            readonly description: "A community's portable configuration: its profile plus the configuration overrides a maintainer stores for itself. Deliberately excludes per-host layers (environment variables, on-disk config files) — those describe where a maintainer runs, not what the community is, and carrying them would make an import overwrite the target host's own deployment settings.\n\nThis document is designed to survive a round-trip through a file. An operator exports it, keeps it, and feeds it back later — possibly to a different maintainer, possibly across a version boundary — so it is self-describing rather than relying on the Type URI of the envelope that happened to carry it.";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["schemaVersion", "exportedAt", "configOverrides"];
+            readonly properties: {
+                readonly schemaVersion: {
+                    readonly type: "integer";
+                    readonly minimum: 1;
+                    readonly description: "Version of this document's own shape. Not redundant with the Type URI version: once the document is written to a file it is bare JSON with no envelope, and this is the only thing a later reader has to check it against. A consumer MUST reject a version it does not implement rather than guess.";
+                };
+                readonly exportedAt: {
+                    readonly type: "string";
+                    readonly format: "date-time";
+                    readonly description: "When the export was taken. Provenance for the operator; a consumer does not act on it.";
+                };
+                readonly communityProfile: {
+                    readonly $ref: "#/$defs/CommunityProfileSnapshot";
+                    readonly description: "The community's profile at export time. Absent when the community has no profile yet — a maintainer exported before bootstrap.";
+                };
+                readonly configOverrides: {
+                    readonly type: "object";
+                    readonly additionalProperties: true;
+                    readonly description: "Stored configuration overrides as `key → value`, keyed by the maintainer's own configuration registry (the same keys `config/show` and `config/patch` use). An empty object is valid and means no overrides are set.";
+                };
+                readonly ext: {
+                    readonly $ref: "#/$defs/Ext";
+                };
+            };
+        };
+        readonly CommunityProfileSnapshot: {
+            readonly $anchor: "communityProfileSnapshot";
+            readonly title: "CommunityProfileSnapshot";
+            readonly description: "A community profile as a portable export carries it — the mutable profile members plus the immutable identity they belong to.\n\nDistinct from `vtc/_shared/community`'s `CommunityProfile`, which is the update-facing view and deliberately omits `communityDid` so that a patch cannot re-point a community's identity. Here the DID is REQUIRED and is the whole point: it is what lets an importing community refuse a document taken from a different one. `registryStatus` is absent because trust-registry reachability is a property of a running maintainer, not of exported state.";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["communityDid", "name", "language"];
+            readonly properties: {
+                readonly communityDid: {
+                    readonly type: "string";
+                    readonly minLength: 1;
+                    readonly description: "DID of the community this document was taken from. Immutable, set at install.";
+                };
+                readonly name: {
+                    readonly type: "string";
+                    readonly minLength: 1;
+                };
+                readonly description: {
+                    readonly type: "string";
+                };
+                readonly logoUrl: {
+                    readonly type: readonly ["string", "null"];
+                };
+                readonly publicUrl: {
+                    readonly type: readonly ["string", "null"];
+                };
+                readonly contactEmail: {
+                    readonly type: readonly ["string", "null"];
+                };
+                readonly language: {
+                    readonly type: "string";
+                    readonly minLength: 1;
+                    readonly description: "BCP 47 language tag.";
+                };
+                readonly extensions: {
+                    readonly type: "object";
+                    readonly description: "Opaque community-defined extension bag.";
+                };
+                readonly createdAt: {
+                    readonly type: "string";
+                    readonly format: "date-time";
+                    readonly description: "When the community was created. Provenance only — an import never writes it.";
+                };
+            };
+        };
+    };
+};
+/** As {@link PAYLOAD_SCHEMA}, for the success-response variant. */
+export declare const RESPONSE_PAYLOAD_SCHEMA: {
+    readonly $schema: "https://json-schema.org/draft/2020-12/schema";
+    readonly $ref: "#/$defs/Response";
+    readonly $defs: {
+        readonly Response: {
+            readonly $anchor: "response";
+            readonly title: "VTC Config Import — response payload";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["status", "profileChanges", "overrideChanges", "rejected"];
+            readonly properties: {
+                readonly status: {
+                    readonly type: "string";
+                    readonly enum: readonly ["preview", "imported"];
+                    readonly description: "`preview` when `confirm` was not set; `imported` after the document was applied.";
+                };
+                readonly profileChanges: {
+                    readonly type: "array";
+                    readonly items: {
+                        readonly $ref: "#/$defs/ConfigFieldChange";
+                    };
+                    readonly description: "Community-profile members that differ from what is in force. Empty when the document omits `communityProfile`, or when nothing differs. On `imported` these are the changes that were written.";
+                };
+                readonly overrideChanges: {
+                    readonly type: "array";
+                    readonly items: {
+                        readonly $ref: "#/$defs/ConfigFieldChange";
+                    };
+                    readonly description: "Configuration-override keys that differ from what is in force. Rejected keys are not listed here — they appear under `rejected`. On `imported` these are the changes that were written.";
+                };
+                readonly pendingRestart: {
+                    readonly type: "array";
+                    readonly items: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                    };
+                    readonly uniqueItems: true;
+                    readonly description: "Applied keys whose new value takes effect only after a restart. Reported on a preview too, so an operator learns before confirming that the import implies downtime.";
+                };
+                readonly rejected: {
+                    readonly type: "array";
+                    readonly items: {
+                        readonly $ref: "#/$defs/RejectedKey";
+                    };
+                    readonly description: "Keys the consumer declined — unknown to its configuration registry, wrong type, out of range. Reported identically on preview and apply, so a preview surfaces every rejection before anything is written.";
+                };
+                readonly ext: {
+                    readonly $ref: "#/$defs/Ext";
+                };
+            };
+        };
+        readonly Ext: {
+            readonly title: "Ext";
+            readonly description: "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.";
+            readonly type: "object";
+            readonly minProperties: 1;
+            readonly additionalProperties: true;
+            readonly propertyNames: {
+                readonly pattern: "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$";
+            };
+        };
+        readonly RejectedKey: {
+            readonly $anchor: "rejectedKey";
+            readonly title: "RejectedKey";
+            readonly description: "A key a patch declined to apply, with the reason.";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["key", "reason"];
+            readonly properties: {
+                readonly key: {
+                    readonly type: "string";
+                    readonly minLength: 1;
+                };
+                readonly reason: {
+                    readonly type: "string";
+                    readonly minLength: 1;
+                    readonly description: "Why the key was rejected — unknown key, wrong type, out-of-range, allowlist mismatch, etc.";
+                };
+            };
+        };
+        readonly ConfigFieldChange: {
+            readonly $anchor: "configFieldChange";
+            readonly title: "ConfigFieldChange";
+            readonly description: "One field an import would change, or did.\n\n`oldValue` is absent when the field is not currently set — no profile yet, or no stored override for that key. `newValue` is absent when the imported document omits the field, which means \"leave the live value alone\" rather than \"clear it\"; a caller that intends to clear a nullable member sends an explicit `null`, which appears here as `newValue: null`. The two are different requests and a consumer MUST NOT conflate them.";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["key"];
+            readonly properties: {
+                readonly key: {
+                    readonly type: "string";
+                    readonly minLength: 1;
+                    readonly description: "The profile member or configuration key, e.g. `name` or `log.level`.";
+                };
+                readonly oldValue: {
+                    readonly description: "Value in force before the import. Absent when the field is unset.";
+                };
+                readonly newValue: {
+                    readonly description: "Value the imported document carries. Absent when the document omits the field.";
+                };
+            };
+        };
+        readonly ConfigExportDocument: {
+            readonly $anchor: "configExportDocument";
+            readonly title: "ConfigExportDocument";
+            readonly description: "A community's portable configuration: its profile plus the configuration overrides a maintainer stores for itself. Deliberately excludes per-host layers (environment variables, on-disk config files) — those describe where a maintainer runs, not what the community is, and carrying them would make an import overwrite the target host's own deployment settings.\n\nThis document is designed to survive a round-trip through a file. An operator exports it, keeps it, and feeds it back later — possibly to a different maintainer, possibly across a version boundary — so it is self-describing rather than relying on the Type URI of the envelope that happened to carry it.";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["schemaVersion", "exportedAt", "configOverrides"];
+            readonly properties: {
+                readonly schemaVersion: {
+                    readonly type: "integer";
+                    readonly minimum: 1;
+                    readonly description: "Version of this document's own shape. Not redundant with the Type URI version: once the document is written to a file it is bare JSON with no envelope, and this is the only thing a later reader has to check it against. A consumer MUST reject a version it does not implement rather than guess.";
+                };
+                readonly exportedAt: {
+                    readonly type: "string";
+                    readonly format: "date-time";
+                    readonly description: "When the export was taken. Provenance for the operator; a consumer does not act on it.";
+                };
+                readonly communityProfile: {
+                    readonly $ref: "#/$defs/CommunityProfileSnapshot";
+                    readonly description: "The community's profile at export time. Absent when the community has no profile yet — a maintainer exported before bootstrap.";
+                };
+                readonly configOverrides: {
+                    readonly type: "object";
+                    readonly additionalProperties: true;
+                    readonly description: "Stored configuration overrides as `key → value`, keyed by the maintainer's own configuration registry (the same keys `config/show` and `config/patch` use). An empty object is valid and means no overrides are set.";
+                };
+                readonly ext: {
+                    readonly $ref: "#/$defs/Ext";
+                };
+            };
+        };
+        readonly CommunityProfileSnapshot: {
+            readonly $anchor: "communityProfileSnapshot";
+            readonly title: "CommunityProfileSnapshot";
+            readonly description: "A community profile as a portable export carries it — the mutable profile members plus the immutable identity they belong to.\n\nDistinct from `vtc/_shared/community`'s `CommunityProfile`, which is the update-facing view and deliberately omits `communityDid` so that a patch cannot re-point a community's identity. Here the DID is REQUIRED and is the whole point: it is what lets an importing community refuse a document taken from a different one. `registryStatus` is absent because trust-registry reachability is a property of a running maintainer, not of exported state.";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["communityDid", "name", "language"];
+            readonly properties: {
+                readonly communityDid: {
+                    readonly type: "string";
+                    readonly minLength: 1;
+                    readonly description: "DID of the community this document was taken from. Immutable, set at install.";
+                };
+                readonly name: {
+                    readonly type: "string";
+                    readonly minLength: 1;
+                };
+                readonly description: {
+                    readonly type: "string";
+                };
+                readonly logoUrl: {
+                    readonly type: readonly ["string", "null"];
+                };
+                readonly publicUrl: {
+                    readonly type: readonly ["string", "null"];
+                };
+                readonly contactEmail: {
+                    readonly type: readonly ["string", "null"];
+                };
+                readonly language: {
+                    readonly type: "string";
+                    readonly minLength: 1;
+                    readonly description: "BCP 47 language tag.";
+                };
+                readonly extensions: {
+                    readonly type: "object";
+                    readonly description: "Opaque community-defined extension bag.";
+                };
+                readonly createdAt: {
+                    readonly type: "string";
+                    readonly format: "date-time";
+                    readonly description: "When the community was created. Provenance only — an import never writes it.";
+                };
+            };
+        };
+    };
+};
 /**
  * SPEC.md §7.2 policy for the request variant, from this specification's
  * front matter. Pass to `consumeInbound` — items 5b, 7 and 8 are
- * per-specification and cannot be derived from the document alone.
+ * per-specification and cannot be derived from the document alone, and
+ * item 2 needs the schema this carries.
  */
 export declare const SPEC: {
     readonly typeUri: "https://trusttasks.org/spec/vtc/config/import/0.1";
     readonly isBearer: false;
     readonly isProofRequired: true;
     readonly isRecipientRequired: true;
+    readonly payloadSchema: {
+        readonly $schema: "https://json-schema.org/draft/2020-12/schema";
+        readonly $id: "https://trusttasks.org/spec/vtc/config/import/0.1";
+        readonly title: "VTC Config Import — payload";
+        readonly description: "Apply a portable configuration document to this community, or preview what applying it would change. Defaults to a preview.";
+        readonly type: "object";
+        readonly additionalProperties: false;
+        readonly required: readonly ["document"];
+        readonly properties: {
+            readonly document: {
+                readonly $ref: "#/$defs/ConfigExportDocument";
+                readonly description: "The document returned by `vtc/config/export`.";
+            };
+            readonly confirm: {
+                readonly type: "boolean";
+                readonly default: false;
+                readonly description: "`false` (default) previews: the diff is computed and returned, nothing is written. `true` applies it. The preview and the apply return the same shape, so an operator UX can render one and then re-submit.";
+            };
+            readonly ext: {
+                readonly $ref: "#/$defs/Ext";
+            };
+        };
+        readonly $defs: {
+            readonly Response: {
+                readonly $anchor: "response";
+                readonly title: "VTC Config Import — response payload";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["status", "profileChanges", "overrideChanges", "rejected"];
+                readonly properties: {
+                    readonly status: {
+                        readonly type: "string";
+                        readonly enum: readonly ["preview", "imported"];
+                        readonly description: "`preview` when `confirm` was not set; `imported` after the document was applied.";
+                    };
+                    readonly profileChanges: {
+                        readonly type: "array";
+                        readonly items: {
+                            readonly $ref: "#/$defs/ConfigFieldChange";
+                        };
+                        readonly description: "Community-profile members that differ from what is in force. Empty when the document omits `communityProfile`, or when nothing differs. On `imported` these are the changes that were written.";
+                    };
+                    readonly overrideChanges: {
+                        readonly type: "array";
+                        readonly items: {
+                            readonly $ref: "#/$defs/ConfigFieldChange";
+                        };
+                        readonly description: "Configuration-override keys that differ from what is in force. Rejected keys are not listed here — they appear under `rejected`. On `imported` these are the changes that were written.";
+                    };
+                    readonly pendingRestart: {
+                        readonly type: "array";
+                        readonly items: {
+                            readonly type: "string";
+                            readonly minLength: 1;
+                        };
+                        readonly uniqueItems: true;
+                        readonly description: "Applied keys whose new value takes effect only after a restart. Reported on a preview too, so an operator learns before confirming that the import implies downtime.";
+                    };
+                    readonly rejected: {
+                        readonly type: "array";
+                        readonly items: {
+                            readonly $ref: "#/$defs/RejectedKey";
+                        };
+                        readonly description: "Keys the consumer declined — unknown to its configuration registry, wrong type, out of range. Reported identically on preview and apply, so a preview surfaces every rejection before anything is written.";
+                    };
+                    readonly ext: {
+                        readonly $ref: "#/$defs/Ext";
+                    };
+                };
+            };
+            readonly Ext: {
+                readonly title: "Ext";
+                readonly description: "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.";
+                readonly type: "object";
+                readonly minProperties: 1;
+                readonly additionalProperties: true;
+                readonly propertyNames: {
+                    readonly pattern: "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$";
+                };
+            };
+            readonly RejectedKey: {
+                readonly $anchor: "rejectedKey";
+                readonly title: "RejectedKey";
+                readonly description: "A key a patch declined to apply, with the reason.";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["key", "reason"];
+                readonly properties: {
+                    readonly key: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                    };
+                    readonly reason: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                        readonly description: "Why the key was rejected — unknown key, wrong type, out-of-range, allowlist mismatch, etc.";
+                    };
+                };
+            };
+            readonly ConfigFieldChange: {
+                readonly $anchor: "configFieldChange";
+                readonly title: "ConfigFieldChange";
+                readonly description: "One field an import would change, or did.\n\n`oldValue` is absent when the field is not currently set — no profile yet, or no stored override for that key. `newValue` is absent when the imported document omits the field, which means \"leave the live value alone\" rather than \"clear it\"; a caller that intends to clear a nullable member sends an explicit `null`, which appears here as `newValue: null`. The two are different requests and a consumer MUST NOT conflate them.";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["key"];
+                readonly properties: {
+                    readonly key: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                        readonly description: "The profile member or configuration key, e.g. `name` or `log.level`.";
+                    };
+                    readonly oldValue: {
+                        readonly description: "Value in force before the import. Absent when the field is unset.";
+                    };
+                    readonly newValue: {
+                        readonly description: "Value the imported document carries. Absent when the document omits the field.";
+                    };
+                };
+            };
+            readonly ConfigExportDocument: {
+                readonly $anchor: "configExportDocument";
+                readonly title: "ConfigExportDocument";
+                readonly description: "A community's portable configuration: its profile plus the configuration overrides a maintainer stores for itself. Deliberately excludes per-host layers (environment variables, on-disk config files) — those describe where a maintainer runs, not what the community is, and carrying them would make an import overwrite the target host's own deployment settings.\n\nThis document is designed to survive a round-trip through a file. An operator exports it, keeps it, and feeds it back later — possibly to a different maintainer, possibly across a version boundary — so it is self-describing rather than relying on the Type URI of the envelope that happened to carry it.";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["schemaVersion", "exportedAt", "configOverrides"];
+                readonly properties: {
+                    readonly schemaVersion: {
+                        readonly type: "integer";
+                        readonly minimum: 1;
+                        readonly description: "Version of this document's own shape. Not redundant with the Type URI version: once the document is written to a file it is bare JSON with no envelope, and this is the only thing a later reader has to check it against. A consumer MUST reject a version it does not implement rather than guess.";
+                    };
+                    readonly exportedAt: {
+                        readonly type: "string";
+                        readonly format: "date-time";
+                        readonly description: "When the export was taken. Provenance for the operator; a consumer does not act on it.";
+                    };
+                    readonly communityProfile: {
+                        readonly $ref: "#/$defs/CommunityProfileSnapshot";
+                        readonly description: "The community's profile at export time. Absent when the community has no profile yet — a maintainer exported before bootstrap.";
+                    };
+                    readonly configOverrides: {
+                        readonly type: "object";
+                        readonly additionalProperties: true;
+                        readonly description: "Stored configuration overrides as `key → value`, keyed by the maintainer's own configuration registry (the same keys `config/show` and `config/patch` use). An empty object is valid and means no overrides are set.";
+                    };
+                    readonly ext: {
+                        readonly $ref: "#/$defs/Ext";
+                    };
+                };
+            };
+            readonly CommunityProfileSnapshot: {
+                readonly $anchor: "communityProfileSnapshot";
+                readonly title: "CommunityProfileSnapshot";
+                readonly description: "A community profile as a portable export carries it — the mutable profile members plus the immutable identity they belong to.\n\nDistinct from `vtc/_shared/community`'s `CommunityProfile`, which is the update-facing view and deliberately omits `communityDid` so that a patch cannot re-point a community's identity. Here the DID is REQUIRED and is the whole point: it is what lets an importing community refuse a document taken from a different one. `registryStatus` is absent because trust-registry reachability is a property of a running maintainer, not of exported state.";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["communityDid", "name", "language"];
+                readonly properties: {
+                    readonly communityDid: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                        readonly description: "DID of the community this document was taken from. Immutable, set at install.";
+                    };
+                    readonly name: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                    };
+                    readonly description: {
+                        readonly type: "string";
+                    };
+                    readonly logoUrl: {
+                        readonly type: readonly ["string", "null"];
+                    };
+                    readonly publicUrl: {
+                        readonly type: readonly ["string", "null"];
+                    };
+                    readonly contactEmail: {
+                        readonly type: readonly ["string", "null"];
+                    };
+                    readonly language: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                        readonly description: "BCP 47 language tag.";
+                    };
+                    readonly extensions: {
+                        readonly type: "object";
+                        readonly description: "Opaque community-defined extension bag.";
+                    };
+                    readonly createdAt: {
+                        readonly type: "string";
+                        readonly format: "date-time";
+                        readonly description: "When the community was created. Provenance only — an import never writes it.";
+                    };
+                };
+            };
+        };
+    };
 };
 /**
  * SPEC.md §7.2 policy for the success-response variant. `isRecipientRequired`
@@ -151,5 +740,185 @@ export declare const RESPONSE_SPEC: {
     readonly isBearer: false;
     readonly isProofRequired: true;
     readonly isRecipientRequired: true;
+    readonly payloadSchema: {
+        readonly $schema: "https://json-schema.org/draft/2020-12/schema";
+        readonly $ref: "#/$defs/Response";
+        readonly $defs: {
+            readonly Response: {
+                readonly $anchor: "response";
+                readonly title: "VTC Config Import — response payload";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["status", "profileChanges", "overrideChanges", "rejected"];
+                readonly properties: {
+                    readonly status: {
+                        readonly type: "string";
+                        readonly enum: readonly ["preview", "imported"];
+                        readonly description: "`preview` when `confirm` was not set; `imported` after the document was applied.";
+                    };
+                    readonly profileChanges: {
+                        readonly type: "array";
+                        readonly items: {
+                            readonly $ref: "#/$defs/ConfigFieldChange";
+                        };
+                        readonly description: "Community-profile members that differ from what is in force. Empty when the document omits `communityProfile`, or when nothing differs. On `imported` these are the changes that were written.";
+                    };
+                    readonly overrideChanges: {
+                        readonly type: "array";
+                        readonly items: {
+                            readonly $ref: "#/$defs/ConfigFieldChange";
+                        };
+                        readonly description: "Configuration-override keys that differ from what is in force. Rejected keys are not listed here — they appear under `rejected`. On `imported` these are the changes that were written.";
+                    };
+                    readonly pendingRestart: {
+                        readonly type: "array";
+                        readonly items: {
+                            readonly type: "string";
+                            readonly minLength: 1;
+                        };
+                        readonly uniqueItems: true;
+                        readonly description: "Applied keys whose new value takes effect only after a restart. Reported on a preview too, so an operator learns before confirming that the import implies downtime.";
+                    };
+                    readonly rejected: {
+                        readonly type: "array";
+                        readonly items: {
+                            readonly $ref: "#/$defs/RejectedKey";
+                        };
+                        readonly description: "Keys the consumer declined — unknown to its configuration registry, wrong type, out of range. Reported identically on preview and apply, so a preview surfaces every rejection before anything is written.";
+                    };
+                    readonly ext: {
+                        readonly $ref: "#/$defs/Ext";
+                    };
+                };
+            };
+            readonly Ext: {
+                readonly title: "Ext";
+                readonly description: "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.";
+                readonly type: "object";
+                readonly minProperties: 1;
+                readonly additionalProperties: true;
+                readonly propertyNames: {
+                    readonly pattern: "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$";
+                };
+            };
+            readonly RejectedKey: {
+                readonly $anchor: "rejectedKey";
+                readonly title: "RejectedKey";
+                readonly description: "A key a patch declined to apply, with the reason.";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["key", "reason"];
+                readonly properties: {
+                    readonly key: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                    };
+                    readonly reason: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                        readonly description: "Why the key was rejected — unknown key, wrong type, out-of-range, allowlist mismatch, etc.";
+                    };
+                };
+            };
+            readonly ConfigFieldChange: {
+                readonly $anchor: "configFieldChange";
+                readonly title: "ConfigFieldChange";
+                readonly description: "One field an import would change, or did.\n\n`oldValue` is absent when the field is not currently set — no profile yet, or no stored override for that key. `newValue` is absent when the imported document omits the field, which means \"leave the live value alone\" rather than \"clear it\"; a caller that intends to clear a nullable member sends an explicit `null`, which appears here as `newValue: null`. The two are different requests and a consumer MUST NOT conflate them.";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["key"];
+                readonly properties: {
+                    readonly key: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                        readonly description: "The profile member or configuration key, e.g. `name` or `log.level`.";
+                    };
+                    readonly oldValue: {
+                        readonly description: "Value in force before the import. Absent when the field is unset.";
+                    };
+                    readonly newValue: {
+                        readonly description: "Value the imported document carries. Absent when the document omits the field.";
+                    };
+                };
+            };
+            readonly ConfigExportDocument: {
+                readonly $anchor: "configExportDocument";
+                readonly title: "ConfigExportDocument";
+                readonly description: "A community's portable configuration: its profile plus the configuration overrides a maintainer stores for itself. Deliberately excludes per-host layers (environment variables, on-disk config files) — those describe where a maintainer runs, not what the community is, and carrying them would make an import overwrite the target host's own deployment settings.\n\nThis document is designed to survive a round-trip through a file. An operator exports it, keeps it, and feeds it back later — possibly to a different maintainer, possibly across a version boundary — so it is self-describing rather than relying on the Type URI of the envelope that happened to carry it.";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["schemaVersion", "exportedAt", "configOverrides"];
+                readonly properties: {
+                    readonly schemaVersion: {
+                        readonly type: "integer";
+                        readonly minimum: 1;
+                        readonly description: "Version of this document's own shape. Not redundant with the Type URI version: once the document is written to a file it is bare JSON with no envelope, and this is the only thing a later reader has to check it against. A consumer MUST reject a version it does not implement rather than guess.";
+                    };
+                    readonly exportedAt: {
+                        readonly type: "string";
+                        readonly format: "date-time";
+                        readonly description: "When the export was taken. Provenance for the operator; a consumer does not act on it.";
+                    };
+                    readonly communityProfile: {
+                        readonly $ref: "#/$defs/CommunityProfileSnapshot";
+                        readonly description: "The community's profile at export time. Absent when the community has no profile yet — a maintainer exported before bootstrap.";
+                    };
+                    readonly configOverrides: {
+                        readonly type: "object";
+                        readonly additionalProperties: true;
+                        readonly description: "Stored configuration overrides as `key → value`, keyed by the maintainer's own configuration registry (the same keys `config/show` and `config/patch` use). An empty object is valid and means no overrides are set.";
+                    };
+                    readonly ext: {
+                        readonly $ref: "#/$defs/Ext";
+                    };
+                };
+            };
+            readonly CommunityProfileSnapshot: {
+                readonly $anchor: "communityProfileSnapshot";
+                readonly title: "CommunityProfileSnapshot";
+                readonly description: "A community profile as a portable export carries it — the mutable profile members plus the immutable identity they belong to.\n\nDistinct from `vtc/_shared/community`'s `CommunityProfile`, which is the update-facing view and deliberately omits `communityDid` so that a patch cannot re-point a community's identity. Here the DID is REQUIRED and is the whole point: it is what lets an importing community refuse a document taken from a different one. `registryStatus` is absent because trust-registry reachability is a property of a running maintainer, not of exported state.";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["communityDid", "name", "language"];
+                readonly properties: {
+                    readonly communityDid: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                        readonly description: "DID of the community this document was taken from. Immutable, set at install.";
+                    };
+                    readonly name: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                    };
+                    readonly description: {
+                        readonly type: "string";
+                    };
+                    readonly logoUrl: {
+                        readonly type: readonly ["string", "null"];
+                    };
+                    readonly publicUrl: {
+                        readonly type: readonly ["string", "null"];
+                    };
+                    readonly contactEmail: {
+                        readonly type: readonly ["string", "null"];
+                    };
+                    readonly language: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                        readonly description: "BCP 47 language tag.";
+                    };
+                    readonly extensions: {
+                        readonly type: "object";
+                        readonly description: "Opaque community-defined extension bag.";
+                    };
+                    readonly createdAt: {
+                        readonly type: "string";
+                        readonly format: "date-time";
+                        readonly description: "When the community was created. Provenance only — an import never writes it.";
+                    };
+                };
+            };
+        };
+    };
 };
 //# sourceMappingURL=payload.d.ts.map