@openvtc/trust-tasks 0.8.2 → 0.10.0

package/dist/messaging/account/add/0.1/payload.d.ts

@@ -229,16 +229,609 @@ export type Payload = MessagingAddAccountPayload;
 export declare const RESPONSE_TYPE_URI: "https://trusttasks.org/spec/messaging/account/add/0.1#response";
 /** Stable alias for this specification's success-response payload shape. */
 export type Response = MessagingAddAccountResponsePayload;
+/**
+ * This specification's payload schema, as a value.
+ *
+ * SPEC.md §7.2 item 2 is performed against this. It is shipped as data
+ * rather than only as a `.json` file because TypeScript types are erased
+ * at runtime: without a schema a consumer has nothing to validate, and
+ * every REQUIRED payload member is optional in practice. Cross-file
+ * `$ref`s are already inlined, so it needs no resolver.
+ */
+export declare const PAYLOAD_SCHEMA: {
+    readonly $schema: "https://json-schema.org/draft/2020-12/schema";
+    readonly $id: "https://trusttasks.org/spec/messaging/account/add/0.1";
+    readonly title: "Messaging Add Account — payload";
+    readonly type: "object";
+    readonly additionalProperties: false;
+    readonly required: readonly ["did"];
+    readonly properties: {
+        readonly did: {
+            readonly $ref: "#/$defs/Vid";
+            readonly description: "The DID of the account to register.";
+        };
+        readonly accountType: {
+            readonly $ref: "#/$defs/AccountType";
+            readonly default: "standard";
+            readonly description: "The role to assign the new account. Defaults to `standard`; assigning a non-standard role requires administrative standing (only a rootAdmin may assign rootAdmin).";
+        };
+        readonly acl: {
+            readonly $ref: "#/$defs/MediatorAcl";
+            readonly description: "Initial access-control capabilities. Members omitted take the mediator's configured defaults.";
+        };
+        readonly queueLimits: {
+            readonly $ref: "#/$defs/QueueLimits";
+            readonly description: "Initial queued-message limits. Members omitted take the mediator's configured defaults.";
+        };
+        readonly ext: {
+            readonly $ref: "#/$defs/Ext";
+            readonly description: "Ecosystem-defined extension members per SPEC.md §4.5.1.";
+        };
+    };
+    readonly $defs: {
+        readonly Response: {
+            readonly $anchor: "response";
+            readonly title: "Messaging Add Account — response payload";
+            readonly description: "The success response to a messaging/account/add request. Carried in a Trust Task document whose type is https://trusttasks.org/spec/messaging/account/add/0.1#response.";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["account"];
+            readonly properties: {
+                readonly account: {
+                    readonly $ref: "#/$defs/Account";
+                    readonly description: "The full realized mediator view of the newly created account.";
+                };
+                readonly ext: {
+                    readonly $ref: "#/$defs/Ext";
+                    readonly description: "Ecosystem-defined extension members per SPEC.md §4.5.1.";
+                };
+            };
+        };
+        readonly Ext: {
+            readonly title: "Ext";
+            readonly description: "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.";
+            readonly type: "object";
+            readonly minProperties: 1;
+            readonly additionalProperties: true;
+            readonly propertyNames: {
+                readonly pattern: "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$";
+            };
+        };
+        readonly Account: {
+            readonly title: "Account";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["did", "accountType", "acl"];
+            readonly description: "The mediator's view of one served account.";
+            readonly properties: {
+                readonly did: {
+                    readonly $ref: "#/$defs/Vid";
+                    readonly description: "The account's controlling DID, or — for privacy, and for mediators that key accounts by a one-way hash and never hold the full DID — a stable hash of that DID (see `Vid`). Whichever form is used, it is the opaque account identifier the other `account/*`, `acl/*`, and `access-list/*` tasks accept.";
+                };
+                readonly accountType: {
+                    readonly $ref: "#/$defs/AccountType";
+                };
+                readonly acl: {
+                    readonly $ref: "#/$defs/MediatorAcl";
+                };
+                readonly queueLimits: {
+                    readonly $ref: "#/$defs/QueueLimits";
+                };
+                readonly sendQueueCount: {
+                    readonly type: "integer";
+                    readonly minimum: 0;
+                    readonly description: "Current count of queued send messages.";
+                };
+                readonly sendQueueBytes: {
+                    readonly type: "integer";
+                    readonly minimum: 0;
+                    readonly description: "Current byte size of queued send messages.";
+                };
+                readonly receiveQueueCount: {
+                    readonly type: "integer";
+                    readonly minimum: 0;
+                    readonly description: "Current count of queued receive messages.";
+                };
+                readonly receiveQueueBytes: {
+                    readonly type: "integer";
+                    readonly minimum: 0;
+                    readonly description: "Current byte size of queued receive messages.";
+                };
+                readonly accessListCount: {
+                    readonly type: "integer";
+                    readonly minimum: 0;
+                    readonly description: "Number of entries in the account's access list.";
+                };
+            };
+        };
+        readonly QueueLimits: {
+            readonly title: "QueueLimits";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly description: "Per-account queued-message limits. A value of -1 means unlimited; a member omitted on a change request leaves that limit unchanged.";
+            readonly properties: {
+                readonly sendQueueLimit: {
+                    readonly type: "integer";
+                    readonly minimum: -1;
+                    readonly description: "Maximum queued send messages; -1 = unlimited.";
+                };
+                readonly receiveQueueLimit: {
+                    readonly type: "integer";
+                    readonly minimum: -1;
+                    readonly description: "Maximum queued receive messages; -1 = unlimited.";
+                };
+            };
+        };
+        readonly MediatorAcl: {
+            readonly title: "MediatorAcl";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly description: "The mediator's per-account access-control capability set, expressed as named booleans (the transport-agnostic form of the mediator's internal capability flags). On a set request, members omitted are left unchanged; a get/response carries the full realized set.";
+            readonly properties: {
+                readonly accessListMode: {
+                    readonly type: "string";
+                    readonly enum: readonly ["explicitAllow", "explicitDeny"];
+                    readonly description: "How the account's access list is interpreted. `explicitAllow` = an allowlist (empty denies everyone); `explicitDeny` = a denylist (empty allows everyone).";
+                };
+                readonly blocked: {
+                    readonly type: "boolean";
+                    readonly description: "The account is blocked from authenticating and transacting.";
+                };
+                readonly local: {
+                    readonly type: "boolean";
+                    readonly description: "Messages for this account may be stored locally at this mediator for pickup.";
+                };
+                readonly sendMessages: {
+                    readonly type: "boolean";
+                    readonly description: "May send direct messages through the mediator.";
+                };
+                readonly receiveMessages: {
+                    readonly type: "boolean";
+                    readonly description: "May receive direct messages.";
+                };
+                readonly sendForwarded: {
+                    readonly type: "boolean";
+                    readonly description: "May send routing/forward (relay) messages.";
+                };
+                readonly receiveForwarded: {
+                    readonly type: "boolean";
+                    readonly description: "May be the next hop of a forwarded message.";
+                };
+                readonly createInvites: {
+                    readonly type: "boolean";
+                    readonly description: "May create out-of-band invitations.";
+                };
+                readonly anonReceive: {
+                    readonly type: "boolean";
+                    readonly description: "Accepts anonymous (no authenticated sender) messages.";
+                };
+                readonly selfManageList: {
+                    readonly type: "boolean";
+                    readonly description: "May self-manage its own access list.";
+                };
+                readonly selfManageSendQueueLimit: {
+                    readonly type: "boolean";
+                    readonly description: "May self-manage its own send-queue limit.";
+                };
+                readonly selfManageReceiveQueueLimit: {
+                    readonly type: "boolean";
+                    readonly description: "May self-manage its own receive-queue limit.";
+                };
+                readonly didcommEnabled: {
+                    readonly type: "boolean";
+                    readonly description: "The account accepts DIDComm-protocol delivery. Default true; set false for a TSP-only node.";
+                };
+                readonly tspEnabled: {
+                    readonly type: "boolean";
+                    readonly description: "The account accepts TSP-protocol delivery. Default true; set false for a DIDComm-only node.";
+                };
+            };
+        };
+        readonly AccountType: {
+            readonly title: "AccountType";
+            readonly type: "string";
+            readonly enum: readonly ["standard", "admin", "rootAdmin", "mediator"];
+            readonly description: "The account's role at the mediator. `standard` is an ordinary served account; `admin`/`rootAdmin` may administer other accounts; `mediator` is the mediator's own account. Only a rootAdmin may assign or modify the rootAdmin role.";
+        };
+        readonly Vid: {
+            readonly title: "Vid";
+            readonly type: "string";
+            readonly minLength: 1;
+            readonly description: "A Verifiable Identifier (SPEC §4.8). For a mediator-served account this is the account's controlling DID, carried verbatim and compared by exact string equality. For privacy — and because some mediators key accounts by a one-way hash and never hold the full DID — a stable hash of the DID (e.g. its SHA-256 digest) is an equally valid value here: producer and consumer simply agree on the same opaque identifier and compare by exact string equality. The field carries whichever form the issuing mediator uses.";
+        };
+    };
+};
+/** As {@link PAYLOAD_SCHEMA}, for the success-response variant. */
+export declare const RESPONSE_PAYLOAD_SCHEMA: {
+    readonly $schema: "https://json-schema.org/draft/2020-12/schema";
+    readonly $ref: "#/$defs/Response";
+    readonly $defs: {
+        readonly Response: {
+            readonly $anchor: "response";
+            readonly title: "Messaging Add Account — response payload";
+            readonly description: "The success response to a messaging/account/add request. Carried in a Trust Task document whose type is https://trusttasks.org/spec/messaging/account/add/0.1#response.";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["account"];
+            readonly properties: {
+                readonly account: {
+                    readonly $ref: "#/$defs/Account";
+                    readonly description: "The full realized mediator view of the newly created account.";
+                };
+                readonly ext: {
+                    readonly $ref: "#/$defs/Ext";
+                    readonly description: "Ecosystem-defined extension members per SPEC.md §4.5.1.";
+                };
+            };
+        };
+        readonly Ext: {
+            readonly title: "Ext";
+            readonly description: "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.";
+            readonly type: "object";
+            readonly minProperties: 1;
+            readonly additionalProperties: true;
+            readonly propertyNames: {
+                readonly pattern: "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$";
+            };
+        };
+        readonly Account: {
+            readonly title: "Account";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["did", "accountType", "acl"];
+            readonly description: "The mediator's view of one served account.";
+            readonly properties: {
+                readonly did: {
+                    readonly $ref: "#/$defs/Vid";
+                    readonly description: "The account's controlling DID, or — for privacy, and for mediators that key accounts by a one-way hash and never hold the full DID — a stable hash of that DID (see `Vid`). Whichever form is used, it is the opaque account identifier the other `account/*`, `acl/*`, and `access-list/*` tasks accept.";
+                };
+                readonly accountType: {
+                    readonly $ref: "#/$defs/AccountType";
+                };
+                readonly acl: {
+                    readonly $ref: "#/$defs/MediatorAcl";
+                };
+                readonly queueLimits: {
+                    readonly $ref: "#/$defs/QueueLimits";
+                };
+                readonly sendQueueCount: {
+                    readonly type: "integer";
+                    readonly minimum: 0;
+                    readonly description: "Current count of queued send messages.";
+                };
+                readonly sendQueueBytes: {
+                    readonly type: "integer";
+                    readonly minimum: 0;
+                    readonly description: "Current byte size of queued send messages.";
+                };
+                readonly receiveQueueCount: {
+                    readonly type: "integer";
+                    readonly minimum: 0;
+                    readonly description: "Current count of queued receive messages.";
+                };
+                readonly receiveQueueBytes: {
+                    readonly type: "integer";
+                    readonly minimum: 0;
+                    readonly description: "Current byte size of queued receive messages.";
+                };
+                readonly accessListCount: {
+                    readonly type: "integer";
+                    readonly minimum: 0;
+                    readonly description: "Number of entries in the account's access list.";
+                };
+            };
+        };
+        readonly QueueLimits: {
+            readonly title: "QueueLimits";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly description: "Per-account queued-message limits. A value of -1 means unlimited; a member omitted on a change request leaves that limit unchanged.";
+            readonly properties: {
+                readonly sendQueueLimit: {
+                    readonly type: "integer";
+                    readonly minimum: -1;
+                    readonly description: "Maximum queued send messages; -1 = unlimited.";
+                };
+                readonly receiveQueueLimit: {
+                    readonly type: "integer";
+                    readonly minimum: -1;
+                    readonly description: "Maximum queued receive messages; -1 = unlimited.";
+                };
+            };
+        };
+        readonly MediatorAcl: {
+            readonly title: "MediatorAcl";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly description: "The mediator's per-account access-control capability set, expressed as named booleans (the transport-agnostic form of the mediator's internal capability flags). On a set request, members omitted are left unchanged; a get/response carries the full realized set.";
+            readonly properties: {
+                readonly accessListMode: {
+                    readonly type: "string";
+                    readonly enum: readonly ["explicitAllow", "explicitDeny"];
+                    readonly description: "How the account's access list is interpreted. `explicitAllow` = an allowlist (empty denies everyone); `explicitDeny` = a denylist (empty allows everyone).";
+                };
+                readonly blocked: {
+                    readonly type: "boolean";
+                    readonly description: "The account is blocked from authenticating and transacting.";
+                };
+                readonly local: {
+                    readonly type: "boolean";
+                    readonly description: "Messages for this account may be stored locally at this mediator for pickup.";
+                };
+                readonly sendMessages: {
+                    readonly type: "boolean";
+                    readonly description: "May send direct messages through the mediator.";
+                };
+                readonly receiveMessages: {
+                    readonly type: "boolean";
+                    readonly description: "May receive direct messages.";
+                };
+                readonly sendForwarded: {
+                    readonly type: "boolean";
+                    readonly description: "May send routing/forward (relay) messages.";
+                };
+                readonly receiveForwarded: {
+                    readonly type: "boolean";
+                    readonly description: "May be the next hop of a forwarded message.";
+                };
+                readonly createInvites: {
+                    readonly type: "boolean";
+                    readonly description: "May create out-of-band invitations.";
+                };
+                readonly anonReceive: {
+                    readonly type: "boolean";
+                    readonly description: "Accepts anonymous (no authenticated sender) messages.";
+                };
+                readonly selfManageList: {
+                    readonly type: "boolean";
+                    readonly description: "May self-manage its own access list.";
+                };
+                readonly selfManageSendQueueLimit: {
+                    readonly type: "boolean";
+                    readonly description: "May self-manage its own send-queue limit.";
+                };
+                readonly selfManageReceiveQueueLimit: {
+                    readonly type: "boolean";
+                    readonly description: "May self-manage its own receive-queue limit.";
+                };
+                readonly didcommEnabled: {
+                    readonly type: "boolean";
+                    readonly description: "The account accepts DIDComm-protocol delivery. Default true; set false for a TSP-only node.";
+                };
+                readonly tspEnabled: {
+                    readonly type: "boolean";
+                    readonly description: "The account accepts TSP-protocol delivery. Default true; set false for a DIDComm-only node.";
+                };
+            };
+        };
+        readonly AccountType: {
+            readonly title: "AccountType";
+            readonly type: "string";
+            readonly enum: readonly ["standard", "admin", "rootAdmin", "mediator"];
+            readonly description: "The account's role at the mediator. `standard` is an ordinary served account; `admin`/`rootAdmin` may administer other accounts; `mediator` is the mediator's own account. Only a rootAdmin may assign or modify the rootAdmin role.";
+        };
+        readonly Vid: {
+            readonly title: "Vid";
+            readonly type: "string";
+            readonly minLength: 1;
+            readonly description: "A Verifiable Identifier (SPEC §4.8). For a mediator-served account this is the account's controlling DID, carried verbatim and compared by exact string equality. For privacy — and because some mediators key accounts by a one-way hash and never hold the full DID — a stable hash of the DID (e.g. its SHA-256 digest) is an equally valid value here: producer and consumer simply agree on the same opaque identifier and compare by exact string equality. The field carries whichever form the issuing mediator uses.";
+        };
+    };
+};
 /**
  * SPEC.md §7.2 policy for the request variant, from this specification's
  * front matter. Pass to `consumeInbound` — items 5b, 7 and 8 are
- * per-specification and cannot be derived from the document alone.
+ * per-specification and cannot be derived from the document alone, and
+ * item 2 needs the schema this carries.
  */
 export declare const SPEC: {
     readonly typeUri: "https://trusttasks.org/spec/messaging/account/add/0.1";
     readonly isBearer: false;
     readonly isProofRequired: true;
     readonly isRecipientRequired: true;
+    readonly payloadSchema: {
+        readonly $schema: "https://json-schema.org/draft/2020-12/schema";
+        readonly $id: "https://trusttasks.org/spec/messaging/account/add/0.1";
+        readonly title: "Messaging Add Account — payload";
+        readonly type: "object";
+        readonly additionalProperties: false;
+        readonly required: readonly ["did"];
+        readonly properties: {
+            readonly did: {
+                readonly $ref: "#/$defs/Vid";
+                readonly description: "The DID of the account to register.";
+            };
+            readonly accountType: {
+                readonly $ref: "#/$defs/AccountType";
+                readonly default: "standard";
+                readonly description: "The role to assign the new account. Defaults to `standard`; assigning a non-standard role requires administrative standing (only a rootAdmin may assign rootAdmin).";
+            };
+            readonly acl: {
+                readonly $ref: "#/$defs/MediatorAcl";
+                readonly description: "Initial access-control capabilities. Members omitted take the mediator's configured defaults.";
+            };
+            readonly queueLimits: {
+                readonly $ref: "#/$defs/QueueLimits";
+                readonly description: "Initial queued-message limits. Members omitted take the mediator's configured defaults.";
+            };
+            readonly ext: {
+                readonly $ref: "#/$defs/Ext";
+                readonly description: "Ecosystem-defined extension members per SPEC.md §4.5.1.";
+            };
+        };
+        readonly $defs: {
+            readonly Response: {
+                readonly $anchor: "response";
+                readonly title: "Messaging Add Account — response payload";
+                readonly description: "The success response to a messaging/account/add request. Carried in a Trust Task document whose type is https://trusttasks.org/spec/messaging/account/add/0.1#response.";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["account"];
+                readonly properties: {
+                    readonly account: {
+                        readonly $ref: "#/$defs/Account";
+                        readonly description: "The full realized mediator view of the newly created account.";
+                    };
+                    readonly ext: {
+                        readonly $ref: "#/$defs/Ext";
+                        readonly description: "Ecosystem-defined extension members per SPEC.md §4.5.1.";
+                    };
+                };
+            };
+            readonly Ext: {
+                readonly title: "Ext";
+                readonly description: "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.";
+                readonly type: "object";
+                readonly minProperties: 1;
+                readonly additionalProperties: true;
+                readonly propertyNames: {
+                    readonly pattern: "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$";
+                };
+            };
+            readonly Account: {
+                readonly title: "Account";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["did", "accountType", "acl"];
+                readonly description: "The mediator's view of one served account.";
+                readonly properties: {
+                    readonly did: {
+                        readonly $ref: "#/$defs/Vid";
+                        readonly description: "The account's controlling DID, or — for privacy, and for mediators that key accounts by a one-way hash and never hold the full DID — a stable hash of that DID (see `Vid`). Whichever form is used, it is the opaque account identifier the other `account/*`, `acl/*`, and `access-list/*` tasks accept.";
+                    };
+                    readonly accountType: {
+                        readonly $ref: "#/$defs/AccountType";
+                    };
+                    readonly acl: {
+                        readonly $ref: "#/$defs/MediatorAcl";
+                    };
+                    readonly queueLimits: {
+                        readonly $ref: "#/$defs/QueueLimits";
+                    };
+                    readonly sendQueueCount: {
+                        readonly type: "integer";
+                        readonly minimum: 0;
+                        readonly description: "Current count of queued send messages.";
+                    };
+                    readonly sendQueueBytes: {
+                        readonly type: "integer";
+                        readonly minimum: 0;
+                        readonly description: "Current byte size of queued send messages.";
+                    };
+                    readonly receiveQueueCount: {
+                        readonly type: "integer";
+                        readonly minimum: 0;
+                        readonly description: "Current count of queued receive messages.";
+                    };
+                    readonly receiveQueueBytes: {
+                        readonly type: "integer";
+                        readonly minimum: 0;
+                        readonly description: "Current byte size of queued receive messages.";
+                    };
+                    readonly accessListCount: {
+                        readonly type: "integer";
+                        readonly minimum: 0;
+                        readonly description: "Number of entries in the account's access list.";
+                    };
+                };
+            };
+            readonly QueueLimits: {
+                readonly title: "QueueLimits";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly description: "Per-account queued-message limits. A value of -1 means unlimited; a member omitted on a change request leaves that limit unchanged.";
+                readonly properties: {
+                    readonly sendQueueLimit: {
+                        readonly type: "integer";
+                        readonly minimum: -1;
+                        readonly description: "Maximum queued send messages; -1 = unlimited.";
+                    };
+                    readonly receiveQueueLimit: {
+                        readonly type: "integer";
+                        readonly minimum: -1;
+                        readonly description: "Maximum queued receive messages; -1 = unlimited.";
+                    };
+                };
+            };
+            readonly MediatorAcl: {
+                readonly title: "MediatorAcl";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly description: "The mediator's per-account access-control capability set, expressed as named booleans (the transport-agnostic form of the mediator's internal capability flags). On a set request, members omitted are left unchanged; a get/response carries the full realized set.";
+                readonly properties: {
+                    readonly accessListMode: {
+                        readonly type: "string";
+                        readonly enum: readonly ["explicitAllow", "explicitDeny"];
+                        readonly description: "How the account's access list is interpreted. `explicitAllow` = an allowlist (empty denies everyone); `explicitDeny` = a denylist (empty allows everyone).";
+                    };
+                    readonly blocked: {
+                        readonly type: "boolean";
+                        readonly description: "The account is blocked from authenticating and transacting.";
+                    };
+                    readonly local: {
+                        readonly type: "boolean";
+                        readonly description: "Messages for this account may be stored locally at this mediator for pickup.";
+                    };
+                    readonly sendMessages: {
+                        readonly type: "boolean";
+                        readonly description: "May send direct messages through the mediator.";
+                    };
+                    readonly receiveMessages: {
+                        readonly type: "boolean";
+                        readonly description: "May receive direct messages.";
+                    };
+                    readonly sendForwarded: {
+                        readonly type: "boolean";
+                        readonly description: "May send routing/forward (relay) messages.";
+                    };
+                    readonly receiveForwarded: {
+                        readonly type: "boolean";
+                        readonly description: "May be the next hop of a forwarded message.";
+                    };
+                    readonly createInvites: {
+                        readonly type: "boolean";
+                        readonly description: "May create out-of-band invitations.";
+                    };
+                    readonly anonReceive: {
+                        readonly type: "boolean";
+                        readonly description: "Accepts anonymous (no authenticated sender) messages.";
+                    };
+                    readonly selfManageList: {
+                        readonly type: "boolean";
+                        readonly description: "May self-manage its own access list.";
+                    };
+                    readonly selfManageSendQueueLimit: {
+                        readonly type: "boolean";
+                        readonly description: "May self-manage its own send-queue limit.";
+                    };
+                    readonly selfManageReceiveQueueLimit: {
+                        readonly type: "boolean";
+                        readonly description: "May self-manage its own receive-queue limit.";
+                    };
+                    readonly didcommEnabled: {
+                        readonly type: "boolean";
+                        readonly description: "The account accepts DIDComm-protocol delivery. Default true; set false for a TSP-only node.";
+                    };
+                    readonly tspEnabled: {
+                        readonly type: "boolean";
+                        readonly description: "The account accepts TSP-protocol delivery. Default true; set false for a DIDComm-only node.";
+                    };
+                };
+            };
+            readonly AccountType: {
+                readonly title: "AccountType";
+                readonly type: "string";
+                readonly enum: readonly ["standard", "admin", "rootAdmin", "mediator"];
+                readonly description: "The account's role at the mediator. `standard` is an ordinary served account; `admin`/`rootAdmin` may administer other accounts; `mediator` is the mediator's own account. Only a rootAdmin may assign or modify the rootAdmin role.";
+            };
+            readonly Vid: {
+                readonly title: "Vid";
+                readonly type: "string";
+                readonly minLength: 1;
+                readonly description: "A Verifiable Identifier (SPEC §4.8). For a mediator-served account this is the account's controlling DID, carried verbatim and compared by exact string equality. For privacy — and because some mediators key accounts by a one-way hash and never hold the full DID — a stable hash of the DID (e.g. its SHA-256 digest) is an equally valid value here: producer and consumer simply agree on the same opaque identifier and compare by exact string equality. The field carries whichever form the issuing mediator uses.";
+            };
+        };
+    };
 };
 /**
  * SPEC.md §7.2 policy for the success-response variant. `isRecipientRequired`
@@ -250,5 +843,181 @@ export declare const RESPONSE_SPEC: {
     readonly isBearer: false;
     readonly isProofRequired: true;
     readonly isRecipientRequired: true;
+    readonly payloadSchema: {
+        readonly $schema: "https://json-schema.org/draft/2020-12/schema";
+        readonly $ref: "#/$defs/Response";
+        readonly $defs: {
+            readonly Response: {
+                readonly $anchor: "response";
+                readonly title: "Messaging Add Account — response payload";
+                readonly description: "The success response to a messaging/account/add request. Carried in a Trust Task document whose type is https://trusttasks.org/spec/messaging/account/add/0.1#response.";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["account"];
+                readonly properties: {
+                    readonly account: {
+                        readonly $ref: "#/$defs/Account";
+                        readonly description: "The full realized mediator view of the newly created account.";
+                    };
+                    readonly ext: {
+                        readonly $ref: "#/$defs/Ext";
+                        readonly description: "Ecosystem-defined extension members per SPEC.md §4.5.1.";
+                    };
+                };
+            };
+            readonly Ext: {
+                readonly title: "Ext";
+                readonly description: "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.";
+                readonly type: "object";
+                readonly minProperties: 1;
+                readonly additionalProperties: true;
+                readonly propertyNames: {
+                    readonly pattern: "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$";
+                };
+            };
+            readonly Account: {
+                readonly title: "Account";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["did", "accountType", "acl"];
+                readonly description: "The mediator's view of one served account.";
+                readonly properties: {
+                    readonly did: {
+                        readonly $ref: "#/$defs/Vid";
+                        readonly description: "The account's controlling DID, or — for privacy, and for mediators that key accounts by a one-way hash and never hold the full DID — a stable hash of that DID (see `Vid`). Whichever form is used, it is the opaque account identifier the other `account/*`, `acl/*`, and `access-list/*` tasks accept.";
+                    };
+                    readonly accountType: {
+                        readonly $ref: "#/$defs/AccountType";
+                    };
+                    readonly acl: {
+                        readonly $ref: "#/$defs/MediatorAcl";
+                    };
+                    readonly queueLimits: {
+                        readonly $ref: "#/$defs/QueueLimits";
+                    };
+                    readonly sendQueueCount: {
+                        readonly type: "integer";
+                        readonly minimum: 0;
+                        readonly description: "Current count of queued send messages.";
+                    };
+                    readonly sendQueueBytes: {
+                        readonly type: "integer";
+                        readonly minimum: 0;
+                        readonly description: "Current byte size of queued send messages.";
+                    };
+                    readonly receiveQueueCount: {
+                        readonly type: "integer";
+                        readonly minimum: 0;
+                        readonly description: "Current count of queued receive messages.";
+                    };
+                    readonly receiveQueueBytes: {
+                        readonly type: "integer";
+                        readonly minimum: 0;
+                        readonly description: "Current byte size of queued receive messages.";
+                    };
+                    readonly accessListCount: {
+                        readonly type: "integer";
+                        readonly minimum: 0;
+                        readonly description: "Number of entries in the account's access list.";
+                    };
+                };
+            };
+            readonly QueueLimits: {
+                readonly title: "QueueLimits";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly description: "Per-account queued-message limits. A value of -1 means unlimited; a member omitted on a change request leaves that limit unchanged.";
+                readonly properties: {
+                    readonly sendQueueLimit: {
+                        readonly type: "integer";
+                        readonly minimum: -1;
+                        readonly description: "Maximum queued send messages; -1 = unlimited.";
+                    };
+                    readonly receiveQueueLimit: {
+                        readonly type: "integer";
+                        readonly minimum: -1;
+                        readonly description: "Maximum queued receive messages; -1 = unlimited.";
+                    };
+                };
+            };
+            readonly MediatorAcl: {
+                readonly title: "MediatorAcl";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly description: "The mediator's per-account access-control capability set, expressed as named booleans (the transport-agnostic form of the mediator's internal capability flags). On a set request, members omitted are left unchanged; a get/response carries the full realized set.";
+                readonly properties: {
+                    readonly accessListMode: {
+                        readonly type: "string";
+                        readonly enum: readonly ["explicitAllow", "explicitDeny"];
+                        readonly description: "How the account's access list is interpreted. `explicitAllow` = an allowlist (empty denies everyone); `explicitDeny` = a denylist (empty allows everyone).";
+                    };
+                    readonly blocked: {
+                        readonly type: "boolean";
+                        readonly description: "The account is blocked from authenticating and transacting.";
+                    };
+                    readonly local: {
+                        readonly type: "boolean";
+                        readonly description: "Messages for this account may be stored locally at this mediator for pickup.";
+                    };
+                    readonly sendMessages: {
+                        readonly type: "boolean";
+                        readonly description: "May send direct messages through the mediator.";
+                    };
+                    readonly receiveMessages: {
+                        readonly type: "boolean";
+                        readonly description: "May receive direct messages.";
+                    };
+                    readonly sendForwarded: {
+                        readonly type: "boolean";
+                        readonly description: "May send routing/forward (relay) messages.";
+                    };
+                    readonly receiveForwarded: {
+                        readonly type: "boolean";
+                        readonly description: "May be the next hop of a forwarded message.";
+                    };
+                    readonly createInvites: {
+                        readonly type: "boolean";
+                        readonly description: "May create out-of-band invitations.";
+                    };
+                    readonly anonReceive: {
+                        readonly type: "boolean";
+                        readonly description: "Accepts anonymous (no authenticated sender) messages.";
+                    };
+                    readonly selfManageList: {
+                        readonly type: "boolean";
+                        readonly description: "May self-manage its own access list.";
+                    };
+                    readonly selfManageSendQueueLimit: {
+                        readonly type: "boolean";
+                        readonly description: "May self-manage its own send-queue limit.";
+                    };
+                    readonly selfManageReceiveQueueLimit: {
+                        readonly type: "boolean";
+                        readonly description: "May self-manage its own receive-queue limit.";
+                    };
+                    readonly didcommEnabled: {
+                        readonly type: "boolean";
+                        readonly description: "The account accepts DIDComm-protocol delivery. Default true; set false for a TSP-only node.";
+                    };
+                    readonly tspEnabled: {
+                        readonly type: "boolean";
+                        readonly description: "The account accepts TSP-protocol delivery. Default true; set false for a DIDComm-only node.";
+                    };
+                };
+            };
+            readonly AccountType: {
+                readonly title: "AccountType";
+                readonly type: "string";
+                readonly enum: readonly ["standard", "admin", "rootAdmin", "mediator"];
+                readonly description: "The account's role at the mediator. `standard` is an ordinary served account; `admin`/`rootAdmin` may administer other accounts; `mediator` is the mediator's own account. Only a rootAdmin may assign or modify the rootAdmin role.";
+            };
+            readonly Vid: {
+                readonly title: "Vid";
+                readonly type: "string";
+                readonly minLength: 1;
+                readonly description: "A Verifiable Identifier (SPEC §4.8). For a mediator-served account this is the account's controlling DID, carried verbatim and compared by exact string equality. For privacy — and because some mediators key accounts by a one-way hash and never hold the full DID — a stable hash of the DID (e.g. its SHA-256 digest) is an equally valid value here: producer and consumer simply agree on the same opaque identifier and compare by exact string equality. The field carries whichever form the issuing mediator uses.";
+            };
+        };
+    };
 };
 //# sourceMappingURL=payload.d.ts.map