@openvtc/trust-tasks 0.8.2 → 0.10.0

package/dist/vta/webvh/dids/create/1.0/payload.d.ts

@@ -0,0 +1,806 @@
+/**
+ * Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
+ * Source: specs/vta/webvh/dids/create/1.0/payload.schema.json
+ */
+/**
+ * How the path under the host is chosen. Absent means `autoAssign`.
+ */
+export type WebvhPathMode = {
+    mode: "wellKnown";
+} | {
+    mode: "explicit";
+    path: string;
+} | {
+    mode: "autoAssign";
+};
+/**
+ * Mint a did:webvh: the VTA generates the keys, writes the log's first entry, and either hands it to a hosting server or returns it for the caller to serve.
+ */
+export interface VTAWebVHDIDsCreatePayload {
+    /**
+     * Context the DID belongs to. Its keys are minted here, and deleting the context destroys the DID.
+     */
+    contextId: string;
+    /**
+     * Hosting server to publish through. Absent means **serverless**: the caller serves the log itself at `url`, and the VTA holds no hosting registration for it.
+     */
+    serverId?: string;
+    /**
+     * Where the log will be served, for the serverless case. The DID's identity derives from this location, so changing it later is only possible for a `portable` DID.
+     */
+    url?: string;
+    /**
+     * Explicit path label under the host. Shorthand for pathMode `explicit`; supplying both is an error.
+     */
+    path?: string;
+    pathMode?: WebvhPathMode;
+    /**
+     * Hosting domain to publish under, when the server serves more than one.
+     */
+    domain?: string;
+    label?: string;
+    /**
+     * Whether this DID may later move to another domain and keep its identity. **Fixed at creation** — portability is committed in the first log entry and cannot be added afterwards. A DID created non-portable is tied to where it was published for its whole life.
+     */
+    portable?: boolean;
+    /**
+     * Add a DIDComm mediator service entry to the document.
+     */
+    addMediatorService?: boolean;
+    /**
+     * Add a TSP transport service entry to the document.
+     */
+    addTspService?: boolean;
+    /**
+     * Further service entries, verbatim.
+     */
+    additionalServices?: {}[];
+    /**
+     * How many successor keys to commit in advance. **`0` disables pre-rotation**, which means a compromise of the current key cannot be recovered from by rotating: the successor was never committed, so a thief can rotate to their own key as convincingly as the owner can.
+     */
+    preRotationCount?: number;
+    /**
+     * A DID document to publish rather than one the VTA composes.
+     */
+    didDocument?: {};
+    /**
+     * An existing log to adopt, for importing a DID minted elsewhere.
+     */
+    didLog?: string;
+    /**
+     * Make this the context's primary DID.
+     */
+    setPrimary?: boolean;
+    /**
+     * Existing key to sign log entries with. Absent mints a new one.
+     */
+    signingKeyId?: string;
+    /**
+     * Existing key-agreement key to publish. Absent mints a new one.
+     */
+    kaKeyId?: string;
+    /**
+     * DID template to render the document from (see vta/did-templates/*).
+     */
+    template?: string;
+    /**
+     * Context whose templates to resolve `template` against. Absent uses the global scope, which is a different namespace and may hold a different template of the same name.
+     */
+    templateContext?: string;
+    /**
+     * Variables for the template's placeholders.
+     */
+    templateVars?: {
+        [k: string]: string | undefined;
+    };
+    ext?: Ext;
+}
+/**
+ * Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.
+ */
+export interface Ext {
+    [k: string]: unknown | undefined;
+}
+/**
+ * Success response to vta/webvh/dids/create. Type https://trusttasks.org/spec/vta/webvh/dids/create/1.0#response.
+ */
+export interface VTAWebVHDIDsCreateResponsePayload {
+    did: string;
+    contextId: string;
+    serverId?: string;
+    /**
+     * The hosting server's handle for the record. Absent for a serverless DID.
+     */
+    mnemonic?: string;
+    /**
+     * Self-certifying identifier committing to the log's first entry.
+     */
+    scid: string;
+    portable: boolean;
+    signingKeyId: string;
+    kaKeyId: string;
+    /**
+     * Successor keys committed. `0` means pre-rotation is off for this DID.
+     */
+    preRotationKeyCount: number;
+    createdAt: string;
+    /**
+     * The published document, when the VTA composed one.
+     */
+    didDocument?: {};
+    /**
+     * The log's first entry. For a serverless DID this is what the caller must serve — the DID does not resolve until they do.
+     */
+    logEntry?: string;
+    ext?: Ext;
+}
+/** Trust Task type URI. */
+export declare const TYPE_URI: "https://trusttasks.org/spec/vta/webvh/dids/create/1.0";
+/** Stable alias for this specification's request payload shape. */
+export type Payload = VTAWebVHDIDsCreatePayload;
+/** Trust Task response type URI (request type URI + "#response"). */
+export declare const RESPONSE_TYPE_URI: "https://trusttasks.org/spec/vta/webvh/dids/create/1.0#response";
+/** Stable alias for this specification's success-response payload shape. */
+export type Response = VTAWebVHDIDsCreateResponsePayload;
+/**
+ * This specification's payload schema, as a value.
+ *
+ * SPEC.md §7.2 item 2 is performed against this. It is shipped as data
+ * rather than only as a `.json` file because TypeScript types are erased
+ * at runtime: without a schema a consumer has nothing to validate, and
+ * every REQUIRED payload member is optional in practice. Cross-file
+ * `$ref`s are already inlined, so it needs no resolver.
+ */
+export declare const PAYLOAD_SCHEMA: {
+    readonly $schema: "https://json-schema.org/draft/2020-12/schema";
+    readonly $id: "https://trusttasks.org/spec/vta/webvh/dids/create/1.0";
+    readonly title: "VTA WebVH DIDs Create — payload";
+    readonly description: "Mint a did:webvh: the VTA generates the keys, writes the log's first entry, and either hands it to a hosting server or returns it for the caller to serve.";
+    readonly type: "object";
+    readonly additionalProperties: false;
+    readonly required: readonly ["contextId"];
+    readonly properties: {
+        readonly contextId: {
+            readonly type: "string";
+            readonly minLength: 1;
+            readonly description: "Context the DID belongs to. Its keys are minted here, and deleting the context destroys the DID.";
+        };
+        readonly serverId: {
+            readonly type: "string";
+            readonly description: "Hosting server to publish through. Absent means **serverless**: the caller serves the log itself at `url`, and the VTA holds no hosting registration for it.";
+        };
+        readonly url: {
+            readonly type: "string";
+            readonly description: "Where the log will be served, for the serverless case. The DID's identity derives from this location, so changing it later is only possible for a `portable` DID.";
+        };
+        readonly path: {
+            readonly type: "string";
+            readonly description: "Explicit path label under the host. Shorthand for pathMode `explicit`; supplying both is an error.";
+        };
+        readonly pathMode: {
+            readonly $ref: "#/$defs/WebvhPathMode";
+            readonly description: "How the path under the host is chosen. Absent means `autoAssign`.";
+        };
+        readonly domain: {
+            readonly type: "string";
+            readonly description: "Hosting domain to publish under, when the server serves more than one.";
+        };
+        readonly label: {
+            readonly type: "string";
+        };
+        readonly portable: {
+            readonly type: "boolean";
+            readonly default: false;
+            readonly description: "Whether this DID may later move to another domain and keep its identity. **Fixed at creation** — portability is committed in the first log entry and cannot be added afterwards. A DID created non-portable is tied to where it was published for its whole life.";
+        };
+        readonly addMediatorService: {
+            readonly type: "boolean";
+            readonly description: "Add a DIDComm mediator service entry to the document.";
+        };
+        readonly addTspService: {
+            readonly type: "boolean";
+            readonly description: "Add a TSP transport service entry to the document.";
+        };
+        readonly additionalServices: {
+            readonly type: "array";
+            readonly items: {
+                readonly type: "object";
+            };
+            readonly description: "Further service entries, verbatim.";
+        };
+        readonly preRotationCount: {
+            readonly type: "integer";
+            readonly minimum: 0;
+            readonly description: "How many successor keys to commit in advance. **`0` disables pre-rotation**, which means a compromise of the current key cannot be recovered from by rotating: the successor was never committed, so a thief can rotate to their own key as convincingly as the owner can.";
+        };
+        readonly didDocument: {
+            readonly type: "object";
+            readonly description: "A DID document to publish rather than one the VTA composes.";
+        };
+        readonly didLog: {
+            readonly type: "string";
+            readonly description: "An existing log to adopt, for importing a DID minted elsewhere.";
+        };
+        readonly setPrimary: {
+            readonly type: "boolean";
+            readonly description: "Make this the context's primary DID.";
+        };
+        readonly signingKeyId: {
+            readonly type: "string";
+            readonly description: "Existing key to sign log entries with. Absent mints a new one.";
+        };
+        readonly kaKeyId: {
+            readonly type: "string";
+            readonly description: "Existing key-agreement key to publish. Absent mints a new one.";
+        };
+        readonly template: {
+            readonly type: "string";
+            readonly description: "DID template to render the document from (see vta/did-templates/*).";
+        };
+        readonly templateContext: {
+            readonly type: "string";
+            readonly description: "Context whose templates to resolve `template` against. Absent uses the global scope, which is a different namespace and may hold a different template of the same name.";
+        };
+        readonly templateVars: {
+            readonly type: "object";
+            readonly additionalProperties: {
+                readonly type: "string";
+            };
+            readonly description: "Variables for the template's placeholders.";
+        };
+        readonly ext: {
+            readonly $ref: "#/$defs/Ext";
+        };
+    };
+    readonly $defs: {
+        readonly WebvhPathMode: {
+            readonly title: "WebvhPathMode";
+            readonly description: "Where under the host the DID is served. `wellKnown` puts it at the host root (`/.well-known/did.jsonl`) — at most one DID per host can hold that. `explicit` names the path. `autoAssign` lets the server allocate one.";
+            readonly oneOf: readonly [{
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["mode"];
+                readonly properties: {
+                    readonly mode: {
+                        readonly const: "wellKnown";
+                    };
+                };
+            }, {
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["mode", "path"];
+                readonly properties: {
+                    readonly mode: {
+                        readonly const: "explicit";
+                    };
+                    readonly path: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                    };
+                };
+            }, {
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["mode"];
+                readonly properties: {
+                    readonly mode: {
+                        readonly const: "autoAssign";
+                    };
+                };
+            }];
+        };
+        readonly Response: {
+            readonly $anchor: "response";
+            readonly title: "VTA WebVH DIDs Create — response payload";
+            readonly description: "Success response to vta/webvh/dids/create. Type https://trusttasks.org/spec/vta/webvh/dids/create/1.0#response.";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["did", "contextId", "scid", "portable", "signingKeyId", "kaKeyId", "preRotationKeyCount", "createdAt"];
+            readonly properties: {
+                readonly did: {
+                    readonly type: "string";
+                };
+                readonly contextId: {
+                    readonly type: "string";
+                };
+                readonly serverId: {
+                    readonly type: "string";
+                };
+                readonly mnemonic: {
+                    readonly type: "string";
+                    readonly description: "The hosting server's handle for the record. Absent for a serverless DID.";
+                };
+                readonly scid: {
+                    readonly type: "string";
+                    readonly description: "Self-certifying identifier committing to the log's first entry.";
+                };
+                readonly portable: {
+                    readonly type: "boolean";
+                };
+                readonly signingKeyId: {
+                    readonly type: "string";
+                };
+                readonly kaKeyId: {
+                    readonly type: "string";
+                };
+                readonly preRotationKeyCount: {
+                    readonly type: "integer";
+                    readonly minimum: 0;
+                    readonly description: "Successor keys committed. `0` means pre-rotation is off for this DID.";
+                };
+                readonly createdAt: {
+                    readonly type: "string";
+                    readonly format: "date-time";
+                };
+                readonly didDocument: {
+                    readonly type: "object";
+                    readonly description: "The published document, when the VTA composed one.";
+                };
+                readonly logEntry: {
+                    readonly type: "string";
+                    readonly description: "The log's first entry. For a serverless DID this is what the caller must serve — the DID does not resolve until they do.";
+                };
+                readonly ext: {
+                    readonly $ref: "#/$defs/Ext";
+                };
+            };
+        };
+        readonly Ext: {
+            readonly title: "Ext";
+            readonly description: "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.";
+            readonly type: "object";
+            readonly minProperties: 1;
+            readonly additionalProperties: true;
+            readonly propertyNames: {
+                readonly pattern: "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$";
+            };
+        };
+    };
+};
+/** As {@link PAYLOAD_SCHEMA}, for the success-response variant. */
+export declare const RESPONSE_PAYLOAD_SCHEMA: {
+    readonly $schema: "https://json-schema.org/draft/2020-12/schema";
+    readonly $ref: "#/$defs/Response";
+    readonly $defs: {
+        readonly WebvhPathMode: {
+            readonly title: "WebvhPathMode";
+            readonly description: "Where under the host the DID is served. `wellKnown` puts it at the host root (`/.well-known/did.jsonl`) — at most one DID per host can hold that. `explicit` names the path. `autoAssign` lets the server allocate one.";
+            readonly oneOf: readonly [{
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["mode"];
+                readonly properties: {
+                    readonly mode: {
+                        readonly const: "wellKnown";
+                    };
+                };
+            }, {
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["mode", "path"];
+                readonly properties: {
+                    readonly mode: {
+                        readonly const: "explicit";
+                    };
+                    readonly path: {
+                        readonly type: "string";
+                        readonly minLength: 1;
+                    };
+                };
+            }, {
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["mode"];
+                readonly properties: {
+                    readonly mode: {
+                        readonly const: "autoAssign";
+                    };
+                };
+            }];
+        };
+        readonly Response: {
+            readonly $anchor: "response";
+            readonly title: "VTA WebVH DIDs Create — response payload";
+            readonly description: "Success response to vta/webvh/dids/create. Type https://trusttasks.org/spec/vta/webvh/dids/create/1.0#response.";
+            readonly type: "object";
+            readonly additionalProperties: false;
+            readonly required: readonly ["did", "contextId", "scid", "portable", "signingKeyId", "kaKeyId", "preRotationKeyCount", "createdAt"];
+            readonly properties: {
+                readonly did: {
+                    readonly type: "string";
+                };
+                readonly contextId: {
+                    readonly type: "string";
+                };
+                readonly serverId: {
+                    readonly type: "string";
+                };
+                readonly mnemonic: {
+                    readonly type: "string";
+                    readonly description: "The hosting server's handle for the record. Absent for a serverless DID.";
+                };
+                readonly scid: {
+                    readonly type: "string";
+                    readonly description: "Self-certifying identifier committing to the log's first entry.";
+                };
+                readonly portable: {
+                    readonly type: "boolean";
+                };
+                readonly signingKeyId: {
+                    readonly type: "string";
+                };
+                readonly kaKeyId: {
+                    readonly type: "string";
+                };
+                readonly preRotationKeyCount: {
+                    readonly type: "integer";
+                    readonly minimum: 0;
+                    readonly description: "Successor keys committed. `0` means pre-rotation is off for this DID.";
+                };
+                readonly createdAt: {
+                    readonly type: "string";
+                    readonly format: "date-time";
+                };
+                readonly didDocument: {
+                    readonly type: "object";
+                    readonly description: "The published document, when the VTA composed one.";
+                };
+                readonly logEntry: {
+                    readonly type: "string";
+                    readonly description: "The log's first entry. For a serverless DID this is what the caller must serve — the DID does not resolve until they do.";
+                };
+                readonly ext: {
+                    readonly $ref: "#/$defs/Ext";
+                };
+            };
+        };
+        readonly Ext: {
+            readonly title: "Ext";
+            readonly description: "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.";
+            readonly type: "object";
+            readonly minProperties: 1;
+            readonly additionalProperties: true;
+            readonly propertyNames: {
+                readonly pattern: "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$";
+            };
+        };
+    };
+};
+/**
+ * SPEC.md §7.2 policy for the request variant, from this specification's
+ * front matter. Pass to `consumeInbound` — items 5b, 7 and 8 are
+ * per-specification and cannot be derived from the document alone, and
+ * item 2 needs the schema this carries.
+ */
+export declare const SPEC: {
+    readonly typeUri: "https://trusttasks.org/spec/vta/webvh/dids/create/1.0";
+    readonly isBearer: false;
+    readonly isProofRequired: true;
+    readonly isRecipientRequired: true;
+    readonly payloadSchema: {
+        readonly $schema: "https://json-schema.org/draft/2020-12/schema";
+        readonly $id: "https://trusttasks.org/spec/vta/webvh/dids/create/1.0";
+        readonly title: "VTA WebVH DIDs Create — payload";
+        readonly description: "Mint a did:webvh: the VTA generates the keys, writes the log's first entry, and either hands it to a hosting server or returns it for the caller to serve.";
+        readonly type: "object";
+        readonly additionalProperties: false;
+        readonly required: readonly ["contextId"];
+        readonly properties: {
+            readonly contextId: {
+                readonly type: "string";
+                readonly minLength: 1;
+                readonly description: "Context the DID belongs to. Its keys are minted here, and deleting the context destroys the DID.";
+            };
+            readonly serverId: {
+                readonly type: "string";
+                readonly description: "Hosting server to publish through. Absent means **serverless**: the caller serves the log itself at `url`, and the VTA holds no hosting registration for it.";
+            };
+            readonly url: {
+                readonly type: "string";
+                readonly description: "Where the log will be served, for the serverless case. The DID's identity derives from this location, so changing it later is only possible for a `portable` DID.";
+            };
+            readonly path: {
+                readonly type: "string";
+                readonly description: "Explicit path label under the host. Shorthand for pathMode `explicit`; supplying both is an error.";
+            };
+            readonly pathMode: {
+                readonly $ref: "#/$defs/WebvhPathMode";
+                readonly description: "How the path under the host is chosen. Absent means `autoAssign`.";
+            };
+            readonly domain: {
+                readonly type: "string";
+                readonly description: "Hosting domain to publish under, when the server serves more than one.";
+            };
+            readonly label: {
+                readonly type: "string";
+            };
+            readonly portable: {
+                readonly type: "boolean";
+                readonly default: false;
+                readonly description: "Whether this DID may later move to another domain and keep its identity. **Fixed at creation** — portability is committed in the first log entry and cannot be added afterwards. A DID created non-portable is tied to where it was published for its whole life.";
+            };
+            readonly addMediatorService: {
+                readonly type: "boolean";
+                readonly description: "Add a DIDComm mediator service entry to the document.";
+            };
+            readonly addTspService: {
+                readonly type: "boolean";
+                readonly description: "Add a TSP transport service entry to the document.";
+            };
+            readonly additionalServices: {
+                readonly type: "array";
+                readonly items: {
+                    readonly type: "object";
+                };
+                readonly description: "Further service entries, verbatim.";
+            };
+            readonly preRotationCount: {
+                readonly type: "integer";
+                readonly minimum: 0;
+                readonly description: "How many successor keys to commit in advance. **`0` disables pre-rotation**, which means a compromise of the current key cannot be recovered from by rotating: the successor was never committed, so a thief can rotate to their own key as convincingly as the owner can.";
+            };
+            readonly didDocument: {
+                readonly type: "object";
+                readonly description: "A DID document to publish rather than one the VTA composes.";
+            };
+            readonly didLog: {
+                readonly type: "string";
+                readonly description: "An existing log to adopt, for importing a DID minted elsewhere.";
+            };
+            readonly setPrimary: {
+                readonly type: "boolean";
+                readonly description: "Make this the context's primary DID.";
+            };
+            readonly signingKeyId: {
+                readonly type: "string";
+                readonly description: "Existing key to sign log entries with. Absent mints a new one.";
+            };
+            readonly kaKeyId: {
+                readonly type: "string";
+                readonly description: "Existing key-agreement key to publish. Absent mints a new one.";
+            };
+            readonly template: {
+                readonly type: "string";
+                readonly description: "DID template to render the document from (see vta/did-templates/*).";
+            };
+            readonly templateContext: {
+                readonly type: "string";
+                readonly description: "Context whose templates to resolve `template` against. Absent uses the global scope, which is a different namespace and may hold a different template of the same name.";
+            };
+            readonly templateVars: {
+                readonly type: "object";
+                readonly additionalProperties: {
+                    readonly type: "string";
+                };
+                readonly description: "Variables for the template's placeholders.";
+            };
+            readonly ext: {
+                readonly $ref: "#/$defs/Ext";
+            };
+        };
+        readonly $defs: {
+            readonly WebvhPathMode: {
+                readonly title: "WebvhPathMode";
+                readonly description: "Where under the host the DID is served. `wellKnown` puts it at the host root (`/.well-known/did.jsonl`) — at most one DID per host can hold that. `explicit` names the path. `autoAssign` lets the server allocate one.";
+                readonly oneOf: readonly [{
+                    readonly type: "object";
+                    readonly additionalProperties: false;
+                    readonly required: readonly ["mode"];
+                    readonly properties: {
+                        readonly mode: {
+                            readonly const: "wellKnown";
+                        };
+                    };
+                }, {
+                    readonly type: "object";
+                    readonly additionalProperties: false;
+                    readonly required: readonly ["mode", "path"];
+                    readonly properties: {
+                        readonly mode: {
+                            readonly const: "explicit";
+                        };
+                        readonly path: {
+                            readonly type: "string";
+                            readonly minLength: 1;
+                        };
+                    };
+                }, {
+                    readonly type: "object";
+                    readonly additionalProperties: false;
+                    readonly required: readonly ["mode"];
+                    readonly properties: {
+                        readonly mode: {
+                            readonly const: "autoAssign";
+                        };
+                    };
+                }];
+            };
+            readonly Response: {
+                readonly $anchor: "response";
+                readonly title: "VTA WebVH DIDs Create — response payload";
+                readonly description: "Success response to vta/webvh/dids/create. Type https://trusttasks.org/spec/vta/webvh/dids/create/1.0#response.";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["did", "contextId", "scid", "portable", "signingKeyId", "kaKeyId", "preRotationKeyCount", "createdAt"];
+                readonly properties: {
+                    readonly did: {
+                        readonly type: "string";
+                    };
+                    readonly contextId: {
+                        readonly type: "string";
+                    };
+                    readonly serverId: {
+                        readonly type: "string";
+                    };
+                    readonly mnemonic: {
+                        readonly type: "string";
+                        readonly description: "The hosting server's handle for the record. Absent for a serverless DID.";
+                    };
+                    readonly scid: {
+                        readonly type: "string";
+                        readonly description: "Self-certifying identifier committing to the log's first entry.";
+                    };
+                    readonly portable: {
+                        readonly type: "boolean";
+                    };
+                    readonly signingKeyId: {
+                        readonly type: "string";
+                    };
+                    readonly kaKeyId: {
+                        readonly type: "string";
+                    };
+                    readonly preRotationKeyCount: {
+                        readonly type: "integer";
+                        readonly minimum: 0;
+                        readonly description: "Successor keys committed. `0` means pre-rotation is off for this DID.";
+                    };
+                    readonly createdAt: {
+                        readonly type: "string";
+                        readonly format: "date-time";
+                    };
+                    readonly didDocument: {
+                        readonly type: "object";
+                        readonly description: "The published document, when the VTA composed one.";
+                    };
+                    readonly logEntry: {
+                        readonly type: "string";
+                        readonly description: "The log's first entry. For a serverless DID this is what the caller must serve — the DID does not resolve until they do.";
+                    };
+                    readonly ext: {
+                        readonly $ref: "#/$defs/Ext";
+                    };
+                };
+            };
+            readonly Ext: {
+                readonly title: "Ext";
+                readonly description: "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.";
+                readonly type: "object";
+                readonly minProperties: 1;
+                readonly additionalProperties: true;
+                readonly propertyNames: {
+                    readonly pattern: "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$";
+                };
+            };
+        };
+    };
+};
+/**
+ * SPEC.md §7.2 policy for the success-response variant. `isRecipientRequired`
+ * tracks the *issuer* party's requirement because a response swaps the
+ * parties (§7.3 item 5).
+ */
+export declare const RESPONSE_SPEC: {
+    readonly typeUri: "https://trusttasks.org/spec/vta/webvh/dids/create/1.0#response";
+    readonly isBearer: false;
+    readonly isProofRequired: true;
+    readonly isRecipientRequired: true;
+    readonly payloadSchema: {
+        readonly $schema: "https://json-schema.org/draft/2020-12/schema";
+        readonly $ref: "#/$defs/Response";
+        readonly $defs: {
+            readonly WebvhPathMode: {
+                readonly title: "WebvhPathMode";
+                readonly description: "Where under the host the DID is served. `wellKnown` puts it at the host root (`/.well-known/did.jsonl`) — at most one DID per host can hold that. `explicit` names the path. `autoAssign` lets the server allocate one.";
+                readonly oneOf: readonly [{
+                    readonly type: "object";
+                    readonly additionalProperties: false;
+                    readonly required: readonly ["mode"];
+                    readonly properties: {
+                        readonly mode: {
+                            readonly const: "wellKnown";
+                        };
+                    };
+                }, {
+                    readonly type: "object";
+                    readonly additionalProperties: false;
+                    readonly required: readonly ["mode", "path"];
+                    readonly properties: {
+                        readonly mode: {
+                            readonly const: "explicit";
+                        };
+                        readonly path: {
+                            readonly type: "string";
+                            readonly minLength: 1;
+                        };
+                    };
+                }, {
+                    readonly type: "object";
+                    readonly additionalProperties: false;
+                    readonly required: readonly ["mode"];
+                    readonly properties: {
+                        readonly mode: {
+                            readonly const: "autoAssign";
+                        };
+                    };
+                }];
+            };
+            readonly Response: {
+                readonly $anchor: "response";
+                readonly title: "VTA WebVH DIDs Create — response payload";
+                readonly description: "Success response to vta/webvh/dids/create. Type https://trusttasks.org/spec/vta/webvh/dids/create/1.0#response.";
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["did", "contextId", "scid", "portable", "signingKeyId", "kaKeyId", "preRotationKeyCount", "createdAt"];
+                readonly properties: {
+                    readonly did: {
+                        readonly type: "string";
+                    };
+                    readonly contextId: {
+                        readonly type: "string";
+                    };
+                    readonly serverId: {
+                        readonly type: "string";
+                    };
+                    readonly mnemonic: {
+                        readonly type: "string";
+                        readonly description: "The hosting server's handle for the record. Absent for a serverless DID.";
+                    };
+                    readonly scid: {
+                        readonly type: "string";
+                        readonly description: "Self-certifying identifier committing to the log's first entry.";
+                    };
+                    readonly portable: {
+                        readonly type: "boolean";
+                    };
+                    readonly signingKeyId: {
+                        readonly type: "string";
+                    };
+                    readonly kaKeyId: {
+                        readonly type: "string";
+                    };
+                    readonly preRotationKeyCount: {
+                        readonly type: "integer";
+                        readonly minimum: 0;
+                        readonly description: "Successor keys committed. `0` means pre-rotation is off for this DID.";
+                    };
+                    readonly createdAt: {
+                        readonly type: "string";
+                        readonly format: "date-time";
+                    };
+                    readonly didDocument: {
+                        readonly type: "object";
+                        readonly description: "The published document, when the VTA composed one.";
+                    };
+                    readonly logEntry: {
+                        readonly type: "string";
+                        readonly description: "The log's first entry. For a serverless DID this is what the caller must serve — the DID does not resolve until they do.";
+                    };
+                    readonly ext: {
+                        readonly $ref: "#/$defs/Ext";
+                    };
+                };
+            };
+            readonly Ext: {
+                readonly title: "Ext";
+                readonly description: "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.";
+                readonly type: "object";
+                readonly minProperties: 1;
+                readonly additionalProperties: true;
+                readonly propertyNames: {
+                    readonly pattern: "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$";
+                };
+            };
+        };
+    };
+};
+//# sourceMappingURL=payload.d.ts.map