@twin.org/node 0.0.3-next.30 → 0.0.3-next.31

package/docs/open-api/spec.json

@@ -27,6 +27,10 @@
 			"name": "Authentication Admin",
 			"description": "Authentication Admin endpoints for the REST server."
 		},
+		{
+			"name": "Authentication Audit",
+			"description": "Authentication audit endpoints for the REST server."
+		},
 		{
 			"name": "Identity",
 			"description": "Service to provide all features related to digital identity."
@@ -1570,6 +1574,308 @@
 				}
 			}
 		},
+		"/authentication/audit": {
+			"post": {
+				"operationId": "authenticationAuditCreate",
+				"summary": "Create an authentication audit entry",
+				"tags": [
+					"Authentication Audit"
+				],
+				"security": [
+					{
+						"jwtBearerAuthScheme": []
+					}
+				],
+				"requestBody": {
+					"description": "Create an authentication audit entry.",
+					"required": true,
+					"content": {
+						"application/json": {
+							"schema": {
+								"$ref": "#/components/schemas/AuditCreateRequest"
+							},
+							"examples": {
+								"authenticationAuditCreateRequestExample": {
+									"summary": "The request to create an authentication audit entry.",
+									"value": {
+										"actorId": "user@example.com",
+										"event": "login-success",
+										"data": {
+											"organizationIdentity": "did:example:org1"
+										}
+									}
+								}
+							}
+						}
+					}
+				},
+				"responses": {
+					"201": {
+						"description": "The rest request ended in created response.",
+						"headers": {
+							"location": {
+								"schema": {
+									"type": "string"
+								},
+								"description": "e.g. 018f0b53d5d5704fa3a06d6ed2478575"
+							}
+						}
+					},
+					"400": {
+						"description": "The server cannot process the request, see the content for more details.",
+						"content": {
+							"application/json": {
+								"schema": {
+									"$ref": "#/components/schemas/Error"
+								},
+								"examples": {
+									"exampleResponse": {
+										"value": {
+											"name": "GeneralError",
+											"message": "errorMessage",
+											"properties": {
+												"foo": "bar"
+											}
+										}
+									}
+								}
+							}
+						}
+					},
+					"401": {
+						"description": "You are not authorized to use the API or no credentials were supplied, see the content for more details.",
+						"content": {
+							"application/json": {
+								"schema": {
+									"$ref": "#/components/schemas/Error"
+								},
+								"examples": {
+									"exampleResponse": {
+										"value": {
+											"name": "UnauthorizedError",
+											"message": "errorMessage"
+										}
+									}
+								}
+							}
+						}
+					},
+					"500": {
+						"description": "The server has encountered a situation it does not know how to handle, see the content for more details.",
+						"content": {
+							"application/json": {
+								"schema": {
+									"$ref": "#/components/schemas/Error"
+								},
+								"examples": {
+									"exampleResponse": {
+										"value": {
+											"name": "InternalServerError",
+											"message": "errorMessage"
+										}
+									}
+								}
+							}
+						}
+					}
+				}
+			},
+			"get": {
+				"operationId": "authenticationAuditQuery",
+				"summary": "Query authentication audit entries",
+				"tags": [
+					"Authentication Audit"
+				],
+				"parameters": [
+					{
+						"name": "actorId",
+						"description": "The actor identifier to filter by.",
+						"in": "query",
+						"required": false,
+						"schema": {
+							"type": "string"
+						},
+						"example": "user@example.com"
+					},
+					{
+						"name": "organizationId",
+						"description": "The organization identifier to filter by.",
+						"in": "query",
+						"required": false,
+						"schema": {
+							"type": "string"
+						}
+					},
+					{
+						"name": "tenantId",
+						"description": "The tenant identifier to filter by.",
+						"in": "query",
+						"required": false,
+						"schema": {
+							"type": "string"
+						}
+					},
+					{
+						"name": "nodeId",
+						"description": "The node identifier to filter by.",
+						"in": "query",
+						"required": false,
+						"schema": {
+							"type": "string"
+						}
+					},
+					{
+						"name": "event",
+						"description": "The event to filter by.",
+						"in": "query",
+						"required": false,
+						"schema": {
+							"anyOf": [
+								{
+									"$ref": "#/components/schemas/AuthAuditEvent"
+								},
+								{
+									"type": "string"
+								}
+							]
+						},
+						"example": "login-success"
+					},
+					{
+						"name": "startDate",
+						"description": "The inclusive start date for filtering, in ISO 8601 format.",
+						"in": "query",
+						"required": false,
+						"schema": {
+							"type": "string"
+						},
+						"example": "2026-01-01T00:00:00.000Z"
+					},
+					{
+						"name": "endDate",
+						"description": "The inclusive end date for filtering, in ISO 8601 format.",
+						"in": "query",
+						"required": false,
+						"schema": {
+							"type": "string"
+						},
+						"example": "2026-01-31T23:59:59.999Z"
+					},
+					{
+						"name": "cursor",
+						"description": "The pagination cursor.",
+						"in": "query",
+						"required": false,
+						"schema": {
+							"type": "string"
+						}
+					},
+					{
+						"name": "limit",
+						"description": "The maximum number of results to return.",
+						"in": "query",
+						"required": false,
+						"schema": {
+							"type": "string"
+						},
+						"example": "50"
+					}
+				],
+				"security": [
+					{
+						"jwtBearerAuthScheme": []
+					}
+				],
+				"responses": {
+					"200": {
+						"description": "Response from querying authentication audit entries.",
+						"content": {
+							"application/json": {
+								"schema": {
+									"$ref": "#/components/schemas/AuditQueryResponse"
+								},
+								"examples": {
+									"authenticationAuditQueryResponseExample": {
+										"summary": "The response for querying authentication audit entries.",
+										"value": {
+											"entries": [
+												{
+													"id": "018f0b53d5d5704fa3a06d6ed2478575",
+													"actorId": "user@example.com",
+													"dateCreated": "2026-01-12T09:05:23.123Z",
+													"event": "login-success",
+													"data": {
+														"organizationIdentity": "did:example:org1"
+													}
+												}
+											],
+											"cursor": "next-cursor"
+										}
+									}
+								}
+							}
+						}
+					},
+					"400": {
+						"description": "The server cannot process the request, see the content for more details.",
+						"content": {
+							"application/json": {
+								"schema": {
+									"$ref": "#/components/schemas/Error"
+								},
+								"examples": {
+									"exampleResponse": {
+										"value": {
+											"name": "GeneralError",
+											"message": "errorMessage",
+											"properties": {
+												"foo": "bar"
+											}
+										}
+									}
+								}
+							}
+						}
+					},
+					"401": {
+						"description": "You are not authorized to use the API or no credentials were supplied, see the content for more details.",
+						"content": {
+							"application/json": {
+								"schema": {
+									"$ref": "#/components/schemas/Error"
+								},
+								"examples": {
+									"exampleResponse": {
+										"value": {
+											"name": "UnauthorizedError",
+											"message": "errorMessage"
+										}
+									}
+								}
+							}
+						}
+					},
+					"500": {
+						"description": "The server has encountered a situation it does not know how to handle, see the content for more details.",
+						"content": {
+							"application/json": {
+								"schema": {
+									"$ref": "#/components/schemas/Error"
+								},
+								"examples": {
+									"exampleResponse": {
+										"value": {
+											"name": "InternalServerError",
+											"message": "errorMessage"
+										}
+									}
+								}
+							}
+						}
+					}
+				}
+			}
+		},
 		"/identity/{identity}": {
 			"get": {
 				"operationId": "identityResolve",
@@ -13992,8 +14298,15 @@
 					}
 				},
 				"responses": {
-					"201": {
-						"description": "The rest request ended in created response."
+					"200": {
+						"description": "Activity Stream Notify Response.",
+						"content": {
+							"application/json": {
+								"schema": {
+									"$ref": "#/components/schemas/ActivityLogEntry"
+								}
+							}
+						}
 					},
 					"400": {
 						"description": "The server cannot process the request, see the content for more details.",
@@ -14114,15 +14427,13 @@
 											"dateModified": "2025-08-12T12:00:00Z",
 											"generator": "did:iota:testnet:123456",
 											"status": "pending",
-											"pendingTasks": [
+											"tasks": [
 												{
 													"taskId": "urn:x-task-id:45678",
-													"dataspaceAppId": "https://my-app.example.org/app1"
+													"dataspaceAppId": "https://my-app.example.org/app1",
+													"status": "pending"
 												}
-											],
-											"runningTasks": [],
-											"finalizedTasks": [],
-											"inErrorTasks": []
+											]
 										}
 									}
 								}
@@ -15095,6 +15406,24 @@
 											}
 										]
 									}
+								},
+								"papCreateEcosystemPolicyRequestExample": {
+									"value": {
+										"@context": [
+											"http://www.w3.org/ns/odrl.jsonld",
+											"https://schema.twindev.org/odrl/v1/"
+										],
+										"@type": "EcosystemPolicy",
+										"profile": "https://schema.twindev.org/odrl/v1/profile",
+										"assigner": "did:example:publisher",
+										"obligation": [
+											{
+												"action": "inform",
+												"assignee": "did:example:border-agency",
+												"target": "urn:twin:asset:consignment:*"
+											}
+										]
+									}
 								}
 							}
 						}
@@ -15367,7 +15696,7 @@
 					"content": {
 						"application/json": {
 							"schema": {
-								"$ref": "https://schema.twindev.org/dataspace-protocol/DataspaceProtocolPolicy"
+								"$ref": "#/components/schemas/RightsManagementPolicy"
 							},
 							"examples": {
 								"papUpdateRequestExample": {
@@ -15480,7 +15809,7 @@
 						"content": {
 							"application/json": {
 								"schema": {
-									"$ref": "https://schema.twindev.org/dataspace-protocol/DataspaceProtocolPolicy"
+									"$ref": "#/components/schemas/RightsManagementPolicy"
 								},
 								"examples": {
 									"papGetResponseExample": {
@@ -15986,6 +16315,123 @@
 				}
 			}
 		},
+		"/rights-management/policy/admin/ecosystem-policy/{id}": {
+			"get": {
+				"operationId": "papGetEcosystemPolicy",
+				"summary": "Get an ecosystem policy",
+				"tags": [
+					"Policy Administration Point"
+				],
+				"parameters": [
+					{
+						"name": "id",
+						"description": "The ID of the ecosystem policy to get.",
+						"in": "path",
+						"required": true,
+						"schema": {
+							"type": "string"
+						},
+						"style": "simple",
+						"example": "urn:rights-management:abc123def456"
+					}
+				],
+				"security": [
+					{
+						"jwtBearerAuthScheme": []
+					}
+				],
+				"responses": {
+					"200": {
+						"description": "The response structure for getting an ecosystem policy.",
+						"content": {
+							"application/json": {
+								"schema": {
+									"$ref": "#/components/schemas/RightsManagementEcosystemPolicy"
+								},
+								"examples": {
+									"papGetEcosystemPolicyResponseExample": {
+										"value": {
+											"@context": [
+												"http://www.w3.org/ns/odrl.jsonld",
+												"https://schema.twindev.org/odrl/v1/"
+											],
+											"@type": "EcosystemPolicy",
+											"@id": "urn:rights-management:abc123def456",
+											"profile": "https://schema.twindev.org/odrl/v1/profile",
+											"assigner": "did:example:publisher",
+											"obligation": [
+												{
+													"action": "inform",
+													"assignee": "did:example:border-agency",
+													"target": "urn:twin:asset:consignment:abc123"
+												}
+											]
+										}
+									}
+								}
+							}
+						}
+					},
+					"400": {
+						"description": "The server cannot process the request, see the content for more details.",
+						"content": {
+							"application/json": {
+								"schema": {
+									"$ref": "#/components/schemas/Error"
+								},
+								"examples": {
+									"exampleResponse": {
+										"value": {
+											"name": "GeneralError",
+											"message": "errorMessage",
+											"properties": {
+												"foo": "bar"
+											}
+										}
+									}
+								}
+							}
+						}
+					},
+					"401": {
+						"description": "You are not authorized to use the API or no credentials were supplied, see the content for more details.",
+						"content": {
+							"application/json": {
+								"schema": {
+									"$ref": "#/components/schemas/Error"
+								},
+								"examples": {
+									"exampleResponse": {
+										"value": {
+											"name": "UnauthorizedError",
+											"message": "errorMessage"
+										}
+									}
+								}
+							}
+						}
+					},
+					"500": {
+						"description": "The server has encountered a situation it does not know how to handle, see the content for more details.",
+						"content": {
+							"application/json": {
+								"schema": {
+									"$ref": "#/components/schemas/Error"
+								},
+								"examples": {
+									"exampleResponse": {
+										"value": {
+											"name": "InternalServerError",
+											"message": "errorMessage"
+										}
+									}
+								}
+							}
+						}
+					}
+				}
+			}
+		},
 		"/rights-management/negotiations/{id}": {
 			"get": {
 				"operationId": "pnpGetNegotiation",
@@ -17444,23 +17890,6 @@
 	},
 	"components": {
 		"schemas": {
-			"ActivityLogDates": {
-				"description": "Activity log dates.",
-				"type": "object",
-				"properties": {
-					"startDate": {
-						"type": "string",
-						"description": "Task processing start timestamp"
-					},
-					"endDate": {
-						"type": "string",
-						"description": "Task processing end timestamp"
-					}
-				},
-				"required": [
-					"startDate"
-				]
-			},
 			"ActivityLogDetails": {
 				"description": "The details related to the processing of an Activity",
 				"type": "object",
@@ -17484,10 +17913,6 @@
 					"dateModified": {
 						"type": "string",
 						"description": "The last update date of this object."
-					},
-					"retryCount": {
-						"type": "number",
-						"description": "Number of times this activity has been retried."
 					}
 				},
 				"required": [
@@ -17504,71 +17929,12 @@
 					"status": {
 						"$ref": "#/components/schemas/ActivityProcessingStatus"
 					},
-					"pendingTasks": {
-						"type": "array",
-						"items": {
-							"$ref": "#/components/schemas/TaskApp"
-						},
-						"description": "The pending tasks that have to be run to process the Activity."
-					},
-					"runningTasks": {
-						"type": "array",
-						"items": {
-							"type": "object",
-							"allOf": [
-								{
-									"$ref": "#/components/schemas/TaskApp"
-								},
-								{
-									"$ref": "#/components/schemas/ActivityLogDates"
-								}
-							]
-						},
-						"description": "The running tasks that are processing the Activity."
-					},
-					"finalizedTasks": {
-						"type": "array",
-						"items": {
-							"type": "object",
-							"properties": {
-								"result": {
-									"type": "string",
-									"description": "The task result."
-								}
-							},
-							"required": [
-								"result"
-							],
-							"allOf": [
-								{
-									"$ref": "#/components/schemas/TaskApp"
-								},
-								{
-									"$ref": "#/components/schemas/ActivityLogDates"
-								}
-							]
-						},
-						"description": "The tasks that have already finalized."
-					},
-					"inErrorTasks": {
+					"tasks": {
 						"type": "array",
 						"items": {
-							"type": "object",
-							"properties": {
-								"error": {
-									"$ref": "#/components/schemas/Error"
-								}
-							},
-							"required": [
-								"error"
-							],
-							"allOf": [
-								{
-									"$ref": "#/components/schemas/TaskApp"
-								}
-							]
+							"$ref": "#/components/schemas/ActivityTaskEntry"
 						},
-						"description": "The tasks that are in error."
+						"description": "The tasks that have to be run to process the Activity."
 					}
 				},
 				"required": [
@@ -17605,6 +17971,67 @@
 					}
 				]
 			},
+			"ActivityTaskEntry": {
+				"description": "Denotes a task associated with a Dataspace App",
+				"type": "object",
+				"properties": {
+					"taskId": {
+						"type": "string",
+						"description": "Task Id."
+					},
+					"dataspaceAppId": {
+						"type": "string",
+						"description": "Dataspace App Id."
+					},
+					"status": {
+						"$ref": "#/components/schemas/ActivityTaskStatus"
+					},
+					"processingGroupId": {
+						"type": "string",
+						"description": "Processing Group Id."
+					},
+					"startDate": {
+						"type": "string",
+						"description": "Task processing start timestamp"
+					},
+					"endDate": {
+						"type": "string",
+						"description": "Task processing end timestamp"
+					},
+					"result": {
+						"description": "The result of the task processing, if completed."
+					},
+					"error": {
+						"$ref": "#/components/schemas/Error"
+					}
+				},
+				"required": [
+					"taskId",
+					"dataspaceAppId",
+					"status"
+				]
+			},
+			"ActivityTaskStatus": {
+				"description": "Activity task statuses.",
+				"anyOf": [
+					{
+						"const": "pending",
+						"description": "Pending."
+					},
+					{
+						"const": "processing",
+						"description": "Processing."
+					},
+					{
+						"const": "success",
+						"description": "Success."
+					},
+					{
+						"const": "failed",
+						"description": "Failed."
+					}
+				]
+			},
 			"AdminUserCreateRequest": {
 				"description": "The body of the request.",
 				"type": "object",
@@ -17744,45 +18171,119 @@
 				],
 				"description": "The parameters to be used in the transfer."
 			},
-			"AuditableItemGraphCreateRequest": {
-				"description": "The data to be used in the vertex.",
+			"AuditCreateRequest": {
+				"description": "The body of the request.",
 				"type": "object",
 				"properties": {
-					"dateCreated": {
+					"event": {
+						"anyOf": [
+							{
+								"$ref": "#/components/schemas/AuthAuditEvent"
+							},
+							{
+								"type": "string"
+							}
+						],
+						"description": "The audit event that occurred."
+					},
+					"actorId": {
 						"type": "string",
-						"description": "The date/time of when the element was created."
+						"description": "The actor identifier, could be e-mail, username, or other unique identifier."
 					},
-					"dateModified": {
+					"nodeId": {
 						"type": "string",
-						"description": "The date/time of when the element was modified."
+						"description": "The node identifier associated with the audit entry, if applicable."
 					},
-					"dateDeleted": {
+					"organizationId": {
 						"type": "string",
-						"description": "The date/time of when the element was deleted, as we never actually remove items."
+						"description": "The organization identifier associated with the audit entry, if applicable."
 					},
-					"@context": {
+					"tenantId": {
+						"type": "string",
+						"description": "The tenant identifier associated with the audit entry, if applicable."
+					},
+					"ipAddressHashes": {
 						"type": "array",
-						"prefixItems": [
-							{
-								"const": "https://schema.twindev.org/aig/"
-							},
-							{
-								"const": "https://schema.twindev.org/common/"
-							}
-						],
 						"items": {
-							"$ref": "https://schema.twindev.org/json-ld/JsonLdContextDefinitionElement"
+							"type": "string"
 						},
-						"minItems": 2,
-						"description": "JSON-LD Context."
-					},
-					"type": {
-						"const": "AuditableItemGraphVertex",
-						"description": "JSON-LD Type."
+						"description": "The hashed IP addresses of the client."
 					},
-					"organizationIdentity": {
+					"userAgent": {
 						"type": "string",
-						"description": "The identity of the organization which controls the vertex."
+						"description": "The user agent string of the client."
+					},
+					"correlationId": {
+						"type": "string",
+						"description": "The correlation ID for request tracing."
+					},
+					"data": {
+						"description": "Additional data related to the audit entry, such as IP address, user agent, etc."
+					}
+				},
+				"required": [
+					"event"
+				]
+			},
+			"AuditQueryResponse": {
+				"type": "object",
+				"properties": {
+					"entries": {
+						"type": "array",
+						"items": {
+							"$ref": "#/components/schemas/AuthenticationAuditEntry"
+						},
+						"description": "The returned audit entries."
+					},
+					"cursor": {
+						"type": "string",
+						"description": "The cursor to retrieve the next page, if any."
+					}
+				},
+				"required": [
+					"entries"
+				],
+				"description": "The response body."
+			},
+			"AuditableItemGraphCreateRequest": {
+				"description": "The data to be used in the vertex.",
+				"type": "object",
+				"properties": {
+					"dateCreated": {
+						"type": "string",
+						"description": "The date/time of when the element was created."
+					},
+					"dateModified": {
+						"type": "string",
+						"description": "The date/time of when the element was modified."
+					},
+					"dateDeleted": {
+						"type": "string",
+						"description": "The date/time of when the element was deleted, as we never actually remove items."
+					},
+					"@context": {
+						"type": "array",
+						"prefixItems": [
+							{
+								"const": "https://schema.twindev.org/aig/"
+							},
+							{
+								"const": "https://schema.twindev.org/common/"
+							}
+						],
+						"items": {
+							"$ref": "https://schema.twindev.org/json-ld/JsonLdContextDefinitionElement"
+						},
+						"minItems": 2,
+						"description": "JSON-LD Context."
+					},
+					"type": {
+						"const": "AuditableItemGraphVertex",
+						"description": "JSON-LD Type."
+					},
+					"organizationIdentity": {
+						"type": "string",
+						"description": "The identity of the organization which controls the vertex."
 					},
 					"annotationObject": {
 						"$ref": "https://schema.twindev.org/json-ld/JsonLdNodeObject"
@@ -17952,6 +18453,115 @@
 					"type"
 				]
 			},
+			"AuthAuditEvent": {
+				"description": "Supported authentication audit event values.",
+				"anyOf": [
+					{
+						"const": "login-success",
+						"description": "Login success."
+					},
+					{
+						"const": "login-failure",
+						"description": "Login failure."
+					},
+					{
+						"const": "logout",
+						"description": "Logout."
+					},
+					{
+						"const": "token-refreshed",
+						"description": "Token refreshed."
+					},
+					{
+						"const": "account-created",
+						"description": "Account created."
+					},
+					{
+						"const": "account-deleted",
+						"description": "Account deleted."
+					},
+					{
+						"const": "account-updated",
+						"description": "Account updated."
+					},
+					{
+						"const": "account-locked",
+						"description": "Account locked."
+					},
+					{
+						"const": "account-unlocked",
+						"description": "Account unlocked."
+					},
+					{
+						"const": "password-changed",
+						"description": "Password changed."
+					}
+				]
+			},
+			"AuthenticationAuditEntry": {
+				"description": "Contract definition for authentication audit entry.",
+				"type": "object",
+				"properties": {
+					"id": {
+						"type": "string",
+						"description": "The unique identifier for the audit entry."
+					},
+					"event": {
+						"anyOf": [
+							{
+								"$ref": "#/components/schemas/AuthAuditEvent"
+							},
+							{
+								"type": "string"
+							}
+						],
+						"description": "The audit event that occurred."
+					},
+					"dateCreated": {
+						"type": "string",
+						"description": "The timestamp of the audit entry in ISO 8601 format."
+					},
+					"actorId": {
+						"type": "string",
+						"description": "The actor identifier, could be e-mail, username, or other unique identifier."
+					},
+					"nodeId": {
+						"type": "string",
+						"description": "The node identifier associated with the audit entry, if applicable."
+					},
+					"organizationId": {
+						"type": "string",
+						"description": "The organization identifier associated with the audit entry, if applicable."
+					},
+					"tenantId": {
+						"type": "string",
+						"description": "The tenant identifier associated with the audit entry, if applicable."
+					},
+					"ipAddressHashes": {
+						"type": "array",
+						"items": {
+							"type": "string"
+						},
+						"description": "The hashed IP addresses of the client."
+					},
+					"userAgent": {
+						"type": "string",
+						"description": "The user agent string of the client."
+					},
+					"correlationId": {
+						"type": "string",
+						"description": "The correlation ID for request tracing."
+					},
+					"data": {
+						"description": "Additional data related to the audit entry, such as IP address, user agent, etc."
+					}
+				},
+				"required": [
+					"id",
+					"event",
+					"dateCreated"
+				]
+			},
 			"BlobStorageCreateRequest": {
 				"type": "object",
 				"properties": {
@@ -19011,9 +19621,6 @@
 					"@context": {
 						"$ref": "https://schema.twindev.org/w3c-odrl/OdrlContextType"
 					},
-					"@type": {
-						"$ref": "https://schema.twindev.org/w3c-odrl/OdrlPolicyType"
-					},
 					"profile": {
 						"anyOf": [
 							{
@@ -19207,6 +19814,9 @@
 						],
 						"description": "The obligations in the policy.\nAt least one of permission, prohibition, or obligation must be present."
 					},
+					"@type": {
+						"$ref": "#/components/schemas/RightsManagementPolicyType"
+					},
 					"@id": {
 						"type": "string",
 						"description": "Unique identifier for the policy."
@@ -19220,7 +19830,7 @@
 			"PapQueryResponse": {
 				"type": "array",
 				"items": {
-					"$ref": "https://schema.twindev.org/dataspace-protocol/DataspaceProtocolPolicy"
+					"$ref": "#/components/schemas/RightsManagementPolicy"
 				},
 				"description": "The body of the response."
 			},
@@ -19374,65 +19984,515 @@
 				],
 				"description": "Transfer Process (DSP compliant) with state REQUESTED, or error."
 			},
-			"Rule": {
-				"description": "Rule defining how to extract data from an object.",
+			"RightsManagementEcosystemPolicy": {
+				"description": "TWIN EcosystemPolicy in DSP storage shape.\n\nCombines the DSP wire-format requirements (mandatory `@id`, no `uid`) from\n`IDataspaceProtocolPolicy` with a narrowed `@type` discriminant so that callers\ncan rely on the type at compile time without any `as unknown as` cast.\n\nDefined as an intersection type (rather than `extends IDataspaceProtocolPolicy`)\nso that the narrowed `\"@type\": \"EcosystemPolicy\"` can override the base\n`\"@type\": OdrlPolicyType` without a TS2430 extends-incompatibility error.\n`\"EcosystemPolicy\"` is a TWIN extension — not in the W3C ODRL `OdrlPolicyType`\nenum — so the interface hierarchy cannot express this narrowing directly.\n\nLives in `rights-management-models` (not `standards-dataspace-protocol`) because\nEcosystemPolicy is a TWIN platform extension — not a DSP specification concept —\nand `standards-dataspace-protocol` should remain a pure standards mirror.",
 				"type": "object",
 				"properties": {
-					"source": {
-						"type": "string",
-						"description": "The path to the data in the document to extract.\nshould be in JSONPath format https://www.rfc-editor.org/rfc/rfc9535.html."
-					},
-					"target": {
-						"type": "string",
-						"description": "The target path of where to store the extracted data.\nSupports simple dotted path notation, and numeric index notation."
+					"@context": {
+						"$ref": "https://schema.twindev.org/w3c-odrl/OdrlContextType"
 					},
-					"retainPathDepth": {
-						"type": "number",
-						"description": "When extracting objects, how much of the original path should be maintained in the target object."
+					"profile": {
+						"anyOf": [
+							{
+								"type": "string"
+							},
+							{
+								"type": "array",
+								"items": {
+									"type": "string"
+								}
+							}
+						],
+						"description": "The profile(s) this policy conforms to.\nIRIs identifying the ODRL Profile(s)."
 					},
-					"coerce": {
-						"$ref": "#/components/schemas/CoerceType"
-					}
-				},
-				"required": [
-					"source",
-					"target"
-				]
-			},
-			"RuleGroup": {
-				"description": "Group of rules for extraction.",
-				"type": "object",
-				"properties": {
-					"id": {
-						"type": "string",
-						"description": "The id for the rule group."
+					"assigner": {
+						"anyOf": [
+							{
+								"type": "string"
+							},
+							{
+								"$ref": "https://schema.twindev.org/w3c-odrl/OdrlParty"
+							},
+							{
+								"$ref": "https://schema.twindev.org/w3c-odrl/OdrlPartyCollection"
+							},
+							{
+								"type": "array",
+								"items": {
+									"anyOf": [
+										{
+											"type": "string"
+										},
+										{
+											"$ref": "https://schema.twindev.org/w3c-odrl/OdrlParty"
+										},
+										{
+											"$ref": "https://schema.twindev.org/w3c-odrl/OdrlPartyCollection"
+										}
+									]
+								}
+							}
+						],
+						"description": "The assigner of the policy.\nApplies to all rules unless overridden at rule level."
 					},
-					"label": {
-						"type": "string",
-						"description": "The label for the rule group."
+					"assignee": {
+						"anyOf": [
+							{
+								"type": "string"
+							},
+							{
+								"$ref": "https://schema.twindev.org/w3c-odrl/OdrlParty"
+							},
+							{
+								"$ref": "https://schema.twindev.org/w3c-odrl/OdrlPartyCollection"
+							},
+							{
+								"type": "array",
+								"items": {
+									"anyOf": [
+										{
+											"type": "string"
+										},
+										{
+											"$ref": "https://schema.twindev.org/w3c-odrl/OdrlParty"
+										},
+										{
+											"$ref": "https://schema.twindev.org/w3c-odrl/OdrlPartyCollection"
+										}
+									]
+								}
+							}
+						],
+						"description": "The assignee of the policy.\nApplies to all rules unless overridden at rule level."
 					},
-					"rules": {
-						"type": "array",
-						"items": {
-							"$ref": "#/components/schemas/Rule"
-						},
-						"description": "The rules."
-					}
-				},
-				"required": [
-					"id",
-					"label",
-					"rules"
-				]
-			},
-			"ServerFavIconResponse": {
-				"type": "array",
-				"items": {
-					"type": "number"
-				},
-				"description": "The favicon for the server."
-			},
-			"ServerInfo": {
+					"target": {
+						"anyOf": [
+							{
+								"type": "string"
+							},
+							{
+								"$ref": "https://schema.twindev.org/w3c-odrl/OdrlAsset"
+							},
+							{
+								"$ref": "https://schema.twindev.org/w3c-odrl/OdrlAssetCollection"
+							},
+							{
+								"type": "array",
+								"items": {
+									"anyOf": [
+										{
+											"type": "string"
+										},
+										{
+											"$ref": "https://schema.twindev.org/w3c-odrl/OdrlAsset"
+										},
+										{
+											"$ref": "https://schema.twindev.org/w3c-odrl/OdrlAssetCollection"
+										}
+									]
+								}
+							}
+						],
+						"description": "The target asset for the rule."
+					},
+					"action": {
+						"anyOf": [
+							{
+								"$ref": "https://schema.twindev.org/w3c-odrl/OdrlActionType"
+							},
+							{
+								"type": "string"
+							},
+							{
+								"$ref": "https://schema.twindev.org/w3c-odrl/OdrlAction"
+							},
+							{
+								"type": "array",
+								"items": {
+									"anyOf": [
+										{
+											"$ref": "https://schema.twindev.org/w3c-odrl/OdrlActionType"
+										},
+										{
+											"type": "string"
+										},
+										{
+											"$ref": "https://schema.twindev.org/w3c-odrl/OdrlAction"
+										}
+									]
+								}
+							}
+						],
+						"description": "The action associated with the rule."
+					},
+					"inheritFrom": {
+						"anyOf": [
+							{
+								"type": "string"
+							},
+							{
+								"type": "array",
+								"items": {
+									"type": "string"
+								}
+							}
+						],
+						"description": "The parent policy(ies) this policy inherits from.\nIRIs identifying the parent Policy(ies)."
+					},
+					"conflict": {
+						"$ref": "https://schema.twindev.org/w3c-odrl/OdrlConflictStrategyType"
+					},
+					"permission": {
+						"anyOf": [
+							{
+								"$ref": "https://schema.twindev.org/w3c-odrl/OdrlPermission"
+							},
+							{
+								"type": "array",
+								"items": {
+									"$ref": "https://schema.twindev.org/w3c-odrl/OdrlPermission"
+								}
+							}
+						],
+						"description": "The permissions in the policy.\nAt least one of permission, prohibition, or obligation must be present."
+					},
+					"prohibition": {
+						"anyOf": [
+							{
+								"$ref": "https://schema.twindev.org/w3c-odrl/OdrlProhibition"
+							},
+							{
+								"type": "array",
+								"items": {
+									"$ref": "https://schema.twindev.org/w3c-odrl/OdrlProhibition"
+								}
+							}
+						],
+						"description": "The prohibitions in the policy.\nAt least one of permission, prohibition, or obligation must be present."
+					},
+					"obligation": {
+						"anyOf": [
+							{
+								"$ref": "https://schema.twindev.org/w3c-odrl/OdrlDuty"
+							},
+							{
+								"type": "array",
+								"items": {
+									"$ref": "https://schema.twindev.org/w3c-odrl/OdrlDuty"
+								}
+							}
+						],
+						"description": "The obligations in the policy.\nAt least one of permission, prohibition, or obligation must be present."
+					},
+					"@id": {
+						"type": "string",
+						"description": "Unique identifier for the policy."
+					},
+					"@type": {
+						"const": "EcosystemPolicy",
+						"description": "The type must be \"EcosystemPolicy\"."
+					}
+				},
+				"required": [
+					"@context",
+					"@id",
+					"@type"
+				]
+			},
+			"RightsManagementPolicy": {
+				"description": "Base type for any ODRL policy stored and managed by the TWIN rights-management PAP.\n\nDefined as an intersection type (rather than `extends IDataspaceProtocolPolicy`)\nbecause `IDataspaceProtocolPolicy[\"@type\"]` is constrained to `OdrlPolicyType`\n(the closed W3C ODRL enum). TWIN adds `\"EcosystemPolicy\"` as a platform extension\nvia `RightsManagementPolicyType`, which is a superset of `OdrlPolicyType`.\n\nAll standard DSP policy types (`IDataspaceProtocolAgreement`, `IDataspaceProtocolOffer`,\n`IDataspaceProtocolSet`) remain structurally assignable to this type because their\n`\"@type\"` literals are all members of `RightsManagementPolicyType`.\n\nUse this type wherever the PAP needs to accept or return any policy regardless of\nits specific subtype. Use the narrower `IRightsManagementEcosystemPolicy`,\n`IDataspaceProtocolAgreement`, etc. when the specific subtype is known.",
+				"type": "object",
+				"properties": {
+					"@context": {
+						"$ref": "https://schema.twindev.org/w3c-odrl/OdrlContextType"
+					},
+					"profile": {
+						"anyOf": [
+							{
+								"type": "string"
+							},
+							{
+								"type": "array",
+								"items": {
+									"type": "string"
+								}
+							}
+						],
+						"description": "The profile(s) this policy conforms to.\nIRIs identifying the ODRL Profile(s)."
+					},
+					"assigner": {
+						"anyOf": [
+							{
+								"type": "string"
+							},
+							{
+								"$ref": "https://schema.twindev.org/w3c-odrl/OdrlParty"
+							},
+							{
+								"$ref": "https://schema.twindev.org/w3c-odrl/OdrlPartyCollection"
+							},
+							{
+								"type": "array",
+								"items": {
+									"anyOf": [
+										{
+											"type": "string"
+										},
+										{
+											"$ref": "https://schema.twindev.org/w3c-odrl/OdrlParty"
+										},
+										{
+											"$ref": "https://schema.twindev.org/w3c-odrl/OdrlPartyCollection"
+										}
+									]
+								}
+							}
+						],
+						"description": "The assigner of the policy.\nApplies to all rules unless overridden at rule level."
+					},
+					"assignee": {
+						"anyOf": [
+							{
+								"type": "string"
+							},
+							{
+								"$ref": "https://schema.twindev.org/w3c-odrl/OdrlParty"
+							},
+							{
+								"$ref": "https://schema.twindev.org/w3c-odrl/OdrlPartyCollection"
+							},
+							{
+								"type": "array",
+								"items": {
+									"anyOf": [
+										{
+											"type": "string"
+										},
+										{
+											"$ref": "https://schema.twindev.org/w3c-odrl/OdrlParty"
+										},
+										{
+											"$ref": "https://schema.twindev.org/w3c-odrl/OdrlPartyCollection"
+										}
+									]
+								}
+							}
+						],
+						"description": "The assignee of the policy.\nApplies to all rules unless overridden at rule level."
+					},
+					"target": {
+						"anyOf": [
+							{
+								"type": "string"
+							},
+							{
+								"$ref": "https://schema.twindev.org/w3c-odrl/OdrlAsset"
+							},
+							{
+								"$ref": "https://schema.twindev.org/w3c-odrl/OdrlAssetCollection"
+							},
+							{
+								"type": "array",
+								"items": {
+									"anyOf": [
+										{
+											"type": "string"
+										},
+										{
+											"$ref": "https://schema.twindev.org/w3c-odrl/OdrlAsset"
+										},
+										{
+											"$ref": "https://schema.twindev.org/w3c-odrl/OdrlAssetCollection"
+										}
+									]
+								}
+							}
+						],
+						"description": "The target asset for the rule."
+					},
+					"action": {
+						"anyOf": [
+							{
+								"$ref": "https://schema.twindev.org/w3c-odrl/OdrlActionType"
+							},
+							{
+								"type": "string"
+							},
+							{
+								"$ref": "https://schema.twindev.org/w3c-odrl/OdrlAction"
+							},
+							{
+								"type": "array",
+								"items": {
+									"anyOf": [
+										{
+											"$ref": "https://schema.twindev.org/w3c-odrl/OdrlActionType"
+										},
+										{
+											"type": "string"
+										},
+										{
+											"$ref": "https://schema.twindev.org/w3c-odrl/OdrlAction"
+										}
+									]
+								}
+							}
+						],
+						"description": "The action associated with the rule."
+					},
+					"inheritFrom": {
+						"anyOf": [
+							{
+								"type": "string"
+							},
+							{
+								"type": "array",
+								"items": {
+									"type": "string"
+								}
+							}
+						],
+						"description": "The parent policy(ies) this policy inherits from.\nIRIs identifying the parent Policy(ies)."
+					},
+					"conflict": {
+						"$ref": "https://schema.twindev.org/w3c-odrl/OdrlConflictStrategyType"
+					},
+					"permission": {
+						"anyOf": [
+							{
+								"$ref": "https://schema.twindev.org/w3c-odrl/OdrlPermission"
+							},
+							{
+								"type": "array",
+								"items": {
+									"$ref": "https://schema.twindev.org/w3c-odrl/OdrlPermission"
+								}
+							}
+						],
+						"description": "The permissions in the policy.\nAt least one of permission, prohibition, or obligation must be present."
+					},
+					"prohibition": {
+						"anyOf": [
+							{
+								"$ref": "https://schema.twindev.org/w3c-odrl/OdrlProhibition"
+							},
+							{
+								"type": "array",
+								"items": {
+									"$ref": "https://schema.twindev.org/w3c-odrl/OdrlProhibition"
+								}
+							}
+						],
+						"description": "The prohibitions in the policy.\nAt least one of permission, prohibition, or obligation must be present."
+					},
+					"obligation": {
+						"anyOf": [
+							{
+								"$ref": "https://schema.twindev.org/w3c-odrl/OdrlDuty"
+							},
+							{
+								"type": "array",
+								"items": {
+									"$ref": "https://schema.twindev.org/w3c-odrl/OdrlDuty"
+								}
+							}
+						],
+						"description": "The obligations in the policy.\nAt least one of permission, prohibition, or obligation must be present."
+					},
+					"@id": {
+						"type": "string",
+						"description": "Unique identifier for the policy."
+					},
+					"@type": {
+						"$ref": "#/components/schemas/RightsManagementPolicyType"
+					}
+				},
+				"required": [
+					"@context",
+					"@id",
+					"@type"
+				]
+			},
+			"RightsManagementPolicyType": {
+				"description": "TWIN rights-management policy types.",
+				"anyOf": [
+					{
+						"const": "EcosystemPolicy",
+						"description": "EcosystemPolicy type.\nA TWIN platform-level governance policy that carries obligations for data events.\nNot a bilateral contract — does not participate in DSP negotiation."
+					},
+					{
+						"const": "Policy"
+					},
+					{
+						"const": "Set"
+					},
+					{
+						"const": "Offer"
+					},
+					{
+						"const": "Agreement"
+					}
+				]
+			},
+			"Rule": {
+				"description": "Rule defining how to extract data from an object.",
+				"type": "object",
+				"properties": {
+					"source": {
+						"type": "string",
+						"description": "The path to the data in the document to extract.\nshould be in JSONPath format https://www.rfc-editor.org/rfc/rfc9535.html."
+					},
+					"target": {
+						"type": "string",
+						"description": "The target path of where to store the extracted data.\nSupports simple dotted path notation, and numeric index notation."
+					},
+					"retainPathDepth": {
+						"type": "number",
+						"description": "When extracting objects, how much of the original path should be maintained in the target object."
+					},
+					"coerce": {
+						"$ref": "#/components/schemas/CoerceType"
+					}
+				},
+				"required": [
+					"source",
+					"target"
+				]
+			},
+			"RuleGroup": {
+				"description": "Group of rules for extraction.",
+				"type": "object",
+				"properties": {
+					"id": {
+						"type": "string",
+						"description": "The id for the rule group."
+					},
+					"label": {
+						"type": "string",
+						"description": "The label for the rule group."
+					},
+					"rules": {
+						"type": "array",
+						"items": {
+							"$ref": "#/components/schemas/Rule"
+						},
+						"description": "The rules."
+					}
+				},
+				"required": [
+					"id",
+					"label",
+					"rules"
+				]
+			},
+			"ServerFavIconResponse": {
+				"type": "array",
+				"items": {
+					"type": "number"
+				},
+				"description": "The favicon for the server."
+			},
+			"ServerInfo": {
 				"description": "The information about the server.",
 				"type": "object",
 				"properties": {
@@ -19613,24 +20673,6 @@
 					"dateModified"
 				]
 			},
-			"TaskApp": {
-				"description": "Denotes a task associated with a Dataspace App",
-				"type": "object",
-				"properties": {
-					"taskId": {
-						"type": "string",
-						"description": "Task Id."
-					},
-					"dataspaceAppId": {
-						"type": "string",
-						"description": "Dataspace App Id."
-					}
-				},
-				"required": [
-					"taskId",
-					"dataspaceAppId"
-				]
-			},
 			"TelemetryAddMetricValueRequest": {
 				"type": "object",
 				"properties": {