@ledgerhq/revault-sdk 0.25.0 → 0.25.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (88) hide show
  1. package/lib/bake.cjs +1214 -1359
  2. package/lib/bake.cjs.map +1 -1
  3. package/lib/bake.d.cts +564 -562
  4. package/lib/bake.d.ts +564 -562
  5. package/lib/bake.js +1204 -1359
  6. package/lib/bake.js.map +1 -1
  7. package/lib/chunk-CKQMccvm.cjs +28 -0
  8. package/lib/crypto-BDBF_rfw.cjs +268 -0
  9. package/lib/crypto-BDBF_rfw.cjs.map +1 -0
  10. package/lib/crypto-CPCBrCSZ.js +245 -0
  11. package/lib/crypto-CPCBrCSZ.js.map +1 -0
  12. package/lib/crypto.cjs +5 -11
  13. package/lib/crypto.d.cts +10 -7
  14. package/lib/crypto.d.ts +10 -7
  15. package/lib/crypto.js +2 -11
  16. package/lib/device-0lcfYGHr.cjs +793 -0
  17. package/lib/device-0lcfYGHr.cjs.map +1 -0
  18. package/lib/device-B8Fww8_6.js +719 -0
  19. package/lib/device-B8Fww8_6.js.map +1 -0
  20. package/lib/device.cjs +6 -13
  21. package/lib/device.d.cts +2 -50
  22. package/lib/device.d.ts +2 -50
  23. package/lib/device.js +2 -13
  24. package/lib/engine.cjs +835 -886
  25. package/lib/engine.cjs.map +1 -1
  26. package/lib/engine.d.cts +3 -25
  27. package/lib/engine.d.ts +3 -25
  28. package/lib/engine.js +828 -885
  29. package/lib/engine.js.map +1 -1
  30. package/lib/index--fscLDTT.d.ts +237 -0
  31. package/lib/index-BE7oUpCb.d.cts +237 -0
  32. package/lib/index-C4Xjiv0k.d.cts +23 -0
  33. package/lib/index-CVjhPoZh.d.ts +23 -0
  34. package/lib/index.cjs +0 -1
  35. package/lib/index.d.cts +10 -5
  36. package/lib/index.d.ts +10 -5
  37. package/lib/index.js +1 -1
  38. package/lib/logger-Cme0iL1f.d.cts +10 -0
  39. package/lib/logger-DWLViq7U.d.ts +10 -0
  40. package/lib/onboarding.cjs +179 -181
  41. package/lib/onboarding.cjs.map +1 -1
  42. package/lib/onboarding.d.cts +1751 -1722
  43. package/lib/onboarding.d.ts +1751 -1722
  44. package/lib/onboarding.js +175 -181
  45. package/lib/onboarding.js.map +1 -1
  46. package/lib/trpc-CWGPr8Ox.d.ts +20 -0
  47. package/lib/trpc-C_dUOB1u.d.cts +20 -0
  48. package/lib/types-4CfR5--z.d.ts +203 -0
  49. package/lib/types-Byf9V35t.d.cts +203 -0
  50. package/lib/types-CQROu0nu.d.cts +6 -0
  51. package/lib/types-_QeBv1U4.d.ts +6 -0
  52. package/lib/types.cjs +0 -1
  53. package/lib/types.d.cts +3 -4
  54. package/lib/types.d.ts +3 -4
  55. package/lib/types.js +1 -1
  56. package/lib/utils-BGbdjOP9.js +61 -0
  57. package/lib/utils-BGbdjOP9.js.map +1 -0
  58. package/lib/utils-DbSFXp4c.cjs +86 -0
  59. package/lib/utils-DbSFXp4c.cjs.map +1 -0
  60. package/package.json +6 -6
  61. package/lib/chunk-2WGM7EWA.cjs +0 -282
  62. package/lib/chunk-2WGM7EWA.cjs.map +0 -1
  63. package/lib/chunk-AXI72NFY.js +0 -50
  64. package/lib/chunk-AXI72NFY.js.map +0 -1
  65. package/lib/chunk-DRMYBKL3.cjs +0 -820
  66. package/lib/chunk-DRMYBKL3.cjs.map +0 -1
  67. package/lib/chunk-KV5FO7N5.js +0 -282
  68. package/lib/chunk-KV5FO7N5.js.map +0 -1
  69. package/lib/chunk-LH4QQXUH.cjs +0 -50
  70. package/lib/chunk-LH4QQXUH.cjs.map +0 -1
  71. package/lib/chunk-PFZIW6UP.js +0 -820
  72. package/lib/chunk-PFZIW6UP.js.map +0 -1
  73. package/lib/crypto.cjs.map +0 -1
  74. package/lib/crypto.js.map +0 -1
  75. package/lib/device.cjs.map +0 -1
  76. package/lib/device.js.map +0 -1
  77. package/lib/index.cjs.map +0 -1
  78. package/lib/index.js.map +0 -1
  79. package/lib/logger-C-TPbnjv.d.cts +0 -9
  80. package/lib/logger-C-TPbnjv.d.ts +0 -9
  81. package/lib/types-C-ngtI5m.d.ts +0 -202
  82. package/lib/types-CpGEbAxh.d.cts +0 -19
  83. package/lib/types-CpGEbAxh.d.ts +0 -19
  84. package/lib/types-CryvY9pW.d.cts +0 -202
  85. package/lib/types-DJfbanPz.d.cts +0 -167
  86. package/lib/types-DJfbanPz.d.ts +0 -167
  87. package/lib/types.cjs.map +0 -1
  88. package/lib/types.js.map +0 -1
package/lib/onboarding.d.cts CHANGED
@@ -1,1736 +1,1765 @@
1
- import { OnboardingFullStateResponse, OnboardingStep } from '@ledgerhq/revault-api';
2
- import { L as Logger } from './logger-C-TPbnjv.cjs';
3
- import { E as Engine, W as WithOnboarding } from './types-CryvY9pW.cjs';
4
- import './types-DJfbanPz.cjs';
5
- import './types-CpGEbAxh.cjs';
6
- import '@trpc/client';
7
- import '@trpc/server';
1
+ import { t as Logger } from "./logger-Cme0iL1f.cjs";
2
+ import { d as Engine, y as WithOnboarding } from "./types-Byf9V35t.cjs";
3
+ import { OnboardingFullStateResponse, OnboardingStep } from "@ledgerhq/revault-api";
8
4
 
5
+ //#region src/onboarding.d.ts
9
6
  declare const STEPS: {
10
- /**
11
- * Devices claiming
12
- */
13
- readonly PENDING_DEVICE_CLAIMS: ({ state, engine }: {
14
- engine: Engine<WithOnboarding>;
15
- state: OnboardingFullStateResponse;
16
- }, logger: Logger) => Promise<{
17
- id: string;
18
- workspaceName: string;
19
- step: "COMPLETED" | "PENDING_DEVICE_CLAIMS" | "PENDING_WRAPPING_KEY_PROVISIONING" | "PENDING_MASTER_ADMINS_REGISTRATION_INIT" | "PENDING_MASTER_ADMINS_REGISTRATION" | "PENDING_SHARED_OWNERS_REGISTRATION_INIT" | "PENDING_SHARED_OWNERS_REGISTRATION" | "PENDING_REVIEW_BY_MASTER_ADMINS" | "PENDING_SEED_PROVISIONING" | "PENDING_WORKSPACE_INITIALIZATION";
20
- claimedDevices: {
21
- pubKey: string;
22
- deviceUserId: string;
23
- deviceName: string;
24
- role: "WRAPPING_KEY_OWNER" | "SHARED_OWNER" | "MASTER_ADMIN";
25
- }[];
26
- wrappingKey: {
27
- ephemeralPubKey: string;
28
- ephemeralCertificate: {
29
- codeHash: string;
30
- attestationPub: string;
31
- certificate: string;
32
- signature: string;
33
- };
34
- fragments: {
35
- pubKey: string;
36
- ephemeralPubKey: string;
37
- ephemeralCertificate: {
38
- codeHash: string;
39
- attestationPub: string;
40
- certificate: string;
41
- signature: string;
42
- };
43
- blob: string;
44
- }[];
7
+ /**
8
+ * Devices claiming
9
+ */
10
+ readonly PENDING_DEVICE_CLAIMS: ({
11
+ state,
12
+ engine
13
+ }: {
14
+ engine: Engine<WithOnboarding>;
15
+ state: OnboardingFullStateResponse;
16
+ }, logger: Logger) => Promise<{
17
+ id: string;
18
+ workspaceName: string;
19
+ step: "COMPLETED" | "PENDING_DEVICE_CLAIMS" | "PENDING_MASTER_ADMINS_REGISTRATION" | "PENDING_MASTER_ADMINS_REGISTRATION_INIT" | "PENDING_REVIEW_BY_MASTER_ADMINS" | "PENDING_SEED_PROVISIONING" | "PENDING_SHARED_OWNERS_REGISTRATION" | "PENDING_SHARED_OWNERS_REGISTRATION_INIT" | "PENDING_WORKSPACE_INITIALIZATION" | "PENDING_WRAPPING_KEY_PROVISIONING";
20
+ claimedDevices: {
21
+ pubKey: string;
22
+ deviceUserId: string;
23
+ deviceName: string;
24
+ role: "MASTER_ADMIN" | "SHARED_OWNER" | "WRAPPING_KEY_OWNER";
25
+ }[];
26
+ wrappingKey: {
27
+ ephemeralPubKey: string;
28
+ ephemeralCertificate: {
29
+ codeHash: string;
30
+ attestationPub: string;
31
+ certificate: string;
32
+ signature: string;
33
+ };
34
+ fragments: {
35
+ pubKey: string;
36
+ ephemeralPubKey: string;
37
+ ephemeralCertificate: {
38
+ codeHash: string;
39
+ attestationPub: string;
40
+ certificate: string;
41
+ signature: string;
42
+ };
43
+ blob: string;
44
+ }[];
45
+ } | null;
46
+ masterAdmins: {
47
+ name: string;
48
+ psdModel: "BLUE" | "STAX";
49
+ pubKey: string;
50
+ registrationChallenge: {
51
+ challenge: string;
52
+ ephemeralPublicKey: string;
53
+ ephemeralPublicKeyAttestation: {
54
+ codeHash: string;
55
+ attestationPub: string;
56
+ certificate: string;
57
+ signature: string;
58
+ };
59
+ handshake: string;
60
+ handshakeAttestation: {
61
+ codeHash: string;
62
+ attestationPub: string;
63
+ certificate: string;
64
+ signature: string;
65
+ };
66
+ u2fRegisterData: string;
67
+ ciphertext: string;
68
+ requestId: string;
69
+ };
70
+ registrationResponse: {
71
+ certificate: {
72
+ codeHash: string;
73
+ attestationPub: string;
74
+ certificate: string;
75
+ signature: string;
76
+ };
77
+ u2fRegister: string;
78
+ u2fKeyHandle: string;
79
+ registerData: string;
80
+ validationKey: string;
81
+ pairingPayload: string;
82
+ } | null;
83
+ role: "MASTER_ADMIN";
84
+ review: {
85
+ challenge: {
86
+ challengeType: "PSD";
87
+ wActions: string[];
88
+ handshake: string;
89
+ handshakeAttestation: {
90
+ codeHash: string;
91
+ attestationPub: string;
92
+ certificate: string;
93
+ signature: string;
94
+ };
95
+ partitionId: string;
96
+ };
97
+ signature: string | null;
98
+ } | null;
99
+ }[];
100
+ sharedOwners: {
101
+ name: string;
102
+ psdModel: "BLUE" | "STAX";
103
+ pubKey: string;
104
+ registrationChallenge: {
105
+ challenge: string;
106
+ ephemeralPublicKey: string;
107
+ ephemeralPublicKeyAttestation: {
108
+ codeHash: string;
109
+ attestationPub: string;
110
+ certificate: string;
111
+ signature: string;
112
+ };
113
+ handshake: string;
114
+ handshakeAttestation: {
115
+ codeHash: string;
116
+ attestationPub: string;
117
+ certificate: string;
118
+ signature: string;
119
+ };
120
+ u2fRegisterData: string;
121
+ ciphertext: string;
122
+ requestId: string;
123
+ };
124
+ registrationResponse: {
125
+ certificate: {
126
+ codeHash: string;
127
+ attestationPub: string;
128
+ certificate: string;
129
+ signature: string;
130
+ };
131
+ u2fRegister: string;
132
+ u2fKeyHandle: string;
133
+ registerData: string;
134
+ validationKey: string;
135
+ pairingPayload: string;
136
+ } | null;
137
+ role: "SHARED_OWNER";
138
+ review: {
139
+ seedChallenge: {
140
+ challengeType: "PSD";
141
+ wActions: string[];
142
+ handshake: string;
143
+ handshakeAttestation: {
144
+ codeHash: string;
145
+ attestationPub: string;
146
+ certificate: string;
147
+ signature: string;
148
+ };
149
+ partitionId: string;
150
+ kkHandshake: string;
151
+ kkHandshakeAttestation: {
152
+ codeHash: string;
153
+ attestationPub: string;
154
+ certificate: string;
155
+ signature: string;
156
+ };
157
+ ephemeralPublicKey: string;
158
+ certificate: {
159
+ codeHash: string;
160
+ attestationPub: string;
161
+ certificate: string;
162
+ signature: string;
163
+ };
164
+ blob: string;
165
+ };
166
+ seedFragment: {
167
+ approverBlob: string;
168
+ challengeResponse: string;
169
+ handshake: string;
170
+ handshakeAttestation: {
171
+ codeHash: string;
172
+ attestationPub: string;
173
+ certificate: string;
174
+ signature: string;
175
+ };
45
176
  } | null;
46
- masterAdmins: {
47
- name: string;
48
- psdModel: "BLUE" | "STAX";
49
- pubKey: string;
50
- registrationChallenge: {
51
- challenge: string;
52
- ephemeralPublicKey: string;
53
- ephemeralPublicKeyAttestation: {
54
- codeHash: string;
55
- attestationPub: string;
56
- certificate: string;
57
- signature: string;
58
- };
59
- handshake: string;
60
- handshakeAttestation: {
61
- codeHash: string;
62
- attestationPub: string;
63
- certificate: string;
64
- signature: string;
65
- };
66
- u2fRegisterData: string;
67
- ciphertext: string;
68
- requestId: string;
69
- };
70
- registrationResponse: {
71
- certificate: {
72
- codeHash: string;
73
- attestationPub: string;
74
- certificate: string;
75
- signature: string;
76
- };
77
- u2fRegister: string;
78
- u2fKeyHandle: string;
79
- registerData: string;
80
- validationKey: string;
81
- pairingPayload: string;
82
- } | null;
83
- role: "MASTER_ADMIN";
84
- review: {
85
- challenge: {
86
- challengeType: "PSD";
87
- wActions: string[];
88
- handshake: string;
89
- handshakeAttestation: {
90
- codeHash: string;
91
- attestationPub: string;
92
- certificate: string;
93
- signature: string;
94
- };
95
- partitionId: string;
96
- };
97
- signature: string | null;
98
- } | null;
99
- }[];
100
- sharedOwners: {
101
- name: string;
102
- psdModel: "BLUE" | "STAX";
103
- pubKey: string;
104
- registrationChallenge: {
105
- challenge: string;
106
- ephemeralPublicKey: string;
107
- ephemeralPublicKeyAttestation: {
108
- codeHash: string;
109
- attestationPub: string;
110
- certificate: string;
111
- signature: string;
112
- };
113
- handshake: string;
114
- handshakeAttestation: {
115
- codeHash: string;
116
- attestationPub: string;
117
- certificate: string;
118
- signature: string;
119
- };
120
- u2fRegisterData: string;
121
- ciphertext: string;
122
- requestId: string;
123
- };
124
- registrationResponse: {
125
- certificate: {
126
- codeHash: string;
127
- attestationPub: string;
128
- certificate: string;
129
- signature: string;
130
- };
131
- u2fRegister: string;
132
- u2fKeyHandle: string;
133
- registerData: string;
134
- validationKey: string;
135
- pairingPayload: string;
136
- } | null;
137
- role: "SHARED_OWNER";
138
- review: {
139
- seedChallenge: {
140
- challengeType: "PSD";
141
- wActions: string[];
142
- handshake: string;
143
- handshakeAttestation: {
144
- codeHash: string;
145
- attestationPub: string;
146
- certificate: string;
147
- signature: string;
148
- };
149
- partitionId: string;
150
- kkHandshake: string;
151
- kkHandshakeAttestation: {
152
- codeHash: string;
153
- attestationPub: string;
154
- certificate: string;
155
- signature: string;
156
- };
157
- ephemeralPublicKey: string;
158
- certificate: {
159
- codeHash: string;
160
- attestationPub: string;
161
- certificate: string;
162
- signature: string;
163
- };
164
- blob: string;
165
- };
166
- seedFragment: {
167
- approverBlob: string;
168
- challengeResponse: string;
169
- handshake: string;
170
- handshakeAttestation: {
171
- codeHash: string;
172
- attestationPub: string;
173
- certificate: string;
174
- signature: string;
175
- };
176
- } | null;
177
- } | null;
178
- }[];
179
- createdAt: Date;
180
- completedAt: Date | null;
181
- }>;
182
- /**
183
- * Wrapping Key provisioning
184
- */
185
- readonly PENDING_WRAPPING_KEY_PROVISIONING: ({ state, engine }: {
186
- engine: Engine<WithOnboarding>;
187
- state: OnboardingFullStateResponse;
188
- }, logger: Logger) => Promise<{
189
- id: string;
190
- workspaceName: string;
191
- step: "COMPLETED" | "PENDING_DEVICE_CLAIMS" | "PENDING_WRAPPING_KEY_PROVISIONING" | "PENDING_MASTER_ADMINS_REGISTRATION_INIT" | "PENDING_MASTER_ADMINS_REGISTRATION" | "PENDING_SHARED_OWNERS_REGISTRATION_INIT" | "PENDING_SHARED_OWNERS_REGISTRATION" | "PENDING_REVIEW_BY_MASTER_ADMINS" | "PENDING_SEED_PROVISIONING" | "PENDING_WORKSPACE_INITIALIZATION";
192
- claimedDevices: {
193
- pubKey: string;
194
- deviceUserId: string;
195
- deviceName: string;
196
- role: "WRAPPING_KEY_OWNER" | "SHARED_OWNER" | "MASTER_ADMIN";
197
- }[];
198
- wrappingKey: {
199
- ephemeralPubKey: string;
200
- ephemeralCertificate: {
201
- codeHash: string;
202
- attestationPub: string;
203
- certificate: string;
204
- signature: string;
205
- };
206
- fragments: {
207
- pubKey: string;
208
- ephemeralPubKey: string;
209
- ephemeralCertificate: {
210
- codeHash: string;
211
- attestationPub: string;
212
- certificate: string;
213
- signature: string;
214
- };
215
- blob: string;
216
- }[];
177
+ } | null;
178
+ }[];
179
+ createdAt: Date;
180
+ completedAt: Date | null;
181
+ }>;
182
+ /**
183
+ * Wrapping Key provisioning
184
+ */
185
+ readonly PENDING_WRAPPING_KEY_PROVISIONING: ({
186
+ state,
187
+ engine
188
+ }: {
189
+ engine: Engine<WithOnboarding>;
190
+ state: OnboardingFullStateResponse;
191
+ }, logger: Logger) => Promise<{
192
+ id: string;
193
+ workspaceName: string;
194
+ step: "COMPLETED" | "PENDING_DEVICE_CLAIMS" | "PENDING_MASTER_ADMINS_REGISTRATION" | "PENDING_MASTER_ADMINS_REGISTRATION_INIT" | "PENDING_REVIEW_BY_MASTER_ADMINS" | "PENDING_SEED_PROVISIONING" | "PENDING_SHARED_OWNERS_REGISTRATION" | "PENDING_SHARED_OWNERS_REGISTRATION_INIT" | "PENDING_WORKSPACE_INITIALIZATION" | "PENDING_WRAPPING_KEY_PROVISIONING";
195
+ claimedDevices: {
196
+ pubKey: string;
197
+ deviceUserId: string;
198
+ deviceName: string;
199
+ role: "MASTER_ADMIN" | "SHARED_OWNER" | "WRAPPING_KEY_OWNER";
200
+ }[];
201
+ wrappingKey: {
202
+ ephemeralPubKey: string;
203
+ ephemeralCertificate: {
204
+ codeHash: string;
205
+ attestationPub: string;
206
+ certificate: string;
207
+ signature: string;
208
+ };
209
+ fragments: {
210
+ pubKey: string;
211
+ ephemeralPubKey: string;
212
+ ephemeralCertificate: {
213
+ codeHash: string;
214
+ attestationPub: string;
215
+ certificate: string;
216
+ signature: string;
217
+ };
218
+ blob: string;
219
+ }[];
220
+ } | null;
221
+ masterAdmins: {
222
+ name: string;
223
+ psdModel: "BLUE" | "STAX";
224
+ pubKey: string;
225
+ registrationChallenge: {
226
+ challenge: string;
227
+ ephemeralPublicKey: string;
228
+ ephemeralPublicKeyAttestation: {
229
+ codeHash: string;
230
+ attestationPub: string;
231
+ certificate: string;
232
+ signature: string;
233
+ };
234
+ handshake: string;
235
+ handshakeAttestation: {
236
+ codeHash: string;
237
+ attestationPub: string;
238
+ certificate: string;
239
+ signature: string;
240
+ };
241
+ u2fRegisterData: string;
242
+ ciphertext: string;
243
+ requestId: string;
244
+ };
245
+ registrationResponse: {
246
+ certificate: {
247
+ codeHash: string;
248
+ attestationPub: string;
249
+ certificate: string;
250
+ signature: string;
251
+ };
252
+ u2fRegister: string;
253
+ u2fKeyHandle: string;
254
+ registerData: string;
255
+ validationKey: string;
256
+ pairingPayload: string;
257
+ } | null;
258
+ role: "MASTER_ADMIN";
259
+ review: {
260
+ challenge: {
261
+ challengeType: "PSD";
262
+ wActions: string[];
263
+ handshake: string;
264
+ handshakeAttestation: {
265
+ codeHash: string;
266
+ attestationPub: string;
267
+ certificate: string;
268
+ signature: string;
269
+ };
270
+ partitionId: string;
271
+ };
272
+ signature: string | null;
273
+ } | null;
274
+ }[];
275
+ sharedOwners: {
276
+ name: string;
277
+ psdModel: "BLUE" | "STAX";
278
+ pubKey: string;
279
+ registrationChallenge: {
280
+ challenge: string;
281
+ ephemeralPublicKey: string;
282
+ ephemeralPublicKeyAttestation: {
283
+ codeHash: string;
284
+ attestationPub: string;
285
+ certificate: string;
286
+ signature: string;
287
+ };
288
+ handshake: string;
289
+ handshakeAttestation: {
290
+ codeHash: string;
291
+ attestationPub: string;
292
+ certificate: string;
293
+ signature: string;
294
+ };
295
+ u2fRegisterData: string;
296
+ ciphertext: string;
297
+ requestId: string;
298
+ };
299
+ registrationResponse: {
300
+ certificate: {
301
+ codeHash: string;
302
+ attestationPub: string;
303
+ certificate: string;
304
+ signature: string;
305
+ };
306
+ u2fRegister: string;
307
+ u2fKeyHandle: string;
308
+ registerData: string;
309
+ validationKey: string;
310
+ pairingPayload: string;
311
+ } | null;
312
+ role: "SHARED_OWNER";
313
+ review: {
314
+ seedChallenge: {
315
+ challengeType: "PSD";
316
+ wActions: string[];
317
+ handshake: string;
318
+ handshakeAttestation: {
319
+ codeHash: string;
320
+ attestationPub: string;
321
+ certificate: string;
322
+ signature: string;
323
+ };
324
+ partitionId: string;
325
+ kkHandshake: string;
326
+ kkHandshakeAttestation: {
327
+ codeHash: string;
328
+ attestationPub: string;
329
+ certificate: string;
330
+ signature: string;
331
+ };
332
+ ephemeralPublicKey: string;
333
+ certificate: {
334
+ codeHash: string;
335
+ attestationPub: string;
336
+ certificate: string;
337
+ signature: string;
338
+ };
339
+ blob: string;
340
+ };
341
+ seedFragment: {
342
+ approverBlob: string;
343
+ challengeResponse: string;
344
+ handshake: string;
345
+ handshakeAttestation: {
346
+ codeHash: string;
347
+ attestationPub: string;
348
+ certificate: string;
349
+ signature: string;
350
+ };
217
351
  } | null;
218
- masterAdmins: {
219
- name: string;
220
- psdModel: "BLUE" | "STAX";
221
- pubKey: string;
222
- registrationChallenge: {
223
- challenge: string;
224
- ephemeralPublicKey: string;
225
- ephemeralPublicKeyAttestation: {
226
- codeHash: string;
227
- attestationPub: string;
228
- certificate: string;
229
- signature: string;
230
- };
231
- handshake: string;
232
- handshakeAttestation: {
233
- codeHash: string;
234
- attestationPub: string;
235
- certificate: string;
236
- signature: string;
237
- };
238
- u2fRegisterData: string;
239
- ciphertext: string;
240
- requestId: string;
241
- };
242
- registrationResponse: {
243
- certificate: {
244
- codeHash: string;
245
- attestationPub: string;
246
- certificate: string;
247
- signature: string;
248
- };
249
- u2fRegister: string;
250
- u2fKeyHandle: string;
251
- registerData: string;
252
- validationKey: string;
253
- pairingPayload: string;
254
- } | null;
255
- role: "MASTER_ADMIN";
256
- review: {
257
- challenge: {
258
- challengeType: "PSD";
259
- wActions: string[];
260
- handshake: string;
261
- handshakeAttestation: {
262
- codeHash: string;
263
- attestationPub: string;
264
- certificate: string;
265
- signature: string;
266
- };
267
- partitionId: string;
268
- };
269
- signature: string | null;
270
- } | null;
271
- }[];
272
- sharedOwners: {
273
- name: string;
274
- psdModel: "BLUE" | "STAX";
275
- pubKey: string;
276
- registrationChallenge: {
277
- challenge: string;
278
- ephemeralPublicKey: string;
279
- ephemeralPublicKeyAttestation: {
280
- codeHash: string;
281
- attestationPub: string;
282
- certificate: string;
283
- signature: string;
284
- };
285
- handshake: string;
286
- handshakeAttestation: {
287
- codeHash: string;
288
- attestationPub: string;
289
- certificate: string;
290
- signature: string;
291
- };
292
- u2fRegisterData: string;
293
- ciphertext: string;
294
- requestId: string;
295
- };
296
- registrationResponse: {
297
- certificate: {
298
- codeHash: string;
299
- attestationPub: string;
300
- certificate: string;
301
- signature: string;
302
- };
303
- u2fRegister: string;
304
- u2fKeyHandle: string;
305
- registerData: string;
306
- validationKey: string;
307
- pairingPayload: string;
308
- } | null;
309
- role: "SHARED_OWNER";
310
- review: {
311
- seedChallenge: {
312
- challengeType: "PSD";
313
- wActions: string[];
314
- handshake: string;
315
- handshakeAttestation: {
316
- codeHash: string;
317
- attestationPub: string;
318
- certificate: string;
319
- signature: string;
320
- };
321
- partitionId: string;
322
- kkHandshake: string;
323
- kkHandshakeAttestation: {
324
- codeHash: string;
325
- attestationPub: string;
326
- certificate: string;
327
- signature: string;
328
- };
329
- ephemeralPublicKey: string;
330
- certificate: {
331
- codeHash: string;
332
- attestationPub: string;
333
- certificate: string;
334
- signature: string;
335
- };
336
- blob: string;
337
- };
338
- seedFragment: {
339
- approverBlob: string;
340
- challengeResponse: string;
341
- handshake: string;
342
- handshakeAttestation: {
343
- codeHash: string;
344
- attestationPub: string;
345
- certificate: string;
346
- signature: string;
347
- };
348
- } | null;
349
- } | null;
350
- }[];
351
- createdAt: Date;
352
- completedAt: Date | null;
353
- }>;
354
- /**
355
- * Init Master Admins registration
356
- */
357
- readonly PENDING_MASTER_ADMINS_REGISTRATION_INIT: ({ engine, state }: {
358
- engine: Engine<WithOnboarding>;
359
- state: OnboardingFullStateResponse;
360
- }) => Promise<{
361
- id: string;
362
- workspaceName: string;
363
- step: "COMPLETED" | "PENDING_DEVICE_CLAIMS" | "PENDING_WRAPPING_KEY_PROVISIONING" | "PENDING_MASTER_ADMINS_REGISTRATION_INIT" | "PENDING_MASTER_ADMINS_REGISTRATION" | "PENDING_SHARED_OWNERS_REGISTRATION_INIT" | "PENDING_SHARED_OWNERS_REGISTRATION" | "PENDING_REVIEW_BY_MASTER_ADMINS" | "PENDING_SEED_PROVISIONING" | "PENDING_WORKSPACE_INITIALIZATION";
364
- claimedDevices: {
365
- pubKey: string;
366
- deviceUserId: string;
367
- deviceName: string;
368
- role: "WRAPPING_KEY_OWNER" | "SHARED_OWNER" | "MASTER_ADMIN";
369
- }[];
370
- wrappingKey: {
371
- ephemeralPubKey: string;
372
- ephemeralCertificate: {
373
- codeHash: string;
374
- attestationPub: string;
375
- certificate: string;
376
- signature: string;
377
- };
378
- fragments: {
379
- pubKey: string;
380
- ephemeralPubKey: string;
381
- ephemeralCertificate: {
382
- codeHash: string;
383
- attestationPub: string;
384
- certificate: string;
385
- signature: string;
386
- };
387
- blob: string;
388
- }[];
352
+ } | null;
353
+ }[];
354
+ createdAt: Date;
355
+ completedAt: Date | null;
356
+ }>;
357
+ /**
358
+ * Init Master Admins registration
359
+ */
360
+ readonly PENDING_MASTER_ADMINS_REGISTRATION_INIT: ({
361
+ engine,
362
+ state
363
+ }: {
364
+ engine: Engine<WithOnboarding>;
365
+ state: OnboardingFullStateResponse;
366
+ }) => Promise<{
367
+ id: string;
368
+ workspaceName: string;
369
+ step: "COMPLETED" | "PENDING_DEVICE_CLAIMS" | "PENDING_MASTER_ADMINS_REGISTRATION" | "PENDING_MASTER_ADMINS_REGISTRATION_INIT" | "PENDING_REVIEW_BY_MASTER_ADMINS" | "PENDING_SEED_PROVISIONING" | "PENDING_SHARED_OWNERS_REGISTRATION" | "PENDING_SHARED_OWNERS_REGISTRATION_INIT" | "PENDING_WORKSPACE_INITIALIZATION" | "PENDING_WRAPPING_KEY_PROVISIONING";
370
+ claimedDevices: {
371
+ pubKey: string;
372
+ deviceUserId: string;
373
+ deviceName: string;
374
+ role: "MASTER_ADMIN" | "SHARED_OWNER" | "WRAPPING_KEY_OWNER";
375
+ }[];
376
+ wrappingKey: {
377
+ ephemeralPubKey: string;
378
+ ephemeralCertificate: {
379
+ codeHash: string;
380
+ attestationPub: string;
381
+ certificate: string;
382
+ signature: string;
383
+ };
384
+ fragments: {
385
+ pubKey: string;
386
+ ephemeralPubKey: string;
387
+ ephemeralCertificate: {
388
+ codeHash: string;
389
+ attestationPub: string;
390
+ certificate: string;
391
+ signature: string;
392
+ };
393
+ blob: string;
394
+ }[];
395
+ } | null;
396
+ masterAdmins: {
397
+ name: string;
398
+ psdModel: "BLUE" | "STAX";
399
+ pubKey: string;
400
+ registrationChallenge: {
401
+ challenge: string;
402
+ ephemeralPublicKey: string;
403
+ ephemeralPublicKeyAttestation: {
404
+ codeHash: string;
405
+ attestationPub: string;
406
+ certificate: string;
407
+ signature: string;
408
+ };
409
+ handshake: string;
410
+ handshakeAttestation: {
411
+ codeHash: string;
412
+ attestationPub: string;
413
+ certificate: string;
414
+ signature: string;
415
+ };
416
+ u2fRegisterData: string;
417
+ ciphertext: string;
418
+ requestId: string;
419
+ };
420
+ registrationResponse: {
421
+ certificate: {
422
+ codeHash: string;
423
+ attestationPub: string;
424
+ certificate: string;
425
+ signature: string;
426
+ };
427
+ u2fRegister: string;
428
+ u2fKeyHandle: string;
429
+ registerData: string;
430
+ validationKey: string;
431
+ pairingPayload: string;
432
+ } | null;
433
+ role: "MASTER_ADMIN";
434
+ review: {
435
+ challenge: {
436
+ challengeType: "PSD";
437
+ wActions: string[];
438
+ handshake: string;
439
+ handshakeAttestation: {
440
+ codeHash: string;
441
+ attestationPub: string;
442
+ certificate: string;
443
+ signature: string;
444
+ };
445
+ partitionId: string;
446
+ };
447
+ signature: string | null;
448
+ } | null;
449
+ }[];
450
+ sharedOwners: {
451
+ name: string;
452
+ psdModel: "BLUE" | "STAX";
453
+ pubKey: string;
454
+ registrationChallenge: {
455
+ challenge: string;
456
+ ephemeralPublicKey: string;
457
+ ephemeralPublicKeyAttestation: {
458
+ codeHash: string;
459
+ attestationPub: string;
460
+ certificate: string;
461
+ signature: string;
462
+ };
463
+ handshake: string;
464
+ handshakeAttestation: {
465
+ codeHash: string;
466
+ attestationPub: string;
467
+ certificate: string;
468
+ signature: string;
469
+ };
470
+ u2fRegisterData: string;
471
+ ciphertext: string;
472
+ requestId: string;
473
+ };
474
+ registrationResponse: {
475
+ certificate: {
476
+ codeHash: string;
477
+ attestationPub: string;
478
+ certificate: string;
479
+ signature: string;
480
+ };
481
+ u2fRegister: string;
482
+ u2fKeyHandle: string;
483
+ registerData: string;
484
+ validationKey: string;
485
+ pairingPayload: string;
486
+ } | null;
487
+ role: "SHARED_OWNER";
488
+ review: {
489
+ seedChallenge: {
490
+ challengeType: "PSD";
491
+ wActions: string[];
492
+ handshake: string;
493
+ handshakeAttestation: {
494
+ codeHash: string;
495
+ attestationPub: string;
496
+ certificate: string;
497
+ signature: string;
498
+ };
499
+ partitionId: string;
500
+ kkHandshake: string;
501
+ kkHandshakeAttestation: {
502
+ codeHash: string;
503
+ attestationPub: string;
504
+ certificate: string;
505
+ signature: string;
506
+ };
507
+ ephemeralPublicKey: string;
508
+ certificate: {
509
+ codeHash: string;
510
+ attestationPub: string;
511
+ certificate: string;
512
+ signature: string;
513
+ };
514
+ blob: string;
515
+ };
516
+ seedFragment: {
517
+ approverBlob: string;
518
+ challengeResponse: string;
519
+ handshake: string;
520
+ handshakeAttestation: {
521
+ codeHash: string;
522
+ attestationPub: string;
523
+ certificate: string;
524
+ signature: string;
525
+ };
389
526
  } | null;
390
- masterAdmins: {
391
- name: string;
392
- psdModel: "BLUE" | "STAX";
393
- pubKey: string;
394
- registrationChallenge: {
395
- challenge: string;
396
- ephemeralPublicKey: string;
397
- ephemeralPublicKeyAttestation: {
398
- codeHash: string;
399
- attestationPub: string;
400
- certificate: string;
401
- signature: string;
402
- };
403
- handshake: string;
404
- handshakeAttestation: {
405
- codeHash: string;
406
- attestationPub: string;
407
- certificate: string;
408
- signature: string;
409
- };
410
- u2fRegisterData: string;
411
- ciphertext: string;
412
- requestId: string;
413
- };
414
- registrationResponse: {
415
- certificate: {
416
- codeHash: string;
417
- attestationPub: string;
418
- certificate: string;
419
- signature: string;
420
- };
421
- u2fRegister: string;
422
- u2fKeyHandle: string;
423
- registerData: string;
424
- validationKey: string;
425
- pairingPayload: string;
426
- } | null;
427
- role: "MASTER_ADMIN";
428
- review: {
429
- challenge: {
430
- challengeType: "PSD";
431
- wActions: string[];
432
- handshake: string;
433
- handshakeAttestation: {
434
- codeHash: string;
435
- attestationPub: string;
436
- certificate: string;
437
- signature: string;
438
- };
439
- partitionId: string;
440
- };
441
- signature: string | null;
442
- } | null;
443
- }[];
444
- sharedOwners: {
445
- name: string;
446
- psdModel: "BLUE" | "STAX";
447
- pubKey: string;
448
- registrationChallenge: {
449
- challenge: string;
450
- ephemeralPublicKey: string;
451
- ephemeralPublicKeyAttestation: {
452
- codeHash: string;
453
- attestationPub: string;
454
- certificate: string;
455
- signature: string;
456
- };
457
- handshake: string;
458
- handshakeAttestation: {
459
- codeHash: string;
460
- attestationPub: string;
461
- certificate: string;
462
- signature: string;
463
- };
464
- u2fRegisterData: string;
465
- ciphertext: string;
466
- requestId: string;
467
- };
468
- registrationResponse: {
469
- certificate: {
470
- codeHash: string;
471
- attestationPub: string;
472
- certificate: string;
473
- signature: string;
474
- };
475
- u2fRegister: string;
476
- u2fKeyHandle: string;
477
- registerData: string;
478
- validationKey: string;
479
- pairingPayload: string;
480
- } | null;
481
- role: "SHARED_OWNER";
482
- review: {
483
- seedChallenge: {
484
- challengeType: "PSD";
485
- wActions: string[];
486
- handshake: string;
487
- handshakeAttestation: {
488
- codeHash: string;
489
- attestationPub: string;
490
- certificate: string;
491
- signature: string;
492
- };
493
- partitionId: string;
494
- kkHandshake: string;
495
- kkHandshakeAttestation: {
496
- codeHash: string;
497
- attestationPub: string;
498
- certificate: string;
499
- signature: string;
500
- };
501
- ephemeralPublicKey: string;
502
- certificate: {
503
- codeHash: string;
504
- attestationPub: string;
505
- certificate: string;
506
- signature: string;
507
- };
508
- blob: string;
509
- };
510
- seedFragment: {
511
- approverBlob: string;
512
- challengeResponse: string;
513
- handshake: string;
514
- handshakeAttestation: {
515
- codeHash: string;
516
- attestationPub: string;
517
- certificate: string;
518
- signature: string;
519
- };
520
- } | null;
521
- } | null;
522
- }[];
523
- createdAt: Date;
524
- completedAt: Date | null;
525
- }>;
526
- /**
527
- * Master Admins registration
528
- */
529
- readonly PENDING_MASTER_ADMINS_REGISTRATION: ({ state, engine }: {
530
- engine: Engine<WithOnboarding>;
531
- state: OnboardingFullStateResponse;
532
- }, logger: Logger) => Promise<{
533
- id: string;
534
- workspaceName: string;
535
- step: "COMPLETED" | "PENDING_DEVICE_CLAIMS" | "PENDING_WRAPPING_KEY_PROVISIONING" | "PENDING_MASTER_ADMINS_REGISTRATION_INIT" | "PENDING_MASTER_ADMINS_REGISTRATION" | "PENDING_SHARED_OWNERS_REGISTRATION_INIT" | "PENDING_SHARED_OWNERS_REGISTRATION" | "PENDING_REVIEW_BY_MASTER_ADMINS" | "PENDING_SEED_PROVISIONING" | "PENDING_WORKSPACE_INITIALIZATION";
536
- claimedDevices: {
537
- pubKey: string;
538
- deviceUserId: string;
539
- deviceName: string;
540
- role: "WRAPPING_KEY_OWNER" | "SHARED_OWNER" | "MASTER_ADMIN";
541
- }[];
542
- wrappingKey: {
543
- ephemeralPubKey: string;
544
- ephemeralCertificate: {
545
- codeHash: string;
546
- attestationPub: string;
547
- certificate: string;
548
- signature: string;
549
- };
550
- fragments: {
551
- pubKey: string;
552
- ephemeralPubKey: string;
553
- ephemeralCertificate: {
554
- codeHash: string;
555
- attestationPub: string;
556
- certificate: string;
557
- signature: string;
558
- };
559
- blob: string;
560
- }[];
527
+ } | null;
528
+ }[];
529
+ createdAt: Date;
530
+ completedAt: Date | null;
531
+ }>;
532
+ /**
533
+ * Master Admins registration
534
+ */
535
+ readonly PENDING_MASTER_ADMINS_REGISTRATION: ({
536
+ state,
537
+ engine
538
+ }: {
539
+ engine: Engine<WithOnboarding>;
540
+ state: OnboardingFullStateResponse;
541
+ }, logger: Logger) => Promise<{
542
+ id: string;
543
+ workspaceName: string;
544
+ step: "COMPLETED" | "PENDING_DEVICE_CLAIMS" | "PENDING_MASTER_ADMINS_REGISTRATION" | "PENDING_MASTER_ADMINS_REGISTRATION_INIT" | "PENDING_REVIEW_BY_MASTER_ADMINS" | "PENDING_SEED_PROVISIONING" | "PENDING_SHARED_OWNERS_REGISTRATION" | "PENDING_SHARED_OWNERS_REGISTRATION_INIT" | "PENDING_WORKSPACE_INITIALIZATION" | "PENDING_WRAPPING_KEY_PROVISIONING";
545
+ claimedDevices: {
546
+ pubKey: string;
547
+ deviceUserId: string;
548
+ deviceName: string;
549
+ role: "MASTER_ADMIN" | "SHARED_OWNER" | "WRAPPING_KEY_OWNER";
550
+ }[];
551
+ wrappingKey: {
552
+ ephemeralPubKey: string;
553
+ ephemeralCertificate: {
554
+ codeHash: string;
555
+ attestationPub: string;
556
+ certificate: string;
557
+ signature: string;
558
+ };
559
+ fragments: {
560
+ pubKey: string;
561
+ ephemeralPubKey: string;
562
+ ephemeralCertificate: {
563
+ codeHash: string;
564
+ attestationPub: string;
565
+ certificate: string;
566
+ signature: string;
567
+ };
568
+ blob: string;
569
+ }[];
570
+ } | null;
571
+ masterAdmins: {
572
+ name: string;
573
+ psdModel: "BLUE" | "STAX";
574
+ pubKey: string;
575
+ registrationChallenge: {
576
+ challenge: string;
577
+ ephemeralPublicKey: string;
578
+ ephemeralPublicKeyAttestation: {
579
+ codeHash: string;
580
+ attestationPub: string;
581
+ certificate: string;
582
+ signature: string;
583
+ };
584
+ handshake: string;
585
+ handshakeAttestation: {
586
+ codeHash: string;
587
+ attestationPub: string;
588
+ certificate: string;
589
+ signature: string;
590
+ };
591
+ u2fRegisterData: string;
592
+ ciphertext: string;
593
+ requestId: string;
594
+ };
595
+ registrationResponse: {
596
+ certificate: {
597
+ codeHash: string;
598
+ attestationPub: string;
599
+ certificate: string;
600
+ signature: string;
601
+ };
602
+ u2fRegister: string;
603
+ u2fKeyHandle: string;
604
+ registerData: string;
605
+ validationKey: string;
606
+ pairingPayload: string;
607
+ } | null;
608
+ role: "MASTER_ADMIN";
609
+ review: {
610
+ challenge: {
611
+ challengeType: "PSD";
612
+ wActions: string[];
613
+ handshake: string;
614
+ handshakeAttestation: {
615
+ codeHash: string;
616
+ attestationPub: string;
617
+ certificate: string;
618
+ signature: string;
619
+ };
620
+ partitionId: string;
621
+ };
622
+ signature: string | null;
623
+ } | null;
624
+ }[];
625
+ sharedOwners: {
626
+ name: string;
627
+ psdModel: "BLUE" | "STAX";
628
+ pubKey: string;
629
+ registrationChallenge: {
630
+ challenge: string;
631
+ ephemeralPublicKey: string;
632
+ ephemeralPublicKeyAttestation: {
633
+ codeHash: string;
634
+ attestationPub: string;
635
+ certificate: string;
636
+ signature: string;
637
+ };
638
+ handshake: string;
639
+ handshakeAttestation: {
640
+ codeHash: string;
641
+ attestationPub: string;
642
+ certificate: string;
643
+ signature: string;
644
+ };
645
+ u2fRegisterData: string;
646
+ ciphertext: string;
647
+ requestId: string;
648
+ };
649
+ registrationResponse: {
650
+ certificate: {
651
+ codeHash: string;
652
+ attestationPub: string;
653
+ certificate: string;
654
+ signature: string;
655
+ };
656
+ u2fRegister: string;
657
+ u2fKeyHandle: string;
658
+ registerData: string;
659
+ validationKey: string;
660
+ pairingPayload: string;
661
+ } | null;
662
+ role: "SHARED_OWNER";
663
+ review: {
664
+ seedChallenge: {
665
+ challengeType: "PSD";
666
+ wActions: string[];
667
+ handshake: string;
668
+ handshakeAttestation: {
669
+ codeHash: string;
670
+ attestationPub: string;
671
+ certificate: string;
672
+ signature: string;
673
+ };
674
+ partitionId: string;
675
+ kkHandshake: string;
676
+ kkHandshakeAttestation: {
677
+ codeHash: string;
678
+ attestationPub: string;
679
+ certificate: string;
680
+ signature: string;
681
+ };
682
+ ephemeralPublicKey: string;
683
+ certificate: {
684
+ codeHash: string;
685
+ attestationPub: string;
686
+ certificate: string;
687
+ signature: string;
688
+ };
689
+ blob: string;
690
+ };
691
+ seedFragment: {
692
+ approverBlob: string;
693
+ challengeResponse: string;
694
+ handshake: string;
695
+ handshakeAttestation: {
696
+ codeHash: string;
697
+ attestationPub: string;
698
+ certificate: string;
699
+ signature: string;
700
+ };
561
701
  } | null;
562
- masterAdmins: {
563
- name: string;
564
- psdModel: "BLUE" | "STAX";
565
- pubKey: string;
566
- registrationChallenge: {
567
- challenge: string;
568
- ephemeralPublicKey: string;
569
- ephemeralPublicKeyAttestation: {
570
- codeHash: string;
571
- attestationPub: string;
572
- certificate: string;
573
- signature: string;
574
- };
575
- handshake: string;
576
- handshakeAttestation: {
577
- codeHash: string;
578
- attestationPub: string;
579
- certificate: string;
580
- signature: string;
581
- };
582
- u2fRegisterData: string;
583
- ciphertext: string;
584
- requestId: string;
585
- };
586
- registrationResponse: {
587
- certificate: {
588
- codeHash: string;
589
- attestationPub: string;
590
- certificate: string;
591
- signature: string;
592
- };
593
- u2fRegister: string;
594
- u2fKeyHandle: string;
595
- registerData: string;
596
- validationKey: string;
597
- pairingPayload: string;
598
- } | null;
599
- role: "MASTER_ADMIN";
600
- review: {
601
- challenge: {
602
- challengeType: "PSD";
603
- wActions: string[];
604
- handshake: string;
605
- handshakeAttestation: {
606
- codeHash: string;
607
- attestationPub: string;
608
- certificate: string;
609
- signature: string;
610
- };
611
- partitionId: string;
612
- };
613
- signature: string | null;
614
- } | null;
615
- }[];
616
- sharedOwners: {
617
- name: string;
618
- psdModel: "BLUE" | "STAX";
619
- pubKey: string;
620
- registrationChallenge: {
621
- challenge: string;
622
- ephemeralPublicKey: string;
623
- ephemeralPublicKeyAttestation: {
624
- codeHash: string;
625
- attestationPub: string;
626
- certificate: string;
627
- signature: string;
628
- };
629
- handshake: string;
630
- handshakeAttestation: {
631
- codeHash: string;
632
- attestationPub: string;
633
- certificate: string;
634
- signature: string;
635
- };
636
- u2fRegisterData: string;
637
- ciphertext: string;
638
- requestId: string;
639
- };
640
- registrationResponse: {
641
- certificate: {
642
- codeHash: string;
643
- attestationPub: string;
644
- certificate: string;
645
- signature: string;
646
- };
647
- u2fRegister: string;
648
- u2fKeyHandle: string;
649
- registerData: string;
650
- validationKey: string;
651
- pairingPayload: string;
652
- } | null;
653
- role: "SHARED_OWNER";
654
- review: {
655
- seedChallenge: {
656
- challengeType: "PSD";
657
- wActions: string[];
658
- handshake: string;
659
- handshakeAttestation: {
660
- codeHash: string;
661
- attestationPub: string;
662
- certificate: string;
663
- signature: string;
664
- };
665
- partitionId: string;
666
- kkHandshake: string;
667
- kkHandshakeAttestation: {
668
- codeHash: string;
669
- attestationPub: string;
670
- certificate: string;
671
- signature: string;
672
- };
673
- ephemeralPublicKey: string;
674
- certificate: {
675
- codeHash: string;
676
- attestationPub: string;
677
- certificate: string;
678
- signature: string;
679
- };
680
- blob: string;
681
- };
682
- seedFragment: {
683
- approverBlob: string;
684
- challengeResponse: string;
685
- handshake: string;
686
- handshakeAttestation: {
687
- codeHash: string;
688
- attestationPub: string;
689
- certificate: string;
690
- signature: string;
691
- };
692
- } | null;
693
- } | null;
694
- }[];
695
- createdAt: Date;
696
- completedAt: Date | null;
697
- }>;
698
- /**
699
- * Init Shared Owners registration
700
- */
701
- readonly PENDING_SHARED_OWNERS_REGISTRATION_INIT: ({ engine, state }: {
702
- engine: Engine<WithOnboarding>;
703
- state: OnboardingFullStateResponse;
704
- }) => Promise<{
705
- id: string;
706
- workspaceName: string;
707
- step: "COMPLETED" | "PENDING_DEVICE_CLAIMS" | "PENDING_WRAPPING_KEY_PROVISIONING" | "PENDING_MASTER_ADMINS_REGISTRATION_INIT" | "PENDING_MASTER_ADMINS_REGISTRATION" | "PENDING_SHARED_OWNERS_REGISTRATION_INIT" | "PENDING_SHARED_OWNERS_REGISTRATION" | "PENDING_REVIEW_BY_MASTER_ADMINS" | "PENDING_SEED_PROVISIONING" | "PENDING_WORKSPACE_INITIALIZATION";
708
- claimedDevices: {
709
- pubKey: string;
710
- deviceUserId: string;
711
- deviceName: string;
712
- role: "WRAPPING_KEY_OWNER" | "SHARED_OWNER" | "MASTER_ADMIN";
713
- }[];
714
- wrappingKey: {
715
- ephemeralPubKey: string;
716
- ephemeralCertificate: {
717
- codeHash: string;
718
- attestationPub: string;
719
- certificate: string;
720
- signature: string;
721
- };
722
- fragments: {
723
- pubKey: string;
724
- ephemeralPubKey: string;
725
- ephemeralCertificate: {
726
- codeHash: string;
727
- attestationPub: string;
728
- certificate: string;
729
- signature: string;
730
- };
731
- blob: string;
732
- }[];
702
+ } | null;
703
+ }[];
704
+ createdAt: Date;
705
+ completedAt: Date | null;
706
+ }>;
707
+ /**
708
+ * Init Shared Owners registration
709
+ */
710
+ readonly PENDING_SHARED_OWNERS_REGISTRATION_INIT: ({
711
+ engine,
712
+ state
713
+ }: {
714
+ engine: Engine<WithOnboarding>;
715
+ state: OnboardingFullStateResponse;
716
+ }) => Promise<{
717
+ id: string;
718
+ workspaceName: string;
719
+ step: "COMPLETED" | "PENDING_DEVICE_CLAIMS" | "PENDING_MASTER_ADMINS_REGISTRATION" | "PENDING_MASTER_ADMINS_REGISTRATION_INIT" | "PENDING_REVIEW_BY_MASTER_ADMINS" | "PENDING_SEED_PROVISIONING" | "PENDING_SHARED_OWNERS_REGISTRATION" | "PENDING_SHARED_OWNERS_REGISTRATION_INIT" | "PENDING_WORKSPACE_INITIALIZATION" | "PENDING_WRAPPING_KEY_PROVISIONING";
720
+ claimedDevices: {
721
+ pubKey: string;
722
+ deviceUserId: string;
723
+ deviceName: string;
724
+ role: "MASTER_ADMIN" | "SHARED_OWNER" | "WRAPPING_KEY_OWNER";
725
+ }[];
726
+ wrappingKey: {
727
+ ephemeralPubKey: string;
728
+ ephemeralCertificate: {
729
+ codeHash: string;
730
+ attestationPub: string;
731
+ certificate: string;
732
+ signature: string;
733
+ };
734
+ fragments: {
735
+ pubKey: string;
736
+ ephemeralPubKey: string;
737
+ ephemeralCertificate: {
738
+ codeHash: string;
739
+ attestationPub: string;
740
+ certificate: string;
741
+ signature: string;
742
+ };
743
+ blob: string;
744
+ }[];
745
+ } | null;
746
+ masterAdmins: {
747
+ name: string;
748
+ psdModel: "BLUE" | "STAX";
749
+ pubKey: string;
750
+ registrationChallenge: {
751
+ challenge: string;
752
+ ephemeralPublicKey: string;
753
+ ephemeralPublicKeyAttestation: {
754
+ codeHash: string;
755
+ attestationPub: string;
756
+ certificate: string;
757
+ signature: string;
758
+ };
759
+ handshake: string;
760
+ handshakeAttestation: {
761
+ codeHash: string;
762
+ attestationPub: string;
763
+ certificate: string;
764
+ signature: string;
765
+ };
766
+ u2fRegisterData: string;
767
+ ciphertext: string;
768
+ requestId: string;
769
+ };
770
+ registrationResponse: {
771
+ certificate: {
772
+ codeHash: string;
773
+ attestationPub: string;
774
+ certificate: string;
775
+ signature: string;
776
+ };
777
+ u2fRegister: string;
778
+ u2fKeyHandle: string;
779
+ registerData: string;
780
+ validationKey: string;
781
+ pairingPayload: string;
782
+ } | null;
783
+ role: "MASTER_ADMIN";
784
+ review: {
785
+ challenge: {
786
+ challengeType: "PSD";
787
+ wActions: string[];
788
+ handshake: string;
789
+ handshakeAttestation: {
790
+ codeHash: string;
791
+ attestationPub: string;
792
+ certificate: string;
793
+ signature: string;
794
+ };
795
+ partitionId: string;
796
+ };
797
+ signature: string | null;
798
+ } | null;
799
+ }[];
800
+ sharedOwners: {
801
+ name: string;
802
+ psdModel: "BLUE" | "STAX";
803
+ pubKey: string;
804
+ registrationChallenge: {
805
+ challenge: string;
806
+ ephemeralPublicKey: string;
807
+ ephemeralPublicKeyAttestation: {
808
+ codeHash: string;
809
+ attestationPub: string;
810
+ certificate: string;
811
+ signature: string;
812
+ };
813
+ handshake: string;
814
+ handshakeAttestation: {
815
+ codeHash: string;
816
+ attestationPub: string;
817
+ certificate: string;
818
+ signature: string;
819
+ };
820
+ u2fRegisterData: string;
821
+ ciphertext: string;
822
+ requestId: string;
823
+ };
824
+ registrationResponse: {
825
+ certificate: {
826
+ codeHash: string;
827
+ attestationPub: string;
828
+ certificate: string;
829
+ signature: string;
830
+ };
831
+ u2fRegister: string;
832
+ u2fKeyHandle: string;
833
+ registerData: string;
834
+ validationKey: string;
835
+ pairingPayload: string;
836
+ } | null;
837
+ role: "SHARED_OWNER";
838
+ review: {
839
+ seedChallenge: {
840
+ challengeType: "PSD";
841
+ wActions: string[];
842
+ handshake: string;
843
+ handshakeAttestation: {
844
+ codeHash: string;
845
+ attestationPub: string;
846
+ certificate: string;
847
+ signature: string;
848
+ };
849
+ partitionId: string;
850
+ kkHandshake: string;
851
+ kkHandshakeAttestation: {
852
+ codeHash: string;
853
+ attestationPub: string;
854
+ certificate: string;
855
+ signature: string;
856
+ };
857
+ ephemeralPublicKey: string;
858
+ certificate: {
859
+ codeHash: string;
860
+ attestationPub: string;
861
+ certificate: string;
862
+ signature: string;
863
+ };
864
+ blob: string;
865
+ };
866
+ seedFragment: {
867
+ approverBlob: string;
868
+ challengeResponse: string;
869
+ handshake: string;
870
+ handshakeAttestation: {
871
+ codeHash: string;
872
+ attestationPub: string;
873
+ certificate: string;
874
+ signature: string;
875
+ };
733
876
  } | null;
734
- masterAdmins: {
735
- name: string;
736
- psdModel: "BLUE" | "STAX";
737
- pubKey: string;
738
- registrationChallenge: {
739
- challenge: string;
740
- ephemeralPublicKey: string;
741
- ephemeralPublicKeyAttestation: {
742
- codeHash: string;
743
- attestationPub: string;
744
- certificate: string;
745
- signature: string;
746
- };
747
- handshake: string;
748
- handshakeAttestation: {
749
- codeHash: string;
750
- attestationPub: string;
751
- certificate: string;
752
- signature: string;
753
- };
754
- u2fRegisterData: string;
755
- ciphertext: string;
756
- requestId: string;
757
- };
758
- registrationResponse: {
759
- certificate: {
760
- codeHash: string;
761
- attestationPub: string;
762
- certificate: string;
763
- signature: string;
764
- };
765
- u2fRegister: string;
766
- u2fKeyHandle: string;
767
- registerData: string;
768
- validationKey: string;
769
- pairingPayload: string;
770
- } | null;
771
- role: "MASTER_ADMIN";
772
- review: {
773
- challenge: {
774
- challengeType: "PSD";
775
- wActions: string[];
776
- handshake: string;
777
- handshakeAttestation: {
778
- codeHash: string;
779
- attestationPub: string;
780
- certificate: string;
781
- signature: string;
782
- };
783
- partitionId: string;
784
- };
785
- signature: string | null;
786
- } | null;
787
- }[];
788
- sharedOwners: {
789
- name: string;
790
- psdModel: "BLUE" | "STAX";
791
- pubKey: string;
792
- registrationChallenge: {
793
- challenge: string;
794
- ephemeralPublicKey: string;
795
- ephemeralPublicKeyAttestation: {
796
- codeHash: string;
797
- attestationPub: string;
798
- certificate: string;
799
- signature: string;
800
- };
801
- handshake: string;
802
- handshakeAttestation: {
803
- codeHash: string;
804
- attestationPub: string;
805
- certificate: string;
806
- signature: string;
807
- };
808
- u2fRegisterData: string;
809
- ciphertext: string;
810
- requestId: string;
811
- };
812
- registrationResponse: {
813
- certificate: {
814
- codeHash: string;
815
- attestationPub: string;
816
- certificate: string;
817
- signature: string;
818
- };
819
- u2fRegister: string;
820
- u2fKeyHandle: string;
821
- registerData: string;
822
- validationKey: string;
823
- pairingPayload: string;
824
- } | null;
825
- role: "SHARED_OWNER";
826
- review: {
827
- seedChallenge: {
828
- challengeType: "PSD";
829
- wActions: string[];
830
- handshake: string;
831
- handshakeAttestation: {
832
- codeHash: string;
833
- attestationPub: string;
834
- certificate: string;
835
- signature: string;
836
- };
837
- partitionId: string;
838
- kkHandshake: string;
839
- kkHandshakeAttestation: {
840
- codeHash: string;
841
- attestationPub: string;
842
- certificate: string;
843
- signature: string;
844
- };
845
- ephemeralPublicKey: string;
846
- certificate: {
847
- codeHash: string;
848
- attestationPub: string;
849
- certificate: string;
850
- signature: string;
851
- };
852
- blob: string;
853
- };
854
- seedFragment: {
855
- approverBlob: string;
856
- challengeResponse: string;
857
- handshake: string;
858
- handshakeAttestation: {
859
- codeHash: string;
860
- attestationPub: string;
861
- certificate: string;
862
- signature: string;
863
- };
864
- } | null;
865
- } | null;
866
- }[];
867
- createdAt: Date;
868
- completedAt: Date | null;
869
- }>;
870
- /**
871
- * Shared Owners registration
872
- */
873
- readonly PENDING_SHARED_OWNERS_REGISTRATION: ({ state, engine }: {
874
- engine: Engine<WithOnboarding>;
875
- state: OnboardingFullStateResponse;
876
- }, logger: Logger) => Promise<{
877
- id: string;
878
- workspaceName: string;
879
- step: "COMPLETED" | "PENDING_DEVICE_CLAIMS" | "PENDING_WRAPPING_KEY_PROVISIONING" | "PENDING_MASTER_ADMINS_REGISTRATION_INIT" | "PENDING_MASTER_ADMINS_REGISTRATION" | "PENDING_SHARED_OWNERS_REGISTRATION_INIT" | "PENDING_SHARED_OWNERS_REGISTRATION" | "PENDING_REVIEW_BY_MASTER_ADMINS" | "PENDING_SEED_PROVISIONING" | "PENDING_WORKSPACE_INITIALIZATION";
880
- claimedDevices: {
881
- pubKey: string;
882
- deviceUserId: string;
883
- deviceName: string;
884
- role: "WRAPPING_KEY_OWNER" | "SHARED_OWNER" | "MASTER_ADMIN";
885
- }[];
886
- wrappingKey: {
887
- ephemeralPubKey: string;
888
- ephemeralCertificate: {
889
- codeHash: string;
890
- attestationPub: string;
891
- certificate: string;
892
- signature: string;
893
- };
894
- fragments: {
895
- pubKey: string;
896
- ephemeralPubKey: string;
897
- ephemeralCertificate: {
898
- codeHash: string;
899
- attestationPub: string;
900
- certificate: string;
901
- signature: string;
902
- };
903
- blob: string;
904
- }[];
877
+ } | null;
878
+ }[];
879
+ createdAt: Date;
880
+ completedAt: Date | null;
881
+ }>;
882
+ /**
883
+ * Shared Owners registration
884
+ */
885
+ readonly PENDING_SHARED_OWNERS_REGISTRATION: ({
886
+ state,
887
+ engine
888
+ }: {
889
+ engine: Engine<WithOnboarding>;
890
+ state: OnboardingFullStateResponse;
891
+ }, logger: Logger) => Promise<{
892
+ id: string;
893
+ workspaceName: string;
894
+ step: "COMPLETED" | "PENDING_DEVICE_CLAIMS" | "PENDING_MASTER_ADMINS_REGISTRATION" | "PENDING_MASTER_ADMINS_REGISTRATION_INIT" | "PENDING_REVIEW_BY_MASTER_ADMINS" | "PENDING_SEED_PROVISIONING" | "PENDING_SHARED_OWNERS_REGISTRATION" | "PENDING_SHARED_OWNERS_REGISTRATION_INIT" | "PENDING_WORKSPACE_INITIALIZATION" | "PENDING_WRAPPING_KEY_PROVISIONING";
895
+ claimedDevices: {
896
+ pubKey: string;
897
+ deviceUserId: string;
898
+ deviceName: string;
899
+ role: "MASTER_ADMIN" | "SHARED_OWNER" | "WRAPPING_KEY_OWNER";
900
+ }[];
901
+ wrappingKey: {
902
+ ephemeralPubKey: string;
903
+ ephemeralCertificate: {
904
+ codeHash: string;
905
+ attestationPub: string;
906
+ certificate: string;
907
+ signature: string;
908
+ };
909
+ fragments: {
910
+ pubKey: string;
911
+ ephemeralPubKey: string;
912
+ ephemeralCertificate: {
913
+ codeHash: string;
914
+ attestationPub: string;
915
+ certificate: string;
916
+ signature: string;
917
+ };
918
+ blob: string;
919
+ }[];
920
+ } | null;
921
+ masterAdmins: {
922
+ name: string;
923
+ psdModel: "BLUE" | "STAX";
924
+ pubKey: string;
925
+ registrationChallenge: {
926
+ challenge: string;
927
+ ephemeralPublicKey: string;
928
+ ephemeralPublicKeyAttestation: {
929
+ codeHash: string;
930
+ attestationPub: string;
931
+ certificate: string;
932
+ signature: string;
933
+ };
934
+ handshake: string;
935
+ handshakeAttestation: {
936
+ codeHash: string;
937
+ attestationPub: string;
938
+ certificate: string;
939
+ signature: string;
940
+ };
941
+ u2fRegisterData: string;
942
+ ciphertext: string;
943
+ requestId: string;
944
+ };
945
+ registrationResponse: {
946
+ certificate: {
947
+ codeHash: string;
948
+ attestationPub: string;
949
+ certificate: string;
950
+ signature: string;
951
+ };
952
+ u2fRegister: string;
953
+ u2fKeyHandle: string;
954
+ registerData: string;
955
+ validationKey: string;
956
+ pairingPayload: string;
957
+ } | null;
958
+ role: "MASTER_ADMIN";
959
+ review: {
960
+ challenge: {
961
+ challengeType: "PSD";
962
+ wActions: string[];
963
+ handshake: string;
964
+ handshakeAttestation: {
965
+ codeHash: string;
966
+ attestationPub: string;
967
+ certificate: string;
968
+ signature: string;
969
+ };
970
+ partitionId: string;
971
+ };
972
+ signature: string | null;
973
+ } | null;
974
+ }[];
975
+ sharedOwners: {
976
+ name: string;
977
+ psdModel: "BLUE" | "STAX";
978
+ pubKey: string;
979
+ registrationChallenge: {
980
+ challenge: string;
981
+ ephemeralPublicKey: string;
982
+ ephemeralPublicKeyAttestation: {
983
+ codeHash: string;
984
+ attestationPub: string;
985
+ certificate: string;
986
+ signature: string;
987
+ };
988
+ handshake: string;
989
+ handshakeAttestation: {
990
+ codeHash: string;
991
+ attestationPub: string;
992
+ certificate: string;
993
+ signature: string;
994
+ };
995
+ u2fRegisterData: string;
996
+ ciphertext: string;
997
+ requestId: string;
998
+ };
999
+ registrationResponse: {
1000
+ certificate: {
1001
+ codeHash: string;
1002
+ attestationPub: string;
1003
+ certificate: string;
1004
+ signature: string;
1005
+ };
1006
+ u2fRegister: string;
1007
+ u2fKeyHandle: string;
1008
+ registerData: string;
1009
+ validationKey: string;
1010
+ pairingPayload: string;
1011
+ } | null;
1012
+ role: "SHARED_OWNER";
1013
+ review: {
1014
+ seedChallenge: {
1015
+ challengeType: "PSD";
1016
+ wActions: string[];
1017
+ handshake: string;
1018
+ handshakeAttestation: {
1019
+ codeHash: string;
1020
+ attestationPub: string;
1021
+ certificate: string;
1022
+ signature: string;
1023
+ };
1024
+ partitionId: string;
1025
+ kkHandshake: string;
1026
+ kkHandshakeAttestation: {
1027
+ codeHash: string;
1028
+ attestationPub: string;
1029
+ certificate: string;
1030
+ signature: string;
1031
+ };
1032
+ ephemeralPublicKey: string;
1033
+ certificate: {
1034
+ codeHash: string;
1035
+ attestationPub: string;
1036
+ certificate: string;
1037
+ signature: string;
1038
+ };
1039
+ blob: string;
1040
+ };
1041
+ seedFragment: {
1042
+ approverBlob: string;
1043
+ challengeResponse: string;
1044
+ handshake: string;
1045
+ handshakeAttestation: {
1046
+ codeHash: string;
1047
+ attestationPub: string;
1048
+ certificate: string;
1049
+ signature: string;
1050
+ };
905
1051
  } | null;
906
- masterAdmins: {
907
- name: string;
908
- psdModel: "BLUE" | "STAX";
909
- pubKey: string;
910
- registrationChallenge: {
911
- challenge: string;
912
- ephemeralPublicKey: string;
913
- ephemeralPublicKeyAttestation: {
914
- codeHash: string;
915
- attestationPub: string;
916
- certificate: string;
917
- signature: string;
918
- };
919
- handshake: string;
920
- handshakeAttestation: {
921
- codeHash: string;
922
- attestationPub: string;
923
- certificate: string;
924
- signature: string;
925
- };
926
- u2fRegisterData: string;
927
- ciphertext: string;
928
- requestId: string;
929
- };
930
- registrationResponse: {
931
- certificate: {
932
- codeHash: string;
933
- attestationPub: string;
934
- certificate: string;
935
- signature: string;
936
- };
937
- u2fRegister: string;
938
- u2fKeyHandle: string;
939
- registerData: string;
940
- validationKey: string;
941
- pairingPayload: string;
942
- } | null;
943
- role: "MASTER_ADMIN";
944
- review: {
945
- challenge: {
946
- challengeType: "PSD";
947
- wActions: string[];
948
- handshake: string;
949
- handshakeAttestation: {
950
- codeHash: string;
951
- attestationPub: string;
952
- certificate: string;
953
- signature: string;
954
- };
955
- partitionId: string;
956
- };
957
- signature: string | null;
958
- } | null;
959
- }[];
960
- sharedOwners: {
961
- name: string;
962
- psdModel: "BLUE" | "STAX";
963
- pubKey: string;
964
- registrationChallenge: {
965
- challenge: string;
966
- ephemeralPublicKey: string;
967
- ephemeralPublicKeyAttestation: {
968
- codeHash: string;
969
- attestationPub: string;
970
- certificate: string;
971
- signature: string;
972
- };
973
- handshake: string;
974
- handshakeAttestation: {
975
- codeHash: string;
976
- attestationPub: string;
977
- certificate: string;
978
- signature: string;
979
- };
980
- u2fRegisterData: string;
981
- ciphertext: string;
982
- requestId: string;
983
- };
984
- registrationResponse: {
985
- certificate: {
986
- codeHash: string;
987
- attestationPub: string;
988
- certificate: string;
989
- signature: string;
990
- };
991
- u2fRegister: string;
992
- u2fKeyHandle: string;
993
- registerData: string;
994
- validationKey: string;
995
- pairingPayload: string;
996
- } | null;
997
- role: "SHARED_OWNER";
998
- review: {
999
- seedChallenge: {
1000
- challengeType: "PSD";
1001
- wActions: string[];
1002
- handshake: string;
1003
- handshakeAttestation: {
1004
- codeHash: string;
1005
- attestationPub: string;
1006
- certificate: string;
1007
- signature: string;
1008
- };
1009
- partitionId: string;
1010
- kkHandshake: string;
1011
- kkHandshakeAttestation: {
1012
- codeHash: string;
1013
- attestationPub: string;
1014
- certificate: string;
1015
- signature: string;
1016
- };
1017
- ephemeralPublicKey: string;
1018
- certificate: {
1019
- codeHash: string;
1020
- attestationPub: string;
1021
- certificate: string;
1022
- signature: string;
1023
- };
1024
- blob: string;
1025
- };
1026
- seedFragment: {
1027
- approverBlob: string;
1028
- challengeResponse: string;
1029
- handshake: string;
1030
- handshakeAttestation: {
1031
- codeHash: string;
1032
- attestationPub: string;
1033
- certificate: string;
1034
- signature: string;
1035
- };
1036
- } | null;
1037
- } | null;
1038
- }[];
1039
- createdAt: Date;
1040
- completedAt: Date | null;
1041
- }>;
1042
- /**
1043
- * Review by master admins
1044
- */
1045
- readonly PENDING_REVIEW_BY_MASTER_ADMINS: ({ state, engine }: {
1046
- engine: Engine<WithOnboarding>;
1047
- state: OnboardingFullStateResponse;
1048
- }, logger: Logger) => Promise<{
1049
- id: string;
1050
- workspaceName: string;
1051
- step: "COMPLETED" | "PENDING_DEVICE_CLAIMS" | "PENDING_WRAPPING_KEY_PROVISIONING" | "PENDING_MASTER_ADMINS_REGISTRATION_INIT" | "PENDING_MASTER_ADMINS_REGISTRATION" | "PENDING_SHARED_OWNERS_REGISTRATION_INIT" | "PENDING_SHARED_OWNERS_REGISTRATION" | "PENDING_REVIEW_BY_MASTER_ADMINS" | "PENDING_SEED_PROVISIONING" | "PENDING_WORKSPACE_INITIALIZATION";
1052
- claimedDevices: {
1053
- pubKey: string;
1054
- deviceUserId: string;
1055
- deviceName: string;
1056
- role: "WRAPPING_KEY_OWNER" | "SHARED_OWNER" | "MASTER_ADMIN";
1057
- }[];
1058
- wrappingKey: {
1059
- ephemeralPubKey: string;
1060
- ephemeralCertificate: {
1061
- codeHash: string;
1062
- attestationPub: string;
1063
- certificate: string;
1064
- signature: string;
1065
- };
1066
- fragments: {
1067
- pubKey: string;
1068
- ephemeralPubKey: string;
1069
- ephemeralCertificate: {
1070
- codeHash: string;
1071
- attestationPub: string;
1072
- certificate: string;
1073
- signature: string;
1074
- };
1075
- blob: string;
1076
- }[];
1052
+ } | null;
1053
+ }[];
1054
+ createdAt: Date;
1055
+ completedAt: Date | null;
1056
+ }>;
1057
+ /**
1058
+ * Review by master admins
1059
+ */
1060
+ readonly PENDING_REVIEW_BY_MASTER_ADMINS: ({
1061
+ state,
1062
+ engine
1063
+ }: {
1064
+ engine: Engine<WithOnboarding>;
1065
+ state: OnboardingFullStateResponse;
1066
+ }, logger: Logger) => Promise<{
1067
+ id: string;
1068
+ workspaceName: string;
1069
+ step: "COMPLETED" | "PENDING_DEVICE_CLAIMS" | "PENDING_MASTER_ADMINS_REGISTRATION" | "PENDING_MASTER_ADMINS_REGISTRATION_INIT" | "PENDING_REVIEW_BY_MASTER_ADMINS" | "PENDING_SEED_PROVISIONING" | "PENDING_SHARED_OWNERS_REGISTRATION" | "PENDING_SHARED_OWNERS_REGISTRATION_INIT" | "PENDING_WORKSPACE_INITIALIZATION" | "PENDING_WRAPPING_KEY_PROVISIONING";
1070
+ claimedDevices: {
1071
+ pubKey: string;
1072
+ deviceUserId: string;
1073
+ deviceName: string;
1074
+ role: "MASTER_ADMIN" | "SHARED_OWNER" | "WRAPPING_KEY_OWNER";
1075
+ }[];
1076
+ wrappingKey: {
1077
+ ephemeralPubKey: string;
1078
+ ephemeralCertificate: {
1079
+ codeHash: string;
1080
+ attestationPub: string;
1081
+ certificate: string;
1082
+ signature: string;
1083
+ };
1084
+ fragments: {
1085
+ pubKey: string;
1086
+ ephemeralPubKey: string;
1087
+ ephemeralCertificate: {
1088
+ codeHash: string;
1089
+ attestationPub: string;
1090
+ certificate: string;
1091
+ signature: string;
1092
+ };
1093
+ blob: string;
1094
+ }[];
1095
+ } | null;
1096
+ masterAdmins: {
1097
+ name: string;
1098
+ psdModel: "BLUE" | "STAX";
1099
+ pubKey: string;
1100
+ registrationChallenge: {
1101
+ challenge: string;
1102
+ ephemeralPublicKey: string;
1103
+ ephemeralPublicKeyAttestation: {
1104
+ codeHash: string;
1105
+ attestationPub: string;
1106
+ certificate: string;
1107
+ signature: string;
1108
+ };
1109
+ handshake: string;
1110
+ handshakeAttestation: {
1111
+ codeHash: string;
1112
+ attestationPub: string;
1113
+ certificate: string;
1114
+ signature: string;
1115
+ };
1116
+ u2fRegisterData: string;
1117
+ ciphertext: string;
1118
+ requestId: string;
1119
+ };
1120
+ registrationResponse: {
1121
+ certificate: {
1122
+ codeHash: string;
1123
+ attestationPub: string;
1124
+ certificate: string;
1125
+ signature: string;
1126
+ };
1127
+ u2fRegister: string;
1128
+ u2fKeyHandle: string;
1129
+ registerData: string;
1130
+ validationKey: string;
1131
+ pairingPayload: string;
1132
+ } | null;
1133
+ role: "MASTER_ADMIN";
1134
+ review: {
1135
+ challenge: {
1136
+ challengeType: "PSD";
1137
+ wActions: string[];
1138
+ handshake: string;
1139
+ handshakeAttestation: {
1140
+ codeHash: string;
1141
+ attestationPub: string;
1142
+ certificate: string;
1143
+ signature: string;
1144
+ };
1145
+ partitionId: string;
1146
+ };
1147
+ signature: string | null;
1148
+ } | null;
1149
+ }[];
1150
+ sharedOwners: {
1151
+ name: string;
1152
+ psdModel: "BLUE" | "STAX";
1153
+ pubKey: string;
1154
+ registrationChallenge: {
1155
+ challenge: string;
1156
+ ephemeralPublicKey: string;
1157
+ ephemeralPublicKeyAttestation: {
1158
+ codeHash: string;
1159
+ attestationPub: string;
1160
+ certificate: string;
1161
+ signature: string;
1162
+ };
1163
+ handshake: string;
1164
+ handshakeAttestation: {
1165
+ codeHash: string;
1166
+ attestationPub: string;
1167
+ certificate: string;
1168
+ signature: string;
1169
+ };
1170
+ u2fRegisterData: string;
1171
+ ciphertext: string;
1172
+ requestId: string;
1173
+ };
1174
+ registrationResponse: {
1175
+ certificate: {
1176
+ codeHash: string;
1177
+ attestationPub: string;
1178
+ certificate: string;
1179
+ signature: string;
1180
+ };
1181
+ u2fRegister: string;
1182
+ u2fKeyHandle: string;
1183
+ registerData: string;
1184
+ validationKey: string;
1185
+ pairingPayload: string;
1186
+ } | null;
1187
+ role: "SHARED_OWNER";
1188
+ review: {
1189
+ seedChallenge: {
1190
+ challengeType: "PSD";
1191
+ wActions: string[];
1192
+ handshake: string;
1193
+ handshakeAttestation: {
1194
+ codeHash: string;
1195
+ attestationPub: string;
1196
+ certificate: string;
1197
+ signature: string;
1198
+ };
1199
+ partitionId: string;
1200
+ kkHandshake: string;
1201
+ kkHandshakeAttestation: {
1202
+ codeHash: string;
1203
+ attestationPub: string;
1204
+ certificate: string;
1205
+ signature: string;
1206
+ };
1207
+ ephemeralPublicKey: string;
1208
+ certificate: {
1209
+ codeHash: string;
1210
+ attestationPub: string;
1211
+ certificate: string;
1212
+ signature: string;
1213
+ };
1214
+ blob: string;
1215
+ };
1216
+ seedFragment: {
1217
+ approverBlob: string;
1218
+ challengeResponse: string;
1219
+ handshake: string;
1220
+ handshakeAttestation: {
1221
+ codeHash: string;
1222
+ attestationPub: string;
1223
+ certificate: string;
1224
+ signature: string;
1225
+ };
1077
1226
  } | null;
1078
- masterAdmins: {
1079
- name: string;
1080
- psdModel: "BLUE" | "STAX";
1081
- pubKey: string;
1082
- registrationChallenge: {
1083
- challenge: string;
1084
- ephemeralPublicKey: string;
1085
- ephemeralPublicKeyAttestation: {
1086
- codeHash: string;
1087
- attestationPub: string;
1088
- certificate: string;
1089
- signature: string;
1090
- };
1091
- handshake: string;
1092
- handshakeAttestation: {
1093
- codeHash: string;
1094
- attestationPub: string;
1095
- certificate: string;
1096
- signature: string;
1097
- };
1098
- u2fRegisterData: string;
1099
- ciphertext: string;
1100
- requestId: string;
1101
- };
1102
- registrationResponse: {
1103
- certificate: {
1104
- codeHash: string;
1105
- attestationPub: string;
1106
- certificate: string;
1107
- signature: string;
1108
- };
1109
- u2fRegister: string;
1110
- u2fKeyHandle: string;
1111
- registerData: string;
1112
- validationKey: string;
1113
- pairingPayload: string;
1114
- } | null;
1115
- role: "MASTER_ADMIN";
1116
- review: {
1117
- challenge: {
1118
- challengeType: "PSD";
1119
- wActions: string[];
1120
- handshake: string;
1121
- handshakeAttestation: {
1122
- codeHash: string;
1123
- attestationPub: string;
1124
- certificate: string;
1125
- signature: string;
1126
- };
1127
- partitionId: string;
1128
- };
1129
- signature: string | null;
1130
- } | null;
1131
- }[];
1132
- sharedOwners: {
1133
- name: string;
1134
- psdModel: "BLUE" | "STAX";
1135
- pubKey: string;
1136
- registrationChallenge: {
1137
- challenge: string;
1138
- ephemeralPublicKey: string;
1139
- ephemeralPublicKeyAttestation: {
1140
- codeHash: string;
1141
- attestationPub: string;
1142
- certificate: string;
1143
- signature: string;
1144
- };
1145
- handshake: string;
1146
- handshakeAttestation: {
1147
- codeHash: string;
1148
- attestationPub: string;
1149
- certificate: string;
1150
- signature: string;
1151
- };
1152
- u2fRegisterData: string;
1153
- ciphertext: string;
1154
- requestId: string;
1155
- };
1156
- registrationResponse: {
1157
- certificate: {
1158
- codeHash: string;
1159
- attestationPub: string;
1160
- certificate: string;
1161
- signature: string;
1162
- };
1163
- u2fRegister: string;
1164
- u2fKeyHandle: string;
1165
- registerData: string;
1166
- validationKey: string;
1167
- pairingPayload: string;
1168
- } | null;
1169
- role: "SHARED_OWNER";
1170
- review: {
1171
- seedChallenge: {
1172
- challengeType: "PSD";
1173
- wActions: string[];
1174
- handshake: string;
1175
- handshakeAttestation: {
1176
- codeHash: string;
1177
- attestationPub: string;
1178
- certificate: string;
1179
- signature: string;
1180
- };
1181
- partitionId: string;
1182
- kkHandshake: string;
1183
- kkHandshakeAttestation: {
1184
- codeHash: string;
1185
- attestationPub: string;
1186
- certificate: string;
1187
- signature: string;
1188
- };
1189
- ephemeralPublicKey: string;
1190
- certificate: {
1191
- codeHash: string;
1192
- attestationPub: string;
1193
- certificate: string;
1194
- signature: string;
1195
- };
1196
- blob: string;
1197
- };
1198
- seedFragment: {
1199
- approverBlob: string;
1200
- challengeResponse: string;
1201
- handshake: string;
1202
- handshakeAttestation: {
1203
- codeHash: string;
1204
- attestationPub: string;
1205
- certificate: string;
1206
- signature: string;
1207
- };
1208
- } | null;
1209
- } | null;
1210
- }[];
1211
- createdAt: Date;
1212
- completedAt: Date | null;
1213
- }>;
1214
- /**
1215
- * Seed provisioning
1216
- */
1217
- readonly PENDING_SEED_PROVISIONING: ({ state, engine }: {
1218
- engine: Engine<WithOnboarding>;
1219
- state: OnboardingFullStateResponse;
1220
- }, logger: Logger) => Promise<{
1221
- id: string;
1222
- workspaceName: string;
1223
- step: "COMPLETED" | "PENDING_DEVICE_CLAIMS" | "PENDING_WRAPPING_KEY_PROVISIONING" | "PENDING_MASTER_ADMINS_REGISTRATION_INIT" | "PENDING_MASTER_ADMINS_REGISTRATION" | "PENDING_SHARED_OWNERS_REGISTRATION_INIT" | "PENDING_SHARED_OWNERS_REGISTRATION" | "PENDING_REVIEW_BY_MASTER_ADMINS" | "PENDING_SEED_PROVISIONING" | "PENDING_WORKSPACE_INITIALIZATION";
1224
- claimedDevices: {
1225
- pubKey: string;
1226
- deviceUserId: string;
1227
- deviceName: string;
1228
- role: "WRAPPING_KEY_OWNER" | "SHARED_OWNER" | "MASTER_ADMIN";
1229
- }[];
1230
- wrappingKey: {
1231
- ephemeralPubKey: string;
1232
- ephemeralCertificate: {
1233
- codeHash: string;
1234
- attestationPub: string;
1235
- certificate: string;
1236
- signature: string;
1237
- };
1238
- fragments: {
1239
- pubKey: string;
1240
- ephemeralPubKey: string;
1241
- ephemeralCertificate: {
1242
- codeHash: string;
1243
- attestationPub: string;
1244
- certificate: string;
1245
- signature: string;
1246
- };
1247
- blob: string;
1248
- }[];
1227
+ } | null;
1228
+ }[];
1229
+ createdAt: Date;
1230
+ completedAt: Date | null;
1231
+ }>;
1232
+ /**
1233
+ * Seed provisioning
1234
+ */
1235
+ readonly PENDING_SEED_PROVISIONING: ({
1236
+ state,
1237
+ engine
1238
+ }: {
1239
+ engine: Engine<WithOnboarding>;
1240
+ state: OnboardingFullStateResponse;
1241
+ }, logger: Logger) => Promise<{
1242
+ id: string;
1243
+ workspaceName: string;
1244
+ step: "COMPLETED" | "PENDING_DEVICE_CLAIMS" | "PENDING_MASTER_ADMINS_REGISTRATION" | "PENDING_MASTER_ADMINS_REGISTRATION_INIT" | "PENDING_REVIEW_BY_MASTER_ADMINS" | "PENDING_SEED_PROVISIONING" | "PENDING_SHARED_OWNERS_REGISTRATION" | "PENDING_SHARED_OWNERS_REGISTRATION_INIT" | "PENDING_WORKSPACE_INITIALIZATION" | "PENDING_WRAPPING_KEY_PROVISIONING";
1245
+ claimedDevices: {
1246
+ pubKey: string;
1247
+ deviceUserId: string;
1248
+ deviceName: string;
1249
+ role: "MASTER_ADMIN" | "SHARED_OWNER" | "WRAPPING_KEY_OWNER";
1250
+ }[];
1251
+ wrappingKey: {
1252
+ ephemeralPubKey: string;
1253
+ ephemeralCertificate: {
1254
+ codeHash: string;
1255
+ attestationPub: string;
1256
+ certificate: string;
1257
+ signature: string;
1258
+ };
1259
+ fragments: {
1260
+ pubKey: string;
1261
+ ephemeralPubKey: string;
1262
+ ephemeralCertificate: {
1263
+ codeHash: string;
1264
+ attestationPub: string;
1265
+ certificate: string;
1266
+ signature: string;
1267
+ };
1268
+ blob: string;
1269
+ }[];
1270
+ } | null;
1271
+ masterAdmins: {
1272
+ name: string;
1273
+ psdModel: "BLUE" | "STAX";
1274
+ pubKey: string;
1275
+ registrationChallenge: {
1276
+ challenge: string;
1277
+ ephemeralPublicKey: string;
1278
+ ephemeralPublicKeyAttestation: {
1279
+ codeHash: string;
1280
+ attestationPub: string;
1281
+ certificate: string;
1282
+ signature: string;
1283
+ };
1284
+ handshake: string;
1285
+ handshakeAttestation: {
1286
+ codeHash: string;
1287
+ attestationPub: string;
1288
+ certificate: string;
1289
+ signature: string;
1290
+ };
1291
+ u2fRegisterData: string;
1292
+ ciphertext: string;
1293
+ requestId: string;
1294
+ };
1295
+ registrationResponse: {
1296
+ certificate: {
1297
+ codeHash: string;
1298
+ attestationPub: string;
1299
+ certificate: string;
1300
+ signature: string;
1301
+ };
1302
+ u2fRegister: string;
1303
+ u2fKeyHandle: string;
1304
+ registerData: string;
1305
+ validationKey: string;
1306
+ pairingPayload: string;
1307
+ } | null;
1308
+ role: "MASTER_ADMIN";
1309
+ review: {
1310
+ challenge: {
1311
+ challengeType: "PSD";
1312
+ wActions: string[];
1313
+ handshake: string;
1314
+ handshakeAttestation: {
1315
+ codeHash: string;
1316
+ attestationPub: string;
1317
+ certificate: string;
1318
+ signature: string;
1319
+ };
1320
+ partitionId: string;
1321
+ };
1322
+ signature: string | null;
1323
+ } | null;
1324
+ }[];
1325
+ sharedOwners: {
1326
+ name: string;
1327
+ psdModel: "BLUE" | "STAX";
1328
+ pubKey: string;
1329
+ registrationChallenge: {
1330
+ challenge: string;
1331
+ ephemeralPublicKey: string;
1332
+ ephemeralPublicKeyAttestation: {
1333
+ codeHash: string;
1334
+ attestationPub: string;
1335
+ certificate: string;
1336
+ signature: string;
1337
+ };
1338
+ handshake: string;
1339
+ handshakeAttestation: {
1340
+ codeHash: string;
1341
+ attestationPub: string;
1342
+ certificate: string;
1343
+ signature: string;
1344
+ };
1345
+ u2fRegisterData: string;
1346
+ ciphertext: string;
1347
+ requestId: string;
1348
+ };
1349
+ registrationResponse: {
1350
+ certificate: {
1351
+ codeHash: string;
1352
+ attestationPub: string;
1353
+ certificate: string;
1354
+ signature: string;
1355
+ };
1356
+ u2fRegister: string;
1357
+ u2fKeyHandle: string;
1358
+ registerData: string;
1359
+ validationKey: string;
1360
+ pairingPayload: string;
1361
+ } | null;
1362
+ role: "SHARED_OWNER";
1363
+ review: {
1364
+ seedChallenge: {
1365
+ challengeType: "PSD";
1366
+ wActions: string[];
1367
+ handshake: string;
1368
+ handshakeAttestation: {
1369
+ codeHash: string;
1370
+ attestationPub: string;
1371
+ certificate: string;
1372
+ signature: string;
1373
+ };
1374
+ partitionId: string;
1375
+ kkHandshake: string;
1376
+ kkHandshakeAttestation: {
1377
+ codeHash: string;
1378
+ attestationPub: string;
1379
+ certificate: string;
1380
+ signature: string;
1381
+ };
1382
+ ephemeralPublicKey: string;
1383
+ certificate: {
1384
+ codeHash: string;
1385
+ attestationPub: string;
1386
+ certificate: string;
1387
+ signature: string;
1388
+ };
1389
+ blob: string;
1390
+ };
1391
+ seedFragment: {
1392
+ approverBlob: string;
1393
+ challengeResponse: string;
1394
+ handshake: string;
1395
+ handshakeAttestation: {
1396
+ codeHash: string;
1397
+ attestationPub: string;
1398
+ certificate: string;
1399
+ signature: string;
1400
+ };
1249
1401
  } | null;
1250
- masterAdmins: {
1251
- name: string;
1252
- psdModel: "BLUE" | "STAX";
1253
- pubKey: string;
1254
- registrationChallenge: {
1255
- challenge: string;
1256
- ephemeralPublicKey: string;
1257
- ephemeralPublicKeyAttestation: {
1258
- codeHash: string;
1259
- attestationPub: string;
1260
- certificate: string;
1261
- signature: string;
1262
- };
1263
- handshake: string;
1264
- handshakeAttestation: {
1265
- codeHash: string;
1266
- attestationPub: string;
1267
- certificate: string;
1268
- signature: string;
1269
- };
1270
- u2fRegisterData: string;
1271
- ciphertext: string;
1272
- requestId: string;
1273
- };
1274
- registrationResponse: {
1275
- certificate: {
1276
- codeHash: string;
1277
- attestationPub: string;
1278
- certificate: string;
1279
- signature: string;
1280
- };
1281
- u2fRegister: string;
1282
- u2fKeyHandle: string;
1283
- registerData: string;
1284
- validationKey: string;
1285
- pairingPayload: string;
1286
- } | null;
1287
- role: "MASTER_ADMIN";
1288
- review: {
1289
- challenge: {
1290
- challengeType: "PSD";
1291
- wActions: string[];
1292
- handshake: string;
1293
- handshakeAttestation: {
1294
- codeHash: string;
1295
- attestationPub: string;
1296
- certificate: string;
1297
- signature: string;
1298
- };
1299
- partitionId: string;
1300
- };
1301
- signature: string | null;
1302
- } | null;
1303
- }[];
1304
- sharedOwners: {
1305
- name: string;
1306
- psdModel: "BLUE" | "STAX";
1307
- pubKey: string;
1308
- registrationChallenge: {
1309
- challenge: string;
1310
- ephemeralPublicKey: string;
1311
- ephemeralPublicKeyAttestation: {
1312
- codeHash: string;
1313
- attestationPub: string;
1314
- certificate: string;
1315
- signature: string;
1316
- };
1317
- handshake: string;
1318
- handshakeAttestation: {
1319
- codeHash: string;
1320
- attestationPub: string;
1321
- certificate: string;
1322
- signature: string;
1323
- };
1324
- u2fRegisterData: string;
1325
- ciphertext: string;
1326
- requestId: string;
1327
- };
1328
- registrationResponse: {
1329
- certificate: {
1330
- codeHash: string;
1331
- attestationPub: string;
1332
- certificate: string;
1333
- signature: string;
1334
- };
1335
- u2fRegister: string;
1336
- u2fKeyHandle: string;
1337
- registerData: string;
1338
- validationKey: string;
1339
- pairingPayload: string;
1340
- } | null;
1341
- role: "SHARED_OWNER";
1342
- review: {
1343
- seedChallenge: {
1344
- challengeType: "PSD";
1345
- wActions: string[];
1346
- handshake: string;
1347
- handshakeAttestation: {
1348
- codeHash: string;
1349
- attestationPub: string;
1350
- certificate: string;
1351
- signature: string;
1352
- };
1353
- partitionId: string;
1354
- kkHandshake: string;
1355
- kkHandshakeAttestation: {
1356
- codeHash: string;
1357
- attestationPub: string;
1358
- certificate: string;
1359
- signature: string;
1360
- };
1361
- ephemeralPublicKey: string;
1362
- certificate: {
1363
- codeHash: string;
1364
- attestationPub: string;
1365
- certificate: string;
1366
- signature: string;
1367
- };
1368
- blob: string;
1369
- };
1370
- seedFragment: {
1371
- approverBlob: string;
1372
- challengeResponse: string;
1373
- handshake: string;
1374
- handshakeAttestation: {
1375
- codeHash: string;
1376
- attestationPub: string;
1377
- certificate: string;
1378
- signature: string;
1379
- };
1380
- } | null;
1381
- } | null;
1382
- }[];
1383
- createdAt: Date;
1384
- completedAt: Date | null;
1385
- }>;
1386
- /**
1387
- * Workspace initialization
1388
- */
1389
- readonly PENDING_WORKSPACE_INITIALIZATION: ({ state, engine }: {
1390
- engine: Engine<WithOnboarding>;
1391
- state: OnboardingFullStateResponse;
1392
- }) => Promise<{
1393
- id: string;
1394
- workspaceName: string;
1395
- step: "COMPLETED" | "PENDING_DEVICE_CLAIMS" | "PENDING_WRAPPING_KEY_PROVISIONING" | "PENDING_MASTER_ADMINS_REGISTRATION_INIT" | "PENDING_MASTER_ADMINS_REGISTRATION" | "PENDING_SHARED_OWNERS_REGISTRATION_INIT" | "PENDING_SHARED_OWNERS_REGISTRATION" | "PENDING_REVIEW_BY_MASTER_ADMINS" | "PENDING_SEED_PROVISIONING" | "PENDING_WORKSPACE_INITIALIZATION";
1396
- claimedDevices: {
1397
- pubKey: string;
1398
- deviceUserId: string;
1399
- deviceName: string;
1400
- role: "WRAPPING_KEY_OWNER" | "SHARED_OWNER" | "MASTER_ADMIN";
1401
- }[];
1402
- wrappingKey: {
1403
- ephemeralPubKey: string;
1404
- ephemeralCertificate: {
1405
- codeHash: string;
1406
- attestationPub: string;
1407
- certificate: string;
1408
- signature: string;
1409
- };
1410
- fragments: {
1411
- pubKey: string;
1412
- ephemeralPubKey: string;
1413
- ephemeralCertificate: {
1414
- codeHash: string;
1415
- attestationPub: string;
1416
- certificate: string;
1417
- signature: string;
1418
- };
1419
- blob: string;
1420
- }[];
1402
+ } | null;
1403
+ }[];
1404
+ createdAt: Date;
1405
+ completedAt: Date | null;
1406
+ }>;
1407
+ /**
1408
+ * Workspace initialization
1409
+ */
1410
+ readonly PENDING_WORKSPACE_INITIALIZATION: ({
1411
+ state,
1412
+ engine
1413
+ }: {
1414
+ engine: Engine<WithOnboarding>;
1415
+ state: OnboardingFullStateResponse;
1416
+ }) => Promise<{
1417
+ id: string;
1418
+ workspaceName: string;
1419
+ step: "COMPLETED" | "PENDING_DEVICE_CLAIMS" | "PENDING_MASTER_ADMINS_REGISTRATION" | "PENDING_MASTER_ADMINS_REGISTRATION_INIT" | "PENDING_REVIEW_BY_MASTER_ADMINS" | "PENDING_SEED_PROVISIONING" | "PENDING_SHARED_OWNERS_REGISTRATION" | "PENDING_SHARED_OWNERS_REGISTRATION_INIT" | "PENDING_WORKSPACE_INITIALIZATION" | "PENDING_WRAPPING_KEY_PROVISIONING";
1420
+ claimedDevices: {
1421
+ pubKey: string;
1422
+ deviceUserId: string;
1423
+ deviceName: string;
1424
+ role: "MASTER_ADMIN" | "SHARED_OWNER" | "WRAPPING_KEY_OWNER";
1425
+ }[];
1426
+ wrappingKey: {
1427
+ ephemeralPubKey: string;
1428
+ ephemeralCertificate: {
1429
+ codeHash: string;
1430
+ attestationPub: string;
1431
+ certificate: string;
1432
+ signature: string;
1433
+ };
1434
+ fragments: {
1435
+ pubKey: string;
1436
+ ephemeralPubKey: string;
1437
+ ephemeralCertificate: {
1438
+ codeHash: string;
1439
+ attestationPub: string;
1440
+ certificate: string;
1441
+ signature: string;
1442
+ };
1443
+ blob: string;
1444
+ }[];
1445
+ } | null;
1446
+ masterAdmins: {
1447
+ name: string;
1448
+ psdModel: "BLUE" | "STAX";
1449
+ pubKey: string;
1450
+ registrationChallenge: {
1451
+ challenge: string;
1452
+ ephemeralPublicKey: string;
1453
+ ephemeralPublicKeyAttestation: {
1454
+ codeHash: string;
1455
+ attestationPub: string;
1456
+ certificate: string;
1457
+ signature: string;
1458
+ };
1459
+ handshake: string;
1460
+ handshakeAttestation: {
1461
+ codeHash: string;
1462
+ attestationPub: string;
1463
+ certificate: string;
1464
+ signature: string;
1465
+ };
1466
+ u2fRegisterData: string;
1467
+ ciphertext: string;
1468
+ requestId: string;
1469
+ };
1470
+ registrationResponse: {
1471
+ certificate: {
1472
+ codeHash: string;
1473
+ attestationPub: string;
1474
+ certificate: string;
1475
+ signature: string;
1476
+ };
1477
+ u2fRegister: string;
1478
+ u2fKeyHandle: string;
1479
+ registerData: string;
1480
+ validationKey: string;
1481
+ pairingPayload: string;
1482
+ } | null;
1483
+ role: "MASTER_ADMIN";
1484
+ review: {
1485
+ challenge: {
1486
+ challengeType: "PSD";
1487
+ wActions: string[];
1488
+ handshake: string;
1489
+ handshakeAttestation: {
1490
+ codeHash: string;
1491
+ attestationPub: string;
1492
+ certificate: string;
1493
+ signature: string;
1494
+ };
1495
+ partitionId: string;
1496
+ };
1497
+ signature: string | null;
1498
+ } | null;
1499
+ }[];
1500
+ sharedOwners: {
1501
+ name: string;
1502
+ psdModel: "BLUE" | "STAX";
1503
+ pubKey: string;
1504
+ registrationChallenge: {
1505
+ challenge: string;
1506
+ ephemeralPublicKey: string;
1507
+ ephemeralPublicKeyAttestation: {
1508
+ codeHash: string;
1509
+ attestationPub: string;
1510
+ certificate: string;
1511
+ signature: string;
1512
+ };
1513
+ handshake: string;
1514
+ handshakeAttestation: {
1515
+ codeHash: string;
1516
+ attestationPub: string;
1517
+ certificate: string;
1518
+ signature: string;
1519
+ };
1520
+ u2fRegisterData: string;
1521
+ ciphertext: string;
1522
+ requestId: string;
1523
+ };
1524
+ registrationResponse: {
1525
+ certificate: {
1526
+ codeHash: string;
1527
+ attestationPub: string;
1528
+ certificate: string;
1529
+ signature: string;
1530
+ };
1531
+ u2fRegister: string;
1532
+ u2fKeyHandle: string;
1533
+ registerData: string;
1534
+ validationKey: string;
1535
+ pairingPayload: string;
1536
+ } | null;
1537
+ role: "SHARED_OWNER";
1538
+ review: {
1539
+ seedChallenge: {
1540
+ challengeType: "PSD";
1541
+ wActions: string[];
1542
+ handshake: string;
1543
+ handshakeAttestation: {
1544
+ codeHash: string;
1545
+ attestationPub: string;
1546
+ certificate: string;
1547
+ signature: string;
1548
+ };
1549
+ partitionId: string;
1550
+ kkHandshake: string;
1551
+ kkHandshakeAttestation: {
1552
+ codeHash: string;
1553
+ attestationPub: string;
1554
+ certificate: string;
1555
+ signature: string;
1556
+ };
1557
+ ephemeralPublicKey: string;
1558
+ certificate: {
1559
+ codeHash: string;
1560
+ attestationPub: string;
1561
+ certificate: string;
1562
+ signature: string;
1563
+ };
1564
+ blob: string;
1565
+ };
1566
+ seedFragment: {
1567
+ approverBlob: string;
1568
+ challengeResponse: string;
1569
+ handshake: string;
1570
+ handshakeAttestation: {
1571
+ codeHash: string;
1572
+ attestationPub: string;
1573
+ certificate: string;
1574
+ signature: string;
1575
+ };
1421
1576
  } | null;
1422
- masterAdmins: {
1423
- name: string;
1424
- psdModel: "BLUE" | "STAX";
1425
- pubKey: string;
1426
- registrationChallenge: {
1427
- challenge: string;
1428
- ephemeralPublicKey: string;
1429
- ephemeralPublicKeyAttestation: {
1430
- codeHash: string;
1431
- attestationPub: string;
1432
- certificate: string;
1433
- signature: string;
1434
- };
1435
- handshake: string;
1436
- handshakeAttestation: {
1437
- codeHash: string;
1438
- attestationPub: string;
1439
- certificate: string;
1440
- signature: string;
1441
- };
1442
- u2fRegisterData: string;
1443
- ciphertext: string;
1444
- requestId: string;
1445
- };
1446
- registrationResponse: {
1447
- certificate: {
1448
- codeHash: string;
1449
- attestationPub: string;
1450
- certificate: string;
1451
- signature: string;
1452
- };
1453
- u2fRegister: string;
1454
- u2fKeyHandle: string;
1455
- registerData: string;
1456
- validationKey: string;
1457
- pairingPayload: string;
1458
- } | null;
1459
- role: "MASTER_ADMIN";
1460
- review: {
1461
- challenge: {
1462
- challengeType: "PSD";
1463
- wActions: string[];
1464
- handshake: string;
1465
- handshakeAttestation: {
1466
- codeHash: string;
1467
- attestationPub: string;
1468
- certificate: string;
1469
- signature: string;
1470
- };
1471
- partitionId: string;
1472
- };
1473
- signature: string | null;
1474
- } | null;
1475
- }[];
1476
- sharedOwners: {
1477
- name: string;
1478
- psdModel: "BLUE" | "STAX";
1479
- pubKey: string;
1480
- registrationChallenge: {
1481
- challenge: string;
1482
- ephemeralPublicKey: string;
1483
- ephemeralPublicKeyAttestation: {
1484
- codeHash: string;
1485
- attestationPub: string;
1486
- certificate: string;
1487
- signature: string;
1488
- };
1489
- handshake: string;
1490
- handshakeAttestation: {
1491
- codeHash: string;
1492
- attestationPub: string;
1493
- certificate: string;
1494
- signature: string;
1495
- };
1496
- u2fRegisterData: string;
1497
- ciphertext: string;
1498
- requestId: string;
1499
- };
1500
- registrationResponse: {
1501
- certificate: {
1502
- codeHash: string;
1503
- attestationPub: string;
1504
- certificate: string;
1505
- signature: string;
1506
- };
1507
- u2fRegister: string;
1508
- u2fKeyHandle: string;
1509
- registerData: string;
1510
- validationKey: string;
1511
- pairingPayload: string;
1512
- } | null;
1513
- role: "SHARED_OWNER";
1514
- review: {
1515
- seedChallenge: {
1516
- challengeType: "PSD";
1517
- wActions: string[];
1518
- handshake: string;
1519
- handshakeAttestation: {
1520
- codeHash: string;
1521
- attestationPub: string;
1522
- certificate: string;
1523
- signature: string;
1524
- };
1525
- partitionId: string;
1526
- kkHandshake: string;
1527
- kkHandshakeAttestation: {
1528
- codeHash: string;
1529
- attestationPub: string;
1530
- certificate: string;
1531
- signature: string;
1532
- };
1533
- ephemeralPublicKey: string;
1534
- certificate: {
1535
- codeHash: string;
1536
- attestationPub: string;
1537
- certificate: string;
1538
- signature: string;
1539
- };
1540
- blob: string;
1541
- };
1542
- seedFragment: {
1543
- approverBlob: string;
1544
- challengeResponse: string;
1545
- handshake: string;
1546
- handshakeAttestation: {
1547
- codeHash: string;
1548
- attestationPub: string;
1549
- certificate: string;
1550
- signature: string;
1551
- };
1552
- } | null;
1553
- } | null;
1554
- }[];
1555
- createdAt: Date;
1556
- completedAt: Date | null;
1557
- }>;
1558
- /**
1559
- * Onboarding completed
1560
- */
1561
- readonly COMPLETED: ({ state }: {
1562
- engine: Engine<WithOnboarding>;
1563
- state: OnboardingFullStateResponse;
1564
- }) => Promise<{
1565
- id: string;
1566
- workspaceName: string;
1567
- step: "PENDING_DEVICE_CLAIMS" | "PENDING_WRAPPING_KEY_PROVISIONING" | "PENDING_MASTER_ADMINS_REGISTRATION_INIT" | "PENDING_MASTER_ADMINS_REGISTRATION" | "PENDING_SHARED_OWNERS_REGISTRATION_INIT" | "PENDING_SHARED_OWNERS_REGISTRATION" | "PENDING_REVIEW_BY_MASTER_ADMINS" | "PENDING_SEED_PROVISIONING" | "PENDING_WORKSPACE_INITIALIZATION" | "COMPLETED";
1568
- claimedDevices: {
1569
- pubKey: string;
1570
- deviceUserId: string;
1571
- deviceName: string;
1572
- role: "WRAPPING_KEY_OWNER" | "SHARED_OWNER" | "MASTER_ADMIN";
1573
- }[];
1574
- wrappingKey: {
1575
- ephemeralPubKey: string;
1576
- ephemeralCertificate: {
1577
- codeHash: string;
1578
- attestationPub: string;
1579
- certificate: string;
1580
- signature: string;
1581
- };
1582
- fragments: {
1583
- pubKey: string;
1584
- ephemeralPubKey: string;
1585
- ephemeralCertificate: {
1586
- codeHash: string;
1587
- attestationPub: string;
1588
- certificate: string;
1589
- signature: string;
1590
- };
1591
- blob: string;
1592
- }[];
1577
+ } | null;
1578
+ }[];
1579
+ createdAt: Date;
1580
+ completedAt: Date | null;
1581
+ }>;
1582
+ /**
1583
+ * Onboarding completed
1584
+ */
1585
+ readonly COMPLETED: ({
1586
+ state
1587
+ }: {
1588
+ engine: Engine<WithOnboarding>;
1589
+ state: OnboardingFullStateResponse;
1590
+ }) => Promise<{
1591
+ id: string;
1592
+ workspaceName: string;
1593
+ step: "COMPLETED" | "PENDING_DEVICE_CLAIMS" | "PENDING_MASTER_ADMINS_REGISTRATION" | "PENDING_MASTER_ADMINS_REGISTRATION_INIT" | "PENDING_REVIEW_BY_MASTER_ADMINS" | "PENDING_SEED_PROVISIONING" | "PENDING_SHARED_OWNERS_REGISTRATION" | "PENDING_SHARED_OWNERS_REGISTRATION_INIT" | "PENDING_WORKSPACE_INITIALIZATION" | "PENDING_WRAPPING_KEY_PROVISIONING";
1594
+ claimedDevices: {
1595
+ pubKey: string;
1596
+ deviceUserId: string;
1597
+ deviceName: string;
1598
+ role: "MASTER_ADMIN" | "SHARED_OWNER" | "WRAPPING_KEY_OWNER";
1599
+ }[];
1600
+ wrappingKey: {
1601
+ ephemeralPubKey: string;
1602
+ ephemeralCertificate: {
1603
+ codeHash: string;
1604
+ attestationPub: string;
1605
+ certificate: string;
1606
+ signature: string;
1607
+ };
1608
+ fragments: {
1609
+ pubKey: string;
1610
+ ephemeralPubKey: string;
1611
+ ephemeralCertificate: {
1612
+ codeHash: string;
1613
+ attestationPub: string;
1614
+ certificate: string;
1615
+ signature: string;
1616
+ };
1617
+ blob: string;
1618
+ }[];
1619
+ } | null;
1620
+ masterAdmins: {
1621
+ name: string;
1622
+ psdModel: "BLUE" | "STAX";
1623
+ pubKey: string;
1624
+ registrationChallenge: {
1625
+ challenge: string;
1626
+ ephemeralPublicKey: string;
1627
+ ephemeralPublicKeyAttestation: {
1628
+ codeHash: string;
1629
+ attestationPub: string;
1630
+ certificate: string;
1631
+ signature: string;
1632
+ };
1633
+ handshake: string;
1634
+ handshakeAttestation: {
1635
+ codeHash: string;
1636
+ attestationPub: string;
1637
+ certificate: string;
1638
+ signature: string;
1639
+ };
1640
+ u2fRegisterData: string;
1641
+ ciphertext: string;
1642
+ requestId: string;
1643
+ };
1644
+ registrationResponse: {
1645
+ certificate: {
1646
+ codeHash: string;
1647
+ attestationPub: string;
1648
+ certificate: string;
1649
+ signature: string;
1650
+ };
1651
+ u2fRegister: string;
1652
+ u2fKeyHandle: string;
1653
+ registerData: string;
1654
+ validationKey: string;
1655
+ pairingPayload: string;
1656
+ } | null;
1657
+ role: "MASTER_ADMIN";
1658
+ review: {
1659
+ challenge: {
1660
+ challengeType: "PSD";
1661
+ wActions: string[];
1662
+ handshake: string;
1663
+ handshakeAttestation: {
1664
+ codeHash: string;
1665
+ attestationPub: string;
1666
+ certificate: string;
1667
+ signature: string;
1668
+ };
1669
+ partitionId: string;
1670
+ };
1671
+ signature: string | null;
1672
+ } | null;
1673
+ }[];
1674
+ sharedOwners: {
1675
+ name: string;
1676
+ psdModel: "BLUE" | "STAX";
1677
+ pubKey: string;
1678
+ registrationChallenge: {
1679
+ challenge: string;
1680
+ ephemeralPublicKey: string;
1681
+ ephemeralPublicKeyAttestation: {
1682
+ codeHash: string;
1683
+ attestationPub: string;
1684
+ certificate: string;
1685
+ signature: string;
1686
+ };
1687
+ handshake: string;
1688
+ handshakeAttestation: {
1689
+ codeHash: string;
1690
+ attestationPub: string;
1691
+ certificate: string;
1692
+ signature: string;
1693
+ };
1694
+ u2fRegisterData: string;
1695
+ ciphertext: string;
1696
+ requestId: string;
1697
+ };
1698
+ registrationResponse: {
1699
+ certificate: {
1700
+ codeHash: string;
1701
+ attestationPub: string;
1702
+ certificate: string;
1703
+ signature: string;
1704
+ };
1705
+ u2fRegister: string;
1706
+ u2fKeyHandle: string;
1707
+ registerData: string;
1708
+ validationKey: string;
1709
+ pairingPayload: string;
1710
+ } | null;
1711
+ role: "SHARED_OWNER";
1712
+ review: {
1713
+ seedChallenge: {
1714
+ challengeType: "PSD";
1715
+ wActions: string[];
1716
+ handshake: string;
1717
+ handshakeAttestation: {
1718
+ codeHash: string;
1719
+ attestationPub: string;
1720
+ certificate: string;
1721
+ signature: string;
1722
+ };
1723
+ partitionId: string;
1724
+ kkHandshake: string;
1725
+ kkHandshakeAttestation: {
1726
+ codeHash: string;
1727
+ attestationPub: string;
1728
+ certificate: string;
1729
+ signature: string;
1730
+ };
1731
+ ephemeralPublicKey: string;
1732
+ certificate: {
1733
+ codeHash: string;
1734
+ attestationPub: string;
1735
+ certificate: string;
1736
+ signature: string;
1737
+ };
1738
+ blob: string;
1739
+ };
1740
+ seedFragment: {
1741
+ approverBlob: string;
1742
+ challengeResponse: string;
1743
+ handshake: string;
1744
+ handshakeAttestation: {
1745
+ codeHash: string;
1746
+ attestationPub: string;
1747
+ certificate: string;
1748
+ signature: string;
1749
+ };
1593
1750
  } | null;
1594
- masterAdmins: {
1595
- name: string;
1596
- psdModel: "BLUE" | "STAX";
1597
- pubKey: string;
1598
- registrationChallenge: {
1599
- challenge: string;
1600
- ephemeralPublicKey: string;
1601
- ephemeralPublicKeyAttestation: {
1602
- codeHash: string;
1603
- attestationPub: string;
1604
- certificate: string;
1605
- signature: string;
1606
- };
1607
- handshake: string;
1608
- handshakeAttestation: {
1609
- codeHash: string;
1610
- attestationPub: string;
1611
- certificate: string;
1612
- signature: string;
1613
- };
1614
- u2fRegisterData: string;
1615
- ciphertext: string;
1616
- requestId: string;
1617
- };
1618
- registrationResponse: {
1619
- certificate: {
1620
- codeHash: string;
1621
- attestationPub: string;
1622
- certificate: string;
1623
- signature: string;
1624
- };
1625
- u2fRegister: string;
1626
- u2fKeyHandle: string;
1627
- registerData: string;
1628
- validationKey: string;
1629
- pairingPayload: string;
1630
- } | null;
1631
- role: "MASTER_ADMIN";
1632
- review: {
1633
- challenge: {
1634
- challengeType: "PSD";
1635
- wActions: string[];
1636
- handshake: string;
1637
- handshakeAttestation: {
1638
- codeHash: string;
1639
- attestationPub: string;
1640
- certificate: string;
1641
- signature: string;
1642
- };
1643
- partitionId: string;
1644
- };
1645
- signature: string | null;
1646
- } | null;
1647
- }[];
1648
- sharedOwners: {
1649
- name: string;
1650
- psdModel: "BLUE" | "STAX";
1651
- pubKey: string;
1652
- registrationChallenge: {
1653
- challenge: string;
1654
- ephemeralPublicKey: string;
1655
- ephemeralPublicKeyAttestation: {
1656
- codeHash: string;
1657
- attestationPub: string;
1658
- certificate: string;
1659
- signature: string;
1660
- };
1661
- handshake: string;
1662
- handshakeAttestation: {
1663
- codeHash: string;
1664
- attestationPub: string;
1665
- certificate: string;
1666
- signature: string;
1667
- };
1668
- u2fRegisterData: string;
1669
- ciphertext: string;
1670
- requestId: string;
1671
- };
1672
- registrationResponse: {
1673
- certificate: {
1674
- codeHash: string;
1675
- attestationPub: string;
1676
- certificate: string;
1677
- signature: string;
1678
- };
1679
- u2fRegister: string;
1680
- u2fKeyHandle: string;
1681
- registerData: string;
1682
- validationKey: string;
1683
- pairingPayload: string;
1684
- } | null;
1685
- role: "SHARED_OWNER";
1686
- review: {
1687
- seedChallenge: {
1688
- challengeType: "PSD";
1689
- wActions: string[];
1690
- handshake: string;
1691
- handshakeAttestation: {
1692
- codeHash: string;
1693
- attestationPub: string;
1694
- certificate: string;
1695
- signature: string;
1696
- };
1697
- partitionId: string;
1698
- kkHandshake: string;
1699
- kkHandshakeAttestation: {
1700
- codeHash: string;
1701
- attestationPub: string;
1702
- certificate: string;
1703
- signature: string;
1704
- };
1705
- ephemeralPublicKey: string;
1706
- certificate: {
1707
- codeHash: string;
1708
- attestationPub: string;
1709
- certificate: string;
1710
- signature: string;
1711
- };
1712
- blob: string;
1713
- };
1714
- seedFragment: {
1715
- approverBlob: string;
1716
- challengeResponse: string;
1717
- handshake: string;
1718
- handshakeAttestation: {
1719
- codeHash: string;
1720
- attestationPub: string;
1721
- certificate: string;
1722
- signature: string;
1723
- };
1724
- } | null;
1725
- } | null;
1726
- }[];
1727
- createdAt: Date;
1728
- completedAt: Date | null;
1729
- }>;
1751
+ } | null;
1752
+ }[];
1753
+ createdAt: Date;
1754
+ completedAt: Date | null;
1755
+ }>;
1730
1756
  };
1731
- declare function onboard({ engine, untilStep, }: {
1732
- engine: Engine<WithOnboarding>;
1733
- untilStep?: OnboardingStep;
1757
+ declare function onboard({
1758
+ engine,
1759
+ untilStep
1760
+ }: {
1761
+ engine: Engine<WithOnboarding>;
1762
+ untilStep?: OnboardingStep;
1734
1763
  }, logger: Logger): Promise<void>;
1735
-
1736
- export { STEPS, onboard };
1764
+ //#endregion
1765
+ export { STEPS, onboard };