@ledgerhq/revault-sdk 0.25.0 → 0.26.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (88) hide show
  1. package/lib/bake.cjs +1214 -1361
  2. package/lib/bake.cjs.map +1 -1
  3. package/lib/bake.d.cts +564 -562
  4. package/lib/bake.d.ts +564 -562
  5. package/lib/bake.js +1204 -1359
  6. package/lib/bake.js.map +1 -1
  7. package/lib/chunk-CKQMccvm.cjs +28 -0
  8. package/lib/crypto-BDBF_rfw.cjs +266 -0
  9. package/lib/crypto-BDBF_rfw.cjs.map +1 -0
  10. package/lib/crypto-CPCBrCSZ.js +245 -0
  11. package/lib/crypto-CPCBrCSZ.js.map +1 -0
  12. package/lib/crypto.cjs +5 -11
  13. package/lib/crypto.d.cts +10 -7
  14. package/lib/crypto.d.ts +10 -7
  15. package/lib/crypto.js +2 -11
  16. package/lib/device-0lcfYGHr.cjs +791 -0
  17. package/lib/device-0lcfYGHr.cjs.map +1 -0
  18. package/lib/device-B8Fww8_6.js +719 -0
  19. package/lib/device-B8Fww8_6.js.map +1 -0
  20. package/lib/device.cjs +6 -13
  21. package/lib/device.d.cts +2 -50
  22. package/lib/device.d.ts +2 -50
  23. package/lib/device.js +2 -13
  24. package/lib/engine.cjs +851 -888
  25. package/lib/engine.cjs.map +1 -1
  26. package/lib/engine.d.cts +3 -25
  27. package/lib/engine.d.ts +3 -25
  28. package/lib/engine.js +844 -885
  29. package/lib/engine.js.map +1 -1
  30. package/lib/index--fscLDTT.d.ts +237 -0
  31. package/lib/index-BE7oUpCb.d.cts +237 -0
  32. package/lib/index-DOn7RPPt.d.cts +23 -0
  33. package/lib/index-U0iFMp3g.d.ts +23 -0
  34. package/lib/index.cjs +0 -1
  35. package/lib/index.d.cts +10 -5
  36. package/lib/index.d.ts +10 -5
  37. package/lib/index.js +1 -1
  38. package/lib/logger-Cme0iL1f.d.cts +10 -0
  39. package/lib/logger-DWLViq7U.d.ts +10 -0
  40. package/lib/onboarding.cjs +215 -183
  41. package/lib/onboarding.cjs.map +1 -1
  42. package/lib/onboarding.d.cts +1918 -1722
  43. package/lib/onboarding.d.ts +1918 -1722
  44. package/lib/onboarding.js +211 -181
  45. package/lib/onboarding.js.map +1 -1
  46. package/lib/trpc-CWGPr8Ox.d.ts +20 -0
  47. package/lib/trpc-C_dUOB1u.d.cts +20 -0
  48. package/lib/types-BXkDuD6i.d.ts +207 -0
  49. package/lib/types-CQROu0nu.d.cts +6 -0
  50. package/lib/types-Ngwgtu_U.d.cts +207 -0
  51. package/lib/types-_QeBv1U4.d.ts +6 -0
  52. package/lib/types.cjs +0 -1
  53. package/lib/types.d.cts +3 -4
  54. package/lib/types.d.ts +3 -4
  55. package/lib/types.js +1 -1
  56. package/lib/utils-BGbdjOP9.js +61 -0
  57. package/lib/utils-BGbdjOP9.js.map +1 -0
  58. package/lib/utils-DbSFXp4c.cjs +84 -0
  59. package/lib/utils-DbSFXp4c.cjs.map +1 -0
  60. package/package.json +6 -6
  61. package/lib/chunk-2WGM7EWA.cjs +0 -282
  62. package/lib/chunk-2WGM7EWA.cjs.map +0 -1
  63. package/lib/chunk-AXI72NFY.js +0 -50
  64. package/lib/chunk-AXI72NFY.js.map +0 -1
  65. package/lib/chunk-DRMYBKL3.cjs +0 -820
  66. package/lib/chunk-DRMYBKL3.cjs.map +0 -1
  67. package/lib/chunk-KV5FO7N5.js +0 -282
  68. package/lib/chunk-KV5FO7N5.js.map +0 -1
  69. package/lib/chunk-LH4QQXUH.cjs +0 -50
  70. package/lib/chunk-LH4QQXUH.cjs.map +0 -1
  71. package/lib/chunk-PFZIW6UP.js +0 -820
  72. package/lib/chunk-PFZIW6UP.js.map +0 -1
  73. package/lib/crypto.cjs.map +0 -1
  74. package/lib/crypto.js.map +0 -1
  75. package/lib/device.cjs.map +0 -1
  76. package/lib/device.js.map +0 -1
  77. package/lib/index.cjs.map +0 -1
  78. package/lib/index.js.map +0 -1
  79. package/lib/logger-C-TPbnjv.d.cts +0 -9
  80. package/lib/logger-C-TPbnjv.d.ts +0 -9
  81. package/lib/types-C-ngtI5m.d.ts +0 -202
  82. package/lib/types-CpGEbAxh.d.cts +0 -19
  83. package/lib/types-CpGEbAxh.d.ts +0 -19
  84. package/lib/types-CryvY9pW.d.cts +0 -202
  85. package/lib/types-DJfbanPz.d.cts +0 -167
  86. package/lib/types-DJfbanPz.d.ts +0 -167
  87. package/lib/types.cjs.map +0 -1
  88. package/lib/types.js.map +0 -1
package/lib/onboarding.d.ts CHANGED
@@ -1,1736 +1,1932 @@
1
- import { OnboardingFullStateResponse, OnboardingStep } from '@ledgerhq/revault-api';
2
- import { L as Logger } from './logger-C-TPbnjv.js';
3
- import { E as Engine, W as WithOnboarding } from './types-C-ngtI5m.js';
4
- import './types-DJfbanPz.js';
5
- import './types-CpGEbAxh.js';
6
- import '@trpc/client';
7
- import '@trpc/server';
1
+ import { t as Logger } from "./logger-DWLViq7U.js";
2
+ import { d as Engine, y as WithOnboarding } from "./types-BXkDuD6i.js";
3
+ import { OnboardingFullStateResponse, OnboardingStep } from "@ledgerhq/revault-api";
8
4
 
5
+ //#region src/onboarding.d.ts
9
6
  declare const STEPS: {
10
- /**
11
- * Devices claiming
12
- */
13
- readonly PENDING_DEVICE_CLAIMS: ({ state, engine }: {
14
- engine: Engine<WithOnboarding>;
15
- state: OnboardingFullStateResponse;
16
- }, logger: Logger) => Promise<{
17
- id: string;
18
- workspaceName: string;
19
- step: "COMPLETED" | "PENDING_DEVICE_CLAIMS" | "PENDING_WRAPPING_KEY_PROVISIONING" | "PENDING_MASTER_ADMINS_REGISTRATION_INIT" | "PENDING_MASTER_ADMINS_REGISTRATION" | "PENDING_SHARED_OWNERS_REGISTRATION_INIT" | "PENDING_SHARED_OWNERS_REGISTRATION" | "PENDING_REVIEW_BY_MASTER_ADMINS" | "PENDING_SEED_PROVISIONING" | "PENDING_WORKSPACE_INITIALIZATION";
20
- claimedDevices: {
21
- pubKey: string;
22
- deviceUserId: string;
23
- deviceName: string;
24
- role: "WRAPPING_KEY_OWNER" | "SHARED_OWNER" | "MASTER_ADMIN";
25
- }[];
26
- wrappingKey: {
27
- ephemeralPubKey: string;
28
- ephemeralCertificate: {
29
- codeHash: string;
30
- attestationPub: string;
31
- certificate: string;
32
- signature: string;
33
- };
34
- fragments: {
35
- pubKey: string;
36
- ephemeralPubKey: string;
37
- ephemeralCertificate: {
38
- codeHash: string;
39
- attestationPub: string;
40
- certificate: string;
41
- signature: string;
42
- };
43
- blob: string;
44
- }[];
7
+ /**
8
+ * Devices claiming
9
+ */
10
+ readonly PENDING_DEVICE_CLAIMS: ({
11
+ state,
12
+ engine
13
+ }: {
14
+ engine: Engine<WithOnboarding>;
15
+ state: OnboardingFullStateResponse;
16
+ externalSigners?: string[];
17
+ }, logger: Logger) => Promise<{
18
+ id: string;
19
+ workspaceName: string;
20
+ hsmHostingMode: "HOSTED" | "ON_PREM";
21
+ step: "COMPLETED" | "PENDING_DEVICE_CLAIMS" | "PENDING_EXTERNAL_SIGNERS_REGISTRATION" | "PENDING_MASTER_ADMINS_REGISTRATION" | "PENDING_MASTER_ADMINS_REGISTRATION_INIT" | "PENDING_REVIEW_BY_MASTER_ADMINS" | "PENDING_SEED_PROVISIONING" | "PENDING_SHARED_OWNERS_REGISTRATION" | "PENDING_SHARED_OWNERS_REGISTRATION_INIT" | "PENDING_WORKSPACE_INITIALIZATION" | "PENDING_WRAPPING_KEY_PROVISIONING";
22
+ claimedDevices: {
23
+ pubKey: string;
24
+ deviceUserId: string;
25
+ deviceName: string;
26
+ role: "MASTER_ADMIN" | "SHARED_OWNER" | "WRAPPING_KEY_OWNER";
27
+ }[];
28
+ wrappingKey: {
29
+ ephemeralPubKey: string;
30
+ ephemeralCertificate: {
31
+ codeHash: string;
32
+ attestationPub: string;
33
+ certificate: string;
34
+ signature: string;
35
+ };
36
+ fragments: {
37
+ pubKey: string;
38
+ ephemeralPubKey: string;
39
+ ephemeralCertificate: {
40
+ codeHash: string;
41
+ attestationPub: string;
42
+ certificate: string;
43
+ signature: string;
44
+ };
45
+ blob: string;
46
+ }[];
47
+ } | null;
48
+ masterAdmins: {
49
+ name: string;
50
+ psdModel: "BLUE" | "STAX";
51
+ pubKey: string;
52
+ registrationChallenge: {
53
+ challenge: string;
54
+ ephemeralPublicKey: string;
55
+ ephemeralPublicKeyAttestation: {
56
+ codeHash: string;
57
+ attestationPub: string;
58
+ certificate: string;
59
+ signature: string;
60
+ };
61
+ handshake: string;
62
+ handshakeAttestation: {
63
+ codeHash: string;
64
+ attestationPub: string;
65
+ certificate: string;
66
+ signature: string;
67
+ };
68
+ u2fRegisterData: string;
69
+ ciphertext: string;
70
+ requestId: string;
71
+ };
72
+ registrationResponse: {
73
+ certificate: {
74
+ codeHash: string;
75
+ attestationPub: string;
76
+ certificate: string;
77
+ signature: string;
78
+ };
79
+ u2fRegister: string;
80
+ u2fKeyHandle: string;
81
+ registerData: string;
82
+ validationKey: string;
83
+ pairingPayload: string;
84
+ } | null;
85
+ role: "MASTER_ADMIN";
86
+ review: {
87
+ challenge: {
88
+ challengeType: "PSD";
89
+ wActions: string[];
90
+ handshake: string;
91
+ handshakeAttestation: {
92
+ codeHash: string;
93
+ attestationPub: string;
94
+ certificate: string;
95
+ signature: string;
96
+ };
97
+ partitionId: string;
98
+ };
99
+ signature: string | null;
100
+ } | null;
101
+ reviewOfExternalSigners: {
102
+ challenge: {
103
+ challengeType: "PSD";
104
+ wActions: string[];
105
+ handshake: string;
106
+ handshakeAttestation: {
107
+ codeHash: string;
108
+ attestationPub: string;
109
+ certificate: string;
110
+ signature: string;
111
+ };
112
+ partitionId: string;
113
+ };
114
+ signature: string | null;
115
+ } | null;
116
+ }[];
117
+ sharedOwners: {
118
+ name: string;
119
+ psdModel: "BLUE" | "STAX";
120
+ pubKey: string;
121
+ registrationChallenge: {
122
+ challenge: string;
123
+ ephemeralPublicKey: string;
124
+ ephemeralPublicKeyAttestation: {
125
+ codeHash: string;
126
+ attestationPub: string;
127
+ certificate: string;
128
+ signature: string;
129
+ };
130
+ handshake: string;
131
+ handshakeAttestation: {
132
+ codeHash: string;
133
+ attestationPub: string;
134
+ certificate: string;
135
+ signature: string;
136
+ };
137
+ u2fRegisterData: string;
138
+ ciphertext: string;
139
+ requestId: string;
140
+ };
141
+ registrationResponse: {
142
+ certificate: {
143
+ codeHash: string;
144
+ attestationPub: string;
145
+ certificate: string;
146
+ signature: string;
147
+ };
148
+ u2fRegister: string;
149
+ u2fKeyHandle: string;
150
+ registerData: string;
151
+ validationKey: string;
152
+ pairingPayload: string;
153
+ } | null;
154
+ role: "SHARED_OWNER";
155
+ review: {
156
+ seedChallenge: {
157
+ challengeType: "PSD";
158
+ wActions: string[];
159
+ handshake: string;
160
+ handshakeAttestation: {
161
+ codeHash: string;
162
+ attestationPub: string;
163
+ certificate: string;
164
+ signature: string;
165
+ };
166
+ partitionId: string;
167
+ kkHandshake: string;
168
+ kkHandshakeAttestation: {
169
+ codeHash: string;
170
+ attestationPub: string;
171
+ certificate: string;
172
+ signature: string;
173
+ };
174
+ ephemeralPublicKey: string;
175
+ certificate: {
176
+ codeHash: string;
177
+ attestationPub: string;
178
+ certificate: string;
179
+ signature: string;
180
+ };
181
+ blob: string;
182
+ };
183
+ seedFragment: {
184
+ approverBlob: string;
185
+ challengeResponse: string;
186
+ handshake: string;
187
+ handshakeAttestation: {
188
+ codeHash: string;
189
+ attestationPub: string;
190
+ certificate: string;
191
+ signature: string;
192
+ };
45
193
  } | null;
46
- masterAdmins: {
47
- name: string;
48
- psdModel: "BLUE" | "STAX";
49
- pubKey: string;
50
- registrationChallenge: {
51
- challenge: string;
52
- ephemeralPublicKey: string;
53
- ephemeralPublicKeyAttestation: {
54
- codeHash: string;
55
- attestationPub: string;
56
- certificate: string;
57
- signature: string;
58
- };
59
- handshake: string;
60
- handshakeAttestation: {
61
- codeHash: string;
62
- attestationPub: string;
63
- certificate: string;
64
- signature: string;
65
- };
66
- u2fRegisterData: string;
67
- ciphertext: string;
68
- requestId: string;
69
- };
70
- registrationResponse: {
71
- certificate: {
72
- codeHash: string;
73
- attestationPub: string;
74
- certificate: string;
75
- signature: string;
76
- };
77
- u2fRegister: string;
78
- u2fKeyHandle: string;
79
- registerData: string;
80
- validationKey: string;
81
- pairingPayload: string;
82
- } | null;
83
- role: "MASTER_ADMIN";
84
- review: {
85
- challenge: {
86
- challengeType: "PSD";
87
- wActions: string[];
88
- handshake: string;
89
- handshakeAttestation: {
90
- codeHash: string;
91
- attestationPub: string;
92
- certificate: string;
93
- signature: string;
94
- };
95
- partitionId: string;
96
- };
97
- signature: string | null;
98
- } | null;
99
- }[];
100
- sharedOwners: {
101
- name: string;
102
- psdModel: "BLUE" | "STAX";
103
- pubKey: string;
104
- registrationChallenge: {
105
- challenge: string;
106
- ephemeralPublicKey: string;
107
- ephemeralPublicKeyAttestation: {
108
- codeHash: string;
109
- attestationPub: string;
110
- certificate: string;
111
- signature: string;
112
- };
113
- handshake: string;
114
- handshakeAttestation: {
115
- codeHash: string;
116
- attestationPub: string;
117
- certificate: string;
118
- signature: string;
119
- };
120
- u2fRegisterData: string;
121
- ciphertext: string;
122
- requestId: string;
123
- };
124
- registrationResponse: {
125
- certificate: {
126
- codeHash: string;
127
- attestationPub: string;
128
- certificate: string;
129
- signature: string;
130
- };
131
- u2fRegister: string;
132
- u2fKeyHandle: string;
133
- registerData: string;
134
- validationKey: string;
135
- pairingPayload: string;
136
- } | null;
137
- role: "SHARED_OWNER";
138
- review: {
139
- seedChallenge: {
140
- challengeType: "PSD";
141
- wActions: string[];
142
- handshake: string;
143
- handshakeAttestation: {
144
- codeHash: string;
145
- attestationPub: string;
146
- certificate: string;
147
- signature: string;
148
- };
149
- partitionId: string;
150
- kkHandshake: string;
151
- kkHandshakeAttestation: {
152
- codeHash: string;
153
- attestationPub: string;
154
- certificate: string;
155
- signature: string;
156
- };
157
- ephemeralPublicKey: string;
158
- certificate: {
159
- codeHash: string;
160
- attestationPub: string;
161
- certificate: string;
162
- signature: string;
163
- };
164
- blob: string;
165
- };
166
- seedFragment: {
167
- approverBlob: string;
168
- challengeResponse: string;
169
- handshake: string;
170
- handshakeAttestation: {
171
- codeHash: string;
172
- attestationPub: string;
173
- certificate: string;
174
- signature: string;
175
- };
176
- } | null;
177
- } | null;
178
- }[];
179
- createdAt: Date;
180
- completedAt: Date | null;
181
- }>;
182
- /**
183
- * Wrapping Key provisioning
184
- */
185
- readonly PENDING_WRAPPING_KEY_PROVISIONING: ({ state, engine }: {
186
- engine: Engine<WithOnboarding>;
187
- state: OnboardingFullStateResponse;
188
- }, logger: Logger) => Promise<{
189
- id: string;
190
- workspaceName: string;
191
- step: "COMPLETED" | "PENDING_DEVICE_CLAIMS" | "PENDING_WRAPPING_KEY_PROVISIONING" | "PENDING_MASTER_ADMINS_REGISTRATION_INIT" | "PENDING_MASTER_ADMINS_REGISTRATION" | "PENDING_SHARED_OWNERS_REGISTRATION_INIT" | "PENDING_SHARED_OWNERS_REGISTRATION" | "PENDING_REVIEW_BY_MASTER_ADMINS" | "PENDING_SEED_PROVISIONING" | "PENDING_WORKSPACE_INITIALIZATION";
192
- claimedDevices: {
193
- pubKey: string;
194
- deviceUserId: string;
195
- deviceName: string;
196
- role: "WRAPPING_KEY_OWNER" | "SHARED_OWNER" | "MASTER_ADMIN";
197
- }[];
198
- wrappingKey: {
199
- ephemeralPubKey: string;
200
- ephemeralCertificate: {
201
- codeHash: string;
202
- attestationPub: string;
203
- certificate: string;
204
- signature: string;
205
- };
206
- fragments: {
207
- pubKey: string;
208
- ephemeralPubKey: string;
209
- ephemeralCertificate: {
210
- codeHash: string;
211
- attestationPub: string;
212
- certificate: string;
213
- signature: string;
214
- };
215
- blob: string;
216
- }[];
194
+ } | null;
195
+ }[];
196
+ createdAt: Date;
197
+ completedAt: Date | null;
198
+ }>;
199
+ /**
200
+ * Wrapping Key provisioning
201
+ */
202
+ readonly PENDING_WRAPPING_KEY_PROVISIONING: ({
203
+ state,
204
+ engine
205
+ }: {
206
+ engine: Engine<WithOnboarding>;
207
+ state: OnboardingFullStateResponse;
208
+ externalSigners?: string[];
209
+ }, logger: Logger) => Promise<{
210
+ id: string;
211
+ workspaceName: string;
212
+ hsmHostingMode: "HOSTED" | "ON_PREM";
213
+ step: "COMPLETED" | "PENDING_DEVICE_CLAIMS" | "PENDING_EXTERNAL_SIGNERS_REGISTRATION" | "PENDING_MASTER_ADMINS_REGISTRATION" | "PENDING_MASTER_ADMINS_REGISTRATION_INIT" | "PENDING_REVIEW_BY_MASTER_ADMINS" | "PENDING_SEED_PROVISIONING" | "PENDING_SHARED_OWNERS_REGISTRATION" | "PENDING_SHARED_OWNERS_REGISTRATION_INIT" | "PENDING_WORKSPACE_INITIALIZATION" | "PENDING_WRAPPING_KEY_PROVISIONING";
214
+ claimedDevices: {
215
+ pubKey: string;
216
+ deviceUserId: string;
217
+ deviceName: string;
218
+ role: "MASTER_ADMIN" | "SHARED_OWNER" | "WRAPPING_KEY_OWNER";
219
+ }[];
220
+ wrappingKey: {
221
+ ephemeralPubKey: string;
222
+ ephemeralCertificate: {
223
+ codeHash: string;
224
+ attestationPub: string;
225
+ certificate: string;
226
+ signature: string;
227
+ };
228
+ fragments: {
229
+ pubKey: string;
230
+ ephemeralPubKey: string;
231
+ ephemeralCertificate: {
232
+ codeHash: string;
233
+ attestationPub: string;
234
+ certificate: string;
235
+ signature: string;
236
+ };
237
+ blob: string;
238
+ }[];
239
+ } | null;
240
+ masterAdmins: {
241
+ name: string;
242
+ psdModel: "BLUE" | "STAX";
243
+ pubKey: string;
244
+ registrationChallenge: {
245
+ challenge: string;
246
+ ephemeralPublicKey: string;
247
+ ephemeralPublicKeyAttestation: {
248
+ codeHash: string;
249
+ attestationPub: string;
250
+ certificate: string;
251
+ signature: string;
252
+ };
253
+ handshake: string;
254
+ handshakeAttestation: {
255
+ codeHash: string;
256
+ attestationPub: string;
257
+ certificate: string;
258
+ signature: string;
259
+ };
260
+ u2fRegisterData: string;
261
+ ciphertext: string;
262
+ requestId: string;
263
+ };
264
+ registrationResponse: {
265
+ certificate: {
266
+ codeHash: string;
267
+ attestationPub: string;
268
+ certificate: string;
269
+ signature: string;
270
+ };
271
+ u2fRegister: string;
272
+ u2fKeyHandle: string;
273
+ registerData: string;
274
+ validationKey: string;
275
+ pairingPayload: string;
276
+ } | null;
277
+ role: "MASTER_ADMIN";
278
+ review: {
279
+ challenge: {
280
+ challengeType: "PSD";
281
+ wActions: string[];
282
+ handshake: string;
283
+ handshakeAttestation: {
284
+ codeHash: string;
285
+ attestationPub: string;
286
+ certificate: string;
287
+ signature: string;
288
+ };
289
+ partitionId: string;
290
+ };
291
+ signature: string | null;
292
+ } | null;
293
+ reviewOfExternalSigners: {
294
+ challenge: {
295
+ challengeType: "PSD";
296
+ wActions: string[];
297
+ handshake: string;
298
+ handshakeAttestation: {
299
+ codeHash: string;
300
+ attestationPub: string;
301
+ certificate: string;
302
+ signature: string;
303
+ };
304
+ partitionId: string;
305
+ };
306
+ signature: string | null;
307
+ } | null;
308
+ }[];
309
+ sharedOwners: {
310
+ name: string;
311
+ psdModel: "BLUE" | "STAX";
312
+ pubKey: string;
313
+ registrationChallenge: {
314
+ challenge: string;
315
+ ephemeralPublicKey: string;
316
+ ephemeralPublicKeyAttestation: {
317
+ codeHash: string;
318
+ attestationPub: string;
319
+ certificate: string;
320
+ signature: string;
321
+ };
322
+ handshake: string;
323
+ handshakeAttestation: {
324
+ codeHash: string;
325
+ attestationPub: string;
326
+ certificate: string;
327
+ signature: string;
328
+ };
329
+ u2fRegisterData: string;
330
+ ciphertext: string;
331
+ requestId: string;
332
+ };
333
+ registrationResponse: {
334
+ certificate: {
335
+ codeHash: string;
336
+ attestationPub: string;
337
+ certificate: string;
338
+ signature: string;
339
+ };
340
+ u2fRegister: string;
341
+ u2fKeyHandle: string;
342
+ registerData: string;
343
+ validationKey: string;
344
+ pairingPayload: string;
345
+ } | null;
346
+ role: "SHARED_OWNER";
347
+ review: {
348
+ seedChallenge: {
349
+ challengeType: "PSD";
350
+ wActions: string[];
351
+ handshake: string;
352
+ handshakeAttestation: {
353
+ codeHash: string;
354
+ attestationPub: string;
355
+ certificate: string;
356
+ signature: string;
357
+ };
358
+ partitionId: string;
359
+ kkHandshake: string;
360
+ kkHandshakeAttestation: {
361
+ codeHash: string;
362
+ attestationPub: string;
363
+ certificate: string;
364
+ signature: string;
365
+ };
366
+ ephemeralPublicKey: string;
367
+ certificate: {
368
+ codeHash: string;
369
+ attestationPub: string;
370
+ certificate: string;
371
+ signature: string;
372
+ };
373
+ blob: string;
374
+ };
375
+ seedFragment: {
376
+ approverBlob: string;
377
+ challengeResponse: string;
378
+ handshake: string;
379
+ handshakeAttestation: {
380
+ codeHash: string;
381
+ attestationPub: string;
382
+ certificate: string;
383
+ signature: string;
384
+ };
217
385
  } | null;
218
- masterAdmins: {
219
- name: string;
220
- psdModel: "BLUE" | "STAX";
221
- pubKey: string;
222
- registrationChallenge: {
223
- challenge: string;
224
- ephemeralPublicKey: string;
225
- ephemeralPublicKeyAttestation: {
226
- codeHash: string;
227
- attestationPub: string;
228
- certificate: string;
229
- signature: string;
230
- };
231
- handshake: string;
232
- handshakeAttestation: {
233
- codeHash: string;
234
- attestationPub: string;
235
- certificate: string;
236
- signature: string;
237
- };
238
- u2fRegisterData: string;
239
- ciphertext: string;
240
- requestId: string;
241
- };
242
- registrationResponse: {
243
- certificate: {
244
- codeHash: string;
245
- attestationPub: string;
246
- certificate: string;
247
- signature: string;
248
- };
249
- u2fRegister: string;
250
- u2fKeyHandle: string;
251
- registerData: string;
252
- validationKey: string;
253
- pairingPayload: string;
254
- } | null;
255
- role: "MASTER_ADMIN";
256
- review: {
257
- challenge: {
258
- challengeType: "PSD";
259
- wActions: string[];
260
- handshake: string;
261
- handshakeAttestation: {
262
- codeHash: string;
263
- attestationPub: string;
264
- certificate: string;
265
- signature: string;
266
- };
267
- partitionId: string;
268
- };
269
- signature: string | null;
270
- } | null;
271
- }[];
272
- sharedOwners: {
273
- name: string;
274
- psdModel: "BLUE" | "STAX";
275
- pubKey: string;
276
- registrationChallenge: {
277
- challenge: string;
278
- ephemeralPublicKey: string;
279
- ephemeralPublicKeyAttestation: {
280
- codeHash: string;
281
- attestationPub: string;
282
- certificate: string;
283
- signature: string;
284
- };
285
- handshake: string;
286
- handshakeAttestation: {
287
- codeHash: string;
288
- attestationPub: string;
289
- certificate: string;
290
- signature: string;
291
- };
292
- u2fRegisterData: string;
293
- ciphertext: string;
294
- requestId: string;
295
- };
296
- registrationResponse: {
297
- certificate: {
298
- codeHash: string;
299
- attestationPub: string;
300
- certificate: string;
301
- signature: string;
302
- };
303
- u2fRegister: string;
304
- u2fKeyHandle: string;
305
- registerData: string;
306
- validationKey: string;
307
- pairingPayload: string;
308
- } | null;
309
- role: "SHARED_OWNER";
310
- review: {
311
- seedChallenge: {
312
- challengeType: "PSD";
313
- wActions: string[];
314
- handshake: string;
315
- handshakeAttestation: {
316
- codeHash: string;
317
- attestationPub: string;
318
- certificate: string;
319
- signature: string;
320
- };
321
- partitionId: string;
322
- kkHandshake: string;
323
- kkHandshakeAttestation: {
324
- codeHash: string;
325
- attestationPub: string;
326
- certificate: string;
327
- signature: string;
328
- };
329
- ephemeralPublicKey: string;
330
- certificate: {
331
- codeHash: string;
332
- attestationPub: string;
333
- certificate: string;
334
- signature: string;
335
- };
336
- blob: string;
337
- };
338
- seedFragment: {
339
- approverBlob: string;
340
- challengeResponse: string;
341
- handshake: string;
342
- handshakeAttestation: {
343
- codeHash: string;
344
- attestationPub: string;
345
- certificate: string;
346
- signature: string;
347
- };
348
- } | null;
349
- } | null;
350
- }[];
351
- createdAt: Date;
352
- completedAt: Date | null;
353
- }>;
354
- /**
355
- * Init Master Admins registration
356
- */
357
- readonly PENDING_MASTER_ADMINS_REGISTRATION_INIT: ({ engine, state }: {
358
- engine: Engine<WithOnboarding>;
359
- state: OnboardingFullStateResponse;
360
- }) => Promise<{
361
- id: string;
362
- workspaceName: string;
363
- step: "COMPLETED" | "PENDING_DEVICE_CLAIMS" | "PENDING_WRAPPING_KEY_PROVISIONING" | "PENDING_MASTER_ADMINS_REGISTRATION_INIT" | "PENDING_MASTER_ADMINS_REGISTRATION" | "PENDING_SHARED_OWNERS_REGISTRATION_INIT" | "PENDING_SHARED_OWNERS_REGISTRATION" | "PENDING_REVIEW_BY_MASTER_ADMINS" | "PENDING_SEED_PROVISIONING" | "PENDING_WORKSPACE_INITIALIZATION";
364
- claimedDevices: {
365
- pubKey: string;
366
- deviceUserId: string;
367
- deviceName: string;
368
- role: "WRAPPING_KEY_OWNER" | "SHARED_OWNER" | "MASTER_ADMIN";
369
- }[];
370
- wrappingKey: {
371
- ephemeralPubKey: string;
372
- ephemeralCertificate: {
373
- codeHash: string;
374
- attestationPub: string;
375
- certificate: string;
376
- signature: string;
377
- };
378
- fragments: {
379
- pubKey: string;
380
- ephemeralPubKey: string;
381
- ephemeralCertificate: {
382
- codeHash: string;
383
- attestationPub: string;
384
- certificate: string;
385
- signature: string;
386
- };
387
- blob: string;
388
- }[];
386
+ } | null;
387
+ }[];
388
+ createdAt: Date;
389
+ completedAt: Date | null;
390
+ }>;
391
+ /**
392
+ * Init Master Admins registration
393
+ */
394
+ readonly PENDING_MASTER_ADMINS_REGISTRATION_INIT: ({
395
+ engine,
396
+ state
397
+ }: {
398
+ engine: Engine<WithOnboarding>;
399
+ state: OnboardingFullStateResponse;
400
+ externalSigners?: string[];
401
+ }) => Promise<{
402
+ id: string;
403
+ workspaceName: string;
404
+ hsmHostingMode: "HOSTED" | "ON_PREM";
405
+ step: "COMPLETED" | "PENDING_DEVICE_CLAIMS" | "PENDING_EXTERNAL_SIGNERS_REGISTRATION" | "PENDING_MASTER_ADMINS_REGISTRATION" | "PENDING_MASTER_ADMINS_REGISTRATION_INIT" | "PENDING_REVIEW_BY_MASTER_ADMINS" | "PENDING_SEED_PROVISIONING" | "PENDING_SHARED_OWNERS_REGISTRATION" | "PENDING_SHARED_OWNERS_REGISTRATION_INIT" | "PENDING_WORKSPACE_INITIALIZATION" | "PENDING_WRAPPING_KEY_PROVISIONING";
406
+ claimedDevices: {
407
+ pubKey: string;
408
+ deviceUserId: string;
409
+ deviceName: string;
410
+ role: "MASTER_ADMIN" | "SHARED_OWNER" | "WRAPPING_KEY_OWNER";
411
+ }[];
412
+ wrappingKey: {
413
+ ephemeralPubKey: string;
414
+ ephemeralCertificate: {
415
+ codeHash: string;
416
+ attestationPub: string;
417
+ certificate: string;
418
+ signature: string;
419
+ };
420
+ fragments: {
421
+ pubKey: string;
422
+ ephemeralPubKey: string;
423
+ ephemeralCertificate: {
424
+ codeHash: string;
425
+ attestationPub: string;
426
+ certificate: string;
427
+ signature: string;
428
+ };
429
+ blob: string;
430
+ }[];
431
+ } | null;
432
+ masterAdmins: {
433
+ name: string;
434
+ psdModel: "BLUE" | "STAX";
435
+ pubKey: string;
436
+ registrationChallenge: {
437
+ challenge: string;
438
+ ephemeralPublicKey: string;
439
+ ephemeralPublicKeyAttestation: {
440
+ codeHash: string;
441
+ attestationPub: string;
442
+ certificate: string;
443
+ signature: string;
444
+ };
445
+ handshake: string;
446
+ handshakeAttestation: {
447
+ codeHash: string;
448
+ attestationPub: string;
449
+ certificate: string;
450
+ signature: string;
451
+ };
452
+ u2fRegisterData: string;
453
+ ciphertext: string;
454
+ requestId: string;
455
+ };
456
+ registrationResponse: {
457
+ certificate: {
458
+ codeHash: string;
459
+ attestationPub: string;
460
+ certificate: string;
461
+ signature: string;
462
+ };
463
+ u2fRegister: string;
464
+ u2fKeyHandle: string;
465
+ registerData: string;
466
+ validationKey: string;
467
+ pairingPayload: string;
468
+ } | null;
469
+ role: "MASTER_ADMIN";
470
+ review: {
471
+ challenge: {
472
+ challengeType: "PSD";
473
+ wActions: string[];
474
+ handshake: string;
475
+ handshakeAttestation: {
476
+ codeHash: string;
477
+ attestationPub: string;
478
+ certificate: string;
479
+ signature: string;
480
+ };
481
+ partitionId: string;
482
+ };
483
+ signature: string | null;
484
+ } | null;
485
+ reviewOfExternalSigners: {
486
+ challenge: {
487
+ challengeType: "PSD";
488
+ wActions: string[];
489
+ handshake: string;
490
+ handshakeAttestation: {
491
+ codeHash: string;
492
+ attestationPub: string;
493
+ certificate: string;
494
+ signature: string;
495
+ };
496
+ partitionId: string;
497
+ };
498
+ signature: string | null;
499
+ } | null;
500
+ }[];
501
+ sharedOwners: {
502
+ name: string;
503
+ psdModel: "BLUE" | "STAX";
504
+ pubKey: string;
505
+ registrationChallenge: {
506
+ challenge: string;
507
+ ephemeralPublicKey: string;
508
+ ephemeralPublicKeyAttestation: {
509
+ codeHash: string;
510
+ attestationPub: string;
511
+ certificate: string;
512
+ signature: string;
513
+ };
514
+ handshake: string;
515
+ handshakeAttestation: {
516
+ codeHash: string;
517
+ attestationPub: string;
518
+ certificate: string;
519
+ signature: string;
520
+ };
521
+ u2fRegisterData: string;
522
+ ciphertext: string;
523
+ requestId: string;
524
+ };
525
+ registrationResponse: {
526
+ certificate: {
527
+ codeHash: string;
528
+ attestationPub: string;
529
+ certificate: string;
530
+ signature: string;
531
+ };
532
+ u2fRegister: string;
533
+ u2fKeyHandle: string;
534
+ registerData: string;
535
+ validationKey: string;
536
+ pairingPayload: string;
537
+ } | null;
538
+ role: "SHARED_OWNER";
539
+ review: {
540
+ seedChallenge: {
541
+ challengeType: "PSD";
542
+ wActions: string[];
543
+ handshake: string;
544
+ handshakeAttestation: {
545
+ codeHash: string;
546
+ attestationPub: string;
547
+ certificate: string;
548
+ signature: string;
549
+ };
550
+ partitionId: string;
551
+ kkHandshake: string;
552
+ kkHandshakeAttestation: {
553
+ codeHash: string;
554
+ attestationPub: string;
555
+ certificate: string;
556
+ signature: string;
557
+ };
558
+ ephemeralPublicKey: string;
559
+ certificate: {
560
+ codeHash: string;
561
+ attestationPub: string;
562
+ certificate: string;
563
+ signature: string;
564
+ };
565
+ blob: string;
566
+ };
567
+ seedFragment: {
568
+ approverBlob: string;
569
+ challengeResponse: string;
570
+ handshake: string;
571
+ handshakeAttestation: {
572
+ codeHash: string;
573
+ attestationPub: string;
574
+ certificate: string;
575
+ signature: string;
576
+ };
389
577
  } | null;
390
- masterAdmins: {
391
- name: string;
392
- psdModel: "BLUE" | "STAX";
393
- pubKey: string;
394
- registrationChallenge: {
395
- challenge: string;
396
- ephemeralPublicKey: string;
397
- ephemeralPublicKeyAttestation: {
398
- codeHash: string;
399
- attestationPub: string;
400
- certificate: string;
401
- signature: string;
402
- };
403
- handshake: string;
404
- handshakeAttestation: {
405
- codeHash: string;
406
- attestationPub: string;
407
- certificate: string;
408
- signature: string;
409
- };
410
- u2fRegisterData: string;
411
- ciphertext: string;
412
- requestId: string;
413
- };
414
- registrationResponse: {
415
- certificate: {
416
- codeHash: string;
417
- attestationPub: string;
418
- certificate: string;
419
- signature: string;
420
- };
421
- u2fRegister: string;
422
- u2fKeyHandle: string;
423
- registerData: string;
424
- validationKey: string;
425
- pairingPayload: string;
426
- } | null;
427
- role: "MASTER_ADMIN";
428
- review: {
429
- challenge: {
430
- challengeType: "PSD";
431
- wActions: string[];
432
- handshake: string;
433
- handshakeAttestation: {
434
- codeHash: string;
435
- attestationPub: string;
436
- certificate: string;
437
- signature: string;
438
- };
439
- partitionId: string;
440
- };
441
- signature: string | null;
442
- } | null;
443
- }[];
444
- sharedOwners: {
445
- name: string;
446
- psdModel: "BLUE" | "STAX";
447
- pubKey: string;
448
- registrationChallenge: {
449
- challenge: string;
450
- ephemeralPublicKey: string;
451
- ephemeralPublicKeyAttestation: {
452
- codeHash: string;
453
- attestationPub: string;
454
- certificate: string;
455
- signature: string;
456
- };
457
- handshake: string;
458
- handshakeAttestation: {
459
- codeHash: string;
460
- attestationPub: string;
461
- certificate: string;
462
- signature: string;
463
- };
464
- u2fRegisterData: string;
465
- ciphertext: string;
466
- requestId: string;
467
- };
468
- registrationResponse: {
469
- certificate: {
470
- codeHash: string;
471
- attestationPub: string;
472
- certificate: string;
473
- signature: string;
474
- };
475
- u2fRegister: string;
476
- u2fKeyHandle: string;
477
- registerData: string;
478
- validationKey: string;
479
- pairingPayload: string;
480
- } | null;
481
- role: "SHARED_OWNER";
482
- review: {
483
- seedChallenge: {
484
- challengeType: "PSD";
485
- wActions: string[];
486
- handshake: string;
487
- handshakeAttestation: {
488
- codeHash: string;
489
- attestationPub: string;
490
- certificate: string;
491
- signature: string;
492
- };
493
- partitionId: string;
494
- kkHandshake: string;
495
- kkHandshakeAttestation: {
496
- codeHash: string;
497
- attestationPub: string;
498
- certificate: string;
499
- signature: string;
500
- };
501
- ephemeralPublicKey: string;
502
- certificate: {
503
- codeHash: string;
504
- attestationPub: string;
505
- certificate: string;
506
- signature: string;
507
- };
508
- blob: string;
509
- };
510
- seedFragment: {
511
- approverBlob: string;
512
- challengeResponse: string;
513
- handshake: string;
514
- handshakeAttestation: {
515
- codeHash: string;
516
- attestationPub: string;
517
- certificate: string;
518
- signature: string;
519
- };
520
- } | null;
521
- } | null;
522
- }[];
523
- createdAt: Date;
524
- completedAt: Date | null;
525
- }>;
526
- /**
527
- * Master Admins registration
528
- */
529
- readonly PENDING_MASTER_ADMINS_REGISTRATION: ({ state, engine }: {
530
- engine: Engine<WithOnboarding>;
531
- state: OnboardingFullStateResponse;
532
- }, logger: Logger) => Promise<{
533
- id: string;
534
- workspaceName: string;
535
- step: "COMPLETED" | "PENDING_DEVICE_CLAIMS" | "PENDING_WRAPPING_KEY_PROVISIONING" | "PENDING_MASTER_ADMINS_REGISTRATION_INIT" | "PENDING_MASTER_ADMINS_REGISTRATION" | "PENDING_SHARED_OWNERS_REGISTRATION_INIT" | "PENDING_SHARED_OWNERS_REGISTRATION" | "PENDING_REVIEW_BY_MASTER_ADMINS" | "PENDING_SEED_PROVISIONING" | "PENDING_WORKSPACE_INITIALIZATION";
536
- claimedDevices: {
537
- pubKey: string;
538
- deviceUserId: string;
539
- deviceName: string;
540
- role: "WRAPPING_KEY_OWNER" | "SHARED_OWNER" | "MASTER_ADMIN";
541
- }[];
542
- wrappingKey: {
543
- ephemeralPubKey: string;
544
- ephemeralCertificate: {
545
- codeHash: string;
546
- attestationPub: string;
547
- certificate: string;
548
- signature: string;
549
- };
550
- fragments: {
551
- pubKey: string;
552
- ephemeralPubKey: string;
553
- ephemeralCertificate: {
554
- codeHash: string;
555
- attestationPub: string;
556
- certificate: string;
557
- signature: string;
558
- };
559
- blob: string;
560
- }[];
578
+ } | null;
579
+ }[];
580
+ createdAt: Date;
581
+ completedAt: Date | null;
582
+ }>;
583
+ /**
584
+ * Master Admins registration
585
+ */
586
+ readonly PENDING_MASTER_ADMINS_REGISTRATION: ({
587
+ state,
588
+ engine
589
+ }: {
590
+ engine: Engine<WithOnboarding>;
591
+ state: OnboardingFullStateResponse;
592
+ externalSigners?: string[];
593
+ }, logger: Logger) => Promise<{
594
+ id: string;
595
+ workspaceName: string;
596
+ hsmHostingMode: "HOSTED" | "ON_PREM";
597
+ step: "COMPLETED" | "PENDING_DEVICE_CLAIMS" | "PENDING_EXTERNAL_SIGNERS_REGISTRATION" | "PENDING_MASTER_ADMINS_REGISTRATION" | "PENDING_MASTER_ADMINS_REGISTRATION_INIT" | "PENDING_REVIEW_BY_MASTER_ADMINS" | "PENDING_SEED_PROVISIONING" | "PENDING_SHARED_OWNERS_REGISTRATION" | "PENDING_SHARED_OWNERS_REGISTRATION_INIT" | "PENDING_WORKSPACE_INITIALIZATION" | "PENDING_WRAPPING_KEY_PROVISIONING";
598
+ claimedDevices: {
599
+ pubKey: string;
600
+ deviceUserId: string;
601
+ deviceName: string;
602
+ role: "MASTER_ADMIN" | "SHARED_OWNER" | "WRAPPING_KEY_OWNER";
603
+ }[];
604
+ wrappingKey: {
605
+ ephemeralPubKey: string;
606
+ ephemeralCertificate: {
607
+ codeHash: string;
608
+ attestationPub: string;
609
+ certificate: string;
610
+ signature: string;
611
+ };
612
+ fragments: {
613
+ pubKey: string;
614
+ ephemeralPubKey: string;
615
+ ephemeralCertificate: {
616
+ codeHash: string;
617
+ attestationPub: string;
618
+ certificate: string;
619
+ signature: string;
620
+ };
621
+ blob: string;
622
+ }[];
623
+ } | null;
624
+ masterAdmins: {
625
+ name: string;
626
+ psdModel: "BLUE" | "STAX";
627
+ pubKey: string;
628
+ registrationChallenge: {
629
+ challenge: string;
630
+ ephemeralPublicKey: string;
631
+ ephemeralPublicKeyAttestation: {
632
+ codeHash: string;
633
+ attestationPub: string;
634
+ certificate: string;
635
+ signature: string;
636
+ };
637
+ handshake: string;
638
+ handshakeAttestation: {
639
+ codeHash: string;
640
+ attestationPub: string;
641
+ certificate: string;
642
+ signature: string;
643
+ };
644
+ u2fRegisterData: string;
645
+ ciphertext: string;
646
+ requestId: string;
647
+ };
648
+ registrationResponse: {
649
+ certificate: {
650
+ codeHash: string;
651
+ attestationPub: string;
652
+ certificate: string;
653
+ signature: string;
654
+ };
655
+ u2fRegister: string;
656
+ u2fKeyHandle: string;
657
+ registerData: string;
658
+ validationKey: string;
659
+ pairingPayload: string;
660
+ } | null;
661
+ role: "MASTER_ADMIN";
662
+ review: {
663
+ challenge: {
664
+ challengeType: "PSD";
665
+ wActions: string[];
666
+ handshake: string;
667
+ handshakeAttestation: {
668
+ codeHash: string;
669
+ attestationPub: string;
670
+ certificate: string;
671
+ signature: string;
672
+ };
673
+ partitionId: string;
674
+ };
675
+ signature: string | null;
676
+ } | null;
677
+ reviewOfExternalSigners: {
678
+ challenge: {
679
+ challengeType: "PSD";
680
+ wActions: string[];
681
+ handshake: string;
682
+ handshakeAttestation: {
683
+ codeHash: string;
684
+ attestationPub: string;
685
+ certificate: string;
686
+ signature: string;
687
+ };
688
+ partitionId: string;
689
+ };
690
+ signature: string | null;
691
+ } | null;
692
+ }[];
693
+ sharedOwners: {
694
+ name: string;
695
+ psdModel: "BLUE" | "STAX";
696
+ pubKey: string;
697
+ registrationChallenge: {
698
+ challenge: string;
699
+ ephemeralPublicKey: string;
700
+ ephemeralPublicKeyAttestation: {
701
+ codeHash: string;
702
+ attestationPub: string;
703
+ certificate: string;
704
+ signature: string;
705
+ };
706
+ handshake: string;
707
+ handshakeAttestation: {
708
+ codeHash: string;
709
+ attestationPub: string;
710
+ certificate: string;
711
+ signature: string;
712
+ };
713
+ u2fRegisterData: string;
714
+ ciphertext: string;
715
+ requestId: string;
716
+ };
717
+ registrationResponse: {
718
+ certificate: {
719
+ codeHash: string;
720
+ attestationPub: string;
721
+ certificate: string;
722
+ signature: string;
723
+ };
724
+ u2fRegister: string;
725
+ u2fKeyHandle: string;
726
+ registerData: string;
727
+ validationKey: string;
728
+ pairingPayload: string;
729
+ } | null;
730
+ role: "SHARED_OWNER";
731
+ review: {
732
+ seedChallenge: {
733
+ challengeType: "PSD";
734
+ wActions: string[];
735
+ handshake: string;
736
+ handshakeAttestation: {
737
+ codeHash: string;
738
+ attestationPub: string;
739
+ certificate: string;
740
+ signature: string;
741
+ };
742
+ partitionId: string;
743
+ kkHandshake: string;
744
+ kkHandshakeAttestation: {
745
+ codeHash: string;
746
+ attestationPub: string;
747
+ certificate: string;
748
+ signature: string;
749
+ };
750
+ ephemeralPublicKey: string;
751
+ certificate: {
752
+ codeHash: string;
753
+ attestationPub: string;
754
+ certificate: string;
755
+ signature: string;
756
+ };
757
+ blob: string;
758
+ };
759
+ seedFragment: {
760
+ approverBlob: string;
761
+ challengeResponse: string;
762
+ handshake: string;
763
+ handshakeAttestation: {
764
+ codeHash: string;
765
+ attestationPub: string;
766
+ certificate: string;
767
+ signature: string;
768
+ };
561
769
  } | null;
562
- masterAdmins: {
563
- name: string;
564
- psdModel: "BLUE" | "STAX";
565
- pubKey: string;
566
- registrationChallenge: {
567
- challenge: string;
568
- ephemeralPublicKey: string;
569
- ephemeralPublicKeyAttestation: {
570
- codeHash: string;
571
- attestationPub: string;
572
- certificate: string;
573
- signature: string;
574
- };
575
- handshake: string;
576
- handshakeAttestation: {
577
- codeHash: string;
578
- attestationPub: string;
579
- certificate: string;
580
- signature: string;
581
- };
582
- u2fRegisterData: string;
583
- ciphertext: string;
584
- requestId: string;
585
- };
586
- registrationResponse: {
587
- certificate: {
588
- codeHash: string;
589
- attestationPub: string;
590
- certificate: string;
591
- signature: string;
592
- };
593
- u2fRegister: string;
594
- u2fKeyHandle: string;
595
- registerData: string;
596
- validationKey: string;
597
- pairingPayload: string;
598
- } | null;
599
- role: "MASTER_ADMIN";
600
- review: {
601
- challenge: {
602
- challengeType: "PSD";
603
- wActions: string[];
604
- handshake: string;
605
- handshakeAttestation: {
606
- codeHash: string;
607
- attestationPub: string;
608
- certificate: string;
609
- signature: string;
610
- };
611
- partitionId: string;
612
- };
613
- signature: string | null;
614
- } | null;
615
- }[];
616
- sharedOwners: {
617
- name: string;
618
- psdModel: "BLUE" | "STAX";
619
- pubKey: string;
620
- registrationChallenge: {
621
- challenge: string;
622
- ephemeralPublicKey: string;
623
- ephemeralPublicKeyAttestation: {
624
- codeHash: string;
625
- attestationPub: string;
626
- certificate: string;
627
- signature: string;
628
- };
629
- handshake: string;
630
- handshakeAttestation: {
631
- codeHash: string;
632
- attestationPub: string;
633
- certificate: string;
634
- signature: string;
635
- };
636
- u2fRegisterData: string;
637
- ciphertext: string;
638
- requestId: string;
639
- };
640
- registrationResponse: {
641
- certificate: {
642
- codeHash: string;
643
- attestationPub: string;
644
- certificate: string;
645
- signature: string;
646
- };
647
- u2fRegister: string;
648
- u2fKeyHandle: string;
649
- registerData: string;
650
- validationKey: string;
651
- pairingPayload: string;
652
- } | null;
653
- role: "SHARED_OWNER";
654
- review: {
655
- seedChallenge: {
656
- challengeType: "PSD";
657
- wActions: string[];
658
- handshake: string;
659
- handshakeAttestation: {
660
- codeHash: string;
661
- attestationPub: string;
662
- certificate: string;
663
- signature: string;
664
- };
665
- partitionId: string;
666
- kkHandshake: string;
667
- kkHandshakeAttestation: {
668
- codeHash: string;
669
- attestationPub: string;
670
- certificate: string;
671
- signature: string;
672
- };
673
- ephemeralPublicKey: string;
674
- certificate: {
675
- codeHash: string;
676
- attestationPub: string;
677
- certificate: string;
678
- signature: string;
679
- };
680
- blob: string;
681
- };
682
- seedFragment: {
683
- approverBlob: string;
684
- challengeResponse: string;
685
- handshake: string;
686
- handshakeAttestation: {
687
- codeHash: string;
688
- attestationPub: string;
689
- certificate: string;
690
- signature: string;
691
- };
692
- } | null;
693
- } | null;
694
- }[];
695
- createdAt: Date;
696
- completedAt: Date | null;
697
- }>;
698
- /**
699
- * Init Shared Owners registration
700
- */
701
- readonly PENDING_SHARED_OWNERS_REGISTRATION_INIT: ({ engine, state }: {
702
- engine: Engine<WithOnboarding>;
703
- state: OnboardingFullStateResponse;
704
- }) => Promise<{
705
- id: string;
706
- workspaceName: string;
707
- step: "COMPLETED" | "PENDING_DEVICE_CLAIMS" | "PENDING_WRAPPING_KEY_PROVISIONING" | "PENDING_MASTER_ADMINS_REGISTRATION_INIT" | "PENDING_MASTER_ADMINS_REGISTRATION" | "PENDING_SHARED_OWNERS_REGISTRATION_INIT" | "PENDING_SHARED_OWNERS_REGISTRATION" | "PENDING_REVIEW_BY_MASTER_ADMINS" | "PENDING_SEED_PROVISIONING" | "PENDING_WORKSPACE_INITIALIZATION";
708
- claimedDevices: {
709
- pubKey: string;
710
- deviceUserId: string;
711
- deviceName: string;
712
- role: "WRAPPING_KEY_OWNER" | "SHARED_OWNER" | "MASTER_ADMIN";
713
- }[];
714
- wrappingKey: {
715
- ephemeralPubKey: string;
716
- ephemeralCertificate: {
717
- codeHash: string;
718
- attestationPub: string;
719
- certificate: string;
720
- signature: string;
721
- };
722
- fragments: {
723
- pubKey: string;
724
- ephemeralPubKey: string;
725
- ephemeralCertificate: {
726
- codeHash: string;
727
- attestationPub: string;
728
- certificate: string;
729
- signature: string;
730
- };
731
- blob: string;
732
- }[];
770
+ } | null;
771
+ }[];
772
+ createdAt: Date;
773
+ completedAt: Date | null;
774
+ }>;
775
+ /**
776
+ * Init Shared Owners registration
777
+ */
778
+ readonly PENDING_SHARED_OWNERS_REGISTRATION_INIT: ({
779
+ engine,
780
+ state
781
+ }: {
782
+ engine: Engine<WithOnboarding>;
783
+ state: OnboardingFullStateResponse;
784
+ externalSigners?: string[];
785
+ }) => Promise<{
786
+ id: string;
787
+ workspaceName: string;
788
+ hsmHostingMode: "HOSTED" | "ON_PREM";
789
+ step: "COMPLETED" | "PENDING_DEVICE_CLAIMS" | "PENDING_EXTERNAL_SIGNERS_REGISTRATION" | "PENDING_MASTER_ADMINS_REGISTRATION" | "PENDING_MASTER_ADMINS_REGISTRATION_INIT" | "PENDING_REVIEW_BY_MASTER_ADMINS" | "PENDING_SEED_PROVISIONING" | "PENDING_SHARED_OWNERS_REGISTRATION" | "PENDING_SHARED_OWNERS_REGISTRATION_INIT" | "PENDING_WORKSPACE_INITIALIZATION" | "PENDING_WRAPPING_KEY_PROVISIONING";
790
+ claimedDevices: {
791
+ pubKey: string;
792
+ deviceUserId: string;
793
+ deviceName: string;
794
+ role: "MASTER_ADMIN" | "SHARED_OWNER" | "WRAPPING_KEY_OWNER";
795
+ }[];
796
+ wrappingKey: {
797
+ ephemeralPubKey: string;
798
+ ephemeralCertificate: {
799
+ codeHash: string;
800
+ attestationPub: string;
801
+ certificate: string;
802
+ signature: string;
803
+ };
804
+ fragments: {
805
+ pubKey: string;
806
+ ephemeralPubKey: string;
807
+ ephemeralCertificate: {
808
+ codeHash: string;
809
+ attestationPub: string;
810
+ certificate: string;
811
+ signature: string;
812
+ };
813
+ blob: string;
814
+ }[];
815
+ } | null;
816
+ masterAdmins: {
817
+ name: string;
818
+ psdModel: "BLUE" | "STAX";
819
+ pubKey: string;
820
+ registrationChallenge: {
821
+ challenge: string;
822
+ ephemeralPublicKey: string;
823
+ ephemeralPublicKeyAttestation: {
824
+ codeHash: string;
825
+ attestationPub: string;
826
+ certificate: string;
827
+ signature: string;
828
+ };
829
+ handshake: string;
830
+ handshakeAttestation: {
831
+ codeHash: string;
832
+ attestationPub: string;
833
+ certificate: string;
834
+ signature: string;
835
+ };
836
+ u2fRegisterData: string;
837
+ ciphertext: string;
838
+ requestId: string;
839
+ };
840
+ registrationResponse: {
841
+ certificate: {
842
+ codeHash: string;
843
+ attestationPub: string;
844
+ certificate: string;
845
+ signature: string;
846
+ };
847
+ u2fRegister: string;
848
+ u2fKeyHandle: string;
849
+ registerData: string;
850
+ validationKey: string;
851
+ pairingPayload: string;
852
+ } | null;
853
+ role: "MASTER_ADMIN";
854
+ review: {
855
+ challenge: {
856
+ challengeType: "PSD";
857
+ wActions: string[];
858
+ handshake: string;
859
+ handshakeAttestation: {
860
+ codeHash: string;
861
+ attestationPub: string;
862
+ certificate: string;
863
+ signature: string;
864
+ };
865
+ partitionId: string;
866
+ };
867
+ signature: string | null;
868
+ } | null;
869
+ reviewOfExternalSigners: {
870
+ challenge: {
871
+ challengeType: "PSD";
872
+ wActions: string[];
873
+ handshake: string;
874
+ handshakeAttestation: {
875
+ codeHash: string;
876
+ attestationPub: string;
877
+ certificate: string;
878
+ signature: string;
879
+ };
880
+ partitionId: string;
881
+ };
882
+ signature: string | null;
883
+ } | null;
884
+ }[];
885
+ sharedOwners: {
886
+ name: string;
887
+ psdModel: "BLUE" | "STAX";
888
+ pubKey: string;
889
+ registrationChallenge: {
890
+ challenge: string;
891
+ ephemeralPublicKey: string;
892
+ ephemeralPublicKeyAttestation: {
893
+ codeHash: string;
894
+ attestationPub: string;
895
+ certificate: string;
896
+ signature: string;
897
+ };
898
+ handshake: string;
899
+ handshakeAttestation: {
900
+ codeHash: string;
901
+ attestationPub: string;
902
+ certificate: string;
903
+ signature: string;
904
+ };
905
+ u2fRegisterData: string;
906
+ ciphertext: string;
907
+ requestId: string;
908
+ };
909
+ registrationResponse: {
910
+ certificate: {
911
+ codeHash: string;
912
+ attestationPub: string;
913
+ certificate: string;
914
+ signature: string;
915
+ };
916
+ u2fRegister: string;
917
+ u2fKeyHandle: string;
918
+ registerData: string;
919
+ validationKey: string;
920
+ pairingPayload: string;
921
+ } | null;
922
+ role: "SHARED_OWNER";
923
+ review: {
924
+ seedChallenge: {
925
+ challengeType: "PSD";
926
+ wActions: string[];
927
+ handshake: string;
928
+ handshakeAttestation: {
929
+ codeHash: string;
930
+ attestationPub: string;
931
+ certificate: string;
932
+ signature: string;
933
+ };
934
+ partitionId: string;
935
+ kkHandshake: string;
936
+ kkHandshakeAttestation: {
937
+ codeHash: string;
938
+ attestationPub: string;
939
+ certificate: string;
940
+ signature: string;
941
+ };
942
+ ephemeralPublicKey: string;
943
+ certificate: {
944
+ codeHash: string;
945
+ attestationPub: string;
946
+ certificate: string;
947
+ signature: string;
948
+ };
949
+ blob: string;
950
+ };
951
+ seedFragment: {
952
+ approverBlob: string;
953
+ challengeResponse: string;
954
+ handshake: string;
955
+ handshakeAttestation: {
956
+ codeHash: string;
957
+ attestationPub: string;
958
+ certificate: string;
959
+ signature: string;
960
+ };
733
961
  } | null;
734
- masterAdmins: {
735
- name: string;
736
- psdModel: "BLUE" | "STAX";
737
- pubKey: string;
738
- registrationChallenge: {
739
- challenge: string;
740
- ephemeralPublicKey: string;
741
- ephemeralPublicKeyAttestation: {
742
- codeHash: string;
743
- attestationPub: string;
744
- certificate: string;
745
- signature: string;
746
- };
747
- handshake: string;
748
- handshakeAttestation: {
749
- codeHash: string;
750
- attestationPub: string;
751
- certificate: string;
752
- signature: string;
753
- };
754
- u2fRegisterData: string;
755
- ciphertext: string;
756
- requestId: string;
757
- };
758
- registrationResponse: {
759
- certificate: {
760
- codeHash: string;
761
- attestationPub: string;
762
- certificate: string;
763
- signature: string;
764
- };
765
- u2fRegister: string;
766
- u2fKeyHandle: string;
767
- registerData: string;
768
- validationKey: string;
769
- pairingPayload: string;
770
- } | null;
771
- role: "MASTER_ADMIN";
772
- review: {
773
- challenge: {
774
- challengeType: "PSD";
775
- wActions: string[];
776
- handshake: string;
777
- handshakeAttestation: {
778
- codeHash: string;
779
- attestationPub: string;
780
- certificate: string;
781
- signature: string;
782
- };
783
- partitionId: string;
784
- };
785
- signature: string | null;
786
- } | null;
787
- }[];
788
- sharedOwners: {
789
- name: string;
790
- psdModel: "BLUE" | "STAX";
791
- pubKey: string;
792
- registrationChallenge: {
793
- challenge: string;
794
- ephemeralPublicKey: string;
795
- ephemeralPublicKeyAttestation: {
796
- codeHash: string;
797
- attestationPub: string;
798
- certificate: string;
799
- signature: string;
800
- };
801
- handshake: string;
802
- handshakeAttestation: {
803
- codeHash: string;
804
- attestationPub: string;
805
- certificate: string;
806
- signature: string;
807
- };
808
- u2fRegisterData: string;
809
- ciphertext: string;
810
- requestId: string;
811
- };
812
- registrationResponse: {
813
- certificate: {
814
- codeHash: string;
815
- attestationPub: string;
816
- certificate: string;
817
- signature: string;
818
- };
819
- u2fRegister: string;
820
- u2fKeyHandle: string;
821
- registerData: string;
822
- validationKey: string;
823
- pairingPayload: string;
824
- } | null;
825
- role: "SHARED_OWNER";
826
- review: {
827
- seedChallenge: {
828
- challengeType: "PSD";
829
- wActions: string[];
830
- handshake: string;
831
- handshakeAttestation: {
832
- codeHash: string;
833
- attestationPub: string;
834
- certificate: string;
835
- signature: string;
836
- };
837
- partitionId: string;
838
- kkHandshake: string;
839
- kkHandshakeAttestation: {
840
- codeHash: string;
841
- attestationPub: string;
842
- certificate: string;
843
- signature: string;
844
- };
845
- ephemeralPublicKey: string;
846
- certificate: {
847
- codeHash: string;
848
- attestationPub: string;
849
- certificate: string;
850
- signature: string;
851
- };
852
- blob: string;
853
- };
854
- seedFragment: {
855
- approverBlob: string;
856
- challengeResponse: string;
857
- handshake: string;
858
- handshakeAttestation: {
859
- codeHash: string;
860
- attestationPub: string;
861
- certificate: string;
862
- signature: string;
863
- };
864
- } | null;
865
- } | null;
866
- }[];
867
- createdAt: Date;
868
- completedAt: Date | null;
869
- }>;
870
- /**
871
- * Shared Owners registration
872
- */
873
- readonly PENDING_SHARED_OWNERS_REGISTRATION: ({ state, engine }: {
874
- engine: Engine<WithOnboarding>;
875
- state: OnboardingFullStateResponse;
876
- }, logger: Logger) => Promise<{
877
- id: string;
878
- workspaceName: string;
879
- step: "COMPLETED" | "PENDING_DEVICE_CLAIMS" | "PENDING_WRAPPING_KEY_PROVISIONING" | "PENDING_MASTER_ADMINS_REGISTRATION_INIT" | "PENDING_MASTER_ADMINS_REGISTRATION" | "PENDING_SHARED_OWNERS_REGISTRATION_INIT" | "PENDING_SHARED_OWNERS_REGISTRATION" | "PENDING_REVIEW_BY_MASTER_ADMINS" | "PENDING_SEED_PROVISIONING" | "PENDING_WORKSPACE_INITIALIZATION";
880
- claimedDevices: {
881
- pubKey: string;
882
- deviceUserId: string;
883
- deviceName: string;
884
- role: "WRAPPING_KEY_OWNER" | "SHARED_OWNER" | "MASTER_ADMIN";
885
- }[];
886
- wrappingKey: {
887
- ephemeralPubKey: string;
888
- ephemeralCertificate: {
889
- codeHash: string;
890
- attestationPub: string;
891
- certificate: string;
892
- signature: string;
893
- };
894
- fragments: {
895
- pubKey: string;
896
- ephemeralPubKey: string;
897
- ephemeralCertificate: {
898
- codeHash: string;
899
- attestationPub: string;
900
- certificate: string;
901
- signature: string;
902
- };
903
- blob: string;
904
- }[];
962
+ } | null;
963
+ }[];
964
+ createdAt: Date;
965
+ completedAt: Date | null;
966
+ }>;
967
+ /**
968
+ * Shared Owners registration
969
+ */
970
+ readonly PENDING_SHARED_OWNERS_REGISTRATION: ({
971
+ state,
972
+ engine
973
+ }: {
974
+ engine: Engine<WithOnboarding>;
975
+ state: OnboardingFullStateResponse;
976
+ externalSigners?: string[];
977
+ }, logger: Logger) => Promise<{
978
+ id: string;
979
+ workspaceName: string;
980
+ hsmHostingMode: "HOSTED" | "ON_PREM";
981
+ step: "COMPLETED" | "PENDING_DEVICE_CLAIMS" | "PENDING_EXTERNAL_SIGNERS_REGISTRATION" | "PENDING_MASTER_ADMINS_REGISTRATION" | "PENDING_MASTER_ADMINS_REGISTRATION_INIT" | "PENDING_REVIEW_BY_MASTER_ADMINS" | "PENDING_SEED_PROVISIONING" | "PENDING_SHARED_OWNERS_REGISTRATION" | "PENDING_SHARED_OWNERS_REGISTRATION_INIT" | "PENDING_WORKSPACE_INITIALIZATION" | "PENDING_WRAPPING_KEY_PROVISIONING";
982
+ claimedDevices: {
983
+ pubKey: string;
984
+ deviceUserId: string;
985
+ deviceName: string;
986
+ role: "MASTER_ADMIN" | "SHARED_OWNER" | "WRAPPING_KEY_OWNER";
987
+ }[];
988
+ wrappingKey: {
989
+ ephemeralPubKey: string;
990
+ ephemeralCertificate: {
991
+ codeHash: string;
992
+ attestationPub: string;
993
+ certificate: string;
994
+ signature: string;
995
+ };
996
+ fragments: {
997
+ pubKey: string;
998
+ ephemeralPubKey: string;
999
+ ephemeralCertificate: {
1000
+ codeHash: string;
1001
+ attestationPub: string;
1002
+ certificate: string;
1003
+ signature: string;
1004
+ };
1005
+ blob: string;
1006
+ }[];
1007
+ } | null;
1008
+ masterAdmins: {
1009
+ name: string;
1010
+ psdModel: "BLUE" | "STAX";
1011
+ pubKey: string;
1012
+ registrationChallenge: {
1013
+ challenge: string;
1014
+ ephemeralPublicKey: string;
1015
+ ephemeralPublicKeyAttestation: {
1016
+ codeHash: string;
1017
+ attestationPub: string;
1018
+ certificate: string;
1019
+ signature: string;
1020
+ };
1021
+ handshake: string;
1022
+ handshakeAttestation: {
1023
+ codeHash: string;
1024
+ attestationPub: string;
1025
+ certificate: string;
1026
+ signature: string;
1027
+ };
1028
+ u2fRegisterData: string;
1029
+ ciphertext: string;
1030
+ requestId: string;
1031
+ };
1032
+ registrationResponse: {
1033
+ certificate: {
1034
+ codeHash: string;
1035
+ attestationPub: string;
1036
+ certificate: string;
1037
+ signature: string;
1038
+ };
1039
+ u2fRegister: string;
1040
+ u2fKeyHandle: string;
1041
+ registerData: string;
1042
+ validationKey: string;
1043
+ pairingPayload: string;
1044
+ } | null;
1045
+ role: "MASTER_ADMIN";
1046
+ review: {
1047
+ challenge: {
1048
+ challengeType: "PSD";
1049
+ wActions: string[];
1050
+ handshake: string;
1051
+ handshakeAttestation: {
1052
+ codeHash: string;
1053
+ attestationPub: string;
1054
+ certificate: string;
1055
+ signature: string;
1056
+ };
1057
+ partitionId: string;
1058
+ };
1059
+ signature: string | null;
1060
+ } | null;
1061
+ reviewOfExternalSigners: {
1062
+ challenge: {
1063
+ challengeType: "PSD";
1064
+ wActions: string[];
1065
+ handshake: string;
1066
+ handshakeAttestation: {
1067
+ codeHash: string;
1068
+ attestationPub: string;
1069
+ certificate: string;
1070
+ signature: string;
1071
+ };
1072
+ partitionId: string;
1073
+ };
1074
+ signature: string | null;
1075
+ } | null;
1076
+ }[];
1077
+ sharedOwners: {
1078
+ name: string;
1079
+ psdModel: "BLUE" | "STAX";
1080
+ pubKey: string;
1081
+ registrationChallenge: {
1082
+ challenge: string;
1083
+ ephemeralPublicKey: string;
1084
+ ephemeralPublicKeyAttestation: {
1085
+ codeHash: string;
1086
+ attestationPub: string;
1087
+ certificate: string;
1088
+ signature: string;
1089
+ };
1090
+ handshake: string;
1091
+ handshakeAttestation: {
1092
+ codeHash: string;
1093
+ attestationPub: string;
1094
+ certificate: string;
1095
+ signature: string;
1096
+ };
1097
+ u2fRegisterData: string;
1098
+ ciphertext: string;
1099
+ requestId: string;
1100
+ };
1101
+ registrationResponse: {
1102
+ certificate: {
1103
+ codeHash: string;
1104
+ attestationPub: string;
1105
+ certificate: string;
1106
+ signature: string;
1107
+ };
1108
+ u2fRegister: string;
1109
+ u2fKeyHandle: string;
1110
+ registerData: string;
1111
+ validationKey: string;
1112
+ pairingPayload: string;
1113
+ } | null;
1114
+ role: "SHARED_OWNER";
1115
+ review: {
1116
+ seedChallenge: {
1117
+ challengeType: "PSD";
1118
+ wActions: string[];
1119
+ handshake: string;
1120
+ handshakeAttestation: {
1121
+ codeHash: string;
1122
+ attestationPub: string;
1123
+ certificate: string;
1124
+ signature: string;
1125
+ };
1126
+ partitionId: string;
1127
+ kkHandshake: string;
1128
+ kkHandshakeAttestation: {
1129
+ codeHash: string;
1130
+ attestationPub: string;
1131
+ certificate: string;
1132
+ signature: string;
1133
+ };
1134
+ ephemeralPublicKey: string;
1135
+ certificate: {
1136
+ codeHash: string;
1137
+ attestationPub: string;
1138
+ certificate: string;
1139
+ signature: string;
1140
+ };
1141
+ blob: string;
1142
+ };
1143
+ seedFragment: {
1144
+ approverBlob: string;
1145
+ challengeResponse: string;
1146
+ handshake: string;
1147
+ handshakeAttestation: {
1148
+ codeHash: string;
1149
+ attestationPub: string;
1150
+ certificate: string;
1151
+ signature: string;
1152
+ };
905
1153
  } | null;
906
- masterAdmins: {
907
- name: string;
908
- psdModel: "BLUE" | "STAX";
909
- pubKey: string;
910
- registrationChallenge: {
911
- challenge: string;
912
- ephemeralPublicKey: string;
913
- ephemeralPublicKeyAttestation: {
914
- codeHash: string;
915
- attestationPub: string;
916
- certificate: string;
917
- signature: string;
918
- };
919
- handshake: string;
920
- handshakeAttestation: {
921
- codeHash: string;
922
- attestationPub: string;
923
- certificate: string;
924
- signature: string;
925
- };
926
- u2fRegisterData: string;
927
- ciphertext: string;
928
- requestId: string;
929
- };
930
- registrationResponse: {
931
- certificate: {
932
- codeHash: string;
933
- attestationPub: string;
934
- certificate: string;
935
- signature: string;
936
- };
937
- u2fRegister: string;
938
- u2fKeyHandle: string;
939
- registerData: string;
940
- validationKey: string;
941
- pairingPayload: string;
942
- } | null;
943
- role: "MASTER_ADMIN";
944
- review: {
945
- challenge: {
946
- challengeType: "PSD";
947
- wActions: string[];
948
- handshake: string;
949
- handshakeAttestation: {
950
- codeHash: string;
951
- attestationPub: string;
952
- certificate: string;
953
- signature: string;
954
- };
955
- partitionId: string;
956
- };
957
- signature: string | null;
958
- } | null;
959
- }[];
960
- sharedOwners: {
961
- name: string;
962
- psdModel: "BLUE" | "STAX";
963
- pubKey: string;
964
- registrationChallenge: {
965
- challenge: string;
966
- ephemeralPublicKey: string;
967
- ephemeralPublicKeyAttestation: {
968
- codeHash: string;
969
- attestationPub: string;
970
- certificate: string;
971
- signature: string;
972
- };
973
- handshake: string;
974
- handshakeAttestation: {
975
- codeHash: string;
976
- attestationPub: string;
977
- certificate: string;
978
- signature: string;
979
- };
980
- u2fRegisterData: string;
981
- ciphertext: string;
982
- requestId: string;
983
- };
984
- registrationResponse: {
985
- certificate: {
986
- codeHash: string;
987
- attestationPub: string;
988
- certificate: string;
989
- signature: string;
990
- };
991
- u2fRegister: string;
992
- u2fKeyHandle: string;
993
- registerData: string;
994
- validationKey: string;
995
- pairingPayload: string;
996
- } | null;
997
- role: "SHARED_OWNER";
998
- review: {
999
- seedChallenge: {
1000
- challengeType: "PSD";
1001
- wActions: string[];
1002
- handshake: string;
1003
- handshakeAttestation: {
1004
- codeHash: string;
1005
- attestationPub: string;
1006
- certificate: string;
1007
- signature: string;
1008
- };
1009
- partitionId: string;
1010
- kkHandshake: string;
1011
- kkHandshakeAttestation: {
1012
- codeHash: string;
1013
- attestationPub: string;
1014
- certificate: string;
1015
- signature: string;
1016
- };
1017
- ephemeralPublicKey: string;
1018
- certificate: {
1019
- codeHash: string;
1020
- attestationPub: string;
1021
- certificate: string;
1022
- signature: string;
1023
- };
1024
- blob: string;
1025
- };
1026
- seedFragment: {
1027
- approverBlob: string;
1028
- challengeResponse: string;
1029
- handshake: string;
1030
- handshakeAttestation: {
1031
- codeHash: string;
1032
- attestationPub: string;
1033
- certificate: string;
1034
- signature: string;
1035
- };
1036
- } | null;
1037
- } | null;
1038
- }[];
1039
- createdAt: Date;
1040
- completedAt: Date | null;
1041
- }>;
1042
- /**
1043
- * Review by master admins
1044
- */
1045
- readonly PENDING_REVIEW_BY_MASTER_ADMINS: ({ state, engine }: {
1046
- engine: Engine<WithOnboarding>;
1047
- state: OnboardingFullStateResponse;
1048
- }, logger: Logger) => Promise<{
1049
- id: string;
1050
- workspaceName: string;
1051
- step: "COMPLETED" | "PENDING_DEVICE_CLAIMS" | "PENDING_WRAPPING_KEY_PROVISIONING" | "PENDING_MASTER_ADMINS_REGISTRATION_INIT" | "PENDING_MASTER_ADMINS_REGISTRATION" | "PENDING_SHARED_OWNERS_REGISTRATION_INIT" | "PENDING_SHARED_OWNERS_REGISTRATION" | "PENDING_REVIEW_BY_MASTER_ADMINS" | "PENDING_SEED_PROVISIONING" | "PENDING_WORKSPACE_INITIALIZATION";
1052
- claimedDevices: {
1053
- pubKey: string;
1054
- deviceUserId: string;
1055
- deviceName: string;
1056
- role: "WRAPPING_KEY_OWNER" | "SHARED_OWNER" | "MASTER_ADMIN";
1057
- }[];
1058
- wrappingKey: {
1059
- ephemeralPubKey: string;
1060
- ephemeralCertificate: {
1061
- codeHash: string;
1062
- attestationPub: string;
1063
- certificate: string;
1064
- signature: string;
1065
- };
1066
- fragments: {
1067
- pubKey: string;
1068
- ephemeralPubKey: string;
1069
- ephemeralCertificate: {
1070
- codeHash: string;
1071
- attestationPub: string;
1072
- certificate: string;
1073
- signature: string;
1074
- };
1075
- blob: string;
1076
- }[];
1154
+ } | null;
1155
+ }[];
1156
+ createdAt: Date;
1157
+ completedAt: Date | null;
1158
+ }>;
1159
+ /**
1160
+ * Review by master admins
1161
+ */
1162
+ readonly PENDING_REVIEW_BY_MASTER_ADMINS: ({
1163
+ state,
1164
+ engine
1165
+ }: {
1166
+ engine: Engine<WithOnboarding>;
1167
+ state: OnboardingFullStateResponse;
1168
+ externalSigners?: string[];
1169
+ }, logger: Logger) => Promise<{
1170
+ id: string;
1171
+ workspaceName: string;
1172
+ hsmHostingMode: "HOSTED" | "ON_PREM";
1173
+ step: "COMPLETED" | "PENDING_DEVICE_CLAIMS" | "PENDING_EXTERNAL_SIGNERS_REGISTRATION" | "PENDING_MASTER_ADMINS_REGISTRATION" | "PENDING_MASTER_ADMINS_REGISTRATION_INIT" | "PENDING_REVIEW_BY_MASTER_ADMINS" | "PENDING_SEED_PROVISIONING" | "PENDING_SHARED_OWNERS_REGISTRATION" | "PENDING_SHARED_OWNERS_REGISTRATION_INIT" | "PENDING_WORKSPACE_INITIALIZATION" | "PENDING_WRAPPING_KEY_PROVISIONING";
1174
+ claimedDevices: {
1175
+ pubKey: string;
1176
+ deviceUserId: string;
1177
+ deviceName: string;
1178
+ role: "MASTER_ADMIN" | "SHARED_OWNER" | "WRAPPING_KEY_OWNER";
1179
+ }[];
1180
+ wrappingKey: {
1181
+ ephemeralPubKey: string;
1182
+ ephemeralCertificate: {
1183
+ codeHash: string;
1184
+ attestationPub: string;
1185
+ certificate: string;
1186
+ signature: string;
1187
+ };
1188
+ fragments: {
1189
+ pubKey: string;
1190
+ ephemeralPubKey: string;
1191
+ ephemeralCertificate: {
1192
+ codeHash: string;
1193
+ attestationPub: string;
1194
+ certificate: string;
1195
+ signature: string;
1196
+ };
1197
+ blob: string;
1198
+ }[];
1199
+ } | null;
1200
+ masterAdmins: {
1201
+ name: string;
1202
+ psdModel: "BLUE" | "STAX";
1203
+ pubKey: string;
1204
+ registrationChallenge: {
1205
+ challenge: string;
1206
+ ephemeralPublicKey: string;
1207
+ ephemeralPublicKeyAttestation: {
1208
+ codeHash: string;
1209
+ attestationPub: string;
1210
+ certificate: string;
1211
+ signature: string;
1212
+ };
1213
+ handshake: string;
1214
+ handshakeAttestation: {
1215
+ codeHash: string;
1216
+ attestationPub: string;
1217
+ certificate: string;
1218
+ signature: string;
1219
+ };
1220
+ u2fRegisterData: string;
1221
+ ciphertext: string;
1222
+ requestId: string;
1223
+ };
1224
+ registrationResponse: {
1225
+ certificate: {
1226
+ codeHash: string;
1227
+ attestationPub: string;
1228
+ certificate: string;
1229
+ signature: string;
1230
+ };
1231
+ u2fRegister: string;
1232
+ u2fKeyHandle: string;
1233
+ registerData: string;
1234
+ validationKey: string;
1235
+ pairingPayload: string;
1236
+ } | null;
1237
+ role: "MASTER_ADMIN";
1238
+ review: {
1239
+ challenge: {
1240
+ challengeType: "PSD";
1241
+ wActions: string[];
1242
+ handshake: string;
1243
+ handshakeAttestation: {
1244
+ codeHash: string;
1245
+ attestationPub: string;
1246
+ certificate: string;
1247
+ signature: string;
1248
+ };
1249
+ partitionId: string;
1250
+ };
1251
+ signature: string | null;
1252
+ } | null;
1253
+ reviewOfExternalSigners: {
1254
+ challenge: {
1255
+ challengeType: "PSD";
1256
+ wActions: string[];
1257
+ handshake: string;
1258
+ handshakeAttestation: {
1259
+ codeHash: string;
1260
+ attestationPub: string;
1261
+ certificate: string;
1262
+ signature: string;
1263
+ };
1264
+ partitionId: string;
1265
+ };
1266
+ signature: string | null;
1267
+ } | null;
1268
+ }[];
1269
+ sharedOwners: {
1270
+ name: string;
1271
+ psdModel: "BLUE" | "STAX";
1272
+ pubKey: string;
1273
+ registrationChallenge: {
1274
+ challenge: string;
1275
+ ephemeralPublicKey: string;
1276
+ ephemeralPublicKeyAttestation: {
1277
+ codeHash: string;
1278
+ attestationPub: string;
1279
+ certificate: string;
1280
+ signature: string;
1281
+ };
1282
+ handshake: string;
1283
+ handshakeAttestation: {
1284
+ codeHash: string;
1285
+ attestationPub: string;
1286
+ certificate: string;
1287
+ signature: string;
1288
+ };
1289
+ u2fRegisterData: string;
1290
+ ciphertext: string;
1291
+ requestId: string;
1292
+ };
1293
+ registrationResponse: {
1294
+ certificate: {
1295
+ codeHash: string;
1296
+ attestationPub: string;
1297
+ certificate: string;
1298
+ signature: string;
1299
+ };
1300
+ u2fRegister: string;
1301
+ u2fKeyHandle: string;
1302
+ registerData: string;
1303
+ validationKey: string;
1304
+ pairingPayload: string;
1305
+ } | null;
1306
+ role: "SHARED_OWNER";
1307
+ review: {
1308
+ seedChallenge: {
1309
+ challengeType: "PSD";
1310
+ wActions: string[];
1311
+ handshake: string;
1312
+ handshakeAttestation: {
1313
+ codeHash: string;
1314
+ attestationPub: string;
1315
+ certificate: string;
1316
+ signature: string;
1317
+ };
1318
+ partitionId: string;
1319
+ kkHandshake: string;
1320
+ kkHandshakeAttestation: {
1321
+ codeHash: string;
1322
+ attestationPub: string;
1323
+ certificate: string;
1324
+ signature: string;
1325
+ };
1326
+ ephemeralPublicKey: string;
1327
+ certificate: {
1328
+ codeHash: string;
1329
+ attestationPub: string;
1330
+ certificate: string;
1331
+ signature: string;
1332
+ };
1333
+ blob: string;
1334
+ };
1335
+ seedFragment: {
1336
+ approverBlob: string;
1337
+ challengeResponse: string;
1338
+ handshake: string;
1339
+ handshakeAttestation: {
1340
+ codeHash: string;
1341
+ attestationPub: string;
1342
+ certificate: string;
1343
+ signature: string;
1344
+ };
1077
1345
  } | null;
1078
- masterAdmins: {
1079
- name: string;
1080
- psdModel: "BLUE" | "STAX";
1081
- pubKey: string;
1082
- registrationChallenge: {
1083
- challenge: string;
1084
- ephemeralPublicKey: string;
1085
- ephemeralPublicKeyAttestation: {
1086
- codeHash: string;
1087
- attestationPub: string;
1088
- certificate: string;
1089
- signature: string;
1090
- };
1091
- handshake: string;
1092
- handshakeAttestation: {
1093
- codeHash: string;
1094
- attestationPub: string;
1095
- certificate: string;
1096
- signature: string;
1097
- };
1098
- u2fRegisterData: string;
1099
- ciphertext: string;
1100
- requestId: string;
1101
- };
1102
- registrationResponse: {
1103
- certificate: {
1104
- codeHash: string;
1105
- attestationPub: string;
1106
- certificate: string;
1107
- signature: string;
1108
- };
1109
- u2fRegister: string;
1110
- u2fKeyHandle: string;
1111
- registerData: string;
1112
- validationKey: string;
1113
- pairingPayload: string;
1114
- } | null;
1115
- role: "MASTER_ADMIN";
1116
- review: {
1117
- challenge: {
1118
- challengeType: "PSD";
1119
- wActions: string[];
1120
- handshake: string;
1121
- handshakeAttestation: {
1122
- codeHash: string;
1123
- attestationPub: string;
1124
- certificate: string;
1125
- signature: string;
1126
- };
1127
- partitionId: string;
1128
- };
1129
- signature: string | null;
1130
- } | null;
1131
- }[];
1132
- sharedOwners: {
1133
- name: string;
1134
- psdModel: "BLUE" | "STAX";
1135
- pubKey: string;
1136
- registrationChallenge: {
1137
- challenge: string;
1138
- ephemeralPublicKey: string;
1139
- ephemeralPublicKeyAttestation: {
1140
- codeHash: string;
1141
- attestationPub: string;
1142
- certificate: string;
1143
- signature: string;
1144
- };
1145
- handshake: string;
1146
- handshakeAttestation: {
1147
- codeHash: string;
1148
- attestationPub: string;
1149
- certificate: string;
1150
- signature: string;
1151
- };
1152
- u2fRegisterData: string;
1153
- ciphertext: string;
1154
- requestId: string;
1155
- };
1156
- registrationResponse: {
1157
- certificate: {
1158
- codeHash: string;
1159
- attestationPub: string;
1160
- certificate: string;
1161
- signature: string;
1162
- };
1163
- u2fRegister: string;
1164
- u2fKeyHandle: string;
1165
- registerData: string;
1166
- validationKey: string;
1167
- pairingPayload: string;
1168
- } | null;
1169
- role: "SHARED_OWNER";
1170
- review: {
1171
- seedChallenge: {
1172
- challengeType: "PSD";
1173
- wActions: string[];
1174
- handshake: string;
1175
- handshakeAttestation: {
1176
- codeHash: string;
1177
- attestationPub: string;
1178
- certificate: string;
1179
- signature: string;
1180
- };
1181
- partitionId: string;
1182
- kkHandshake: string;
1183
- kkHandshakeAttestation: {
1184
- codeHash: string;
1185
- attestationPub: string;
1186
- certificate: string;
1187
- signature: string;
1188
- };
1189
- ephemeralPublicKey: string;
1190
- certificate: {
1191
- codeHash: string;
1192
- attestationPub: string;
1193
- certificate: string;
1194
- signature: string;
1195
- };
1196
- blob: string;
1197
- };
1198
- seedFragment: {
1199
- approverBlob: string;
1200
- challengeResponse: string;
1201
- handshake: string;
1202
- handshakeAttestation: {
1203
- codeHash: string;
1204
- attestationPub: string;
1205
- certificate: string;
1206
- signature: string;
1207
- };
1208
- } | null;
1209
- } | null;
1210
- }[];
1211
- createdAt: Date;
1212
- completedAt: Date | null;
1213
- }>;
1214
- /**
1215
- * Seed provisioning
1216
- */
1217
- readonly PENDING_SEED_PROVISIONING: ({ state, engine }: {
1218
- engine: Engine<WithOnboarding>;
1219
- state: OnboardingFullStateResponse;
1220
- }, logger: Logger) => Promise<{
1221
- id: string;
1222
- workspaceName: string;
1223
- step: "COMPLETED" | "PENDING_DEVICE_CLAIMS" | "PENDING_WRAPPING_KEY_PROVISIONING" | "PENDING_MASTER_ADMINS_REGISTRATION_INIT" | "PENDING_MASTER_ADMINS_REGISTRATION" | "PENDING_SHARED_OWNERS_REGISTRATION_INIT" | "PENDING_SHARED_OWNERS_REGISTRATION" | "PENDING_REVIEW_BY_MASTER_ADMINS" | "PENDING_SEED_PROVISIONING" | "PENDING_WORKSPACE_INITIALIZATION";
1224
- claimedDevices: {
1225
- pubKey: string;
1226
- deviceUserId: string;
1227
- deviceName: string;
1228
- role: "WRAPPING_KEY_OWNER" | "SHARED_OWNER" | "MASTER_ADMIN";
1229
- }[];
1230
- wrappingKey: {
1231
- ephemeralPubKey: string;
1232
- ephemeralCertificate: {
1233
- codeHash: string;
1234
- attestationPub: string;
1235
- certificate: string;
1236
- signature: string;
1237
- };
1238
- fragments: {
1239
- pubKey: string;
1240
- ephemeralPubKey: string;
1241
- ephemeralCertificate: {
1242
- codeHash: string;
1243
- attestationPub: string;
1244
- certificate: string;
1245
- signature: string;
1246
- };
1247
- blob: string;
1248
- }[];
1346
+ } | null;
1347
+ }[];
1348
+ createdAt: Date;
1349
+ completedAt: Date | null;
1350
+ }>;
1351
+ readonly PENDING_EXTERNAL_SIGNERS_REGISTRATION: ({
1352
+ state,
1353
+ engine,
1354
+ externalSigners
1355
+ }: {
1356
+ engine: Engine<WithOnboarding>;
1357
+ state: OnboardingFullStateResponse;
1358
+ externalSigners?: string[];
1359
+ }, logger: Logger) => Promise<{
1360
+ id: string;
1361
+ workspaceName: string;
1362
+ hsmHostingMode: "HOSTED" | "ON_PREM";
1363
+ step: "COMPLETED" | "PENDING_DEVICE_CLAIMS" | "PENDING_EXTERNAL_SIGNERS_REGISTRATION" | "PENDING_MASTER_ADMINS_REGISTRATION" | "PENDING_MASTER_ADMINS_REGISTRATION_INIT" | "PENDING_REVIEW_BY_MASTER_ADMINS" | "PENDING_SEED_PROVISIONING" | "PENDING_SHARED_OWNERS_REGISTRATION" | "PENDING_SHARED_OWNERS_REGISTRATION_INIT" | "PENDING_WORKSPACE_INITIALIZATION" | "PENDING_WRAPPING_KEY_PROVISIONING";
1364
+ claimedDevices: {
1365
+ pubKey: string;
1366
+ deviceUserId: string;
1367
+ deviceName: string;
1368
+ role: "MASTER_ADMIN" | "SHARED_OWNER" | "WRAPPING_KEY_OWNER";
1369
+ }[];
1370
+ wrappingKey: {
1371
+ ephemeralPubKey: string;
1372
+ ephemeralCertificate: {
1373
+ codeHash: string;
1374
+ attestationPub: string;
1375
+ certificate: string;
1376
+ signature: string;
1377
+ };
1378
+ fragments: {
1379
+ pubKey: string;
1380
+ ephemeralPubKey: string;
1381
+ ephemeralCertificate: {
1382
+ codeHash: string;
1383
+ attestationPub: string;
1384
+ certificate: string;
1385
+ signature: string;
1386
+ };
1387
+ blob: string;
1388
+ }[];
1389
+ } | null;
1390
+ masterAdmins: {
1391
+ name: string;
1392
+ psdModel: "BLUE" | "STAX";
1393
+ pubKey: string;
1394
+ registrationChallenge: {
1395
+ challenge: string;
1396
+ ephemeralPublicKey: string;
1397
+ ephemeralPublicKeyAttestation: {
1398
+ codeHash: string;
1399
+ attestationPub: string;
1400
+ certificate: string;
1401
+ signature: string;
1402
+ };
1403
+ handshake: string;
1404
+ handshakeAttestation: {
1405
+ codeHash: string;
1406
+ attestationPub: string;
1407
+ certificate: string;
1408
+ signature: string;
1409
+ };
1410
+ u2fRegisterData: string;
1411
+ ciphertext: string;
1412
+ requestId: string;
1413
+ };
1414
+ registrationResponse: {
1415
+ certificate: {
1416
+ codeHash: string;
1417
+ attestationPub: string;
1418
+ certificate: string;
1419
+ signature: string;
1420
+ };
1421
+ u2fRegister: string;
1422
+ u2fKeyHandle: string;
1423
+ registerData: string;
1424
+ validationKey: string;
1425
+ pairingPayload: string;
1426
+ } | null;
1427
+ role: "MASTER_ADMIN";
1428
+ review: {
1429
+ challenge: {
1430
+ challengeType: "PSD";
1431
+ wActions: string[];
1432
+ handshake: string;
1433
+ handshakeAttestation: {
1434
+ codeHash: string;
1435
+ attestationPub: string;
1436
+ certificate: string;
1437
+ signature: string;
1438
+ };
1439
+ partitionId: string;
1440
+ };
1441
+ signature: string | null;
1442
+ } | null;
1443
+ reviewOfExternalSigners: {
1444
+ challenge: {
1445
+ challengeType: "PSD";
1446
+ wActions: string[];
1447
+ handshake: string;
1448
+ handshakeAttestation: {
1449
+ codeHash: string;
1450
+ attestationPub: string;
1451
+ certificate: string;
1452
+ signature: string;
1453
+ };
1454
+ partitionId: string;
1455
+ };
1456
+ signature: string | null;
1457
+ } | null;
1458
+ }[];
1459
+ sharedOwners: {
1460
+ name: string;
1461
+ psdModel: "BLUE" | "STAX";
1462
+ pubKey: string;
1463
+ registrationChallenge: {
1464
+ challenge: string;
1465
+ ephemeralPublicKey: string;
1466
+ ephemeralPublicKeyAttestation: {
1467
+ codeHash: string;
1468
+ attestationPub: string;
1469
+ certificate: string;
1470
+ signature: string;
1471
+ };
1472
+ handshake: string;
1473
+ handshakeAttestation: {
1474
+ codeHash: string;
1475
+ attestationPub: string;
1476
+ certificate: string;
1477
+ signature: string;
1478
+ };
1479
+ u2fRegisterData: string;
1480
+ ciphertext: string;
1481
+ requestId: string;
1482
+ };
1483
+ registrationResponse: {
1484
+ certificate: {
1485
+ codeHash: string;
1486
+ attestationPub: string;
1487
+ certificate: string;
1488
+ signature: string;
1489
+ };
1490
+ u2fRegister: string;
1491
+ u2fKeyHandle: string;
1492
+ registerData: string;
1493
+ validationKey: string;
1494
+ pairingPayload: string;
1495
+ } | null;
1496
+ role: "SHARED_OWNER";
1497
+ review: {
1498
+ seedChallenge: {
1499
+ challengeType: "PSD";
1500
+ wActions: string[];
1501
+ handshake: string;
1502
+ handshakeAttestation: {
1503
+ codeHash: string;
1504
+ attestationPub: string;
1505
+ certificate: string;
1506
+ signature: string;
1507
+ };
1508
+ partitionId: string;
1509
+ kkHandshake: string;
1510
+ kkHandshakeAttestation: {
1511
+ codeHash: string;
1512
+ attestationPub: string;
1513
+ certificate: string;
1514
+ signature: string;
1515
+ };
1516
+ ephemeralPublicKey: string;
1517
+ certificate: {
1518
+ codeHash: string;
1519
+ attestationPub: string;
1520
+ certificate: string;
1521
+ signature: string;
1522
+ };
1523
+ blob: string;
1524
+ };
1525
+ seedFragment: {
1526
+ approverBlob: string;
1527
+ challengeResponse: string;
1528
+ handshake: string;
1529
+ handshakeAttestation: {
1530
+ codeHash: string;
1531
+ attestationPub: string;
1532
+ certificate: string;
1533
+ signature: string;
1534
+ };
1249
1535
  } | null;
1250
- masterAdmins: {
1251
- name: string;
1252
- psdModel: "BLUE" | "STAX";
1253
- pubKey: string;
1254
- registrationChallenge: {
1255
- challenge: string;
1256
- ephemeralPublicKey: string;
1257
- ephemeralPublicKeyAttestation: {
1258
- codeHash: string;
1259
- attestationPub: string;
1260
- certificate: string;
1261
- signature: string;
1262
- };
1263
- handshake: string;
1264
- handshakeAttestation: {
1265
- codeHash: string;
1266
- attestationPub: string;
1267
- certificate: string;
1268
- signature: string;
1269
- };
1270
- u2fRegisterData: string;
1271
- ciphertext: string;
1272
- requestId: string;
1273
- };
1274
- registrationResponse: {
1275
- certificate: {
1276
- codeHash: string;
1277
- attestationPub: string;
1278
- certificate: string;
1279
- signature: string;
1280
- };
1281
- u2fRegister: string;
1282
- u2fKeyHandle: string;
1283
- registerData: string;
1284
- validationKey: string;
1285
- pairingPayload: string;
1286
- } | null;
1287
- role: "MASTER_ADMIN";
1288
- review: {
1289
- challenge: {
1290
- challengeType: "PSD";
1291
- wActions: string[];
1292
- handshake: string;
1293
- handshakeAttestation: {
1294
- codeHash: string;
1295
- attestationPub: string;
1296
- certificate: string;
1297
- signature: string;
1298
- };
1299
- partitionId: string;
1300
- };
1301
- signature: string | null;
1302
- } | null;
1303
- }[];
1304
- sharedOwners: {
1305
- name: string;
1306
- psdModel: "BLUE" | "STAX";
1307
- pubKey: string;
1308
- registrationChallenge: {
1309
- challenge: string;
1310
- ephemeralPublicKey: string;
1311
- ephemeralPublicKeyAttestation: {
1312
- codeHash: string;
1313
- attestationPub: string;
1314
- certificate: string;
1315
- signature: string;
1316
- };
1317
- handshake: string;
1318
- handshakeAttestation: {
1319
- codeHash: string;
1320
- attestationPub: string;
1321
- certificate: string;
1322
- signature: string;
1323
- };
1324
- u2fRegisterData: string;
1325
- ciphertext: string;
1326
- requestId: string;
1327
- };
1328
- registrationResponse: {
1329
- certificate: {
1330
- codeHash: string;
1331
- attestationPub: string;
1332
- certificate: string;
1333
- signature: string;
1334
- };
1335
- u2fRegister: string;
1336
- u2fKeyHandle: string;
1337
- registerData: string;
1338
- validationKey: string;
1339
- pairingPayload: string;
1340
- } | null;
1341
- role: "SHARED_OWNER";
1342
- review: {
1343
- seedChallenge: {
1344
- challengeType: "PSD";
1345
- wActions: string[];
1346
- handshake: string;
1347
- handshakeAttestation: {
1348
- codeHash: string;
1349
- attestationPub: string;
1350
- certificate: string;
1351
- signature: string;
1352
- };
1353
- partitionId: string;
1354
- kkHandshake: string;
1355
- kkHandshakeAttestation: {
1356
- codeHash: string;
1357
- attestationPub: string;
1358
- certificate: string;
1359
- signature: string;
1360
- };
1361
- ephemeralPublicKey: string;
1362
- certificate: {
1363
- codeHash: string;
1364
- attestationPub: string;
1365
- certificate: string;
1366
- signature: string;
1367
- };
1368
- blob: string;
1369
- };
1370
- seedFragment: {
1371
- approverBlob: string;
1372
- challengeResponse: string;
1373
- handshake: string;
1374
- handshakeAttestation: {
1375
- codeHash: string;
1376
- attestationPub: string;
1377
- certificate: string;
1378
- signature: string;
1379
- };
1380
- } | null;
1381
- } | null;
1382
- }[];
1383
- createdAt: Date;
1384
- completedAt: Date | null;
1385
- }>;
1386
- /**
1387
- * Workspace initialization
1388
- */
1389
- readonly PENDING_WORKSPACE_INITIALIZATION: ({ state, engine }: {
1390
- engine: Engine<WithOnboarding>;
1391
- state: OnboardingFullStateResponse;
1392
- }) => Promise<{
1393
- id: string;
1394
- workspaceName: string;
1395
- step: "COMPLETED" | "PENDING_DEVICE_CLAIMS" | "PENDING_WRAPPING_KEY_PROVISIONING" | "PENDING_MASTER_ADMINS_REGISTRATION_INIT" | "PENDING_MASTER_ADMINS_REGISTRATION" | "PENDING_SHARED_OWNERS_REGISTRATION_INIT" | "PENDING_SHARED_OWNERS_REGISTRATION" | "PENDING_REVIEW_BY_MASTER_ADMINS" | "PENDING_SEED_PROVISIONING" | "PENDING_WORKSPACE_INITIALIZATION";
1396
- claimedDevices: {
1397
- pubKey: string;
1398
- deviceUserId: string;
1399
- deviceName: string;
1400
- role: "WRAPPING_KEY_OWNER" | "SHARED_OWNER" | "MASTER_ADMIN";
1401
- }[];
1402
- wrappingKey: {
1403
- ephemeralPubKey: string;
1404
- ephemeralCertificate: {
1405
- codeHash: string;
1406
- attestationPub: string;
1407
- certificate: string;
1408
- signature: string;
1409
- };
1410
- fragments: {
1411
- pubKey: string;
1412
- ephemeralPubKey: string;
1413
- ephemeralCertificate: {
1414
- codeHash: string;
1415
- attestationPub: string;
1416
- certificate: string;
1417
- signature: string;
1418
- };
1419
- blob: string;
1420
- }[];
1536
+ } | null;
1537
+ }[];
1538
+ createdAt: Date;
1539
+ completedAt: Date | null;
1540
+ }>;
1541
+ /**
1542
+ * Seed provisioning
1543
+ */
1544
+ readonly PENDING_SEED_PROVISIONING: ({
1545
+ state,
1546
+ engine
1547
+ }: {
1548
+ engine: Engine<WithOnboarding>;
1549
+ state: OnboardingFullStateResponse;
1550
+ externalSigners?: string[];
1551
+ }, logger: Logger) => Promise<{
1552
+ id: string;
1553
+ workspaceName: string;
1554
+ hsmHostingMode: "HOSTED" | "ON_PREM";
1555
+ step: "COMPLETED" | "PENDING_DEVICE_CLAIMS" | "PENDING_EXTERNAL_SIGNERS_REGISTRATION" | "PENDING_MASTER_ADMINS_REGISTRATION" | "PENDING_MASTER_ADMINS_REGISTRATION_INIT" | "PENDING_REVIEW_BY_MASTER_ADMINS" | "PENDING_SEED_PROVISIONING" | "PENDING_SHARED_OWNERS_REGISTRATION" | "PENDING_SHARED_OWNERS_REGISTRATION_INIT" | "PENDING_WORKSPACE_INITIALIZATION" | "PENDING_WRAPPING_KEY_PROVISIONING";
1556
+ claimedDevices: {
1557
+ pubKey: string;
1558
+ deviceUserId: string;
1559
+ deviceName: string;
1560
+ role: "MASTER_ADMIN" | "SHARED_OWNER" | "WRAPPING_KEY_OWNER";
1561
+ }[];
1562
+ wrappingKey: {
1563
+ ephemeralPubKey: string;
1564
+ ephemeralCertificate: {
1565
+ codeHash: string;
1566
+ attestationPub: string;
1567
+ certificate: string;
1568
+ signature: string;
1569
+ };
1570
+ fragments: {
1571
+ pubKey: string;
1572
+ ephemeralPubKey: string;
1573
+ ephemeralCertificate: {
1574
+ codeHash: string;
1575
+ attestationPub: string;
1576
+ certificate: string;
1577
+ signature: string;
1578
+ };
1579
+ blob: string;
1580
+ }[];
1581
+ } | null;
1582
+ masterAdmins: {
1583
+ name: string;
1584
+ psdModel: "BLUE" | "STAX";
1585
+ pubKey: string;
1586
+ registrationChallenge: {
1587
+ challenge: string;
1588
+ ephemeralPublicKey: string;
1589
+ ephemeralPublicKeyAttestation: {
1590
+ codeHash: string;
1591
+ attestationPub: string;
1592
+ certificate: string;
1593
+ signature: string;
1594
+ };
1595
+ handshake: string;
1596
+ handshakeAttestation: {
1597
+ codeHash: string;
1598
+ attestationPub: string;
1599
+ certificate: string;
1600
+ signature: string;
1601
+ };
1602
+ u2fRegisterData: string;
1603
+ ciphertext: string;
1604
+ requestId: string;
1605
+ };
1606
+ registrationResponse: {
1607
+ certificate: {
1608
+ codeHash: string;
1609
+ attestationPub: string;
1610
+ certificate: string;
1611
+ signature: string;
1612
+ };
1613
+ u2fRegister: string;
1614
+ u2fKeyHandle: string;
1615
+ registerData: string;
1616
+ validationKey: string;
1617
+ pairingPayload: string;
1618
+ } | null;
1619
+ role: "MASTER_ADMIN";
1620
+ review: {
1621
+ challenge: {
1622
+ challengeType: "PSD";
1623
+ wActions: string[];
1624
+ handshake: string;
1625
+ handshakeAttestation: {
1626
+ codeHash: string;
1627
+ attestationPub: string;
1628
+ certificate: string;
1629
+ signature: string;
1630
+ };
1631
+ partitionId: string;
1632
+ };
1633
+ signature: string | null;
1634
+ } | null;
1635
+ reviewOfExternalSigners: {
1636
+ challenge: {
1637
+ challengeType: "PSD";
1638
+ wActions: string[];
1639
+ handshake: string;
1640
+ handshakeAttestation: {
1641
+ codeHash: string;
1642
+ attestationPub: string;
1643
+ certificate: string;
1644
+ signature: string;
1645
+ };
1646
+ partitionId: string;
1647
+ };
1648
+ signature: string | null;
1649
+ } | null;
1650
+ }[];
1651
+ sharedOwners: {
1652
+ name: string;
1653
+ psdModel: "BLUE" | "STAX";
1654
+ pubKey: string;
1655
+ registrationChallenge: {
1656
+ challenge: string;
1657
+ ephemeralPublicKey: string;
1658
+ ephemeralPublicKeyAttestation: {
1659
+ codeHash: string;
1660
+ attestationPub: string;
1661
+ certificate: string;
1662
+ signature: string;
1663
+ };
1664
+ handshake: string;
1665
+ handshakeAttestation: {
1666
+ codeHash: string;
1667
+ attestationPub: string;
1668
+ certificate: string;
1669
+ signature: string;
1670
+ };
1671
+ u2fRegisterData: string;
1672
+ ciphertext: string;
1673
+ requestId: string;
1674
+ };
1675
+ registrationResponse: {
1676
+ certificate: {
1677
+ codeHash: string;
1678
+ attestationPub: string;
1679
+ certificate: string;
1680
+ signature: string;
1681
+ };
1682
+ u2fRegister: string;
1683
+ u2fKeyHandle: string;
1684
+ registerData: string;
1685
+ validationKey: string;
1686
+ pairingPayload: string;
1687
+ } | null;
1688
+ role: "SHARED_OWNER";
1689
+ review: {
1690
+ seedChallenge: {
1691
+ challengeType: "PSD";
1692
+ wActions: string[];
1693
+ handshake: string;
1694
+ handshakeAttestation: {
1695
+ codeHash: string;
1696
+ attestationPub: string;
1697
+ certificate: string;
1698
+ signature: string;
1699
+ };
1700
+ partitionId: string;
1701
+ kkHandshake: string;
1702
+ kkHandshakeAttestation: {
1703
+ codeHash: string;
1704
+ attestationPub: string;
1705
+ certificate: string;
1706
+ signature: string;
1707
+ };
1708
+ ephemeralPublicKey: string;
1709
+ certificate: {
1710
+ codeHash: string;
1711
+ attestationPub: string;
1712
+ certificate: string;
1713
+ signature: string;
1714
+ };
1715
+ blob: string;
1716
+ };
1717
+ seedFragment: {
1718
+ approverBlob: string;
1719
+ challengeResponse: string;
1720
+ handshake: string;
1721
+ handshakeAttestation: {
1722
+ codeHash: string;
1723
+ attestationPub: string;
1724
+ certificate: string;
1725
+ signature: string;
1726
+ };
1421
1727
  } | null;
1422
- masterAdmins: {
1423
- name: string;
1424
- psdModel: "BLUE" | "STAX";
1425
- pubKey: string;
1426
- registrationChallenge: {
1427
- challenge: string;
1428
- ephemeralPublicKey: string;
1429
- ephemeralPublicKeyAttestation: {
1430
- codeHash: string;
1431
- attestationPub: string;
1432
- certificate: string;
1433
- signature: string;
1434
- };
1435
- handshake: string;
1436
- handshakeAttestation: {
1437
- codeHash: string;
1438
- attestationPub: string;
1439
- certificate: string;
1440
- signature: string;
1441
- };
1442
- u2fRegisterData: string;
1443
- ciphertext: string;
1444
- requestId: string;
1445
- };
1446
- registrationResponse: {
1447
- certificate: {
1448
- codeHash: string;
1449
- attestationPub: string;
1450
- certificate: string;
1451
- signature: string;
1452
- };
1453
- u2fRegister: string;
1454
- u2fKeyHandle: string;
1455
- registerData: string;
1456
- validationKey: string;
1457
- pairingPayload: string;
1458
- } | null;
1459
- role: "MASTER_ADMIN";
1460
- review: {
1461
- challenge: {
1462
- challengeType: "PSD";
1463
- wActions: string[];
1464
- handshake: string;
1465
- handshakeAttestation: {
1466
- codeHash: string;
1467
- attestationPub: string;
1468
- certificate: string;
1469
- signature: string;
1470
- };
1471
- partitionId: string;
1472
- };
1473
- signature: string | null;
1474
- } | null;
1475
- }[];
1476
- sharedOwners: {
1477
- name: string;
1478
- psdModel: "BLUE" | "STAX";
1479
- pubKey: string;
1480
- registrationChallenge: {
1481
- challenge: string;
1482
- ephemeralPublicKey: string;
1483
- ephemeralPublicKeyAttestation: {
1484
- codeHash: string;
1485
- attestationPub: string;
1486
- certificate: string;
1487
- signature: string;
1488
- };
1489
- handshake: string;
1490
- handshakeAttestation: {
1491
- codeHash: string;
1492
- attestationPub: string;
1493
- certificate: string;
1494
- signature: string;
1495
- };
1496
- u2fRegisterData: string;
1497
- ciphertext: string;
1498
- requestId: string;
1499
- };
1500
- registrationResponse: {
1501
- certificate: {
1502
- codeHash: string;
1503
- attestationPub: string;
1504
- certificate: string;
1505
- signature: string;
1506
- };
1507
- u2fRegister: string;
1508
- u2fKeyHandle: string;
1509
- registerData: string;
1510
- validationKey: string;
1511
- pairingPayload: string;
1512
- } | null;
1513
- role: "SHARED_OWNER";
1514
- review: {
1515
- seedChallenge: {
1516
- challengeType: "PSD";
1517
- wActions: string[];
1518
- handshake: string;
1519
- handshakeAttestation: {
1520
- codeHash: string;
1521
- attestationPub: string;
1522
- certificate: string;
1523
- signature: string;
1524
- };
1525
- partitionId: string;
1526
- kkHandshake: string;
1527
- kkHandshakeAttestation: {
1528
- codeHash: string;
1529
- attestationPub: string;
1530
- certificate: string;
1531
- signature: string;
1532
- };
1533
- ephemeralPublicKey: string;
1534
- certificate: {
1535
- codeHash: string;
1536
- attestationPub: string;
1537
- certificate: string;
1538
- signature: string;
1539
- };
1540
- blob: string;
1541
- };
1542
- seedFragment: {
1543
- approverBlob: string;
1544
- challengeResponse: string;
1545
- handshake: string;
1546
- handshakeAttestation: {
1547
- codeHash: string;
1548
- attestationPub: string;
1549
- certificate: string;
1550
- signature: string;
1551
- };
1552
- } | null;
1553
- } | null;
1554
- }[];
1555
- createdAt: Date;
1556
- completedAt: Date | null;
1557
- }>;
1558
- /**
1559
- * Onboarding completed
1560
- */
1561
- readonly COMPLETED: ({ state }: {
1562
- engine: Engine<WithOnboarding>;
1563
- state: OnboardingFullStateResponse;
1564
- }) => Promise<{
1565
- id: string;
1566
- workspaceName: string;
1567
- step: "PENDING_DEVICE_CLAIMS" | "PENDING_WRAPPING_KEY_PROVISIONING" | "PENDING_MASTER_ADMINS_REGISTRATION_INIT" | "PENDING_MASTER_ADMINS_REGISTRATION" | "PENDING_SHARED_OWNERS_REGISTRATION_INIT" | "PENDING_SHARED_OWNERS_REGISTRATION" | "PENDING_REVIEW_BY_MASTER_ADMINS" | "PENDING_SEED_PROVISIONING" | "PENDING_WORKSPACE_INITIALIZATION" | "COMPLETED";
1568
- claimedDevices: {
1569
- pubKey: string;
1570
- deviceUserId: string;
1571
- deviceName: string;
1572
- role: "WRAPPING_KEY_OWNER" | "SHARED_OWNER" | "MASTER_ADMIN";
1573
- }[];
1574
- wrappingKey: {
1575
- ephemeralPubKey: string;
1576
- ephemeralCertificate: {
1577
- codeHash: string;
1578
- attestationPub: string;
1579
- certificate: string;
1580
- signature: string;
1581
- };
1582
- fragments: {
1583
- pubKey: string;
1584
- ephemeralPubKey: string;
1585
- ephemeralCertificate: {
1586
- codeHash: string;
1587
- attestationPub: string;
1588
- certificate: string;
1589
- signature: string;
1590
- };
1591
- blob: string;
1592
- }[];
1728
+ } | null;
1729
+ }[];
1730
+ createdAt: Date;
1731
+ completedAt: Date | null;
1732
+ }>;
1733
+ /**
1734
+ * Workspace initialization
1735
+ */
1736
+ readonly PENDING_WORKSPACE_INITIALIZATION: ({
1737
+ state,
1738
+ engine
1739
+ }: {
1740
+ engine: Engine<WithOnboarding>;
1741
+ state: OnboardingFullStateResponse;
1742
+ externalSigners?: string[];
1743
+ }) => Promise<{
1744
+ id: string;
1745
+ workspaceName: string;
1746
+ hsmHostingMode: "HOSTED" | "ON_PREM";
1747
+ step: "COMPLETED" | "PENDING_DEVICE_CLAIMS" | "PENDING_EXTERNAL_SIGNERS_REGISTRATION" | "PENDING_MASTER_ADMINS_REGISTRATION" | "PENDING_MASTER_ADMINS_REGISTRATION_INIT" | "PENDING_REVIEW_BY_MASTER_ADMINS" | "PENDING_SEED_PROVISIONING" | "PENDING_SHARED_OWNERS_REGISTRATION" | "PENDING_SHARED_OWNERS_REGISTRATION_INIT" | "PENDING_WORKSPACE_INITIALIZATION" | "PENDING_WRAPPING_KEY_PROVISIONING";
1748
+ claimedDevices: {
1749
+ pubKey: string;
1750
+ deviceUserId: string;
1751
+ deviceName: string;
1752
+ role: "MASTER_ADMIN" | "SHARED_OWNER" | "WRAPPING_KEY_OWNER";
1753
+ }[];
1754
+ wrappingKey: {
1755
+ ephemeralPubKey: string;
1756
+ ephemeralCertificate: {
1757
+ codeHash: string;
1758
+ attestationPub: string;
1759
+ certificate: string;
1760
+ signature: string;
1761
+ };
1762
+ fragments: {
1763
+ pubKey: string;
1764
+ ephemeralPubKey: string;
1765
+ ephemeralCertificate: {
1766
+ codeHash: string;
1767
+ attestationPub: string;
1768
+ certificate: string;
1769
+ signature: string;
1770
+ };
1771
+ blob: string;
1772
+ }[];
1773
+ } | null;
1774
+ masterAdmins: {
1775
+ name: string;
1776
+ psdModel: "BLUE" | "STAX";
1777
+ pubKey: string;
1778
+ registrationChallenge: {
1779
+ challenge: string;
1780
+ ephemeralPublicKey: string;
1781
+ ephemeralPublicKeyAttestation: {
1782
+ codeHash: string;
1783
+ attestationPub: string;
1784
+ certificate: string;
1785
+ signature: string;
1786
+ };
1787
+ handshake: string;
1788
+ handshakeAttestation: {
1789
+ codeHash: string;
1790
+ attestationPub: string;
1791
+ certificate: string;
1792
+ signature: string;
1793
+ };
1794
+ u2fRegisterData: string;
1795
+ ciphertext: string;
1796
+ requestId: string;
1797
+ };
1798
+ registrationResponse: {
1799
+ certificate: {
1800
+ codeHash: string;
1801
+ attestationPub: string;
1802
+ certificate: string;
1803
+ signature: string;
1804
+ };
1805
+ u2fRegister: string;
1806
+ u2fKeyHandle: string;
1807
+ registerData: string;
1808
+ validationKey: string;
1809
+ pairingPayload: string;
1810
+ } | null;
1811
+ role: "MASTER_ADMIN";
1812
+ review: {
1813
+ challenge: {
1814
+ challengeType: "PSD";
1815
+ wActions: string[];
1816
+ handshake: string;
1817
+ handshakeAttestation: {
1818
+ codeHash: string;
1819
+ attestationPub: string;
1820
+ certificate: string;
1821
+ signature: string;
1822
+ };
1823
+ partitionId: string;
1824
+ };
1825
+ signature: string | null;
1826
+ } | null;
1827
+ reviewOfExternalSigners: {
1828
+ challenge: {
1829
+ challengeType: "PSD";
1830
+ wActions: string[];
1831
+ handshake: string;
1832
+ handshakeAttestation: {
1833
+ codeHash: string;
1834
+ attestationPub: string;
1835
+ certificate: string;
1836
+ signature: string;
1837
+ };
1838
+ partitionId: string;
1839
+ };
1840
+ signature: string | null;
1841
+ } | null;
1842
+ }[];
1843
+ sharedOwners: {
1844
+ name: string;
1845
+ psdModel: "BLUE" | "STAX";
1846
+ pubKey: string;
1847
+ registrationChallenge: {
1848
+ challenge: string;
1849
+ ephemeralPublicKey: string;
1850
+ ephemeralPublicKeyAttestation: {
1851
+ codeHash: string;
1852
+ attestationPub: string;
1853
+ certificate: string;
1854
+ signature: string;
1855
+ };
1856
+ handshake: string;
1857
+ handshakeAttestation: {
1858
+ codeHash: string;
1859
+ attestationPub: string;
1860
+ certificate: string;
1861
+ signature: string;
1862
+ };
1863
+ u2fRegisterData: string;
1864
+ ciphertext: string;
1865
+ requestId: string;
1866
+ };
1867
+ registrationResponse: {
1868
+ certificate: {
1869
+ codeHash: string;
1870
+ attestationPub: string;
1871
+ certificate: string;
1872
+ signature: string;
1873
+ };
1874
+ u2fRegister: string;
1875
+ u2fKeyHandle: string;
1876
+ registerData: string;
1877
+ validationKey: string;
1878
+ pairingPayload: string;
1879
+ } | null;
1880
+ role: "SHARED_OWNER";
1881
+ review: {
1882
+ seedChallenge: {
1883
+ challengeType: "PSD";
1884
+ wActions: string[];
1885
+ handshake: string;
1886
+ handshakeAttestation: {
1887
+ codeHash: string;
1888
+ attestationPub: string;
1889
+ certificate: string;
1890
+ signature: string;
1891
+ };
1892
+ partitionId: string;
1893
+ kkHandshake: string;
1894
+ kkHandshakeAttestation: {
1895
+ codeHash: string;
1896
+ attestationPub: string;
1897
+ certificate: string;
1898
+ signature: string;
1899
+ };
1900
+ ephemeralPublicKey: string;
1901
+ certificate: {
1902
+ codeHash: string;
1903
+ attestationPub: string;
1904
+ certificate: string;
1905
+ signature: string;
1906
+ };
1907
+ blob: string;
1908
+ };
1909
+ seedFragment: {
1910
+ approverBlob: string;
1911
+ challengeResponse: string;
1912
+ handshake: string;
1913
+ handshakeAttestation: {
1914
+ codeHash: string;
1915
+ attestationPub: string;
1916
+ certificate: string;
1917
+ signature: string;
1918
+ };
1593
1919
  } | null;
1594
- masterAdmins: {
1595
- name: string;
1596
- psdModel: "BLUE" | "STAX";
1597
- pubKey: string;
1598
- registrationChallenge: {
1599
- challenge: string;
1600
- ephemeralPublicKey: string;
1601
- ephemeralPublicKeyAttestation: {
1602
- codeHash: string;
1603
- attestationPub: string;
1604
- certificate: string;
1605
- signature: string;
1606
- };
1607
- handshake: string;
1608
- handshakeAttestation: {
1609
- codeHash: string;
1610
- attestationPub: string;
1611
- certificate: string;
1612
- signature: string;
1613
- };
1614
- u2fRegisterData: string;
1615
- ciphertext: string;
1616
- requestId: string;
1617
- };
1618
- registrationResponse: {
1619
- certificate: {
1620
- codeHash: string;
1621
- attestationPub: string;
1622
- certificate: string;
1623
- signature: string;
1624
- };
1625
- u2fRegister: string;
1626
- u2fKeyHandle: string;
1627
- registerData: string;
1628
- validationKey: string;
1629
- pairingPayload: string;
1630
- } | null;
1631
- role: "MASTER_ADMIN";
1632
- review: {
1633
- challenge: {
1634
- challengeType: "PSD";
1635
- wActions: string[];
1636
- handshake: string;
1637
- handshakeAttestation: {
1638
- codeHash: string;
1639
- attestationPub: string;
1640
- certificate: string;
1641
- signature: string;
1642
- };
1643
- partitionId: string;
1644
- };
1645
- signature: string | null;
1646
- } | null;
1647
- }[];
1648
- sharedOwners: {
1649
- name: string;
1650
- psdModel: "BLUE" | "STAX";
1651
- pubKey: string;
1652
- registrationChallenge: {
1653
- challenge: string;
1654
- ephemeralPublicKey: string;
1655
- ephemeralPublicKeyAttestation: {
1656
- codeHash: string;
1657
- attestationPub: string;
1658
- certificate: string;
1659
- signature: string;
1660
- };
1661
- handshake: string;
1662
- handshakeAttestation: {
1663
- codeHash: string;
1664
- attestationPub: string;
1665
- certificate: string;
1666
- signature: string;
1667
- };
1668
- u2fRegisterData: string;
1669
- ciphertext: string;
1670
- requestId: string;
1671
- };
1672
- registrationResponse: {
1673
- certificate: {
1674
- codeHash: string;
1675
- attestationPub: string;
1676
- certificate: string;
1677
- signature: string;
1678
- };
1679
- u2fRegister: string;
1680
- u2fKeyHandle: string;
1681
- registerData: string;
1682
- validationKey: string;
1683
- pairingPayload: string;
1684
- } | null;
1685
- role: "SHARED_OWNER";
1686
- review: {
1687
- seedChallenge: {
1688
- challengeType: "PSD";
1689
- wActions: string[];
1690
- handshake: string;
1691
- handshakeAttestation: {
1692
- codeHash: string;
1693
- attestationPub: string;
1694
- certificate: string;
1695
- signature: string;
1696
- };
1697
- partitionId: string;
1698
- kkHandshake: string;
1699
- kkHandshakeAttestation: {
1700
- codeHash: string;
1701
- attestationPub: string;
1702
- certificate: string;
1703
- signature: string;
1704
- };
1705
- ephemeralPublicKey: string;
1706
- certificate: {
1707
- codeHash: string;
1708
- attestationPub: string;
1709
- certificate: string;
1710
- signature: string;
1711
- };
1712
- blob: string;
1713
- };
1714
- seedFragment: {
1715
- approverBlob: string;
1716
- challengeResponse: string;
1717
- handshake: string;
1718
- handshakeAttestation: {
1719
- codeHash: string;
1720
- attestationPub: string;
1721
- certificate: string;
1722
- signature: string;
1723
- };
1724
- } | null;
1725
- } | null;
1726
- }[];
1727
- createdAt: Date;
1728
- completedAt: Date | null;
1729
- }>;
1920
+ } | null;
1921
+ }[];
1922
+ createdAt: Date;
1923
+ completedAt: Date | null;
1924
+ }>;
1730
1925
  };
1731
- declare function onboard({ engine, untilStep, }: {
1732
- engine: Engine<WithOnboarding>;
1733
- untilStep?: OnboardingStep;
1926
+ declare function onboard(opts: {
1927
+ engine: Engine<WithOnboarding>;
1928
+ externalSigners?: string[];
1929
+ untilStep?: OnboardingStep;
1734
1930
  }, logger: Logger): Promise<void>;
1735
-
1736
- export { STEPS, onboard };
1931
+ //#endregion
1932
+ export { STEPS, onboard };