@matter/types 0.16.0-alpha.0-20251022-5a69ce65a → 0.16.0-alpha.0-20251027-17770fb28

package/dist/cjs/clusters/operational-credentials.d.ts

@@ -11,10 +11,19 @@ import { TypeFromSchema } from "../tlv/TlvSchema.js";
 import { Identity } from "#general";
 export declare namespace OperationalCredentials {
     /**
-     * This encodes a fabric sensitive NOC chain, underpinning a commissioned Operational Identity for a given Node.
+     * This encodes a NOC chain, underpinning a commissioned Operational Identity for a given Node.
      *
-     * Note that the Trusted Root CA Certificate is not included in this structure. The roots are available in the
-     * TrustedRootCertificates attribute of the Node Operational Credentials cluster.
+     * > [!NOTE]
+     *
+     * > The VVSC field is mutually exclusive with the ICAC field. If the ICAC field is non-null, the VVSC field shall
+     *   be omitted. If the VVSC field is present in the structure, the ICAC field shall be null. The reason for this is
+     *   to optimize storage usage, as the VID Verification Signer Certificate (VVSC) is a field that is only needed in
+     *   root-per-fabric situations without ICAC present.
+     *
+     * > [!NOTE]
+     *
+     * > The Trusted Root CA Certificate (RCAC) is not included in this structure. The roots are available in the
+     *   TrustedRootCertificates attribute under the same associated fabric as the one for the NOCStruct entry.
      *
      * @see {@link MatterSpecification.v141.Core} § 11.18.4.4
      */
@@ -27,19 +36,37 @@ export declare namespace OperationalCredentials {
          */
         noc: import("../tlv/TlvObject.js").FieldType<AllowSharedBufferSource>;
         /**
-         * This field shall contain the ICAC or the struct’s associated fabric, encoded using Matter Certificate
+         * This field shall contain the ICAC for the struct’s associated fabric, encoded using Matter Certificate
          * Encoding. If no ICAC is present in the chain, this field shall be set to null.
          *
          * @see {@link MatterSpecification.v141.Core} § 11.18.4.4.2
          */
         icac: import("../tlv/TlvObject.js").FieldType<AllowSharedBufferSource | null>;
+        /**
+         * This field shall contain the Vendor Verification Signer Certificate (VVSC) for the struct’s associated
+         * fabric, encoded using Matter Certificate Encoding. If no VVSC is needed, this field shall be omitted (in that
+         * there shall NOT be a value present, not even an empty octet string). If the ICAC field is non-null, this
+         * field shall NOT be present.
+         *
+         * @see {@link MatterSpecification.v141.Core} § 11.18.4.4.3
+         */
+        vvsc: import("../tlv/TlvObject.js").OptionalFieldType<AllowSharedBufferSource>;
         fabricIndex: import("../tlv/TlvObject.js").FieldType<FabricIndex>;
     }>;
     /**
-     * This encodes a fabric sensitive NOC chain, underpinning a commissioned Operational Identity for a given Node.
+     * This encodes a NOC chain, underpinning a commissioned Operational Identity for a given Node.
+     *
+     * > [!NOTE]
+     *
+     * > The VVSC field is mutually exclusive with the ICAC field. If the ICAC field is non-null, the VVSC field shall
+     *   be omitted. If the VVSC field is present in the structure, the ICAC field shall be null. The reason for this is
+     *   to optimize storage usage, as the VID Verification Signer Certificate (VVSC) is a field that is only needed in
+     *   root-per-fabric situations without ICAC present.
      *
-     * Note that the Trusted Root CA Certificate is not included in this structure. The roots are available in the
-     * TrustedRootCertificates attribute of the Node Operational Credentials cluster.
+     * > [!NOTE]
+     *
+     * > The Trusted Root CA Certificate (RCAC) is not included in this structure. The roots are available in the
+     *   TrustedRootCertificates attribute under the same associated fabric as the one for the NOCStruct entry.
      *
      * @see {@link MatterSpecification.v141.Core} § 11.18.4.4
      */
@@ -61,14 +88,16 @@ export declare namespace OperationalCredentials {
          */
         rootPublicKey: import("../tlv/TlvObject.js").FieldType<AllowSharedBufferSource>;
         /**
-         * This field shall contain the value of AdminVendorID provided in the AddNOC command that led to the creation
-         * of this FabricDescriptorStruct. The set of allowed values is defined in AdminVendorID.
+         * This field shall contain the value of VendorID associated with the fabric.
+         *
+         * This value shall have been provided by the AdminVendorID value provided in the AddNOC command that led to the
+         * creation of this FabricDescriptorStruct, or the value updated via the SetVIDVerificationStatement command,
+         * whichever was last completed. The set of allowed values is defined in AdminVendorID.
          *
-         * The intent is to provide some measure of user transparency about which entities have Administer privileges on
-         * the Node.
+         * The intent is to provide user transparency about which entities have Administer privileges on the Node.
          *
-         * Clients shall consider the VendorID field value to be untrustworthy until the NOC chain associated with the
-         * fabric has passed the Vendor ID Validation Procedure against the associated RCAC.
+         * Clients shall consider the VendorID field value to be untrustworthy until the Fabric Table Vendor ID
+         * Verification Procedure has been executed against the fabric entry having this VendorID.
          *
          * @see {@link MatterSpecification.v141.Core} § 11.18.4.5.2
          */
@@ -90,12 +119,20 @@ export declare namespace OperationalCredentials {
          */
         nodeId: import("../tlv/TlvObject.js").FieldType<import("../datatype/NodeId.js").NodeId>;
         /**
-         * This field shall contain a commissioner-set label for the fabric referenced by FabricIndex. This label is set
+         * This field shall contain a commissioner-set label for the fabric referenced by FabricIndex. This field is set
          * by the UpdateFabricLabel command.
          *
          * @see {@link MatterSpecification.v141.Core} § 11.18.4.5.5
          */
         label: import("../tlv/TlvObject.js").FieldType<string>;
+        /**
+         * This field, if present, shall contain a previously-installed administrator-set vid_verification_statement
+         * value (see Section 6.4.10, “Fabric Table Vendor ID Verification Procedure”) for the fabric referenced by
+         * FabricIndex. This field is set by the SetVIDVerificationStatement command.
+         *
+         * @see {@link MatterSpecification.v141.Core} § 11.18.4.5.6
+         */
+        vidVerificationStatement: import("../tlv/TlvObject.js").OptionalFieldType<AllowSharedBufferSource>;
         fabricIndex: import("../tlv/TlvObject.js").FieldType<FabricIndex>;
     }>;
     /**
@@ -121,7 +158,8 @@ export declare namespace OperationalCredentials {
     interface AttestationRequest extends TypeFromSchema<typeof TlvAttestationRequest> {
     }
     /**
-     * This command shall be generated in response to an Attestation Request command.
+     * This command is used to report the results of the AttestationRequest command. This command shall be generated in
+     * response to an Attestation Request command.
      *
      * See Section 11.18.4.7, “Attestation Information” for details about the generation of the fields within this
      * response command.
@@ -146,7 +184,8 @@ export declare namespace OperationalCredentials {
         attestationSignature: import("../tlv/TlvObject.js").FieldType<AllowSharedBufferSource>;
     }>;
     /**
-     * This command shall be generated in response to an Attestation Request command.
+     * This command is used to report the results of the AttestationRequest command. This command shall be generated in
+     * response to an Attestation Request command.
      *
      * See Section 11.18.4.7, “Attestation Information” for details about the generation of the fields within this
      * response command.
@@ -189,7 +228,8 @@ export declare namespace OperationalCredentials {
     interface CertificateChainRequest extends TypeFromSchema<typeof TlvCertificateChainRequest> {
     }
     /**
-     * This command shall be generated in response to a CertificateChainRequest command.
+     * This command is used to report the results of the CertificateChainRequest command. This command shall be
+     * generated in response to a CertificateChainRequest command.
      *
      * @see {@link MatterSpecification.v141.Core} § 11.18.6.4
      */
@@ -203,7 +243,8 @@ export declare namespace OperationalCredentials {
         certificate: import("../tlv/TlvObject.js").FieldType<AllowSharedBufferSource>;
     }>;
     /**
-     * This command shall be generated in response to a CertificateChainRequest command.
+     * This command is used to report the results of the CertificateChainRequest command. This command shall be
+     * generated in response to a CertificateChainRequest command.
      *
      * @see {@link MatterSpecification.v141.Core} § 11.18.6.4
      */
@@ -226,7 +267,8 @@ export declare namespace OperationalCredentials {
     interface CsrRequest extends TypeFromSchema<typeof TlvCsrRequest> {
     }
     /**
-     * This command shall be generated in response to a CSRRequest Command.
+     * This command is used to report the results of the CSRRequest command. This command shall be generated in response
+     * to a CSRRequest Command.
      *
      * See Section 11.18.4.9, “NOCSR Information” for details about the generation of the fields within this response
      * command.
@@ -251,7 +293,8 @@ export declare namespace OperationalCredentials {
         attestationSignature: import("../tlv/TlvObject.js").FieldType<AllowSharedBufferSource>;
     }>;
     /**
-     * This command shall be generated in response to a CSRRequest Command.
+     * This command is used to report the results of the CSRRequest command. This command shall be generated in response
+     * to a CSRRequest Command.
      *
      * See Section 11.18.4.9, “NOCSR Information” for details about the generation of the fields within this response
      * command.
@@ -287,7 +330,7 @@ export declare namespace OperationalCredentials {
         ipkValue: import("../tlv/TlvObject.js").FieldType<AllowSharedBufferSource>;
         /**
          * If the AddNOC command succeeds according to the semantics of the following subsections, then the Access
-         * Control SubjectID shall be used to atomically add an Access Control Entry enabling that Subject to
+         * Control subject-id shall be used to atomically add an Access Control Entry enabling that Subject to
          * subsequently administer the Node whose operational identity is being added by this command.
          *
          * The format of the new Access Control Entry, created from this, shall be:
@@ -310,10 +353,10 @@ export declare namespace OperationalCredentials {
          * This field shall be set to the Vendor ID of the entity issuing the AddNOC command. This value shall NOT be
          * one of the reserved Vendor ID values defined in Table 1, “Vendor ID Allocations”.
          *
-         * ### Effect When Received
+         * ### Effect on Receipt
          *
-         * If this command is received without an armed fail-safe context (see ArmFailSafe), then this command shall
-         * fail with a FAILSAFE_REQUIRED status code sent back to the initiator.
+         * If this command is received without an armed fail-safe context (see Section 11.10.7.2, “ArmFailSafe
+         * Command”), then this command shall fail with a FAILSAFE_REQUIRED status code sent back to the initiator.
          *
          * If a prior UpdateNOC or AddNOC command was successfully executed within the fail-safe timer period, then this
          * command shall fail with a CONSTRAINT_ERROR status code sent back to the initiator.
@@ -378,10 +421,10 @@ export declare namespace OperationalCredentials {
          *        new FabricIndex may be added to the ARL attribute.
          *
          *   8. The incoming IPKValue shall be stored in the Fabric-scoped slot within the Group Key Management cluster
-         *      (see KeySetWrite), for subsequent use during CASE.
+         *      (see Section 11.2.7.1, “KeySetWrite Command”), for subsequent use during CASE.
          *
-         *   9. The Fabric Index associated with the armed fail-safe context (see ArmFailSafe) shall be updated to match
-         *      the Fabric Index just allocated.
+         *   9. The Fabric Index associated with the armed fail-safe context (see Section 11.10.7.2, “ArmFailSafe
+         *      Command”) shall be updated to match the Fabric Index just allocated.
          *
          *   10. If the current secure session was established with PASE, the receiver shall:
          *
@@ -455,6 +498,8 @@ export declare namespace OperationalCredentials {
         InvalidFabricIndex = 11
     }
     /**
+     * This command is used to report the results of the AddNOC, UpdateNOC, UpdateFabricLabel and RemoveFabric commands.
+     *
      * This command shall be generated in response to the following commands:
      *
      *   • AddNOC
@@ -477,8 +522,7 @@ export declare namespace OperationalCredentials {
          */
         statusCode: import("../tlv/TlvObject.js").FieldType<NodeOperationalCertStatus>;
         /**
-         * This field shall be present whenever StatusCode has a value of OK. If present, it shall contain the Fabric
-         * Index of the Fabric last added, removed or updated.
+         * If present, it shall contain the Fabric Index of the Fabric last added, removed or updated.
          *
          * @see {@link MatterSpecification.v141.Core} § 11.18.6.10.2
          */
@@ -493,6 +537,8 @@ export declare namespace OperationalCredentials {
         debugText: import("../tlv/TlvObject.js").OptionalFieldType<string>;
     }>;
     /**
+     * This command is used to report the results of the AddNOC, UpdateNOC, UpdateFabricLabel and RemoveFabric commands.
+     *
      * This command shall be generated in response to the following commands:
      *
      *   • AddNOC
@@ -568,8 +614,8 @@ export declare namespace OperationalCredentials {
      */
     const TlvRemoveFabricRequest: import("../tlv/TlvObject.js").ObjectSchema<{
         /**
-         * This field shall contain the Fabric Index reference (see fabric-index) associated with the Fabric which is to
-         * be removed from the device.
+         * This field shall contain the Fabric Index reference (see Section 7.19.2.23, “Fabric Index Type”) associated
+         * with the Fabric which is to be removed from the device.
          *
          * ### Effect on Receipt
          *
@@ -634,16 +680,134 @@ export declare namespace OperationalCredentials {
      */
     interface AddTrustedRootCertificateRequest extends TypeFromSchema<typeof TlvAddTrustedRootCertificateRequest> {
     }
+    /**
+     * Input to the OperationalCredentials setVidVerificationStatement command
+     *
+     * @see {@link MatterSpecification.v141.Core} § 11.18.6.14
+     */
+    const TlvSetVidVerificationStatementRequest: import("../tlv/TlvObject.js").ObjectSchema<{
+        vendorId: import("../tlv/TlvObject.js").OptionalFieldType<import("../datatype/VendorId.js").VendorId>;
+        vidVerificationStatement: import("../tlv/TlvObject.js").OptionalFieldType<AllowSharedBufferSource>;
+        vvsc: import("../tlv/TlvObject.js").OptionalFieldType<AllowSharedBufferSource>;
+    }>;
+    /**
+     * Input to the OperationalCredentials setVidVerificationStatement command
+     *
+     * @see {@link MatterSpecification.v141.Core} § 11.18.6.14
+     */
+    interface SetVidVerificationStatementRequest extends TypeFromSchema<typeof TlvSetVidVerificationStatementRequest> {
+    }
+    /**
+     * Input to the OperationalCredentials signVidVerificationRequest command
+     *
+     * @see {@link MatterSpecification.v141.Core} § 11.18.6.15
+     */
+    const TlvSignVidVerificationRequest: import("../tlv/TlvObject.js").ObjectSchema<{
+        fabricIndex: import("../tlv/TlvObject.js").FieldType<FabricIndex>;
+        clientChallenge: import("../tlv/TlvObject.js").FieldType<AllowSharedBufferSource>;
+    }>;
+    /**
+     * Input to the OperationalCredentials signVidVerificationRequest command
+     *
+     * @see {@link MatterSpecification.v141.Core} § 11.18.6.15
+     */
+    interface SignVidVerificationRequest extends TypeFromSchema<typeof TlvSignVidVerificationRequest> {
+    }
+    /**
+     * This command is used to report the results of the SignVIDVerificationRequest command. This command shall contain
+     * the response of the SignVIDVerificationRequest, computed as described below.
+     *
+     * The FabricIndex field shall contain the same value of FabricIndex as the value from the associated
+     * SignVIDVerificationRequest.
+     *
+     * The FabricBindingVersion field shall contain value 0x01 for version 1.0 of the Matter Cryptographic Primitives.
+     *
+     * The Signature field shall contain the octet string result of CryptoSign(noc_private_key,
+     * vendor_id_verification_tbs):
+     *
+     *   • noc_private_key is the operational private key associated with the Node Operational Key Pair for the
+     *     FabricIndex requested in the associated SignVIDVerificationRequest.
+     *
+     *   • vendor_id_verification_tbs := fabric_binding_version || client_challenge || attestation_challenge ||
+     *     fabric_index || vendor_fabric_binding_message || <vid_verification_statement>
+     *
+     *     ◦ fabric_binding_version is the value from the FabricBindingVersion field of this
+     *       SignVIDVerificationResponse.
+     *
+     *     ◦ client_challenge is the 32-octet ClientChallenge from the SignVIDVerificationRequest.
+     *
+     *     ◦ attestation_challenge is the AttestationChallenge from a CASE session, resumed CASE session, or PASE
+     *       session depending on the method used to establish the current secure session context over which the
+     *       response will be sent.
+     *
+     *     ◦ fabric_index is the 1-octet value of FabricIndex from the SignVIDVerificationRequest.
+     *
+     *     ◦ vendor_fabric_binding_message is the octet string of the vendor_fabric_binding_message defined in Section
+     *       6.4.10.1, “Algorithm”.
+     *
+     *     ◦ vid_verification_statement is the 85-octet (for cryptographic primitives mapping 1.0) value from the
+     *       VIDVerificationStatement field of the entry in the Fabrics attribute associated with the fabric_index, if
+     *       present. If there is no such field in the Fabrics attribute for the fabric_index specified, this field
+     *       shall be omitted from the vendor_id_verification_tbs message.
+     *
+     * @see {@link MatterSpecification.v141.Core} § 11.18.6.16
+     */
+    const TlvSignVidVerificationResponse: import("../tlv/TlvObject.js").ObjectSchema<{
+        fabricIndex: import("../tlv/TlvObject.js").FieldType<FabricIndex>;
+        fabricBindingVersion: import("../tlv/TlvObject.js").FieldType<number>;
+        signature: import("../tlv/TlvObject.js").FieldType<AllowSharedBufferSource>;
+    }>;
+    /**
+     * This command is used to report the results of the SignVIDVerificationRequest command. This command shall contain
+     * the response of the SignVIDVerificationRequest, computed as described below.
+     *
+     * The FabricIndex field shall contain the same value of FabricIndex as the value from the associated
+     * SignVIDVerificationRequest.
+     *
+     * The FabricBindingVersion field shall contain value 0x01 for version 1.0 of the Matter Cryptographic Primitives.
+     *
+     * The Signature field shall contain the octet string result of CryptoSign(noc_private_key,
+     * vendor_id_verification_tbs):
+     *
+     *   • noc_private_key is the operational private key associated with the Node Operational Key Pair for the
+     *     FabricIndex requested in the associated SignVIDVerificationRequest.
+     *
+     *   • vendor_id_verification_tbs := fabric_binding_version || client_challenge || attestation_challenge ||
+     *     fabric_index || vendor_fabric_binding_message || <vid_verification_statement>
+     *
+     *     ◦ fabric_binding_version is the value from the FabricBindingVersion field of this
+     *       SignVIDVerificationResponse.
+     *
+     *     ◦ client_challenge is the 32-octet ClientChallenge from the SignVIDVerificationRequest.
+     *
+     *     ◦ attestation_challenge is the AttestationChallenge from a CASE session, resumed CASE session, or PASE
+     *       session depending on the method used to establish the current secure session context over which the
+     *       response will be sent.
+     *
+     *     ◦ fabric_index is the 1-octet value of FabricIndex from the SignVIDVerificationRequest.
+     *
+     *     ◦ vendor_fabric_binding_message is the octet string of the vendor_fabric_binding_message defined in Section
+     *       6.4.10.1, “Algorithm”.
+     *
+     *     ◦ vid_verification_statement is the 85-octet (for cryptographic primitives mapping 1.0) value from the
+     *       VIDVerificationStatement field of the entry in the Fabrics attribute associated with the fabric_index, if
+     *       present. If there is no such field in the Fabrics attribute for the fabric_index specified, this field
+     *       shall be omitted from the vendor_id_verification_tbs message.
+     *
+     * @see {@link MatterSpecification.v141.Core} § 11.18.6.16
+     */
+    interface SignVidVerificationResponse extends TypeFromSchema<typeof TlvSignVidVerificationResponse> {
+    }
     /**
      * @see {@link Cluster}
      */
     const ClusterInstance: MutableCluster<{
         readonly id: 62;
         readonly name: "OperationalCredentials";
-        readonly revision: 1;
+        readonly revision: 2;
         readonly attributes: {
             /**
-             * This attribute contains all NOCs applicable to this Node, encoded as a read-only list of NOCStruct.
+             * This attribute shall contain all NOCs applicable to this Node, encoded as a read-only list of NOCStruct.
              *
              * Operational Certificates shall be added through the AddNOC command, and shall be removed through the
              * RemoveFabric command.
@@ -663,18 +827,29 @@ export declare namespace OperationalCredentials {
                  */
                 noc: import("../tlv/TlvObject.js").FieldType<AllowSharedBufferSource>;
                 /**
-                 * This field shall contain the ICAC or the struct’s associated fabric, encoded using Matter Certificate
+                 * This field shall contain the ICAC for the struct’s associated fabric, encoded using Matter Certificate
                  * Encoding. If no ICAC is present in the chain, this field shall be set to null.
                  *
                  * @see {@link MatterSpecification.v141.Core} § 11.18.4.4.2
                  */
                 icac: import("../tlv/TlvObject.js").FieldType<AllowSharedBufferSource | null>;
+                /**
+                 * This field shall contain the Vendor Verification Signer Certificate (VVSC) for the struct’s associated
+                 * fabric, encoded using Matter Certificate Encoding. If no VVSC is needed, this field shall be omitted (in that
+                 * there shall NOT be a value present, not even an empty octet string). If the ICAC field is non-null, this
+                 * field shall NOT be present.
+                 *
+                 * @see {@link MatterSpecification.v141.Core} § 11.18.4.4.3
+                 */
+                vvsc: import("../tlv/TlvObject.js").OptionalFieldType<AllowSharedBufferSource>;
                 fabricIndex: import("../tlv/TlvObject.js").FieldType<FabricIndex>;
             }>[], any>;
             /**
-             * This attribute describes all fabrics to which this Node is commissioned, encoded as a read-only list of
+             * Indicates all fabrics to which this Node is commissioned, encoded as a read-only list of
              * FabricDescriptorStruct. This information may be computed directly from the NOCs attribute.
              *
+             * The Fabrics attribute is also known as "the fabric table".
+             *
              * Upon Factory Data Reset, this attribute shall be set to a default value of an empty list.
              *
              * The number of entries in this list shall match the number of entries in the NOCs attribute.
@@ -692,14 +867,16 @@ export declare namespace OperationalCredentials {
                  */
                 rootPublicKey: import("../tlv/TlvObject.js").FieldType<AllowSharedBufferSource>;
                 /**
-                 * This field shall contain the value of AdminVendorID provided in the AddNOC command that led to the creation
-                 * of this FabricDescriptorStruct. The set of allowed values is defined in AdminVendorID.
+                 * This field shall contain the value of VendorID associated with the fabric.
                  *
-                 * The intent is to provide some measure of user transparency about which entities have Administer privileges on
-                 * the Node.
+                 * This value shall have been provided by the AdminVendorID value provided in the AddNOC command that led to the
+                 * creation of this FabricDescriptorStruct, or the value updated via the SetVIDVerificationStatement command,
+                 * whichever was last completed. The set of allowed values is defined in AdminVendorID.
                  *
-                 * Clients shall consider the VendorID field value to be untrustworthy until the NOC chain associated with the
-                 * fabric has passed the Vendor ID Validation Procedure against the associated RCAC.
+                 * The intent is to provide user transparency about which entities have Administer privileges on the Node.
+                 *
+                 * Clients shall consider the VendorID field value to be untrustworthy until the Fabric Table Vendor ID
+                 * Verification Procedure has been executed against the fabric entry having this VendorID.
                  *
                  * @see {@link MatterSpecification.v141.Core} § 11.18.4.5.2
                  */
@@ -721,24 +898,32 @@ export declare namespace OperationalCredentials {
                  */
                 nodeId: import("../tlv/TlvObject.js").FieldType<import("../datatype/NodeId.js").NodeId>;
                 /**
-                 * This field shall contain a commissioner-set label for the fabric referenced by FabricIndex. This label is set
+                 * This field shall contain a commissioner-set label for the fabric referenced by FabricIndex. This field is set
                  * by the UpdateFabricLabel command.
                  *
                  * @see {@link MatterSpecification.v141.Core} § 11.18.4.5.5
                  */
                 label: import("../tlv/TlvObject.js").FieldType<string>;
+                /**
+                 * This field, if present, shall contain a previously-installed administrator-set vid_verification_statement
+                 * value (see Section 6.4.10, “Fabric Table Vendor ID Verification Procedure”) for the fabric referenced by
+                 * FabricIndex. This field is set by the SetVIDVerificationStatement command.
+                 *
+                 * @see {@link MatterSpecification.v141.Core} § 11.18.4.5.6
+                 */
+                vidVerificationStatement: import("../tlv/TlvObject.js").OptionalFieldType<AllowSharedBufferSource>;
                 fabricIndex: import("../tlv/TlvObject.js").FieldType<FabricIndex>;
             }>[], any>;
             /**
-             * This attribute contains the number of Fabrics that are supported by the device. This value is fixed for a
-             * particular device.
+             * Indicates the number of Fabrics that are supported by the device. This value is fixed for a particular
+             * device.
              *
              * @see {@link MatterSpecification.v141.Core} § 11.18.5.3
              */
             readonly supportedFabrics: FixedAttribute<number, any>;
             /**
-             * This attribute contains the number of Fabrics to which the device is currently commissioned. This
-             * attribute shall be equal to the following:
+             * Indicates the number of Fabrics to which the device is currently commissioned. This attribute shall be
+             * equal to the following:
              *
              *   • The number of entries in the NOCs attribute.
              *
@@ -750,8 +935,8 @@ export declare namespace OperationalCredentials {
              */
             readonly commissionedFabrics: Attribute<number, any>;
             /**
-             * This attribute shall contain a read-only list of Trusted Root CA Certificates (RCAC) installed on the
-             * Node, as octet strings containing their Matter Certificate Encoding representation.
+             * This attribute shall contain the list of Trusted Root CA Certificates (RCAC) installed on the Node, as
+             * octet strings containing their Matter Certificate Encoding representation.
              *
              * These certificates are installed through the AddTrustedRootCertificate command.
              *
@@ -768,7 +953,7 @@ export declare namespace OperationalCredentials {
              */
             readonly trustedRootCertificates: Attribute<AllowSharedBufferSource[], any>;
             /**
-             * This attribute shall contain accessing fabric index.
+             * Indicates the accessing fabric index.
              *
              * This attribute is useful to contextualize Fabric-Scoped entries obtained from response commands or
              * attribute reads, since a given Fabric may be referenced by a different Fabric Index locally on a remote
@@ -780,6 +965,8 @@ export declare namespace OperationalCredentials {
         };
         readonly commands: {
             /**
+             * This command is used to perform an attestation request.
+             *
              * This command shall be generated to request the Attestation Information, in the form of an
              * AttestationResponse Command. If the AttestationNonce that is provided in the command is malformed, a
              * recipient shall fail the command with a Status Code of INVALID_COMMAND. The AttestationNonce field shall
@@ -805,6 +992,8 @@ export declare namespace OperationalCredentials {
                 attestationSignature: import("../tlv/TlvObject.js").FieldType<AllowSharedBufferSource>;
             }>, any>;
             /**
+             * This command is used to request a certificate from the device attestation certificate chain.
+             *
              * If the CertificateType is not a valid value per CertificateChainTypeEnum then the command shall fail with
              * a Status Code of INVALID_COMMAND.
              *
@@ -822,6 +1011,8 @@ export declare namespace OperationalCredentials {
                 certificate: import("../tlv/TlvObject.js").FieldType<AllowSharedBufferSource>;
             }>, any>;
             /**
+             * This command is used to perform a CSR request.
+             *
              * This command shall be generated to execute the Node Operational CSR Procedure and subsequently return the
              * NOCSR Information, in the form of a CSRResponse Command.
              *
@@ -833,12 +1024,13 @@ export declare namespace OperationalCredentials {
              * resulting subsequent certificate issued from the CSR with the UpdateNOC command, which is forbidden over
              * PASE sessions.
              *
-             * If the IsForUpdateNOC field is present and set to true, the internal state of the CSR associated keypair
+             * If the IsForUpdateNOC field is present and set to true, the internal state of the CSR associated key pair
              * shall be tagged as being for a subsequent UpdateNOC, otherwise the internal state of the CSR shall be
-             * tagged as being for a subsequent AddNOC. See AddNOC and UpdateNOC for details about the processing.
+             * tagged as being for a subsequent AddNOC. See Section 11.18.6.8, “AddNOC Command” and Section 11.18.6.9,
+             * “UpdateNOC Command” for details about the processing.
              *
-             * If this command is received without an armed fail-safe context (see ArmFailSafe), then this command shall
-             * fail with a FAILSAFE_REQUIRED status code sent back to the initiator.
+             * If this command is received without an armed fail-safe context (see Section 11.10.7.2, “ArmFailSafe
+             * Command”), then this command shall fail with a FAILSAFE_REQUIRED status code sent back to the initiator.
              *
              * If a prior UpdateNOC or AddNOC command was successfully executed within the fail-safe timer period, then
              * this command shall fail with a CONSTRAINT_ERROR status code sent back to the initiator.
@@ -868,6 +1060,8 @@ export declare namespace OperationalCredentials {
                 attestationSignature: import("../tlv/TlvObject.js").FieldType<AllowSharedBufferSource>;
             }>, any>;
             /**
+             * This command is used to add a new NOC to the device.
+             *
              * This command shall add a new NOC chain to the device and commission a new Fabric association upon
              * successful validation of all arguments and preconditions.
              *
@@ -900,7 +1094,7 @@ export declare namespace OperationalCredentials {
                 ipkValue: import("../tlv/TlvObject.js").FieldType<AllowSharedBufferSource>;
                 /**
                  * If the AddNOC command succeeds according to the semantics of the following subsections, then the Access
-                 * Control SubjectID shall be used to atomically add an Access Control Entry enabling that Subject to
+                 * Control subject-id shall be used to atomically add an Access Control Entry enabling that Subject to
                  * subsequently administer the Node whose operational identity is being added by this command.
                  *
                  * The format of the new Access Control Entry, created from this, shall be:
@@ -923,10 +1117,10 @@ export declare namespace OperationalCredentials {
                  * This field shall be set to the Vendor ID of the entity issuing the AddNOC command. This value shall NOT be
                  * one of the reserved Vendor ID values defined in Table 1, “Vendor ID Allocations”.
                  *
-                 * ### Effect When Received
+                 * ### Effect on Receipt
                  *
-                 * If this command is received without an armed fail-safe context (see ArmFailSafe), then this command shall
-                 * fail with a FAILSAFE_REQUIRED status code sent back to the initiator.
+                 * If this command is received without an armed fail-safe context (see Section 11.10.7.2, “ArmFailSafe
+                 * Command”), then this command shall fail with a FAILSAFE_REQUIRED status code sent back to the initiator.
                  *
                  * If a prior UpdateNOC or AddNOC command was successfully executed within the fail-safe timer period, then this
                  * command shall fail with a CONSTRAINT_ERROR status code sent back to the initiator.
@@ -991,10 +1185,10 @@ export declare namespace OperationalCredentials {
                  *        new FabricIndex may be added to the ARL attribute.
                  *
                  *   8. The incoming IPKValue shall be stored in the Fabric-scoped slot within the Group Key Management cluster
-                 *      (see KeySetWrite), for subsequent use during CASE.
+                 *      (see Section 11.2.7.1, “KeySetWrite Command”), for subsequent use during CASE.
                  *
-                 *   9. The Fabric Index associated with the armed fail-safe context (see ArmFailSafe) shall be updated to match
-                 *      the Fabric Index just allocated.
+                 *   9. The Fabric Index associated with the armed fail-safe context (see Section 11.10.7.2, “ArmFailSafe
+                 *      Command”) shall be updated to match the Fabric Index just allocated.
                  *
                  *   10. If the current secure session was established with PASE, the receiver shall:
                  *
@@ -1019,8 +1213,7 @@ export declare namespace OperationalCredentials {
                  */
                 statusCode: import("../tlv/TlvObject.js").FieldType<NodeOperationalCertStatus>;
                 /**
-                 * This field shall be present whenever StatusCode has a value of OK. If present, it shall contain the Fabric
-                 * Index of the Fabric last added, removed or updated.
+                 * If present, it shall contain the Fabric Index of the Fabric last added, removed or updated.
                  *
                  * @see {@link MatterSpecification.v141.Core} § 11.18.6.10.2
                  */
@@ -1035,6 +1228,8 @@ export declare namespace OperationalCredentials {
                 debugText: import("../tlv/TlvObject.js").OptionalFieldType<string>;
             }>, any>;
             /**
+             * This command is used to update an existing NOC on the device.
+             *
              * This command shall replace the NOC and optional associated ICAC (if present) scoped under the accessing
              * fabric upon successful validation of all arguments and preconditions. The new value shall immediately be
              * reflected in the NOCs list attribute.
@@ -1044,10 +1239,10 @@ export declare namespace OperationalCredentials {
              *
              * A Commissioner or Administrator SHOULD issue this command after performing the Attestation Procedure.
              *
-             * ### Effect When Received
+             * ### Effect on Receipt
              *
-             * If this command is received without an armed fail-safe context (see ArmFailSafe), then this command shall
-             * fail with a FAILSAFE_REQUIRED status code sent back to the initiator.
+             * If this command is received without an armed fail-safe context (see Section 11.10.7.2, “ArmFailSafe
+             * Command”), then this command shall fail with a FAILSAFE_REQUIRED status code sent back to the initiator.
              *
              * If a prior UpdateNOC or AddNOC command was successfully executed within the fail-safe timer period, then
              * this command shall fail with a CONSTRAINT_ERROR status code sent back to the initiator.
@@ -1103,8 +1298,7 @@ export declare namespace OperationalCredentials {
                  */
                 statusCode: import("../tlv/TlvObject.js").FieldType<NodeOperationalCertStatus>;
                 /**
-                 * This field shall be present whenever StatusCode has a value of OK. If present, it shall contain the Fabric
-                 * Index of the Fabric last added, removed or updated.
+                 * If present, it shall contain the Fabric Index of the Fabric last added, removed or updated.
                  *
                  * @see {@link MatterSpecification.v141.Core} § 11.18.6.10.2
                  */
@@ -1119,6 +1313,8 @@ export declare namespace OperationalCredentials {
                 debugText: import("../tlv/TlvObject.js").OptionalFieldType<string>;
             }>, any>;
             /**
+             * This command is used to set the user-visible fabric label for a given Fabric.
+             *
              * This command shall be used by an Administrator to set the user-visible Label field for a given Fabric, as
              * reflected by entries in the Fabrics attribute. An Administrator shall use this command to set the Label
              * to a string (possibly selected by the user themselves) that the user can recognize and relate to this
@@ -1164,8 +1360,7 @@ export declare namespace OperationalCredentials {
                  */
                 statusCode: import("../tlv/TlvObject.js").FieldType<NodeOperationalCertStatus>;
                 /**
-                 * This field shall be present whenever StatusCode has a value of OK. If present, it shall contain the Fabric
-                 * Index of the Fabric last added, removed or updated.
+                 * If present, it shall contain the Fabric Index of the Fabric last added, removed or updated.
                  *
                  * @see {@link MatterSpecification.v141.Core} § 11.18.6.10.2
                  */
@@ -1180,12 +1375,16 @@ export declare namespace OperationalCredentials {
                 debugText: import("../tlv/TlvObject.js").OptionalFieldType<string>;
             }>, any>;
             /**
+             * This command is used to remove a Fabric from the device.
+             *
              * This command is used by Administrators to remove a given Fabric and delete all associated fabric-scoped
              * data.
              *
              * If the given Fabric being removed is the last one to reference a given Trusted Root CA Certificate stored
              * in the Trusted Root Certificates list, then that Trusted Root Certificate shall be removed.
              *
+             * ### WARNING
+             *
              * This command, if referring to an already existing Fabric not under the control of the invoking
              * Administrator, shall ONLY be invoked after obtaining some form of explicit user consent through some
              * method executed by the Administrator or Commissioner. This method of obtaining consent SHOULD employ as
@@ -1200,8 +1399,8 @@ export declare namespace OperationalCredentials {
              */
             readonly removeFabric: Command<import("../tlv/TlvObject.js").TypeFromFields<{
                 /**
-                 * This field shall contain the Fabric Index reference (see fabric-index) associated with the Fabric which is to
-                 * be removed from the device.
+                 * This field shall contain the Fabric Index reference (see Section 7.19.2.23, “Fabric Index Type”) associated
+                 * with the Fabric which is to be removed from the device.
                  *
                  * ### Effect on Receipt
                  *
@@ -1251,8 +1450,7 @@ export declare namespace OperationalCredentials {
                  */
                 statusCode: import("../tlv/TlvObject.js").FieldType<NodeOperationalCertStatus>;
                 /**
-                 * This field shall be present whenever StatusCode has a value of OK. If present, it shall contain the Fabric
-                 * Index of the Fabric last added, removed or updated.
+                 * If present, it shall contain the Fabric Index of the Fabric last added, removed or updated.
                  *
                  * @see {@link MatterSpecification.v141.Core} § 11.18.6.10.2
                  */
@@ -1267,6 +1465,8 @@ export declare namespace OperationalCredentials {
                 debugText: import("../tlv/TlvObject.js").OptionalFieldType<string>;
             }>, any>;
             /**
+             * This command is used to add a trusted root certificate to the device.
+             *
              * This command shall add a Trusted Root CA Certificate, provided as its Matter Certificate Encoding
              * representation, to the TrustedRootCertificates Attribute list and shall ensure the next AddNOC command
              * executed uses the provided certificate as its root of trust.
@@ -1274,8 +1474,8 @@ export declare namespace OperationalCredentials {
              * If the certificate from the RootCACertificate field is already installed, based on exact byte-for-byte
              * equality, then this command shall succeed with no change to the list.
              *
-             * If this command is received without an armed fail-safe context (see ArmFailSafe), then this command shall
-             * fail with a FAILSAFE_REQUIRED status code sent back to the initiator.
+             * If this command is received without an armed fail-safe context (see Section 11.10.7.2, “ArmFailSafe
+             * Command”), then this command shall fail with a FAILSAFE_REQUIRED status code sent back to the initiator.
              *
              * If a prior AddTrustedRootCertificate command was successfully invoked within the fail-safe timer period,
              * which would cause the new invocation to add a second root certificate within a given fail-safe timer
@@ -1296,11 +1496,101 @@ export declare namespace OperationalCredentials {
             readonly addTrustedRootCertificate: Command<import("../tlv/TlvObject.js").TypeFromFields<{
                 rootCaCertificate: import("../tlv/TlvObject.js").FieldType<AllowSharedBufferSource>;
             }>, void, any>;
+            /**
+             * This command is used to manage the VendorID and VIDVerificationStatement fields of the Fabrics attribute,
+             * and the VVSC field of an entry in the NOCs attribute.
+             *
+             * This command shall be used to one or more of the following:
+             *
+             *   • Update the VendorID associated with an entry in the Fabrics attribute.
+             *
+             *   • Associate or remove a VIDVerificationStatement associated with an entry in the Fabrics attribute.
+             *
+             *   • Associate or remove a VendorVerificationSigningCertificate (VVSC) associated with an entry in the
+             *     NOCs attribute.
+             *
+             * This command shall only operate against the Fabrics and NOCs attribute entries associated with the
+             * accessing fabric index.
+             *
+             * ### Effect on Receipt
+             *
+             * If the VendorID field is present, the value of the VendorID in the Fabrics attribute entry associated
+             * with the accessing fabric index shall have its value replaced with the value from the command field.
+             *
+             * If the VVSC field is present, but the ICAC field is already present in the NOCs attribute entry
+             * associated with the accessing fabric index, then the command shall fail with a status code of
+             * INVALID_COMMAND.
+             *
+             * If the VIDVerificationStatement field is present:
+             *
+             *   • If the length of the field’s value is neither exactly 0 nor exactly 85, then the command shall fail
+             *     with a status code of CONSTRAINT_ERROR.
+             *
+             *   • If the length of the field’s value is exactly 0, then the VIDVerificationStatement field in the
+             *     Fabrics attribute entry associated with the accessing fabric index shall be erased and the field
+             *     shall disappear from the Fabrics entry.
+             *
+             *   • If the length of the field’s value is exactly 85, then the VIDVerificationStatement field in the
+             *     Fabrics attribute entry associated with the accessing fabric index shall have its value replaced with
+             *     the value from the command field.
+             *
+             * If the VVSC field is present:
+             *
+             *   • If the length of the field’s value is exactly 0, then the VVSC field in the NOCs attribute entry
+             *     associated with the accessing fabric index shall be erased and the field shall disappear from the
+             *     NOCs entry.
+             *
+             *   • If the length of the field’s value is not 0, then the VVSC field in the NOCs attribute entry
+             *     associated with the accessing fabric index shall have its value replaced with the value from the
+             *     command field. The contents of the certificate need not be validated by the server. Clients shall
+             *     validate the contents at time of use.
+             *
+             * If the command was invoked within a fail-safe context after a successful AddNOC or UpdateNOC command,
+             * then the field updates shall apply to the pending update state that will be reverted if fail-safe expires
+             * prior to a CommissioningComplete command. In other words, field updates apply to the state of the Fabrics
+             * Attribute as currently visible, even for an existing fabric currently in process of being updated.
+             *
+             * @see {@link MatterSpecification.v141.Core} § 11.18.6.14
+             */
+            readonly setVidVerificationStatement: Command<import("../tlv/TlvObject.js").TypeFromFields<{
+                vendorId: import("../tlv/TlvObject.js").OptionalFieldType<import("../datatype/VendorId.js").VendorId>;
+                vidVerificationStatement: import("../tlv/TlvObject.js").OptionalFieldType<AllowSharedBufferSource>;
+                vvsc: import("../tlv/TlvObject.js").OptionalFieldType<AllowSharedBufferSource>;
+            }>, void, any>;
+            /**
+             * This command is used to authenticate the fabric associated with the FabricIndex.
+             *
+             * This command shall be used to request that the server authenticate the fabric associated with the
+             * FabricIndex given by generating the response described in Section 6.4.10, “Fabric Table Vendor ID
+             * Verification Procedure”.
+             *
+             * The FabricIndex field shall contain the fabric index being targeted by the request.
+             *
+             * The ClientChallenge field shall contain a client-provided random challenge to be used during the
+             * signature procedure.
+             *
+             * ### Effect on Receipt
+             *
+             * If the FabricIndex field contains a fabric index which does not have an associated entry in the Fabrics
+             * attribute, then the command shall fail with a status code of CONSTRAINT_ERROR.
+             *
+             * Otherwise, if no other errors have occurred, the command shall generate a SignVIDVerificationResponse.
+             *
+             * @see {@link MatterSpecification.v141.Core} § 11.18.6.15
+             */
+            readonly signVidVerificationRequest: Command<import("../tlv/TlvObject.js").TypeFromFields<{
+                fabricIndex: import("../tlv/TlvObject.js").FieldType<FabricIndex>;
+                clientChallenge: import("../tlv/TlvObject.js").FieldType<AllowSharedBufferSource>;
+            }>, import("../tlv/TlvObject.js").TypeFromFields<{
+                fabricIndex: import("../tlv/TlvObject.js").FieldType<FabricIndex>;
+                fabricBindingVersion: import("../tlv/TlvObject.js").FieldType<number>;
+                signature: import("../tlv/TlvObject.js").FieldType<AllowSharedBufferSource>;
+            }>, any>;
         };
     }, []>;
     /**
-     * This cluster is used to add or remove Node Operational credentials on a Commissionee or Node, as well as manage
-     * the associated Fabrics.
+     * This cluster is used to add or remove Node Operational credentials on a Commissionee or already-configured Node,
+     * as well as manage the associated Fabrics.
      *
      * @see {@link MatterSpecification.v141.Core} § 11.18
      */