@openvtc/trust-tasks 0.2.0 → 0.2.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/_framework/0.2/framework.d.ts +11 -0
- package/dist/_framework/0.2/framework.d.ts.map +1 -0
- package/dist/_framework/0.2/framework.js +6 -0
- package/dist/_framework/0.2/framework.js.map +1 -0
- package/dist/acl/grant/0.1/payload.d.ts +13 -0
- package/dist/acl/grant/0.1/payload.d.ts.map +1 -1
- package/dist/acl/grant/0.1/payload.js.map +1 -1
- package/dist/auth/passkey/login/finish/0.2/payload.d.ts +42 -0
- package/dist/auth/passkey/login/finish/0.2/payload.d.ts.map +1 -0
- package/dist/auth/passkey/login/finish/0.2/payload.js +9 -0
- package/dist/auth/passkey/login/finish/0.2/payload.js.map +1 -0
- package/dist/auth/passkey/login/start/0.2/payload.d.ts +29 -0
- package/dist/auth/passkey/login/start/0.2/payload.d.ts.map +1 -0
- package/dist/auth/passkey/login/start/0.2/payload.js +9 -0
- package/dist/auth/passkey/login/start/0.2/payload.js.map +1 -0
- package/dist/auth/step-up/approve-request/0.2/payload.d.ts +73 -0
- package/dist/auth/step-up/approve-request/0.2/payload.d.ts.map +1 -0
- package/dist/auth/step-up/approve-request/0.2/payload.js +9 -0
- package/dist/auth/step-up/approve-request/0.2/payload.js.map +1 -0
- package/dist/auth/step-up/approve-response/0.2/payload.d.ts +76 -0
- package/dist/auth/step-up/approve-response/0.2/payload.d.ts.map +1 -0
- package/dist/auth/step-up/approve-response/0.2/payload.js +9 -0
- package/dist/auth/step-up/approve-response/0.2/payload.js.map +1 -0
- package/dist/auth/step-up/policy/0.1/payload.d.ts +43 -0
- package/dist/auth/step-up/policy/0.1/payload.d.ts.map +1 -0
- package/dist/auth/step-up/policy/0.1/payload.js +9 -0
- package/dist/auth/step-up/policy/0.1/payload.js.map +1 -0
- package/dist/auth/step-up/policy/0.2/payload.d.ts +43 -0
- package/dist/auth/step-up/policy/0.2/payload.d.ts.map +1 -0
- package/dist/auth/step-up/policy/0.2/payload.js +9 -0
- package/dist/auth/step-up/policy/0.2/payload.js.map +1 -0
- package/dist/device/_shared/0.2/device-binding.d.ts +11 -0
- package/dist/device/_shared/0.2/device-binding.d.ts.map +1 -0
- package/dist/device/_shared/0.2/device-binding.js +6 -0
- package/dist/device/_shared/0.2/device-binding.js.map +1 -0
- package/dist/device/heartbeat/0.2/payload.d.ts +29 -0
- package/dist/device/heartbeat/0.2/payload.d.ts.map +1 -0
- package/dist/device/heartbeat/0.2/payload.js +9 -0
- package/dist/device/heartbeat/0.2/payload.js.map +1 -0
- package/dist/device/list/0.2/payload.d.ts +37 -0
- package/dist/device/list/0.2/payload.d.ts.map +1 -0
- package/dist/device/list/0.2/payload.js +9 -0
- package/dist/device/list/0.2/payload.js.map +1 -0
- package/dist/device/register/0.1/payload.d.ts +18 -0
- package/dist/device/register/0.1/payload.d.ts.map +1 -1
- package/dist/device/register/0.1/payload.js.map +1 -1
- package/dist/device/register/0.2/payload.d.ts +97 -0
- package/dist/device/register/0.2/payload.d.ts.map +1 -0
- package/dist/device/register/0.2/payload.js +9 -0
- package/dist/device/register/0.2/payload.js.map +1 -0
- package/dist/device/set-wake/0.1/payload.d.ts +43 -0
- package/dist/device/set-wake/0.1/payload.d.ts.map +1 -0
- package/dist/device/set-wake/0.1/payload.js +9 -0
- package/dist/device/set-wake/0.1/payload.js.map +1 -0
- package/dist/device/set-wake/0.2/payload.d.ts +43 -0
- package/dist/device/set-wake/0.2/payload.d.ts.map +1 -0
- package/dist/device/set-wake/0.2/payload.js +9 -0
- package/dist/device/set-wake/0.2/payload.js.map +1 -0
- package/dist/device/wipe/0.2/payload.d.ts +37 -0
- package/dist/device/wipe/0.2/payload.d.ts.map +1 -0
- package/dist/device/wipe/0.2/payload.js +9 -0
- package/dist/device/wipe/0.2/payload.js.map +1 -0
- package/dist/did-management/did/check-name/0.1/payload.d.ts +5 -2
- package/dist/did-management/did/check-name/0.1/payload.d.ts.map +1 -1
- package/dist/did-management/did/check-name/0.1/payload.js.map +1 -1
- package/dist/index.d.ts +63 -17
- package/dist/index.d.ts.map +1 -1
- package/dist/index.js +63 -17
- package/dist/index.js.map +1 -1
- package/dist/policy/_shared/0.2/policy.d.ts +11 -0
- package/dist/policy/_shared/0.2/policy.d.ts.map +1 -0
- package/dist/policy/_shared/0.2/policy.js +6 -0
- package/dist/policy/_shared/0.2/policy.js.map +1 -0
- package/dist/policy/evaluate/0.2/payload.d.ts +99 -0
- package/dist/policy/evaluate/0.2/payload.d.ts.map +1 -0
- package/dist/policy/evaluate/0.2/payload.js +9 -0
- package/dist/policy/evaluate/0.2/payload.js.map +1 -0
- package/dist/policy/list/0.2/payload.d.ts +22 -0
- package/dist/policy/list/0.2/payload.d.ts.map +1 -0
- package/dist/policy/list/0.2/payload.js +9 -0
- package/dist/policy/list/0.2/payload.js.map +1 -0
- package/dist/policy/upsert/0.2/payload.d.ts +29 -0
- package/dist/policy/upsert/0.2/payload.d.ts.map +1 -0
- package/dist/policy/upsert/0.2/payload.js +9 -0
- package/dist/policy/upsert/0.2/payload.js.map +1 -0
- package/dist/provision/integration/0.2/payload.d.ts +178 -0
- package/dist/provision/integration/0.2/payload.d.ts.map +1 -0
- package/dist/provision/integration/0.2/payload.js +9 -0
- package/dist/provision/integration/0.2/payload.js.map +1 -0
- package/dist/push/provision/0.1/payload.d.ts +35 -0
- package/dist/push/provision/0.1/payload.d.ts.map +1 -0
- package/dist/push/provision/0.1/payload.js +9 -0
- package/dist/push/provision/0.1/payload.js.map +1 -0
- package/dist/push/provision/0.2/payload.d.ts +35 -0
- package/dist/push/provision/0.2/payload.d.ts.map +1 -0
- package/dist/push/provision/0.2/payload.js +9 -0
- package/dist/push/provision/0.2/payload.js.map +1 -0
- package/dist/push/register/0.1/payload.d.ts +72 -0
- package/dist/push/register/0.1/payload.d.ts.map +1 -0
- package/dist/push/register/0.1/payload.js +9 -0
- package/dist/push/register/0.1/payload.js.map +1 -0
- package/dist/push/register/0.2/payload.d.ts +72 -0
- package/dist/push/register/0.2/payload.d.ts.map +1 -0
- package/dist/push/register/0.2/payload.js +9 -0
- package/dist/push/register/0.2/payload.js.map +1 -0
- package/dist/push/wake/0.1/payload.d.ts +41 -0
- package/dist/push/wake/0.1/payload.d.ts.map +1 -0
- package/dist/push/wake/0.1/payload.js +9 -0
- package/dist/push/wake/0.1/payload.js.map +1 -0
- package/dist/push/wake/0.2/payload.d.ts +41 -0
- package/dist/push/wake/0.2/payload.d.ts.map +1 -0
- package/dist/push/wake/0.2/payload.js +9 -0
- package/dist/push/wake/0.2/payload.js.map +1 -0
- package/dist/sync/_shared/0.2/sync-event.d.ts +11 -0
- package/dist/sync/_shared/0.2/sync-event.d.ts.map +1 -0
- package/dist/sync/_shared/0.2/sync-event.js +6 -0
- package/dist/sync/_shared/0.2/sync-event.js.map +1 -0
- package/dist/sync/event/0.2/payload.d.ts +208 -0
- package/dist/sync/event/0.2/payload.d.ts.map +1 -0
- package/dist/sync/event/0.2/payload.js +9 -0
- package/dist/sync/event/0.2/payload.js.map +1 -0
- package/dist/trust-task-error/0.2/payload.d.ts +36 -0
- package/dist/trust-task-error/0.2/payload.d.ts.map +1 -0
- package/dist/trust-task-error/0.2/payload.js +9 -0
- package/dist/trust-task-error/0.2/payload.js.map +1 -0
- package/dist/vault/_shared/0.2/consumer-context.d.ts +11 -0
- package/dist/vault/_shared/0.2/consumer-context.d.ts.map +1 -0
- package/dist/vault/_shared/0.2/consumer-context.js +6 -0
- package/dist/vault/_shared/0.2/consumer-context.js.map +1 -0
- package/dist/vault/_shared/0.2/sealed-envelope.d.ts +15 -0
- package/dist/vault/_shared/0.2/sealed-envelope.d.ts.map +1 -0
- package/dist/vault/_shared/0.2/sealed-envelope.js +6 -0
- package/dist/vault/_shared/0.2/sealed-envelope.js.map +1 -0
- package/dist/vault/_shared/0.2/session-blob.d.ts +13 -0
- package/dist/vault/_shared/0.2/session-blob.d.ts.map +1 -0
- package/dist/vault/_shared/0.2/session-blob.js +6 -0
- package/dist/vault/_shared/0.2/session-blob.js.map +1 -0
- package/dist/vault/_shared/0.2/vault-entry.d.ts +13 -0
- package/dist/vault/_shared/0.2/vault-entry.d.ts.map +1 -0
- package/dist/vault/_shared/0.2/vault-entry.js +6 -0
- package/dist/vault/_shared/0.2/vault-entry.js.map +1 -0
- package/dist/vault/_shared/0.2/vault-secret.d.ts +15 -0
- package/dist/vault/_shared/0.2/vault-secret.d.ts.map +1 -0
- package/dist/vault/_shared/0.2/vault-secret.js +6 -0
- package/dist/vault/_shared/0.2/vault-secret.js.map +1 -0
- package/dist/vault/get/0.2/payload.d.ts +25 -0
- package/dist/vault/get/0.2/payload.d.ts.map +1 -0
- package/dist/vault/get/0.2/payload.js +9 -0
- package/dist/vault/get/0.2/payload.js.map +1 -0
- package/dist/vault/list/0.2/payload.d.ts +74 -0
- package/dist/vault/list/0.2/payload.d.ts.map +1 -0
- package/dist/vault/list/0.2/payload.js +9 -0
- package/dist/vault/list/0.2/payload.js.map +1 -0
- package/dist/vault/proxy-login/0.2/payload.d.ts +109 -0
- package/dist/vault/proxy-login/0.2/payload.d.ts.map +1 -0
- package/dist/vault/proxy-login/0.2/payload.js +9 -0
- package/dist/vault/proxy-login/0.2/payload.js.map +1 -0
- package/dist/vault/release/0.2/payload.d.ts +102 -0
- package/dist/vault/release/0.2/payload.d.ts.map +1 -0
- package/dist/vault/release/0.2/payload.js +9 -0
- package/dist/vault/release/0.2/payload.js.map +1 -0
- package/dist/vault/sign-trust-task/0.2/payload.d.ts +99 -0
- package/dist/vault/sign-trust-task/0.2/payload.d.ts.map +1 -0
- package/dist/vault/sign-trust-task/0.2/payload.js +9 -0
- package/dist/vault/sign-trust-task/0.2/payload.js.map +1 -0
- package/dist/vault/sync/0.2/payload.d.ts +33 -0
- package/dist/vault/sync/0.2/payload.d.ts.map +1 -0
- package/dist/vault/sync/0.2/payload.js +9 -0
- package/dist/vault/sync/0.2/payload.js.map +1 -0
- package/dist/vault/upsert/0.2/payload.d.ts +150 -0
- package/dist/vault/upsert/0.2/payload.d.ts.map +1 -0
- package/dist/vault/upsert/0.2/payload.js +9 -0
- package/dist/vault/upsert/0.2/payload.js.map +1 -0
- package/dist/vault/usage/0.2/payload.d.ts +38 -0
- package/dist/vault/usage/0.2/payload.d.ts.map +1 -0
- package/dist/vault/usage/0.2/payload.js +9 -0
- package/dist/vault/usage/0.2/payload.js.map +1 -0
- package/dist/vta/_shared/0.1/passkey-vm.d.ts +11 -0
- package/dist/vta/_shared/0.1/passkey-vm.d.ts.map +1 -0
- package/dist/vta/_shared/0.1/passkey-vm.js +6 -0
- package/dist/vta/_shared/0.1/passkey-vm.js.map +1 -0
- package/dist/vta/passkey-vms/enroll-challenge/0.1/payload.d.ts +29 -0
- package/dist/vta/passkey-vms/enroll-challenge/0.1/payload.d.ts.map +1 -0
- package/dist/vta/passkey-vms/enroll-challenge/0.1/payload.js +9 -0
- package/dist/vta/passkey-vms/enroll-challenge/0.1/payload.js.map +1 -0
- package/dist/vta/passkey-vms/enroll-submit/0.1/payload.d.ts +61 -0
- package/dist/vta/passkey-vms/enroll-submit/0.1/payload.d.ts.map +1 -0
- package/dist/vta/passkey-vms/enroll-submit/0.1/payload.js +9 -0
- package/dist/vta/passkey-vms/enroll-submit/0.1/payload.js.map +1 -0
- package/dist/vta/passkey-vms/list/0.1/payload.d.ts +25 -0
- package/dist/vta/passkey-vms/list/0.1/payload.d.ts.map +1 -0
- package/dist/vta/passkey-vms/list/0.1/payload.js +9 -0
- package/dist/vta/passkey-vms/list/0.1/payload.js.map +1 -0
- package/dist/vta/passkey-vms/revoke/0.1/payload.d.ts +29 -0
- package/dist/vta/passkey-vms/revoke/0.1/payload.d.ts.map +1 -0
- package/dist/vta/passkey-vms/revoke/0.1/payload.js +9 -0
- package/dist/vta/passkey-vms/revoke/0.1/payload.js.map +1 -0
- package/package.json +1 -1
- package/src/index.ts +31 -26
- package/src/vta/_shared/0.1/passkey-vm.ts +11 -0
- package/src/vta/passkey-vms/enroll-challenge/0.1/payload.ts +31 -0
- package/src/vta/passkey-vms/enroll-submit/0.1/payload.ts +63 -0
- package/src/vta/passkey-vms/list/0.1/payload.ts +27 -0
- package/src/vta/passkey-vms/revoke/0.1/payload.ts +31 -0
|
@@ -0,0 +1,9 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
|
|
3
|
+
* Source: specs/device/list/0.2/payload.schema.json
|
|
4
|
+
*/
|
|
5
|
+
/** Trust Task type URI. */
|
|
6
|
+
export const TYPE_URI = "https://trusttasks.org/spec/device/list/0.2";
|
|
7
|
+
/** Trust Task response type URI (request type URI + "#response"). */
|
|
8
|
+
export const RESPONSE_TYPE_URI = "https://trusttasks.org/spec/device/list/0.2#response";
|
|
9
|
+
//# sourceMappingURL=payload.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"payload.js","sourceRoot":"","sources":["../../../../src/device/list/0.2/payload.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAwCH,2BAA2B;AAC3B,MAAM,CAAC,MAAM,QAAQ,GAAG,6CAAsD,CAAC;AAE/E,qEAAqE;AACrE,MAAM,CAAC,MAAM,iBAAiB,GAAG,sDAA+D,CAAC"}
|
|
@@ -18,6 +18,7 @@ export interface DeviceRegisterPayload {
|
|
|
18
18
|
displayName: string;
|
|
19
19
|
platform?: string;
|
|
20
20
|
attestation?: DeviceAttestation;
|
|
21
|
+
keyCustody?: KeyCustody;
|
|
21
22
|
/**
|
|
22
23
|
* X25519 public key (did:key form) the maintainer will use to HPKE-seal sensitive payloads to this device (sealed secrets, session blobs, sync events). REQUIRED — every Companion/Service needs a recipient key.
|
|
23
24
|
*/
|
|
@@ -66,6 +67,23 @@ export interface NitroEnclave {
|
|
|
66
67
|
export interface NoAttestation {
|
|
67
68
|
kind: "none";
|
|
68
69
|
}
|
|
70
|
+
/**
|
|
71
|
+
* OPTIONAL. How the device custodies its private keys (tier + algorithms). RECOMMENDED for mobile Companions. Maintainer policy input — see docs/design-notes/mobile-key-custody-profile.md.
|
|
72
|
+
*/
|
|
73
|
+
export interface KeyCustody {
|
|
74
|
+
/**
|
|
75
|
+
* `hardware`: the key is non-exportable in the secure keystore (iOS Secure Enclave / Android StrongBox) and every signing / key-agreement operation runs in-chip — achievable only with P-256. `software`: the key is held in app memory during use, stored hardware-wrapped at rest. Maintainers MAY apply stricter policy (shorter sessions, more frequent step-up) to `software`-tier devices.
|
|
76
|
+
*/
|
|
77
|
+
tier: "hardware" | "software";
|
|
78
|
+
/**
|
|
79
|
+
* JOSE `alg` of the holder's signing key, e.g. `ES256` (hardware-custodiable on mobile) or `EdDSA` (not).
|
|
80
|
+
*/
|
|
81
|
+
signingAlg?: string;
|
|
82
|
+
/**
|
|
83
|
+
* Curve of the holder's keyAgreement key, e.g. `P-256` (hardware-custodiable on mobile) or `X25519` (not).
|
|
84
|
+
*/
|
|
85
|
+
keyAgreementCurve?: string;
|
|
86
|
+
}
|
|
69
87
|
/**
|
|
70
88
|
* Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.
|
|
71
89
|
*/
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"payload.d.ts","sourceRoot":"","sources":["../../../../src/device/register/0.1/payload.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;GAEG;AACH,MAAM,MAAM,YAAY,GAAG,SAAS,GAAG,OAAO,CAAC;AAC/C;;GAEG;AACH,MAAM,MAAM,iBAAiB,GACzB,mBAAmB,GACnB,cAAc,GACd,aAAa,GACb,GAAG,GACH,YAAY,GACZ,aAAa,CAAC;AAElB;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,YAAY,EAAE,YAAY,CAAC;IAC3B,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,iBAAiB,CAAC;IAChC;;OAEG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,GAAG,CAAC,EAAE,GAAG,CAAC;CACX;AACD,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,WAAW,CAAC;IAClB,UAAU,EAAE,SAAS,GAAG,QAAQ,GAAG,SAAS,CAAC;CAC9C;AACD,MAAM,WAAW,OAAO;IACtB,IAAI,EAAE,SAAS,CAAC;IAChB,WAAW,EAAE,UAAU,GAAG,UAAU,GAAG,QAAQ,CAAC;CACjD;AACD,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,UAAU,CAAC;IACjB;;OAEG;IACH,MAAM,EAAE,MAAM,CAAC;IACf;;OAEG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAC;CAC/B;AACD,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,kBAAkB,CAAC;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;CACrB;AACD,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,gBAAgB,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;CACf;AACD,MAAM,WAAW,GAAG;IAClB,IAAI,EAAE,KAAK,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;CACf;AACD,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,eAAe,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;CACf;AACD;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;CACd;AACD;;GAEG;AACH,MAAM,WAAW,GAAG;IAClB,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC;CAClC;AAED,2BAA2B;AAC3B,eAAO,MAAM,QAAQ,EAAG,iDAA0D,CAAC;AAEnF,qEAAqE;AACrE,eAAO,MAAM,iBAAiB,EAAG,0DAAmE,CAAC"}
|
|
1
|
+
{"version":3,"file":"payload.d.ts","sourceRoot":"","sources":["../../../../src/device/register/0.1/payload.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;GAEG;AACH,MAAM,MAAM,YAAY,GAAG,SAAS,GAAG,OAAO,CAAC;AAC/C;;GAEG;AACH,MAAM,MAAM,iBAAiB,GACzB,mBAAmB,GACnB,cAAc,GACd,aAAa,GACb,GAAG,GACH,YAAY,GACZ,aAAa,CAAC;AAElB;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,YAAY,EAAE,YAAY,CAAC;IAC3B,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,iBAAiB,CAAC;IAChC,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB;;OAEG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,GAAG,CAAC,EAAE,GAAG,CAAC;CACX;AACD,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,WAAW,CAAC;IAClB,UAAU,EAAE,SAAS,GAAG,QAAQ,GAAG,SAAS,CAAC;CAC9C;AACD,MAAM,WAAW,OAAO;IACtB,IAAI,EAAE,SAAS,CAAC;IAChB,WAAW,EAAE,UAAU,GAAG,UAAU,GAAG,QAAQ,CAAC;CACjD;AACD,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,UAAU,CAAC;IACjB;;OAEG;IACH,MAAM,EAAE,MAAM,CAAC;IACf;;OAEG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAC;CAC/B;AACD,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,kBAAkB,CAAC;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;CACrB;AACD,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,gBAAgB,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;CACf;AACD,MAAM,WAAW,GAAG;IAClB,IAAI,EAAE,KAAK,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;CACf;AACD,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,eAAe,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;CACf;AACD;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;CACd;AACD;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB;;OAEG;IACH,IAAI,EAAE,UAAU,GAAG,UAAU,CAAC;IAC9B;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;OAEG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AACD;;GAEG;AACH,MAAM,WAAW,GAAG;IAClB,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC;CAClC;AAED,2BAA2B;AAC3B,eAAO,MAAM,QAAQ,EAAG,iDAA0D,CAAC;AAEnF,qEAAqE;AACrE,eAAO,MAAM,iBAAiB,EAAG,0DAAmE,CAAC"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"payload.js","sourceRoot":"","sources":["../../../../src/device/register/0.1/payload.ts"],"names":[],"mappings":"AAAA;;;GAGG;
|
|
1
|
+
{"version":3,"file":"payload.js","sourceRoot":"","sources":["../../../../src/device/register/0.1/payload.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAkGH,2BAA2B;AAC3B,MAAM,CAAC,MAAM,QAAQ,GAAG,iDAA0D,CAAC;AAEnF,qEAAqE;AACrE,MAAM,CAAC,MAAM,iBAAiB,GAAG,0DAAmE,CAAC"}
|
|
@@ -0,0 +1,97 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
|
|
3
|
+
* Source: specs/device/register/0.2/payload.schema.json
|
|
4
|
+
*/
|
|
5
|
+
/**
|
|
6
|
+
* Discriminator: is this consumer a user-driven Companion or a headless Service?
|
|
7
|
+
*/
|
|
8
|
+
export type ConsumerKind = Companion | Service;
|
|
9
|
+
/**
|
|
10
|
+
* Producer-supplied attestation at registration time, verifiable by the maintainer against the platform's attestation infrastructure. Tagged union over the discriminator `kind`.
|
|
11
|
+
*/
|
|
12
|
+
export type DeviceAttestation = WebAuthnAttestation | AppleAppAttest | PlayIntegrity | Tpm | NitroEnclave | NoAttestation;
|
|
13
|
+
/**
|
|
14
|
+
* Public discovery surface that wraps the maintainer's existing two-phase enrolment (provision-integration → acl/swap-key). A new Companion or Service hands the maintainer its long-term VTA-derived key, its consumer kind, display name, and an optional device attestation; the maintainer creates the DeviceBinding and returns it. Phase 1 (provision-integration) is assumed to have already happened — this task is the post-bootstrap claim step.
|
|
15
|
+
*/
|
|
16
|
+
export interface DeviceRegisterPayload {
|
|
17
|
+
consumerKind: ConsumerKind;
|
|
18
|
+
displayName: string;
|
|
19
|
+
platform?: string;
|
|
20
|
+
attestation?: DeviceAttestation;
|
|
21
|
+
keyCustody?: KeyCustody;
|
|
22
|
+
/**
|
|
23
|
+
* X25519 public key (did:key form) the maintainer will use to HPKE-seal sensitive payloads to this device (sealed secrets, session blobs, sync events). REQUIRED — every Companion/Service needs a recipient key.
|
|
24
|
+
*/
|
|
25
|
+
hpkePublicKey?: string;
|
|
26
|
+
ext?: Ext;
|
|
27
|
+
}
|
|
28
|
+
export interface Companion {
|
|
29
|
+
kind: "companion";
|
|
30
|
+
formFactor: "browser" | "mobile" | "desktop";
|
|
31
|
+
}
|
|
32
|
+
export interface Service {
|
|
33
|
+
kind: "service";
|
|
34
|
+
serviceKind: "mediator" | "aiAgent" | "daemon";
|
|
35
|
+
}
|
|
36
|
+
export interface WebAuthnAttestation {
|
|
37
|
+
kind: "webauthn";
|
|
38
|
+
/**
|
|
39
|
+
* WebAuthn Authenticator AAGUID (UUID).
|
|
40
|
+
*/
|
|
41
|
+
aaguid: string;
|
|
42
|
+
/**
|
|
43
|
+
* Base64url-encoded WebAuthn attestation statement, when supplied by the platform.
|
|
44
|
+
*/
|
|
45
|
+
attestationStatement?: string;
|
|
46
|
+
}
|
|
47
|
+
export interface AppleAppAttest {
|
|
48
|
+
kind: "appleAppAttest";
|
|
49
|
+
keyId: string;
|
|
50
|
+
attestation: string;
|
|
51
|
+
}
|
|
52
|
+
export interface PlayIntegrity {
|
|
53
|
+
kind: "playIntegrity";
|
|
54
|
+
token: string;
|
|
55
|
+
}
|
|
56
|
+
export interface Tpm {
|
|
57
|
+
kind: "tpm";
|
|
58
|
+
quote: string;
|
|
59
|
+
}
|
|
60
|
+
export interface NitroEnclave {
|
|
61
|
+
kind: "nitroEnclave";
|
|
62
|
+
quote: string;
|
|
63
|
+
}
|
|
64
|
+
/**
|
|
65
|
+
* No device-level attestation is available. Maintainers MAY still register the device but SHOULD apply stricter policy (shorter session TTL, more frequent step-up).
|
|
66
|
+
*/
|
|
67
|
+
export interface NoAttestation {
|
|
68
|
+
kind: "none";
|
|
69
|
+
}
|
|
70
|
+
/**
|
|
71
|
+
* OPTIONAL. How the device custodies its private keys (tier + algorithms). RECOMMENDED for mobile Companions. Maintainer policy input — see docs/design-notes/mobile-key-custody-profile.md.
|
|
72
|
+
*/
|
|
73
|
+
export interface KeyCustody {
|
|
74
|
+
/**
|
|
75
|
+
* `hardware`: the key is non-exportable in the secure keystore (iOS Secure Enclave / Android StrongBox) and every signing / key-agreement operation runs in-chip — achievable only with P-256. `software`: the key is held in app memory during use, stored hardware-wrapped at rest. Maintainers MAY apply stricter policy (shorter sessions, more frequent step-up) to `software`-tier devices.
|
|
76
|
+
*/
|
|
77
|
+
tier: "hardware" | "software";
|
|
78
|
+
/**
|
|
79
|
+
* JOSE `alg` of the holder's signing key, e.g. `ES256` (hardware-custodiable on mobile) or `EdDSA` (not).
|
|
80
|
+
*/
|
|
81
|
+
signingAlg?: string;
|
|
82
|
+
/**
|
|
83
|
+
* Curve of the holder's keyAgreement key, e.g. `P-256` (hardware-custodiable on mobile) or `X25519` (not).
|
|
84
|
+
*/
|
|
85
|
+
keyAgreementCurve?: string;
|
|
86
|
+
}
|
|
87
|
+
/**
|
|
88
|
+
* Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.
|
|
89
|
+
*/
|
|
90
|
+
export interface Ext {
|
|
91
|
+
[k: string]: unknown | undefined;
|
|
92
|
+
}
|
|
93
|
+
/** Trust Task type URI. */
|
|
94
|
+
export declare const TYPE_URI: "https://trusttasks.org/spec/device/register/0.2";
|
|
95
|
+
/** Trust Task response type URI (request type URI + "#response"). */
|
|
96
|
+
export declare const RESPONSE_TYPE_URI: "https://trusttasks.org/spec/device/register/0.2#response";
|
|
97
|
+
//# sourceMappingURL=payload.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"payload.d.ts","sourceRoot":"","sources":["../../../../src/device/register/0.2/payload.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;GAEG;AACH,MAAM,MAAM,YAAY,GAAG,SAAS,GAAG,OAAO,CAAC;AAC/C;;GAEG;AACH,MAAM,MAAM,iBAAiB,GACzB,mBAAmB,GACnB,cAAc,GACd,aAAa,GACb,GAAG,GACH,YAAY,GACZ,aAAa,CAAC;AAElB;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,YAAY,EAAE,YAAY,CAAC;IAC3B,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,iBAAiB,CAAC;IAChC,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB;;OAEG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,GAAG,CAAC,EAAE,GAAG,CAAC;CACX;AACD,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,WAAW,CAAC;IAClB,UAAU,EAAE,SAAS,GAAG,QAAQ,GAAG,SAAS,CAAC;CAC9C;AACD,MAAM,WAAW,OAAO;IACtB,IAAI,EAAE,SAAS,CAAC;IAChB,WAAW,EAAE,UAAU,GAAG,SAAS,GAAG,QAAQ,CAAC;CAChD;AACD,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,UAAU,CAAC;IACjB;;OAEG;IACH,MAAM,EAAE,MAAM,CAAC;IACf;;OAEG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAC;CAC/B;AACD,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,gBAAgB,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;CACrB;AACD,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,eAAe,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;CACf;AACD,MAAM,WAAW,GAAG;IAClB,IAAI,EAAE,KAAK,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;CACf;AACD,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,cAAc,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;CACf;AACD;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;CACd;AACD;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB;;OAEG;IACH,IAAI,EAAE,UAAU,GAAG,UAAU,CAAC;IAC9B;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;OAEG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AACD;;GAEG;AACH,MAAM,WAAW,GAAG;IAClB,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC;CAClC;AAED,2BAA2B;AAC3B,eAAO,MAAM,QAAQ,EAAG,iDAA0D,CAAC;AAEnF,qEAAqE;AACrE,eAAO,MAAM,iBAAiB,EAAG,0DAAmE,CAAC"}
|
|
@@ -0,0 +1,9 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
|
|
3
|
+
* Source: specs/device/register/0.2/payload.schema.json
|
|
4
|
+
*/
|
|
5
|
+
/** Trust Task type URI. */
|
|
6
|
+
export const TYPE_URI = "https://trusttasks.org/spec/device/register/0.2";
|
|
7
|
+
/** Trust Task response type URI (request type URI + "#response"). */
|
|
8
|
+
export const RESPONSE_TYPE_URI = "https://trusttasks.org/spec/device/register/0.2#response";
|
|
9
|
+
//# sourceMappingURL=payload.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"payload.js","sourceRoot":"","sources":["../../../../src/device/register/0.2/payload.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAkGH,2BAA2B;AAC3B,MAAM,CAAC,MAAM,QAAQ,GAAG,iDAA0D,CAAC;AAEnF,qEAAqE;AACrE,MAAM,CAAC,MAAM,iBAAiB,GAAG,0DAAmE,CAAC"}
|
|
@@ -0,0 +1,43 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
|
|
3
|
+
* Source: specs/device/set-wake/0.1/payload.schema.json
|
|
4
|
+
*/
|
|
5
|
+
/**
|
|
6
|
+
* A device conveys to its VTA the opaque WakeHandle it obtained from a push gateway, so the VTA can own the trigger allowlist and provision the gateway. Carries no platform push token — only the handle. Present `wakeHandle` sets/replaces the wake channel; absent clears it (device becomes non-wakeable). Idempotent; re-issued on token rotation. See the push wake-up binding (https://trusttasks.org/binding/push/0.1).
|
|
7
|
+
*/
|
|
8
|
+
export interface DeviceSetWakePayload {
|
|
9
|
+
wakeHandle?: WakeHandle;
|
|
10
|
+
/**
|
|
11
|
+
* OPTIONAL, advisory. The abstract platform behind the handle, for device/list visibility only. The VTA never sees the token; this is a non-authoritative hint.
|
|
12
|
+
*/
|
|
13
|
+
pushPlatform?: "apns" | "fcm" | "webpush";
|
|
14
|
+
/**
|
|
15
|
+
* OPTIONAL, advisory. DIDs the device suggests as wake triggers (e.g. its mediator). The VTA owns the allowlist and MAY ignore this entirely — it is a hint, not an instruction.
|
|
16
|
+
*/
|
|
17
|
+
suggestedTriggers?: string[];
|
|
18
|
+
ext?: Ext;
|
|
19
|
+
}
|
|
20
|
+
/**
|
|
21
|
+
* OPTIONAL. The opaque gateway-issued handle for this device's push channel. Omit to clear the wake channel (the VTA empties the gateway allowlist; the device becomes non-wakeable).
|
|
22
|
+
*/
|
|
23
|
+
export interface WakeHandle {
|
|
24
|
+
/**
|
|
25
|
+
* The push gateway that issued this handle and acts on it — a DID (DIDComm-reachable gateway) or an https URL (REST gateway). A trigger sends its contentless wake request here.
|
|
26
|
+
*/
|
|
27
|
+
gateway: string;
|
|
28
|
+
/**
|
|
29
|
+
* Opaque gateway-issued identifier for the device's push channel. Reveals no platform token. Rotates whenever the device re-registers a new platform token with the gateway; the device then re-conveys the fresh handle via device/set-wake.
|
|
30
|
+
*/
|
|
31
|
+
handle: string;
|
|
32
|
+
}
|
|
33
|
+
/**
|
|
34
|
+
* Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.
|
|
35
|
+
*/
|
|
36
|
+
export interface Ext {
|
|
37
|
+
[k: string]: unknown | undefined;
|
|
38
|
+
}
|
|
39
|
+
/** Trust Task type URI. */
|
|
40
|
+
export declare const TYPE_URI: "https://trusttasks.org/spec/device/set-wake/0.1";
|
|
41
|
+
/** Trust Task response type URI (request type URI + "#response"). */
|
|
42
|
+
export declare const RESPONSE_TYPE_URI: "https://trusttasks.org/spec/device/set-wake/0.1#response";
|
|
43
|
+
//# sourceMappingURL=payload.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"payload.d.ts","sourceRoot":"","sources":["../../../../src/device/set-wake/0.1/payload.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB;;OAEG;IACH,YAAY,CAAC,EAAE,MAAM,GAAG,KAAK,GAAG,SAAS,CAAC;IAC1C;;OAEG;IACH,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B,GAAG,CAAC,EAAE,GAAG,CAAC;CACX;AACD;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB;;OAEG;IACH,OAAO,EAAE,MAAM,CAAC;IAChB;;OAEG;IACH,MAAM,EAAE,MAAM,CAAC;CAChB;AACD;;GAEG;AACH,MAAM,WAAW,GAAG;IAClB,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC;CAClC;AAED,2BAA2B;AAC3B,eAAO,MAAM,QAAQ,EAAG,iDAA0D,CAAC;AAEnF,qEAAqE;AACrE,eAAO,MAAM,iBAAiB,EAAG,0DAAmE,CAAC"}
|
|
@@ -0,0 +1,9 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
|
|
3
|
+
* Source: specs/device/set-wake/0.1/payload.schema.json
|
|
4
|
+
*/
|
|
5
|
+
/** Trust Task type URI. */
|
|
6
|
+
export const TYPE_URI = "https://trusttasks.org/spec/device/set-wake/0.1";
|
|
7
|
+
/** Trust Task response type URI (request type URI + "#response"). */
|
|
8
|
+
export const RESPONSE_TYPE_URI = "https://trusttasks.org/spec/device/set-wake/0.1#response";
|
|
9
|
+
//# sourceMappingURL=payload.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"payload.js","sourceRoot":"","sources":["../../../../src/device/set-wake/0.1/payload.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAqCH,2BAA2B;AAC3B,MAAM,CAAC,MAAM,QAAQ,GAAG,iDAA0D,CAAC;AAEnF,qEAAqE;AACrE,MAAM,CAAC,MAAM,iBAAiB,GAAG,0DAAmE,CAAC"}
|
|
@@ -0,0 +1,43 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
|
|
3
|
+
* Source: specs/device/set-wake/0.2/payload.schema.json
|
|
4
|
+
*/
|
|
5
|
+
/**
|
|
6
|
+
* A device conveys to its VTA the opaque WakeHandle it obtained from a push gateway, so the VTA can own the trigger allowlist and provision the gateway. Carries no platform push token — only the handle. Present `wakeHandle` sets/replaces the wake channel; absent clears it (device becomes non-wakeable). Idempotent; re-issued on token rotation. See the push wake-up binding (https://trusttasks.org/binding/push/0.1).
|
|
7
|
+
*/
|
|
8
|
+
export interface DeviceSetWakePayload {
|
|
9
|
+
wakeHandle?: WakeHandle;
|
|
10
|
+
/**
|
|
11
|
+
* OPTIONAL, advisory. The abstract platform behind the handle, for device/list visibility only. The VTA never sees the token; this is a non-authoritative hint.
|
|
12
|
+
*/
|
|
13
|
+
pushPlatform?: "apns" | "fcm" | "webpush";
|
|
14
|
+
/**
|
|
15
|
+
* OPTIONAL, advisory. DIDs the device suggests as wake triggers (e.g. its mediator). The VTA owns the allowlist and MAY ignore this entirely — it is a hint, not an instruction.
|
|
16
|
+
*/
|
|
17
|
+
suggestedTriggers?: string[];
|
|
18
|
+
ext?: Ext;
|
|
19
|
+
}
|
|
20
|
+
/**
|
|
21
|
+
* OPTIONAL. The opaque gateway-issued handle for this device's push channel. Omit to clear the wake channel (the VTA empties the gateway allowlist; the device becomes non-wakeable).
|
|
22
|
+
*/
|
|
23
|
+
export interface WakeHandle {
|
|
24
|
+
/**
|
|
25
|
+
* The push gateway that issued this handle and acts on it — a DID (DIDComm-reachable gateway) or an https URL (REST gateway). A trigger sends its contentless wake request here.
|
|
26
|
+
*/
|
|
27
|
+
gateway: string;
|
|
28
|
+
/**
|
|
29
|
+
* Opaque gateway-issued identifier for the device's push channel. Reveals no platform token. Rotates whenever the device re-registers a new platform token with the gateway; the device then re-conveys the fresh handle via device/set-wake.
|
|
30
|
+
*/
|
|
31
|
+
handle: string;
|
|
32
|
+
}
|
|
33
|
+
/**
|
|
34
|
+
* Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.
|
|
35
|
+
*/
|
|
36
|
+
export interface Ext {
|
|
37
|
+
[k: string]: unknown | undefined;
|
|
38
|
+
}
|
|
39
|
+
/** Trust Task type URI. */
|
|
40
|
+
export declare const TYPE_URI: "https://trusttasks.org/spec/device/set-wake/0.2";
|
|
41
|
+
/** Trust Task response type URI (request type URI + "#response"). */
|
|
42
|
+
export declare const RESPONSE_TYPE_URI: "https://trusttasks.org/spec/device/set-wake/0.2#response";
|
|
43
|
+
//# sourceMappingURL=payload.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"payload.d.ts","sourceRoot":"","sources":["../../../../src/device/set-wake/0.2/payload.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB;;OAEG;IACH,YAAY,CAAC,EAAE,MAAM,GAAG,KAAK,GAAG,SAAS,CAAC;IAC1C;;OAEG;IACH,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B,GAAG,CAAC,EAAE,GAAG,CAAC;CACX;AACD;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB;;OAEG;IACH,OAAO,EAAE,MAAM,CAAC;IAChB;;OAEG;IACH,MAAM,EAAE,MAAM,CAAC;CAChB;AACD;;GAEG;AACH,MAAM,WAAW,GAAG;IAClB,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC;CAClC;AAED,2BAA2B;AAC3B,eAAO,MAAM,QAAQ,EAAG,iDAA0D,CAAC;AAEnF,qEAAqE;AACrE,eAAO,MAAM,iBAAiB,EAAG,0DAAmE,CAAC"}
|
|
@@ -0,0 +1,9 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
|
|
3
|
+
* Source: specs/device/set-wake/0.2/payload.schema.json
|
|
4
|
+
*/
|
|
5
|
+
/** Trust Task type URI. */
|
|
6
|
+
export const TYPE_URI = "https://trusttasks.org/spec/device/set-wake/0.2";
|
|
7
|
+
/** Trust Task response type URI (request type URI + "#response"). */
|
|
8
|
+
export const RESPONSE_TYPE_URI = "https://trusttasks.org/spec/device/set-wake/0.2#response";
|
|
9
|
+
//# sourceMappingURL=payload.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"payload.js","sourceRoot":"","sources":["../../../../src/device/set-wake/0.2/payload.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAqCH,2BAA2B;AAC3B,MAAM,CAAC,MAAM,QAAQ,GAAG,iDAA0D,CAAC;AAEnF,qEAAqE;AACrE,MAAM,CAAC,MAAM,iBAAiB,GAAG,0DAAmE,CAAC"}
|
|
@@ -0,0 +1,37 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
|
|
3
|
+
* Source: specs/device/wipe/0.2/payload.schema.json
|
|
4
|
+
*/
|
|
5
|
+
/**
|
|
6
|
+
* The maintainer issues a wipe to a Companion or Service. The target is expected to destroy its local cache and (depending on scope) its device-local key material. The action is best-effort — a compromised device may silently drop the wipe — so the maintainer additionally revokes ACL access and rotates the device's cache-key derivation root, so that defence in depth means a non-compliant device is still neutralised.
|
|
7
|
+
*/
|
|
8
|
+
export interface DeviceWipePayload {
|
|
9
|
+
deviceId: string;
|
|
10
|
+
/**
|
|
11
|
+
* How aggressively the target should wipe:
|
|
12
|
+
* - `cache` — discard the encrypted vault cache; consumer can re-sync with valid creds.
|
|
13
|
+
* - `cacheAndKeys` — discard cache + device-local key material; consumer must re-onboard.
|
|
14
|
+
* - `full` — `cacheAndKeys` + clear all extension/app storage + revoke OS credential-provider registration where APIs permit.
|
|
15
|
+
*/
|
|
16
|
+
scope: "cache" | "cacheAndKeys" | "full";
|
|
17
|
+
/**
|
|
18
|
+
* Human-readable reason. Required (not optional) because every wipe is consequential and the audit log must capture intent.
|
|
19
|
+
*/
|
|
20
|
+
reason: string;
|
|
21
|
+
/**
|
|
22
|
+
* Wipe-issuance timestamp; identical to the document's `issuedAt`, repeated here so the body is self-contained for offline-queued delivery.
|
|
23
|
+
*/
|
|
24
|
+
issuedAt?: string;
|
|
25
|
+
ext?: Ext;
|
|
26
|
+
}
|
|
27
|
+
/**
|
|
28
|
+
* Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.
|
|
29
|
+
*/
|
|
30
|
+
export interface Ext {
|
|
31
|
+
[k: string]: unknown | undefined;
|
|
32
|
+
}
|
|
33
|
+
/** Trust Task type URI. */
|
|
34
|
+
export declare const TYPE_URI: "https://trusttasks.org/spec/device/wipe/0.2";
|
|
35
|
+
/** Trust Task response type URI (request type URI + "#response"). */
|
|
36
|
+
export declare const RESPONSE_TYPE_URI: "https://trusttasks.org/spec/device/wipe/0.2#response";
|
|
37
|
+
//# sourceMappingURL=payload.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"payload.d.ts","sourceRoot":"","sources":["../../../../src/device/wipe/0.2/payload.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB;;;;;OAKG;IACH,KAAK,EAAE,OAAO,GAAG,cAAc,GAAG,MAAM,CAAC;IACzC;;OAEG;IACH,MAAM,EAAE,MAAM,CAAC;IACf;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,GAAG,CAAC,EAAE,GAAG,CAAC;CACX;AACD;;GAEG;AACH,MAAM,WAAW,GAAG;IAClB,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC;CAClC;AAED,2BAA2B;AAC3B,eAAO,MAAM,QAAQ,EAAG,6CAAsD,CAAC;AAE/E,qEAAqE;AACrE,eAAO,MAAM,iBAAiB,EAAG,sDAA+D,CAAC"}
|
|
@@ -0,0 +1,9 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
|
|
3
|
+
* Source: specs/device/wipe/0.2/payload.schema.json
|
|
4
|
+
*/
|
|
5
|
+
/** Trust Task type URI. */
|
|
6
|
+
export const TYPE_URI = "https://trusttasks.org/spec/device/wipe/0.2";
|
|
7
|
+
/** Trust Task response type URI (request type URI + "#response"). */
|
|
8
|
+
export const RESPONSE_TYPE_URI = "https://trusttasks.org/spec/device/wipe/0.2#response";
|
|
9
|
+
//# sourceMappingURL=payload.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"payload.js","sourceRoot":"","sources":["../../../../src/device/wipe/0.2/payload.ts"],"names":[],"mappings":"AAAA;;;GAGG;AA+BH,2BAA2B;AAC3B,MAAM,CAAC,MAAM,QAAQ,GAAG,6CAAsD,CAAC;AAE/E,qEAAqE;AACrE,MAAM,CAAC,MAAM,iBAAiB,GAAG,sDAA+D,CAAC"}
|
|
@@ -3,9 +3,12 @@
|
|
|
3
3
|
* Source: specs/did-management/did/check-name/0.1/payload.schema.json
|
|
4
4
|
*/
|
|
5
5
|
export interface DIDManagementCheckNamePayload {
|
|
6
|
-
path: string;
|
|
7
6
|
/**
|
|
8
|
-
*
|
|
7
|
+
* Local path to test. REQUIRED for an availability probe (`reserve: false`). OPTIONAL when `reserve: true`: omit it to ask the host to auto-assign a fresh, server-generated mnemonic for the reservation.
|
|
8
|
+
*/
|
|
9
|
+
path?: string;
|
|
10
|
+
/**
|
|
11
|
+
* When true and the path is available — or, when `path` is omitted, always — atomically reserve a slot under the caller and return the resulting DidRecord. When `path` is omitted the host generates a fresh unused mnemonic (auto-assign).
|
|
9
12
|
*/
|
|
10
13
|
reserve?: boolean;
|
|
11
14
|
/**
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"payload.d.ts","sourceRoot":"","sources":["../../../../../src/did-management/did/check-name/0.1/payload.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,MAAM,WAAW,6BAA6B;IAC5C,IAAI,EAAE,MAAM,CAAC;
|
|
1
|
+
{"version":3,"file":"payload.d.ts","sourceRoot":"","sources":["../../../../../src/did-management/did/check-name/0.1/payload.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,MAAM,WAAW,6BAA6B;IAC5C;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;OAEG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,GAAG,CAAC,EAAE,GAAG,CAAC;CACX;AACD;;GAEG;AACH,MAAM,WAAW,GAAG;IAClB,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC;CAClC;AAED,2BAA2B;AAC3B,eAAO,MAAM,QAAQ,EAAG,+DAAwE,CAAC;AAEjG,qEAAqE;AACrE,eAAO,MAAM,iBAAiB,EAAG,wEAAiF,CAAC"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"payload.js","sourceRoot":"","sources":["../../../../../src/did-management/did/check-name/0.1/payload.ts"],"names":[],"mappings":"AAAA;;;GAGG;
|
|
1
|
+
{"version":3,"file":"payload.js","sourceRoot":"","sources":["../../../../../src/did-management/did/check-name/0.1/payload.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAwBH,2BAA2B;AAC3B,MAAM,CAAC,MAAM,QAAQ,GAAG,+DAAwE,CAAC;AAEjG,qEAAqE;AACrE,MAAM,CAAC,MAAM,iBAAiB,GAAG,wEAAiF,CAAC"}
|
package/dist/index.d.ts
CHANGED
|
@@ -1,40 +1,54 @@
|
|
|
1
1
|
/** Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND. */
|
|
2
|
-
export * as
|
|
3
|
-
export * as
|
|
2
|
+
export * as FrameworkShared_v0_1 from "./_framework/0.1/framework";
|
|
3
|
+
export * as FrameworkShared_v0_2 from "./_framework/0.2/framework";
|
|
4
|
+
export * as AclEntryShared_v0_1 from "./acl/_shared/0.1/acl-entry";
|
|
4
5
|
export * as AclChangeRole_v0_1 from "./acl/change-role/0.1/payload";
|
|
5
6
|
export * as AclGrant_v0_1 from "./acl/grant/0.1/payload";
|
|
6
7
|
export * as AclList_v0_1 from "./acl/list/0.1/payload";
|
|
7
8
|
export * as AclRevoke_v0_1 from "./acl/revoke/0.1/payload";
|
|
8
9
|
export * as AclShow_v0_1 from "./acl/show/0.1/payload";
|
|
9
10
|
export * as AclSwapKey_v0_1 from "./acl/swap-key/0.1/payload";
|
|
10
|
-
export * as
|
|
11
|
-
export * as
|
|
12
|
-
export * as
|
|
11
|
+
export * as SessionShared_v0_1 from "./auth/_shared/0.1/session";
|
|
12
|
+
export * as TokensShared_v0_1 from "./auth/_shared/0.1/tokens";
|
|
13
|
+
export * as WebauthnShared_v0_1 from "./auth/_shared/0.1/webauthn";
|
|
13
14
|
export * as AuthAuthenticate_v0_1 from "./auth/authenticate/0.1/payload";
|
|
14
15
|
export * as AuthChallenge_v0_1 from "./auth/challenge/0.1/payload";
|
|
15
16
|
export * as AuthPasskeyEnrollFinish_v0_1 from "./auth/passkey/enroll/finish/0.1/payload";
|
|
16
17
|
export * as AuthPasskeyEnrollInvite_v0_1 from "./auth/passkey/enroll/invite/0.1/payload";
|
|
17
18
|
export * as AuthPasskeyEnrollStart_v0_1 from "./auth/passkey/enroll/start/0.1/payload";
|
|
18
19
|
export * as AuthPasskeyLoginFinish_v0_1 from "./auth/passkey/login/finish/0.1/payload";
|
|
20
|
+
export * as AuthPasskeyLoginFinish_v0_2 from "./auth/passkey/login/finish/0.2/payload";
|
|
19
21
|
export * as AuthPasskeyLoginStart_v0_1 from "./auth/passkey/login/start/0.1/payload";
|
|
22
|
+
export * as AuthPasskeyLoginStart_v0_2 from "./auth/passkey/login/start/0.2/payload";
|
|
20
23
|
export * as AuthRefresh_v0_1 from "./auth/refresh/0.1/payload";
|
|
21
24
|
export * as AuthRevokeSession_v0_1 from "./auth/revoke-session/0.1/payload";
|
|
22
25
|
export * as AuthSessionsList_v0_1 from "./auth/sessions/list/0.1/payload";
|
|
23
26
|
export * as AuthStepUpApproveRequest_v0_1 from "./auth/step-up/approve-request/0.1/payload";
|
|
27
|
+
export * as AuthStepUpApproveRequest_v0_2 from "./auth/step-up/approve-request/0.2/payload";
|
|
24
28
|
export * as AuthStepUpApproveResponse_v0_1 from "./auth/step-up/approve-response/0.1/payload";
|
|
29
|
+
export * as AuthStepUpApproveResponse_v0_2 from "./auth/step-up/approve-response/0.2/payload";
|
|
30
|
+
export * as AuthStepUpPolicy_v0_1 from "./auth/step-up/policy/0.1/payload";
|
|
31
|
+
export * as AuthStepUpPolicy_v0_2 from "./auth/step-up/policy/0.2/payload";
|
|
25
32
|
export * as AuthWhoami_v0_1 from "./auth/whoami/0.1/payload";
|
|
26
33
|
export * as ConfirmRequest_v0_1 from "./confirm/request/0.1/payload";
|
|
27
34
|
export * as ConfirmResponse_v0_1 from "./confirm/response/0.1/payload";
|
|
28
|
-
export * as
|
|
35
|
+
export * as DeviceBindingShared_v0_1 from "./device/_shared/0.1/device-binding";
|
|
36
|
+
export * as DeviceBindingShared_v0_2 from "./device/_shared/0.2/device-binding";
|
|
29
37
|
export * as DeviceDisable_v0_1 from "./device/disable/0.1/payload";
|
|
30
38
|
export * as DeviceHeartbeat_v0_1 from "./device/heartbeat/0.1/payload";
|
|
39
|
+
export * as DeviceHeartbeat_v0_2 from "./device/heartbeat/0.2/payload";
|
|
31
40
|
export * as DeviceList_v0_1 from "./device/list/0.1/payload";
|
|
41
|
+
export * as DeviceList_v0_2 from "./device/list/0.2/payload";
|
|
32
42
|
export * as DeviceRegister_v0_1 from "./device/register/0.1/payload";
|
|
43
|
+
export * as DeviceRegister_v0_2 from "./device/register/0.2/payload";
|
|
44
|
+
export * as DeviceSetWake_v0_1 from "./device/set-wake/0.1/payload";
|
|
45
|
+
export * as DeviceSetWake_v0_2 from "./device/set-wake/0.2/payload";
|
|
33
46
|
export * as DeviceWipe_v0_1 from "./device/wipe/0.1/payload";
|
|
34
|
-
export * as
|
|
35
|
-
export * as
|
|
36
|
-
export * as
|
|
37
|
-
export * as
|
|
47
|
+
export * as DeviceWipe_v0_2 from "./device/wipe/0.2/payload";
|
|
48
|
+
export * as WebvhShared_v0_1 from "./did-management/_shared/0.1/did-method-extensions/webvh";
|
|
49
|
+
export * as DidRecordShared_v0_1 from "./did-management/_shared/0.1/did-record";
|
|
50
|
+
export * as DomainEntryShared_v0_1 from "./did-management/_shared/0.1/domain-entry";
|
|
51
|
+
export * as ServiceInstanceShared_v0_1 from "./did-management/_shared/0.1/service-instance";
|
|
38
52
|
export * as DidManagementDidChangeOwner_v0_1 from "./did-management/did/change-owner/0.1/payload";
|
|
39
53
|
export * as DidManagementDidCheckName_v0_1 from "./did-management/did/check-name/0.1/payload";
|
|
40
54
|
export * as DidManagementDidDelete_v0_1 from "./did-management/did/delete/0.1/payload";
|
|
@@ -60,30 +74,62 @@ export * as DidManagementRegistryDeregister_v0_1 from "./did-management/registry
|
|
|
60
74
|
export * as DidManagementServerHealth_v0_1 from "./did-management/server/health/0.1/payload";
|
|
61
75
|
export * as DidManagementServerRegister_v0_1 from "./did-management/server/register/0.1/payload";
|
|
62
76
|
export * as DidManagementServerStatsSync_v0_1 from "./did-management/server/stats-sync/0.1/payload";
|
|
63
|
-
export * as
|
|
77
|
+
export * as PolicyShared_v0_1 from "./policy/_shared/0.1/policy";
|
|
78
|
+
export * as PolicyShared_v0_2 from "./policy/_shared/0.2/policy";
|
|
64
79
|
export * as PolicyDelete_v0_1 from "./policy/delete/0.1/payload";
|
|
65
80
|
export * as PolicyEvaluate_v0_1 from "./policy/evaluate/0.1/payload";
|
|
81
|
+
export * as PolicyEvaluate_v0_2 from "./policy/evaluate/0.2/payload";
|
|
66
82
|
export * as PolicyList_v0_1 from "./policy/list/0.1/payload";
|
|
83
|
+
export * as PolicyList_v0_2 from "./policy/list/0.2/payload";
|
|
67
84
|
export * as PolicyUpsert_v0_1 from "./policy/upsert/0.1/payload";
|
|
85
|
+
export * as PolicyUpsert_v0_2 from "./policy/upsert/0.2/payload";
|
|
68
86
|
export * as ProvisionIntegration_v0_1 from "./provision/integration/0.1/payload";
|
|
69
|
-
export * as
|
|
87
|
+
export * as ProvisionIntegration_v0_2 from "./provision/integration/0.2/payload";
|
|
88
|
+
export * as PushProvision_v0_1 from "./push/provision/0.1/payload";
|
|
89
|
+
export * as PushProvision_v0_2 from "./push/provision/0.2/payload";
|
|
90
|
+
export * as PushRegister_v0_1 from "./push/register/0.1/payload";
|
|
91
|
+
export * as PushRegister_v0_2 from "./push/register/0.2/payload";
|
|
92
|
+
export * as PushWake_v0_1 from "./push/wake/0.1/payload";
|
|
93
|
+
export * as PushWake_v0_2 from "./push/wake/0.2/payload";
|
|
94
|
+
export * as SyncEventShared_v0_1 from "./sync/_shared/0.1/sync-event";
|
|
95
|
+
export * as SyncEventShared_v0_2 from "./sync/_shared/0.2/sync-event";
|
|
70
96
|
export * as SyncEvent_v0_1 from "./sync/event/0.1/payload";
|
|
97
|
+
export * as SyncEvent_v0_2 from "./sync/event/0.2/payload";
|
|
71
98
|
export * as TrustTaskDiscovery_v0_1 from "./trust-task-discovery/0.1/payload";
|
|
72
99
|
export * as TrustTaskError_v0_1 from "./trust-task-error/0.1/payload";
|
|
73
|
-
export * as
|
|
74
|
-
export * as
|
|
75
|
-
export * as
|
|
76
|
-
export * as
|
|
77
|
-
export * as
|
|
100
|
+
export * as TrustTaskError_v0_2 from "./trust-task-error/0.2/payload";
|
|
101
|
+
export * as ConsumerContextShared_v0_1 from "./vault/_shared/0.1/consumer-context";
|
|
102
|
+
export * as SealedEnvelopeShared_v0_1 from "./vault/_shared/0.1/sealed-envelope";
|
|
103
|
+
export * as SessionBlobShared_v0_1 from "./vault/_shared/0.1/session-blob";
|
|
104
|
+
export * as VaultEntryShared_v0_1 from "./vault/_shared/0.1/vault-entry";
|
|
105
|
+
export * as VaultSecretShared_v0_1 from "./vault/_shared/0.1/vault-secret";
|
|
106
|
+
export * as ConsumerContextShared_v0_2 from "./vault/_shared/0.2/consumer-context";
|
|
107
|
+
export * as SealedEnvelopeShared_v0_2 from "./vault/_shared/0.2/sealed-envelope";
|
|
108
|
+
export * as SessionBlobShared_v0_2 from "./vault/_shared/0.2/session-blob";
|
|
109
|
+
export * as VaultEntryShared_v0_2 from "./vault/_shared/0.2/vault-entry";
|
|
110
|
+
export * as VaultSecretShared_v0_2 from "./vault/_shared/0.2/vault-secret";
|
|
78
111
|
export * as VaultDelete_v0_1 from "./vault/delete/0.1/payload";
|
|
79
112
|
export * as VaultGet_v0_1 from "./vault/get/0.1/payload";
|
|
113
|
+
export * as VaultGet_v0_2 from "./vault/get/0.2/payload";
|
|
80
114
|
export * as VaultList_v0_1 from "./vault/list/0.1/payload";
|
|
115
|
+
export * as VaultList_v0_2 from "./vault/list/0.2/payload";
|
|
81
116
|
export * as VaultProxyLogin_v0_1 from "./vault/proxy-login/0.1/payload";
|
|
117
|
+
export * as VaultProxyLogin_v0_2 from "./vault/proxy-login/0.2/payload";
|
|
82
118
|
export * as VaultRelease_v0_1 from "./vault/release/0.1/payload";
|
|
119
|
+
export * as VaultRelease_v0_2 from "./vault/release/0.2/payload";
|
|
83
120
|
export * as VaultSignTrustTask_v0_1 from "./vault/sign-trust-task/0.1/payload";
|
|
121
|
+
export * as VaultSignTrustTask_v0_2 from "./vault/sign-trust-task/0.2/payload";
|
|
84
122
|
export * as VaultSync_v0_1 from "./vault/sync/0.1/payload";
|
|
123
|
+
export * as VaultSync_v0_2 from "./vault/sync/0.2/payload";
|
|
85
124
|
export * as VaultUpsert_v0_1 from "./vault/upsert/0.1/payload";
|
|
125
|
+
export * as VaultUpsert_v0_2 from "./vault/upsert/0.2/payload";
|
|
86
126
|
export * as VaultUsage_v0_1 from "./vault/usage/0.1/payload";
|
|
127
|
+
export * as VaultUsage_v0_2 from "./vault/usage/0.2/payload";
|
|
128
|
+
export * as PasskeyVmShared_v0_1 from "./vta/_shared/0.1/passkey-vm";
|
|
129
|
+
export * as VtaPasskeyVmsEnrollChallenge_v0_1 from "./vta/passkey-vms/enroll-challenge/0.1/payload";
|
|
130
|
+
export * as VtaPasskeyVmsEnrollSubmit_v0_1 from "./vta/passkey-vms/enroll-submit/0.1/payload";
|
|
131
|
+
export * as VtaPasskeyVmsList_v0_1 from "./vta/passkey-vms/list/0.1/payload";
|
|
132
|
+
export * as VtaPasskeyVmsRevoke_v0_1 from "./vta/passkey-vms/revoke/0.1/payload";
|
|
87
133
|
export * as WebvhSyncDelete_v0_1 from "./webvh/sync/delete/0.1/payload";
|
|
88
134
|
export * as WebvhSyncUpdate_v0_1 from "./webvh/sync/update/0.1/payload";
|
|
89
135
|
export * as WebvhWitnessPublish_v0_1 from "./webvh/witness/publish/0.1/payload";
|
package/dist/index.d.ts.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,wEAAwE;AAExE,OAAO,KAAK,
|
|
1
|
+
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,wEAAwE;AAExE,OAAO,KAAK,oBAAoB,MAAM,4BAA4B,CAAC;AACnE,OAAO,KAAK,oBAAoB,MAAM,4BAA4B,CAAC;AACnE,OAAO,KAAK,mBAAmB,MAAM,6BAA6B,CAAC;AACnE,OAAO,KAAK,kBAAkB,MAAM,+BAA+B,CAAC;AACpE,OAAO,KAAK,aAAa,MAAM,yBAAyB,CAAC;AACzD,OAAO,KAAK,YAAY,MAAM,wBAAwB,CAAC;AACvD,OAAO,KAAK,cAAc,MAAM,0BAA0B,CAAC;AAC3D,OAAO,KAAK,YAAY,MAAM,wBAAwB,CAAC;AACvD,OAAO,KAAK,eAAe,MAAM,4BAA4B,CAAC;AAC9D,OAAO,KAAK,kBAAkB,MAAM,4BAA4B,CAAC;AACjE,OAAO,KAAK,iBAAiB,MAAM,2BAA2B,CAAC;AAC/D,OAAO,KAAK,mBAAmB,MAAM,6BAA6B,CAAC;AACnE,OAAO,KAAK,qBAAqB,MAAM,iCAAiC,CAAC;AACzE,OAAO,KAAK,kBAAkB,MAAM,8BAA8B,CAAC;AACnE,OAAO,KAAK,4BAA4B,MAAM,0CAA0C,CAAC;AACzF,OAAO,KAAK,4BAA4B,MAAM,0CAA0C,CAAC;AACzF,OAAO,KAAK,2BAA2B,MAAM,yCAAyC,CAAC;AACvF,OAAO,KAAK,2BAA2B,MAAM,yCAAyC,CAAC;AACvF,OAAO,KAAK,2BAA2B,MAAM,yCAAyC,CAAC;AACvF,OAAO,KAAK,0BAA0B,MAAM,wCAAwC,CAAC;AACrF,OAAO,KAAK,0BAA0B,MAAM,wCAAwC,CAAC;AACrF,OAAO,KAAK,gBAAgB,MAAM,4BAA4B,CAAC;AAC/D,OAAO,KAAK,sBAAsB,MAAM,mCAAmC,CAAC;AAC5E,OAAO,KAAK,qBAAqB,MAAM,kCAAkC,CAAC;AAC1E,OAAO,KAAK,6BAA6B,MAAM,4CAA4C,CAAC;AAC5F,OAAO,KAAK,6BAA6B,MAAM,4CAA4C,CAAC;AAC5F,OAAO,KAAK,8BAA8B,MAAM,6CAA6C,CAAC;AAC9F,OAAO,KAAK,8BAA8B,MAAM,6CAA6C,CAAC;AAC9F,OAAO,KAAK,qBAAqB,MAAM,mCAAmC,CAAC;AAC3E,OAAO,KAAK,qBAAqB,MAAM,mCAAmC,CAAC;AAC3E,OAAO,KAAK,eAAe,MAAM,2BAA2B,CAAC;AAC7D,OAAO,KAAK,mBAAmB,MAAM,+BAA+B,CAAC;AACrE,OAAO,KAAK,oBAAoB,MAAM,gCAAgC,CAAC;AACvE,OAAO,KAAK,wBAAwB,MAAM,qCAAqC,CAAC;AAChF,OAAO,KAAK,wBAAwB,MAAM,qCAAqC,CAAC;AAChF,OAAO,KAAK,kBAAkB,MAAM,8BAA8B,CAAC;AACnE,OAAO,KAAK,oBAAoB,MAAM,gCAAgC,CAAC;AACvE,OAAO,KAAK,oBAAoB,MAAM,gCAAgC,CAAC;AACvE,OAAO,KAAK,eAAe,MAAM,2BAA2B,CAAC;AAC7D,OAAO,KAAK,eAAe,MAAM,2BAA2B,CAAC;AAC7D,OAAO,KAAK,mBAAmB,MAAM,+BAA+B,CAAC;AACrE,OAAO,KAAK,mBAAmB,MAAM,+BAA+B,CAAC;AACrE,OAAO,KAAK,kBAAkB,MAAM,+BAA+B,CAAC;AACpE,OAAO,KAAK,kBAAkB,MAAM,+BAA+B,CAAC;AACpE,OAAO,KAAK,eAAe,MAAM,2BAA2B,CAAC;AAC7D,OAAO,KAAK,eAAe,MAAM,2BAA2B,CAAC;AAC7D,OAAO,KAAK,gBAAgB,MAAM,0DAA0D,CAAC;AAC7F,OAAO,KAAK,oBAAoB,MAAM,yCAAyC,CAAC;AAChF,OAAO,KAAK,sBAAsB,MAAM,2CAA2C,CAAC;AACpF,OAAO,KAAK,0BAA0B,MAAM,+CAA+C,CAAC;AAC5F,OAAO,KAAK,gCAAgC,MAAM,+CAA+C,CAAC;AAClG,OAAO,KAAK,8BAA8B,MAAM,6CAA6C,CAAC;AAC9F,OAAO,KAAK,2BAA2B,MAAM,yCAAyC,CAAC;AACvF,OAAO,KAAK,4BAA4B,MAAM,0CAA0C,CAAC;AACzF,OAAO,KAAK,2BAA2B,MAAM,yCAAyC,CAAC;AACvF,OAAO,KAAK,yBAAyB,MAAM,uCAAuC,CAAC;AACnF,OAAO,KAAK,yBAAyB,MAAM,uCAAuC,CAAC;AACnF,OAAO,KAAK,kCAAkC,MAAM,iDAAiD,CAAC;AACtG,OAAO,KAAK,4BAA4B,MAAM,0CAA0C,CAAC;AACzF,OAAO,KAAK,6BAA6B,MAAM,2CAA2C,CAAC;AAC3F,OAAO,KAAK,6BAA6B,MAAM,2CAA2C,CAAC;AAC3F,OAAO,KAAK,8BAA8B,MAAM,4CAA4C,CAAC;AAC7F,OAAO,KAAK,8BAA8B,MAAM,4CAA4C,CAAC;AAC7F,OAAO,KAAK,+BAA+B,MAAM,6CAA6C,CAAC;AAC/F,OAAO,KAAK,8BAA8B,MAAM,4CAA4C,CAAC;AAC7F,OAAO,KAAK,6BAA6B,MAAM,2CAA2C,CAAC;AAC3F,OAAO,KAAK,kCAAkC,MAAM,iDAAiD,CAAC;AACtG,OAAO,KAAK,gCAAgC,MAAM,8CAA8C,CAAC;AACjG,OAAO,KAAK,8BAA8B,MAAM,4CAA4C,CAAC;AAC7F,OAAO,KAAK,2BAA2B,MAAM,yCAAyC,CAAC;AACvF,OAAO,KAAK,uCAAuC,MAAM,sDAAsD,CAAC;AAChH,OAAO,KAAK,oCAAoC,MAAM,kDAAkD,CAAC;AACzG,OAAO,KAAK,8BAA8B,MAAM,4CAA4C,CAAC;AAC7F,OAAO,KAAK,gCAAgC,MAAM,8CAA8C,CAAC;AACjG,OAAO,KAAK,iCAAiC,MAAM,gDAAgD,CAAC;AACpG,OAAO,KAAK,iBAAiB,MAAM,6BAA6B,CAAC;AACjE,OAAO,KAAK,iBAAiB,MAAM,6BAA6B,CAAC;AACjE,OAAO,KAAK,iBAAiB,MAAM,6BAA6B,CAAC;AACjE,OAAO,KAAK,mBAAmB,MAAM,+BAA+B,CAAC;AACrE,OAAO,KAAK,mBAAmB,MAAM,+BAA+B,CAAC;AACrE,OAAO,KAAK,eAAe,MAAM,2BAA2B,CAAC;AAC7D,OAAO,KAAK,eAAe,MAAM,2BAA2B,CAAC;AAC7D,OAAO,KAAK,iBAAiB,MAAM,6BAA6B,CAAC;AACjE,OAAO,KAAK,iBAAiB,MAAM,6BAA6B,CAAC;AACjE,OAAO,KAAK,yBAAyB,MAAM,qCAAqC,CAAC;AACjF,OAAO,KAAK,yBAAyB,MAAM,qCAAqC,CAAC;AACjF,OAAO,KAAK,kBAAkB,MAAM,8BAA8B,CAAC;AACnE,OAAO,KAAK,kBAAkB,MAAM,8BAA8B,CAAC;AACnE,OAAO,KAAK,iBAAiB,MAAM,6BAA6B,CAAC;AACjE,OAAO,KAAK,iBAAiB,MAAM,6BAA6B,CAAC;AACjE,OAAO,KAAK,aAAa,MAAM,yBAAyB,CAAC;AACzD,OAAO,KAAK,aAAa,MAAM,yBAAyB,CAAC;AACzD,OAAO,KAAK,oBAAoB,MAAM,+BAA+B,CAAC;AACtE,OAAO,KAAK,oBAAoB,MAAM,+BAA+B,CAAC;AACtE,OAAO,KAAK,cAAc,MAAM,0BAA0B,CAAC;AAC3D,OAAO,KAAK,cAAc,MAAM,0BAA0B,CAAC;AAC3D,OAAO,KAAK,uBAAuB,MAAM,oCAAoC,CAAC;AAC9E,OAAO,KAAK,mBAAmB,MAAM,gCAAgC,CAAC;AACtE,OAAO,KAAK,mBAAmB,MAAM,gCAAgC,CAAC;AACtE,OAAO,KAAK,0BAA0B,MAAM,sCAAsC,CAAC;AACnF,OAAO,KAAK,yBAAyB,MAAM,qCAAqC,CAAC;AACjF,OAAO,KAAK,sBAAsB,MAAM,kCAAkC,CAAC;AAC3E,OAAO,KAAK,qBAAqB,MAAM,iCAAiC,CAAC;AACzE,OAAO,KAAK,sBAAsB,MAAM,kCAAkC,CAAC;AAC3E,OAAO,KAAK,0BAA0B,MAAM,sCAAsC,CAAC;AACnF,OAAO,KAAK,yBAAyB,MAAM,qCAAqC,CAAC;AACjF,OAAO,KAAK,sBAAsB,MAAM,kCAAkC,CAAC;AAC3E,OAAO,KAAK,qBAAqB,MAAM,iCAAiC,CAAC;AACzE,OAAO,KAAK,sBAAsB,MAAM,kCAAkC,CAAC;AAC3E,OAAO,KAAK,gBAAgB,MAAM,4BAA4B,CAAC;AAC/D,OAAO,KAAK,aAAa,MAAM,yBAAyB,CAAC;AACzD,OAAO,KAAK,aAAa,MAAM,yBAAyB,CAAC;AACzD,OAAO,KAAK,cAAc,MAAM,0BAA0B,CAAC;AAC3D,OAAO,KAAK,cAAc,MAAM,0BAA0B,CAAC;AAC3D,OAAO,KAAK,oBAAoB,MAAM,iCAAiC,CAAC;AACxE,OAAO,KAAK,oBAAoB,MAAM,iCAAiC,CAAC;AACxE,OAAO,KAAK,iBAAiB,MAAM,6BAA6B,CAAC;AACjE,OAAO,KAAK,iBAAiB,MAAM,6BAA6B,CAAC;AACjE,OAAO,KAAK,uBAAuB,MAAM,qCAAqC,CAAC;AAC/E,OAAO,KAAK,uBAAuB,MAAM,qCAAqC,CAAC;AAC/E,OAAO,KAAK,cAAc,MAAM,0BAA0B,CAAC;AAC3D,OAAO,KAAK,cAAc,MAAM,0BAA0B,CAAC;AAC3D,OAAO,KAAK,gBAAgB,MAAM,4BAA4B,CAAC;AAC/D,OAAO,KAAK,gBAAgB,MAAM,4BAA4B,CAAC;AAC/D,OAAO,KAAK,eAAe,MAAM,2BAA2B,CAAC;AAC7D,OAAO,KAAK,eAAe,MAAM,2BAA2B,CAAC;AAC7D,OAAO,KAAK,oBAAoB,MAAM,8BAA8B,CAAC;AACrE,OAAO,KAAK,iCAAiC,MAAM,gDAAgD,CAAC;AACpG,OAAO,KAAK,8BAA8B,MAAM,6CAA6C,CAAC;AAC9F,OAAO,KAAK,sBAAsB,MAAM,oCAAoC,CAAC;AAC7E,OAAO,KAAK,wBAAwB,MAAM,sCAAsC,CAAC;AACjF,OAAO,KAAK,oBAAoB,MAAM,iCAAiC,CAAC;AACxE,OAAO,KAAK,oBAAoB,MAAM,iCAAiC,CAAC;AACxE,OAAO,KAAK,wBAAwB,MAAM,qCAAqC,CAAC"}
|