@openvtc/trust-tasks 0.21.1 → 0.21.3
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +66 -0
- package/dist/index.d.ts +5 -0
- package/dist/index.d.ts.map +1 -1
- package/dist/index.js +5 -0
- package/dist/index.js.map +1 -1
- package/dist/vta/attestation/config-report/0.1/payload.d.ts +378 -0
- package/dist/vta/attestation/config-report/0.1/payload.d.ts.map +1 -0
- package/dist/vta/attestation/config-report/0.1/payload.js +212 -0
- package/dist/vta/attestation/config-report/0.1/payload.js.map +1 -0
- package/dist/vta/attestation/report/0.1/payload.d.ts +350 -0
- package/dist/vta/attestation/report/0.1/payload.d.ts.map +1 -0
- package/dist/vta/attestation/report/0.1/payload.js +196 -0
- package/dist/vta/attestation/report/0.1/payload.js.map +1 -0
- package/dist/vta/attestation/status/0.1/payload.d.ts +274 -0
- package/dist/vta/attestation/status/0.1/payload.d.ts.map +1 -0
- package/dist/vta/attestation/status/0.1/payload.js +158 -0
- package/dist/vta/attestation/status/0.1/payload.js.map +1 -0
- package/dist/vta/services/report/0.1/payload.d.ts +618 -0
- package/dist/vta/services/report/0.1/payload.d.ts.map +1 -0
- package/dist/vta/services/report/0.1/payload.js +322 -0
- package/dist/vta/services/report/0.1/payload.js.map +1 -0
- package/dist/vta/services/update/1.1/payload.d.ts +490 -0
- package/dist/vta/services/update/1.1/payload.d.ts.map +1 -0
- package/dist/vta/services/update/1.1/payload.js +269 -0
- package/dist/vta/services/update/1.1/payload.js.map +1 -0
- package/package.json +1 -1
- package/src/index.ts +5 -0
- package/src/vta/attestation/config-report/0.1/payload.ts +273 -0
- package/src/vta/attestation/report/0.1/payload.ts +253 -0
- package/src/vta/attestation/status/0.1/payload.ts +203 -0
- package/src/vta/services/report/0.1/payload.ts +419 -0
- package/src/vta/services/update/1.1/payload.ts +326 -0
|
@@ -0,0 +1,274 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
|
|
3
|
+
* Source: specs/vta/attestation/status/0.1/payload.schema.json
|
|
4
|
+
*/
|
|
5
|
+
import type { Ext } from "../../../../_shared/components.js";
|
|
6
|
+
/**
|
|
7
|
+
* Asks an agent which trusted execution environment it runs in. The payload carries nothing. The outer document members (id, type, issuer, recipient, issuedAt, expiresAt, proof) are owned by the framework — SPEC §6.3.
|
|
8
|
+
*/
|
|
9
|
+
export interface VTAAttestationStatusPayload {
|
|
10
|
+
/**
|
|
11
|
+
* Ecosystem-defined extension members per SPEC.md §4.5.1.
|
|
12
|
+
*/
|
|
13
|
+
ext?: Ext;
|
|
14
|
+
}
|
|
15
|
+
export interface VTAAttestationStatusResponsePayload {
|
|
16
|
+
/**
|
|
17
|
+
* The platform whose evidence vta/attestation/report returns: nitro (AWS Nitro Enclaves), sev-snp (AMD SEV-SNP), or simulated (a development build whose evidence no verifier should accept).
|
|
18
|
+
*/
|
|
19
|
+
teeType: "nitro" | "sev-snp" | "simulated";
|
|
20
|
+
/**
|
|
21
|
+
* Whether the agent found the platform at boot. False means it was configured for one it did not find, and it produces no evidence.
|
|
22
|
+
*/
|
|
23
|
+
detected: boolean;
|
|
24
|
+
/**
|
|
25
|
+
* The platform's own version string, when it reports one. Informational.
|
|
26
|
+
*/
|
|
27
|
+
platformVersion?: string;
|
|
28
|
+
/**
|
|
29
|
+
* Ecosystem-defined extension members per SPEC.md §4.5.1.
|
|
30
|
+
*/
|
|
31
|
+
ext?: Ext;
|
|
32
|
+
}
|
|
33
|
+
/** Shared definitions this specification references, re-exported under the names it used to declare them with. */
|
|
34
|
+
export type { Ext };
|
|
35
|
+
/** Trust Task type URI. */
|
|
36
|
+
export declare const TYPE_URI: "https://trusttasks.org/spec/vta/attestation/status/0.1";
|
|
37
|
+
/** Stable alias for this specification's request payload shape. */
|
|
38
|
+
export type Payload = VTAAttestationStatusPayload;
|
|
39
|
+
/** Trust Task response type URI (request type URI + "#response"). */
|
|
40
|
+
export declare const RESPONSE_TYPE_URI: "https://trusttasks.org/spec/vta/attestation/status/0.1#response";
|
|
41
|
+
/** Stable alias for this specification's success-response payload shape. */
|
|
42
|
+
export type Response = VTAAttestationStatusResponsePayload;
|
|
43
|
+
/**
|
|
44
|
+
* This specification's payload schema, as a value.
|
|
45
|
+
*
|
|
46
|
+
* SPEC.md §7.2 item 2 is performed against this. It is shipped as data
|
|
47
|
+
* rather than only as a `.json` file because TypeScript types are erased
|
|
48
|
+
* at runtime: without a schema a consumer has nothing to validate, and
|
|
49
|
+
* every REQUIRED payload member is optional in practice. Cross-file
|
|
50
|
+
* `$ref`s are already inlined, so it needs no resolver.
|
|
51
|
+
*/
|
|
52
|
+
export declare const PAYLOAD_SCHEMA: {
|
|
53
|
+
readonly $schema: "https://json-schema.org/draft/2020-12/schema";
|
|
54
|
+
readonly $id: "https://trusttasks.org/spec/vta/attestation/status/0.1";
|
|
55
|
+
readonly title: "VTA Attestation — Status — payload";
|
|
56
|
+
readonly description: "Asks an agent which trusted execution environment it runs in. The payload carries nothing. The outer document members (id, type, issuer, recipient, issuedAt, expiresAt, proof) are owned by the framework — SPEC §6.3.";
|
|
57
|
+
readonly type: "object";
|
|
58
|
+
readonly additionalProperties: false;
|
|
59
|
+
readonly properties: {
|
|
60
|
+
readonly ext: {
|
|
61
|
+
readonly $ref: "#/$defs/Ext";
|
|
62
|
+
readonly description: "Ecosystem-defined extension members per SPEC.md §4.5.1.";
|
|
63
|
+
};
|
|
64
|
+
};
|
|
65
|
+
readonly $defs: {
|
|
66
|
+
readonly Response: {
|
|
67
|
+
readonly $anchor: "response";
|
|
68
|
+
readonly title: "VTA Attestation Status — response payload";
|
|
69
|
+
readonly type: "object";
|
|
70
|
+
readonly additionalProperties: false;
|
|
71
|
+
readonly required: readonly ["teeType", "detected"];
|
|
72
|
+
readonly properties: {
|
|
73
|
+
readonly teeType: {
|
|
74
|
+
readonly type: "string";
|
|
75
|
+
readonly enum: readonly ["nitro", "sev-snp", "simulated"];
|
|
76
|
+
readonly description: "The platform whose evidence vta/attestation/report returns: nitro (AWS Nitro Enclaves), sev-snp (AMD SEV-SNP), or simulated (a development build whose evidence no verifier should accept).";
|
|
77
|
+
};
|
|
78
|
+
readonly detected: {
|
|
79
|
+
readonly type: "boolean";
|
|
80
|
+
readonly description: "Whether the agent found the platform at boot. False means it was configured for one it did not find, and it produces no evidence.";
|
|
81
|
+
};
|
|
82
|
+
readonly platformVersion: {
|
|
83
|
+
readonly type: "string";
|
|
84
|
+
readonly minLength: 1;
|
|
85
|
+
readonly maxLength: 256;
|
|
86
|
+
readonly description: "The platform's own version string, when it reports one. Informational.";
|
|
87
|
+
};
|
|
88
|
+
readonly ext: {
|
|
89
|
+
readonly $ref: "#/$defs/Ext";
|
|
90
|
+
readonly description: "Ecosystem-defined extension members per SPEC.md §4.5.1.";
|
|
91
|
+
};
|
|
92
|
+
};
|
|
93
|
+
};
|
|
94
|
+
readonly Ext: {
|
|
95
|
+
readonly title: "Ext";
|
|
96
|
+
readonly description: "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.";
|
|
97
|
+
readonly type: "object";
|
|
98
|
+
readonly minProperties: 1;
|
|
99
|
+
readonly additionalProperties: true;
|
|
100
|
+
readonly propertyNames: {
|
|
101
|
+
readonly pattern: "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$";
|
|
102
|
+
};
|
|
103
|
+
};
|
|
104
|
+
};
|
|
105
|
+
};
|
|
106
|
+
/** As {@link PAYLOAD_SCHEMA}, for the success-response variant. */
|
|
107
|
+
export declare const RESPONSE_PAYLOAD_SCHEMA: {
|
|
108
|
+
readonly $schema: "https://json-schema.org/draft/2020-12/schema";
|
|
109
|
+
readonly $ref: "#/$defs/Response";
|
|
110
|
+
readonly $defs: {
|
|
111
|
+
readonly Response: {
|
|
112
|
+
readonly $anchor: "response";
|
|
113
|
+
readonly title: "VTA Attestation Status — response payload";
|
|
114
|
+
readonly type: "object";
|
|
115
|
+
readonly additionalProperties: false;
|
|
116
|
+
readonly required: readonly ["teeType", "detected"];
|
|
117
|
+
readonly properties: {
|
|
118
|
+
readonly teeType: {
|
|
119
|
+
readonly type: "string";
|
|
120
|
+
readonly enum: readonly ["nitro", "sev-snp", "simulated"];
|
|
121
|
+
readonly description: "The platform whose evidence vta/attestation/report returns: nitro (AWS Nitro Enclaves), sev-snp (AMD SEV-SNP), or simulated (a development build whose evidence no verifier should accept).";
|
|
122
|
+
};
|
|
123
|
+
readonly detected: {
|
|
124
|
+
readonly type: "boolean";
|
|
125
|
+
readonly description: "Whether the agent found the platform at boot. False means it was configured for one it did not find, and it produces no evidence.";
|
|
126
|
+
};
|
|
127
|
+
readonly platformVersion: {
|
|
128
|
+
readonly type: "string";
|
|
129
|
+
readonly minLength: 1;
|
|
130
|
+
readonly maxLength: 256;
|
|
131
|
+
readonly description: "The platform's own version string, when it reports one. Informational.";
|
|
132
|
+
};
|
|
133
|
+
readonly ext: {
|
|
134
|
+
readonly $ref: "#/$defs/Ext";
|
|
135
|
+
readonly description: "Ecosystem-defined extension members per SPEC.md §4.5.1.";
|
|
136
|
+
};
|
|
137
|
+
};
|
|
138
|
+
};
|
|
139
|
+
readonly Ext: {
|
|
140
|
+
readonly title: "Ext";
|
|
141
|
+
readonly description: "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.";
|
|
142
|
+
readonly type: "object";
|
|
143
|
+
readonly minProperties: 1;
|
|
144
|
+
readonly additionalProperties: true;
|
|
145
|
+
readonly propertyNames: {
|
|
146
|
+
readonly pattern: "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$";
|
|
147
|
+
};
|
|
148
|
+
};
|
|
149
|
+
};
|
|
150
|
+
};
|
|
151
|
+
/**
|
|
152
|
+
* SPEC.md §7.2 policy for the request variant, from this specification's
|
|
153
|
+
* front matter. Pass to `consumeInbound` — items 5b, 7 and 8 are
|
|
154
|
+
* per-specification and cannot be derived from the document alone, and
|
|
155
|
+
* item 2 needs the schema this carries.
|
|
156
|
+
*/
|
|
157
|
+
export declare const SPEC: {
|
|
158
|
+
readonly typeUri: "https://trusttasks.org/spec/vta/attestation/status/0.1";
|
|
159
|
+
readonly isBearer: false;
|
|
160
|
+
readonly isProofRequired: false;
|
|
161
|
+
readonly isRecipientRequired: true;
|
|
162
|
+
readonly isIssuedAtRequired: false;
|
|
163
|
+
readonly payloadSchema: {
|
|
164
|
+
readonly $schema: "https://json-schema.org/draft/2020-12/schema";
|
|
165
|
+
readonly $id: "https://trusttasks.org/spec/vta/attestation/status/0.1";
|
|
166
|
+
readonly title: "VTA Attestation — Status — payload";
|
|
167
|
+
readonly description: "Asks an agent which trusted execution environment it runs in. The payload carries nothing. The outer document members (id, type, issuer, recipient, issuedAt, expiresAt, proof) are owned by the framework — SPEC §6.3.";
|
|
168
|
+
readonly type: "object";
|
|
169
|
+
readonly additionalProperties: false;
|
|
170
|
+
readonly properties: {
|
|
171
|
+
readonly ext: {
|
|
172
|
+
readonly $ref: "#/$defs/Ext";
|
|
173
|
+
readonly description: "Ecosystem-defined extension members per SPEC.md §4.5.1.";
|
|
174
|
+
};
|
|
175
|
+
};
|
|
176
|
+
readonly $defs: {
|
|
177
|
+
readonly Response: {
|
|
178
|
+
readonly $anchor: "response";
|
|
179
|
+
readonly title: "VTA Attestation Status — response payload";
|
|
180
|
+
readonly type: "object";
|
|
181
|
+
readonly additionalProperties: false;
|
|
182
|
+
readonly required: readonly ["teeType", "detected"];
|
|
183
|
+
readonly properties: {
|
|
184
|
+
readonly teeType: {
|
|
185
|
+
readonly type: "string";
|
|
186
|
+
readonly enum: readonly ["nitro", "sev-snp", "simulated"];
|
|
187
|
+
readonly description: "The platform whose evidence vta/attestation/report returns: nitro (AWS Nitro Enclaves), sev-snp (AMD SEV-SNP), or simulated (a development build whose evidence no verifier should accept).";
|
|
188
|
+
};
|
|
189
|
+
readonly detected: {
|
|
190
|
+
readonly type: "boolean";
|
|
191
|
+
readonly description: "Whether the agent found the platform at boot. False means it was configured for one it did not find, and it produces no evidence.";
|
|
192
|
+
};
|
|
193
|
+
readonly platformVersion: {
|
|
194
|
+
readonly type: "string";
|
|
195
|
+
readonly minLength: 1;
|
|
196
|
+
readonly maxLength: 256;
|
|
197
|
+
readonly description: "The platform's own version string, when it reports one. Informational.";
|
|
198
|
+
};
|
|
199
|
+
readonly ext: {
|
|
200
|
+
readonly $ref: "#/$defs/Ext";
|
|
201
|
+
readonly description: "Ecosystem-defined extension members per SPEC.md §4.5.1.";
|
|
202
|
+
};
|
|
203
|
+
};
|
|
204
|
+
};
|
|
205
|
+
readonly Ext: {
|
|
206
|
+
readonly title: "Ext";
|
|
207
|
+
readonly description: "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.";
|
|
208
|
+
readonly type: "object";
|
|
209
|
+
readonly minProperties: 1;
|
|
210
|
+
readonly additionalProperties: true;
|
|
211
|
+
readonly propertyNames: {
|
|
212
|
+
readonly pattern: "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$";
|
|
213
|
+
};
|
|
214
|
+
};
|
|
215
|
+
};
|
|
216
|
+
};
|
|
217
|
+
};
|
|
218
|
+
/**
|
|
219
|
+
* SPEC.md §7.2 policy for the success-response variant. `isRecipientRequired`
|
|
220
|
+
* tracks the *issuer* party's requirement because a response swaps the
|
|
221
|
+
* parties (§7.3 item 5).
|
|
222
|
+
*/
|
|
223
|
+
export declare const RESPONSE_SPEC: {
|
|
224
|
+
readonly typeUri: "https://trusttasks.org/spec/vta/attestation/status/0.1#response";
|
|
225
|
+
readonly isBearer: false;
|
|
226
|
+
readonly isProofRequired: true;
|
|
227
|
+
readonly isRecipientRequired: true;
|
|
228
|
+
readonly isIssuedAtRequired: false;
|
|
229
|
+
readonly payloadSchema: {
|
|
230
|
+
readonly $schema: "https://json-schema.org/draft/2020-12/schema";
|
|
231
|
+
readonly $ref: "#/$defs/Response";
|
|
232
|
+
readonly $defs: {
|
|
233
|
+
readonly Response: {
|
|
234
|
+
readonly $anchor: "response";
|
|
235
|
+
readonly title: "VTA Attestation Status — response payload";
|
|
236
|
+
readonly type: "object";
|
|
237
|
+
readonly additionalProperties: false;
|
|
238
|
+
readonly required: readonly ["teeType", "detected"];
|
|
239
|
+
readonly properties: {
|
|
240
|
+
readonly teeType: {
|
|
241
|
+
readonly type: "string";
|
|
242
|
+
readonly enum: readonly ["nitro", "sev-snp", "simulated"];
|
|
243
|
+
readonly description: "The platform whose evidence vta/attestation/report returns: nitro (AWS Nitro Enclaves), sev-snp (AMD SEV-SNP), or simulated (a development build whose evidence no verifier should accept).";
|
|
244
|
+
};
|
|
245
|
+
readonly detected: {
|
|
246
|
+
readonly type: "boolean";
|
|
247
|
+
readonly description: "Whether the agent found the platform at boot. False means it was configured for one it did not find, and it produces no evidence.";
|
|
248
|
+
};
|
|
249
|
+
readonly platformVersion: {
|
|
250
|
+
readonly type: "string";
|
|
251
|
+
readonly minLength: 1;
|
|
252
|
+
readonly maxLength: 256;
|
|
253
|
+
readonly description: "The platform's own version string, when it reports one. Informational.";
|
|
254
|
+
};
|
|
255
|
+
readonly ext: {
|
|
256
|
+
readonly $ref: "#/$defs/Ext";
|
|
257
|
+
readonly description: "Ecosystem-defined extension members per SPEC.md §4.5.1.";
|
|
258
|
+
};
|
|
259
|
+
};
|
|
260
|
+
};
|
|
261
|
+
readonly Ext: {
|
|
262
|
+
readonly title: "Ext";
|
|
263
|
+
readonly description: "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.";
|
|
264
|
+
readonly type: "object";
|
|
265
|
+
readonly minProperties: 1;
|
|
266
|
+
readonly additionalProperties: true;
|
|
267
|
+
readonly propertyNames: {
|
|
268
|
+
readonly pattern: "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$";
|
|
269
|
+
};
|
|
270
|
+
};
|
|
271
|
+
};
|
|
272
|
+
};
|
|
273
|
+
};
|
|
274
|
+
//# sourceMappingURL=payload.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"payload.d.ts","sourceRoot":"","sources":["../../../../../src/vta/attestation/status/0.1/payload.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,mCAAmC,CAAC;AAG7D;;GAEG;AACH,MAAM,WAAW,2BAA2B;IAC1C;;OAEG;IACH,GAAG,CAAC,EAAE,GAAG,CAAC;CACX;AACD,MAAM,WAAW,mCAAmC;IAClD;;OAEG;IACH,OAAO,EAAE,OAAO,GAAG,SAAS,GAAG,WAAW,CAAC;IAC3C;;OAEG;IACH,QAAQ,EAAE,OAAO,CAAC;IAClB;;OAEG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB;;OAEG;IACH,GAAG,CAAC,EAAE,GAAG,CAAC;CACX;AAED,kHAAkH;AAClH,YAAY,EAAE,GAAG,EAAE,CAAC;AAEpB,2BAA2B;AAC3B,eAAO,MAAM,QAAQ,EAAG,wDAAiE,CAAC;AAE1F,mEAAmE;AACnE,MAAM,MAAM,OAAO,GAAG,2BAA2B,CAAC;AAElD,qEAAqE;AACrE,eAAO,MAAM,iBAAiB,EAAG,iEAA0E,CAAC;AAE5G,4EAA4E;AAC5E,MAAM,MAAM,QAAQ,GAAG,mCAAmC,CAAC;AAE3D;;;;;;;;GAQG;AACH,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA4DjB,CAAC;AAEX,mEAAmE;AACnE,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAkD1B,CAAC;AAEX;;;;;GAKG;AACH,eAAO,MAAM,IAAI;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAOP,CAAC;AAEX;;;;GAIG;AACH,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAOhB,CAAC"}
|
|
@@ -0,0 +1,158 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
|
|
3
|
+
* Source: specs/vta/attestation/status/0.1/payload.schema.json
|
|
4
|
+
*/
|
|
5
|
+
/** Trust Task type URI. */
|
|
6
|
+
export const TYPE_URI = "https://trusttasks.org/spec/vta/attestation/status/0.1";
|
|
7
|
+
/** Trust Task response type URI (request type URI + "#response"). */
|
|
8
|
+
export const RESPONSE_TYPE_URI = "https://trusttasks.org/spec/vta/attestation/status/0.1#response";
|
|
9
|
+
/**
|
|
10
|
+
* This specification's payload schema, as a value.
|
|
11
|
+
*
|
|
12
|
+
* SPEC.md §7.2 item 2 is performed against this. It is shipped as data
|
|
13
|
+
* rather than only as a `.json` file because TypeScript types are erased
|
|
14
|
+
* at runtime: without a schema a consumer has nothing to validate, and
|
|
15
|
+
* every REQUIRED payload member is optional in practice. Cross-file
|
|
16
|
+
* `$ref`s are already inlined, so it needs no resolver.
|
|
17
|
+
*/
|
|
18
|
+
export const PAYLOAD_SCHEMA = {
|
|
19
|
+
"$schema": "https://json-schema.org/draft/2020-12/schema",
|
|
20
|
+
"$id": "https://trusttasks.org/spec/vta/attestation/status/0.1",
|
|
21
|
+
"title": "VTA Attestation — Status — payload",
|
|
22
|
+
"description": "Asks an agent which trusted execution environment it runs in. The payload carries nothing. The outer document members (id, type, issuer, recipient, issuedAt, expiresAt, proof) are owned by the framework — SPEC §6.3.",
|
|
23
|
+
"type": "object",
|
|
24
|
+
"additionalProperties": false,
|
|
25
|
+
"properties": {
|
|
26
|
+
"ext": {
|
|
27
|
+
"$ref": "#/$defs/Ext",
|
|
28
|
+
"description": "Ecosystem-defined extension members per SPEC.md §4.5.1."
|
|
29
|
+
}
|
|
30
|
+
},
|
|
31
|
+
"$defs": {
|
|
32
|
+
"Response": {
|
|
33
|
+
"$anchor": "response",
|
|
34
|
+
"title": "VTA Attestation Status — response payload",
|
|
35
|
+
"type": "object",
|
|
36
|
+
"additionalProperties": false,
|
|
37
|
+
"required": [
|
|
38
|
+
"teeType",
|
|
39
|
+
"detected"
|
|
40
|
+
],
|
|
41
|
+
"properties": {
|
|
42
|
+
"teeType": {
|
|
43
|
+
"type": "string",
|
|
44
|
+
"enum": [
|
|
45
|
+
"nitro",
|
|
46
|
+
"sev-snp",
|
|
47
|
+
"simulated"
|
|
48
|
+
],
|
|
49
|
+
"description": "The platform whose evidence vta/attestation/report returns: nitro (AWS Nitro Enclaves), sev-snp (AMD SEV-SNP), or simulated (a development build whose evidence no verifier should accept)."
|
|
50
|
+
},
|
|
51
|
+
"detected": {
|
|
52
|
+
"type": "boolean",
|
|
53
|
+
"description": "Whether the agent found the platform at boot. False means it was configured for one it did not find, and it produces no evidence."
|
|
54
|
+
},
|
|
55
|
+
"platformVersion": {
|
|
56
|
+
"type": "string",
|
|
57
|
+
"minLength": 1,
|
|
58
|
+
"maxLength": 256,
|
|
59
|
+
"description": "The platform's own version string, when it reports one. Informational."
|
|
60
|
+
},
|
|
61
|
+
"ext": {
|
|
62
|
+
"$ref": "#/$defs/Ext",
|
|
63
|
+
"description": "Ecosystem-defined extension members per SPEC.md §4.5.1."
|
|
64
|
+
}
|
|
65
|
+
}
|
|
66
|
+
},
|
|
67
|
+
"Ext": {
|
|
68
|
+
"title": "Ext",
|
|
69
|
+
"description": "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.",
|
|
70
|
+
"type": "object",
|
|
71
|
+
"minProperties": 1,
|
|
72
|
+
"additionalProperties": true,
|
|
73
|
+
"propertyNames": {
|
|
74
|
+
"pattern": "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$"
|
|
75
|
+
}
|
|
76
|
+
}
|
|
77
|
+
}
|
|
78
|
+
};
|
|
79
|
+
/** As {@link PAYLOAD_SCHEMA}, for the success-response variant. */
|
|
80
|
+
export const RESPONSE_PAYLOAD_SCHEMA = {
|
|
81
|
+
"$schema": "https://json-schema.org/draft/2020-12/schema",
|
|
82
|
+
"$ref": "#/$defs/Response",
|
|
83
|
+
"$defs": {
|
|
84
|
+
"Response": {
|
|
85
|
+
"$anchor": "response",
|
|
86
|
+
"title": "VTA Attestation Status — response payload",
|
|
87
|
+
"type": "object",
|
|
88
|
+
"additionalProperties": false,
|
|
89
|
+
"required": [
|
|
90
|
+
"teeType",
|
|
91
|
+
"detected"
|
|
92
|
+
],
|
|
93
|
+
"properties": {
|
|
94
|
+
"teeType": {
|
|
95
|
+
"type": "string",
|
|
96
|
+
"enum": [
|
|
97
|
+
"nitro",
|
|
98
|
+
"sev-snp",
|
|
99
|
+
"simulated"
|
|
100
|
+
],
|
|
101
|
+
"description": "The platform whose evidence vta/attestation/report returns: nitro (AWS Nitro Enclaves), sev-snp (AMD SEV-SNP), or simulated (a development build whose evidence no verifier should accept)."
|
|
102
|
+
},
|
|
103
|
+
"detected": {
|
|
104
|
+
"type": "boolean",
|
|
105
|
+
"description": "Whether the agent found the platform at boot. False means it was configured for one it did not find, and it produces no evidence."
|
|
106
|
+
},
|
|
107
|
+
"platformVersion": {
|
|
108
|
+
"type": "string",
|
|
109
|
+
"minLength": 1,
|
|
110
|
+
"maxLength": 256,
|
|
111
|
+
"description": "The platform's own version string, when it reports one. Informational."
|
|
112
|
+
},
|
|
113
|
+
"ext": {
|
|
114
|
+
"$ref": "#/$defs/Ext",
|
|
115
|
+
"description": "Ecosystem-defined extension members per SPEC.md §4.5.1."
|
|
116
|
+
}
|
|
117
|
+
}
|
|
118
|
+
},
|
|
119
|
+
"Ext": {
|
|
120
|
+
"title": "Ext",
|
|
121
|
+
"description": "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.",
|
|
122
|
+
"type": "object",
|
|
123
|
+
"minProperties": 1,
|
|
124
|
+
"additionalProperties": true,
|
|
125
|
+
"propertyNames": {
|
|
126
|
+
"pattern": "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$"
|
|
127
|
+
}
|
|
128
|
+
}
|
|
129
|
+
}
|
|
130
|
+
};
|
|
131
|
+
/**
|
|
132
|
+
* SPEC.md §7.2 policy for the request variant, from this specification's
|
|
133
|
+
* front matter. Pass to `consumeInbound` — items 5b, 7 and 8 are
|
|
134
|
+
* per-specification and cannot be derived from the document alone, and
|
|
135
|
+
* item 2 needs the schema this carries.
|
|
136
|
+
*/
|
|
137
|
+
export const SPEC = {
|
|
138
|
+
typeUri: TYPE_URI,
|
|
139
|
+
isBearer: false,
|
|
140
|
+
isProofRequired: false,
|
|
141
|
+
isRecipientRequired: true,
|
|
142
|
+
isIssuedAtRequired: false,
|
|
143
|
+
payloadSchema: PAYLOAD_SCHEMA,
|
|
144
|
+
};
|
|
145
|
+
/**
|
|
146
|
+
* SPEC.md §7.2 policy for the success-response variant. `isRecipientRequired`
|
|
147
|
+
* tracks the *issuer* party's requirement because a response swaps the
|
|
148
|
+
* parties (§7.3 item 5).
|
|
149
|
+
*/
|
|
150
|
+
export const RESPONSE_SPEC = {
|
|
151
|
+
typeUri: RESPONSE_TYPE_URI,
|
|
152
|
+
isBearer: false,
|
|
153
|
+
isProofRequired: true,
|
|
154
|
+
isRecipientRequired: true,
|
|
155
|
+
isIssuedAtRequired: false,
|
|
156
|
+
payloadSchema: RESPONSE_PAYLOAD_SCHEMA,
|
|
157
|
+
};
|
|
158
|
+
//# sourceMappingURL=payload.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"payload.js","sourceRoot":"","sources":["../../../../../src/vta/attestation/status/0.1/payload.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAoCH,2BAA2B;AAC3B,MAAM,CAAC,MAAM,QAAQ,GAAG,wDAAiE,CAAC;AAK1F,qEAAqE;AACrE,MAAM,CAAC,MAAM,iBAAiB,GAAG,iEAA0E,CAAC;AAK5G;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,SAAS,EAAE,8CAA8C;IACzD,KAAK,EAAE,wDAAwD;IAC/D,OAAO,EAAE,oCAAoC;IAC7C,aAAa,EAAE,yNAAyN;IACxO,MAAM,EAAE,QAAQ;IAChB,sBAAsB,EAAE,KAAK;IAC7B,YAAY,EAAE;QACZ,KAAK,EAAE;YACL,MAAM,EAAE,aAAa;YACrB,aAAa,EAAE,yDAAyD;SACzE;KACF;IACD,OAAO,EAAE;QACP,UAAU,EAAE;YACV,SAAS,EAAE,UAAU;YACrB,OAAO,EAAE,2CAA2C;YACpD,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,SAAS;gBACT,UAAU;aACX;YACD,YAAY,EAAE;gBACZ,SAAS,EAAE;oBACT,MAAM,EAAE,QAAQ;oBAChB,MAAM,EAAE;wBACN,OAAO;wBACP,SAAS;wBACT,WAAW;qBACZ;oBACD,aAAa,EAAE,6LAA6L;iBAC7M;gBACD,UAAU,EAAE;oBACV,MAAM,EAAE,SAAS;oBACjB,aAAa,EAAE,mIAAmI;iBACnJ;gBACD,iBAAiB,EAAE;oBACjB,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,WAAW,EAAE,GAAG;oBAChB,aAAa,EAAE,wEAAwE;iBACxF;gBACD,KAAK,EAAE;oBACL,MAAM,EAAE,aAAa;oBACrB,aAAa,EAAE,yDAAyD;iBACzE;aACF;SACF;QACD,KAAK,EAAE;YACL,OAAO,EAAE,KAAK;YACd,aAAa,EAAE,uKAAuK;YACtL,MAAM,EAAE,QAAQ;YAChB,eAAe,EAAE,CAAC;YAClB,sBAAsB,EAAE,IAAI;YAC5B,eAAe,EAAE;gBACf,SAAS,EAAE,mCAAmC;aAC/C;SACF;KACF;CACO,CAAC;AAEX,mEAAmE;AACnE,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,SAAS,EAAE,8CAA8C;IACzD,MAAM,EAAE,kBAAkB;IAC1B,OAAO,EAAE;QACP,UAAU,EAAE;YACV,SAAS,EAAE,UAAU;YACrB,OAAO,EAAE,2CAA2C;YACpD,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,SAAS;gBACT,UAAU;aACX;YACD,YAAY,EAAE;gBACZ,SAAS,EAAE;oBACT,MAAM,EAAE,QAAQ;oBAChB,MAAM,EAAE;wBACN,OAAO;wBACP,SAAS;wBACT,WAAW;qBACZ;oBACD,aAAa,EAAE,6LAA6L;iBAC7M;gBACD,UAAU,EAAE;oBACV,MAAM,EAAE,SAAS;oBACjB,aAAa,EAAE,mIAAmI;iBACnJ;gBACD,iBAAiB,EAAE;oBACjB,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,WAAW,EAAE,GAAG;oBAChB,aAAa,EAAE,wEAAwE;iBACxF;gBACD,KAAK,EAAE;oBACL,MAAM,EAAE,aAAa;oBACrB,aAAa,EAAE,yDAAyD;iBACzE;aACF;SACF;QACD,KAAK,EAAE;YACL,OAAO,EAAE,KAAK;YACd,aAAa,EAAE,uKAAuK;YACtL,MAAM,EAAE,QAAQ;YAChB,eAAe,EAAE,CAAC;YAClB,sBAAsB,EAAE,IAAI;YAC5B,eAAe,EAAE;gBACf,SAAS,EAAE,mCAAmC;aAC/C;SACF;KACF;CACO,CAAC;AAEX;;;;;GAKG;AACH,MAAM,CAAC,MAAM,IAAI,GAAG;IAClB,OAAO,EAAE,QAAQ;IACjB,QAAQ,EAAE,KAAK;IACf,eAAe,EAAE,KAAK;IACtB,mBAAmB,EAAE,IAAI;IACzB,kBAAkB,EAAE,KAAK;IACzB,aAAa,EAAE,cAAc;CACrB,CAAC;AAEX;;;;GAIG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,OAAO,EAAE,iBAAiB;IAC1B,QAAQ,EAAE,KAAK;IACf,eAAe,EAAE,IAAI;IACrB,mBAAmB,EAAE,IAAI;IACzB,kBAAkB,EAAE,KAAK;IACzB,aAAa,EAAE,uBAAuB;CAC9B,CAAC"}
|