@openvtc/trust-tasks 0.23.7 → 0.23.9

package/src/_shared/components.ts

@@ -16,6 +16,320 @@
  * An Accepts criterion's identifier, chosen by the registering administrator — a ceremony purpose or a named manifest criterion, e.g. `membership`. Compared as an exact string after surrounding whitespace is trimmed. Bounded at 128 characters, the bound vtc/join-requests/manifest/0.2 places on the criterion `id` it publishes.
  */
 export type AcceptsCriterionId = string;
+/**
+ * The custodian context that owns the account. Act scope in this context decides who may manage the account and who may consume it; the account's keys are derived in this context's key space.
+ */
+export type AccountContextId = string;
+/**
+ * The account's identifier within its context, chosen by whoever creates it. Lowercase letters, digits and hyphens, so that it can be embedded in a certificate subject, a token subject or a provider-side condition without escaping. Unique per context; never reused after deletion while anything that names it (a provider-side trust policy, an audit row) may still exist.
+ */
+export type AccountId = string;
+/**
+ * `sign`: the custodian signed its assertion, session request or test transaction. `exchange`: the provider issued a credential for it. `put`, `get`, `delete`: one canary object at the narrowest scope of the account's bindings. `decode`: for `sui-signer`, a built test transaction passed the allow-list (it is never submitted).
+ */
+export type AccountProbeStep = "sign" | "exchange" | "put" | "get" | "delete" | "decode";
+/**
+ * Per-model account settings, discriminated by `model`: every branch is an object whose `model` member is a `const`, which is what lets each generated binding emit a tagged union, so an unusable setting is answered as `external:invalidSettings` naming the member rather than as an unparseable payload. Never a secret: every value here is returned to anyone who may read the account. Branches are referred to by their `model` ("the `sui-signer` settings"). They carry no `title`, so that every binding renders each as a plain variant of this union.
+ */
+export type AccountSettings =
+  | {
+      model: "aws-roles-anywhere";
+      region: AwsRegion;
+      /**
+       * The trust anchor holding the custodian's CA certificate. Recorded after the administrator creates it from external/accounts/setup.
+       */
+      trustAnchorArn: AwsArn;
+      profileArn: AwsArn;
+      roleArn: AwsArn;
+      /**
+       * When set, every issuance chains an AssumeRole into this role carrying the downscoping session policy, for deployments whose Roles Anywhere profile cannot carry one per request. Caps a credential at one hour.
+       */
+      chainedRoleArn?: AwsArn;
+      /**
+       * The S3 bucket issuances are scoped within. Required for an account whose bindings issue storage scopes.
+       */
+      bucket?: ProviderBucketName;
+      /**
+       * Where external/accounts/probe writes its canary when no binding names a narrower prefix. Lets a new account be probed before anything is bound to it. Absent, a probe of an account with no bindings stops after `exchange` and reports `complete: false`.
+       */
+      probePrefix?: ProviderObjectPrefix;
+    }
+  | {
+      model: "gcp-wif-pinned";
+      projectNumber: string;
+      poolId: string;
+      providerId: string;
+      /**
+       * When set, the federated token is exchanged for this service account's access token.
+       */
+      serviceAccount?: string;
+      /**
+       * The ID-token algorithm. ES256 unless the provider refuses it. Absent means ES256.
+       */
+      signingAlgorithm?: "ES256" | "RS256";
+      /**
+       * The GCS bucket issuances are scoped within, by a Credential Access Boundary.
+       */
+      bucket?: ProviderBucketName;
+      /**
+       * Where external/accounts/probe writes its canary when no binding names a narrower prefix. Lets a new account be probed before anything is bound to it. Absent, a probe of an account with no bindings stops after `exchange` and reports `complete: false`.
+       */
+      probePrefix?: ProviderObjectPrefix;
+    }
+  | {
+      model: "azure-cert";
+      tenantId: string;
+      clientId: string;
+      /**
+       * The `scope` requested at the token endpoint, such as `https://storage.azure.com/.default`.
+       */
+      tokenScope: string;
+      /**
+       * Absent means `login.microsoftonline.com`.
+       */
+      authorityHost?: string;
+    }
+  | {
+      model: "oauth2-private-key-jwt";
+      tokenEndpoint: ProviderHttpsUrl;
+      clientId: string;
+      /**
+       * The assertion's `aud`. Absent means `tokenEndpoint`.
+       */
+      audience?: string;
+      /**
+       * The scopes a binding may request, the ceiling for every issuance.
+       *
+       * @maxItems 64
+       */
+      scopes?: string[];
+      signingAlgorithm?: "ES256" | "RS256";
+    }
+  | {
+      model: "s3-static-presign";
+      endpoint: ProviderHttpsUrl;
+      /**
+       * The SigV4 signing region; `auto` for Cloudflare R2.
+       */
+      region: string;
+      bucket: ProviderBucketName;
+      /**
+       * Address the bucket in the path rather than the host name, as MinIO usually needs.
+       */
+      pathStyle?: boolean;
+      /**
+       * The access key's identifier. Not a secret: it appears in every presigned URL. The secret half is set with external/accounts/secret/set and never returned.
+       */
+      accessKeyId: string;
+      /**
+       * Where external/accounts/probe writes its canary when no binding names a narrower prefix. Lets a new account be probed before anything is bound to it. Absent, a probe of an account with no bindings stops after `exchange` and reports `complete: false`.
+       */
+      probePrefix?: ProviderObjectPrefix;
+    }
+  | {
+      model: "sui-signer";
+      network: "mainnet" | "testnet" | "devnet";
+      /**
+       * Every MoveCall command in a signed transaction must name one of these. For Walrus storage: the system package's `register_blob`, `certify_blob`, `extend_blob` and `delete_blob`, and the coin calls needed to pay for them.
+       *
+       * @minItems 1
+       * @maxItems 32
+       */
+      allowedCalls: [SuiMoveCall, ...SuiMoveCall[]];
+      /**
+       * Shared objects a transaction may take as input, such as the Walrus system and staking objects. Absent means any object the allowed calls accept.
+       *
+       * @maxItems 32
+       */
+      allowedObjects?: string[];
+      /**
+       * The largest gas budget one transaction may declare.
+       */
+      maxGasBudgetMist: number;
+      /**
+       * The total gas budget signed per rolling 24 hours.
+       */
+      maxGasPerDayMist: number;
+      /**
+       * Per coin type, the most a single transaction may spend or transfer out of the account's address, in the coin's smallest unit. A coin type not listed may not leave the address at all.
+       *
+       * @maxItems 8
+       */
+      maxCoinOutPerTx?:
+        | []
+        | [
+            {
+              coinType: string;
+              amount: number;
+            }
+          ]
+        | [
+            {
+              coinType: string;
+              amount: number;
+            },
+            {
+              coinType: string;
+              amount: number;
+            }
+          ]
+        | [
+            {
+              coinType: string;
+              amount: number;
+            },
+            {
+              coinType: string;
+              amount: number;
+            },
+            {
+              coinType: string;
+              amount: number;
+            }
+          ]
+        | [
+            {
+              coinType: string;
+              amount: number;
+            },
+            {
+              coinType: string;
+              amount: number;
+            },
+            {
+              coinType: string;
+              amount: number;
+            },
+            {
+              coinType: string;
+              amount: number;
+            }
+          ]
+        | [
+            {
+              coinType: string;
+              amount: number;
+            },
+            {
+              coinType: string;
+              amount: number;
+            },
+            {
+              coinType: string;
+              amount: number;
+            },
+            {
+              coinType: string;
+              amount: number;
+            },
+            {
+              coinType: string;
+              amount: number;
+            }
+          ]
+        | [
+            {
+              coinType: string;
+              amount: number;
+            },
+            {
+              coinType: string;
+              amount: number;
+            },
+            {
+              coinType: string;
+              amount: number;
+            },
+            {
+              coinType: string;
+              amount: number;
+            },
+            {
+              coinType: string;
+              amount: number;
+            },
+            {
+              coinType: string;
+              amount: number;
+            }
+          ]
+        | [
+            {
+              coinType: string;
+              amount: number;
+            },
+            {
+              coinType: string;
+              amount: number;
+            },
+            {
+              coinType: string;
+              amount: number;
+            },
+            {
+              coinType: string;
+              amount: number;
+            },
+            {
+              coinType: string;
+              amount: number;
+            },
+            {
+              coinType: string;
+              amount: number;
+            },
+            {
+              coinType: string;
+              amount: number;
+            }
+          ]
+        | [
+            {
+              coinType: string;
+              amount: number;
+            },
+            {
+              coinType: string;
+              amount: number;
+            },
+            {
+              coinType: string;
+              amount: number;
+            },
+            {
+              coinType: string;
+              amount: number;
+            },
+            {
+              coinType: string;
+              amount: number;
+            },
+            {
+              coinType: string;
+              amount: number;
+            },
+            {
+              coinType: string;
+              amount: number;
+            },
+            {
+              coinType: string;
+              amount: number;
+            }
+          ];
+    }
+  | {
+      model: "static-secret";
+      /**
+       * The custodian's driver that uses the secret: performs a login or token exchange and returns a short-lived result. A custodian refuses a driver it does not implement.
+       */
+      driver: string;
+      baseUrl: ProviderHttpsUrl;
+    };
+/**
+ * `active`: usable by its bindings. `suspended`: every issuance and signature is refused at once; management reads continue; resumable. `archived`: hidden from default listings, refused for use, restorable. Deletion removes the record.
+ */
+export type AccountState = "active" | "suspended" | "archived";
 /**
  * The account's role at the mediator. `standard` is an ordinary served account; `admin`/`rootAdmin` may administer other accounts; `mediator` is the mediator's own account. Only a rootAdmin may assign or modify the rootAdmin role.
  */
@@ -66,10 +380,29 @@ export type AuditAction =
   | "accountChangeQueueLimits"
   | "adminAdd"
   | "adminStrip";
+/**
+ * How the account authenticates to its provider. Every model pins the custodian's verification material in the provider's own account, uploaded once, so no model requires the custodian to be reachable from the internet. `aws-roles-anywhere`: the custodian is the certificate authority of an IAM Roles Anywhere trust anchor, and signs CreateSession with a short-lived end-entity certificate it issued to the account's own key. `gcp-wif-pinned`: a Workload Identity Federation pool provider holds an uploaded JWKS; the custodian signs an ID token and exchanges it at Google's STS. `azure-cert`: a certificate uploaded to an Entra app registration; the custodian signs an RFC 7523 client assertion. `oauth2-private-key-jwt`: the same RFC 7523 client authentication against any token endpoint that registered the custodian's public key. `s3-static-presign`: an access-key pair for an S3-compatible store that cannot federate; the custodian presigns per-object URLs and never releases the key. `sui-signer`: a Sui address derived from the custodian's key; the custodian signs only allow-listed transactions. `static-secret`: an API key or token used inside the custodian by a named driver; last resort, never released.
+ *
+ * Plain OpenID Connect discovery federation is deliberately absent. It works by the provider fetching the issuer's JWKS from a public URL, which either makes the custodian reachable from the internet or makes whoever hosts a copy of the JWKS able to mint credentials for every federated role.
+ */
+export type AuthModel =
+  | "aws-roles-anywhere"
+  | "gcp-wif-pinned"
+  | "azure-cert"
+  | "oauth2-private-key-jwt"
+  | "s3-static-presign"
+  | "sui-signer"
+  | "static-secret";
 /**
  * An explicit authority scope — used for both the act scope and the approve scope of an entry. Exactly one of three shapes, discriminated by `scope`: `all`, `none`, or `contexts` with a NON-EMPTY list. The empty list is not a fourth shape: it is invalid, so a serializer that drops or empties the list produces a document that fails validation rather than one that silently means something else.
  */
 export type AuthorityScope = AuthorityScopeAll | AuthorityScopeNone | AuthorityScopeContexts;
+export type AwsArn = string;
+export type AwsRegion = string;
+/**
+ * The name of one blob: the digest of its BlobManifest, taken over the manifest's RFC 8785 (JCS) canonicalization. sha2-256 is RECOMMENDED and MUST be implemented. Content addressing over ciphertext, never plaintext, so a BlobRef says nothing about what the file contains, and two uploads of one file have different BlobRefs (a fresh `fileId` gives a different key, and so different ciphertext). Rooms cannot be correlated by the files they share. Compared as decoded multihash bytes, never as encoded strings. A BlobRef is defined over the manifest's JSON, as this schema states it and RFC 8785 canonicalizes it, never over any binding's generated type: two bindings that model the manifest as distinct types still compute the same BlobRef from the same JSON.
+ */
+export type BlobRef = DigestMultibase;
 /**
  * The control-plane account of a bundle transfer: which algorithm, on what terms, until when. Exactly one of the two shapes — they are mutually exclusive, since StreamDescriptor requires `transportUrl` and `transportToken` and forbids `chunks`, and ChunkedDescriptor requires `chunks` and forbids both.
  */
@@ -109,7 +442,9 @@ export type Capability_DeviceV0_1 =
   | "room-present"
   | "room-open"
   | "key-export"
-  | "sign-sshsig";
+  | "sign-sshsig"
+  | "external-accounts-manage"
+  | "external-auth-use";
 /**
  * Fine-grained capability flag scoped to the device's allowed contexts. See SPEC.md for the full semantics of each. Capability values are additive: a consumer MUST ignore a value it does not recognise rather than reject the binding, and MUST NOT treat an unrecognised value as conferring anything.
  */
@@ -129,7 +464,9 @@ export type Capability_DeviceV0_2 =
   | "roomPresent"
   | "roomOpen"
   | "keyExport"
-  | "signSshsig";
+  | "signSshsig"
+  | "externalAccountsManage"
+  | "externalAuthUse";
 /**
  * Number of chunks in the bundle, equal to ceil(expectedSizeBytes / chunkSize). Bounded at 4096 so that the manifest itself — one digest per chunk — fits in the single document that carries it under the same message-size reasoning as a chunk.
  */
@@ -154,6 +491,10 @@ export type ChunkSize = number;
  * The `x:` prefix is an open extension namespace and is not decoration. The closest prior art — Windows CardSpace's self-issued card — supported exactly fifteen predefined claim types with no extensibility, and that is the specific way it failed the requirement a holder actually has. An `x:` attribute stores, composes, binds and discloses exactly like a known one; it renders generically and matches only an explicit query.
  */
 export type ClaimType = string;
+/**
+ * `active`: accepts new rooms and new uploads. `draining`: retired by an administrator while blobs still name it — refuses new rooms and new uploads, keeps serving reads, and becomes `retired` when a migration has emptied it. `retired`: refuses new rooms and new uploads and holds no blob. A config is never deleted while a blob names it.
+ */
+export type ConfigState = "active" | "draining" | "retired";
 /**
  * Discriminator: is this consumer a user-driven Companion or a headless Service?
  */
@@ -330,6 +671,10 @@ export type ExpiresAt = string;
  * @minItems 1
  */
 export type ExtCritical = [string, ...string[]];
+/**
+ * The identifier of an external account held by the community's VTA (the external/accounts/* family), which issues the community short-lived, room-scoped credentials and holds the long-lived authority itself.
+ */
+export type ExternalAccountId = string;
 /**
  * Where a pool face may be worn. `anywhere` is the default and what an absent member means. `only` names the contexts it may be worn in, and a maintainer MUST refuse to wear it in any other (persona/binding/set `outsideReach`).
  *
@@ -433,6 +778,18 @@ export type LanguageTag = string;
  * Why the edge was suspended or restored, stored verbatim on the lifecycle event. Free text written by the caller — the edge's issuer or a moderating administrator — and read by the counterparty and by administrators; retained with the edge. Untrusted, attributed to its author wherever rendered, and never read by the community's state machine.
  */
 export type LifecycleReason = string;
+/**
+ * Where an effective limit came from. `policy`: the community's rooms policy at the room's creation. `override`: an administrator's vtc/rooms/limits/set. `default`: the community's configured defaults, where neither applies. The host-wide ceiling bounds all three.
+ */
+export type LimitSource = "policy" | "override" | "default";
+/**
+ * The two-digit number the service chooses at claim, shows only to the starter (through redeem), and the approver types from the starter's screen. A string so that a leading zero survives.
+ */
+export type MatchNumber = string;
+/**
+ * How the request reaches the approver. A CLOSED list. Version 0.1 defines `scan`: the starter shows a trigger link (as a QR code that is also a clickable link, TRIGGER-LINK.md) and the approver's wallet reads it. `code` (a typed code of at least 8 characters, under strict rate limits) and `push` (sent to the approver's enrolled devices) are reserved names.
+ */
+export type Mode = "scan";
 /**
  * Scopes one application's records within a context, so several tools can share a context without colliding — `openvtc`, `cnm`, an agent runtime. The maintainer MUST NOT interpret the value; it is an opaque partition name. Namespaces are first-come and unreserved, so an application SHOULD pick a stable, specific one: a future per-namespace ACL would grant on this exact string, which makes renaming a namespace a migration rather than an edit.
  */
@@ -441,6 +798,18 @@ export type Namespace = string;
  * The VTC's opaque identifier for a namespace, assigned when it is bound. Stable for the life of the binding; never reused for another binding.
  */
 export type NamespaceId = string;
+/**
+ * A key prefix inside the bucket, ending in `/`, under which the config's `rooms/` tree is placed. Restricted to the S3 safe-character set so that it can be placed in a downscoped policy without escaping.
+ */
+export type ObjectPrefix = string;
+/**
+ * A starter key (`K_b`) or an approver lock key (`K_a`), as an Ed25519 `did:key` (`z6Mk…`) generated for this one request and used nowhere else. Ed25519 only: a service refuses any other key type with `auth/oob:keyUnsupported` before parsing beyond the multicodec prefix.
+ */
+export type OobKey = string;
+/**
+ * A web origin (`https://host[:port]`, no path, no trailing slash) — for `login`, the origin of the portal where the starter runs, which is the origin of the `serviceEndpoint` of the service's `SignInPortal` service in its DID document.
+ */
+export type Origin = string;
 /**
  * A region or city name as the vetter writes it. Compared case-insensitively and otherwise exactly.
  */
@@ -555,6 +924,23 @@ export type Provenance =
        */
       derivedAt: string;
     };
+/**
+ * A bucket name as S3 and GCS accept it. Validated rather than free so that it can be placed in a provider policy without escaping.
+ */
+export type ProviderBucketName = string;
+export type ProviderHttpsUrl = string;
+/**
+ * `put`: write an object. `get`: read one. `delete`: remove one. No list, ACL, policy or bucket-level action exists here, so none can be granted.
+ */
+export type ProviderObjectAction = "put" | "get" | "delete";
+/**
+ * An object-key prefix within the account's bucket: one or more segments of lowercase letters, digits, `.`, `_` and `-`, each beginning with a letter or digit and ending with `/`. No quote, backslash, wildcard, whitespace, `..` segment or empty segment can appear. That is deliberate: the custodian places this value inside a provider policy — an IAM session policy (JSON), a GCS Credential Access Boundary condition (CEL) — and a value able to carry a metacharacter can break out of the string it is placed in and widen the policy. That is a known class of defect (CVE-2026-42811, a CEL injection in downscoped GCS credentials). Even with this pattern, a custodian MUST build provider policies with the provider language's own encoder, never by string interpolation.
+ */
+export type ProviderObjectPrefix = string;
+/**
+ * What the request is for. A CLOSED list: each purpose has a fixed row in CONVENTIONS.md §3 stating what is revealed at each step, what the grant contains, what redeem returns and the window lengths. Version 0.1 defines `login` only. `stepUp` and `deviceEnrol` are reserved names; adding one is a new version of this component and of every task that references it, never an in-place edit.
+ */
+export type Purpose = "login";
 /**
  * A device's platform push channel — the body the device registers with its push GATEWAY (push wake-up binding, https://trusttasks.org/binding/push/0.1; modeled on Aries RFC 0699/0734). The gateway holds this token and returns an opaque WakeHandle in exchange; the token is held by the gateway ONLY, never by the mediator or the maintainer/VTA. The gateway uses it to send a contentless wake-up when an authorized trigger asks — the push payload never carries Trust Task content. Tagged union over the discriminator `platform`.
  */
@@ -625,6 +1011,10 @@ export type RepoResource = string;
  * Repository visibility on the forge.
  */
 export type RepoVisibility = "public" | "private";
+/**
+ * The service-generated handle of one request: 16 to 32 bytes from a cryptographically secure random source, written as unpadded base64url (22 to 43 characters; 16 bytes, 22 characters, is RECOMMENDED). It is also the nonce of the exchange, so the family needs no separate challenge, and it is the `_id` of the trigger link (VTI-LNK-033). Compared as a string. It confers no authority on its holder.
+ */
+export type RequestId = string;
 /**
  * What the community asks an applicant to tell it about themselves, as claim types — never values. At most 32 entries, and no claim type twice: two answers to one question is a question nobody can answer. Self-asserted by the applicant when answered; a community MUST NOT describe an answer as verified. Empty means the community asks nothing.
  *
@@ -675,6 +1065,10 @@ export type RotationState = "pendingApproval" | "staged" | "overlapping" | "comp
  * How a consent prompt reaches the approver: `wake` pushes to the approver's device for a DID-signed decision; `bridge-relay` renders it through an enrolled bridge (e.g. a numbered card in the operator's messaging app) for a bridge-attested decision.
  */
 export type Route = "wake" | "bridge-relay";
+/**
+ * Whether the starter's request and the approver's prove came from the same egress network, as the service saw them: `true`, `false`, or the string `unknown` when the service cannot tell. The service compares addresses; it never discloses them.
+ */
+export type SameNetwork = boolean | "unknown";
 /**
  * An administrator's description of the entry, shown in administration surfaces. Free text written by the registering administrator and read by other administrators; untrusted, attributed to `createdByDid` wherever it is rendered, and never read by the community's own logic.
  */
@@ -705,6 +1099,14 @@ export type SealedEnvelope_VaultV0_2 =
   | DidcommAuthcryptEnvelope_VaultV0_2
   | HpkeArmoredEnvelope_VaultV0_2
   | TspMessageEnvelope_VaultV0_2;
+/**
+ * A sealed-transfer bundle: OpenPGP-style ASCII armor around an HPKE-sealed `SealedPayloadV1` (base mode, X25519-HKDF-SHA256 KEM, HKDF-SHA256 KDF, ChaCha20-Poly1305 AEAD, info string `vta-sealed-transfer/v1`), with a producer assertion and Bundle-Id, Chunk and Digest-Algo headers bound into the associated data. Each task states the key it is sealed to: a single-use wrapping key from keys/import-wrapping-key for external/accounts/secret/set, and the caller's key-agreement key for external/credentials/issue. Its cleartext is an ExternalSecretPayload or an ExternalCredentialPayload. The only form in which secret material crosses the wire in this family, in either direction: the seal is what keeps a terminating proxy, a relay, a request log or a debug dump of "the response" from ever holding a usable secret, whatever transport carried the document.
+ */
+export type SealedTransferBundle = string;
+/**
+ * Which secret is set, without being a way to test guesses at it. `hmacsha256:` followed by the base64url encoding, without padding, of the first 16 bytes of HMAC-SHA256 over the secret's bytes under a fingerprint key the custodian holds and never discloses. Comparable only between fingerprints made by the same custodian: a re-entered value can be confirmed, while the same secret at two custodians gives unrelated fingerprints. Never a bare hash of the secret, which would let anyone who reads it run a dictionary against it offline; and deliberately not a DigestMultibase, since multihash has no code for a keyed digest.
+ */
+export type SecretFingerprint = string;
 /**
  * Discriminator for the secret type stored in the entry. Definitions:
  * - `password` — username + password (+ optional TOTP seed).
@@ -793,6 +1195,38 @@ export type SiteTarget_VaultV0_2 = WebOrigin_VaultV0_2 | Did_VaultV0_2 | IosApp_
  * Other values are the holder's or the producer's own and carry no meaning a maintainer interprets.
  */
 export type Slot = string;
+/**
+ * How the community authenticates to a config's backend. Absent on a `local` config, which needs none.
+ *
+ * `vta-account` (RECOMMENDED): an external account in the community's VTA. The VTA holds the long-lived authority; the community holds nothing that outlives a credential lifetime, and asks for credentials scoped to one room's prefix for at most 15 minutes, every issuance audited at the VTA. Required for a `walrus` config other than a `sealed` one, since the VTA's `sui-signer` account signs its storage transactions.
+ *
+ * `ambient`: the cloud identity of the machine the community runs on (an instance role, workload identity), downscoped to one room's prefix by the community itself. Not audited or rate-limited by the VTA, and usable by anything on that machine that reaches the metadata endpoint. Not valid for `walrus`.
+ *
+ * `sealed` (discouraged): a long-lived credential stored by the community, set with vtc/storage/credentials/set. Protects against every administrator through every surface the community offers; does not protect against whoever operates the machine.
+ */
+export type StorageAuth =
+  | {
+      mode: "vta-account";
+      account: ExternalAccountId;
+    }
+  | {
+      mode: "ambient";
+    }
+  | {
+      mode: "sealed";
+    };
+/**
+ * A storage config's identifier, chosen by the administrator who creates it and immutable thereafter: lowercase letters, digits and inner hyphens, at most 64 characters (`eu-s3-primary`, `walrus-main`). Unique within the community. Never reused after a config is retired, because blobs name their config by this value.
+ */
+export type StorageConfigId = string;
+/**
+ * Which backend a config stores to. `local`: plain files in a directory on the community's own host. `s3`: an S3-compatible object store (AWS S3, Cloudflare R2, Backblaze B2, MinIO). `gcs`: native Google Cloud Storage. `walrus`: the Walrus decentralised store, where every blob is public ciphertext and deletion is a lapse, not an erasure.
+ */
+export type StorageKind = "local" | "s3" | "gcs" | "walrus";
+/**
+ * A config's backend settings, discriminated by `kind`. Never a secret: a credential is a StorageAuth, held elsewhere.
+ */
+export type StorageSettings = LocalSettings | S3Settings | GcsSettings | WalrusSettings;
 /**
  * Minutes between sweeps: at most every five minutes, at least once a day.
  */
@@ -831,6 +1265,10 @@ export type TrafficStage =
   | "deleted"
   | "expired"
   | "purged";
+/**
+ * Handle for one upload (begin → chunk → commit or abort) or one download (get → chunk). Host-generated and unguessable, which is what lets a reference to another party's transfer be answered as not-found without confirming that it exists. Bound at creation to the party that opened it: the subject the host authenticated for the opening request. Opaque: a producer quotes what it was given.
+ */
+export type TransferId = string;
 /**
  * A ULID in Crockford base32, uppercase. Used for `attributeId` and `profileId`. Chosen over a UUID because the leading 48 bits are a timestamp, so a key-ordered scan of the store is also creation-ordered and a `list` needs no secondary sort. Server-assigned on create; a producer MAY supply one to make a create idempotent, and a maintainer MUST reject a supplied value that already exists rather than silently overwriting.
  */
@@ -1159,9 +1597,1665 @@ export interface Account {
    */
   lastAuthenticatedAt?: number;
   /**
-   * Lifetime counters the mediator keeps for this account. Present only when the request set `includeStats`.
+   * Lifetime counters the mediator keeps for this account. Present only when the request set `includeStats`.
+   */
+  stats?: AccountStats;
+}
+/**
+ * Who may use an account, and how far. One binding per consumer per account. A binding is checked before anything is signed: the caller must be `consumer`, proven by the request's own proof; the request must sit inside `scopeCeiling`; its TTL must not exceed `maxTtlSeconds`; and the binding's rate must not be exhausted.
+ */
+export interface AccountBinding {
+  /**
+   * The DID of the integration allowed to use the account.
+   */
+  consumer: string;
+  /**
+   * Required for storage and OAuth models; absent for `sui-signer`, whose ceiling is the account's own allow-list and caps.
+   */
+  scopeCeiling?: CredentialScopeCeiling;
+  /**
+   * The longest credential lifetime the consumer may request. 900 (15 minutes) is RECOMMENDED; the ceiling is one hour.
+   */
+  maxTtlSeconds: number;
+  /**
+   * Issuances or signatures per minute for this binding.
+   */
+  ratePerMinute: number;
+  /**
+   * Where the provider supports it (`aws:SourceIp`), issued credentials are pinned to these networks, so a credential lifted from the consumer is useless elsewhere.
+   *
+   * @maxItems 16
+   */
+  sourceCidrs?:
+    | []
+    | [string]
+    | [string, string]
+    | [string, string, string]
+    | [string, string, string, string]
+    | [string, string, string, string, string]
+    | [string, string, string, string, string, string]
+    | [string, string, string, string, string, string, string]
+    | [string, string, string, string, string, string, string, string]
+    | [string, string, string, string, string, string, string, string, string]
+    | [string, string, string, string, string, string, string, string, string, string]
+    | [string, string, string, string, string, string, string, string, string, string, string]
+    | [string, string, string, string, string, string, string, string, string, string, string, string]
+    | [string, string, string, string, string, string, string, string, string, string, string, string, string]
+    | [string, string, string, string, string, string, string, string, string, string, string, string, string, string]
+    | [
+        string,
+        string,
+        string,
+        string,
+        string,
+        string,
+        string,
+        string,
+        string,
+        string,
+        string,
+        string,
+        string,
+        string,
+        string
+      ]
+    | [
+        string,
+        string,
+        string,
+        string,
+        string,
+        string,
+        string,
+        string,
+        string,
+        string,
+        string,
+        string,
+        string,
+        string,
+        string,
+        string
+      ];
+  grantedAt?: string;
+}
+export interface AccountProbeReport {
+  at: string;
+  /**
+   * True when every step that ran succeeded.
+   */
+  ok: boolean;
+  /**
+   * True only when the canary steps (`put`, `get`, `delete`, or the model's equivalent) ran, so the account was exercised end to end. A probe that stopped after `exchange` because nothing named a canary prefix is `complete: false` even when `ok` is true, and does not clear `providerSetupRequired`.
+   */
+  complete: boolean;
+  /**
+   * In order; the first failing step ends the probe.
+   *
+   * @maxItems 8
+   */
+  steps:
+    | []
+    | [
+        {
+          step: AccountProbeStep;
+          ok: boolean;
+          durationMs?: number;
+          /**
+           * The provider's error, verbatim and truncated, so an administrator sees the cloud's own words. Untrusted text. A custodian MUST remove any credential, signature or token from it first.
+           */
+          providerError?: string;
+          providerRequestId?: string;
+        }
+      ]
+    | [
+        {
+          step: AccountProbeStep;
+          ok: boolean;
+          durationMs?: number;
+          /**
+           * The provider's error, verbatim and truncated, so an administrator sees the cloud's own words. Untrusted text. A custodian MUST remove any credential, signature or token from it first.
+           */
+          providerError?: string;
+          providerRequestId?: string;
+        },
+        {
+          step: AccountProbeStep;
+          ok: boolean;
+          durationMs?: number;
+          /**
+           * The provider's error, verbatim and truncated, so an administrator sees the cloud's own words. Untrusted text. A custodian MUST remove any credential, signature or token from it first.
+           */
+          providerError?: string;
+          providerRequestId?: string;
+        }
+      ]
+    | [
+        {
+          step: AccountProbeStep;
+          ok: boolean;
+          durationMs?: number;
+          /**
+           * The provider's error, verbatim and truncated, so an administrator sees the cloud's own words. Untrusted text. A custodian MUST remove any credential, signature or token from it first.
+           */
+          providerError?: string;
+          providerRequestId?: string;
+        },
+        {
+          step: AccountProbeStep;
+          ok: boolean;
+          durationMs?: number;
+          /**
+           * The provider's error, verbatim and truncated, so an administrator sees the cloud's own words. Untrusted text. A custodian MUST remove any credential, signature or token from it first.
+           */
+          providerError?: string;
+          providerRequestId?: string;
+        },
+        {
+          step: AccountProbeStep;
+          ok: boolean;
+          durationMs?: number;
+          /**
+           * The provider's error, verbatim and truncated, so an administrator sees the cloud's own words. Untrusted text. A custodian MUST remove any credential, signature or token from it first.
+           */
+          providerError?: string;
+          providerRequestId?: string;
+        }
+      ]
+    | [
+        {
+          step: AccountProbeStep;
+          ok: boolean;
+          durationMs?: number;
+          /**
+           * The provider's error, verbatim and truncated, so an administrator sees the cloud's own words. Untrusted text. A custodian MUST remove any credential, signature or token from it first.
+           */
+          providerError?: string;
+          providerRequestId?: string;
+        },
+        {
+          step: AccountProbeStep;
+          ok: boolean;
+          durationMs?: number;
+          /**
+           * The provider's error, verbatim and truncated, so an administrator sees the cloud's own words. Untrusted text. A custodian MUST remove any credential, signature or token from it first.
+           */
+          providerError?: string;
+          providerRequestId?: string;
+        },
+        {
+          step: AccountProbeStep;
+          ok: boolean;
+          durationMs?: number;
+          /**
+           * The provider's error, verbatim and truncated, so an administrator sees the cloud's own words. Untrusted text. A custodian MUST remove any credential, signature or token from it first.
+           */
+          providerError?: string;
+          providerRequestId?: string;
+        },
+        {
+          step: AccountProbeStep;
+          ok: boolean;
+          durationMs?: number;
+          /**
+           * The provider's error, verbatim and truncated, so an administrator sees the cloud's own words. Untrusted text. A custodian MUST remove any credential, signature or token from it first.
+           */
+          providerError?: string;
+          providerRequestId?: string;
+        }
+      ]
+    | [
+        {
+          step: AccountProbeStep;
+          ok: boolean;
+          durationMs?: number;
+          /**
+           * The provider's error, verbatim and truncated, so an administrator sees the cloud's own words. Untrusted text. A custodian MUST remove any credential, signature or token from it first.
+           */
+          providerError?: string;
+          providerRequestId?: string;
+        },
+        {
+          step: AccountProbeStep;
+          ok: boolean;
+          durationMs?: number;
+          /**
+           * The provider's error, verbatim and truncated, so an administrator sees the cloud's own words. Untrusted text. A custodian MUST remove any credential, signature or token from it first.
+           */
+          providerError?: string;
+          providerRequestId?: string;
+        },
+        {
+          step: AccountProbeStep;
+          ok: boolean;
+          durationMs?: number;
+          /**
+           * The provider's error, verbatim and truncated, so an administrator sees the cloud's own words. Untrusted text. A custodian MUST remove any credential, signature or token from it first.
+           */
+          providerError?: string;
+          providerRequestId?: string;
+        },
+        {
+          step: AccountProbeStep;
+          ok: boolean;
+          durationMs?: number;
+          /**
+           * The provider's error, verbatim and truncated, so an administrator sees the cloud's own words. Untrusted text. A custodian MUST remove any credential, signature or token from it first.
+           */
+          providerError?: string;
+          providerRequestId?: string;
+        },
+        {
+          step: AccountProbeStep;
+          ok: boolean;
+          durationMs?: number;
+          /**
+           * The provider's error, verbatim and truncated, so an administrator sees the cloud's own words. Untrusted text. A custodian MUST remove any credential, signature or token from it first.
+           */
+          providerError?: string;
+          providerRequestId?: string;
+        }
+      ]
+    | [
+        {
+          step: AccountProbeStep;
+          ok: boolean;
+          durationMs?: number;
+          /**
+           * The provider's error, verbatim and truncated, so an administrator sees the cloud's own words. Untrusted text. A custodian MUST remove any credential, signature or token from it first.
+           */
+          providerError?: string;
+          providerRequestId?: string;
+        },
+        {
+          step: AccountProbeStep;
+          ok: boolean;
+          durationMs?: number;
+          /**
+           * The provider's error, verbatim and truncated, so an administrator sees the cloud's own words. Untrusted text. A custodian MUST remove any credential, signature or token from it first.
+           */
+          providerError?: string;
+          providerRequestId?: string;
+        },
+        {
+          step: AccountProbeStep;
+          ok: boolean;
+          durationMs?: number;
+          /**
+           * The provider's error, verbatim and truncated, so an administrator sees the cloud's own words. Untrusted text. A custodian MUST remove any credential, signature or token from it first.
+           */
+          providerError?: string;
+          providerRequestId?: string;
+        },
+        {
+          step: AccountProbeStep;
+          ok: boolean;
+          durationMs?: number;
+          /**
+           * The provider's error, verbatim and truncated, so an administrator sees the cloud's own words. Untrusted text. A custodian MUST remove any credential, signature or token from it first.
+           */
+          providerError?: string;
+          providerRequestId?: string;
+        },
+        {
+          step: AccountProbeStep;
+          ok: boolean;
+          durationMs?: number;
+          /**
+           * The provider's error, verbatim and truncated, so an administrator sees the cloud's own words. Untrusted text. A custodian MUST remove any credential, signature or token from it first.
+           */
+          providerError?: string;
+          providerRequestId?: string;
+        },
+        {
+          step: AccountProbeStep;
+          ok: boolean;
+          durationMs?: number;
+          /**
+           * The provider's error, verbatim and truncated, so an administrator sees the cloud's own words. Untrusted text. A custodian MUST remove any credential, signature or token from it first.
+           */
+          providerError?: string;
+          providerRequestId?: string;
+        }
+      ]
+    | [
+        {
+          step: AccountProbeStep;
+          ok: boolean;
+          durationMs?: number;
+          /**
+           * The provider's error, verbatim and truncated, so an administrator sees the cloud's own words. Untrusted text. A custodian MUST remove any credential, signature or token from it first.
+           */
+          providerError?: string;
+          providerRequestId?: string;
+        },
+        {
+          step: AccountProbeStep;
+          ok: boolean;
+          durationMs?: number;
+          /**
+           * The provider's error, verbatim and truncated, so an administrator sees the cloud's own words. Untrusted text. A custodian MUST remove any credential, signature or token from it first.
+           */
+          providerError?: string;
+          providerRequestId?: string;
+        },
+        {
+          step: AccountProbeStep;
+          ok: boolean;
+          durationMs?: number;
+          /**
+           * The provider's error, verbatim and truncated, so an administrator sees the cloud's own words. Untrusted text. A custodian MUST remove any credential, signature or token from it first.
+           */
+          providerError?: string;
+          providerRequestId?: string;
+        },
+        {
+          step: AccountProbeStep;
+          ok: boolean;
+          durationMs?: number;
+          /**
+           * The provider's error, verbatim and truncated, so an administrator sees the cloud's own words. Untrusted text. A custodian MUST remove any credential, signature or token from it first.
+           */
+          providerError?: string;
+          providerRequestId?: string;
+        },
+        {
+          step: AccountProbeStep;
+          ok: boolean;
+          durationMs?: number;
+          /**
+           * The provider's error, verbatim and truncated, so an administrator sees the cloud's own words. Untrusted text. A custodian MUST remove any credential, signature or token from it first.
+           */
+          providerError?: string;
+          providerRequestId?: string;
+        },
+        {
+          step: AccountProbeStep;
+          ok: boolean;
+          durationMs?: number;
+          /**
+           * The provider's error, verbatim and truncated, so an administrator sees the cloud's own words. Untrusted text. A custodian MUST remove any credential, signature or token from it first.
+           */
+          providerError?: string;
+          providerRequestId?: string;
+        },
+        {
+          step: AccountProbeStep;
+          ok: boolean;
+          durationMs?: number;
+          /**
+           * The provider's error, verbatim and truncated, so an administrator sees the cloud's own words. Untrusted text. A custodian MUST remove any credential, signature or token from it first.
+           */
+          providerError?: string;
+          providerRequestId?: string;
+        }
+      ]
+    | [
+        {
+          step: AccountProbeStep;
+          ok: boolean;
+          durationMs?: number;
+          /**
+           * The provider's error, verbatim and truncated, so an administrator sees the cloud's own words. Untrusted text. A custodian MUST remove any credential, signature or token from it first.
+           */
+          providerError?: string;
+          providerRequestId?: string;
+        },
+        {
+          step: AccountProbeStep;
+          ok: boolean;
+          durationMs?: number;
+          /**
+           * The provider's error, verbatim and truncated, so an administrator sees the cloud's own words. Untrusted text. A custodian MUST remove any credential, signature or token from it first.
+           */
+          providerError?: string;
+          providerRequestId?: string;
+        },
+        {
+          step: AccountProbeStep;
+          ok: boolean;
+          durationMs?: number;
+          /**
+           * The provider's error, verbatim and truncated, so an administrator sees the cloud's own words. Untrusted text. A custodian MUST remove any credential, signature or token from it first.
+           */
+          providerError?: string;
+          providerRequestId?: string;
+        },
+        {
+          step: AccountProbeStep;
+          ok: boolean;
+          durationMs?: number;
+          /**
+           * The provider's error, verbatim and truncated, so an administrator sees the cloud's own words. Untrusted text. A custodian MUST remove any credential, signature or token from it first.
+           */
+          providerError?: string;
+          providerRequestId?: string;
+        },
+        {
+          step: AccountProbeStep;
+          ok: boolean;
+          durationMs?: number;
+          /**
+           * The provider's error, verbatim and truncated, so an administrator sees the cloud's own words. Untrusted text. A custodian MUST remove any credential, signature or token from it first.
+           */
+          providerError?: string;
+          providerRequestId?: string;
+        },
+        {
+          step: AccountProbeStep;
+          ok: boolean;
+          durationMs?: number;
+          /**
+           * The provider's error, verbatim and truncated, so an administrator sees the cloud's own words. Untrusted text. A custodian MUST remove any credential, signature or token from it first.
+           */
+          providerError?: string;
+          providerRequestId?: string;
+        },
+        {
+          step: AccountProbeStep;
+          ok: boolean;
+          durationMs?: number;
+          /**
+           * The provider's error, verbatim and truncated, so an administrator sees the cloud's own words. Untrusted text. A custodian MUST remove any credential, signature or token from it first.
+           */
+          providerError?: string;
+          providerRequestId?: string;
+        },
+        {
+          step: AccountProbeStep;
+          ok: boolean;
+          durationMs?: number;
+          /**
+           * The provider's error, verbatim and truncated, so an administrator sees the cloud's own words. Untrusted text. A custodian MUST remove any credential, signature or token from it first.
+           */
+          providerError?: string;
+          providerRequestId?: string;
+        }
+      ];
+}
+/**
+ * The public half of the account's key, as the provider needs it. Never a private key.
+ */
+export interface AccountPublicMaterial {
+  algorithm: "ES256" | "RS256" | "Secp256r1";
+  /**
+   * Digest of the public key's SubjectPublicKeyInfo DER.
+   */
+  keyFingerprint: DigestMultibase;
+  /**
+   * The public key as a JWK, with `kid`. Public members only: the schema admits no private member (`d`, `p`, `q`, `dp`, `dq`, `qi`), so a document carrying one fails validation.
+   */
+  publicKeyJwk?: {
+    kty: "EC" | "RSA";
+    crv?: "P-256";
+    x?: string;
+    y?: string;
+    n?: string;
+    e?: string;
+    kid: string;
+    alg?: "ES256" | "RS256";
+    use?: "sig";
+  };
+  /**
+   * `aws-roles-anywhere`: the trust anchor's CA certificate. `azure-cert`: the certificate uploaded to the app registration.
+   */
+  certificatePem?: string;
+  /**
+   * `sui-signer`: the Sui address the key controls.
+   */
+  address?: string;
+  /**
+   * During a rotation (external/accounts/keys/rotate), the staged successor key, until it is confirmed and the current key retires.
+   */
+  pendingKeyFingerprint?: DigestMultibase;
+}
+/**
+ * That a static model's secret is set, and which one. Never its value.
+ */
+export interface AccountSecretInfo {
+  fingerprint: SecretFingerprint;
+  setAt: string;
+}
+/**
+ * What an administrator does at the provider to make an account usable, generated by the custodian from the account's settings, public material and bindings. Public material and policy only: never a private key or secret, and the custodian never asks for the provider's administrator credentials.
+ */
+export interface AccountSetupArtifacts {
+  model: AuthModel;
+  /**
+   * @maxItems 16
+   */
+  artifacts:
+    | []
+    | [
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        }
+      ]
+    | [
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        },
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        }
+      ]
+    | [
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        },
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        },
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        }
+      ]
+    | [
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        },
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        },
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        },
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        }
+      ]
+    | [
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        },
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        },
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        },
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        },
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        }
+      ]
+    | [
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        },
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        },
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        },
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        },
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        },
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        }
+      ]
+    | [
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        },
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        },
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        },
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        },
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        },
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        },
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        }
+      ]
+    | [
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        },
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        },
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        },
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        },
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        },
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        },
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        },
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        }
+      ]
+    | [
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        },
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        },
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        },
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        },
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        },
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        },
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        },
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        },
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        }
+      ]
+    | [
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        },
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        },
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        },
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        },
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        },
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        },
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        },
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        },
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        },
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        }
+      ]
+    | [
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        },
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        },
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        },
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        },
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        },
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        },
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        },
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        },
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        },
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        },
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        }
+      ]
+    | [
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        },
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        },
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        },
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        },
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        },
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        },
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        },
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        },
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        },
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        },
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        },
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        }
+      ]
+    | [
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        },
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        },
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        },
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        },
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        },
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        },
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        },
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        },
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        },
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        },
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        },
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        },
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        }
+      ]
+    | [
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        },
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        },
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        },
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        },
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        },
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        },
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        },
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        },
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        },
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        },
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        },
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        },
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        },
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        }
+      ]
+    | [
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        },
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        },
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        },
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        },
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        },
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        },
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        },
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        },
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        },
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        },
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        },
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        },
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        },
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        },
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        }
+      ]
+    | [
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        },
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        },
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        },
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        },
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        },
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        },
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        },
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        },
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        },
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        },
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        },
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        },
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        },
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        },
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        },
+        {
+          /**
+           * File name to save it under: `trust-anchor.pem`, `jwks.json`, `permissions-policy.json`, `crl.pem`.
+           */
+          name: string;
+          mediaType: string;
+          content: string;
+        }
+      ];
+  /**
+   * @maxItems 32
    */
-  stats?: AccountStats;
+  steps: {
+    description: string;
+    /**
+     * A provider CLI command (`aws rolesanywhere create-trust-anchor …`, `gcloud iam workload-identity-pools providers create-oidc … --jwk-json-path`, `az ad app credential reset --cert …`), referring to artifacts by `name`.
+     */
+    command?: string;
+  }[];
 }
 /**
  * What an account has sent and received over its lifetime, as the mediator counted it. Every member is optional: a mediator reports what it keeps, and a counter absent from a response was not kept rather than zero. Counters survive restarts and are not reset by reading them; removing an account discards them.
@@ -2056,6 +4150,24 @@ export interface BackupEnvelope {
    */
   ciphertext: string;
 }
+/**
+ * The ciphertext manifest of one blob, committed by the uploader before any byte moves. Its digest is the BlobRef. Every chunk is checked against `chunks.chunkDigests` on arrival and the reassembled blob against `digest`, so a host can neither accept nor serve bytes the uploader did not commit to. The manifest also appears, by its BlobRef, inside the sealed FileManifest the author signs; a reader who opens the record therefore knows which ciphertext its author meant, and a host cannot substitute a different blob under the same record.
+ *
+ * Consistency rules JSON Schema cannot state: `chunks.chunkCount` MUST equal ceil(size / chunks.chunkSize), and `chunks.chunkDigests` MUST have exactly `chunkCount` items. A party receiving a manifest violating either MUST refuse it.
+ *
+ * Each transfer chunk is exactly one sealed STREAM segment (see FileManifest): every chunk but the last is `chunkSize` bytes, and `chunkSize` is the plaintext segment size plus the 16-byte AEAD tag. The 262144-byte ceiling of ChunkSize therefore puts the largest plaintext segment at 262128 bytes, and the 4096-chunk ceiling of ChunkCount puts the largest blob at 1 GiB of ciphertext.
+ */
+export interface BlobManifest {
+  /**
+   * Ciphertext bytes, padding included. What the host stores, and what every limit and usage figure is stated in.
+   */
+  size: ExpectedSizeBytes;
+  chunks: ChunkManifest;
+  /**
+   * Digest of the whole ciphertext, over its bytes. Checked after reassembly, so a correct set of chunks in the wrong order is still caught.
+   */
+  digest: DigestMultibase;
+}
 /**
  * Whether each step that turns commit trust on for a repository is in place, as last reported. A step that this forge's plan does not need reads `true`.
  */
@@ -2630,6 +4742,74 @@ export interface CredentialReference {
 export interface CredentialSchema {
   [k: string]: unknown | undefined;
 }
+/**
+ * What one issuance may do. For storage models, `prefix` and `actions` (both required, a rule this schema leaves to the custodian because other models use neither); for `s3-static-presign`, also `objectKey`, since a presigned URL is one operation on one object; for `oauth2-private-key-jwt`, `scopes`.
+ */
+export interface CredentialScope {
+  prefix?: ProviderObjectPrefix;
+  /**
+   * @minItems 1
+   * @maxItems 3
+   */
+  actions?:
+    | [ProviderObjectAction]
+    | [ProviderObjectAction, ProviderObjectAction]
+    | [ProviderObjectAction, ProviderObjectAction, ProviderObjectAction];
+  /**
+   * `s3-static-presign` only: the object's name within `prefix`. The presigned URL names `prefix` + `objectKey` and nothing else, and `actions` must hold exactly one action.
+   */
+  objectKey?: string;
+  /**
+   * `oauth2-private-key-jwt` only: the OAuth scopes requested.
+   *
+   * @maxItems 64
+   */
+  scopes?: string[];
+}
+/**
+ * The widest scope a binding's consumer may request. An issuance is inside the ceiling when its `prefix` begins with one of `prefixes`, every one of its `actions` is in `actions`, and every one of its `scopes` is in `scopes`. Absent members confer nothing: a ceiling with no `prefixes` permits no storage issuance.
+ */
+export interface CredentialScopeCeiling {
+  /**
+   * @minItems 1
+   * @maxItems 64
+   */
+  prefixes?: [ProviderObjectPrefix, ...ProviderObjectPrefix[]];
+  /**
+   * @minItems 1
+   * @maxItems 3
+   */
+  actions?:
+    | [ProviderObjectAction]
+    | [ProviderObjectAction, ProviderObjectAction]
+    | [ProviderObjectAction, ProviderObjectAction, ProviderObjectAction];
+  /**
+   * @maxItems 64
+   */
+  scopes?: string[];
+}
+/**
+ * Whether a config can authenticate now, and how — never the credential. `status`: `vta-account`, `ambient` and `sealed` are usable; `required` means the config cannot store until a credential is provided (a `sealed` config never set, or set before a restore, which carries no credential); `none` is a `local` config.
+ */
+export interface CredentialState {
+  status: "vta-account" | "ambient" | "sealed" | "required" | "none";
+  /**
+   * Present with `vta-account`.
+   */
+  account?: ExternalAccountId;
+  /**
+   * Present with `sealed`: a digest identifying the stored credential, so an administrator can tell which one is set without anyone being able to read it. Computed over the credential with a community-held key, never a bare hash of a low-entropy secret.
+   */
+  fingerprint?: DigestMultibase;
+  /**
+   * Present with `sealed`: when the stored credential was last set.
+   */
+  setAt?: string;
+  /**
+   * Present with `vta-account`: how many rooms the community currently holds a live room-scoped credential for.
+   */
+  roomsHoldingCredentials?: number;
+}
 /**
  * A W3C Data Integrity proof by the card's publisher. Additional Data Integrity members (e.g. `created`) are permitted and are covered as the cryptosuite defines.
  */
@@ -3292,6 +5472,18 @@ export interface Effect_TaskConsentV0_1 {
     [k: string]: unknown | undefined;
   };
 }
+/**
+ * The limits a room is enforced against now, with where each scope's came from.
+ */
+export interface EffectiveLimits {
+  limits: RoomLimits;
+  roomSource: LimitSource;
+  memberSource: LimitSource;
+  /**
+   * The host-wide largest-file ceiling, which no room or member limit can exceed.
+   */
+  hostCeilingBytes?: number;
+}
 export interface EncryptionParams {
   /**
    * AEAD identifier, e.g. `aes-256-gcm`.
@@ -3415,6 +5607,53 @@ export interface Exposure {
 export interface Ext {
   [k: string]: unknown | undefined;
 }
+/**
+ * An account as every read returns it. Contains no private key, no secret and no issued credential, to any reader.
+ */
+export interface ExternalAccount {
+  id: AccountId;
+  /**
+   * Display name. Untrusted text: render it, never interpret it.
+   */
+  label: string;
+  context: AccountContextId;
+  settings: AccountSettings;
+  state: AccountState;
+  /**
+   * Absent for the static models, which hold a secret rather than a key.
+   */
+  publicMaterial?: AccountPublicMaterial;
+  /**
+   * Static models only; absent until the secret is set.
+   */
+  secret?: AccountSecretInfo;
+  /**
+   * @maxItems 256
+   */
+  bindings: AccountBinding[];
+  /**
+   * The provider hosts the custodian connects to on this account's behalf, derived by the custodian from its settings: the token or session endpoints issuance uses, and the destinations external/accounts/probe dials (the object store's host, for a storage model). The custodian MUST NOT connect anywhere else on the account's behalf, so an egress proxy can allow exactly this set. Empty only for a model that neither exchanges nor probes over the network.
+   *
+   * @maxItems 8
+   */
+  egressHosts:
+    | []
+    | [string]
+    | [string, string]
+    | [string, string, string]
+    | [string, string, string, string]
+    | [string, string, string, string, string]
+    | [string, string, string, string, string, string]
+    | [string, string, string, string, string, string, string]
+    | [string, string, string, string, string, string, string, string];
+  /**
+   * True when the account cannot be used until its provider-side setup is redone: after a restore that could not carry its key or secret (a wrapped RSA key, a static secret), or after a rotation awaiting confirmation.
+   */
+  providerSetupRequired: boolean;
+  lastProbe?: AccountProbeReport;
+  createdAt: string;
+  updatedAt: string;
+}
 /**
  * One displayed value, with where it comes from and how to render it.
  */
@@ -3445,6 +5684,14 @@ export interface ForgeAccount {
    */
   login: string;
 }
+export interface GcsSettings {
+  kind: "gcs";
+  /**
+   * The bucket name. Validated against GCS naming rules here, because it is placed in a Credential Access Boundary condition and must never carry anything but a name.
+   */
+  bucket: string;
+  prefix?: ObjectPrefix;
+}
 /**
  * The VTC's binding to one owner on one forge.
  */
@@ -3505,6 +5752,22 @@ export interface HistogramBucket {
    */
   count: number;
 }
+/**
+ * One room, as its host holds it — member for member the `HostedRoom` of vtc/rooms/list/0.1, which defines it inside its own payload schema. Nothing derived from the room's contents, and no member list: the host has none.
+ */
+export interface HostedRoom {
+  roomId: string;
+  ownerDid: string;
+  visibility: Visibility;
+  retentionPolicy: RetentionPolicy;
+  epoch: number;
+  lifecycle: "live" | "lapsed" | "dormant" | "reclaimable";
+  epochExpiresAt?: number;
+  retentionDays: number;
+  mirrorOf?: string;
+  createdAt: number;
+  updatedAt: number;
+}
 /**
  * OpenPGP-style ASCII-armored HPKE bundle — the existing OpenVTC sealed-transfer wire form (X25519-HKDF-SHA256 KEM + ChaCha20-Poly1305 AEAD, framed in armor with Bundle-Id / Digest-Algo headers and a CRC24 checksum). Producer assertion (`did-signed` / `attested` / `pinned-only`) is the integrity / authenticity anchor.
  *
@@ -3884,6 +6147,23 @@ export interface KeyScopeListed {
 export interface KeyScopeNone {
   scope: "none";
 }
+/**
+ * Which limits an override applies to. `room`: the room as a whole. `memberDefault`: every member of the room who has no override of their own. `member`: one named member — `member` is REQUIRED with this kind and forbidden with the others, a rule this schema does not express; a community refuses a violation with `malformedRequest`.
+ */
+export interface LimitTarget {
+  kind: "room" | "memberDefault" | "member";
+  /**
+   * The member's DID: the subject at the root of the authority chains they present, which is what their uploads are charged to.
+   */
+  member?: string;
+}
+export interface LocalSettings {
+  kind: "local";
+  /**
+   * Absolute path of the directory the community writes blobs under, on its own host. Created owner-only. Not carried by the community's backup: back it up beside it.
+   */
+  root: string;
+}
 /**
  * The mediator's per-account access-control capability set, expressed as named booleans (the transport-agnostic form of the mediator's internal capability flags). On a set request, members omitted are left unchanged; a get/response carries the full realized set.
  */
@@ -4897,6 +7177,47 @@ export interface RecordMetadata {
    */
   author?: string;
 }
+/**
+ * What `rooms/records/list/0.2` returns: `RecordMetadata` plus `blobs`. A separate definition, not a change to `RecordMetadata`, so that `rooms/records/list/0.1` keeps the exact shape it published. Never the body.
+ */
+export interface RecordMetadataV2 {
+  /**
+   * The record's key within the room. On `attributed` and `private` rooms this MUST be opaque — a random identifier, never a descriptive slug. A key reading `decision/acquire-northwind` defeats the encryption sitting beside it; structured naming belongs inside the sealed body.
+   */
+  key: string;
+  /**
+   * Server-assigned, monotonic per room.
+   */
+  version: number;
+  /**
+   * The epoch the record was sealed under. Absent on an `open` room.
+   */
+  epoch?: number;
+  /**
+   * Curation state. `retracted` is a tombstone: the body is gone, the key and version remain so incremental sync converges and the audit chain stays intact.
+   */
+  status?: "active" | "deprecated" | "retracted";
+  updatedAt: string;
+  /**
+   * Present only on an `open` room; sealed with the body otherwise.
+   */
+  title?: string;
+  /**
+   * Present only on an `open` room; sealed with the body otherwise.
+   */
+  description?: string;
+  /**
+   * The member who wrote it. Present on `open` and `attributed`; on `private` the author is inside the sealed body, where only members can read it.
+   */
+  author?: string;
+  /**
+   * The stored blobs this record names, as rooms/records/put/0.2 wrote them. Absent when it names none, when it is retracted, and on records written by put 0.1. Cleartext on every tier, as on the write, so a listing discloses which records carry files, never anything about the files beyond the blobs' sizes.
+   *
+   * @minItems 1
+   * @maxItems 1
+   */
+  blobs?: [BlobRef];
+}
 /**
  * A passkey already bound to a subject, as listed by `auth/passkey/list` and targeted by `auth/passkey/revoke/*`. This is the auth service's own management view of a credential — not a WebAuthn dictionary — so its members are camelCase per SPEC.md §4.10. The exception is `transports`, whose values are the externally-owned WebAuthn transport tokens and are carried verbatim.
  */
@@ -5005,6 +7326,28 @@ export interface RequestedCredential {
    */
   claims: string[];
 }
+/**
+ * What the service reports about where the request came from. Revealed only in the step 2 response, to the lock holder, after a membership and number proof. Reported by the service, signed by it, and a heuristic: a relaying attacker controls what is observed.
+ */
+export interface Requester {
+  /**
+   * City and country of the starter's connection, from a local lookup with no third-party call, or the literal `unknown`. Never an IP address.
+   */
+  location: string;
+  /**
+   * Browser family of the starter (e.g. `Chrome`), never the full User-Agent; `unknown` when it cannot be told.
+   */
+  browser: string;
+  /**
+   * Operating system family of the starter (e.g. `macOS`); `unknown` when it cannot be told.
+   */
+  os: string;
+  /**
+   * When the service accepted the starter's auth/oob/request.
+   */
+  createdAt: string;
+  sameNetwork: SameNetwork;
+}
 /**
  * One line of a profile AFTER resolution: what the profile would present at this entry, rather than how the entry is written.
  *
@@ -5319,6 +7662,23 @@ export interface RollbackResult {
   serverless?: boolean;
   ext?: Ext;
 }
+/**
+ * How much a host is willing to store for one room, at the room and per member. A hosting decision, set by the host and never by anything in the room's credentials. An upload must fit every scope at once: the object against the smallest `maxFileBytes` that applies, and the member and the room with the file added.
+ */
+export interface RoomLimits {
+  /**
+   * False refuses every rooms/blobs/* upload for the room. Reads of blobs already stored continue.
+   */
+  filesEnabled: boolean;
+  /**
+   * Limits on the room as a whole.
+   */
+  room?: ScopeLimits;
+  /**
+   * Limits on each member's own uploads in this room, unless that member has an override. A member is the subject at the root of the authority chain they present, never the key that signed, so an agent acting on an attenuated chain spends its member's allowance. Not applied on a `private` room, where the host cannot tell members apart; the room and object limits still hold there.
+   */
+  member?: ScopeLimits;
+}
 /**
  * One change to a role's key set, from preview to completion. The rotation history of a DID is the list of these; the log is the authority for what was published, and this record adds what the log cannot say — which change was which, and (custody projection only) who asked, who approved, and why.
  */
@@ -5369,6 +7729,26 @@ export interface RotationRecord {
    */
   cacheHorizonAt?: string;
 }
+export interface S3Settings {
+  kind: "s3";
+  /**
+   * The S3 API endpoint, for a store other than AWS (R2, B2, MinIO). Absent means AWS S3 in `region`. HTTPS only.
+   */
+  endpoint?: string;
+  /**
+   * The bucket's region, as the store names it (`eu-west-1`; `auto` for R2).
+   */
+  region: string;
+  /**
+   * The bucket name. Validated against S3 naming rules here, because it is placed in downscoped session policies and must never carry anything but a name.
+   */
+  bucket: string;
+  prefix?: ObjectPrefix;
+  /**
+   * Address the bucket in the path rather than the host name, as MinIO usually needs. Absent means virtual-hosted style.
+   */
+  pathStyle?: boolean;
+}
 /**
  * One registered credential type, as the community stores it.
  */
@@ -5408,6 +7788,23 @@ export interface SchemaSummary {
    */
   createdByDid: string;
 }
+/**
+ * Limits at one scope. Every member is optional: an absent member means the scope sets no limit of that kind, and the next wider scope's limit, or the host's ceiling, governs. All sizes are ciphertext bytes.
+ */
+export interface ScopeLimits {
+  /**
+   * The number of committed blobs the scope may hold. 0 refuses every upload at this scope.
+   */
+  maxFiles?: number;
+  /**
+   * The largest single blob the scope accepts. Never above 1 GiB, the transfer ceiling (BlobManifest).
+   */
+  maxFileBytes?: number;
+  /**
+   * The total size of the committed and reserved blobs the scope may hold.
+   */
+  maxBytes?: number;
+}
 export interface Builtin_VtaV0_1 {
   type: "builtin";
 }
@@ -5435,6 +7832,19 @@ export interface SealedRecord {
    */
   epoch: number;
 }
+/**
+ * Who the service says it is.
+ */
+export interface Service {
+  /**
+   * The service's DID: the `recipient` of every request in the family, and the `_from` of the trigger link.
+   */
+  did: string;
+  /**
+   * The name the service calls itself. Supplied by the service: an approver shows the name from its OWN records and flags a difference from this one (VTI-LNK-104); it never shows this value as the community's name on its own authority.
+   */
+  name: string;
+}
 export interface ServiceInstance_DidManagementV0_1 {
   /**
    * Stable identifier the control plane uses for this instance. SHOULD be derived from the instance's DID (e.g. `did:web:host.example` → `did_web_host_example`) so it survives restarts.
@@ -5826,6 +8236,83 @@ export interface StepUpProof_VaultV0_2 {
    */
   challengeId: string;
 }
+/**
+ * One storage config as the community holds it. Carries no secret.
+ */
+export interface StorageConfig {
+  id: StorageConfigId;
+  /**
+   * A display name for administrators (`EU — S3 (main account)`). Shown to a room's creator with the config's kind when the community lets them choose.
+   */
+  label: string;
+  settings: StorageSettings;
+  auth?: StorageAuth;
+  /**
+   * Total ciphertext bytes the community will store on this config, across every room assigned to it. A capacity, not a policy: an upload that would cross it is refused with scope `storage`. Absent means no capacity set.
+   */
+  capacityBytes?: number;
+  state: ConfigState;
+  /**
+   * True for the config a room is assigned to when neither the community's policy nor its creator names one.
+   */
+  isDefault?: boolean;
+  createdBy: string;
+  createdAt: string;
+  updatedBy?: string;
+  updatedAt?: string;
+}
+/**
+ * What a config holds and whether it works, computed at the time of the read. Ciphertext bytes throughout.
+ */
+export interface StorageConfigFacts {
+  /**
+   * Rooms assigned to this config.
+   */
+  rooms: number;
+  /**
+   * Blobs stored on this config that are not yet deleted, wherever their rooms are now assigned.
+   */
+  files: number;
+  /**
+   * Their total size. Counts against `capacityBytes` until the backend deletion has actually happened, unlike room and member usage, which stop counting an orphaned blob at once.
+   */
+  bytes: number;
+  /**
+   * Bytes of orphaned blobs awaiting deletion after their grace window.
+   */
+  pendingDeleteBytes: number;
+  credential: CredentialState;
+  health: StorageHealth;
+  /**
+   * Present on a `walrus` config.
+   */
+  walrus?: {
+    /**
+     * The Sui address that pays for storage, derived from the VTA account's key.
+     */
+    signerAddress?: string;
+    nextExtensionDueAt?: string;
+  };
+}
+/**
+ * The last evidence the community has that a config works. Every member is optional: a config never probed and never used has none.
+ */
+export interface StorageHealth {
+  lastProbeAt?: string;
+  lastProbeOk?: boolean;
+  /**
+   * The last successful blob write.
+   */
+  lastPutAt?: string;
+  /**
+   * The last successful chunk read.
+   */
+  lastGetAt?: string;
+  /**
+   * The last successful deletion (on `walrus`, the last lapse the community observed).
+   */
+  lastDeleteAt?: string;
+}
 /**
  * A descriptor for a transfer that happens outside Trust Task documents, at an address the recipient publishes — the `stream` algorithm, and any other algorithm a recipient offers that is shaped as an address plus a bearer credential. Identical in members to the `vta/backup/* /1.0` descriptor.
  */
@@ -5847,6 +8334,14 @@ export interface StreamDescriptor {
   expectedSizeBytes: ExpectedSizeBytes;
   expiresAt: ExpiresAt;
 }
+/**
+ * One Move function an account's transactions may call.
+ */
+export interface SuiMoveCall {
+  package: string;
+  module: string;
+  function: string;
+}
 /**
  * What an approver is shown, rendered from the summary template for the action's `kind`. Title and effect are the template's prose; the fields are the payload values that prose is about, each located by pointer so a renderer can verify it.
  */
@@ -6016,6 +8511,27 @@ export interface UploadTarget {
   path?: WebsitePath;
   ifMatch?: WebsiteEtag;
 }
+/**
+ * What one scope holds now. Ciphertext bytes throughout.
+ */
+export interface Usage {
+  /**
+   * Committed blobs that are not orphaned.
+   */
+  files: number;
+  /**
+   * Their total size. A blob stops counting the moment it is orphaned (its last record dropped it or was retracted), not when the host finally deletes it, so a member who deletes a file has the room back at once.
+   */
+  bytes: number;
+  /**
+   * Bytes reserved by uploads begun and not yet committed, aborted or expired. Counted against `maxBytes`, so two concurrent uploads cannot both fit under a limit only one of them fits.
+   */
+  reservedBytes: number;
+  /**
+   * Uploads begun and not yet committed, aborted or expired. Counted against `maxFiles`.
+   */
+  reservedFiles?: number;
+}
 export interface VaultDeletedEvent_SyncV0_1 {
   kind: "vault.deleted";
   seq: number;
@@ -6563,6 +9079,25 @@ export interface WakeTriggerPolicy {
    */
   allowedTriggers: string[];
 }
+export interface WalrusSettings {
+  kind: "walrus";
+  /**
+   * The Walrus upload relay the community writes through. The community never runs a publisher: a publisher holds a hot wallet in its own configuration, which is the long-lived secret these tasks exist to avoid.
+   */
+  relayUrl: string;
+  /**
+   * The Walrus aggregator the community reads through.
+   */
+  aggregatorUrl: string;
+  /**
+   * Storage epochs to buy when a blob is registered. Walrus sells storage in epochs (two weeks on mainnet) and caps one purchase at 53.
+   */
+  epochs: number;
+  /**
+   * How many epochs before a live blob's end epoch the community extends it. A blob that has become an orphan is not extended, and lapses: the Walrus form of deletion.
+   */
+  extendBeforeEpochs: number;
+}
 /**
  * A did:webvh DID as the VTA holds it. The DID document itself is not here — it lives in the log, which `vta/webvh/dids/get` returns on request.
  */