@openvtc/trust-tasks 0.23.8 → 0.23.9

package/src/device/list/0.2/payload.ts

@@ -249,7 +249,9 @@ export const PAYLOAD_SCHEMA = {
         "roomPresent",
         "roomOpen",
         "keyExport",
-        "signSshsig"
+        "signSshsig",
+        "externalAccountsManage",
+        "externalAuthUse"
       ],
       "description": "Fine-grained capability flag scoped to the device's allowed contexts. See SPEC.md for the full semantics of each. Capability values are additive: a consumer MUST ignore a value it does not recognise rather than reject the binding, and MUST NOT treat an unrecognised value as conferring anything."
     },
@@ -589,7 +591,9 @@ export const RESPONSE_PAYLOAD_SCHEMA = {
         "roomPresent",
         "roomOpen",
         "keyExport",
-        "signSshsig"
+        "signSshsig",
+        "externalAccountsManage",
+        "externalAuthUse"
       ],
       "description": "Fine-grained capability flag scoped to the device's allowed contexts. See SPEC.md for the full semantics of each. Capability values are additive: a consumer MUST ignore a value it does not recognise rather than reject the binding, and MUST NOT treat an unrecognised value as conferring anything."
     },

package/src/device/register/0.1/payload.ts

@@ -217,7 +217,9 @@ export const PAYLOAD_SCHEMA = {
         "room-present",
         "room-open",
         "key-export",
-        "sign-sshsig"
+        "sign-sshsig",
+        "external-accounts-manage",
+        "external-auth-use"
       ],
       "description": "Fine-grained capability flag scoped to the device's allowed contexts. See SPEC.md for the full semantics of each. Capability values are additive: a consumer MUST ignore a value it does not recognise rather than reject the binding, and MUST NOT treat an unrecognised value as conferring anything."
     },
@@ -547,7 +549,9 @@ export const RESPONSE_PAYLOAD_SCHEMA = {
         "room-present",
         "room-open",
         "key-export",
-        "sign-sshsig"
+        "sign-sshsig",
+        "external-accounts-manage",
+        "external-auth-use"
       ],
       "description": "Fine-grained capability flag scoped to the device's allowed contexts. See SPEC.md for the full semantics of each. Capability values are additive: a consumer MUST ignore a value it does not recognise rather than reject the binding, and MUST NOT treat an unrecognised value as conferring anything."
     },

package/src/device/register/0.2/payload.ts

@@ -217,7 +217,9 @@ export const PAYLOAD_SCHEMA = {
         "roomPresent",
         "roomOpen",
         "keyExport",
-        "signSshsig"
+        "signSshsig",
+        "externalAccountsManage",
+        "externalAuthUse"
       ],
       "description": "Fine-grained capability flag scoped to the device's allowed contexts. See SPEC.md for the full semantics of each. Capability values are additive: a consumer MUST ignore a value it does not recognise rather than reject the binding, and MUST NOT treat an unrecognised value as conferring anything."
     },
@@ -547,7 +549,9 @@ export const RESPONSE_PAYLOAD_SCHEMA = {
         "roomPresent",
         "roomOpen",
         "keyExport",
-        "signSshsig"
+        "signSshsig",
+        "externalAccountsManage",
+        "externalAuthUse"
       ],
       "description": "Fine-grained capability flag scoped to the device's allowed contexts. See SPEC.md for the full semantics of each. Capability values are additive: a consumer MUST ignore a value it does not recognise rather than reject the binding, and MUST NOT treat an unrecognised value as conferring anything."
     },

package/src/external/_shared/0.1/accounts.ts

@@ -0,0 +1,19 @@
+/**
+ * Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
+ * Source: specs/external/_shared/0.1/accounts.schema.json
+ */
+
+/**
+ * An external account is an identity at a third party — a cloud provider, an object store, a blockchain, a SaaS API — held by a key custodian on behalf of a context, and usable by the integrations bound to it only in the ways the account allows, getting back only something short-lived. The custodian holds the account's key or secret and never releases it: it signs, performs the provider's token exchange itself, downscopes the result, and returns a credential that expires in minutes, sealed to the consumer.
+ *
+ * Defined once because the management tasks (external/accounts/*), the consumer tasks (external/credentials/issue, external/sign) and every reader of an account carry the same shapes. Not itself a Trust Task specification (the `_shared` folder is skipped by the registry build and the codegen).
+ */
+export interface ExternalAccountsSharedDefinitionsForTheExternalSpecFamily {
+  [k: string]: unknown | undefined;
+}
+
+/**
+ * The definitions this shared schema publishes, hoisted to one declaration each.
+ * See "../../../_shared/components.js".
+ */
+export type { AccountBinding, AccountContextId, AccountId, AccountProbeReport, AccountProbeStep, AccountPublicMaterial, AccountSecretInfo, AccountSettings, AccountSetupArtifacts, AccountState, AuthModel, AwsArn, AwsRegion, CredentialScope, CredentialScopeCeiling, ExternalAccount, ProviderBucketName, ProviderHttpsUrl, ProviderObjectAction, ProviderObjectPrefix, SealedTransferBundle, SecretFingerprint, SuiMoveCall } from "../../../_shared/components.js";