@openvtc/trust-tasks 0.25.2 → 0.26.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +28 -0
- package/dist/_shared/components.d.ts +10 -1
- package/dist/_shared/components.d.ts.map +1 -1
- package/dist/vtc/_shared/0.1/room-storage.d.ts +1 -1
- package/dist/vtc/_shared/0.1/room-storage.d.ts.map +1 -1
- package/dist/vtc/storage/configs/create/0.1/payload.d.ts +50 -10
- package/dist/vtc/storage/configs/create/0.1/payload.d.ts.map +1 -1
- package/dist/vtc/storage/configs/create/0.1/payload.js +24 -2
- package/dist/vtc/storage/configs/create/0.1/payload.js.map +1 -1
- package/dist/vtc/storage/configs/get/0.1/payload.d.ts +66 -10
- package/dist/vtc/storage/configs/get/0.1/payload.d.ts.map +1 -1
- package/dist/vtc/storage/configs/get/0.1/payload.js +32 -2
- package/dist/vtc/storage/configs/get/0.1/payload.js.map +1 -1
- package/dist/vtc/storage/configs/list/0.1/payload.d.ts +66 -10
- package/dist/vtc/storage/configs/list/0.1/payload.d.ts.map +1 -1
- package/dist/vtc/storage/configs/list/0.1/payload.js +32 -2
- package/dist/vtc/storage/configs/list/0.1/payload.js.map +1 -1
- package/dist/vtc/storage/configs/update/0.1/payload.d.ts +50 -10
- package/dist/vtc/storage/configs/update/0.1/payload.d.ts.map +1 -1
- package/dist/vtc/storage/configs/update/0.1/payload.js +24 -2
- package/dist/vtc/storage/configs/update/0.1/payload.js.map +1 -1
- package/dist/vtc/storage/credentials/set/0.1/payload.d.ts +46 -2
- package/dist/vtc/storage/credentials/set/0.1/payload.d.ts.map +1 -1
- package/dist/vtc/storage/credentials/set/0.1/payload.js +22 -0
- package/dist/vtc/storage/credentials/set/0.1/payload.js.map +1 -1
- package/package.json +1 -1
- package/src/_shared/components.ts +10 -1
- package/src/vtc/_shared/0.1/room-storage.ts +1 -1
- package/src/vtc/storage/configs/create/0.1/payload.ts +26 -4
- package/src/vtc/storage/configs/get/0.1/payload.ts +34 -4
- package/src/vtc/storage/configs/list/0.1/payload.ts +34 -4
- package/src/vtc/storage/configs/update/0.1/payload.ts +26 -4
- package/src/vtc/storage/credentials/set/0.1/payload.ts +24 -2
|
@@ -187,6 +187,10 @@ export const PAYLOAD_SCHEMA = {
|
|
|
187
187
|
"none"
|
|
188
188
|
]
|
|
189
189
|
},
|
|
190
|
+
"context": {
|
|
191
|
+
"$ref": "#/$defs/ExternalAccountContextId",
|
|
192
|
+
"description": "Present with `vta-account`."
|
|
193
|
+
},
|
|
190
194
|
"account": {
|
|
191
195
|
"$ref": "#/$defs/ExternalAccountId",
|
|
192
196
|
"description": "Present with `vta-account`."
|
|
@@ -215,6 +219,13 @@ export const PAYLOAD_SCHEMA = {
|
|
|
215
219
|
"pattern": "^[a-z0-9](?:[a-z0-9-]{0,62}[a-z0-9])?$",
|
|
216
220
|
"description": "The identifier of an external account held by the community's VTA (the external/accounts/* family), which issues the community short-lived, room-scoped credentials and holds the long-lived authority itself."
|
|
217
221
|
},
|
|
222
|
+
"ExternalAccountContextId": {
|
|
223
|
+
"title": "ExternalAccountContextId",
|
|
224
|
+
"type": "string",
|
|
225
|
+
"minLength": 1,
|
|
226
|
+
"maxLength": 256,
|
|
227
|
+
"description": "The context at the community's VTA that owns an external account. The VTA names an account by its context and its identifier, and decides who may use it by act scope in that context: the community must hold `external-auth-use` there, and be bound to the account, for the account to issue it anything. Naming a context grants nothing; the VTA's binding is the gate."
|
|
228
|
+
},
|
|
218
229
|
"DigestMultibase": {
|
|
219
230
|
"title": "DigestMultibase",
|
|
220
231
|
"description": "A cryptographic digest as a multibase-encoded multihash — the encoding the W3C Verifiable Credentials Data Model 2.0 defines for `digestMultibase`, and the one `did:webvh` uses for its SCID and entry hashes.\n\nMultihash carries the hash algorithm in-band, so the value is self-describing and the wire format survives an algorithm change without a schema revision; multibase does the same for the base encoding, so a verifier never infers base58 from base64url by context. A bare hex string or a `sha-256:`-style prefix hard-codes one algorithm into the wire contract and is non-conforming here.\n\nThis definition constrains the *encoding only*. What the digest is computed over is stated by each referencing field, because it differs legitimately: a digest over a JSON document is taken over its RFC 8785 (JCS) canonicalization, while a digest over an opaque artifact is taken over its bytes. A field whose input is a JSON document and which does not name a canonicalization is not reproducible.\n\nRestricted to the two multibase headers W3C Controlled Identifiers 1.0 §2.4 normatively requires — `z` (base58btc) and `u` (base64url-no-pad). CID permits others but states that \"interoperability is not guaranteed between implementations using such values\", and a registry whose purpose is interoperability should not mint digests a conforming verifier may be unable to read. The alphabets are enforced rather than assumed: base58btc excludes 0, O, I and l, and an earlier permissive pattern let three published examples carry digests that were not valid base58 at all. base58btc is RECOMMENDED, for consistency with `did:key` and `did:webvh`.",
|
|
@@ -298,19 +309,23 @@ export const PAYLOAD_SCHEMA = {
|
|
|
298
309
|
},
|
|
299
310
|
"StorageAuth": {
|
|
300
311
|
"title": "StorageAuth",
|
|
301
|
-
"description": "How the community authenticates to a config's backend. Absent on a `local` config, which needs none.\n\n`vta-account` (RECOMMENDED): an external account in the community's VTA. The VTA holds the long-lived authority; the community holds nothing that outlives a credential lifetime, and asks for credentials scoped to one room's prefix for at most 15 minutes, every issuance audited at the VTA. Required for a `walrus` config other than a `sealed` one, since the VTA's `sui-signer` account signs its storage transactions.\n\n`ambient`: the cloud identity of the machine the community runs on (an instance role, workload identity), downscoped to one room's prefix by the community itself. Not audited or rate-limited by the VTA, and usable by anything on that machine that reaches the metadata endpoint. Not valid for `walrus`.\n\n`sealed` (discouraged): a long-lived credential stored by the community, set with vtc/storage/credentials/set. Protects against every administrator through every surface the community offers; does not protect against whoever operates the machine.",
|
|
312
|
+
"description": "How the community authenticates to a config's backend. Absent on a `local` config, which needs none.\n\n`vta-account` (RECOMMENDED): an external account in the community's VTA, named by the context that owns it and its identifier there. The VTA holds the long-lived authority; the community holds nothing that outlives a credential lifetime, and asks for credentials scoped to one room's prefix for at most 15 minutes, every issuance audited at the VTA. Required for a `walrus` config other than a `sealed` one, since the VTA's `sui-signer` account signs its storage transactions.\n\n`ambient`: the cloud identity of the machine the community runs on (an instance role, workload identity), downscoped to one room's prefix by the community itself. Not audited or rate-limited by the VTA, and usable by anything on that machine that reaches the metadata endpoint. Not valid for `walrus`.\n\n`sealed` (discouraged): a long-lived credential stored by the community, set with vtc/storage/credentials/set. Protects against every administrator through every surface the community offers; does not protect against whoever operates the machine.",
|
|
302
313
|
"oneOf": [
|
|
303
314
|
{
|
|
304
315
|
"type": "object",
|
|
305
316
|
"additionalProperties": false,
|
|
306
317
|
"required": [
|
|
307
318
|
"mode",
|
|
319
|
+
"context",
|
|
308
320
|
"account"
|
|
309
321
|
],
|
|
310
322
|
"properties": {
|
|
311
323
|
"mode": {
|
|
312
324
|
"const": "vta-account"
|
|
313
325
|
},
|
|
326
|
+
"context": {
|
|
327
|
+
"$ref": "#/$defs/ExternalAccountContextId"
|
|
328
|
+
},
|
|
314
329
|
"account": {
|
|
315
330
|
"$ref": "#/$defs/ExternalAccountId"
|
|
316
331
|
}
|
|
@@ -667,6 +682,10 @@ export const RESPONSE_PAYLOAD_SCHEMA = {
|
|
|
667
682
|
"none"
|
|
668
683
|
]
|
|
669
684
|
},
|
|
685
|
+
"context": {
|
|
686
|
+
"$ref": "#/$defs/ExternalAccountContextId",
|
|
687
|
+
"description": "Present with `vta-account`."
|
|
688
|
+
},
|
|
670
689
|
"account": {
|
|
671
690
|
"$ref": "#/$defs/ExternalAccountId",
|
|
672
691
|
"description": "Present with `vta-account`."
|
|
@@ -695,6 +714,13 @@ export const RESPONSE_PAYLOAD_SCHEMA = {
|
|
|
695
714
|
"pattern": "^[a-z0-9](?:[a-z0-9-]{0,62}[a-z0-9])?$",
|
|
696
715
|
"description": "The identifier of an external account held by the community's VTA (the external/accounts/* family), which issues the community short-lived, room-scoped credentials and holds the long-lived authority itself."
|
|
697
716
|
},
|
|
717
|
+
"ExternalAccountContextId": {
|
|
718
|
+
"title": "ExternalAccountContextId",
|
|
719
|
+
"type": "string",
|
|
720
|
+
"minLength": 1,
|
|
721
|
+
"maxLength": 256,
|
|
722
|
+
"description": "The context at the community's VTA that owns an external account. The VTA names an account by its context and its identifier, and decides who may use it by act scope in that context: the community must hold `external-auth-use` there, and be bound to the account, for the account to issue it anything. Naming a context grants nothing; the VTA's binding is the gate."
|
|
723
|
+
},
|
|
698
724
|
"DigestMultibase": {
|
|
699
725
|
"title": "DigestMultibase",
|
|
700
726
|
"description": "A cryptographic digest as a multibase-encoded multihash — the encoding the W3C Verifiable Credentials Data Model 2.0 defines for `digestMultibase`, and the one `did:webvh` uses for its SCID and entry hashes.\n\nMultihash carries the hash algorithm in-band, so the value is self-describing and the wire format survives an algorithm change without a schema revision; multibase does the same for the base encoding, so a verifier never infers base58 from base64url by context. A bare hex string or a `sha-256:`-style prefix hard-codes one algorithm into the wire contract and is non-conforming here.\n\nThis definition constrains the *encoding only*. What the digest is computed over is stated by each referencing field, because it differs legitimately: a digest over a JSON document is taken over its RFC 8785 (JCS) canonicalization, while a digest over an opaque artifact is taken over its bytes. A field whose input is a JSON document and which does not name a canonicalization is not reproducible.\n\nRestricted to the two multibase headers W3C Controlled Identifiers 1.0 §2.4 normatively requires — `z` (base58btc) and `u` (base64url-no-pad). CID permits others but states that \"interoperability is not guaranteed between implementations using such values\", and a registry whose purpose is interoperability should not mint digests a conforming verifier may be unable to read. The alphabets are enforced rather than assumed: base58btc excludes 0, O, I and l, and an earlier permissive pattern let three published examples carry digests that were not valid base58 at all. base58btc is RECOMMENDED, for consistency with `did:key` and `did:webvh`.",
|
|
@@ -778,19 +804,23 @@ export const RESPONSE_PAYLOAD_SCHEMA = {
|
|
|
778
804
|
},
|
|
779
805
|
"StorageAuth": {
|
|
780
806
|
"title": "StorageAuth",
|
|
781
|
-
"description": "How the community authenticates to a config's backend. Absent on a `local` config, which needs none.\n\n`vta-account` (RECOMMENDED): an external account in the community's VTA. The VTA holds the long-lived authority; the community holds nothing that outlives a credential lifetime, and asks for credentials scoped to one room's prefix for at most 15 minutes, every issuance audited at the VTA. Required for a `walrus` config other than a `sealed` one, since the VTA's `sui-signer` account signs its storage transactions.\n\n`ambient`: the cloud identity of the machine the community runs on (an instance role, workload identity), downscoped to one room's prefix by the community itself. Not audited or rate-limited by the VTA, and usable by anything on that machine that reaches the metadata endpoint. Not valid for `walrus`.\n\n`sealed` (discouraged): a long-lived credential stored by the community, set with vtc/storage/credentials/set. Protects against every administrator through every surface the community offers; does not protect against whoever operates the machine.",
|
|
807
|
+
"description": "How the community authenticates to a config's backend. Absent on a `local` config, which needs none.\n\n`vta-account` (RECOMMENDED): an external account in the community's VTA, named by the context that owns it and its identifier there. The VTA holds the long-lived authority; the community holds nothing that outlives a credential lifetime, and asks for credentials scoped to one room's prefix for at most 15 minutes, every issuance audited at the VTA. Required for a `walrus` config other than a `sealed` one, since the VTA's `sui-signer` account signs its storage transactions.\n\n`ambient`: the cloud identity of the machine the community runs on (an instance role, workload identity), downscoped to one room's prefix by the community itself. Not audited or rate-limited by the VTA, and usable by anything on that machine that reaches the metadata endpoint. Not valid for `walrus`.\n\n`sealed` (discouraged): a long-lived credential stored by the community, set with vtc/storage/credentials/set. Protects against every administrator through every surface the community offers; does not protect against whoever operates the machine.",
|
|
782
808
|
"oneOf": [
|
|
783
809
|
{
|
|
784
810
|
"type": "object",
|
|
785
811
|
"additionalProperties": false,
|
|
786
812
|
"required": [
|
|
787
813
|
"mode",
|
|
814
|
+
"context",
|
|
788
815
|
"account"
|
|
789
816
|
],
|
|
790
817
|
"properties": {
|
|
791
818
|
"mode": {
|
|
792
819
|
"const": "vta-account"
|
|
793
820
|
},
|
|
821
|
+
"context": {
|
|
822
|
+
"$ref": "#/$defs/ExternalAccountContextId"
|
|
823
|
+
},
|
|
794
824
|
"account": {
|
|
795
825
|
"$ref": "#/$defs/ExternalAccountId"
|
|
796
826
|
}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"payload.js","sourceRoot":"","sources":["../../../../../../src/vtc/storage/configs/get/0.1/payload.ts"],"names":[],"mappings":"AAAA;;;GAGG;AA0BH,2BAA2B;AAC3B,MAAM,CAAC,MAAM,QAAQ,GAAG,yDAAkE,CAAC;AAK3F,qEAAqE;AACrE,MAAM,CAAC,MAAM,iBAAiB,GAAG,kEAA2E,CAAC;AAK7G;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,SAAS,EAAE,8CAA8C;IACzD,KAAK,EAAE,yDAAyD;IAChE,OAAO,EAAE,uCAAuC;IAChD,aAAa,EAAE,6FAA6F;IAC5G,MAAM,EAAE,QAAQ;IAChB,sBAAsB,EAAE,KAAK;IAC7B,UAAU,EAAE;QACV,UAAU;KACX;IACD,YAAY,EAAE;QACZ,UAAU,EAAE;YACV,MAAM,EAAE,yBAAyB;SAClC;QACD,KAAK,EAAE;YACL,MAAM,EAAE,aAAa;SACtB;KACF;IACD,OAAO,EAAE;QACP,UAAU,EAAE;YACV,SAAS,EAAE,UAAU;YACrB,OAAO,EAAE,gDAAgD;YACzD,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,QAAQ;gBACR,OAAO;gBACP,eAAe;gBACf,wBAAwB;aACzB;YACD,YAAY,EAAE;gBACZ,QAAQ,EAAE;oBACR,MAAM,EAAE,uBAAuB;iBAChC;gBACD,OAAO,EAAE;oBACP,MAAM,EAAE,4BAA4B;iBACrC;gBACD,eAAe,EAAE;oBACf,MAAM,EAAE,OAAO;oBACf,UAAU,EAAE,GAAG;oBACf,OAAO,EAAE;wBACP,MAAM,EAAE,QAAQ;wBAChB,WAAW,EAAE,CAAC;wBACd,WAAW,EAAE,GAAG;wBAChB,aAAa,EAAE,gDAAgD;qBAChE;iBACF;gBACD,wBAAwB,EAAE;oBACxB,MAAM,EAAE,SAAS;iBAClB;gBACD,KAAK,EAAE;oBACL,MAAM,EAAE,aAAa;iBACtB;aACF;SACF;QACD,KAAK,EAAE;YACL,OAAO,EAAE,KAAK;YACd,aAAa,EAAE,uKAAuK;YACtL,MAAM,EAAE,QAAQ;YAChB,eAAe,EAAE,CAAC;YAClB,sBAAsB,EAAE,IAAI;YAC5B,eAAe,EAAE;gBACf,SAAS,EAAE,mCAAmC;aAC/C;SACF;QACD,oBAAoB,EAAE;YACpB,OAAO,EAAE,oBAAoB;YAC7B,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,OAAO;gBACP,OAAO;gBACP,OAAO;gBACP,oBAAoB;gBACpB,YAAY;gBACZ,QAAQ;aACT;YACD,aAAa,EAAE,0GAA0G;YACzH,YAAY,EAAE;gBACZ,OAAO,EAAE;oBACP,MAAM,EAAE,SAAS;oBACjB,SAAS,EAAE,CAAC;oBACZ,aAAa,EAAE,gCAAgC;iBAChD;gBACD,OAAO,EAAE;oBACP,MAAM,EAAE,SAAS;oBACjB,SAAS,EAAE,CAAC;oBACZ,aAAa,EAAE,8FAA8F;iBAC9G;gBACD,OAAO,EAAE;oBACP,MAAM,EAAE,SAAS;oBACjB,SAAS,EAAE,CAAC;oBACZ,aAAa,EAAE,gLAAgL;iBAChM;gBACD,oBAAoB,EAAE;oBACpB,MAAM,EAAE,SAAS;oBACjB,SAAS,EAAE,CAAC;oBACZ,aAAa,EAAE,qEAAqE;iBACrF;gBACD,YAAY,EAAE;oBACZ,MAAM,EAAE,yBAAyB;iBAClC;gBACD,QAAQ,EAAE;oBACR,MAAM,EAAE,uBAAuB;iBAChC;gBACD,QAAQ,EAAE;oBACR,MAAM,EAAE,QAAQ;oBAChB,sBAAsB,EAAE,KAAK;oBAC7B,aAAa,EAAE,+BAA+B;oBAC9C,YAAY,EAAE;wBACZ,eAAe,EAAE;4BACf,MAAM,EAAE,QAAQ;4BAChB,SAAS,EAAE,kBAAkB;4BAC7B,aAAa,EAAE,4EAA4E;yBAC5F;wBACD,oBAAoB,EAAE;4BACpB,MAAM,EAAE,QAAQ;4BAChB,QAAQ,EAAE,WAAW;yBACtB;qBACF;iBACF;aACF;SACF;QACD,eAAe,EAAE;YACf,OAAO,EAAE,eAAe;YACxB,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,aAAa,EAAE,mIAAmI;YAClJ,YAAY,EAAE;gBACZ,aAAa,EAAE;oBACb,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,WAAW;iBACtB;gBACD,aAAa,EAAE;oBACb,MAAM,EAAE,SAAS;iBAClB;gBACD,WAAW,EAAE;oBACX,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,WAAW;oBACrB,aAAa,EAAE,iCAAiC;iBACjD;gBACD,WAAW,EAAE;oBACX,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,WAAW;oBACrB,aAAa,EAAE,iCAAiC;iBACjD;gBACD,cAAc,EAAE;oBACd,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,WAAW;oBACrB,aAAa,EAAE,oFAAoF;iBACpG;aACF;SACF;QACD,iBAAiB,EAAE;YACjB,OAAO,EAAE,iBAAiB;YAC1B,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,QAAQ;aACT;YACD,aAAa,EAAE,6TAA6T;YAC5U,YAAY,EAAE;gBACZ,QAAQ,EAAE;oBACR,MAAM,EAAE,QAAQ;oBAChB,MAAM,EAAE;wBACN,aAAa;wBACb,SAAS;wBACT,QAAQ;wBACR,UAAU;wBACV,MAAM;qBACP;iBACF;gBACD,SAAS,EAAE;oBACT,MAAM,EAAE,2BAA2B;oBACnC,aAAa,EAAE,6BAA6B;iBAC7C;gBACD,aAAa,EAAE;oBACb,MAAM,EAAE,yBAAyB;oBACjC,aAAa,EAAE,2PAA2P;iBAC3Q;gBACD,OAAO,EAAE;oBACP,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,WAAW;oBACrB,aAAa,EAAE,iEAAiE;iBACjF;gBACD,yBAAyB,EAAE;oBACzB,MAAM,EAAE,SAAS;oBACjB,SAAS,EAAE,CAAC;oBACZ,aAAa,EAAE,6GAA6G;iBAC7H;aACF;SACF;QACD,mBAAmB,EAAE;YACnB,OAAO,EAAE,mBAAmB;YAC5B,MAAM,EAAE,QAAQ;YAChB,WAAW,EAAE,CAAC;YACd,WAAW,EAAE,EAAE;YACf,SAAS,EAAE,wCAAwC;YACnD,aAAa,EAAE,gNAAgN;SAChO;QACD,iBAAiB,EAAE;YACjB,OAAO,EAAE,iBAAiB;YAC1B,aAAa,EAAE,gnDAAgnD;YAC/nD,MAAM,EAAE,QAAQ;YAChB,WAAW,EAAE,EAAE;YACf,SAAS,EAAE,4CAA4C;YACvD,UAAU,EAAE;gBACV,iDAAiD;aAClD;SACF;QACD,eAAe,EAAE;YACf,OAAO,EAAE,eAAe;YACxB,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,IAAI;gBACJ,OAAO;gBACP,UAAU;gBACV,OAAO;gBACP,WAAW;gBACX,WAAW;aACZ;YACD,aAAa,EAAE,kEAAkE;YACjF,YAAY,EAAE;gBACZ,IAAI,EAAE;oBACJ,MAAM,EAAE,yBAAyB;iBAClC;gBACD,OAAO,EAAE;oBACP,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,WAAW,EAAE,GAAG;oBAChB,aAAa,EAAE,qJAAqJ;iBACrK;gBACD,UAAU,EAAE;oBACV,MAAM,EAAE,yBAAyB;iBAClC;gBACD,MAAM,EAAE;oBACN,MAAM,EAAE,qBAAqB;iBAC9B;gBACD,eAAe,EAAE;oBACf,MAAM,EAAE,SAAS;oBACjB,SAAS,EAAE,CAAC;oBACZ,aAAa,EAAE,0NAA0N;iBAC1O;gBACD,OAAO,EAAE;oBACP,MAAM,EAAE,qBAAqB;iBAC9B;gBACD,WAAW,EAAE;oBACX,MAAM,EAAE,SAAS;oBACjB,aAAa,EAAE,0GAA0G;iBAC1H;gBACD,WAAW,EAAE;oBACX,MAAM,EAAE,QAAQ;oBAChB,SAAS,EAAE,OAAO;oBAClB,WAAW,EAAE,IAAI;iBAClB;gBACD,WAAW,EAAE;oBACX,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,WAAW;iBACtB;gBACD,WAAW,EAAE;oBACX,MAAM,EAAE,QAAQ;oBAChB,SAAS,EAAE,OAAO;oBAClB,WAAW,EAAE,IAAI;iBAClB;gBACD,WAAW,EAAE;oBACX,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,WAAW;iBACtB;aACF;SACF;QACD,aAAa,EAAE;YACb,OAAO,EAAE,aAAa;YACtB,MAAM,EAAE,QAAQ;YAChB,MAAM,EAAE;gBACN,QAAQ;gBACR,UAAU;gBACV,SAAS;aACV;YACD,aAAa,EAAE,kVAAkV;SAClW;QACD,aAAa,EAAE;YACb,OAAO,EAAE,aAAa;YACtB,aAAa,EAAE,qjCAAqjC;YACpkC,OAAO,EAAE;gBACP;oBACE,MAAM,EAAE,QAAQ;oBAChB,sBAAsB,EAAE,KAAK;oBAC7B,UAAU,EAAE;wBACV,MAAM;wBACN,SAAS;qBACV;oBACD,YAAY,EAAE;wBACZ,MAAM,EAAE;4BACN,OAAO,EAAE,aAAa;yBACvB;wBACD,SAAS,EAAE;4BACT,MAAM,EAAE,2BAA2B;yBACpC;qBACF;iBACF;gBACD;oBACE,MAAM,EAAE,QAAQ;oBAChB,sBAAsB,EAAE,KAAK;oBAC7B,UAAU,EAAE;wBACV,MAAM;qBACP;oBACD,YAAY,EAAE;wBACZ,MAAM,EAAE;4BACN,OAAO,EAAE,SAAS;yBACnB;qBACF;iBACF;gBACD;oBACE,MAAM,EAAE,QAAQ;oBAChB,sBAAsB,EAAE,KAAK;oBAC7B,UAAU,EAAE;wBACV,MAAM;qBACP;oBACD,YAAY,EAAE;wBACZ,MAAM,EAAE;4BACN,OAAO,EAAE,QAAQ;yBAClB;qBACF;iBACF;aACF;SACF;QACD,iBAAiB,EAAE;YACjB,OAAO,EAAE,iBAAiB;YAC1B,aAAa,EAAE,sHAAsH;YACrI,OAAO,EAAE;gBACP;oBACE,MAAM,EAAE,uBAAuB;iBAChC;gBACD;oBACE,MAAM,EAAE,oBAAoB;iBAC7B;gBACD;oBACE,MAAM,EAAE,qBAAqB;iBAC9B;gBACD;oBACE,MAAM,EAAE,wBAAwB;iBACjC;aACF;SACF;QACD,gBAAgB,EAAE;YAChB,OAAO,EAAE,gBAAgB;YACzB,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,MAAM;gBACN,UAAU;gBACV,eAAe;gBACf,QAAQ;gBACR,oBAAoB;aACrB;YACD,YAAY,EAAE;gBACZ,MAAM,EAAE;oBACN,OAAO,EAAE,QAAQ;iBAClB;gBACD,UAAU,EAAE;oBACV,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,KAAK;oBACf,WAAW,EAAE,IAAI;oBACjB,SAAS,EAAE,WAAW;oBACtB,aAAa,EAAE,iNAAiN;iBACjO;gBACD,eAAe,EAAE;oBACf,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,KAAK;oBACf,WAAW,EAAE,IAAI;oBACjB,SAAS,EAAE,WAAW;oBACtB,aAAa,EAAE,oDAAoD;iBACpE;gBACD,QAAQ,EAAE;oBACR,MAAM,EAAE,SAAS;oBACjB,SAAS,EAAE,CAAC;oBACZ,SAAS,EAAE,EAAE;oBACb,aAAa,EAAE,qIAAqI;iBACrJ;gBACD,oBAAoB,EAAE;oBACpB,MAAM,EAAE,SAAS;oBACjB,SAAS,EAAE,CAAC;oBACZ,SAAS,EAAE,EAAE;oBACb,aAAa,EAAE,qKAAqK;iBACrL;aACF;SACF;QACD,aAAa,EAAE;YACb,OAAO,EAAE,aAAa;YACtB,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,MAAM;gBACN,QAAQ;aACT;YACD,YAAY,EAAE;gBACZ,MAAM,EAAE;oBACN,OAAO,EAAE,KAAK;iBACf;gBACD,QAAQ,EAAE;oBACR,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,WAAW,EAAE,GAAG;oBAChB,SAAS,EAAE,sCAAsC;oBACjD,aAAa,EAAE,oKAAoK;iBACpL;gBACD,QAAQ,EAAE;oBACR,MAAM,EAAE,sBAAsB;iBAC/B;aACF;SACF;QACD,cAAc,EAAE;YACd,OAAO,EAAE,cAAc;YACvB,MAAM,EAAE,QAAQ;YAChB,WAAW,EAAE,CAAC;YACd,WAAW,EAAE,GAAG;YAChB,SAAS,EAAE,0BAA0B;YACrC,aAAa,EAAE,4MAA4M;SAC5N;QACD,YAAY,EAAE;YACZ,OAAO,EAAE,YAAY;YACrB,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,MAAM;gBACN,QAAQ;gBACR,QAAQ;aACT;YACD,YAAY,EAAE;gBACZ,MAAM,EAAE;oBACN,OAAO,EAAE,IAAI;iBACd;gBACD,UAAU,EAAE;oBACV,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,KAAK;oBACf,WAAW,EAAE,IAAI;oBACjB,SAAS,EAAE,WAAW;oBACtB,aAAa,EAAE,+GAA+G;iBAC/H;gBACD,QAAQ,EAAE;oBACR,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,WAAW,EAAE,EAAE;oBACf,SAAS,EAAE,cAAc;oBACzB,aAAa,EAAE,0EAA0E;iBAC1F;gBACD,QAAQ,EAAE;oBACR,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,WAAW,EAAE,EAAE;oBACf,SAAS,EAAE,oCAAoC;oBAC/C,aAAa,EAAE,wJAAwJ;iBACxK;gBACD,QAAQ,EAAE;oBACR,MAAM,EAAE,sBAAsB;iBAC/B;gBACD,WAAW,EAAE;oBACX,MAAM,EAAE,SAAS;oBACjB,aAAa,EAAE,sHAAsH;iBACtI;aACF;SACF;QACD,eAAe,EAAE;YACf,OAAO,EAAE,eAAe;YACxB,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,MAAM;gBACN,MAAM;aACP;YACD,YAAY,EAAE;gBACZ,MAAM,EAAE;oBACN,OAAO,EAAE,OAAO;iBACjB;gBACD,MAAM,EAAE;oBACN,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,WAAW,EAAE,IAAI;oBACjB,SAAS,EAAE,IAAI;oBACf,aAAa,EAAE,oKAAoK;iBACpL;aACF;SACF;QACD,iBAAiB,EAAE;YACjB,OAAO,EAAE,iBAAiB;YAC1B,MAAM,EAAE,QAAQ;YAChB,WAAW,EAAE,CAAC;YACd,WAAW,EAAE,EAAE;YACf,SAAS,EAAE,wCAAwC;YACnD,aAAa,EAAE,8TAA8T;SAC9U;KACF;CACO,CAAC;AAEX,mEAAmE;AACnE,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,SAAS,EAAE,8CAA8C;IACzD,MAAM,EAAE,kBAAkB;IAC1B,OAAO,EAAE;QACP,UAAU,EAAE;YACV,SAAS,EAAE,UAAU;YACrB,OAAO,EAAE,gDAAgD;YACzD,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,QAAQ;gBACR,OAAO;gBACP,eAAe;gBACf,wBAAwB;aACzB;YACD,YAAY,EAAE;gBACZ,QAAQ,EAAE;oBACR,MAAM,EAAE,uBAAuB;iBAChC;gBACD,OAAO,EAAE;oBACP,MAAM,EAAE,4BAA4B;iBACrC;gBACD,eAAe,EAAE;oBACf,MAAM,EAAE,OAAO;oBACf,UAAU,EAAE,GAAG;oBACf,OAAO,EAAE;wBACP,MAAM,EAAE,QAAQ;wBAChB,WAAW,EAAE,CAAC;wBACd,WAAW,EAAE,GAAG;wBAChB,aAAa,EAAE,gDAAgD;qBAChE;iBACF;gBACD,wBAAwB,EAAE;oBACxB,MAAM,EAAE,SAAS;iBAClB;gBACD,KAAK,EAAE;oBACL,MAAM,EAAE,aAAa;iBACtB;aACF;SACF;QACD,KAAK,EAAE;YACL,OAAO,EAAE,KAAK;YACd,aAAa,EAAE,uKAAuK;YACtL,MAAM,EAAE,QAAQ;YAChB,eAAe,EAAE,CAAC;YAClB,sBAAsB,EAAE,IAAI;YAC5B,eAAe,EAAE;gBACf,SAAS,EAAE,mCAAmC;aAC/C;SACF;QACD,oBAAoB,EAAE;YACpB,OAAO,EAAE,oBAAoB;YAC7B,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,OAAO;gBACP,OAAO;gBACP,OAAO;gBACP,oBAAoB;gBACpB,YAAY;gBACZ,QAAQ;aACT;YACD,aAAa,EAAE,0GAA0G;YACzH,YAAY,EAAE;gBACZ,OAAO,EAAE;oBACP,MAAM,EAAE,SAAS;oBACjB,SAAS,EAAE,CAAC;oBACZ,aAAa,EAAE,gCAAgC;iBAChD;gBACD,OAAO,EAAE;oBACP,MAAM,EAAE,SAAS;oBACjB,SAAS,EAAE,CAAC;oBACZ,aAAa,EAAE,8FAA8F;iBAC9G;gBACD,OAAO,EAAE;oBACP,MAAM,EAAE,SAAS;oBACjB,SAAS,EAAE,CAAC;oBACZ,aAAa,EAAE,gLAAgL;iBAChM;gBACD,oBAAoB,EAAE;oBACpB,MAAM,EAAE,SAAS;oBACjB,SAAS,EAAE,CAAC;oBACZ,aAAa,EAAE,qEAAqE;iBACrF;gBACD,YAAY,EAAE;oBACZ,MAAM,EAAE,yBAAyB;iBAClC;gBACD,QAAQ,EAAE;oBACR,MAAM,EAAE,uBAAuB;iBAChC;gBACD,QAAQ,EAAE;oBACR,MAAM,EAAE,QAAQ;oBAChB,sBAAsB,EAAE,KAAK;oBAC7B,aAAa,EAAE,+BAA+B;oBAC9C,YAAY,EAAE;wBACZ,eAAe,EAAE;4BACf,MAAM,EAAE,QAAQ;4BAChB,SAAS,EAAE,kBAAkB;4BAC7B,aAAa,EAAE,4EAA4E;yBAC5F;wBACD,oBAAoB,EAAE;4BACpB,MAAM,EAAE,QAAQ;4BAChB,QAAQ,EAAE,WAAW;yBACtB;qBACF;iBACF;aACF;SACF;QACD,eAAe,EAAE;YACf,OAAO,EAAE,eAAe;YACxB,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,aAAa,EAAE,mIAAmI;YAClJ,YAAY,EAAE;gBACZ,aAAa,EAAE;oBACb,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,WAAW;iBACtB;gBACD,aAAa,EAAE;oBACb,MAAM,EAAE,SAAS;iBAClB;gBACD,WAAW,EAAE;oBACX,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,WAAW;oBACrB,aAAa,EAAE,iCAAiC;iBACjD;gBACD,WAAW,EAAE;oBACX,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,WAAW;oBACrB,aAAa,EAAE,iCAAiC;iBACjD;gBACD,cAAc,EAAE;oBACd,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,WAAW;oBACrB,aAAa,EAAE,oFAAoF;iBACpG;aACF;SACF;QACD,iBAAiB,EAAE;YACjB,OAAO,EAAE,iBAAiB;YAC1B,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,QAAQ;aACT;YACD,aAAa,EAAE,6TAA6T;YAC5U,YAAY,EAAE;gBACZ,QAAQ,EAAE;oBACR,MAAM,EAAE,QAAQ;oBAChB,MAAM,EAAE;wBACN,aAAa;wBACb,SAAS;wBACT,QAAQ;wBACR,UAAU;wBACV,MAAM;qBACP;iBACF;gBACD,SAAS,EAAE;oBACT,MAAM,EAAE,2BAA2B;oBACnC,aAAa,EAAE,6BAA6B;iBAC7C;gBACD,aAAa,EAAE;oBACb,MAAM,EAAE,yBAAyB;oBACjC,aAAa,EAAE,2PAA2P;iBAC3Q;gBACD,OAAO,EAAE;oBACP,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,WAAW;oBACrB,aAAa,EAAE,iEAAiE;iBACjF;gBACD,yBAAyB,EAAE;oBACzB,MAAM,EAAE,SAAS;oBACjB,SAAS,EAAE,CAAC;oBACZ,aAAa,EAAE,6GAA6G;iBAC7H;aACF;SACF;QACD,mBAAmB,EAAE;YACnB,OAAO,EAAE,mBAAmB;YAC5B,MAAM,EAAE,QAAQ;YAChB,WAAW,EAAE,CAAC;YACd,WAAW,EAAE,EAAE;YACf,SAAS,EAAE,wCAAwC;YACnD,aAAa,EAAE,gNAAgN;SAChO;QACD,iBAAiB,EAAE;YACjB,OAAO,EAAE,iBAAiB;YAC1B,aAAa,EAAE,gnDAAgnD;YAC/nD,MAAM,EAAE,QAAQ;YAChB,WAAW,EAAE,EAAE;YACf,SAAS,EAAE,4CAA4C;YACvD,UAAU,EAAE;gBACV,iDAAiD;aAClD;SACF;QACD,eAAe,EAAE;YACf,OAAO,EAAE,eAAe;YACxB,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,IAAI;gBACJ,OAAO;gBACP,UAAU;gBACV,OAAO;gBACP,WAAW;gBACX,WAAW;aACZ;YACD,aAAa,EAAE,kEAAkE;YACjF,YAAY,EAAE;gBACZ,IAAI,EAAE;oBACJ,MAAM,EAAE,yBAAyB;iBAClC;gBACD,OAAO,EAAE;oBACP,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,WAAW,EAAE,GAAG;oBAChB,aAAa,EAAE,qJAAqJ;iBACrK;gBACD,UAAU,EAAE;oBACV,MAAM,EAAE,yBAAyB;iBAClC;gBACD,MAAM,EAAE;oBACN,MAAM,EAAE,qBAAqB;iBAC9B;gBACD,eAAe,EAAE;oBACf,MAAM,EAAE,SAAS;oBACjB,SAAS,EAAE,CAAC;oBACZ,aAAa,EAAE,0NAA0N;iBAC1O;gBACD,OAAO,EAAE;oBACP,MAAM,EAAE,qBAAqB;iBAC9B;gBACD,WAAW,EAAE;oBACX,MAAM,EAAE,SAAS;oBACjB,aAAa,EAAE,0GAA0G;iBAC1H;gBACD,WAAW,EAAE;oBACX,MAAM,EAAE,QAAQ;oBAChB,SAAS,EAAE,OAAO;oBAClB,WAAW,EAAE,IAAI;iBAClB;gBACD,WAAW,EAAE;oBACX,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,WAAW;iBACtB;gBACD,WAAW,EAAE;oBACX,MAAM,EAAE,QAAQ;oBAChB,SAAS,EAAE,OAAO;oBAClB,WAAW,EAAE,IAAI;iBAClB;gBACD,WAAW,EAAE;oBACX,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,WAAW;iBACtB;aACF;SACF;QACD,aAAa,EAAE;YACb,OAAO,EAAE,aAAa;YACtB,MAAM,EAAE,QAAQ;YAChB,MAAM,EAAE;gBACN,QAAQ;gBACR,UAAU;gBACV,SAAS;aACV;YACD,aAAa,EAAE,kVAAkV;SAClW;QACD,aAAa,EAAE;YACb,OAAO,EAAE,aAAa;YACtB,aAAa,EAAE,qjCAAqjC;YACpkC,OAAO,EAAE;gBACP;oBACE,MAAM,EAAE,QAAQ;oBAChB,sBAAsB,EAAE,KAAK;oBAC7B,UAAU,EAAE;wBACV,MAAM;wBACN,SAAS;qBACV;oBACD,YAAY,EAAE;wBACZ,MAAM,EAAE;4BACN,OAAO,EAAE,aAAa;yBACvB;wBACD,SAAS,EAAE;4BACT,MAAM,EAAE,2BAA2B;yBACpC;qBACF;iBACF;gBACD;oBACE,MAAM,EAAE,QAAQ;oBAChB,sBAAsB,EAAE,KAAK;oBAC7B,UAAU,EAAE;wBACV,MAAM;qBACP;oBACD,YAAY,EAAE;wBACZ,MAAM,EAAE;4BACN,OAAO,EAAE,SAAS;yBACnB;qBACF;iBACF;gBACD;oBACE,MAAM,EAAE,QAAQ;oBAChB,sBAAsB,EAAE,KAAK;oBAC7B,UAAU,EAAE;wBACV,MAAM;qBACP;oBACD,YAAY,EAAE;wBACZ,MAAM,EAAE;4BACN,OAAO,EAAE,QAAQ;yBAClB;qBACF;iBACF;aACF;SACF;QACD,iBAAiB,EAAE;YACjB,OAAO,EAAE,iBAAiB;YAC1B,aAAa,EAAE,sHAAsH;YACrI,OAAO,EAAE;gBACP;oBACE,MAAM,EAAE,uBAAuB;iBAChC;gBACD;oBACE,MAAM,EAAE,oBAAoB;iBAC7B;gBACD;oBACE,MAAM,EAAE,qBAAqB;iBAC9B;gBACD;oBACE,MAAM,EAAE,wBAAwB;iBACjC;aACF;SACF;QACD,gBAAgB,EAAE;YAChB,OAAO,EAAE,gBAAgB;YACzB,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,MAAM;gBACN,UAAU;gBACV,eAAe;gBACf,QAAQ;gBACR,oBAAoB;aACrB;YACD,YAAY,EAAE;gBACZ,MAAM,EAAE;oBACN,OAAO,EAAE,QAAQ;iBAClB;gBACD,UAAU,EAAE;oBACV,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,KAAK;oBACf,WAAW,EAAE,IAAI;oBACjB,SAAS,EAAE,WAAW;oBACtB,aAAa,EAAE,iNAAiN;iBACjO;gBACD,eAAe,EAAE;oBACf,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,KAAK;oBACf,WAAW,EAAE,IAAI;oBACjB,SAAS,EAAE,WAAW;oBACtB,aAAa,EAAE,oDAAoD;iBACpE;gBACD,QAAQ,EAAE;oBACR,MAAM,EAAE,SAAS;oBACjB,SAAS,EAAE,CAAC;oBACZ,SAAS,EAAE,EAAE;oBACb,aAAa,EAAE,qIAAqI;iBACrJ;gBACD,oBAAoB,EAAE;oBACpB,MAAM,EAAE,SAAS;oBACjB,SAAS,EAAE,CAAC;oBACZ,SAAS,EAAE,EAAE;oBACb,aAAa,EAAE,qKAAqK;iBACrL;aACF;SACF;QACD,aAAa,EAAE;YACb,OAAO,EAAE,aAAa;YACtB,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,MAAM;gBACN,QAAQ;aACT;YACD,YAAY,EAAE;gBACZ,MAAM,EAAE;oBACN,OAAO,EAAE,KAAK;iBACf;gBACD,QAAQ,EAAE;oBACR,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,WAAW,EAAE,GAAG;oBAChB,SAAS,EAAE,sCAAsC;oBACjD,aAAa,EAAE,oKAAoK;iBACpL;gBACD,QAAQ,EAAE;oBACR,MAAM,EAAE,sBAAsB;iBAC/B;aACF;SACF;QACD,cAAc,EAAE;YACd,OAAO,EAAE,cAAc;YACvB,MAAM,EAAE,QAAQ;YAChB,WAAW,EAAE,CAAC;YACd,WAAW,EAAE,GAAG;YAChB,SAAS,EAAE,0BAA0B;YACrC,aAAa,EAAE,4MAA4M;SAC5N;QACD,YAAY,EAAE;YACZ,OAAO,EAAE,YAAY;YACrB,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,MAAM;gBACN,QAAQ;gBACR,QAAQ;aACT;YACD,YAAY,EAAE;gBACZ,MAAM,EAAE;oBACN,OAAO,EAAE,IAAI;iBACd;gBACD,UAAU,EAAE;oBACV,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,KAAK;oBACf,WAAW,EAAE,IAAI;oBACjB,SAAS,EAAE,WAAW;oBACtB,aAAa,EAAE,+GAA+G;iBAC/H;gBACD,QAAQ,EAAE;oBACR,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,WAAW,EAAE,EAAE;oBACf,SAAS,EAAE,cAAc;oBACzB,aAAa,EAAE,0EAA0E;iBAC1F;gBACD,QAAQ,EAAE;oBACR,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,WAAW,EAAE,EAAE;oBACf,SAAS,EAAE,oCAAoC;oBAC/C,aAAa,EAAE,wJAAwJ;iBACxK;gBACD,QAAQ,EAAE;oBACR,MAAM,EAAE,sBAAsB;iBAC/B;gBACD,WAAW,EAAE;oBACX,MAAM,EAAE,SAAS;oBACjB,aAAa,EAAE,sHAAsH;iBACtI;aACF;SACF;QACD,eAAe,EAAE;YACf,OAAO,EAAE,eAAe;YACxB,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,MAAM;gBACN,MAAM;aACP;YACD,YAAY,EAAE;gBACZ,MAAM,EAAE;oBACN,OAAO,EAAE,OAAO;iBACjB;gBACD,MAAM,EAAE;oBACN,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,WAAW,EAAE,IAAI;oBACjB,SAAS,EAAE,IAAI;oBACf,aAAa,EAAE,oKAAoK;iBACpL;aACF;SACF;QACD,iBAAiB,EAAE;YACjB,OAAO,EAAE,iBAAiB;YAC1B,MAAM,EAAE,QAAQ;YAChB,WAAW,EAAE,CAAC;YACd,WAAW,EAAE,EAAE;YACf,SAAS,EAAE,wCAAwC;YACnD,aAAa,EAAE,8TAA8T;SAC9U;KACF;CACO,CAAC;AAEX;;;;;GAKG;AACH,MAAM,CAAC,MAAM,IAAI,GAAG;IAClB,OAAO,EAAE,QAAQ;IACjB,QAAQ,EAAE,KAAK;IACf,eAAe,EAAE,KAAK;IACtB,mBAAmB,EAAE,IAAI;IACzB,kBAAkB,EAAE,KAAK;IACzB,aAAa,EAAE,cAAc;CACrB,CAAC;AAEX;;;;GAIG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,OAAO,EAAE,iBAAiB;IAC1B,QAAQ,EAAE,KAAK;IACf,eAAe,EAAE,KAAK;IACtB,mBAAmB,EAAE,IAAI;IACzB,kBAAkB,EAAE,KAAK;IACzB,aAAa,EAAE,uBAAuB;CAC9B,CAAC"}
|
|
1
|
+
{"version":3,"file":"payload.js","sourceRoot":"","sources":["../../../../../../src/vtc/storage/configs/get/0.1/payload.ts"],"names":[],"mappings":"AAAA;;;GAGG;AA0BH,2BAA2B;AAC3B,MAAM,CAAC,MAAM,QAAQ,GAAG,yDAAkE,CAAC;AAK3F,qEAAqE;AACrE,MAAM,CAAC,MAAM,iBAAiB,GAAG,kEAA2E,CAAC;AAK7G;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,SAAS,EAAE,8CAA8C;IACzD,KAAK,EAAE,yDAAyD;IAChE,OAAO,EAAE,uCAAuC;IAChD,aAAa,EAAE,6FAA6F;IAC5G,MAAM,EAAE,QAAQ;IAChB,sBAAsB,EAAE,KAAK;IAC7B,UAAU,EAAE;QACV,UAAU;KACX;IACD,YAAY,EAAE;QACZ,UAAU,EAAE;YACV,MAAM,EAAE,yBAAyB;SAClC;QACD,KAAK,EAAE;YACL,MAAM,EAAE,aAAa;SACtB;KACF;IACD,OAAO,EAAE;QACP,UAAU,EAAE;YACV,SAAS,EAAE,UAAU;YACrB,OAAO,EAAE,gDAAgD;YACzD,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,QAAQ;gBACR,OAAO;gBACP,eAAe;gBACf,wBAAwB;aACzB;YACD,YAAY,EAAE;gBACZ,QAAQ,EAAE;oBACR,MAAM,EAAE,uBAAuB;iBAChC;gBACD,OAAO,EAAE;oBACP,MAAM,EAAE,4BAA4B;iBACrC;gBACD,eAAe,EAAE;oBACf,MAAM,EAAE,OAAO;oBACf,UAAU,EAAE,GAAG;oBACf,OAAO,EAAE;wBACP,MAAM,EAAE,QAAQ;wBAChB,WAAW,EAAE,CAAC;wBACd,WAAW,EAAE,GAAG;wBAChB,aAAa,EAAE,gDAAgD;qBAChE;iBACF;gBACD,wBAAwB,EAAE;oBACxB,MAAM,EAAE,SAAS;iBAClB;gBACD,KAAK,EAAE;oBACL,MAAM,EAAE,aAAa;iBACtB;aACF;SACF;QACD,KAAK,EAAE;YACL,OAAO,EAAE,KAAK;YACd,aAAa,EAAE,uKAAuK;YACtL,MAAM,EAAE,QAAQ;YAChB,eAAe,EAAE,CAAC;YAClB,sBAAsB,EAAE,IAAI;YAC5B,eAAe,EAAE;gBACf,SAAS,EAAE,mCAAmC;aAC/C;SACF;QACD,oBAAoB,EAAE;YACpB,OAAO,EAAE,oBAAoB;YAC7B,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,OAAO;gBACP,OAAO;gBACP,OAAO;gBACP,oBAAoB;gBACpB,YAAY;gBACZ,QAAQ;aACT;YACD,aAAa,EAAE,0GAA0G;YACzH,YAAY,EAAE;gBACZ,OAAO,EAAE;oBACP,MAAM,EAAE,SAAS;oBACjB,SAAS,EAAE,CAAC;oBACZ,aAAa,EAAE,gCAAgC;iBAChD;gBACD,OAAO,EAAE;oBACP,MAAM,EAAE,SAAS;oBACjB,SAAS,EAAE,CAAC;oBACZ,aAAa,EAAE,8FAA8F;iBAC9G;gBACD,OAAO,EAAE;oBACP,MAAM,EAAE,SAAS;oBACjB,SAAS,EAAE,CAAC;oBACZ,aAAa,EAAE,gLAAgL;iBAChM;gBACD,oBAAoB,EAAE;oBACpB,MAAM,EAAE,SAAS;oBACjB,SAAS,EAAE,CAAC;oBACZ,aAAa,EAAE,qEAAqE;iBACrF;gBACD,YAAY,EAAE;oBACZ,MAAM,EAAE,yBAAyB;iBAClC;gBACD,QAAQ,EAAE;oBACR,MAAM,EAAE,uBAAuB;iBAChC;gBACD,QAAQ,EAAE;oBACR,MAAM,EAAE,QAAQ;oBAChB,sBAAsB,EAAE,KAAK;oBAC7B,aAAa,EAAE,+BAA+B;oBAC9C,YAAY,EAAE;wBACZ,eAAe,EAAE;4BACf,MAAM,EAAE,QAAQ;4BAChB,SAAS,EAAE,kBAAkB;4BAC7B,aAAa,EAAE,4EAA4E;yBAC5F;wBACD,oBAAoB,EAAE;4BACpB,MAAM,EAAE,QAAQ;4BAChB,QAAQ,EAAE,WAAW;yBACtB;qBACF;iBACF;aACF;SACF;QACD,eAAe,EAAE;YACf,OAAO,EAAE,eAAe;YACxB,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,aAAa,EAAE,mIAAmI;YAClJ,YAAY,EAAE;gBACZ,aAAa,EAAE;oBACb,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,WAAW;iBACtB;gBACD,aAAa,EAAE;oBACb,MAAM,EAAE,SAAS;iBAClB;gBACD,WAAW,EAAE;oBACX,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,WAAW;oBACrB,aAAa,EAAE,iCAAiC;iBACjD;gBACD,WAAW,EAAE;oBACX,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,WAAW;oBACrB,aAAa,EAAE,iCAAiC;iBACjD;gBACD,cAAc,EAAE;oBACd,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,WAAW;oBACrB,aAAa,EAAE,oFAAoF;iBACpG;aACF;SACF;QACD,iBAAiB,EAAE;YACjB,OAAO,EAAE,iBAAiB;YAC1B,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,QAAQ;aACT;YACD,aAAa,EAAE,6TAA6T;YAC5U,YAAY,EAAE;gBACZ,QAAQ,EAAE;oBACR,MAAM,EAAE,QAAQ;oBAChB,MAAM,EAAE;wBACN,aAAa;wBACb,SAAS;wBACT,QAAQ;wBACR,UAAU;wBACV,MAAM;qBACP;iBACF;gBACD,SAAS,EAAE;oBACT,MAAM,EAAE,kCAAkC;oBAC1C,aAAa,EAAE,6BAA6B;iBAC7C;gBACD,SAAS,EAAE;oBACT,MAAM,EAAE,2BAA2B;oBACnC,aAAa,EAAE,6BAA6B;iBAC7C;gBACD,aAAa,EAAE;oBACb,MAAM,EAAE,yBAAyB;oBACjC,aAAa,EAAE,2PAA2P;iBAC3Q;gBACD,OAAO,EAAE;oBACP,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,WAAW;oBACrB,aAAa,EAAE,iEAAiE;iBACjF;gBACD,yBAAyB,EAAE;oBACzB,MAAM,EAAE,SAAS;oBACjB,SAAS,EAAE,CAAC;oBACZ,aAAa,EAAE,6GAA6G;iBAC7H;aACF;SACF;QACD,mBAAmB,EAAE;YACnB,OAAO,EAAE,mBAAmB;YAC5B,MAAM,EAAE,QAAQ;YAChB,WAAW,EAAE,CAAC;YACd,WAAW,EAAE,EAAE;YACf,SAAS,EAAE,wCAAwC;YACnD,aAAa,EAAE,gNAAgN;SAChO;QACD,0BAA0B,EAAE;YAC1B,OAAO,EAAE,0BAA0B;YACnC,MAAM,EAAE,QAAQ;YAChB,WAAW,EAAE,CAAC;YACd,WAAW,EAAE,GAAG;YAChB,aAAa,EAAE,8WAA8W;SAC9X;QACD,iBAAiB,EAAE;YACjB,OAAO,EAAE,iBAAiB;YAC1B,aAAa,EAAE,gnDAAgnD;YAC/nD,MAAM,EAAE,QAAQ;YAChB,WAAW,EAAE,EAAE;YACf,SAAS,EAAE,4CAA4C;YACvD,UAAU,EAAE;gBACV,iDAAiD;aAClD;SACF;QACD,eAAe,EAAE;YACf,OAAO,EAAE,eAAe;YACxB,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,IAAI;gBACJ,OAAO;gBACP,UAAU;gBACV,OAAO;gBACP,WAAW;gBACX,WAAW;aACZ;YACD,aAAa,EAAE,kEAAkE;YACjF,YAAY,EAAE;gBACZ,IAAI,EAAE;oBACJ,MAAM,EAAE,yBAAyB;iBAClC;gBACD,OAAO,EAAE;oBACP,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,WAAW,EAAE,GAAG;oBAChB,aAAa,EAAE,qJAAqJ;iBACrK;gBACD,UAAU,EAAE;oBACV,MAAM,EAAE,yBAAyB;iBAClC;gBACD,MAAM,EAAE;oBACN,MAAM,EAAE,qBAAqB;iBAC9B;gBACD,eAAe,EAAE;oBACf,MAAM,EAAE,SAAS;oBACjB,SAAS,EAAE,CAAC;oBACZ,aAAa,EAAE,0NAA0N;iBAC1O;gBACD,OAAO,EAAE;oBACP,MAAM,EAAE,qBAAqB;iBAC9B;gBACD,WAAW,EAAE;oBACX,MAAM,EAAE,SAAS;oBACjB,aAAa,EAAE,0GAA0G;iBAC1H;gBACD,WAAW,EAAE;oBACX,MAAM,EAAE,QAAQ;oBAChB,SAAS,EAAE,OAAO;oBAClB,WAAW,EAAE,IAAI;iBAClB;gBACD,WAAW,EAAE;oBACX,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,WAAW;iBACtB;gBACD,WAAW,EAAE;oBACX,MAAM,EAAE,QAAQ;oBAChB,SAAS,EAAE,OAAO;oBAClB,WAAW,EAAE,IAAI;iBAClB;gBACD,WAAW,EAAE;oBACX,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,WAAW;iBACtB;aACF;SACF;QACD,aAAa,EAAE;YACb,OAAO,EAAE,aAAa;YACtB,MAAM,EAAE,QAAQ;YAChB,MAAM,EAAE;gBACN,QAAQ;gBACR,UAAU;gBACV,SAAS;aACV;YACD,aAAa,EAAE,kVAAkV;SAClW;QACD,aAAa,EAAE;YACb,OAAO,EAAE,aAAa;YACtB,aAAa,EAAE,inCAAinC;YAChoC,OAAO,EAAE;gBACP;oBACE,MAAM,EAAE,QAAQ;oBAChB,sBAAsB,EAAE,KAAK;oBAC7B,UAAU,EAAE;wBACV,MAAM;wBACN,SAAS;wBACT,SAAS;qBACV;oBACD,YAAY,EAAE;wBACZ,MAAM,EAAE;4BACN,OAAO,EAAE,aAAa;yBACvB;wBACD,SAAS,EAAE;4BACT,MAAM,EAAE,kCAAkC;yBAC3C;wBACD,SAAS,EAAE;4BACT,MAAM,EAAE,2BAA2B;yBACpC;qBACF;iBACF;gBACD;oBACE,MAAM,EAAE,QAAQ;oBAChB,sBAAsB,EAAE,KAAK;oBAC7B,UAAU,EAAE;wBACV,MAAM;qBACP;oBACD,YAAY,EAAE;wBACZ,MAAM,EAAE;4BACN,OAAO,EAAE,SAAS;yBACnB;qBACF;iBACF;gBACD;oBACE,MAAM,EAAE,QAAQ;oBAChB,sBAAsB,EAAE,KAAK;oBAC7B,UAAU,EAAE;wBACV,MAAM;qBACP;oBACD,YAAY,EAAE;wBACZ,MAAM,EAAE;4BACN,OAAO,EAAE,QAAQ;yBAClB;qBACF;iBACF;aACF;SACF;QACD,iBAAiB,EAAE;YACjB,OAAO,EAAE,iBAAiB;YAC1B,aAAa,EAAE,sHAAsH;YACrI,OAAO,EAAE;gBACP;oBACE,MAAM,EAAE,uBAAuB;iBAChC;gBACD;oBACE,MAAM,EAAE,oBAAoB;iBAC7B;gBACD;oBACE,MAAM,EAAE,qBAAqB;iBAC9B;gBACD;oBACE,MAAM,EAAE,wBAAwB;iBACjC;aACF;SACF;QACD,gBAAgB,EAAE;YAChB,OAAO,EAAE,gBAAgB;YACzB,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,MAAM;gBACN,UAAU;gBACV,eAAe;gBACf,QAAQ;gBACR,oBAAoB;aACrB;YACD,YAAY,EAAE;gBACZ,MAAM,EAAE;oBACN,OAAO,EAAE,QAAQ;iBAClB;gBACD,UAAU,EAAE;oBACV,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,KAAK;oBACf,WAAW,EAAE,IAAI;oBACjB,SAAS,EAAE,WAAW;oBACtB,aAAa,EAAE,iNAAiN;iBACjO;gBACD,eAAe,EAAE;oBACf,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,KAAK;oBACf,WAAW,EAAE,IAAI;oBACjB,SAAS,EAAE,WAAW;oBACtB,aAAa,EAAE,oDAAoD;iBACpE;gBACD,QAAQ,EAAE;oBACR,MAAM,EAAE,SAAS;oBACjB,SAAS,EAAE,CAAC;oBACZ,SAAS,EAAE,EAAE;oBACb,aAAa,EAAE,qIAAqI;iBACrJ;gBACD,oBAAoB,EAAE;oBACpB,MAAM,EAAE,SAAS;oBACjB,SAAS,EAAE,CAAC;oBACZ,SAAS,EAAE,EAAE;oBACb,aAAa,EAAE,qKAAqK;iBACrL;aACF;SACF;QACD,aAAa,EAAE;YACb,OAAO,EAAE,aAAa;YACtB,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,MAAM;gBACN,QAAQ;aACT;YACD,YAAY,EAAE;gBACZ,MAAM,EAAE;oBACN,OAAO,EAAE,KAAK;iBACf;gBACD,QAAQ,EAAE;oBACR,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,WAAW,EAAE,GAAG;oBAChB,SAAS,EAAE,sCAAsC;oBACjD,aAAa,EAAE,oKAAoK;iBACpL;gBACD,QAAQ,EAAE;oBACR,MAAM,EAAE,sBAAsB;iBAC/B;aACF;SACF;QACD,cAAc,EAAE;YACd,OAAO,EAAE,cAAc;YACvB,MAAM,EAAE,QAAQ;YAChB,WAAW,EAAE,CAAC;YACd,WAAW,EAAE,GAAG;YAChB,SAAS,EAAE,0BAA0B;YACrC,aAAa,EAAE,4MAA4M;SAC5N;QACD,YAAY,EAAE;YACZ,OAAO,EAAE,YAAY;YACrB,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,MAAM;gBACN,QAAQ;gBACR,QAAQ;aACT;YACD,YAAY,EAAE;gBACZ,MAAM,EAAE;oBACN,OAAO,EAAE,IAAI;iBACd;gBACD,UAAU,EAAE;oBACV,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,KAAK;oBACf,WAAW,EAAE,IAAI;oBACjB,SAAS,EAAE,WAAW;oBACtB,aAAa,EAAE,+GAA+G;iBAC/H;gBACD,QAAQ,EAAE;oBACR,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,WAAW,EAAE,EAAE;oBACf,SAAS,EAAE,cAAc;oBACzB,aAAa,EAAE,0EAA0E;iBAC1F;gBACD,QAAQ,EAAE;oBACR,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,WAAW,EAAE,EAAE;oBACf,SAAS,EAAE,oCAAoC;oBAC/C,aAAa,EAAE,wJAAwJ;iBACxK;gBACD,QAAQ,EAAE;oBACR,MAAM,EAAE,sBAAsB;iBAC/B;gBACD,WAAW,EAAE;oBACX,MAAM,EAAE,SAAS;oBACjB,aAAa,EAAE,sHAAsH;iBACtI;aACF;SACF;QACD,eAAe,EAAE;YACf,OAAO,EAAE,eAAe;YACxB,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,MAAM;gBACN,MAAM;aACP;YACD,YAAY,EAAE;gBACZ,MAAM,EAAE;oBACN,OAAO,EAAE,OAAO;iBACjB;gBACD,MAAM,EAAE;oBACN,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,WAAW,EAAE,IAAI;oBACjB,SAAS,EAAE,IAAI;oBACf,aAAa,EAAE,oKAAoK;iBACpL;aACF;SACF;QACD,iBAAiB,EAAE;YACjB,OAAO,EAAE,iBAAiB;YAC1B,MAAM,EAAE,QAAQ;YAChB,WAAW,EAAE,CAAC;YACd,WAAW,EAAE,EAAE;YACf,SAAS,EAAE,wCAAwC;YACnD,aAAa,EAAE,8TAA8T;SAC9U;KACF;CACO,CAAC;AAEX,mEAAmE;AACnE,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,SAAS,EAAE,8CAA8C;IACzD,MAAM,EAAE,kBAAkB;IAC1B,OAAO,EAAE;QACP,UAAU,EAAE;YACV,SAAS,EAAE,UAAU;YACrB,OAAO,EAAE,gDAAgD;YACzD,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,QAAQ;gBACR,OAAO;gBACP,eAAe;gBACf,wBAAwB;aACzB;YACD,YAAY,EAAE;gBACZ,QAAQ,EAAE;oBACR,MAAM,EAAE,uBAAuB;iBAChC;gBACD,OAAO,EAAE;oBACP,MAAM,EAAE,4BAA4B;iBACrC;gBACD,eAAe,EAAE;oBACf,MAAM,EAAE,OAAO;oBACf,UAAU,EAAE,GAAG;oBACf,OAAO,EAAE;wBACP,MAAM,EAAE,QAAQ;wBAChB,WAAW,EAAE,CAAC;wBACd,WAAW,EAAE,GAAG;wBAChB,aAAa,EAAE,gDAAgD;qBAChE;iBACF;gBACD,wBAAwB,EAAE;oBACxB,MAAM,EAAE,SAAS;iBAClB;gBACD,KAAK,EAAE;oBACL,MAAM,EAAE,aAAa;iBACtB;aACF;SACF;QACD,KAAK,EAAE;YACL,OAAO,EAAE,KAAK;YACd,aAAa,EAAE,uKAAuK;YACtL,MAAM,EAAE,QAAQ;YAChB,eAAe,EAAE,CAAC;YAClB,sBAAsB,EAAE,IAAI;YAC5B,eAAe,EAAE;gBACf,SAAS,EAAE,mCAAmC;aAC/C;SACF;QACD,oBAAoB,EAAE;YACpB,OAAO,EAAE,oBAAoB;YAC7B,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,OAAO;gBACP,OAAO;gBACP,OAAO;gBACP,oBAAoB;gBACpB,YAAY;gBACZ,QAAQ;aACT;YACD,aAAa,EAAE,0GAA0G;YACzH,YAAY,EAAE;gBACZ,OAAO,EAAE;oBACP,MAAM,EAAE,SAAS;oBACjB,SAAS,EAAE,CAAC;oBACZ,aAAa,EAAE,gCAAgC;iBAChD;gBACD,OAAO,EAAE;oBACP,MAAM,EAAE,SAAS;oBACjB,SAAS,EAAE,CAAC;oBACZ,aAAa,EAAE,8FAA8F;iBAC9G;gBACD,OAAO,EAAE;oBACP,MAAM,EAAE,SAAS;oBACjB,SAAS,EAAE,CAAC;oBACZ,aAAa,EAAE,gLAAgL;iBAChM;gBACD,oBAAoB,EAAE;oBACpB,MAAM,EAAE,SAAS;oBACjB,SAAS,EAAE,CAAC;oBACZ,aAAa,EAAE,qEAAqE;iBACrF;gBACD,YAAY,EAAE;oBACZ,MAAM,EAAE,yBAAyB;iBAClC;gBACD,QAAQ,EAAE;oBACR,MAAM,EAAE,uBAAuB;iBAChC;gBACD,QAAQ,EAAE;oBACR,MAAM,EAAE,QAAQ;oBAChB,sBAAsB,EAAE,KAAK;oBAC7B,aAAa,EAAE,+BAA+B;oBAC9C,YAAY,EAAE;wBACZ,eAAe,EAAE;4BACf,MAAM,EAAE,QAAQ;4BAChB,SAAS,EAAE,kBAAkB;4BAC7B,aAAa,EAAE,4EAA4E;yBAC5F;wBACD,oBAAoB,EAAE;4BACpB,MAAM,EAAE,QAAQ;4BAChB,QAAQ,EAAE,WAAW;yBACtB;qBACF;iBACF;aACF;SACF;QACD,eAAe,EAAE;YACf,OAAO,EAAE,eAAe;YACxB,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,aAAa,EAAE,mIAAmI;YAClJ,YAAY,EAAE;gBACZ,aAAa,EAAE;oBACb,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,WAAW;iBACtB;gBACD,aAAa,EAAE;oBACb,MAAM,EAAE,SAAS;iBAClB;gBACD,WAAW,EAAE;oBACX,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,WAAW;oBACrB,aAAa,EAAE,iCAAiC;iBACjD;gBACD,WAAW,EAAE;oBACX,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,WAAW;oBACrB,aAAa,EAAE,iCAAiC;iBACjD;gBACD,cAAc,EAAE;oBACd,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,WAAW;oBACrB,aAAa,EAAE,oFAAoF;iBACpG;aACF;SACF;QACD,iBAAiB,EAAE;YACjB,OAAO,EAAE,iBAAiB;YAC1B,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,QAAQ;aACT;YACD,aAAa,EAAE,6TAA6T;YAC5U,YAAY,EAAE;gBACZ,QAAQ,EAAE;oBACR,MAAM,EAAE,QAAQ;oBAChB,MAAM,EAAE;wBACN,aAAa;wBACb,SAAS;wBACT,QAAQ;wBACR,UAAU;wBACV,MAAM;qBACP;iBACF;gBACD,SAAS,EAAE;oBACT,MAAM,EAAE,kCAAkC;oBAC1C,aAAa,EAAE,6BAA6B;iBAC7C;gBACD,SAAS,EAAE;oBACT,MAAM,EAAE,2BAA2B;oBACnC,aAAa,EAAE,6BAA6B;iBAC7C;gBACD,aAAa,EAAE;oBACb,MAAM,EAAE,yBAAyB;oBACjC,aAAa,EAAE,2PAA2P;iBAC3Q;gBACD,OAAO,EAAE;oBACP,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,WAAW;oBACrB,aAAa,EAAE,iEAAiE;iBACjF;gBACD,yBAAyB,EAAE;oBACzB,MAAM,EAAE,SAAS;oBACjB,SAAS,EAAE,CAAC;oBACZ,aAAa,EAAE,6GAA6G;iBAC7H;aACF;SACF;QACD,mBAAmB,EAAE;YACnB,OAAO,EAAE,mBAAmB;YAC5B,MAAM,EAAE,QAAQ;YAChB,WAAW,EAAE,CAAC;YACd,WAAW,EAAE,EAAE;YACf,SAAS,EAAE,wCAAwC;YACnD,aAAa,EAAE,gNAAgN;SAChO;QACD,0BAA0B,EAAE;YAC1B,OAAO,EAAE,0BAA0B;YACnC,MAAM,EAAE,QAAQ;YAChB,WAAW,EAAE,CAAC;YACd,WAAW,EAAE,GAAG;YAChB,aAAa,EAAE,8WAA8W;SAC9X;QACD,iBAAiB,EAAE;YACjB,OAAO,EAAE,iBAAiB;YAC1B,aAAa,EAAE,gnDAAgnD;YAC/nD,MAAM,EAAE,QAAQ;YAChB,WAAW,EAAE,EAAE;YACf,SAAS,EAAE,4CAA4C;YACvD,UAAU,EAAE;gBACV,iDAAiD;aAClD;SACF;QACD,eAAe,EAAE;YACf,OAAO,EAAE,eAAe;YACxB,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,IAAI;gBACJ,OAAO;gBACP,UAAU;gBACV,OAAO;gBACP,WAAW;gBACX,WAAW;aACZ;YACD,aAAa,EAAE,kEAAkE;YACjF,YAAY,EAAE;gBACZ,IAAI,EAAE;oBACJ,MAAM,EAAE,yBAAyB;iBAClC;gBACD,OAAO,EAAE;oBACP,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,WAAW,EAAE,GAAG;oBAChB,aAAa,EAAE,qJAAqJ;iBACrK;gBACD,UAAU,EAAE;oBACV,MAAM,EAAE,yBAAyB;iBAClC;gBACD,MAAM,EAAE;oBACN,MAAM,EAAE,qBAAqB;iBAC9B;gBACD,eAAe,EAAE;oBACf,MAAM,EAAE,SAAS;oBACjB,SAAS,EAAE,CAAC;oBACZ,aAAa,EAAE,0NAA0N;iBAC1O;gBACD,OAAO,EAAE;oBACP,MAAM,EAAE,qBAAqB;iBAC9B;gBACD,WAAW,EAAE;oBACX,MAAM,EAAE,SAAS;oBACjB,aAAa,EAAE,0GAA0G;iBAC1H;gBACD,WAAW,EAAE;oBACX,MAAM,EAAE,QAAQ;oBAChB,SAAS,EAAE,OAAO;oBAClB,WAAW,EAAE,IAAI;iBAClB;gBACD,WAAW,EAAE;oBACX,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,WAAW;iBACtB;gBACD,WAAW,EAAE;oBACX,MAAM,EAAE,QAAQ;oBAChB,SAAS,EAAE,OAAO;oBAClB,WAAW,EAAE,IAAI;iBAClB;gBACD,WAAW,EAAE;oBACX,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,WAAW;iBACtB;aACF;SACF;QACD,aAAa,EAAE;YACb,OAAO,EAAE,aAAa;YACtB,MAAM,EAAE,QAAQ;YAChB,MAAM,EAAE;gBACN,QAAQ;gBACR,UAAU;gBACV,SAAS;aACV;YACD,aAAa,EAAE,kVAAkV;SAClW;QACD,aAAa,EAAE;YACb,OAAO,EAAE,aAAa;YACtB,aAAa,EAAE,inCAAinC;YAChoC,OAAO,EAAE;gBACP;oBACE,MAAM,EAAE,QAAQ;oBAChB,sBAAsB,EAAE,KAAK;oBAC7B,UAAU,EAAE;wBACV,MAAM;wBACN,SAAS;wBACT,SAAS;qBACV;oBACD,YAAY,EAAE;wBACZ,MAAM,EAAE;4BACN,OAAO,EAAE,aAAa;yBACvB;wBACD,SAAS,EAAE;4BACT,MAAM,EAAE,kCAAkC;yBAC3C;wBACD,SAAS,EAAE;4BACT,MAAM,EAAE,2BAA2B;yBACpC;qBACF;iBACF;gBACD;oBACE,MAAM,EAAE,QAAQ;oBAChB,sBAAsB,EAAE,KAAK;oBAC7B,UAAU,EAAE;wBACV,MAAM;qBACP;oBACD,YAAY,EAAE;wBACZ,MAAM,EAAE;4BACN,OAAO,EAAE,SAAS;yBACnB;qBACF;iBACF;gBACD;oBACE,MAAM,EAAE,QAAQ;oBAChB,sBAAsB,EAAE,KAAK;oBAC7B,UAAU,EAAE;wBACV,MAAM;qBACP;oBACD,YAAY,EAAE;wBACZ,MAAM,EAAE;4BACN,OAAO,EAAE,QAAQ;yBAClB;qBACF;iBACF;aACF;SACF;QACD,iBAAiB,EAAE;YACjB,OAAO,EAAE,iBAAiB;YAC1B,aAAa,EAAE,sHAAsH;YACrI,OAAO,EAAE;gBACP;oBACE,MAAM,EAAE,uBAAuB;iBAChC;gBACD;oBACE,MAAM,EAAE,oBAAoB;iBAC7B;gBACD;oBACE,MAAM,EAAE,qBAAqB;iBAC9B;gBACD;oBACE,MAAM,EAAE,wBAAwB;iBACjC;aACF;SACF;QACD,gBAAgB,EAAE;YAChB,OAAO,EAAE,gBAAgB;YACzB,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,MAAM;gBACN,UAAU;gBACV,eAAe;gBACf,QAAQ;gBACR,oBAAoB;aACrB;YACD,YAAY,EAAE;gBACZ,MAAM,EAAE;oBACN,OAAO,EAAE,QAAQ;iBAClB;gBACD,UAAU,EAAE;oBACV,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,KAAK;oBACf,WAAW,EAAE,IAAI;oBACjB,SAAS,EAAE,WAAW;oBACtB,aAAa,EAAE,iNAAiN;iBACjO;gBACD,eAAe,EAAE;oBACf,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,KAAK;oBACf,WAAW,EAAE,IAAI;oBACjB,SAAS,EAAE,WAAW;oBACtB,aAAa,EAAE,oDAAoD;iBACpE;gBACD,QAAQ,EAAE;oBACR,MAAM,EAAE,SAAS;oBACjB,SAAS,EAAE,CAAC;oBACZ,SAAS,EAAE,EAAE;oBACb,aAAa,EAAE,qIAAqI;iBACrJ;gBACD,oBAAoB,EAAE;oBACpB,MAAM,EAAE,SAAS;oBACjB,SAAS,EAAE,CAAC;oBACZ,SAAS,EAAE,EAAE;oBACb,aAAa,EAAE,qKAAqK;iBACrL;aACF;SACF;QACD,aAAa,EAAE;YACb,OAAO,EAAE,aAAa;YACtB,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,MAAM;gBACN,QAAQ;aACT;YACD,YAAY,EAAE;gBACZ,MAAM,EAAE;oBACN,OAAO,EAAE,KAAK;iBACf;gBACD,QAAQ,EAAE;oBACR,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,WAAW,EAAE,GAAG;oBAChB,SAAS,EAAE,sCAAsC;oBACjD,aAAa,EAAE,oKAAoK;iBACpL;gBACD,QAAQ,EAAE;oBACR,MAAM,EAAE,sBAAsB;iBAC/B;aACF;SACF;QACD,cAAc,EAAE;YACd,OAAO,EAAE,cAAc;YACvB,MAAM,EAAE,QAAQ;YAChB,WAAW,EAAE,CAAC;YACd,WAAW,EAAE,GAAG;YAChB,SAAS,EAAE,0BAA0B;YACrC,aAAa,EAAE,4MAA4M;SAC5N;QACD,YAAY,EAAE;YACZ,OAAO,EAAE,YAAY;YACrB,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,MAAM;gBACN,QAAQ;gBACR,QAAQ;aACT;YACD,YAAY,EAAE;gBACZ,MAAM,EAAE;oBACN,OAAO,EAAE,IAAI;iBACd;gBACD,UAAU,EAAE;oBACV,MAAM,EAAE,QAAQ;oBAChB,QAAQ,EAAE,KAAK;oBACf,WAAW,EAAE,IAAI;oBACjB,SAAS,EAAE,WAAW;oBACtB,aAAa,EAAE,+GAA+G;iBAC/H;gBACD,QAAQ,EAAE;oBACR,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,WAAW,EAAE,EAAE;oBACf,SAAS,EAAE,cAAc;oBACzB,aAAa,EAAE,0EAA0E;iBAC1F;gBACD,QAAQ,EAAE;oBACR,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,WAAW,EAAE,EAAE;oBACf,SAAS,EAAE,oCAAoC;oBAC/C,aAAa,EAAE,wJAAwJ;iBACxK;gBACD,QAAQ,EAAE;oBACR,MAAM,EAAE,sBAAsB;iBAC/B;gBACD,WAAW,EAAE;oBACX,MAAM,EAAE,SAAS;oBACjB,aAAa,EAAE,sHAAsH;iBACtI;aACF;SACF;QACD,eAAe,EAAE;YACf,OAAO,EAAE,eAAe;YACxB,MAAM,EAAE,QAAQ;YAChB,sBAAsB,EAAE,KAAK;YAC7B,UAAU,EAAE;gBACV,MAAM;gBACN,MAAM;aACP;YACD,YAAY,EAAE;gBACZ,MAAM,EAAE;oBACN,OAAO,EAAE,OAAO;iBACjB;gBACD,MAAM,EAAE;oBACN,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,CAAC;oBACd,WAAW,EAAE,IAAI;oBACjB,SAAS,EAAE,IAAI;oBACf,aAAa,EAAE,oKAAoK;iBACpL;aACF;SACF;QACD,iBAAiB,EAAE;YACjB,OAAO,EAAE,iBAAiB;YAC1B,MAAM,EAAE,QAAQ;YAChB,WAAW,EAAE,CAAC;YACd,WAAW,EAAE,EAAE;YACf,SAAS,EAAE,wCAAwC;YACnD,aAAa,EAAE,8TAA8T;SAC9U;KACF;CACO,CAAC;AAEX;;;;;GAKG;AACH,MAAM,CAAC,MAAM,IAAI,GAAG;IAClB,OAAO,EAAE,QAAQ;IACjB,QAAQ,EAAE,KAAK;IACf,eAAe,EAAE,KAAK;IACtB,mBAAmB,EAAE,IAAI;IACzB,kBAAkB,EAAE,KAAK;IACzB,aAAa,EAAE,cAAc;CACrB,CAAC;AAEX;;;;GAIG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,OAAO,EAAE,iBAAiB;IAC1B,QAAQ,EAAE,KAAK;IACf,eAAe,EAAE,KAAK;IACtB,mBAAmB,EAAE,IAAI;IACzB,kBAAkB,EAAE,KAAK;IACzB,aAAa,EAAE,uBAAuB;CAC9B,CAAC"}
|
|
@@ -2,7 +2,7 @@
|
|
|
2
2
|
* Generated by scripts/build-ts-bindings.mjs — DO NOT EDIT BY HAND.
|
|
3
3
|
* Source: specs/vtc/storage/configs/list/0.1/payload.schema.json
|
|
4
4
|
*/
|
|
5
|
-
import type { ConfigState, CredentialState, DigestMultibase, Ext, ExternalAccountId, GcsSettings, LocalSettings, ObjectPrefix, S3Settings, StorageAuth, StorageConfig, StorageConfigFacts, StorageConfigId, StorageHealth, StorageKind, StorageSettings, WalrusSettings } from "../../../../../_shared/components.js";
|
|
5
|
+
import type { ConfigState, CredentialState, DigestMultibase, Ext, ExternalAccountContextId, ExternalAccountId, GcsSettings, LocalSettings, ObjectPrefix, S3Settings, StorageAuth, StorageConfig, StorageConfigFacts, StorageConfigId, StorageHealth, StorageKind, StorageSettings, WalrusSettings } from "../../../../../_shared/components.js";
|
|
6
6
|
/**
|
|
7
7
|
* Page through the community's storage configs. The outer document members are owned by the framework — SPEC §6.3.
|
|
8
8
|
*/
|
|
@@ -38,7 +38,7 @@ export interface ConfigItem {
|
|
|
38
38
|
facts: StorageConfigFacts;
|
|
39
39
|
}
|
|
40
40
|
/** Shared definitions this specification references, re-exported under the names it used to declare them with. */
|
|
41
|
-
export type { ConfigState, CredentialState, DigestMultibase, Ext, ExternalAccountId, GcsSettings, LocalSettings, ObjectPrefix, S3Settings, StorageAuth, StorageConfig, StorageConfigFacts, StorageConfigId, StorageHealth, StorageKind, StorageSettings, WalrusSettings };
|
|
41
|
+
export type { ConfigState, CredentialState, DigestMultibase, Ext, ExternalAccountContextId, ExternalAccountId, GcsSettings, LocalSettings, ObjectPrefix, S3Settings, StorageAuth, StorageConfig, StorageConfigFacts, StorageConfigId, StorageHealth, StorageKind, StorageSettings, WalrusSettings };
|
|
42
42
|
/** Trust Task type URI. */
|
|
43
43
|
export declare const TYPE_URI: "https://trusttasks.org/spec/vtc/storage/configs/list/0.1";
|
|
44
44
|
/** Stable alias for this specification's request payload shape. */
|
|
@@ -228,6 +228,10 @@ export declare const PAYLOAD_SCHEMA: {
|
|
|
228
228
|
readonly type: "string";
|
|
229
229
|
readonly enum: readonly ["vta-account", "ambient", "sealed", "required", "none"];
|
|
230
230
|
};
|
|
231
|
+
readonly context: {
|
|
232
|
+
readonly $ref: "#/$defs/ExternalAccountContextId";
|
|
233
|
+
readonly description: "Present with `vta-account`.";
|
|
234
|
+
};
|
|
231
235
|
readonly account: {
|
|
232
236
|
readonly $ref: "#/$defs/ExternalAccountId";
|
|
233
237
|
readonly description: "Present with `vta-account`.";
|
|
@@ -256,6 +260,13 @@ export declare const PAYLOAD_SCHEMA: {
|
|
|
256
260
|
readonly pattern: "^[a-z0-9](?:[a-z0-9-]{0,62}[a-z0-9])?$";
|
|
257
261
|
readonly description: "The identifier of an external account held by the community's VTA (the external/accounts/* family), which issues the community short-lived, room-scoped credentials and holds the long-lived authority itself.";
|
|
258
262
|
};
|
|
263
|
+
readonly ExternalAccountContextId: {
|
|
264
|
+
readonly title: "ExternalAccountContextId";
|
|
265
|
+
readonly type: "string";
|
|
266
|
+
readonly minLength: 1;
|
|
267
|
+
readonly maxLength: 256;
|
|
268
|
+
readonly description: "The context at the community's VTA that owns an external account. The VTA names an account by its context and its identifier, and decides who may use it by act scope in that context: the community must hold `external-auth-use` there, and be bound to the account, for the account to issue it anything. Naming a context grants nothing; the VTA's binding is the gate.";
|
|
269
|
+
};
|
|
259
270
|
readonly DigestMultibase: {
|
|
260
271
|
readonly title: "DigestMultibase";
|
|
261
272
|
readonly description: "A cryptographic digest as a multibase-encoded multihash — the encoding the W3C Verifiable Credentials Data Model 2.0 defines for `digestMultibase`, and the one `did:webvh` uses for its SCID and entry hashes.\n\nMultihash carries the hash algorithm in-band, so the value is self-describing and the wire format survives an algorithm change without a schema revision; multibase does the same for the base encoding, so a verifier never infers base58 from base64url by context. A bare hex string or a `sha-256:`-style prefix hard-codes one algorithm into the wire contract and is non-conforming here.\n\nThis definition constrains the *encoding only*. What the digest is computed over is stated by each referencing field, because it differs legitimately: a digest over a JSON document is taken over its RFC 8785 (JCS) canonicalization, while a digest over an opaque artifact is taken over its bytes. A field whose input is a JSON document and which does not name a canonicalization is not reproducible.\n\nRestricted to the two multibase headers W3C Controlled Identifiers 1.0 §2.4 normatively requires — `z` (base58btc) and `u` (base64url-no-pad). CID permits others but states that \"interoperability is not guaranteed between implementations using such values\", and a registry whose purpose is interoperability should not mint digests a conforming verifier may be unable to read. The alphabets are enforced rather than assumed: base58btc excludes 0, O, I and l, and an earlier permissive pattern let three published examples carry digests that were not valid base58 at all. base58btc is RECOMMENDED, for consistency with `did:key` and `did:webvh`.";
|
|
@@ -326,15 +337,18 @@ export declare const PAYLOAD_SCHEMA: {
|
|
|
326
337
|
};
|
|
327
338
|
readonly StorageAuth: {
|
|
328
339
|
readonly title: "StorageAuth";
|
|
329
|
-
readonly description: "How the community authenticates to a config's backend. Absent on a `local` config, which needs none.\n\n`vta-account` (RECOMMENDED): an external account in the community's VTA. The VTA holds the long-lived authority; the community holds nothing that outlives a credential lifetime, and asks for credentials scoped to one room's prefix for at most 15 minutes, every issuance audited at the VTA. Required for a `walrus` config other than a `sealed` one, since the VTA's `sui-signer` account signs its storage transactions.\n\n`ambient`: the cloud identity of the machine the community runs on (an instance role, workload identity), downscoped to one room's prefix by the community itself. Not audited or rate-limited by the VTA, and usable by anything on that machine that reaches the metadata endpoint. Not valid for `walrus`.\n\n`sealed` (discouraged): a long-lived credential stored by the community, set with vtc/storage/credentials/set. Protects against every administrator through every surface the community offers; does not protect against whoever operates the machine.";
|
|
340
|
+
readonly description: "How the community authenticates to a config's backend. Absent on a `local` config, which needs none.\n\n`vta-account` (RECOMMENDED): an external account in the community's VTA, named by the context that owns it and its identifier there. The VTA holds the long-lived authority; the community holds nothing that outlives a credential lifetime, and asks for credentials scoped to one room's prefix for at most 15 minutes, every issuance audited at the VTA. Required for a `walrus` config other than a `sealed` one, since the VTA's `sui-signer` account signs its storage transactions.\n\n`ambient`: the cloud identity of the machine the community runs on (an instance role, workload identity), downscoped to one room's prefix by the community itself. Not audited or rate-limited by the VTA, and usable by anything on that machine that reaches the metadata endpoint. Not valid for `walrus`.\n\n`sealed` (discouraged): a long-lived credential stored by the community, set with vtc/storage/credentials/set. Protects against every administrator through every surface the community offers; does not protect against whoever operates the machine.";
|
|
330
341
|
readonly oneOf: readonly [{
|
|
331
342
|
readonly type: "object";
|
|
332
343
|
readonly additionalProperties: false;
|
|
333
|
-
readonly required: readonly ["mode", "account"];
|
|
344
|
+
readonly required: readonly ["mode", "context", "account"];
|
|
334
345
|
readonly properties: {
|
|
335
346
|
readonly mode: {
|
|
336
347
|
readonly const: "vta-account";
|
|
337
348
|
};
|
|
349
|
+
readonly context: {
|
|
350
|
+
readonly $ref: "#/$defs/ExternalAccountContextId";
|
|
351
|
+
};
|
|
338
352
|
readonly account: {
|
|
339
353
|
readonly $ref: "#/$defs/ExternalAccountId";
|
|
340
354
|
};
|
|
@@ -657,6 +671,10 @@ export declare const RESPONSE_PAYLOAD_SCHEMA: {
|
|
|
657
671
|
readonly type: "string";
|
|
658
672
|
readonly enum: readonly ["vta-account", "ambient", "sealed", "required", "none"];
|
|
659
673
|
};
|
|
674
|
+
readonly context: {
|
|
675
|
+
readonly $ref: "#/$defs/ExternalAccountContextId";
|
|
676
|
+
readonly description: "Present with `vta-account`.";
|
|
677
|
+
};
|
|
660
678
|
readonly account: {
|
|
661
679
|
readonly $ref: "#/$defs/ExternalAccountId";
|
|
662
680
|
readonly description: "Present with `vta-account`.";
|
|
@@ -685,6 +703,13 @@ export declare const RESPONSE_PAYLOAD_SCHEMA: {
|
|
|
685
703
|
readonly pattern: "^[a-z0-9](?:[a-z0-9-]{0,62}[a-z0-9])?$";
|
|
686
704
|
readonly description: "The identifier of an external account held by the community's VTA (the external/accounts/* family), which issues the community short-lived, room-scoped credentials and holds the long-lived authority itself.";
|
|
687
705
|
};
|
|
706
|
+
readonly ExternalAccountContextId: {
|
|
707
|
+
readonly title: "ExternalAccountContextId";
|
|
708
|
+
readonly type: "string";
|
|
709
|
+
readonly minLength: 1;
|
|
710
|
+
readonly maxLength: 256;
|
|
711
|
+
readonly description: "The context at the community's VTA that owns an external account. The VTA names an account by its context and its identifier, and decides who may use it by act scope in that context: the community must hold `external-auth-use` there, and be bound to the account, for the account to issue it anything. Naming a context grants nothing; the VTA's binding is the gate.";
|
|
712
|
+
};
|
|
688
713
|
readonly DigestMultibase: {
|
|
689
714
|
readonly title: "DigestMultibase";
|
|
690
715
|
readonly description: "A cryptographic digest as a multibase-encoded multihash — the encoding the W3C Verifiable Credentials Data Model 2.0 defines for `digestMultibase`, and the one `did:webvh` uses for its SCID and entry hashes.\n\nMultihash carries the hash algorithm in-band, so the value is self-describing and the wire format survives an algorithm change without a schema revision; multibase does the same for the base encoding, so a verifier never infers base58 from base64url by context. A bare hex string or a `sha-256:`-style prefix hard-codes one algorithm into the wire contract and is non-conforming here.\n\nThis definition constrains the *encoding only*. What the digest is computed over is stated by each referencing field, because it differs legitimately: a digest over a JSON document is taken over its RFC 8785 (JCS) canonicalization, while a digest over an opaque artifact is taken over its bytes. A field whose input is a JSON document and which does not name a canonicalization is not reproducible.\n\nRestricted to the two multibase headers W3C Controlled Identifiers 1.0 §2.4 normatively requires — `z` (base58btc) and `u` (base64url-no-pad). CID permits others but states that \"interoperability is not guaranteed between implementations using such values\", and a registry whose purpose is interoperability should not mint digests a conforming verifier may be unable to read. The alphabets are enforced rather than assumed: base58btc excludes 0, O, I and l, and an earlier permissive pattern let three published examples carry digests that were not valid base58 at all. base58btc is RECOMMENDED, for consistency with `did:key` and `did:webvh`.";
|
|
@@ -755,15 +780,18 @@ export declare const RESPONSE_PAYLOAD_SCHEMA: {
|
|
|
755
780
|
};
|
|
756
781
|
readonly StorageAuth: {
|
|
757
782
|
readonly title: "StorageAuth";
|
|
758
|
-
readonly description: "How the community authenticates to a config's backend. Absent on a `local` config, which needs none.\n\n`vta-account` (RECOMMENDED): an external account in the community's VTA. The VTA holds the long-lived authority; the community holds nothing that outlives a credential lifetime, and asks for credentials scoped to one room's prefix for at most 15 minutes, every issuance audited at the VTA. Required for a `walrus` config other than a `sealed` one, since the VTA's `sui-signer` account signs its storage transactions.\n\n`ambient`: the cloud identity of the machine the community runs on (an instance role, workload identity), downscoped to one room's prefix by the community itself. Not audited or rate-limited by the VTA, and usable by anything on that machine that reaches the metadata endpoint. Not valid for `walrus`.\n\n`sealed` (discouraged): a long-lived credential stored by the community, set with vtc/storage/credentials/set. Protects against every administrator through every surface the community offers; does not protect against whoever operates the machine.";
|
|
783
|
+
readonly description: "How the community authenticates to a config's backend. Absent on a `local` config, which needs none.\n\n`vta-account` (RECOMMENDED): an external account in the community's VTA, named by the context that owns it and its identifier there. The VTA holds the long-lived authority; the community holds nothing that outlives a credential lifetime, and asks for credentials scoped to one room's prefix for at most 15 minutes, every issuance audited at the VTA. Required for a `walrus` config other than a `sealed` one, since the VTA's `sui-signer` account signs its storage transactions.\n\n`ambient`: the cloud identity of the machine the community runs on (an instance role, workload identity), downscoped to one room's prefix by the community itself. Not audited or rate-limited by the VTA, and usable by anything on that machine that reaches the metadata endpoint. Not valid for `walrus`.\n\n`sealed` (discouraged): a long-lived credential stored by the community, set with vtc/storage/credentials/set. Protects against every administrator through every surface the community offers; does not protect against whoever operates the machine.";
|
|
759
784
|
readonly oneOf: readonly [{
|
|
760
785
|
readonly type: "object";
|
|
761
786
|
readonly additionalProperties: false;
|
|
762
|
-
readonly required: readonly ["mode", "account"];
|
|
787
|
+
readonly required: readonly ["mode", "context", "account"];
|
|
763
788
|
readonly properties: {
|
|
764
789
|
readonly mode: {
|
|
765
790
|
readonly const: "vta-account";
|
|
766
791
|
};
|
|
792
|
+
readonly context: {
|
|
793
|
+
readonly $ref: "#/$defs/ExternalAccountContextId";
|
|
794
|
+
};
|
|
767
795
|
readonly account: {
|
|
768
796
|
readonly $ref: "#/$defs/ExternalAccountId";
|
|
769
797
|
};
|
|
@@ -1124,6 +1152,10 @@ export declare const SPEC: {
|
|
|
1124
1152
|
readonly type: "string";
|
|
1125
1153
|
readonly enum: readonly ["vta-account", "ambient", "sealed", "required", "none"];
|
|
1126
1154
|
};
|
|
1155
|
+
readonly context: {
|
|
1156
|
+
readonly $ref: "#/$defs/ExternalAccountContextId";
|
|
1157
|
+
readonly description: "Present with `vta-account`.";
|
|
1158
|
+
};
|
|
1127
1159
|
readonly account: {
|
|
1128
1160
|
readonly $ref: "#/$defs/ExternalAccountId";
|
|
1129
1161
|
readonly description: "Present with `vta-account`.";
|
|
@@ -1152,6 +1184,13 @@ export declare const SPEC: {
|
|
|
1152
1184
|
readonly pattern: "^[a-z0-9](?:[a-z0-9-]{0,62}[a-z0-9])?$";
|
|
1153
1185
|
readonly description: "The identifier of an external account held by the community's VTA (the external/accounts/* family), which issues the community short-lived, room-scoped credentials and holds the long-lived authority itself.";
|
|
1154
1186
|
};
|
|
1187
|
+
readonly ExternalAccountContextId: {
|
|
1188
|
+
readonly title: "ExternalAccountContextId";
|
|
1189
|
+
readonly type: "string";
|
|
1190
|
+
readonly minLength: 1;
|
|
1191
|
+
readonly maxLength: 256;
|
|
1192
|
+
readonly description: "The context at the community's VTA that owns an external account. The VTA names an account by its context and its identifier, and decides who may use it by act scope in that context: the community must hold `external-auth-use` there, and be bound to the account, for the account to issue it anything. Naming a context grants nothing; the VTA's binding is the gate.";
|
|
1193
|
+
};
|
|
1155
1194
|
readonly DigestMultibase: {
|
|
1156
1195
|
readonly title: "DigestMultibase";
|
|
1157
1196
|
readonly description: "A cryptographic digest as a multibase-encoded multihash — the encoding the W3C Verifiable Credentials Data Model 2.0 defines for `digestMultibase`, and the one `did:webvh` uses for its SCID and entry hashes.\n\nMultihash carries the hash algorithm in-band, so the value is self-describing and the wire format survives an algorithm change without a schema revision; multibase does the same for the base encoding, so a verifier never infers base58 from base64url by context. A bare hex string or a `sha-256:`-style prefix hard-codes one algorithm into the wire contract and is non-conforming here.\n\nThis definition constrains the *encoding only*. What the digest is computed over is stated by each referencing field, because it differs legitimately: a digest over a JSON document is taken over its RFC 8785 (JCS) canonicalization, while a digest over an opaque artifact is taken over its bytes. A field whose input is a JSON document and which does not name a canonicalization is not reproducible.\n\nRestricted to the two multibase headers W3C Controlled Identifiers 1.0 §2.4 normatively requires — `z` (base58btc) and `u` (base64url-no-pad). CID permits others but states that \"interoperability is not guaranteed between implementations using such values\", and a registry whose purpose is interoperability should not mint digests a conforming verifier may be unable to read. The alphabets are enforced rather than assumed: base58btc excludes 0, O, I and l, and an earlier permissive pattern let three published examples carry digests that were not valid base58 at all. base58btc is RECOMMENDED, for consistency with `did:key` and `did:webvh`.";
|
|
@@ -1222,15 +1261,18 @@ export declare const SPEC: {
|
|
|
1222
1261
|
};
|
|
1223
1262
|
readonly StorageAuth: {
|
|
1224
1263
|
readonly title: "StorageAuth";
|
|
1225
|
-
readonly description: "How the community authenticates to a config's backend. Absent on a `local` config, which needs none.\n\n`vta-account` (RECOMMENDED): an external account in the community's VTA. The VTA holds the long-lived authority; the community holds nothing that outlives a credential lifetime, and asks for credentials scoped to one room's prefix for at most 15 minutes, every issuance audited at the VTA. Required for a `walrus` config other than a `sealed` one, since the VTA's `sui-signer` account signs its storage transactions.\n\n`ambient`: the cloud identity of the machine the community runs on (an instance role, workload identity), downscoped to one room's prefix by the community itself. Not audited or rate-limited by the VTA, and usable by anything on that machine that reaches the metadata endpoint. Not valid for `walrus`.\n\n`sealed` (discouraged): a long-lived credential stored by the community, set with vtc/storage/credentials/set. Protects against every administrator through every surface the community offers; does not protect against whoever operates the machine.";
|
|
1264
|
+
readonly description: "How the community authenticates to a config's backend. Absent on a `local` config, which needs none.\n\n`vta-account` (RECOMMENDED): an external account in the community's VTA, named by the context that owns it and its identifier there. The VTA holds the long-lived authority; the community holds nothing that outlives a credential lifetime, and asks for credentials scoped to one room's prefix for at most 15 minutes, every issuance audited at the VTA. Required for a `walrus` config other than a `sealed` one, since the VTA's `sui-signer` account signs its storage transactions.\n\n`ambient`: the cloud identity of the machine the community runs on (an instance role, workload identity), downscoped to one room's prefix by the community itself. Not audited or rate-limited by the VTA, and usable by anything on that machine that reaches the metadata endpoint. Not valid for `walrus`.\n\n`sealed` (discouraged): a long-lived credential stored by the community, set with vtc/storage/credentials/set. Protects against every administrator through every surface the community offers; does not protect against whoever operates the machine.";
|
|
1226
1265
|
readonly oneOf: readonly [{
|
|
1227
1266
|
readonly type: "object";
|
|
1228
1267
|
readonly additionalProperties: false;
|
|
1229
|
-
readonly required: readonly ["mode", "account"];
|
|
1268
|
+
readonly required: readonly ["mode", "context", "account"];
|
|
1230
1269
|
readonly properties: {
|
|
1231
1270
|
readonly mode: {
|
|
1232
1271
|
readonly const: "vta-account";
|
|
1233
1272
|
};
|
|
1273
|
+
readonly context: {
|
|
1274
|
+
readonly $ref: "#/$defs/ExternalAccountContextId";
|
|
1275
|
+
};
|
|
1234
1276
|
readonly account: {
|
|
1235
1277
|
readonly $ref: "#/$defs/ExternalAccountId";
|
|
1236
1278
|
};
|
|
@@ -1564,6 +1606,10 @@ export declare const RESPONSE_SPEC: {
|
|
|
1564
1606
|
readonly type: "string";
|
|
1565
1607
|
readonly enum: readonly ["vta-account", "ambient", "sealed", "required", "none"];
|
|
1566
1608
|
};
|
|
1609
|
+
readonly context: {
|
|
1610
|
+
readonly $ref: "#/$defs/ExternalAccountContextId";
|
|
1611
|
+
readonly description: "Present with `vta-account`.";
|
|
1612
|
+
};
|
|
1567
1613
|
readonly account: {
|
|
1568
1614
|
readonly $ref: "#/$defs/ExternalAccountId";
|
|
1569
1615
|
readonly description: "Present with `vta-account`.";
|
|
@@ -1592,6 +1638,13 @@ export declare const RESPONSE_SPEC: {
|
|
|
1592
1638
|
readonly pattern: "^[a-z0-9](?:[a-z0-9-]{0,62}[a-z0-9])?$";
|
|
1593
1639
|
readonly description: "The identifier of an external account held by the community's VTA (the external/accounts/* family), which issues the community short-lived, room-scoped credentials and holds the long-lived authority itself.";
|
|
1594
1640
|
};
|
|
1641
|
+
readonly ExternalAccountContextId: {
|
|
1642
|
+
readonly title: "ExternalAccountContextId";
|
|
1643
|
+
readonly type: "string";
|
|
1644
|
+
readonly minLength: 1;
|
|
1645
|
+
readonly maxLength: 256;
|
|
1646
|
+
readonly description: "The context at the community's VTA that owns an external account. The VTA names an account by its context and its identifier, and decides who may use it by act scope in that context: the community must hold `external-auth-use` there, and be bound to the account, for the account to issue it anything. Naming a context grants nothing; the VTA's binding is the gate.";
|
|
1647
|
+
};
|
|
1595
1648
|
readonly DigestMultibase: {
|
|
1596
1649
|
readonly title: "DigestMultibase";
|
|
1597
1650
|
readonly description: "A cryptographic digest as a multibase-encoded multihash — the encoding the W3C Verifiable Credentials Data Model 2.0 defines for `digestMultibase`, and the one `did:webvh` uses for its SCID and entry hashes.\n\nMultihash carries the hash algorithm in-band, so the value is self-describing and the wire format survives an algorithm change without a schema revision; multibase does the same for the base encoding, so a verifier never infers base58 from base64url by context. A bare hex string or a `sha-256:`-style prefix hard-codes one algorithm into the wire contract and is non-conforming here.\n\nThis definition constrains the *encoding only*. What the digest is computed over is stated by each referencing field, because it differs legitimately: a digest over a JSON document is taken over its RFC 8785 (JCS) canonicalization, while a digest over an opaque artifact is taken over its bytes. A field whose input is a JSON document and which does not name a canonicalization is not reproducible.\n\nRestricted to the two multibase headers W3C Controlled Identifiers 1.0 §2.4 normatively requires — `z` (base58btc) and `u` (base64url-no-pad). CID permits others but states that \"interoperability is not guaranteed between implementations using such values\", and a registry whose purpose is interoperability should not mint digests a conforming verifier may be unable to read. The alphabets are enforced rather than assumed: base58btc excludes 0, O, I and l, and an earlier permissive pattern let three published examples carry digests that were not valid base58 at all. base58btc is RECOMMENDED, for consistency with `did:key` and `did:webvh`.";
|
|
@@ -1662,15 +1715,18 @@ export declare const RESPONSE_SPEC: {
|
|
|
1662
1715
|
};
|
|
1663
1716
|
readonly StorageAuth: {
|
|
1664
1717
|
readonly title: "StorageAuth";
|
|
1665
|
-
readonly description: "How the community authenticates to a config's backend. Absent on a `local` config, which needs none.\n\n`vta-account` (RECOMMENDED): an external account in the community's VTA. The VTA holds the long-lived authority; the community holds nothing that outlives a credential lifetime, and asks for credentials scoped to one room's prefix for at most 15 minutes, every issuance audited at the VTA. Required for a `walrus` config other than a `sealed` one, since the VTA's `sui-signer` account signs its storage transactions.\n\n`ambient`: the cloud identity of the machine the community runs on (an instance role, workload identity), downscoped to one room's prefix by the community itself. Not audited or rate-limited by the VTA, and usable by anything on that machine that reaches the metadata endpoint. Not valid for `walrus`.\n\n`sealed` (discouraged): a long-lived credential stored by the community, set with vtc/storage/credentials/set. Protects against every administrator through every surface the community offers; does not protect against whoever operates the machine.";
|
|
1718
|
+
readonly description: "How the community authenticates to a config's backend. Absent on a `local` config, which needs none.\n\n`vta-account` (RECOMMENDED): an external account in the community's VTA, named by the context that owns it and its identifier there. The VTA holds the long-lived authority; the community holds nothing that outlives a credential lifetime, and asks for credentials scoped to one room's prefix for at most 15 minutes, every issuance audited at the VTA. Required for a `walrus` config other than a `sealed` one, since the VTA's `sui-signer` account signs its storage transactions.\n\n`ambient`: the cloud identity of the machine the community runs on (an instance role, workload identity), downscoped to one room's prefix by the community itself. Not audited or rate-limited by the VTA, and usable by anything on that machine that reaches the metadata endpoint. Not valid for `walrus`.\n\n`sealed` (discouraged): a long-lived credential stored by the community, set with vtc/storage/credentials/set. Protects against every administrator through every surface the community offers; does not protect against whoever operates the machine.";
|
|
1666
1719
|
readonly oneOf: readonly [{
|
|
1667
1720
|
readonly type: "object";
|
|
1668
1721
|
readonly additionalProperties: false;
|
|
1669
|
-
readonly required: readonly ["mode", "account"];
|
|
1722
|
+
readonly required: readonly ["mode", "context", "account"];
|
|
1670
1723
|
readonly properties: {
|
|
1671
1724
|
readonly mode: {
|
|
1672
1725
|
readonly const: "vta-account";
|
|
1673
1726
|
};
|
|
1727
|
+
readonly context: {
|
|
1728
|
+
readonly $ref: "#/$defs/ExternalAccountContextId";
|
|
1729
|
+
};
|
|
1674
1730
|
readonly account: {
|
|
1675
1731
|
readonly $ref: "#/$defs/ExternalAccountId";
|
|
1676
1732
|
};
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"payload.d.ts","sourceRoot":"","sources":["../../../../../../src/vtc/storage/configs/list/0.1/payload.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,eAAe,EAAE,eAAe,EAAE,GAAG,EAAE,iBAAiB,EAAE,WAAW,EAAE,aAAa,EAAE,YAAY,EAAE,UAAU,EAAE,WAAW,EAAE,aAAa,EAAE,kBAAkB,EAAE,eAAe,EAAE,aAAa,EAAE,WAAW,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,sCAAsC,CAAC;
|
|
1
|
+
{"version":3,"file":"payload.d.ts","sourceRoot":"","sources":["../../../../../../src/vtc/storage/configs/list/0.1/payload.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,eAAe,EAAE,eAAe,EAAE,GAAG,EAAE,wBAAwB,EAAE,iBAAiB,EAAE,WAAW,EAAE,aAAa,EAAE,YAAY,EAAE,UAAU,EAAE,WAAW,EAAE,aAAa,EAAE,kBAAkB,EAAE,eAAe,EAAE,aAAa,EAAE,WAAW,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,sCAAsC,CAAC;AAGhV;;GAEG;AACH,MAAM,WAAW,4BAA4B;IAC3C,KAAK,CAAC,EAAE,WAAW,CAAC;IACpB,IAAI,CAAC,EAAE,WAAW,CAAC;IACnB;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,GAAG,CAAC;CACX;AACD,MAAM,WAAW,oCAAoC;IACnD;;OAEG;IACH,KAAK,EAAE,UAAU,EAAE,CAAC;IACpB;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,GAAG,CAAC,EAAE,GAAG,CAAC;CACX;AACD;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,aAAa,CAAC;IACtB,KAAK,EAAE,kBAAkB,CAAC;CAC3B;AAED,kHAAkH;AAClH,YAAY,EAAE,WAAW,EAAE,eAAe,EAAE,eAAe,EAAE,GAAG,EAAE,wBAAwB,EAAE,iBAAiB,EAAE,WAAW,EAAE,aAAa,EAAE,YAAY,EAAE,UAAU,EAAE,WAAW,EAAE,aAAa,EAAE,kBAAkB,EAAE,eAAe,EAAE,aAAa,EAAE,WAAW,EAAE,eAAe,EAAE,cAAc,EAAE,CAAC;AAEpS,2BAA2B;AAC3B,eAAO,MAAM,QAAQ,EAAG,0DAAmE,CAAC;AAE5F,mEAAmE;AACnE,MAAM,MAAM,OAAO,GAAG,4BAA4B,CAAC;AAEnD,qEAAqE;AACrE,eAAO,MAAM,iBAAiB,EAAG,mEAA4E,CAAC;AAE9G,4EAA4E;AAC5E,MAAM,MAAM,QAAQ,GAAG,oCAAoC,CAAC;AAE5D;;;;;;;;GAQG;AACH,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA2hBjB,CAAC;AAEX,mEAAmE;AACnE,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAggB1B,CAAC;AAEX;;;;;GAKG;AACH,eAAO,MAAM,IAAI;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAOP,CAAC;AAEX;;;;GAIG;AACH,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAOhB,CAAC"}
|
|
@@ -207,6 +207,10 @@ export const PAYLOAD_SCHEMA = {
|
|
|
207
207
|
"none"
|
|
208
208
|
]
|
|
209
209
|
},
|
|
210
|
+
"context": {
|
|
211
|
+
"$ref": "#/$defs/ExternalAccountContextId",
|
|
212
|
+
"description": "Present with `vta-account`."
|
|
213
|
+
},
|
|
210
214
|
"account": {
|
|
211
215
|
"$ref": "#/$defs/ExternalAccountId",
|
|
212
216
|
"description": "Present with `vta-account`."
|
|
@@ -235,6 +239,13 @@ export const PAYLOAD_SCHEMA = {
|
|
|
235
239
|
"pattern": "^[a-z0-9](?:[a-z0-9-]{0,62}[a-z0-9])?$",
|
|
236
240
|
"description": "The identifier of an external account held by the community's VTA (the external/accounts/* family), which issues the community short-lived, room-scoped credentials and holds the long-lived authority itself."
|
|
237
241
|
},
|
|
242
|
+
"ExternalAccountContextId": {
|
|
243
|
+
"title": "ExternalAccountContextId",
|
|
244
|
+
"type": "string",
|
|
245
|
+
"minLength": 1,
|
|
246
|
+
"maxLength": 256,
|
|
247
|
+
"description": "The context at the community's VTA that owns an external account. The VTA names an account by its context and its identifier, and decides who may use it by act scope in that context: the community must hold `external-auth-use` there, and be bound to the account, for the account to issue it anything. Naming a context grants nothing; the VTA's binding is the gate."
|
|
248
|
+
},
|
|
238
249
|
"DigestMultibase": {
|
|
239
250
|
"title": "DigestMultibase",
|
|
240
251
|
"description": "A cryptographic digest as a multibase-encoded multihash — the encoding the W3C Verifiable Credentials Data Model 2.0 defines for `digestMultibase`, and the one `did:webvh` uses for its SCID and entry hashes.\n\nMultihash carries the hash algorithm in-band, so the value is self-describing and the wire format survives an algorithm change without a schema revision; multibase does the same for the base encoding, so a verifier never infers base58 from base64url by context. A bare hex string or a `sha-256:`-style prefix hard-codes one algorithm into the wire contract and is non-conforming here.\n\nThis definition constrains the *encoding only*. What the digest is computed over is stated by each referencing field, because it differs legitimately: a digest over a JSON document is taken over its RFC 8785 (JCS) canonicalization, while a digest over an opaque artifact is taken over its bytes. A field whose input is a JSON document and which does not name a canonicalization is not reproducible.\n\nRestricted to the two multibase headers W3C Controlled Identifiers 1.0 §2.4 normatively requires — `z` (base58btc) and `u` (base64url-no-pad). CID permits others but states that \"interoperability is not guaranteed between implementations using such values\", and a registry whose purpose is interoperability should not mint digests a conforming verifier may be unable to read. The alphabets are enforced rather than assumed: base58btc excludes 0, O, I and l, and an earlier permissive pattern let three published examples carry digests that were not valid base58 at all. base58btc is RECOMMENDED, for consistency with `did:key` and `did:webvh`.",
|
|
@@ -318,19 +329,23 @@ export const PAYLOAD_SCHEMA = {
|
|
|
318
329
|
},
|
|
319
330
|
"StorageAuth": {
|
|
320
331
|
"title": "StorageAuth",
|
|
321
|
-
"description": "How the community authenticates to a config's backend. Absent on a `local` config, which needs none.\n\n`vta-account` (RECOMMENDED): an external account in the community's VTA. The VTA holds the long-lived authority; the community holds nothing that outlives a credential lifetime, and asks for credentials scoped to one room's prefix for at most 15 minutes, every issuance audited at the VTA. Required for a `walrus` config other than a `sealed` one, since the VTA's `sui-signer` account signs its storage transactions.\n\n`ambient`: the cloud identity of the machine the community runs on (an instance role, workload identity), downscoped to one room's prefix by the community itself. Not audited or rate-limited by the VTA, and usable by anything on that machine that reaches the metadata endpoint. Not valid for `walrus`.\n\n`sealed` (discouraged): a long-lived credential stored by the community, set with vtc/storage/credentials/set. Protects against every administrator through every surface the community offers; does not protect against whoever operates the machine.",
|
|
332
|
+
"description": "How the community authenticates to a config's backend. Absent on a `local` config, which needs none.\n\n`vta-account` (RECOMMENDED): an external account in the community's VTA, named by the context that owns it and its identifier there. The VTA holds the long-lived authority; the community holds nothing that outlives a credential lifetime, and asks for credentials scoped to one room's prefix for at most 15 minutes, every issuance audited at the VTA. Required for a `walrus` config other than a `sealed` one, since the VTA's `sui-signer` account signs its storage transactions.\n\n`ambient`: the cloud identity of the machine the community runs on (an instance role, workload identity), downscoped to one room's prefix by the community itself. Not audited or rate-limited by the VTA, and usable by anything on that machine that reaches the metadata endpoint. Not valid for `walrus`.\n\n`sealed` (discouraged): a long-lived credential stored by the community, set with vtc/storage/credentials/set. Protects against every administrator through every surface the community offers; does not protect against whoever operates the machine.",
|
|
322
333
|
"oneOf": [
|
|
323
334
|
{
|
|
324
335
|
"type": "object",
|
|
325
336
|
"additionalProperties": false,
|
|
326
337
|
"required": [
|
|
327
338
|
"mode",
|
|
339
|
+
"context",
|
|
328
340
|
"account"
|
|
329
341
|
],
|
|
330
342
|
"properties": {
|
|
331
343
|
"mode": {
|
|
332
344
|
"const": "vta-account"
|
|
333
345
|
},
|
|
346
|
+
"context": {
|
|
347
|
+
"$ref": "#/$defs/ExternalAccountContextId"
|
|
348
|
+
},
|
|
334
349
|
"account": {
|
|
335
350
|
"$ref": "#/$defs/ExternalAccountId"
|
|
336
351
|
}
|
|
@@ -706,6 +721,10 @@ export const RESPONSE_PAYLOAD_SCHEMA = {
|
|
|
706
721
|
"none"
|
|
707
722
|
]
|
|
708
723
|
},
|
|
724
|
+
"context": {
|
|
725
|
+
"$ref": "#/$defs/ExternalAccountContextId",
|
|
726
|
+
"description": "Present with `vta-account`."
|
|
727
|
+
},
|
|
709
728
|
"account": {
|
|
710
729
|
"$ref": "#/$defs/ExternalAccountId",
|
|
711
730
|
"description": "Present with `vta-account`."
|
|
@@ -734,6 +753,13 @@ export const RESPONSE_PAYLOAD_SCHEMA = {
|
|
|
734
753
|
"pattern": "^[a-z0-9](?:[a-z0-9-]{0,62}[a-z0-9])?$",
|
|
735
754
|
"description": "The identifier of an external account held by the community's VTA (the external/accounts/* family), which issues the community short-lived, room-scoped credentials and holds the long-lived authority itself."
|
|
736
755
|
},
|
|
756
|
+
"ExternalAccountContextId": {
|
|
757
|
+
"title": "ExternalAccountContextId",
|
|
758
|
+
"type": "string",
|
|
759
|
+
"minLength": 1,
|
|
760
|
+
"maxLength": 256,
|
|
761
|
+
"description": "The context at the community's VTA that owns an external account. The VTA names an account by its context and its identifier, and decides who may use it by act scope in that context: the community must hold `external-auth-use` there, and be bound to the account, for the account to issue it anything. Naming a context grants nothing; the VTA's binding is the gate."
|
|
762
|
+
},
|
|
737
763
|
"DigestMultibase": {
|
|
738
764
|
"title": "DigestMultibase",
|
|
739
765
|
"description": "A cryptographic digest as a multibase-encoded multihash — the encoding the W3C Verifiable Credentials Data Model 2.0 defines for `digestMultibase`, and the one `did:webvh` uses for its SCID and entry hashes.\n\nMultihash carries the hash algorithm in-band, so the value is self-describing and the wire format survives an algorithm change without a schema revision; multibase does the same for the base encoding, so a verifier never infers base58 from base64url by context. A bare hex string or a `sha-256:`-style prefix hard-codes one algorithm into the wire contract and is non-conforming here.\n\nThis definition constrains the *encoding only*. What the digest is computed over is stated by each referencing field, because it differs legitimately: a digest over a JSON document is taken over its RFC 8785 (JCS) canonicalization, while a digest over an opaque artifact is taken over its bytes. A field whose input is a JSON document and which does not name a canonicalization is not reproducible.\n\nRestricted to the two multibase headers W3C Controlled Identifiers 1.0 §2.4 normatively requires — `z` (base58btc) and `u` (base64url-no-pad). CID permits others but states that \"interoperability is not guaranteed between implementations using such values\", and a registry whose purpose is interoperability should not mint digests a conforming verifier may be unable to read. The alphabets are enforced rather than assumed: base58btc excludes 0, O, I and l, and an earlier permissive pattern let three published examples carry digests that were not valid base58 at all. base58btc is RECOMMENDED, for consistency with `did:key` and `did:webvh`.",
|
|
@@ -817,19 +843,23 @@ export const RESPONSE_PAYLOAD_SCHEMA = {
|
|
|
817
843
|
},
|
|
818
844
|
"StorageAuth": {
|
|
819
845
|
"title": "StorageAuth",
|
|
820
|
-
"description": "How the community authenticates to a config's backend. Absent on a `local` config, which needs none.\n\n`vta-account` (RECOMMENDED): an external account in the community's VTA. The VTA holds the long-lived authority; the community holds nothing that outlives a credential lifetime, and asks for credentials scoped to one room's prefix for at most 15 minutes, every issuance audited at the VTA. Required for a `walrus` config other than a `sealed` one, since the VTA's `sui-signer` account signs its storage transactions.\n\n`ambient`: the cloud identity of the machine the community runs on (an instance role, workload identity), downscoped to one room's prefix by the community itself. Not audited or rate-limited by the VTA, and usable by anything on that machine that reaches the metadata endpoint. Not valid for `walrus`.\n\n`sealed` (discouraged): a long-lived credential stored by the community, set with vtc/storage/credentials/set. Protects against every administrator through every surface the community offers; does not protect against whoever operates the machine.",
|
|
846
|
+
"description": "How the community authenticates to a config's backend. Absent on a `local` config, which needs none.\n\n`vta-account` (RECOMMENDED): an external account in the community's VTA, named by the context that owns it and its identifier there. The VTA holds the long-lived authority; the community holds nothing that outlives a credential lifetime, and asks for credentials scoped to one room's prefix for at most 15 minutes, every issuance audited at the VTA. Required for a `walrus` config other than a `sealed` one, since the VTA's `sui-signer` account signs its storage transactions.\n\n`ambient`: the cloud identity of the machine the community runs on (an instance role, workload identity), downscoped to one room's prefix by the community itself. Not audited or rate-limited by the VTA, and usable by anything on that machine that reaches the metadata endpoint. Not valid for `walrus`.\n\n`sealed` (discouraged): a long-lived credential stored by the community, set with vtc/storage/credentials/set. Protects against every administrator through every surface the community offers; does not protect against whoever operates the machine.",
|
|
821
847
|
"oneOf": [
|
|
822
848
|
{
|
|
823
849
|
"type": "object",
|
|
824
850
|
"additionalProperties": false,
|
|
825
851
|
"required": [
|
|
826
852
|
"mode",
|
|
853
|
+
"context",
|
|
827
854
|
"account"
|
|
828
855
|
],
|
|
829
856
|
"properties": {
|
|
830
857
|
"mode": {
|
|
831
858
|
"const": "vta-account"
|
|
832
859
|
},
|
|
860
|
+
"context": {
|
|
861
|
+
"$ref": "#/$defs/ExternalAccountContextId"
|
|
862
|
+
},
|
|
833
863
|
"account": {
|
|
834
864
|
"$ref": "#/$defs/ExternalAccountId"
|
|
835
865
|
}
|