@openvtc/trust-tasks 0.26.2 → 0.26.4

package/src/_shared/components.ts

@@ -1342,6 +1342,10 @@ export type TrafficStage =
  * Handle for one upload (begin → chunk → commit or abort) or one download (get → chunk). Host-generated and unguessable, which is what lets a reference to another party's transfer be answered as not-found without confirming that it exists. Bound at creation to the party that opened it: the subject the host authenticated for the opening request. Opaque: a producer quotes what it was given.
  */
 export type TransferId = string;
+/**
+ * How a blob's bytes move. `proxied`: through the host, as chunk documents (rooms/blobs/upload/chunk, rooms/blobs/chunk). `direct`: straight between the member and the storage the room is assigned to, over time-limited URLs the host issues for one object and one method each; the host authorizes every object and verifies every upload, and never carries a byte. Which mode applies is the host's answer, from what the producer accepts, what the room's storage can do, and the room's tier.
+ */
+export type TransferMode = "direct" | "proxied";
 /**
  * A ULID in Crockford base32, uppercase. Used for `attributeId` and `profileId`. Chosen over a UUID because the leading 48 bits are a timestamp, so a key-ordered scan of the store is also creation-ordered and a `list` needs no secondary sort. Server-assigned on create; a producer MAY supply one to make a create idempotent, and a maintainer MUST reject a supplied value that already exists rather than silently overwriting.
  */
@@ -6864,6 +6868,25 @@ export interface OfferCredentials {
    */
   authority: string;
 }
+/**
+ * How the uploader will cut a blob for direct transfer, committed before any byte moves: one storage object, written in `partCount` parts of `partSize` bytes (the last may be shorter), each with its digest. Independent of the chunk manifest, because storage imposes part sizes a chunk document cannot carry; the chunk manifest still describes the blob and readers still check it.
+ *
+ * Consistency rules JSON Schema cannot state: `partCount` MUST equal ceil(size / partSize) for the manifest's `size`, and `partDigests` MUST have exactly `partCount` items. Every digest MUST be sha2-256, because it is what the storage itself checks the part against.
+ */
+export interface PartPlan {
+  /**
+   * Bytes per part. One part of the whole blob's size is a single-object write.
+   */
+  partSize: number;
+  partCount: number;
+  /**
+   * The sha2-256 digest of each part's ciphertext, in order.
+   *
+   * @minItems 1
+   * @maxItems 1024
+   */
+  partDigests: [DigestMultibase, ...DigestMultibase[]];
+}
 export interface PasskeyVerificationMethod {
   /**
    * The verificationMethod id as it appears in the DID document: `<did>#passkey-<base64url(sha256(credentialId))>`. The fragment is content-derived so a verifier can locate this VM by recomputing `sha256(credential.id)`.
@@ -8910,6 +8933,30 @@ export interface TrafficOutcome {
    */
   detail?: string;
 }
+/**
+ * One time-limited URL at the room's storage, issued by the host for one object and one method. A bearer credential for its lifetime: whoever holds it may perform exactly that request. A host MUST bind it to one object, one method and — for a write — the part's exact length and checksum, so that storage itself refuses any other bytes, and MUST give it the shortest practical lifetime, never more than 5 minutes. No party logs it.
+ */
+export interface TransferTarget {
+  /**
+   * The part this target writes, or 0 for a read of the whole object.
+   */
+  index: number;
+  method: "PUT" | "GET";
+  /**
+   * Where to send the request. HTTPS only.
+   */
+  url: string;
+  /**
+   * Headers the request MUST carry exactly as given — for a write, the part's length and checksum, which the URL's signature covers. A client adds nothing the storage would treat as signed.
+   */
+  headers?: {
+    [k: string]: string | undefined;
+  };
+  /**
+   * When the storage stops honouring the URL. A request begun after it is refused by the storage.
+   */
+  expiresAt: string;
+}
 export interface TransportObservation {
   /**
    * The binding the document actually travelled on.

package/src/index.ts

@@ -427,16 +427,22 @@ export * as BlobsShared_v0_1 from "./rooms/_shared/0.1/blobs.js";
 export * as RoomShared_v0_1 from "./rooms/_shared/0.1/room.js";
 export * as RoomsBlobsChunk_v0_1 from "./rooms/blobs/chunk/0.1/payload.js";
 export * as RoomsBlobsGet_v0_1 from "./rooms/blobs/get/0.1/payload.js";
+export * as RoomsBlobsGet_v0_2 from "./rooms/blobs/get/0.2/payload.js";
 export * as RoomsBlobsUploadAbort_v0_1 from "./rooms/blobs/upload/abort/0.1/payload.js";
+export * as RoomsBlobsUploadAbort_v0_2 from "./rooms/blobs/upload/abort/0.2/payload.js";
 export * as RoomsBlobsUploadBegin_v0_1 from "./rooms/blobs/upload/begin/0.1/payload.js";
+export * as RoomsBlobsUploadBegin_v0_2 from "./rooms/blobs/upload/begin/0.2/payload.js";
 export * as RoomsBlobsUploadChunk_v0_1 from "./rooms/blobs/upload/chunk/0.1/payload.js";
+export * as RoomsBlobsUploadChunk_v0_2 from "./rooms/blobs/upload/chunk/0.2/payload.js";
 export * as RoomsBlobsUploadCommit_v0_1 from "./rooms/blobs/upload/commit/0.1/payload.js";
+export * as RoomsBlobsUploadCommit_v0_2 from "./rooms/blobs/upload/commit/0.2/payload.js";
 export * as RoomsCreate_v0_1 from "./rooms/create/0.1/payload.js";
 export * as RoomsEpochChain_v0_1 from "./rooms/epoch/chain/0.1/payload.js";
 export * as RoomsEpochCommits_v0_1 from "./rooms/epoch/commits/0.1/payload.js";
 export * as RoomsEpochMint_v0_1 from "./rooms/epoch/mint/0.1/payload.js";
 export * as RoomsEpochPrune_v0_1 from "./rooms/epoch/prune/0.1/payload.js";
 export * as RoomsInfo_v0_1 from "./rooms/info/0.1/payload.js";
+export * as RoomsKeysAct_v0_1 from "./rooms/keys/act/0.1/payload.js";
 export * as RoomsKeysBackfill_v0_1 from "./rooms/keys/backfill/0.1/payload.js";
 export * as RoomsKeysBrowse_v0_1 from "./rooms/keys/browse/0.1/payload.js";
 export * as RoomsKeysChain_v0_1 from "./rooms/keys/chain/0.1/payload.js";
@@ -449,6 +455,7 @@ export * as RoomsKeysPresent_v0_1 from "./rooms/keys/present/0.1/payload.js";
 export * as RoomsKeysPresent_v0_2 from "./rooms/keys/present/0.2/payload.js";
 export * as RoomsKeysRead_v0_1 from "./rooms/keys/read/0.1/payload.js";
 export * as RoomsKeysSeal_v0_1 from "./rooms/keys/seal/0.1/payload.js";
+export * as RoomsKeysSeal_v0_2 from "./rooms/keys/seal/0.2/payload.js";
 export * as RoomsKeysWelcome_v0_1 from "./rooms/keys/welcome/0.1/payload.js";
 export * as RoomsOwnerAnchor_v0_1 from "./rooms/owner/anchor/0.1/payload.js";
 export * as RoomsOwnerClaim_v0_1 from "./rooms/owner/claim/0.1/payload.js";

package/src/rooms/_shared/0.1/blobs.ts

@@ -14,4 +14,4 @@ export interface RoomsSharedFileAndBlobTypes {
  * The definitions this shared schema publishes, hoisted to one declaration each.
  * See "../../../_shared/components.js".
  */
-export type { BlobManifest, BlobRef, FileManifest, RoomLimits, ScopeLimits, TransferId, Usage } from "../../../_shared/components.js";
+export type { BlobManifest, BlobRef, FileManifest, PartPlan, RoomLimits, ScopeLimits, TransferId, TransferMode, TransferTarget, Usage } from "../../../_shared/components.js";