@project-chip/matter.js 0.4.0 → 0.5.0

package/dist/cjs/cluster/definitions/GroupKeyManagementCluster.d.ts

@@ -0,0 +1,1379 @@
+/**
+ * @license
+ * Copyright 2022-2023 Project CHIP Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { BaseClusterComponent, ExtensibleCluster, ClusterForBaseCluster } from "../../cluster/ClusterFactory.js";
+import { BitFlag, BitFlags, TypeFromPartialBitSchema } from "../../schema/BitmapSchema.js";
+import { WritableFabricScopedAttribute, FabricScopedAttribute, FixedAttribute, Command } from "../../cluster/Cluster.js";
+export declare namespace GroupKeyManagement {
+    /**
+     * @see {@link MatterCoreSpecificationV1_1} § 11.2.6.3
+     */
+    const TlvGroupKeyMapStruct: import("../../tlv/TlvObject.js").ObjectSchema<{
+        /**
+         * This field uniquely identifies the group within the scope of the given Fabric.
+         *
+         * @see {@link MatterCoreSpecificationV1_1} § 11.2.6.3.1
+         */
+        groupId: import("../../tlv/TlvObject.js").FieldType<import("../../datatype/GroupId.js").GroupId>;
+        /**
+         * This field references the set of group keys that generate operational group keys for use with this
+         *
+         * group, as specified in Section 4.15.3.5.1, “Group Key Set ID”.
+         *
+         * A GroupKeyMapStruct shall NOT accept GroupKeySetID of 0, which is reserved for the IPK.
+         *
+         * @see {@link MatterCoreSpecificationV1_1} § 11.2.6.3.2
+         */
+        groupKeySetId: import("../../tlv/TlvObject.js").FieldType<number>;
+        fabricIndex: import("../../tlv/TlvObject.js").FieldType<import("../../datatype/FabricIndex.js").FabricIndex>;
+    }>;
+    /**
+     * This field uniquely identifies the group within the scope of the given Fabric.
+     *
+     * @see {@link MatterCoreSpecificationV1_1} § 11.2.6.5
+     */
+    const TlvGroupInfoMapStruct: import("../../tlv/TlvObject.js").ObjectSchema<{
+        groupId: import("../../tlv/TlvObject.js").FieldType<import("../../datatype/GroupId.js").GroupId>;
+        /**
+         * This field provides the list of Endpoint IDs on the Node to which messages to this group shall be forwarded.
+         *
+         * @see {@link MatterCoreSpecificationV1_1} § 11.2.6.5.1
+         */
+        endpoints: import("../../tlv/TlvObject.js").FieldType<import("../../datatype/EndpointNumber.js").EndpointNumber[]>;
+        /**
+         * This field provides a name for the group. This field shall contain the last GroupName written for a given
+         * GroupId on any Endpoint via the Groups cluster.
+         *
+         * @see {@link MatterCoreSpecificationV1_1} § 11.2.6.5.2
+         */
+        groupName: import("../../tlv/TlvObject.js").OptionalFieldType<string>;
+        fabricIndex: import("../../tlv/TlvObject.js").FieldType<import("../../datatype/FabricIndex.js").FabricIndex>;
+    }>;
+    /**
+     * @see {@link MatterCoreSpecificationV1_1} § 11.2.6.1
+     */
+    const enum GroupKeySecurityPolicy {
+        /**
+         * Message counter synchronization using trust-first
+         */
+        TrustFirst = 0,
+        /**
+         * Message counter synchronization using cache-and-sync
+         */
+        CacheAndSync = 1
+    }
+    /**
+     * @see {@link MatterCoreSpecificationV1_1} § 11.2.6.2
+     */
+    const enum GroupKeyMulticastPolicy {
+        /**
+         * Indicates filtering of multicast messages for a specific Group ID
+         *
+         * The 16-bit Group Identifier of the Multicast Address shall be the Group ID of the group.
+         *
+         * @see {@link MatterCoreSpecificationV1_1} § 11.2.6.2.1
+         */
+        PerGroupId = 0,
+        /**
+         * Indicates not filtering of multicast messages
+         *
+         * The 16-bit Group Identifier of the Multicast Address shall be 0xFFFF.
+         *
+         * @see {@link MatterCoreSpecificationV1_1} § 11.2.6.2.2
+         */
+        AllNodes = 1
+    }
+    /**
+     * This field shall provide the fabric-unique index for the associated group key set, as specified in Section
+     * 4.15.3.5.1, “Group Key Set ID”.
+     *
+     * @see {@link MatterCoreSpecificationV1_1} § 11.2.6.4
+     */
+    const TlvGroupKeySetStruct: import("../../tlv/TlvObject.js").ObjectSchema<{
+        groupKeySetId: import("../../tlv/TlvObject.js").FieldType<number>;
+        /**
+         * This field shall provide the security policy for an operational group key set.
+         *
+         * When CacheAndSync is not supported in the FeatureMap of this cluster, any action attempting to set
+         * CacheAndSync in the GroupKeySecurityPolicy field shall fail with an INVALID_COMMAND error.
+         *
+         * @see {@link MatterCoreSpecificationV1_1} § 11.2.6.4.1
+         */
+        groupKeySecurityPolicy: import("../../tlv/TlvObject.js").FieldType<GroupKeySecurityPolicy>;
+        /**
+         * This field, if not null, shall be the root credential used in the derivation of an operational group key for
+         * epoch slot 0 of the given group key set. If EpochKey0 is not null, EpochStartTime0 shall NOT be null.
+         *
+         * @see {@link MatterCoreSpecificationV1_1} § 11.2.6.4.2
+         */
+        epochKey0: import("../../tlv/TlvObject.js").FieldType<Uint8Array | null>;
+        /**
+         * This field, if not null, shall define when EpochKey0 becomes valid as specified by Section 4.15.3, “Epoch
+         * Keys”. Units are absolute UTC time in microseconds encoded using the epoch-us representation.
+         *
+         * @see {@link MatterCoreSpecificationV1_1} § 11.2.6.4.3
+         */
+        epochStartTime0: import("../../tlv/TlvObject.js").FieldType<number | bigint | null>;
+        /**
+         * This field, if not null, shall be the root credential used in the derivation of an operational group key for
+         * epoch slot 1 of the given group key set. If EpochKey1 is not null, EpochStartTime1 shall NOT be null.
+         *
+         * @see {@link MatterCoreSpecificationV1_1} § 11.2.6.4.4
+         */
+        epochKey1: import("../../tlv/TlvObject.js").FieldType<Uint8Array | null>;
+        /**
+         * This field, if not null, shall define when EpochKey1 becomes valid as specified by Section 4.15.3, “Epoch
+         * Keys”. Units are absolute UTC time in microseconds encoded using the epoch-us representation.
+         *
+         * @see {@link MatterCoreSpecificationV1_1} § 11.2.6.4.5
+         */
+        epochStartTime1: import("../../tlv/TlvObject.js").FieldType<number | bigint | null>;
+        /**
+         * This field, if not null, shall be the root credential used in the derivation of an operational group key for
+         * epoch slot 2 of the given group key set. If EpochKey2 is not null, EpochStartTime2 shall NOT be null.
+         *
+         * @see {@link MatterCoreSpecificationV1_1} § 11.2.6.4.6
+         */
+        epochKey2: import("../../tlv/TlvObject.js").FieldType<Uint8Array | null>;
+        /**
+         * This field, if not null, shall define when EpochKey2 becomes valid as specified by Section 4.15.3, “Epoch
+         * Keys”. Units are absolute UTC time in microseconds encoded using the epoch-us representation.
+         *
+         * @see {@link MatterCoreSpecificationV1_1} § 11.2.6.4.7
+         */
+        epochStartTime2: import("../../tlv/TlvObject.js").FieldType<number | bigint | null>;
+        /**
+         * This field specifies how the IPv6 Multicast Address shall be formed for groups using this operational group
+         * key set.
+         *
+         * The PerGroupID method maximizes filtering of multicast messages, so that receiving nodes receive only
+         * multicast messages for groups to which they are subscribed.
+         *
+         * The AllNodes method minimizes the number of multicast addresses to which a receiver node needs to subscribe.
+         *
+         * NOTE Support for GroupKeyMulticastPolicy is provisional. Correct default behavior is that implied by value
+         * PerGroupID.
+         *
+         * @see {@link MatterCoreSpecificationV1_1} § 11.2.6.4.8
+         */
+        groupKeyMulticastPolicy: import("../../tlv/TlvObject.js").FieldType<GroupKeyMulticastPolicy>;
+    }>;
+    /**
+     * Input to the GroupKeyManagement keySetWrite command
+     *
+     * @see {@link MatterCoreSpecificationV1_1} § 11.2.8.1
+     */
+    const TlvKeySetWriteRequest: import("../../tlv/TlvObject.js").ObjectSchema<{
+        groupKeySet: import("../../tlv/TlvObject.js").FieldType<import("../../tlv/TlvObject.js").TypeFromFields<{
+            groupKeySetId: import("../../tlv/TlvObject.js").FieldType<number>;
+            /**
+             * This field shall provide the security policy for an operational group key set.
+             *
+             * When CacheAndSync is not supported in the FeatureMap of this cluster, any action attempting to set
+             * CacheAndSync in the GroupKeySecurityPolicy field shall fail with an INVALID_COMMAND error.
+             *
+             * @see {@link MatterCoreSpecificationV1_1} § 11.2.6.4.1
+             */
+            groupKeySecurityPolicy: import("../../tlv/TlvObject.js").FieldType<GroupKeySecurityPolicy>;
+            /**
+             * This field, if not null, shall be the root credential used in the derivation of an operational group key for
+             * epoch slot 0 of the given group key set. If EpochKey0 is not null, EpochStartTime0 shall NOT be null.
+             *
+             * @see {@link MatterCoreSpecificationV1_1} § 11.2.6.4.2
+             */
+            epochKey0: import("../../tlv/TlvObject.js").FieldType<Uint8Array | null>;
+            /**
+             * This field, if not null, shall define when EpochKey0 becomes valid as specified by Section 4.15.3, “Epoch
+             * Keys”. Units are absolute UTC time in microseconds encoded using the epoch-us representation.
+             *
+             * @see {@link MatterCoreSpecificationV1_1} § 11.2.6.4.3
+             */
+            epochStartTime0: import("../../tlv/TlvObject.js").FieldType<number | bigint | null>;
+            /**
+             * This field, if not null, shall be the root credential used in the derivation of an operational group key for
+             * epoch slot 1 of the given group key set. If EpochKey1 is not null, EpochStartTime1 shall NOT be null.
+             *
+             * @see {@link MatterCoreSpecificationV1_1} § 11.2.6.4.4
+             */
+            epochKey1: import("../../tlv/TlvObject.js").FieldType<Uint8Array | null>;
+            /**
+             * This field, if not null, shall define when EpochKey1 becomes valid as specified by Section 4.15.3, “Epoch
+             * Keys”. Units are absolute UTC time in microseconds encoded using the epoch-us representation.
+             *
+             * @see {@link MatterCoreSpecificationV1_1} § 11.2.6.4.5
+             */
+            epochStartTime1: import("../../tlv/TlvObject.js").FieldType<number | bigint | null>;
+            /**
+             * This field, if not null, shall be the root credential used in the derivation of an operational group key for
+             * epoch slot 2 of the given group key set. If EpochKey2 is not null, EpochStartTime2 shall NOT be null.
+             *
+             * @see {@link MatterCoreSpecificationV1_1} § 11.2.6.4.6
+             */
+            epochKey2: import("../../tlv/TlvObject.js").FieldType<Uint8Array | null>;
+            /**
+             * This field, if not null, shall define when EpochKey2 becomes valid as specified by Section 4.15.3, “Epoch
+             * Keys”. Units are absolute UTC time in microseconds encoded using the epoch-us representation.
+             *
+             * @see {@link MatterCoreSpecificationV1_1} § 11.2.6.4.7
+             */
+            epochStartTime2: import("../../tlv/TlvObject.js").FieldType<number | bigint | null>;
+            /**
+             * This field specifies how the IPv6 Multicast Address shall be formed for groups using this operational group
+             * key set.
+             *
+             * The PerGroupID method maximizes filtering of multicast messages, so that receiving nodes receive only
+             * multicast messages for groups to which they are subscribed.
+             *
+             * The AllNodes method minimizes the number of multicast addresses to which a receiver node needs to subscribe.
+             *
+             * NOTE Support for GroupKeyMulticastPolicy is provisional. Correct default behavior is that implied by value
+             * PerGroupID.
+             *
+             * @see {@link MatterCoreSpecificationV1_1} § 11.2.6.4.8
+             */
+            groupKeyMulticastPolicy: import("../../tlv/TlvObject.js").FieldType<GroupKeyMulticastPolicy>;
+        }>>;
+    }>;
+    /**
+     * Input to the GroupKeyManagement keySetRead command
+     *
+     * @see {@link MatterCoreSpecificationV1_1} § 11.2.8.2
+     */
+    const TlvKeySetReadRequest: import("../../tlv/TlvObject.js").ObjectSchema<{
+        groupKeySetId: import("../../tlv/TlvObject.js").FieldType<number>;
+    }>;
+    /**
+     * This command shall be generated in response to the KeySetRead command, if a valid Group Key Set was found. It
+     * shall contain the configuration of the requested Group Key Set, with the EpochKey0, EpochKey1 and EpochKey2 key
+     * contents replaced by null.
+     *
+     * @see {@link MatterCoreSpecificationV1_1} § 11.2.8.3
+     */
+    const TlvKeySetReadResponse: import("../../tlv/TlvObject.js").ObjectSchema<{
+        groupKeySet: import("../../tlv/TlvObject.js").FieldType<import("../../tlv/TlvObject.js").TypeFromFields<{
+            groupKeySetId: import("../../tlv/TlvObject.js").FieldType<number>;
+            /**
+             * This field shall provide the security policy for an operational group key set.
+             *
+             * When CacheAndSync is not supported in the FeatureMap of this cluster, any action attempting to set
+             * CacheAndSync in the GroupKeySecurityPolicy field shall fail with an INVALID_COMMAND error.
+             *
+             * @see {@link MatterCoreSpecificationV1_1} § 11.2.6.4.1
+             */
+            groupKeySecurityPolicy: import("../../tlv/TlvObject.js").FieldType<GroupKeySecurityPolicy>;
+            /**
+             * This field, if not null, shall be the root credential used in the derivation of an operational group key for
+             * epoch slot 0 of the given group key set. If EpochKey0 is not null, EpochStartTime0 shall NOT be null.
+             *
+             * @see {@link MatterCoreSpecificationV1_1} § 11.2.6.4.2
+             */
+            epochKey0: import("../../tlv/TlvObject.js").FieldType<Uint8Array | null>;
+            /**
+             * This field, if not null, shall define when EpochKey0 becomes valid as specified by Section 4.15.3, “Epoch
+             * Keys”. Units are absolute UTC time in microseconds encoded using the epoch-us representation.
+             *
+             * @see {@link MatterCoreSpecificationV1_1} § 11.2.6.4.3
+             */
+            epochStartTime0: import("../../tlv/TlvObject.js").FieldType<number | bigint | null>;
+            /**
+             * This field, if not null, shall be the root credential used in the derivation of an operational group key for
+             * epoch slot 1 of the given group key set. If EpochKey1 is not null, EpochStartTime1 shall NOT be null.
+             *
+             * @see {@link MatterCoreSpecificationV1_1} § 11.2.6.4.4
+             */
+            epochKey1: import("../../tlv/TlvObject.js").FieldType<Uint8Array | null>;
+            /**
+             * This field, if not null, shall define when EpochKey1 becomes valid as specified by Section 4.15.3, “Epoch
+             * Keys”. Units are absolute UTC time in microseconds encoded using the epoch-us representation.
+             *
+             * @see {@link MatterCoreSpecificationV1_1} § 11.2.6.4.5
+             */
+            epochStartTime1: import("../../tlv/TlvObject.js").FieldType<number | bigint | null>;
+            /**
+             * This field, if not null, shall be the root credential used in the derivation of an operational group key for
+             * epoch slot 2 of the given group key set. If EpochKey2 is not null, EpochStartTime2 shall NOT be null.
+             *
+             * @see {@link MatterCoreSpecificationV1_1} § 11.2.6.4.6
+             */
+            epochKey2: import("../../tlv/TlvObject.js").FieldType<Uint8Array | null>;
+            /**
+             * This field, if not null, shall define when EpochKey2 becomes valid as specified by Section 4.15.3, “Epoch
+             * Keys”. Units are absolute UTC time in microseconds encoded using the epoch-us representation.
+             *
+             * @see {@link MatterCoreSpecificationV1_1} § 11.2.6.4.7
+             */
+            epochStartTime2: import("../../tlv/TlvObject.js").FieldType<number | bigint | null>;
+            /**
+             * This field specifies how the IPv6 Multicast Address shall be formed for groups using this operational group
+             * key set.
+             *
+             * The PerGroupID method maximizes filtering of multicast messages, so that receiving nodes receive only
+             * multicast messages for groups to which they are subscribed.
+             *
+             * The AllNodes method minimizes the number of multicast addresses to which a receiver node needs to subscribe.
+             *
+             * NOTE Support for GroupKeyMulticastPolicy is provisional. Correct default behavior is that implied by value
+             * PerGroupID.
+             *
+             * @see {@link MatterCoreSpecificationV1_1} § 11.2.6.4.8
+             */
+            groupKeyMulticastPolicy: import("../../tlv/TlvObject.js").FieldType<GroupKeyMulticastPolicy>;
+        }>>;
+    }>;
+    /**
+     * Input to the GroupKeyManagement keySetRemove command
+     *
+     * @see {@link MatterCoreSpecificationV1_1} § 11.2.8.4
+     */
+    const TlvKeySetRemoveRequest: import("../../tlv/TlvObject.js").ObjectSchema<{
+        groupKeySetId: import("../../tlv/TlvObject.js").FieldType<number>;
+    }>;
+    /**
+     * This command shall be generated in response to KeySetReadAllIndices and it shall contain the list of
+     * GroupKeySetID for all Group Key Sets associated with the scoped Fabric.
+     *
+     * GroupKeySetIDs
+     *
+     * This field references the set of group keys that generate operational group keys for use with the accessing
+     * fabric.
+     *
+     * Each entry in GroupKeySetIDs is a GroupKeySetID field.
+     *
+     * @see {@link MatterCoreSpecificationV1_1} § 11.2.8.6
+     */
+    const TlvKeySetReadAllIndicesResponse: import("../../tlv/TlvObject.js").ObjectSchema<{
+        groupKeySetIDs: import("../../tlv/TlvObject.js").FieldType<number[]>;
+    }>;
+    /**
+     * These are optional features supported by GroupKeyManagementCluster.
+     *
+     * @see {@link MatterCoreSpecificationV1_1} § 11.2.5
+     */
+    enum Feature {
+        /**
+         * CacheAndSync
+         *
+         * The ability to support CacheAndSync security policy and MCSP.
+         */
+        CacheAndSync = "CacheAndSync"
+    }
+    /**
+     * These elements and properties are present in all GroupKeyManagement clusters.
+     */
+    const Base: BaseClusterComponent<{
+        /**
+         * CacheAndSync
+         *
+         * The ability to support CacheAndSync security policy and MCSP.
+         */
+        cacheAndSync: BitFlag;
+    }, {
+        /**
+         * This attribute is a list of GroupKeyMapStruct entries. Each entry associates a logical Group Id with a
+         * particular group key set.
+         *
+         * @see {@link MatterCoreSpecificationV1_1} § 11.2.7.1
+         */
+        groupKeyMap: WritableFabricScopedAttribute<import("../../tlv/TlvObject.js").TypeFromFields<{
+            /**
+             * This field uniquely identifies the group within the scope of the given Fabric.
+             *
+             * @see {@link MatterCoreSpecificationV1_1} § 11.2.6.3.1
+             */
+            groupId: import("../../tlv/TlvObject.js").FieldType<import("../../datatype/GroupId.js").GroupId>;
+            /**
+             * This field references the set of group keys that generate operational group keys for use with this
+             *
+             * group, as specified in Section 4.15.3.5.1, “Group Key Set ID”.
+             *
+             * A GroupKeyMapStruct shall NOT accept GroupKeySetID of 0, which is reserved for the IPK.
+             *
+             * @see {@link MatterCoreSpecificationV1_1} § 11.2.6.3.2
+             */
+            groupKeySetId: import("../../tlv/TlvObject.js").FieldType<number>;
+            fabricIndex: import("../../tlv/TlvObject.js").FieldType<import("../../datatype/FabricIndex.js").FabricIndex>;
+        }>[], any>;
+        /**
+         * This attribute is a list of GroupInfoMapStruct entries. Each entry provides read-only information about
+         * how a given logical Group ID maps to a particular set of endpoints, and a name for the group. The
+         * content of this attribute reflects data managed via the Groups cluster (see AppClusters), and is in
+         * general terms referred to as the 'node-wide Group Table'.
+         *
+         * The GroupTable shall NOT contain any entry whose GroupInfoMapStruct has an empty Endpoints list. If a
+         * RemoveGroup or RemoveAllGroups command causes the removal of a group mapping from its last mapped
+         * endpoint, the entire GroupTable entry for that given GroupId shall be removed.
+         *
+         * @see {@link MatterCoreSpecificationV1_1} § 11.2.7.2
+         */
+        groupTable: FabricScopedAttribute<import("../../tlv/TlvObject.js").TypeFromFields<{
+            groupId: import("../../tlv/TlvObject.js").FieldType<import("../../datatype/GroupId.js").GroupId>;
+            /**
+             * This field provides the list of Endpoint IDs on the Node to which messages to this group shall be forwarded.
+             *
+             * @see {@link MatterCoreSpecificationV1_1} § 11.2.6.5.1
+             */
+            endpoints: import("../../tlv/TlvObject.js").FieldType<import("../../datatype/EndpointNumber.js").EndpointNumber[]>;
+            /**
+             * This field provides a name for the group. This field shall contain the last GroupName written for a given
+             * GroupId on any Endpoint via the Groups cluster.
+             *
+             * @see {@link MatterCoreSpecificationV1_1} § 11.2.6.5.2
+             */
+            groupName: import("../../tlv/TlvObject.js").OptionalFieldType<string>;
+            fabricIndex: import("../../tlv/TlvObject.js").FieldType<import("../../datatype/FabricIndex.js").FabricIndex>;
+        }>[], any>;
+        /**
+         * This attribute shall indicate the maximum number of groups that this node supports per fabric. The value
+         * of this attribute shall be set to be no less than the required minimum supported groups as specified in
+         * Group Limits. The length of the GroupKeyMap and GroupTable list attributes shall NOT exceed the value of
+         * the MaxGroupsPerFabric attribute multiplied by the number of supported fabrics.
+         *
+         * @see {@link MatterCoreSpecificationV1_1} § 11.2.7.3
+         */
+        maxGroupsPerFabric: FixedAttribute<number, any>;
+        /**
+         * This attribute shall indicate the maximum number of group key sets this node supports per fabric. The
+         * value of this attribute shall be set according to the minimum number of group key sets to support as
+         * specified in Group Limits.
+         *
+         * @see {@link MatterCoreSpecificationV1_1} § 11.2.7.4
+         */
+        maxGroupKeysPerFabric: FixedAttribute<number, any>;
+    }, {
+        /**
+         * This command is used by Administrators to set the state of a given Group Key Set, including atomically
+         * updating the state of all epoch keys.
+         *
+         * Effect on Receipt
+         *
+         * If the EpochKey0 field is null or its associated EpochStartTime0 field is null, then this command shall
+         * fail with an INVALID_COMMAND status code sent back to the initiator.
+         *
+         * If the EpochKey1 field is not null, its associated EpochStartTime1 field shall contain a later epoch
+         * start time than the epoch start time found in the EpochStartTime0 field. Otherwise this command shall
+         * fail with an INVALID_COMMAND status code sent back to the initiator.
+         *
+         * If the EpochKey2 field is not null, then the EpochKey1 field shall NOT be null. Otherwise this command
+         * shall fail with an INVALID_COMMAND status code sent back to the initiator.
+         *
+         * If the EpochKey2 field is not null, its associated EpochStartTime2 field shall contain a later epoch
+         * start time than the epoch start time found in the EpochStartTime1 field. Otherwise this command shall
+         * fail with an INVALID_COMMAND status code sent back to the initiator.
+         *
+         * If there exists a Group Key Set associated with the accessing fabric which has the same GroupKeySetID as
+         * that provided in the GroupKeySet field, then the contents of that group key set shall be replaced. A
+         * replacement shall be done by executing the equivalent of entirely removing the previous Group Key Set
+         * with the given GroupKeySetID, followed by an addition of a Group Key Set with the provided
+         * configuration. Otherwise, if the GroupKeySetID did not match an existing entry, a new Group Key Set
+         * associated with the accessing fabric shall be created with the provided data. The Group Key Set shall be
+         * written to non-volatile storage.
+         *
+         * Upon completion, this command shall send a status code back to the initiator:
+         *
+         *   • If the Group Key Set was properly installed or updated on the Node, the status code shall be set to
+         *     SUCCESS.
+         *
+         *   • If there are insufficient resources on the receiver to store an additional Group Key Set, the status
+         *     code shall be set to RESOURCE_EXHAUSTED (see group key limits);
+         *
+         *   • Otherwise, this status code shall be set to FAILURE.
+         *
+         * @see {@link MatterCoreSpecificationV1_1} § 11.2.8.1
+         */
+        keySetWrite: Command<import("../../tlv/TlvObject.js").TypeFromFields<{
+            groupKeySet: import("../../tlv/TlvObject.js").FieldType<import("../../tlv/TlvObject.js").TypeFromFields<{
+                groupKeySetId: import("../../tlv/TlvObject.js").FieldType<number>;
+                /**
+                 * This field shall provide the security policy for an operational group key set.
+                 *
+                 * When CacheAndSync is not supported in the FeatureMap of this cluster, any action attempting to set
+                 * CacheAndSync in the GroupKeySecurityPolicy field shall fail with an INVALID_COMMAND error.
+                 *
+                 * @see {@link MatterCoreSpecificationV1_1} § 11.2.6.4.1
+                 */
+                groupKeySecurityPolicy: import("../../tlv/TlvObject.js").FieldType<GroupKeySecurityPolicy>;
+                /**
+                 * This field, if not null, shall be the root credential used in the derivation of an operational group key for
+                 * epoch slot 0 of the given group key set. If EpochKey0 is not null, EpochStartTime0 shall NOT be null.
+                 *
+                 * @see {@link MatterCoreSpecificationV1_1} § 11.2.6.4.2
+                 */
+                epochKey0: import("../../tlv/TlvObject.js").FieldType<Uint8Array | null>;
+                /**
+                 * This field, if not null, shall define when EpochKey0 becomes valid as specified by Section 4.15.3, “Epoch
+                 * Keys”. Units are absolute UTC time in microseconds encoded using the epoch-us representation.
+                 *
+                 * @see {@link MatterCoreSpecificationV1_1} § 11.2.6.4.3
+                 */
+                epochStartTime0: import("../../tlv/TlvObject.js").FieldType<number | bigint | null>;
+                /**
+                 * This field, if not null, shall be the root credential used in the derivation of an operational group key for
+                 * epoch slot 1 of the given group key set. If EpochKey1 is not null, EpochStartTime1 shall NOT be null.
+                 *
+                 * @see {@link MatterCoreSpecificationV1_1} § 11.2.6.4.4
+                 */
+                epochKey1: import("../../tlv/TlvObject.js").FieldType<Uint8Array | null>;
+                /**
+                 * This field, if not null, shall define when EpochKey1 becomes valid as specified by Section 4.15.3, “Epoch
+                 * Keys”. Units are absolute UTC time in microseconds encoded using the epoch-us representation.
+                 *
+                 * @see {@link MatterCoreSpecificationV1_1} § 11.2.6.4.5
+                 */
+                epochStartTime1: import("../../tlv/TlvObject.js").FieldType<number | bigint | null>;
+                /**
+                 * This field, if not null, shall be the root credential used in the derivation of an operational group key for
+                 * epoch slot 2 of the given group key set. If EpochKey2 is not null, EpochStartTime2 shall NOT be null.
+                 *
+                 * @see {@link MatterCoreSpecificationV1_1} § 11.2.6.4.6
+                 */
+                epochKey2: import("../../tlv/TlvObject.js").FieldType<Uint8Array | null>;
+                /**
+                 * This field, if not null, shall define when EpochKey2 becomes valid as specified by Section 4.15.3, “Epoch
+                 * Keys”. Units are absolute UTC time in microseconds encoded using the epoch-us representation.
+                 *
+                 * @see {@link MatterCoreSpecificationV1_1} § 11.2.6.4.7
+                 */
+                epochStartTime2: import("../../tlv/TlvObject.js").FieldType<number | bigint | null>;
+                /**
+                 * This field specifies how the IPv6 Multicast Address shall be formed for groups using this operational group
+                 * key set.
+                 *
+                 * The PerGroupID method maximizes filtering of multicast messages, so that receiving nodes receive only
+                 * multicast messages for groups to which they are subscribed.
+                 *
+                 * The AllNodes method minimizes the number of multicast addresses to which a receiver node needs to subscribe.
+                 *
+                 * NOTE Support for GroupKeyMulticastPolicy is provisional. Correct default behavior is that implied by value
+                 * PerGroupID.
+                 *
+                 * @see {@link MatterCoreSpecificationV1_1} § 11.2.6.4.8
+                 */
+                groupKeyMulticastPolicy: import("../../tlv/TlvObject.js").FieldType<GroupKeyMulticastPolicy>;
+            }>>;
+        }>, void, any>;
+        /**
+         * This command is used by Administrators to read the state of a given Group Key Set.
+         *
+         * Effect on Receipt
+         *
+         * If there exists a Group Key Set associated with the accessing fabric which has the same GroupKeySetID as
+         * that provided in the GroupKeySetID field, then the contents of that Group Key Set shall be sent in a
+         * KeySetReadResponse command, but with the EpochKey0, EpochKey1 and EpochKey2 fields replaced by null.
+         *
+         * Otherwise, if the GroupKeySetID does not refer to a Group Key Set associated with the accessing fabric,
+         * then this command shall fail with a NOT_FOUND status code.
+         *
+         * @see {@link MatterCoreSpecificationV1_1} § 11.2.8.2
+         */
+        keySetRead: Command<import("../../tlv/TlvObject.js").TypeFromFields<{
+            groupKeySetId: import("../../tlv/TlvObject.js").FieldType<number>;
+        }>, import("../../tlv/TlvObject.js").TypeFromFields<{
+            groupKeySet: import("../../tlv/TlvObject.js").FieldType<import("../../tlv/TlvObject.js").TypeFromFields<{
+                groupKeySetId: import("../../tlv/TlvObject.js").FieldType<number>;
+                /**
+                 * This field shall provide the security policy for an operational group key set.
+                 *
+                 * When CacheAndSync is not supported in the FeatureMap of this cluster, any action attempting to set
+                 * CacheAndSync in the GroupKeySecurityPolicy field shall fail with an INVALID_COMMAND error.
+                 *
+                 * @see {@link MatterCoreSpecificationV1_1} § 11.2.6.4.1
+                 */
+                groupKeySecurityPolicy: import("../../tlv/TlvObject.js").FieldType<GroupKeySecurityPolicy>;
+                /**
+                 * This field, if not null, shall be the root credential used in the derivation of an operational group key for
+                 * epoch slot 0 of the given group key set. If EpochKey0 is not null, EpochStartTime0 shall NOT be null.
+                 *
+                 * @see {@link MatterCoreSpecificationV1_1} § 11.2.6.4.2
+                 */
+                epochKey0: import("../../tlv/TlvObject.js").FieldType<Uint8Array | null>;
+                /**
+                 * This field, if not null, shall define when EpochKey0 becomes valid as specified by Section 4.15.3, “Epoch
+                 * Keys”. Units are absolute UTC time in microseconds encoded using the epoch-us representation.
+                 *
+                 * @see {@link MatterCoreSpecificationV1_1} § 11.2.6.4.3
+                 */
+                epochStartTime0: import("../../tlv/TlvObject.js").FieldType<number | bigint | null>;
+                /**
+                 * This field, if not null, shall be the root credential used in the derivation of an operational group key for
+                 * epoch slot 1 of the given group key set. If EpochKey1 is not null, EpochStartTime1 shall NOT be null.
+                 *
+                 * @see {@link MatterCoreSpecificationV1_1} § 11.2.6.4.4
+                 */
+                epochKey1: import("../../tlv/TlvObject.js").FieldType<Uint8Array | null>;
+                /**
+                 * This field, if not null, shall define when EpochKey1 becomes valid as specified by Section 4.15.3, “Epoch
+                 * Keys”. Units are absolute UTC time in microseconds encoded using the epoch-us representation.
+                 *
+                 * @see {@link MatterCoreSpecificationV1_1} § 11.2.6.4.5
+                 */
+                epochStartTime1: import("../../tlv/TlvObject.js").FieldType<number | bigint | null>;
+                /**
+                 * This field, if not null, shall be the root credential used in the derivation of an operational group key for
+                 * epoch slot 2 of the given group key set. If EpochKey2 is not null, EpochStartTime2 shall NOT be null.
+                 *
+                 * @see {@link MatterCoreSpecificationV1_1} § 11.2.6.4.6
+                 */
+                epochKey2: import("../../tlv/TlvObject.js").FieldType<Uint8Array | null>;
+                /**
+                 * This field, if not null, shall define when EpochKey2 becomes valid as specified by Section 4.15.3, “Epoch
+                 * Keys”. Units are absolute UTC time in microseconds encoded using the epoch-us representation.
+                 *
+                 * @see {@link MatterCoreSpecificationV1_1} § 11.2.6.4.7
+                 */
+                epochStartTime2: import("../../tlv/TlvObject.js").FieldType<number | bigint | null>;
+                /**
+                 * This field specifies how the IPv6 Multicast Address shall be formed for groups using this operational group
+                 * key set.
+                 *
+                 * The PerGroupID method maximizes filtering of multicast messages, so that receiving nodes receive only
+                 * multicast messages for groups to which they are subscribed.
+                 *
+                 * The AllNodes method minimizes the number of multicast addresses to which a receiver node needs to subscribe.
+                 *
+                 * NOTE Support for GroupKeyMulticastPolicy is provisional. Correct default behavior is that implied by value
+                 * PerGroupID.
+                 *
+                 * @see {@link MatterCoreSpecificationV1_1} § 11.2.6.4.8
+                 */
+                groupKeyMulticastPolicy: import("../../tlv/TlvObject.js").FieldType<GroupKeyMulticastPolicy>;
+            }>>;
+        }>, any>;
+        /**
+         * This command is used by Administrators to remove all state of a given Group Key Set.
+         *
+         * Effect on Receipt
+         *
+         * If there exists a Group Key Set associated with the accessing fabric which has the same GroupKeySetID as
+         * that provided in the GroupKeySetID field, then the contents of that Group Key Set shall be removed,
+         * including all epoch keys it contains.
+         *
+         * If there exist any entries for the accessing fabric within the GroupKeyMap attribute that refer to the
+         * GroupKeySetID just removed, then these entries shall be removed from that list.
+         *
+         * This command shall fail with an INVALID_COMMAND status code back to the initiator if the GroupKeySetID
+         * being removed is 0, which is the Key Set associated with the Identity Protection Key (IPK). The only
+         * method to remove the IPK is usage of the RemoveFabric command or any operation which causes the
+         * equivalent of a RemoveFabric to occur by side-effect.
+         *
+         * This command shall send a SUCCESS status code back to the initiator on success, or NOT_FOUND if the
+         * GroupKeySetID requested did not exist.
+         *
+         * @see {@link MatterCoreSpecificationV1_1} § 11.2.8.4
+         */
+        keySetRemove: Command<import("../../tlv/TlvObject.js").TypeFromFields<{
+            groupKeySetId: import("../../tlv/TlvObject.js").FieldType<number>;
+        }>, void, any>;
+        /**
+         * This command is used by Administrators to query a list of all Group Key Sets associated with the
+         * accessing fabric.
+         *
+         * Effect on Receipt
+         *
+         * Upon receipt, this command shall iterate all stored GroupKeySetStruct associated with the accessing
+         * fabric and generate a KeySetReadAllIndicesResponse command containing the list of GroupKeySetID values
+         * from those structs.
+         *
+         * @see {@link MatterCoreSpecificationV1_1} § 11.2.8.5
+         */
+        keySetReadAllIndices: Command<void, import("../../tlv/TlvObject.js").TypeFromFields<{
+            groupKeySetIDs: import("../../tlv/TlvObject.js").FieldType<number[]>;
+        }>, any>;
+    }, import("../../cluster/Cluster.js").Events>;
+    /**
+     * Group Key Management
+     *
+     * The Group Key Management Cluster is the mechanism by which group keys are managed.
+     *
+     * GroupKeyManagementCluster supports optional features that you can enable with the
+     * GroupKeyManagementCluster.with() factory method.
+     *
+     * @see {@link MatterCoreSpecificationV1_1} § 11.2
+     */
+    const Cluster: ExtensibleCluster<{
+        /**
+         * CacheAndSync
+         *
+         * The ability to support CacheAndSync security policy and MCSP.
+         */
+        cacheAndSync: BitFlag;
+    }, TypeFromPartialBitSchema<{
+        /**
+         * CacheAndSync
+         *
+         * The ability to support CacheAndSync security policy and MCSP.
+         */
+        cacheAndSync: BitFlag;
+    }>, import("../../util/Type.js").Merge<{
+        /**
+         * This attribute is a list of GroupKeyMapStruct entries. Each entry associates a logical Group Id with a
+         * particular group key set.
+         *
+         * @see {@link MatterCoreSpecificationV1_1} § 11.2.7.1
+         */
+        groupKeyMap: WritableFabricScopedAttribute<import("../../tlv/TlvObject.js").TypeFromFields<{
+            /**
+             * This field uniquely identifies the group within the scope of the given Fabric.
+             *
+             * @see {@link MatterCoreSpecificationV1_1} § 11.2.6.3.1
+             */
+            groupId: import("../../tlv/TlvObject.js").FieldType<import("../../datatype/GroupId.js").GroupId>;
+            /**
+             * This field references the set of group keys that generate operational group keys for use with this
+             *
+             * group, as specified in Section 4.15.3.5.1, “Group Key Set ID”.
+             *
+             * A GroupKeyMapStruct shall NOT accept GroupKeySetID of 0, which is reserved for the IPK.
+             *
+             * @see {@link MatterCoreSpecificationV1_1} § 11.2.6.3.2
+             */
+            groupKeySetId: import("../../tlv/TlvObject.js").FieldType<number>;
+            fabricIndex: import("../../tlv/TlvObject.js").FieldType<import("../../datatype/FabricIndex.js").FabricIndex>;
+        }>[], any>;
+        /**
+         * This attribute is a list of GroupInfoMapStruct entries. Each entry provides read-only information about
+         * how a given logical Group ID maps to a particular set of endpoints, and a name for the group. The
+         * content of this attribute reflects data managed via the Groups cluster (see AppClusters), and is in
+         * general terms referred to as the 'node-wide Group Table'.
+         *
+         * The GroupTable shall NOT contain any entry whose GroupInfoMapStruct has an empty Endpoints list. If a
+         * RemoveGroup or RemoveAllGroups command causes the removal of a group mapping from its last mapped
+         * endpoint, the entire GroupTable entry for that given GroupId shall be removed.
+         *
+         * @see {@link MatterCoreSpecificationV1_1} § 11.2.7.2
+         */
+        groupTable: FabricScopedAttribute<import("../../tlv/TlvObject.js").TypeFromFields<{
+            groupId: import("../../tlv/TlvObject.js").FieldType<import("../../datatype/GroupId.js").GroupId>;
+            /**
+             * This field provides the list of Endpoint IDs on the Node to which messages to this group shall be forwarded.
+             *
+             * @see {@link MatterCoreSpecificationV1_1} § 11.2.6.5.1
+             */
+            endpoints: import("../../tlv/TlvObject.js").FieldType<import("../../datatype/EndpointNumber.js").EndpointNumber[]>;
+            /**
+             * This field provides a name for the group. This field shall contain the last GroupName written for a given
+             * GroupId on any Endpoint via the Groups cluster.
+             *
+             * @see {@link MatterCoreSpecificationV1_1} § 11.2.6.5.2
+             */
+            groupName: import("../../tlv/TlvObject.js").OptionalFieldType<string>;
+            fabricIndex: import("../../tlv/TlvObject.js").FieldType<import("../../datatype/FabricIndex.js").FabricIndex>;
+        }>[], any>;
+        /**
+         * This attribute shall indicate the maximum number of groups that this node supports per fabric. The value
+         * of this attribute shall be set to be no less than the required minimum supported groups as specified in
+         * Group Limits. The length of the GroupKeyMap and GroupTable list attributes shall NOT exceed the value of
+         * the MaxGroupsPerFabric attribute multiplied by the number of supported fabrics.
+         *
+         * @see {@link MatterCoreSpecificationV1_1} § 11.2.7.3
+         */
+        maxGroupsPerFabric: FixedAttribute<number, any>;
+        /**
+         * This attribute shall indicate the maximum number of group key sets this node supports per fabric. The
+         * value of this attribute shall be set according to the minimum number of group key sets to support as
+         * specified in Group Limits.
+         *
+         * @see {@link MatterCoreSpecificationV1_1} § 11.2.7.4
+         */
+        maxGroupKeysPerFabric: FixedAttribute<number, any>;
+    }, import("../../cluster/Cluster.js").GlobalAttributes<{
+        /**
+         * CacheAndSync
+         *
+         * The ability to support CacheAndSync security policy and MCSP.
+         */
+        cacheAndSync: BitFlag;
+    }>>, {
+        /**
+         * This command is used by Administrators to set the state of a given Group Key Set, including atomically
+         * updating the state of all epoch keys.
+         *
+         * Effect on Receipt
+         *
+         * If the EpochKey0 field is null or its associated EpochStartTime0 field is null, then this command shall
+         * fail with an INVALID_COMMAND status code sent back to the initiator.
+         *
+         * If the EpochKey1 field is not null, its associated EpochStartTime1 field shall contain a later epoch
+         * start time than the epoch start time found in the EpochStartTime0 field. Otherwise this command shall
+         * fail with an INVALID_COMMAND status code sent back to the initiator.
+         *
+         * If the EpochKey2 field is not null, then the EpochKey1 field shall NOT be null. Otherwise this command
+         * shall fail with an INVALID_COMMAND status code sent back to the initiator.
+         *
+         * If the EpochKey2 field is not null, its associated EpochStartTime2 field shall contain a later epoch
+         * start time than the epoch start time found in the EpochStartTime1 field. Otherwise this command shall
+         * fail with an INVALID_COMMAND status code sent back to the initiator.
+         *
+         * If there exists a Group Key Set associated with the accessing fabric which has the same GroupKeySetID as
+         * that provided in the GroupKeySet field, then the contents of that group key set shall be replaced. A
+         * replacement shall be done by executing the equivalent of entirely removing the previous Group Key Set
+         * with the given GroupKeySetID, followed by an addition of a Group Key Set with the provided
+         * configuration. Otherwise, if the GroupKeySetID did not match an existing entry, a new Group Key Set
+         * associated with the accessing fabric shall be created with the provided data. The Group Key Set shall be
+         * written to non-volatile storage.
+         *
+         * Upon completion, this command shall send a status code back to the initiator:
+         *
+         *   • If the Group Key Set was properly installed or updated on the Node, the status code shall be set to
+         *     SUCCESS.
+         *
+         *   • If there are insufficient resources on the receiver to store an additional Group Key Set, the status
+         *     code shall be set to RESOURCE_EXHAUSTED (see group key limits);
+         *
+         *   • Otherwise, this status code shall be set to FAILURE.
+         *
+         * @see {@link MatterCoreSpecificationV1_1} § 11.2.8.1
+         */
+        keySetWrite: Command<import("../../tlv/TlvObject.js").TypeFromFields<{
+            groupKeySet: import("../../tlv/TlvObject.js").FieldType<import("../../tlv/TlvObject.js").TypeFromFields<{
+                groupKeySetId: import("../../tlv/TlvObject.js").FieldType<number>;
+                /**
+                 * This field shall provide the security policy for an operational group key set.
+                 *
+                 * When CacheAndSync is not supported in the FeatureMap of this cluster, any action attempting to set
+                 * CacheAndSync in the GroupKeySecurityPolicy field shall fail with an INVALID_COMMAND error.
+                 *
+                 * @see {@link MatterCoreSpecificationV1_1} § 11.2.6.4.1
+                 */
+                groupKeySecurityPolicy: import("../../tlv/TlvObject.js").FieldType<GroupKeySecurityPolicy>;
+                /**
+                 * This field, if not null, shall be the root credential used in the derivation of an operational group key for
+                 * epoch slot 0 of the given group key set. If EpochKey0 is not null, EpochStartTime0 shall NOT be null.
+                 *
+                 * @see {@link MatterCoreSpecificationV1_1} § 11.2.6.4.2
+                 */
+                epochKey0: import("../../tlv/TlvObject.js").FieldType<Uint8Array | null>;
+                /**
+                 * This field, if not null, shall define when EpochKey0 becomes valid as specified by Section 4.15.3, “Epoch
+                 * Keys”. Units are absolute UTC time in microseconds encoded using the epoch-us representation.
+                 *
+                 * @see {@link MatterCoreSpecificationV1_1} § 11.2.6.4.3
+                 */
+                epochStartTime0: import("../../tlv/TlvObject.js").FieldType<number | bigint | null>;
+                /**
+                 * This field, if not null, shall be the root credential used in the derivation of an operational group key for
+                 * epoch slot 1 of the given group key set. If EpochKey1 is not null, EpochStartTime1 shall NOT be null.
+                 *
+                 * @see {@link MatterCoreSpecificationV1_1} § 11.2.6.4.4
+                 */
+                epochKey1: import("../../tlv/TlvObject.js").FieldType<Uint8Array | null>;
+                /**
+                 * This field, if not null, shall define when EpochKey1 becomes valid as specified by Section 4.15.3, “Epoch
+                 * Keys”. Units are absolute UTC time in microseconds encoded using the epoch-us representation.
+                 *
+                 * @see {@link MatterCoreSpecificationV1_1} § 11.2.6.4.5
+                 */
+                epochStartTime1: import("../../tlv/TlvObject.js").FieldType<number | bigint | null>;
+                /**
+                 * This field, if not null, shall be the root credential used in the derivation of an operational group key for
+                 * epoch slot 2 of the given group key set. If EpochKey2 is not null, EpochStartTime2 shall NOT be null.
+                 *
+                 * @see {@link MatterCoreSpecificationV1_1} § 11.2.6.4.6
+                 */
+                epochKey2: import("../../tlv/TlvObject.js").FieldType<Uint8Array | null>;
+                /**
+                 * This field, if not null, shall define when EpochKey2 becomes valid as specified by Section 4.15.3, “Epoch
+                 * Keys”. Units are absolute UTC time in microseconds encoded using the epoch-us representation.
+                 *
+                 * @see {@link MatterCoreSpecificationV1_1} § 11.2.6.4.7
+                 */
+                epochStartTime2: import("../../tlv/TlvObject.js").FieldType<number | bigint | null>;
+                /**
+                 * This field specifies how the IPv6 Multicast Address shall be formed for groups using this operational group
+                 * key set.
+                 *
+                 * The PerGroupID method maximizes filtering of multicast messages, so that receiving nodes receive only
+                 * multicast messages for groups to which they are subscribed.
+                 *
+                 * The AllNodes method minimizes the number of multicast addresses to which a receiver node needs to subscribe.
+                 *
+                 * NOTE Support for GroupKeyMulticastPolicy is provisional. Correct default behavior is that implied by value
+                 * PerGroupID.
+                 *
+                 * @see {@link MatterCoreSpecificationV1_1} § 11.2.6.4.8
+                 */
+                groupKeyMulticastPolicy: import("../../tlv/TlvObject.js").FieldType<GroupKeyMulticastPolicy>;
+            }>>;
+        }>, void, any>;
+        /**
+         * This command is used by Administrators to read the state of a given Group Key Set.
+         *
+         * Effect on Receipt
+         *
+         * If there exists a Group Key Set associated with the accessing fabric which has the same GroupKeySetID as
+         * that provided in the GroupKeySetID field, then the contents of that Group Key Set shall be sent in a
+         * KeySetReadResponse command, but with the EpochKey0, EpochKey1 and EpochKey2 fields replaced by null.
+         *
+         * Otherwise, if the GroupKeySetID does not refer to a Group Key Set associated with the accessing fabric,
+         * then this command shall fail with a NOT_FOUND status code.
+         *
+         * @see {@link MatterCoreSpecificationV1_1} § 11.2.8.2
+         */
+        keySetRead: Command<import("../../tlv/TlvObject.js").TypeFromFields<{
+            groupKeySetId: import("../../tlv/TlvObject.js").FieldType<number>;
+        }>, import("../../tlv/TlvObject.js").TypeFromFields<{
+            groupKeySet: import("../../tlv/TlvObject.js").FieldType<import("../../tlv/TlvObject.js").TypeFromFields<{
+                groupKeySetId: import("../../tlv/TlvObject.js").FieldType<number>;
+                /**
+                 * This field shall provide the security policy for an operational group key set.
+                 *
+                 * When CacheAndSync is not supported in the FeatureMap of this cluster, any action attempting to set
+                 * CacheAndSync in the GroupKeySecurityPolicy field shall fail with an INVALID_COMMAND error.
+                 *
+                 * @see {@link MatterCoreSpecificationV1_1} § 11.2.6.4.1
+                 */
+                groupKeySecurityPolicy: import("../../tlv/TlvObject.js").FieldType<GroupKeySecurityPolicy>;
+                /**
+                 * This field, if not null, shall be the root credential used in the derivation of an operational group key for
+                 * epoch slot 0 of the given group key set. If EpochKey0 is not null, EpochStartTime0 shall NOT be null.
+                 *
+                 * @see {@link MatterCoreSpecificationV1_1} § 11.2.6.4.2
+                 */
+                epochKey0: import("../../tlv/TlvObject.js").FieldType<Uint8Array | null>;
+                /**
+                 * This field, if not null, shall define when EpochKey0 becomes valid as specified by Section 4.15.3, “Epoch
+                 * Keys”. Units are absolute UTC time in microseconds encoded using the epoch-us representation.
+                 *
+                 * @see {@link MatterCoreSpecificationV1_1} § 11.2.6.4.3
+                 */
+                epochStartTime0: import("../../tlv/TlvObject.js").FieldType<number | bigint | null>;
+                /**
+                 * This field, if not null, shall be the root credential used in the derivation of an operational group key for
+                 * epoch slot 1 of the given group key set. If EpochKey1 is not null, EpochStartTime1 shall NOT be null.
+                 *
+                 * @see {@link MatterCoreSpecificationV1_1} § 11.2.6.4.4
+                 */
+                epochKey1: import("../../tlv/TlvObject.js").FieldType<Uint8Array | null>;
+                /**
+                 * This field, if not null, shall define when EpochKey1 becomes valid as specified by Section 4.15.3, “Epoch
+                 * Keys”. Units are absolute UTC time in microseconds encoded using the epoch-us representation.
+                 *
+                 * @see {@link MatterCoreSpecificationV1_1} § 11.2.6.4.5
+                 */
+                epochStartTime1: import("../../tlv/TlvObject.js").FieldType<number | bigint | null>;
+                /**
+                 * This field, if not null, shall be the root credential used in the derivation of an operational group key for
+                 * epoch slot 2 of the given group key set. If EpochKey2 is not null, EpochStartTime2 shall NOT be null.
+                 *
+                 * @see {@link MatterCoreSpecificationV1_1} § 11.2.6.4.6
+                 */
+                epochKey2: import("../../tlv/TlvObject.js").FieldType<Uint8Array | null>;
+                /**
+                 * This field, if not null, shall define when EpochKey2 becomes valid as specified by Section 4.15.3, “Epoch
+                 * Keys”. Units are absolute UTC time in microseconds encoded using the epoch-us representation.
+                 *
+                 * @see {@link MatterCoreSpecificationV1_1} § 11.2.6.4.7
+                 */
+                epochStartTime2: import("../../tlv/TlvObject.js").FieldType<number | bigint | null>;
+                /**
+                 * This field specifies how the IPv6 Multicast Address shall be formed for groups using this operational group
+                 * key set.
+                 *
+                 * The PerGroupID method maximizes filtering of multicast messages, so that receiving nodes receive only
+                 * multicast messages for groups to which they are subscribed.
+                 *
+                 * The AllNodes method minimizes the number of multicast addresses to which a receiver node needs to subscribe.
+                 *
+                 * NOTE Support for GroupKeyMulticastPolicy is provisional. Correct default behavior is that implied by value
+                 * PerGroupID.
+                 *
+                 * @see {@link MatterCoreSpecificationV1_1} § 11.2.6.4.8
+                 */
+                groupKeyMulticastPolicy: import("../../tlv/TlvObject.js").FieldType<GroupKeyMulticastPolicy>;
+            }>>;
+        }>, any>;
+        /**
+         * This command is used by Administrators to remove all state of a given Group Key Set.
+         *
+         * Effect on Receipt
+         *
+         * If there exists a Group Key Set associated with the accessing fabric which has the same GroupKeySetID as
+         * that provided in the GroupKeySetID field, then the contents of that Group Key Set shall be removed,
+         * including all epoch keys it contains.
+         *
+         * If there exist any entries for the accessing fabric within the GroupKeyMap attribute that refer to the
+         * GroupKeySetID just removed, then these entries shall be removed from that list.
+         *
+         * This command shall fail with an INVALID_COMMAND status code back to the initiator if the GroupKeySetID
+         * being removed is 0, which is the Key Set associated with the Identity Protection Key (IPK). The only
+         * method to remove the IPK is usage of the RemoveFabric command or any operation which causes the
+         * equivalent of a RemoveFabric to occur by side-effect.
+         *
+         * This command shall send a SUCCESS status code back to the initiator on success, or NOT_FOUND if the
+         * GroupKeySetID requested did not exist.
+         *
+         * @see {@link MatterCoreSpecificationV1_1} § 11.2.8.4
+         */
+        keySetRemove: Command<import("../../tlv/TlvObject.js").TypeFromFields<{
+            groupKeySetId: import("../../tlv/TlvObject.js").FieldType<number>;
+        }>, void, any>;
+        /**
+         * This command is used by Administrators to query a list of all Group Key Sets associated with the
+         * accessing fabric.
+         *
+         * Effect on Receipt
+         *
+         * Upon receipt, this command shall iterate all stored GroupKeySetStruct associated with the accessing
+         * fabric and generate a KeySetReadAllIndicesResponse command containing the list of GroupKeySetID values
+         * from those structs.
+         *
+         * @see {@link MatterCoreSpecificationV1_1} § 11.2.8.5
+         */
+        keySetReadAllIndices: Command<void, import("../../tlv/TlvObject.js").TypeFromFields<{
+            groupKeySetIDs: import("../../tlv/TlvObject.js").FieldType<number[]>;
+        }>, any>;
+    }, import("../../cluster/Cluster.js").Events, <T extends "CacheAndSync"[]>(...features_0: T) => Extension<BitFlags<{
+        /**
+         * CacheAndSync
+         *
+         * The ability to support CacheAndSync security policy and MCSP.
+         */
+        cacheAndSync: BitFlag;
+    }, T>>>;
+    type Extension<SF extends TypeFromPartialBitSchema<typeof Base.features>> = ClusterForBaseCluster<typeof Base, SF> & {
+        supportedFeatures: SF;
+    };
+}
+export type GroupKeyManagementCluster = typeof GroupKeyManagement.Cluster;
+export declare const GroupKeyManagementCluster: ExtensibleCluster<{
+    /**
+     * CacheAndSync
+     *
+     * The ability to support CacheAndSync security policy and MCSP.
+     */
+    cacheAndSync: BitFlag;
+}, TypeFromPartialBitSchema<{
+    /**
+     * CacheAndSync
+     *
+     * The ability to support CacheAndSync security policy and MCSP.
+     */
+    cacheAndSync: BitFlag;
+}>, import("../../util/Type.js").Merge<{
+    /**
+     * This attribute is a list of GroupKeyMapStruct entries. Each entry associates a logical Group Id with a
+     * particular group key set.
+     *
+     * @see {@link MatterCoreSpecificationV1_1} § 11.2.7.1
+     */
+    groupKeyMap: WritableFabricScopedAttribute<import("../../tlv/TlvObject.js").TypeFromFields<{
+        /**
+         * This field uniquely identifies the group within the scope of the given Fabric.
+         *
+         * @see {@link MatterCoreSpecificationV1_1} § 11.2.6.3.1
+         */
+        groupId: import("../../tlv/TlvObject.js").FieldType<import("../../datatype/GroupId.js").GroupId>;
+        /**
+         * This field references the set of group keys that generate operational group keys for use with this
+         *
+         * group, as specified in Section 4.15.3.5.1, “Group Key Set ID”.
+         *
+         * A GroupKeyMapStruct shall NOT accept GroupKeySetID of 0, which is reserved for the IPK.
+         *
+         * @see {@link MatterCoreSpecificationV1_1} § 11.2.6.3.2
+         */
+        groupKeySetId: import("../../tlv/TlvObject.js").FieldType<number>;
+        fabricIndex: import("../../tlv/TlvObject.js").FieldType<import("../../datatype/FabricIndex.js").FabricIndex>;
+    }>[], any>;
+    /**
+     * This attribute is a list of GroupInfoMapStruct entries. Each entry provides read-only information about
+     * how a given logical Group ID maps to a particular set of endpoints, and a name for the group. The
+     * content of this attribute reflects data managed via the Groups cluster (see AppClusters), and is in
+     * general terms referred to as the 'node-wide Group Table'.
+     *
+     * The GroupTable shall NOT contain any entry whose GroupInfoMapStruct has an empty Endpoints list. If a
+     * RemoveGroup or RemoveAllGroups command causes the removal of a group mapping from its last mapped
+     * endpoint, the entire GroupTable entry for that given GroupId shall be removed.
+     *
+     * @see {@link MatterCoreSpecificationV1_1} § 11.2.7.2
+     */
+    groupTable: FabricScopedAttribute<import("../../tlv/TlvObject.js").TypeFromFields<{
+        groupId: import("../../tlv/TlvObject.js").FieldType<import("../../datatype/GroupId.js").GroupId>;
+        /**
+         * This field provides the list of Endpoint IDs on the Node to which messages to this group shall be forwarded.
+         *
+         * @see {@link MatterCoreSpecificationV1_1} § 11.2.6.5.1
+         */
+        endpoints: import("../../tlv/TlvObject.js").FieldType<import("../../datatype/EndpointNumber.js").EndpointNumber[]>;
+        /**
+         * This field provides a name for the group. This field shall contain the last GroupName written for a given
+         * GroupId on any Endpoint via the Groups cluster.
+         *
+         * @see {@link MatterCoreSpecificationV1_1} § 11.2.6.5.2
+         */
+        groupName: import("../../tlv/TlvObject.js").OptionalFieldType<string>;
+        fabricIndex: import("../../tlv/TlvObject.js").FieldType<import("../../datatype/FabricIndex.js").FabricIndex>;
+    }>[], any>;
+    /**
+     * This attribute shall indicate the maximum number of groups that this node supports per fabric. The value
+     * of this attribute shall be set to be no less than the required minimum supported groups as specified in
+     * Group Limits. The length of the GroupKeyMap and GroupTable list attributes shall NOT exceed the value of
+     * the MaxGroupsPerFabric attribute multiplied by the number of supported fabrics.
+     *
+     * @see {@link MatterCoreSpecificationV1_1} § 11.2.7.3
+     */
+    maxGroupsPerFabric: FixedAttribute<number, any>;
+    /**
+     * This attribute shall indicate the maximum number of group key sets this node supports per fabric. The
+     * value of this attribute shall be set according to the minimum number of group key sets to support as
+     * specified in Group Limits.
+     *
+     * @see {@link MatterCoreSpecificationV1_1} § 11.2.7.4
+     */
+    maxGroupKeysPerFabric: FixedAttribute<number, any>;
+}, import("../../cluster/Cluster.js").GlobalAttributes<{
+    /**
+     * CacheAndSync
+     *
+     * The ability to support CacheAndSync security policy and MCSP.
+     */
+    cacheAndSync: BitFlag;
+}>>, {
+    /**
+     * This command is used by Administrators to set the state of a given Group Key Set, including atomically
+     * updating the state of all epoch keys.
+     *
+     * Effect on Receipt
+     *
+     * If the EpochKey0 field is null or its associated EpochStartTime0 field is null, then this command shall
+     * fail with an INVALID_COMMAND status code sent back to the initiator.
+     *
+     * If the EpochKey1 field is not null, its associated EpochStartTime1 field shall contain a later epoch
+     * start time than the epoch start time found in the EpochStartTime0 field. Otherwise this command shall
+     * fail with an INVALID_COMMAND status code sent back to the initiator.
+     *
+     * If the EpochKey2 field is not null, then the EpochKey1 field shall NOT be null. Otherwise this command
+     * shall fail with an INVALID_COMMAND status code sent back to the initiator.
+     *
+     * If the EpochKey2 field is not null, its associated EpochStartTime2 field shall contain a later epoch
+     * start time than the epoch start time found in the EpochStartTime1 field. Otherwise this command shall
+     * fail with an INVALID_COMMAND status code sent back to the initiator.
+     *
+     * If there exists a Group Key Set associated with the accessing fabric which has the same GroupKeySetID as
+     * that provided in the GroupKeySet field, then the contents of that group key set shall be replaced. A
+     * replacement shall be done by executing the equivalent of entirely removing the previous Group Key Set
+     * with the given GroupKeySetID, followed by an addition of a Group Key Set with the provided
+     * configuration. Otherwise, if the GroupKeySetID did not match an existing entry, a new Group Key Set
+     * associated with the accessing fabric shall be created with the provided data. The Group Key Set shall be
+     * written to non-volatile storage.
+     *
+     * Upon completion, this command shall send a status code back to the initiator:
+     *
+     *   • If the Group Key Set was properly installed or updated on the Node, the status code shall be set to
+     *     SUCCESS.
+     *
+     *   • If there are insufficient resources on the receiver to store an additional Group Key Set, the status
+     *     code shall be set to RESOURCE_EXHAUSTED (see group key limits);
+     *
+     *   • Otherwise, this status code shall be set to FAILURE.
+     *
+     * @see {@link MatterCoreSpecificationV1_1} § 11.2.8.1
+     */
+    keySetWrite: Command<import("../../tlv/TlvObject.js").TypeFromFields<{
+        groupKeySet: import("../../tlv/TlvObject.js").FieldType<import("../../tlv/TlvObject.js").TypeFromFields<{
+            groupKeySetId: import("../../tlv/TlvObject.js").FieldType<number>;
+            /**
+             * This field shall provide the security policy for an operational group key set.
+             *
+             * When CacheAndSync is not supported in the FeatureMap of this cluster, any action attempting to set
+             * CacheAndSync in the GroupKeySecurityPolicy field shall fail with an INVALID_COMMAND error.
+             *
+             * @see {@link MatterCoreSpecificationV1_1} § 11.2.6.4.1
+             */
+            groupKeySecurityPolicy: import("../../tlv/TlvObject.js").FieldType<GroupKeyManagement.GroupKeySecurityPolicy>;
+            /**
+             * This field, if not null, shall be the root credential used in the derivation of an operational group key for
+             * epoch slot 0 of the given group key set. If EpochKey0 is not null, EpochStartTime0 shall NOT be null.
+             *
+             * @see {@link MatterCoreSpecificationV1_1} § 11.2.6.4.2
+             */
+            epochKey0: import("../../tlv/TlvObject.js").FieldType<Uint8Array | null>;
+            /**
+             * This field, if not null, shall define when EpochKey0 becomes valid as specified by Section 4.15.3, “Epoch
+             * Keys”. Units are absolute UTC time in microseconds encoded using the epoch-us representation.
+             *
+             * @see {@link MatterCoreSpecificationV1_1} § 11.2.6.4.3
+             */
+            epochStartTime0: import("../../tlv/TlvObject.js").FieldType<number | bigint | null>;
+            /**
+             * This field, if not null, shall be the root credential used in the derivation of an operational group key for
+             * epoch slot 1 of the given group key set. If EpochKey1 is not null, EpochStartTime1 shall NOT be null.
+             *
+             * @see {@link MatterCoreSpecificationV1_1} § 11.2.6.4.4
+             */
+            epochKey1: import("../../tlv/TlvObject.js").FieldType<Uint8Array | null>;
+            /**
+             * This field, if not null, shall define when EpochKey1 becomes valid as specified by Section 4.15.3, “Epoch
+             * Keys”. Units are absolute UTC time in microseconds encoded using the epoch-us representation.
+             *
+             * @see {@link MatterCoreSpecificationV1_1} § 11.2.6.4.5
+             */
+            epochStartTime1: import("../../tlv/TlvObject.js").FieldType<number | bigint | null>;
+            /**
+             * This field, if not null, shall be the root credential used in the derivation of an operational group key for
+             * epoch slot 2 of the given group key set. If EpochKey2 is not null, EpochStartTime2 shall NOT be null.
+             *
+             * @see {@link MatterCoreSpecificationV1_1} § 11.2.6.4.6
+             */
+            epochKey2: import("../../tlv/TlvObject.js").FieldType<Uint8Array | null>;
+            /**
+             * This field, if not null, shall define when EpochKey2 becomes valid as specified by Section 4.15.3, “Epoch
+             * Keys”. Units are absolute UTC time in microseconds encoded using the epoch-us representation.
+             *
+             * @see {@link MatterCoreSpecificationV1_1} § 11.2.6.4.7
+             */
+            epochStartTime2: import("../../tlv/TlvObject.js").FieldType<number | bigint | null>;
+            /**
+             * This field specifies how the IPv6 Multicast Address shall be formed for groups using this operational group
+             * key set.
+             *
+             * The PerGroupID method maximizes filtering of multicast messages, so that receiving nodes receive only
+             * multicast messages for groups to which they are subscribed.
+             *
+             * The AllNodes method minimizes the number of multicast addresses to which a receiver node needs to subscribe.
+             *
+             * NOTE Support for GroupKeyMulticastPolicy is provisional. Correct default behavior is that implied by value
+             * PerGroupID.
+             *
+             * @see {@link MatterCoreSpecificationV1_1} § 11.2.6.4.8
+             */
+            groupKeyMulticastPolicy: import("../../tlv/TlvObject.js").FieldType<GroupKeyManagement.GroupKeyMulticastPolicy>;
+        }>>;
+    }>, void, any>;
+    /**
+     * This command is used by Administrators to read the state of a given Group Key Set.
+     *
+     * Effect on Receipt
+     *
+     * If there exists a Group Key Set associated with the accessing fabric which has the same GroupKeySetID as
+     * that provided in the GroupKeySetID field, then the contents of that Group Key Set shall be sent in a
+     * KeySetReadResponse command, but with the EpochKey0, EpochKey1 and EpochKey2 fields replaced by null.
+     *
+     * Otherwise, if the GroupKeySetID does not refer to a Group Key Set associated with the accessing fabric,
+     * then this command shall fail with a NOT_FOUND status code.
+     *
+     * @see {@link MatterCoreSpecificationV1_1} § 11.2.8.2
+     */
+    keySetRead: Command<import("../../tlv/TlvObject.js").TypeFromFields<{
+        groupKeySetId: import("../../tlv/TlvObject.js").FieldType<number>;
+    }>, import("../../tlv/TlvObject.js").TypeFromFields<{
+        groupKeySet: import("../../tlv/TlvObject.js").FieldType<import("../../tlv/TlvObject.js").TypeFromFields<{
+            groupKeySetId: import("../../tlv/TlvObject.js").FieldType<number>;
+            /**
+             * This field shall provide the security policy for an operational group key set.
+             *
+             * When CacheAndSync is not supported in the FeatureMap of this cluster, any action attempting to set
+             * CacheAndSync in the GroupKeySecurityPolicy field shall fail with an INVALID_COMMAND error.
+             *
+             * @see {@link MatterCoreSpecificationV1_1} § 11.2.6.4.1
+             */
+            groupKeySecurityPolicy: import("../../tlv/TlvObject.js").FieldType<GroupKeyManagement.GroupKeySecurityPolicy>;
+            /**
+             * This field, if not null, shall be the root credential used in the derivation of an operational group key for
+             * epoch slot 0 of the given group key set. If EpochKey0 is not null, EpochStartTime0 shall NOT be null.
+             *
+             * @see {@link MatterCoreSpecificationV1_1} § 11.2.6.4.2
+             */
+            epochKey0: import("../../tlv/TlvObject.js").FieldType<Uint8Array | null>;
+            /**
+             * This field, if not null, shall define when EpochKey0 becomes valid as specified by Section 4.15.3, “Epoch
+             * Keys”. Units are absolute UTC time in microseconds encoded using the epoch-us representation.
+             *
+             * @see {@link MatterCoreSpecificationV1_1} § 11.2.6.4.3
+             */
+            epochStartTime0: import("../../tlv/TlvObject.js").FieldType<number | bigint | null>;
+            /**
+             * This field, if not null, shall be the root credential used in the derivation of an operational group key for
+             * epoch slot 1 of the given group key set. If EpochKey1 is not null, EpochStartTime1 shall NOT be null.
+             *
+             * @see {@link MatterCoreSpecificationV1_1} § 11.2.6.4.4
+             */
+            epochKey1: import("../../tlv/TlvObject.js").FieldType<Uint8Array | null>;
+            /**
+             * This field, if not null, shall define when EpochKey1 becomes valid as specified by Section 4.15.3, “Epoch
+             * Keys”. Units are absolute UTC time in microseconds encoded using the epoch-us representation.
+             *
+             * @see {@link MatterCoreSpecificationV1_1} § 11.2.6.4.5
+             */
+            epochStartTime1: import("../../tlv/TlvObject.js").FieldType<number | bigint | null>;
+            /**
+             * This field, if not null, shall be the root credential used in the derivation of an operational group key for
+             * epoch slot 2 of the given group key set. If EpochKey2 is not null, EpochStartTime2 shall NOT be null.
+             *
+             * @see {@link MatterCoreSpecificationV1_1} § 11.2.6.4.6
+             */
+            epochKey2: import("../../tlv/TlvObject.js").FieldType<Uint8Array | null>;
+            /**
+             * This field, if not null, shall define when EpochKey2 becomes valid as specified by Section 4.15.3, “Epoch
+             * Keys”. Units are absolute UTC time in microseconds encoded using the epoch-us representation.
+             *
+             * @see {@link MatterCoreSpecificationV1_1} § 11.2.6.4.7
+             */
+            epochStartTime2: import("../../tlv/TlvObject.js").FieldType<number | bigint | null>;
+            /**
+             * This field specifies how the IPv6 Multicast Address shall be formed for groups using this operational group
+             * key set.
+             *
+             * The PerGroupID method maximizes filtering of multicast messages, so that receiving nodes receive only
+             * multicast messages for groups to which they are subscribed.
+             *
+             * The AllNodes method minimizes the number of multicast addresses to which a receiver node needs to subscribe.
+             *
+             * NOTE Support for GroupKeyMulticastPolicy is provisional. Correct default behavior is that implied by value
+             * PerGroupID.
+             *
+             * @see {@link MatterCoreSpecificationV1_1} § 11.2.6.4.8
+             */
+            groupKeyMulticastPolicy: import("../../tlv/TlvObject.js").FieldType<GroupKeyManagement.GroupKeyMulticastPolicy>;
+        }>>;
+    }>, any>;
+    /**
+     * This command is used by Administrators to remove all state of a given Group Key Set.
+     *
+     * Effect on Receipt
+     *
+     * If there exists a Group Key Set associated with the accessing fabric which has the same GroupKeySetID as
+     * that provided in the GroupKeySetID field, then the contents of that Group Key Set shall be removed,
+     * including all epoch keys it contains.
+     *
+     * If there exist any entries for the accessing fabric within the GroupKeyMap attribute that refer to the
+     * GroupKeySetID just removed, then these entries shall be removed from that list.
+     *
+     * This command shall fail with an INVALID_COMMAND status code back to the initiator if the GroupKeySetID
+     * being removed is 0, which is the Key Set associated with the Identity Protection Key (IPK). The only
+     * method to remove the IPK is usage of the RemoveFabric command or any operation which causes the
+     * equivalent of a RemoveFabric to occur by side-effect.
+     *
+     * This command shall send a SUCCESS status code back to the initiator on success, or NOT_FOUND if the
+     * GroupKeySetID requested did not exist.
+     *
+     * @see {@link MatterCoreSpecificationV1_1} § 11.2.8.4
+     */
+    keySetRemove: Command<import("../../tlv/TlvObject.js").TypeFromFields<{
+        groupKeySetId: import("../../tlv/TlvObject.js").FieldType<number>;
+    }>, void, any>;
+    /**
+     * This command is used by Administrators to query a list of all Group Key Sets associated with the
+     * accessing fabric.
+     *
+     * Effect on Receipt
+     *
+     * Upon receipt, this command shall iterate all stored GroupKeySetStruct associated with the accessing
+     * fabric and generate a KeySetReadAllIndicesResponse command containing the list of GroupKeySetID values
+     * from those structs.
+     *
+     * @see {@link MatterCoreSpecificationV1_1} § 11.2.8.5
+     */
+    keySetReadAllIndices: Command<void, import("../../tlv/TlvObject.js").TypeFromFields<{
+        groupKeySetIDs: import("../../tlv/TlvObject.js").FieldType<number[]>;
+    }>, any>;
+}, import("../../cluster/Cluster.js").Events, <T extends "CacheAndSync"[]>(...features_0: T) => GroupKeyManagement.Extension<BitFlags<{
+    /**
+     * CacheAndSync
+     *
+     * The ability to support CacheAndSync security policy and MCSP.
+     */
+    cacheAndSync: BitFlag;
+}, T>>>;
+//# sourceMappingURL=GroupKeyManagementCluster.d.ts.map