cozy-client 27.6.3 → 27.8.0

package/CHANGELOG.md

@@ -3,6 +3,55 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+# [27.8.0](https://github.com/cozy/cozy-client/compare/v27.7.0...v27.8.0) (2022-01-11)
+
+
+### Bug Fixes
+
+* Rebuild `permission.d.ts` to fit CI version ([380db52](https://github.com/cozy/cozy-client/commit/380db528004e9a64b244a99bb238351fac4f2a05))
+* UseQuery returns fetch method ([93e7f3d](https://github.com/cozy/cozy-client/commit/93e7f3d217353003795d43dfedf1397bb64815af))
+
+
+### Features
+
+* Add `react-native-google-safetynet` module as peerDependencies ([cd4b37f](https://github.com/cozy/cozy-client/commit/cd4b37fc3353b702035e773b2b423ef7e7aa3156))
+* Add `react-native-ios11-devicecheck` module  as peerDependencies ([b9ed2e9](https://github.com/cozy/cozy-client/commit/b9ed2e9c42518a50961f5b233b5f6ae1894ed7d6))
+* Add flagship certification mechanism ([fe8474c](https://github.com/cozy/cozy-client/commit/fe8474c3286393c996eb5704184de652aa8028fe))
+
+
+
+
+
+# [27.7.0](https://github.com/cozy/cozy-client/compare/v27.6.5...v27.7.0) (2022-01-03)
+
+
+### Features
+
+* Add of missing papers targeted for v1 ([25e4953](https://github.com/cozy/cozy-client/commit/25e4953cee9de7f7043aea33a2f2b67841435529))
+
+
+
+
+
+## [27.6.5](https://github.com/cozy/cozy-client/compare/v27.6.4...v27.6.5) (2021-12-20)
+
+
+### Bug Fixes
+
+* Use fetchOwnPermissions instead of deprecated getOwnPermissions ([fb1dd51](https://github.com/cozy/cozy-client/commit/fb1dd517c3f8ca6e184055ad3194d387a5901027))
+
+
+
+
+
+## [27.6.4](https://github.com/cozy/cozy-client/compare/v27.6.3...v27.6.4) (2021-12-20)
+
+**Note:** Version bump only for package cozy-client
+
+
+
+
+
 ## [27.6.3](https://github.com/cozy/cozy-client/compare/v27.6.2...v27.6.3) (2021-12-16)
 
 **Note:** Version bump only for package cozy-client

package/dist/CozyClient.js

@@ -83,6 +83,8 @@ var _jsonStableStringify = _interopRequireDefault(require("json-stable-stringify
 
 var _promiseCache = _interopRequireDefault(require("./promise-cache"));
 
+var _flagshipCertification = require("./flagship-certification/flagship-certification");
+
 function ownKeys(object, enumerableOnly) { var keys = Object.keys(object); if (Object.getOwnPropertySymbols) { var symbols = Object.getOwnPropertySymbols(object); if (enumerableOnly) symbols = symbols.filter(function (sym) { return Object.getOwnPropertyDescriptor(object, sym).enumerable; }); keys.push.apply(keys, symbols); } return keys; }
 
 function _objectSpread(target) { for (var i = 1; i < arguments.length; i++) { var source = arguments[i] != null ? arguments[i] : {}; if (i % 2) { ownKeys(Object(source), true).forEach(function (key) { (0, _defineProperty2.default)(target, key, source[key]); }); } else if (Object.getOwnPropertyDescriptors) { Object.defineProperties(target, Object.getOwnPropertyDescriptors(source)); } else { ownKeys(Object(source)).forEach(function (key) { Object.defineProperty(target, key, Object.getOwnPropertyDescriptor(source, key)); }); } } return target; }
@@ -1958,9 +1960,18 @@ var CozyClient = /*#__PURE__*/function () {
                 return stackClient.register();
 
               case 3:
+                if (!stackClient.oauthOptions.shouldRequireFlagshipPermissions) {
+                  _context14.next = 6;
+                  break;
+                }
+
+                _context14.next = 6;
+                return (0, _flagshipCertification.certifyFlagship)(stackClient.oauthOptions.certificationConfig, this);
+
+              case 6:
                 return _context14.abrupt("return", this.authorize(openURLCallback));
 
-              case 4:
+              case 7:
               case "end":
                 return _context14.stop();
             }
@@ -2452,7 +2463,7 @@ var CozyClient = /*#__PURE__*/function () {
 CozyClient.hooks = CozyClient.hooks || {};
 CozyClient.fetchPolicies = _policies.default; //COZY_CLIENT_VERSION_PACKAGE in replaced by babel. See babel config
 
-CozyClient.version = "27.6.3";
+CozyClient.version = "27.8.0";
 
 _microee.default.mixin(CozyClient);
 

package/dist/assets/qualifications.json

@@ -49,7 +49,8 @@
     },
     {
       "label": "other_identity_document",
-      "purpose": "attestation"
+      "purpose": "attestation",
+      "subjects": ["identity"]
     },
     {
       "label": "wedding",
@@ -86,7 +87,8 @@
       "subjects": ["right"]
     },
     {
-      "label": "other_family_document"
+      "label": "other_family_document",
+      "subjects": ["family"]
     },
     {
       "label": "diploma",
@@ -133,7 +135,7 @@
       "label": "student_card",
       "purpose": "attestation",
       "sourceCategory": "education",
-      "subjects": ["identity"]
+      "subjects": ["identity", "right", "employment", "education"]
     },
     {
       "label": "resume",
@@ -146,39 +148,59 @@
       "subjects": ["employment"]
     },
     {
-      "label": "other_work_document"
+      "label": "other_work_document",
+      "purpose": "employment"
     },
     {
       "label": "health_book",
       "purpose": "attestation",
       "sourceCategory": "health",
-      "subjects": ["identity", "capacity", "vaccine"]
+      "subjects": ["capacity", "vaccine"]
     },
     {
       "label": "health_certificate",
       "purpose": "attestation",
       "sourceCategory": "health",
-      "subjects": ["identity", "capacity", "vaccine"]
+      "subjects": ["capacity", "vaccine"]
+    },
+    {
+      "label": "pregnancy_medical_certificate",
+      "purpose": "attestation",
+      "sourceCategory": "health",
+      "subjects": ["pregnancy"]
+    },
+    {
+      "label": "work_disability_recognition",
+      "purpose": "attestation",
+      "sourceCategory": "health",
+      "subjects": ["right"]
     },
     {
       "label": "national_health_insurance_card",
       "purpose": "attestation",
       "sourceCategory": "gov",
       "sourceSubCategory": "health",
-      "subjects": ["identity", "insurance"]
+      "subjects": ["insurance"]
+    },
+    {
+      "label": "national_health_insurance_right_certificate",
+      "purpose": "attestation",
+      "sourceCategory": "gov",
+      "sourceSubCategory": "health",
+      "subjects": ["right", "insurance"]
     },
     {
       "label": "health_insurance_card",
       "purpose": "attestation",
       "sourceCategory": "insurance",
       "sourceSubCategory": "health",
-      "subjects": ["identity", "insurance"]
+      "subjects": ["insurance"]
     },
     {
       "label": "prescription",
       "purpose": "attestation",
       "sourceCategory": "health",
-      "subjects": ["identity", "right", "medecine"]
+      "subjects": ["right", "medecine"]
     },
     {
       "label": "health_invoice",
@@ -186,14 +208,15 @@
       "sourceCategory": "health"
     },
     {
-      "label": "other_health_document"
+      "label": "other_health_document",
+      "subjects": ["health"]
     },
     {
       "label": "vehicle_registration",
       "purpose": "attestation",
       "sourceCategory": "gov",
       "sourceSubCategory": "transport",
-      "subjects": ["right", "identity"]
+      "subjects": ["vehicule", "indentity", "right"]
     },
     {
       "label": "car_insurance",
@@ -213,7 +236,8 @@
       "sourceCategory": "transport"
     },
     {
-      "label": "other_transport_document"
+      "label": "other_transport_document",
+      "sourceCategory": "transport"
     },
     {
       "label": "house_sale_agreeement",
@@ -266,7 +290,8 @@
       "subjects": ["building", "house"]
     },
     {
-      "label": "other_house_document"
+      "label": "other_house_document",
+      "subjects": ["house"]
     },
     {
       "label": "phone_invoice",
@@ -338,15 +363,13 @@
     },
     {
       "label": "other_tax_document",
-      "sourceCategory": "gov",
-      "sourceSubCategory": "tax",
       "subjects": ["tax"]
     },
     {
       "label": "bank_details",
       "purpose": "attestation",
       "sourceCategory": "bank",
-      "subjects": ["identity"]
+      "subjects": ["bank_account"]
     },
     {
       "label": "bank_statement",
@@ -366,25 +389,66 @@
     {
       "label": "receipt",
       "purpose": "report"
+    },
+    {
+      "label": "payment_proof_family_allowance",
+      "purpose": "attestation",
+      "sourceCategory": "gov",
+      "sourceSubCategory": "tax",
+      "subjects": ["subvention"]
+    },
+    {
+      "label": "school_attendance_certificate",
+      "purpose": "attestation",
+      "sourceCategory": "education",
+      "subjects": ["identity", "right", "education"]
+    },
+    {
+      "label": "unfit_for_habitation_declaration",
+      "purpose": "attestation",
+      "sourceCategory": "gov",
+      "sourceSubCategory": "real_estate",
+      "subjects": ["compliance"]
+    },
+    {
+      "label": "accommodation_proof",
+      "purpose": "attestation",
+      "sourceCategory": "individual",
+      "subjects": ["address"]
+    },
+    {
+      "label": "citizen_registration_certificate",
+      "purpose": "attestation",
+      "sourceCategory": "gov",
+      "sourceSubCategory": "civil_registration",
+      "subjects": ["achievement","education"]
+    },
+    {
+      "label": "personal_sporting_licence",
+      "purpose": "attestation",
+      "sourceCategory": "gov",
+      "sourceSubCategory": "sport",
+      "subjects": ["permit", "invoice"]
     }
   ],
   "purposeKnownValues": [
-    "attestation", "contract", "invoice", "report", "description", "evaluation"
+    "attestation", "contract", "invoice", "report", "description", "evaluation", "employment"
   ],
   "sourceCategoryKnownValues": [
-    "bank", "insurance", "retail", "telecom", "energy", "water", "health", "gov",
+    "bank", "insurance", "retail", "telecom", "energy", "water", "health", "gov", "association",
     "education", "employer", "transport", "goods", "alimentation", "building",
-    "real_estate", "web"
+    "real_estate", "web", "individual"
   ],
   "sourceSubCategoryKnownValues": [
     "civil_registration", "immigration", "transport", "family", "tax", "health",
-    "real_estate", "mobile", "internet"
+    "real_estate", "mobile", "internet", "citizen", "sport"
   ],
   "subjectsKnownValues": [
-    "identity", "permit", "family", "driving", "right", "subvention", "achievement",
-    "degree", "work", "employment", "revenues", "history", "insurance", "drugs",
-    "medical_act", "car", "moto", "truck", "boat", "subscription", "buy/sale",
-    "house", "compliance", "building", "food", "real_estate", "tax",
-    "education", "statement", "course", "internet", "phone", "vaccine", "capacity"
+    "identity", "permit", "family", "address", "driving", "right", "subvention", "achievement",
+    "degree", "work", "employment", "revenues", "history", "insurance",
+    "medical_act", "vehicule", "car", "moto", "truck", "boat", "subscription", "buy/sale",
+    "house", "compliance", "building", "food", "real_estate", "tax", "address",
+    "education", "statement", "course", "internet", "phone", "vaccine", "capacity",
+    "health", "drugs", "child", "pregnancy", "bank_account"
   ]
 }

package/dist/flagship-certification/README.md

@@ -0,0 +1,96 @@
+# Flagship certification
+
+Flagship certification is the process of verifying that the current running app is a genuine Cozy application.
+
+This verification is done by querying an app certificate from the app store (Apple AppStore or Google Play) and sending  the resulting certificate to `cozy-stack`. Then `cozy-stack` will be able to an analyze the certificate and conclude if the app is genuine or not.
+
+## Nomenclature
+
+- `flagship`: refers to the Cozy main application
+- `store certification`: process of verifying app's genuineness through the platform's store 
+- `attestation`: result from the `store certification`
+- `challenge`: unique token given to the app by `cozy-stack` that may be encrypted in the `attestation` as a proof of authenticity
+- `nonce`: data type used to store the `challenge` token
+- `SafetyNet`: Google's implementation of the `store certification`
+- `AppAttest`: Apple's implementation of the `store certification`
+
+## Android certification
+
+Android certification is based on [SafetyNet](https://developer.android.com/training/safetynet/index.html).
+
+This process requires to query a `challenge` from `cozy-stack` and to use it to init the `store certification` process through `SafetyNet`. Then the received `attestation` is send to `cozy-stack` for verification.
+
+The resulting `attestation` is in the form of a `JSON Web Signature` that embbed the following `JSON`:
+```json
+{
+    "apkCertificateDigestSha256": [
+        "base64 encoded, SHA-256 hash of the certificate used to sign requesting app="
+    ],
+    "apkDigestSha256": "kNv83tJLFqwliYQ/6HUPCeGkBzLLCX/nvT+EF3OEB2I=",
+    "apkPackageName": "com.package.name.of.requesting.app",
+    "basicIntegrity": true,
+    "ctsProfileMatch": true, 
+    "evaluationType": "BASIC",
+    "nonce": "R2Rra24fVm5xa2Mg",
+    "timestampMs": 9860437986543
+}
+```
+
+The `attestation`'s content is described in the SafetyNet's documentation: https://developer.android.com/training/safetynet/attestation#use-response-server
+
+## iOS certification
+
+iOS certification is based on [AppAttest](https://developer.apple.com/documentation/devicecheck).
+
+This process requires to query a `challenge` from `cozy-stack` and to use it to init the `store certification` process through `AppAttest`. Then the received `attestation` is send to `cozy-stack` for verification.
+
+The resulting `attestation` is in the form of a `base64` token.
+
+The `attestation`'s content is described in the `AppAttest`'s documentation: https://developer.apple.com/documentation/devicecheck/validating_apps_that_connect_to_your_server#3576643
+
+## Client's configuration
+
+In order to configure `flagship` certification on an app, the OAuth property of `cozy-client` must contain `shouldRequireFlagshipPermissions` property set to `true` and `certificationConfig` property filled with required API keys.
+
+Example of `cozy-client` configuration:
+```js
+const client = await initClient(uri, {
+    scope: [
+      'io.cozy.apps'
+    ],
+    oauth: {
+      redirectURI: 'REDIRECT_URI',
+      softwareID: 'YOUR_APP_ID',
+      clientKind: 'mobile',
+      clientName: 'YOUR_APP_NAME',
+      shouldRequireFlagshipPermissions: true,
+      certificationConfig: {
+        androidSafetyNetApiKey: 'YOUR_GOOGLE_SAFETY_NET_API_KEY'
+      }
+    },
+```
+
+## Stacks' configuration
+
+In order to certify an app, the `cozy-stack` needs to have the following data:
+- App's package name
+  - The app's package name is set on the react-native project
+  - It should be put in `flagship.apk_package_names` in the `cozy-stack`'s configuration file
+- iOS app's id
+  - The iOS app's id is the concatenation of the developper team's id and the app's package name as defined in the XCode project
+  - If team's id is `ABCDEFGHIJ` and package name is `io.cozy.some_app` then the resulting app's id should be `ABCDEFGHIJ.io.cozy.some_app`
+  - It should be put in `flagship.apple_app_ids` in the `cozy-stack`'s configuration file
+- Android app's certificate digest
+  - The Android certificate digest can be found in the Google Play app's Console, in `Configuration/App integrity` page
+    - On local dev environment, the dev certificate location is:
+      - On a ReactNative project: `<project_root>/android/app/debug.keystore`
+      - On an Android Studio project:
+        - On OSX: `~/.android/debug.keystore`
+        - On Windows: `%UserProfile%\.android\debug.keystore`
+      - On a Xamarin Project:
+        - On OSX: `~/.local/share/Xamarin/Mono for Android/debug.keystore`
+        - On Windows: `%LocalAppData%\Xamarin\Mono for Android\debug.keystore`
+    - To extract the certificat digest from local dev certificate:
+      - `keytool -list -v -keystore ./android/app/debug.keystore -alias androiddebugkey -storepass android -keypass android | grep "SHA256: " | cut -d " " -f 3 | xxd -r -p | openssl base64`
+  - The certificate digest is the `App signing key certificate` in SHA-256 format converted from HEX to base64
+  - It should be put in `flagship.apk_certificate_digests` in the `cozy-stack`'s configuration file

package/dist/flagship-certification/flagship-certification.js

@@ -0,0 +1,163 @@
+"use strict";
+
+var _interopRequireDefault = require("@babel/runtime/helpers/interopRequireDefault");
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.certifyFlagship = void 0;
+
+var _regenerator = _interopRequireDefault(require("@babel/runtime/regenerator"));
+
+var _asyncToGenerator2 = _interopRequireDefault(require("@babel/runtime/helpers/asyncToGenerator"));
+
+var _CozyClient = _interopRequireDefault(require("../CozyClient"));
+
+var _storeAttestation = require("./store-attestation");
+
+/**
+ * Request a challenge from the Stack that can be used to request the app attestation from the app store
+ *
+ * @param {CozyClient} client - the CozyClient instance
+ * @returns {Promise<string>} - the Nonce string returned by the stack
+ */
+var getStackChallenge = /*#__PURE__*/function () {
+  var _ref = (0, _asyncToGenerator2.default)( /*#__PURE__*/_regenerator.default.mark(function _callee(client) {
+    var stackClient, result;
+    return _regenerator.default.wrap(function _callee$(_context) {
+      while (1) {
+        switch (_context.prev = _context.next) {
+          case 0:
+            _context.prev = 0;
+            stackClient = client.getStackClient();
+            _context.next = 4;
+            return stackClient.fetchJSON('POST', "/auth/clients/".concat(stackClient.oauthOptions.clientID, "/challenge"), null, {
+              headers: {
+                Authorization: stackClient.registrationAccessTokenToAuthHeader()
+              }
+            });
+
+          case 4:
+            result = _context.sent;
+            return _context.abrupt("return", result.nonce);
+
+          case 8:
+            _context.prev = 8;
+            _context.t0 = _context["catch"](0);
+            throw new Error('[FLAGSHIP_CERTIFICATION] Something went wrong while requesting a challenge from CozyStack:\n' + _context.t0.message);
+
+          case 11:
+          case "end":
+            return _context.stop();
+        }
+      }
+    }, _callee, null, [[0, 8]]);
+  }));
+
+  return function getStackChallenge(_x) {
+    return _ref.apply(this, arguments);
+  };
+}();
+/**
+ * Give the app attestation to the Stack
+ *
+ * @param {AttestationResult} appAttestation - the app attestation that was returned by the app store
+ * @param {string} nonce - the Nonce string retrieved from the stack
+ * @param {CozyClient} client - the CozyClient instance
+ */
+
+
+var giveAppAttestationToStack = /*#__PURE__*/function () {
+  var _ref2 = (0, _asyncToGenerator2.default)( /*#__PURE__*/_regenerator.default.mark(function _callee2(appAttestation, nonce, client) {
+    var platform, attestation, keyId, stackClient;
+    return _regenerator.default.wrap(function _callee2$(_context2) {
+      while (1) {
+        switch (_context2.prev = _context2.next) {
+          case 0:
+            _context2.prev = 0;
+            platform = appAttestation.platform, attestation = appAttestation.attestation, keyId = appAttestation.keyId;
+            stackClient = client.getStackClient();
+            _context2.next = 5;
+            return stackClient.fetchJSON('POST', "/auth/clients/".concat(stackClient.oauthOptions.clientID, "/attestation"), {
+              platform: platform,
+              attestation: attestation,
+              challenge: nonce,
+              keyId: keyId
+            }, {
+              headers: {
+                Authorization: stackClient.registrationAccessTokenToAuthHeader()
+              }
+            });
+
+          case 5:
+            _context2.next = 10;
+            break;
+
+          case 7:
+            _context2.prev = 7;
+            _context2.t0 = _context2["catch"](0);
+            throw new Error('[FLAGSHIP_CERTIFICATION] Something went wrong while giving attestation to CozyStack:\n' + _context2.t0.message);
+
+          case 10:
+          case "end":
+            return _context2.stop();
+        }
+      }
+    }, _callee2, null, [[0, 7]]);
+  }));
+
+  return function giveAppAttestationToStack(_x2, _x3, _x4) {
+    return _ref2.apply(this, arguments);
+  };
+}();
+/**
+ * Verify app's identity and integrity so the Stack can trust it
+ * Verification is done on Stack side by using information from the app's store (Google Play or Apple AppStore)
+ *
+ * @param {CertificationConfig} certificationConfig - the required configuration to access the stores API
+ * @param {CozyClient} client - the CozyClient instance
+ */
+
+
+var certifyFlagship = /*#__PURE__*/function () {
+  var _ref3 = (0, _asyncToGenerator2.default)( /*#__PURE__*/_regenerator.default.mark(function _callee3(certificationConfig, client) {
+    var stackChallengeNonce, appAttestation;
+    return _regenerator.default.wrap(function _callee3$(_context3) {
+      while (1) {
+        switch (_context3.prev = _context3.next) {
+          case 0:
+            if (certificationConfig) {
+              _context3.next = 2;
+              break;
+            }
+
+            throw new Error('[FLAGSHIP_CERTIFICATION] Certification configuration is not set');
+
+          case 2:
+            _context3.next = 4;
+            return getStackChallenge(client);
+
+          case 4:
+            stackChallengeNonce = _context3.sent;
+            _context3.next = 7;
+            return (0, _storeAttestation.getAppAttestationFromStore)(stackChallengeNonce, certificationConfig);
+
+          case 7:
+            appAttestation = _context3.sent;
+            _context3.next = 10;
+            return giveAppAttestationToStack(appAttestation, stackChallengeNonce, client);
+
+          case 10:
+          case "end":
+            return _context3.stop();
+        }
+      }
+    }, _callee3);
+  }));
+
+  return function certifyFlagship(_x5, _x6) {
+    return _ref3.apply(this, arguments);
+  };
+}();
+
+exports.certifyFlagship = certifyFlagship;

package/dist/flagship-certification/store-attestation.android.js

@@ -0,0 +1,61 @@
+"use strict";
+
+var _interopRequireDefault = require("@babel/runtime/helpers/interopRequireDefault");
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.getAppAttestationFromStore = void 0;
+
+var _regenerator = _interopRequireDefault(require("@babel/runtime/regenerator"));
+
+var _asyncToGenerator2 = _interopRequireDefault(require("@babel/runtime/helpers/asyncToGenerator"));
+
+var _reactNativeGoogleSafetynet = _interopRequireDefault(require("react-native-google-safetynet"));
+
+//@ts-ignore
+
+/**
+ * Retrieve the app's attestation from the Google Play store
+ *
+ * @param {string} nonce - the Nonce string retrieved from the stack
+ * @param {CertificationConfig} certificationConfig - Configuration to access the stores certification API
+ * @returns {Promise<AttestationResult>} the app's attestation
+ */
+var getAppAttestationFromStore = /*#__PURE__*/function () {
+  var _ref = (0, _asyncToGenerator2.default)( /*#__PURE__*/_regenerator.default.mark(function _callee(nonce, certificationConfig) {
+    var attestationResult;
+    return _regenerator.default.wrap(function _callee$(_context) {
+      while (1) {
+        switch (_context.prev = _context.next) {
+          case 0:
+            _context.prev = 0;
+            _context.next = 3;
+            return _reactNativeGoogleSafetynet.default.sendAttestationRequestJWT(nonce, certificationConfig.androidSafetyNetApiKey);
+
+          case 3:
+            attestationResult = _context.sent;
+            return _context.abrupt("return", {
+              platform: 'android',
+              attestation: attestationResult
+            });
+
+          case 7:
+            _context.prev = 7;
+            _context.t0 = _context["catch"](0);
+            throw new Error('[FLAGSHIP_CERTIFICATION] Something went wrong while requesting an attestation from Google Safetynet:\n' + _context.t0.message);
+
+          case 10:
+          case "end":
+            return _context.stop();
+        }
+      }
+    }, _callee, null, [[0, 7]]);
+  }));
+
+  return function getAppAttestationFromStore(_x, _x2) {
+    return _ref.apply(this, arguments);
+  };
+}();
+
+exports.getAppAttestationFromStore = getAppAttestationFromStore;

package/dist/flagship-certification/store-attestation.ios.js

@@ -0,0 +1,67 @@
+"use strict";
+
+var _interopRequireDefault = require("@babel/runtime/helpers/interopRequireDefault");
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.getAppAttestationFromStore = void 0;
+
+var _regenerator = _interopRequireDefault(require("@babel/runtime/regenerator"));
+
+var _asyncToGenerator2 = _interopRequireDefault(require("@babel/runtime/helpers/asyncToGenerator"));
+
+var _reactNativeIos11Devicecheck = _interopRequireDefault(require("react-native-ios11-devicecheck"));
+
+//@ts-ignore
+
+/**
+ * Retrieve the app's attestation from the Apple AppStore
+ *
+ * @param {string} nonce - the Nonce string retrieved from the stack
+ * @param {CertificationConfig} certificationConfig - Configuration to access the stores certification API
+ * @returns {Promise<AttestationResult>} the app's attestation
+ */
+var getAppAttestationFromStore = /*#__PURE__*/function () {
+  var _ref = (0, _asyncToGenerator2.default)( /*#__PURE__*/_regenerator.default.mark(function _callee(nonce, certificationConfig) {
+    var keyId, attestKey;
+    return _regenerator.default.wrap(function _callee$(_context) {
+      while (1) {
+        switch (_context.prev = _context.next) {
+          case 0:
+            _context.prev = 0;
+            _context.next = 3;
+            return _reactNativeIos11Devicecheck.default.generateKey();
+
+          case 3:
+            keyId = _context.sent;
+            _context.next = 6;
+            return _reactNativeIos11Devicecheck.default.attestKey(keyId, nonce);
+
+          case 6:
+            attestKey = _context.sent;
+            return _context.abrupt("return", {
+              platform: 'ios',
+              attestation: attestKey,
+              keyId: keyId
+            });
+
+          case 10:
+            _context.prev = 10;
+            _context.t0 = _context["catch"](0);
+            throw new Error('[FLAGSHIP_CERTIFICATION] Something went wrong while requesting an attestation from Apple DeviceCheck:\n' + _context.t0.message);
+
+          case 13:
+          case "end":
+            return _context.stop();
+        }
+      }
+    }, _callee, null, [[0, 10]]);
+  }));
+
+  return function getAppAttestationFromStore(_x, _x2) {
+    return _ref.apply(this, arguments);
+  };
+}();
+
+exports.getAppAttestationFromStore = getAppAttestationFromStore;

package/dist/flagship-certification/store-attestation.js

@@ -0,0 +1,44 @@
+"use strict";
+
+var _interopRequireDefault = require("@babel/runtime/helpers/interopRequireDefault");
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.getAppAttestationFromStore = void 0;
+
+var _regenerator = _interopRequireDefault(require("@babel/runtime/regenerator"));
+
+var _asyncToGenerator2 = _interopRequireDefault(require("@babel/runtime/helpers/asyncToGenerator"));
+
+/**
+ * Retrieve the app's attestation from the app's store
+ * /!\ This is a mock implementation that should never be called
+ *
+ * @param {string} nonce - the Nonce string retrieved from the stack
+ * @param {CertificationConfig} certificationConfig - Configuration to access the stores certification API
+ * @returns {Promise<AttestationResult>} the app's attestation
+ */
+var validateAppMock = /*#__PURE__*/function () {
+  var _ref = (0, _asyncToGenerator2.default)( /*#__PURE__*/_regenerator.default.mark(function _callee(nonce, certificationConfig) {
+    return _regenerator.default.wrap(function _callee$(_context) {
+      while (1) {
+        switch (_context.prev = _context.next) {
+          case 0:
+            throw new Error("validateApp can only be called from a React Native container");
+
+          case 1:
+          case "end":
+            return _context.stop();
+        }
+      }
+    }, _callee);
+  }));
+
+  return function validateAppMock(_x, _x2) {
+    return _ref.apply(this, arguments);
+  };
+}();
+
+var getAppAttestationFromStore = validateAppMock;
+exports.getAppAttestationFromStore = getAppAttestationFromStore;

package/dist/flagship-certification/typedefs.js

@@ -0,0 +1,24 @@
+/**
+ * A JSON Web Signature
+ * @typedef {string} jws
+ */
+
+/**
+ * A JSON Web Signature
+ * @typedef {string} base64string
+ */
+
+/**
+ * An app attestation from the app store
+ * @typedef {object} AttestationResult
+ * @property {string} platform
+ * @property {jws|base64string} attestation
+ * @property {string} [keyId]
+ */
+
+/**
+ * Configuration to access the stores certification API
+ * @typedef {object} CertificationConfig
+ * @property {string} androidSafetyNetApiKey
+ */
+"use strict";

package/dist/hooks/useQuery.js

@@ -103,8 +103,12 @@ var useQuery = function useQuery(queryDefinition, options) {
       as: as
     });
   }, [as, client]);
+  var fetch = (0, _react.useCallback)(function () {
+    return client.query(definition, options);
+  }, [client, definition, options]);
   return _objectSpread(_objectSpread({}, queryState), {}, {
-    fetchMore: fetchMore
+    fetchMore: fetchMore,
+    fetch: fetch
   });
 };
 

package/dist/hooks/useQuery.spec.jsx

@@ -52,6 +52,46 @@ describe('use query', () => {
     })
   })
 
+  it('should share the same API than ObservableQuery', () => {
+    const {
+      hookResult: {
+        result: { current }
+      }
+    } = setupQuery({
+      queryOptions: {
+        as: 'simpsons'
+      },
+      queryDefinition: () => Q('io.cozy.simpsons')
+    })
+    expect(current).toMatchObject({
+      data: [
+        expect.objectContaining({ name: 'Homer' }),
+        expect.objectContaining({ name: 'Marge' })
+      ],
+      definition: expect.objectContaining({
+        doctype: 'io.cozy.simpsons'
+      })
+    })
+
+    expect(Object.keys(current)).toEqual(
+      expect.objectContaining([
+        'id',
+        'definition',
+        'fetchStatus',
+        'lastFetch',
+        'lastUpdate',
+        'lastErrorUpdate',
+        'lastError',
+        'hasMore',
+        'count',
+        'data',
+        'bookmark',
+        'options',
+        'fetchMore',
+        'fetch'
+      ])
+    )
+  })
   it('should query through the client in context', () => {
     const { client } = setupQuery({
       queryOptions: {

package/dist/models/document/documentTypeData.js

@@ -32,27 +32,27 @@ var buildItemsByLabel = function buildItemsByLabel(labels) {
  */
 
 
-var identityLabels = ['identity_photo', 'national_id_card', 'passport', 'residence_permit', 'family_record_book', 'birth_certificate', 'driver_license', 'other_identity_document'];
+var identityLabels = ['identity_photo', 'national_id_card', 'passport', 'residence_permit', 'family_record_book', 'birth_certificate', 'driver_license', 'citizen_registration_certificate', 'personal_sporting_licence', 'other_identity_document'];
 /**
  * @type {Array<FamilyLabel>}
  */
 
-var familyLabels = ['family_record_book', 'birth_certificate', 'wedding', 'pacs', 'divorce', 'large_family_card', 'caf', 'other_family_document'];
+var familyLabels = ['family_record_book', 'birth_certificate', 'wedding', 'pacs', 'divorce', 'large_family_card', 'caf', 'payment_proof_family_allowance', 'other_family_document'];
 /**
  * @type {Array<WorkStudyLabels>}
  */
 
-var workStudyLabels = ['diploma', 'work_contract', 'pay_sheet', 'unemployment_benefit', 'pension', 'other_revenue', 'gradebook', 'student_card', 'resume', 'motivation_letter', 'other_work_document'];
+var workStudyLabels = ['diploma', 'work_contract', 'pay_sheet', 'unemployment_benefit', 'pension', 'work_disability_recognition', 'other_revenue', 'gradebook', 'student_card', 'school_attendance_certificate', 'resume', 'motivation_letter', 'other_work_document'];
 /**
  * @type {Array<HealthLabels>}
  */
 
-var healthLabels = ['health_certificate', 'health_book', 'national_health_insurance_card', 'health_insurance_card', 'prescription', 'health_invoice'];
+var healthLabels = ['health_certificate', 'health_book', 'national_health_insurance_card', 'national_health_insurance_right_certificate', 'health_insurance_card', 'prescription', 'health_invoice', 'work_disability_recognition', 'pregnancy_medical_certificate', 'other_health_document'];
 /**
  * @type {Array<HomeLabels>}
  */
 
-var homeLabels = ['phone_invoice', 'isp_invoice', 'telecom_invoice', 'energy_invoice', 'water_invoice', 'house_sale_agreeement', 'building_permit', 'technical_diagnostic_record', 'lease', 'rent_receipt', 'house_insurance', 'work_quote', 'work_invoice', 'other_house_document'];
+var homeLabels = ['phone_invoice', 'isp_invoice', 'telecom_invoice', 'energy_invoice', 'water_invoice', 'house_sale_agreeement', 'building_permit', 'technical_diagnostic_record', 'unfit_for_habitation_declaration', 'lease', 'rent_receipt', 'accommodation_proof', 'house_insurance', 'work_quote', 'work_invoice', 'other_house_document'];
 /**
  * @type {Array<TransportLabels>}
  */
@@ -62,7 +62,7 @@ var transportLabels = ['driver_license', 'vehicle_registration', 'car_insurance'
  * @type {Array<FinanceLabels>}
  */
 
-var financeLabels = ['tax_return', 'tax_notice', 'tax_timetable', 'receipt', 'other_tax_document', 'bank_details', 'bank_statement', 'loan_agreement', 'other_bank_document'];
+var financeLabels = ['tax_return', 'tax_notice', 'tax_timetable', 'receipt', 'other_tax_document', 'bank_details', 'bank_statement', 'loan_agreement', 'payment_proof_family_allowance', 'other_bank_document'];
 /**
  * @type {Array<InvoiceLabels>}
  */

package/dist/models/document/locales/en.json

@@ -19,7 +19,7 @@
     "items": {
       "identity": "Identity",
       "family": "Family",
-      "work_study": "Work",
+      "work_study": "Work & Study",
       "health": "Health",
       "home": "Home",
       "transport": "Transport",
@@ -31,13 +31,15 @@
       "residence_permit": "Residence permit",
       "family_record_book": "Family record book",
       "birth_certificate": "Birth certificate",
+      "citizen_registration_certificate": "Certificate of citizen registration",
       "driver_license": "Driving license",
       "other_identity_document": "Other identity",
       "wedding": "Wedding contract",
       "pacs": "Civil union",
       "divorce": "Divorce",
       "large_family_card": " Large Family Card",
-      "caf": "Social benefit",
+      "caf": "Social benefit rate",
+      "payment_proof_family_allowance": "family allowance payment proof",
       "other_family_document": "Other family document",
       "diploma": "Diploma",
       "work_contract": "Work contract",
@@ -47,12 +49,16 @@
       "other_revenue": "Other revenues",
       "gradebook": "Gradebook",
       "student_card": "Student card",
+      "school_attendance_certificate": "Certificate of school attendance",
       "resume": "Resume",
       "motivation_letter": "Motivation letter",
       "other_work_document": "Other work document",
       "health_book": "Health book",
       "health_certificate": "Health/Vaccination certificate",
-      "national_health_insurance_card": "National insurance card",
+      "disability_recognition": "Recognition of disability",
+      "pregnancy_medical_certificate": "Certificate of pregnancy",
+      "national_health_insurance_card": "National health insurance card",
+      "national_health_insurance_right_certificate": "National health insurance right certificate",
       "health_insurance_card": "Insurance card",
       "prescription": "Prescription",
       "health_invoice": "Health invoice",
@@ -75,7 +81,9 @@
       "technical_diagnostic_record": "Technical diagnostic record",
       "lease": "Lease",
       "house_insurance": "Home insurance",
+      "unfit_for_habitation_declaration": "Declaration of unfit for habitation",
       "rent_receipt": "Rent receipt",
+      "accommodation_proof": "Proof of accommodation",
       "work_quote": "Work quote",
       "work_invoice": "Work invoice",
       "other_house_document": "Other house document",
@@ -89,12 +97,13 @@
       "loan_agreement": "Loan agreement",
       "other_bank_document": "Other banking document",
       "invoices": "Invoices",
+      "personal_sporting_licence": "Sporting licence",
       "other_invoice": "Other invoice"
     },
     "themes": {
       "identity": "Identity",
       "family": "Family",
-      "work_study": "Work",
+      "work_study": "Work & Study",
       "health": "Health",
       "home": "Home",
       "transport": "Transport",

package/dist/models/document/locales/fr.json

@@ -19,7 +19,7 @@
     "items": {
       "identity": "Identité",
       "family": "Famille",
-      "work_study": "Travail",
+      "work_study": "Travail & Études",
       "health": "Santé",
       "home": "Logement",
       "transport": "Transport",
@@ -31,13 +31,15 @@
       "residence_permit": "Titre de séjour",
       "family_record_book": "Livret de famille",
       "birth_certificate": "Certificat de naissance",
+      "citizen_registration_certificate": "Attestation de recensement citoyen",
       "driver_license": "Permis",
       "other_identity_document": "Autre identité",
       "wedding": "Contrat de mariage",
       "pacs": "Attestation de PACS",
       "divorce": "Attestation de divorce",
       "large_family_card": "Carte famille nombreuse",
-      "caf": "CAF",
+      "caf": "Attestation de quotient familial (CAF)",
+      "payment_proof_family_allowance": "Attestation de paiement CAF",
       "other_family_document": "Autre document de famille",
       "diploma": "Diplôme",
       "work_contract": "Contrat de travail",
@@ -47,12 +49,16 @@
       "other_revenue": "Autres revenues",
       "gradebook": "Bulletin de notes",
       "student_card": "Carte d'étudiant",
+      "school_attendance_certificate": "Certificat de scolarité",
       "resume": "CV",
       "motivation_letter": "Lettre de motivation",
       "other_work_document": "Autre document de travail",
       "health_book": "Carnet de santé",
       "health_certificate": "Certificat de santé/vaccination",
+      "work_disability_recognition": "Reconnaissance de handicap - RQTH",
+      "pregnancy_medical_certificate": "Certificat de grossesse",
       "national_health_insurance_card": "Carte vitale",
+      "national_health_insurance_right_certificate": "Attestation de droits de l'Assurance Maladie (vitale)",
       "health_insurance_card": "Carte de mutuelle",
       "prescription": "Ordonnance",
       "health_invoice": "Facture médicale",
@@ -74,27 +80,30 @@
       "building_permit": "Permis de construire",
       "technical_diagnostic_record": "Dossier de diagnostic technique",
       "lease": "Bail",
+      "unfit_for_habitation_declaration": "Arrêté d'insalubrité",
       "house_insurance": "Assurance logement",
       "rent_receipt": "Quittance de loyer",
+      "accommodation_proof": "Attestation d'hébergement",
       "work_quote": "Devis de travaux",
       "work_invoice": "Facture de travaux",
       "other_house_document": "Autre document de logement",
-      "tax_return": "Déclaration d'impôt",
-      "tax_notice": "Avis d'imposition",
-      "tax_timetable": "Echéancier d'imposition",
+      "tax_return": "Impôts - Déclaration de revenus",
+      "tax_notice": "Impôts - Avis d'imposition",
+      "tax_timetable": "Impôts - Echéancier",
       "receipt": "Accusé de réception",
-      "other_tax_document": "Autre document d'impôt",
+      "other_tax_document": "Impôts - Autre document",
       "bank_details": "IBAN",
       "bank_statement": "Relevé de compte",
       "loan_agreement": "Contrat de prêt",
       "other_bank_document": "Autre document bancaire",
       "invoices": "Factures",
+      "personal_sporting_licence": "Licences sportives",
       "other_invoice": "Autre facture"
     },
     "themes": {
       "identity": "Identité",
       "family": "Famille",
-      "work_study": "Travail",
+      "work_study": "Travail & Études",
       "health": "Santé",
       "home": "Logement",
       "transport": "Transport",

package/dist/models/permission.js

@@ -100,7 +100,7 @@ function _fetchOwn() {
           case 0:
             collection = client.collection('io.cozy.permissions');
             _context.next = 3;
-            return collection.getOwnPermissions();
+            return collection.fetchOwnPermissions();
 
           case 3:
             data = _context.sent;

package/dist/models/permission.spec.js

@@ -42,7 +42,7 @@ function setupClient(verbs = [], ids = ['first', 'other']) {
   return {
     query: async data => data,
     collection: () => ({
-      getOwnPermissions: async () => ({
+      fetchOwnPermissions: async () => ({
         data: {
           id: '9385e37389cb9f71a230168f245df2f8',
           _id: '9385e37389cb9f71a230168f245df2f8',

package/dist/types.js

@@ -276,19 +276,19 @@ var _dsl = require("./queries/dsl");
  */
 
 /**
- * @typedef {'identity_photo'|'national_id_card'|'passport'|'residence_permit'|'family_record_book'|'birth_certificate'|'driver_license'|'other_identity_document'} IdentityLabel
+ * @typedef {'identity_photo'|'national_id_card'|'passport'|'residence_permit'|'family_record_book'|'birth_certificate'|'driver_license'|'other_identity_document'|'citizen_registration_certificate'|'personal_sporting_licence'} IdentityLabel
  *
- * @typedef {'family_record_book'|'birth_certificate'|'wedding'|'pacs'|'divorce'|'large_family_card'|'caf'|'other_family_document'} FamilyLabel
+ * @typedef {'family_record_book'|'birth_certificate'|'wedding'|'pacs'|'divorce'|'large_family_card'|'caf'|'other_family_document'|'payment_proof_family_allowance'} FamilyLabel
  *
- * @typedef {'diploma'|'work_contract'|'pay_sheet'|'unemployment_benefit'|'pension'|'other_revenue'|'gradebook'|'student_card'|'resume'|'motivation_letter'|'other_work_document'} WorkStudyLabels
+ * @typedef {'diploma'|'work_contract'|'pay_sheet'|'unemployment_benefit'|'pension'|'other_revenue'|'gradebook'|'student_card'|'resume'|'motivation_letter'|'other_work_document'|'work_disability_recognition'|'school_attendance_certificate'} WorkStudyLabels
  *
- * @typedef {'health_certificate'|'health_book'|'national_health_insurance_card'|'health_insurance_card'|'prescription'|'health_invoice'} HealthLabels
+ * @typedef {'health_certificate'|'health_book'|'national_health_insurance_card'|'health_insurance_card'|'prescription'|'health_invoice'|'national_health_insurance_right_certificate'|'work_disability_recognition'|'pregnancy_medical_certificate'|'other_health_document'} HealthLabels
  *
- * @typedef {'phone_invoice'|'isp_invoice'|'telecom_invoice'|'energy_invoice'|'water_invoice'|'house_sale_agreeement'|'building_permit'|'technical_diagnostic_record'|'lease'|'rent_receipt'|'house_insurance'|'work_quote'|'work_invoice'|'other_house_document'} HomeLabels
+ * @typedef {'phone_invoice'|'isp_invoice'|'telecom_invoice'|'energy_invoice'|'water_invoice'|'house_sale_agreeement'|'building_permit'|'technical_diagnostic_record'|'lease'|'rent_receipt'|'house_insurance'|'work_quote'|'work_invoice'|'other_house_document'|'unfit_for_habitation_declaration'|'accommodation_proof'|'house_insurance'} HomeLabels
  *
  * @typedef {'driver_license'|'vehicle_registration'|'car_insurance'|'mechanic_invoice'|'transport_invoice'|'other_transport_document'} TransportLabels
  *
- * @typedef {'tax_return'|'tax_notice'|'tax_timetable'|'receipt'|'other_tax_document'|'bank_details'|'bank_statement'|'loan_agreement'|'other_bank_document'} FinanceLabels
+ * @typedef {'tax_return'|'tax_notice'|'tax_timetable'|'receipt'|'other_tax_document'|'bank_details'|'bank_statement'|'loan_agreement'|'other_bank_document'|'payment_proof_family_allowance'} FinanceLabels
  *
  * @typedef {'phone_invoice'|'isp_invoice'|'telecom_invoice'|'energy_invoice'|'water_invoice'|'appliance_invoice'|'web_service_invoice'|'restaurant_invoice'|'work_invoice'|'transport_invoice'|'health_invoice'|'other_invoice'} InvoiceLabels
  *

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cozy-client",
-  "version": "27.6.3",
+  "version": "27.8.0",
   "license": "MIT",
   "main": "dist/index.node.js",
   "browser": "dist/index.js",
@@ -21,7 +21,7 @@
     "cozy-device-helper": "^1.12.0",
     "cozy-flags": "2.7.1",
     "cozy-logger": "^1.6.0",
-    "cozy-stack-client": "^27.6.3",
+    "cozy-stack-client": "^27.6.5",
     "json-stable-stringify": "^1.0.1",
     "lodash": "^4.17.13",
     "microee": "^0.0.6",
@@ -66,8 +66,10 @@
     "cozy-ui": ">34.0.0",
     "react": "^16.7.0",
     "react-native": "^0.65.0",
-    "react-native-inappbrowser-reborn": "^3.5.1"
+    "react-native-google-safetynet": "0.0.4",
+    "react-native-inappbrowser-reborn": "^3.5.1",
+    "react-native-ios11-devicecheck": "https://github.com/cozy/react-native-devicecheck#app-attest-v0.1"
   },
   "sideEffects": false,
-  "gitHead": "87d529f5b86d5ef5227da50e7160d34c197441c6"
+  "gitHead": "503b86d3aef51c8f9b684dbcffcdad49bd41ca5e"
 }

package/types/flagship-certification/flagship-certification.d.ts

@@ -0,0 +1,2 @@
+export function certifyFlagship(certificationConfig: CertificationConfig, client: CozyClient): Promise<void>;
+import CozyClient from "../CozyClient";

package/types/flagship-certification/store-attestation.android.d.ts

@@ -0,0 +1 @@
+export function getAppAttestationFromStore(nonce: string, certificationConfig: CertificationConfig): Promise<AttestationResult>;

package/types/flagship-certification/store-attestation.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Retrieve the app's attestation from the app's store
+ * /!\ This is a mock implementation that should never be called
+ *
+ * @param {string} nonce - the Nonce string retrieved from the stack
+ * @param {CertificationConfig} certificationConfig - Configuration to access the stores certification API
+ * @returns {Promise<AttestationResult>} the app's attestation
+ */
+export function getAppAttestationFromStore(nonce: string, certificationConfig: CertificationConfig): Promise<AttestationResult>;

package/types/flagship-certification/store-attestation.ios.d.ts

@@ -0,0 +1 @@
+export function getAppAttestationFromStore(nonce: string, certificationConfig: CertificationConfig): Promise<AttestationResult>;

package/types/flagship-certification/typedefs.d.ts

@@ -0,0 +1,22 @@
+/**
+ * A JSON Web Signature
+ */
+type jws = string;
+/**
+ * A JSON Web Signature
+ */
+type base64string = string;
+/**
+ * An app attestation from the app store
+ */
+type AttestationResult = {
+    platform: string;
+    attestation: jws | base64string;
+    keyId?: string;
+};
+/**
+ * Configuration to access the stores certification API
+ */
+type CertificationConfig = {
+    androidSafetyNetApiKey: string;
+};

package/types/models/permission.d.ts

@@ -52,7 +52,7 @@ export type Document = {
     _type: string;
     type: string;
 };
-export type PermissionVerb = "DELETE" | "PUT" | "POST" | "GET" | "ALL" | "PATCH";
+export type PermissionVerb = "POST" | "DELETE" | "PUT" | "GET" | "ALL" | "PATCH";
 export type PermissionItem = {
     /**
      * - ALL, GET, PUT, PATCH, DELETE, POST…

package/types/types.d.ts

@@ -315,13 +315,13 @@ export type QualificationAttributes = {
     sourceSubCategory?: string;
     subjects?: Array<string>;
 };
-export type IdentityLabel = "identity_photo" | "national_id_card" | "passport" | "residence_permit" | "family_record_book" | "birth_certificate" | "driver_license" | "other_identity_document";
-export type FamilyLabel = "family_record_book" | "birth_certificate" | "wedding" | "pacs" | "divorce" | "large_family_card" | "caf" | "other_family_document";
-export type WorkStudyLabels = "resume" | "diploma" | "work_contract" | "pay_sheet" | "unemployment_benefit" | "pension" | "other_revenue" | "gradebook" | "student_card" | "motivation_letter" | "other_work_document";
-export type HealthLabels = "health_certificate" | "health_book" | "national_health_insurance_card" | "health_insurance_card" | "prescription" | "health_invoice";
-export type HomeLabels = "phone_invoice" | "isp_invoice" | "telecom_invoice" | "energy_invoice" | "water_invoice" | "house_sale_agreeement" | "building_permit" | "technical_diagnostic_record" | "lease" | "rent_receipt" | "house_insurance" | "work_quote" | "work_invoice" | "other_house_document";
+export type IdentityLabel = "identity_photo" | "national_id_card" | "passport" | "residence_permit" | "family_record_book" | "birth_certificate" | "driver_license" | "other_identity_document" | "citizen_registration_certificate" | "personal_sporting_licence";
+export type FamilyLabel = "family_record_book" | "birth_certificate" | "wedding" | "pacs" | "divorce" | "large_family_card" | "caf" | "other_family_document" | "payment_proof_family_allowance";
+export type WorkStudyLabels = "resume" | "diploma" | "work_contract" | "pay_sheet" | "unemployment_benefit" | "pension" | "other_revenue" | "gradebook" | "student_card" | "motivation_letter" | "other_work_document" | "work_disability_recognition" | "school_attendance_certificate";
+export type HealthLabels = "work_disability_recognition" | "health_certificate" | "health_book" | "national_health_insurance_card" | "health_insurance_card" | "prescription" | "health_invoice" | "national_health_insurance_right_certificate" | "pregnancy_medical_certificate" | "other_health_document";
+export type HomeLabels = "phone_invoice" | "isp_invoice" | "telecom_invoice" | "energy_invoice" | "water_invoice" | "house_sale_agreeement" | "building_permit" | "technical_diagnostic_record" | "lease" | "rent_receipt" | "house_insurance" | "work_quote" | "work_invoice" | "other_house_document" | "unfit_for_habitation_declaration" | "accommodation_proof";
 export type TransportLabels = "driver_license" | "vehicle_registration" | "car_insurance" | "mechanic_invoice" | "transport_invoice" | "other_transport_document";
-export type FinanceLabels = "tax_return" | "tax_notice" | "tax_timetable" | "receipt" | "other_tax_document" | "bank_details" | "bank_statement" | "loan_agreement" | "other_bank_document";
+export type FinanceLabels = "payment_proof_family_allowance" | "tax_return" | "tax_notice" | "tax_timetable" | "receipt" | "other_tax_document" | "bank_details" | "bank_statement" | "loan_agreement" | "other_bank_document";
 export type InvoiceLabels = "health_invoice" | "phone_invoice" | "isp_invoice" | "telecom_invoice" | "energy_invoice" | "water_invoice" | "work_invoice" | "transport_invoice" | "appliance_invoice" | "web_service_invoice" | "restaurant_invoice" | "other_invoice";
-export type ItemsLabels = "resume" | "identity_photo" | "national_id_card" | "passport" | "residence_permit" | "family_record_book" | "birth_certificate" | "driver_license" | "other_identity_document" | "wedding" | "pacs" | "divorce" | "large_family_card" | "caf" | "other_family_document" | "diploma" | "work_contract" | "pay_sheet" | "unemployment_benefit" | "pension" | "other_revenue" | "gradebook" | "student_card" | "motivation_letter" | "other_work_document" | "health_certificate" | "health_book" | "national_health_insurance_card" | "health_insurance_card" | "prescription" | "health_invoice" | "phone_invoice" | "isp_invoice" | "telecom_invoice" | "energy_invoice" | "water_invoice" | "house_sale_agreeement" | "building_permit" | "technical_diagnostic_record" | "lease" | "rent_receipt" | "house_insurance" | "work_quote" | "work_invoice" | "other_house_document" | "vehicle_registration" | "car_insurance" | "mechanic_invoice" | "transport_invoice" | "other_transport_document" | "tax_return" | "tax_notice" | "tax_timetable" | "receipt" | "other_tax_document" | "bank_details" | "bank_statement" | "loan_agreement" | "other_bank_document" | "appliance_invoice" | "web_service_invoice" | "restaurant_invoice" | "other_invoice";
+export type ItemsLabels = "resume" | "identity_photo" | "national_id_card" | "passport" | "residence_permit" | "family_record_book" | "birth_certificate" | "driver_license" | "other_identity_document" | "citizen_registration_certificate" | "personal_sporting_licence" | "wedding" | "pacs" | "divorce" | "large_family_card" | "caf" | "other_family_document" | "payment_proof_family_allowance" | "diploma" | "work_contract" | "pay_sheet" | "unemployment_benefit" | "pension" | "other_revenue" | "gradebook" | "student_card" | "motivation_letter" | "other_work_document" | "work_disability_recognition" | "school_attendance_certificate" | "health_certificate" | "health_book" | "national_health_insurance_card" | "health_insurance_card" | "prescription" | "health_invoice" | "national_health_insurance_right_certificate" | "pregnancy_medical_certificate" | "other_health_document" | "phone_invoice" | "isp_invoice" | "telecom_invoice" | "energy_invoice" | "water_invoice" | "house_sale_agreeement" | "building_permit" | "technical_diagnostic_record" | "lease" | "rent_receipt" | "house_insurance" | "work_quote" | "work_invoice" | "other_house_document" | "unfit_for_habitation_declaration" | "accommodation_proof" | "vehicle_registration" | "car_insurance" | "mechanic_invoice" | "transport_invoice" | "other_transport_document" | "tax_return" | "tax_notice" | "tax_timetable" | "receipt" | "other_tax_document" | "bank_details" | "bank_statement" | "loan_agreement" | "other_bank_document" | "appliance_invoice" | "web_service_invoice" | "restaurant_invoice" | "other_invoice";
 import { QueryDefinition } from "./queries/dsl";