/** * method-catalog-stepup.ts * * Contract descriptors for the relay WebAuthn step-up ceremony verbs: * * - stepup.credentials.register, store a passkey (credentialId + COSE public * key + starting signature counter) and establish the deployment policy * (rpId, allowed origins, user-verification requirement). Admin-gated; a * self-hosted deployment registers the credential directly ('none' * attestation), so there is no attestation chain to verify here (documented * in docs/relay-zero-knowledge.md). * - stepup.challenge.mint, issue a short-lived, single-use challenge bound to * the calling session/rendezvous, which a surface feeds to * `navigator.credentials.get` before making a mutating relay call. * * The assertion produced by the passkey is carried on the mutating call in the * `x-goodvibes-stepup-assertion` header and verified by the daemon's real * StepUpAssertionVerifier (relay/step-up-service.ts), no operator verb reads or * returns assertions. */ import type { GatewayMethodDescriptor } from './method-catalog-shared.js'; export declare const STEP_UP_CREDENTIAL_SUMMARY_SCHEMA: Record; export declare const STEP_UP_CREDENTIALS_REGISTER_INPUT_SCHEMA: Record; export declare const STEP_UP_CREDENTIALS_REGISTER_OUTPUT_SCHEMA: Record; export declare const STEP_UP_CHALLENGE_MINT_INPUT_SCHEMA: Record; export declare const STEP_UP_CHALLENGE_MINT_OUTPUT_SCHEMA: Record; export declare const builtinGatewayStepUpMethodDescriptors: readonly GatewayMethodDescriptor[]; //# sourceMappingURL=method-catalog-stepup.d.ts.map