am.noz.twopassword.config

{
  "$type": "com.atproto.lexicon.schema",
  "defs": {
    "main": {
      "description": "Root configuration and encrypted Vault Key for 2password vault in an AT Protocol Space.",
      "key": "literal:self",
      "record": {
        "properties": {
          "createdAt": {
            "format": "datetime",
            "type": "string"
          },
          "encryptedVaultKey": {
            "properties": {
              "ciphertext": {
                "description": "AES-256-GCM encrypted 256-bit Vault Key (base64)",
                "type": "string"
              },
              "iv": {
                "description": "12-byte initialization vector (base64)",
                "type": "string"
              },
              "tag": {
                "description": "16-byte AES-GCM authentication tag (base64)",
                "type": "string"
              }
            },
            "required": [
              "iv",
              "ciphertext",
              "tag"
            ],
            "type": "object"
          },
          "kdf": {
            "properties": {
              "algorithm": {
                "knownValues": [
                  "argon2id",
                  "pbkdf2"
                ],
                "type": "string"
              },
              "iterations": {
                "description": "Argon2 iterations (e.g. 3)",
                "type": "integer"
              },
              "memory": {
                "description": "Argon2 memory in KiB (e.g. 65536 = 64MB)",
                "type": "integer"
              },
              "parallelism": {
                "description": "Argon2 parallelism threads (e.g. 4)",
                "type": "integer"
              },
              "salt": {
                "description": "Optional extra salt (base64) when DID is not used alone",
                "type": "string"
              }
            },
            "required": [
              "algorithm",
              "memory",
              "iterations",
              "parallelism"
            ],
            "type": "object"
          },
          "updatedAt": {
            "format": "datetime",
            "type": "string"
          },
          "version": {
            "description": "Vault schema version",
            "type": "integer"
          }
        },
        "required": [
          "version",
          "kdf",
          "encryptedVaultKey",
          "createdAt"
        ],
        "type": "object"
      },
      "type": "record"
    }
  },
  "id": "am.noz.twopassword.config",
  "lexicon": 1
}