am.noz.twopassword.config

{
  "description": "Root configuration and encrypted Vault Key for 2password vault in an AT Protocol Space.",
  "key": "literal:self",
  "record": {
    "properties": {
      "createdAt": {
        "format": "datetime",
        "type": "string"
      },
      "encryptedVaultKey": {
        "properties": {
          "ciphertext": {
            "description": "AES-256-GCM encrypted 256-bit Vault Key (base64)",
            "type": "string"
          },
          "iv": {
            "description": "12-byte initialization vector (base64)",
            "type": "string"
          },
          "tag": {
            "description": "16-byte AES-GCM authentication tag (base64)",
            "type": "string"
          }
        },
        "required": [
          "iv",
          "ciphertext",
          "tag"
        ],
        "type": "object"
      },
      "kdf": {
        "properties": {
          "algorithm": {
            "knownValues": [
              "argon2id",
              "pbkdf2"
            ],
            "type": "string"
          },
          "iterations": {
            "description": "Argon2 iterations (e.g. 3)",
            "type": "integer"
          },
          "memory": {
            "description": "Argon2 memory in KiB (e.g. 65536 = 64MB)",
            "type": "integer"
          },
          "parallelism": {
            "description": "Argon2 parallelism threads (e.g. 4)",
            "type": "integer"
          },
          "salt": {
            "description": "Optional extra salt (base64) when DID is not used alone",
            "type": "string"
          }
        },
        "required": [
          "algorithm",
          "memory",
          "iterations",
          "parallelism"
        ],
        "type": "object"
      },
      "updatedAt": {
        "format": "datetime",
        "type": "string"
      },
      "version": {
        "description": "Vault schema version",
        "type": "integer"
      }
    },
    "required": [
      "version",
      "kdf",
      "encryptedVaultKey",
      "createdAt"
    ],
    "type": "object"
  },
  "type": "record"
}