specs/vault/shared/v0_2/vault_entry
library
Extension Types
-
SecretKind
-
Discriminator for the secret type stored in the entry. Definitions: -
password —
username + password (+ optional TOTP seed). - passkey — WebAuthn discoverable
credential (private key + rpId + userHandle). - oauthTokens — OAuth 2.0 refresh +
access token bundle for a specific provider. - didSelfIssued — Self-Issued OpenID
Provider v2 (SIOP) credential: the entry points at a DID + signing key already
managed by the VTA. - didcommPeer — DIDComm peer identity used to authenticate
against a DIDComm-speaking relying party. - bearerToken — opaque bearer token
carried in a maintainer-named header (covers API tokens, long-lived JWTs,
personal-access tokens). - sshKey — SSH private key + comment. - custom —
arbitrary structured fields; release-time consumer responsible for interpretation.
Typedefs
-
Ext
= Map<String, dynamic>
-
Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a
reverse-DNS namespace; structure under each namespace is opaque to the framework.
-
SiteTarget
= Object?
-
A single binding target for a vault entry. Tagged union over the discriminator
kind. A VaultEntry's targets array MAY mix any number of these.
