{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "https://velox.dev/schema/methods/download.provideAuth.schema.json",
  "title": "download.provideAuth",
  "description": "Answer an event.auth.required challenge. The task sits in retry_wait until this arrives; on success the daemon retries with the credentials attached and the task resumes on its own — this method does not itself start the transfer. Privileged and Unix-socket-only: a credential-bearing method must never be reachable from the browser, which is exactly the boundary event.auth.required's own description draws ('never back through this event, never into a log') — this is the other half of that promise. Credentials are handed to the Secret Service, never to SQLite and never logged; save only tells the daemon whether to persist them there for next time, or use them for this attempt alone.",
  "x-privileged": true,
  "x-transports": ["uds"],
  "x-deadlineMs": 5000,
  "x-errors": [-32003, -32010],
  "type": "object",
  "properties": {
    "params": {
      "type": "object",
      "additionalProperties": false,
      "required": ["taskId", "username", "password"],
      "properties": {
        "taskId":   { "type": "string", "format": "uuid" },
        "username": { "type": "string", "maxLength": 256 },
        "password": { "type": "string", "maxLength": 1024 },
        "save": {
          "type": ["boolean", "null"],
          "description": "true persists the credential in the Secret Service, keyed by host and realm, for future downloads from the same site. false or null uses it for this task's retry only. Never affects SQLite or the daemon's logs either way."
        }
      }
    },
    "result": {
      "type": "object",
      "additionalProperties": false,
      "required": ["ok"],
      "properties": {
        "ok": { "type": "boolean" }
      }
    }
  }
}