@agentdock/wire 0.0.46 → 0.0.47

package/dist/machine.d.ts

@@ -28,6 +28,8 @@ export declare const MachineSummarySchema: z.ZodObject<{
     totalSessions: z.ZodOptional<z.ZodNumber>;
     /** Agent types available on this machine (persisted on each daemon connect). */
     availableAgents: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    /** Agent versions keyed by agent type name (e.g. { claude: "1.2.3" }). */
+    agentVersions: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
     /** RPC methods this machine's daemon has registered (RFC-035). */
     supportedMethods: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
     /** Why the machine disconnected — 'upgrade-required' triggers UI upgrade prompts (RFC-037). */
@@ -52,6 +54,7 @@ export declare const MachineSummarySchema: z.ZodObject<{
     hasTerminal?: boolean | undefined;
     activeSessions?: number | undefined;
     totalSessions?: number | undefined;
+    agentVersions?: Record<string, string> | undefined;
     supportedMethods?: string[] | undefined;
     disconnectReason?: "normal" | "upgrade-required" | undefined;
     upgradeStatus?: "idle" | "failed" | "preflight" | "downloading" | "switching" | undefined;
@@ -71,6 +74,7 @@ export declare const MachineSummarySchema: z.ZodObject<{
     hasTerminal?: boolean | undefined;
     activeSessions?: number | undefined;
     totalSessions?: number | undefined;
+    agentVersions?: Record<string, string> | undefined;
     supportedMethods?: string[] | undefined;
     disconnectReason?: "normal" | "upgrade-required" | undefined;
     upgradeStatus?: "idle" | "failed" | "preflight" | "downloading" | "switching" | undefined;

package/dist/machine.js

@@ -1,56 +1 @@
-/**
- * Machine and session status schemas for Dashboard & Machine Management.
- *
- * MachineSummary — device info returned by GET /v1/machines.
- * SessionStatus — real-time session state indicator.
- * Platform — OS platform enum matching Node's process.platform.
- */
-import { z } from 'zod';
-import { LabsSettingsSchema } from './rpc.js';
-export const PlatformSchema = z.enum(['darwin', 'linux', 'win32']);
-export const SessionStatusSchema = z.enum([
-    'idle',
-    'thinking',
-    'tool_running',
-    'permission_required',
-    'disconnected',
-]);
-export const MachineSummarySchema = z.object({
-    id: z.string(),
-    hostname: z.string(),
-    platform: PlatformSchema,
-    arch: z.string().optional(),
-    displayName: z.string().optional(),
-    daemonVersion: z.string().optional(),
-    active: z.boolean(),
-    activeAt: z.number(),
-    createdAt: z.number(),
-    /** Whether this machine has an active terminal-server tunnel. */
-    hasTerminal: z.boolean().optional(),
-    /** Number of active sessions on this machine. */
-    activeSessions: z.number().optional(),
-    /** Total number of sessions on this machine. */
-    totalSessions: z.number().optional(),
-    /** Agent types available on this machine (persisted on each daemon connect). */
-    availableAgents: z.array(z.string()).optional(),
-    /** RPC methods this machine's daemon has registered (RFC-035). */
-    supportedMethods: z.array(z.string()).optional(),
-    /** Why the machine disconnected — 'upgrade-required' triggers UI upgrade prompts (RFC-037). */
-    disconnectReason: z.enum(['normal', 'upgrade-required']).optional(),
-    /** Current upgrade state reported by the daemon (RFC-042). */
-    upgradeStatus: z.enum(['idle', 'preflight', 'downloading', 'switching', 'failed']).optional(),
-    /** Error message when upgradeStatus is 'failed' (RFC-042). */
-    upgradeError: z.string().optional(),
-    /** True when this machine has been replaced by a new one (container rebuild). */
-    superseded: z.boolean().optional(),
-});
-export const MachineRegisterResultSchema = z.object({
-    ok: z.boolean(),
-    error: z.string().optional(),
-    latestVersion: z.string().optional(),
-    labsSettings: LabsSettingsSchema.optional(),
-});
-export const SetDefaultMachineBodySchema = z.object({
-    machineId: z.string().nullable(),
-});
-//# sourceMappingURL=machine.js.map
+"use strict";import{z as o}from"zod";import{LabsSettingsSchema as n}from"./rpc.js";export const PlatformSchema=o.enum(["darwin","linux","win32"]),SessionStatusSchema=o.enum(["idle","thinking","tool_running","permission_required","disconnected"]),MachineSummarySchema=o.object({id:o.string(),hostname:o.string(),platform:PlatformSchema,arch:o.string().optional(),displayName:o.string().optional(),daemonVersion:o.string().optional(),active:o.boolean(),activeAt:o.number(),createdAt:o.number(),hasTerminal:o.boolean().optional(),activeSessions:o.number().optional(),totalSessions:o.number().optional(),availableAgents:o.array(o.string()).optional(),agentVersions:o.record(o.string()).optional(),supportedMethods:o.array(o.string()).optional(),disconnectReason:o.enum(["normal","upgrade-required"]).optional(),upgradeStatus:o.enum(["idle","preflight","downloading","switching","failed"]).optional(),upgradeError:o.string().optional(),superseded:o.boolean().optional()}),MachineRegisterResultSchema=o.object({ok:o.boolean(),error:o.string().optional(),latestVersion:o.string().optional(),labsSettings:n.optional()}),SetDefaultMachineBodySchema=o.object({machineId:o.string().nullable()});

package/dist/messageMeta.js

@@ -1,60 +1 @@
-import { z } from 'zod';
-import { PermissionModeSchema } from './interactionEvents.js';
-/** Supported agent types for avatar and UI differentiation. */
-export const AgentTypeSchema = z.enum([
-    'claude',
-    'copilot',
-    'codex',
-    'gemini',
-    'opencode',
-    'hermes',
-    'openclaw',
-    'custom',
-]);
-/** All agent type values derived from the schema (single source of truth). */
-export const AGENT_TYPES = AgentTypeSchema.options;
-/** Agent types that can be spawned as sessions (excludes 'custom'). */
-export const SPAWNABLE_AGENTS = AGENT_TYPES.filter((a) => a !== 'custom');
-/** CLI identifiers accepted by spawn-session RPC. */
-export const CLI_AGENT_TYPES = [
-    'claude',
-    'copilot',
-    'opencode',
-    'codex',
-    'gemini',
-    'hermes',
-    'openclaw',
-];
-export const MessageMetaSchema = z.object({
-    sentFrom: z.string().optional(),
-    permissionMode: PermissionModeSchema.optional(),
-    model: z.string().nullable().optional(),
-    fallbackModel: z.string().nullable().optional(),
-    customSystemPrompt: z.string().nullable().optional(),
-    appendSystemPrompt: z.string().nullable().optional(),
-    allowedTools: z.array(z.string()).nullable().optional(),
-    disallowedTools: z.array(z.string()).nullable().optional(),
-    displayText: z.string().optional(),
-    /** Agent type for UI differentiation (avatar, colors). */
-    agentType: AgentTypeSchema.nullable().optional(),
-    /** Session start timestamp (Unix ms). */
-    startedAt: z.number().nullable().optional(),
-    /** Session status for info display. */
-    sessionStatus: z
-        .enum(['running', 'idle', 'completed', 'failed', 'cancelled'])
-        .nullable()
-        .optional(),
-});
-/** Hardcoded per-agent image support. UX-driven: hides image button immediately on agent selection.
- *  Updated when agents add ACP promptCapabilities.image support. */
-export const AGENT_SUPPORTS_IMAGES = {
-    claude: true,
-    copilot: true,
-    codex: false, // Only supports URL/localPath, not base64
-    gemini: true,
-    opencode: true,
-    hermes: false, // ACP: promptCapabilities.image = false
-    openclaw: false, // ACP: promptCapabilities.image = false
-    custom: true, // Unknown, assume yes
-};
-//# sourceMappingURL=messageMeta.js.map
+"use strict";import{z as e}from"zod";import{PermissionModeSchema as l}from"./interactionEvents.js";export const AgentTypeSchema=e.enum(["claude","copilot","codex","gemini","opencode","hermes","openclaw","custom"]),AGENT_TYPES=AgentTypeSchema.options,SPAWNABLE_AGENTS=AGENT_TYPES.filter(o=>o!=="custom"),CLI_AGENT_TYPES=["claude","copilot","opencode","codex","gemini","hermes","openclaw"],MessageMetaSchema=e.object({sentFrom:e.string().optional(),permissionMode:l.optional(),model:e.string().nullable().optional(),fallbackModel:e.string().nullable().optional(),customSystemPrompt:e.string().nullable().optional(),appendSystemPrompt:e.string().nullable().optional(),allowedTools:e.array(e.string()).nullable().optional(),disallowedTools:e.array(e.string()).nullable().optional(),displayText:e.string().optional(),agentType:AgentTypeSchema.nullable().optional(),startedAt:e.number().nullable().optional(),sessionStatus:e.enum(["running","idle","completed","failed","cancelled"]).nullable().optional()}),AGENT_SUPPORTS_IMAGES={claude:!0,copilot:!0,codex:!1,gemini:!0,opencode:!0,hermes:!1,openclaw:!1,custom:!0};

package/dist/messages.d.ts

@@ -67,13 +67,31 @@ export declare const SessionProtocolMessageSchema: z.ZodObject<{
             t: z.ZodLiteral<"text">;
             text: z.ZodString;
             thinking: z.ZodOptional<z.ZodBoolean>;
+            images: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                data: z.ZodString;
+                mediaType: z.ZodString;
+            }, "strip", z.ZodTypeAny, {
+                data: string;
+                mediaType: string;
+            }, {
+                data: string;
+                mediaType: string;
+            }>, "many">>;
         }, "strip", z.ZodTypeAny, {
             t: "text";
             text: string;
+            images?: {
+                data: string;
+                mediaType: string;
+            }[] | undefined;
             thinking?: boolean | undefined;
         }, {
             t: "text";
             text: string;
+            images?: {
+                data: string;
+                mediaType: string;
+            }[] | undefined;
             thinking?: boolean | undefined;
         }>, z.ZodObject<{
             t: z.ZodLiteral<"service">;
@@ -353,6 +371,10 @@ export declare const SessionProtocolMessageSchema: z.ZodObject<{
         } | {
             t: "text";
             text: string;
+            images?: {
+                data: string;
+                mediaType: string;
+            }[] | undefined;
             thinking?: boolean | undefined;
         } | {
             t: "service";
@@ -438,6 +460,10 @@ export declare const SessionProtocolMessageSchema: z.ZodObject<{
         } | {
             t: "text";
             text: string;
+            images?: {
+                data: string;
+                mediaType: string;
+            }[] | undefined;
             thinking?: boolean | undefined;
         } | {
             t: "service";
@@ -523,6 +549,10 @@ export declare const SessionProtocolMessageSchema: z.ZodObject<{
         } | {
             t: "text";
             text: string;
+            images?: {
+                data: string;
+                mediaType: string;
+            }[] | undefined;
             thinking?: boolean | undefined;
         } | {
             t: "service";
@@ -608,6 +638,10 @@ export declare const SessionProtocolMessageSchema: z.ZodObject<{
         } | {
             t: "text";
             text: string;
+            images?: {
+                data: string;
+                mediaType: string;
+            }[] | undefined;
             thinking?: boolean | undefined;
         } | {
             t: "service";
@@ -736,6 +770,10 @@ export declare const SessionProtocolMessageSchema: z.ZodObject<{
         } | {
             t: "text";
             text: string;
+            images?: {
+                data: string;
+                mediaType: string;
+            }[] | undefined;
             thinking?: boolean | undefined;
         } | {
             t: "service";
@@ -838,6 +876,10 @@ export declare const SessionProtocolMessageSchema: z.ZodObject<{
         } | {
             t: "text";
             text: string;
+            images?: {
+                data: string;
+                mediaType: string;
+            }[] | undefined;
             thinking?: boolean | undefined;
         } | {
             t: "service";
@@ -1105,13 +1147,31 @@ export declare const MessageContentSchema: z.ZodDiscriminatedUnion<"role", [z.Zo
             t: z.ZodLiteral<"text">;
             text: z.ZodString;
             thinking: z.ZodOptional<z.ZodBoolean>;
+            images: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                data: z.ZodString;
+                mediaType: z.ZodString;
+            }, "strip", z.ZodTypeAny, {
+                data: string;
+                mediaType: string;
+            }, {
+                data: string;
+                mediaType: string;
+            }>, "many">>;
         }, "strip", z.ZodTypeAny, {
             t: "text";
             text: string;
+            images?: {
+                data: string;
+                mediaType: string;
+            }[] | undefined;
             thinking?: boolean | undefined;
         }, {
             t: "text";
             text: string;
+            images?: {
+                data: string;
+                mediaType: string;
+            }[] | undefined;
             thinking?: boolean | undefined;
         }>, z.ZodObject<{
             t: z.ZodLiteral<"service">;
@@ -1391,6 +1451,10 @@ export declare const MessageContentSchema: z.ZodDiscriminatedUnion<"role", [z.Zo
         } | {
             t: "text";
             text: string;
+            images?: {
+                data: string;
+                mediaType: string;
+            }[] | undefined;
             thinking?: boolean | undefined;
         } | {
             t: "service";
@@ -1476,6 +1540,10 @@ export declare const MessageContentSchema: z.ZodDiscriminatedUnion<"role", [z.Zo
         } | {
             t: "text";
             text: string;
+            images?: {
+                data: string;
+                mediaType: string;
+            }[] | undefined;
             thinking?: boolean | undefined;
         } | {
             t: "service";
@@ -1561,6 +1629,10 @@ export declare const MessageContentSchema: z.ZodDiscriminatedUnion<"role", [z.Zo
         } | {
             t: "text";
             text: string;
+            images?: {
+                data: string;
+                mediaType: string;
+            }[] | undefined;
             thinking?: boolean | undefined;
         } | {
             t: "service";
@@ -1646,6 +1718,10 @@ export declare const MessageContentSchema: z.ZodDiscriminatedUnion<"role", [z.Zo
         } | {
             t: "text";
             text: string;
+            images?: {
+                data: string;
+                mediaType: string;
+            }[] | undefined;
             thinking?: boolean | undefined;
         } | {
             t: "service";
@@ -1774,6 +1850,10 @@ export declare const MessageContentSchema: z.ZodDiscriminatedUnion<"role", [z.Zo
         } | {
             t: "text";
             text: string;
+            images?: {
+                data: string;
+                mediaType: string;
+            }[] | undefined;
             thinking?: boolean | undefined;
         } | {
             t: "service";
@@ -1876,6 +1956,10 @@ export declare const MessageContentSchema: z.ZodDiscriminatedUnion<"role", [z.Zo
         } | {
             t: "text";
             text: string;
+            images?: {
+                data: string;
+                mediaType: string;
+            }[] | undefined;
             thinking?: boolean | undefined;
         } | {
             t: "service";

package/dist/messages.js

@@ -1,35 +1 @@
-/**
- * Message schemas — aligned with Happy messages.ts.
- *
- * SessionMessage: encrypted content container.
- * Timestamps are Unix numbers (milliseconds).
- */
-import { z } from 'zod';
-import { SessionEnvelopeSchema } from './envelope.js';
-import { MessageMetaSchema } from './messageMeta.js';
-import { UserMessageSchema, AgentMessageSchema } from './legacyProtocol.js';
-export const SessionMessageContentSchema = z.object({
-    c: z.string(),
-    t: z.enum(['encrypted', 'plaintext']),
-});
-export const SessionMessageSchema = z.object({
-    id: z.string(),
-    seq: z.number(),
-    localId: z.string().nullish(),
-    content: SessionMessageContentSchema,
-    createdAt: z.number(),
-    updatedAt: z.number(),
-});
-// ── SessionProtocolMessage (bridges envelope into message content) ──
-export const SessionProtocolMessageSchema = z.object({
-    role: z.literal('session'),
-    content: SessionEnvelopeSchema,
-    meta: MessageMetaSchema.optional(),
-});
-// ── MessageContent (union of all message content types) ─────────────
-export const MessageContentSchema = z.discriminatedUnion('role', [
-    UserMessageSchema,
-    AgentMessageSchema,
-    SessionProtocolMessageSchema,
-]);
-//# sourceMappingURL=messages.js.map
+"use strict";import{z as e}from"zod";import{SessionEnvelopeSchema as t}from"./envelope.js";import{MessageMetaSchema as o}from"./messageMeta.js";import{UserMessageSchema as s,AgentMessageSchema as n}from"./legacyProtocol.js";export const SessionMessageContentSchema=e.object({c:e.string(),t:e.enum(["encrypted","plaintext"])}),SessionMessageSchema=e.object({id:e.string(),seq:e.number(),localId:e.string().nullish(),content:SessionMessageContentSchema,createdAt:e.number(),updatedAt:e.number()}),SessionProtocolMessageSchema=e.object({role:e.literal("session"),content:t,meta:o.optional()}),MessageContentSchema=e.discriminatedUnion("role",[s,n,SessionProtocolMessageSchema]);

package/dist/ops.js

@@ -1,74 +1 @@
-import { z } from 'zod';
-/**
- * Ops RPC method naming convention: namespace.action
- * - file.*   — RFC-033 file management
- * - sync.*   — RFC-034 data sync (Ops Agent → Server)
- * - config.* — RFC-034 policy push (Server → Ops Agent)
- */
-export const OpsMethodSchema = z
-    .string()
-    .min(1)
-    .regex(/^[a-z]+\.[a-z][a-z0-9-]*$/);
-export const OpsRpcTypeSchema = z.enum(['request', 'response', 'event']);
-/** Unified RPC message over the ops-upstream tunnel. */
-export const OpsRpcMessageSchema = z.object({
-    id: z.string().min(1),
-    type: OpsRpcTypeSchema,
-    method: OpsMethodSchema,
-    payload: z.unknown(),
-});
-// FileEntry — directory listing item
-export const FileEntrySchema = z.object({
-    name: z.string(),
-    type: z.enum(['file', 'directory']),
-    size: z.number().int().nonnegative(),
-    modifiedAt: z.string(),
-    mimeType: z.string().optional(),
-});
-// FileStat — detailed metadata
-export const FileStatSchema = z.object({
-    name: z.string(),
-    path: z.string(),
-    type: z.enum(['file', 'directory']),
-    size: z.number().int().nonnegative(),
-    modifiedAt: z.string(),
-    createdAt: z.string(),
-    mimeType: z.string().optional(),
-});
-// StorageUsage — quota info
-export const StorageUsageSchema = z.object({
-    used: z.number().int().nonnegative(),
-    limit: z.number().int().nonnegative(),
-    fileCount: z.number().int().nonnegative(),
-});
-// ─── Sync payloads (RFC-034 P1) ─────────────────────────
-/** A single user record in a full sync push. */
-export const SyncUserSchema = z.object({
-    username: z.string().min(1),
-    displayName: z.string(),
-    machineId: z.string().nullable(),
-    containerStatus: z.string(),
-    healthStatus: z.string().nullable(),
-    enabled: z.boolean(),
-});
-/** sync.full — all users pushed on tunnel connect/reconnect. */
-export const SyncFullPayloadSchema = z.object({
-    users: z.array(SyncUserSchema),
-});
-/** sync.user-created — single user just created. */
-export const SyncUserCreatedPayloadSchema = z.object({
-    username: z.string().min(1),
-    displayName: z.string(),
-});
-/** sync.container-status — container state change. */
-export const SyncContainerStatusPayloadSchema = z.object({
-    username: z.string().min(1),
-    containerStatus: z.string(),
-    healthStatus: z.string().nullable().optional(),
-});
-/** sync.user-paired — daemon pairing detected, machineId available. */
-export const SyncUserPairedPayloadSchema = z.object({
-    username: z.string().min(1),
-    machineId: z.string().min(1),
-});
-//# sourceMappingURL=ops.js.map
+"use strict";import{z as e}from"zod";export const OpsMethodSchema=e.string().min(1).regex(/^[a-z]+\.[a-z][a-z0-9-]*$/),OpsRpcTypeSchema=e.enum(["request","response","event"]),OpsRpcMessageSchema=e.object({id:e.string().min(1),type:OpsRpcTypeSchema,method:OpsMethodSchema,payload:e.unknown()}),FileEntrySchema=e.object({name:e.string(),type:e.enum(["file","directory"]),size:e.number().int().nonnegative(),modifiedAt:e.string(),mimeType:e.string().optional()}),FileStatSchema=e.object({name:e.string(),path:e.string(),type:e.enum(["file","directory"]),size:e.number().int().nonnegative(),modifiedAt:e.string(),createdAt:e.string(),mimeType:e.string().optional()}),StorageUsageSchema=e.object({used:e.number().int().nonnegative(),limit:e.number().int().nonnegative(),fileCount:e.number().int().nonnegative()}),SyncUserSchema=e.object({username:e.string().min(1),displayName:e.string(),machineId:e.string().nullable(),containerStatus:e.string(),healthStatus:e.string().nullable(),enabled:e.boolean()}),SyncFullPayloadSchema=e.object({users:e.array(SyncUserSchema)}),SyncUserCreatedPayloadSchema=e.object({username:e.string().min(1),displayName:e.string()}),SyncContainerStatusPayloadSchema=e.object({username:e.string().min(1),containerStatus:e.string(),healthStatus:e.string().nullable().optional()}),SyncUserPairedPayloadSchema=e.object({username:e.string().min(1),machineId:e.string().min(1)});

package/dist/pairing.js

@@ -1,115 +1 @@
-/**
- * Pairing protocol schemas.
- *
- * Defines the wire format for device pairing:
- * - PairingRequest: CLI sends publicKey + optional PIN to server
- * - PairingResponse: Web sends encrypted payload back via server
- * - PairingStatus: Polling response — discriminated union on state
- *
- * Security: Uses NaCl Box (Curve25519 + XSalsa20-Poly1305) for key exchange.
- * PIN code provides iOS PWA fallback where QR scanning is unreliable.
- */
-import { z } from 'zod';
-/** 6-digit numeric PIN for iOS PWA fallback. */
-const PinSchema = z.string().regex(/^\d{6}$/, 'PIN must be exactly 6 digits');
-/** Pairing state machine. */
-export const PairingState = z.enum(['pending', 'exchange', 'authorized', 'expired']);
-/**
- * Validates that a string is a base64/base64url-encoded 32-byte Curve25519 public key.
- * Accepts both standard base64 (with padding) and base64url (without padding).
- */
-/**
- * Check if a base64/base64url string decodes to exactly `expectedBytes` bytes.
- * Uses string-length math: 4 base64 chars = 3 bytes.
- * No runtime decoding needed — just validate charset + length.
- */
-function isBase64OfLength(val, expectedBytes) {
-    // Must be non-empty and only valid base64/base64url characters
-    if (!/^[A-Za-z0-9+/\-_]+=*$/.test(val))
-        return false;
-    // Normalize base64url → standard base64
-    const b64 = val.replace(/-/g, '+').replace(/_/g, '/');
-    const padded = b64.padEnd(b64.length + ((4 - (b64.length % 4)) % 4), '=');
-    // Count padding
-    const paddingCount = (padded.match(/=+$/) ?? [''])[0].length;
-    const totalBytes = (padded.length / 4) * 3 - paddingCount;
-    return totalBytes === expectedBytes;
-}
-const Curve25519PublicKeySchema = z
-    .string()
-    .min(1)
-    .refine((val) => isBase64OfLength(val, 32), {
-    message: 'publicKey must be a base64-encoded 32-byte Curve25519 key',
-});
-/**
- * CLI → Server: initiate a pairing request.
- *
- * publicKey: base64-encoded Curve25519 public key (32 bytes)
- * pin: optional 6-digit PIN for manual entry (iOS PWA fallback)
- * label: optional human-readable device label
- */
-export const PairingRequestSchema = z.object({
-    publicKey: Curve25519PublicKeySchema,
-    pin: PinSchema.optional(),
-    label: z.string().max(100).optional(),
-    type: z.enum(['join', 'invite']).optional(),
-});
-/**
- * Web → Server: approve pairing with encrypted key material.
- *
- * publicKey: identifies which pairing request to respond to (32-byte Curve25519 key)
- * encryptedPayload: NaCl Box encrypted data (base64) containing the DEK
- */
-export const PairingResponseSchema = z.object({
-    publicKey: Curve25519PublicKeySchema,
-    encryptedPayload: z.string().min(1),
-});
-/**
- * New device → Server: submit device's temporary Curve25519 public key.
- * Used in invite flow when a new device joins an existing account.
- */
-export const PairingExchangeSchema = z.object({
-    daemonPublicKey: Curve25519PublicKeySchema,
-    devicePublicKey: Curve25519PublicKeySchema,
-});
-/**
- * Daemon → Server: deliver encrypted master secret to new device.
- * Requires Bearer auth. Encrypted via NaCl Box using device's public key.
- */
-export const PairingDeliverSchema = z.object({
-    publicKey: Curve25519PublicKeySchema,
-    encryptedPayload: z.string().min(1),
-});
-/**
- * Server → CLI: current pairing status (polled).
- * Discriminated union on `state`:
- * - pending: waiting for web approval
- * - authorized: web approved, encryptedPayload + token required
- * - expired: request timed out
- */
-const PairingStatusPending = z.object({
-    state: z.literal('pending'),
-    publicKey: z.string().min(1),
-});
-const PairingStatusExchange = z.object({
-    state: z.literal('exchange'),
-    publicKey: z.string().min(1),
-    devicePublicKey: z.string().min(1),
-});
-const PairingStatusAuthorized = z.object({
-    state: z.literal('authorized'),
-    publicKey: z.string().min(1),
-    encryptedPayload: z.string().min(1),
-    token: z.string().min(1),
-});
-const PairingStatusExpired = z.object({
-    state: z.literal('expired'),
-    publicKey: z.string().min(1),
-});
-export const PairingStatusSchema = z.discriminatedUnion('state', [
-    PairingStatusPending,
-    PairingStatusExchange,
-    PairingStatusAuthorized,
-    PairingStatusExpired,
-]);
-//# sourceMappingURL=pairing.js.map
+"use strict";import{z as e}from"zod";const o=e.string().regex(/^\d{6}$/,"PIN must be exactly 6 digits");export const PairingState=e.enum(["pending","exchange","authorized","expired"]);function s(i,c){if(!/^[A-Za-z0-9+/\-_]+=*$/.test(i))return!1;const n=i.replace(/-/g,"+").replace(/_/g,"/"),a=n.padEnd(n.length+(4-n.length%4)%4,"="),r=(a.match(/=+$/)??[""])[0].length;return a.length/4*3-r===c}const t=e.string().min(1).refine(i=>s(i,32),{message:"publicKey must be a base64-encoded 32-byte Curve25519 key"});export const PairingRequestSchema=e.object({publicKey:t,pin:o.optional(),label:e.string().max(100).optional(),type:e.enum(["join","invite"]).optional()}),PairingResponseSchema=e.object({publicKey:t,encryptedPayload:e.string().min(1)}),PairingExchangeSchema=e.object({daemonPublicKey:t,devicePublicKey:t}),PairingDeliverSchema=e.object({publicKey:t,encryptedPayload:e.string().min(1)});const g=e.object({state:e.literal("pending"),publicKey:e.string().min(1)}),l=e.object({state:e.literal("exchange"),publicKey:e.string().min(1),devicePublicKey:e.string().min(1)}),p=e.object({state:e.literal("authorized"),publicKey:e.string().min(1),encryptedPayload:e.string().min(1),token:e.string().min(1)}),d=e.object({state:e.literal("expired"),publicKey:e.string().min(1)});export const PairingStatusSchema=e.discriminatedUnion("state",[g,l,p,d]);

package/dist/protocol.js

@@ -1,7 +1 @@
-/**
- * Wire protocol version.
- * Increment ONLY on breaking schema changes (new enum values, renamed events, required fields).
- * See RFC-021 for the full versioning strategy.
- */
-export const PROTOCOL_VERSION = 1;
-//# sourceMappingURL=protocol.js.map
+"use strict";export const PROTOCOL_VERSION=1;