@agentdock/wire 0.0.90 → 0.0.91

package/dist/messages.js

@@ -1,35 +1 @@
-/**
- * Message schemas.
- *
- * SessionMessage: encrypted content container.
- * Timestamps are Unix numbers (milliseconds).
- */
-import { z } from 'zod';
-import { SessionEnvelopeSchema } from './envelope.js';
-import { MessageMetaSchema } from './messageMeta.js';
-import { UserMessageSchema, AgentMessageSchema } from './legacyProtocol.js';
-export const SessionMessageContentSchema = z.object({
-    c: z.string(),
-    t: z.enum(['encrypted', 'plaintext']),
-});
-export const SessionMessageSchema = z.object({
-    id: z.string(),
-    seq: z.number(),
-    localId: z.string().nullish(),
-    content: SessionMessageContentSchema,
-    createdAt: z.number(),
-    updatedAt: z.number(),
-});
-// ── SessionProtocolMessage (bridges envelope into message content) ──
-export const SessionProtocolMessageSchema = z.object({
-    role: z.literal('session'),
-    content: SessionEnvelopeSchema,
-    meta: MessageMetaSchema.optional(),
-});
-// ── MessageContent (union of all message content types) ─────────────
-export const MessageContentSchema = z.discriminatedUnion('role', [
-    UserMessageSchema,
-    AgentMessageSchema,
-    SessionProtocolMessageSchema,
-]);
-//# sourceMappingURL=messages.js.map
+"use strict";import{z as e}from"zod";import{SessionEnvelopeSchema as t}from"./envelope.js";import{MessageMetaSchema as s}from"./messageMeta.js";import{UserMessageSchema as o,AgentMessageSchema as n}from"./legacyProtocol.js";export const SessionMessageContentSchema=e.object({c:e.string(),t:e.enum(["encrypted","plaintext"])}).passthrough(),SessionMessageSchema=e.object({id:e.string(),seq:e.number(),localId:e.string().nullish(),content:SessionMessageContentSchema,createdAt:e.number(),updatedAt:e.number()}).passthrough(),SessionProtocolMessageSchema=e.object({role:e.literal("session"),content:t,meta:s.optional()}).passthrough(),MessageContentSchema=e.discriminatedUnion("role",[o,n,SessionProtocolMessageSchema]);

package/dist/notification.d.ts

@@ -0,0 +1,48 @@
+import { z } from 'zod';
+/** Event categories accepted by the daemon's local notification dispatcher. */
+export declare const NotificationEventTypeSchema: z.ZodEnum<["completed", "error", "task_completed", "task_failed", "budget_warning", "daemon_disconnected"]>;
+export type NotificationEventType = z.infer<typeof NotificationEventTypeSchema>;
+/** Server-to-daemon RPC payload for dispatching a local IM notification. */
+export declare const DispatchNotificationParamsSchema: z.ZodObject<{
+    type: z.ZodEnum<["completed", "error", "task_completed", "task_failed", "budget_warning", "daemon_disconnected"]>;
+    title: z.ZodString;
+    body: z.ZodString;
+    machineId: z.ZodString;
+    machineHostname: z.ZodDefault<z.ZodString>;
+    sessionId: z.ZodOptional<z.ZodString>;
+    taskId: z.ZodOptional<z.ZodString>;
+    data: z.ZodOptional<z.ZodObject<{
+        url: z.ZodOptional<z.ZodString>;
+    }, "strict", z.ZodTypeAny, {
+        url?: string | undefined;
+    }, {
+        url?: string | undefined;
+    }>>;
+    timestamp: z.ZodNumber;
+}, "strict", z.ZodTypeAny, {
+    type: "completed" | "error" | "task_completed" | "task_failed" | "budget_warning" | "daemon_disconnected";
+    title: string;
+    machineId: string;
+    timestamp: number;
+    body: string;
+    machineHostname: string;
+    data?: {
+        url?: string | undefined;
+    } | undefined;
+    sessionId?: string | undefined;
+    taskId?: string | undefined;
+}, {
+    type: "completed" | "error" | "task_completed" | "task_failed" | "budget_warning" | "daemon_disconnected";
+    title: string;
+    machineId: string;
+    timestamp: number;
+    body: string;
+    data?: {
+        url?: string | undefined;
+    } | undefined;
+    sessionId?: string | undefined;
+    taskId?: string | undefined;
+    machineHostname?: string | undefined;
+}>;
+export type DispatchNotificationParams = z.infer<typeof DispatchNotificationParamsSchema>;
+//# sourceMappingURL=notification.d.ts.map

package/dist/notification.js

@@ -0,0 +1 @@
+"use strict";import{z as t}from"zod";export const NotificationEventTypeSchema=t.enum(["completed","error","task_completed","task_failed","budget_warning","daemon_disconnected"]),DispatchNotificationParamsSchema=t.object({type:NotificationEventTypeSchema,title:t.string(),body:t.string(),machineId:t.string(),machineHostname:t.string().default(""),sessionId:t.string().optional(),taskId:t.string().optional(),data:t.object({url:t.string().optional()}).strict().optional(),timestamp:t.number()}).strict();

package/dist/ops.d.ts

@@ -9,23 +9,38 @@ export declare const OpsMethodSchema: z.ZodString;
 export type OpsMethod = z.infer<typeof OpsMethodSchema>;
 export declare const OpsRpcTypeSchema: z.ZodEnum<["request", "response", "event"]>;
 export type OpsRpcType = z.infer<typeof OpsRpcTypeSchema>;
+/**
+ * Docker image reference — used for system-upgrade imageTag validation.
+ *
+ * SECURITY (2026-07-27 #M1): the imageTag flows enterprise-admin → Ops Agent →
+ * `prepareSharedSystem` → `execAsync(\`docker create ... "${image}"\`)` which runs
+ * via a shell. Without a whitelist, an authenticated enterprise admin can inject
+ * `$(...)` / backticks inside the double quotes and achieve RCE on the Ops Agent
+ * host. This regex is an ALLOW-list of the only characters a valid image ref can
+ * contain (`registry[:port]/namespace/name[:tag][@digest]`); every shell
+ * metacharacter (`$` `` ` `` `"` `'` space `;` `|` `&` `(` `)` `<` `>` `\`) is
+ * excluded, so a passing value is safe to interpolate. Fail-closed: reject on any
+ * non-matching character rather than sanitizing.
+ */
+export declare const DockerImageRefSchema: z.ZodString;
+export type DockerImageRef = z.infer<typeof DockerImageRefSchema>;
 /** Unified RPC message over the ops-upstream tunnel. */
 export declare const OpsRpcMessageSchema: z.ZodObject<{
     id: z.ZodString;
     type: z.ZodEnum<["request", "response", "event"]>;
     method: z.ZodString;
     payload: z.ZodUnknown;
-}, "strip", z.ZodTypeAny, {
-    type: "request" | "response" | "event";
-    id: string;
-    method: string;
-    payload?: unknown;
-}, {
-    type: "request" | "response" | "event";
-    id: string;
-    method: string;
-    payload?: unknown;
-}>;
+}, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+    id: z.ZodString;
+    type: z.ZodEnum<["request", "response", "event"]>;
+    method: z.ZodString;
+    payload: z.ZodUnknown;
+}, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+    id: z.ZodString;
+    type: z.ZodEnum<["request", "response", "event"]>;
+    method: z.ZodString;
+    payload: z.ZodUnknown;
+}, z.ZodTypeAny, "passthrough">>;
 export type OpsRpcMessage = z.infer<typeof OpsRpcMessageSchema>;
 /** Metrics tracked per ops tunnel connection (RFC-034 R7). */
 export interface OpsTunnelMetrics {
@@ -42,19 +57,19 @@ export declare const FileEntrySchema: z.ZodObject<{
     size: z.ZodNumber;
     modifiedAt: z.ZodNumber;
     mimeType: z.ZodOptional<z.ZodString>;
-}, "strip", z.ZodTypeAny, {
-    type: "file" | "directory";
-    name: string;
-    size: number;
-    modifiedAt: number;
-    mimeType?: string | undefined;
-}, {
-    type: "file" | "directory";
-    name: string;
-    size: number;
-    modifiedAt: number;
-    mimeType?: string | undefined;
-}>;
+}, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+    name: z.ZodString;
+    type: z.ZodEnum<["file", "directory"]>;
+    size: z.ZodNumber;
+    modifiedAt: z.ZodNumber;
+    mimeType: z.ZodOptional<z.ZodString>;
+}, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+    name: z.ZodString;
+    type: z.ZodEnum<["file", "directory"]>;
+    size: z.ZodNumber;
+    modifiedAt: z.ZodNumber;
+    mimeType: z.ZodOptional<z.ZodString>;
+}, z.ZodTypeAny, "passthrough">>;
 export type FileEntry = z.infer<typeof FileEntrySchema>;
 export declare const FileStatSchema: z.ZodObject<{
     name: z.ZodString;
@@ -64,37 +79,37 @@ export declare const FileStatSchema: z.ZodObject<{
     modifiedAt: z.ZodString;
     createdAt: z.ZodString;
     mimeType: z.ZodOptional<z.ZodString>;
-}, "strip", z.ZodTypeAny, {
-    path: string;
-    type: "file" | "directory";
-    name: string;
-    size: number;
-    createdAt: string;
-    modifiedAt: string;
-    mimeType?: string | undefined;
-}, {
-    path: string;
-    type: "file" | "directory";
-    name: string;
-    size: number;
-    createdAt: string;
-    modifiedAt: string;
-    mimeType?: string | undefined;
-}>;
+}, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+    name: z.ZodString;
+    path: z.ZodString;
+    type: z.ZodEnum<["file", "directory"]>;
+    size: z.ZodNumber;
+    modifiedAt: z.ZodString;
+    createdAt: z.ZodString;
+    mimeType: z.ZodOptional<z.ZodString>;
+}, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+    name: z.ZodString;
+    path: z.ZodString;
+    type: z.ZodEnum<["file", "directory"]>;
+    size: z.ZodNumber;
+    modifiedAt: z.ZodString;
+    createdAt: z.ZodString;
+    mimeType: z.ZodOptional<z.ZodString>;
+}, z.ZodTypeAny, "passthrough">>;
 export type FileStat = z.infer<typeof FileStatSchema>;
 export declare const StorageUsageSchema: z.ZodObject<{
     used: z.ZodNumber;
     limit: z.ZodNumber;
     fileCount: z.ZodNumber;
-}, "strip", z.ZodTypeAny, {
-    limit: number;
-    used: number;
-    fileCount: number;
-}, {
-    limit: number;
-    used: number;
-    fileCount: number;
-}>;
+}, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+    used: z.ZodNumber;
+    limit: z.ZodNumber;
+    fileCount: z.ZodNumber;
+}, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+    used: z.ZodNumber;
+    limit: z.ZodNumber;
+    fileCount: z.ZodNumber;
+}, z.ZodTypeAny, "passthrough">>;
 export type StorageUsage = z.infer<typeof StorageUsageSchema>;
 /** A single user record in a full sync push. */
 export declare const SyncUserSchema: z.ZodObject<{
@@ -104,21 +119,21 @@ export declare const SyncUserSchema: z.ZodObject<{
     containerStatus: z.ZodString;
     healthStatus: z.ZodNullable<z.ZodString>;
     enabled: z.ZodBoolean;
-}, "strip", z.ZodTypeAny, {
-    machineId: string | null;
-    displayName: string;
-    enabled: boolean;
-    username: string;
-    containerStatus: string;
-    healthStatus: string | null;
-}, {
-    machineId: string | null;
-    displayName: string;
-    enabled: boolean;
-    username: string;
-    containerStatus: string;
-    healthStatus: string | null;
-}>;
+}, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+    username: z.ZodString;
+    displayName: z.ZodString;
+    machineId: z.ZodNullable<z.ZodString>;
+    containerStatus: z.ZodString;
+    healthStatus: z.ZodNullable<z.ZodString>;
+    enabled: z.ZodBoolean;
+}, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+    username: z.ZodString;
+    displayName: z.ZodString;
+    machineId: z.ZodNullable<z.ZodString>;
+    containerStatus: z.ZodString;
+    healthStatus: z.ZodNullable<z.ZodString>;
+    enabled: z.ZodBoolean;
+}, z.ZodTypeAny, "passthrough">>;
 export type SyncUser = z.infer<typeof SyncUserSchema>;
 /** sync.full — all users pushed on tunnel connect/reconnect. */
 export declare const SyncFullPayloadSchema: z.ZodObject<{
@@ -129,78 +144,106 @@ export declare const SyncFullPayloadSchema: z.ZodObject<{
         containerStatus: z.ZodString;
         healthStatus: z.ZodNullable<z.ZodString>;
         enabled: z.ZodBoolean;
-    }, "strip", z.ZodTypeAny, {
-        machineId: string | null;
-        displayName: string;
-        enabled: boolean;
-        username: string;
-        containerStatus: string;
-        healthStatus: string | null;
-    }, {
-        machineId: string | null;
-        displayName: string;
-        enabled: boolean;
-        username: string;
-        containerStatus: string;
-        healthStatus: string | null;
-    }>, "many">;
-}, "strip", z.ZodTypeAny, {
-    users: {
-        machineId: string | null;
-        displayName: string;
-        enabled: boolean;
-        username: string;
-        containerStatus: string;
-        healthStatus: string | null;
-    }[];
-}, {
-    users: {
-        machineId: string | null;
-        displayName: string;
-        enabled: boolean;
-        username: string;
-        containerStatus: string;
-        healthStatus: string | null;
-    }[];
-}>;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        username: z.ZodString;
+        displayName: z.ZodString;
+        machineId: z.ZodNullable<z.ZodString>;
+        containerStatus: z.ZodString;
+        healthStatus: z.ZodNullable<z.ZodString>;
+        enabled: z.ZodBoolean;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        username: z.ZodString;
+        displayName: z.ZodString;
+        machineId: z.ZodNullable<z.ZodString>;
+        containerStatus: z.ZodString;
+        healthStatus: z.ZodNullable<z.ZodString>;
+        enabled: z.ZodBoolean;
+    }, z.ZodTypeAny, "passthrough">>, "many">;
+}, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+    users: z.ZodArray<z.ZodObject<{
+        username: z.ZodString;
+        displayName: z.ZodString;
+        machineId: z.ZodNullable<z.ZodString>;
+        containerStatus: z.ZodString;
+        healthStatus: z.ZodNullable<z.ZodString>;
+        enabled: z.ZodBoolean;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        username: z.ZodString;
+        displayName: z.ZodString;
+        machineId: z.ZodNullable<z.ZodString>;
+        containerStatus: z.ZodString;
+        healthStatus: z.ZodNullable<z.ZodString>;
+        enabled: z.ZodBoolean;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        username: z.ZodString;
+        displayName: z.ZodString;
+        machineId: z.ZodNullable<z.ZodString>;
+        containerStatus: z.ZodString;
+        healthStatus: z.ZodNullable<z.ZodString>;
+        enabled: z.ZodBoolean;
+    }, z.ZodTypeAny, "passthrough">>, "many">;
+}, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+    users: z.ZodArray<z.ZodObject<{
+        username: z.ZodString;
+        displayName: z.ZodString;
+        machineId: z.ZodNullable<z.ZodString>;
+        containerStatus: z.ZodString;
+        healthStatus: z.ZodNullable<z.ZodString>;
+        enabled: z.ZodBoolean;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        username: z.ZodString;
+        displayName: z.ZodString;
+        machineId: z.ZodNullable<z.ZodString>;
+        containerStatus: z.ZodString;
+        healthStatus: z.ZodNullable<z.ZodString>;
+        enabled: z.ZodBoolean;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        username: z.ZodString;
+        displayName: z.ZodString;
+        machineId: z.ZodNullable<z.ZodString>;
+        containerStatus: z.ZodString;
+        healthStatus: z.ZodNullable<z.ZodString>;
+        enabled: z.ZodBoolean;
+    }, z.ZodTypeAny, "passthrough">>, "many">;
+}, z.ZodTypeAny, "passthrough">>;
 export type SyncFullPayload = z.infer<typeof SyncFullPayloadSchema>;
 /** sync.user-created — single user just created. */
 export declare const SyncUserCreatedPayloadSchema: z.ZodObject<{
     username: z.ZodString;
     displayName: z.ZodString;
-}, "strip", z.ZodTypeAny, {
-    displayName: string;
-    username: string;
-}, {
-    displayName: string;
-    username: string;
-}>;
+}, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+    username: z.ZodString;
+    displayName: z.ZodString;
+}, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+    username: z.ZodString;
+    displayName: z.ZodString;
+}, z.ZodTypeAny, "passthrough">>;
 export type SyncUserCreatedPayload = z.infer<typeof SyncUserCreatedPayloadSchema>;
 /** sync.container-status — container state change. */
 export declare const SyncContainerStatusPayloadSchema: z.ZodObject<{
     username: z.ZodString;
     containerStatus: z.ZodString;
     healthStatus: z.ZodOptional<z.ZodNullable<z.ZodString>>;
-}, "strip", z.ZodTypeAny, {
-    username: string;
-    containerStatus: string;
-    healthStatus?: string | null | undefined;
-}, {
-    username: string;
-    containerStatus: string;
-    healthStatus?: string | null | undefined;
-}>;
+}, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+    username: z.ZodString;
+    containerStatus: z.ZodString;
+    healthStatus: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+}, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+    username: z.ZodString;
+    containerStatus: z.ZodString;
+    healthStatus: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+}, z.ZodTypeAny, "passthrough">>;
 export type SyncContainerStatusPayload = z.infer<typeof SyncContainerStatusPayloadSchema>;
 /** sync.user-paired — daemon pairing detected, machineId available. */
 export declare const SyncUserPairedPayloadSchema: z.ZodObject<{
     username: z.ZodString;
     machineId: z.ZodString;
-}, "strip", z.ZodTypeAny, {
-    machineId: string;
-    username: string;
-}, {
-    machineId: string;
-    username: string;
-}>;
+}, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+    username: z.ZodString;
+    machineId: z.ZodString;
+}, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+    username: z.ZodString;
+    machineId: z.ZodString;
+}, z.ZodTypeAny, "passthrough">>;
 export type SyncUserPairedPayload = z.infer<typeof SyncUserPairedPayloadSchema>;
 //# sourceMappingURL=ops.d.ts.map

package/dist/ops.js

@@ -1,74 +1 @@
-import { z } from 'zod';
-/**
- * Ops RPC method naming convention: namespace.action
- * - file.*   — RFC-033 file management
- * - sync.*   — RFC-034 data sync (Ops Agent → Server)
- * - config.* — RFC-034 policy push (Server → Ops Agent)
- */
-export const OpsMethodSchema = z
-    .string()
-    .min(1)
-    .regex(/^[a-z]+\.[a-z][a-z0-9-]*$/);
-export const OpsRpcTypeSchema = z.enum(['request', 'response', 'event']);
-/** Unified RPC message over the ops-upstream tunnel. */
-export const OpsRpcMessageSchema = z.object({
-    id: z.string().min(1),
-    type: OpsRpcTypeSchema,
-    method: OpsMethodSchema,
-    payload: z.unknown(),
-});
-// FileEntry — directory listing item (shared by Ops RPC tunnel and REST API).
-export const FileEntrySchema = z.object({
-    name: z.string(),
-    type: z.enum(['file', 'directory']),
-    size: z.number().int().nonnegative(),
-    modifiedAt: z.number(),
-    mimeType: z.string().optional(),
-});
-// FileStat — detailed metadata
-export const FileStatSchema = z.object({
-    name: z.string(),
-    path: z.string(),
-    type: z.enum(['file', 'directory']),
-    size: z.number().int().nonnegative(),
-    modifiedAt: z.string(),
-    createdAt: z.string(),
-    mimeType: z.string().optional(),
-});
-// StorageUsage — quota info
-export const StorageUsageSchema = z.object({
-    used: z.number().int().nonnegative(),
-    limit: z.number().int().nonnegative(),
-    fileCount: z.number().int().nonnegative(),
-});
-// ─── Sync payloads (RFC-034 P1) ─────────────────────────
-/** A single user record in a full sync push. */
-export const SyncUserSchema = z.object({
-    username: z.string().min(1),
-    displayName: z.string(),
-    machineId: z.string().nullable(),
-    containerStatus: z.string(),
-    healthStatus: z.string().nullable(),
-    enabled: z.boolean(),
-});
-/** sync.full — all users pushed on tunnel connect/reconnect. */
-export const SyncFullPayloadSchema = z.object({
-    users: z.array(SyncUserSchema),
-});
-/** sync.user-created — single user just created. */
-export const SyncUserCreatedPayloadSchema = z.object({
-    username: z.string().min(1),
-    displayName: z.string(),
-});
-/** sync.container-status — container state change. */
-export const SyncContainerStatusPayloadSchema = z.object({
-    username: z.string().min(1),
-    containerStatus: z.string(),
-    healthStatus: z.string().nullable().optional(),
-});
-/** sync.user-paired — daemon pairing detected, machineId available. */
-export const SyncUserPairedPayloadSchema = z.object({
-    username: z.string().min(1),
-    machineId: z.string().min(1),
-});
-//# sourceMappingURL=ops.js.map
+"use strict";import{z as e}from"zod";export const OpsMethodSchema=e.string().min(1).regex(/^[a-z]+\.[a-z][a-z0-9-]*$/),OpsRpcTypeSchema=e.enum(["request","response","event"]),DockerImageRefSchema=e.string().min(1).max(256).regex(/^[a-zA-Z0-9][a-zA-Z0-9._/:@-]*$/),OpsRpcMessageSchema=e.object({id:e.string().min(1),type:OpsRpcTypeSchema,method:OpsMethodSchema,payload:e.unknown()}).passthrough(),FileEntrySchema=e.object({name:e.string(),type:e.enum(["file","directory"]),size:e.number().int().nonnegative(),modifiedAt:e.number(),mimeType:e.string().optional()}).passthrough(),FileStatSchema=e.object({name:e.string(),path:e.string(),type:e.enum(["file","directory"]),size:e.number().int().nonnegative(),modifiedAt:e.string(),createdAt:e.string(),mimeType:e.string().optional()}).passthrough(),StorageUsageSchema=e.object({used:e.number().int().nonnegative(),limit:e.number().int().nonnegative(),fileCount:e.number().int().nonnegative()}).passthrough(),SyncUserSchema=e.object({username:e.string().min(1),displayName:e.string(),machineId:e.string().nullable(),containerStatus:e.string(),healthStatus:e.string().nullable(),enabled:e.boolean()}).passthrough(),SyncFullPayloadSchema=e.object({users:e.array(SyncUserSchema)}).passthrough(),SyncUserCreatedPayloadSchema=e.object({username:e.string().min(1),displayName:e.string()}).passthrough(),SyncContainerStatusPayloadSchema=e.object({username:e.string().min(1),containerStatus:e.string(),healthStatus:e.string().nullable().optional()}).passthrough(),SyncUserPairedPayloadSchema=e.object({username:e.string().min(1),machineId:e.string().min(1)}).passthrough();

package/dist/pairing.d.ts

@@ -24,7 +24,7 @@ export declare const PairingRequestSchema: z.ZodObject<{
     pin: z.ZodOptional<z.ZodString>;
     label: z.ZodOptional<z.ZodString>;
     type: z.ZodOptional<z.ZodEnum<["join", "invite"]>>;
-}, "strip", z.ZodTypeAny, {
+}, "strict", z.ZodTypeAny, {
     publicKey: string;
     type?: "join" | "invite" | undefined;
     label?: string | undefined;
@@ -44,7 +44,7 @@ export declare const PairingRequestSchema: z.ZodObject<{
 export declare const PairingResponseSchema: z.ZodObject<{
     publicKey: z.ZodEffects<z.ZodString, string, string>;
     encryptedPayload: z.ZodString;
-}, "strip", z.ZodTypeAny, {
+}, "strict", z.ZodTypeAny, {
     publicKey: string;
     encryptedPayload: string;
 }, {
@@ -58,7 +58,7 @@ export declare const PairingResponseSchema: z.ZodObject<{
 export declare const PairingExchangeSchema: z.ZodObject<{
     daemonPublicKey: z.ZodEffects<z.ZodString, string, string>;
     devicePublicKey: z.ZodEffects<z.ZodString, string, string>;
-}, "strip", z.ZodTypeAny, {
+}, "strict", z.ZodTypeAny, {
     daemonPublicKey: string;
     devicePublicKey: string;
 }, {
@@ -72,7 +72,7 @@ export declare const PairingExchangeSchema: z.ZodObject<{
 export declare const PairingDeliverSchema: z.ZodObject<{
     publicKey: z.ZodEffects<z.ZodString, string, string>;
     encryptedPayload: z.ZodString;
-}, "strip", z.ZodTypeAny, {
+}, "strict", z.ZodTypeAny, {
     publicKey: string;
     encryptedPayload: string;
 }, {