@agentdock/wire 0.0.94 → 0.0.95

package/dist/messageMeta.d.ts

@@ -1,12 +1,12 @@
 import { z } from 'zod';
-/** Supported agent types for avatar and UI differentiation. */
+
 export declare const AgentTypeSchema: z.ZodEnum<["claude", "copilot", "codex", "gemini", "opencode", "hermes", "openclaw", "custom"]>;
 export type AgentType = z.infer<typeof AgentTypeSchema>;
-/** All agent type values derived from the schema (single source of truth). */
+
 export declare const AGENT_TYPES: ["claude", "copilot", "codex", "gemini", "opencode", "hermes", "openclaw", "custom"];
-/** Agent types that can be spawned as sessions (excludes 'custom'). */
+
 export declare const SPAWNABLE_AGENTS: ("hermes" | "codex" | "claude" | "copilot" | "opencode" | "gemini" | "openclaw")[];
-/** CLI identifiers accepted by spawn-session RPC. */
+
 export declare const CLI_AGENT_TYPES: readonly ["claude", "copilot", "opencode", "codex", "gemini", "hermes", "openclaw"];
 export type CliAgentType = (typeof CLI_AGENT_TYPES)[number];
 export declare const MessageMetaSchema: z.ZodObject<{
@@ -19,11 +19,11 @@ export declare const MessageMetaSchema: z.ZodObject<{
     allowedTools: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodString, "many">>>;
     disallowedTools: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodString, "many">>>;
     displayText: z.ZodOptional<z.ZodString>;
-    /** Agent type for UI differentiation (avatar, colors). */
+    
     agentType: z.ZodOptional<z.ZodNullable<z.ZodEnum<["claude", "copilot", "codex", "gemini", "opencode", "hermes", "openclaw", "custom"]>>>;
-    /** Session start timestamp (Unix ms). */
+    
     startedAt: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
-    /** Session status for info display. */
+    
     sessionStatus: z.ZodOptional<z.ZodNullable<z.ZodEnum<["running", "idle", "completed", "failed", "cancelled"]>>>;
 }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
     sentFrom: z.ZodOptional<z.ZodString>;
@@ -35,11 +35,11 @@ export declare const MessageMetaSchema: z.ZodObject<{
     allowedTools: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodString, "many">>>;
     disallowedTools: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodString, "many">>>;
     displayText: z.ZodOptional<z.ZodString>;
-    /** Agent type for UI differentiation (avatar, colors). */
+    
     agentType: z.ZodOptional<z.ZodNullable<z.ZodEnum<["claude", "copilot", "codex", "gemini", "opencode", "hermes", "openclaw", "custom"]>>>;
-    /** Session start timestamp (Unix ms). */
+    
     startedAt: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
-    /** Session status for info display. */
+    
     sessionStatus: z.ZodOptional<z.ZodNullable<z.ZodEnum<["running", "idle", "completed", "failed", "cancelled"]>>>;
 }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
     sentFrom: z.ZodOptional<z.ZodString>;
@@ -51,17 +51,15 @@ export declare const MessageMetaSchema: z.ZodObject<{
     allowedTools: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodString, "many">>>;
     disallowedTools: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodString, "many">>>;
     displayText: z.ZodOptional<z.ZodString>;
-    /** Agent type for UI differentiation (avatar, colors). */
+    
     agentType: z.ZodOptional<z.ZodNullable<z.ZodEnum<["claude", "copilot", "codex", "gemini", "opencode", "hermes", "openclaw", "custom"]>>>;
-    /** Session start timestamp (Unix ms). */
+    
     startedAt: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
-    /** Session status for info display. */
+    
     sessionStatus: z.ZodOptional<z.ZodNullable<z.ZodEnum<["running", "idle", "completed", "failed", "cancelled"]>>>;
 }, z.ZodTypeAny, "passthrough">>;
 export type MessageMeta = z.infer<typeof MessageMetaSchema>;
-/** Hardcoded per-agent image support. UX-driven: hides image button immediately on agent selection.
- *  Updated when agents add ACP promptCapabilities.image support. */
+
 export declare const AGENT_SUPPORTS_IMAGES: Readonly<Record<AgentType, boolean>>;
-/** 固定品牌显示名（不随界面语言变化）。单一来源：消费方（web/daemon/admin-panel）从此导入，禁止本地再写一份。 */
+
 export declare const AGENT_DISPLAY_NAMES: Readonly<Record<AgentType, string>>;
-//# sourceMappingURL=messageMeta.d.ts.map

package/dist/messages.d.ts

@@ -1,29 +1,23 @@
-/**
- * Message schemas.
- *
- * SessionMessage: encrypted content container.
- * Timestamps are Unix numbers (milliseconds).
- */
 import { z } from 'zod';
 import { SessionEnvelopeSchema } from './envelope.js';
 export declare const SessionContextBoundaryKindSchema: z.ZodEnum<["clear", "compact"]>;
 export type SessionContextBoundaryKind = z.infer<typeof SessionContextBoundaryKindSchema>;
-/** Derive the non-sensitive query projection from a decrypted envelope. */
+
 export declare function getSessionContextBoundary(envelope: z.infer<typeof SessionEnvelopeSchema>): SessionContextBoundaryKind | undefined;
 export declare const SessionMessageContentSchema: z.ZodObject<{
     c: z.ZodString;
     t: z.ZodEnum<["encrypted", "plaintext"]>;
-    /** Non-sensitive projection; message body and compact summary remain encrypted. */
+    
     contextBoundary: z.ZodOptional<z.ZodEnum<["clear", "compact"]>>;
 }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
     c: z.ZodString;
     t: z.ZodEnum<["encrypted", "plaintext"]>;
-    /** Non-sensitive projection; message body and compact summary remain encrypted. */
+    
     contextBoundary: z.ZodOptional<z.ZodEnum<["clear", "compact"]>>;
 }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
     c: z.ZodString;
     t: z.ZodEnum<["encrypted", "plaintext"]>;
-    /** Non-sensitive projection; message body and compact summary remain encrypted. */
+    
     contextBoundary: z.ZodOptional<z.ZodEnum<["clear", "compact"]>>;
 }, z.ZodTypeAny, "passthrough">>;
 export type SessionMessageContent = z.infer<typeof SessionMessageContentSchema>;
@@ -35,17 +29,17 @@ export declare const SessionMessageSchema: z.ZodObject<{
     content: z.ZodObject<{
         c: z.ZodString;
         t: z.ZodEnum<["encrypted", "plaintext"]>;
-        /** Non-sensitive projection; message body and compact summary remain encrypted. */
+        
         contextBoundary: z.ZodOptional<z.ZodEnum<["clear", "compact"]>>;
     }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
         c: z.ZodString;
         t: z.ZodEnum<["encrypted", "plaintext"]>;
-        /** Non-sensitive projection; message body and compact summary remain encrypted. */
+        
         contextBoundary: z.ZodOptional<z.ZodEnum<["clear", "compact"]>>;
     }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
         c: z.ZodString;
         t: z.ZodEnum<["encrypted", "plaintext"]>;
-        /** Non-sensitive projection; message body and compact summary remain encrypted. */
+        
         contextBoundary: z.ZodOptional<z.ZodEnum<["clear", "compact"]>>;
     }, z.ZodTypeAny, "passthrough">>;
     createdAt: z.ZodNumber;
@@ -58,17 +52,17 @@ export declare const SessionMessageSchema: z.ZodObject<{
     content: z.ZodObject<{
         c: z.ZodString;
         t: z.ZodEnum<["encrypted", "plaintext"]>;
-        /** Non-sensitive projection; message body and compact summary remain encrypted. */
+        
         contextBoundary: z.ZodOptional<z.ZodEnum<["clear", "compact"]>>;
     }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
         c: z.ZodString;
         t: z.ZodEnum<["encrypted", "plaintext"]>;
-        /** Non-sensitive projection; message body and compact summary remain encrypted. */
+        
         contextBoundary: z.ZodOptional<z.ZodEnum<["clear", "compact"]>>;
     }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
         c: z.ZodString;
         t: z.ZodEnum<["encrypted", "plaintext"]>;
-        /** Non-sensitive projection; message body and compact summary remain encrypted. */
+        
         contextBoundary: z.ZodOptional<z.ZodEnum<["clear", "compact"]>>;
     }, z.ZodTypeAny, "passthrough">>;
     createdAt: z.ZodNumber;
@@ -81,17 +75,17 @@ export declare const SessionMessageSchema: z.ZodObject<{
     content: z.ZodObject<{
         c: z.ZodString;
         t: z.ZodEnum<["encrypted", "plaintext"]>;
-        /** Non-sensitive projection; message body and compact summary remain encrypted. */
+        
         contextBoundary: z.ZodOptional<z.ZodEnum<["clear", "compact"]>>;
     }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
         c: z.ZodString;
         t: z.ZodEnum<["encrypted", "plaintext"]>;
-        /** Non-sensitive projection; message body and compact summary remain encrypted. */
+        
         contextBoundary: z.ZodOptional<z.ZodEnum<["clear", "compact"]>>;
     }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
         c: z.ZodString;
         t: z.ZodEnum<["encrypted", "plaintext"]>;
-        /** Non-sensitive projection; message body and compact summary remain encrypted. */
+        
         contextBoundary: z.ZodOptional<z.ZodEnum<["clear", "compact"]>>;
     }, z.ZodTypeAny, "passthrough">>;
     createdAt: z.ZodNumber;
@@ -35256,4 +35250,3 @@ export declare const MessageContentSchema: z.ZodDiscriminatedUnion<"role", [z.Zo
     }, z.ZodTypeAny, "passthrough">>>;
 }, z.ZodTypeAny, "passthrough">>]>;
 export type MessageContent = z.infer<typeof MessageContentSchema>;
-//# sourceMappingURL=messages.d.ts.map

package/dist/notification.d.ts

@@ -1,8 +1,8 @@
 import { z } from 'zod';
-/** Event categories accepted by the daemon's local notification dispatcher. */
+
 export declare const NotificationEventTypeSchema: z.ZodEnum<["completed", "error", "task_completed", "task_failed", "budget_warning", "daemon_disconnected"]>;
 export type NotificationEventType = z.infer<typeof NotificationEventTypeSchema>;
-/** Server-to-daemon RPC payload for dispatching a local IM notification. */
+
 export declare const DispatchNotificationParamsSchema: z.ZodObject<{
     type: z.ZodEnum<["completed", "error", "task_completed", "task_failed", "budget_warning", "daemon_disconnected"]>;
     title: z.ZodString;
@@ -45,4 +45,3 @@ export declare const DispatchNotificationParamsSchema: z.ZodObject<{
     machineHostname?: string | undefined;
 }>;
 export type DispatchNotificationParams = z.infer<typeof DispatchNotificationParamsSchema>;
-//# sourceMappingURL=notification.d.ts.map

package/dist/ops.d.ts

@@ -1,30 +1,13 @@
 import { z } from 'zod';
-/**
- * Ops RPC method naming convention: namespace.action
- * - file.*   — RFC-033 file management
- * - sync.*   — RFC-034 data sync (Ops Agent → Server)
- * - config.* — RFC-034 policy push (Server → Ops Agent)
- */
+
 export declare const OpsMethodSchema: z.ZodString;
 export type OpsMethod = z.infer<typeof OpsMethodSchema>;
 export declare const OpsRpcTypeSchema: z.ZodEnum<["request", "response", "event"]>;
 export type OpsRpcType = z.infer<typeof OpsRpcTypeSchema>;
-/**
- * Docker image reference — used for system-upgrade imageTag validation.
- *
- * SECURITY (2026-07-27 #M1): the imageTag flows enterprise-admin → Ops Agent →
- * `prepareSharedSystem` → `execAsync(\`docker create ... "${image}"\`)` which runs
- * via a shell. Without a whitelist, an authenticated enterprise admin can inject
- * `$(...)` / backticks inside the double quotes and achieve RCE on the Ops Agent
- * host. This regex is an ALLOW-list of the only characters a valid image ref can
- * contain (`registry[:port]/namespace/name[:tag][@digest]`); every shell
- * metacharacter (`$` `` ` `` `"` `'` space `;` `|` `&` `(` `)` `<` `>` `\`) is
- * excluded, so a passing value is safe to interpolate. Fail-closed: reject on any
- * non-matching character rather than sanitizing.
- */
+
 export declare const DockerImageRefSchema: z.ZodString;
 export type DockerImageRef = z.infer<typeof DockerImageRefSchema>;
-/** Unified RPC message over the ops-upstream tunnel. */
+
 export declare const OpsRpcMessageSchema: z.ZodObject<{
     id: z.ZodString;
     type: z.ZodEnum<["request", "response", "event"]>;
@@ -42,7 +25,7 @@ export declare const OpsRpcMessageSchema: z.ZodObject<{
     payload: z.ZodUnknown;
 }, z.ZodTypeAny, "passthrough">>;
 export type OpsRpcMessage = z.infer<typeof OpsRpcMessageSchema>;
-/** Metrics tracked per ops tunnel connection (RFC-034 R7). */
+
 export interface OpsTunnelMetrics {
     readonly enterpriseId: string;
     readonly connectedAt: Date | null;
@@ -111,7 +94,7 @@ export declare const StorageUsageSchema: z.ZodObject<{
     fileCount: z.ZodNumber;
 }, z.ZodTypeAny, "passthrough">>;
 export type StorageUsage = z.infer<typeof StorageUsageSchema>;
-/** A single user record in a full sync push. */
+
 export declare const SyncUserSchema: z.ZodObject<{
     username: z.ZodString;
     displayName: z.ZodString;
@@ -135,7 +118,7 @@ export declare const SyncUserSchema: z.ZodObject<{
     enabled: z.ZodBoolean;
 }, z.ZodTypeAny, "passthrough">>;
 export type SyncUser = z.infer<typeof SyncUserSchema>;
-/** sync.full — all users pushed on tunnel connect/reconnect. */
+
 export declare const SyncFullPayloadSchema: z.ZodObject<{
     users: z.ZodArray<z.ZodObject<{
         username: z.ZodString;
@@ -207,7 +190,7 @@ export declare const SyncFullPayloadSchema: z.ZodObject<{
     }, z.ZodTypeAny, "passthrough">>, "many">;
 }, z.ZodTypeAny, "passthrough">>;
 export type SyncFullPayload = z.infer<typeof SyncFullPayloadSchema>;
-/** sync.user-created — single user just created. */
+
 export declare const SyncUserCreatedPayloadSchema: z.ZodObject<{
     username: z.ZodString;
     displayName: z.ZodString;
@@ -219,7 +202,7 @@ export declare const SyncUserCreatedPayloadSchema: z.ZodObject<{
     displayName: z.ZodString;
 }, z.ZodTypeAny, "passthrough">>;
 export type SyncUserCreatedPayload = z.infer<typeof SyncUserCreatedPayloadSchema>;
-/** sync.container-status — container state change. */
+
 export declare const SyncContainerStatusPayloadSchema: z.ZodObject<{
     username: z.ZodString;
     containerStatus: z.ZodString;
@@ -234,7 +217,7 @@ export declare const SyncContainerStatusPayloadSchema: z.ZodObject<{
     healthStatus: z.ZodOptional<z.ZodNullable<z.ZodString>>;
 }, z.ZodTypeAny, "passthrough">>;
 export type SyncContainerStatusPayload = z.infer<typeof SyncContainerStatusPayloadSchema>;
-/** sync.user-paired — daemon pairing detected, machineId available. */
+
 export declare const SyncUserPairedPayloadSchema: z.ZodObject<{
     username: z.ZodString;
     machineId: z.ZodString;
@@ -246,4 +229,3 @@ export declare const SyncUserPairedPayloadSchema: z.ZodObject<{
     machineId: z.ZodString;
 }, z.ZodTypeAny, "passthrough">>;
 export type SyncUserPairedPayload = z.infer<typeof SyncUserPairedPayloadSchema>;
-//# sourceMappingURL=ops.d.ts.map

package/dist/pairing.d.ts

@@ -1,24 +1,7 @@
-/**
- * Pairing protocol schemas.
- *
- * Defines the wire format for device pairing:
- * - PairingRequest: CLI sends publicKey + optional PIN to server
- * - PairingResponse: Web sends encrypted payload back via server
- * - PairingStatus: Polling response — discriminated union on state
- *
- * Security: Uses NaCl Box (Curve25519 + XSalsa20-Poly1305) for key exchange.
- * PIN code provides iOS PWA fallback where QR scanning is unreliable.
- */
 import { z } from 'zod';
-/** Pairing state machine. */
+
 export declare const PairingState: z.ZodEnum<["pending", "exchange", "authorized", "expired"]>;
-/**
- * CLI → Server: initiate a pairing request.
- *
- * publicKey: base64-encoded Curve25519 public key (32 bytes)
- * pin: optional 6-digit PIN for manual entry (iOS PWA fallback)
- * label: optional human-readable device label
- */
+
 export declare const PairingRequestSchema: z.ZodObject<{
     publicKey: z.ZodEffects<z.ZodString, string, string>;
     pin: z.ZodOptional<z.ZodString>;
@@ -35,12 +18,7 @@ export declare const PairingRequestSchema: z.ZodObject<{
     label?: string | undefined;
     pin?: string | undefined;
 }>;
-/**
- * Web → Server: approve pairing with encrypted key material.
- *
- * publicKey: identifies which pairing request to respond to (32-byte Curve25519 key)
- * encryptedPayload: NaCl Box encrypted data (base64) containing the DEK
- */
+
 export declare const PairingResponseSchema: z.ZodObject<{
     publicKey: z.ZodEffects<z.ZodString, string, string>;
     encryptedPayload: z.ZodString;
@@ -51,10 +29,7 @@ export declare const PairingResponseSchema: z.ZodObject<{
     publicKey: string;
     encryptedPayload: string;
 }>;
-/**
- * New device → Server: submit device's temporary Curve25519 public key.
- * Used in invite flow when a new device joins an existing account.
- */
+
 export declare const PairingExchangeSchema: z.ZodObject<{
     daemonPublicKey: z.ZodEffects<z.ZodString, string, string>;
     devicePublicKey: z.ZodEffects<z.ZodString, string, string>;
@@ -65,10 +40,7 @@ export declare const PairingExchangeSchema: z.ZodObject<{
     daemonPublicKey: string;
     devicePublicKey: string;
 }>;
-/**
- * Daemon → Server: deliver encrypted master secret to new device.
- * Requires Bearer auth. Encrypted via NaCl Box using device's public key.
- */
+
 export declare const PairingDeliverSchema: z.ZodObject<{
     publicKey: z.ZodEffects<z.ZodString, string, string>;
     encryptedPayload: z.ZodString;
@@ -130,26 +102,14 @@ export type PairingResponse = z.infer<typeof PairingResponseSchema>;
 export type PairingExchange = z.infer<typeof PairingExchangeSchema>;
 export type PairingDeliver = z.infer<typeof PairingDeliverSchema>;
 export type PairingStatus = z.infer<typeof PairingStatusSchema>;
-/** Known derivation versions (whitelist). */
+
 export declare const KNOWN_DERIVATION_VERSIONS: Set<number>;
-/**
- * Current derivation version for newly created identities.
- * 0 = legacy ('Happy EnCoder'), 1 = CCPark ('CCPark EnCoder').
- */
+
 export declare const CURRENT_DERIVATION_VERSION = 1;
-/**
- * Encode a master secret with its derivation version as a pairing payload.
- * Inverse of {@link parseVersionByte}: produces [version_byte, ...masterSecret] (33 bytes).
- */
+
 export declare function encodeVersionByte(masterSecret: Uint8Array, version: number): Uint8Array;
-/**
- * Parse derivation version from decrypted pairing payload.
- * Version 1+: payload = [version_byte, ...masterSecret] (33 bytes)
- * Version 0 (legacy): payload = masterSecret (32 bytes, no prefix)
- * Returns null for unknown versions or unexpected lengths.
- */
+
 export declare function parseVersionByte(rawPayload: Uint8Array): {
     masterSecret: Uint8Array;
     derivationVersion: number;
 } | null;
-//# sourceMappingURL=pairing.d.ts.map

package/dist/permissionSubject.d.ts

@@ -1,30 +1,7 @@
-/**
- * Raw agent tool names whose input carries a `command` field. These are the
- * ORIGINAL agent-emitted names (NOT normalized): Claude `Bash`, OpenCode/Hermes/
- * OpenClaw `execute`, Codex `shell`. The permission-request event and the danger
- * detector both see raw names, so this set is matched against raw names.
- */
 export declare const BASH_TOOL_NAMES: ReadonlySet<string>;
-/** True when `toolName` (a raw agent name) is a Bash-like command tool. */
+
 export declare function isBashToolName(toolName: string): boolean;
-/**
- * Extract the prefix subject from a Bash-like command string:
- *   trim → first token (quote-aware so `"C:\Program Files\..."` isn't split on
- *   spaces) → basename (`.../pwsh.exe` → `pwsh.exe`).
- *
- * Returns '' ONLY for an empty/blank command. When the first token ends in a
- * path separator its basename is empty; we fall back to the un-split token
- * rather than '' — an empty subject makes every command match
- * (`x.startsWith('')` is always true), the Bug 2 security hole.
- */
+
 export declare function extractCommandSubject(command: string): string;
-/**
- * Minimum length for a command subject to be used in a prefix rule.
- * Single-char subjects (e.g. `#` from a comment line, `.` from a dotfile)
- * are too broad — they effectively wildcard-match every command that starts
- * with that character.
- *
- * Used by the front-end to reject overly broad rules before they are stored.
- */
+
 export declare const MIN_SUBJECT_LENGTH = 2;
-//# sourceMappingURL=permissionSubject.d.ts.map

package/dist/protocol.d.ts

@@ -1,7 +1 @@
-/**
- * Wire protocol version.
- * Increment ONLY on breaking schema changes (new enum values, renamed events, required fields).
- * See RFC-021 for the full versioning strategy.
- */
 export declare const PROTOCOL_VERSION = 1;
-//# sourceMappingURL=protocol.d.ts.map