@agora-server/contract 0.9.2

package/dist/schemas.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schemas.d.ts","sourceRoot":"","sources":["../src/schemas.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AASxB,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAW7B,CAAC;AAEH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EASyD,CAAC;AAEzF,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;EAQ9B,CAAC;AAEH,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;EAOwD,CAAC;AAIzF,eAAO,MAAM,cAAc;;;;;;EAEzB,CAAC;AAKH,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;EAQjB,CAAC;AAIb,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAoBjB,CAAC;AAMb,eAAO,MAAM,uBAAuB,0DAA2D,CAAC;AAChG,MAAM,MAAM,mBAAmB,GAAG,CAAC,OAAO,uBAAuB,CAAC,CAAC,MAAM,CAAC,CAAC;AAI3E,eAAO,MAAM,uBAAuB,+BAAgC,CAAC;AACrE,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,uBAAuB,CAAC,CAAC,MAAM,CAAC,CAAC;AAG5E,eAAO,MAAM,0BAA0B,4DAA6D,CAAC;AACrG,MAAM,MAAM,uBAAuB,GAAG,CAAC,OAAO,0BAA0B,CAAC,CAAC,MAAM,CAAC,CAAC;AAClF,eAAO,MAAM,mBAAmB;;;;;;;;;;;;EAIpB,CAAC;AACb,MAAM,WAAW,iBAAiB;IAChC,YAAY,EAAE,mBAAmB,CAAC;IAClC,aAAa,EAAE,oBAAoB,CAAC;IACpC,gBAAgB,EAAE,uBAAuB,CAAC;CAC3C;AAGD,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAQwD,CAAC;AAMzF,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;EAS5B,CAAC;AAEH,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAW0D,CAAC;AAEzF,eAAO,MAAM,gBAAgB;;;;;;;;;;;;EAI3B,CAAC;AAEH,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;EAM2D,CAAC;AAEzF,eAAO,MAAM,kBAAkB;;;;;;EAE7B,CAAC;AAEH,eAAO,MAAM,gBAAgB;;;;;;EAE3B,CAAC;AAEH,eAAO,MAAM,gBAAgB;;;;;;;;;EAG3B,CAAC;AAGH,eAAO,MAAM,sBAAsB;;;;;;;;;EAGjC,CAAC;AAEH,eAAO,MAAM,eAAe;;;;;;EAE1B,CAAC;AAGH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;EAM7B,CAAC;AAGH,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;EAKvB,CAAC;AAEH,eAAO,MAAM,YAAY;;;;;;;;;EAGvB,CAAC;AAEH,eAAO,MAAM,aAAa;;;;;;EAExB,CAAC;AAEH,eAAO,MAAM,aAAa;;;;;;EAExB,CAAC;AAEH,eAAO,MAAM,oBAAoB;;;;;;;;;EAG/B,CAAC;AAEH,eAAO,MAAM,WAAW;;;;;;EAEtB,CAAC;AAEH,eAAO,MAAM,iBAAiB;;;;;;;;;EAG5B,CAAC;AAEH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;EAMkE,CAAC;AAElG,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;EAK/B,CAAC;AAEH,eAAO,MAAM,mBAAmB;;;;;;;;;;;;EAI9B,CAAC;AAKH,eAAO,MAAM,6BAA6B,+MAehC,CAAC;AAUX,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAWhC,CAAC;AAKH,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;EAMlC,CAAC;AAEH,eAAO,MAAM,oBAAoB;;;;;;;;;EAK/B,CAAC;AAGH,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;;EAOnC,CAAC;AAEH,eAAO,MAAM,wBAAwB;;;;;;EAEnC,CAAC;AAEH,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;EAKmD,CAAC;AAQzF,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAKqD,CAAC;AAEpF,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;EAE0D,CAAC;AAEzF,eAAO,MAAM,qBAAqB;;;;;;EAEhC,CAAC;AAEH,eAAO,MAAM,mBAAmB;;;;;;;;;EAG9B,CAAC;AAEH,eAAO,MAAM,2BAA2B;;;;;;;;;EAGtC,CAAC;AAEH,eAAO,MAAM,oBAAoB;;;;;;EAE/B,CAAC;AAGH,eAAO,MAAM,uBAAuB;;;;;;EAElC,CAAC"}

package/dist/schemas.js

@@ -0,0 +1,330 @@
+// Zod request schemas for the Agora API. Pure zod — no server/Errors coupling.
+// The server's parseBody(schema, raw) wraps these to throw a Replyke-shaped 400.
+import { z } from "zod";
+import { REACTION_TYPES } from "./reactions.js";
+// .nullish() (= nullable + optional): SDK clients commonly send absent fields as `null`
+// rather than omitting them. Accepting null avoids spurious 400s; handlers coerce null →
+// undefined for columns that have NOT NULL defaults.
+const mentions = z.array(z.unknown()).nullish();
+const metadata = z.record(z.string(), z.unknown()).nullish();
+export const createEntitySchema = z.object({
+    title: z.string().nullish(),
+    content: z.string().nullish(),
+    foreignId: z.string().nullish(),
+    sourceId: z.string().nullish(),
+    spaceId: z.string().uuid().nullish(),
+    keywords: z.array(z.string()).nullish(),
+    mentions,
+    attachments: z.array(z.unknown()).nullish(),
+    metadata,
+    isDraft: z.boolean().nullish(),
+});
+export const updateEntitySchema = z
+    .object({
+    title: z.string().nullable().optional(),
+    content: z.string().nullable().optional(),
+    keywords: z.array(z.string()).optional(),
+    mentions,
+    attachments: z.array(z.unknown()).optional(),
+    metadata,
+})
+    .refine((v) => Object.keys(v).length > 0, { message: "No updatable fields provided" });
+export const createCommentSchema = z.object({
+    entityId: z.string().uuid(),
+    parentId: z.string().uuid().nullish(),
+    content: z.string().nullish(),
+    gif: z.unknown().nullish(),
+    foreignId: z.string().nullish(),
+    mentions,
+    metadata,
+});
+export const updateCommentSchema = z
+    .object({
+    content: z.string().nullable().optional(),
+    gif: z.unknown().optional(),
+    mentions,
+    metadata,
+})
+    .refine((v) => Object.keys(v).length > 0, { message: "No updatable fields provided" });
+// The SDK posts `{ reactionType }` to /entities/:id/reactions and /comments/:id/reactions
+// (see @agora-sdk useAddReaction). The field name is part of the contract — match it exactly.
+export const reactionSchema = z.object({
+    reactionType: z.enum(REACTION_TYPES),
+});
+// ─── feed ranking ─────────────────────────────────────────────────────────────
+// Per-request numeric overrides for the ranking algorithm (the `rankParams` query scalar). Every
+// field is finite + range-clamped so only safe numbers ever reach a `sql` template (see ranking.ts).
+export const rankParamsSchema = z
+    .object({
+    halfLifeHours: z.number().finite().min(0.1).max(8760),
+    gravity: z.number().finite().min(0.1).max(5),
+    z: z.number().finite().min(0).max(10),
+    C: z.number().finite().min(0).max(1_000_000),
+    m: z.number().finite().min(0).max(1),
+})
+    .partial();
+// PATCH body for /settings/feed (admin). defaultAlgorithm is a free string here (membership is
+// enforced in feed-config.ts, which falls back to "hot") to avoid a validation↔ranking import cycle.
+export const feedConfigSchema = z
+    .object({
+    defaultAlgorithm: z.string().max(40).nullish(),
+    decayMode: z.enum(["stored", "query-time"]).nullish(),
+    halfLifeHours: z.number().finite().min(0.1).max(8760).nullish(),
+    gravity: z.number().finite().min(0.1).max(5).nullish(),
+    z: z.number().finite().min(0).max(10).nullish(),
+    C: z.number().finite().min(0).max(1_000_000).nullish(),
+    m: z.number().finite().min(0).max(1).nullish(),
+    reactionWeights: z.record(z.enum(REACTION_TYPES), z.number().finite().min(0).max(100)).nullish(),
+    diversity: z.object({ perAuthorCap: z.number().int().min(1).max(50) }).nullish(),
+    rerankWebhook: z
+        .object({
+        url: z.string().url().nullish(),
+        secret: z.string().min(1).max(512).nullish(),
+        timeoutMs: z.number().int().min(100).max(30_000).nullish(),
+        overFetch: z.number().int().min(1).max(50).nullish(),
+    })
+        .nullish(),
+})
+    .partial();
+// ─── stewardship ──────────────────────────────────────────────────────────────
+// Who gets notified about a steward conflict-resolution case (project setting; admin Settings →
+// Stewardship). power-aware (default): complainant every stage, respondent only on content removal;
+// symmetric: both every stage; resolution-only: only at close. See lib/steward-config.ts.
+export const STEWARD_NOTIFY_POLICIES = ["power-aware", "symmetric", "resolution-only"];
+// How mediation channels are run for a case. caucus: per-party private channels only (steward bridges,
+// fully preserves the respondent-anonymity guarantee). hybrid (default): caucus channels PLUS an optional
+// joint room when both parties consent and the case isn't flagged targeting. See lib/mediation.ts.
+export const STEWARD_MEDIATION_MODES = ["caucus", "hybrid"];
+// What happens to a case's mediation channels when the case closes. archive-read-only (default): lock
+// posting, keep history. lock-leave: lock + drop parties (steward keeps read access). leave-open: noop.
+export const STEWARD_MEDIATION_ON_CLOSE = ["archive-read-only", "lock-leave", "leave-open"];
+export const stewardConfigSchema = z.object({
+    notifyPolicy: z.enum(STEWARD_NOTIFY_POLICIES),
+    mediationMode: z.enum(STEWARD_MEDIATION_MODES),
+    mediationOnClose: z.enum(STEWARD_MEDIATION_ON_CLOSE),
+}).partial();
+// ─── users / profiles ────────────────────────────────────────────────────────
+export const updateProfileSchema = z
+    .object({
+    name: z.string().max(120).nullable().optional(),
+    username: z.string().min(1).max(60).nullable().optional(),
+    avatar: z.string().url().nullable().optional(),
+    bio: z.string().max(300).nullable().optional(),
+    metadata,
+})
+    .refine((v) => Object.keys(v).length > 0, { message: "No updatable fields provided" });
+// ─── spaces ────────────────────────────────────────────────────────────────
+const readingPerm = z.enum(["anyone", "members"]);
+const postingPerm = z.enum(["anyone", "members", "admins"]);
+export const createSpaceSchema = z.object({
+    name: z.string().min(1).max(120),
+    slug: z.string().min(1).max(120).optional(),
+    description: z.string().max(2000).optional(),
+    readingPermission: readingPerm.optional(),
+    postingPermission: postingPerm.optional(),
+    requireJoinApproval: z.boolean().optional(),
+    parentSpaceId: z.string().uuid().optional(),
+    metadata,
+});
+export const updateSpaceSchema = z
+    .object({
+    name: z.string().min(1).max(120).optional(),
+    slug: z.string().min(1).max(120).nullable().optional(),
+    description: z.string().max(2000).nullable().optional(),
+    readingPermission: readingPerm.optional(),
+    postingPermission: postingPerm.optional(),
+    requireJoinApproval: z.boolean().optional(),
+    parentSpaceId: z.string().uuid().nullable().optional(), // reparent; null = make top-level
+    metadata,
+})
+    .refine((v) => Object.keys(v).length > 0, { message: "No updatable fields provided" });
+export const createRuleSchema = z.object({
+    title: z.string().min(1).max(200),
+    description: z.string().max(2000).optional(),
+    order: z.number().int().optional(),
+});
+export const updateRuleSchema = z
+    .object({
+    title: z.string().min(1).max(200).optional(),
+    description: z.string().max(2000).nullable().optional(),
+    order: z.number().int().optional(),
+})
+    .refine((v) => Object.keys(v).length > 0, { message: "No updatable fields provided" });
+export const reorderRulesSchema = z.object({
+    order: z.array(z.string().uuid()).min(1), // rule ids in desired order
+});
+export const memberRoleSchema = z.object({
+    role: z.enum(["admin", "moderator", "member"]),
+});
+export const moderationSchema = z.object({
+    status: z.enum(["approved", "removed"]),
+    reason: z.string().max(500).optional(),
+});
+// ─── collections ─────────────────────────────────────────────────────────────
+export const createCollectionSchema = z.object({
+    name: z.string().min(1).max(120),
+    parentId: z.string().uuid().optional(),
+});
+export const addEntitySchema = z.object({
+    entityId: z.string().uuid(),
+});
+// ─── reports ─────────────────────────────────────────────────────────────────
+export const createReportSchema = z.object({
+    targetType: z.enum(["entity", "comment"]),
+    targetId: z.string().uuid(),
+    reason: z.string().min(1).max(100),
+    details: z.string().max(2000).optional(),
+    spaceId: z.string().uuid().optional(),
+});
+// ─── auth ──────────────────────────────────────────────────────────────────
+export const signUpSchema = z.object({
+    email: z.string().email(),
+    password: z.string().min(8).max(128),
+    name: z.string().max(120).optional(),
+    username: z.string().min(1).max(60).optional(),
+});
+export const signInSchema = z.object({
+    email: z.string().email(),
+    password: z.string().min(1),
+});
+export const refreshSchema = z.object({
+    refreshToken: z.string().min(1),
+});
+export const signOutSchema = z.object({
+    refreshToken: z.string().min(1).optional(),
+});
+export const changePasswordSchema = z.object({
+    currentPassword: z.string().min(1),
+    newPassword: z.string().min(8).max(128),
+});
+export const emailSchema = z.object({
+    email: z.string().email(),
+});
+export const verifyEmailSchema = z.object({
+    tokenHash: z.string().min(1),
+    type: z.enum(["signup", "email", "recovery"]).optional(),
+});
+export const externalUserSchema = z
+    .object({
+    // The SDK posts `userJwt`; `token` kept as a legacy alias.
+    userJwt: z.string().min(1).optional(),
+    token: z.string().min(1).optional(),
+})
+    .refine((v) => !!(v.userJwt || v.token), { message: "userJwt is required", path: ["userJwt"] });
+export const signTestingJwtSchema = z.object({
+    // Dev-only: the client sends its OWN external-auth private key (PKCS8 PEM) to sign a test JWT.
+    privateKey: z.string().min(1),
+    userData: z.object({ id: z.union([z.string(), z.number()]) }).passthrough(),
+    projectId: z.string().optional(), // SDK includes it; we sign with the path projectId
+});
+export const webhookConfigSchema = z.object({
+    url: z.string().url().nullish(), // null clears it
+    secret: z.string().min(1).nullish(),
+    events: z.array(z.string()).nullish(), // null/absent → unchanged; [] disables all
+});
+// The starting category taxonomy the moderator steers the LLM toward. Seeded into a project's
+// `moderator_config.categories` if none exist, then editable in admin Settings → Agent moderation.
+// The moderator pulls the per-project list (falling back to this) and lists them in its system prompt.
+export const DEFAULT_MODERATION_CATEGORIES = [
+    "fake-news",
+    "conspiracy",
+    "racism",
+    "alcohol-promotion",
+    "drug-promotion",
+    "foul-language",
+    "harassment",
+    "hate-promotion",
+    "sexual",
+    "violence-promotion",
+    "self-harm",
+    "spam",
+    "illicit",
+    "pii",
+];
+// The @agora/moderator integration (PATCH /settings/moderator). Groups everything about automated
+// moderation for one project:
+//   - the internal notifier the API fans content `*.complete` events to (url + write-only secret) —
+//     separate from the project's (external) webhook notifier;
+//   - the block/review auto-action thresholds + LLM-provider tuning the moderator overlays on its env defaults;
+//   - the per-project moderation category list (`categories`).
+// Every field is nullish: omit to leave unchanged, null to clear (→ the moderator's env default /
+// the seed categories). `secret` and `llmApiKey` are write-only (GET exposes only hasSecret / hasLlmApiKey).
+export const moderatorConfigSchema = z.object({
+    url: z.string().url().nullish(),
+    secret: z.string().min(1).nullish(),
+    blockAutoActionThreshold: z.number().min(0).max(1).nullish(),
+    reviewAutoActionThreshold: z.number().min(0).max(1).nullish(),
+    llmProvider: z.enum(["openai", "anthropic"]).nullish(),
+    llmBaseUrl: z.string().url().nullish(),
+    llmApiKey: z.string().min(1).nullish(),
+    llmModel: z.string().min(1).nullish(),
+    llmMaxTokens: z.number().int().positive().nullish(),
+    categories: z.array(z.string().trim().min(1).max(64)).max(100).nullish(),
+});
+// ─── automated moderation (@agora/moderator) ────────────────────────────────
+// Body for the moderator's on-demand POST /moderation/analyze (admin "Re-analyze"). The admin
+// already has the content loaded, so it passes the text directly along with what's being judged.
+export const moderationAnalyzeSchema = z.object({
+    targetType: z.enum(["entity", "comment", "message"]),
+    targetId: z.string().uuid(),
+    spaceId: z.string().uuid().nullish(),
+    text: z.string().min(1).max(40000),
+    context: z.string().max(40000).optional(), // optional surrounding context (e.g. parent entity)
+});
+export const oauthAuthorizeSchema = z.object({
+    provider: z.string().min(1), // e.g. "google", "github", "apple" — passed through to Supabase
+    // Where to send the browser after auth completes (default: the SDK sends window.location.href).
+    // Not .url() so mobile deep links (myapp://) are allowed.
+    redirectAfterAuth: z.string().min(1),
+});
+// ─── chat ──────────────────────────────────────────────────────────────────
+export const createConversationSchema = z.object({
+    type: z.enum(["group", "space"]).optional(),
+    name: z.string().max(120).optional(),
+    description: z.string().max(2000).optional(),
+    spaceId: z.string().uuid().optional(),
+    memberIds: z.array(z.string().uuid()).optional(),
+    postingPermission: z.enum(["members", "admins"]).optional(),
+});
+export const directConversationSchema = z.object({
+    userId: z.string().uuid(), // the other participant
+});
+export const updateConversationSchema = z
+    .object({
+    name: z.string().max(120).nullable().optional(),
+    description: z.string().max(2000).nullable().optional(),
+})
+    .refine((v) => Object.keys(v).length > 0, { message: "No updatable fields provided" });
+const messageBody = {
+    content: z.string().max(10000).optional(),
+    gif: z.unknown().optional(),
+    mentions,
+    metadata,
+};
+export const sendMessageSchema = z.object({
+    ...messageBody,
+    parentMessageId: z.string().uuid().optional(),
+    quotedMessageId: z.string().uuid().optional(),
+    localId: z.string().optional(), // client optimistic-reconciliation token, echoed back, not persisted
+}).refine((v) => v.content || v.gif, { message: "Message needs content or a gif" });
+export const editMessageSchema = z
+    .object(messageBody)
+    .refine((v) => Object.keys(v).length > 0, { message: "No updatable fields provided" });
+export const messageReactionSchema = z.object({
+    emoji: z.string().min(1).max(64),
+});
+export const reportMessageSchema = z.object({
+    reason: z.string().min(1).max(100),
+    details: z.string().max(2000).optional(),
+});
+export const addConversationMemberSchema = z.object({
+    userId: z.string().uuid(),
+    role: z.enum(["admin", "member"]).optional(),
+});
+export const convMemberRoleSchema = z.object({
+    role: z.enum(["admin", "member"]),
+});
+// ─── connections ─────────────────────────────────────────────────────────────
+export const connectionRequestSchema = z.object({
+    message: z.string().max(500).optional(),
+});

package/dist/secure-chat.d.ts

@@ -0,0 +1,315 @@
+import { z } from "zod";
+export declare const base64: z.ZodString;
+export declare const epochString: z.ZodString;
+export declare const welcomeSchema: z.ZodObject<{
+    targetDeviceId: z.ZodString;
+    payload: z.ZodString;
+    epoch: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    targetDeviceId: string;
+    payload: string;
+    epoch: string;
+}, {
+    targetDeviceId: string;
+    payload: string;
+    epoch: string;
+}>;
+export declare const handshakeBlobSchema: z.ZodObject<{
+    payload: z.ZodString;
+    epoch: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    payload: string;
+    epoch: string;
+}, {
+    payload: string;
+    epoch: string;
+}>;
+export declare const registerDeviceSchema: z.ZodObject<{
+    deviceId: z.ZodString;
+    displayName: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    signaturePublicKey: z.ZodString;
+    credential: z.ZodString;
+    ciphersuite: z.ZodNumber;
+}, "strip", z.ZodTypeAny, {
+    deviceId: string;
+    signaturePublicKey: string;
+    credential: string;
+    ciphersuite: number;
+    displayName?: string | null | undefined;
+}, {
+    deviceId: string;
+    signaturePublicKey: string;
+    credential: string;
+    ciphersuite: number;
+    displayName?: string | null | undefined;
+}>;
+export declare const publishKeyPackagesSchema: z.ZodObject<{
+    keyPackages: z.ZodArray<z.ZodObject<{
+        keyPackageRef: z.ZodString;
+        keyPackage: z.ZodString;
+        ciphersuite: z.ZodNumber;
+        expiresAt: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    }, "strip", z.ZodTypeAny, {
+        ciphersuite: number;
+        keyPackageRef: string;
+        keyPackage: string;
+        expiresAt?: string | null | undefined;
+    }, {
+        ciphersuite: number;
+        keyPackageRef: string;
+        keyPackage: string;
+        expiresAt?: string | null | undefined;
+    }>, "many">;
+}, "strip", z.ZodTypeAny, {
+    keyPackages: {
+        ciphersuite: number;
+        keyPackageRef: string;
+        keyPackage: string;
+        expiresAt?: string | null | undefined;
+    }[];
+}, {
+    keyPackages: {
+        ciphersuite: number;
+        keyPackageRef: string;
+        keyPackage: string;
+        expiresAt?: string | null | undefined;
+    }[];
+}>;
+export declare const createSecureConversationSchema: z.ZodObject<{
+    type: z.ZodEnum<["dm", "group", "channel"]>;
+    mlsGroupId: z.ZodString;
+    spaceId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    name: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    memberUserIds: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    welcomes: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        targetDeviceId: z.ZodString;
+        payload: z.ZodString;
+        epoch: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        targetDeviceId: string;
+        payload: string;
+        epoch: string;
+    }, {
+        targetDeviceId: string;
+        payload: string;
+        epoch: string;
+    }>, "many">>;
+}, "strip", z.ZodTypeAny, {
+    type: "group" | "dm" | "channel";
+    mlsGroupId: string;
+    memberUserIds: string[];
+    welcomes: {
+        targetDeviceId: string;
+        payload: string;
+        epoch: string;
+    }[];
+    spaceId?: string | null | undefined;
+    name?: string | null | undefined;
+}, {
+    type: "group" | "dm" | "channel";
+    mlsGroupId: string;
+    spaceId?: string | null | undefined;
+    name?: string | null | undefined;
+    memberUserIds?: string[] | undefined;
+    welcomes?: {
+        targetDeviceId: string;
+        payload: string;
+        epoch: string;
+    }[] | undefined;
+}>;
+export declare const addSecureMemberSchema: z.ZodObject<{
+    userId: z.ZodString;
+    commit: z.ZodObject<{
+        payload: z.ZodString;
+        epoch: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        payload: string;
+        epoch: string;
+    }, {
+        payload: string;
+        epoch: string;
+    }>;
+    welcomes: z.ZodArray<z.ZodObject<{
+        targetDeviceId: z.ZodString;
+        payload: z.ZodString;
+        epoch: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        targetDeviceId: string;
+        payload: string;
+        epoch: string;
+    }, {
+        targetDeviceId: string;
+        payload: string;
+        epoch: string;
+    }>, "many">;
+}, "strip", z.ZodTypeAny, {
+    userId: string;
+    welcomes: {
+        targetDeviceId: string;
+        payload: string;
+        epoch: string;
+    }[];
+    commit: {
+        payload: string;
+        epoch: string;
+    };
+}, {
+    userId: string;
+    welcomes: {
+        targetDeviceId: string;
+        payload: string;
+        epoch: string;
+    }[];
+    commit: {
+        payload: string;
+        epoch: string;
+    };
+}>;
+export declare const removeSecureMemberSchema: z.ZodObject<{
+    commit: z.ZodObject<{
+        payload: z.ZodString;
+        epoch: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        payload: string;
+        epoch: string;
+    }, {
+        payload: string;
+        epoch: string;
+    }>;
+}, "strip", z.ZodTypeAny, {
+    commit: {
+        payload: string;
+        epoch: string;
+    };
+}, {
+    commit: {
+        payload: string;
+        epoch: string;
+    };
+}>;
+export declare const sendSecureMessageSchema: z.ZodObject<{
+    ciphertext: z.ZodString;
+    epoch: z.ZodString;
+    senderDeviceId: z.ZodString;
+    contentType: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+}, "strip", z.ZodTypeAny, {
+    epoch: string;
+    ciphertext: string;
+    senderDeviceId: string;
+    contentType?: string | null | undefined;
+}, {
+    epoch: string;
+    ciphertext: string;
+    senderDeviceId: string;
+    contentType?: string | null | undefined;
+}>;
+export declare const uploadKeyBackupSchema: z.ZodObject<{
+    deviceId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    blob: z.ZodString;
+    nonce: z.ZodString;
+    kdf: z.ZodEnum<["argon2id", "pbkdf2"]>;
+    kdfParams: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+    cipher: z.ZodEnum<["xchacha20poly1305", "aes-256-gcm"]>;
+    version: z.ZodNumber;
+}, "strip", z.ZodTypeAny, {
+    blob: string;
+    nonce: string;
+    kdf: "argon2id" | "pbkdf2";
+    kdfParams: Record<string, unknown>;
+    cipher: "xchacha20poly1305" | "aes-256-gcm";
+    version: number;
+    deviceId?: string | null | undefined;
+}, {
+    blob: string;
+    nonce: string;
+    kdf: "argon2id" | "pbkdf2";
+    kdfParams: Record<string, unknown>;
+    cipher: "xchacha20poly1305" | "aes-256-gcm";
+    version: number;
+    deviceId?: string | null | undefined;
+}>;
+export interface SecureDeviceModel {
+    id: string;
+    projectId: string;
+    userId: string;
+    deviceId: string;
+    displayName: string | null;
+    signaturePublicKey: string;
+    credential: string;
+    ciphersuite: number;
+    revokedAt: string | null;
+    lastSeenAt: string | null;
+    createdAt: string;
+    updatedAt: string;
+}
+export interface SecureKeyPackageClaim {
+    deviceId: string;
+    keyPackageRef: string;
+    keyPackage: string;
+    ciphersuite: number;
+}
+export interface SecureConversationMemberModel {
+    id: string;
+    projectId: string;
+    conversationId: string;
+    userId: string;
+    role: "admin" | "member";
+    isActive: boolean;
+    joinedAtEpoch: string | null;
+    lastReadAt: string | null;
+    leftAt: string | null;
+    createdAt: string;
+    updatedAt: string;
+}
+export interface SecureConversationModel {
+    id: string;
+    projectId: string;
+    type: "dm" | "group" | "channel";
+    mlsGroupId: string;
+    spaceId: string | null;
+    currentEpoch: string;
+    name: string | null;
+    createdById: string | null;
+    lastMessageAt: string | null;
+    memberCount?: number;
+    unreadCount?: number;
+    currentMember?: SecureConversationMemberModel;
+    createdAt: string;
+    updatedAt: string;
+}
+export interface SecureMessageModel {
+    id: string;
+    projectId: string;
+    conversationId: string;
+    senderUserId: string | null;
+    senderDeviceId: string | null;
+    epoch: string;
+    ciphertext: string;
+    contentType: string;
+    createdAt: string;
+}
+export interface SecureHandshakeModel {
+    id: string;
+    seq: string;
+    kind: "welcome" | "commit" | "proposal";
+    conversationId: string;
+    epoch: string;
+    payload: string;
+    senderDeviceId: string | null;
+    targetDeviceId: string | null;
+}
+export interface SecureKeyBackupModel {
+    id: string;
+    projectId: string;
+    userId: string;
+    deviceId: string | null;
+    blob: string;
+    nonce: string;
+    kdf: string;
+    kdfParams: Record<string, unknown>;
+    cipher: string;
+    version: number;
+    createdAt: string;
+    updatedAt: string;
+}
+//# sourceMappingURL=secure-chat.d.ts.map

package/dist/secure-chat.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secure-chat.d.ts","sourceRoot":"","sources":["../src/secure-chat.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAMxB,eAAO,MAAM,MAAM,aAIiC,CAAC;AAGrD,eAAO,MAAM,WAAW,aAA2E,CAAC;AAMpG,eAAO,MAAM,aAAa;;;;;;;;;;;;EAIxB,CAAC;AAEH,eAAO,MAAM,mBAAmB;;;;;;;;;EAG9B,CAAC;AAGH,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;EAM/B,CAAC;AAEH,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAYnC,CAAC;AAEH,eAAO,MAAM,8BAA8B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAOzC,CAAC;AAEH,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAIhC,CAAC;AAEH,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;;EAEnC,CAAC;AAEH,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;EAKlC,CAAC;AAEH,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;EAQhC,CAAC;AAGH,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,6BAA6B;IAC5C,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,OAAO,GAAG,QAAQ,CAAC;IACzB,QAAQ,EAAE,OAAO,CAAC;IAClB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,uBAAuB;IACtC,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,IAAI,GAAG,OAAO,GAAG,SAAS,CAAC;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,6BAA6B,CAAC;IAC9C,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,oBAAoB;IACnC,EAAE,EAAE,MAAM,CAAC;IACX,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,SAAS,GAAG,QAAQ,GAAG,UAAU,CAAC;IACxC,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;CAC/B;AAED,MAAM,WAAW,oBAAoB;IACnC,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB"}