@astrasyncai/verification-gateway 5.10.0 → 5.11.0

package/dist/enrolment-store-8DyaIOLe.d.mts

@@ -0,0 +1,26 @@
+/**
+ * Where fleet enrolment and the cached signed policy live.
+ *
+ * Machine scope (written by `astrasync guard enroll --system` / MDM) WINS
+ * over user scope. The machine-scope fleet.json is world-readable (0644) —
+ * the hook runs as the developer and must read the device credential; that
+ * credential can only heartbeat and fetch this device's signed policy, never
+ * alter it. User scope lives under ~/.astrasync/fleet/ at 0600.
+ *
+ * The policy cache + runtime state are user-scope (the hook must be able to
+ * refresh them); tampering is caught by the signature check against the JWKS
+ * pinned in the enrolment, and a missing cache is re-fetched or fails closed.
+ */
+
+interface FleetPaths {
+    machineDevice: string;
+    machinePolicy: string;
+    userDir: string;
+    userDevice: string;
+    userPolicy: string;
+    /** Signed key-rotation chain (untrusted storage: each link is verified from the pin). */
+    userKeyChain: string;
+    state: string;
+}
+
+export type { FleetPaths as F };

package/dist/enrolment-store-8DyaIOLe.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Where fleet enrolment and the cached signed policy live.
+ *
+ * Machine scope (written by `astrasync guard enroll --system` / MDM) WINS
+ * over user scope. The machine-scope fleet.json is world-readable (0644) —
+ * the hook runs as the developer and must read the device credential; that
+ * credential can only heartbeat and fetch this device's signed policy, never
+ * alter it. User scope lives under ~/.astrasync/fleet/ at 0600.
+ *
+ * The policy cache + runtime state are user-scope (the hook must be able to
+ * refresh them); tampering is caught by the signature check against the JWKS
+ * pinned in the enrolment, and a missing cache is re-fetched or fails closed.
+ */
+
+interface FleetPaths {
+    machineDevice: string;
+    machinePolicy: string;
+    userDir: string;
+    userDevice: string;
+    userPolicy: string;
+    /** Signed key-rotation chain (untrusted storage: each link is verified from the pin). */
+    userKeyChain: string;
+    state: string;
+}
+
+export type { FleetPaths as F };

package/dist/gateway/gateway.js

@@ -3748,7 +3748,7 @@ function getTrustLevel(score) {
 }
 
 // src/version.ts
-var SDK_VERSION = "5.10.0";
+var SDK_VERSION = "5.11.0";
 
 // src/http.ts
 var SDK_USER_AGENT = `astrasync-sdk/${SDK_VERSION}`;