@camstack/types 1.2.368 → 1.2.370

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -5207,6 +5207,13 @@ export type AppRouter = TrpcCoreRouter<{
5207
5207
  output: z.infer<typeof nodeCertificatesCapability.methods.prepareHttpsCertificate.output>;
5208
5208
  meta: object;
5209
5209
  }>;
5210
+ forgetHub: TRPCMutationProcedure<{
5211
+ input: {
5212
+ [x: string]: unknown;
5213
+ } & z.input<typeof nodeCertificatesCapability.methods.forgetHub.input>;
5214
+ output: z.infer<typeof nodeCertificatesCapability.methods.forgetHub.output>;
5215
+ meta: object;
5216
+ }>;
5210
5217
  installHttpsCertificate: TRPCMutationProcedure<{
5211
5218
  input: {
5212
5219
  [x: string]: unknown;
@@ -11570,7 +11577,7 @@ export type AppRouter = TrpcCoreRouter<{
11570
11577
  notBefore: number;
11571
11578
  notAfter: number;
11572
11579
  issuedAt: number;
11573
- issuedVia: "enroll" | "renewal" | "boot" | "observed";
11580
+ issuedVia: "enroll" | "pairing" | "renewal" | "boot" | "observed";
11574
11581
  status: "valid" | "expiring" | "expired" | "revoked";
11575
11582
  revokedAt: number | null;
11576
11583
  revokedReason: string | null;
@@ -11582,7 +11589,7 @@ export type AppRouter = TrpcCoreRouter<{
11582
11589
  notBefore: number;
11583
11590
  notAfter: number;
11584
11591
  issuedAt: number;
11585
- issuedVia: "enroll" | "renewal" | "boot" | "observed";
11592
+ issuedVia: "enroll" | "pairing" | "renewal" | "boot" | "observed";
11586
11593
  status: "valid" | "expiring" | "expired" | "revoked";
11587
11594
  revokedAt: number | null;
11588
11595
  revokedReason: string | null;
@@ -11698,7 +11705,7 @@ export type AppRouter = TrpcCoreRouter<{
11698
11705
  notBefore: number;
11699
11706
  notAfter: number;
11700
11707
  issuedAt: number;
11701
- issuedVia: "enroll" | "renewal" | "boot" | "observed";
11708
+ issuedVia: "enroll" | "pairing" | "renewal" | "boot" | "observed";
11702
11709
  status: "valid" | "expiring" | "expired" | "revoked";
11703
11710
  revokedAt: number | null;
11704
11711
  revokedReason: string | null;
@@ -11710,7 +11717,7 @@ export type AppRouter = TrpcCoreRouter<{
11710
11717
  notBefore: number;
11711
11718
  notAfter: number;
11712
11719
  issuedAt: number;
11713
- issuedVia: "enroll" | "renewal" | "boot" | "observed";
11720
+ issuedVia: "enroll" | "pairing" | "renewal" | "boot" | "observed";
11714
11721
  status: "valid" | "expiring" | "expired" | "revoked";
11715
11722
  revokedAt: number | null;
11716
11723
  revokedReason: string | null;
@@ -11751,6 +11758,368 @@ export type AppRouter = TrpcCoreRouter<{
11751
11758
  meta: object;
11752
11759
  }>;
11753
11760
  }>;
11761
+ agentPairing: import("@trpc/server/unstable-core-do-not-import").Router<{
11762
+ ctx: any;
11763
+ meta: object;
11764
+ errorShape: AugmentedErrorShape;
11765
+ transformer: true;
11766
+ }, import("@trpc/server/unstable-core-do-not-import").DecorateCreateRouterOptions<{
11767
+ listDiscoveredAgents: import("@trpc/server/unstable-core-do-not-import").QueryProcedure<{
11768
+ input: {
11769
+ refresh?: boolean | undefined;
11770
+ } | undefined;
11771
+ output: {
11772
+ agents: {
11773
+ nodeId: string;
11774
+ host: string;
11775
+ port: number;
11776
+ version: string | null;
11777
+ state: "unpaired" | "pending" | "paired";
11778
+ fingerprint: string | null;
11779
+ source: "mdns" | "address";
11780
+ connected: boolean;
11781
+ pairing: {
11782
+ pairingId: string;
11783
+ nodeId: string;
11784
+ endpoint: {
11785
+ host: string;
11786
+ port: number;
11787
+ };
11788
+ code: string;
11789
+ state: "expired" | "paired" | "awaiting-confirmation" | "completing" | "rejected" | "failed";
11790
+ hubConfirmed: boolean;
11791
+ agentConfirmed: boolean;
11792
+ expiresAt: number;
11793
+ failure: string | null;
11794
+ } | null;
11795
+ }[];
11796
+ scannedAt: number | null;
11797
+ };
11798
+ meta: object;
11799
+ }>;
11800
+ addAgentByAddress: import("@trpc/server/unstable-core-do-not-import").MutationProcedure<{
11801
+ input: {
11802
+ host: string;
11803
+ port?: number | undefined;
11804
+ };
11805
+ output: {
11806
+ nodeId: string;
11807
+ host: string;
11808
+ port: number;
11809
+ version: string | null;
11810
+ state: "unpaired" | "pending" | "paired";
11811
+ fingerprint: string | null;
11812
+ source: "mdns" | "address";
11813
+ connected: boolean;
11814
+ pairing: {
11815
+ pairingId: string;
11816
+ nodeId: string;
11817
+ endpoint: {
11818
+ host: string;
11819
+ port: number;
11820
+ };
11821
+ code: string;
11822
+ state: "expired" | "paired" | "awaiting-confirmation" | "completing" | "rejected" | "failed";
11823
+ hubConfirmed: boolean;
11824
+ agentConfirmed: boolean;
11825
+ expiresAt: number;
11826
+ failure: string | null;
11827
+ } | null;
11828
+ };
11829
+ meta: object;
11830
+ }>;
11831
+ beginPairing: import("@trpc/server/unstable-core-do-not-import").MutationProcedure<{
11832
+ input: {
11833
+ host: string;
11834
+ port?: number | undefined;
11835
+ };
11836
+ output: {
11837
+ pairingId: string;
11838
+ nodeId: string;
11839
+ endpoint: {
11840
+ host: string;
11841
+ port: number;
11842
+ };
11843
+ code: string;
11844
+ state: "expired" | "paired" | "awaiting-confirmation" | "completing" | "rejected" | "failed";
11845
+ hubConfirmed: boolean;
11846
+ agentConfirmed: boolean;
11847
+ expiresAt: number;
11848
+ failure: string | null;
11849
+ };
11850
+ meta: object;
11851
+ }>;
11852
+ getPairing: import("@trpc/server/unstable-core-do-not-import").QueryProcedure<{
11853
+ input: {
11854
+ pairingId: string;
11855
+ };
11856
+ output: {
11857
+ pairingId: string;
11858
+ nodeId: string;
11859
+ endpoint: {
11860
+ host: string;
11861
+ port: number;
11862
+ };
11863
+ code: string;
11864
+ state: "expired" | "paired" | "awaiting-confirmation" | "completing" | "rejected" | "failed";
11865
+ hubConfirmed: boolean;
11866
+ agentConfirmed: boolean;
11867
+ expiresAt: number;
11868
+ failure: string | null;
11869
+ };
11870
+ meta: object;
11871
+ }>;
11872
+ listPairings: import("@trpc/server/unstable-core-do-not-import").QueryProcedure<{
11873
+ input: void;
11874
+ output: {
11875
+ pairingId: string;
11876
+ nodeId: string;
11877
+ endpoint: {
11878
+ host: string;
11879
+ port: number;
11880
+ };
11881
+ code: string;
11882
+ state: "expired" | "paired" | "awaiting-confirmation" | "completing" | "rejected" | "failed";
11883
+ hubConfirmed: boolean;
11884
+ agentConfirmed: boolean;
11885
+ expiresAt: number;
11886
+ failure: string | null;
11887
+ }[];
11888
+ meta: object;
11889
+ }>;
11890
+ confirmPairing: import("@trpc/server/unstable-core-do-not-import").MutationProcedure<{
11891
+ input: {
11892
+ pairingId: string;
11893
+ code: string;
11894
+ };
11895
+ output: {
11896
+ pairingId: string;
11897
+ nodeId: string;
11898
+ endpoint: {
11899
+ host: string;
11900
+ port: number;
11901
+ };
11902
+ code: string;
11903
+ state: "expired" | "paired" | "awaiting-confirmation" | "completing" | "rejected" | "failed";
11904
+ hubConfirmed: boolean;
11905
+ agentConfirmed: boolean;
11906
+ expiresAt: number;
11907
+ failure: string | null;
11908
+ };
11909
+ meta: object;
11910
+ }>;
11911
+ rejectPairing: import("@trpc/server/unstable-core-do-not-import").MutationProcedure<{
11912
+ input: {
11913
+ pairingId: string;
11914
+ };
11915
+ output: {
11916
+ pairingId: string;
11917
+ nodeId: string;
11918
+ endpoint: {
11919
+ host: string;
11920
+ port: number;
11921
+ };
11922
+ code: string;
11923
+ state: "expired" | "paired" | "awaiting-confirmation" | "completing" | "rejected" | "failed";
11924
+ hubConfirmed: boolean;
11925
+ agentConfirmed: boolean;
11926
+ expiresAt: number;
11927
+ failure: string | null;
11928
+ };
11929
+ meta: object;
11930
+ }>;
11931
+ unpairAgent: import("@trpc/server/unstable-core-do-not-import").MutationProcedure<{
11932
+ input: {
11933
+ nodeId: string;
11934
+ };
11935
+ output: {
11936
+ nodeId: string;
11937
+ agentNotified: boolean;
11938
+ revokedSerials: string[];
11939
+ disconnected: number;
11940
+ next: string;
11941
+ };
11942
+ meta: object;
11943
+ }>;
11944
+ }>> & import("@trpc/server/unstable-core-do-not-import").DecorateCreateRouterOptions<{
11945
+ listDiscoveredAgents: import("@trpc/server/unstable-core-do-not-import").QueryProcedure<{
11946
+ input: {
11947
+ refresh?: boolean | undefined;
11948
+ } | undefined;
11949
+ output: {
11950
+ agents: {
11951
+ nodeId: string;
11952
+ host: string;
11953
+ port: number;
11954
+ version: string | null;
11955
+ state: "unpaired" | "pending" | "paired";
11956
+ fingerprint: string | null;
11957
+ source: "mdns" | "address";
11958
+ connected: boolean;
11959
+ pairing: {
11960
+ pairingId: string;
11961
+ nodeId: string;
11962
+ endpoint: {
11963
+ host: string;
11964
+ port: number;
11965
+ };
11966
+ code: string;
11967
+ state: "expired" | "paired" | "awaiting-confirmation" | "completing" | "rejected" | "failed";
11968
+ hubConfirmed: boolean;
11969
+ agentConfirmed: boolean;
11970
+ expiresAt: number;
11971
+ failure: string | null;
11972
+ } | null;
11973
+ }[];
11974
+ scannedAt: number | null;
11975
+ };
11976
+ meta: object;
11977
+ }>;
11978
+ addAgentByAddress: import("@trpc/server/unstable-core-do-not-import").MutationProcedure<{
11979
+ input: {
11980
+ host: string;
11981
+ port?: number | undefined;
11982
+ };
11983
+ output: {
11984
+ nodeId: string;
11985
+ host: string;
11986
+ port: number;
11987
+ version: string | null;
11988
+ state: "unpaired" | "pending" | "paired";
11989
+ fingerprint: string | null;
11990
+ source: "mdns" | "address";
11991
+ connected: boolean;
11992
+ pairing: {
11993
+ pairingId: string;
11994
+ nodeId: string;
11995
+ endpoint: {
11996
+ host: string;
11997
+ port: number;
11998
+ };
11999
+ code: string;
12000
+ state: "expired" | "paired" | "awaiting-confirmation" | "completing" | "rejected" | "failed";
12001
+ hubConfirmed: boolean;
12002
+ agentConfirmed: boolean;
12003
+ expiresAt: number;
12004
+ failure: string | null;
12005
+ } | null;
12006
+ };
12007
+ meta: object;
12008
+ }>;
12009
+ beginPairing: import("@trpc/server/unstable-core-do-not-import").MutationProcedure<{
12010
+ input: {
12011
+ host: string;
12012
+ port?: number | undefined;
12013
+ };
12014
+ output: {
12015
+ pairingId: string;
12016
+ nodeId: string;
12017
+ endpoint: {
12018
+ host: string;
12019
+ port: number;
12020
+ };
12021
+ code: string;
12022
+ state: "expired" | "paired" | "awaiting-confirmation" | "completing" | "rejected" | "failed";
12023
+ hubConfirmed: boolean;
12024
+ agentConfirmed: boolean;
12025
+ expiresAt: number;
12026
+ failure: string | null;
12027
+ };
12028
+ meta: object;
12029
+ }>;
12030
+ getPairing: import("@trpc/server/unstable-core-do-not-import").QueryProcedure<{
12031
+ input: {
12032
+ pairingId: string;
12033
+ };
12034
+ output: {
12035
+ pairingId: string;
12036
+ nodeId: string;
12037
+ endpoint: {
12038
+ host: string;
12039
+ port: number;
12040
+ };
12041
+ code: string;
12042
+ state: "expired" | "paired" | "awaiting-confirmation" | "completing" | "rejected" | "failed";
12043
+ hubConfirmed: boolean;
12044
+ agentConfirmed: boolean;
12045
+ expiresAt: number;
12046
+ failure: string | null;
12047
+ };
12048
+ meta: object;
12049
+ }>;
12050
+ listPairings: import("@trpc/server/unstable-core-do-not-import").QueryProcedure<{
12051
+ input: void;
12052
+ output: {
12053
+ pairingId: string;
12054
+ nodeId: string;
12055
+ endpoint: {
12056
+ host: string;
12057
+ port: number;
12058
+ };
12059
+ code: string;
12060
+ state: "expired" | "paired" | "awaiting-confirmation" | "completing" | "rejected" | "failed";
12061
+ hubConfirmed: boolean;
12062
+ agentConfirmed: boolean;
12063
+ expiresAt: number;
12064
+ failure: string | null;
12065
+ }[];
12066
+ meta: object;
12067
+ }>;
12068
+ confirmPairing: import("@trpc/server/unstable-core-do-not-import").MutationProcedure<{
12069
+ input: {
12070
+ pairingId: string;
12071
+ code: string;
12072
+ };
12073
+ output: {
12074
+ pairingId: string;
12075
+ nodeId: string;
12076
+ endpoint: {
12077
+ host: string;
12078
+ port: number;
12079
+ };
12080
+ code: string;
12081
+ state: "expired" | "paired" | "awaiting-confirmation" | "completing" | "rejected" | "failed";
12082
+ hubConfirmed: boolean;
12083
+ agentConfirmed: boolean;
12084
+ expiresAt: number;
12085
+ failure: string | null;
12086
+ };
12087
+ meta: object;
12088
+ }>;
12089
+ rejectPairing: import("@trpc/server/unstable-core-do-not-import").MutationProcedure<{
12090
+ input: {
12091
+ pairingId: string;
12092
+ };
12093
+ output: {
12094
+ pairingId: string;
12095
+ nodeId: string;
12096
+ endpoint: {
12097
+ host: string;
12098
+ port: number;
12099
+ };
12100
+ code: string;
12101
+ state: "expired" | "paired" | "awaiting-confirmation" | "completing" | "rejected" | "failed";
12102
+ hubConfirmed: boolean;
12103
+ agentConfirmed: boolean;
12104
+ expiresAt: number;
12105
+ failure: string | null;
12106
+ };
12107
+ meta: object;
12108
+ }>;
12109
+ unpairAgent: import("@trpc/server/unstable-core-do-not-import").MutationProcedure<{
12110
+ input: {
12111
+ nodeId: string;
12112
+ };
12113
+ output: {
12114
+ nodeId: string;
12115
+ agentNotified: boolean;
12116
+ revokedSerials: string[];
12117
+ disconnected: number;
12118
+ next: string;
12119
+ };
12120
+ meta: object;
12121
+ }>;
12122
+ }>;
11754
12123
  auth: import("@trpc/server/unstable-core-do-not-import").Router<{
11755
12124
  ctx: any;
11756
12125
  meta: object;
@@ -11826,6 +12195,12 @@ export type AppRouter = TrpcCoreRouter<{
11826
12195
  stage: "primary" | "second-factor";
11827
12196
  icon?: string | undefined;
11828
12197
  linkable?: boolean | undefined;
12198
+ app?: {
12199
+ kind: "native";
12200
+ } | {
12201
+ kind: "browser";
12202
+ startPath: string;
12203
+ } | null | undefined;
11829
12204
  } | {
11830
12205
  kind: "widget";
11831
12206
  id: string;
@@ -11838,6 +12213,12 @@ export type AppRouter = TrpcCoreRouter<{
11838
12213
  };
11839
12214
  stage: "primary" | "second-factor";
11840
12215
  bundleUrl: string;
12216
+ app?: {
12217
+ kind: "native";
12218
+ } | {
12219
+ kind: "browser";
12220
+ startPath: string;
12221
+ } | null | undefined;
11841
12222
  } | {
11842
12223
  kind: "passkey";
11843
12224
  id: string;
@@ -11845,6 +12226,12 @@ export type AppRouter = TrpcCoreRouter<{
11845
12226
  stage: "primary" | "second-factor";
11846
12227
  rpId: string;
11847
12228
  origin: string | null;
12229
+ app?: {
12230
+ kind: "native";
12231
+ } | {
12232
+ kind: "browser";
12233
+ startPath: string;
12234
+ } | null | undefined;
11848
12235
  } | {
11849
12236
  kind: "device-certificate";
11850
12237
  id: "device-certificate";
@@ -11858,6 +12245,12 @@ export type AppRouter = TrpcCoreRouter<{
11858
12245
  signature: "ecdsa-p256-sha256";
11859
12246
  messageVersion: "camstack-device-cert-v1";
11860
12247
  clients: ("web" | "native")[];
12248
+ app: {
12249
+ kind: "native";
12250
+ } | {
12251
+ kind: "browser";
12252
+ startPath: string;
12253
+ } | null;
11861
12254
  })[];
11862
12255
  meta: object;
11863
12256
  }>;
@@ -11959,7 +12352,7 @@ export type AppRouter = TrpcCoreRouter<{
11959
12352
  input: {
11960
12353
  code: string;
11961
12354
  publicKeySpki: string;
11962
- platform: "android" | "ios" | "other" | "web";
12355
+ platform: "other" | "android" | "ios" | "web";
11963
12356
  deviceName?: string | undefined;
11964
12357
  };
11965
12358
  output: {
@@ -12072,7 +12465,7 @@ export type AppRouter = TrpcCoreRouter<{
12072
12465
  userId: string;
12073
12466
  username: string | null;
12074
12467
  deviceName: string;
12075
- platform: "android" | "ios" | "other" | "web";
12468
+ platform: "other" | "android" | "ios" | "web";
12076
12469
  enrolledVia: "self" | "qr";
12077
12470
  fingerprint: string;
12078
12471
  issuedAt: number;
@@ -12122,7 +12515,7 @@ export type AppRouter = TrpcCoreRouter<{
12122
12515
  proof: string;
12123
12516
  publicKeySpki: string;
12124
12517
  deviceName: string;
12125
- platform: "android" | "ios" | "other" | "web";
12518
+ platform: "other" | "android" | "ios" | "web";
12126
12519
  };
12127
12520
  output: {
12128
12521
  credentialId: string;
@@ -12686,6 +13079,12 @@ export type AppRouter = TrpcCoreRouter<{
12686
13079
  stage: "primary" | "second-factor";
12687
13080
  icon?: string | undefined;
12688
13081
  linkable?: boolean | undefined;
13082
+ app?: {
13083
+ kind: "native";
13084
+ } | {
13085
+ kind: "browser";
13086
+ startPath: string;
13087
+ } | null | undefined;
12689
13088
  } | {
12690
13089
  kind: "widget";
12691
13090
  id: string;
@@ -12698,6 +13097,12 @@ export type AppRouter = TrpcCoreRouter<{
12698
13097
  };
12699
13098
  stage: "primary" | "second-factor";
12700
13099
  bundleUrl: string;
13100
+ app?: {
13101
+ kind: "native";
13102
+ } | {
13103
+ kind: "browser";
13104
+ startPath: string;
13105
+ } | null | undefined;
12701
13106
  } | {
12702
13107
  kind: "passkey";
12703
13108
  id: string;
@@ -12705,6 +13110,12 @@ export type AppRouter = TrpcCoreRouter<{
12705
13110
  stage: "primary" | "second-factor";
12706
13111
  rpId: string;
12707
13112
  origin: string | null;
13113
+ app?: {
13114
+ kind: "native";
13115
+ } | {
13116
+ kind: "browser";
13117
+ startPath: string;
13118
+ } | null | undefined;
12708
13119
  } | {
12709
13120
  kind: "device-certificate";
12710
13121
  id: "device-certificate";
@@ -12718,6 +13129,12 @@ export type AppRouter = TrpcCoreRouter<{
12718
13129
  signature: "ecdsa-p256-sha256";
12719
13130
  messageVersion: "camstack-device-cert-v1";
12720
13131
  clients: ("web" | "native")[];
13132
+ app: {
13133
+ kind: "native";
13134
+ } | {
13135
+ kind: "browser";
13136
+ startPath: string;
13137
+ } | null;
12721
13138
  })[];
12722
13139
  meta: object;
12723
13140
  }>;
@@ -12819,7 +13236,7 @@ export type AppRouter = TrpcCoreRouter<{
12819
13236
  input: {
12820
13237
  code: string;
12821
13238
  publicKeySpki: string;
12822
- platform: "android" | "ios" | "other" | "web";
13239
+ platform: "other" | "android" | "ios" | "web";
12823
13240
  deviceName?: string | undefined;
12824
13241
  };
12825
13242
  output: {
@@ -12932,7 +13349,7 @@ export type AppRouter = TrpcCoreRouter<{
12932
13349
  userId: string;
12933
13350
  username: string | null;
12934
13351
  deviceName: string;
12935
- platform: "android" | "ios" | "other" | "web";
13352
+ platform: "other" | "android" | "ios" | "web";
12936
13353
  enrolledVia: "self" | "qr";
12937
13354
  fingerprint: string;
12938
13355
  issuedAt: number;
@@ -12982,7 +13399,7 @@ export type AppRouter = TrpcCoreRouter<{
12982
13399
  proof: string;
12983
13400
  publicKeySpki: string;
12984
13401
  deviceName: string;
12985
- platform: "android" | "ios" | "other" | "web";
13402
+ platform: "other" | "android" | "ios" | "web";
12986
13403
  };
12987
13404
  output: {
12988
13405
  credentialId: string;
@@ -6,7 +6,7 @@
6
6
  * scope+access check inside `protectedProcedure` (see
7
7
  * `server/backend/src/api/trpc/trpc.middleware.ts`).
8
8
  *
9
- * Coverage: 1331 method paths across 173 capabilities.
9
+ * Coverage: 1332 method paths across 173 capabilities.
10
10
  */
11
11
  import type { CapabilityMethodAccess } from '../capabilities/capability-definition.js';
12
12
  export interface MethodAccessRecord {
package/dist/index.d.ts CHANGED
@@ -151,6 +151,7 @@ export * from './types/pipeline-step.js';
151
151
  export * from './types/tracked.js';
152
152
  export { type BearerPayloadShape, type BearerPrincipal, classifyBearerPrincipal, methodAccessForHttpMethod, type PrincipalAddonReachInput, type PrincipalAddonReachVerdict, principalMayReachAddon, scopesAllowAddon, scopesAllowDeviceCap, } from './auth/principal-scope.js';
153
153
  export { APP_AUTH_CALLBACK_MAX_LENGTH, APP_AUTH_CALLBACK_URLS, canonicalizeAppCallback, hasUrlScheme, parseAppAuthCallback, } from './auth/app-callback.js';
154
+ export { APP_FLOW_DEFAULT_REDIRECT, APP_FLOW_REFUSAL_MESSAGES, APP_FLOW_STATE_PREFIX, type AppFlowParse, type AppFlowPurpose, AppFlowPurposeSchema, type AppFlowRefusal, type AppFlowRequest, type AppLoginPath, AppLoginPathSchema, appFlowLocation, parseAppFlowRequest, } from './auth/app-flow.js';
154
155
  export { SSO_STATE_COOKIE, SSO_STATE_COOKIE_MAX_AGE_SEC } from './auth/sso-state.js';
155
156
  export { buildDeviceEnrollmentLink, buildDeviceSignatureMessage, type CompleteEnrollmentInput, CompleteEnrollmentInputSchema, type CompleteEnrollmentOutput, CompleteEnrollmentOutputSchema, DEVICE_CERT_RENEW_WINDOW_DAYS, DEVICE_CERT_SIGNATURE, DEVICE_CERT_VALIDITY_DAYS, DEVICE_ENROLLMENT_TTL_MS, DEVICE_NONCE_TTL_MS, DEVICE_SAN_CREDENTIAL_PREFIX, DEVICE_SAN_USER_PREFIX, DEVICE_SIGNATURE_MESSAGE_VERSION, type DeviceCertificateLoginMethod, DeviceCertificateLoginMethodSchema, type DeviceChallenge, DeviceChallengeSchema, type DeviceCredential, DeviceCredentialSchema, type DeviceCredentialStatus, DeviceCredentialStatusSchema, type DevicePlatform, DevicePlatformSchema, type DeviceProofInput, DeviceProofInputSchema, type CompleteEnrollmentResult, CompleteEnrollmentResultSchema, DEFINITIVE_DEVICE_REFUSALS, DEVICE_DEFINITIVE_REFUSALS_BEFORE_DELETE, DEVICE_REFRESH_REFUSAL_PREFIX, deviceRefusalFromMessage, type DeviceChallengeResult, DeviceChallengeResultSchema, DeviceEnrollProofSchema, type DeviceRefusal, type DeviceRefusalReason, DeviceRefusalReasonSchema, DeviceRefusalSchema, type DeviceRevoker, type EnrollSelfInput, EnrollSelfInputSchema, formatDeviceRevoker, isDefinitiveDeviceRefusal, type RenewDeviceCertificateResult, RenewDeviceCertificateResultSchema, type RevokeOwnDeviceCertificateResult, RevokeOwnDeviceCertificateResultSchema, type DeviceSignaturePurpose, DeviceSignaturePurposeSchema, type RenewDeviceCertificateOutput, RenewDeviceCertificateOutputSchema, type StartEnrollmentOutput, StartEnrollmentOutputSchema, parseDeviceEnrollmentLink, } from './auth/device-certificate.js';
156
157
  export { advertisedHubOrigins, claimedRequestOrigins, normalizeOrigin, pickRequestOrigin, type RequestHeaders, requestMountPrefix, } from './auth/request-origin.js';