@cleocode/contracts 2026.9.19 → 2026.9.21

package/dist/cloud/api.d.ts

@@ -0,0 +1,607 @@
+import { z } from 'zod';
+/**
+ * Wire contract for the Cleo Nexus API (v1).
+ *
+ * Privacy rule: the server never receives plaintext content (ADR-093). Everything below is
+ * routing or integrity metadata. Content travels only as ciphertext (`Base64`) or as blobs
+ * addressed by the sha256 of their ciphertext.
+ */
+export declare const API_VERSION: "v1";
+/**
+ * The highest key version any schema accepts. Key versions go up by one per rotation, so this is far above
+ * any real account, and it keeps an absurd value (2^53 - 1, say) out of client state.
+ */
+export declare const MAX_KEY_VERSION = 1000000;
+/** A master key or project key version: a positive integer, at most MAX_KEY_VERSION. */
+export declare const KeyVersion: z.ZodNumber;
+/** Largest inline segment. Larger segments go to R2 as a blob and are referenced by sha256. */
+export declare const MAX_INLINE_SEGMENT_BYTES = 1048576;
+export declare const MAX_PULL_LIMIT = 500;
+export declare const Platform: z.ZodEnum<{
+    linux: "linux";
+    darwin: "darwin";
+    win32: "win32";
+    other: "other";
+}>;
+export declare const RegisterDeviceRequest: z.ZodObject<{
+    deviceId: z.ZodString;
+    name: z.ZodString;
+    platform: z.ZodEnum<{
+        linux: "linux";
+        darwin: "darwin";
+        win32: "win32";
+        other: "other";
+    }>;
+    encryptionPublicKey: z.ZodString;
+    signingPublicKey: z.ZodString;
+    cliVersion: z.ZodString;
+}, z.core.$strip>;
+export type RegisterDeviceRequest = z.infer<typeof RegisterDeviceRequest>;
+export declare const Device: z.ZodObject<{
+    deviceId: z.ZodString;
+    name: z.ZodString;
+    platform: z.ZodEnum<{
+        linux: "linux";
+        darwin: "darwin";
+        win32: "win32";
+        other: "other";
+    }>;
+    encryptionPublicKey: z.ZodString;
+    signingPublicKey: z.ZodString;
+    cliVersion: z.ZodString;
+    createdAt: z.ZodISODateTime;
+    lastSeenAt: z.ZodNullable<z.ZodISODateTime>;
+    revokedAt: z.ZodNullable<z.ZodISODateTime>;
+    certificate: z.ZodNullable<z.ZodString>;
+    certificateKeyVersion: z.ZodNullable<z.ZodNumber>;
+}, z.core.$strip>;
+export type Device = z.infer<typeof Device>;
+export declare const ListDevicesResult: z.ZodObject<{
+    devices: z.ZodArray<z.ZodObject<{
+        deviceId: z.ZodString;
+        name: z.ZodString;
+        platform: z.ZodEnum<{
+            linux: "linux";
+            darwin: "darwin";
+            win32: "win32";
+            other: "other";
+        }>;
+        encryptionPublicKey: z.ZodString;
+        signingPublicKey: z.ZodString;
+        cliVersion: z.ZodString;
+        createdAt: z.ZodISODateTime;
+        lastSeenAt: z.ZodNullable<z.ZodISODateTime>;
+        revokedAt: z.ZodNullable<z.ZodISODateTime>;
+        certificate: z.ZodNullable<z.ZodString>;
+        certificateKeyVersion: z.ZodNullable<z.ZodNumber>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type ListDevicesResult = z.infer<typeof ListDevicesResult>;
+export declare const RegisterProjectRequest: z.ZodObject<{
+    projectId: z.ZodString;
+    label: z.ZodOptional<z.ZodString>;
+    encryptedName: z.ZodOptional<z.ZodString>;
+    remoteUrl: z.ZodOptional<z.ZodString>;
+    organizationId: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type RegisterProjectRequest = z.infer<typeof RegisterProjectRequest>;
+export declare const Project: z.ZodObject<{
+    projectId: z.ZodString;
+    label: z.ZodNullable<z.ZodString>;
+    encryptedName: z.ZodNullable<z.ZodString>;
+    remoteUrl: z.ZodNullable<z.ZodString>;
+    organizationId: z.ZodString;
+    createdByUserId: z.ZodNullable<z.ZodString>;
+    createdAt: z.ZodISODateTime;
+}, z.core.$strip>;
+export type Project = z.infer<typeof Project>;
+export declare const RegisterProjectResult: z.ZodObject<{
+    project: z.ZodObject<{
+        projectId: z.ZodString;
+        label: z.ZodNullable<z.ZodString>;
+        encryptedName: z.ZodNullable<z.ZodString>;
+        remoteUrl: z.ZodNullable<z.ZodString>;
+        organizationId: z.ZodString;
+        createdByUserId: z.ZodNullable<z.ZodString>;
+        createdAt: z.ZodISODateTime;
+    }, z.core.$strip>;
+    streamId: z.ZodString;
+}, z.core.$strip>;
+export type RegisterProjectResult = z.infer<typeof RegisterProjectResult>;
+/**
+ * Which devices hold a project. The server stores NO filesystem path, not even as a hint.
+ * Paths are per-device local state (cleo-dev review, 2026-09-27).
+ */
+export declare const AttachProjectDeviceRequest: z.ZodObject<{
+    deviceId: z.ZodString;
+    replicaId: z.ZodString;
+}, z.core.$strip>;
+/**
+ * Path-free presence of one replica, for fleet status (cleo-dev SG-AGENTIC-CORE, T12479).
+ * The device keeps the full record, including paths. The cloud mirrors only this.
+ */
+export declare const ReplicaPresence: z.ZodObject<{
+    git: z.ZodOptional<z.ZodObject<{
+        branch: z.ZodOptional<z.ZodString>;
+        dirty: z.ZodBoolean;
+        ahead: z.ZodNumber;
+        behind: z.ZodNumber;
+        remote: z.ZodEnum<{
+            unknown: "unknown";
+            ahead: "ahead";
+            behind: "behind";
+            "in-sync": "in-sync";
+            diverged: "diverged";
+            "no-upstream": "no-upstream";
+        }>;
+        lastCommitAt: z.ZodOptional<z.ZodISODateTime>;
+    }, z.core.$strip>>;
+    cliVersion: z.ZodString;
+    schemaVersion: z.ZodNumber;
+    observedAt: z.ZodISODateTime;
+}, z.core.$strip>;
+export type ReplicaPresence = z.infer<typeof ReplicaPresence>;
+/**
+ * Per-table row deltas in a segment: plaintext counts, no content. They let the server check a
+ * checkpoint manifest for regressions without reading any row (E_REGRESSION).
+ */
+export declare const TableDeltas: z.ZodRecord<z.ZodString, z.ZodObject<{
+    created: z.ZodNumber;
+    deleted: z.ZodNumber;
+}, z.core.$strip>>;
+export type TableDeltas = z.infer<typeof TableDeltas>;
+export declare const AppendSegmentRequest: z.ZodObject<{
+    replicaId: z.ZodString;
+    deviceId: z.ZodString;
+    segmentHash: z.ZodString;
+    replicaSeq: z.ZodNumber;
+    schemaVersion: z.ZodNumber;
+    opCount: z.ZodNumber;
+    hlcMin: z.ZodString;
+    hlcMax: z.ZodString;
+    deltas: z.ZodRecord<z.ZodString, z.ZodObject<{
+        created: z.ZodNumber;
+        deleted: z.ZodNumber;
+    }, z.core.$strip>>;
+    signature: z.ZodString;
+    ciphertext: z.ZodOptional<z.ZodString>;
+    blobSha256: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type AppendSegmentRequest = z.infer<typeof AppendSegmentRequest>;
+export declare const AppendSegmentResult: z.ZodObject<{
+    streamId: z.ZodString;
+    seq: z.ZodNumber;
+    duplicate: z.ZodBoolean;
+}, z.core.$strip>;
+export type AppendSegmentResult = z.infer<typeof AppendSegmentResult>;
+export declare const Segment: z.ZodObject<{
+    seq: z.ZodNumber;
+    replicaId: z.ZodString;
+    deviceId: z.ZodString;
+    replicaSeq: z.ZodNumber;
+    segmentHash: z.ZodString;
+    schemaVersion: z.ZodNumber;
+    opCount: z.ZodNumber;
+    hlcMin: z.ZodString;
+    hlcMax: z.ZodString;
+    deltas: z.ZodRecord<z.ZodString, z.ZodObject<{
+        created: z.ZodNumber;
+        deleted: z.ZodNumber;
+    }, z.core.$strip>>;
+    signature: z.ZodString;
+    ciphertext: z.ZodNullable<z.ZodString>;
+    blobSha256: z.ZodNullable<z.ZodString>;
+    receivedAt: z.ZodISODateTime;
+}, z.core.$strip>;
+export type Segment = z.infer<typeof Segment>;
+export declare const PullSegmentsQuery: z.ZodObject<{
+    after: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
+    limit: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
+}, z.core.$strip>;
+export declare const PullSegmentsResult: z.ZodObject<{
+    streamId: z.ZodString;
+    segments: z.ZodArray<z.ZodObject<{
+        seq: z.ZodNumber;
+        replicaId: z.ZodString;
+        deviceId: z.ZodString;
+        replicaSeq: z.ZodNumber;
+        segmentHash: z.ZodString;
+        schemaVersion: z.ZodNumber;
+        opCount: z.ZodNumber;
+        hlcMin: z.ZodString;
+        hlcMax: z.ZodString;
+        deltas: z.ZodRecord<z.ZodString, z.ZodObject<{
+            created: z.ZodNumber;
+            deleted: z.ZodNumber;
+        }, z.core.$strip>>;
+        signature: z.ZodString;
+        ciphertext: z.ZodNullable<z.ZodString>;
+        blobSha256: z.ZodNullable<z.ZodString>;
+        receivedAt: z.ZodISODateTime;
+    }, z.core.$strip>>;
+    head: z.ZodNumber;
+    nextAfter: z.ZodNumber;
+}, z.core.$strip>;
+export type PullSegmentsResult = z.infer<typeof PullSegmentsResult>;
+/**
+ * A checkpoint id (UUIDv7). The authoring client mints it, because its signature and the bundle's AAD
+ * both cover it, so the id must exist before the bundle is encrypted.
+ */
+export declare const CheckpointId: z.ZodString;
+export type CheckpointId = z.infer<typeof CheckpointId>;
+export declare const TableManifestEntry: z.ZodObject<{
+    rows: z.ZodNumber;
+    hash: z.ZodString;
+}, z.core.$strip>;
+/** Plaintext manifest: per-table counts and uid-keyed hashes. No content (ADR-093 §3). */
+export declare const Manifest: z.ZodObject<{
+    schemaVersion: z.ZodNumber;
+    tables: z.ZodRecord<z.ZodString, z.ZodObject<{
+        rows: z.ZodNumber;
+        hash: z.ZodString;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type Manifest = z.infer<typeof Manifest>;
+/**
+ * Where one replica stood at a checkpoint: the device that signs its segments and the last replicaSeq
+ * folded in. A checkpoint lists every replica with a segment at or below its coversSeq, so a client that
+ * restores it can check every later segment for gaps and re-attribution (PullCursor).
+ */
+export declare const ReplicaHead: z.ZodObject<{
+    deviceId: z.ZodString;
+    lastReplicaSeq: z.ZodNumber;
+}, z.core.$strip>;
+export type ReplicaHead = z.infer<typeof ReplicaHead>;
+/** Per replica id, keys are replica ids. Covered by the checkpoint signature (replicasCanonical). */
+export declare const ReplicaHeads: z.ZodRecord<z.ZodString, z.ZodObject<{
+    deviceId: z.ZodString;
+    lastReplicaSeq: z.ZodNumber;
+}, z.core.$strip>>;
+export type ReplicaHeads = z.infer<typeof ReplicaHeads>;
+export declare const CreateCheckpointRequest: z.ZodObject<{
+    checkpointId: z.ZodString;
+    replicaId: z.ZodString;
+    deviceId: z.ZodString;
+    parentCheckpointId: z.ZodNullable<z.ZodString>;
+    coversSeq: z.ZodNumber;
+    manifest: z.ZodObject<{
+        schemaVersion: z.ZodNumber;
+        tables: z.ZodRecord<z.ZodString, z.ZodObject<{
+            rows: z.ZodNumber;
+            hash: z.ZodString;
+        }, z.core.$strip>>;
+    }, z.core.$strip>;
+    replicas: z.ZodRecord<z.ZodString, z.ZodObject<{
+        deviceId: z.ZodString;
+        lastReplicaSeq: z.ZodNumber;
+    }, z.core.$strip>>;
+    blobSha256: z.ZodString;
+    sizeBytes: z.ZodNumber;
+    signature: z.ZodString;
+}, z.core.$strip>;
+export type CreateCheckpointRequest = z.infer<typeof CreateCheckpointRequest>;
+export declare const Checkpoint: z.ZodObject<{
+    checkpointId: z.ZodString;
+    streamId: z.ZodString;
+    parentCheckpointId: z.ZodNullable<z.ZodString>;
+    replicaId: z.ZodString;
+    deviceId: z.ZodString;
+    coversSeq: z.ZodNumber;
+    manifest: z.ZodObject<{
+        schemaVersion: z.ZodNumber;
+        tables: z.ZodRecord<z.ZodString, z.ZodObject<{
+            rows: z.ZodNumber;
+            hash: z.ZodString;
+        }, z.core.$strip>>;
+    }, z.core.$strip>;
+    replicas: z.ZodRecord<z.ZodString, z.ZodObject<{
+        deviceId: z.ZodString;
+        lastReplicaSeq: z.ZodNumber;
+    }, z.core.$strip>>;
+    blobSha256: z.ZodString;
+    sizeBytes: z.ZodNumber;
+    signature: z.ZodString;
+    endorsements: z.ZodArray<z.ZodObject<{
+        deviceId: z.ZodString;
+        signature: z.ZodString;
+    }, z.core.$strip>>;
+    createdAt: z.ZodISODateTime;
+}, z.core.$strip>;
+export type Checkpoint = z.infer<typeof Checkpoint>;
+/** A live device re-signs a checkpoint. The device must be the calling device. */
+export declare const EndorseCheckpointRequest: z.ZodObject<{
+    deviceId: z.ZodString;
+    signature: z.ZodString;
+}, z.core.$strip>;
+export type EndorseCheckpointRequest = z.infer<typeof EndorseCheckpointRequest>;
+export declare const CreateCheckpointResult: z.ZodObject<{
+    checkpoint: z.ZodObject<{
+        checkpointId: z.ZodString;
+        streamId: z.ZodString;
+        parentCheckpointId: z.ZodNullable<z.ZodString>;
+        replicaId: z.ZodString;
+        deviceId: z.ZodString;
+        coversSeq: z.ZodNumber;
+        manifest: z.ZodObject<{
+            schemaVersion: z.ZodNumber;
+            tables: z.ZodRecord<z.ZodString, z.ZodObject<{
+                rows: z.ZodNumber;
+                hash: z.ZodString;
+            }, z.core.$strip>>;
+        }, z.core.$strip>;
+        replicas: z.ZodRecord<z.ZodString, z.ZodObject<{
+            deviceId: z.ZodString;
+            lastReplicaSeq: z.ZodNumber;
+        }, z.core.$strip>>;
+        blobSha256: z.ZodString;
+        sizeBytes: z.ZodNumber;
+        signature: z.ZodString;
+        endorsements: z.ZodArray<z.ZodObject<{
+            deviceId: z.ZodString;
+            signature: z.ZodString;
+        }, z.core.$strip>>;
+        createdAt: z.ZodISODateTime;
+    }, z.core.$strip>;
+}, z.core.$strip>;
+export type CreateCheckpointResult = z.infer<typeof CreateCheckpointResult>;
+/** Newest first, at most 100. */
+export declare const ListCheckpointsResult: z.ZodObject<{
+    checkpoints: z.ZodArray<z.ZodObject<{
+        checkpointId: z.ZodString;
+        streamId: z.ZodString;
+        parentCheckpointId: z.ZodNullable<z.ZodString>;
+        replicaId: z.ZodString;
+        deviceId: z.ZodString;
+        coversSeq: z.ZodNumber;
+        manifest: z.ZodObject<{
+            schemaVersion: z.ZodNumber;
+            tables: z.ZodRecord<z.ZodString, z.ZodObject<{
+                rows: z.ZodNumber;
+                hash: z.ZodString;
+            }, z.core.$strip>>;
+        }, z.core.$strip>;
+        replicas: z.ZodRecord<z.ZodString, z.ZodObject<{
+            deviceId: z.ZodString;
+            lastReplicaSeq: z.ZodNumber;
+        }, z.core.$strip>>;
+        blobSha256: z.ZodString;
+        sizeBytes: z.ZodNumber;
+        signature: z.ZodString;
+        endorsements: z.ZodArray<z.ZodObject<{
+            deviceId: z.ZodString;
+            signature: z.ZodString;
+        }, z.core.$strip>>;
+        createdAt: z.ZodISODateTime;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type ListCheckpointsResult = z.infer<typeof ListCheckpointsResult>;
+export declare const PresignUploadRequest: z.ZodObject<{
+    sha256: z.ZodString;
+    sizeBytes: z.ZodNumber;
+    purpose: z.ZodEnum<{
+        attachment: "attachment";
+        checkpoint: "checkpoint";
+        segment: "segment";
+    }>;
+}, z.core.$strip>;
+export declare const PresignUploadResult: z.ZodObject<{
+    alreadyPresent: z.ZodBoolean;
+    uploadUrl: z.ZodNullable<z.ZodString>;
+    uploadHeaders: z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodString>>;
+    expiresAt: z.ZodNullable<z.ZodISODateTime>;
+}, z.core.$strip>;
+export type PresignUploadResult = z.infer<typeof PresignUploadResult>;
+export declare const CompleteUploadResult: z.ZodObject<{
+    sha256: z.ZodString;
+    verified: z.ZodLiteral<true>;
+}, z.core.$strip>;
+export type CompleteUploadResult = z.infer<typeof CompleteUploadResult>;
+/**
+ * A short-lived presigned download URL. The response of `GET /v1/streams/:streamId/segments/:seq/blob`
+ * and of `GET /v1/streams/:streamId/checkpoints/:checkpointId/download`. The client downloads at most
+ * `sizeBytes` and checks the bytes against the sha256 it already trusts, never against this one alone.
+ */
+export declare const BlobDownload: z.ZodObject<{
+    url: z.ZodString;
+    sha256: z.ZodString;
+    sizeBytes: z.ZodNumber;
+    expiresInSeconds: z.ZodNumber;
+}, z.core.$strip>;
+export type BlobDownload = z.infer<typeof BlobDownload>;
+/**
+ * Roles that must run on exactly one replica per stream (cleo-dev review R4). Consolidation
+ * writes (invalid_at, citation_count), sentient proposals and checkpoint authoring would otherwise
+ * produce op storms or duplicates. Ordinary journal appends are not leased, because merge handles concurrency.
+ */
+export declare const LeaseRole: z.ZodEnum<{
+    sentient: "sentient";
+    consolidator: "consolidator";
+    checkpointer: "checkpointer";
+}>;
+export type LeaseRole = z.infer<typeof LeaseRole>;
+export declare const AcquireLeaseRequest: z.ZodObject<{
+    role: z.ZodEnum<{
+        sentient: "sentient";
+        consolidator: "consolidator";
+        checkpointer: "checkpointer";
+    }>;
+    replicaId: z.ZodString;
+    ttlSeconds: z.ZodDefault<z.ZodNumber>;
+    force: z.ZodDefault<z.ZodBoolean>;
+    reason: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export declare const Lease: z.ZodObject<{
+    streamId: z.ZodString;
+    role: z.ZodEnum<{
+        sentient: "sentient";
+        consolidator: "consolidator";
+        checkpointer: "checkpointer";
+    }>;
+    leaseId: z.ZodString;
+    replicaId: z.ZodString;
+    expiresAt: z.ZodISODateTime;
+    forkedFromReplicaId: z.ZodNullable<z.ZodString>;
+}, z.core.$strip>;
+export type Lease = z.infer<typeof Lease>;
+/**
+ * Bounds on Argon2id parameters. The server stores the parameters, so a client must not trust them: too
+ * low weakens the passphrase, too high is a denial of service (a 64 GiB allocation). Both sides enforce these.
+ */
+export declare const KDF_LIMITS: {
+    readonly memoryKiB: {
+        readonly min: 65536;
+        readonly max: 1048576;
+    };
+    readonly iterations: {
+        readonly min: 2;
+        readonly max: 10;
+    };
+    readonly parallelism: {
+        readonly min: 1;
+        readonly max: 16;
+    };
+};
+export declare const KdfParams: z.ZodObject<{
+    algorithm: z.ZodLiteral<"argon2id">;
+    memoryKiB: z.ZodNumber;
+    iterations: z.ZodNumber;
+    parallelism: z.ZodNumber;
+    salt: z.ZodString;
+}, z.core.$strip>;
+export declare const PutUserKeysRequest: z.ZodObject<{
+    passphraseWrappedMasterKey: z.ZodString;
+    kdf: z.ZodObject<{
+        algorithm: z.ZodLiteral<"argon2id">;
+        memoryKiB: z.ZodNumber;
+        iterations: z.ZodNumber;
+        parallelism: z.ZodNumber;
+        salt: z.ZodString;
+    }, z.core.$strip>;
+    recoveryWrappedMasterKey: z.ZodString;
+    masterKeyVerifier: z.ZodString;
+    keyVersion: z.ZodNumber;
+}, z.core.$strip>;
+/** What the server returns for `GET /v1/account/keys`. */
+export declare const UserKeys: z.ZodObject<{
+    passphraseWrappedMasterKey: z.ZodString;
+    kdf: z.ZodObject<{
+        algorithm: z.ZodLiteral<"argon2id">;
+        memoryKiB: z.ZodNumber;
+        iterations: z.ZodNumber;
+        parallelism: z.ZodNumber;
+        salt: z.ZodString;
+    }, z.core.$strip>;
+    recoveryWrappedMasterKey: z.ZodString;
+    masterKeyVerifier: z.ZodString;
+    keyVersion: z.ZodNumber;
+    userId: z.ZodString;
+    updatedAt: z.ZodISODateTime;
+}, z.core.$strip>;
+export type UserKeys = z.infer<typeof UserKeys>;
+/**
+ * A device key grant: the master key sealed to the recipient device, signed by a device that holds the
+ * master key (docs/security/e2e-keys.md, "Device trust"). The sealed box alone is anonymous, so anyone,
+ * the server included, could seal a key of their choosing to a device. The signature is what the
+ * recipient checks, against a signer it already trusts, before it accepts the key.
+ */
+export declare const PutDeviceWrappedKeyRequest: z.ZodObject<{
+    sealedMasterKey: z.ZodString;
+    keyVersion: z.ZodNumber;
+    certificate: z.ZodString;
+    signerDeviceId: z.ZodString;
+    grantSignature: z.ZodString;
+}, z.core.$strip>;
+export type PutDeviceWrappedKeyRequest = z.infer<typeof PutDeviceWrappedKeyRequest>;
+/** What the server returns for `GET /v1/devices/:deviceId/key`. */
+export declare const DeviceKeyGrant: z.ZodObject<{
+    sealedMasterKey: z.ZodString;
+    keyVersion: z.ZodNumber;
+    certificate: z.ZodString;
+    signerDeviceId: z.ZodString;
+    grantSignature: z.ZodString;
+    deviceId: z.ZodString;
+}, z.core.$strip>;
+export type DeviceKeyGrant = z.infer<typeof DeviceKeyGrant>;
+/**
+ * Where a revoked signing key stops being trusted: per replica, the last replicaSeq it may have signed,
+ * and per stream, the highest coversSeq of a checkpoint it may have signed. Keys are replica ids and
+ * stream ids. Covered by the revocation signature (revocationPinsCanonical).
+ */
+export declare const RevocationPins: z.ZodObject<{
+    replicas: z.ZodRecord<z.ZodString, z.ZodNumber>;
+    checkpoints: z.ZodRecord<z.ZodString, z.ZodNumber>;
+}, z.core.$strip>;
+export type RevocationPins = z.infer<typeof RevocationPins>;
+/**
+ * A revocation record (docs/security/e2e-keys.md, "Revocation"): a certified device signs that one
+ * signing key of a device is revoked, and pins what it signed before. History up to the pins stays
+ * verifiable; anything past them is refused. The signer must be the calling device.
+ */
+export declare const CreateDeviceRevocationRequest: z.ZodObject<{
+    signingPublicKey: z.ZodString;
+    pins: z.ZodObject<{
+        replicas: z.ZodRecord<z.ZodString, z.ZodNumber>;
+        checkpoints: z.ZodRecord<z.ZodString, z.ZodNumber>;
+    }, z.core.$strip>;
+    signerDeviceId: z.ZodString;
+    signature: z.ZodString;
+}, z.core.$strip>;
+export type CreateDeviceRevocationRequest = z.infer<typeof CreateDeviceRevocationRequest>;
+export declare const DeviceRevocation: z.ZodObject<{
+    signingPublicKey: z.ZodString;
+    pins: z.ZodObject<{
+        replicas: z.ZodRecord<z.ZodString, z.ZodNumber>;
+        checkpoints: z.ZodRecord<z.ZodString, z.ZodNumber>;
+    }, z.core.$strip>;
+    signerDeviceId: z.ZodString;
+    signature: z.ZodString;
+    deviceId: z.ZodString;
+}, z.core.$strip>;
+export type DeviceRevocation = z.infer<typeof DeviceRevocation>;
+/**
+ * One device certificate ever issued, kept for as long as the device's history exists. A revoke or a
+ * re-registration with new keys never deletes one. `live` is the server's claim that the key is the
+ * device's current key and the device is not revoked; clients trust it only in the safe direction.
+ */
+export declare const DeviceCertificateRecord: z.ZodObject<{
+    deviceId: z.ZodString;
+    encryptionPublicKey: z.ZodString;
+    signingPublicKey: z.ZodString;
+    keyVersion: z.ZodNumber;
+    certificate: z.ZodString;
+    live: z.ZodBoolean;
+}, z.core.$strip>;
+export type DeviceCertificateRecord = z.infer<typeof DeviceCertificateRecord>;
+/** `GET /v1/devices/trust`: everything a client needs to build its trusted signer set (certifiedSigners). */
+export declare const DeviceTrust: z.ZodObject<{
+    certificates: z.ZodArray<z.ZodObject<{
+        deviceId: z.ZodString;
+        encryptionPublicKey: z.ZodString;
+        signingPublicKey: z.ZodString;
+        keyVersion: z.ZodNumber;
+        certificate: z.ZodString;
+        live: z.ZodBoolean;
+    }, z.core.$strip>>;
+    revocations: z.ZodArray<z.ZodObject<{
+        signingPublicKey: z.ZodString;
+        pins: z.ZodObject<{
+            replicas: z.ZodRecord<z.ZodString, z.ZodNumber>;
+            checkpoints: z.ZodRecord<z.ZodString, z.ZodNumber>;
+        }, z.core.$strip>;
+        signerDeviceId: z.ZodString;
+        signature: z.ZodString;
+        deviceId: z.ZodString;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type DeviceTrust = z.infer<typeof DeviceTrust>;
+export declare const PutProjectKeyRequest: z.ZodObject<{
+    wrappedProjectKey: z.ZodString;
+    keyVersion: z.ZodNumber;
+}, z.core.$strip>;
+export declare const ConflictSummary: z.ZodObject<{
+    replicaId: z.ZodString;
+    open: z.ZodNumber;
+    byKind: z.ZodRecord<z.ZodString, z.ZodNumber>;
+    reportedAt: z.ZodISODateTime;
+}, z.core.$strip>;
+//# sourceMappingURL=api.d.ts.map

package/dist/cloud/api.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"api.d.ts","sourceRoot":"","sources":["../../src/cloud/api.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB;;;;;;GAMG;AAEH,eAAO,MAAM,WAAW,EAAG,IAAa,CAAC;AAEzC;;;GAGG;AACH,eAAO,MAAM,eAAe,UAAY,CAAC;AAEzC,wFAAwF;AACxF,eAAO,MAAM,UAAU,aAAmD,CAAC;AAE3E,+FAA+F;AAC/F,eAAO,MAAM,wBAAwB,UAAY,CAAC;AAClD,eAAO,MAAM,cAAc,MAAM,CAAC;AAIlC,eAAO,MAAM,QAAQ;;;;;EAAgD,CAAC;AAEtE,eAAO,MAAM,qBAAqB;;;;;;;;;;;;iBAShC,CAAC;AACH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAE1E,eAAO,MAAM,MAAM;;;;;;;;;;;;;;;;;iBAmBjB,CAAC;AACH,MAAM,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,MAAM,CAAC,CAAC;AAE5C,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;iBAAyC,CAAC;AACxE,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAIlE,eAAO,MAAM,sBAAsB;;;;;;iBAgBjC,CAAC;AACH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAE5E,eAAO,MAAM,OAAO;;;;;;;;iBAUlB,CAAC;AACH,MAAM,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,OAAO,CAAC,CAAC;AAE9C,eAAO,MAAM,qBAAqB;;;;;;;;;;;iBAAqD,CAAC;AACxF,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAE1E;;;GAGG;AACH,eAAO,MAAM,0BAA0B;;;iBAGrC,CAAC;AAEH;;;GAGG;AACH,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;iBAiB1B,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAI9D;;;GAGG;AACH,eAAO,MAAM,WAAW;;;kBAGvB,CAAC;AACF,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAAC;AAEtD,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;iBA0BmD,CAAC;AACrF,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAExE,eAAO,MAAM,mBAAmB;;;;iBAM9B,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEtE,eAAO,MAAM,OAAO;;;;;;;;;;;;;;;;;;iBAelB,CAAC;AACH,MAAM,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,OAAO,CAAC,CAAC;AAE9C,eAAO,MAAM,iBAAiB;;;iBAG5B,CAAC;AAEH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;iBAM7B,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAIpE;;;GAGG;AACH,eAAO,MAAM,YAAY,aAKtB,CAAC;AACJ,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAExD,eAAO,MAAM,kBAAkB;;;iBAI7B,CAAC;AAEH,0FAA0F;AAC1F,eAAO,MAAM,QAAQ;;;;;;iBAGnB,CAAC;AACH,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,QAAQ,CAAC,CAAC;AAEhD;;;;GAIG;AACH,eAAO,MAAM,WAAW;;;iBAGtB,CAAC;AACH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAAC;AAEtD,qGAAqG;AACrG,eAAO,MAAM,YAAY;;;kBAAmC,CAAC;AAC7D,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAExD,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;iBAuBlC,CAAC;AACH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAE9E,eAAO,MAAM,UAAU;;;;;;;;;;;;;;;;;;;;;;;;;;iBAkBrB,CAAC;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,UAAU,CAAC,CAAC;AAEpD,kFAAkF;AAClF,eAAO,MAAM,wBAAwB;;;iBAAsD,CAAC;AAC5F,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAEhF,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAAuC,CAAC;AAC3E,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAE5E,iCAAiC;AACjC,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAAiD,CAAC;AACpF,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAI1E,eAAO,MAAM,oBAAoB;;;;;;;;iBAQ/B,CAAC;AACH,eAAO,MAAM,mBAAmB;;;;;iBAO9B,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEtE,eAAO,MAAM,oBAAoB;;;iBAA6D,CAAC;AAC/F,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAExE;;;;GAIG;AACH,eAAO,MAAM,YAAY;;;;;iBAKvB,CAAC;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAIxD;;;;GAIG;AACH,eAAO,MAAM,SAAS;;;;EAAuD,CAAC;AAC9E,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,SAAS,CAAC,CAAC;AAElD,eAAO,MAAM,mBAAmB;;;;;;;;;;iBAO9B,CAAC;AACH,eAAO,MAAM,KAAK;;;;;;;;;;;iBAQhB,CAAC;AACH,MAAM,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,KAAK,CAAC,CAAC;AAI1C;;;GAGG;AACH,eAAO,MAAM,UAAU;;;;;;;;;;;;;CAIb,CAAC;AAEX,eAAO,MAAM,SAAS;;;;;;iBAMpB,CAAC;AAEH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;iBAS7B,CAAC;AAEH,0DAA0D;AAC1D,eAAO,MAAM,QAAQ;;;;;;;;;;;;;;iBAInB,CAAC;AACH,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,QAAQ,CAAC,CAAC;AAEhD;;;;;GAKG;AACH,eAAO,MAAM,0BAA0B;;;;;;iBAUrC,CAAC;AACH,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAEpF,mEAAmE;AACnE,eAAO,MAAM,cAAc;;;;;;;iBAA4D,CAAC;AACxF,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAE5D;;;;GAIG;AACH,eAAO,MAAM,cAAc;;;iBAGzB,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAE5D;;;;GAIG;AACH,eAAO,MAAM,6BAA6B;;;;;;;;iBAOxC,CAAC;AACH,MAAM,MAAM,6BAA6B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAE1F,eAAO,MAAM,gBAAgB;;;;;;;;;iBAA+D,CAAC;AAC7F,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAEhE;;;;GAIG;AACH,eAAO,MAAM,uBAAuB;;;;;;;iBAOlC,CAAC;AACH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAE9E,6GAA6G;AAC7G,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;iBAGtB,CAAC;AACH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAAC;AAEtD,eAAO,MAAM,oBAAoB;;;iBAI/B,CAAC;AAIH,eAAO,MAAM,eAAe;;;;;iBAK1B,CAAC"}