@infinitetoken/lumber-kit 0.5.1 → 0.6.0

package/README.md

@@ -50,7 +50,7 @@ import { LogLevel, LogRecord, LogEncrypted, LogPayload, LogsQuery } from '@infin
 | `PUSH_OFF` | constant | A push threshold one past Fatal (5): log pushes off |
 | `PushThreshold` | type | A `LogLevel` or `PUSH_OFF`, stored as a preference's `minimumLevel` |
 | `normalizePushThreshold` | function | A threshold from any stored or sent value: past Fatal is off, not a number is Warn |
-| `PushData` | type | The `data` each push type carries (`log`, `note`, `device_link`, `key_check`, `key_waiting`, `keys_shared`) |
+| `PushData` | type | The `data` each push type carries (`log`, `note`, `device_link`, `device_link_answered`, `key_check`, `key_waiting`, `keys_shared`) |
 | `parsePushData` | function | A push's data as `PushData`, or `null` for data no Lumber push sends |
 
 ### Socket events
@@ -100,6 +100,21 @@ import { LogLevel, LogRecord, LogEncrypted, LogPayload, LogsQuery } from '@infin
 | `AppKeyUpsertBody` | interface | Body of PUT /apps/:id/keys/:userId |
 | `KeyPin` | interface | An account key a user accepted for someone, with its MAC |
 | `HolderKeyCheck`, `ClaimantKeyCheck`, `KeyCheckResult` | interfaces | A key check as the holder and the person being confirmed read it |
+| `DeviceLinkCreateBody`, `DeviceLinkCreatedRecord` | interfaces | POST /device-links: a new device asking for the account key, and its answer |
+| `DeviceLinkRecord`, `DeviceLinkApproveBody` | interfaces | A link request as the new device polls it (the exchange's first message once a code is shown, then the account key and the tag proving a device that showed the code sent it), and the approval that carries them |
+| `PendingDeviceLink` | interface | A link request as a device holding the account key reads it, to show its code and finish it |
+| `DeviceLinkStatus`, `DeviceLinkPlatform` | types | `pending`, `approved`, `denied` or `failed` (a code that didn't match); what the request comes from |
+
+### Colors
+
+| Export | Kind | Purpose |
+|--------|------|---------|
+| `logLevelColors` | object | Each `LogLevel`'s color, as the apps and the CLI draw it |
+| `DEFAULT_ACCENT` | constant | The accent until someone picks their own (their account's `color`): amber `#FBBF24` |
+| `APP_COLORS` | array | The twelve colors `nameColor` picks from |
+| `nameColor` | function | A stable color for a name, ignoring case and surrounding spaces, the same on every device |
+| `resolveAppColor` | function | An app's own color, or its name's |
+| `personColor` | function | Someone else's color, from their user id |
 
 ### API keys
 

package/dist/index.d.mts

@@ -1,3 +1,13 @@
+/** Each log level's color: its label in the apps' log list, a level's heat on the heatmap, the CLI's level column. */
+declare const logLevelColors: Record<number, string>;
+/** The accent until someone picks their own (their account's `color`): amber, the wordmark's and the icon's. */
+declare const DEFAULT_ACCENT = "#FBBF24";
+/**
+ * Colors for an app without one of its own, and for other people, picked by `nameColor`: Tailwind's 500s, roughly
+ * evenly spaced around the wheel, vivid and mid-light enough to read on dark and light surfaces.
+ */
+declare const APP_COLORS: readonly ["#EF4444", "#F97316", "#F59E0B", "#84CC16", "#22C55E", "#14B8A6", "#06B6D4", "#3B82F6", "#6366F1", "#8B5CF6", "#D946EF", "#EC4899"];
+
 /**
  * Machine-readable reasons the API refuses a request, sent as `code` beside `message` where one status means more than
  * one thing. Messages are for people and may change; clients decide by the code.
@@ -212,7 +222,24 @@ interface AppsQuery {
     cursor?: string;
 }
 
-type DeviceLinkStatus = 'pending' | 'approved' | 'denied';
+/**
+ * A device link request: a new device asking for the account key from a device that has it. `failed` is a code that
+ * didn't match, which ends the request.
+ */
+type DeviceLinkStatus = 'pending' | 'approved' | 'denied' | 'failed';
+/** What a request comes from, so the device answering it can say so and offer a QR code only to a phone's camera. */
+type DeviceLinkPlatform = 'ios' | 'android' | 'web' | 'desktop' | 'cli';
+/**
+ * Body of POST /device-links.
+ */
+interface DeviceLinkCreateBody {
+    deviceName: string;
+    platform: DeviceLinkPlatform;
+    /** The public half of the new device's one-off X25519 keypair, which the account key is wrapped to. */
+    publicKey: string;
+    /** The new device's push device id, so the push asking the account's devices to link it skips it. */
+    deviceId?: string;
+}
 /**
  * Response from POST /device-links.
  */
@@ -221,14 +248,48 @@ interface DeviceLinkCreatedRecord {
     expiresAt: string;
 }
 /**
- * Response from GET /device-links/:id.
- * encryptedKey is present only when status is 'approved'.
+ * Body of POST /device-links/:id/approve: the account key wrapped to the new device, and a tag over it made from the
+ * code's secret, which the new device checks before storing the key, so the server can't hand it a key of its own.
+ */
+interface DeviceLinkApproveBody {
+    encryptedKey: string;
+    deliveryTag: string;
+}
+/**
+ * Response from GET /device-links/:id, as the new device reads it.
+ * encryptedKey and deliveryTag are present only when status is 'approved'. sid and holderMessage are set once a device
+ * holding the account key shows the request's code, and answeredAt once the new device has answered it.
  */
 interface DeviceLinkRecord {
     id: string;
     status: DeviceLinkStatus;
     encryptedKey?: string;
+    deliveryTag?: string;
+    expiresAt: string;
+    sid?: string | null;
+    holderMessage?: string | null;
+    answeredAt?: string | null;
+}
+/**
+ * A request waiting on the caller's account key (GET /device-links/pending), as a device holding it reads it: enough
+ * to show its code, and to finish it once answered. The messages are the same password-authenticated exchange as a key
+ * check's, so the server can't read or test codes against them. holderState is the code's side of the exchange, sealed
+ * under the account key, so any of the account's devices can show the same code or finish the request.
+ */
+interface PendingDeviceLink {
+    id: string;
+    deviceName: string;
+    platform: DeviceLinkPlatform;
+    /** The new device's one-off public key, which an answer's tag has to cover before anything is wrapped to it. */
+    publicKey: string;
+    sid: string | null;
+    holderMessage: string | null;
+    holderState: string | null;
+    claimantMessage: string | null;
+    tag: string | null;
+    answeredAt: string | null;
     expiresAt: string;
+    createdAt: string;
 }
 
 /**
@@ -461,6 +522,12 @@ type PushData =
     deviceLinkId: string;
     deviceName: string;
 }
+/** The new device entered its link code, which a device holding the account key now checks (Lumber-API). */
+ | {
+    type: 'device_link_answered';
+    deviceLinkId: string;
+    deviceName: string;
+}
 /** The person the reader gave a code entered it (Lumber-API). */
  | {
     type: 'key_check';
@@ -610,6 +677,15 @@ interface UserRecord {
 declare const isValidAppearance: (value: unknown) => value is Appearance;
 /** Accepts 3- and 6-digit hex color strings (#rgb, #rrggbb). */
 declare const isValidColor: (value: string) => boolean;
+/**
+ * One of APP_COLORS for a name, ignoring case and surrounding spaces. Nothing is stored: every device works out the
+ * same color.
+ */
+declare const nameColor: (name: string) => string;
+/** An app's color: the one its owner picked, or its name's. */
+declare const resolveAppColor: (name: string, color?: string | null) => string;
+/** Someone else's color, from their user id, since their own accent lives on their account. */
+declare const personColor: (userId: string) => string;
 declare const isValidLogLevel: (value: unknown) => value is LogLevel;
 declare const isValidSubscriptionLevel: (value: unknown) => value is SubscriptionLevel;
 declare const isValidDeviceLinkStatus: (value: unknown) => value is DeviceLinkStatus;
@@ -638,4 +714,4 @@ declare const apiErrorCodeOf: (body: unknown) => ApiErrorCode | null;
 /** A push notification's data as PushData, or null for data no Lumber push sends. */
 declare const parsePushData: (data: unknown) => PushData | null;
 
-export { type ApiErrorBody, type ApiErrorCode, type ApiKeyRecord, type ApiResponse, type AppCreatedRecord, type AppEncryptedKey, type AppKeyUpsertBody, type AppPermission, type AppPersonRecord, type AppRecord, type AppTeamAccess, type Appearance, type AppsQuery, type ClaimantKeyCheck, type ClientToServerEvents, DEFAULT_PUSH_THRESHOLD, type DeviceLinkCreatedRecord, type DeviceLinkRecord, type DeviceLinkStatus, type FlagRecord, type FlagsQuery, type GuestRecord, type HolderKeyCheck, type InvitationRecord, type KeyCheckResult, type KeyHolder, type KeyPin, type LogContext, type LogEncrypted, LogLevel, type LogLevelName, type LogPayload, type LogRecord, type LogTimeseriesQuery, type LogsQuery, type NoteEncrypted, type NoteRecord, type NotesQuery, type NotificationPreference, type NotificationPreferences, PUSH_OFF, type PendingAppKey, type PushData, type PushThreshold, type PushToken, type PushType, type ResponseMetadata, type ServerToClientEvents, type SocketAppPayload, SubscriptionLevel, type SubscriptionLevelName, type SubscriptionLimits, type SubscriptionPlan, type SubscriptionPlanRecord, type TeamMemberRecord, type TeamRecord, type TeamsQuery, type TimeseriesBucket, type TimeseriesResponse, type UserRecord, apiErrorCodeOf, apiErrorCodes, isApiErrorCode, isValidAppearance, isValidColor, isValidDeviceLinkStatus, isValidImageUrl, isValidLogLevel, isValidSubscriptionLevel, isValidTeamMemberRole, joinApiKey, logLevelNameToLevel, logLevelToName, logLevels, normalizePushThreshold, parsePushData, splitApiKey, subscriptionLevelToName, subscriptionLevels, subscriptionLimits, subscriptionPlans };
+export { APP_COLORS, type ApiErrorBody, type ApiErrorCode, type ApiKeyRecord, type ApiResponse, type AppCreatedRecord, type AppEncryptedKey, type AppKeyUpsertBody, type AppPermission, type AppPersonRecord, type AppRecord, type AppTeamAccess, type Appearance, type AppsQuery, type ClaimantKeyCheck, type ClientToServerEvents, DEFAULT_ACCENT, DEFAULT_PUSH_THRESHOLD, type DeviceLinkApproveBody, type DeviceLinkCreateBody, type DeviceLinkCreatedRecord, type DeviceLinkPlatform, type DeviceLinkRecord, type DeviceLinkStatus, type FlagRecord, type FlagsQuery, type GuestRecord, type HolderKeyCheck, type InvitationRecord, type KeyCheckResult, type KeyHolder, type KeyPin, type LogContext, type LogEncrypted, LogLevel, type LogLevelName, type LogPayload, type LogRecord, type LogTimeseriesQuery, type LogsQuery, type NoteEncrypted, type NoteRecord, type NotesQuery, type NotificationPreference, type NotificationPreferences, PUSH_OFF, type PendingAppKey, type PendingDeviceLink, type PushData, type PushThreshold, type PushToken, type PushType, type ResponseMetadata, type ServerToClientEvents, type SocketAppPayload, SubscriptionLevel, type SubscriptionLevelName, type SubscriptionLimits, type SubscriptionPlan, type SubscriptionPlanRecord, type TeamMemberRecord, type TeamRecord, type TeamsQuery, type TimeseriesBucket, type TimeseriesResponse, type UserRecord, apiErrorCodeOf, apiErrorCodes, isApiErrorCode, isValidAppearance, isValidColor, isValidDeviceLinkStatus, isValidImageUrl, isValidLogLevel, isValidSubscriptionLevel, isValidTeamMemberRole, joinApiKey, logLevelColors, logLevelNameToLevel, logLevelToName, logLevels, nameColor, normalizePushThreshold, parsePushData, personColor, resolveAppColor, splitApiKey, subscriptionLevelToName, subscriptionLevels, subscriptionLimits, subscriptionPlans };

package/dist/index.d.ts

@@ -1,3 +1,13 @@
+/** Each log level's color: its label in the apps' log list, a level's heat on the heatmap, the CLI's level column. */
+declare const logLevelColors: Record<number, string>;
+/** The accent until someone picks their own (their account's `color`): amber, the wordmark's and the icon's. */
+declare const DEFAULT_ACCENT = "#FBBF24";
+/**
+ * Colors for an app without one of its own, and for other people, picked by `nameColor`: Tailwind's 500s, roughly
+ * evenly spaced around the wheel, vivid and mid-light enough to read on dark and light surfaces.
+ */
+declare const APP_COLORS: readonly ["#EF4444", "#F97316", "#F59E0B", "#84CC16", "#22C55E", "#14B8A6", "#06B6D4", "#3B82F6", "#6366F1", "#8B5CF6", "#D946EF", "#EC4899"];
+
 /**
  * Machine-readable reasons the API refuses a request, sent as `code` beside `message` where one status means more than
  * one thing. Messages are for people and may change; clients decide by the code.
@@ -212,7 +222,24 @@ interface AppsQuery {
     cursor?: string;
 }
 
-type DeviceLinkStatus = 'pending' | 'approved' | 'denied';
+/**
+ * A device link request: a new device asking for the account key from a device that has it. `failed` is a code that
+ * didn't match, which ends the request.
+ */
+type DeviceLinkStatus = 'pending' | 'approved' | 'denied' | 'failed';
+/** What a request comes from, so the device answering it can say so and offer a QR code only to a phone's camera. */
+type DeviceLinkPlatform = 'ios' | 'android' | 'web' | 'desktop' | 'cli';
+/**
+ * Body of POST /device-links.
+ */
+interface DeviceLinkCreateBody {
+    deviceName: string;
+    platform: DeviceLinkPlatform;
+    /** The public half of the new device's one-off X25519 keypair, which the account key is wrapped to. */
+    publicKey: string;
+    /** The new device's push device id, so the push asking the account's devices to link it skips it. */
+    deviceId?: string;
+}
 /**
  * Response from POST /device-links.
  */
@@ -221,14 +248,48 @@ interface DeviceLinkCreatedRecord {
     expiresAt: string;
 }
 /**
- * Response from GET /device-links/:id.
- * encryptedKey is present only when status is 'approved'.
+ * Body of POST /device-links/:id/approve: the account key wrapped to the new device, and a tag over it made from the
+ * code's secret, which the new device checks before storing the key, so the server can't hand it a key of its own.
+ */
+interface DeviceLinkApproveBody {
+    encryptedKey: string;
+    deliveryTag: string;
+}
+/**
+ * Response from GET /device-links/:id, as the new device reads it.
+ * encryptedKey and deliveryTag are present only when status is 'approved'. sid and holderMessage are set once a device
+ * holding the account key shows the request's code, and answeredAt once the new device has answered it.
  */
 interface DeviceLinkRecord {
     id: string;
     status: DeviceLinkStatus;
     encryptedKey?: string;
+    deliveryTag?: string;
+    expiresAt: string;
+    sid?: string | null;
+    holderMessage?: string | null;
+    answeredAt?: string | null;
+}
+/**
+ * A request waiting on the caller's account key (GET /device-links/pending), as a device holding it reads it: enough
+ * to show its code, and to finish it once answered. The messages are the same password-authenticated exchange as a key
+ * check's, so the server can't read or test codes against them. holderState is the code's side of the exchange, sealed
+ * under the account key, so any of the account's devices can show the same code or finish the request.
+ */
+interface PendingDeviceLink {
+    id: string;
+    deviceName: string;
+    platform: DeviceLinkPlatform;
+    /** The new device's one-off public key, which an answer's tag has to cover before anything is wrapped to it. */
+    publicKey: string;
+    sid: string | null;
+    holderMessage: string | null;
+    holderState: string | null;
+    claimantMessage: string | null;
+    tag: string | null;
+    answeredAt: string | null;
     expiresAt: string;
+    createdAt: string;
 }
 
 /**
@@ -461,6 +522,12 @@ type PushData =
     deviceLinkId: string;
     deviceName: string;
 }
+/** The new device entered its link code, which a device holding the account key now checks (Lumber-API). */
+ | {
+    type: 'device_link_answered';
+    deviceLinkId: string;
+    deviceName: string;
+}
 /** The person the reader gave a code entered it (Lumber-API). */
  | {
     type: 'key_check';
@@ -610,6 +677,15 @@ interface UserRecord {
 declare const isValidAppearance: (value: unknown) => value is Appearance;
 /** Accepts 3- and 6-digit hex color strings (#rgb, #rrggbb). */
 declare const isValidColor: (value: string) => boolean;
+/**
+ * One of APP_COLORS for a name, ignoring case and surrounding spaces. Nothing is stored: every device works out the
+ * same color.
+ */
+declare const nameColor: (name: string) => string;
+/** An app's color: the one its owner picked, or its name's. */
+declare const resolveAppColor: (name: string, color?: string | null) => string;
+/** Someone else's color, from their user id, since their own accent lives on their account. */
+declare const personColor: (userId: string) => string;
 declare const isValidLogLevel: (value: unknown) => value is LogLevel;
 declare const isValidSubscriptionLevel: (value: unknown) => value is SubscriptionLevel;
 declare const isValidDeviceLinkStatus: (value: unknown) => value is DeviceLinkStatus;
@@ -638,4 +714,4 @@ declare const apiErrorCodeOf: (body: unknown) => ApiErrorCode | null;
 /** A push notification's data as PushData, or null for data no Lumber push sends. */
 declare const parsePushData: (data: unknown) => PushData | null;
 
-export { type ApiErrorBody, type ApiErrorCode, type ApiKeyRecord, type ApiResponse, type AppCreatedRecord, type AppEncryptedKey, type AppKeyUpsertBody, type AppPermission, type AppPersonRecord, type AppRecord, type AppTeamAccess, type Appearance, type AppsQuery, type ClaimantKeyCheck, type ClientToServerEvents, DEFAULT_PUSH_THRESHOLD, type DeviceLinkCreatedRecord, type DeviceLinkRecord, type DeviceLinkStatus, type FlagRecord, type FlagsQuery, type GuestRecord, type HolderKeyCheck, type InvitationRecord, type KeyCheckResult, type KeyHolder, type KeyPin, type LogContext, type LogEncrypted, LogLevel, type LogLevelName, type LogPayload, type LogRecord, type LogTimeseriesQuery, type LogsQuery, type NoteEncrypted, type NoteRecord, type NotesQuery, type NotificationPreference, type NotificationPreferences, PUSH_OFF, type PendingAppKey, type PushData, type PushThreshold, type PushToken, type PushType, type ResponseMetadata, type ServerToClientEvents, type SocketAppPayload, SubscriptionLevel, type SubscriptionLevelName, type SubscriptionLimits, type SubscriptionPlan, type SubscriptionPlanRecord, type TeamMemberRecord, type TeamRecord, type TeamsQuery, type TimeseriesBucket, type TimeseriesResponse, type UserRecord, apiErrorCodeOf, apiErrorCodes, isApiErrorCode, isValidAppearance, isValidColor, isValidDeviceLinkStatus, isValidImageUrl, isValidLogLevel, isValidSubscriptionLevel, isValidTeamMemberRole, joinApiKey, logLevelNameToLevel, logLevelToName, logLevels, normalizePushThreshold, parsePushData, splitApiKey, subscriptionLevelToName, subscriptionLevels, subscriptionLimits, subscriptionPlans };
+export { APP_COLORS, type ApiErrorBody, type ApiErrorCode, type ApiKeyRecord, type ApiResponse, type AppCreatedRecord, type AppEncryptedKey, type AppKeyUpsertBody, type AppPermission, type AppPersonRecord, type AppRecord, type AppTeamAccess, type Appearance, type AppsQuery, type ClaimantKeyCheck, type ClientToServerEvents, DEFAULT_ACCENT, DEFAULT_PUSH_THRESHOLD, type DeviceLinkApproveBody, type DeviceLinkCreateBody, type DeviceLinkCreatedRecord, type DeviceLinkPlatform, type DeviceLinkRecord, type DeviceLinkStatus, type FlagRecord, type FlagsQuery, type GuestRecord, type HolderKeyCheck, type InvitationRecord, type KeyCheckResult, type KeyHolder, type KeyPin, type LogContext, type LogEncrypted, LogLevel, type LogLevelName, type LogPayload, type LogRecord, type LogTimeseriesQuery, type LogsQuery, type NoteEncrypted, type NoteRecord, type NotesQuery, type NotificationPreference, type NotificationPreferences, PUSH_OFF, type PendingAppKey, type PendingDeviceLink, type PushData, type PushThreshold, type PushToken, type PushType, type ResponseMetadata, type ServerToClientEvents, type SocketAppPayload, SubscriptionLevel, type SubscriptionLevelName, type SubscriptionLimits, type SubscriptionPlan, type SubscriptionPlanRecord, type TeamMemberRecord, type TeamRecord, type TeamsQuery, type TimeseriesBucket, type TimeseriesResponse, type UserRecord, apiErrorCodeOf, apiErrorCodes, isApiErrorCode, isValidAppearance, isValidColor, isValidDeviceLinkStatus, isValidImageUrl, isValidLogLevel, isValidSubscriptionLevel, isValidTeamMemberRole, joinApiKey, logLevelColors, logLevelNameToLevel, logLevelToName, logLevels, nameColor, normalizePushThreshold, parsePushData, personColor, resolveAppColor, splitApiKey, subscriptionLevelToName, subscriptionLevels, subscriptionLimits, subscriptionPlans };

package/dist/index.js

@@ -20,6 +20,8 @@ var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: tru
 // src/index.ts
 var index_exports = {};
 __export(index_exports, {
+  APP_COLORS: () => APP_COLORS,
+  DEFAULT_ACCENT: () => DEFAULT_ACCENT,
   DEFAULT_PUSH_THRESHOLD: () => DEFAULT_PUSH_THRESHOLD,
   LogLevel: () => LogLevel,
   PUSH_OFF: () => PUSH_OFF,
@@ -35,11 +37,15 @@ __export(index_exports, {
   isValidSubscriptionLevel: () => isValidSubscriptionLevel,
   isValidTeamMemberRole: () => isValidTeamMemberRole,
   joinApiKey: () => joinApiKey,
+  logLevelColors: () => logLevelColors,
   logLevelNameToLevel: () => logLevelNameToLevel,
   logLevelToName: () => logLevelToName,
   logLevels: () => logLevels,
+  nameColor: () => nameColor,
   normalizePushThreshold: () => normalizePushThreshold,
   parsePushData: () => parsePushData,
+  personColor: () => personColor,
+  resolveAppColor: () => resolveAppColor,
   splitApiKey: () => splitApiKey,
   subscriptionLevelToName: () => subscriptionLevelToName,
   subscriptionLevels: () => subscriptionLevels,
@@ -48,24 +54,6 @@ __export(index_exports, {
 });
 module.exports = __toCommonJS(index_exports);
 
-// src/constants/errors.ts
-var apiErrorCodes = [
-  /** 403: the team's plan has no room for another app. */
-  "APP_LIMIT",
-  /** 403: the team's plan has no room for another member (members and live invitations). */
-  "SEAT_LIMIT",
-  /** 403: the app's team's plan has no room for another guest on it (guests and live invitations). */
-  "GUEST_LIMIT",
-  /** 409: the person invited is already on the team. */
-  "ALREADY_MEMBER",
-  /** 409: the person invited can already read the app. */
-  "ALREADY_READS",
-  /** 409: the address invited already has an open invitation. */
-  "ALREADY_INVITED",
-  /** 409: the address invited already has an account, so invite the person instead. */
-  "HAS_ACCOUNT"
-];
-
 // src/constants/logLevel.ts
 var LogLevel = /* @__PURE__ */ ((LogLevel2) => {
   LogLevel2[LogLevel2["Debug"] = 0] = "Debug";
@@ -91,6 +79,35 @@ var logLevelNameToLevel = {
 };
 var logLevels = [0 /* Debug */, 1 /* Info */, 2 /* Warn */, 3 /* Error */, 4 /* Fatal */];
 
+// src/constants/colors.ts
+var logLevelColors = {
+  [0 /* Debug */]: "#737373",
+  [1 /* Info */]: "#60A5FA",
+  [2 /* Warn */]: "#FBBF24",
+  [3 /* Error */]: "#F87171",
+  [4 /* Fatal */]: "#E879F9"
+};
+var DEFAULT_ACCENT = "#FBBF24";
+var APP_COLORS = ["#EF4444", "#F97316", "#F59E0B", "#84CC16", "#22C55E", "#14B8A6", "#06B6D4", "#3B82F6", "#6366F1", "#8B5CF6", "#D946EF", "#EC4899"];
+
+// src/constants/errors.ts
+var apiErrorCodes = [
+  /** 403: the team's plan has no room for another app. */
+  "APP_LIMIT",
+  /** 403: the team's plan has no room for another member (members and live invitations). */
+  "SEAT_LIMIT",
+  /** 403: the app's team's plan has no room for another guest on it (guests and live invitations). */
+  "GUEST_LIMIT",
+  /** 409: the person invited is already on the team. */
+  "ALREADY_MEMBER",
+  /** 409: the person invited can already read the app. */
+  "ALREADY_READS",
+  /** 409: the address invited already has an open invitation. */
+  "ALREADY_INVITED",
+  /** 409: the address invited already has an account, so invite the person instead. */
+  "HAS_ACCOUNT"
+];
+
 // src/constants/notifications.ts
 var PUSH_OFF = 5;
 var DEFAULT_PUSH_THRESHOLD = 2 /* Warn */;
@@ -127,9 +144,20 @@ var subscriptionPlans = {
 var appearanceValues = ["system", "dark", "light"];
 var isValidAppearance = (value) => appearanceValues.includes(value);
 var isValidColor = (value) => /^#([0-9a-fA-F]{3}|[0-9a-fA-F]{6})$/.test(value);
+var hashName = (name) => {
+  let hash = 2166136261;
+  for (const char of name.trim().toLowerCase()) {
+    hash ^= char.codePointAt(0) ?? 0;
+    hash = Math.imul(hash, 16777619);
+  }
+  return hash >>> 0;
+};
+var nameColor = (name) => APP_COLORS[hashName(name) % APP_COLORS.length];
+var resolveAppColor = (name, color) => color && isValidColor(color) ? color : nameColor(name);
+var personColor = (userId) => nameColor(userId);
 var isValidLogLevel = (value) => logLevels.includes(value);
 var isValidSubscriptionLevel = (value) => subscriptionLevels.includes(value);
-var deviceLinkStatuses = ["pending", "approved", "denied"];
+var deviceLinkStatuses = ["pending", "approved", "denied", "failed"];
 var isValidDeviceLinkStatus = (value) => deviceLinkStatuses.includes(value);
 var teamMemberRoles = ["owner", "admin", "member"];
 var isValidTeamMemberRole = (value) => teamMemberRoles.includes(value);
@@ -171,7 +199,8 @@ var parsePushData = (data) => {
     case "note":
       return isId(d.appId) && isId(d.noteId) ? { type: "note", appId: d.appId, noteId: d.noteId } : null;
     case "device_link":
-      return isId(d.deviceLinkId) ? { type: "device_link", deviceLinkId: d.deviceLinkId, deviceName: typeof d.deviceName === "string" ? d.deviceName : "" } : null;
+    case "device_link_answered":
+      return isId(d.deviceLinkId) ? { type: d.type, deviceLinkId: d.deviceLinkId, deviceName: typeof d.deviceName === "string" ? d.deviceName : "" } : null;
     case "key_check":
       return isId(d.checkId) ? { type: "key_check", checkId: d.checkId } : null;
     case "key_waiting":
@@ -184,6 +213,8 @@ var parsePushData = (data) => {
 };
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
+  APP_COLORS,
+  DEFAULT_ACCENT,
   DEFAULT_PUSH_THRESHOLD,
   LogLevel,
   PUSH_OFF,
@@ -199,11 +230,15 @@ var parsePushData = (data) => {
   isValidSubscriptionLevel,
   isValidTeamMemberRole,
   joinApiKey,
+  logLevelColors,
   logLevelNameToLevel,
   logLevelToName,
   logLevels,
+  nameColor,
   normalizePushThreshold,
   parsePushData,
+  personColor,
+  resolveAppColor,
   splitApiKey,
   subscriptionLevelToName,
   subscriptionLevels,

package/dist/index.mjs

@@ -1,21 +1,3 @@
-// src/constants/errors.ts
-var apiErrorCodes = [
-  /** 403: the team's plan has no room for another app. */
-  "APP_LIMIT",
-  /** 403: the team's plan has no room for another member (members and live invitations). */
-  "SEAT_LIMIT",
-  /** 403: the app's team's plan has no room for another guest on it (guests and live invitations). */
-  "GUEST_LIMIT",
-  /** 409: the person invited is already on the team. */
-  "ALREADY_MEMBER",
-  /** 409: the person invited can already read the app. */
-  "ALREADY_READS",
-  /** 409: the address invited already has an open invitation. */
-  "ALREADY_INVITED",
-  /** 409: the address invited already has an account, so invite the person instead. */
-  "HAS_ACCOUNT"
-];
-
 // src/constants/logLevel.ts
 var LogLevel = /* @__PURE__ */ ((LogLevel2) => {
   LogLevel2[LogLevel2["Debug"] = 0] = "Debug";
@@ -41,6 +23,35 @@ var logLevelNameToLevel = {
 };
 var logLevels = [0 /* Debug */, 1 /* Info */, 2 /* Warn */, 3 /* Error */, 4 /* Fatal */];
 
+// src/constants/colors.ts
+var logLevelColors = {
+  [0 /* Debug */]: "#737373",
+  [1 /* Info */]: "#60A5FA",
+  [2 /* Warn */]: "#FBBF24",
+  [3 /* Error */]: "#F87171",
+  [4 /* Fatal */]: "#E879F9"
+};
+var DEFAULT_ACCENT = "#FBBF24";
+var APP_COLORS = ["#EF4444", "#F97316", "#F59E0B", "#84CC16", "#22C55E", "#14B8A6", "#06B6D4", "#3B82F6", "#6366F1", "#8B5CF6", "#D946EF", "#EC4899"];
+
+// src/constants/errors.ts
+var apiErrorCodes = [
+  /** 403: the team's plan has no room for another app. */
+  "APP_LIMIT",
+  /** 403: the team's plan has no room for another member (members and live invitations). */
+  "SEAT_LIMIT",
+  /** 403: the app's team's plan has no room for another guest on it (guests and live invitations). */
+  "GUEST_LIMIT",
+  /** 409: the person invited is already on the team. */
+  "ALREADY_MEMBER",
+  /** 409: the person invited can already read the app. */
+  "ALREADY_READS",
+  /** 409: the address invited already has an open invitation. */
+  "ALREADY_INVITED",
+  /** 409: the address invited already has an account, so invite the person instead. */
+  "HAS_ACCOUNT"
+];
+
 // src/constants/notifications.ts
 var PUSH_OFF = 5;
 var DEFAULT_PUSH_THRESHOLD = 2 /* Warn */;
@@ -77,9 +88,20 @@ var subscriptionPlans = {
 var appearanceValues = ["system", "dark", "light"];
 var isValidAppearance = (value) => appearanceValues.includes(value);
 var isValidColor = (value) => /^#([0-9a-fA-F]{3}|[0-9a-fA-F]{6})$/.test(value);
+var hashName = (name) => {
+  let hash = 2166136261;
+  for (const char of name.trim().toLowerCase()) {
+    hash ^= char.codePointAt(0) ?? 0;
+    hash = Math.imul(hash, 16777619);
+  }
+  return hash >>> 0;
+};
+var nameColor = (name) => APP_COLORS[hashName(name) % APP_COLORS.length];
+var resolveAppColor = (name, color) => color && isValidColor(color) ? color : nameColor(name);
+var personColor = (userId) => nameColor(userId);
 var isValidLogLevel = (value) => logLevels.includes(value);
 var isValidSubscriptionLevel = (value) => subscriptionLevels.includes(value);
-var deviceLinkStatuses = ["pending", "approved", "denied"];
+var deviceLinkStatuses = ["pending", "approved", "denied", "failed"];
 var isValidDeviceLinkStatus = (value) => deviceLinkStatuses.includes(value);
 var teamMemberRoles = ["owner", "admin", "member"];
 var isValidTeamMemberRole = (value) => teamMemberRoles.includes(value);
@@ -121,7 +143,8 @@ var parsePushData = (data) => {
     case "note":
       return isId(d.appId) && isId(d.noteId) ? { type: "note", appId: d.appId, noteId: d.noteId } : null;
     case "device_link":
-      return isId(d.deviceLinkId) ? { type: "device_link", deviceLinkId: d.deviceLinkId, deviceName: typeof d.deviceName === "string" ? d.deviceName : "" } : null;
+    case "device_link_answered":
+      return isId(d.deviceLinkId) ? { type: d.type, deviceLinkId: d.deviceLinkId, deviceName: typeof d.deviceName === "string" ? d.deviceName : "" } : null;
     case "key_check":
       return isId(d.checkId) ? { type: "key_check", checkId: d.checkId } : null;
     case "key_waiting":
@@ -133,6 +156,8 @@ var parsePushData = (data) => {
   }
 };
 export {
+  APP_COLORS,
+  DEFAULT_ACCENT,
   DEFAULT_PUSH_THRESHOLD,
   LogLevel,
   PUSH_OFF,
@@ -148,11 +173,15 @@ export {
   isValidSubscriptionLevel,
   isValidTeamMemberRole,
   joinApiKey,
+  logLevelColors,
   logLevelNameToLevel,
   logLevelToName,
   logLevels,
+  nameColor,
   normalizePushThreshold,
   parsePushData,
+  personColor,
+  resolveAppColor,
   splitApiKey,
   subscriptionLevelToName,
   subscriptionLevels,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@infinitetoken/lumber-kit",
-  "version": "0.5.1",
+  "version": "0.6.0",
   "description": "Shared TypeScript types and wire format contracts for the Lumber cloud logging suite",
   "keywords": [
     "lumber",