@intentic/sandbox-contract 1.343.0 → 1.345.0

package/dist/schemas/keyring.d.ts

@@ -55,6 +55,14 @@ export declare const KeyringSandboxKeysSchema: z.ZodObject<{
     seal: z.ZodString;
 }, z.core.$strip>;
 export type KeyringSandboxKeys = z.infer<typeof KeyringSandboxKeysSchema>;
+export declare const KeyringRememberSchema: z.ZodObject<{
+    browser: z.ZodBoolean;
+    terminal: z.ZodBoolean;
+    apps: z.ZodBoolean;
+    phone: z.ZodBoolean;
+    sandbox: z.ZodBoolean;
+}, z.core.$strip>;
+export type KeyringRemember = z.infer<typeof KeyringRememberSchema>;
 export declare const KeyringStateSchema: z.ZodObject<{
     version: z.ZodString;
     locked: z.ZodBoolean;
@@ -62,12 +70,21 @@ export declare const KeyringStateSchema: z.ZodObject<{
     unlock: z.ZodArray<z.ZodEnum<{
         hello: "hello";
         passphrase: "passphrase";
+        polkit: "polkit";
     }>>;
     keys: z.ZodOptional<z.ZodObject<{
         seal: z.ZodString;
         inbox: z.ZodString;
     }, z.core.$strip>>;
     pendingInbox: z.ZodNumber;
+    pendingCaptures: z.ZodOptional<z.ZodNumber>;
+    remember: z.ZodOptional<z.ZodObject<{
+        browser: z.ZodBoolean;
+        terminal: z.ZodBoolean;
+        apps: z.ZodBoolean;
+        phone: z.ZodBoolean;
+        sandbox: z.ZodBoolean;
+    }, z.core.$strip>>;
 }, z.core.$strip>;
 export type KeyringState = z.infer<typeof KeyringStateSchema>;
 export declare const KeyringSharesSchema: z.ZodObject<{
@@ -78,12 +95,21 @@ export declare const KeyringSharesSchema: z.ZodObject<{
         unlock: z.ZodArray<z.ZodEnum<{
             hello: "hello";
             passphrase: "passphrase";
+            polkit: "polkit";
         }>>;
         keys: z.ZodOptional<z.ZodObject<{
             seal: z.ZodString;
             inbox: z.ZodString;
         }, z.core.$strip>>;
         pendingInbox: z.ZodNumber;
+        pendingCaptures: z.ZodOptional<z.ZodNumber>;
+        remember: z.ZodOptional<z.ZodObject<{
+            browser: z.ZodBoolean;
+            terminal: z.ZodBoolean;
+            apps: z.ZodBoolean;
+            phone: z.ZodBoolean;
+            sandbox: z.ZodBoolean;
+        }, z.core.$strip>>;
     }, z.core.$strip>>;
     pointers: z.ZodArray<z.ZodObject<{
         name: z.ZodString;
@@ -201,6 +227,7 @@ export declare const KeyringRefusalCodeSchema: z.ZodEnum<{
     locked: "locked";
     "no-keyring": "no-keyring";
     "not-shared": "not-shared";
+    pending: "pending";
     replayed: "replayed";
     unavailable: "unavailable";
     unknown: "unknown";
@@ -227,6 +254,7 @@ export declare const KeyringReleaseResultSchema: z.ZodDiscriminatedUnion<[z.ZodO
         locked: "locked";
         "no-keyring": "no-keyring";
         "not-shared": "not-shared";
+        pending: "pending";
         replayed: "replayed";
         unavailable: "unavailable";
         unknown: "unknown";
@@ -267,6 +295,7 @@ export declare const KeyringTypeResultSchema: z.ZodDiscriminatedUnion<[z.ZodObje
         locked: "locked";
         "no-keyring": "no-keyring";
         "not-shared": "not-shared";
+        pending: "pending";
         replayed: "replayed";
         unavailable: "unavailable";
         unknown: "unknown";
@@ -311,6 +340,7 @@ export declare const KeyringInboxResultSchema: z.ZodDiscriminatedUnion<[z.ZodObj
         locked: "locked";
         "no-keyring": "no-keyring";
         "not-shared": "not-shared";
+        pending: "pending";
         replayed: "replayed";
         unavailable: "unavailable";
         unknown: "unknown";
@@ -381,6 +411,7 @@ export declare const KeyringSyncPairResultSchema: z.ZodDiscriminatedUnion<[z.Zod
         locked: "locked";
         "no-keyring": "no-keyring";
         "not-shared": "not-shared";
+        pending: "pending";
         replayed: "replayed";
         unavailable: "unavailable";
         unknown: "unknown";
@@ -418,4 +449,386 @@ export declare const KeyringSyncDeliverSchema: z.ZodObject<{
 export declare const KeyringSyncDeliverResultSchema: z.ZodObject<{
     accepted: z.ZodNumber;
 }, z.core.$strip>;
+export declare const KeyringOriginSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    kind: z.ZodLiteral<"site">;
+    host: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<"program">;
+    program: z.ZodString;
+    label: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<"package">;
+    package: z.ZodString;
+    label: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<"ssh">;
+    target: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<"ssh-key">;
+    path: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<"sudo">;
+    user: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<"git">;
+    url: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<"prompt">;
+    text: z.ZodString;
+    command: z.ZodOptional<z.ZodString>;
+    sandbox: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>], "kind">;
+export type KeyringOrigin = z.infer<typeof KeyringOriginSchema>;
+export declare const KeyringCaptureSourceSchema: z.ZodEnum<{
+    agent: "agent";
+    app: "app";
+    askpass: "askpass";
+    browser: "browser";
+    git: "git";
+    import: "import";
+    manual: "manual";
+    phone: "phone";
+    terminal: "terminal";
+}>;
+export type KeyringCaptureSource = z.infer<typeof KeyringCaptureSourceSchema>;
+export declare const KEYRING_CAPTURE_BATCH_MAX = 5000;
+export declare const KeyringCaptureItemSchema: z.ZodObject<{
+    origin: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        kind: z.ZodLiteral<"site">;
+        host: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"program">;
+        program: z.ZodString;
+        label: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"package">;
+        package: z.ZodString;
+        label: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"ssh">;
+        target: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"ssh-key">;
+        path: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"sudo">;
+        user: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"git">;
+        url: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"prompt">;
+        text: z.ZodString;
+        command: z.ZodOptional<z.ZodString>;
+        sandbox: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>], "kind">;
+    username: z.ZodOptional<z.ZodString>;
+    sealed: z.ZodObject<{
+        v: z.ZodLiteral<1>;
+        epk: z.ZodString;
+        iv: z.ZodString;
+        tag: z.ZodString;
+        data: z.ZodString;
+    }, z.core.$strict>;
+    source: z.ZodEnum<{
+        agent: "agent";
+        app: "app";
+        askpass: "askpass";
+        browser: "browser";
+        git: "git";
+        import: "import";
+        manual: "manual";
+        phone: "phone";
+        terminal: "terminal";
+    }>;
+    via: z.ZodString;
+    kind: z.ZodDefault<z.ZodEnum<{
+        password: "password";
+        text: "text";
+    }>>;
+    title: z.ZodOptional<z.ZodString>;
+    at: z.ZodNumber;
+    failed: z.ZodOptional<z.ZodBoolean>;
+}, z.core.$strict>;
+export type KeyringCaptureItem = z.infer<typeof KeyringCaptureItemSchema>;
+export declare const KeyringCaptureOutcomeSchema: z.ZodEnum<{
+    pending: "pending";
+    saved: "saved";
+    skipped: "skipped";
+    unchanged: "unchanged";
+    updated: "updated";
+}>;
+export type KeyringCaptureOutcome = z.infer<typeof KeyringCaptureOutcomeSchema>;
+export declare const KeyringCaptureResultSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    ok: z.ZodLiteral<true>;
+    outcome: z.ZodEnum<{
+        pending: "pending";
+        saved: "saved";
+        skipped: "skipped";
+        unchanged: "unchanged";
+        updated: "updated";
+    }>;
+    name: z.ZodOptional<z.ZodString>;
+    title: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>, z.ZodObject<{
+    ok: z.ZodLiteral<false>;
+    code: z.ZodEnum<{
+        "bad-grant": "bad-grant";
+        busy: "busy";
+        declined: "declined";
+        expired: "expired";
+        guard: "guard";
+        locked: "locked";
+        "no-keyring": "no-keyring";
+        "not-shared": "not-shared";
+        pending: "pending";
+        replayed: "replayed";
+        unavailable: "unavailable";
+        unknown: "unknown";
+    }>;
+    refusal: z.ZodString;
+}, z.core.$strip>], "ok">;
+export type KeyringCaptureResult = z.infer<typeof KeyringCaptureResultSchema>;
+export declare const KeyringNeedSchema: z.ZodObject<{
+    origin: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        kind: z.ZodLiteral<"site">;
+        host: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"program">;
+        program: z.ZodString;
+        label: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"package">;
+        package: z.ZodString;
+        label: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"ssh">;
+        target: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"ssh-key">;
+        path: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"sudo">;
+        user: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"git">;
+        url: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"prompt">;
+        text: z.ZodString;
+        command: z.ZodOptional<z.ZodString>;
+        sandbox: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>], "kind">;
+    username: z.ZodOptional<z.ZodString>;
+    detail: z.ZodString;
+    conversation: z.ZodOptional<z.ZodString>;
+    purpose: z.ZodDefault<z.ZodEnum<{
+        agent: "agent";
+        owner: "owner";
+    }>>;
+    typeOnce: z.ZodDefault<z.ZodBoolean>;
+}, z.core.$strict>;
+export type KeyringNeed = z.infer<typeof KeyringNeedSchema>;
+export declare const KeyringNeedAnswerSchema: z.ZodEnum<{
+    always: "always";
+    deny: "deny";
+    once: "once";
+    "while-here": "while-here";
+}>;
+export type KeyringNeedAnswer = z.infer<typeof KeyringNeedAnswerSchema>;
+export declare const KeyringNeedResultSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    ok: z.ZodLiteral<true>;
+    pointer: z.ZodObject<{
+        name: z.ZodString;
+        mode: z.ZodEnum<{
+            copy: "copy";
+            "each-use": "each-use";
+            "while-here": "while-here";
+        }>;
+        kind: z.ZodEnum<{
+            password: "password";
+            text: "text";
+        }>;
+        programs: z.ZodArray<z.ZodString>;
+        packages: z.ZodArray<z.ZodString>;
+        hosts: z.ZodArray<z.ZodString>;
+        anyField: z.ZodBoolean;
+        source: z.ZodEnum<{
+            "1password": "1password";
+            bitwarden: "bitwarden";
+            keepassxc: "keepassxc";
+            keyring: "keyring";
+        }>;
+        updatedAt: z.ZodNumber;
+    }, z.core.$strip>;
+    asked: z.ZodBoolean;
+    saved: z.ZodBoolean;
+}, z.core.$strip>, z.ZodObject<{
+    ok: z.ZodLiteral<false>;
+    code: z.ZodEnum<{
+        "bad-grant": "bad-grant";
+        busy: "busy";
+        declined: "declined";
+        expired: "expired";
+        guard: "guard";
+        locked: "locked";
+        "no-keyring": "no-keyring";
+        "not-shared": "not-shared";
+        pending: "pending";
+        replayed: "replayed";
+        unavailable: "unavailable";
+        unknown: "unknown";
+    }>;
+    refusal: z.ZodString;
+}, z.core.$strip>], "ok">;
+export type KeyringNeedResult = z.infer<typeof KeyringNeedResultSchema>;
+export declare const KeyringPendingNeedSchema: z.ZodObject<{
+    id: z.ZodString;
+    sandbox: z.ZodString;
+    need: z.ZodObject<{
+        origin: z.ZodDiscriminatedUnion<[z.ZodObject<{
+            kind: z.ZodLiteral<"site">;
+            host: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"program">;
+            program: z.ZodString;
+            label: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"package">;
+            package: z.ZodString;
+            label: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"ssh">;
+            target: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"ssh-key">;
+            path: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"sudo">;
+            user: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"git">;
+            url: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"prompt">;
+            text: z.ZodString;
+            command: z.ZodOptional<z.ZodString>;
+            sandbox: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>], "kind">;
+        username: z.ZodOptional<z.ZodString>;
+        detail: z.ZodString;
+        conversation: z.ZodOptional<z.ZodString>;
+        purpose: z.ZodDefault<z.ZodEnum<{
+            agent: "agent";
+            owner: "owner";
+        }>>;
+        typeOnce: z.ZodDefault<z.ZodBoolean>;
+    }, z.core.$strict>;
+    matches: z.ZodArray<z.ZodString>;
+    at: z.ZodNumber;
+}, z.core.$strip>;
+export type KeyringPendingNeed = z.infer<typeof KeyringPendingNeedSchema>;
+export declare const KeyringPhoneKeysSchema: z.ZodObject<{
+    device: z.ZodString;
+    label: z.ZodString;
+    seal: z.ZodString;
+    presence: z.ZodString;
+}, z.core.$strict>;
+export type KeyringPhoneKeys = z.infer<typeof KeyringPhoneKeysSchema>;
+export declare const KeyringPhonePairResultSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    ok: z.ZodLiteral<true>;
+    fingerprint: z.ZodString;
+}, z.core.$strip>, z.ZodObject<{
+    ok: z.ZodLiteral<false>;
+    code: z.ZodEnum<{
+        "bad-grant": "bad-grant";
+        busy: "busy";
+        declined: "declined";
+        expired: "expired";
+        guard: "guard";
+        locked: "locked";
+        "no-keyring": "no-keyring";
+        "not-shared": "not-shared";
+        pending: "pending";
+        replayed: "replayed";
+        unavailable: "unavailable";
+        unknown: "unknown";
+    }>;
+    refusal: z.ZodString;
+}, z.core.$strip>], "ok">;
+export type KeyringPhonePairResult = z.infer<typeof KeyringPhonePairResultSchema>;
+export declare const KeyringPhoneFillSchema: z.ZodObject<{
+    v: z.ZodLiteral<1>;
+    device: z.ZodString;
+    origin: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        kind: z.ZodLiteral<"site">;
+        host: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"program">;
+        program: z.ZodString;
+        label: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"package">;
+        package: z.ZodString;
+        label: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"ssh">;
+        target: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"ssh-key">;
+        path: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"sudo">;
+        user: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"git">;
+        url: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"prompt">;
+        text: z.ZodString;
+        command: z.ZodOptional<z.ZodString>;
+        sandbox: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>], "kind">;
+    username: z.ZodOptional<z.ZodString>;
+    nonce: z.ZodString;
+    issuedAt: z.ZodNumber;
+    expiresAt: z.ZodNumber;
+}, z.core.$strict>;
+export type KeyringPhoneFill = z.infer<typeof KeyringPhoneFillSchema>;
+export declare const SignedKeyringPhoneFillSchema: z.ZodObject<{
+    payload: z.ZodString;
+    sig: z.ZodString;
+}, z.core.$strict>;
+export type SignedKeyringPhoneFill = z.infer<typeof SignedKeyringPhoneFillSchema>;
+export declare const KeyringPhoneFillResultSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    ok: z.ZodLiteral<true>;
+    username: z.ZodOptional<z.ZodString>;
+    sealed: z.ZodObject<{
+        v: z.ZodLiteral<1>;
+        epk: z.ZodString;
+        iv: z.ZodString;
+        tag: z.ZodString;
+        data: z.ZodString;
+    }, z.core.$strict>;
+    name: z.ZodString;
+    title: z.ZodString;
+}, z.core.$strip>, z.ZodObject<{
+    ok: z.ZodLiteral<false>;
+    code: z.ZodEnum<{
+        "bad-grant": "bad-grant";
+        busy: "busy";
+        declined: "declined";
+        expired: "expired";
+        guard: "guard";
+        locked: "locked";
+        "no-keyring": "no-keyring";
+        "not-shared": "not-shared";
+        pending: "pending";
+        replayed: "replayed";
+        unavailable: "unavailable";
+        unknown: "unknown";
+    }>;
+    refusal: z.ZodString;
+}, z.core.$strip>], "ok">;
+export type KeyringPhoneFillResult = z.infer<typeof KeyringPhoneFillResultSchema>;
 //# sourceMappingURL=keyring.d.ts.map

package/dist/schemas/keyring.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"keyring.d.ts","sourceRoot":"","sources":["../../src/schemas/keyring.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAUxB,eAAO,MAAM,cAAc,QAAyB,CAAC;AACrD,eAAO,MAAM,sBAAsB,aAAoG,CAAC;AAIxI,eAAO,MAAM,eAAe,QAAoC,CAAC;AACjE,eAAO,MAAM,uBAAuB,aAGqF,CAAC;AAE1H,eAAO,MAAM,sBAAsB;;;;EAI9B,CAAC;AACN,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAItE,eAAO,MAAM,mBAAmB,MAAM,CAAC;AACvC,eAAO,MAAM,oBAAoB,aAKmF,CAAC;AACrH,eAAO,MAAM,kBAAkB,QAA+C,CAAC;AAC/E,eAAO,MAAM,oBAAoB,aAA8H,CAAC;AAChK,eAAO,MAAM,oBAAoB,KAAK,CAAC;AAEvC,eAAO,MAAM,mBAAmB;;;;;EAE+G,CAAC;AAChJ,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAIhE,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;iBAgB/B,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAIlE,eAAO,MAAM,uBAAuB;;;iBAGlC,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAKxE,eAAO,MAAM,wBAAwB;;;iBAGnC,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE1E,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;iBAS7B,CAAC;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAI9D,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAI9B,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAIhE,eAAO,MAAM,iBAAiB;;;;;EAEmH,CAAC;AAGlJ,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;;2BAiBnC,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAI1E,eAAO,MAAM,wBAAwB,QAAa,CAAC;AACnD,eAAO,MAAM,gBAAgB,QAAyB,CAAC;AAEvD,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAalB,CAAC;AACd,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D,eAAO,MAAM,wBAAwB;;;kBAKxB,CAAC;AACd,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAI1E,eAAO,MAAM,eAAe;;;;;;kBAQf,CAAC;AACd,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAExD,eAAO,MAAM,wBAAwB;;;;;;;;;;;;EAIhC,CAAC;AACN,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAI1E,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;yBAGrC,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAE9E,eAAO,MAAM,sBAAsB;;;;;;;;;;;;kBAOtB,CAAC;AACd,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEtE,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;yBAQlC,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAIxE,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;kBAUtB,CAAC;AACd,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEtE,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;yBAAmJ,CAAC;AACzL,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAI1E,eAAO,MAAM,mBAAmB;;;;;;;;;;;;iBAE9B,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAQhE,eAAO,MAAM,qBAAqB;;;;iBAIhC,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE,eAAO,MAAM,sBAAsB;;;;;;;;iBAIjC,CAAC;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEtE,eAAO,MAAM,qBAAqB;;;;;;;;;;;kBAOrB,CAAC;AACd,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE,eAAO,MAAM,qBAAqB;;;;;;kBAMrB,CAAC;AAEd,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;;;;yBAA2E,CAAC;AACpH,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;iBAAsD,CAAC;AAC3F,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;kBAAuE,CAAC;AAC7G,eAAO,MAAM,8BAA8B;;iBAAgJ,CAAC"}
+{"version":3,"file":"keyring.d.ts","sourceRoot":"","sources":["../../src/schemas/keyring.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAUxB,eAAO,MAAM,cAAc,QAAyB,CAAC;AACrD,eAAO,MAAM,sBAAsB,aAAoG,CAAC;AAIxI,eAAO,MAAM,eAAe,QAAoC,CAAC;AACjE,eAAO,MAAM,uBAAuB,aAGqF,CAAC;AAE1H,eAAO,MAAM,sBAAsB;;;;EAI9B,CAAC;AACN,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAItE,eAAO,MAAM,mBAAmB,MAAM,CAAC;AACvC,eAAO,MAAM,oBAAoB,aAKmF,CAAC;AACrH,eAAO,MAAM,kBAAkB,QAA+C,CAAC;AAC/E,eAAO,MAAM,oBAAoB,aAA8H,CAAC;AAChK,eAAO,MAAM,oBAAoB,KAAK,CAAC;AAEvC,eAAO,MAAM,mBAAmB;;;;;EAE+G,CAAC;AAChJ,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAIhE,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;iBAgB/B,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAIlE,eAAO,MAAM,uBAAuB;;;iBAGlC,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAKxE,eAAO,MAAM,wBAAwB;;;iBAGnC,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAI1E,eAAO,MAAM,qBAAqB;;;;;;iBAMhC,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;iBAW7B,CAAC;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAI9D,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAI9B,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAIhE,eAAO,MAAM,iBAAiB;;;;;EAEmH,CAAC;AAGlJ,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;;2BAiBnC,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAI1E,eAAO,MAAM,wBAAwB,QAAa,CAAC;AACnD,eAAO,MAAM,gBAAgB,QAAyB,CAAC;AAEvD,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAalB,CAAC;AACd,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D,eAAO,MAAM,wBAAwB;;;kBAKxB,CAAC;AACd,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAI1E,eAAO,MAAM,eAAe;;;;;;kBAQf,CAAC;AACd,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAExD,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;EAIhC,CAAC;AACN,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAI1E,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;;yBAGrC,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAE9E,eAAO,MAAM,sBAAsB;;;;;;;;;;;;kBAOtB,CAAC;AACd,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEtE,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;yBAQlC,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAIxE,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;kBAUtB,CAAC;AACd,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEtE,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;yBAAmJ,CAAC;AACzL,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAI1E,eAAO,MAAM,mBAAmB;;;;;;;;;;;;iBAE9B,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAQhE,eAAO,MAAM,qBAAqB;;;;iBAIhC,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE,eAAO,MAAM,sBAAsB;;;;;;;;iBAIjC,CAAC;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEtE,eAAO,MAAM,qBAAqB;;;;;;;;;;;kBAOrB,CAAC;AACd,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE,eAAO,MAAM,qBAAqB;;;;;;kBAMrB,CAAC;AAEd,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;;;;;yBAA2E,CAAC;AACpH,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;iBAAsD,CAAC;AAC3F,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;kBAAuE,CAAC;AAC7G,eAAO,MAAM,8BAA8B;;iBAAgJ,CAAC;AAO5L,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;4BAsB9B,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAGhE,eAAO,MAAM,0BAA0B;;;;;;;;;;EAIlC,CAAC;AACN,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAM9E,eAAO,MAAM,yBAAyB,OAAO,CAAC;AAC9C,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAexB,CAAC;AACd,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE1E,eAAO,MAAM,2BAA2B;;;;;;EAInC,CAAC;AACN,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAEhF,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;;;yBAQrC,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAS9E,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAcjB,CAAC;AACd,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE5D,eAAO,MAAM,uBAAuB;;;;;EAE2F,CAAC;AAChI,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAExE,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yBAQlC,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAGxE,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAMnC,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAS1E,eAAO,MAAM,sBAAsB;;;;;kBAOtB,CAAC;AACd,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEtE,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;;;;;;;yBAGvC,CAAC;AACH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAElF,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAUtB,CAAC;AACd,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEtE,eAAO,MAAM,4BAA4B;;;kBAK5B,CAAC;AACd,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAElF,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yBASvC,CAAC;AACH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC"}

package/dist/schemas/keyring.js

@@ -47,15 +47,24 @@ export const KeyringSandboxKeysSchema = z.object({
     sign: KeyringPublicKeySchema.describe("Verifies the grants this sandbox signs (Ed25519)."),
     seal: KeyringPublicKeySchema.describe("What a value released to this sandbox is sealed to (X25519)."),
 });
+export const KeyringRememberSchema = z.object({
+    browser: z.boolean().describe("Sign-ins in a browser with the Intentic extension."),
+    terminal: z.boolean().describe("ssh, sudo and git prompts on this computer, and git's credential helper."),
+    apps: z.boolean().describe("Password fields in programs on this computer, typed once into the keyring's own box."),
+    phone: z.boolean().describe("The paired phone's autofill."),
+    sandbox: z.boolean().describe("Prompts that hide what is typed, in a sandbox terminal the person types into."),
+});
 export const KeyringStateSchema = z.object({
     version: z.string().describe("The keyring's own release."),
     locked: z.boolean().describe("Whether the vault is locked. Locked, `while-here` entries ask like `each-use` ones."),
     unlockedUntil: z.number().optional().describe("When the current unlock ends, in milliseconds. Absent while locked."),
     unlock: z
-        .array(z.enum(["hello", "passphrase"]))
-        .describe("How a person unlocks it here: Windows Hello, or the keyring's passphrase."),
+        .array(z.enum(["hello", "passphrase", "polkit"]))
+        .describe("How a person unlocks it here: Windows Hello, the keyring's passphrase (its recovery key), or polkit's own check on Linux."),
     keys: KeyringDeviceKeysSchema.optional().describe("Absent until the keyring is set up: there is no vault, so no inbox to seal a value to."),
     pendingInbox: z.number().int().nonnegative().describe("Values sent to be kept that wait for the next unlock."),
+    pendingCaptures: z.number().int().nonnegative().optional().describe("Credentials seen in use while locked, kept sealed until the next unlock. Absent from a keyring older than 2026-10-19."),
+    remember: KeyringRememberSchema.optional().describe("Which sources the person let the keyring remember passwords from, so a collector knows whether to send one. Absent before setup and from an older keyring."),
 });
 export const KeyringSharesSchema = z.object({
     keyring: KeyringStateSchema.optional().describe("The keyring on this computer. Absent when none is installed or it does not answer."),
@@ -108,8 +117,8 @@ export const SealedBoxSchema = z
 })
     .strict();
 export const KeyringRefusalCodeSchema = z
-    .enum(["no-keyring", "locked", "declined", "unknown", "not-shared", "bad-grant", "expired", "replayed", "guard", "unavailable", "busy"])
-    .describe("Why: no keyring here; locked with nobody to unlock it; the person said no; no such entry; not shared with this sandbox; a grant that does not verify; one past its time; one already spent; the focused window or field is not one it may go to; its password manager did not answer; another prompt is open.");
+    .enum(["no-keyring", "locked", "declined", "unknown", "not-shared", "bad-grant", "expired", "replayed", "guard", "unavailable", "busy", "pending"])
+    .describe("Why: no keyring here; locked with nobody to unlock it; the person said no; no such entry; not shared with this sandbox; a grant that does not verify; one past its time; one already spent; the focused window or field is not one it may go to; its password manager did not answer; another prompt is open; nobody has answered yet, and the request waits in the Passwords app.");
 const refusal = z.object({ ok: z.literal(false), code: KeyringRefusalCodeSchema, refusal: z.string().describe("What happened, in words a person can act on.") });
 export const KeyringReleaseResultSchema = z.discriminatedUnion("ok", [
     z.object({ ok: z.literal(true), sealed: SealedBoxSchema, asked: z.boolean().describe("Whether the person at the computer was asked.") }),
@@ -173,4 +182,130 @@ export const KeyringSyncPairResultSchema = z.discriminatedUnion("ok", [z.object(
 export const KeyringSyncOutboxSchema = z.object({ items: z.array(KeyringSyncItemSchema) });
 export const KeyringSyncDeliverSchema = z.object({ items: z.array(KeyringSyncItemSchema).max(64) }).strict();
 export const KeyringSyncDeliverResultSchema = z.object({ accepted: z.number().int().nonnegative().describe("How many it took; the rest were not from a paired keyring or did not open.") });
+export const KeyringOriginSchema = z.discriminatedUnion("kind", [
+    z.object({ kind: z.literal("site"), host: z.string().min(1).max(253).describe("The page's host, `github.com`; never a path.") }).strict(),
+    z
+        .object({
+        kind: z.literal("program"),
+        program: KeyringProgramSchema,
+        label: z.string().max(200).optional().describe("The program's own name for people, `FortiClient VPN`, when the window says it."),
+    })
+        .strict(),
+    z.object({ kind: z.literal("package"), package: KeyringPackageSchema, label: z.string().max(200).optional() }).strict(),
+    z.object({ kind: z.literal("ssh"), target: z.string().min(1).max(300).describe("`user@host`, as ssh's prompt names it.") }).strict(),
+    z.object({ kind: z.literal("ssh-key"), path: z.string().min(1).max(1000) }).strict(),
+    z.object({ kind: z.literal("sudo"), user: z.string().max(64).optional() }).strict(),
+    z.object({ kind: z.literal("git"), url: z.string().min(1).max(500).describe("`https://host`, as git's credential helper or askpass names it.") }).strict(),
+    z
+        .object({
+        kind: z.literal("prompt"),
+        text: z.string().min(1).max(300).describe("The prompt's own words, `Password for npm:`."),
+        command: z.string().max(200).optional().describe("The command that asked, `npm login`, when known."),
+        sandbox: z.string().url().optional().describe("The sandbox whose terminal asked, for a prompt seen there rather than on this computer."),
+    })
+        .strict(),
+]);
+export const KeyringCaptureSourceSchema = z
+    .enum(["browser", "askpass", "git", "app", "phone", "terminal", "import", "agent", "manual"])
+    .describe("What saw it: the browser extension, an ssh/sudo/git prompt answered through the keyring, git's credential helper, a password field in an app on this computer, the phone's autofill, a sandbox terminal's prompt, an import, an agent's `secrets ask`, or the person adding it by hand.");
+export const KEYRING_CAPTURE_BATCH_MAX = 5000;
+export const KeyringCaptureItemSchema = z
+    .object({
+    origin: KeyringOriginSchema,
+    username: z.string().max(256).optional().describe("The account it signs in as, when the form or prompt said. Not a secret."),
+    sealed: SealedBoxSchema,
+    source: KeyringCaptureSourceSchema,
+    via: z.string().min(1).max(200).describe("Who saw it, in words for the title line: `Brave`, `Pixel 8`, `intentic-dev`. Also bound into the seal."),
+    kind: z.enum(["password", "text"]).default("password"),
+    title: z.string().max(200).optional().describe("The site's or app's own name, when it said one; the keyring derives one otherwise."),
+    at: z.number().int().describe("When it was seen, in milliseconds. Also bound into the seal."),
+    failed: z
+        .boolean()
+        .optional()
+        .describe("The last value captured for this origin and user did not work (ssh asked again, git erased it, the form came back): replace it rather than keep it as history."),
+})
+    .strict();
+export const KeyringCaptureOutcomeSchema = z
+    .enum(["saved", "updated", "unchanged", "pending", "skipped"])
+    .describe("A new entry; a new value for an existing one (the old kept in its history); the same value it already had; kept sealed until the next unlock; not kept, because remembering is off for its source or its origin is on the never-save list.");
+export const KeyringCaptureResultSchema = z.discriminatedUnion("ok", [
+    z.object({
+        ok: z.literal(true),
+        outcome: KeyringCaptureOutcomeSchema,
+        name: KeyringSecretNameSchema.optional().describe("The entry it went to. Absent while pending or skipped."),
+        title: z.string().optional().describe("That entry's title, for the 'Saved github.com' notice."),
+    }),
+    refusal,
+]);
+export const KeyringNeedSchema = z
+    .object({
+    origin: KeyringOriginSchema,
+    username: z.string().max(256).optional().describe("The account wanted, when the agent knows it."),
+    detail: z.string().min(1).max(300).describe("What it is for, in words for the prompt: `sign in to push the release branch`."),
+    conversation: z.string().max(200).optional(),
+    purpose: z.enum(["agent", "owner"]).default("agent"),
+    typeOnce: z
+        .boolean()
+        .default(false)
+        .describe("Nothing matched on any of the owner's computers: offer the person here the keyring's type-once box. Without it, a keyring with no match answers `unknown` at once, so the sandbox can ask the next computer without a box opening on each."),
+})
+    .strict();
+export const KeyringNeedAnswerSchema = z
+    .enum(["once", "while-here", "always", "deny"])
+    .describe("The person's answer: this one use (an `each-use` share), unasked while unlocked, a copy in the sandbox, or no.");
+export const KeyringNeedResultSchema = z.discriminatedUnion("ok", [
+    z.object({
+        ok: z.literal(true),
+        pointer: KeyringPointerSchema.describe("The entry now shared with the asking sandbox, as its next `shares` read will also list it."),
+        asked: z.boolean(),
+        saved: z.boolean().describe("Nothing matched, and the person typed it once into the keyring's own box: a new entry, kept here and shared."),
+    }),
+    refusal,
+]);
+export const KeyringPendingNeedSchema = z.object({
+    id: z.string().regex(KEYRING_NONCE_RE),
+    sandbox: z.string().url(),
+    need: KeyringNeedSchema,
+    matches: z.array(KeyringSecretNameSchema).describe("The entries that fit, best first. Empty: none yet, the app offers to type one once."),
+    at: z.number().int(),
+});
+export const KeyringPhoneKeysSchema = z
+    .object({
+    device: z.string().min(1).max(128).describe("The phone, by its device card."),
+    label: z.string().min(1).max(200).describe("The phone's name for people, `Pixel 8`."),
+    seal: KeyringPublicKeySchema,
+    presence: z.string().min(1).max(512).describe("The presence key, X.509 SubjectPublicKeyInfo DER, base64."),
+})
+    .strict();
+export const KeyringPhonePairResultSchema = z.discriminatedUnion("ok", [
+    z.object({ ok: z.literal(true), fingerprint: z.string().describe("The keyring's own fingerprint, for the phone to show beside its own.") }),
+    refusal,
+]);
+export const KeyringPhoneFillSchema = z
+    .object({
+    v: z.literal(1),
+    device: z.string().min(1).max(128),
+    origin: KeyringOriginSchema.describe("Where the phone is filling: a `package`, or a `site` for a browser on the phone."),
+    username: z.string().max(256).optional(),
+    nonce: z.string().regex(KEYRING_NONCE_RE),
+    issuedAt: z.number().int(),
+    expiresAt: z.number().int(),
+})
+    .strict();
+export const SignedKeyringPhoneFillSchema = z
+    .object({
+    payload: z.string().min(1).max(4096).describe("The fill request's JSON, base64url."),
+    sig: z.string().min(1).max(256).describe("The presence key's ECDSA P-256 signature (DER) over the payload, base64url."),
+})
+    .strict();
+export const KeyringPhoneFillResultSchema = z.discriminatedUnion("ok", [
+    z.object({
+        ok: z.literal(true),
+        username: z.string().max(256).optional(),
+        sealed: SealedBoxSchema.describe("The value, sealed to the phone's `seal` key for `{ kind: \"phone\" }`."),
+        name: KeyringSecretNameSchema,
+        title: z.string(),
+    }),
+    refusal,
+]);
 //# sourceMappingURL=keyring.js.map