@joe-broadhead/messaging 0.0.0-stage → 0.7.0

package/dist/types/core/schema/relay.d.ts

@@ -0,0 +1,1122 @@
+/**
+ * Relay binding (urn:messaging:binding:relay:v1): JSON text frames over one WebSocket per machine.
+ * Each frame is one JSON object of at most LIMITS.frameBytes, discriminated by `t`.
+ * Receivers ignore frames with an unknown `t` (forward compatibility); they never drop the link for it.
+ *
+ * Connection:
+ *   relay  → challenge {nonce}
+ *   client → [pre-auth, optional] join {team, inviteId, proof} → relay: roster {entries}   (only for an open invite)
+ *            proof = Ed25519(invite seed, DOMAIN.inviteJoin + JCS({relay, team, inviteId, nonce})), verified under invitePub
+ *   client → [pre-auth, optional] roster.append {entry}  (genesis to create a team, or invite.redeem to join)
+ *   client → hello {team, machine, ts, sig}   sig = Ed25519(DOMAIN.relayAuth + JCS({proto, relay, team, machine, nonce, ts}))
+ *   relay  → welcome {head, online}, then the latest presence envelope of every member, then queued deliveries
+ *
+ * After welcome:
+ *   send {env}          relay checks header + signature + membership, stores, forwards; replies ack|nack by env.id
+ *   deliver {env}       relay → recipient. Recipient replies recv.ack {id} after storing durably; the relay then drops it
+ *   presence {env}      relay keeps the latest per machine and fans it out to online team members as deliver
+ *   roster.append       admin entries; relay validates against its head, appends, replies roster.ok, broadcasts roster
+ *   roster.sync {after} relay replies roster {entries with seq > after}
+ *   peer {machine, online} relay → members on connect/disconnect
+ * When a member is removed, the relay closes its connection with code 4003.
+ */
+import { z } from "zod";
+export declare const ChallengeFrame: z.ZodObject<{
+    t: z.ZodLiteral<"challenge">;
+    proto: z.ZodLiteral<"messaging-relay/1">;
+    relay: z.ZodString;
+    nonce: z.ZodString;
+}, z.core.$strip>;
+export declare const WelcomeFrame: z.ZodObject<{
+    t: z.ZodLiteral<"welcome">;
+    head: z.ZodObject<{
+        seq: z.ZodNumber;
+        hash: z.ZodString;
+    }, z.core.$strip>;
+    online: z.ZodArray<z.ZodString>;
+}, z.core.$strip>;
+/**
+ * Deliveries are parsed loosely so a v1 client can still ack (and answer with a rejected receipt) an
+ * envelope type added later and forwarded by a newer relay. The daemon verifies the raw envelope itself.
+ */
+export declare const DeliverFrame: z.ZodObject<{
+    t: z.ZodLiteral<"deliver">;
+    env: z.ZodObject<{
+        v: z.ZodString;
+        id: z.ZodString;
+        type: z.ZodString;
+    }, z.core.$loose>;
+}, z.core.$strip>;
+export declare const AckFrame: z.ZodObject<{
+    t: z.ZodLiteral<"ack">;
+    id: z.ZodString;
+    stage: z.ZodLiteral<"relayed">;
+}, z.core.$strip>;
+/** `retryAfterMs`: with `rate_limited` from a directory frame (spec §7, "Directory frames"), when to ask again. */
+export declare const NackFrame: z.ZodObject<{
+    t: z.ZodLiteral<"nack">;
+    id: z.ZodString;
+    code: z.ZodEnum<{
+        expired: "expired";
+        invalid_request: "invalid_request";
+        not_member: "not_member";
+        bad_signature: "bad_signature";
+        unknown_session: "unknown_session";
+        ambiguous_address: "ambiguous_address";
+        no_recipients: "no_recipients";
+        unknown_address: "unknown_address";
+        refused: "refused";
+        declined: "declined";
+        request_required: "request_required";
+        rate_limited: "rate_limited";
+        loop_guard: "loop_guard";
+        too_large: "too_large";
+        secret_refused: "secret_refused";
+        duplicate: "duplicate";
+        relay_unavailable: "relay_unavailable";
+        not_found: "not_found";
+        invalid_state: "invalid_state";
+        forbidden: "forbidden";
+        guarded_turn: "guarded_turn";
+        roster_conflict: "roster_conflict";
+        invite_invalid: "invite_invalid";
+        no_identity: "no_identity";
+        binding_invalid: "binding_invalid";
+        jelly_unavailable: "jelly_unavailable";
+        log_conflict: "log_conflict";
+        device_limit: "device_limit";
+        admission_required: "admission_required";
+        admission_invalid: "admission_invalid";
+        directory_inconsistent: "directory_inconsistent";
+        unknown_device: "unknown_device";
+        directory_unavailable: "directory_unavailable";
+        login_unsupported: "login_unsupported";
+        login_denied: "login_denied";
+        grant_required: "grant_required";
+        grant_invalid: "grant_invalid";
+        ticket_required: "ticket_required";
+        ticket_invalid: "ticket_invalid";
+        daemon_unavailable: "daemon_unavailable";
+        daemon_mismatch: "daemon_mismatch";
+        internal: "internal";
+    }>;
+    message: z.ZodString;
+    retryAfterMs: z.ZodOptional<z.ZodNumber>;
+}, z.core.$strip>;
+/** `more`: the reply was paged; ask again with `after` = the last entry's seq. */
+export declare const RosterFrame: z.ZodObject<{
+    t: z.ZodLiteral<"roster">;
+    req: z.ZodOptional<z.ZodString>;
+    entries: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        prev: z.ZodNull;
+        kind: z.ZodLiteral<"genesis">;
+        body: z.ZodObject<{
+            name: z.ZodString;
+            founder: z.ZodObject<{
+                machine: z.ZodString;
+                enc: z.ZodString;
+                person: z.ZodString;
+                role: z.ZodEnum<{
+                    admin: "admin";
+                    member: "member";
+                }>;
+                label: z.ZodString;
+            }, z.core.$strip>;
+        }, z.core.$strip>;
+        v: z.ZodLiteral<"messaging/1">;
+        seq: z.ZodNumber;
+        ts: z.ZodNumber;
+        by: z.ZodString;
+        sig: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        kind: z.ZodLiteral<"member.add">;
+        body: z.ZodObject<{
+            machine: z.ZodString;
+            enc: z.ZodString;
+            person: z.ZodString;
+            role: z.ZodEnum<{
+                admin: "admin";
+                member: "member";
+            }>;
+            label: z.ZodString;
+        }, z.core.$strip>;
+        team: z.ZodString;
+        prev: z.ZodString;
+        v: z.ZodLiteral<"messaging/1">;
+        seq: z.ZodNumber;
+        ts: z.ZodNumber;
+        by: z.ZodString;
+        sig: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        kind: z.ZodLiteral<"member.remove">;
+        body: z.ZodObject<{
+            machine: z.ZodString;
+            reason: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>;
+        team: z.ZodString;
+        prev: z.ZodString;
+        v: z.ZodLiteral<"messaging/1">;
+        seq: z.ZodNumber;
+        ts: z.ZodNumber;
+        by: z.ZodString;
+        sig: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        kind: z.ZodLiteral<"member.role">;
+        body: z.ZodObject<{
+            machine: z.ZodString;
+            role: z.ZodEnum<{
+                admin: "admin";
+                member: "member";
+            }>;
+        }, z.core.$strip>;
+        team: z.ZodString;
+        prev: z.ZodString;
+        v: z.ZodLiteral<"messaging/1">;
+        seq: z.ZodNumber;
+        ts: z.ZodNumber;
+        by: z.ZodString;
+        sig: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        kind: z.ZodLiteral<"member.rekey">;
+        body: z.ZodObject<{
+            machine: z.ZodString;
+            enc: z.ZodString;
+        }, z.core.$strip>;
+        team: z.ZodString;
+        prev: z.ZodString;
+        v: z.ZodLiteral<"messaging/1">;
+        seq: z.ZodNumber;
+        ts: z.ZodNumber;
+        by: z.ZodString;
+        sig: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        kind: z.ZodLiteral<"invite.create">;
+        body: z.ZodObject<{
+            inviteId: z.ZodString;
+            invitePub: z.ZodString;
+            person: z.ZodString;
+            expires: z.ZodNumber;
+        }, z.core.$strip>;
+        team: z.ZodString;
+        prev: z.ZodString;
+        v: z.ZodLiteral<"messaging/1">;
+        seq: z.ZodNumber;
+        ts: z.ZodNumber;
+        by: z.ZodString;
+        sig: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        kind: z.ZodLiteral<"invite.redeem">;
+        body: z.ZodObject<{
+            inviteId: z.ZodString;
+            proof: z.ZodString;
+            member: z.ZodObject<{
+                machine: z.ZodString;
+                enc: z.ZodString;
+                person: z.ZodString;
+                role: z.ZodEnum<{
+                    admin: "admin";
+                    member: "member";
+                }>;
+                label: z.ZodString;
+            }, z.core.$strip>;
+        }, z.core.$strip>;
+        team: z.ZodString;
+        prev: z.ZodString;
+        v: z.ZodLiteral<"messaging/1">;
+        seq: z.ZodNumber;
+        ts: z.ZodNumber;
+        by: z.ZodString;
+        sig: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        kind: z.ZodLiteral<"invite.revoke">;
+        body: z.ZodObject<{
+            inviteId: z.ZodString;
+        }, z.core.$strip>;
+        team: z.ZodString;
+        prev: z.ZodString;
+        v: z.ZodLiteral<"messaging/1">;
+        seq: z.ZodNumber;
+        ts: z.ZodNumber;
+        by: z.ZodString;
+        sig: z.ZodString;
+    }, z.core.$strip>], "kind">>;
+    more: z.ZodOptional<z.ZodBoolean>;
+}, z.core.$strip>;
+export declare const RosterOkFrame: z.ZodObject<{
+    t: z.ZodLiteral<"roster.ok">;
+    req: z.ZodString;
+    head: z.ZodObject<{
+        seq: z.ZodNumber;
+        hash: z.ZodString;
+    }, z.core.$strip>;
+}, z.core.$strip>;
+export declare const PeerFrame: z.ZodObject<{
+    t: z.ZodLiteral<"peer">;
+    machine: z.ZodString;
+    online: z.ZodBoolean;
+}, z.core.$strip>;
+export declare const ErrorFrame: z.ZodObject<{
+    t: z.ZodLiteral<"error">;
+    code: z.ZodEnum<{
+        expired: "expired";
+        invalid_request: "invalid_request";
+        not_member: "not_member";
+        bad_signature: "bad_signature";
+        unknown_session: "unknown_session";
+        ambiguous_address: "ambiguous_address";
+        no_recipients: "no_recipients";
+        unknown_address: "unknown_address";
+        refused: "refused";
+        declined: "declined";
+        request_required: "request_required";
+        rate_limited: "rate_limited";
+        loop_guard: "loop_guard";
+        too_large: "too_large";
+        secret_refused: "secret_refused";
+        duplicate: "duplicate";
+        relay_unavailable: "relay_unavailable";
+        not_found: "not_found";
+        invalid_state: "invalid_state";
+        forbidden: "forbidden";
+        guarded_turn: "guarded_turn";
+        roster_conflict: "roster_conflict";
+        invite_invalid: "invite_invalid";
+        no_identity: "no_identity";
+        binding_invalid: "binding_invalid";
+        jelly_unavailable: "jelly_unavailable";
+        log_conflict: "log_conflict";
+        device_limit: "device_limit";
+        admission_required: "admission_required";
+        admission_invalid: "admission_invalid";
+        directory_inconsistent: "directory_inconsistent";
+        unknown_device: "unknown_device";
+        directory_unavailable: "directory_unavailable";
+        login_unsupported: "login_unsupported";
+        login_denied: "login_denied";
+        grant_required: "grant_required";
+        grant_invalid: "grant_invalid";
+        ticket_required: "ticket_required";
+        ticket_invalid: "ticket_invalid";
+        daemon_unavailable: "daemon_unavailable";
+        daemon_mismatch: "daemon_mismatch";
+        internal: "internal";
+    }>;
+    message: z.ZodString;
+}, z.core.$strip>;
+export declare const PongFrame: z.ZodObject<{
+    t: z.ZodLiteral<"pong">;
+}, z.core.$strip>;
+export declare const RelayToClient: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    t: z.ZodLiteral<"challenge">;
+    proto: z.ZodLiteral<"messaging-relay/1">;
+    relay: z.ZodString;
+    nonce: z.ZodString;
+}, z.core.$strip>, z.ZodObject<{
+    t: z.ZodLiteral<"welcome">;
+    head: z.ZodObject<{
+        seq: z.ZodNumber;
+        hash: z.ZodString;
+    }, z.core.$strip>;
+    online: z.ZodArray<z.ZodString>;
+}, z.core.$strip>, z.ZodObject<{
+    t: z.ZodLiteral<"deliver">;
+    env: z.ZodObject<{
+        v: z.ZodString;
+        id: z.ZodString;
+        type: z.ZodString;
+    }, z.core.$loose>;
+}, z.core.$strip>, z.ZodObject<{
+    t: z.ZodLiteral<"ack">;
+    id: z.ZodString;
+    stage: z.ZodLiteral<"relayed">;
+}, z.core.$strip>, z.ZodObject<{
+    t: z.ZodLiteral<"nack">;
+    id: z.ZodString;
+    code: z.ZodEnum<{
+        expired: "expired";
+        invalid_request: "invalid_request";
+        not_member: "not_member";
+        bad_signature: "bad_signature";
+        unknown_session: "unknown_session";
+        ambiguous_address: "ambiguous_address";
+        no_recipients: "no_recipients";
+        unknown_address: "unknown_address";
+        refused: "refused";
+        declined: "declined";
+        request_required: "request_required";
+        rate_limited: "rate_limited";
+        loop_guard: "loop_guard";
+        too_large: "too_large";
+        secret_refused: "secret_refused";
+        duplicate: "duplicate";
+        relay_unavailable: "relay_unavailable";
+        not_found: "not_found";
+        invalid_state: "invalid_state";
+        forbidden: "forbidden";
+        guarded_turn: "guarded_turn";
+        roster_conflict: "roster_conflict";
+        invite_invalid: "invite_invalid";
+        no_identity: "no_identity";
+        binding_invalid: "binding_invalid";
+        jelly_unavailable: "jelly_unavailable";
+        log_conflict: "log_conflict";
+        device_limit: "device_limit";
+        admission_required: "admission_required";
+        admission_invalid: "admission_invalid";
+        directory_inconsistent: "directory_inconsistent";
+        unknown_device: "unknown_device";
+        directory_unavailable: "directory_unavailable";
+        login_unsupported: "login_unsupported";
+        login_denied: "login_denied";
+        grant_required: "grant_required";
+        grant_invalid: "grant_invalid";
+        ticket_required: "ticket_required";
+        ticket_invalid: "ticket_invalid";
+        daemon_unavailable: "daemon_unavailable";
+        daemon_mismatch: "daemon_mismatch";
+        internal: "internal";
+    }>;
+    message: z.ZodString;
+    retryAfterMs: z.ZodOptional<z.ZodNumber>;
+}, z.core.$strip>, z.ZodObject<{
+    t: z.ZodLiteral<"roster">;
+    req: z.ZodOptional<z.ZodString>;
+    entries: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        prev: z.ZodNull;
+        kind: z.ZodLiteral<"genesis">;
+        body: z.ZodObject<{
+            name: z.ZodString;
+            founder: z.ZodObject<{
+                machine: z.ZodString;
+                enc: z.ZodString;
+                person: z.ZodString;
+                role: z.ZodEnum<{
+                    admin: "admin";
+                    member: "member";
+                }>;
+                label: z.ZodString;
+            }, z.core.$strip>;
+        }, z.core.$strip>;
+        v: z.ZodLiteral<"messaging/1">;
+        seq: z.ZodNumber;
+        ts: z.ZodNumber;
+        by: z.ZodString;
+        sig: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        kind: z.ZodLiteral<"member.add">;
+        body: z.ZodObject<{
+            machine: z.ZodString;
+            enc: z.ZodString;
+            person: z.ZodString;
+            role: z.ZodEnum<{
+                admin: "admin";
+                member: "member";
+            }>;
+            label: z.ZodString;
+        }, z.core.$strip>;
+        team: z.ZodString;
+        prev: z.ZodString;
+        v: z.ZodLiteral<"messaging/1">;
+        seq: z.ZodNumber;
+        ts: z.ZodNumber;
+        by: z.ZodString;
+        sig: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        kind: z.ZodLiteral<"member.remove">;
+        body: z.ZodObject<{
+            machine: z.ZodString;
+            reason: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>;
+        team: z.ZodString;
+        prev: z.ZodString;
+        v: z.ZodLiteral<"messaging/1">;
+        seq: z.ZodNumber;
+        ts: z.ZodNumber;
+        by: z.ZodString;
+        sig: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        kind: z.ZodLiteral<"member.role">;
+        body: z.ZodObject<{
+            machine: z.ZodString;
+            role: z.ZodEnum<{
+                admin: "admin";
+                member: "member";
+            }>;
+        }, z.core.$strip>;
+        team: z.ZodString;
+        prev: z.ZodString;
+        v: z.ZodLiteral<"messaging/1">;
+        seq: z.ZodNumber;
+        ts: z.ZodNumber;
+        by: z.ZodString;
+        sig: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        kind: z.ZodLiteral<"member.rekey">;
+        body: z.ZodObject<{
+            machine: z.ZodString;
+            enc: z.ZodString;
+        }, z.core.$strip>;
+        team: z.ZodString;
+        prev: z.ZodString;
+        v: z.ZodLiteral<"messaging/1">;
+        seq: z.ZodNumber;
+        ts: z.ZodNumber;
+        by: z.ZodString;
+        sig: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        kind: z.ZodLiteral<"invite.create">;
+        body: z.ZodObject<{
+            inviteId: z.ZodString;
+            invitePub: z.ZodString;
+            person: z.ZodString;
+            expires: z.ZodNumber;
+        }, z.core.$strip>;
+        team: z.ZodString;
+        prev: z.ZodString;
+        v: z.ZodLiteral<"messaging/1">;
+        seq: z.ZodNumber;
+        ts: z.ZodNumber;
+        by: z.ZodString;
+        sig: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        kind: z.ZodLiteral<"invite.redeem">;
+        body: z.ZodObject<{
+            inviteId: z.ZodString;
+            proof: z.ZodString;
+            member: z.ZodObject<{
+                machine: z.ZodString;
+                enc: z.ZodString;
+                person: z.ZodString;
+                role: z.ZodEnum<{
+                    admin: "admin";
+                    member: "member";
+                }>;
+                label: z.ZodString;
+            }, z.core.$strip>;
+        }, z.core.$strip>;
+        team: z.ZodString;
+        prev: z.ZodString;
+        v: z.ZodLiteral<"messaging/1">;
+        seq: z.ZodNumber;
+        ts: z.ZodNumber;
+        by: z.ZodString;
+        sig: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        kind: z.ZodLiteral<"invite.revoke">;
+        body: z.ZodObject<{
+            inviteId: z.ZodString;
+        }, z.core.$strip>;
+        team: z.ZodString;
+        prev: z.ZodString;
+        v: z.ZodLiteral<"messaging/1">;
+        seq: z.ZodNumber;
+        ts: z.ZodNumber;
+        by: z.ZodString;
+        sig: z.ZodString;
+    }, z.core.$strip>], "kind">>;
+    more: z.ZodOptional<z.ZodBoolean>;
+}, z.core.$strip>, z.ZodObject<{
+    t: z.ZodLiteral<"roster.ok">;
+    req: z.ZodString;
+    head: z.ZodObject<{
+        seq: z.ZodNumber;
+        hash: z.ZodString;
+    }, z.core.$strip>;
+}, z.core.$strip>, z.ZodObject<{
+    t: z.ZodLiteral<"peer">;
+    machine: z.ZodString;
+    online: z.ZodBoolean;
+}, z.core.$strip>, z.ZodObject<{
+    t: z.ZodLiteral<"error">;
+    code: z.ZodEnum<{
+        expired: "expired";
+        invalid_request: "invalid_request";
+        not_member: "not_member";
+        bad_signature: "bad_signature";
+        unknown_session: "unknown_session";
+        ambiguous_address: "ambiguous_address";
+        no_recipients: "no_recipients";
+        unknown_address: "unknown_address";
+        refused: "refused";
+        declined: "declined";
+        request_required: "request_required";
+        rate_limited: "rate_limited";
+        loop_guard: "loop_guard";
+        too_large: "too_large";
+        secret_refused: "secret_refused";
+        duplicate: "duplicate";
+        relay_unavailable: "relay_unavailable";
+        not_found: "not_found";
+        invalid_state: "invalid_state";
+        forbidden: "forbidden";
+        guarded_turn: "guarded_turn";
+        roster_conflict: "roster_conflict";
+        invite_invalid: "invite_invalid";
+        no_identity: "no_identity";
+        binding_invalid: "binding_invalid";
+        jelly_unavailable: "jelly_unavailable";
+        log_conflict: "log_conflict";
+        device_limit: "device_limit";
+        admission_required: "admission_required";
+        admission_invalid: "admission_invalid";
+        directory_inconsistent: "directory_inconsistent";
+        unknown_device: "unknown_device";
+        directory_unavailable: "directory_unavailable";
+        login_unsupported: "login_unsupported";
+        login_denied: "login_denied";
+        grant_required: "grant_required";
+        grant_invalid: "grant_invalid";
+        ticket_required: "ticket_required";
+        ticket_invalid: "ticket_invalid";
+        daemon_unavailable: "daemon_unavailable";
+        daemon_mismatch: "daemon_mismatch";
+        internal: "internal";
+    }>;
+    message: z.ZodString;
+}, z.core.$strip>, z.ZodObject<{
+    t: z.ZodLiteral<"pong">;
+}, z.core.$strip>], "t">;
+export type RelayToClient = z.infer<typeof RelayToClient>;
+export declare const JoinFrame: z.ZodObject<{
+    t: z.ZodLiteral<"join">;
+    req: z.ZodString;
+    team: z.ZodString;
+    inviteId: z.ZodString;
+    proof: z.ZodString;
+    after: z.ZodOptional<z.ZodNumber>;
+}, z.core.$strip>;
+export declare const RosterAppendFrame: z.ZodObject<{
+    t: z.ZodLiteral<"roster.append">;
+    req: z.ZodString;
+    entry: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        prev: z.ZodNull;
+        kind: z.ZodLiteral<"genesis">;
+        body: z.ZodObject<{
+            name: z.ZodString;
+            founder: z.ZodObject<{
+                machine: z.ZodString;
+                enc: z.ZodString;
+                person: z.ZodString;
+                role: z.ZodEnum<{
+                    admin: "admin";
+                    member: "member";
+                }>;
+                label: z.ZodString;
+            }, z.core.$strip>;
+        }, z.core.$strip>;
+        v: z.ZodLiteral<"messaging/1">;
+        seq: z.ZodNumber;
+        ts: z.ZodNumber;
+        by: z.ZodString;
+        sig: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        kind: z.ZodLiteral<"member.add">;
+        body: z.ZodObject<{
+            machine: z.ZodString;
+            enc: z.ZodString;
+            person: z.ZodString;
+            role: z.ZodEnum<{
+                admin: "admin";
+                member: "member";
+            }>;
+            label: z.ZodString;
+        }, z.core.$strip>;
+        team: z.ZodString;
+        prev: z.ZodString;
+        v: z.ZodLiteral<"messaging/1">;
+        seq: z.ZodNumber;
+        ts: z.ZodNumber;
+        by: z.ZodString;
+        sig: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        kind: z.ZodLiteral<"member.remove">;
+        body: z.ZodObject<{
+            machine: z.ZodString;
+            reason: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>;
+        team: z.ZodString;
+        prev: z.ZodString;
+        v: z.ZodLiteral<"messaging/1">;
+        seq: z.ZodNumber;
+        ts: z.ZodNumber;
+        by: z.ZodString;
+        sig: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        kind: z.ZodLiteral<"member.role">;
+        body: z.ZodObject<{
+            machine: z.ZodString;
+            role: z.ZodEnum<{
+                admin: "admin";
+                member: "member";
+            }>;
+        }, z.core.$strip>;
+        team: z.ZodString;
+        prev: z.ZodString;
+        v: z.ZodLiteral<"messaging/1">;
+        seq: z.ZodNumber;
+        ts: z.ZodNumber;
+        by: z.ZodString;
+        sig: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        kind: z.ZodLiteral<"member.rekey">;
+        body: z.ZodObject<{
+            machine: z.ZodString;
+            enc: z.ZodString;
+        }, z.core.$strip>;
+        team: z.ZodString;
+        prev: z.ZodString;
+        v: z.ZodLiteral<"messaging/1">;
+        seq: z.ZodNumber;
+        ts: z.ZodNumber;
+        by: z.ZodString;
+        sig: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        kind: z.ZodLiteral<"invite.create">;
+        body: z.ZodObject<{
+            inviteId: z.ZodString;
+            invitePub: z.ZodString;
+            person: z.ZodString;
+            expires: z.ZodNumber;
+        }, z.core.$strip>;
+        team: z.ZodString;
+        prev: z.ZodString;
+        v: z.ZodLiteral<"messaging/1">;
+        seq: z.ZodNumber;
+        ts: z.ZodNumber;
+        by: z.ZodString;
+        sig: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        kind: z.ZodLiteral<"invite.redeem">;
+        body: z.ZodObject<{
+            inviteId: z.ZodString;
+            proof: z.ZodString;
+            member: z.ZodObject<{
+                machine: z.ZodString;
+                enc: z.ZodString;
+                person: z.ZodString;
+                role: z.ZodEnum<{
+                    admin: "admin";
+                    member: "member";
+                }>;
+                label: z.ZodString;
+            }, z.core.$strip>;
+        }, z.core.$strip>;
+        team: z.ZodString;
+        prev: z.ZodString;
+        v: z.ZodLiteral<"messaging/1">;
+        seq: z.ZodNumber;
+        ts: z.ZodNumber;
+        by: z.ZodString;
+        sig: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        kind: z.ZodLiteral<"invite.revoke">;
+        body: z.ZodObject<{
+            inviteId: z.ZodString;
+        }, z.core.$strip>;
+        team: z.ZodString;
+        prev: z.ZodString;
+        v: z.ZodLiteral<"messaging/1">;
+        seq: z.ZodNumber;
+        ts: z.ZodNumber;
+        by: z.ZodString;
+        sig: z.ZodString;
+    }, z.core.$strip>], "kind">;
+}, z.core.$strip>;
+export declare const HelloFrame: z.ZodObject<{
+    t: z.ZodLiteral<"hello">;
+    team: z.ZodString;
+    machine: z.ZodString;
+    ts: z.ZodNumber;
+    sig: z.ZodString;
+}, z.core.$strip>;
+export declare const SendFrame: z.ZodObject<{
+    t: z.ZodLiteral<"send">;
+    env: z.ZodObject<{
+        v: z.ZodLiteral<"messaging/1">;
+        id: z.ZodString;
+        realm: z.ZodString;
+        type: z.ZodEnum<{
+            message: "message";
+            "task.cancel": "task.cancel";
+            receipt: "receipt";
+            presence: "presence";
+            "task.status": "task.status";
+            "task.artifact": "task.artifact";
+        }>;
+        from: z.ZodObject<{
+            person: z.ZodUnion<readonly [z.ZodString, z.ZodString]>;
+            device: z.ZodString;
+            agent: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>;
+        to: z.ZodUnion<readonly [z.ZodObject<{
+            person: z.ZodUnion<readonly [z.ZodString, z.ZodString]>;
+            device: z.ZodString;
+            agent: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>, z.ZodObject<{
+            team: z.ZodLiteral<true>;
+        }, z.core.$strip>]>;
+        ts: z.ZodNumber;
+        exp: z.ZodNumber;
+        anchor: z.ZodDiscriminatedUnion<[z.ZodObject<{
+            kind: z.ZodLiteral<"roster">;
+            seq: z.ZodNumber;
+            hash: z.ZodString;
+        }, z.core.$strip>, z.ZodObject<{
+            kind: z.ZodLiteral<"epoch">;
+            size: z.ZodNumber;
+            root: z.ZodString;
+        }, z.core.$strip>], "kind">;
+        class: z.ZodOptional<z.ZodEnum<{
+            self: "self";
+            request: "request";
+            contact: "contact";
+        }>>;
+        replyTo: z.ZodOptional<z.ZodString>;
+        enc: z.ZodEnum<{
+            none: "none";
+            "x25519-hkdf-sha256-a256gcm": "x25519-hkdf-sha256-a256gcm";
+        }>;
+        epk: z.ZodOptional<z.ZodString>;
+        nonce: z.ZodOptional<z.ZodString>;
+        body: z.ZodUnknown;
+        sig: z.ZodString;
+    }, z.core.$strip>;
+}, z.core.$strip>;
+export declare const RecvAckFrame: z.ZodObject<{
+    t: z.ZodLiteral<"recv.ack">;
+    id: z.ZodString;
+}, z.core.$strip>;
+export declare const PresenceFrame: z.ZodObject<{
+    t: z.ZodLiteral<"presence">;
+    env: z.ZodObject<{
+        v: z.ZodLiteral<"messaging/1">;
+        id: z.ZodString;
+        realm: z.ZodString;
+        type: z.ZodEnum<{
+            message: "message";
+            "task.cancel": "task.cancel";
+            receipt: "receipt";
+            presence: "presence";
+            "task.status": "task.status";
+            "task.artifact": "task.artifact";
+        }>;
+        from: z.ZodObject<{
+            person: z.ZodUnion<readonly [z.ZodString, z.ZodString]>;
+            device: z.ZodString;
+            agent: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>;
+        to: z.ZodUnion<readonly [z.ZodObject<{
+            person: z.ZodUnion<readonly [z.ZodString, z.ZodString]>;
+            device: z.ZodString;
+            agent: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>, z.ZodObject<{
+            team: z.ZodLiteral<true>;
+        }, z.core.$strip>]>;
+        ts: z.ZodNumber;
+        exp: z.ZodNumber;
+        anchor: z.ZodDiscriminatedUnion<[z.ZodObject<{
+            kind: z.ZodLiteral<"roster">;
+            seq: z.ZodNumber;
+            hash: z.ZodString;
+        }, z.core.$strip>, z.ZodObject<{
+            kind: z.ZodLiteral<"epoch">;
+            size: z.ZodNumber;
+            root: z.ZodString;
+        }, z.core.$strip>], "kind">;
+        class: z.ZodOptional<z.ZodEnum<{
+            self: "self";
+            request: "request";
+            contact: "contact";
+        }>>;
+        replyTo: z.ZodOptional<z.ZodString>;
+        enc: z.ZodEnum<{
+            none: "none";
+            "x25519-hkdf-sha256-a256gcm": "x25519-hkdf-sha256-a256gcm";
+        }>;
+        epk: z.ZodOptional<z.ZodString>;
+        nonce: z.ZodOptional<z.ZodString>;
+        body: z.ZodUnknown;
+        sig: z.ZodString;
+    }, z.core.$strip>;
+}, z.core.$strip>;
+export declare const RosterSyncFrame: z.ZodObject<{
+    t: z.ZodLiteral<"roster.sync">;
+    req: z.ZodString;
+    after: z.ZodNumber;
+}, z.core.$strip>;
+export declare const PingFrame: z.ZodObject<{
+    t: z.ZodLiteral<"ping">;
+}, z.core.$strip>;
+export declare const ClientToRelay: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    t: z.ZodLiteral<"join">;
+    req: z.ZodString;
+    team: z.ZodString;
+    inviteId: z.ZodString;
+    proof: z.ZodString;
+    after: z.ZodOptional<z.ZodNumber>;
+}, z.core.$strip>, z.ZodObject<{
+    t: z.ZodLiteral<"roster.append">;
+    req: z.ZodString;
+    entry: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        prev: z.ZodNull;
+        kind: z.ZodLiteral<"genesis">;
+        body: z.ZodObject<{
+            name: z.ZodString;
+            founder: z.ZodObject<{
+                machine: z.ZodString;
+                enc: z.ZodString;
+                person: z.ZodString;
+                role: z.ZodEnum<{
+                    admin: "admin";
+                    member: "member";
+                }>;
+                label: z.ZodString;
+            }, z.core.$strip>;
+        }, z.core.$strip>;
+        v: z.ZodLiteral<"messaging/1">;
+        seq: z.ZodNumber;
+        ts: z.ZodNumber;
+        by: z.ZodString;
+        sig: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        kind: z.ZodLiteral<"member.add">;
+        body: z.ZodObject<{
+            machine: z.ZodString;
+            enc: z.ZodString;
+            person: z.ZodString;
+            role: z.ZodEnum<{
+                admin: "admin";
+                member: "member";
+            }>;
+            label: z.ZodString;
+        }, z.core.$strip>;
+        team: z.ZodString;
+        prev: z.ZodString;
+        v: z.ZodLiteral<"messaging/1">;
+        seq: z.ZodNumber;
+        ts: z.ZodNumber;
+        by: z.ZodString;
+        sig: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        kind: z.ZodLiteral<"member.remove">;
+        body: z.ZodObject<{
+            machine: z.ZodString;
+            reason: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>;
+        team: z.ZodString;
+        prev: z.ZodString;
+        v: z.ZodLiteral<"messaging/1">;
+        seq: z.ZodNumber;
+        ts: z.ZodNumber;
+        by: z.ZodString;
+        sig: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        kind: z.ZodLiteral<"member.role">;
+        body: z.ZodObject<{
+            machine: z.ZodString;
+            role: z.ZodEnum<{
+                admin: "admin";
+                member: "member";
+            }>;
+        }, z.core.$strip>;
+        team: z.ZodString;
+        prev: z.ZodString;
+        v: z.ZodLiteral<"messaging/1">;
+        seq: z.ZodNumber;
+        ts: z.ZodNumber;
+        by: z.ZodString;
+        sig: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        kind: z.ZodLiteral<"member.rekey">;
+        body: z.ZodObject<{
+            machine: z.ZodString;
+            enc: z.ZodString;
+        }, z.core.$strip>;
+        team: z.ZodString;
+        prev: z.ZodString;
+        v: z.ZodLiteral<"messaging/1">;
+        seq: z.ZodNumber;
+        ts: z.ZodNumber;
+        by: z.ZodString;
+        sig: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        kind: z.ZodLiteral<"invite.create">;
+        body: z.ZodObject<{
+            inviteId: z.ZodString;
+            invitePub: z.ZodString;
+            person: z.ZodString;
+            expires: z.ZodNumber;
+        }, z.core.$strip>;
+        team: z.ZodString;
+        prev: z.ZodString;
+        v: z.ZodLiteral<"messaging/1">;
+        seq: z.ZodNumber;
+        ts: z.ZodNumber;
+        by: z.ZodString;
+        sig: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        kind: z.ZodLiteral<"invite.redeem">;
+        body: z.ZodObject<{
+            inviteId: z.ZodString;
+            proof: z.ZodString;
+            member: z.ZodObject<{
+                machine: z.ZodString;
+                enc: z.ZodString;
+                person: z.ZodString;
+                role: z.ZodEnum<{
+                    admin: "admin";
+                    member: "member";
+                }>;
+                label: z.ZodString;
+            }, z.core.$strip>;
+        }, z.core.$strip>;
+        team: z.ZodString;
+        prev: z.ZodString;
+        v: z.ZodLiteral<"messaging/1">;
+        seq: z.ZodNumber;
+        ts: z.ZodNumber;
+        by: z.ZodString;
+        sig: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        kind: z.ZodLiteral<"invite.revoke">;
+        body: z.ZodObject<{
+            inviteId: z.ZodString;
+        }, z.core.$strip>;
+        team: z.ZodString;
+        prev: z.ZodString;
+        v: z.ZodLiteral<"messaging/1">;
+        seq: z.ZodNumber;
+        ts: z.ZodNumber;
+        by: z.ZodString;
+        sig: z.ZodString;
+    }, z.core.$strip>], "kind">;
+}, z.core.$strip>, z.ZodObject<{
+    t: z.ZodLiteral<"hello">;
+    team: z.ZodString;
+    machine: z.ZodString;
+    ts: z.ZodNumber;
+    sig: z.ZodString;
+}, z.core.$strip>, z.ZodObject<{
+    t: z.ZodLiteral<"send">;
+    env: z.ZodObject<{
+        v: z.ZodLiteral<"messaging/1">;
+        id: z.ZodString;
+        realm: z.ZodString;
+        type: z.ZodEnum<{
+            message: "message";
+            "task.cancel": "task.cancel";
+            receipt: "receipt";
+            presence: "presence";
+            "task.status": "task.status";
+            "task.artifact": "task.artifact";
+        }>;
+        from: z.ZodObject<{
+            person: z.ZodUnion<readonly [z.ZodString, z.ZodString]>;
+            device: z.ZodString;
+            agent: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>;
+        to: z.ZodUnion<readonly [z.ZodObject<{
+            person: z.ZodUnion<readonly [z.ZodString, z.ZodString]>;
+            device: z.ZodString;
+            agent: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>, z.ZodObject<{
+            team: z.ZodLiteral<true>;
+        }, z.core.$strip>]>;
+        ts: z.ZodNumber;
+        exp: z.ZodNumber;
+        anchor: z.ZodDiscriminatedUnion<[z.ZodObject<{
+            kind: z.ZodLiteral<"roster">;
+            seq: z.ZodNumber;
+            hash: z.ZodString;
+        }, z.core.$strip>, z.ZodObject<{
+            kind: z.ZodLiteral<"epoch">;
+            size: z.ZodNumber;
+            root: z.ZodString;
+        }, z.core.$strip>], "kind">;
+        class: z.ZodOptional<z.ZodEnum<{
+            self: "self";
+            request: "request";
+            contact: "contact";
+        }>>;
+        replyTo: z.ZodOptional<z.ZodString>;
+        enc: z.ZodEnum<{
+            none: "none";
+            "x25519-hkdf-sha256-a256gcm": "x25519-hkdf-sha256-a256gcm";
+        }>;
+        epk: z.ZodOptional<z.ZodString>;
+        nonce: z.ZodOptional<z.ZodString>;
+        body: z.ZodUnknown;
+        sig: z.ZodString;
+    }, z.core.$strip>;
+}, z.core.$strip>, z.ZodObject<{
+    t: z.ZodLiteral<"recv.ack">;
+    id: z.ZodString;
+}, z.core.$strip>, z.ZodObject<{
+    t: z.ZodLiteral<"presence">;
+    env: z.ZodObject<{
+        v: z.ZodLiteral<"messaging/1">;
+        id: z.ZodString;
+        realm: z.ZodString;
+        type: z.ZodEnum<{
+            message: "message";
+            "task.cancel": "task.cancel";
+            receipt: "receipt";
+            presence: "presence";
+            "task.status": "task.status";
+            "task.artifact": "task.artifact";
+        }>;
+        from: z.ZodObject<{
+            person: z.ZodUnion<readonly [z.ZodString, z.ZodString]>;
+            device: z.ZodString;
+            agent: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>;
+        to: z.ZodUnion<readonly [z.ZodObject<{
+            person: z.ZodUnion<readonly [z.ZodString, z.ZodString]>;
+            device: z.ZodString;
+            agent: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>, z.ZodObject<{
+            team: z.ZodLiteral<true>;
+        }, z.core.$strip>]>;
+        ts: z.ZodNumber;
+        exp: z.ZodNumber;
+        anchor: z.ZodDiscriminatedUnion<[z.ZodObject<{
+            kind: z.ZodLiteral<"roster">;
+            seq: z.ZodNumber;
+            hash: z.ZodString;
+        }, z.core.$strip>, z.ZodObject<{
+            kind: z.ZodLiteral<"epoch">;
+            size: z.ZodNumber;
+            root: z.ZodString;
+        }, z.core.$strip>], "kind">;
+        class: z.ZodOptional<z.ZodEnum<{
+            self: "self";
+            request: "request";
+            contact: "contact";
+        }>>;
+        replyTo: z.ZodOptional<z.ZodString>;
+        enc: z.ZodEnum<{
+            none: "none";
+            "x25519-hkdf-sha256-a256gcm": "x25519-hkdf-sha256-a256gcm";
+        }>;
+        epk: z.ZodOptional<z.ZodString>;
+        nonce: z.ZodOptional<z.ZodString>;
+        body: z.ZodUnknown;
+        sig: z.ZodString;
+    }, z.core.$strip>;
+}, z.core.$strip>, z.ZodObject<{
+    t: z.ZodLiteral<"roster.sync">;
+    req: z.ZodString;
+    after: z.ZodNumber;
+}, z.core.$strip>, z.ZodObject<{
+    t: z.ZodLiteral<"ping">;
+}, z.core.$strip>], "t">;
+export type ClientToRelay = z.infer<typeof ClientToRelay>;
+/** WebSocket close codes used by the relay. */
+export declare const RELAY_CLOSE: {
+    readonly authFailed: 4001;
+    readonly protocolError: 4002;
+    readonly removed: 4003;
+    readonly replaced: 4004;
+    readonly full: 1013;
+    readonly tooLarge: 1009;
+};