@openmdm/core 0.2.0

package/dist/types.js

@@ -0,0 +1,49 @@
+// src/types.ts
+var MDMError = class extends Error {
+  constructor(message, code, statusCode = 500, details) {
+    super(message);
+    this.code = code;
+    this.statusCode = statusCode;
+    this.details = details;
+    this.name = "MDMError";
+  }
+};
+var DeviceNotFoundError = class extends MDMError {
+  constructor(deviceId) {
+    super(`Device not found: ${deviceId}`, "DEVICE_NOT_FOUND", 404);
+  }
+};
+var PolicyNotFoundError = class extends MDMError {
+  constructor(policyId) {
+    super(`Policy not found: ${policyId}`, "POLICY_NOT_FOUND", 404);
+  }
+};
+var ApplicationNotFoundError = class extends MDMError {
+  constructor(identifier) {
+    super(`Application not found: ${identifier}`, "APPLICATION_NOT_FOUND", 404);
+  }
+};
+var EnrollmentError = class extends MDMError {
+  constructor(message, details) {
+    super(message, "ENROLLMENT_ERROR", 400, details);
+  }
+};
+var AuthenticationError = class extends MDMError {
+  constructor(message = "Authentication required") {
+    super(message, "AUTHENTICATION_ERROR", 401);
+  }
+};
+var AuthorizationError = class extends MDMError {
+  constructor(message = "Access denied") {
+    super(message, "AUTHORIZATION_ERROR", 403);
+  }
+};
+var ValidationError = class extends MDMError {
+  constructor(message, details) {
+    super(message, "VALIDATION_ERROR", 400, details);
+  }
+};
+
+export { ApplicationNotFoundError, AuthenticationError, AuthorizationError, DeviceNotFoundError, EnrollmentError, MDMError, PolicyNotFoundError, ValidationError };
+//# sourceMappingURL=types.js.map
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/types.ts"],"names":[],"mappings":";AAolCO,IAAM,QAAA,GAAN,cAAuB,KAAA,CAAM;AAAA,EAClC,WAAA,CACE,OAAA,EACO,IAAA,EACA,UAAA,GAAqB,KACrB,OAAA,EACP;AACA,IAAA,KAAA,CAAM,OAAO,CAAA;AAJN,IAAA,IAAA,CAAA,IAAA,GAAA,IAAA;AACA,IAAA,IAAA,CAAA,UAAA,GAAA,UAAA;AACA,IAAA,IAAA,CAAA,OAAA,GAAA,OAAA;AAGP,IAAA,IAAA,CAAK,IAAA,GAAO,UAAA;AAAA,EACd;AACF;AAEO,IAAM,mBAAA,GAAN,cAAkC,QAAA,CAAS;AAAA,EAChD,YAAY,QAAA,EAAkB;AAC5B,IAAA,KAAA,CAAM,CAAA,kBAAA,EAAqB,QAAQ,CAAA,CAAA,EAAI,kBAAA,EAAoB,GAAG,CAAA;AAAA,EAChE;AACF;AAEO,IAAM,mBAAA,GAAN,cAAkC,QAAA,CAAS;AAAA,EAChD,YAAY,QAAA,EAAkB;AAC5B,IAAA,KAAA,CAAM,CAAA,kBAAA,EAAqB,QAAQ,CAAA,CAAA,EAAI,kBAAA,EAAoB,GAAG,CAAA;AAAA,EAChE;AACF;AAEO,IAAM,wBAAA,GAAN,cAAuC,QAAA,CAAS;AAAA,EACrD,YAAY,UAAA,EAAoB;AAC9B,IAAA,KAAA,CAAM,CAAA,uBAAA,EAA0B,UAAU,CAAA,CAAA,EAAI,uBAAA,EAAyB,GAAG,CAAA;AAAA,EAC5E;AACF;AAEO,IAAM,eAAA,GAAN,cAA8B,QAAA,CAAS;AAAA,EAC5C,WAAA,CAAY,SAAiB,OAAA,EAAmB;AAC9C,IAAA,KAAA,CAAM,OAAA,EAAS,kBAAA,EAAoB,GAAA,EAAK,OAAO,CAAA;AAAA,EACjD;AACF;AAEO,IAAM,mBAAA,GAAN,cAAkC,QAAA,CAAS;AAAA,EAChD,WAAA,CAAY,UAAkB,yBAAA,EAA2B;AACvD,IAAA,KAAA,CAAM,OAAA,EAAS,wBAAwB,GAAG,CAAA;AAAA,EAC5C;AACF;AAEO,IAAM,kBAAA,GAAN,cAAiC,QAAA,CAAS;AAAA,EAC/C,WAAA,CAAY,UAAkB,eAAA,EAAiB;AAC7C,IAAA,KAAA,CAAM,OAAA,EAAS,uBAAuB,GAAG,CAAA;AAAA,EAC3C;AACF;AAEO,IAAM,eAAA,GAAN,cAA8B,QAAA,CAAS;AAAA,EAC5C,WAAA,CAAY,SAAiB,OAAA,EAAmB;AAC9C,IAAA,KAAA,CAAM,OAAA,EAAS,kBAAA,EAAoB,GAAA,EAAK,OAAO,CAAA;AAAA,EACjD;AACF","file":"types.js","sourcesContent":["/**\n * OpenMDM Core Types\n *\n * These types define the core data structures for the MDM system.\n * Designed to be database-agnostic and framework-agnostic.\n */\n\n// ============================================\n// Device Types\n// ============================================\n\nexport type DeviceStatus = 'pending' | 'enrolled' | 'unenrolled' | 'blocked';\n\nexport interface Device {\n  id: string;\n  externalId?: string | null;\n  enrollmentId: string;\n  status: DeviceStatus;\n\n  // Device Info\n  model?: string | null;\n  manufacturer?: string | null;\n  osVersion?: string | null;\n  serialNumber?: string | null;\n  imei?: string | null;\n  macAddress?: string | null;\n  androidId?: string | null;\n\n  // MDM State\n  policyId?: string | null;\n  lastHeartbeat?: Date | null;\n  lastSync?: Date | null;\n\n  // Telemetry\n  batteryLevel?: number | null;\n  storageUsed?: number | null;\n  storageTotal?: number | null;\n  location?: DeviceLocation | null;\n  installedApps?: InstalledApp[] | null;\n\n  // Metadata\n  tags?: Record<string, string> | null;\n  metadata?: Record<string, unknown> | null;\n\n  // Timestamps\n  createdAt: Date;\n  updatedAt: Date;\n}\n\nexport interface DeviceLocation {\n  latitude: number;\n  longitude: number;\n  accuracy?: number;\n  timestamp: Date;\n}\n\nexport interface InstalledApp {\n  packageName: string;\n  version: string;\n  versionCode?: number;\n  installedAt?: Date;\n}\n\nexport interface CreateDeviceInput {\n  enrollmentId: string;\n  externalId?: string;\n  model?: string;\n  manufacturer?: string;\n  osVersion?: string;\n  serialNumber?: string;\n  imei?: string;\n  macAddress?: string;\n  androidId?: string;\n  policyId?: string;\n  tags?: Record<string, string>;\n  metadata?: Record<string, unknown>;\n}\n\nexport interface UpdateDeviceInput {\n  externalId?: string | null;\n  status?: DeviceStatus;\n  policyId?: string | null;\n  model?: string;\n  manufacturer?: string;\n  osVersion?: string;\n  batteryLevel?: number | null;\n  storageUsed?: number | null;\n  storageTotal?: number | null;\n  lastHeartbeat?: Date;\n  lastSync?: Date;\n  installedApps?: InstalledApp[];\n  location?: DeviceLocation;\n  tags?: Record<string, string>;\n  metadata?: Record<string, unknown>;\n}\n\nexport interface DeviceFilter {\n  status?: DeviceStatus | DeviceStatus[];\n  policyId?: string;\n  groupId?: string;\n  search?: string;\n  tags?: Record<string, string>;\n  limit?: number;\n  offset?: number;\n}\n\nexport interface DeviceListResult {\n  devices: Device[];\n  total: number;\n  limit: number;\n  offset: number;\n}\n\n// ============================================\n// Policy Types\n// ============================================\n\nexport interface Policy {\n  id: string;\n  name: string;\n  description?: string | null;\n  isDefault: boolean;\n  settings: PolicySettings;\n  createdAt: Date;\n  updatedAt: Date;\n}\n\nexport interface PolicySettings {\n  // Kiosk Mode\n  kioskMode?: boolean;\n  mainApp?: string;\n  allowedApps?: string[];\n  kioskExitPassword?: string;\n\n  // Lock Features\n  lockStatusBar?: boolean;\n  lockNavigationBar?: boolean;\n  lockSettings?: boolean;\n  lockPowerButton?: boolean;\n  blockInstall?: boolean;\n  blockUninstall?: boolean;\n\n  // Hardware Controls\n  bluetooth?: HardwareControl;\n  wifi?: HardwareControl;\n  gps?: HardwareControl;\n  mobileData?: HardwareControl;\n  camera?: HardwareControl;\n  microphone?: HardwareControl;\n  usb?: HardwareControl;\n  nfc?: HardwareControl;\n\n  // Update Settings\n  systemUpdatePolicy?: SystemUpdatePolicy;\n  updateWindow?: TimeWindow;\n\n  // Security\n  passwordPolicy?: PasswordPolicy;\n  encryptionRequired?: boolean;\n  factoryResetProtection?: boolean;\n  safeBootDisabled?: boolean;\n\n  // Telemetry\n  heartbeatInterval?: number;\n  locationReportInterval?: number;\n  locationEnabled?: boolean;\n\n  // Network\n  wifiConfigs?: WifiConfig[];\n  vpnConfig?: VpnConfig;\n\n  // Applications\n  applications?: PolicyApplication[];\n\n  // Custom settings (for plugins)\n  custom?: Record<string, unknown>;\n}\n\nexport type HardwareControl = 'on' | 'off' | 'user';\nexport type SystemUpdatePolicy = 'auto' | 'windowed' | 'postpone' | 'manual';\n\nexport interface TimeWindow {\n  start: string; // \"HH:MM\"\n  end: string; // \"HH:MM\"\n}\n\nexport interface PasswordPolicy {\n  required: boolean;\n  minLength?: number;\n  complexity?: 'none' | 'numeric' | 'alphanumeric' | 'complex';\n  maxFailedAttempts?: number;\n  expirationDays?: number;\n  historyLength?: number;\n}\n\nexport interface WifiConfig {\n  ssid: string;\n  securityType: 'none' | 'wep' | 'wpa' | 'wpa2' | 'wpa3';\n  password?: string;\n  hidden?: boolean;\n  autoConnect?: boolean;\n}\n\nexport interface VpnConfig {\n  type: 'pptp' | 'l2tp' | 'ipsec' | 'openvpn' | 'wireguard';\n  server: string;\n  username?: string;\n  password?: string;\n  certificate?: string;\n  config?: Record<string, unknown>;\n}\n\nexport interface PolicyApplication {\n  packageName: string;\n  action: 'install' | 'update' | 'uninstall';\n  version?: string;\n  required?: boolean;\n  autoUpdate?: boolean;\n}\n\nexport interface CreatePolicyInput {\n  name: string;\n  description?: string;\n  isDefault?: boolean;\n  settings: PolicySettings;\n}\n\nexport interface UpdatePolicyInput {\n  name?: string;\n  description?: string | null;\n  isDefault?: boolean;\n  settings?: PolicySettings;\n}\n\n// ============================================\n// Application Types\n// ============================================\n\nexport interface Application {\n  id: string;\n  name: string;\n  packageName: string;\n  version: string;\n  versionCode: number;\n  url: string;\n  hash?: string | null;\n  size?: number | null;\n  minSdkVersion?: number | null;\n\n  // Deployment settings\n  showIcon: boolean;\n  runAfterInstall: boolean;\n  runAtBoot: boolean;\n  isSystem: boolean;\n\n  // State\n  isActive: boolean;\n\n  // Metadata\n  metadata?: Record<string, unknown> | null;\n  createdAt: Date;\n  updatedAt: Date;\n}\n\nexport interface CreateApplicationInput {\n  name: string;\n  packageName: string;\n  version: string;\n  versionCode: number;\n  url: string;\n  hash?: string;\n  size?: number;\n  minSdkVersion?: number;\n  showIcon?: boolean;\n  runAfterInstall?: boolean;\n  runAtBoot?: boolean;\n  isSystem?: boolean;\n  metadata?: Record<string, unknown>;\n}\n\nexport interface UpdateApplicationInput {\n  name?: string;\n  version?: string;\n  versionCode?: number;\n  url?: string;\n  hash?: string | null;\n  size?: number | null;\n  minSdkVersion?: number | null;\n  showIcon?: boolean;\n  runAfterInstall?: boolean;\n  runAtBoot?: boolean;\n  isActive?: boolean;\n  metadata?: Record<string, unknown> | null;\n}\n\nexport interface DeployTarget {\n  devices?: string[];\n  policies?: string[];\n  groups?: string[];\n}\n\n// ============================================\n// App Version & Rollback Types\n// ============================================\n\nexport interface AppVersion {\n  id: string;\n  applicationId: string;\n  packageName: string;\n  version: string;\n  versionCode: number;\n  url: string;\n  hash?: string | null;\n  size?: number | null;\n  releaseNotes?: string | null;\n  isMinimumVersion: boolean;\n  createdAt: Date;\n}\n\nexport interface AppRollback {\n  id: string;\n  deviceId: string;\n  packageName: string;\n  fromVersion: string;\n  fromVersionCode: number;\n  toVersion: string;\n  toVersionCode: number;\n  reason?: string | null;\n  status: 'pending' | 'in_progress' | 'completed' | 'failed';\n  error?: string | null;\n  initiatedBy?: string | null;\n  createdAt: Date;\n  completedAt?: Date | null;\n}\n\nexport interface CreateAppRollbackInput {\n  deviceId: string;\n  packageName: string;\n  toVersionCode: number;\n  reason?: string;\n  initiatedBy?: string;\n}\n\n// ============================================\n// Command Types\n// ============================================\n\nexport type CommandType =\n  | 'reboot'\n  | 'shutdown'\n  | 'sync'\n  | 'lock'\n  | 'unlock'\n  | 'wipe'\n  | 'factoryReset'\n  | 'installApp'\n  | 'uninstallApp'\n  | 'updateApp'\n  | 'runApp'\n  | 'clearAppData'\n  | 'clearAppCache'\n  | 'shell'\n  | 'setPolicy'\n  | 'grantPermissions'\n  | 'exitKiosk'\n  | 'enterKiosk'\n  | 'setWifi'\n  | 'screenshot'\n  | 'getLocation'\n  | 'setVolume'\n  | 'sendNotification'\n  | 'whitelistBattery'      // Whitelist app from battery optimization (Doze)\n  | 'enablePermissiveMode'  // Enable permissive mode for debugging\n  | 'setTimeZone'           // Set device timezone\n  | 'enableAdb'             // Enable/disable ADB debugging\n  | 'rollbackApp'           // Rollback to previous app version\n  | 'custom';\n\nexport type CommandStatus =\n  | 'pending'\n  | 'sent'\n  | 'acknowledged'\n  | 'completed'\n  | 'failed'\n  | 'cancelled';\n\nexport interface Command {\n  id: string;\n  deviceId: string;\n  type: CommandType;\n  payload?: Record<string, unknown> | null;\n  status: CommandStatus;\n  result?: CommandResult | null;\n  error?: string | null;\n  createdAt: Date;\n  sentAt?: Date | null;\n  acknowledgedAt?: Date | null;\n  completedAt?: Date | null;\n}\n\nexport interface CommandResult {\n  success: boolean;\n  message?: string;\n  data?: unknown;\n}\n\nexport interface SendCommandInput {\n  deviceId: string;\n  type: CommandType;\n  payload?: Record<string, unknown>;\n}\n\nexport interface CommandFilter {\n  deviceId?: string;\n  status?: CommandStatus | CommandStatus[];\n  type?: CommandType | CommandType[];\n  limit?: number;\n  offset?: number;\n}\n\n// ============================================\n// Event Types\n// ============================================\n\nexport type EventType =\n  | 'device.enrolled'\n  | 'device.unenrolled'\n  | 'device.blocked'\n  | 'device.heartbeat'\n  | 'device.locationUpdated'\n  | 'device.statusChanged'\n  | 'device.policyChanged'\n  | 'app.installed'\n  | 'app.uninstalled'\n  | 'app.updated'\n  | 'app.crashed'\n  | 'app.started'\n  | 'app.stopped'\n  | 'policy.applied'\n  | 'policy.failed'\n  | 'command.received'\n  | 'command.acknowledged'\n  | 'command.completed'\n  | 'command.failed'\n  | 'security.tamper'\n  | 'security.rootDetected'\n  | 'security.screenLocked'\n  | 'security.screenUnlocked'\n  | 'custom';\n\nexport interface MDMEvent<T = unknown> {\n  id: string;\n  deviceId: string;\n  type: EventType;\n  payload: T;\n  createdAt: Date;\n}\n\nexport interface EventFilter {\n  deviceId?: string;\n  type?: EventType | EventType[];\n  startDate?: Date;\n  endDate?: Date;\n  limit?: number;\n  offset?: number;\n}\n\n// ============================================\n// Group Types\n// ============================================\n\nexport interface Group {\n  id: string;\n  name: string;\n  description?: string | null;\n  policyId?: string | null;\n  parentId?: string | null;\n  metadata?: Record<string, unknown> | null;\n  createdAt: Date;\n  updatedAt: Date;\n}\n\nexport interface CreateGroupInput {\n  name: string;\n  description?: string;\n  policyId?: string;\n  parentId?: string;\n  metadata?: Record<string, unknown>;\n}\n\nexport interface UpdateGroupInput {\n  name?: string;\n  description?: string | null;\n  policyId?: string | null;\n  parentId?: string | null;\n  metadata?: Record<string, unknown> | null;\n}\n\n// ============================================\n// Enrollment Types\n// ============================================\n\nexport type EnrollmentMethod =\n  | 'qr'\n  | 'nfc'\n  | 'zero-touch'\n  | 'knox'\n  | 'manual'\n  | 'app-only'\n  | 'adb';\n\nexport interface EnrollmentRequest {\n  // Device identifiers (at least one required)\n  macAddress?: string;\n  serialNumber?: string;\n  imei?: string;\n  androidId?: string;\n\n  // Device info\n  model: string;\n  manufacturer: string;\n  osVersion: string;\n  sdkVersion?: number;\n\n  // Agent info\n  agentVersion?: string;\n  agentPackage?: string;\n\n  // Enrollment details\n  method: EnrollmentMethod;\n  timestamp: string;\n  signature: string;\n\n  // Optional pre-assigned policy/group\n  policyId?: string;\n  groupId?: string;\n}\n\nexport interface EnrollmentResponse {\n  deviceId: string;\n  enrollmentId: string;\n  policyId?: string;\n  policy?: Policy;\n  serverUrl: string;\n  pushConfig: PushConfig;\n  token: string;\n  refreshToken?: string;\n  tokenExpiresAt?: Date;\n}\n\nexport interface PushConfig {\n  provider: 'fcm' | 'mqtt' | 'websocket' | 'polling';\n  fcmSenderId?: string;\n  mqttUrl?: string;\n  mqttTopic?: string;\n  mqttUsername?: string;\n  mqttPassword?: string;\n  wsUrl?: string;\n  pollingInterval?: number;\n}\n\n// ============================================\n// Telemetry Types\n// ============================================\n\nexport interface Heartbeat {\n  deviceId: string;\n  timestamp: Date;\n\n  // Battery\n  batteryLevel: number;\n  isCharging: boolean;\n  batteryHealth?: 'good' | 'overheat' | 'dead' | 'cold' | 'unknown';\n\n  // Storage\n  storageUsed: number;\n  storageTotal: number;\n\n  // Memory\n  memoryUsed: number;\n  memoryTotal: number;\n\n  // Network\n  networkType?: 'wifi' | 'cellular' | 'ethernet' | 'none';\n  networkName?: string; // SSID or carrier\n  signalStrength?: number;\n  ipAddress?: string;\n\n  // Location\n  location?: DeviceLocation;\n\n  // Apps\n  installedApps: InstalledApp[];\n  runningApps?: string[];\n\n  // Security\n  isRooted?: boolean;\n  isEncrypted?: boolean;\n  screenLockEnabled?: boolean;\n\n  // Agent status\n  agentVersion?: string;\n  policyVersion?: string;\n  lastPolicySync?: Date;\n}\n\n// ============================================\n// Push Token Types\n// ============================================\n\nexport interface PushToken {\n  id: string;\n  deviceId: string;\n  provider: 'fcm' | 'mqtt' | 'websocket';\n  token: string;\n  isActive: boolean;\n  createdAt: Date;\n  updatedAt: Date;\n}\n\nexport interface RegisterPushTokenInput {\n  deviceId: string;\n  provider: 'fcm' | 'mqtt' | 'websocket';\n  token: string;\n}\n\n// ============================================\n// Configuration Types\n// ============================================\n\nexport interface MDMConfig {\n  /** Database adapter for persistence */\n  database: DatabaseAdapter;\n\n  /** Authentication/authorization configuration */\n  auth?: AuthConfig;\n\n  /** Push notification provider configuration */\n  push?: PushProviderConfig;\n\n  /** Device enrollment configuration */\n  enrollment?: EnrollmentConfig;\n\n  /** Server URL (used in enrollment responses) */\n  serverUrl?: string;\n\n  /** APK/file storage configuration */\n  storage?: StorageConfig;\n\n  /** Outbound webhook configuration */\n  webhooks?: WebhookConfig;\n\n  /** Plugins to extend functionality */\n  plugins?: MDMPlugin[];\n\n  /** Event handlers */\n  onDeviceEnrolled?: (device: Device) => Promise<void>;\n  onDeviceUnenrolled?: (device: Device) => Promise<void>;\n  onDeviceBlocked?: (device: Device) => Promise<void>;\n  onHeartbeat?: (device: Device, heartbeat: Heartbeat) => Promise<void>;\n  onCommand?: (command: Command) => Promise<void>;\n  onEvent?: (event: MDMEvent) => Promise<void>;\n}\n\nexport interface StorageConfig {\n  /** Storage provider (s3, local, custom) */\n  provider: 's3' | 'local' | 'custom';\n\n  /** S3 configuration */\n  s3?: {\n    bucket: string;\n    region: string;\n    accessKeyId?: string;\n    secretAccessKey?: string;\n    endpoint?: string; // For S3-compatible services\n    presignedUrlExpiry?: number; // Seconds, default 3600\n  };\n\n  /** Local storage path */\n  localPath?: string;\n\n  /** Custom storage adapter */\n  customAdapter?: {\n    upload: (file: Buffer, key: string) => Promise<string>;\n    getUrl: (key: string) => Promise<string>;\n    delete: (key: string) => Promise<void>;\n  };\n}\n\nexport interface WebhookConfig {\n  /** Webhook endpoints to notify */\n  endpoints?: WebhookEndpoint[];\n\n  /** Retry configuration */\n  retry?: {\n    maxRetries?: number;\n    initialDelay?: number;\n    maxDelay?: number;\n  };\n\n  /** Sign webhooks with HMAC secret */\n  signingSecret?: string;\n}\n\nexport interface WebhookEndpoint {\n  /** Unique identifier */\n  id: string;\n  /** Webhook URL */\n  url: string;\n  /** Events to trigger this webhook */\n  events: (EventType | '*')[];\n  /** Custom headers */\n  headers?: Record<string, string>;\n  /** Whether endpoint is active */\n  enabled: boolean;\n}\n\nexport interface AuthConfig {\n  /** Get current user from request context */\n  getUser: <T = unknown>(context: unknown) => Promise<T | null>;\n  /** Check if user has admin privileges */\n  isAdmin?: (user: unknown) => Promise<boolean>;\n  /** Check if user can access specific device */\n  canAccessDevice?: (user: unknown, deviceId: string) => Promise<boolean>;\n  /** Device JWT secret (for device auth tokens) */\n  deviceTokenSecret?: string;\n  /** Device token expiration in seconds (default: 365 days) */\n  deviceTokenExpiration?: number;\n}\n\nexport interface PushProviderConfig {\n  provider: 'fcm' | 'mqtt' | 'websocket' | 'polling';\n\n  // FCM configuration\n  fcmCredentials?: string | Record<string, unknown>;\n  fcmProjectId?: string;\n\n  // MQTT configuration\n  mqttUrl?: string;\n  mqttUsername?: string;\n  mqttPassword?: string;\n  mqttTopicPrefix?: string;\n\n  // WebSocket configuration\n  wsPath?: string;\n  wsPingInterval?: number;\n\n  // Polling fallback\n  pollingInterval?: number;\n}\n\nexport interface EnrollmentConfig {\n  /** Auto-enroll devices with valid signature */\n  autoEnroll?: boolean;\n  /** HMAC secret for device signature verification */\n  deviceSecret: string;\n  /** Allowed enrollment methods */\n  allowedMethods?: EnrollmentMethod[];\n  /** Default policy for new devices */\n  defaultPolicyId?: string;\n  /** Default group for new devices */\n  defaultGroupId?: string;\n  /** Require manual approval for enrollment */\n  requireApproval?: boolean;\n  /** Custom enrollment validation */\n  validate?: (request: EnrollmentRequest) => Promise<boolean>;\n}\n\n// ============================================\n// Adapter Interfaces\n// ============================================\n\nexport interface DatabaseAdapter {\n  // Devices\n  findDevice(id: string): Promise<Device | null>;\n  findDeviceByEnrollmentId(enrollmentId: string): Promise<Device | null>;\n  listDevices(filter?: DeviceFilter): Promise<DeviceListResult>;\n  createDevice(data: CreateDeviceInput): Promise<Device>;\n  updateDevice(id: string, data: UpdateDeviceInput): Promise<Device>;\n  deleteDevice(id: string): Promise<void>;\n  countDevices(filter?: DeviceFilter): Promise<number>;\n\n  // Policies\n  findPolicy(id: string): Promise<Policy | null>;\n  findDefaultPolicy(): Promise<Policy | null>;\n  listPolicies(): Promise<Policy[]>;\n  createPolicy(data: CreatePolicyInput): Promise<Policy>;\n  updatePolicy(id: string, data: UpdatePolicyInput): Promise<Policy>;\n  deletePolicy(id: string): Promise<void>;\n\n  // Applications\n  findApplication(id: string): Promise<Application | null>;\n  findApplicationByPackage(packageName: string, version?: string): Promise<Application | null>;\n  listApplications(activeOnly?: boolean): Promise<Application[]>;\n  createApplication(data: CreateApplicationInput): Promise<Application>;\n  updateApplication(id: string, data: UpdateApplicationInput): Promise<Application>;\n  deleteApplication(id: string): Promise<void>;\n\n  // Commands\n  findCommand(id: string): Promise<Command | null>;\n  listCommands(filter?: CommandFilter): Promise<Command[]>;\n  createCommand(data: SendCommandInput): Promise<Command>;\n  updateCommand(id: string, data: Partial<Command>): Promise<Command>;\n  getPendingCommands(deviceId: string): Promise<Command[]>;\n\n  // Events\n  createEvent(event: Omit<MDMEvent, 'id' | 'createdAt'>): Promise<MDMEvent>;\n  listEvents(filter?: EventFilter): Promise<MDMEvent[]>;\n\n  // Groups\n  findGroup(id: string): Promise<Group | null>;\n  listGroups(): Promise<Group[]>;\n  createGroup(data: CreateGroupInput): Promise<Group>;\n  updateGroup(id: string, data: UpdateGroupInput): Promise<Group>;\n  deleteGroup(id: string): Promise<void>;\n  listDevicesInGroup(groupId: string): Promise<Device[]>;\n  addDeviceToGroup(deviceId: string, groupId: string): Promise<void>;\n  removeDeviceFromGroup(deviceId: string, groupId: string): Promise<void>;\n  getDeviceGroups(deviceId: string): Promise<Group[]>;\n\n  // Push Tokens\n  findPushToken(deviceId: string, provider: string): Promise<PushToken | null>;\n  upsertPushToken(data: RegisterPushTokenInput): Promise<PushToken>;\n  deletePushToken(deviceId: string, provider?: string): Promise<void>;\n\n  // App Versions (optional - for version tracking)\n  listAppVersions?(packageName: string): Promise<AppVersion[]>;\n  createAppVersion?(data: Omit<AppVersion, 'id' | 'createdAt'>): Promise<AppVersion>;\n  setMinimumVersion?(packageName: string, versionCode: number): Promise<void>;\n  getMinimumVersion?(packageName: string): Promise<AppVersion | null>;\n\n  // Rollback History (optional)\n  createRollback?(data: CreateAppRollbackInput): Promise<AppRollback>;\n  updateRollback?(id: string, data: Partial<AppRollback>): Promise<AppRollback>;\n  listRollbacks?(filter?: { deviceId?: string; packageName?: string }): Promise<AppRollback[]>;\n\n  // Transactions (optional)\n  transaction?<T>(fn: () => Promise<T>): Promise<T>;\n}\n\nexport interface PushAdapter {\n  /** Send push message to a device */\n  send(deviceId: string, message: PushMessage): Promise<PushResult>;\n  /** Send push message to multiple devices */\n  sendBatch(deviceIds: string[], message: PushMessage): Promise<PushBatchResult>;\n  /** Register device push token */\n  registerToken?(deviceId: string, token: string): Promise<void>;\n  /** Unregister device push token */\n  unregisterToken?(deviceId: string): Promise<void>;\n  /** Subscribe device to topic */\n  subscribe?(deviceId: string, topic: string): Promise<void>;\n  /** Unsubscribe device from topic */\n  unsubscribe?(deviceId: string, topic: string): Promise<void>;\n}\n\nexport interface PushMessage {\n  type: string;\n  payload?: Record<string, unknown>;\n  priority?: 'high' | 'normal';\n  ttl?: number;\n  collapseKey?: string;\n}\n\nexport interface PushResult {\n  success: boolean;\n  messageId?: string;\n  error?: string;\n}\n\nexport interface PushBatchResult {\n  successCount: number;\n  failureCount: number;\n  results: Array<{ deviceId: string; result: PushResult }>;\n}\n\n// ============================================\n// Plugin Interface\n// ============================================\n\nexport interface MDMPlugin {\n  /** Unique plugin name */\n  name: string;\n  /** Plugin version */\n  version: string;\n\n  /** Called when MDM is initialized */\n  onInit?(mdm: MDMInstance): Promise<void>;\n\n  /** Called when MDM is destroyed */\n  onDestroy?(): Promise<void>;\n\n  /** Additional routes to mount */\n  routes?: PluginRoute[];\n\n  /** Middleware to apply to all routes */\n  middleware?: PluginMiddleware[];\n\n  /** Extend enrollment process */\n  onEnroll?(device: Device, request: EnrollmentRequest): Promise<void>;\n\n  /** Extend device processing */\n  onDeviceEnrolled?(device: Device): Promise<void>;\n  onDeviceUnenrolled?(device: Device): Promise<void>;\n  onHeartbeat?(device: Device, heartbeat: Heartbeat): Promise<void>;\n\n  /** Extend policy processing */\n  policySchema?: Record<string, unknown>;\n  validatePolicy?(settings: PolicySettings): Promise<{ valid: boolean; errors?: string[] }>;\n  applyPolicy?(device: Device, policy: Policy): Promise<void>;\n\n  /** Extend command processing */\n  commandTypes?: CommandType[];\n  executeCommand?(device: Device, command: Command): Promise<CommandResult>;\n}\n\nexport interface PluginRoute {\n  method: 'GET' | 'POST' | 'PUT' | 'DELETE' | 'PATCH';\n  path: string;\n  handler: (context: unknown) => Promise<unknown>;\n  auth?: boolean;\n  admin?: boolean;\n}\n\nexport type PluginMiddleware = (\n  context: unknown,\n  next: () => Promise<unknown>\n) => Promise<unknown>;\n\n// ============================================\n// MDM Instance Interface\n// ============================================\n\nexport interface WebhookManager {\n  /** Deliver an event to all matching webhook endpoints */\n  deliver<T>(event: MDMEvent<T>): Promise<WebhookDeliveryResult[]>;\n  /** Add a webhook endpoint at runtime */\n  addEndpoint(endpoint: WebhookEndpoint): void;\n  /** Remove a webhook endpoint */\n  removeEndpoint(endpointId: string): void;\n  /** Update a webhook endpoint */\n  updateEndpoint(endpointId: string, updates: Partial<WebhookEndpoint>): void;\n  /** Get all configured endpoints */\n  getEndpoints(): WebhookEndpoint[];\n  /** Test a webhook endpoint with a test payload */\n  testEndpoint(endpointId: string): Promise<WebhookDeliveryResult>;\n}\n\nexport interface WebhookDeliveryResult {\n  endpointId: string;\n  success: boolean;\n  statusCode?: number;\n  error?: string;\n  retryCount: number;\n  deliveredAt?: Date;\n}\n\nexport interface MDMInstance {\n  /** Device management */\n  devices: DeviceManager;\n  /** Policy management */\n  policies: PolicyManager;\n  /** Application management */\n  apps: ApplicationManager;\n  /** Command management */\n  commands: CommandManager;\n  /** Group management */\n  groups: GroupManager;\n\n  /** Push notification service */\n  push: PushAdapter;\n\n  /** Webhook delivery (if configured) */\n  webhooks?: WebhookManager;\n\n  /** Database adapter */\n  db: DatabaseAdapter;\n\n  /** Configuration */\n  config: MDMConfig;\n\n  /** Subscribe to events */\n  on<T extends EventType>(event: T, handler: EventHandler<T>): () => void;\n  /** Emit an event */\n  emit<T extends EventType>(event: T, data: EventPayloadMap[T]): Promise<void>;\n\n  /** Process device enrollment */\n  enroll(request: EnrollmentRequest): Promise<EnrollmentResponse>;\n  /** Process device heartbeat */\n  processHeartbeat(deviceId: string, heartbeat: Heartbeat): Promise<void>;\n  /** Verify device token */\n  verifyDeviceToken(token: string): Promise<{ deviceId: string } | null>;\n\n  /** Get loaded plugins */\n  getPlugins(): MDMPlugin[];\n  /** Get plugin by name */\n  getPlugin(name: string): MDMPlugin | undefined;\n}\n\n// ============================================\n// Manager Interfaces\n// ============================================\n\nexport interface DeviceManager {\n  get(id: string): Promise<Device | null>;\n  getByEnrollmentId(enrollmentId: string): Promise<Device | null>;\n  list(filter?: DeviceFilter): Promise<DeviceListResult>;\n  create(data: CreateDeviceInput): Promise<Device>;\n  update(id: string, data: UpdateDeviceInput): Promise<Device>;\n  delete(id: string): Promise<void>;\n  assignPolicy(deviceId: string, policyId: string | null): Promise<Device>;\n  addToGroup(deviceId: string, groupId: string): Promise<void>;\n  removeFromGroup(deviceId: string, groupId: string): Promise<void>;\n  getGroups(deviceId: string): Promise<Group[]>;\n  sendCommand(deviceId: string, input: Omit<SendCommandInput, 'deviceId'>): Promise<Command>;\n  sync(deviceId: string): Promise<Command>;\n  reboot(deviceId: string): Promise<Command>;\n  lock(deviceId: string, message?: string): Promise<Command>;\n  wipe(deviceId: string, preserveData?: boolean): Promise<Command>;\n}\n\nexport interface PolicyManager {\n  get(id: string): Promise<Policy | null>;\n  getDefault(): Promise<Policy | null>;\n  list(): Promise<Policy[]>;\n  create(data: CreatePolicyInput): Promise<Policy>;\n  update(id: string, data: UpdatePolicyInput): Promise<Policy>;\n  delete(id: string): Promise<void>;\n  setDefault(id: string): Promise<Policy>;\n  getDevices(policyId: string): Promise<Device[]>;\n  applyToDevice(policyId: string, deviceId: string): Promise<void>;\n}\n\nexport interface ApplicationManager {\n  get(id: string): Promise<Application | null>;\n  getByPackage(packageName: string, version?: string): Promise<Application | null>;\n  list(activeOnly?: boolean): Promise<Application[]>;\n  register(data: CreateApplicationInput): Promise<Application>;\n  update(id: string, data: UpdateApplicationInput): Promise<Application>;\n  delete(id: string): Promise<void>;\n  activate(id: string): Promise<Application>;\n  deactivate(id: string): Promise<Application>;\n  deploy(packageName: string, target: DeployTarget): Promise<void>;\n  installOnDevice(packageName: string, deviceId: string, version?: string): Promise<Command>;\n  uninstallFromDevice(packageName: string, deviceId: string): Promise<Command>;\n}\n\nexport interface CommandManager {\n  get(id: string): Promise<Command | null>;\n  list(filter?: CommandFilter): Promise<Command[]>;\n  send(input: SendCommandInput): Promise<Command>;\n  cancel(id: string): Promise<Command>;\n  acknowledge(id: string): Promise<Command>;\n  complete(id: string, result: CommandResult): Promise<Command>;\n  fail(id: string, error: string): Promise<Command>;\n  getPending(deviceId: string): Promise<Command[]>;\n}\n\nexport interface GroupManager {\n  get(id: string): Promise<Group | null>;\n  list(): Promise<Group[]>;\n  create(data: CreateGroupInput): Promise<Group>;\n  update(id: string, data: UpdateGroupInput): Promise<Group>;\n  delete(id: string): Promise<void>;\n  getDevices(groupId: string): Promise<Device[]>;\n  addDevice(groupId: string, deviceId: string): Promise<void>;\n  removeDevice(groupId: string, deviceId: string): Promise<void>;\n  getChildren(groupId: string): Promise<Group[]>;\n}\n\n// ============================================\n// Event Handler Types\n// ============================================\n\nexport type EventHandler<T extends EventType> = (\n  event: MDMEvent<EventPayloadMap[T]>\n) => Promise<void> | void;\n\nexport interface EventPayloadMap {\n  'device.enrolled': { device: Device };\n  'device.unenrolled': { device: Device; reason?: string };\n  'device.blocked': { device: Device; reason: string };\n  'device.heartbeat': { device: Device; heartbeat: Heartbeat };\n  'device.locationUpdated': { device: Device; location: DeviceLocation };\n  'device.statusChanged': { device: Device; oldStatus: DeviceStatus; newStatus: DeviceStatus };\n  'device.policyChanged': { device: Device; oldPolicyId?: string; newPolicyId?: string };\n  'app.installed': { device: Device; app: InstalledApp };\n  'app.uninstalled': { device: Device; packageName: string };\n  'app.updated': { device: Device; app: InstalledApp; oldVersion: string };\n  'app.crashed': { device: Device; packageName: string; error?: string };\n  'app.started': { device: Device; packageName: string };\n  'app.stopped': { device: Device; packageName: string };\n  'policy.applied': { device: Device; policy: Policy };\n  'policy.failed': { device: Device; policy: Policy; error: string };\n  'command.received': { device: Device; command: Command };\n  'command.acknowledged': { device: Device; command: Command };\n  'command.completed': { device: Device; command: Command; result: CommandResult };\n  'command.failed': { device: Device; command: Command; error: string };\n  'security.tamper': { device: Device; type: string; details?: unknown };\n  'security.rootDetected': { device: Device };\n  'security.screenLocked': { device: Device };\n  'security.screenUnlocked': { device: Device };\n  custom: Record<string, unknown>;\n}\n\n// ============================================\n// Error Types\n// ============================================\n\nexport class MDMError extends Error {\n  constructor(\n    message: string,\n    public code: string,\n    public statusCode: number = 500,\n    public details?: unknown\n  ) {\n    super(message);\n    this.name = 'MDMError';\n  }\n}\n\nexport class DeviceNotFoundError extends MDMError {\n  constructor(deviceId: string) {\n    super(`Device not found: ${deviceId}`, 'DEVICE_NOT_FOUND', 404);\n  }\n}\n\nexport class PolicyNotFoundError extends MDMError {\n  constructor(policyId: string) {\n    super(`Policy not found: ${policyId}`, 'POLICY_NOT_FOUND', 404);\n  }\n}\n\nexport class ApplicationNotFoundError extends MDMError {\n  constructor(identifier: string) {\n    super(`Application not found: ${identifier}`, 'APPLICATION_NOT_FOUND', 404);\n  }\n}\n\nexport class EnrollmentError extends MDMError {\n  constructor(message: string, details?: unknown) {\n    super(message, 'ENROLLMENT_ERROR', 400, details);\n  }\n}\n\nexport class AuthenticationError extends MDMError {\n  constructor(message: string = 'Authentication required') {\n    super(message, 'AUTHENTICATION_ERROR', 401);\n  }\n}\n\nexport class AuthorizationError extends MDMError {\n  constructor(message: string = 'Access denied') {\n    super(message, 'AUTHORIZATION_ERROR', 403);\n  }\n}\n\nexport class ValidationError extends MDMError {\n  constructor(message: string, details?: unknown) {\n    super(message, 'VALIDATION_ERROR', 400, details);\n  }\n}\n"]}

package/package.json

@@ -0,0 +1,67 @@
+{
+  "name": "@openmdm/core",
+  "version": "0.2.0",
+  "description": "Core MDM SDK - device management, policies, and commands",
+  "author": "OpenMDM Contributors",
+  "type": "module",
+  "sideEffects": false,
+  "main": "./dist/index.js",
+  "module": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    },
+    "./types": {
+      "types": "./dist/types.d.ts",
+      "import": "./dist/types.js"
+    },
+    "./schema": {
+      "types": "./dist/schema.d.ts",
+      "import": "./dist/schema.js"
+    }
+  },
+  "files": [
+    "dist",
+    "src"
+  ],
+  "dependencies": {
+    "nanoid": "^5.0.0"
+  },
+  "devDependencies": {
+    "tsup": "^8.0.0",
+    "typescript": "^5.5.0",
+    "vitest": "^2.0.0",
+    "@vitest/coverage-v8": "^2.0.0"
+  },
+  "peerDependencies": {},
+  "keywords": [
+    "mdm",
+    "mobile-device-management",
+    "android",
+    "enterprise"
+  ],
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/azoila/openmdm.git",
+    "directory": "packages/core"
+  },
+  "homepage": "https://openmdm.dev",
+  "bugs": {
+    "url": "https://github.com/azoila/openmdm/issues"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "scripts": {
+    "build": "tsup",
+    "dev": "tsup --watch",
+    "typecheck": "tsc --noEmit",
+    "clean": "rm -rf dist",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "test:coverage": "vitest run --coverage"
+  }
+}