@peers-app/peers-sdk 0.20.6 → 0.21.0

package/dist/device-pairing/types.d.ts

@@ -0,0 +1,1023 @@
+import { z } from "zod";
+/** A random 128-bit pairing-room identifier encoded as unpadded base64url. */
+export declare const pairingRoomIdSchema: z.ZodString;
+/** A random 256-bit pairing-room secret encoded as unpadded base64url. */
+export declare const pairingRoomSecretSchema: z.ZodString;
+/** A SHA-256 value encoded as unpadded base64url. */
+export declare const pairingHashSchema: z.ZodString;
+/** A random 256-bit endpoint nonce encoded as unpadded base64url. */
+export declare const pairingEndpointNonceSchema: z.ZodString;
+/** Source and destination roles in a two-party pairing room. */
+export declare const pairingRoleSchema: z.ZodEnum<["source", "destination"]>;
+/** Source or destination role in a two-party pairing room. */
+export type PairingRole = z.infer<typeof pairingRoleSchema>;
+/** Versioned invitation shared out-of-band from the signed-in source. */
+export declare const devicePairingInvitationSchema: z.ZodObject<{
+    version: z.ZodLiteral<1>;
+    roomId: z.ZodString;
+    roomSecret: z.ZodString;
+    expiresAt: z.ZodNumber;
+    serviceOrigin: z.ZodEffects<z.ZodString, string, string>;
+}, "strict", z.ZodTypeAny, {
+    version: 1;
+    expiresAt: number;
+    roomId: string;
+    roomSecret: string;
+    serviceOrigin: string;
+}, {
+    version: 1;
+    expiresAt: number;
+    roomId: string;
+    roomSecret: string;
+    serviceOrigin: string;
+}>;
+/** Parsed device-pairing invitation. */
+export type DevicePairingInvitation = z.infer<typeof devicePairingInvitationSchema>;
+/** WebRTC session description carried inside an authenticated signaling message. */
+export declare const pairingSessionDescriptionSchema: z.ZodObject<{
+    type: z.ZodEnum<["offer", "answer"]>;
+    sdp: z.ZodString;
+    endpointNonce: z.ZodString;
+}, "strict", z.ZodTypeAny, {
+    type: "answer" | "offer";
+    sdp: string;
+    endpointNonce: string;
+}, {
+    type: "answer" | "offer";
+    sdp: string;
+    endpointNonce: string;
+}>;
+/** ICE candidate carried inside an authenticated signaling message. */
+export declare const pairingIceCandidateSchema: z.ZodObject<{
+    candidate: z.ZodString;
+    sdpMid: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    sdpMLineIndex: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+    usernameFragment: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+}, "strict", z.ZodTypeAny, {
+    candidate: string;
+    sdpMid?: string | null | undefined;
+    sdpMLineIndex?: number | null | undefined;
+    usernameFragment?: string | null | undefined;
+}, {
+    candidate: string;
+    sdpMid?: string | null | undefined;
+    sdpMLineIndex?: number | null | undefined;
+    usernameFragment?: string | null | undefined;
+}>;
+/** ICE candidate carried inside an authenticated signaling message. */
+export type PairingIceCandidate = z.infer<typeof pairingIceCandidateSchema>;
+/** Validated ICE server configuration issued to a pairing-room member. */
+export declare const pairingIceServerSchema: z.ZodEffects<z.ZodObject<{
+    urls: z.ZodUnion<[z.ZodEffects<z.ZodString, string, string>, z.ZodArray<z.ZodEffects<z.ZodString, string, string>, "many">]>;
+    username: z.ZodOptional<z.ZodString>;
+    credential: z.ZodOptional<z.ZodString>;
+}, "strict", z.ZodTypeAny, {
+    urls: string | string[];
+    username?: string | undefined;
+    credential?: string | undefined;
+}, {
+    urls: string | string[];
+    username?: string | undefined;
+    credential?: string | undefined;
+}>, {
+    urls: string | string[];
+    username?: string | undefined;
+    credential?: string | undefined;
+}, {
+    urls: string | string[];
+    username?: string | undefined;
+    credential?: string | undefined;
+}>;
+/** ICE server configuration safe to pass to a scoped pairing peer. */
+export type PairingIceServer = z.infer<typeof pairingIceServerSchema>;
+/** Unsigned offer, answer, or ICE message before its signaling MAC is attached. */
+export declare const unsignedPairingSignalSchema: z.ZodDiscriminatedUnion<"kind", [z.ZodObject<{
+    kind: z.ZodLiteral<"offer">;
+    payload: z.ZodObject<{
+        sdp: z.ZodString;
+        endpointNonce: z.ZodString;
+    } & {
+        type: z.ZodLiteral<"offer">;
+    }, "strict", z.ZodTypeAny, {
+        type: "offer";
+        sdp: string;
+        endpointNonce: string;
+    }, {
+        type: "offer";
+        sdp: string;
+        endpointNonce: string;
+    }>;
+    version: z.ZodLiteral<1>;
+    roomId: z.ZodString;
+    senderRole: z.ZodEnum<["source", "destination"]>;
+    sequence: z.ZodNumber;
+}, "strict", z.ZodTypeAny, {
+    sequence: number;
+    version: 1;
+    kind: "offer";
+    roomId: string;
+    payload: {
+        type: "offer";
+        sdp: string;
+        endpointNonce: string;
+    };
+    senderRole: "source" | "destination";
+}, {
+    sequence: number;
+    version: 1;
+    kind: "offer";
+    roomId: string;
+    payload: {
+        type: "offer";
+        sdp: string;
+        endpointNonce: string;
+    };
+    senderRole: "source" | "destination";
+}>, z.ZodObject<{
+    kind: z.ZodLiteral<"answer">;
+    payload: z.ZodObject<{
+        sdp: z.ZodString;
+        endpointNonce: z.ZodString;
+    } & {
+        type: z.ZodLiteral<"answer">;
+    }, "strict", z.ZodTypeAny, {
+        type: "answer";
+        sdp: string;
+        endpointNonce: string;
+    }, {
+        type: "answer";
+        sdp: string;
+        endpointNonce: string;
+    }>;
+    version: z.ZodLiteral<1>;
+    roomId: z.ZodString;
+    senderRole: z.ZodEnum<["source", "destination"]>;
+    sequence: z.ZodNumber;
+}, "strict", z.ZodTypeAny, {
+    sequence: number;
+    version: 1;
+    kind: "answer";
+    roomId: string;
+    payload: {
+        type: "answer";
+        sdp: string;
+        endpointNonce: string;
+    };
+    senderRole: "source" | "destination";
+}, {
+    sequence: number;
+    version: 1;
+    kind: "answer";
+    roomId: string;
+    payload: {
+        type: "answer";
+        sdp: string;
+        endpointNonce: string;
+    };
+    senderRole: "source" | "destination";
+}>, z.ZodObject<{
+    kind: z.ZodLiteral<"candidate">;
+    payload: z.ZodObject<{
+        candidate: z.ZodString;
+        sdpMid: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        sdpMLineIndex: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+        usernameFragment: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    }, "strict", z.ZodTypeAny, {
+        candidate: string;
+        sdpMid?: string | null | undefined;
+        sdpMLineIndex?: number | null | undefined;
+        usernameFragment?: string | null | undefined;
+    }, {
+        candidate: string;
+        sdpMid?: string | null | undefined;
+        sdpMLineIndex?: number | null | undefined;
+        usernameFragment?: string | null | undefined;
+    }>;
+    version: z.ZodLiteral<1>;
+    roomId: z.ZodString;
+    senderRole: z.ZodEnum<["source", "destination"]>;
+    sequence: z.ZodNumber;
+}, "strict", z.ZodTypeAny, {
+    sequence: number;
+    version: 1;
+    kind: "candidate";
+    roomId: string;
+    payload: {
+        candidate: string;
+        sdpMid?: string | null | undefined;
+        sdpMLineIndex?: number | null | undefined;
+        usernameFragment?: string | null | undefined;
+    };
+    senderRole: "source" | "destination";
+}, {
+    sequence: number;
+    version: 1;
+    kind: "candidate";
+    roomId: string;
+    payload: {
+        candidate: string;
+        sdpMid?: string | null | undefined;
+        sdpMLineIndex?: number | null | undefined;
+        usernameFragment?: string | null | undefined;
+    };
+    senderRole: "source" | "destination";
+}>]>;
+/** Signaling message contents before authentication. */
+export type UnsignedPairingSignal = z.infer<typeof unsignedPairingSignalSchema>;
+/** HMAC-authenticated offer, answer, or ICE signaling message. */
+export declare const pairingSignalSchema: z.ZodDiscriminatedUnion<"kind", [z.ZodObject<{
+    kind: z.ZodLiteral<"offer">;
+    payload: z.ZodObject<{
+        sdp: z.ZodString;
+        endpointNonce: z.ZodString;
+    } & {
+        type: z.ZodLiteral<"offer">;
+    }, "strict", z.ZodTypeAny, {
+        type: "offer";
+        sdp: string;
+        endpointNonce: string;
+    }, {
+        type: "offer";
+        sdp: string;
+        endpointNonce: string;
+    }>;
+    mac: z.ZodString;
+    version: z.ZodLiteral<1>;
+    roomId: z.ZodString;
+    senderRole: z.ZodEnum<["source", "destination"]>;
+    sequence: z.ZodNumber;
+}, "strict", z.ZodTypeAny, {
+    sequence: number;
+    version: 1;
+    kind: "offer";
+    roomId: string;
+    payload: {
+        type: "offer";
+        sdp: string;
+        endpointNonce: string;
+    };
+    senderRole: "source" | "destination";
+    mac: string;
+}, {
+    sequence: number;
+    version: 1;
+    kind: "offer";
+    roomId: string;
+    payload: {
+        type: "offer";
+        sdp: string;
+        endpointNonce: string;
+    };
+    senderRole: "source" | "destination";
+    mac: string;
+}>, z.ZodObject<{
+    kind: z.ZodLiteral<"answer">;
+    payload: z.ZodObject<{
+        sdp: z.ZodString;
+        endpointNonce: z.ZodString;
+    } & {
+        type: z.ZodLiteral<"answer">;
+    }, "strict", z.ZodTypeAny, {
+        type: "answer";
+        sdp: string;
+        endpointNonce: string;
+    }, {
+        type: "answer";
+        sdp: string;
+        endpointNonce: string;
+    }>;
+    mac: z.ZodString;
+    version: z.ZodLiteral<1>;
+    roomId: z.ZodString;
+    senderRole: z.ZodEnum<["source", "destination"]>;
+    sequence: z.ZodNumber;
+}, "strict", z.ZodTypeAny, {
+    sequence: number;
+    version: 1;
+    kind: "answer";
+    roomId: string;
+    payload: {
+        type: "answer";
+        sdp: string;
+        endpointNonce: string;
+    };
+    senderRole: "source" | "destination";
+    mac: string;
+}, {
+    sequence: number;
+    version: 1;
+    kind: "answer";
+    roomId: string;
+    payload: {
+        type: "answer";
+        sdp: string;
+        endpointNonce: string;
+    };
+    senderRole: "source" | "destination";
+    mac: string;
+}>, z.ZodObject<{
+    kind: z.ZodLiteral<"candidate">;
+    payload: z.ZodObject<{
+        candidate: z.ZodString;
+        sdpMid: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        sdpMLineIndex: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+        usernameFragment: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    }, "strict", z.ZodTypeAny, {
+        candidate: string;
+        sdpMid?: string | null | undefined;
+        sdpMLineIndex?: number | null | undefined;
+        usernameFragment?: string | null | undefined;
+    }, {
+        candidate: string;
+        sdpMid?: string | null | undefined;
+        sdpMLineIndex?: number | null | undefined;
+        usernameFragment?: string | null | undefined;
+    }>;
+    mac: z.ZodString;
+    version: z.ZodLiteral<1>;
+    roomId: z.ZodString;
+    senderRole: z.ZodEnum<["source", "destination"]>;
+    sequence: z.ZodNumber;
+}, "strict", z.ZodTypeAny, {
+    sequence: number;
+    version: 1;
+    kind: "candidate";
+    roomId: string;
+    payload: {
+        candidate: string;
+        sdpMid?: string | null | undefined;
+        sdpMLineIndex?: number | null | undefined;
+        usernameFragment?: string | null | undefined;
+    };
+    senderRole: "source" | "destination";
+    mac: string;
+}, {
+    sequence: number;
+    version: 1;
+    kind: "candidate";
+    roomId: string;
+    payload: {
+        candidate: string;
+        sdpMid?: string | null | undefined;
+        sdpMLineIndex?: number | null | undefined;
+        usernameFragment?: string | null | undefined;
+    };
+    senderRole: "source" | "destination";
+    mac: string;
+}>]>;
+/** Authenticated signaling message relayed by peers-services. */
+export type PairingSignal = z.infer<typeof pairingSignalSchema>;
+/** Request from the source to create a bounded signaling room. */
+export declare const devicePairingCreateRoomRequestSchema: z.ZodObject<{
+    version: z.ZodLiteral<1>;
+    roomId: z.ZodString;
+    expiresAt: z.ZodNumber;
+    roomAccessTokenHash: z.ZodString;
+}, "strict", z.ZodTypeAny, {
+    version: 1;
+    expiresAt: number;
+    roomId: string;
+    roomAccessTokenHash: string;
+}, {
+    version: 1;
+    expiresAt: number;
+    roomId: string;
+    roomAccessTokenHash: string;
+}>;
+/** Source request to create a bounded signaling room. */
+export type DevicePairingCreateRoomRequest = z.infer<typeof devicePairingCreateRoomRequestSchema>;
+/** Request from the destination to occupy the second room slot. */
+export declare const devicePairingJoinRoomRequestSchema: z.ZodObject<{
+    version: z.ZodLiteral<1>;
+    roomId: z.ZodString;
+    roomAccessToken: z.ZodString;
+}, "strict", z.ZodTypeAny, {
+    version: 1;
+    roomId: string;
+    roomAccessToken: string;
+}, {
+    version: 1;
+    roomId: string;
+    roomAccessToken: string;
+}>;
+/** Destination request to join a bounded signaling room. */
+export type DevicePairingJoinRoomRequest = z.infer<typeof devicePairingJoinRoomRequestSchema>;
+/** Request from the source to tear down its signaling room. */
+export declare const devicePairingDeleteRoomRequestSchema: z.ZodObject<{
+    version: z.ZodLiteral<1>;
+    roomId: z.ZodString;
+    roomAccessToken: z.ZodString;
+}, "strict", z.ZodTypeAny, {
+    version: 1;
+    roomId: string;
+    roomAccessToken: string;
+}, {
+    version: 1;
+    roomId: string;
+    roomAccessToken: string;
+}>;
+/** Source request to delete a bounded signaling room. */
+export type DevicePairingDeleteRoomRequest = z.infer<typeof devicePairingDeleteRoomRequestSchema>;
+/** Public signaling-service error codes that do not echo attacker input. */
+export declare const devicePairingSignalingErrorCodeSchema: z.ZodEnum<["invalid", "not-found", "occupied", "expired", "forbidden", "rate-limited", "too-large", "out-of-order"]>;
+/** Public signaling-service error code. */
+export type DevicePairingSignalingErrorCode = z.infer<typeof devicePairingSignalingErrorCodeSchema>;
+/** Acknowledgement returned by every signaling-room command. */
+export declare const devicePairingSignalingAckSchema: z.ZodDiscriminatedUnion<"ok", [z.ZodObject<{
+    ok: z.ZodLiteral<true>;
+}, "strict", z.ZodTypeAny, {
+    ok: true;
+}, {
+    ok: true;
+}>, z.ZodObject<{
+    ok: z.ZodLiteral<false>;
+    code: z.ZodEnum<["invalid", "not-found", "occupied", "expired", "forbidden", "rate-limited", "too-large", "out-of-order"]>;
+}, "strict", z.ZodTypeAny, {
+    code: "invalid" | "expired" | "not-found" | "occupied" | "forbidden" | "rate-limited" | "too-large" | "out-of-order";
+    ok: false;
+}, {
+    code: "invalid" | "expired" | "not-found" | "occupied" | "forbidden" | "rate-limited" | "too-large" | "out-of-order";
+    ok: false;
+}>]>;
+/** Acknowledgement returned by every signaling-room command. */
+export type DevicePairingSignalingAck = z.infer<typeof devicePairingSignalingAckSchema>;
+/** Acknowledgement proving room creation/join and its service-authoritative expiry. */
+export declare const devicePairingRoomReadyAckSchema: z.ZodDiscriminatedUnion<"ok", [z.ZodObject<{
+    ok: z.ZodLiteral<true>;
+    expiresAt: z.ZodNumber;
+}, "strict", z.ZodTypeAny, {
+    ok: true;
+    expiresAt: number;
+}, {
+    ok: true;
+    expiresAt: number;
+}>, z.ZodObject<{
+    ok: z.ZodLiteral<false>;
+    code: z.ZodEnum<["invalid", "not-found", "occupied", "expired", "forbidden", "rate-limited", "too-large", "out-of-order"]>;
+}, "strict", z.ZodTypeAny, {
+    code: "invalid" | "expired" | "not-found" | "occupied" | "forbidden" | "rate-limited" | "too-large" | "out-of-order";
+    ok: false;
+}, {
+    code: "invalid" | "expired" | "not-found" | "occupied" | "forbidden" | "rate-limited" | "too-large" | "out-of-order";
+    ok: false;
+}>]>;
+/** Room-ready acknowledgement returned by create and join. */
+export type DevicePairingRoomReadyAck = z.infer<typeof devicePairingRoomReadyAckSchema>;
+/** Acknowledgement containing room-bound, short-lived ICE configuration. */
+export declare const devicePairingIceServersAckSchema: z.ZodDiscriminatedUnion<"ok", [z.ZodObject<{
+    ok: z.ZodLiteral<true>;
+    iceServers: z.ZodArray<z.ZodEffects<z.ZodObject<{
+        urls: z.ZodUnion<[z.ZodEffects<z.ZodString, string, string>, z.ZodArray<z.ZodEffects<z.ZodString, string, string>, "many">]>;
+        username: z.ZodOptional<z.ZodString>;
+        credential: z.ZodOptional<z.ZodString>;
+    }, "strict", z.ZodTypeAny, {
+        urls: string | string[];
+        username?: string | undefined;
+        credential?: string | undefined;
+    }, {
+        urls: string | string[];
+        username?: string | undefined;
+        credential?: string | undefined;
+    }>, {
+        urls: string | string[];
+        username?: string | undefined;
+        credential?: string | undefined;
+    }, {
+        urls: string | string[];
+        username?: string | undefined;
+        credential?: string | undefined;
+    }>, "many">;
+}, "strict", z.ZodTypeAny, {
+    ok: true;
+    iceServers: {
+        urls: string | string[];
+        username?: string | undefined;
+        credential?: string | undefined;
+    }[];
+}, {
+    ok: true;
+    iceServers: {
+        urls: string | string[];
+        username?: string | undefined;
+        credential?: string | undefined;
+    }[];
+}>, z.ZodObject<{
+    ok: z.ZodLiteral<false>;
+    code: z.ZodEnum<["invalid", "not-found", "occupied", "expired", "forbidden", "rate-limited", "too-large", "out-of-order"]>;
+}, "strict", z.ZodTypeAny, {
+    code: "invalid" | "expired" | "not-found" | "occupied" | "forbidden" | "rate-limited" | "too-large" | "out-of-order";
+    ok: false;
+}, {
+    code: "invalid" | "expired" | "not-found" | "occupied" | "forbidden" | "rate-limited" | "too-large" | "out-of-order";
+    ok: false;
+}>]>;
+/** ICE configuration acknowledgement returned only to a room member. */
+export type DevicePairingIceServersAck = z.infer<typeof devicePairingIceServersAckSchema>;
+/** Canonical transcript input derived independently by both endpoints. */
+export declare const devicePairingTranscriptSchema: z.ZodObject<{
+    version: z.ZodLiteral<1>;
+    roomId: z.ZodString;
+    sourceIdentity: z.ZodObject<{
+        userId: z.ZodEffects<z.ZodString, string, string>;
+        deviceId: z.ZodEffects<z.ZodString, string, string>;
+        publicKey: z.ZodString;
+        publicBoxKey: z.ZodString;
+        userName: z.ZodOptional<z.ZodString>;
+        deviceName: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        publicKey: string;
+        publicBoxKey: string;
+        userId: string;
+        deviceId: string;
+        deviceName?: string | undefined;
+        userName?: string | undefined;
+    }, {
+        publicKey: string;
+        publicBoxKey: string;
+        userId: string;
+        deviceId: string;
+        deviceName?: string | undefined;
+        userName?: string | undefined;
+    }>;
+    destinationIdentity: z.ZodObject<{
+        userId: z.ZodEffects<z.ZodString, string, string>;
+        deviceId: z.ZodEffects<z.ZodString, string, string>;
+        publicKey: z.ZodString;
+        publicBoxKey: z.ZodString;
+        userName: z.ZodOptional<z.ZodString>;
+        deviceName: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        publicKey: string;
+        publicBoxKey: string;
+        userId: string;
+        deviceId: string;
+        deviceName?: string | undefined;
+        userName?: string | undefined;
+    }, {
+        publicKey: string;
+        publicBoxKey: string;
+        userId: string;
+        deviceId: string;
+        deviceName?: string | undefined;
+        userName?: string | undefined;
+    }>;
+    sourceEndpointNonce: z.ZodString;
+    destinationEndpointNonce: z.ZodString;
+    offerFingerprint: z.ZodString;
+    answerFingerprint: z.ZodString;
+}, "strict", z.ZodTypeAny, {
+    version: 1;
+    roomId: string;
+    sourceIdentity: {
+        publicKey: string;
+        publicBoxKey: string;
+        userId: string;
+        deviceId: string;
+        deviceName?: string | undefined;
+        userName?: string | undefined;
+    };
+    destinationIdentity: {
+        publicKey: string;
+        publicBoxKey: string;
+        userId: string;
+        deviceId: string;
+        deviceName?: string | undefined;
+        userName?: string | undefined;
+    };
+    sourceEndpointNonce: string;
+    destinationEndpointNonce: string;
+    offerFingerprint: string;
+    answerFingerprint: string;
+}, {
+    version: 1;
+    roomId: string;
+    sourceIdentity: {
+        publicKey: string;
+        publicBoxKey: string;
+        userId: string;
+        deviceId: string;
+        deviceName?: string | undefined;
+        userName?: string | undefined;
+    };
+    destinationIdentity: {
+        publicKey: string;
+        publicBoxKey: string;
+        userId: string;
+        deviceId: string;
+        deviceName?: string | undefined;
+        userName?: string | undefined;
+    };
+    sourceEndpointNonce: string;
+    destinationEndpointNonce: string;
+    offerFingerprint: string;
+    answerFingerprint: string;
+}>;
+/** Inputs whose canonical hash identifies one pairing connection. */
+export type DevicePairingTranscript = z.infer<typeof devicePairingTranscriptSchema>;
+/** Renderer-safe presentation of the remote endpoint. */
+export declare const pairingDevicePresentationSchema: z.ZodObject<{
+    deviceName: z.ZodOptional<z.ZodString>;
+    userName: z.ZodOptional<z.ZodString>;
+    deviceType: z.ZodOptional<z.ZodString>;
+}, "strict", z.ZodTypeAny, {
+    deviceName?: string | undefined;
+    userName?: string | undefined;
+    deviceType?: string | undefined;
+}, {
+    deviceName?: string | undefined;
+    userName?: string | undefined;
+    deviceType?: string | undefined;
+}>;
+/** Renderer-safe presentation of the remote endpoint. */
+export type PairingDevicePresentation = z.infer<typeof pairingDevicePresentationSchema>;
+/** Payload exchanged by `pairing.describe` after the normal Connection handshake. */
+export declare const pairingDescriptionSchema: z.ZodObject<{
+    version: z.ZodLiteral<1>;
+    transcriptHash: z.ZodString;
+    device: z.ZodObject<{
+        userId: z.ZodEffects<z.ZodString, string, string>;
+        deviceId: z.ZodEffects<z.ZodString, string, string>;
+        publicKey: z.ZodString;
+        publicBoxKey: z.ZodString;
+        userName: z.ZodOptional<z.ZodString>;
+        deviceName: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        publicKey: string;
+        publicBoxKey: string;
+        userId: string;
+        deviceId: string;
+        deviceName?: string | undefined;
+        userName?: string | undefined;
+    }, {
+        publicKey: string;
+        publicBoxKey: string;
+        userId: string;
+        deviceId: string;
+        deviceName?: string | undefined;
+        userName?: string | undefined;
+    }>;
+    presentation: z.ZodObject<{
+        deviceName: z.ZodOptional<z.ZodString>;
+        userName: z.ZodOptional<z.ZodString>;
+        deviceType: z.ZodOptional<z.ZodString>;
+    }, "strict", z.ZodTypeAny, {
+        deviceName?: string | undefined;
+        userName?: string | undefined;
+        deviceType?: string | undefined;
+    }, {
+        deviceName?: string | undefined;
+        userName?: string | undefined;
+        deviceType?: string | undefined;
+    }>;
+}, "strict", z.ZodTypeAny, {
+    version: 1;
+    device: {
+        publicKey: string;
+        publicBoxKey: string;
+        userId: string;
+        deviceId: string;
+        deviceName?: string | undefined;
+        userName?: string | undefined;
+    };
+    transcriptHash: string;
+    presentation: {
+        deviceName?: string | undefined;
+        userName?: string | undefined;
+        deviceType?: string | undefined;
+    };
+}, {
+    version: 1;
+    device: {
+        publicKey: string;
+        publicBoxKey: string;
+        userId: string;
+        deviceId: string;
+        deviceName?: string | undefined;
+        userName?: string | undefined;
+    };
+    transcriptHash: string;
+    presentation: {
+        deviceName?: string | undefined;
+        userName?: string | undefined;
+        deviceType?: string | undefined;
+    };
+}>;
+/** Payload exchanged by `pairing.describe`. */
+export type PairingDescription = z.infer<typeof pairingDescriptionSchema>;
+/** Contents of a signed, single-use user approval. */
+export declare const pairingApprovalContentsSchema: z.ZodObject<{
+    version: z.ZodLiteral<1>;
+    approvalId: z.ZodString;
+    transcriptHash: z.ZodString;
+    role: z.ZodEnum<["source", "destination"]>;
+    expiresAt: z.ZodNumber;
+}, "strict", z.ZodTypeAny, {
+    role: "source" | "destination";
+    version: 1;
+    expiresAt: number;
+    transcriptHash: string;
+    approvalId: string;
+}, {
+    role: "source" | "destination";
+    version: 1;
+    expiresAt: number;
+    transcriptHash: string;
+    approvalId: string;
+}>;
+/** Contents of a signed pairing approval. */
+export type PairingApprovalContents = z.infer<typeof pairingApprovalContentsSchema>;
+/** Signed approval bound to one transcript and endpoint identity. */
+export declare const signedPairingApprovalSchema: z.ZodObject<{
+    contents: z.ZodObject<{
+        version: z.ZodLiteral<1>;
+        approvalId: z.ZodString;
+        transcriptHash: z.ZodString;
+        role: z.ZodEnum<["source", "destination"]>;
+        expiresAt: z.ZodNumber;
+    }, "strict", z.ZodTypeAny, {
+        role: "source" | "destination";
+        version: 1;
+        expiresAt: number;
+        transcriptHash: string;
+        approvalId: string;
+    }, {
+        role: "source" | "destination";
+        version: 1;
+        expiresAt: number;
+        transcriptHash: string;
+        approvalId: string;
+    }>;
+    signature: z.ZodString;
+    publicKey: z.ZodString;
+}, "strict", z.ZodTypeAny, {
+    publicKey: string;
+    signature: string;
+    contents: {
+        role: "source" | "destination";
+        version: 1;
+        expiresAt: number;
+        transcriptHash: string;
+        approvalId: string;
+    };
+}, {
+    publicKey: string;
+    signature: string;
+    contents: {
+        role: "source" | "destination";
+        version: 1;
+        expiresAt: number;
+        transcriptHash: string;
+        approvalId: string;
+    };
+}>;
+/** Signed approval bound to one transcript and endpoint identity. */
+export type SignedPairingApproval = z.infer<typeof signedPairingApprovalSchema>;
+/** Account credentials encrypted directly to the temporary destination identity. */
+export declare const pairingCredentialContentsSchema: z.ZodObject<{
+    version: z.ZodLiteral<1>;
+    transcriptHash: z.ZodString;
+    expiresAt: z.ZodNumber;
+    userId: z.ZodEffects<z.ZodString, string, string>;
+    secretKey: z.ZodString;
+}, "strict", z.ZodTypeAny, {
+    version: 1;
+    secretKey: string;
+    userId: string;
+    expiresAt: number;
+    transcriptHash: string;
+}, {
+    version: 1;
+    secretKey: string;
+    userId: string;
+    expiresAt: number;
+    transcriptHash: string;
+}>;
+/** Account credentials before they are signed and boxed. */
+export type PairingCredentialContents = z.infer<typeof pairingCredentialContentsSchema>;
+/** Signed-and-boxed credential envelope sent over the WebRTC Connection. */
+export declare const pairingCredentialEnvelopeSchema: z.ZodObject<{
+    contents: z.ZodString;
+    nonce: z.ZodString;
+    fromPublicKey: z.ZodString;
+}, "strict", z.ZodTypeAny, {
+    nonce: string;
+    contents: string;
+    fromPublicKey: string;
+}, {
+    nonce: string;
+    contents: string;
+    fromPublicKey: string;
+}>;
+/** Signed-and-boxed credential envelope sent over the WebRTC Connection. */
+export type PairingCredentialEnvelope = z.infer<typeof pairingCredentialEnvelopeSchema>;
+/** Contents of the temporary destination identity's signed installation receipt. */
+export declare const pairingInstallationReceiptContentsSchema: z.ZodObject<{
+    version: z.ZodLiteral<1>;
+    transcriptHash: z.ZodString;
+    initializedDevice: z.ZodObject<{
+        userId: z.ZodEffects<z.ZodString, string, string>;
+        deviceId: z.ZodEffects<z.ZodString, string, string>;
+        publicKey: z.ZodString;
+        publicBoxKey: z.ZodString;
+        userName: z.ZodOptional<z.ZodString>;
+        deviceName: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        publicKey: string;
+        publicBoxKey: string;
+        userId: string;
+        deviceId: string;
+        deviceName?: string | undefined;
+        userName?: string | undefined;
+    }, {
+        publicKey: string;
+        publicBoxKey: string;
+        userId: string;
+        deviceId: string;
+        deviceName?: string | undefined;
+        userName?: string | undefined;
+    }>;
+    installedAt: z.ZodNumber;
+}, "strict", z.ZodTypeAny, {
+    version: 1;
+    transcriptHash: string;
+    initializedDevice: {
+        publicKey: string;
+        publicBoxKey: string;
+        userId: string;
+        deviceId: string;
+        deviceName?: string | undefined;
+        userName?: string | undefined;
+    };
+    installedAt: number;
+}, {
+    version: 1;
+    transcriptHash: string;
+    initializedDevice: {
+        publicKey: string;
+        publicBoxKey: string;
+        userId: string;
+        deviceId: string;
+        deviceName?: string | undefined;
+        userName?: string | undefined;
+    };
+    installedAt: number;
+}>;
+/** Contents of a signed installation receipt. */
+export type PairingInstallationReceiptContents = z.infer<typeof pairingInstallationReceiptContentsSchema>;
+/** Receipt proving installation on the authenticated temporary destination endpoint. */
+export declare const signedPairingInstallationReceiptSchema: z.ZodObject<{
+    contents: z.ZodObject<{
+        version: z.ZodLiteral<1>;
+        transcriptHash: z.ZodString;
+        initializedDevice: z.ZodObject<{
+            userId: z.ZodEffects<z.ZodString, string, string>;
+            deviceId: z.ZodEffects<z.ZodString, string, string>;
+            publicKey: z.ZodString;
+            publicBoxKey: z.ZodString;
+            userName: z.ZodOptional<z.ZodString>;
+            deviceName: z.ZodOptional<z.ZodString>;
+        }, "strip", z.ZodTypeAny, {
+            publicKey: string;
+            publicBoxKey: string;
+            userId: string;
+            deviceId: string;
+            deviceName?: string | undefined;
+            userName?: string | undefined;
+        }, {
+            publicKey: string;
+            publicBoxKey: string;
+            userId: string;
+            deviceId: string;
+            deviceName?: string | undefined;
+            userName?: string | undefined;
+        }>;
+        installedAt: z.ZodNumber;
+    }, "strict", z.ZodTypeAny, {
+        version: 1;
+        transcriptHash: string;
+        initializedDevice: {
+            publicKey: string;
+            publicBoxKey: string;
+            userId: string;
+            deviceId: string;
+            deviceName?: string | undefined;
+            userName?: string | undefined;
+        };
+        installedAt: number;
+    }, {
+        version: 1;
+        transcriptHash: string;
+        initializedDevice: {
+            publicKey: string;
+            publicBoxKey: string;
+            userId: string;
+            deviceId: string;
+            deviceName?: string | undefined;
+            userName?: string | undefined;
+        };
+        installedAt: number;
+    }>;
+    signature: z.ZodString;
+    publicKey: z.ZodString;
+}, "strict", z.ZodTypeAny, {
+    publicKey: string;
+    signature: string;
+    contents: {
+        version: 1;
+        transcriptHash: string;
+        initializedDevice: {
+            publicKey: string;
+            publicBoxKey: string;
+            userId: string;
+            deviceId: string;
+            deviceName?: string | undefined;
+            userName?: string | undefined;
+        };
+        installedAt: number;
+    };
+}, {
+    publicKey: string;
+    signature: string;
+    contents: {
+        version: 1;
+        transcriptHash: string;
+        initializedDevice: {
+            publicKey: string;
+            publicBoxKey: string;
+            userId: string;
+            deviceId: string;
+            deviceName?: string | undefined;
+            userName?: string | undefined;
+        };
+        installedAt: number;
+    };
+}>;
+/** Receipt proving installation on the authenticated temporary destination endpoint. */
+export type SignedPairingInstallationReceipt = z.infer<typeof signedPairingInstallationReceiptSchema>;
+/** Renderer-visible phases of the short-lived pairing ceremony. */
+export declare const devicePairingPhaseSchema: z.ZodEnum<["idle", "inviting", "connecting", "comparing", "waiting-for-approval", "transferring", "complete", "rejected", "error"]>;
+/** Renderer-visible phase of the short-lived pairing ceremony. */
+export type DevicePairingPhase = z.infer<typeof devicePairingPhaseSchema>;
+/** Sanitized pairing state safe to publish across the host/renderer boundary. */
+export declare const devicePairingStateSchema: z.ZodObject<{
+    sessionId: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
+    role: z.ZodOptional<z.ZodEnum<["source", "destination"]>>;
+    phase: z.ZodEnum<["idle", "inviting", "connecting", "comparing", "waiting-for-approval", "transferring", "complete", "rejected", "error"]>;
+    expiresAt: z.ZodOptional<z.ZodNumber>;
+    remoteDevice: z.ZodOptional<z.ZodObject<{
+        deviceName: z.ZodOptional<z.ZodString>;
+        userName: z.ZodOptional<z.ZodString>;
+        deviceType: z.ZodOptional<z.ZodString>;
+    }, "strict", z.ZodTypeAny, {
+        deviceName?: string | undefined;
+        userName?: string | undefined;
+        deviceType?: string | undefined;
+    }, {
+        deviceName?: string | undefined;
+        userName?: string | undefined;
+        deviceType?: string | undefined;
+    }>>;
+    sas: z.ZodOptional<z.ZodString>;
+    error: z.ZodOptional<z.ZodString>;
+}, "strict", z.ZodTypeAny, {
+    phase: "error" | "connecting" | "idle" | "complete" | "rejected" | "inviting" | "comparing" | "waiting-for-approval" | "transferring";
+    error?: string | undefined;
+    role?: "source" | "destination" | undefined;
+    sessionId?: string | undefined;
+    expiresAt?: number | undefined;
+    remoteDevice?: {
+        deviceName?: string | undefined;
+        userName?: string | undefined;
+        deviceType?: string | undefined;
+    } | undefined;
+    sas?: string | undefined;
+}, {
+    phase: "error" | "connecting" | "idle" | "complete" | "rejected" | "inviting" | "comparing" | "waiting-for-approval" | "transferring";
+    error?: string | undefined;
+    role?: "source" | "destination" | undefined;
+    sessionId?: string | undefined;
+    expiresAt?: number | undefined;
+    remoteDevice?: {
+        deviceName?: string | undefined;
+        userName?: string | undefined;
+        deviceType?: string | undefined;
+    } | undefined;
+    sas?: string | undefined;
+}>;
+/** Sanitized pairing state safe to publish across the host/renderer boundary. */
+export type DevicePairingState = z.infer<typeof devicePairingStateSchema>;
+/** One-time source start result; emitted state never contains the invitation URL. */
+export interface DevicePairingStartSourceResult {
+    state: DevicePairingState;
+    invitationUrl: string;
+}
+/** Input for starting a destination-side pairing ceremony. */
+export interface DevicePairingStartDestinationInput {
+    invitation: string;
+    deviceName?: string;
+    deviceType?: string;
+}
+/** Input for an action against the active pairing ceremony. */
+export interface DevicePairingCeremonyAction {
+    sessionId: string;
+}