@quantiya/codevibe-core 1.0.2 → 1.0.4

package/dist/crypto/crypto-service.d.ts

@@ -1,118 +0,0 @@
-import { EncryptedSessionKey, KeyPair } from '../types';
-/**
- * Error class for cryptographic operations
- */
-export declare class CryptoError extends Error {
-    constructor(message: string);
-}
-/**
- * Current encryption version for future algorithm upgrades
- */
-export declare const ENCRYPTION_VERSION = 1;
-/**
- * Service for end-to-end encryption operations
- */
-export declare class CryptoService {
-    private static instance;
-    private constructor();
-    static getInstance(): CryptoService;
-    /**
-     * Generate a new ECDH P-256 key pair
-     * @returns Object with privateKey (base64), publicKey (base64 raw)
-     */
-    generateKeyPair(): KeyPair;
-    /**
-     * Generate a random 256-bit session key
-     * @returns Base64-encoded session key
-     */
-    generateSessionKey(): string;
-    /**
-     * Derive a shared secret using ECDH and HKDF
-     * @param privateKeyBase64 Our private key (base64)
-     * @param publicKeyBase64 Other party's public key (base64)
-     * @returns 256-bit derived key as Buffer
-     */
-    deriveSharedKey(privateKeyBase64: string, publicKeyBase64: string): Buffer;
-    /**
-     * Encrypt a session key for a target device using ECDH
-     * @param sessionKeyBase64 The session key to encrypt (base64)
-     * @param targetPublicKeyBase64 Target device's public key (base64)
-     * @returns EncryptedSessionKey containing encrypted key and ephemeral public key
-     */
-    encryptSessionKey(sessionKeyBase64: string, targetPublicKeyBase64: string): Omit<EncryptedSessionKey, 'deviceId'>;
-    /**
-     * Decrypt a session key using our private key
-     * @param encryptedSessionKey The encrypted session key data
-     * @param privateKeyBase64 Our device's private key (base64)
-     * @returns Decrypted session key (base64)
-     */
-    decryptSessionKey(encryptedSessionKey: EncryptedSessionKey, privateKeyBase64: string): string;
-    /**
-     * Encrypt content using AES-256-GCM
-     * @param content String content to encrypt
-     * @param sessionKeyBase64 Session key (base64)
-     * @returns Base64-encoded ciphertext (nonce + ciphertext + tag)
-     */
-    encryptContent(content: string, sessionKeyBase64: string): string;
-    /**
-     * Decrypt content using AES-256-GCM
-     * @param encryptedContent Base64-encoded ciphertext
-     * @param sessionKeyBase64 Session key (base64)
-     * @returns Decrypted string content
-     */
-    decryptContent(encryptedContent: string, sessionKeyBase64: string): string;
-    /**
-     * Encrypt JSON-serializable metadata
-     * @param metadata Object to encrypt
-     * @param sessionKeyBase64 Session key (base64)
-     * @returns Base64-encoded encrypted JSON
-     */
-    encryptMetadata(metadata: Record<string, any>, sessionKeyBase64: string): string;
-    /**
-     * Decrypt encrypted metadata
-     * @param encryptedMetadata Base64-encoded encrypted JSON
-     * @param sessionKeyBase64 Session key (base64)
-     * @returns Decrypted object
-     */
-    decryptMetadata(encryptedMetadata: string, sessionKeyBase64: string): Record<string, any>;
-    /**
-     * Encrypt binary data using AES-256-GCM
-     * @param data Binary data to encrypt (Buffer)
-     * @param sessionKeyBase64 Session key (base64)
-     * @returns Encrypted data (Buffer containing nonce + ciphertext + tag)
-     */
-    encryptData(data: Buffer, sessionKeyBase64: string): Buffer;
-    /**
-     * Decrypt binary data using AES-256-GCM
-     * @param encryptedData Encrypted data (Buffer containing nonce + ciphertext + tag)
-     * @param sessionKeyBase64 Session key (base64)
-     * @returns Decrypted binary data (Buffer)
-     */
-    decryptData(encryptedData: Buffer, sessionKeyBase64: string): Buffer;
-    /**
-     * Encrypt data using AES-256-GCM
-     * @param data Data to encrypt
-     * @param key Symmetric key (32 bytes)
-     * @returns Combined nonce + ciphertext + tag
-     */
-    private encrypt;
-    /**
-     * Decrypt data using AES-256-GCM
-     * @param data Combined nonce + ciphertext + tag
-     * @param key Symmetric key (32 bytes)
-     * @returns Decrypted data
-     */
-    private decrypt;
-    /**
-     * Serialize a private key for storage
-     */
-    serializePrivateKey(privateKeyBase64: string): string;
-    /**
-     * Deserialize a private key from storage
-     */
-    deserializePrivateKey(base64: string): string;
-}
-/**
- * Export singleton instance
- */
-export declare const cryptoService: CryptoService;

package/dist/crypto/crypto-service.js

@@ -1,284 +0,0 @@
-"use strict";
-//
-// crypto-service.ts
-// CodeVibe Core
-//
-// End-to-end encryption service using ECDH P-256 and AES-256-GCM
-//
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.cryptoService = exports.CryptoService = exports.ENCRYPTION_VERSION = exports.CryptoError = void 0;
-const crypto = __importStar(require("crypto"));
-/**
- * Error class for cryptographic operations
- */
-class CryptoError extends Error {
-    constructor(message) {
-        super(message);
-        this.name = 'CryptoError';
-    }
-}
-exports.CryptoError = CryptoError;
-/**
- * Current encryption version for future algorithm upgrades
- */
-exports.ENCRYPTION_VERSION = 1;
-/**
- * HKDF info string for key derivation
- */
-const HKDF_INFO = 'CodeVibe E2E v1';
-/**
- * Service for end-to-end encryption operations
- */
-class CryptoService {
-    constructor() { }
-    static getInstance() {
-        if (!CryptoService.instance) {
-            CryptoService.instance = new CryptoService();
-        }
-        return CryptoService.instance;
-    }
-    // MARK: - Key Generation
-    /**
-     * Generate a new ECDH P-256 key pair
-     * @returns Object with privateKey (base64), publicKey (base64 raw)
-     */
-    generateKeyPair() {
-        const ecdh = crypto.createECDH('prime256v1');
-        ecdh.generateKeys();
-        // Get raw public key (uncompressed format without 0x04 prefix for compatibility)
-        const publicKeyRaw = ecdh.getPublicKey();
-        const publicKeyBase64 = publicKeyRaw.subarray(1).toString('base64'); // Skip 0x04 prefix
-        // Get private key as raw bytes
-        const privateKeyRaw = ecdh.getPrivateKey();
-        const privateKeyBase64 = privateKeyRaw.toString('base64');
-        return {
-            privateKey: privateKeyBase64,
-            publicKey: publicKeyBase64,
-        };
-    }
-    /**
-     * Generate a random 256-bit session key
-     * @returns Base64-encoded session key
-     */
-    generateSessionKey() {
-        const keyData = crypto.randomBytes(32); // 256 bits
-        return keyData.toString('base64');
-    }
-    // MARK: - Key Derivation
-    /**
-     * Derive a shared secret using ECDH and HKDF
-     * @param privateKeyBase64 Our private key (base64)
-     * @param publicKeyBase64 Other party's public key (base64)
-     * @returns 256-bit derived key as Buffer
-     */
-    deriveSharedKey(privateKeyBase64, publicKeyBase64) {
-        try {
-            const ecdh = crypto.createECDH('prime256v1');
-            const privateKeyRaw = Buffer.from(privateKeyBase64, 'base64');
-            ecdh.setPrivateKey(privateKeyRaw);
-            // Add 0x04 prefix for uncompressed public key format
-            const publicKeyRaw = Buffer.concat([
-                Buffer.from([0x04]),
-                Buffer.from(publicKeyBase64, 'base64'),
-            ]);
-            const sharedSecret = ecdh.computeSecret(publicKeyRaw);
-            // Derive key using HKDF-SHA256
-            const derivedKey = crypto.hkdfSync('sha256', sharedSecret, Buffer.alloc(0), // Empty salt
-            Buffer.from(HKDF_INFO, 'utf8'), 32 // 256 bits
-            );
-            return Buffer.from(derivedKey);
-        }
-        catch (error) {
-            throw new CryptoError(`Failed to derive shared key: ${error}`);
-        }
-    }
-    // MARK: - Session Key Encryption
-    /**
-     * Encrypt a session key for a target device using ECDH
-     * @param sessionKeyBase64 The session key to encrypt (base64)
-     * @param targetPublicKeyBase64 Target device's public key (base64)
-     * @returns EncryptedSessionKey containing encrypted key and ephemeral public key
-     */
-    encryptSessionKey(sessionKeyBase64, targetPublicKeyBase64) {
-        // Generate ephemeral key pair for this encryption
-        const ephemeralKeyPair = this.generateKeyPair();
-        // Derive shared key using ephemeral private + target public
-        const sharedKey = this.deriveSharedKey(ephemeralKeyPair.privateKey, targetPublicKeyBase64);
-        // Encrypt session key with derived key
-        const sessionKeyData = Buffer.from(sessionKeyBase64, 'base64');
-        const encryptedData = this.encrypt(sessionKeyData, sharedKey);
-        return {
-            encryptedKey: encryptedData.toString('base64'),
-            ephemeralPublicKey: ephemeralKeyPair.publicKey,
-        };
-    }
-    /**
-     * Decrypt a session key using our private key
-     * @param encryptedSessionKey The encrypted session key data
-     * @param privateKeyBase64 Our device's private key (base64)
-     * @returns Decrypted session key (base64)
-     */
-    decryptSessionKey(encryptedSessionKey, privateKeyBase64) {
-        // Derive shared key using our private + ephemeral public
-        const sharedKey = this.deriveSharedKey(privateKeyBase64, encryptedSessionKey.ephemeralPublicKey);
-        // Decrypt session key
-        const encryptedData = Buffer.from(encryptedSessionKey.encryptedKey, 'base64');
-        const decryptedData = this.decrypt(encryptedData, sharedKey);
-        return decryptedData.toString('base64');
-    }
-    // MARK: - Content Encryption/Decryption
-    /**
-     * Encrypt content using AES-256-GCM
-     * @param content String content to encrypt
-     * @param sessionKeyBase64 Session key (base64)
-     * @returns Base64-encoded ciphertext (nonce + ciphertext + tag)
-     */
-    encryptContent(content, sessionKeyBase64) {
-        const sessionKey = Buffer.from(sessionKeyBase64, 'base64');
-        const contentData = Buffer.from(content, 'utf8');
-        const encryptedData = this.encrypt(contentData, sessionKey);
-        return encryptedData.toString('base64');
-    }
-    /**
-     * Decrypt content using AES-256-GCM
-     * @param encryptedContent Base64-encoded ciphertext
-     * @param sessionKeyBase64 Session key (base64)
-     * @returns Decrypted string content
-     */
-    decryptContent(encryptedContent, sessionKeyBase64) {
-        const sessionKey = Buffer.from(sessionKeyBase64, 'base64');
-        const encryptedData = Buffer.from(encryptedContent, 'base64');
-        const decryptedData = this.decrypt(encryptedData, sessionKey);
-        return decryptedData.toString('utf8');
-    }
-    /**
-     * Encrypt JSON-serializable metadata
-     * @param metadata Object to encrypt
-     * @param sessionKeyBase64 Session key (base64)
-     * @returns Base64-encoded encrypted JSON
-     */
-    encryptMetadata(metadata, sessionKeyBase64) {
-        const jsonString = JSON.stringify(metadata);
-        return this.encryptContent(jsonString, sessionKeyBase64);
-    }
-    /**
-     * Decrypt encrypted metadata
-     * @param encryptedMetadata Base64-encoded encrypted JSON
-     * @param sessionKeyBase64 Session key (base64)
-     * @returns Decrypted object
-     */
-    decryptMetadata(encryptedMetadata, sessionKeyBase64) {
-        const jsonString = this.decryptContent(encryptedMetadata, sessionKeyBase64);
-        return JSON.parse(jsonString);
-    }
-    // MARK: - Binary Data Encryption (for attachments)
-    /**
-     * Encrypt binary data using AES-256-GCM
-     * @param data Binary data to encrypt (Buffer)
-     * @param sessionKeyBase64 Session key (base64)
-     * @returns Encrypted data (Buffer containing nonce + ciphertext + tag)
-     */
-    encryptData(data, sessionKeyBase64) {
-        const sessionKey = Buffer.from(sessionKeyBase64, 'base64');
-        return this.encrypt(data, sessionKey);
-    }
-    /**
-     * Decrypt binary data using AES-256-GCM
-     * @param encryptedData Encrypted data (Buffer containing nonce + ciphertext + tag)
-     * @param sessionKeyBase64 Session key (base64)
-     * @returns Decrypted binary data (Buffer)
-     */
-    decryptData(encryptedData, sessionKeyBase64) {
-        const sessionKey = Buffer.from(sessionKeyBase64, 'base64');
-        return this.decrypt(encryptedData, sessionKey);
-    }
-    // MARK: - Low-level Encryption
-    /**
-     * Encrypt data using AES-256-GCM
-     * @param data Data to encrypt
-     * @param key Symmetric key (32 bytes)
-     * @returns Combined nonce + ciphertext + tag
-     */
-    encrypt(data, key) {
-        // Generate random 12-byte nonce (IV)
-        const nonce = crypto.randomBytes(12);
-        const cipher = crypto.createCipheriv('aes-256-gcm', key, nonce);
-        const ciphertext = Buffer.concat([cipher.update(data), cipher.final()]);
-        const tag = cipher.getAuthTag();
-        // Combine: nonce (12 bytes) + ciphertext + tag (16 bytes)
-        return Buffer.concat([nonce, ciphertext, tag]);
-    }
-    /**
-     * Decrypt data using AES-256-GCM
-     * @param data Combined nonce + ciphertext + tag
-     * @param key Symmetric key (32 bytes)
-     * @returns Decrypted data
-     */
-    decrypt(data, key) {
-        // Extract: nonce (12 bytes) + ciphertext + tag (16 bytes)
-        const nonce = data.subarray(0, 12);
-        const tag = data.subarray(data.length - 16);
-        const ciphertext = data.subarray(12, data.length - 16);
-        const decipher = crypto.createDecipheriv('aes-256-gcm', key, nonce);
-        decipher.setAuthTag(tag);
-        try {
-            const decrypted = Buffer.concat([decipher.update(ciphertext), decipher.final()]);
-            return decrypted;
-        }
-        catch (error) {
-            throw new CryptoError('Decryption failed: Invalid ciphertext or authentication tag');
-        }
-    }
-    // MARK: - Key Serialization
-    /**
-     * Serialize a private key for storage
-     */
-    serializePrivateKey(privateKeyBase64) {
-        return privateKeyBase64;
-    }
-    /**
-     * Deserialize a private key from storage
-     */
-    deserializePrivateKey(base64) {
-        return base64;
-    }
-}
-exports.CryptoService = CryptoService;
-/**
- * Export singleton instance
- */
-exports.cryptoService = CryptoService.getInstance();
-//# sourceMappingURL=data:application/json;base64,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

package/dist/crypto/index.d.ts

@@ -1 +0,0 @@
-export { CryptoService, cryptoService, CryptoError, ENCRYPTION_VERSION } from './crypto-service';

package/dist/crypto/index.js

@@ -1,9 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.ENCRYPTION_VERSION = exports.CryptoError = exports.cryptoService = exports.CryptoService = void 0;
-var crypto_service_1 = require("./crypto-service");
-Object.defineProperty(exports, "CryptoService", { enumerable: true, get: function () { return crypto_service_1.CryptoService; } });
-Object.defineProperty(exports, "cryptoService", { enumerable: true, get: function () { return crypto_service_1.cryptoService; } });
-Object.defineProperty(exports, "CryptoError", { enumerable: true, get: function () { return crypto_service_1.CryptoError; } });
-Object.defineProperty(exports, "ENCRYPTION_VERSION", { enumerable: true, get: function () { return crypto_service_1.ENCRYPTION_VERSION; } });
-//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW5kZXguanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi9zcmMvY3J5cHRvL2luZGV4LnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiI7OztBQUFBLG1EQUFpRztBQUF4RiwrR0FBQSxhQUFhLE9BQUE7QUFBRSwrR0FBQSxhQUFhLE9BQUE7QUFBRSw2R0FBQSxXQUFXLE9BQUE7QUFBRSxvSEFBQSxrQkFBa0IsT0FBQSIsInNvdXJjZXNDb250ZW50IjpbImV4cG9ydCB7IENyeXB0b1NlcnZpY2UsIGNyeXB0b1NlcnZpY2UsIENyeXB0b0Vycm9yLCBFTkNSWVBUSU9OX1ZFUlNJT04gfSBmcm9tICcuL2NyeXB0by1zZXJ2aWNlJztcbiJdfQ==

package/dist/index.d.ts

@@ -1,14 +0,0 @@
-export { KeychainManager, keychainManager, KeychainError } from './keychain';
-export { CryptoService, cryptoService, CryptoError, ENCRYPTION_VERSION } from './crypto';
-export { AppSyncClient, DownloadUrlResponse } from './appsync';
-export { queries, mutations, subscriptions } from './appsync';
-export { AuthService, authService } from './auth';
-export { runAuthCli } from './auth';
-export { loadConfig, getConfig, getEnvironment } from './config';
-export type { Config, Environment } from './config';
-export { Logger, logger, createLogger } from './logger';
-export { parseInteractivePrompt, normalizeSnapshot, } from './prompt-parser';
-export type { ParsedInteractivePrompt, PromptKind, InteractivePromptOption, } from './prompt-parser';
-export { resumeOrCreateSession, prepareSessionEncryption } from './session';
-export type { ResumeOrCreateSessionInput, ResumeOrCreateSessionResult } from './session';
-export * from './types';

package/dist/keychain/index.d.ts

@@ -1 +0,0 @@
-export { KeychainManager, keychainManager, KeychainError } from './keychain-manager';

package/dist/keychain/index.js

@@ -1,8 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.KeychainError = exports.keychainManager = exports.KeychainManager = void 0;
-var keychain_manager_1 = require("./keychain-manager");
-Object.defineProperty(exports, "KeychainManager", { enumerable: true, get: function () { return keychain_manager_1.KeychainManager; } });
-Object.defineProperty(exports, "keychainManager", { enumerable: true, get: function () { return keychain_manager_1.keychainManager; } });
-Object.defineProperty(exports, "KeychainError", { enumerable: true, get: function () { return keychain_manager_1.KeychainError; } });
-//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW5kZXguanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi9zcmMva2V5Y2hhaW4vaW5kZXgudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6Ijs7O0FBQUEsdURBQXFGO0FBQTVFLG1IQUFBLGVBQWUsT0FBQTtBQUFFLG1IQUFBLGVBQWUsT0FBQTtBQUFFLGlIQUFBLGFBQWEsT0FBQSIsInNvdXJjZXNDb250ZW50IjpbImV4cG9ydCB7IEtleWNoYWluTWFuYWdlciwga2V5Y2hhaW5NYW5hZ2VyLCBLZXljaGFpbkVycm9yIH0gZnJvbSAnLi9rZXljaGFpbi1tYW5hZ2VyJztcbiJdfQ==

package/dist/keychain/keychain-manager.d.ts

@@ -1,125 +0,0 @@
-import { DeviceIdentity, TokenData, EncryptedSessionKey } from '../types';
-/**
- * Error class for keychain operations
- */
-export declare class KeychainError extends Error {
-    constructor(message: string);
-}
-/**
- * Manages device identity and OAuth tokens using native keychain
- */
-export declare class KeychainManager {
-    private static instance;
-    private deviceIdentity;
-    private sessionKeyCache;
-    private isRegistered;
-    private _serviceName;
-    private constructor();
-    /**
-     * Get the keychain service name (lazy-loaded from config)
-     */
-    private get serviceName();
-    static getInstance(): KeychainManager;
-    /**
-     * Get the device identity from keychain
-     */
-    getDeviceIdentity(): Promise<DeviceIdentity | null>;
-    /**
-     * Set the device identity in keychain
-     */
-    setDeviceIdentity(identity: DeviceIdentity): Promise<void>;
-    /**
-     * Get or create device identity
-     */
-    getOrCreateDeviceIdentity(): Promise<DeviceIdentity>;
-    /**
-     * Get device ID (creates identity if needed)
-     */
-    getDeviceId(): Promise<string>;
-    /**
-     * Get device public key (creates identity if needed)
-     */
-    getDevicePublicKey(): Promise<string>;
-    /**
-     * Get device private key (creates identity if needed)
-     */
-    getDevicePrivateKey(): Promise<string>;
-    /**
-     * Check if device identity exists
-     */
-    hasDeviceIdentity(): Promise<boolean>;
-    /**
-     * Delete device identity (reset device)
-     */
-    deleteDeviceIdentity(): Promise<void>;
-    /**
-     * Get token account name for environment
-     */
-    private getTokenAccount;
-    /**
-     * Get OAuth tokens for environment
-     */
-    getTokens(environment?: string): Promise<TokenData | null>;
-    /**
-     * Save OAuth tokens for environment
-     */
-    setTokens(tokens: TokenData, environment?: string): Promise<void>;
-    /**
-     * Delete OAuth tokens for environment
-     */
-    deleteTokens(environment?: string): Promise<boolean>;
-    /**
-     * Check if token is expired
-     */
-    isTokenExpired(tokens: TokenData): boolean;
-    /**
-     * Get session key for a session, decrypting from encryptedKeys if needed
-     */
-    getSessionKey(sessionId: string, encryptedKeys?: EncryptedSessionKey[]): Promise<string | null>;
-    /**
-     * Generate and encrypt a new session key for all devices
-     */
-    createSessionKey(devicePublicKeys: Array<{
-        deviceId: string;
-        publicKey: string;
-    }>): {
-        sessionKey: string;
-        encryptedKeys: EncryptedSessionKey[];
-    };
-    /**
-     * Cache a session key
-     */
-    cacheSessionKey(sessionId: string, sessionKey: string): void;
-    /**
-     * Clear cached session key
-     */
-    clearSessionKey(sessionId: string): void;
-    /**
-     * Clear all cached session keys
-     */
-    clearAllSessionKeys(): void;
-    /**
-     * Get registration status
-     */
-    getIsRegistered(): boolean;
-    /**
-     * Set registration status
-     */
-    setIsRegistered(registered: boolean): void;
-    /**
-     * Get device name for registration
-     */
-    getDeviceName(): string;
-    /**
-     * Get platform for registration
-     */
-    getDevicePlatform(): string;
-    /**
-     * Clear all data (device identity + all tokens)
-     */
-    clearAllData(): Promise<void>;
-}
-/**
- * Export singleton instance
- */
-export declare const keychainManager: KeychainManager;