@roamcode.ai/server 1.4.5 → 2.0.0

package/dist/start.d.ts

@@ -1,5 +1,4 @@
 import { FastifyInstance } from 'fastify';
-import { z } from 'zod';
 
 /**
  * Wiring for the mcp-send server (Claude → user attachments). When present, the spawn layer writes a
@@ -361,143 +360,14 @@ interface SessionStore {
     readonly mode: StoreMode;
 }
 
-type DeviceScope = "direct" | "relay";
+type DeviceScope = "direct";
 interface PairingTicket {
     /** One-time capability carried by the pairing URL. Never persisted in plaintext. */
     secret: string;
     expiresAt: number;
-    /** Exact product surfaces the resulting device credential can reach. */
     scopes: DeviceScope[];
 }
 
-declare const CloudAutomationWebhookRegistrationSchema: z.ZodObject<{
-    hookId: z.ZodString;
-    automationId: z.ZodString;
-    triggerId: z.ZodString;
-    secretHash: z.ZodString;
-    enabled: z.ZodBoolean;
-}, z.core.$strict>;
-declare const CloudAutomationInvocationSchema: z.ZodObject<{
-    id: z.ZodUUID;
-    automationId: z.ZodString;
-    triggerId: z.ZodString;
-    hookId: z.ZodString;
-    createdAt: z.ZodNumber;
-}, z.core.$strict>;
-type CloudAutomationWebhookRegistration = z.infer<typeof CloudAutomationWebhookRegistrationSchema>;
-type CloudAutomationInvocation = z.infer<typeof CloudAutomationInvocationSchema>;
-
-type TeamStoreMode = "sqlite" | "memory-fallback";
-type TeamMemberKind = "person" | "service";
-type TeamMemberStatus = "active" | "suspended" | "removed";
-type TeamRole = "viewer" | "operator" | "node-admin" | "workspace-manager" | "extension-manager" | "policy-admin" | "organization-admin";
-type TeamScopeType = "team" | "host" | "workspace";
-type TeamPrincipalType = "device" | "host" | "local" | "relay";
-type TeamPermission = "team:read" | "sessions:read" | "sessions:operate" | "attention:read" | "attention:manage" | "presence:read" | "presence:write" | "workspaces:manage" | "extensions:manage" | "policy:manage" | "members:manage" | "node-access:manage" | "audit:read" | "fleet:read";
-interface TeamRecord {
-    id: string;
-    name: string;
-    authorizationEnabled: boolean;
-    revision: number;
-    createdAt: number;
-    updatedAt: number;
-}
-interface TeamMember {
-    id: string;
-    displayName: string;
-    kind: TeamMemberKind;
-    status: TeamMemberStatus;
-    revision: number;
-    createdAt: number;
-    updatedAt: number;
-}
-interface TeamRoleBinding {
-    id: string;
-    memberId: string;
-    role: TeamRole;
-    scopeType: TeamScopeType;
-    scopeId?: string;
-    createdAt: number;
-}
-interface TeamPrincipalBinding {
-    actorType: TeamPrincipalType;
-    actorId: string;
-    memberId: string;
-    createdAt: number;
-}
-interface TeamAuthorizationResource {
-    hostId?: string;
-    workspaceId?: string;
-}
-interface TeamAuthorizationDecision {
-    allowed: boolean;
-    reason: "local-break-glass" | "not-enforced" | "unbound" | "inactive" | "role" | "missing-permission";
-    member?: TeamMember;
-    roles: TeamRole[];
-}
-interface TeamStore {
-    readonly mode: TeamStoreMode;
-    getTeam(): TeamRecord | null;
-    createTeam(input: {
-        name: string;
-        ownerName: string;
-        ownerPrincipal: {
-            actorType: TeamPrincipalType;
-            actorId: string;
-        };
-    }, now?: number): {
-        team: TeamRecord;
-        owner: TeamMember;
-    };
-    updateTeam(input: {
-        name?: string;
-        authorizationEnabled?: boolean;
-    }, expectedRevision: number, now?: number): TeamRecord;
-    listMembers(opts?: {
-        includeRemoved?: boolean;
-    }): TeamMember[];
-    getMember(id: string): TeamMember | undefined;
-    createMember(input: {
-        displayName: string;
-        kind?: TeamMemberKind;
-    }, now?: number): TeamMember;
-    updateMember(id: string, input: {
-        displayName?: string;
-        status?: TeamMemberStatus;
-    }, expectedRevision: number, now?: number): TeamMember | undefined;
-    listRoleBindings(memberId?: string): TeamRoleBinding[];
-    grantRole(input: {
-        memberId: string;
-        role: TeamRole;
-        scopeType?: TeamScopeType;
-        scopeId?: string;
-    }, now?: number): TeamRoleBinding;
-    setNodeAccessRole(input: {
-        memberId: string;
-        nodeId: string;
-        role: "viewer" | "operator" | "node-admin";
-    }, now?: number): TeamRoleBinding;
-    revokeRole(id: string, now?: number): boolean;
-    listPrincipalBindings(memberId?: string): TeamPrincipalBinding[];
-    bindPrincipal(input: {
-        memberId: string;
-        actorType: TeamPrincipalType;
-        actorId: string;
-    }, now?: number): TeamPrincipalBinding;
-    unbindPrincipal(actorType: TeamPrincipalType, actorId: string, now?: number): boolean;
-    memberForPrincipal(actorType: TeamPrincipalType, actorId: string): TeamMember | undefined;
-    authorize(actorType: TeamPrincipalType, actorId: string, permission: TeamPermission, resource?: TeamAuthorizationResource): TeamAuthorizationDecision;
-    close(): void;
-}
-
-type CloudAuthorizationSnapshotStatus = "unavailable" | "pending" | "active" | "expired";
-interface CloudAuthorizationState {
-    status: CloudAuthorizationSnapshotStatus;
-    revision?: number;
-    notBefore?: number;
-    expiresAt?: number;
-}
-
 declare global {
     /** Stable package version injected by tsup. Source/test builds fall back to package.json. */
     const __SERVER_VERSION__: string | undefined;
@@ -845,7 +715,7 @@ declare class TerminalManager {
     private killTmux;
 }
 
-type InputLeaseActorType = "device" | "host" | "local" | "relay";
+type InputLeaseActorType = "device" | "host" | "local";
 interface InputLeasePrincipal {
     actorType: InputLeaseActorType;
     actorId: string;
@@ -928,27 +798,107 @@ declare class InputLeaseCoordinator {
     private emit;
 }
 
-interface CloudHostRuntimeStatus {
-    running: boolean;
-    heartbeatFailures: number;
-    authorizationFailures: number;
-    automationFailures: number;
-    authorizationIssue?: CloudHostAuthorizationIssue;
-    lastHeartbeatAt?: number;
-    lastAuthorizationAt?: number;
-    authorization: CloudAuthorizationState;
+type TeamStoreMode = "sqlite" | "memory-fallback";
+type TeamMemberKind = "person" | "service";
+type TeamMemberStatus = "active" | "suspended" | "removed";
+type TeamRole = "viewer" | "operator" | "node-admin" | "workspace-manager" | "extension-manager" | "policy-admin" | "organization-admin";
+type TeamScopeType = "team" | "host" | "workspace";
+type TeamPrincipalType = "device" | "host" | "local";
+type TeamPermission = "team:read" | "sessions:read" | "sessions:operate" | "attention:read" | "attention:manage" | "presence:read" | "presence:write" | "workspaces:manage" | "extensions:manage" | "policy:manage" | "members:manage" | "node-access:manage" | "audit:read" | "fleet:read";
+interface TeamRecord {
+    id: string;
+    name: string;
+    authorizationEnabled: boolean;
+    revision: number;
+    createdAt: number;
+    updatedAt: number;
+}
+interface TeamMember {
+    id: string;
+    displayName: string;
+    kind: TeamMemberKind;
+    status: TeamMemberStatus;
+    revision: number;
+    createdAt: number;
+    updatedAt: number;
+}
+interface TeamRoleBinding {
+    id: string;
+    memberId: string;
+    role: TeamRole;
+    scopeType: TeamScopeType;
+    scopeId?: string;
+    createdAt: number;
 }
-type CloudHostAuthorizationIssue = "connectivity" | "credential-rejected" | "invalid-control-plane-response" | "authorization-verification-failed" | "trust-expired";
-interface CloudHostRuntime {
-    start(): void;
-    stop(): Promise<void>;
-    sendHeartbeat(state?: "ready" | "draining"): Promise<void>;
-    refreshAuthorizationKeyset(): Promise<boolean>;
-    refreshAuthorizationSnapshot(): Promise<number>;
-    syncAuthorization(): Promise<number>;
-    /** Waits out an older in-flight poll, then starts a snapshot request from the resulting durable revision. */
-    syncAuthorizationFresh(): Promise<number>;
-    status(): CloudHostRuntimeStatus;
+interface TeamPrincipalBinding {
+    actorType: TeamPrincipalType;
+    actorId: string;
+    memberId: string;
+    createdAt: number;
+}
+interface TeamAuthorizationResource {
+    hostId?: string;
+    workspaceId?: string;
+}
+interface TeamAuthorizationDecision {
+    allowed: boolean;
+    reason: "local-break-glass" | "not-enforced" | "unbound" | "inactive" | "role" | "missing-permission";
+    member?: TeamMember;
+    roles: TeamRole[];
+}
+interface TeamStore {
+    readonly mode: TeamStoreMode;
+    getTeam(): TeamRecord | null;
+    createTeam(input: {
+        name: string;
+        ownerName: string;
+        ownerPrincipal: {
+            actorType: TeamPrincipalType;
+            actorId: string;
+        };
+    }, now?: number): {
+        team: TeamRecord;
+        owner: TeamMember;
+    };
+    updateTeam(input: {
+        name?: string;
+        authorizationEnabled?: boolean;
+    }, expectedRevision: number, now?: number): TeamRecord;
+    listMembers(opts?: {
+        includeRemoved?: boolean;
+    }): TeamMember[];
+    getMember(id: string): TeamMember | undefined;
+    createMember(input: {
+        displayName: string;
+        kind?: TeamMemberKind;
+    }, now?: number): TeamMember;
+    updateMember(id: string, input: {
+        displayName?: string;
+        status?: TeamMemberStatus;
+    }, expectedRevision: number, now?: number): TeamMember | undefined;
+    listRoleBindings(memberId?: string): TeamRoleBinding[];
+    grantRole(input: {
+        memberId: string;
+        role: TeamRole;
+        scopeType?: TeamScopeType;
+        scopeId?: string;
+    }, now?: number): TeamRoleBinding;
+    setNodeAccessRole(input: {
+        memberId: string;
+        nodeId: string;
+        role: "viewer" | "operator" | "node-admin";
+    }, now?: number): TeamRoleBinding;
+    revokeRole(id: string, now?: number): boolean;
+    listPrincipalBindings(memberId?: string): TeamPrincipalBinding[];
+    bindPrincipal(input: {
+        memberId: string;
+        actorType: TeamPrincipalType;
+        actorId: string;
+    }, now?: number): TeamPrincipalBinding;
+    unbindPrincipal(actorType: TeamPrincipalType, actorId: string, now?: number): boolean;
+    memberForPrincipal(actorType: TeamPrincipalType, actorId: string): TeamMember | undefined;
+    authorize(actorType: TeamPrincipalType, actorId: string, permission: TeamPermission, resource?: TeamAuthorizationResource): TeamAuthorizationDecision;
+    close(): void;
 }
 
 type PolicyStoreMode = "sqlite" | "memory-fallback";
@@ -962,7 +912,6 @@ interface EnterprisePolicy {
     allowDangerousProviderModes: boolean;
     allowFileTransfer: boolean;
     extensionMode: ExtensionPolicyMode;
-    allowRelay: boolean;
     updateMode: UpdatePolicyMode;
     revision: number;
     createdAt: number;
@@ -976,7 +925,6 @@ interface EnterprisePolicyUpdate {
     allowDangerousProviderModes?: boolean;
     allowFileTransfer?: boolean;
     extensionMode?: ExtensionPolicyMode;
-    allowRelay?: boolean;
     updateMode?: UpdatePolicyMode;
 }
 interface PolicyStore {
@@ -1106,36 +1054,15 @@ declare class PresenceCoordinator {
     private emit;
 }
 
-type RelayRpcMethod = "GET" | "HEAD" | "POST" | "PUT" | "PATCH" | "DELETE";
-interface RelayRpcRequest {
-    id: string;
-    method: RelayRpcMethod;
-    path: string;
-    headers: Record<string, string>;
-    body?: Buffer;
-}
-interface RelayRpcResponse {
-    id: string;
-    status: number;
-    headers: Record<string, string>;
-    body?: string;
-}
-
 interface CreateServerResult {
     app: FastifyInstance;
     authGate: AuthGate;
     /** Issue a five-minute, one-use pairing capability without exposing the host's master token. */
     issuePairing(): PairingTicket;
-    /** Internal E2E-relay bridge. It authenticates relay-scoped devices through the exact normal route hooks. */
-    dispatchRelayRequest(token: string, request: RelayRpcRequest): Promise<RelayRpcResponse>;
-    /** Issues a relay-principal terminal ticket without exposing the bridge's process-local capability. */
-    issueRelayTerminalTicket(token: string): Promise<string>;
-    /** Process-local loopback headers for streamed relay HTTP. Never expose these outside this server process. */
-    relayLoopbackHeaders(token: string, headers?: Record<string, string>): Record<string, string>;
     /** Exposed so startServer can late-bind the MCP attach config (after listen() resolves the port) —
      *  this is what gives the terminal's claude send_image/send_file. */
     terminalManager: TerminalManager;
-    /** Exposed for relay/team composition and isolated ownership tests. */
+    /** Exposed for team composition and isolated ownership tests. */
     inputLeases: InputLeaseCoordinator;
     teamStore: TeamStore;
     policyStore: PolicyStore;
@@ -1143,33 +1070,6 @@ interface CreateServerResult {
     presence: PresenceCoordinator;
     /** False when tmux/node-pty is unavailable → terminal sessions are disabled (startServer warns loudly). */
     terminalAvailable: boolean;
-    /** Privacy-bounded webhook routing records synchronized to an optional managed control plane. */
-    automationWebhookRegistrations(): CloudAutomationWebhookRegistration[];
-    /** Durably accepts one control-plane signal; the invocation id makes redelivery idempotent. */
-    acceptCloudAutomationInvocation(invocation: CloudAutomationInvocation): Promise<void>;
-}
-
-type RelayHostStatus = "idle" | "connecting" | "online" | "reconnecting" | "stopped";
-interface RelayHostMetrics {
-    status: RelayHostStatus;
-    activeChannels: number;
-    acceptedChannels: number;
-    rejectedChannels: number;
-    completedRequests: number;
-    failedRequests: number;
-    reconnects: number;
-    activeTransfers: number;
-    completedTransfers: number;
-    failedTransfers: number;
-    streamedRequestBytes: number;
-    streamedResponseBytes: number;
-}
-interface RelayHostConnector {
-    start(): void;
-    stop(): Promise<void>;
-    waitUntilReady(timeoutMs?: number): Promise<void>;
-    closeDevice(deviceId: string): void;
-    metrics(): RelayHostMetrics;
 }
 
 declare function providerPreflightWarning(name: string, availability: ProviderAvailability): string | undefined;
@@ -1190,22 +1090,10 @@ declare function claudePreflightWarning(availability: ClaudeAvailability): strin
  * (the probe is short-timeout-guarded). Injectable probe + log sink so it's testable without a spawn.
  */
 declare function runClaudePreflight(probe: ClaudeVersionProbe, warn?: (msg: string) => void): Promise<void>;
-interface StartServerOptions {
-    /** Shared control-plane transport seam for isolated embedding and startup tests. */
-    fetch?: typeof globalThis.fetch;
-}
-declare function cloudHostCapabilities(input: {
-    authorizationVersion: number;
-    terminalAvailable: boolean;
-    relayEnabled: boolean;
-    managedDeviceEnrollmentEnabled: boolean;
-}): string[];
-declare function startServer(env?: NodeJS.ProcessEnv, options?: StartServerOptions): Promise<CreateServerResult & {
+declare function startServer(env?: NodeJS.ProcessEnv): Promise<CreateServerResult & {
     url: string;
     token?: string;
     tokenGenerated: boolean;
-    relayHost?: RelayHostConnector;
-    cloudHostRuntime?: CloudHostRuntime;
 }>;
 
-export { type StartServerOptions, claudePreflightWarning, cloudHostCapabilities, providerPreflightWarning, runClaudePreflight, runProviderPreflight, startServer };
+export { claudePreflightWarning, providerPreflightWarning, runClaudePreflight, runProviderPreflight, startServer };