@viewportai/daemon 0.5.3 → 0.6.1

package/dist/server/ws-protocol.d.ts

@@ -121,6 +121,43 @@ export declare const ContextCandidatePreviewSchema: z.ZodObject<{
     capabilityToken: z.ZodOptional<z.ZodString>;
     requestId: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
+export declare const ContextResolveSchema: z.ZodObject<{
+    type: z.ZodLiteral<"context-resolve">;
+    contextResourceId: z.ZodString;
+    workspaceId: z.ZodString;
+    actorName: z.ZodString;
+    query: z.ZodDefault<z.ZodString>;
+    maxItems: z.ZodOptional<z.ZodNumber>;
+    includePrivate: z.ZodOptional<z.ZodBoolean>;
+    profile: z.ZodOptional<z.ZodString>;
+    profilePin: z.ZodOptional<z.ZodObject<{
+        path: z.ZodOptional<z.ZodString>;
+        digest: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+    passphrase: z.ZodOptional<z.ZodString>;
+    recoveryCode: z.ZodOptional<z.ZodString>;
+    capabilityToken: z.ZodOptional<z.ZodString>;
+    requestId: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export declare const ContextProposeSchema: z.ZodObject<{
+    type: z.ZodLiteral<"context-propose">;
+    contextResourceId: z.ZodString;
+    workspaceId: z.ZodString;
+    actorName: z.ZodString;
+    title: z.ZodString;
+    body: z.ZodString;
+    source: z.ZodOptional<z.ZodString>;
+    sourceKind: z.ZodOptional<z.ZodEnum<{
+        plan: "plan";
+        workflow: "workflow";
+        integration: "integration";
+    }>>;
+    sync: z.ZodOptional<z.ZodBoolean>;
+    passphrase: z.ZodOptional<z.ZodString>;
+    recoveryCode: z.ZodOptional<z.ZodString>;
+    capabilityToken: z.ZodOptional<z.ZodString>;
+    requestId: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
 export declare const ResumeSchema: z.ZodObject<{
     type: z.ZodLiteral<"resume">;
     sessionId: z.ZodString;
@@ -235,11 +272,6 @@ export declare const RespondHookPermissionSchema: z.ZodObject<{
     }, z.core.$strip>;
     requestId: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
-export declare const GetHookPlanDraftSchema: z.ZodObject<{
-    type: z.ZodLiteral<"get-hook-plan-draft">;
-    draftId: z.ZodString;
-    requestId: z.ZodOptional<z.ZodString>;
-}, z.core.$strip>;
 export declare const TrustedEdgePlanDecryptSchema: z.ZodObject<{
     type: z.ZodLiteral<"trusted-edge-plan-decrypt">;
     workspaceId: z.ZodString;
@@ -256,12 +288,23 @@ export declare const TrustedEdgePlanDecryptSchema: z.ZodObject<{
         aad: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
     }, z.core.$strip>;
     bodyKeyGrants: z.ZodOptional<z.ZodArray<z.ZodObject<{
-        schema: z.ZodLiteral<"viewport.plan_body_key_grant/v1">;
-        algorithm: z.ZodLiteral<"RSA-OAEP-256">;
-        recipient_user_id: z.ZodNumber;
-        recipient_key_id: z.ZodString;
+        schema: z.ZodLiteral<"viewport.plan_body_key_grant/v2">;
+        algorithm: z.ZodLiteral<"x25519-hkdf-sha256-aes-256-gcm">;
+        recipient_type: z.ZodUnion<readonly [z.ZodLiteral<"user_epoch">, z.ZodLiteral<"team_epoch">]>;
+        recipient_epoch_id: z.ZodString;
+        recipient_fingerprint: z.ZodString;
         key_ref: z.ZodString;
-        encrypted_key: z.ZodString;
+        aad: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+        encrypted_payload: z.ZodObject<{
+            schema: z.ZodLiteral<"viewport.wrapped_key_envelope/v1">;
+            alg: z.ZodLiteral<"x25519-hkdf-sha256-aes-256-gcm">;
+            ephemeralPublicKeyJwk: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+            iv: z.ZodString;
+            ciphertext: z.ZodString;
+            tag: z.ZodString;
+            aadDigest: z.ZodString;
+            createdAt: z.ZodString;
+        }, z.core.$strip>;
     }, z.core.$strip>>>;
     capabilityToken: z.ZodOptional<z.ZodString>;
     requestId: z.ZodOptional<z.ZodString>;
@@ -282,18 +325,76 @@ export declare const TrustedEdgePlanEncryptFieldSchema: z.ZodObject<{
         aad: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
     }, z.core.$strip>;
     bodyKeyGrants: z.ZodOptional<z.ZodArray<z.ZodObject<{
-        schema: z.ZodLiteral<"viewport.plan_body_key_grant/v1">;
-        algorithm: z.ZodLiteral<"RSA-OAEP-256">;
-        recipient_user_id: z.ZodNumber;
-        recipient_key_id: z.ZodString;
+        schema: z.ZodLiteral<"viewport.plan_body_key_grant/v2">;
+        algorithm: z.ZodLiteral<"x25519-hkdf-sha256-aes-256-gcm">;
+        recipient_type: z.ZodUnion<readonly [z.ZodLiteral<"user_epoch">, z.ZodLiteral<"team_epoch">]>;
+        recipient_epoch_id: z.ZodString;
+        recipient_fingerprint: z.ZodString;
         key_ref: z.ZodString;
-        encrypted_key: z.ZodString;
+        aad: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+        encrypted_payload: z.ZodObject<{
+            schema: z.ZodLiteral<"viewport.wrapped_key_envelope/v1">;
+            alg: z.ZodLiteral<"x25519-hkdf-sha256-aes-256-gcm">;
+            ephemeralPublicKeyJwk: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+            iv: z.ZodString;
+            ciphertext: z.ZodString;
+            tag: z.ZodString;
+            aadDigest: z.ZodString;
+            createdAt: z.ZodString;
+        }, z.core.$strip>;
     }, z.core.$strip>>>;
     text: z.ZodString;
     aad: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
     capabilityToken: z.ZodOptional<z.ZodString>;
     requestId: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
+export declare const TrustedEdgePlanDecryptFieldSchema: z.ZodObject<{
+    type: z.ZodLiteral<"trusted-edge-plan-decrypt-field">;
+    workspaceId: z.ZodString;
+    planId: z.ZodOptional<z.ZodString>;
+    sourceRef: z.ZodOptional<z.ZodString>;
+    bodyEncryption: z.ZodObject<{
+        schema: z.ZodLiteral<"viewport.plan_body_encrypted/v1">;
+        algorithm: z.ZodLiteral<"AES-GCM-256">;
+        key_ref: z.ZodString;
+        ciphertext: z.ZodString;
+        iv: z.ZodString;
+        tag: z.ZodString;
+        digest: z.ZodString;
+        aad: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    }, z.core.$strip>;
+    bodyKeyGrants: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        schema: z.ZodLiteral<"viewport.plan_body_key_grant/v2">;
+        algorithm: z.ZodLiteral<"x25519-hkdf-sha256-aes-256-gcm">;
+        recipient_type: z.ZodUnion<readonly [z.ZodLiteral<"user_epoch">, z.ZodLiteral<"team_epoch">]>;
+        recipient_epoch_id: z.ZodString;
+        recipient_fingerprint: z.ZodString;
+        key_ref: z.ZodString;
+        aad: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+        encrypted_payload: z.ZodObject<{
+            schema: z.ZodLiteral<"viewport.wrapped_key_envelope/v1">;
+            alg: z.ZodLiteral<"x25519-hkdf-sha256-aes-256-gcm">;
+            ephemeralPublicKeyJwk: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+            iv: z.ZodString;
+            ciphertext: z.ZodString;
+            tag: z.ZodString;
+            aadDigest: z.ZodString;
+            createdAt: z.ZodString;
+        }, z.core.$strip>;
+    }, z.core.$strip>>>;
+    fieldEncryption: z.ZodObject<{
+        schema: z.ZodLiteral<"viewport.plan_feedback_field_encrypted/v1">;
+        algorithm: z.ZodLiteral<"AES-GCM-256">;
+        key_ref: z.ZodString;
+        ciphertext: z.ZodString;
+        iv: z.ZodString;
+        tag: z.ZodString;
+        digest: z.ZodString;
+        aad: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    }, z.core.$strip>;
+    capabilityToken: z.ZodOptional<z.ZodString>;
+    requestId: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
 export declare const TrustedEdgePlanWrapKeySchema: z.ZodObject<{
     type: z.ZodLiteral<"trusted-edge-plan-wrap-key">;
     workspaceId: z.ZodString;
@@ -310,21 +411,40 @@ export declare const TrustedEdgePlanWrapKeySchema: z.ZodObject<{
         aad: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
     }, z.core.$strip>;
     bodyKeyGrants: z.ZodOptional<z.ZodArray<z.ZodObject<{
-        schema: z.ZodLiteral<"viewport.plan_body_key_grant/v1">;
-        algorithm: z.ZodLiteral<"RSA-OAEP-256">;
-        recipient_user_id: z.ZodNumber;
-        recipient_key_id: z.ZodString;
+        schema: z.ZodLiteral<"viewport.plan_body_key_grant/v2">;
+        algorithm: z.ZodLiteral<"x25519-hkdf-sha256-aes-256-gcm">;
+        recipient_type: z.ZodUnion<readonly [z.ZodLiteral<"user_epoch">, z.ZodLiteral<"team_epoch">]>;
+        recipient_epoch_id: z.ZodString;
+        recipient_fingerprint: z.ZodString;
         key_ref: z.ZodString;
-        encrypted_key: z.ZodString;
+        aad: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+        encrypted_payload: z.ZodObject<{
+            schema: z.ZodLiteral<"viewport.wrapped_key_envelope/v1">;
+            alg: z.ZodLiteral<"x25519-hkdf-sha256-aes-256-gcm">;
+            ephemeralPublicKeyJwk: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+            iv: z.ZodString;
+            ciphertext: z.ZodString;
+            tag: z.ZodString;
+            aadDigest: z.ZodString;
+            createdAt: z.ZodString;
+        }, z.core.$strip>;
     }, z.core.$strip>>>;
     recipients: z.ZodArray<z.ZodObject<{
-        user_id: z.ZodNumber;
-        key_id: z.ZodString;
-        public_key_jwk: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+        recipient_type: z.ZodUnion<readonly [z.ZodLiteral<"user_epoch">, z.ZodLiteral<"team_epoch">]>;
+        recipient_epoch_id: z.ZodString;
+        recipient_fingerprint: z.ZodString;
+        encryption_public_key_jwk: z.ZodRecord<z.ZodString, z.ZodUnknown>;
     }, z.core.$strip>>;
     capabilityToken: z.ZodOptional<z.ZodString>;
     requestId: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
+export declare const TrustedEdgeTeamEpochPublishSchema: z.ZodObject<{
+    type: z.ZodLiteral<"trusted-edge-team-epoch-publish">;
+    workspaceId: z.ZodString;
+    teamId: z.ZodString;
+    capabilityToken: z.ZodOptional<z.ZodString>;
+    requestId: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
 export declare const IncomingMessageSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
     type: z.ZodLiteral<"launch">;
     directoryId: z.ZodString;
@@ -426,6 +546,41 @@ export declare const IncomingMessageSchema: z.ZodDiscriminatedUnion<[z.ZodObject
     recoveryCode: z.ZodOptional<z.ZodString>;
     capabilityToken: z.ZodOptional<z.ZodString>;
     requestId: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>, z.ZodObject<{
+    type: z.ZodLiteral<"context-resolve">;
+    contextResourceId: z.ZodString;
+    workspaceId: z.ZodString;
+    actorName: z.ZodString;
+    query: z.ZodDefault<z.ZodString>;
+    maxItems: z.ZodOptional<z.ZodNumber>;
+    includePrivate: z.ZodOptional<z.ZodBoolean>;
+    profile: z.ZodOptional<z.ZodString>;
+    profilePin: z.ZodOptional<z.ZodObject<{
+        path: z.ZodOptional<z.ZodString>;
+        digest: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+    passphrase: z.ZodOptional<z.ZodString>;
+    recoveryCode: z.ZodOptional<z.ZodString>;
+    capabilityToken: z.ZodOptional<z.ZodString>;
+    requestId: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>, z.ZodObject<{
+    type: z.ZodLiteral<"context-propose">;
+    contextResourceId: z.ZodString;
+    workspaceId: z.ZodString;
+    actorName: z.ZodString;
+    title: z.ZodString;
+    body: z.ZodString;
+    source: z.ZodOptional<z.ZodString>;
+    sourceKind: z.ZodOptional<z.ZodEnum<{
+        plan: "plan";
+        workflow: "workflow";
+        integration: "integration";
+    }>>;
+    sync: z.ZodOptional<z.ZodBoolean>;
+    passphrase: z.ZodOptional<z.ZodString>;
+    recoveryCode: z.ZodOptional<z.ZodString>;
+    capabilityToken: z.ZodOptional<z.ZodString>;
+    requestId: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>, z.ZodObject<{
     type: z.ZodLiteral<"resume">;
     sessionId: z.ZodString;
@@ -530,11 +685,43 @@ export declare const IncomingMessageSchema: z.ZodDiscriminatedUnion<[z.ZodObject
     }, z.core.$strip>;
     requestId: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>, z.ZodObject<{
-    type: z.ZodLiteral<"get-hook-plan-draft">;
-    draftId: z.ZodString;
+    type: z.ZodLiteral<"trusted-edge-plan-decrypt">;
+    workspaceId: z.ZodString;
+    planId: z.ZodOptional<z.ZodString>;
+    sourceRef: z.ZodOptional<z.ZodString>;
+    bodyEncryption: z.ZodObject<{
+        schema: z.ZodLiteral<"viewport.plan_body_encrypted/v1">;
+        algorithm: z.ZodLiteral<"AES-GCM-256">;
+        key_ref: z.ZodString;
+        ciphertext: z.ZodString;
+        iv: z.ZodString;
+        tag: z.ZodString;
+        digest: z.ZodString;
+        aad: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    }, z.core.$strip>;
+    bodyKeyGrants: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        schema: z.ZodLiteral<"viewport.plan_body_key_grant/v2">;
+        algorithm: z.ZodLiteral<"x25519-hkdf-sha256-aes-256-gcm">;
+        recipient_type: z.ZodUnion<readonly [z.ZodLiteral<"user_epoch">, z.ZodLiteral<"team_epoch">]>;
+        recipient_epoch_id: z.ZodString;
+        recipient_fingerprint: z.ZodString;
+        key_ref: z.ZodString;
+        aad: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+        encrypted_payload: z.ZodObject<{
+            schema: z.ZodLiteral<"viewport.wrapped_key_envelope/v1">;
+            alg: z.ZodLiteral<"x25519-hkdf-sha256-aes-256-gcm">;
+            ephemeralPublicKeyJwk: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+            iv: z.ZodString;
+            ciphertext: z.ZodString;
+            tag: z.ZodString;
+            aadDigest: z.ZodString;
+            createdAt: z.ZodString;
+        }, z.core.$strip>;
+    }, z.core.$strip>>>;
+    capabilityToken: z.ZodOptional<z.ZodString>;
     requestId: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>, z.ZodObject<{
-    type: z.ZodLiteral<"trusted-edge-plan-decrypt">;
+    type: z.ZodLiteral<"trusted-edge-plan-decrypt-field">;
     workspaceId: z.ZodString;
     planId: z.ZodOptional<z.ZodString>;
     sourceRef: z.ZodOptional<z.ZodString>;
@@ -549,13 +736,34 @@ export declare const IncomingMessageSchema: z.ZodDiscriminatedUnion<[z.ZodObject
         aad: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
     }, z.core.$strip>;
     bodyKeyGrants: z.ZodOptional<z.ZodArray<z.ZodObject<{
-        schema: z.ZodLiteral<"viewport.plan_body_key_grant/v1">;
-        algorithm: z.ZodLiteral<"RSA-OAEP-256">;
-        recipient_user_id: z.ZodNumber;
-        recipient_key_id: z.ZodString;
+        schema: z.ZodLiteral<"viewport.plan_body_key_grant/v2">;
+        algorithm: z.ZodLiteral<"x25519-hkdf-sha256-aes-256-gcm">;
+        recipient_type: z.ZodUnion<readonly [z.ZodLiteral<"user_epoch">, z.ZodLiteral<"team_epoch">]>;
+        recipient_epoch_id: z.ZodString;
+        recipient_fingerprint: z.ZodString;
         key_ref: z.ZodString;
-        encrypted_key: z.ZodString;
+        aad: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+        encrypted_payload: z.ZodObject<{
+            schema: z.ZodLiteral<"viewport.wrapped_key_envelope/v1">;
+            alg: z.ZodLiteral<"x25519-hkdf-sha256-aes-256-gcm">;
+            ephemeralPublicKeyJwk: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+            iv: z.ZodString;
+            ciphertext: z.ZodString;
+            tag: z.ZodString;
+            aadDigest: z.ZodString;
+            createdAt: z.ZodString;
+        }, z.core.$strip>;
     }, z.core.$strip>>>;
+    fieldEncryption: z.ZodObject<{
+        schema: z.ZodLiteral<"viewport.plan_feedback_field_encrypted/v1">;
+        algorithm: z.ZodLiteral<"AES-GCM-256">;
+        key_ref: z.ZodString;
+        ciphertext: z.ZodString;
+        iv: z.ZodString;
+        tag: z.ZodString;
+        digest: z.ZodString;
+        aad: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    }, z.core.$strip>;
     capabilityToken: z.ZodOptional<z.ZodString>;
     requestId: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>, z.ZodObject<{
@@ -574,12 +782,23 @@ export declare const IncomingMessageSchema: z.ZodDiscriminatedUnion<[z.ZodObject
         aad: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
     }, z.core.$strip>;
     bodyKeyGrants: z.ZodOptional<z.ZodArray<z.ZodObject<{
-        schema: z.ZodLiteral<"viewport.plan_body_key_grant/v1">;
-        algorithm: z.ZodLiteral<"RSA-OAEP-256">;
-        recipient_user_id: z.ZodNumber;
-        recipient_key_id: z.ZodString;
+        schema: z.ZodLiteral<"viewport.plan_body_key_grant/v2">;
+        algorithm: z.ZodLiteral<"x25519-hkdf-sha256-aes-256-gcm">;
+        recipient_type: z.ZodUnion<readonly [z.ZodLiteral<"user_epoch">, z.ZodLiteral<"team_epoch">]>;
+        recipient_epoch_id: z.ZodString;
+        recipient_fingerprint: z.ZodString;
         key_ref: z.ZodString;
-        encrypted_key: z.ZodString;
+        aad: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+        encrypted_payload: z.ZodObject<{
+            schema: z.ZodLiteral<"viewport.wrapped_key_envelope/v1">;
+            alg: z.ZodLiteral<"x25519-hkdf-sha256-aes-256-gcm">;
+            ephemeralPublicKeyJwk: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+            iv: z.ZodString;
+            ciphertext: z.ZodString;
+            tag: z.ZodString;
+            aadDigest: z.ZodString;
+            createdAt: z.ZodString;
+        }, z.core.$strip>;
     }, z.core.$strip>>>;
     text: z.ZodString;
     aad: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
@@ -601,20 +820,38 @@ export declare const IncomingMessageSchema: z.ZodDiscriminatedUnion<[z.ZodObject
         aad: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
     }, z.core.$strip>;
     bodyKeyGrants: z.ZodOptional<z.ZodArray<z.ZodObject<{
-        schema: z.ZodLiteral<"viewport.plan_body_key_grant/v1">;
-        algorithm: z.ZodLiteral<"RSA-OAEP-256">;
-        recipient_user_id: z.ZodNumber;
-        recipient_key_id: z.ZodString;
+        schema: z.ZodLiteral<"viewport.plan_body_key_grant/v2">;
+        algorithm: z.ZodLiteral<"x25519-hkdf-sha256-aes-256-gcm">;
+        recipient_type: z.ZodUnion<readonly [z.ZodLiteral<"user_epoch">, z.ZodLiteral<"team_epoch">]>;
+        recipient_epoch_id: z.ZodString;
+        recipient_fingerprint: z.ZodString;
         key_ref: z.ZodString;
-        encrypted_key: z.ZodString;
+        aad: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+        encrypted_payload: z.ZodObject<{
+            schema: z.ZodLiteral<"viewport.wrapped_key_envelope/v1">;
+            alg: z.ZodLiteral<"x25519-hkdf-sha256-aes-256-gcm">;
+            ephemeralPublicKeyJwk: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+            iv: z.ZodString;
+            ciphertext: z.ZodString;
+            tag: z.ZodString;
+            aadDigest: z.ZodString;
+            createdAt: z.ZodString;
+        }, z.core.$strip>;
     }, z.core.$strip>>>;
     recipients: z.ZodArray<z.ZodObject<{
-        user_id: z.ZodNumber;
-        key_id: z.ZodString;
-        public_key_jwk: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+        recipient_type: z.ZodUnion<readonly [z.ZodLiteral<"user_epoch">, z.ZodLiteral<"team_epoch">]>;
+        recipient_epoch_id: z.ZodString;
+        recipient_fingerprint: z.ZodString;
+        encryption_public_key_jwk: z.ZodRecord<z.ZodString, z.ZodUnknown>;
     }, z.core.$strip>>;
     capabilityToken: z.ZodOptional<z.ZodString>;
     requestId: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>, z.ZodObject<{
+    type: z.ZodLiteral<"trusted-edge-team-epoch-publish">;
+    workspaceId: z.ZodString;
+    teamId: z.ZodString;
+    capabilityToken: z.ZodOptional<z.ZodString>;
+    requestId: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>], "type">;
 export type IncomingMessage = z.infer<typeof IncomingMessageSchema>;
 //# sourceMappingURL=ws-protocol.d.ts.map

package/dist/server/ws-protocol.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ws-protocol.d.ts","sourceRoot":"","sources":["../../src/server/ws-protocol.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAoBhE,eAAO,MAAM,+BAA+B,MAAM,CAAC;AAWnD,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;kBAmBd,CAAC;AAEZ,eAAO,MAAM,UAAU;;;;iBAIrB,CAAC;AAEH,eAAO,MAAM,YAAY;;;;;;;;;iBAMvB,CAAC;AAEH,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;iBASlC,CAAC;AAEH,eAAO,MAAM,eAAe;;;;;iBAK1B,CAAC;AAEH,eAAO,MAAM,iBAAiB;;;;iBAI5B,CAAC;AAEH,eAAO,MAAM,cAAc;;;;;iBAKzB,CAAC;AAEH,eAAO,MAAM,iBAAiB;;;;;iBAK5B,CAAC;AAEH,eAAO,MAAM,iBAAiB;;;;;;iBAM5B,CAAC;AAEH,eAAO,MAAM,kBAAkB;;;;;;iBAM7B,CAAC;AAEH,eAAO,MAAM,yBAAyB;;;;;;;;;;;iBAQpC,CAAC;AAEH,eAAO,MAAM,6BAA6B;;;;;;;;;;;iBAWxC,CAAC;AAEH,eAAO,MAAM,YAAY;;;;;;;;kBAUd,CAAC;AAEZ,eAAO,MAAM,4BAA4B;;;;;iBAKvC,CAAC;AAEH,eAAO,MAAM,8BAA8B;;;;;iBAKzC,CAAC;AAEH,eAAO,MAAM,iBAAiB;;;iBAG5B,CAAC;AAEH,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAiC1B,CAAC;AAEL,eAAO,MAAM,sBAAsB;;;;iBAIjC,CAAC;AAEH,eAAO,MAAM,qBAAqB;;;;iBAIhC,CAAC;AAEH,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;iBAenC,CAAC;AAEH,eAAO,MAAM,uBAAuB;;;;;;;;;;;iBAalC,CAAC;AAMH,eAAO,MAAM,eAAe;;;;;iBAK1B,CAAC;AAEH,eAAO,MAAM,2BAA2B;;;;;;;;;;;iBAQtC,CAAC;AAEH,eAAO,MAAM,sBAAsB;;;;iBAIjC,CAAC;AAEH,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;;;;;;;;;;;;iBA8BvC,CAAC;AAEH,eAAO,MAAM,iCAAiC;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAW5C,CAAC;AAEH,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAmBvC,CAAC;AAMH,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;2BA4BhC,CAAC;AAEH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC"}
+{"version":3,"file":"ws-protocol.d.ts","sourceRoot":"","sources":["../../src/server/ws-protocol.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAoBhE,eAAO,MAAM,+BAA+B,MAAM,CAAC;AAWnD,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;kBAmBd,CAAC;AAEZ,eAAO,MAAM,UAAU;;;;iBAIrB,CAAC;AAEH,eAAO,MAAM,YAAY;;;;;;;;;iBAMvB,CAAC;AAEH,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;iBASlC,CAAC;AAEH,eAAO,MAAM,eAAe;;;;;iBAK1B,CAAC;AAEH,eAAO,MAAM,iBAAiB;;;;iBAI5B,CAAC;AAEH,eAAO,MAAM,cAAc;;;;;iBAKzB,CAAC;AAEH,eAAO,MAAM,iBAAiB;;;;;iBAK5B,CAAC;AAEH,eAAO,MAAM,iBAAiB;;;;;;iBAM5B,CAAC;AAEH,eAAO,MAAM,kBAAkB;;;;;;iBAM7B,CAAC;AAEH,eAAO,MAAM,yBAAyB;;;;;;;;;;;iBAQpC,CAAC;AAEH,eAAO,MAAM,6BAA6B;;;;;;;;;;;iBAWxC,CAAC;AAEH,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;iBAmB/B,CAAC;AAEH,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;iBAc/B,CAAC;AAEH,eAAO,MAAM,YAAY;;;;;;;;kBAUd,CAAC;AAEZ,eAAO,MAAM,4BAA4B;;;;;iBAKvC,CAAC;AAEH,eAAO,MAAM,8BAA8B;;;;;iBAKzC,CAAC;AAEH,eAAO,MAAM,iBAAiB;;;iBAG5B,CAAC;AAEH,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAiC1B,CAAC;AAEL,eAAO,MAAM,sBAAsB;;;;iBAIjC,CAAC;AAEH,eAAO,MAAM,qBAAqB;;;;iBAIhC,CAAC;AAEH,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;iBAenC,CAAC;AAEH,eAAO,MAAM,uBAAuB;;;;;;;;;;;iBAalC,CAAC;AAMH,eAAO,MAAM,eAAe;;;;;iBAK1B,CAAC;AAEH,eAAO,MAAM,2BAA2B;;;;;;;;;;;iBAQtC,CAAC;AAsBH,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAkBvC,CAAC;AAEH,eAAO,MAAM,iCAAiC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAW5C,CAAC;AAEH,eAAO,MAAM,iCAAiC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAmB5C,CAAC;AAEH,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAoBvC,CAAC;AAEH,eAAO,MAAM,iCAAiC;;;;;;iBAM5C,CAAC;AAMH,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;2BA+BhC,CAAC;AAEH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC"}

package/dist/server/ws-protocol.js

@@ -129,6 +129,41 @@ export const ContextCandidatePreviewSchema = z.object({
     capabilityToken: z.string().min(1).max(4096).optional(),
     requestId: z.string().max(MAX_REQUEST_ID_CHARS).optional(),
 });
+export const ContextResolveSchema = z.object({
+    type: z.literal('context-resolve'),
+    contextResourceId: z.string().min(1).max(256),
+    workspaceId: z.string().min(1).max(256),
+    actorName: z.string().min(1).max(256),
+    query: z.string().max(10_000).default(''),
+    maxItems: z.number().int().min(1).max(500).optional(),
+    includePrivate: z.boolean().optional(),
+    profile: z.string().min(1).max(256).optional(),
+    profilePin: z
+        .object({
+        path: z.string().min(1).max(4096).optional(),
+        digest: z.string().min(1).max(256).optional(),
+    })
+        .optional(),
+    passphrase: z.string().max(4096).optional(),
+    recoveryCode: z.string().max(4096).optional(),
+    capabilityToken: z.string().min(1).max(4096).optional(),
+    requestId: z.string().max(MAX_REQUEST_ID_CHARS).optional(),
+});
+export const ContextProposeSchema = z.object({
+    type: z.literal('context-propose'),
+    contextResourceId: z.string().min(1).max(256),
+    workspaceId: z.string().min(1).max(256),
+    actorName: z.string().min(1).max(256),
+    title: z.string().min(1).max(500),
+    body: z.string().min(1).max(100_000),
+    source: z.string().max(512).optional(),
+    sourceKind: z.enum(['workflow', 'plan', 'integration']).optional(),
+    sync: z.boolean().optional(),
+    passphrase: z.string().max(4096).optional(),
+    recoveryCode: z.string().max(4096).optional(),
+    capabilityToken: z.string().min(1).max(4096).optional(),
+    requestId: z.string().max(MAX_REQUEST_ID_CHARS).optional(),
+});
 export const ResumeSchema = z
     .object({
     type: z.literal('resume'),
@@ -248,10 +283,24 @@ export const RespondHookPermissionSchema = z.object({
     }),
     requestId: z.string().max(MAX_REQUEST_ID_CHARS).optional(),
 });
-export const GetHookPlanDraftSchema = z.object({
-    type: z.literal('get-hook-plan-draft'),
-    draftId: z.string().min(1).max(256),
-    requestId: z.string().max(MAX_REQUEST_ID_CHARS).optional(),
+const TrustedEdgePlanBodyKeyGrantSchema = z.object({
+    schema: z.literal('viewport.plan_body_key_grant/v2'),
+    algorithm: z.literal('x25519-hkdf-sha256-aes-256-gcm'),
+    recipient_type: z.union([z.literal('user_epoch'), z.literal('team_epoch')]),
+    recipient_epoch_id: z.string().min(1).max(256),
+    recipient_fingerprint: z.string().min(1).max(256),
+    key_ref: z.string().min(1).max(256),
+    aad: z.record(z.string(), z.unknown()),
+    encrypted_payload: z.object({
+        schema: z.literal('viewport.wrapped_key_envelope/v1'),
+        alg: z.literal('x25519-hkdf-sha256-aes-256-gcm'),
+        ephemeralPublicKeyJwk: z.record(z.string(), z.unknown()),
+        iv: z.string().min(1),
+        ciphertext: z.string().min(1),
+        tag: z.string().min(1),
+        aadDigest: z.string().min(1),
+        createdAt: z.string().min(1),
+    }),
 });
 export const TrustedEdgePlanDecryptSchema = z.object({
     type: z.literal('trusted-edge-plan-decrypt'),
@@ -268,17 +317,7 @@ export const TrustedEdgePlanDecryptSchema = z.object({
         digest: z.string().min(1).max(256),
         aad: z.record(z.string(), z.unknown()).optional(),
     }),
-    bodyKeyGrants: z
-        .array(z.object({
-        schema: z.literal('viewport.plan_body_key_grant/v1'),
-        algorithm: z.literal('RSA-OAEP-256'),
-        recipient_user_id: z.number().int(),
-        recipient_key_id: z.string().min(1).max(256),
-        key_ref: z.string().min(1).max(256),
-        encrypted_key: z.string().min(1),
-    }))
-        .max(500)
-        .optional(),
+    bodyKeyGrants: z.array(TrustedEdgePlanBodyKeyGrantSchema).max(500).optional(),
     capabilityToken: z.string().min(1).max(4096).optional(),
     requestId: z.string().max(MAX_REQUEST_ID_CHARS).optional(),
 });
@@ -294,6 +333,26 @@ export const TrustedEdgePlanEncryptFieldSchema = z.object({
     capabilityToken: TrustedEdgePlanDecryptSchema.shape.capabilityToken,
     requestId: z.string().max(MAX_REQUEST_ID_CHARS).optional(),
 });
+export const TrustedEdgePlanDecryptFieldSchema = z.object({
+    type: z.literal('trusted-edge-plan-decrypt-field'),
+    workspaceId: z.string().min(1).max(256),
+    planId: z.string().min(1).max(256).optional(),
+    sourceRef: z.string().min(1).max(512).optional(),
+    bodyEncryption: TrustedEdgePlanDecryptSchema.shape.bodyEncryption,
+    bodyKeyGrants: TrustedEdgePlanDecryptSchema.shape.bodyKeyGrants,
+    fieldEncryption: z.object({
+        schema: z.literal('viewport.plan_feedback_field_encrypted/v1'),
+        algorithm: z.literal('AES-GCM-256'),
+        key_ref: z.string().min(1).max(256),
+        ciphertext: z.string().min(1),
+        iv: z.string().min(1),
+        tag: z.string().min(1),
+        digest: z.string().min(1).max(256),
+        aad: z.record(z.string(), z.unknown()).optional(),
+    }),
+    capabilityToken: TrustedEdgePlanDecryptSchema.shape.capabilityToken,
+    requestId: z.string().max(MAX_REQUEST_ID_CHARS).optional(),
+});
 export const TrustedEdgePlanWrapKeySchema = z.object({
     type: z.literal('trusted-edge-plan-wrap-key'),
     workspaceId: z.string().min(1).max(256),
@@ -303,15 +362,23 @@ export const TrustedEdgePlanWrapKeySchema = z.object({
     bodyKeyGrants: TrustedEdgePlanDecryptSchema.shape.bodyKeyGrants,
     recipients: z
         .array(z.object({
-        user_id: z.number().int().positive(),
-        key_id: z.string().min(1).max(256),
-        public_key_jwk: z.record(z.string(), z.unknown()),
+        recipient_type: z.union([z.literal('user_epoch'), z.literal('team_epoch')]),
+        recipient_epoch_id: z.string().min(1).max(256),
+        recipient_fingerprint: z.string().min(1).max(256),
+        encryption_public_key_jwk: z.record(z.string(), z.unknown()),
     }))
         .min(1)
         .max(500),
     capabilityToken: TrustedEdgePlanDecryptSchema.shape.capabilityToken,
     requestId: z.string().max(MAX_REQUEST_ID_CHARS).optional(),
 });
+export const TrustedEdgeTeamEpochPublishSchema = z.object({
+    type: z.literal('trusted-edge-team-epoch-publish'),
+    workspaceId: z.string().min(1).max(256),
+    teamId: z.string().min(1).max(256),
+    capabilityToken: z.string().min(1).max(4096).optional(),
+    requestId: z.string().max(MAX_REQUEST_ID_CHARS).optional(),
+});
 // ---------------------------------------------------------------------------
 // Discriminated union of all incoming messages
 // ---------------------------------------------------------------------------
@@ -328,6 +395,8 @@ export const IncomingMessageSchema = z.discriminatedUnion('type', [
     ListSessionsSchema,
     ReadSessionMessagesSchema,
     ContextCandidatePreviewSchema,
+    ContextResolveSchema,
+    ContextProposeSchema,
     ResumeSchema,
     WatchDiscoveredSessionSchema,
     UnwatchDiscoveredSessionSchema,
@@ -339,9 +408,10 @@ export const IncomingMessageSchema = z.discriminatedUnion('type', [
     WorkflowCancelRunSchema,
     SuperviseSchema,
     RespondHookPermissionSchema,
-    GetHookPlanDraftSchema,
     TrustedEdgePlanDecryptSchema,
+    TrustedEdgePlanDecryptFieldSchema,
     TrustedEdgePlanEncryptFieldSchema,
     TrustedEdgePlanWrapKeySchema,
+    TrustedEdgeTeamEpochPublishSchema,
 ]);
 //# sourceMappingURL=ws-protocol.js.map