codai-sdk 0.71.0 → 0.72.0

package/dist/index.d.ts

@@ -7865,7 +7865,7 @@ type paths$1 = {
     readonly put?: never;
     /**
      * Resolve values for a local broker
-     * @description For codai brokers only (`x-codai-agent: codaid…` or `desktop…`): the cloud fallback of `codaid vault run` when the vault is not unlocked on the machine. Each handle gets an env-mode policy decision; t3/t4 answer 202 with approval ids, items that are not cloud-usable answer 409 `not_cloud_usable`. The broker injects values into a child process and redacts its output; they never reach a model.
+     * @description For codai brokers only (`x-codai-agent: codaid…` or `desktop…`): the cloud fallback of `codaid vault run` when the vault is not unlocked on the machine. Every call carries a `proof`: a fresh challenge from `POST /v1/vault/resolve/challenge` signed by one of your enrolled device keys, checked before any policy decision. Each handle gets an env-mode policy decision; t3/t4 answer 202 with approval ids, items that are not cloud-usable answer 409 `not_cloud_usable`. The broker injects values into a child process and redacts its output; they never reach a model. Errors: 400 `proof_required`, `invalid_challenge` (unknown, used or expired); 403 `invalid_device_proof` (device not yours, revoked, or bad signature), `broker_only`, `vault_denied`.
      */
     readonly post: operations$1['vaultResolve'];
     readonly delete?: never;
@@ -7874,6 +7874,26 @@ type paths$1 = {
     readonly patch?: never;
     readonly trace?: never;
   };
+  readonly '/v1/vault/resolve/challenge': {
+    readonly parameters: {
+      readonly query?: never;
+      readonly header?: never;
+      readonly path?: never;
+      readonly cookie?: never;
+    };
+    readonly get?: never;
+    readonly put?: never;
+    /**
+     * Get a resolve challenge
+     * @description For codai brokers only (`x-codai-agent: codaid…` or `desktop…`; others get 403 `broker_only`). Single-use nonce valid for 120 seconds; the broker signs it with its enrolled device key into the `proof` of the next `POST /v1/vault/resolve`.
+     */
+    readonly post: operations$1['createVaultResolveChallenge'];
+    readonly delete?: never;
+    readonly options?: never;
+    readonly head?: never;
+    readonly patch?: never;
+    readonly trace?: never;
+  };
   readonly '/v1/vault/rules': {
     readonly parameters: {
       readonly query?: never;
@@ -18660,7 +18680,7 @@ type components$1 = {
       readonly nonce: string;
     };
     readonly VaultDeviceEnroll: {
-      /** @description Required for `android_keystore` (certificate chain, leaf first, attestation challenge = nonce bytes). Optional for `windows_hello`: a TPM attestation gives `tpm`, none gives `hello-unattested`. */
+      /** @description Required for `android_keystore` (certificate chain, leaf first, attestation challenge = nonce bytes). Optional for `windows_hello`: a TPM attestation gives `tpm`, none gives `hello-unattested`. Must be absent for `cli_ed25519` (surface `cli`, stored as `software`). */
       readonly attestation?: {
         readonly android_chain: readonly string[];
       } | {
@@ -18670,36 +18690,39 @@ type components$1 = {
         };
       };
       readonly device_id: string;
-      /** @description The device key over the same message (ECDSA P-256 DER on Android, RSASSA-PKCS1-v1_5 SHA-256 for Windows Hello), base64url. */
+      /** @description The device key over the same message (ECDSA P-256 DER on Android, RSASSA-PKCS1-v1_5 SHA-256 for Windows Hello, raw 64-byte Ed25519 for `cli_ed25519`), base64url. */
       readonly device_signature: string;
       /** @enum {string} */
-      readonly kind: 'android_keystore' | 'windows_hello';
+      readonly kind: 'android_keystore' | 'windows_hello' | 'cli_ed25519';
       readonly name: string;
       /** @description Nonce from `POST /v1/vault/devices/challenge`. */
       readonly nonce: string;
       /** @description SubjectPublicKeyInfo DER of the device key, base64url. */
       readonly public_key: string;
       /** @enum {string} */
-      readonly surface: 'phone' | 'wear' | 'desktop';
+      readonly surface: 'phone' | 'wear' | 'desktop' | 'cli';
       /** @description Ed25519 signature of your vault key over `codai-vault/device-enroll/v1|<device_id>|<kind>|<spki_sha256>|<nonce>`. */
       readonly vault_signature: string;
     };
     readonly VaultDeviceKey: {
       /**
-       * @description What the gateway verified at enrolment: Google key attestation (StrongBox or TEE), a TPM attestation of the Windows Hello key, or an unattested Windows Hello key.
+       * @description What the gateway verified at enrolment: Google key attestation (StrongBox or TEE), a TPM attestation of the Windows Hello key, an unattested Windows Hello key, or `software` for a `cli_ed25519` key (no hardware proof).
        * @enum {string}
        */
-      readonly attestation: 'android-strongbox' | 'android-tee' | 'tpm' | 'hello-unattested';
+      readonly attestation: 'android-strongbox' | 'android-tee' | 'tpm' | 'hello-unattested' | 'software';
       /** @description Attestation details (security level, OS patch level, verified boot state…). No secrets. */
       readonly attestation_info: {
         readonly [key: string]: unknown;
       };
       /** Format: date-time */
       readonly created_at: string;
-      /** @description Device id (`android-…`, `wear-…` or `desktop-…`), chosen by the client. */
+      /** @description Device id (`android-…`, `wear-…`, `desktop-…` or `cli-…`), chosen by the client. */
       readonly id: string;
-      /** @enum {string} */
-      readonly kind: 'android_keystore' | 'windows_hello';
+      /**
+       * @description `cli_ed25519` is the software key of `codaid`: it proves `POST /v1/vault/resolve` requests only and can never decide approvals or unlock the vault.
+       * @enum {string}
+       */
+      readonly kind: 'android_keystore' | 'windows_hello' | 'cli_ed25519';
       /** Format: date-time */
       readonly last_used_at: string | null;
       readonly name: string;
@@ -18708,7 +18731,7 @@ type components$1 = {
       /** Format: date-time */
       readonly revoked_at: string | null;
       /** @enum {string} */
-      readonly surface: 'phone' | 'wear' | 'desktop';
+      readonly surface: 'phone' | 'wear' | 'desktop' | 'cli';
     };
     readonly VaultGuards: {
       /** @description Agent requests for one item within `burst_window_s` that count as a burst (`anomaly:burst`); 0 = off. */
@@ -18762,6 +18785,23 @@ type components$1 = {
       /** Format: date-time */
       readonly locked_at: string;
     };
+    readonly VaultResolveChallenge: {
+      /** @description 32 random bytes, base64url. Single use; sign it into the next `POST /v1/vault/resolve` proof. */
+      readonly challenge: string;
+      /**
+       * Format: date-time
+       * @description 120 seconds after issue.
+       */
+      readonly expires_at: string;
+    };
+    readonly VaultResolveProof: {
+      /** @description Challenge from `POST /v1/vault/resolve/challenge`. */
+      readonly challenge: string;
+      /** @description An enrolled, unrevoked device key of the caller (desktop: `windows_hello`; codaid: `cli_ed25519`). */
+      readonly device_id: string;
+      /** @description Device-key signature, base64url, over `codai-vault/resolve/v1|<challenge>|<device_id>|<digest>` where `digest` = base64url_nopad(SHA-256(UTF-8(handles joined by `\n` + `\n\n` + action))), with `handles` and `action` exactly as sent. */
+      readonly signature: string;
+    };
     readonly VaultUnlockChallenge: {
       /** @description 32 random bytes, base64url. Single use. */
       readonly challenge: string;
@@ -35087,6 +35127,7 @@ interface operations$1 {
           readonly action: string;
           readonly chain?: readonly string[];
           readonly handles: readonly string[];
+          readonly proof: components$1['schemas']['VaultResolveProof'];
           /** @enum {string} */
           readonly provenance?: 'user' | 'agent' | 'untrusted';
           readonly purpose?: string;
@@ -35119,7 +35160,7 @@ interface operations$1 {
       };
       readonly 400: components$1['responses']['BadRequest'];
       readonly 401: components$1['responses']['Unauthorized'];
-      /** @description Not a broker, or denied by policy. */
+      /** @description `invalid_device_proof`, `broker_only` (not a broker) or `vault_denied` (denied by policy). */
       readonly 403: {
         headers: {
           readonly [name: string]: unknown;
@@ -35155,6 +35196,39 @@ interface operations$1 {
       };
     };
   };
+  readonly createVaultResolveChallenge: {
+    readonly parameters: {
+      readonly query?: never;
+      readonly header?: never;
+      readonly path?: never;
+      readonly cookie?: never;
+    };
+    readonly requestBody?: never;
+    readonly responses: {
+      /** @description OK. */
+      readonly 200: {
+        headers: {
+          readonly [name: string]: unknown;
+        };
+        content: {
+          readonly 'application/json': components$1['schemas']['VaultResolveChallenge'];
+        };
+      };
+      readonly 400: components$1['responses']['BadRequest'];
+      readonly 401: components$1['responses']['Unauthorized'];
+      /** @description `broker_only`: not a codai broker. */
+      readonly 403: {
+        headers: {
+          readonly [name: string]: unknown;
+        };
+        content: {
+          readonly 'application/json': {
+            readonly [key: string]: unknown;
+          };
+        };
+      };
+    };
+  };
   readonly listVaultRules: {
     readonly parameters: {
       readonly query?: never;
@@ -38396,7 +38470,10 @@ export type VaultDeviceEnroll = Mutable<Schema<'VaultDeviceEnroll'>>;
 export type VaultDeviceAttestation = VaultDeviceKey['attestation'];
 export type VaultUseRequest = Mutable<Body<'vaultUse'>>;
 export type VaultHttpRequest = Mutable<Body<'vaultHttp'>>;
+/** Requires `proof`: a fresh {@link Vault.resolveChallenge} signed over {@link vaultResolveMessage} by an enrolled device key. */
 export type VaultResolveRequest = Mutable<Body<'vaultResolve'>>;
+export type VaultResolveProof = Mutable<Schema<'VaultResolveProof'>>;
+export type VaultResolveChallenge = Schema<'VaultResolveChallenge'>;
 export type VaultTier = VaultAccount['default_tier'];
 /** Anomaly guards (V-32): new host, burst, allowed hours. An anomaly forces t4. */
 export type VaultGuards = Schema<'VaultGuards'>;
@@ -38412,6 +38489,14 @@ export type VaultItemLimitsInput = Mutable<Body<'setVaultItemLimits'>>;
 export type VaultVia = 'hub' | 'desktop' | 'phone' | 'wear' | 'extension';
 /** The UTF-8 message an unlock proof covers: `codai-vault/unlock/v1|<challenge>|<device_id or "passkey">`. */
 export declare function vaultUnlockMessage(challenge: string, deviceIdOrPasskey: string): string;
+/**
+ * The UTF-8 message a resolve proof covers: `codai-vault/resolve/v1|<challenge>|<device_id>|<digest>`, where `digest` =
+ * base64url_nopad(SHA-256(handles.join("\n") + "\n\n" + action)) with handles and action exactly as sent.
+ * Compute `digest` with your platform's SHA-256 (the SDK stays crypto-free).
+ */
+export declare function vaultResolveMessage(challenge: string, deviceId: string, digest: string): string;
+/** The exact UTF-8 text whose SHA-256 (base64url, no padding) is the resolve proof `digest`. */
+export declare function vaultResolveDigestInput(handles: readonly string[], action: string): string;
 /** Loose JSON object answers (lists, acks) as documented in the OpenAPI spec. */
 export type VaultObject = Record<string, unknown>;
 type CallOpts$21 = {
@@ -38512,7 +38597,12 @@ export declare class Vault {
   use(body: VaultUseRequest, opts?: CallOpts$21): Promise<VaultUseDecision>;
   /** `POST /v1/vault/http` — brokered HTTPS call with `{{vault:<slug>}}` handles; 202 = approval required. */
   httpCall(body: VaultHttpRequest, opts?: CallOpts$21): Promise<VaultObject>;
-  /** `POST /v1/vault/resolve` — codai local brokers only (cloud fallback of `codaid vault run`); 202 = approval. */
+  /** `POST /v1/vault/resolve/challenge` — codai local brokers only; single-use resolve challenge, valid 120 s. */
+  resolveChallenge(opts?: CallOpts$21): Promise<VaultResolveChallenge>;
+  /**
+   * `POST /v1/vault/resolve` — codai local brokers only (cloud fallback of `codaid vault run`); 202 = approval.
+   * `body.proof` is required: 400 `proof_required` / `invalid_challenge`, 403 `invalid_device_proof`.
+   */
   resolve(body: VaultResolveRequest, opts?: CallOpts$21): Promise<VaultObject>;
 }
 /** `share_token`, `surface`, `category`, `explanation`, `reporter_name`, `reporter_email`, `good_faith: true`. */

package/dist/index.js

@@ -3523,6 +3523,18 @@ var Voices = class {
 function vaultUnlockMessage(challenge, deviceIdOrPasskey) {
 	return `codai-vault/unlock/v1|${challenge}|${deviceIdOrPasskey}`;
 }
+/**
+* The UTF-8 message a resolve proof covers: `codai-vault/resolve/v1|<challenge>|<device_id>|<digest>`, where `digest` =
+* base64url_nopad(SHA-256(handles.join("\n") + "\n\n" + action)) with handles and action exactly as sent.
+* Compute `digest` with your platform's SHA-256 (the SDK stays crypto-free).
+*/
+function vaultResolveMessage(challenge, deviceId, digest) {
+	return `codai-vault/resolve/v1|${challenge}|${deviceId}|${digest}`;
+}
+/** The exact UTF-8 text whose SHA-256 (base64url, no padding) is the resolve proof `digest`. */
+function vaultResolveDigestInput(handles, action) {
+	return `${handles.join("\n")}\n\n${action}`;
+}
 const seg = (base, id, suffix = "") => `${base}/${encodeURIComponent(id)}${suffix}`;
 /** `/v1/vault/devices/*` — hardware-backed device approval keys (public keys only; revocation is instant). */
 var VaultDevices = class {
@@ -3743,7 +3755,14 @@ var Vault = class {
 	httpCall(body, opts = {}) {
 		return this.send("POST", "/v1/vault/http", opts, body);
 	}
-	/** `POST /v1/vault/resolve` — codai local brokers only (cloud fallback of `codaid vault run`); 202 = approval. */
+	/** `POST /v1/vault/resolve/challenge` — codai local brokers only; single-use resolve challenge, valid 120 s. */
+	resolveChallenge(opts = {}) {
+		return this.send("POST", "/v1/vault/resolve/challenge", opts, {});
+	}
+	/**
+	* `POST /v1/vault/resolve` — codai local brokers only (cloud fallback of `codaid vault run`); 202 = approval.
+	* `body.proof` is required: 400 `proof_required` / `invalid_challenge`, 403 `invalid_device_proof`.
+	*/
 	resolve(body, opts = {}) {
 		return this.send("POST", "/v1/vault/resolve", opts, body);
 	}
@@ -6896,6 +6915,7 @@ const OPERATION_METHODS = {
 	vaultUse: "vault.use",
 	vaultHttp: "vault.httpCall",
 	vaultResolve: "vault.resolve",
+	createVaultResolveChallenge: "vault.resolveChallenge",
 	createStudioAbuseReport: "abuseReports.create",
 	checkProvenance: "provenance.check",
 	createStudioBatch: "batches.create",
@@ -7727,5 +7747,5 @@ function allKeys(obj) {
 	return [...keys];
 }
 
-export { AbuseReports, Account, AgentRuns, Agents, Assets, Audio, Batches, Billing, BrandKits, Cards, Chat, ChatCompletions, Codai, Codai as default, CodaiApps, CodaiError, Creatives, Devices, Documents, Embeddings, EnvironmentFiles, EnvironmentJobs, EnvironmentMembers, EnvironmentPorts, EnvironmentSecrets, EnvironmentTasks, Environments, Exports, Feedback, Health, Heartbeats, Hosts, HttpClient, Images, JAM_CLOSE_CODES, JAM_SCALES, JAM_SUBPROTOCOL, Jam, JamSession, Keys, Lists, LyricsResource, MediaOps, Memory, Messages, Models, Music, MusicRoom, Notifications, OPERATION_METHODS, OrgMembers, Orgs, OsGate, PROVENANCE_MAX_BYTES, PhoneModels, Productions, Projects, Prompts, Provenance, RESOLVE_ATTESTATION_PAYLOAD_TYPE, RESOLVE_OPERATION_METHODS, RESOLVE_TERMINAL_STATUSES, Realtime, RealtimeSession, Receipts, Referrals, Renders, Research, Resolve, ResolveError, ResolveInsufficientFundsError, Responses, STREAMING_OPERATIONS, SandboxFiles, Sandboxes, ScheduleExecutor, SchedulerHosts, Schedules, SessionControls, SessionEvents, SessionLease, SessionShares, Sessions, Settings, Sfx, Shares, SystemOne, TUS_CHUNK_BYTES, Tasks, Templates, Tokens, Tools, Transcripts, Triggers, Usage, Vault, VaultDevices, Verify, Videos, VoiceRevocations, Voices, extensionHeaders, frameJson, isAssetDto, isMediaOpJob, isMediaOpJobFinished, isMusicRoomFinished, isPagedBuild, isProductionFinished, isResearchFinished, jamUrl, mergeToolCall, readSse, realtimeUrl, resolveAttestationStatement, settingsConflictCurrent, shareTokenFrom, uploadIdFromLocation, vaultUnlockMessage, verifyAttestationWithKeys, verifyResolveWebhook };
+export { AbuseReports, Account, AgentRuns, Agents, Assets, Audio, Batches, Billing, BrandKits, Cards, Chat, ChatCompletions, Codai, Codai as default, CodaiApps, CodaiError, Creatives, Devices, Documents, Embeddings, EnvironmentFiles, EnvironmentJobs, EnvironmentMembers, EnvironmentPorts, EnvironmentSecrets, EnvironmentTasks, Environments, Exports, Feedback, Health, Heartbeats, Hosts, HttpClient, Images, JAM_CLOSE_CODES, JAM_SCALES, JAM_SUBPROTOCOL, Jam, JamSession, Keys, Lists, LyricsResource, MediaOps, Memory, Messages, Models, Music, MusicRoom, Notifications, OPERATION_METHODS, OrgMembers, Orgs, OsGate, PROVENANCE_MAX_BYTES, PhoneModels, Productions, Projects, Prompts, Provenance, RESOLVE_ATTESTATION_PAYLOAD_TYPE, RESOLVE_OPERATION_METHODS, RESOLVE_TERMINAL_STATUSES, Realtime, RealtimeSession, Receipts, Referrals, Renders, Research, Resolve, ResolveError, ResolveInsufficientFundsError, Responses, STREAMING_OPERATIONS, SandboxFiles, Sandboxes, ScheduleExecutor, SchedulerHosts, Schedules, SessionControls, SessionEvents, SessionLease, SessionShares, Sessions, Settings, Sfx, Shares, SystemOne, TUS_CHUNK_BYTES, Tasks, Templates, Tokens, Tools, Transcripts, Triggers, Usage, Vault, VaultDevices, Verify, Videos, VoiceRevocations, Voices, extensionHeaders, frameJson, isAssetDto, isMediaOpJob, isMediaOpJobFinished, isMusicRoomFinished, isPagedBuild, isProductionFinished, isResearchFinished, jamUrl, mergeToolCall, readSse, realtimeUrl, resolveAttestationStatement, settingsConflictCurrent, shareTokenFrom, uploadIdFromLocation, vaultResolveDigestInput, vaultResolveMessage, vaultUnlockMessage, verifyAttestationWithKeys, verifyResolveWebhook };
 //# sourceMappingURL=index.js.map