dsh-mobile 0.5.3 → 0.5.4

package/lib/index.d.mts

@@ -151,6 +151,9 @@ export declare class AccessController {
   renew(deviceToken: string): Promise<RenewalResult>;
   /** Validate a persistent device credential without consuming a Session slot. */
   probe(deviceToken: string): Promise<DeviceProbeResult>;
+  /** Validate a device credential without writing state or opening a Session. */
+  authorizeDevice(deviceToken: string): DeviceProbeResult;
+  private requireDevice;
   /** Resolve a short Session Cookie without revealing whether device or Session failed. */
   authorizeSession(sessionToken: string): SessionAuthorization;
   /** Require the Session-bound anti-CSRF value for an authenticated mutation. */
@@ -227,6 +230,24 @@ export declare class RequestTrustPolicy {
 }
 //#endregion
 //#region src/config.d.ts
+/** Optional compression for exact, already authorized WebSocket paths. */
+interface WebSocketCompressionConfig {
+  paths?: string[];
+  maxMessageBytes?: number;
+  maxQueuedBytes?: number;
+  thresholdBytes?: number;
+  concurrencyLimit?: number;
+  level?: number;
+}
+/** Validated compression settings; an empty path list keeps the raw transport. */
+interface ResolvedWebSocketCompressionConfig {
+  readonly paths: readonly string[];
+  readonly maxMessageBytes: number;
+  readonly maxQueuedBytes: number;
+  readonly thresholdBytes: number;
+  readonly concurrencyLimit: number;
+  readonly level: number;
+}
 /** TLS source accepted by the LAN listener. */
 interface ProvidedTlsConfig {
   readonly mode: 'provided';
@@ -265,6 +286,8 @@ interface PluginConfig {
   mobileCompatibilityFile?: string;
   /** Optional application-phase client package ids omitted only from the mobile boot graph. */
   excludedClientModules?: string[];
+  /** Compression is opt-in; it does not authorize additional WebSocket paths. */
+  websocketCompression?: WebSocketCompressionConfig;
   /** Stable public discovery identifier; it is not an authentication secret. */
   instanceId?: string;
   /** Managed CA certificate offered to the Android installer after fingerprint binding. */
@@ -306,6 +329,7 @@ interface ResolvedGatewayConfig {
   readonly mobileLayoutFile: string;
   readonly mobileCompatibilityFile: string;
   readonly excludedClientModules: readonly string[];
+  readonly websocketCompression: ResolvedWebSocketCompressionConfig;
   readonly instanceId: string;
   readonly pairingCaFile?: string;
   readonly tls: TlsConfig;
@@ -690,6 +714,7 @@ export declare class MobileAccessGateway {
   private authorize;
   private requireCsrf;
   private setSessionCookies;
+  private setBrowserDeviceBinding;
   private handlePair;
   private handleRenew;
   private handleNativePair;