ftown 0.19.59 → 0.19.61

package/dist/security/bridge/identity.d.ts

@@ -3,64 +3,29 @@ import type { EndpointIdentity, EndpointKind } from '../protocol.js';
 import type { VerifiedAccountTrust } from '../account-protocol.js';
 export declare const identityRecordSchema: z.ZodObject<{
     version: z.ZodLiteral<1>;
-    endpoint: z.ZodEffects<z.ZodObject<{
+    endpoint: z.ZodObject<{
         version: z.ZodLiteral<1>;
         id: z.ZodString;
         ownerId: z.ZodString;
-        kind: z.ZodEnum<["bridge", "browser", "mcp", "local-cli"]>;
+        kind: z.ZodEnum<{
+            bridge: "bridge";
+            browser: "browser";
+            mcp: "mcp";
+            "local-cli": "local-cli";
+        }>;
         publicKey: z.ZodString;
-    }, "strict", z.ZodTypeAny, {
-        id: string;
-        version: 1;
-        ownerId: string;
-        kind: "bridge" | "browser" | "mcp" | "local-cli";
-        publicKey: string;
-    }, {
-        id: string;
-        version: 1;
-        ownerId: string;
-        kind: "bridge" | "browser" | "mcp" | "local-cli";
-        publicKey: string;
-    }>, {
-        id: string;
-        version: 1;
-        ownerId: string;
-        kind: "bridge" | "browser" | "mcp" | "local-cli";
-        publicKey: string;
-    }, {
-        id: string;
-        version: 1;
-        ownerId: string;
-        kind: "bridge" | "browser" | "mcp" | "local-cli";
-        publicKey: string;
-    }>;
+    }, z.core.$strict>;
     privateKey: z.ZodObject<{
         kty: z.ZodLiteral<"EC">;
         crv: z.ZodLiteral<"P-256">;
         x: z.ZodString;
         y: z.ZodString;
         d: z.ZodString;
-        key_ops: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        key_ops: z.ZodOptional<z.ZodArray<z.ZodString>>;
         ext: z.ZodOptional<z.ZodBoolean>;
-    }, "strict", z.ZodTypeAny, {
-        kty: "EC";
-        crv: "P-256";
-        x: string;
-        y: string;
-        d: string;
-        key_ops?: string[] | undefined;
-        ext?: boolean | undefined;
-    }, {
-        kty: "EC";
-        crv: "P-256";
-        x: string;
-        y: string;
-        d: string;
-        key_ops?: string[] | undefined;
-        ext?: boolean | undefined;
-    }>;
+    }, z.core.$strict>;
     accountBootstrap: z.ZodOptional<z.ZodObject<{
-        history: z.ZodType<import("../account-protocol.js").AccountHistory, z.ZodTypeDef, import("../account-protocol.js").AccountHistory>;
+        history: z.ZodCustom<import("../account-protocol.js").AccountHistory, import("../account-protocol.js").AccountHistory>;
         checkpoint: z.ZodObject<{
             version: z.ZodLiteral<1>;
             ownerId: z.ZodString;
@@ -68,368 +33,44 @@ export declare const identityRecordSchema: z.ZodObject<{
             head: z.ZodString;
             revision: z.ZodNumber;
             devices: z.ZodArray<z.ZodObject<{
-                endpoint: z.ZodEffects<z.ZodObject<{
+                endpoint: z.ZodObject<{
                     version: z.ZodLiteral<1>;
                     id: z.ZodString;
                     ownerId: z.ZodString;
-                    kind: z.ZodEnum<["bridge", "browser", "mcp", "local-cli"]>;
+                    kind: z.ZodEnum<{
+                        bridge: "bridge";
+                        browser: "browser";
+                        mcp: "mcp";
+                        "local-cli": "local-cli";
+                    }>;
                     publicKey: z.ZodString;
-                }, "strict", z.ZodTypeAny, {
-                    id: string;
-                    version: 1;
-                    ownerId: string;
-                    kind: "bridge" | "browser" | "mcp" | "local-cli";
-                    publicKey: string;
-                }, {
-                    id: string;
-                    version: 1;
-                    ownerId: string;
-                    kind: "bridge" | "browser" | "mcp" | "local-cli";
-                    publicKey: string;
-                }>, {
-                    id: string;
-                    version: 1;
-                    ownerId: string;
-                    kind: "bridge" | "browser" | "mcp" | "local-cli";
-                    publicKey: string;
-                }, {
-                    id: string;
-                    version: 1;
-                    ownerId: string;
-                    kind: "bridge" | "browser" | "mcp" | "local-cli";
-                    publicKey: string;
-                }>;
+                }, z.core.$strict>;
                 signingPublicKey: z.ZodString;
                 label: z.ZodString;
-                approvedAt: z.ZodString;
-            }, "strict", z.ZodTypeAny, {
-                endpoint: {
-                    id: string;
-                    version: 1;
-                    ownerId: string;
-                    kind: "bridge" | "browser" | "mcp" | "local-cli";
-                    publicKey: string;
-                };
-                label: string;
-                approvedAt: string;
-                signingPublicKey: string;
-            }, {
-                endpoint: {
-                    id: string;
-                    version: 1;
-                    ownerId: string;
-                    kind: "bridge" | "browser" | "mcp" | "local-cli";
-                    publicKey: string;
-                };
-                label: string;
-                approvedAt: string;
-                signingPublicKey: string;
-            }>, "many">;
+                approvedAt: z.ZodUnion<readonly [z.ZodISODateTime, z.ZodISODateTime]>;
+            }, z.core.$strict>>;
             bridges: z.ZodArray<z.ZodObject<{
                 bridgeId: z.ZodString;
-                endpoint: z.ZodEffects<z.ZodObject<{
+                endpoint: z.ZodObject<{
                     version: z.ZodLiteral<1>;
                     id: z.ZodString;
                     ownerId: z.ZodString;
-                    kind: z.ZodEnum<["bridge", "browser", "mcp", "local-cli"]>;
+                    kind: z.ZodEnum<{
+                        bridge: "bridge";
+                        browser: "browser";
+                        mcp: "mcp";
+                        "local-cli": "local-cli";
+                    }>;
                     publicKey: z.ZodString;
-                }, "strict", z.ZodTypeAny, {
-                    id: string;
-                    version: 1;
-                    ownerId: string;
-                    kind: "bridge" | "browser" | "mcp" | "local-cli";
-                    publicKey: string;
-                }, {
-                    id: string;
-                    version: 1;
-                    ownerId: string;
-                    kind: "bridge" | "browser" | "mcp" | "local-cli";
-                    publicKey: string;
-                }>, {
-                    id: string;
-                    version: 1;
-                    ownerId: string;
-                    kind: "bridge" | "browser" | "mcp" | "local-cli";
-                    publicKey: string;
-                }, {
-                    id: string;
-                    version: 1;
-                    ownerId: string;
-                    kind: "bridge" | "browser" | "mcp" | "local-cli";
-                    publicKey: string;
-                }>;
+                }, z.core.$strict>;
                 label: z.ZodString;
-                approvedAt: z.ZodString;
-            }, "strict", z.ZodTypeAny, {
-                bridgeId: string;
-                endpoint: {
-                    id: string;
-                    version: 1;
-                    ownerId: string;
-                    kind: "bridge" | "browser" | "mcp" | "local-cli";
-                    publicKey: string;
-                };
-                label: string;
-                approvedAt: string;
-            }, {
-                bridgeId: string;
-                endpoint: {
-                    id: string;
-                    version: 1;
-                    ownerId: string;
-                    kind: "bridge" | "browser" | "mcp" | "local-cli";
-                    publicKey: string;
-                };
-                label: string;
-                approvedAt: string;
-            }>, "many">;
-            revokedDeviceIds: z.ZodArray<z.ZodString, "many">;
-            revokedBridgeIds: z.ZodArray<z.ZodString, "many">;
-        }, "strict", z.ZodTypeAny, {
-            version: 1;
-            ownerId: string;
-            rootId: string;
-            revision: number;
-            head: string;
-            devices: {
-                endpoint: {
-                    id: string;
-                    version: 1;
-                    ownerId: string;
-                    kind: "bridge" | "browser" | "mcp" | "local-cli";
-                    publicKey: string;
-                };
-                label: string;
-                approvedAt: string;
-                signingPublicKey: string;
-            }[];
-            bridges: {
-                bridgeId: string;
-                endpoint: {
-                    id: string;
-                    version: 1;
-                    ownerId: string;
-                    kind: "bridge" | "browser" | "mcp" | "local-cli";
-                    publicKey: string;
-                };
-                label: string;
-                approvedAt: string;
-            }[];
-            revokedDeviceIds: string[];
-            revokedBridgeIds: string[];
-        }, {
-            version: 1;
-            ownerId: string;
-            rootId: string;
-            revision: number;
-            head: string;
-            devices: {
-                endpoint: {
-                    id: string;
-                    version: 1;
-                    ownerId: string;
-                    kind: "bridge" | "browser" | "mcp" | "local-cli";
-                    publicKey: string;
-                };
-                label: string;
-                approvedAt: string;
-                signingPublicKey: string;
-            }[];
-            bridges: {
-                bridgeId: string;
-                endpoint: {
-                    id: string;
-                    version: 1;
-                    ownerId: string;
-                    kind: "bridge" | "browser" | "mcp" | "local-cli";
-                    publicKey: string;
-                };
-                label: string;
-                approvedAt: string;
-            }[];
-            revokedDeviceIds: string[];
-            revokedBridgeIds: string[];
-        }>;
-    }, "strict", z.ZodTypeAny, {
-        history: import("../account-protocol.js").AccountHistory;
-        checkpoint: {
-            version: 1;
-            ownerId: string;
-            rootId: string;
-            revision: number;
-            head: string;
-            devices: {
-                endpoint: {
-                    id: string;
-                    version: 1;
-                    ownerId: string;
-                    kind: "bridge" | "browser" | "mcp" | "local-cli";
-                    publicKey: string;
-                };
-                label: string;
-                approvedAt: string;
-                signingPublicKey: string;
-            }[];
-            bridges: {
-                bridgeId: string;
-                endpoint: {
-                    id: string;
-                    version: 1;
-                    ownerId: string;
-                    kind: "bridge" | "browser" | "mcp" | "local-cli";
-                    publicKey: string;
-                };
-                label: string;
-                approvedAt: string;
-            }[];
-            revokedDeviceIds: string[];
-            revokedBridgeIds: string[];
-        };
-    }, {
-        history: import("../account-protocol.js").AccountHistory;
-        checkpoint: {
-            version: 1;
-            ownerId: string;
-            rootId: string;
-            revision: number;
-            head: string;
-            devices: {
-                endpoint: {
-                    id: string;
-                    version: 1;
-                    ownerId: string;
-                    kind: "bridge" | "browser" | "mcp" | "local-cli";
-                    publicKey: string;
-                };
-                label: string;
-                approvedAt: string;
-                signingPublicKey: string;
-            }[];
-            bridges: {
-                bridgeId: string;
-                endpoint: {
-                    id: string;
-                    version: 1;
-                    ownerId: string;
-                    kind: "bridge" | "browser" | "mcp" | "local-cli";
-                    publicKey: string;
-                };
-                label: string;
-                approvedAt: string;
-            }[];
-            revokedDeviceIds: string[];
-            revokedBridgeIds: string[];
-        };
-    }>>;
-}, "strict", z.ZodTypeAny, {
-    version: 1;
-    endpoint: {
-        id: string;
-        version: 1;
-        ownerId: string;
-        kind: "bridge" | "browser" | "mcp" | "local-cli";
-        publicKey: string;
-    };
-    privateKey: {
-        kty: "EC";
-        crv: "P-256";
-        x: string;
-        y: string;
-        d: string;
-        key_ops?: string[] | undefined;
-        ext?: boolean | undefined;
-    };
-    accountBootstrap?: {
-        history: import("../account-protocol.js").AccountHistory;
-        checkpoint: {
-            version: 1;
-            ownerId: string;
-            rootId: string;
-            revision: number;
-            head: string;
-            devices: {
-                endpoint: {
-                    id: string;
-                    version: 1;
-                    ownerId: string;
-                    kind: "bridge" | "browser" | "mcp" | "local-cli";
-                    publicKey: string;
-                };
-                label: string;
-                approvedAt: string;
-                signingPublicKey: string;
-            }[];
-            bridges: {
-                bridgeId: string;
-                endpoint: {
-                    id: string;
-                    version: 1;
-                    ownerId: string;
-                    kind: "bridge" | "browser" | "mcp" | "local-cli";
-                    publicKey: string;
-                };
-                label: string;
-                approvedAt: string;
-            }[];
-            revokedDeviceIds: string[];
-            revokedBridgeIds: string[];
-        };
-    } | undefined;
-}, {
-    version: 1;
-    endpoint: {
-        id: string;
-        version: 1;
-        ownerId: string;
-        kind: "bridge" | "browser" | "mcp" | "local-cli";
-        publicKey: string;
-    };
-    privateKey: {
-        kty: "EC";
-        crv: "P-256";
-        x: string;
-        y: string;
-        d: string;
-        key_ops?: string[] | undefined;
-        ext?: boolean | undefined;
-    };
-    accountBootstrap?: {
-        history: import("../account-protocol.js").AccountHistory;
-        checkpoint: {
-            version: 1;
-            ownerId: string;
-            rootId: string;
-            revision: number;
-            head: string;
-            devices: {
-                endpoint: {
-                    id: string;
-                    version: 1;
-                    ownerId: string;
-                    kind: "bridge" | "browser" | "mcp" | "local-cli";
-                    publicKey: string;
-                };
-                label: string;
-                approvedAt: string;
-                signingPublicKey: string;
-            }[];
-            bridges: {
-                bridgeId: string;
-                endpoint: {
-                    id: string;
-                    version: 1;
-                    ownerId: string;
-                    kind: "bridge" | "browser" | "mcp" | "local-cli";
-                    publicKey: string;
-                };
-                label: string;
-                approvedAt: string;
-            }[];
-            revokedDeviceIds: string[];
-            revokedBridgeIds: string[];
-        };
-    } | undefined;
-}>;
+                approvedAt: z.ZodUnion<readonly [z.ZodISODateTime, z.ZodISODateTime]>;
+            }, z.core.$strict>>;
+            revokedDeviceIds: z.ZodArray<z.ZodString>;
+            revokedBridgeIds: z.ZodArray<z.ZodString>;
+        }, z.core.$strict>;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
 /** OS-local persisted keys; corruption/wrong owner never silently generates a replacement identity. */
 export declare function loadOrCreateIdentity(dataDir: string, ownerId: string, kind: 'bridge' | 'local-cli'): Promise<EndpointIdentity>;
 export declare function isLocalIdentityKind(kind: EndpointKind): kind is 'bridge' | 'local-cli';

package/dist/security/bridge/local-client.js

@@ -37,7 +37,7 @@ export async function localApplication(pointer, application, signal, fetchFn = f
     const hello = z.object({ type: z.literal('welcome'), challenge: z.literal(challenge), receiverEpoch: z.string().min(1).max(128) }).strict()
         .parse(await post('hello', { type: 'hello', challenge }, null, randomUUID()));
     const result = z.object({ type: z.literal('application'), route: z.object({ kind: z.literal('response'), requestId: z.literal(requestId) }).strict(),
-        data: z.unknown(), mcp: z.null() }).strict().parse(await post('application', application, hello.receiverEpoch, requestId));
+        data: z.unknown().optional(), mcp: z.null() }).strict().parse(await post('application', application, hello.receiverEpoch, requestId));
     return result.data;
 }
 //# sourceMappingURL=local-client.js.map

package/dist/security/bridge/local-client.js.map

@@ -1 +1 @@
-{"version":3,"file":"local-client.js","sourceRoot":"","sources":["../../../src/security/bridge/local-client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,MAAM,cAAc,CAAC;AAC/D,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAClD,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAElD,gGAAgG;AAChG,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,OAAsB,EAAE,WAA8B,EAAE,MAAoB,EACjH,UAAwB,KAAK;IAC7B,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,CAAC,OAAO,CAAC,QAAQ;QAAE,MAAM,IAAI,mBAAmB,CAAC,kBAAkB,CAAC,CAAC;IACtI,MAAM,MAAM,GAAmB,OAAO,CAAC,QAAQ,CAAC;IAChD,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,OAAO,KAAK,OAAO,CAAC,OAAO;QAAE,MAAM,IAAI,mBAAmB,CAAC,eAAe,CAAC,CAAC;IACnH,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IAC3E,MAAM,OAAO,GAAG,cAAc,OAAO,CAAC,QAAQ,EAAE,CAAC;IACjD,MAAM,SAAS,GAAG,WAAW,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,WAAW,CAAC,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,WAAW,CAAC,KAAK,CAAC,IAAI,KAAK,UAAU;QAClI,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC;IAC/C,MAAM,IAAI,GAAG,KAAK,EAAE,OAAgC,EAAE,IAAa,EAAE,KAAoB,EAAE,SAAiB,EAAE,EAAE;QAC9G,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE;YAC/G,WAAW,EAAE,MAAM,CAAC,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,OAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAS,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS;YAC3G,SAAS,EAAE,SAAS,EAAE,SAAS,GAAG,MAAM,EAAE,aAAa,EAAE,KAAK,EAAE,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACpH,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,oBAAoB,OAAO,CAAC,IAAI,wBAAwB,EAAE,EAAE,MAAM,EAAE,MAAM;YACvG,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,OAAO;YAChG,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACzG,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,MAAM,IAAI,mBAAmB,CAAC,gBAAgB,CAAC,CAAC;QAClE,MAAM,QAAQ,GAAG,mBAAmB,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;QAC5D,IAAI,QAAQ,CAAC,SAAS,KAAK,SAAS;YAAE,MAAM,IAAI,mBAAmB,CAAC,eAAe,CAAC,CAAC;QACrF,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,OAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAS,EAAE,OAAO;YACpH,WAAW,EAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE,EAAE,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC;QACjG,IAAI,QAAQ,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;YAAE,MAAM,IAAI,mBAAmB,CAAC,SAAS,CAAC,CAAC;QAC1H,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAY,CAAC;IACxF,CAAC,CAAC;IACF,MAAM,SAAS,GAAG,UAAU,EAAE,CAAC;IAC/B,MAAM,KAAK,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE;SACxI,KAAK,CAAC,MAAM,IAAI,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;IAChF,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE;QAClJ,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,aAAa,EAAE,WAAW,EAAE,KAAK,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC,CAAC;IAC7H,OAAO,MAAM,CAAC,IAAuB,CAAC;AACxC,CAAC"}
+{"version":3,"file":"local-client.js","sourceRoot":"","sources":["../../../src/security/bridge/local-client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,MAAM,cAAc,CAAC;AAC/D,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAClD,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAElD,gGAAgG;AAChG,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,OAAsB,EAAE,WAA8B,EAAE,MAAoB,EACjH,UAAwB,KAAK;IAC7B,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,CAAC,OAAO,CAAC,QAAQ;QAAE,MAAM,IAAI,mBAAmB,CAAC,kBAAkB,CAAC,CAAC;IACtI,MAAM,MAAM,GAAmB,OAAO,CAAC,QAAQ,CAAC;IAChD,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,OAAO,KAAK,OAAO,CAAC,OAAO;QAAE,MAAM,IAAI,mBAAmB,CAAC,eAAe,CAAC,CAAC;IACnH,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IAC3E,MAAM,OAAO,GAAG,cAAc,OAAO,CAAC,QAAQ,EAAE,CAAC;IACjD,MAAM,SAAS,GAAG,WAAW,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,WAAW,CAAC,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,WAAW,CAAC,KAAK,CAAC,IAAI,KAAK,UAAU;QAClI,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC;IAC/C,MAAM,IAAI,GAAG,KAAK,EAAE,OAAgC,EAAE,IAAa,EAAE,KAAoB,EAAE,SAAiB,EAAE,EAAE;QAC9G,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE;YAC/G,WAAW,EAAE,MAAM,CAAC,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,OAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAS,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS;YAC3G,SAAS,EAAE,SAAS,EAAE,SAAS,GAAG,MAAM,EAAE,aAAa,EAAE,KAAK,EAAE,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACpH,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,oBAAoB,OAAO,CAAC,IAAI,wBAAwB,EAAE,EAAE,MAAM,EAAE,MAAM;YACvG,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,OAAO;YAChG,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACzG,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,MAAM,IAAI,mBAAmB,CAAC,gBAAgB,CAAC,CAAC;QAClE,MAAM,QAAQ,GAAG,mBAAmB,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;QAC5D,IAAI,QAAQ,CAAC,SAAS,KAAK,SAAS;YAAE,MAAM,IAAI,mBAAmB,CAAC,eAAe,CAAC,CAAC;QACrF,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,OAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAS,EAAE,OAAO;YACpH,WAAW,EAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE,EAAE,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC;QACjG,IAAI,QAAQ,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;YAAE,MAAM,IAAI,mBAAmB,CAAC,SAAS,CAAC,CAAC;QAC1H,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAY,CAAC;IACxF,CAAC,CAAC;IACF,MAAM,SAAS,GAAG,UAAU,EAAE,CAAC;IAC/B,MAAM,KAAK,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE;SACxI,KAAK,CAAC,MAAM,IAAI,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;IAChF,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE;QAClJ,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,aAAa,EAAE,WAAW,EAAE,KAAK,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC,CAAC;IACxI,OAAO,MAAM,CAAC,IAAuB,CAAC;AACxC,CAAC"}

package/dist/security/bridge/metadata.d.ts

@@ -1,99 +1,43 @@
 import { z } from 'zod';
 export declare const boundedId: z.ZodString;
-export declare const endpointSchema: z.ZodEffects<z.ZodObject<{
+export declare const endpointSchema: z.ZodObject<{
     version: z.ZodLiteral<1>;
     id: z.ZodString;
     ownerId: z.ZodString;
-    kind: z.ZodEnum<["bridge", "browser", "mcp", "local-cli"]>;
+    kind: z.ZodEnum<{
+        bridge: "bridge";
+        browser: "browser";
+        mcp: "mcp";
+        "local-cli": "local-cli";
+    }>;
     publicKey: z.ZodString;
-}, "strict", z.ZodTypeAny, {
-    id: string;
-    version: 1;
-    ownerId: string;
-    kind: "bridge" | "browser" | "mcp" | "local-cli";
-    publicKey: string;
-}, {
-    id: string;
-    version: 1;
-    ownerId: string;
-    kind: "bridge" | "browser" | "mcp" | "local-cli";
-    publicKey: string;
-}>, {
-    id: string;
-    version: 1;
-    ownerId: string;
-    kind: "bridge" | "browser" | "mcp" | "local-cli";
-    publicKey: string;
-}, {
-    id: string;
-    version: 1;
-    ownerId: string;
-    kind: "bridge" | "browser" | "mcp" | "local-cli";
-    publicKey: string;
+}, z.core.$strict>;
+export declare const permissionSchema: z.ZodEnum<{
+    read: "read";
+    control: "control";
+    admin: "admin";
 }>;
-export declare const permissionSchema: z.ZodEnum<["read", "control", "admin"]>;
 export declare const approvedSchema: z.ZodObject<{
-    endpoint: z.ZodEffects<z.ZodObject<{
+    endpoint: z.ZodObject<{
         version: z.ZodLiteral<1>;
         id: z.ZodString;
         ownerId: z.ZodString;
-        kind: z.ZodEnum<["bridge", "browser", "mcp", "local-cli"]>;
+        kind: z.ZodEnum<{
+            bridge: "bridge";
+            browser: "browser";
+            mcp: "mcp";
+            "local-cli": "local-cli";
+        }>;
         publicKey: z.ZodString;
-    }, "strict", z.ZodTypeAny, {
-        id: string;
-        version: 1;
-        ownerId: string;
-        kind: "bridge" | "browser" | "mcp" | "local-cli";
-        publicKey: string;
-    }, {
-        id: string;
-        version: 1;
-        ownerId: string;
-        kind: "bridge" | "browser" | "mcp" | "local-cli";
-        publicKey: string;
-    }>, {
-        id: string;
-        version: 1;
-        ownerId: string;
-        kind: "bridge" | "browser" | "mcp" | "local-cli";
-        publicKey: string;
-    }, {
-        id: string;
-        version: 1;
-        ownerId: string;
-        kind: "bridge" | "browser" | "mcp" | "local-cli";
-        publicKey: string;
-    }>;
+    }, z.core.$strict>;
     label: z.ZodString;
-    permissions: z.ZodArray<z.ZodEnum<["read", "control", "admin"]>, "many">;
-    approvedAt: z.ZodString;
+    permissions: z.ZodArray<z.ZodEnum<{
+        read: "read";
+        control: "control";
+        admin: "admin";
+    }>>;
+    approvedAt: z.ZodUnion<readonly [z.ZodISODateTime, z.ZodISODateTime]>;
     grantId: z.ZodNullable<z.ZodString>;
-    expiresAt: z.ZodNullable<z.ZodString>;
-}, "strict", z.ZodTypeAny, {
-    expiresAt: string | null;
-    endpoint: {
-        id: string;
-        version: 1;
-        ownerId: string;
-        kind: "bridge" | "browser" | "mcp" | "local-cli";
-        publicKey: string;
-    };
-    label: string;
-    permissions: ("read" | "control" | "admin")[];
-    approvedAt: string;
-    grantId: string | null;
-}, {
-    expiresAt: string | null;
-    endpoint: {
-        id: string;
-        version: 1;
-        ownerId: string;
-        kind: "bridge" | "browser" | "mcp" | "local-cli";
-        publicKey: string;
-    };
-    label: string;
-    permissions: ("read" | "control" | "admin")[];
-    approvedAt: string;
-    grantId: string | null;
-}>;
+    expiresAt: z.ZodNullable<z.ZodUnion<readonly [z.ZodISODateTime, z.ZodISODateTime]>>;
+}, z.core.$strict>;
 export declare function displayLabel(label: string): string;

package/dist/security/bridge/metadata.js

@@ -1,3 +1,4 @@
+import { legacyDateTimeSchema } from '../../zod-compat.js';
 import { createHash } from 'node:crypto';
 import { z } from 'zod';
 export const boundedId = z.string().regex(/^[A-Za-z0-9_-]{1,200}$/);
@@ -15,7 +16,7 @@ export const endpointSchema = z.object({
 export const permissionSchema = z.enum(['read', 'control', 'admin']);
 export const approvedSchema = z.object({
     endpoint: endpointSchema, label: z.string().max(100), permissions: z.array(permissionSchema).max(3),
-    approvedAt: z.string().datetime(), grantId: boundedId.nullable(), expiresAt: z.string().datetime().nullable(),
+    approvedAt: legacyDateTimeSchema, grantId: boundedId.nullable(), expiresAt: legacyDateTimeSchema.nullable(),
 }).strict();
 export function displayLabel(label) {
     return label.replace(/[\u0000-\u001f\u007f-\u009f]/g, '').trim().slice(0, 100);

package/dist/security/bridge/metadata.js.map

@@ -1 +1 @@
-{"version":3,"file":"metadata.js","sourceRoot":"","sources":["../../../src/security/bridge/metadata.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;AACpE,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,qBAAqB,CAAC;IAClE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC;IAC5F,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,qBAAqB,CAAC;CACnD,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE;IAC5C,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IACzD,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,KAAK,QAAQ,CAAC,SAAS;WACpF,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,QAAQ,CAAC,EAAE,EAAE,CAAC;QAC1E,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM,EAAE,OAAO,EAAE,8BAA8B,EAAE,CAAC,CAAC;IAC7F,CAAC;AACH,CAAC,CAAC,CAAC;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;AACrE,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,QAAQ,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACnG,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CAC9G,CAAC,CAAC,MAAM,EAAE,CAAC;AACZ,MAAM,UAAU,YAAY,CAAC,KAAa;IACxC,OAAO,KAAK,CAAC,OAAO,CAAC,+BAA+B,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AACjF,CAAC"}
+{"version":3,"file":"metadata.js","sourceRoot":"","sources":["../../../src/security/bridge/metadata.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;AACpE,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,qBAAqB,CAAC;IAClE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC;IAC5F,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,qBAAqB,CAAC;CACnD,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE;IAC5C,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IACzD,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,KAAK,QAAQ,CAAC,SAAS;WACpF,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,QAAQ,CAAC,EAAE,EAAE,CAAC;QAC1E,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM,EAAE,OAAO,EAAE,8BAA8B,EAAE,CAAC,CAAC;IAC7F,CAAC;AACH,CAAC,CAAC,CAAC;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;AACrE,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,QAAQ,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACnG,UAAU,EAAE,oBAAoB,EAAE,OAAO,EAAE,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,oBAAoB,CAAC,QAAQ,EAAE;CAC5G,CAAC,CAAC,MAAM,EAAE,CAAC;AACZ,MAAM,UAAU,YAAY,CAAC,KAAa;IACxC,OAAO,KAAK,CAAC,OAAO,CAAC,+BAA+B,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AACjF,CAAC"}

package/dist/security/bridge/pending-approval.js

@@ -1,3 +1,4 @@
+import { legacyDateTimeSchema } from '../../zod-compat.js';
 import { join } from 'node:path';
 import { setTimeout as delay } from 'node:timers/promises';
 import { z } from 'zod';
@@ -6,7 +7,7 @@ import { AtomicSnapshot } from './snapshot.js';
 import { BridgeSecurityError } from './errors.js';
 const hash = z.string().regex(/^[A-Za-z0-9_-]{43}$/);
 const code = z.string().regex(/^[A-F0-9]{4}-[A-F0-9]{4}-[A-F0-9]{4}$/);
-const common = { version: z.literal(1), requestId: hash, processNonce: hash, expiresAt: z.string().datetime() };
+const common = { version: z.literal(1), requestId: hash, processNonce: hash, expiresAt: legacyDateTimeSchema };
 const statusSchema = z.union([
     z.object({ ...common, phase: z.literal('waiting'), offerHash: hash.nullable(), comparisonCode: z.null() }).strict(),
     z.object({ ...common, phase: z.enum(['comparing', 'confirming']), offerHash: hash, comparisonCode: code }).strict(),