sealkeep 0.9.0 → 0.11.1

package/dist/src/team-presence.d.ts

@@ -0,0 +1,127 @@
+/**
+ * Cross-account live presence.
+ *
+ * The hosted plane sees an opaque space id, sender/sequence replay guards and
+ * ciphertext. A single random feed key makes every event O(1): inviting a new
+ * member wraps that key once to their X25519 identity instead of copying every
+ * event once per teammate. Identity and feed private material are cached in the
+ * strongest OS keystore available and can be recovered on another machine from
+ * phrase-sealed server data.
+ */
+import { listTeamSpaces } from "./cloud.js";
+import { type BackendName } from "./secrets.js";
+import type { PresenceEvent } from "./presence.js";
+type IdentitySecret = {
+    version: 1;
+    publicKey: string;
+    privateKey: string;
+};
+export type TeamPresencePage = {
+    events: PresenceEvent[];
+    cursor: number;
+    more: boolean;
+};
+export type CachedTeamPresencePage = TeamPresencePage & {
+    gap: boolean;
+};
+/** Called during visible team setup, or lazily on a newly signed-in machine. */
+export declare function ensureTeamIdentity(dataDir: string, phrase: string, preferred?: BackendName): Promise<IdentitySecret>;
+/** Remove a revoked epoch key without exposing it to config or another process. */
+export declare function forgetTeamSpaceFeed(dataDir: string, spaceKey: string, preferred?: BackendName): Promise<void>;
+/**
+ * Reconcile one project's hosted epoch at a normal agent lifecycle boundary.
+ * Push remains the fast path; this authoritative read is the crash-safe path
+ * when a committed rotation's best-effort socket notice was lost.
+ */
+export declare function reconcileProjectTeamSpace(dataDir: string, project: string, phrase: string, preferred?: BackendName, projectKey?: string | null): Promise<{
+    keyVersion: number;
+    realtimeKey: string;
+} | null>;
+export declare function createProjectTeamSpace(dataDir: string, project: string, phrase: string, preferred?: BackendName, projectKey?: string | null): Promise<{
+    spaceKey: string;
+    role: "owner";
+    keyVersion: number;
+    realtimeKey: string | undefined;
+    projectKey?: string | undefined;
+    project: string;
+}>;
+export declare function joinProjectTeamSpace(dataDir: string, project: string, spaceKey: string, phrase: string, preferred?: BackendName, projectKey?: string | null): Promise<{
+    spaceKey: string;
+    role: string;
+    keyVersion: number;
+    realtimeKey: string;
+    projectKey?: string | undefined;
+    project: string;
+}>;
+export declare function inviteProjectTeamMember(dataDir: string, project: string, email: string, phrase: string, preferred?: BackendName, projectKey?: string | null): Promise<{
+    project: string;
+    invitationId: number;
+    accountId: number;
+    role: "pending";
+}>;
+export declare function listProjectTeamInvitations(dataDir: string, preferred?: BackendName): Promise<import("./cloud.js").TeamInvitationWire[]>;
+/**
+ * Complete folder selections made before their cloud project existed.
+ * Matching is deliberately an exact, case-insensitive display-name match and
+ * requires one unique space; an ambiguous name is left pending for the user to
+ * map from the visible project card instead of guessing an access boundary.
+ */
+export declare function reconcileTeamProjectDrafts(dataDir: string, phrase: string, spaces: Awaited<ReturnType<typeof listTeamSpaces>>, preferred?: BackendName): Promise<number>;
+/**
+ * Bridge cloud-owned access decisions to local cryptography and local project
+ * bindings. The installed daemon calls this idempotently; no human runs a
+ * SealKeep command and the hosted browser never receives an unwrapped key.
+ */
+export type TeamAccessFailure = {
+    operation: "create_project" | "complete_project" | "remove_member";
+    code: string;
+};
+export declare function reconcileCloudTeamAccess(dataDir: string, phrase: string, preferred?: BackendName): Promise<{
+    created: number;
+    prepared: number;
+    bound: number;
+    removed: number;
+    failures?: TeamAccessFailure[];
+}>;
+export declare function acceptProjectTeamInvitation(dataDir: string, invitationId: number, project: string, phrase: string, preferred?: BackendName): Promise<{
+    project: string;
+    spaceKey: string;
+    role: string;
+    keyVersion: number;
+    realtimeKey: string;
+}>;
+export declare function declineProjectTeamInvitation(dataDir: string, invitationId: number, preferred?: BackendName): Promise<import("./cloud.js").TeamInvitationWire>;
+/**
+ * Remove one account and cut a fresh feed/realtime epoch for everyone left.
+ * The hosted operation is the commit point. If its response is lost, the
+ * caller's own wrapped membership is enough to prove and recover the result.
+ */
+export declare function removeProjectTeamMember(dataDir: string, project: string, targetAccountId: number, phrase: string, preferred?: BackendName, projectKey?: string | null): Promise<{
+    project: string;
+    removedAccountId: number;
+    keyVersion: number;
+    realtimeKey: string;
+    reconciled: boolean;
+}>;
+export declare function publishTeamPresenceEvent(dataDir: string, spaceKey: string, event: PresenceEvent, phrase: string, preferred?: BackendName): Promise<void>;
+export declare function readTeamPresence(dataDir: string, spaceKey: string, phrase: string, options?: {
+    after?: number;
+    maxPages?: number;
+    preferred?: BackendName;
+    includeBinding?: boolean;
+}): Promise<TeamPresencePage>;
+/**
+ * Decrypt the daemon's bounded local push inbox without touching the network.
+ * `gap` tells the hook to preserve its old cursor and use REST before trusting
+ * the newer rows; it must never silently skip an evicted event.
+ */
+export declare function readCachedTeamPresence(dataDir: string, spaceKey: string, phrase: string, after: number, preferred?: BackendName): Promise<CachedTeamPresencePage>;
+/**
+ * On a fresh machine no local project→space binding exists yet. At session
+ * start we inspect only spaces this account belongs to, decrypt their bounded
+ * recent tails, and bind the one whose encrypted event names this project.
+ * This is what makes Mac→VPS and an accepted team invite continue without a
+ * command or a copied config file.
+ */
+export declare function discoverProjectTeamSpace(dataDir: string, project: string, phrase: string, preferred?: BackendName, projectKey?: string | null): Promise<import("./vault.js").TeamSpaceBinding | null>;
+export {};