sessionpipe-core 0.9.0 → 0.10.0

package/dist/schema/v1.d.ts

@@ -32,7 +32,9 @@ export declare const Session: z.ZodObject<{
     }>>;
     url: z.ZodOptional<z.ZodURL>;
     account_id: z.ZodOptional<z.ZodString>;
+    attended: z.ZodOptional<z.ZodBoolean>;
     parent_id: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    launched_by: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
 export declare const Privacy: z.ZodObject<{
     rulesets: z.ZodArray<z.ZodString>;
@@ -65,7 +67,9 @@ export declare const Event: z.ZodObject<{
         }>>;
         url: z.ZodOptional<z.ZodURL>;
         account_id: z.ZodOptional<z.ZodString>;
+        attended: z.ZodOptional<z.ZodBoolean>;
         parent_id: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        launched_by: z.ZodOptional<z.ZodString>;
     }, z.core.$strip>;
     privacy: z.ZodObject<{
         rulesets: z.ZodArray<z.ZodString>;
@@ -109,6 +113,8 @@ export declare const EventData: z.ZodObject<{
     "turn.started": z.ZodObject<{
         turn_id: z.ZodOptional<z.ZodString>;
         prompt_chars: z.ZodOptional<z.ZodInt>;
+        submitted_by: z.ZodOptional<z.ZodString>;
+        injected: z.ZodOptional<z.ZodBoolean>;
     }, z.core.$loose>;
     "turn.ended": z.ZodObject<{
         turn_id: z.ZodOptional<z.ZodString>;
@@ -119,6 +125,7 @@ export declare const EventData: z.ZodObject<{
         }>;
         error: z.ZodOptional<z.ZodString>;
         ms: z.ZodOptional<z.ZodInt>;
+        background: z.ZodOptional<z.ZodInt>;
     }, z.core.$loose>;
     "turn.transcript": z.ZodObject<{
         turn: z.ZodInt;
@@ -218,7 +225,9 @@ export declare const Batch: z.ZodObject<{
             }>>;
             url: z.ZodOptional<z.ZodURL>;
             account_id: z.ZodOptional<z.ZodString>;
+            attended: z.ZodOptional<z.ZodBoolean>;
             parent_id: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+            launched_by: z.ZodOptional<z.ZodString>;
         }, z.core.$strip>;
         privacy: z.ZodObject<{
             rulesets: z.ZodArray<z.ZodString>;
@@ -258,6 +267,11 @@ export declare const ControlKind: z.ZodEnum<{
     prompt: "prompt";
     start: "start";
 }>;
+/** The kinds of key a machine or a receiver handles (CONTROL.md §2). Absent: passkeys only. */
+export declare const KeyTypes: z.ZodArray<z.ZodEnum<{
+    device: "device";
+    passkey: "passkey";
+}>>;
 export declare const DeliveryMode: z.ZodEnum<{
     api: "api";
     fork: "fork";
@@ -266,6 +280,26 @@ export declare const DeliveryMode: z.ZodEnum<{
     turn: "turn";
     waiter: "waiter";
 }>;
+/** How much a started session may do without anyone approving it (CONTROL.md §3.1),
+ *  narrowest first. Closed: nothing is wider than `auto`. */
+export declare const StartPermission: z.ZodEnum<{
+    auto: "auto";
+    edits: "edits";
+    read: "read";
+    safe: "safe";
+}>;
+/** What a start ran with, or gets by default: a level, or `inherit` (no permission flag,
+ *  the harness's own default) on a machine the person put in inherit mode. Never a
+ *  command's `permission`. */
+export declare const RunLevel: z.ZodEnum<{
+    auto: "auto";
+    edits: "edits";
+    inherit: "inherit";
+    read: "read";
+    safe: "safe";
+}>;
+/** A model id as the harness names it, passed as one argument: never a leading dash. */
+export declare const ModelId: z.ZodString;
 /** A file attached to a `start` (CONTROL.md §3.1). The bytes wait on the receiver
  *  (`GET {control}/files/{sha256}`); the signed hash is what the machine checks.
  *  Beyond this shape the verifier also checks: the name's length after NFC, names
@@ -298,11 +332,18 @@ export declare const ControlCommand: z.ZodObject<{
     }>>;
     note: z.ZodOptional<z.ZodString>;
     cwd: z.ZodOptional<z.ZodString>;
-    key: z.ZodOptional<z.ZodObject<{
+    key: z.ZodOptional<z.ZodLazy<z.ZodXor<readonly [z.ZodObject<{
         id: z.ZodString;
         alg: z.ZodUnion<readonly [z.ZodLiteral<-7>, z.ZodLiteral<-257>]>;
         spki: z.ZodString;
-    }, z.core.$strip>>;
+    }, z.core.$strict>, z.ZodObject<{
+        id: z.ZodString;
+        alg: z.ZodLiteral<-7>;
+        spki: z.ZodString;
+        type: z.ZodLiteral<"device">;
+        store: z.ZodLiteral<"hardware">;
+        uv: z.ZodLiteral<"each-use">;
+    }, z.core.$strict>]>>>;
     name: z.ZodOptional<z.ZodString>;
     files: z.ZodOptional<z.ZodArray<z.ZodObject<{
         name: z.ZodString;
@@ -310,6 +351,13 @@ export declare const ControlCommand: z.ZodObject<{
         size: z.ZodInt;
         sha256: z.ZodString;
     }, z.core.$strip>>>;
+    permission: z.ZodOptional<z.ZodEnum<{
+        auto: "auto";
+        edits: "edits";
+        read: "read";
+        safe: "safe";
+    }>>;
+    model: z.ZodOptional<z.ZodString>;
     nonce: z.ZodString;
     iat: z.ZodInt;
 }, z.core.$strip>;
@@ -329,30 +377,55 @@ export declare const ControlAssertion: z.ZodObject<{
     cd: z.ZodString;
     sig: z.ZodString;
 }, z.core.$strip>;
-/** A key enrolled on a machine: a passkey's credential id, COSE alg, SPKI. */
-export declare const ControlKey: z.ZodObject<{
+/** A device key's signature (CONTROL.md §3.2): its id and 64 bytes r‖s over
+ *  `sessionpipe.device.v1⏎<purpose>⏎<rp id>⏎<challenge>`. Nothing else. The shape
+ *  only, like an assertion's: the machine reads the key from its own record and checks
+ *  the rest (a 43-character id, exactly 64 bytes), so a carrier never decides a kind. */
+export declare const ControlDeviceSignature: z.ZodObject<{
+    cred: z.ZodString;
+    sig: z.ZodString;
+}, z.core.$strict>;
+/** A key enrolled on a machine, closed: a passkey (credential id, COSE alg, SPKI), or a
+ *  device key an app holds in hardware (CONTROL.md §2 "Device keys"), which names
+ *  itself by its SPKI's SHA-256 and says how it is held. A machine refuses any other
+ *  field or value, so a kind added later is refused by every machine that predates it. */
+export declare const ControlKey: z.ZodXor<readonly [z.ZodObject<{
     id: z.ZodString;
     alg: z.ZodUnion<readonly [z.ZodLiteral<-7>, z.ZodLiteral<-257>]>;
     spki: z.ZodString;
-}, z.core.$strip>;
+}, z.core.$strict>, z.ZodObject<{
+    id: z.ZodString;
+    alg: z.ZodLiteral<-7>;
+    spki: z.ZodString;
+    type: z.ZodLiteral<"device">;
+    store: z.ZodLiteral<"hardware">;
+    uv: z.ZodLiteral<"each-use">;
+}, z.core.$strict>]>;
 /** One message as a receiver carries it: its own envelope around the signed bytes. */
 export declare const ControlMessage: z.ZodObject<{
     id: z.ZodString;
     cmd: z.ZodString;
     csig: z.ZodOptional<z.ZodNullable<z.ZodString>>;
-    grant: z.ZodOptional<z.ZodNullable<z.ZodObject<{
+    grant: z.ZodOptional<z.ZodNullable<z.ZodXor<readonly [z.ZodObject<{
         cred: z.ZodString;
         ad: z.ZodString;
         cd: z.ZodString;
         sig: z.ZodString;
         str: z.ZodString;
-    }, z.core.$strip>>>;
-    confirm: z.ZodOptional<z.ZodNullable<z.ZodObject<{
+    }, z.core.$strip>, z.ZodObject<{
+        cred: z.ZodString;
+        sig: z.ZodString;
+        str: z.ZodString;
+    }, z.core.$strict>]>>>;
+    confirm: z.ZodOptional<z.ZodNullable<z.ZodXor<readonly [z.ZodObject<{
         cred: z.ZodString;
         ad: z.ZodString;
         cd: z.ZodString;
         sig: z.ZodString;
-    }, z.core.$strip>>>;
+    }, z.core.$strip>, z.ZodObject<{
+        cred: z.ZodString;
+        sig: z.ZodString;
+    }, z.core.$strict>]>>>;
     at: z.ZodISODateTime;
     expires_at: z.ZodISODateTime;
 }, z.core.$strip>;
@@ -361,19 +434,26 @@ export declare const ControlPoll: z.ZodObject<{
         id: z.ZodString;
         cmd: z.ZodString;
         csig: z.ZodOptional<z.ZodNullable<z.ZodString>>;
-        grant: z.ZodOptional<z.ZodNullable<z.ZodObject<{
+        grant: z.ZodOptional<z.ZodNullable<z.ZodXor<readonly [z.ZodObject<{
             cred: z.ZodString;
             ad: z.ZodString;
             cd: z.ZodString;
             sig: z.ZodString;
             str: z.ZodString;
-        }, z.core.$strip>>>;
-        confirm: z.ZodOptional<z.ZodNullable<z.ZodObject<{
+        }, z.core.$strip>, z.ZodObject<{
+            cred: z.ZodString;
+            sig: z.ZodString;
+            str: z.ZodString;
+        }, z.core.$strict>]>>>;
+        confirm: z.ZodOptional<z.ZodNullable<z.ZodXor<readonly [z.ZodObject<{
             cred: z.ZodString;
             ad: z.ZodString;
             cd: z.ZodString;
             sig: z.ZodString;
-        }, z.core.$strip>>>;
+        }, z.core.$strip>, z.ZodObject<{
+            cred: z.ZodString;
+            sig: z.ZodString;
+        }, z.core.$strict>]>>>;
         at: z.ZodISODateTime;
         expires_at: z.ZodISODateTime;
     }, z.core.$strip>>;
@@ -417,6 +497,16 @@ export declare const ControlAck: z.ZodObject<{
         detail: z.ZodOptional<z.ZodString>;
         reply: z.ZodOptional<z.ZodString>;
         seq: z.ZodOptional<z.ZodInt>;
+        applied: z.ZodOptional<z.ZodObject<{
+            permission: z.ZodOptional<z.ZodEnum<{
+                auto: "auto";
+                edits: "edits";
+                inherit: "inherit";
+                read: "read";
+                safe: "safe";
+            }>>;
+            model: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>>;
     }, z.core.$strip>>;
 }, z.core.$strip>;
 /** A harness account signed in on the machine: the id `session.account_id` carries,
@@ -426,6 +516,7 @@ export declare const HarnessAccount: z.ZodObject<{
     harness: z.ZodString;
     id: z.ZodString;
     email: z.ZodOptional<z.ZodString>;
+    name: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
 /** `POST {control}/pair`, sent with the person's sink token from their own terminal —
  *  or, where the receiver declares `control.open_pairing`, with no token and a
@@ -447,14 +538,20 @@ export declare const ControlPairStart: z.ZodObject<{
     folders: z.ZodOptional<z.ZodArray<z.ZodString>>;
     mode: z.ZodOptional<z.ZodEnum<{
         auto: "auto";
+        inherit: "inherit";
         safe: "safe";
     }>>;
     accounts: z.ZodOptional<z.ZodArray<z.ZodObject<{
         harness: z.ZodString;
         id: z.ZodString;
         email: z.ZodOptional<z.ZodString>;
+        name: z.ZodOptional<z.ZodString>;
     }, z.core.$strip>>>;
     files: z.ZodOptional<z.ZodBoolean>;
+    key_types: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+        device: "device";
+        passkey: "passkey";
+    }>>>;
 }, z.core.$strip>;
 /** The receiver's answer: where the person confirms, and the digits both screens show. */
 export declare const ControlPairStarted: z.ZodObject<{
@@ -472,17 +569,27 @@ export declare const ControlPaired: z.ZodObject<{
         paired: "paired";
         pending: "pending";
     }>;
-    key: z.ZodOptional<z.ZodObject<{
+    key: z.ZodOptional<z.ZodXor<readonly [z.ZodObject<{
         id: z.ZodString;
         alg: z.ZodUnion<readonly [z.ZodLiteral<-7>, z.ZodLiteral<-257>]>;
         spki: z.ZodString;
-    }, z.core.$strip>>;
-    proof: z.ZodOptional<z.ZodObject<{
+    }, z.core.$strict>, z.ZodObject<{
+        id: z.ZodString;
+        alg: z.ZodLiteral<-7>;
+        spki: z.ZodString;
+        type: z.ZodLiteral<"device">;
+        store: z.ZodLiteral<"hardware">;
+        uv: z.ZodLiteral<"each-use">;
+    }, z.core.$strict>]>>;
+    proof: z.ZodOptional<z.ZodXor<readonly [z.ZodObject<{
         cred: z.ZodString;
         ad: z.ZodString;
         cd: z.ZodString;
         sig: z.ZodString;
-    }, z.core.$strip>>;
+    }, z.core.$strip>, z.ZodObject<{
+        cred: z.ZodString;
+        sig: z.ZodString;
+    }, z.core.$strict>]>>;
     token: z.ZodOptional<z.ZodString>;
     sink_token: z.ZodOptional<z.ZodString>;
     account: z.ZodOptional<z.ZodString>;
@@ -505,14 +612,38 @@ export declare const ControlHello: z.ZodObject<{
     folders: z.ZodOptional<z.ZodArray<z.ZodString>>;
     mode: z.ZodOptional<z.ZodEnum<{
         auto: "auto";
+        inherit: "inherit";
         safe: "safe";
     }>>;
     accounts: z.ZodOptional<z.ZodArray<z.ZodObject<{
         harness: z.ZodString;
         id: z.ZodString;
         email: z.ZodOptional<z.ZodString>;
+        name: z.ZodOptional<z.ZodString>;
     }, z.core.$strip>>>;
     files: z.ZodOptional<z.ZodBoolean>;
+    prompt_files: z.ZodOptional<z.ZodBoolean>;
+    start: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
+        permissions: z.ZodArray<z.ZodEnum<{
+            auto: "auto";
+            edits: "edits";
+            read: "read";
+            safe: "safe";
+        }>>;
+        permission: z.ZodEnum<{
+            auto: "auto";
+            edits: "edits";
+            inherit: "inherit";
+            read: "read";
+            safe: "safe";
+        }>;
+        models: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        any_model: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strip>>>;
+    key_types: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+        device: "device";
+        passkey: "passkey";
+    }>>>;
 }, z.core.$strip>;
 export declare const WellKnown: z.ZodObject<{
     protocol: z.ZodArray<z.ZodInt>;
@@ -537,8 +668,13 @@ export declare const WellKnown: z.ZodObject<{
         signing: z.ZodObject<{
             rp_id: z.ZodString;
             algs: z.ZodArray<z.ZodUnion<readonly [z.ZodLiteral<-7>, z.ZodLiteral<-257>]>>;
+            key_types: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                device: "device";
+                passkey: "passkey";
+            }>>>;
         }, z.core.$strip>;
         files: z.ZodOptional<z.ZodBoolean>;
+        inherit: z.ZodOptional<z.ZodBoolean>;
     }, z.core.$strip>>;
 }, z.core.$strip>;
 /** What `npm run schemas` writes to schemas/v1/<name>.json. */
@@ -570,7 +706,9 @@ export declare const SCHEMAS: {
             }>>;
             url: z.ZodOptional<z.ZodURL>;
             account_id: z.ZodOptional<z.ZodString>;
+            attended: z.ZodOptional<z.ZodBoolean>;
             parent_id: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+            launched_by: z.ZodOptional<z.ZodString>;
         }, z.core.$strip>;
         privacy: z.ZodObject<{
             rulesets: z.ZodArray<z.ZodString>;
@@ -607,6 +745,8 @@ export declare const SCHEMAS: {
         "turn.started": z.ZodObject<{
             turn_id: z.ZodOptional<z.ZodString>;
             prompt_chars: z.ZodOptional<z.ZodInt>;
+            submitted_by: z.ZodOptional<z.ZodString>;
+            injected: z.ZodOptional<z.ZodBoolean>;
         }, z.core.$loose>;
         "turn.ended": z.ZodObject<{
             turn_id: z.ZodOptional<z.ZodString>;
@@ -617,6 +757,7 @@ export declare const SCHEMAS: {
             }>;
             error: z.ZodOptional<z.ZodString>;
             ms: z.ZodOptional<z.ZodInt>;
+            background: z.ZodOptional<z.ZodInt>;
         }, z.core.$loose>;
         "turn.transcript": z.ZodObject<{
             turn: z.ZodInt;
@@ -716,7 +857,9 @@ export declare const SCHEMAS: {
                 }>>;
                 url: z.ZodOptional<z.ZodURL>;
                 account_id: z.ZodOptional<z.ZodString>;
+                attended: z.ZodOptional<z.ZodBoolean>;
                 parent_id: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+                launched_by: z.ZodOptional<z.ZodString>;
             }, z.core.$strip>;
             privacy: z.ZodObject<{
                 rulesets: z.ZodArray<z.ZodString>;
@@ -762,27 +905,39 @@ export declare const SCHEMAS: {
             signing: z.ZodObject<{
                 rp_id: z.ZodString;
                 algs: z.ZodArray<z.ZodUnion<readonly [z.ZodLiteral<-7>, z.ZodLiteral<-257>]>>;
+                key_types: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                    device: "device";
+                    passkey: "passkey";
+                }>>>;
             }, z.core.$strip>;
             files: z.ZodOptional<z.ZodBoolean>;
+            inherit: z.ZodOptional<z.ZodBoolean>;
         }, z.core.$strip>>;
     }, z.core.$strip>;
     readonly control: z.ZodObject<{
         id: z.ZodString;
         cmd: z.ZodString;
         csig: z.ZodOptional<z.ZodNullable<z.ZodString>>;
-        grant: z.ZodOptional<z.ZodNullable<z.ZodObject<{
+        grant: z.ZodOptional<z.ZodNullable<z.ZodXor<readonly [z.ZodObject<{
             cred: z.ZodString;
             ad: z.ZodString;
             cd: z.ZodString;
             sig: z.ZodString;
             str: z.ZodString;
-        }, z.core.$strip>>>;
-        confirm: z.ZodOptional<z.ZodNullable<z.ZodObject<{
+        }, z.core.$strip>, z.ZodObject<{
+            cred: z.ZodString;
+            sig: z.ZodString;
+            str: z.ZodString;
+        }, z.core.$strict>]>>>;
+        confirm: z.ZodOptional<z.ZodNullable<z.ZodXor<readonly [z.ZodObject<{
             cred: z.ZodString;
             ad: z.ZodString;
             cd: z.ZodString;
             sig: z.ZodString;
-        }, z.core.$strip>>>;
+        }, z.core.$strip>, z.ZodObject<{
+            cred: z.ZodString;
+            sig: z.ZodString;
+        }, z.core.$strict>]>>>;
         at: z.ZodISODateTime;
         expires_at: z.ZodISODateTime;
     }, z.core.$strip>;
@@ -806,11 +961,18 @@ export declare const SCHEMAS: {
         }>>;
         note: z.ZodOptional<z.ZodString>;
         cwd: z.ZodOptional<z.ZodString>;
-        key: z.ZodOptional<z.ZodObject<{
+        key: z.ZodOptional<z.ZodLazy<z.ZodXor<readonly [z.ZodObject<{
             id: z.ZodString;
             alg: z.ZodUnion<readonly [z.ZodLiteral<-7>, z.ZodLiteral<-257>]>;
             spki: z.ZodString;
-        }, z.core.$strip>>;
+        }, z.core.$strict>, z.ZodObject<{
+            id: z.ZodString;
+            alg: z.ZodLiteral<-7>;
+            spki: z.ZodString;
+            type: z.ZodLiteral<"device">;
+            store: z.ZodLiteral<"hardware">;
+            uv: z.ZodLiteral<"each-use">;
+        }, z.core.$strict>]>>>;
         name: z.ZodOptional<z.ZodString>;
         files: z.ZodOptional<z.ZodArray<z.ZodObject<{
             name: z.ZodString;
@@ -818,6 +980,13 @@ export declare const SCHEMAS: {
             size: z.ZodInt;
             sha256: z.ZodString;
         }, z.core.$strip>>>;
+        permission: z.ZodOptional<z.ZodEnum<{
+            auto: "auto";
+            edits: "edits";
+            read: "read";
+            safe: "safe";
+        }>>;
+        model: z.ZodOptional<z.ZodString>;
         nonce: z.ZodString;
         iat: z.ZodInt;
     }, z.core.$strip>;
@@ -829,29 +998,43 @@ export declare const SCHEMAS: {
         exp: z.ZodInt;
         rp: z.ZodString;
     }, z.core.$strip>;
-    readonly "control-key": z.ZodObject<{
+    readonly "control-key": z.ZodXor<readonly [z.ZodObject<{
         id: z.ZodString;
         alg: z.ZodUnion<readonly [z.ZodLiteral<-7>, z.ZodLiteral<-257>]>;
         spki: z.ZodString;
-    }, z.core.$strip>;
+    }, z.core.$strict>, z.ZodObject<{
+        id: z.ZodString;
+        alg: z.ZodLiteral<-7>;
+        spki: z.ZodString;
+        type: z.ZodLiteral<"device">;
+        store: z.ZodLiteral<"hardware">;
+        uv: z.ZodLiteral<"each-use">;
+    }, z.core.$strict>]>;
     readonly "control-poll": z.ZodObject<{
         messages: z.ZodArray<z.ZodObject<{
             id: z.ZodString;
             cmd: z.ZodString;
             csig: z.ZodOptional<z.ZodNullable<z.ZodString>>;
-            grant: z.ZodOptional<z.ZodNullable<z.ZodObject<{
+            grant: z.ZodOptional<z.ZodNullable<z.ZodXor<readonly [z.ZodObject<{
                 cred: z.ZodString;
                 ad: z.ZodString;
                 cd: z.ZodString;
                 sig: z.ZodString;
                 str: z.ZodString;
-            }, z.core.$strip>>>;
-            confirm: z.ZodOptional<z.ZodNullable<z.ZodObject<{
+            }, z.core.$strip>, z.ZodObject<{
+                cred: z.ZodString;
+                sig: z.ZodString;
+                str: z.ZodString;
+            }, z.core.$strict>]>>>;
+            confirm: z.ZodOptional<z.ZodNullable<z.ZodXor<readonly [z.ZodObject<{
                 cred: z.ZodString;
                 ad: z.ZodString;
                 cd: z.ZodString;
                 sig: z.ZodString;
-            }, z.core.$strip>>>;
+            }, z.core.$strip>, z.ZodObject<{
+                cred: z.ZodString;
+                sig: z.ZodString;
+            }, z.core.$strict>]>>>;
             at: z.ZodISODateTime;
             expires_at: z.ZodISODateTime;
         }, z.core.$strip>>;
@@ -882,6 +1065,16 @@ export declare const SCHEMAS: {
             detail: z.ZodOptional<z.ZodString>;
             reply: z.ZodOptional<z.ZodString>;
             seq: z.ZodOptional<z.ZodInt>;
+            applied: z.ZodOptional<z.ZodObject<{
+                permission: z.ZodOptional<z.ZodEnum<{
+                    auto: "auto";
+                    edits: "edits";
+                    inherit: "inherit";
+                    read: "read";
+                    safe: "safe";
+                }>>;
+                model: z.ZodOptional<z.ZodString>;
+            }, z.core.$strict>>;
         }, z.core.$strip>>;
     }, z.core.$strip>;
     readonly "control-pair": z.ZodObject<{
@@ -901,14 +1094,20 @@ export declare const SCHEMAS: {
         folders: z.ZodOptional<z.ZodArray<z.ZodString>>;
         mode: z.ZodOptional<z.ZodEnum<{
             auto: "auto";
+            inherit: "inherit";
             safe: "safe";
         }>>;
         accounts: z.ZodOptional<z.ZodArray<z.ZodObject<{
             harness: z.ZodString;
             id: z.ZodString;
             email: z.ZodOptional<z.ZodString>;
+            name: z.ZodOptional<z.ZodString>;
         }, z.core.$strip>>>;
         files: z.ZodOptional<z.ZodBoolean>;
+        key_types: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+            device: "device";
+            passkey: "passkey";
+        }>>>;
     }, z.core.$strip>;
     readonly "control-pair-started": z.ZodObject<{
         machine: z.ZodString;
@@ -923,17 +1122,27 @@ export declare const SCHEMAS: {
             paired: "paired";
             pending: "pending";
         }>;
-        key: z.ZodOptional<z.ZodObject<{
+        key: z.ZodOptional<z.ZodXor<readonly [z.ZodObject<{
             id: z.ZodString;
             alg: z.ZodUnion<readonly [z.ZodLiteral<-7>, z.ZodLiteral<-257>]>;
             spki: z.ZodString;
-        }, z.core.$strip>>;
-        proof: z.ZodOptional<z.ZodObject<{
+        }, z.core.$strict>, z.ZodObject<{
+            id: z.ZodString;
+            alg: z.ZodLiteral<-7>;
+            spki: z.ZodString;
+            type: z.ZodLiteral<"device">;
+            store: z.ZodLiteral<"hardware">;
+            uv: z.ZodLiteral<"each-use">;
+        }, z.core.$strict>]>>;
+        proof: z.ZodOptional<z.ZodXor<readonly [z.ZodObject<{
             cred: z.ZodString;
             ad: z.ZodString;
             cd: z.ZodString;
             sig: z.ZodString;
-        }, z.core.$strip>>;
+        }, z.core.$strip>, z.ZodObject<{
+            cred: z.ZodString;
+            sig: z.ZodString;
+        }, z.core.$strict>]>>;
         token: z.ZodOptional<z.ZodString>;
         sink_token: z.ZodOptional<z.ZodString>;
         account: z.ZodOptional<z.ZodString>;
@@ -955,14 +1164,38 @@ export declare const SCHEMAS: {
         folders: z.ZodOptional<z.ZodArray<z.ZodString>>;
         mode: z.ZodOptional<z.ZodEnum<{
             auto: "auto";
+            inherit: "inherit";
             safe: "safe";
         }>>;
         accounts: z.ZodOptional<z.ZodArray<z.ZodObject<{
             harness: z.ZodString;
             id: z.ZodString;
             email: z.ZodOptional<z.ZodString>;
+            name: z.ZodOptional<z.ZodString>;
         }, z.core.$strip>>>;
         files: z.ZodOptional<z.ZodBoolean>;
+        prompt_files: z.ZodOptional<z.ZodBoolean>;
+        start: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
+            permissions: z.ZodArray<z.ZodEnum<{
+                auto: "auto";
+                edits: "edits";
+                read: "read";
+                safe: "safe";
+            }>>;
+            permission: z.ZodEnum<{
+                auto: "auto";
+                edits: "edits";
+                inherit: "inherit";
+                read: "read";
+                safe: "safe";
+            }>;
+            models: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            any_model: z.ZodOptional<z.ZodBoolean>;
+        }, z.core.$strip>>>;
+        key_types: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+            device: "device";
+            passkey: "passkey";
+        }>>>;
     }, z.core.$strip>;
 };
 //# sourceMappingURL=v1.d.ts.map

package/dist/schema/v1.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"v1.d.ts","sourceRoot":"","sources":["../../schema/v1.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,QAAQ,IAAI,CAAC;AAE1B,oEAAoE;AACpE,eAAO,MAAM,SAAS,aAE2E,CAAC;AAElG,eAAO,MAAM,WAAW,YACtB,iBAAiB,EACjB,mBAAmB,EACnB,eAAe,EACf,kBAAkB,EAClB,mBAAmB,EACnB,cAAc,EACd,YAAY,EACZ,iBAAiB,EACjB,eAAe,EACf,cAAc,EACd,YAAY,EACZ,eAAe,EACf,kBAAkB,EAClB,mBAAmB,EACnB,kBAAkB,EAClB,gBAAgB,EAChB,mBAAmB,EACnB,QAAQ,CACA,CAAC;AAEX,oDAAoD;AACpD,eAAO,MAAM,SAAS,EAAE,MAAM,CAAC,CAAC,OAAO,WAAW,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAmBzE,CAAC;AAEF,eAAO,MAAM,aAAa,YACxB,aAAa,EACb,OAAO,EACP,YAAY,EACZ,aAAa,EACb,OAAO,EACP,QAAQ,EACR,aAAa,EACb,OAAO,EACP,MAAM,EACN,UAAU,CACF,CAAC;AAEX,eAAO,MAAM,IAAI,UAAwB,CAAC;AAC1C,eAAO,MAAM,IAAI,aAAuD,CAAC;AACzE,eAAO,MAAM,OAAO,kBAAkD,CAAC;AACvE,eAAO,MAAM,SAAS,aAIQ,CAAC;AAC/B,eAAO,MAAM,QAAQ,aAA+C,CAAC;AAErE,eAAO,MAAM,OAAO;;;;iBAMlB,CAAC;AAEH,eAAO,MAAM,OAAO;;;;;;;;;;;;;;;;;iBAiBlB,CAAC;AAEH,eAAO,MAAM,OAAO;;;iBAIlB,CAAC;AAEH,eAAO,MAAM,KAAK;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAWhB,CAAC;AAKH,eAAO,MAAM,aAAa;;;;;;EAAqE,CAAC;AAEhG,eAAO,MAAM,SAAS;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA+DpB,CAAC;AAIH,eAAO,MAAM,KAAK;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAAsD,CAAC;AAEzE,eAAO,MAAM,aAAa;;;;;;;;iBAKxB,CAAC;AAEH,eAAO,MAAM,aAAa;;;;iBAIxB,CAAC;AAEH,eAAO,MAAM,UAAU;;;;;;EAAgE,CAAC;AAKxF,eAAO,MAAM,SAAS,aAAuE,CAAC;AAC9F,iFAAiF;AACjF,eAAO,MAAM,UAAU,aAA8F,CAAC;AACtH,eAAO,MAAM,WAAW;;;;;;EAAwE,CAAC;AACjG,eAAO,MAAM,YAAY;;;;;;;EAA6D,CAAC;AAEvF;;;4EAG4E;AAC5E,eAAO,MAAM,WAAW;;;;;iBAsBtB,CAAC;AAEH;mEACmE;AACnE,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAiCzB,CAAC;AAEH,kFAAkF;AAClF,eAAO,MAAM,YAAY;;;;;;;iBASvB,CAAC;AAEH,yFAAyF;AACzF,eAAO,MAAM,gBAAgB;;;;;iBAK3B,CAAC;AAEH,8EAA8E;AAC9E,eAAO,MAAM,UAAU;;;;iBAIrB,CAAC;AAEH,sFAAsF;AACtF,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;iBAiBzB,CAAC;AAEH,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;iBAAkD,CAAC;AAE3E;+EAC+E;AAC/E;uFACuF;AACvF,eAAO,MAAM,cAAc;;;;;;;;EAA4F,CAAC;AAExH,eAAO,MAAM,UAAU;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAyBrB,CAAC;AAEH;;oFAEoF;AACpF,eAAO,MAAM,cAAc;;;;iBAIzB,CAAC;AAEH;;kCAEkC;AAClC,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;iBAwB3B,CAAC;AAEH,0FAA0F;AAC1F,eAAO,MAAM,kBAAkB;;;;;;iBAO7B,CAAC;AAEH;+EAC+E;AAC/E,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;iBAaxB,CAAC;AAEH,iEAAiE;AACjE,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;iBAgBvB,CAAC;AAEH,eAAO,MAAM,SAAS;;;;;;;;;;;;;;;;;;;;;;;;;;iBAgCpB,CAAC;AAEH,+DAA+D;AAC/D,eAAO,MAAM,OAAO;aAClB,KAAK;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;aACL,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;aACZ,KAAK;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;aACL,gBAAgB;;;;;;;;;aAChB,KAAK;;;;;aACL,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;aACZ,OAAO;;;;;;;;;;;;;;;;;;;;aACP,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;aACjB,eAAe;;;;;;;;aACf,aAAa;;;;;aACb,cAAc;;;;;;;;;;;;;;;;;;;;;;aACd,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;aACb,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;aACd,sBAAsB;;;;;;;aACtB,gBAAgB;;;;;;;;;;;;;;;;;;;;;aAChB,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;CACP,CAAC"}
+{"version":3,"file":"v1.d.ts","sourceRoot":"","sources":["../../schema/v1.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,QAAQ,IAAI,CAAC;AAE1B,oEAAoE;AACpE,eAAO,MAAM,SAAS,aAE2E,CAAC;AAElG,eAAO,MAAM,WAAW,YACtB,iBAAiB,EACjB,mBAAmB,EACnB,eAAe,EACf,kBAAkB,EAClB,mBAAmB,EACnB,cAAc,EACd,YAAY,EACZ,iBAAiB,EACjB,eAAe,EACf,cAAc,EACd,YAAY,EACZ,eAAe,EACf,kBAAkB,EAClB,mBAAmB,EACnB,kBAAkB,EAClB,gBAAgB,EAChB,mBAAmB,EACnB,QAAQ,CACA,CAAC;AAEX,oDAAoD;AACpD,eAAO,MAAM,SAAS,EAAE,MAAM,CAAC,CAAC,OAAO,WAAW,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAmBzE,CAAC;AAEF,eAAO,MAAM,aAAa,YACxB,aAAa,EACb,OAAO,EACP,YAAY,EACZ,aAAa,EACb,OAAO,EACP,QAAQ,EACR,aAAa,EACb,OAAO,EACP,MAAM,EACN,UAAU,CACF,CAAC;AAEX,eAAO,MAAM,IAAI,UAAwB,CAAC;AAC1C,eAAO,MAAM,IAAI,aAAuD,CAAC;AACzE,eAAO,MAAM,OAAO,kBAAkD,CAAC;AACvE,eAAO,MAAM,SAAS,aAIQ,CAAC;AAC/B,eAAO,MAAM,QAAQ,aAA+C,CAAC;AAErE,eAAO,MAAM,OAAO;;;;iBAMlB,CAAC;AAEH,eAAO,MAAM,OAAO;;;;;;;;;;;;;;;;;;;iBA0BlB,CAAC;AAEH,eAAO,MAAM,OAAO;;;iBAIlB,CAAC;AAEH,eAAO,MAAM,KAAK;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAWhB,CAAC;AAKH,eAAO,MAAM,aAAa;;;;;;EAAqE,CAAC;AAEhG,eAAO,MAAM,SAAS;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA+EpB,CAAC;AAIH,eAAO,MAAM,KAAK;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAAsD,CAAC;AAEzE,eAAO,MAAM,aAAa;;;;;;;;iBAKxB,CAAC;AAEH,eAAO,MAAM,aAAa;;;;iBAIxB,CAAC;AAEH,eAAO,MAAM,UAAU;;;;;;EAAgE,CAAC;AAKxF,eAAO,MAAM,SAAS,aAAuE,CAAC;AAC9F,iFAAiF;AACjF,eAAO,MAAM,UAAU,aAA8F,CAAC;AACtH,eAAO,MAAM,WAAW;;;;;;EAAwE,CAAC;AACjG,+FAA+F;AAC/F,eAAO,MAAM,QAAQ;;;GAGZ,CAAC;AACV,eAAO,MAAM,YAAY;;;;;;;EAA6D,CAAC;AACvF;6DAC6D;AAC7D,eAAO,MAAM,eAAe;;;;;EAA4C,CAAC;AACzE;;8BAE8B;AAC9B,eAAO,MAAM,QAAQ;;;;;;EAAuD,CAAC;AAC7E,wFAAwF;AACxF,eAAO,MAAM,OAAO,aAIwC,CAAC;AAG7D;;;4EAG4E;AAC5E,eAAO,MAAM,WAAW;;;;;iBAsBtB,CAAC;AAEH;mEACmE;AACnE,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAmCzB,CAAC;AAEH,kFAAkF;AAClF,eAAO,MAAM,YAAY;;;;;;;iBASvB,CAAC;AAEH,yFAAyF;AACzF,eAAO,MAAM,gBAAgB;;;;;iBAK3B,CAAC;AAEH;;;yFAGyF;AACzF,eAAO,MAAM,sBAAsB;;;kBAIjC,CAAC;AAEH;;;0FAG0F;AAC1F,eAAO,MAAM,UAAU;;;;;;;;;;;oBAiBrB,CAAC;AAEH,sFAAsF;AACtF,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;iBAsBzB,CAAC;AAEH,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAAkD,CAAC;AAE3E;+EAC+E;AAC/E;uFACuF;AACvF,eAAO,MAAM,cAAc;;;;;;;;EAA4F,CAAC;AAExH,eAAO,MAAM,UAAU;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA6BrB,CAAC;AAEH;;oFAEoF;AACpF,eAAO,MAAM,cAAc;;;;;iBAOzB,CAAC;AAEH;;kCAEkC;AAClC,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA4B3B,CAAC;AAEH,0FAA0F;AAC1F,eAAO,MAAM,kBAAkB;;;;;;iBAO7B,CAAC;AAEH;+EAC+E;AAC/E,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAexB,CAAC;AAEH,iEAAiE;AACjE,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAyCvB,CAAC;AAEH,eAAO,MAAM,SAAS;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAsCpB,CAAC;AAEH,+DAA+D;AAC/D,eAAO,MAAM,OAAO;aAClB,KAAK;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;aACL,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;aACZ,KAAK;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;aACL,gBAAgB;;;;;;;;;aAChB,KAAK;;;;;aACL,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;aACZ,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;aACP,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;aACjB,eAAe;;;;;;;;aACf,aAAa;;;;;;;;;;;;aACb,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;aACd,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;aACb,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;aACd,sBAAsB;;;;;;;aACtB,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;aAChB,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CACP,CAAC"}